@undefineds.co/xpod 0.3.53 → 0.3.54

package/dist/api/handlers/ReachabilityHandler.js

@@ -0,0 +1,388 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerReachabilityRoutes = registerReachabilityRoutes;
+const AuthContext_1 = require("../auth/AuthContext");
+const RouteSetBuilder_1 = require("../../edge/reachability/RouteSetBuilder");
+const ReachabilitySessionService_1 = require("../../edge/reachability/ReachabilitySessionService");
+function registerReachabilityRoutes(server, options) {
+    const service = new ReachabilitySessionService_1.ReachabilitySessionService({
+        repository: options.repository,
+        baseStorageDomain: options.baseStorageDomain,
+        apiBaseUrl: options.apiBaseUrl ?? process.env.XPOD_CLOUD_API_ENDPOINT ?? process.env.CSS_BASE_URL ?? 'http://localhost/',
+        now: options.now,
+        randomId: options.randomId,
+        maxActiveP2PSessionsPerNode: options.maxActiveP2PSessionsPerNode
+            ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_ACTIVE_SESSIONS_PER_NODE),
+        maxP2PCandidatesPerUpdate: options.maxP2PCandidatesPerUpdate
+            ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_CANDIDATES_PER_UPDATE),
+        maxP2PCandidatesPerSession: options.maxP2PCandidatesPerSession
+            ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_CANDIDATES_PER_SESSION),
+    });
+    server.get('/v1/signal/nodes/:nodeId/routes', async (request, response, params) => {
+        const access = resolveAccess(request, params.nodeId);
+        if (!access.allowed) {
+            sendJson(response, access.status, { error: access.error });
+            return;
+        }
+        try {
+            const source = await loadRouteSource(options.repository, params.nodeId, options.baseStorageDomain);
+            const routeSet = (0, RouteSetBuilder_1.buildRouteSet)(source, {
+                audience: access.audience,
+                baseStorageDomain: options.baseStorageDomain,
+                now: options.now?.() ?? new Date(),
+            });
+            sendJson(response, 200, routeSet);
+        }
+        catch (error) {
+            if (error instanceof ReachabilitySessionService_1.NodeRouteSourceNotFoundError) {
+                sendJson(response, 404, { error: 'Node not found' });
+                return;
+            }
+            sendJson(response, 500, { error: 'Failed to load routes' });
+        }
+    }, { optionalAuth: true });
+    server.post('/v1/signal/nodes/:nodeId/sessions', async (request, response, params) => {
+        const access = resolveSessionAccess(request, params.nodeId);
+        if (!access.allowed) {
+            sendJson(response, access.status, { error: access.error });
+            return;
+        }
+        const body = await readJsonBody(request);
+        if (!isRecord(body)) {
+            sendJson(response, 400, { error: 'kind must be p2p or relay' });
+            return;
+        }
+        if (body.kind === 'p2p') {
+            if (typeof body.clientId !== 'string' || body.clientId.trim().length === 0) {
+                sendJson(response, 400, { error: 'clientId is required' });
+                return;
+            }
+            try {
+                const session = await service.createP2PSession(params.nodeId, {
+                    kind: 'p2p',
+                    clientId: body.clientId.trim(),
+                    ...(access.kind === 'solid' ? { owner: { type: 'solid', webId: access.webId } } : {}),
+                    capabilities: Array.isArray(body.capabilities) ? body.capabilities.filter((entry) => typeof entry === 'string') : [],
+                    candidates: enrichP2PCandidatesWithObservedAddress(Array.isArray(body.candidates) ? body.candidates : [], resolveObservedAddress(request)),
+                });
+                sendJson(response, 201, session);
+            }
+            catch (error) {
+                if (error instanceof ReachabilitySessionService_1.NodeRouteSourceNotFoundError) {
+                    sendJson(response, 404, { error: 'Node not found' });
+                    return;
+                }
+                if (error instanceof ReachabilitySessionService_1.P2PActiveSessionLimitExceededError) {
+                    sendJson(response, 429, { error: 'P2P active session limit exceeded' });
+                    return;
+                }
+                if (error instanceof ReachabilitySessionService_1.P2PCandidateUpdateLimitExceededError) {
+                    sendJson(response, 429, { error: 'P2P candidate update limit exceeded' });
+                    return;
+                }
+                if (error instanceof ReachabilitySessionService_1.P2PCandidateSessionLimitExceededError) {
+                    sendJson(response, 429, { error: 'P2P candidate session limit exceeded' });
+                    return;
+                }
+                sendJson(response, 500, { error: 'Failed to create p2p session' });
+            }
+            return;
+        }
+        if (body.kind === 'relay') {
+            if (typeof body.reason !== 'string' || body.reason.trim().length === 0) {
+                sendJson(response, 400, { error: 'reason is required for relay sessions' });
+                return;
+            }
+            try {
+                const session = await service.createRelaySession(params.nodeId, {
+                    kind: 'relay',
+                    reason: body.reason,
+                    ttlSeconds: typeof body.ttlSeconds === 'number' ? body.ttlSeconds : undefined,
+                    bandwidthLimitBytes: typeof body.bandwidthLimitBytes === 'number' ? body.bandwidthLimitBytes : undefined,
+                    bandwidthLimitBps: typeof body.bandwidthLimitBps === 'number' ? body.bandwidthLimitBps : undefined,
+                });
+                sendJson(response, 201, session);
+            }
+            catch (error) {
+                if (error instanceof ReachabilitySessionService_1.InvalidRelaySessionRequestError) {
+                    sendJson(response, 400, { error: error.message });
+                    return;
+                }
+                if (error instanceof ReachabilitySessionService_1.NodeRouteSourceNotFoundError) {
+                    sendJson(response, 404, { error: 'Node not found' });
+                    return;
+                }
+                sendJson(response, 500, { error: 'Failed to create relay session' });
+            }
+            return;
+        }
+        sendJson(response, 400, { error: 'kind must be p2p or relay' });
+    });
+    server.get('/v1/signal/nodes/:nodeId/sessions', async (request, response, params) => {
+        const access = resolveSessionAccess(request, params.nodeId);
+        if (!access.allowed) {
+            sendJson(response, access.status, { error: access.error });
+            return;
+        }
+        try {
+            const sessions = await service.listP2PSessions(params.nodeId);
+            sendJson(response, 200, filterP2PSessionListForAccess(sessions, access));
+        }
+        catch (error) {
+            if (error instanceof ReachabilitySessionService_1.NodeRouteSourceNotFoundError) {
+                sendJson(response, 404, { error: 'Node not found' });
+                return;
+            }
+            sendJson(response, 500, { error: 'Failed to list p2p sessions' });
+        }
+    });
+    server.get('/v1/signal/nodes/:nodeId/sessions/:sessionId', async (request, response, params) => {
+        const access = resolveSessionAccess(request, params.nodeId);
+        if (!access.allowed) {
+            sendJson(response, access.status, { error: access.error });
+            return;
+        }
+        try {
+            const session = await service.getP2PSession(params.nodeId, params.sessionId);
+            if (!canAccessP2PSession(access, session)) {
+                sendJson(response, 403, { error: 'Solid user cannot access another client signaling session' });
+                return;
+            }
+            sendJson(response, 200, session);
+        }
+        catch (error) {
+            sendP2PSessionError(response, error);
+        }
+    });
+    server.post('/v1/signal/nodes/:nodeId/sessions/:sessionId/candidates', async (request, response, params) => {
+        const access = resolveSessionAccess(request, params.nodeId);
+        if (!access.allowed) {
+            sendJson(response, access.status, { error: access.error });
+            return;
+        }
+        const body = await readJsonBody(request);
+        if (!isRecord(body) || !Array.isArray(body.candidates)) {
+            sendJson(response, 400, { error: 'candidates array is required' });
+            return;
+        }
+        try {
+            const currentSession = await service.getP2PSession(params.nodeId, params.sessionId);
+            if (!canAccessP2PSession(access, currentSession)) {
+                sendJson(response, 403, { error: 'Solid user cannot access another client signaling session' });
+                return;
+            }
+            const source = resolveCandidateSource(access, params.nodeId, currentSession, body);
+            const session = await service.addP2PCandidates(params.nodeId, params.sessionId, {
+                role: source.role,
+                sourceId: source.sourceId,
+                candidates: enrichP2PCandidatesWithObservedAddress(body.candidates, resolveObservedAddress(request)),
+            });
+            sendJson(response, 200, session);
+        }
+        catch (error) {
+            sendP2PSessionError(response, error);
+        }
+    });
+}
+async function loadRouteSource(repository, nodeId, baseStorageDomain) {
+    const [metadataRow, connectivity] = await Promise.all([
+        repository.getNodeMetadata(nodeId),
+        repository.getNodeConnectivityInfo(nodeId),
+    ]);
+    if (!metadataRow && !connectivity) {
+        throw new ReachabilitySessionService_1.NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);
+    }
+    const metadata = metadataRow?.metadata ?? {};
+    return {
+        nodeId,
+        canonicalUrl: getString(metadata.canonicalUrl),
+        publicUrl: connectivity?.publicUrl,
+        subdomain: connectivity?.subdomain,
+        baseStorageDomain,
+        ipv4: connectivity?.ipv4,
+        publicPort: connectivity?.publicPort,
+        connectivityStatus: connectivity?.connectivityStatus,
+        metadata,
+    };
+}
+function resolveAccess(request, nodeId) {
+    const auth = request.auth;
+    if (!auth) {
+        return { allowed: true, audience: 'public' };
+    }
+    if ((0, AuthContext_1.isNodeAuth)(auth)) {
+        if (auth.nodeId !== nodeId) {
+            return { allowed: false, status: 403, error: 'Node token cannot access another node' };
+        }
+        return { allowed: true, audience: 'managed' };
+    }
+    if ((0, AuthContext_1.isServiceAuth)(auth)) {
+        return { allowed: true, audience: 'managed' };
+    }
+    return { allowed: true, audience: 'public' };
+}
+function resolveSessionAccess(request, nodeId) {
+    const auth = request.auth;
+    if (!auth) {
+        return { allowed: false, status: 401, error: 'Authentication required' };
+    }
+    if ((0, AuthContext_1.isNodeAuth)(auth)) {
+        if (auth.nodeId !== nodeId) {
+            return { allowed: false, status: 403, error: 'Node token cannot access another node' };
+        }
+        return { allowed: true, kind: 'node', nodeId: auth.nodeId };
+    }
+    if ((0, AuthContext_1.isServiceAuth)(auth)) {
+        return { allowed: true, kind: 'service' };
+    }
+    if ((0, AuthContext_1.isSolidAuth)(auth)) {
+        return { allowed: true, kind: 'solid', webId: auth.webId };
+    }
+    return { allowed: false, status: 403, error: 'Unsupported reachability session credentials' };
+}
+function filterP2PSessionListForAccess(sessions, access) {
+    if (access.kind !== 'solid') {
+        return sessions;
+    }
+    return {
+        kind: sessions.kind,
+        sessions: sessions.sessions.filter((session) => isOwnedBySolidUser(session, access.webId)),
+    };
+}
+function canAccessP2PSession(access, session) {
+    return access.kind !== 'solid' || isOwnedBySolidUser(session, access.webId);
+}
+function isOwnedBySolidUser(session, webId) {
+    return session.owner?.type === 'solid' && session.owner.webId === webId;
+}
+function resolveCandidateSource(access, nodeId, session, body) {
+    if (access.kind === 'node') {
+        return { role: 'node', sourceId: nodeId };
+    }
+    if (access.kind === 'solid') {
+        return { role: 'client', sourceId: session.clientId };
+    }
+    const role = body.role === 'node' ? 'node' : 'client';
+    const sourceId = getString(body.sourceId)
+        ?? getString(body.clientId)
+        ?? (role === 'node' ? nodeId : 'service-client');
+    return { role, sourceId };
+}
+function enrichP2PCandidatesWithObservedAddress(candidates, observedAddress) {
+    if (!observedAddress) {
+        return candidates;
+    }
+    return candidates.map((candidate) => {
+        if (!isRecord(candidate) || !isPortOnlyCandidate(candidate)) {
+            return candidate;
+        }
+        return {
+            ...candidate,
+            address: observedAddress,
+        };
+    });
+}
+function isPortOnlyCandidate(candidate) {
+    return normalizeCandidatePort(candidate.port) !== undefined
+        && getString(candidate.host) === undefined
+        && getString(candidate.address) === undefined
+        && getString(candidate.url) === undefined;
+}
+function normalizeCandidatePort(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return undefined;
+    }
+    const port = Math.floor(value);
+    return port > 0 && port <= 65535 ? port : undefined;
+}
+function resolveObservedAddress(request) {
+    return firstForwardedAddress(request.headers['x-forwarded-for'])
+        ?? firstHeaderAddress(request.headers['x-real-ip'])
+        ?? normalizeObservedAddress(request.socket?.remoteAddress);
+}
+function firstForwardedAddress(value) {
+    const first = Array.isArray(value) ? value[0] : value;
+    return firstHeaderAddress(first?.split(',')[0]);
+}
+function firstHeaderAddress(value) {
+    const first = Array.isArray(value) ? value[0] : value;
+    return normalizeObservedAddress(first);
+}
+function normalizeObservedAddress(value) {
+    const trimmed = value?.trim().replace(/^"|"$/gu, '');
+    if (!trimmed) {
+        return undefined;
+    }
+    if (trimmed.startsWith('::ffff:')) {
+        return trimmed.slice('::ffff:'.length);
+    }
+    if (trimmed.startsWith('[') && trimmed.endsWith(']')) {
+        return trimmed.slice(1, -1);
+    }
+    return trimmed;
+}
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                resolve(undefined);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+function sendP2PSessionError(response, error) {
+    if (error instanceof ReachabilitySessionService_1.P2PSessionExpiredError) {
+        sendJson(response, 410, { error: 'P2P session expired' });
+        return;
+    }
+    if (error instanceof ReachabilitySessionService_1.P2PSessionNotFoundError) {
+        sendJson(response, 404, { error: 'P2P session not found' });
+        return;
+    }
+    if (error instanceof ReachabilitySessionService_1.P2PCandidateUpdateLimitExceededError) {
+        sendJson(response, 429, { error: 'P2P candidate update limit exceeded' });
+        return;
+    }
+    if (error instanceof ReachabilitySessionService_1.P2PCandidateSessionLimitExceededError) {
+        sendJson(response, 429, { error: 'P2P candidate session limit exceeded' });
+        return;
+    }
+    if (error instanceof ReachabilitySessionService_1.NodeRouteSourceNotFoundError) {
+        sendJson(response, 404, { error: 'Node not found' });
+        return;
+    }
+    sendJson(response, 500, { error: 'Failed to update p2p session' });
+}
+function getString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function parsePositiveInteger(value) {
+    const trimmed = getString(value);
+    if (!trimmed) {
+        return undefined;
+    }
+    const parsed = Number.parseInt(trimmed, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+//# sourceMappingURL=ReachabilityHandler.js.map

package/dist/api/handlers/ReachabilityHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReachabilityHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/ReachabilityHandler.ts"],"names":[],"mappings":";;AA6BA,gEA8LC;AAvND,qDAA6E;AAC7E,6EAAwE;AACxE,mGAS4D;AAc5D,SAAgB,0BAA0B,CAAC,MAAiB,EAAE,OAAmC;IAC/F,MAAM,OAAO,GAAG,IAAI,uDAA0B,CAAC;QAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,mBAAmB;QACxH,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;eAC3D,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC;QAC5E,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;eACvD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC;QACzE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;eACzD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC;KAC3E,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAChF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACnG,MAAM,QAAQ,GAAG,IAAA,+BAAa,EAAC,MAAM,EAAE;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yDAA4B,EAAE,CAAC;gBAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3B,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACnF,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE;oBAC5D,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9F,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;oBACrI,UAAU,EAAE,sCAAsC,CAChD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EACrD,sBAAsB,CAAC,OAAO,CAAC,CAChC;iBACF,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,yDAA4B,EAAE,CAAC;oBAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,YAAY,+DAAkC,EAAE,CAAC;oBACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,YAAY,iEAAoC,EAAE,CAAC;oBAC1D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;oBAC1E,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,YAAY,kEAAqC,EAAE,CAAC;oBAC3D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE;oBAC9D,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;oBAC7E,mBAAmB,EAAE,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;oBACxG,iBAAiB,EAAE,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;iBACnG,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,4DAA+B,EAAE,CAAC;oBACrD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClD,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,YAAY,yDAA4B,EAAE,CAAC;oBAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,6BAA6B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yDAA4B,EAAE,CAAC;gBAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7F,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7E,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzG,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACpF,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;gBACjD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE;gBAC9E,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,sCAAsC,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;aACrG,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAA8B,EAC9B,MAAc,EACd,iBAA0B;IAE1B,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC;QAClC,UAAU,CAAC,uBAAuB,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,yDAA4B,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC7C,OAAO;QACL,MAAM;QACN,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC9C,SAAS,EAAE,YAAY,EAAE,SAAS;QAClC,SAAS,EAAE,YAAY,EAAE,SAAS;QAClC,iBAAiB;QACjB,IAAI,EAAE,YAAY,EAAE,IAAI;QACxB,UAAU,EAAE,YAAY,EAAE,UAAU;QACpC,kBAAkB,EAAE,YAAY,EAAE,kBAAkB;QACpD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAA6B,EAAE,MAAc;IAGlE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,IAAA,wBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,IAAA,2BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA6B,EAAE,MAAc;IAKzE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,IAAA,wBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,IAAA,2BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,IAAA,yBAAW,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,6BAA6B,CACpC,QAAiD,EACjD,MAAiG;IAEjG,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAiG,EACjG,OAAmB;IAEnB,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,KAAa;IAC5D,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;AAC1E,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAiG,EACjG,MAAc,EACd,OAAmB,EACnB,IAA6B;IAE7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAqB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;WACpC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;WACxB,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,sCAAsC,CAAC,UAAqB,EAAE,eAAmC;IACxG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,GAAG,SAAS;YACZ,OAAO,EAAE,eAAe;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAkC;IAC7D,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;WACtD,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;WACvC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,SAAS;WAC1C,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA6B;IAC3D,OAAO,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;WAC3D,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;WAChD,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAoC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAoC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB,EAAE,KAAc;IACnE,IAAI,KAAK,YAAY,mDAAsB,EAAE,CAAC;QAC5C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,oDAAuB,EAAE,CAAC;QAC7C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,iEAAoC,EAAE,CAAC;QAC1D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,kEAAqC,EAAE,CAAC;QAC3D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,yDAA4B,EAAE,CAAC;QAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { isNodeAuth, isServiceAuth, isSolidAuth } from '../auth/AuthContext';\nimport { buildRouteSet } from '../../edge/reachability/RouteSetBuilder';\nimport {\n  InvalidRelaySessionRequestError,\n  NodeRouteSourceNotFoundError,\n  P2PActiveSessionLimitExceededError,\n  P2PCandidateSessionLimitExceededError,\n  P2PCandidateUpdateLimitExceededError,\n  P2PSessionExpiredError,\n  P2PSessionNotFoundError,\n  ReachabilitySessionService,\n} from '../../edge/reachability/ReachabilitySessionService';\nimport type { BuildRouteSetSource, P2PCandidateRole, P2PSession, RouteAudience } from '../../edge/reachability/types';\n\nexport interface ReachabilityHandlerOptions {\n  repository: EdgeNodeRepository;\n  baseStorageDomain?: string;\n  apiBaseUrl?: string | (() => string);\n  now?: () => Date;\n  randomId?: () => string;\n  maxActiveP2PSessionsPerNode?: number;\n  maxP2PCandidatesPerUpdate?: number;\n  maxP2PCandidatesPerSession?: number;\n}\n\nexport function registerReachabilityRoutes(server: ApiServer, options: ReachabilityHandlerOptions): void {\n  const service = new ReachabilitySessionService({\n    repository: options.repository,\n    baseStorageDomain: options.baseStorageDomain,\n    apiBaseUrl: options.apiBaseUrl ?? process.env.XPOD_CLOUD_API_ENDPOINT ?? process.env.CSS_BASE_URL ?? 'http://localhost/',\n    now: options.now,\n    randomId: options.randomId,\n    maxActiveP2PSessionsPerNode: options.maxActiveP2PSessionsPerNode\n      ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_ACTIVE_SESSIONS_PER_NODE),\n    maxP2PCandidatesPerUpdate: options.maxP2PCandidatesPerUpdate\n      ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_CANDIDATES_PER_UPDATE),\n    maxP2PCandidatesPerSession: options.maxP2PCandidatesPerSession\n      ?? parsePositiveInteger(process.env.XPOD_P2P_MAX_CANDIDATES_PER_SESSION),\n  });\n\n  server.get('/v1/signal/nodes/:nodeId/routes', async (request, response, params) => {\n    const access = resolveAccess(request, params.nodeId);\n    if (!access.allowed) {\n      sendJson(response, access.status, { error: access.error });\n      return;\n    }\n\n    try {\n      const source = await loadRouteSource(options.repository, params.nodeId, options.baseStorageDomain);\n      const routeSet = buildRouteSet(source, {\n        audience: access.audience,\n        baseStorageDomain: options.baseStorageDomain,\n        now: options.now?.() ?? new Date(),\n      });\n      sendJson(response, 200, routeSet);\n    } catch (error) {\n      if (error instanceof NodeRouteSourceNotFoundError) {\n        sendJson(response, 404, { error: 'Node not found' });\n        return;\n      }\n      sendJson(response, 500, { error: 'Failed to load routes' });\n    }\n  }, { optionalAuth: true });\n\n  server.post('/v1/signal/nodes/:nodeId/sessions', async (request, response, params) => {\n    const access = resolveSessionAccess(request, params.nodeId);\n    if (!access.allowed) {\n      sendJson(response, access.status, { error: access.error });\n      return;\n    }\n\n    const body = await readJsonBody(request);\n    if (!isRecord(body)) {\n      sendJson(response, 400, { error: 'kind must be p2p or relay' });\n      return;\n    }\n\n    if (body.kind === 'p2p') {\n      if (typeof body.clientId !== 'string' || body.clientId.trim().length === 0) {\n        sendJson(response, 400, { error: 'clientId is required' });\n        return;\n      }\n      try {\n        const session = await service.createP2PSession(params.nodeId, {\n          kind: 'p2p',\n          clientId: body.clientId.trim(),\n          ...(access.kind === 'solid' ? { owner: { type: 'solid' as const, webId: access.webId } } : {}),\n          capabilities: Array.isArray(body.capabilities) ? body.capabilities.filter((entry): entry is string => typeof entry === 'string') : [],\n          candidates: enrichP2PCandidatesWithObservedAddress(\n            Array.isArray(body.candidates) ? body.candidates : [],\n            resolveObservedAddress(request),\n          ),\n        });\n        sendJson(response, 201, session);\n      } catch (error) {\n        if (error instanceof NodeRouteSourceNotFoundError) {\n          sendJson(response, 404, { error: 'Node not found' });\n          return;\n        }\n        if (error instanceof P2PActiveSessionLimitExceededError) {\n          sendJson(response, 429, { error: 'P2P active session limit exceeded' });\n          return;\n        }\n        if (error instanceof P2PCandidateUpdateLimitExceededError) {\n          sendJson(response, 429, { error: 'P2P candidate update limit exceeded' });\n          return;\n        }\n        if (error instanceof P2PCandidateSessionLimitExceededError) {\n          sendJson(response, 429, { error: 'P2P candidate session limit exceeded' });\n          return;\n        }\n        sendJson(response, 500, { error: 'Failed to create p2p session' });\n      }\n      return;\n    }\n\n    if (body.kind === 'relay') {\n      if (typeof body.reason !== 'string' || body.reason.trim().length === 0) {\n        sendJson(response, 400, { error: 'reason is required for relay sessions' });\n        return;\n      }\n      try {\n        const session = await service.createRelaySession(params.nodeId, {\n          kind: 'relay',\n          reason: body.reason,\n          ttlSeconds: typeof body.ttlSeconds === 'number' ? body.ttlSeconds : undefined,\n          bandwidthLimitBytes: typeof body.bandwidthLimitBytes === 'number' ? body.bandwidthLimitBytes : undefined,\n          bandwidthLimitBps: typeof body.bandwidthLimitBps === 'number' ? body.bandwidthLimitBps : undefined,\n        });\n        sendJson(response, 201, session);\n      } catch (error) {\n        if (error instanceof InvalidRelaySessionRequestError) {\n          sendJson(response, 400, { error: error.message });\n          return;\n        }\n        if (error instanceof NodeRouteSourceNotFoundError) {\n          sendJson(response, 404, { error: 'Node not found' });\n          return;\n        }\n        sendJson(response, 500, { error: 'Failed to create relay session' });\n      }\n      return;\n    }\n\n    sendJson(response, 400, { error: 'kind must be p2p or relay' });\n  });\n\n  server.get('/v1/signal/nodes/:nodeId/sessions', async (request, response, params) => {\n    const access = resolveSessionAccess(request, params.nodeId);\n    if (!access.allowed) {\n      sendJson(response, access.status, { error: access.error });\n      return;\n    }\n\n    try {\n      const sessions = await service.listP2PSessions(params.nodeId);\n      sendJson(response, 200, filterP2PSessionListForAccess(sessions, access));\n    } catch (error) {\n      if (error instanceof NodeRouteSourceNotFoundError) {\n        sendJson(response, 404, { error: 'Node not found' });\n        return;\n      }\n      sendJson(response, 500, { error: 'Failed to list p2p sessions' });\n    }\n  });\n\n  server.get('/v1/signal/nodes/:nodeId/sessions/:sessionId', async (request, response, params) => {\n    const access = resolveSessionAccess(request, params.nodeId);\n    if (!access.allowed) {\n      sendJson(response, access.status, { error: access.error });\n      return;\n    }\n\n    try {\n      const session = await service.getP2PSession(params.nodeId, params.sessionId);\n      if (!canAccessP2PSession(access, session)) {\n        sendJson(response, 403, { error: 'Solid user cannot access another client signaling session' });\n        return;\n      }\n      sendJson(response, 200, session);\n    } catch (error) {\n      sendP2PSessionError(response, error);\n    }\n  });\n\n  server.post('/v1/signal/nodes/:nodeId/sessions/:sessionId/candidates', async (request, response, params) => {\n    const access = resolveSessionAccess(request, params.nodeId);\n    if (!access.allowed) {\n      sendJson(response, access.status, { error: access.error });\n      return;\n    }\n\n    const body = await readJsonBody(request);\n    if (!isRecord(body) || !Array.isArray(body.candidates)) {\n      sendJson(response, 400, { error: 'candidates array is required' });\n      return;\n    }\n\n    try {\n      const currentSession = await service.getP2PSession(params.nodeId, params.sessionId);\n      if (!canAccessP2PSession(access, currentSession)) {\n        sendJson(response, 403, { error: 'Solid user cannot access another client signaling session' });\n        return;\n      }\n      const source = resolveCandidateSource(access, params.nodeId, currentSession, body);\n      const session = await service.addP2PCandidates(params.nodeId, params.sessionId, {\n        role: source.role,\n        sourceId: source.sourceId,\n        candidates: enrichP2PCandidatesWithObservedAddress(body.candidates, resolveObservedAddress(request)),\n      });\n      sendJson(response, 200, session);\n    } catch (error) {\n      sendP2PSessionError(response, error);\n    }\n  });\n}\n\nasync function loadRouteSource(\n  repository: EdgeNodeRepository,\n  nodeId: string,\n  baseStorageDomain?: string,\n): Promise<BuildRouteSetSource> {\n  const [metadataRow, connectivity] = await Promise.all([\n    repository.getNodeMetadata(nodeId),\n    repository.getNodeConnectivityInfo(nodeId),\n  ]);\n  if (!metadataRow && !connectivity) {\n    throw new NodeRouteSourceNotFoundError(`Node ${nodeId} not found`);\n  }\n  const metadata = metadataRow?.metadata ?? {};\n  return {\n    nodeId,\n    canonicalUrl: getString(metadata.canonicalUrl),\n    publicUrl: connectivity?.publicUrl,\n    subdomain: connectivity?.subdomain,\n    baseStorageDomain,\n    ipv4: connectivity?.ipv4,\n    publicPort: connectivity?.publicPort,\n    connectivityStatus: connectivity?.connectivityStatus,\n    metadata,\n  };\n}\n\nfunction resolveAccess(request: AuthenticatedRequest, nodeId: string):\n  | { allowed: true; audience: RouteAudience }\n  | { allowed: false; status: number; error: string } {\n  const auth = request.auth;\n  if (!auth) {\n    return { allowed: true, audience: 'public' };\n  }\n  if (isNodeAuth(auth)) {\n    if (auth.nodeId !== nodeId) {\n      return { allowed: false, status: 403, error: 'Node token cannot access another node' };\n    }\n    return { allowed: true, audience: 'managed' };\n  }\n  if (isServiceAuth(auth)) {\n    return { allowed: true, audience: 'managed' };\n  }\n  return { allowed: true, audience: 'public' };\n}\n\nfunction resolveSessionAccess(request: AuthenticatedRequest, nodeId: string):\n  | { allowed: true; kind: 'node'; nodeId: string }\n  | { allowed: true; kind: 'service' }\n  | { allowed: true; kind: 'solid'; webId: string }\n  | { allowed: false; status: number; error: string } {\n  const auth = request.auth;\n  if (!auth) {\n    return { allowed: false, status: 401, error: 'Authentication required' };\n  }\n  if (isNodeAuth(auth)) {\n    if (auth.nodeId !== nodeId) {\n      return { allowed: false, status: 403, error: 'Node token cannot access another node' };\n    }\n    return { allowed: true, kind: 'node', nodeId: auth.nodeId };\n  }\n  if (isServiceAuth(auth)) {\n    return { allowed: true, kind: 'service' };\n  }\n  if (isSolidAuth(auth)) {\n    return { allowed: true, kind: 'solid', webId: auth.webId };\n  }\n  return { allowed: false, status: 403, error: 'Unsupported reachability session credentials' };\n}\n\nfunction filterP2PSessionListForAccess(\n  sessions: { kind: 'p2p'; sessions: P2PSession[] },\n  access: { kind: 'node'; nodeId: string } | { kind: 'service' } | { kind: 'solid'; webId: string },\n): { kind: 'p2p'; sessions: P2PSession[] } {\n  if (access.kind !== 'solid') {\n    return sessions;\n  }\n  return {\n    kind: sessions.kind,\n    sessions: sessions.sessions.filter((session) => isOwnedBySolidUser(session, access.webId)),\n  };\n}\n\nfunction canAccessP2PSession(\n  access: { kind: 'node'; nodeId: string } | { kind: 'service' } | { kind: 'solid'; webId: string },\n  session: P2PSession,\n): boolean {\n  return access.kind !== 'solid' || isOwnedBySolidUser(session, access.webId);\n}\n\nfunction isOwnedBySolidUser(session: P2PSession, webId: string): boolean {\n  return session.owner?.type === 'solid' && session.owner.webId === webId;\n}\n\nfunction resolveCandidateSource(\n  access: { kind: 'node'; nodeId: string } | { kind: 'service' } | { kind: 'solid'; webId: string },\n  nodeId: string,\n  session: P2PSession,\n  body: Record<string, unknown>,\n): { role: P2PCandidateRole; sourceId: string } {\n  if (access.kind === 'node') {\n    return { role: 'node', sourceId: nodeId };\n  }\n  if (access.kind === 'solid') {\n    return { role: 'client', sourceId: session.clientId };\n  }\n\n  const role: P2PCandidateRole = body.role === 'node' ? 'node' : 'client';\n  const sourceId = getString(body.sourceId)\n    ?? getString(body.clientId)\n    ?? (role === 'node' ? nodeId : 'service-client');\n  return { role, sourceId };\n}\n\nfunction enrichP2PCandidatesWithObservedAddress(candidates: unknown[], observedAddress: string | undefined): unknown[] {\n  if (!observedAddress) {\n    return candidates;\n  }\n\n  return candidates.map((candidate) => {\n    if (!isRecord(candidate) || !isPortOnlyCandidate(candidate)) {\n      return candidate;\n    }\n    return {\n      ...candidate,\n      address: observedAddress,\n    };\n  });\n}\n\nfunction isPortOnlyCandidate(candidate: Record<string, unknown>): boolean {\n  return normalizeCandidatePort(candidate.port) !== undefined\n    && getString(candidate.host) === undefined\n    && getString(candidate.address) === undefined\n    && getString(candidate.url) === undefined;\n}\n\nfunction normalizeCandidatePort(value: unknown): number | undefined {\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    return undefined;\n  }\n  const port = Math.floor(value);\n  return port > 0 && port <= 65535 ? port : undefined;\n}\n\nfunction resolveObservedAddress(request: AuthenticatedRequest): string | undefined {\n  return firstForwardedAddress(request.headers['x-forwarded-for'])\n    ?? firstHeaderAddress(request.headers['x-real-ip'])\n    ?? normalizeObservedAddress(request.socket?.remoteAddress);\n}\n\nfunction firstForwardedAddress(value: string | string[] | undefined): string | undefined {\n  const first = Array.isArray(value) ? value[0] : value;\n  return firstHeaderAddress(first?.split(',')[0]);\n}\n\nfunction firstHeaderAddress(value: string | string[] | undefined): string | undefined {\n  const first = Array.isArray(value) ? value[0] : value;\n  return normalizeObservedAddress(first);\n}\n\nfunction normalizeObservedAddress(value: string | undefined): string | undefined {\n  const trimmed = value?.trim().replace(/^\"|\"$/gu, '');\n  if (!trimmed) {\n    return undefined;\n  }\n  if (trimmed.startsWith('::ffff:')) {\n    return trimmed.slice('::ffff:'.length);\n  }\n  if (trimmed.startsWith('[') && trimmed.endsWith(']')) {\n    return trimmed.slice(1, -1);\n  }\n  return trimmed;\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendP2PSessionError(response: ServerResponse, error: unknown): void {\n  if (error instanceof P2PSessionExpiredError) {\n    sendJson(response, 410, { error: 'P2P session expired' });\n    return;\n  }\n  if (error instanceof P2PSessionNotFoundError) {\n    sendJson(response, 404, { error: 'P2P session not found' });\n    return;\n  }\n  if (error instanceof P2PCandidateUpdateLimitExceededError) {\n    sendJson(response, 429, { error: 'P2P candidate update limit exceeded' });\n    return;\n  }\n  if (error instanceof P2PCandidateSessionLimitExceededError) {\n    sendJson(response, 429, { error: 'P2P candidate session limit exceeded' });\n    return;\n  }\n  if (error instanceof NodeRouteSourceNotFoundError) {\n    sendJson(response, 404, { error: 'Node not found' });\n    return;\n  }\n  sendJson(response, 500, { error: 'Failed to update p2p session' });\n}\n\nfunction getString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;\n}\n\nfunction parsePositiveInteger(value: string | undefined): number | undefined {\n  const trimmed = getString(value);\n  if (!trimmed) {\n    return undefined;\n  }\n  const parsed = Number.parseInt(trimmed, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);\n}\n"]}

package/dist/api/runs/InngestRunExecutionBackend.d.ts

@@ -147,7 +147,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
@@ -318,7 +318,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {

package/dist/api/tasks/InngestTaskScheduler.d.ts

@@ -128,7 +128,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.materialize_due";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -296,7 +296,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.materialize_due";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -469,7 +469,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.event";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -635,7 +635,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.event";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "attempt" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {

package/dist/components/components.jsonld

@@ -14,6 +14,7 @@
     "undefineds:dist/storage/rdf/PostgresRdfEngine.jsonld",
     "undefineds:dist/dns/DnsProvider.jsonld",
     "undefineds:dist/edge/EdgeNodeCertificateProvisioner.jsonld",
+    "undefineds:dist/edge/EdgeNodeAgent.jsonld",
     "undefineds:dist/edge/interfaces/EdgeNodeTunnelManager.jsonld",
     "undefineds:dist/quota/QuotaService.jsonld",
     "undefineds:dist/quota/EntitlementProvider.jsonld",
@@ -56,7 +57,7 @@
     "undefineds:dist/edge/EdgeNodeTunnelManager.jsonld",
     "undefineds:dist/edge/FrpTunnelManager.jsonld",
     "undefineds:dist/edge/EdgeNodeHealthProbeService.jsonld",
-    "undefineds:dist/edge/EdgeNodeAgent.jsonld",
+    "undefineds:dist/edge/EdgeNodeAgentInitializer.jsonld",
     "undefineds:dist/service/EdgeNodeCertificateService.jsonld",
     "undefineds:dist/edge/acme/AcmeCertificateManager.jsonld",
     "undefineds:dist/edge/EdgeNodeModeDetector.jsonld",
@@ -99,6 +100,17 @@
     "undefineds:dist/api/reconciler/coordination.jsonld",
     "undefineds:dist/api/reconciler/ClientReconcilerCoordinator.jsonld",
     "undefineds:dist/api/reconciler/WakeAgentQueue.jsonld",
-    "undefineds:dist/api/reconciler/ServerGroupReconcilerService.jsonld"
+    "undefineds:dist/api/reconciler/ServerGroupReconcilerService.jsonld",
+    "undefineds:dist/edge/reachability/types.jsonld",
+    "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld",
+    "undefineds:dist/edge/reachability/ManagedRouteSelector.jsonld",
+    "undefineds:dist/edge/reachability/CanonicalFetch.jsonld",
+    "undefineds:dist/edge/reachability/P2PDataPlane.jsonld",
+    "undefineds:dist/edge/reachability/P2PSignalingClient.jsonld",
+    "undefineds:dist/edge/reachability/TcpP2PDataPlaneTransport.jsonld",
+    "undefineds:dist/edge/reachability/TcpP2PSignalingSession.jsonld",
+    "undefineds:dist/edge/reachability/ManagedClientFetch.jsonld",
+    "undefineds:dist/edge/reachability/ManagedClientP2PSmoke.jsonld",
+    "undefineds:dist/edge/reachability/P2PRealnetAcceptance.jsonld"
   ]
 }