@undefineds.co/xpod 0.3.53 → 0.3.54

package/dist/edge/reachability/ReachabilitySessionService.d.ts

@@ -0,0 +1,55 @@
+import type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';
+import type { P2PCandidateUpdateRequest, P2PSession, P2PSessionList, P2PSessionRequest, RelaySession, RelaySessionRequest } from './types';
+export interface ReachabilitySessionServiceOptions {
+    repository: EdgeNodeRepository;
+    baseStorageDomain?: string;
+    apiBaseUrl: string | (() => string);
+    now?: () => Date;
+    randomId?: () => string;
+    defaultP2PTtlSeconds?: number;
+    defaultRelayTtlSeconds?: number;
+    defaultRelayBandwidthLimitBytes?: number;
+    maxActiveP2PSessionsPerNode?: number;
+    maxP2PCandidatesPerUpdate?: number;
+    maxP2PCandidatesPerSession?: number;
+}
+export declare class ReachabilitySessionService {
+    private readonly options;
+    private readonly now;
+    private readonly randomId;
+    private readonly defaultP2PTtlSeconds;
+    private readonly defaultRelayTtlSeconds;
+    private readonly defaultRelayBandwidthLimitBytes;
+    private readonly maxActiveP2PSessionsPerNode;
+    private readonly maxP2PCandidatesPerUpdate;
+    private readonly maxP2PCandidatesPerSession;
+    constructor(options: ReachabilitySessionServiceOptions);
+    createP2PSession(nodeId: string, request: P2PSessionRequest): Promise<P2PSession>;
+    getP2PSession(nodeId: string, sessionId: string): Promise<P2PSession>;
+    listP2PSessions(nodeId: string): Promise<P2PSessionList>;
+    addP2PCandidates(nodeId: string, sessionId: string, request: P2PCandidateUpdateRequest): Promise<P2PSession>;
+    createRelaySession(nodeId: string, request: RelaySessionRequest): Promise<RelaySession>;
+    private loadNodeRouteSource;
+    private readActiveP2PSessions;
+    private p2pSessionLimits;
+    private resolveP2PSessionLimits;
+    private appendSession;
+    private loadP2PSession;
+    private assertP2PSessionActive;
+    private isP2PSessionActive;
+    private normalizeP2PCandidates;
+}
+export declare class InvalidRelaySessionRequestError extends Error {
+}
+export declare class NodeRouteSourceNotFoundError extends Error {
+}
+export declare class P2PActiveSessionLimitExceededError extends Error {
+}
+export declare class P2PCandidateUpdateLimitExceededError extends Error {
+}
+export declare class P2PCandidateSessionLimitExceededError extends Error {
+}
+export declare class P2PSessionExpiredError extends Error {
+}
+export declare class P2PSessionNotFoundError extends Error {
+}

package/dist/edge/reachability/ReachabilitySessionService.js

@@ -0,0 +1,439 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.P2PSessionNotFoundError = exports.P2PSessionExpiredError = exports.P2PCandidateSessionLimitExceededError = exports.P2PCandidateUpdateLimitExceededError = exports.P2PActiveSessionLimitExceededError = exports.NodeRouteSourceNotFoundError = exports.InvalidRelaySessionRequestError = exports.ReachabilitySessionService = void 0;
+const RouteSetBuilder_1 = require("./RouteSetBuilder");
+class ReachabilitySessionService {
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? (() => new Date());
+        this.randomId = options.randomId ?? randomString;
+        this.defaultP2PTtlSeconds = options.defaultP2PTtlSeconds ?? 5 * 60;
+        this.defaultRelayTtlSeconds = options.defaultRelayTtlSeconds ?? 15 * 60;
+        this.defaultRelayBandwidthLimitBytes = options.defaultRelayBandwidthLimitBytes ?? 64 * 1024 * 1024;
+        this.maxActiveP2PSessionsPerNode = options.maxActiveP2PSessionsPerNode ?? 16;
+        this.maxP2PCandidatesPerUpdate = options.maxP2PCandidatesPerUpdate ?? 32;
+        this.maxP2PCandidatesPerSession = options.maxP2PCandidatesPerSession ?? 256;
+    }
+    async createP2PSession(nodeId, request) {
+        const source = await this.loadNodeRouteSource(nodeId);
+        const activeSessions = this.readActiveP2PSessions(source.metadata);
+        if (activeSessions.length >= this.maxActiveP2PSessionsPerNode) {
+            throw new P2PActiveSessionLimitExceededError(`Node ${nodeId} reached active P2P session limit`);
+        }
+        const createdAt = this.now();
+        const expiresAt = addSeconds(createdAt, this.defaultP2PTtlSeconds);
+        const suffix = this.randomId();
+        const sessionId = `p2p_${suffix}`;
+        const auditId = `audit_${suffix}`;
+        const limits = this.p2pSessionLimits();
+        if (Array.isArray(request.candidates) && request.candidates.length > limits.maxCandidatesPerUpdate) {
+            throw new P2PCandidateUpdateLimitExceededError('P2P candidate update limit exceeded');
+        }
+        const candidates = this.normalizeP2PCandidates(request.candidates, {
+            role: 'client',
+            sourceId: request.clientId,
+            createdAt,
+        });
+        if (candidates.length > limits.maxCandidatesTotal) {
+            throw new P2PCandidateSessionLimitExceededError('P2P candidate session limit exceeded');
+        }
+        const routeSet = (0, RouteSetBuilder_1.buildRouteSet)(source, {
+            audience: 'managed',
+            baseStorageDomain: this.options.baseStorageDomain,
+            now: createdAt,
+        });
+        const session = {
+            sessionId,
+            kind: 'p2p',
+            nodeId,
+            clientId: request.clientId,
+            ...(request.owner ? { owner: request.owner } : {}),
+            auditId,
+            createdAt: createdAt.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            nodeCandidates: routeSet.routes,
+            signalingUrl: new URL(`/v1/signal/nodes/${encodeURIComponent(nodeId)}/sessions/${sessionId}`, resolveApiBaseUrl(this.options.apiBaseUrl)).toString(),
+            capabilities: normalizeStringArray(request.capabilities),
+            candidates,
+            limits,
+        };
+        await this.appendSession(nodeId, 'p2p', session);
+        return session;
+    }
+    async getP2PSession(nodeId, sessionId) {
+        const { session } = await this.loadP2PSession(nodeId, sessionId);
+        this.assertP2PSessionActive(session);
+        return session;
+    }
+    async listP2PSessions(nodeId) {
+        const current = await this.options.repository.getNodeMetadata(nodeId);
+        if (!current) {
+            throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);
+        }
+        const metadata = current.metadata ?? {};
+        const reachabilitySessions = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};
+        const sessions = Array.isArray(reachabilitySessions.p2p)
+            ? reachabilitySessions.p2p
+                .map(toP2PSession)
+                .filter((session) => Boolean(session))
+                .filter((session) => this.isP2PSessionActive(session))
+            : [];
+        return { kind: 'p2p', sessions };
+    }
+    async addP2PCandidates(nodeId, sessionId, request) {
+        const { reachabilitySessions, p2pSessions, sessionIndex, session } = await this.loadP2PSession(nodeId, sessionId);
+        this.assertP2PSessionActive(session);
+        const limits = this.resolveP2PSessionLimits(session);
+        if (request.candidates.length > limits.maxCandidatesPerUpdate) {
+            throw new P2PCandidateUpdateLimitExceededError('P2P candidate update limit exceeded');
+        }
+        const normalizedCandidates = this.normalizeP2PCandidates(request.candidates, {
+            role: request.role,
+            sourceId: request.sourceId,
+            createdAt: this.now(),
+        });
+        const nextCandidates = [
+            ...session.candidates,
+            ...normalizedCandidates,
+        ];
+        if (nextCandidates.length > limits.maxCandidatesTotal) {
+            throw new P2PCandidateSessionLimitExceededError('P2P candidate session limit exceeded');
+        }
+        const nextSession = {
+            ...session,
+            candidates: nextCandidates,
+        };
+        const nextP2PSessions = [...p2pSessions];
+        nextP2PSessions[sessionIndex] = nextSession;
+        await this.options.repository.mergeNodeMetadata(nodeId, {
+            reachabilitySessions: {
+                ...reachabilitySessions,
+                p2p: nextP2PSessions,
+            },
+        });
+        return nextSession;
+    }
+    async createRelaySession(nodeId, request) {
+        const source = await this.loadNodeRouteSource(nodeId);
+        const reason = request.reason.trim();
+        if (!reason) {
+            throw new InvalidRelaySessionRequestError('reason is required for relay sessions');
+        }
+        const createdAt = this.now();
+        const ttlSeconds = clampPositiveInteger(request.ttlSeconds, this.defaultRelayTtlSeconds, this.defaultRelayTtlSeconds);
+        const expiresAt = addSeconds(createdAt, ttlSeconds);
+        const suffix = this.randomId();
+        const sessionId = `relay_${suffix}`;
+        const auditId = `audit_${suffix}`;
+        const canonicalUrl = (0, RouteSetBuilder_1.buildRouteSet)(source, {
+            audience: 'managed',
+            baseStorageDomain: this.options.baseStorageDomain,
+            now: createdAt,
+        }).canonicalUrl;
+        const route = {
+            id: sessionId,
+            nodeId,
+            canonicalUrl,
+            kind: 'xpod-relay',
+            targetUrl: canonicalUrl,
+            priority: 90,
+            requiresManagedClient: false,
+            visibility: 'public',
+            health: 'unknown',
+            expiresAt: expiresAt.toISOString(),
+            metadata: { auditId, reason },
+        };
+        const session = {
+            sessionId,
+            kind: 'relay',
+            auditId,
+            nodeId,
+            createdAt: createdAt.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            reason,
+            bandwidthLimitBytes: clampPositiveInteger(request.bandwidthLimitBytes, this.defaultRelayBandwidthLimitBytes, this.defaultRelayBandwidthLimitBytes),
+            bandwidthLimitBps: normalizePositiveInteger(request.bandwidthLimitBps),
+            route,
+        };
+        await this.appendSession(nodeId, 'relay', session);
+        return session;
+    }
+    async loadNodeRouteSource(nodeId) {
+        const [metadataRow, connectivity] = await Promise.all([
+            this.options.repository.getNodeMetadata(nodeId),
+            this.options.repository.getNodeConnectivityInfo(nodeId),
+        ]);
+        if (!metadataRow && !connectivity) {
+            throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);
+        }
+        const metadata = metadataRow?.metadata ?? {};
+        return {
+            nodeId,
+            canonicalUrl: getString(metadata.canonicalUrl),
+            publicUrl: connectivity?.publicUrl,
+            subdomain: connectivity?.subdomain,
+            baseStorageDomain: this.options.baseStorageDomain,
+            ipv4: connectivity?.ipv4,
+            publicPort: connectivity?.publicPort,
+            connectivityStatus: connectivity?.connectivityStatus,
+            metadata,
+        };
+    }
+    readActiveP2PSessions(metadata) {
+        const reachabilitySessions = isRecord(metadata?.reachabilitySessions) ? metadata.reachabilitySessions : {};
+        return Array.isArray(reachabilitySessions.p2p)
+            ? reachabilitySessions.p2p
+                .map(toP2PSession)
+                .filter((session) => Boolean(session))
+                .filter((session) => this.isP2PSessionActive(session))
+            : [];
+    }
+    p2pSessionLimits() {
+        return {
+            maxCandidatesPerUpdate: this.maxP2PCandidatesPerUpdate,
+            maxCandidatesTotal: this.maxP2PCandidatesPerSession,
+        };
+    }
+    resolveP2PSessionLimits(session) {
+        return normalizeP2PSessionLimits(session.limits) ?? this.p2pSessionLimits();
+    }
+    async appendSession(nodeId, key, session) {
+        const current = await this.options.repository.getNodeMetadata(nodeId);
+        const metadata = current?.metadata ?? {};
+        const existing = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};
+        const previousSessions = Array.isArray(existing[key]) ? existing[key] : [];
+        await this.options.repository.mergeNodeMetadata(nodeId, {
+            reachabilitySessions: {
+                ...existing,
+                [key]: [...previousSessions, session],
+            },
+        });
+    }
+    async loadP2PSession(nodeId, sessionId) {
+        const current = await this.options.repository.getNodeMetadata(nodeId);
+        if (!current) {
+            throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);
+        }
+        const metadata = current.metadata ?? {};
+        const reachabilitySessions = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};
+        const p2pSessions = Array.isArray(reachabilitySessions.p2p)
+            ? reachabilitySessions.p2p.map(toP2PSession).filter((session) => Boolean(session))
+            : [];
+        const sessionIndex = p2pSessions.findIndex((session) => session.sessionId === sessionId);
+        if (sessionIndex < 0) {
+            throw new P2PSessionNotFoundError(`P2P session ${sessionId} not found`);
+        }
+        return {
+            reachabilitySessions,
+            p2pSessions,
+            sessionIndex,
+            session: p2pSessions[sessionIndex],
+        };
+    }
+    assertP2PSessionActive(session) {
+        if (!this.isP2PSessionActive(session)) {
+            throw new P2PSessionExpiredError(`P2P session ${session.sessionId} expired`);
+        }
+    }
+    isP2PSessionActive(session) {
+        const expiresAt = Date.parse(session.expiresAt);
+        return !Number.isFinite(expiresAt) || expiresAt > this.now().getTime();
+    }
+    normalizeP2PCandidates(value, context) {
+        if (!Array.isArray(value)) {
+            return [];
+        }
+        const createdAt = context.createdAt.toISOString();
+        return value
+            .map((entry) => {
+            if (!isRecord(entry)) {
+                return undefined;
+            }
+            const candidate = {
+                id: getString(entry.id) ?? `candidate_${this.randomId()}`,
+                role: context.role,
+                sourceId: context.sourceId,
+                createdAt: getString(entry.createdAt) ?? createdAt,
+            };
+            copyString(entry, candidate, 'protocol');
+            copyString(entry, candidate, 'transport');
+            copyString(entry, candidate, 'host');
+            copyString(entry, candidate, 'address');
+            copyString(entry, candidate, 'url');
+            const port = normalizePort(entry.port);
+            if (port !== undefined) {
+                candidate.port = port;
+            }
+            const priority = normalizeNumber(entry.priority);
+            if (priority !== undefined) {
+                candidate.priority = priority;
+            }
+            if (isRecord(entry.metadata)) {
+                candidate.metadata = entry.metadata;
+            }
+            return hasCandidateLocator(candidate) ? candidate : undefined;
+        })
+            .filter((candidate) => Boolean(candidate));
+    }
+}
+exports.ReachabilitySessionService = ReachabilitySessionService;
+class InvalidRelaySessionRequestError extends Error {
+}
+exports.InvalidRelaySessionRequestError = InvalidRelaySessionRequestError;
+class NodeRouteSourceNotFoundError extends Error {
+}
+exports.NodeRouteSourceNotFoundError = NodeRouteSourceNotFoundError;
+class P2PActiveSessionLimitExceededError extends Error {
+}
+exports.P2PActiveSessionLimitExceededError = P2PActiveSessionLimitExceededError;
+class P2PCandidateUpdateLimitExceededError extends Error {
+}
+exports.P2PCandidateUpdateLimitExceededError = P2PCandidateUpdateLimitExceededError;
+class P2PCandidateSessionLimitExceededError extends Error {
+}
+exports.P2PCandidateSessionLimitExceededError = P2PCandidateSessionLimitExceededError;
+class P2PSessionExpiredError extends Error {
+}
+exports.P2PSessionExpiredError = P2PSessionExpiredError;
+class P2PSessionNotFoundError extends Error {
+}
+exports.P2PSessionNotFoundError = P2PSessionNotFoundError;
+function addSeconds(date, seconds) {
+    return new Date(date.getTime() + seconds * 1000);
+}
+function clampPositiveInteger(value, fallback, maximum) {
+    const normalized = normalizePositiveInteger(value);
+    if (!normalized) {
+        return fallback;
+    }
+    return Math.min(normalized, maximum);
+}
+function normalizePositiveInteger(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+        return undefined;
+    }
+    return Math.floor(value);
+}
+function normalizeP2PSessionLimits(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const maxCandidatesPerUpdate = normalizePositiveInteger(value.maxCandidatesPerUpdate);
+    const maxCandidatesTotal = normalizePositiveInteger(value.maxCandidatesTotal);
+    if (!maxCandidatesPerUpdate || !maxCandidatesTotal) {
+        return undefined;
+    }
+    return { maxCandidatesPerUpdate, maxCandidatesTotal };
+}
+function normalizePort(value) {
+    const port = normalizePositiveInteger(value);
+    if (!port || port > 65535) {
+        return undefined;
+    }
+    return port;
+}
+function normalizeNumber(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return undefined;
+    }
+    return value;
+}
+function normalizeStringArray(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.filter((entry) => typeof entry === 'string' && entry.trim().length > 0);
+}
+function getString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function copyString(source, target, key) {
+    const value = getString(source[key]);
+    if (value) {
+        target[key] = value;
+    }
+}
+function hasCandidateLocator(candidate) {
+    return Boolean(candidate.host || candidate.address || candidate.url || candidate.port);
+}
+function toP2PSession(value) {
+    if (!isRecord(value) || value.kind !== 'p2p') {
+        return undefined;
+    }
+    const sessionId = getString(value.sessionId);
+    const nodeId = getString(value.nodeId);
+    const clientId = getString(value.clientId);
+    const auditId = getString(value.auditId);
+    const owner = normalizeP2PSessionOwner(value.owner);
+    const createdAt = getString(value.createdAt);
+    const expiresAt = getString(value.expiresAt);
+    const signalingUrl = getString(value.signalingUrl);
+    const limits = normalizeP2PSessionLimits(value.limits);
+    if (!sessionId || !nodeId || !clientId || !createdAt || !expiresAt || !signalingUrl) {
+        return undefined;
+    }
+    return {
+        sessionId,
+        kind: 'p2p',
+        nodeId,
+        clientId,
+        ...(owner ? { owner } : {}),
+        ...(auditId ? { auditId } : {}),
+        createdAt,
+        expiresAt,
+        nodeCandidates: Array.isArray(value.nodeCandidates) ? value.nodeCandidates : [],
+        signalingUrl,
+        capabilities: normalizeStringArray(value.capabilities),
+        candidates: Array.isArray(value.candidates)
+            ? value.candidates.map(toP2PTransportCandidate).filter((candidate) => Boolean(candidate))
+            : [],
+        ...(limits ? { limits } : {}),
+    };
+}
+function normalizeP2PSessionOwner(value) {
+    if (!isRecord(value) || value.type !== 'solid') {
+        return undefined;
+    }
+    const webId = getString(value.webId);
+    return webId ? { type: 'solid', webId } : undefined;
+}
+function toP2PTransportCandidate(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const id = getString(value.id);
+    const sourceId = getString(value.sourceId);
+    const createdAt = getString(value.createdAt);
+    const role = value.role === 'node' || value.role === 'client' ? value.role : undefined;
+    if (!id || !role || !sourceId || !createdAt) {
+        return undefined;
+    }
+    const candidate = { id, role, sourceId, createdAt };
+    copyString(value, candidate, 'protocol');
+    copyString(value, candidate, 'transport');
+    copyString(value, candidate, 'host');
+    copyString(value, candidate, 'address');
+    copyString(value, candidate, 'url');
+    const port = normalizePort(value.port);
+    if (port !== undefined) {
+        candidate.port = port;
+    }
+    const priority = normalizeNumber(value.priority);
+    if (priority !== undefined) {
+        candidate.priority = priority;
+    }
+    if (isRecord(value.metadata)) {
+        candidate.metadata = value.metadata;
+    }
+    return candidate;
+}
+function randomString() {
+    return Math.random().toString(36).slice(2, 12);
+}
+function resolveApiBaseUrl(value) {
+    return typeof value === 'function' ? value() : value;
+}
+//# sourceMappingURL=ReachabilitySessionService.js.map

package/dist/edge/reachability/ReachabilitySessionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReachabilitySessionService.js","sourceRoot":"","sources":["../../../src/edge/reachability/ReachabilitySessionService.ts"],"names":[],"mappings":";;;AACA,uDAAkD;AA6BlD,MAAa,0BAA0B;IAUrC,YAAoC,OAA0C;QAA1C,YAAO,GAAP,OAAO,CAAmC;QAC5E,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;QACjD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,GAAG,EAAE,CAAC;QACnE,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,EAAE,GAAG,EAAE,CAAC;QACxE,IAAI,CAAC,+BAA+B,GAAG,OAAO,CAAC,+BAA+B,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACnG,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,IAAI,EAAE,CAAC;QAC7E,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC;QACzE,IAAI,CAAC,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,IAAI,GAAG,CAAC;IAC9E,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,OAA0B;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,cAAc,CAAC,MAAM,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAC9D,MAAM,IAAI,kCAAkC,CAAC,QAAQ,MAAM,mCAAmC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACnG,MAAM,IAAI,oCAAoC,CAAC,qCAAqC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE;YACjE,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS;SACV,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAClD,MAAM,IAAI,qCAAqC,CAAC,sCAAsC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,+BAAa,EAAC,MAAM,EAAE;YACrC,QAAQ,EAAE,SAAS;YACnB,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAe;YAC1B,SAAS;YACT,IAAI,EAAE,KAAK;YACX,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,YAAY,EAAE,IAAI,GAAG,CACnB,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,aAAa,SAAS,EAAE,EACtE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3C,CAAC,QAAQ,EAAE;YACZ,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;YACxD,UAAU;YACV,MAAM;SACP,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,SAAiB;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAc;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAA4B,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC;YACtD,CAAC,CAAC,oBAAoB,CAAC,GAAG;iBACvB,GAAG,CAAC,YAAY,CAAC;iBACjB,MAAM,CAAC,CAAC,OAAO,EAAyB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;iBAC5D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,MAAc,EACd,SAAiB,EACjB,OAAkC;QAElC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClH,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC9D,MAAM,IAAI,oCAAoC,CAAC,qCAAqC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE;YAC3E,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG;YACrB,GAAG,OAAO,CAAC,UAAU;YACrB,GAAG,oBAAoB;SACxB,CAAC;QACF,IAAI,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtD,MAAM,IAAI,qCAAqC,CAAC,sCAAsC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,WAAW,GAAe;YAC9B,GAAG,OAAO;YACV,UAAU,EAAE,cAAc;SAC3B,CAAC;QACF,MAAM,eAAe,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QACzC,eAAe,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC;QAE5C,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE;YACtD,oBAAoB,EAAE;gBACpB,GAAG,oBAAoB;gBACvB,GAAG,EAAE,eAAe;aACrB;SACF,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,OAA4B;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,+BAA+B,CAAC,uCAAuC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtH,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,SAAS,MAAM,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAA,+BAAa,EAAC,MAAM,EAAE;YACzC,QAAQ,EAAE,SAAS;YACnB,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,GAAG,EAAE,SAAS;SACf,CAAC,CAAC,YAAY,CAAC;QAChB,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,SAAS;YACb,MAAM;YACN,YAAY;YACZ,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,YAAY;YACvB,QAAQ,EAAE,EAAE;YACZ,qBAAqB,EAAE,KAAK;YAC5B,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;SAC9B,CAAC;QACF,MAAM,OAAO,GAAiB;YAC5B,SAAS;YACT,IAAI,EAAE,OAAO;YACb,OAAO;YACP,MAAM;YACN,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,MAAM;YACN,mBAAmB,EAAE,oBAAoB,CACvC,OAAO,CAAC,mBAAmB,EAC3B,IAAI,CAAC,+BAA+B,EACpC,IAAI,CAAC,+BAA+B,CACrC;YACD,iBAAiB,EAAE,wBAAwB,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACtE,KAAK;SACN,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAC9C,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,MAAM,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,4BAA4B,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM;YACN,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9C,SAAS,EAAE,YAAY,EAAE,SAAS;YAClC,SAAS,EAAE,YAAY,EAAE,SAAS;YAClC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,IAAI,EAAE,YAAY,EAAE,IAAI;YACxB,UAAU,EAAE,YAAY,EAAE,UAAU;YACpC,kBAAkB,EAAE,YAAY,EAAE,kBAAkB;YACpD,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,QAAoD;QAChF,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC;YAC5C,CAAC,CAAC,oBAAoB,CAAC,GAAG;iBACvB,GAAG,CAAC,YAAY,CAAC;iBACjB,MAAM,CAAC,CAAC,OAAO,EAAyB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;iBAC5D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAEO,gBAAgB;QACtB,OAAO;YACL,sBAAsB,EAAE,IAAI,CAAC,yBAAyB;YACtD,kBAAkB,EAAE,IAAI,CAAC,0BAA0B;SACpD,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,OAAmB;QACjD,OAAO,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,GAAoB,EAAE,OAAkC;QAClG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE;YACtD,oBAAoB,EAAE;gBACpB,GAAG,QAAQ;gBACX,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,EAAE,OAAO,CAAC;aACtC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,SAAiB;QAM5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAA4B,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC;YACzD,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAyB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzG,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACzF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,uBAAuB,CAAC,eAAe,SAAS,YAAY,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO;YACL,oBAAoB;YACpB,WAAW;YACX,YAAY;YACZ,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;SACnC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,OAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAsB,CAAC,eAAe,OAAO,CAAC,SAAS,UAAU,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,OAAmB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC;IAEO,sBAAsB,CAC5B,KAAc,EACd,OAIC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,KAAK,EAAqC,EAAE;YAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,SAAS,GAA0B;gBACvC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,EAAE;gBACzD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS;aACnD,CAAC;YACF,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACrC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACxC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;YACxB,CAAC;YACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAChC,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YACtC,CAAC;YACD,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,SAAS,EAAsC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,CAAC;CACF;AAhUD,gEAgUC;AAED,MAAa,+BAAgC,SAAQ,KAAK;CAAG;AAA7D,0EAA6D;AAC7D,MAAa,4BAA6B,SAAQ,KAAK;CAAG;AAA1D,oEAA0D;AAC1D,MAAa,kCAAmC,SAAQ,KAAK;CAAG;AAAhE,gFAAgE;AAChE,MAAa,oCAAqC,SAAQ,KAAK;CAAG;AAAlE,oFAAkE;AAClE,MAAa,qCAAsC,SAAQ,KAAK;CAAG;AAAnE,sFAAmE;AACnE,MAAa,sBAAuB,SAAQ,KAAK;CAAG;AAApD,wDAAoD;AACpD,MAAa,uBAAwB,SAAQ,KAAK;CAAG;AAArD,0DAAqD;AAErD,SAAS,UAAU,CAAC,IAAU,EAAE,OAAe;IAC7C,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,QAAgB,EAAE,OAAe;IAC7E,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9E,IAAI,CAAC,sBAAsB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CACjB,MAA+B,EAC/B,MAAsC,EACtC,GAA0D;IAE1D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAgC;IAC3D,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,SAAS;QACT,IAAI,EAAE,KAAK;QACX,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,SAAS;QACT,SAAS;QACT,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAA+B,CAAC,CAAC,CAAC,EAAE;QAChG,YAAY;QACZ,YAAY,EAAE,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC;QACtD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YACzC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAsC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7H,CAAC,CAAC,EAAE;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAA0B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3E,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACzC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1C,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B;IACvD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC","sourcesContent":["import type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { buildRouteSet } from './RouteSetBuilder';\nimport type {\n  AccessRoute,\n  BuildRouteSetSource,\n  P2PCandidateUpdateRequest,\n  P2PSession,\n  P2PSessionLimits,\n  P2PSessionList,\n  P2PSessionOwner,\n  P2PSessionRequest,\n  P2PTransportCandidate,\n  RelaySession,\n  RelaySessionRequest,\n} from './types';\n\nexport interface ReachabilitySessionServiceOptions {\n  repository: EdgeNodeRepository;\n  baseStorageDomain?: string;\n  apiBaseUrl: string | (() => string);\n  now?: () => Date;\n  randomId?: () => string;\n  defaultP2PTtlSeconds?: number;\n  defaultRelayTtlSeconds?: number;\n  defaultRelayBandwidthLimitBytes?: number;\n  maxActiveP2PSessionsPerNode?: number;\n  maxP2PCandidatesPerUpdate?: number;\n  maxP2PCandidatesPerSession?: number;\n}\n\nexport class ReachabilitySessionService {\n  private readonly now: () => Date;\n  private readonly randomId: () => string;\n  private readonly defaultP2PTtlSeconds: number;\n  private readonly defaultRelayTtlSeconds: number;\n  private readonly defaultRelayBandwidthLimitBytes: number;\n  private readonly maxActiveP2PSessionsPerNode: number;\n  private readonly maxP2PCandidatesPerUpdate: number;\n  private readonly maxP2PCandidatesPerSession: number;\n\n  public constructor(private readonly options: ReachabilitySessionServiceOptions) {\n    this.now = options.now ?? (() => new Date());\n    this.randomId = options.randomId ?? randomString;\n    this.defaultP2PTtlSeconds = options.defaultP2PTtlSeconds ?? 5 * 60;\n    this.defaultRelayTtlSeconds = options.defaultRelayTtlSeconds ?? 15 * 60;\n    this.defaultRelayBandwidthLimitBytes = options.defaultRelayBandwidthLimitBytes ?? 64 * 1024 * 1024;\n    this.maxActiveP2PSessionsPerNode = options.maxActiveP2PSessionsPerNode ?? 16;\n    this.maxP2PCandidatesPerUpdate = options.maxP2PCandidatesPerUpdate ?? 32;\n    this.maxP2PCandidatesPerSession = options.maxP2PCandidatesPerSession ?? 256;\n  }\n\n  public async createP2PSession(nodeId: string, request: P2PSessionRequest): Promise<P2PSession> {\n    const source = await this.loadNodeRouteSource(nodeId);\n    const activeSessions = this.readActiveP2PSessions(source.metadata);\n    if (activeSessions.length >= this.maxActiveP2PSessionsPerNode) {\n      throw new P2PActiveSessionLimitExceededError(`Node ${nodeId} reached active P2P session limit`);\n    }\n    const createdAt = this.now();\n    const expiresAt = addSeconds(createdAt, this.defaultP2PTtlSeconds);\n    const suffix = this.randomId();\n    const sessionId = `p2p_${suffix}`;\n    const auditId = `audit_${suffix}`;\n    const limits = this.p2pSessionLimits();\n    if (Array.isArray(request.candidates) && request.candidates.length > limits.maxCandidatesPerUpdate) {\n      throw new P2PCandidateUpdateLimitExceededError('P2P candidate update limit exceeded');\n    }\n    const candidates = this.normalizeP2PCandidates(request.candidates, {\n      role: 'client',\n      sourceId: request.clientId,\n      createdAt,\n    });\n    if (candidates.length > limits.maxCandidatesTotal) {\n      throw new P2PCandidateSessionLimitExceededError('P2P candidate session limit exceeded');\n    }\n    const routeSet = buildRouteSet(source, {\n      audience: 'managed',\n      baseStorageDomain: this.options.baseStorageDomain,\n      now: createdAt,\n    });\n    const session: P2PSession = {\n      sessionId,\n      kind: 'p2p',\n      nodeId,\n      clientId: request.clientId,\n      ...(request.owner ? { owner: request.owner } : {}),\n      auditId,\n      createdAt: createdAt.toISOString(),\n      expiresAt: expiresAt.toISOString(),\n      nodeCandidates: routeSet.routes,\n      signalingUrl: new URL(\n        `/v1/signal/nodes/${encodeURIComponent(nodeId)}/sessions/${sessionId}`,\n        resolveApiBaseUrl(this.options.apiBaseUrl),\n      ).toString(),\n      capabilities: normalizeStringArray(request.capabilities),\n      candidates,\n      limits,\n    };\n    await this.appendSession(nodeId, 'p2p', session);\n    return session;\n  }\n\n  public async getP2PSession(nodeId: string, sessionId: string): Promise<P2PSession> {\n    const { session } = await this.loadP2PSession(nodeId, sessionId);\n    this.assertP2PSessionActive(session);\n    return session;\n  }\n\n  public async listP2PSessions(nodeId: string): Promise<P2PSessionList> {\n    const current = await this.options.repository.getNodeMetadata(nodeId);\n    if (!current) {\n      throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);\n    }\n    const metadata = current.metadata ?? {};\n    const reachabilitySessions = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};\n    const sessions = Array.isArray(reachabilitySessions.p2p)\n      ? reachabilitySessions.p2p\n        .map(toP2PSession)\n        .filter((session): session is P2PSession => Boolean(session))\n        .filter((session) => this.isP2PSessionActive(session))\n      : [];\n    return { kind: 'p2p', sessions };\n  }\n\n  public async addP2PCandidates(\n    nodeId: string,\n    sessionId: string,\n    request: P2PCandidateUpdateRequest,\n  ): Promise<P2PSession> {\n    const { reachabilitySessions, p2pSessions, sessionIndex, session } = await this.loadP2PSession(nodeId, sessionId);\n    this.assertP2PSessionActive(session);\n\n    const limits = this.resolveP2PSessionLimits(session);\n    if (request.candidates.length > limits.maxCandidatesPerUpdate) {\n      throw new P2PCandidateUpdateLimitExceededError('P2P candidate update limit exceeded');\n    }\n    const normalizedCandidates = this.normalizeP2PCandidates(request.candidates, {\n      role: request.role,\n      sourceId: request.sourceId,\n      createdAt: this.now(),\n    });\n    const nextCandidates = [\n      ...session.candidates,\n      ...normalizedCandidates,\n    ];\n    if (nextCandidates.length > limits.maxCandidatesTotal) {\n      throw new P2PCandidateSessionLimitExceededError('P2P candidate session limit exceeded');\n    }\n    const nextSession: P2PSession = {\n      ...session,\n      candidates: nextCandidates,\n    };\n    const nextP2PSessions = [...p2pSessions];\n    nextP2PSessions[sessionIndex] = nextSession;\n\n    await this.options.repository.mergeNodeMetadata(nodeId, {\n      reachabilitySessions: {\n        ...reachabilitySessions,\n        p2p: nextP2PSessions,\n      },\n    });\n    return nextSession;\n  }\n\n  public async createRelaySession(nodeId: string, request: RelaySessionRequest): Promise<RelaySession> {\n    const source = await this.loadNodeRouteSource(nodeId);\n    const reason = request.reason.trim();\n    if (!reason) {\n      throw new InvalidRelaySessionRequestError('reason is required for relay sessions');\n    }\n    const createdAt = this.now();\n    const ttlSeconds = clampPositiveInteger(request.ttlSeconds, this.defaultRelayTtlSeconds, this.defaultRelayTtlSeconds);\n    const expiresAt = addSeconds(createdAt, ttlSeconds);\n    const suffix = this.randomId();\n    const sessionId = `relay_${suffix}`;\n    const auditId = `audit_${suffix}`;\n    const canonicalUrl = buildRouteSet(source, {\n      audience: 'managed',\n      baseStorageDomain: this.options.baseStorageDomain,\n      now: createdAt,\n    }).canonicalUrl;\n    const route: AccessRoute = {\n      id: sessionId,\n      nodeId,\n      canonicalUrl,\n      kind: 'xpod-relay',\n      targetUrl: canonicalUrl,\n      priority: 90,\n      requiresManagedClient: false,\n      visibility: 'public',\n      health: 'unknown',\n      expiresAt: expiresAt.toISOString(),\n      metadata: { auditId, reason },\n    };\n    const session: RelaySession = {\n      sessionId,\n      kind: 'relay',\n      auditId,\n      nodeId,\n      createdAt: createdAt.toISOString(),\n      expiresAt: expiresAt.toISOString(),\n      reason,\n      bandwidthLimitBytes: clampPositiveInteger(\n        request.bandwidthLimitBytes,\n        this.defaultRelayBandwidthLimitBytes,\n        this.defaultRelayBandwidthLimitBytes,\n      ),\n      bandwidthLimitBps: normalizePositiveInteger(request.bandwidthLimitBps),\n      route,\n    };\n    await this.appendSession(nodeId, 'relay', session);\n    return session;\n  }\n\n  private async loadNodeRouteSource(nodeId: string): Promise<BuildRouteSetSource> {\n    const [metadataRow, connectivity] = await Promise.all([\n      this.options.repository.getNodeMetadata(nodeId),\n      this.options.repository.getNodeConnectivityInfo(nodeId),\n    ]);\n    if (!metadataRow && !connectivity) {\n      throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);\n    }\n    const metadata = metadataRow?.metadata ?? {};\n    return {\n      nodeId,\n      canonicalUrl: getString(metadata.canonicalUrl),\n      publicUrl: connectivity?.publicUrl,\n      subdomain: connectivity?.subdomain,\n      baseStorageDomain: this.options.baseStorageDomain,\n      ipv4: connectivity?.ipv4,\n      publicPort: connectivity?.publicPort,\n      connectivityStatus: connectivity?.connectivityStatus,\n      metadata,\n    };\n  }\n\n  private readActiveP2PSessions(metadata: Record<string, unknown> | null | undefined): P2PSession[] {\n    const reachabilitySessions = isRecord(metadata?.reachabilitySessions) ? metadata.reachabilitySessions : {};\n    return Array.isArray(reachabilitySessions.p2p)\n      ? reachabilitySessions.p2p\n        .map(toP2PSession)\n        .filter((session): session is P2PSession => Boolean(session))\n        .filter((session) => this.isP2PSessionActive(session))\n      : [];\n  }\n\n  private p2pSessionLimits(): P2PSessionLimits {\n    return {\n      maxCandidatesPerUpdate: this.maxP2PCandidatesPerUpdate,\n      maxCandidatesTotal: this.maxP2PCandidatesPerSession,\n    };\n  }\n\n  private resolveP2PSessionLimits(session: P2PSession): P2PSessionLimits {\n    return normalizeP2PSessionLimits(session.limits) ?? this.p2pSessionLimits();\n  }\n\n  private async appendSession(nodeId: string, key: 'p2p' | 'relay', session: P2PSession | RelaySession): Promise<void> {\n    const current = await this.options.repository.getNodeMetadata(nodeId);\n    const metadata = current?.metadata ?? {};\n    const existing = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};\n    const previousSessions = Array.isArray(existing[key]) ? existing[key] : [];\n    await this.options.repository.mergeNodeMetadata(nodeId, {\n      reachabilitySessions: {\n        ...existing,\n        [key]: [...previousSessions, session],\n      },\n    });\n  }\n\n  private async loadP2PSession(nodeId: string, sessionId: string): Promise<{\n    reachabilitySessions: Record<string, unknown>;\n    p2pSessions: P2PSession[];\n    sessionIndex: number;\n    session: P2PSession;\n  }> {\n    const current = await this.options.repository.getNodeMetadata(nodeId);\n    if (!current) {\n      throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);\n    }\n    const metadata = current.metadata ?? {};\n    const reachabilitySessions = isRecord(metadata.reachabilitySessions) ? metadata.reachabilitySessions : {};\n    const p2pSessions = Array.isArray(reachabilitySessions.p2p)\n      ? reachabilitySessions.p2p.map(toP2PSession).filter((session): session is P2PSession => Boolean(session))\n      : [];\n    const sessionIndex = p2pSessions.findIndex((session) => session.sessionId === sessionId);\n    if (sessionIndex < 0) {\n      throw new P2PSessionNotFoundError(`P2P session ${sessionId} not found`);\n    }\n    return {\n      reachabilitySessions,\n      p2pSessions,\n      sessionIndex,\n      session: p2pSessions[sessionIndex],\n    };\n  }\n\n  private assertP2PSessionActive(session: P2PSession): void {\n    if (!this.isP2PSessionActive(session)) {\n      throw new P2PSessionExpiredError(`P2P session ${session.sessionId} expired`);\n    }\n  }\n\n  private isP2PSessionActive(session: P2PSession): boolean {\n    const expiresAt = Date.parse(session.expiresAt);\n    return !Number.isFinite(expiresAt) || expiresAt > this.now().getTime();\n  }\n\n  private normalizeP2PCandidates(\n    value: unknown,\n    context: {\n      role: P2PCandidateUpdateRequest['role'];\n      sourceId: string;\n      createdAt: Date;\n    },\n  ): P2PTransportCandidate[] {\n    if (!Array.isArray(value)) {\n      return [];\n    }\n    const createdAt = context.createdAt.toISOString();\n    return value\n      .map((entry): P2PTransportCandidate | undefined => {\n        if (!isRecord(entry)) {\n          return undefined;\n        }\n        const candidate: P2PTransportCandidate = {\n          id: getString(entry.id) ?? `candidate_${this.randomId()}`,\n          role: context.role,\n          sourceId: context.sourceId,\n          createdAt: getString(entry.createdAt) ?? createdAt,\n        };\n        copyString(entry, candidate, 'protocol');\n        copyString(entry, candidate, 'transport');\n        copyString(entry, candidate, 'host');\n        copyString(entry, candidate, 'address');\n        copyString(entry, candidate, 'url');\n        const port = normalizePort(entry.port);\n        if (port !== undefined) {\n          candidate.port = port;\n        }\n        const priority = normalizeNumber(entry.priority);\n        if (priority !== undefined) {\n          candidate.priority = priority;\n        }\n        if (isRecord(entry.metadata)) {\n          candidate.metadata = entry.metadata;\n        }\n        return hasCandidateLocator(candidate) ? candidate : undefined;\n      })\n      .filter((candidate): candidate is P2PTransportCandidate => Boolean(candidate));\n  }\n}\n\nexport class InvalidRelaySessionRequestError extends Error {}\nexport class NodeRouteSourceNotFoundError extends Error {}\nexport class P2PActiveSessionLimitExceededError extends Error {}\nexport class P2PCandidateUpdateLimitExceededError extends Error {}\nexport class P2PCandidateSessionLimitExceededError extends Error {}\nexport class P2PSessionExpiredError extends Error {}\nexport class P2PSessionNotFoundError extends Error {}\n\nfunction addSeconds(date: Date, seconds: number): Date {\n  return new Date(date.getTime() + seconds * 1000);\n}\n\nfunction clampPositiveInteger(value: unknown, fallback: number, maximum: number): number {\n  const normalized = normalizePositiveInteger(value);\n  if (!normalized) {\n    return fallback;\n  }\n  return Math.min(normalized, maximum);\n}\n\nfunction normalizePositiveInteger(value: unknown): number | undefined {\n  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {\n    return undefined;\n  }\n  return Math.floor(value);\n}\n\nfunction normalizeP2PSessionLimits(value: unknown): P2PSessionLimits | undefined {\n  if (!isRecord(value)) {\n    return undefined;\n  }\n  const maxCandidatesPerUpdate = normalizePositiveInteger(value.maxCandidatesPerUpdate);\n  const maxCandidatesTotal = normalizePositiveInteger(value.maxCandidatesTotal);\n  if (!maxCandidatesPerUpdate || !maxCandidatesTotal) {\n    return undefined;\n  }\n  return { maxCandidatesPerUpdate, maxCandidatesTotal };\n}\n\nfunction normalizePort(value: unknown): number | undefined {\n  const port = normalizePositiveInteger(value);\n  if (!port || port > 65535) {\n    return undefined;\n  }\n  return port;\n}\n\nfunction normalizeNumber(value: unknown): number | undefined {\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    return undefined;\n  }\n  return value;\n}\n\nfunction normalizeStringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) {\n    return [];\n  }\n  return value.filter((entry): entry is string => typeof entry === 'string' && entry.trim().length > 0);\n}\n\nfunction getString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction copyString(\n  source: Record<string, unknown>,\n  target: Partial<P2PTransportCandidate>,\n  key: 'protocol' | 'transport' | 'host' | 'address' | 'url',\n): void {\n  const value = getString(source[key]);\n  if (value) {\n    target[key] = value;\n  }\n}\n\nfunction hasCandidateLocator(candidate: P2PTransportCandidate): boolean {\n  return Boolean(candidate.host || candidate.address || candidate.url || candidate.port);\n}\n\nfunction toP2PSession(value: unknown): P2PSession | undefined {\n  if (!isRecord(value) || value.kind !== 'p2p') {\n    return undefined;\n  }\n  const sessionId = getString(value.sessionId);\n  const nodeId = getString(value.nodeId);\n  const clientId = getString(value.clientId);\n  const auditId = getString(value.auditId);\n  const owner = normalizeP2PSessionOwner(value.owner);\n  const createdAt = getString(value.createdAt);\n  const expiresAt = getString(value.expiresAt);\n  const signalingUrl = getString(value.signalingUrl);\n  const limits = normalizeP2PSessionLimits(value.limits);\n  if (!sessionId || !nodeId || !clientId || !createdAt || !expiresAt || !signalingUrl) {\n    return undefined;\n  }\n  return {\n    sessionId,\n    kind: 'p2p',\n    nodeId,\n    clientId,\n    ...(owner ? { owner } : {}),\n    ...(auditId ? { auditId } : {}),\n    createdAt,\n    expiresAt,\n    nodeCandidates: Array.isArray(value.nodeCandidates) ? value.nodeCandidates as AccessRoute[] : [],\n    signalingUrl,\n    capabilities: normalizeStringArray(value.capabilities),\n    candidates: Array.isArray(value.candidates)\n      ? value.candidates.map(toP2PTransportCandidate).filter((candidate): candidate is P2PTransportCandidate => Boolean(candidate))\n      : [],\n    ...(limits ? { limits } : {}),\n  };\n}\n\nfunction normalizeP2PSessionOwner(value: unknown): P2PSessionOwner | undefined {\n  if (!isRecord(value) || value.type !== 'solid') {\n    return undefined;\n  }\n  const webId = getString(value.webId);\n  return webId ? { type: 'solid', webId } : undefined;\n}\n\nfunction toP2PTransportCandidate(value: unknown): P2PTransportCandidate | undefined {\n  if (!isRecord(value)) {\n    return undefined;\n  }\n  const id = getString(value.id);\n  const sourceId = getString(value.sourceId);\n  const createdAt = getString(value.createdAt);\n  const role = value.role === 'node' || value.role === 'client' ? value.role : undefined;\n  if (!id || !role || !sourceId || !createdAt) {\n    return undefined;\n  }\n  const candidate: P2PTransportCandidate = { id, role, sourceId, createdAt };\n  copyString(value, candidate, 'protocol');\n  copyString(value, candidate, 'transport');\n  copyString(value, candidate, 'host');\n  copyString(value, candidate, 'address');\n  copyString(value, candidate, 'url');\n  const port = normalizePort(value.port);\n  if (port !== undefined) {\n    candidate.port = port;\n  }\n  const priority = normalizeNumber(value.priority);\n  if (priority !== undefined) {\n    candidate.priority = priority;\n  }\n  if (isRecord(value.metadata)) {\n    candidate.metadata = value.metadata;\n  }\n  return candidate;\n}\n\nfunction randomString(): string {\n  return Math.random().toString(36).slice(2, 12);\n}\n\nfunction resolveApiBaseUrl(value: string | (() => string)): string {\n  return typeof value === 'function' ? value() : value;\n}\n"]}