@undefineds.co/xpod 0.3.53 → 0.3.54

package/dist/edge/reachability/P2PDataPlane.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XPOD_P2P_HTTP_PROTOCOL = void 0;
+exports.createP2PDataPlaneFetch = createP2PDataPlaneFetch;
+exports.createP2PDataPlaneHandler = createP2PDataPlaneHandler;
+exports.XPOD_P2P_HTTP_PROTOCOL = 'xpod-p2p-http/1';
+function createP2PDataPlaneFetch(options) {
+    if (options.route.kind !== 'p2p') {
+        throw new Error(`P2P data plane requires a p2p route, got ${options.route.kind}`);
+    }
+    const canonicalOrigin = new URL(options.route.canonicalUrl).origin;
+    return async (input, init) => {
+        const request = new Request(input, init);
+        const canonicalUrl = new URL(request.url);
+        if (canonicalUrl.origin !== canonicalOrigin) {
+            throw new Error(`Request ${canonicalUrl.toString()} is outside canonical origin ${canonicalOrigin}`);
+        }
+        const frame = {
+            protocol: exports.XPOD_P2P_HTTP_PROTOCOL,
+            method: request.method,
+            url: canonicalUrl.toString(),
+            headers: headersToList(request.headers),
+            bodyBase64: await bodyToBase64(request),
+        };
+        const responseFrame = await options.transport.request(frame);
+        validateResponseFrame(responseFrame);
+        return new Response(base64ToBody(responseFrame.bodyBase64), {
+            status: responseFrame.status,
+            statusText: responseFrame.statusText,
+            headers: new Headers(responseFrame.headers),
+        });
+    };
+}
+function createP2PDataPlaneHandler(options) {
+    const targetBaseUrl = new URL(options.targetBaseUrl.toString());
+    const fetchImpl = options.fetchImpl ?? fetch;
+    return {
+        async handleRequest(frame) {
+            validateRequestFrame(frame);
+            const canonicalUrl = new URL(frame.url);
+            const targetUrl = rewriteTargetUrl(targetBaseUrl, canonicalUrl);
+            const headers = new Headers(frame.headers);
+            removeHopByHopHeaders(headers);
+            headers.set('x-xpod-canonical-url', canonicalUrl.toString());
+            headers.set('x-xpod-canonical-origin', canonicalUrl.origin);
+            headers.set('x-xpod-canonical-host', canonicalUrl.host);
+            const response = await fetchImpl(targetUrl, {
+                method: frame.method,
+                headers,
+                body: methodCanHaveBody(frame.method) ? base64ToBody(frame.bodyBase64) : undefined,
+            });
+            return {
+                protocol: exports.XPOD_P2P_HTTP_PROTOCOL,
+                requestId: frame.requestId,
+                status: response.status,
+                statusText: response.statusText,
+                headers: headersToList(response.headers),
+                bodyBase64: await responseToBase64(response),
+            };
+        },
+    };
+}
+function validateRequestFrame(frame) {
+    if (frame.protocol !== exports.XPOD_P2P_HTTP_PROTOCOL) {
+        throw new Error(`Unsupported P2P HTTP protocol: ${String(frame.protocol)}`);
+    }
+    if (typeof frame.method !== 'string' || frame.method.trim().length === 0) {
+        throw new Error('P2P HTTP request method is required');
+    }
+    try {
+        new URL(frame.url);
+    }
+    catch {
+        throw new Error('P2P HTTP request URL must be absolute');
+    }
+}
+function validateResponseFrame(frame) {
+    if (frame.protocol !== exports.XPOD_P2P_HTTP_PROTOCOL) {
+        throw new Error(`Unsupported P2P HTTP protocol: ${String(frame.protocol)}`);
+    }
+    if (!Number.isInteger(frame.status) || frame.status < 100 || frame.status > 599) {
+        throw new Error(`Invalid P2P HTTP response status: ${String(frame.status)}`);
+    }
+}
+function rewriteTargetUrl(targetBase, canonicalUrl) {
+    const basePath = targetBase.pathname.endsWith('/')
+        ? targetBase.pathname.slice(0, -1)
+        : targetBase.pathname;
+    const targetPath = `${basePath}${canonicalUrl.pathname}`.replace(/\/+/gu, '/');
+    const target = new URL(targetBase.toString());
+    target.pathname = targetPath;
+    target.search = canonicalUrl.search;
+    target.hash = '';
+    return target.toString();
+}
+function headersToList(headers) {
+    const result = [];
+    headers.forEach((value, key) => {
+        if (!isHopByHopHeader(key)) {
+            result.push([key, value]);
+        }
+    });
+    return result;
+}
+function removeHopByHopHeaders(headers) {
+    const keysToDelete = [];
+    headers.forEach((_value, key) => {
+        if (isHopByHopHeader(key)) {
+            keysToDelete.push(key);
+        }
+    });
+    for (const key of keysToDelete) {
+        headers.delete(key);
+    }
+}
+function isHopByHopHeader(key) {
+    switch (key.toLowerCase()) {
+        case 'connection':
+        case 'keep-alive':
+        case 'proxy-authenticate':
+        case 'proxy-authorization':
+        case 'te':
+        case 'trailer':
+        case 'transfer-encoding':
+        case 'upgrade':
+        case 'host':
+        case 'content-length':
+            return true;
+        default:
+            return false;
+    }
+}
+function methodCanHaveBody(method) {
+    const normalized = method.toUpperCase();
+    return normalized !== 'GET' && normalized !== 'HEAD';
+}
+async function bodyToBase64(request) {
+    if (!methodCanHaveBody(request.method)) {
+        return undefined;
+    }
+    const body = await request.arrayBuffer();
+    if (body.byteLength === 0) {
+        return undefined;
+    }
+    return Buffer.from(body).toString('base64');
+}
+async function responseToBase64(response) {
+    const body = await response.arrayBuffer();
+    if (body.byteLength === 0) {
+        return undefined;
+    }
+    return Buffer.from(body).toString('base64');
+}
+function base64ToBody(value) {
+    if (!value) {
+        return undefined;
+    }
+    return Buffer.from(value, 'base64');
+}
+//# sourceMappingURL=P2PDataPlane.js.map

package/dist/edge/reachability/P2PDataPlane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"P2PDataPlane.js","sourceRoot":"","sources":["../../../src/edge/reachability/P2PDataPlane.ts"],"names":[],"mappings":";;;AA6CA,0DA4BC;AAED,8DA+BC;AAxGY,QAAA,sBAAsB,GAAG,iBAA0B,CAAC;AA2CjE,SAAgB,uBAAuB,CAAC,OAAiC;IACvE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;IAEnE,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QAC/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,YAAY,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,CAAC,QAAQ,EAAE,gCAAgC,eAAe,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,KAAK,GAAwB;YACjC,QAAQ,EAAE,8BAAsB;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE;YAC5B,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,UAAU,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC;SACxC,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7D,qBAAqB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE;YAC1D,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,IAAI,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CAAC,OAAmC;IAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,KAA0B;YAC5C,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO;gBACP,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;aACnF,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,8BAAsB;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxC,UAAU,EAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC;aAC7C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA0B;IACtD,IAAI,KAAK,CAAC,QAAQ,KAAK,8BAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA2B;IACxD,IAAI,KAAK,CAAC,QAAQ,KAAK,8BAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAe,EAAE,YAAiB;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;IACxB,MAAM,UAAU,GAAG,GAAG,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC;IAC7B,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACpC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,KAAK,YAAY,CAAC;QAClB,KAAK,YAAY,CAAC;QAClB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,IAAI,CAAC;QACV,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB,CAAC;QACzB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,MAAM,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import type { AccessRoute } from './types';\n\nexport const XPOD_P2P_HTTP_PROTOCOL = 'xpod-p2p-http/1' as const;\n\nexport type P2PHttpProtocol = typeof XPOD_P2P_HTTP_PROTOCOL;\nexport type P2PHttpHeaderList = [string, string][];\n\nexport interface P2PHttpRequestFrame {\n  protocol: P2PHttpProtocol;\n  requestId?: string;\n  method: string;\n  url: string;\n  headers?: P2PHttpHeaderList;\n  bodyBase64?: string;\n}\n\nexport interface P2PHttpResponseFrame {\n  protocol: P2PHttpProtocol;\n  requestId?: string;\n  status: number;\n  statusText?: string;\n  headers?: P2PHttpHeaderList;\n  bodyBase64?: string;\n}\n\nexport interface P2PDataPlaneTransport {\n  request(frame: P2PHttpRequestFrame): Promise<P2PHttpResponseFrame>;\n}\n\nexport interface P2PDataPlaneFetchOptions {\n  route: AccessRoute;\n  transport: P2PDataPlaneTransport;\n}\n\nexport interface P2PDataPlaneHandlerOptions {\n  targetBaseUrl: string | URL;\n  fetchImpl?: typeof fetch;\n}\n\nexport interface P2PDataPlaneHandler {\n  handleRequest(frame: P2PHttpRequestFrame): Promise<P2PHttpResponseFrame>;\n}\n\nexport type P2PDataPlaneFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;\n\nexport function createP2PDataPlaneFetch(options: P2PDataPlaneFetchOptions): P2PDataPlaneFetch {\n  if (options.route.kind !== 'p2p') {\n    throw new Error(`P2P data plane requires a p2p route, got ${options.route.kind}`);\n  }\n  const canonicalOrigin = new URL(options.route.canonicalUrl).origin;\n\n  return async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {\n    const request = new Request(input, init);\n    const canonicalUrl = new URL(request.url);\n    if (canonicalUrl.origin !== canonicalOrigin) {\n      throw new Error(`Request ${canonicalUrl.toString()} is outside canonical origin ${canonicalOrigin}`);\n    }\n\n    const frame: P2PHttpRequestFrame = {\n      protocol: XPOD_P2P_HTTP_PROTOCOL,\n      method: request.method,\n      url: canonicalUrl.toString(),\n      headers: headersToList(request.headers),\n      bodyBase64: await bodyToBase64(request),\n    };\n    const responseFrame = await options.transport.request(frame);\n    validateResponseFrame(responseFrame);\n    return new Response(base64ToBody(responseFrame.bodyBase64), {\n      status: responseFrame.status,\n      statusText: responseFrame.statusText,\n      headers: new Headers(responseFrame.headers),\n    });\n  };\n}\n\nexport function createP2PDataPlaneHandler(options: P2PDataPlaneHandlerOptions): P2PDataPlaneHandler {\n  const targetBaseUrl = new URL(options.targetBaseUrl.toString());\n  const fetchImpl = options.fetchImpl ?? fetch;\n\n  return {\n    async handleRequest(frame: P2PHttpRequestFrame): Promise<P2PHttpResponseFrame> {\n      validateRequestFrame(frame);\n      const canonicalUrl = new URL(frame.url);\n      const targetUrl = rewriteTargetUrl(targetBaseUrl, canonicalUrl);\n      const headers = new Headers(frame.headers);\n      removeHopByHopHeaders(headers);\n      headers.set('x-xpod-canonical-url', canonicalUrl.toString());\n      headers.set('x-xpod-canonical-origin', canonicalUrl.origin);\n      headers.set('x-xpod-canonical-host', canonicalUrl.host);\n\n      const response = await fetchImpl(targetUrl, {\n        method: frame.method,\n        headers,\n        body: methodCanHaveBody(frame.method) ? base64ToBody(frame.bodyBase64) : undefined,\n      });\n\n      return {\n        protocol: XPOD_P2P_HTTP_PROTOCOL,\n        requestId: frame.requestId,\n        status: response.status,\n        statusText: response.statusText,\n        headers: headersToList(response.headers),\n        bodyBase64: await responseToBase64(response),\n      };\n    },\n  };\n}\n\nfunction validateRequestFrame(frame: P2PHttpRequestFrame): void {\n  if (frame.protocol !== XPOD_P2P_HTTP_PROTOCOL) {\n    throw new Error(`Unsupported P2P HTTP protocol: ${String(frame.protocol)}`);\n  }\n  if (typeof frame.method !== 'string' || frame.method.trim().length === 0) {\n    throw new Error('P2P HTTP request method is required');\n  }\n  try {\n    new URL(frame.url);\n  } catch {\n    throw new Error('P2P HTTP request URL must be absolute');\n  }\n}\n\nfunction validateResponseFrame(frame: P2PHttpResponseFrame): void {\n  if (frame.protocol !== XPOD_P2P_HTTP_PROTOCOL) {\n    throw new Error(`Unsupported P2P HTTP protocol: ${String(frame.protocol)}`);\n  }\n  if (!Number.isInteger(frame.status) || frame.status < 100 || frame.status > 599) {\n    throw new Error(`Invalid P2P HTTP response status: ${String(frame.status)}`);\n  }\n}\n\nfunction rewriteTargetUrl(targetBase: URL, canonicalUrl: URL): string {\n  const basePath = targetBase.pathname.endsWith('/')\n    ? targetBase.pathname.slice(0, -1)\n    : targetBase.pathname;\n  const targetPath = `${basePath}${canonicalUrl.pathname}`.replace(/\\/+/gu, '/');\n  const target = new URL(targetBase.toString());\n  target.pathname = targetPath;\n  target.search = canonicalUrl.search;\n  target.hash = '';\n  return target.toString();\n}\n\nfunction headersToList(headers: Headers): P2PHttpHeaderList {\n  const result: P2PHttpHeaderList = [];\n  headers.forEach((value, key) => {\n    if (!isHopByHopHeader(key)) {\n      result.push([key, value]);\n    }\n  });\n  return result;\n}\n\nfunction removeHopByHopHeaders(headers: Headers): void {\n  const keysToDelete: string[] = [];\n  headers.forEach((_value, key) => {\n    if (isHopByHopHeader(key)) {\n      keysToDelete.push(key);\n    }\n  });\n  for (const key of keysToDelete) {\n    headers.delete(key);\n  }\n}\n\nfunction isHopByHopHeader(key: string): boolean {\n  switch (key.toLowerCase()) {\n    case 'connection':\n    case 'keep-alive':\n    case 'proxy-authenticate':\n    case 'proxy-authorization':\n    case 'te':\n    case 'trailer':\n    case 'transfer-encoding':\n    case 'upgrade':\n    case 'host':\n    case 'content-length':\n      return true;\n    default:\n      return false;\n  }\n}\n\nfunction methodCanHaveBody(method: string): boolean {\n  const normalized = method.toUpperCase();\n  return normalized !== 'GET' && normalized !== 'HEAD';\n}\n\nasync function bodyToBase64(request: Request): Promise<string | undefined> {\n  if (!methodCanHaveBody(request.method)) {\n    return undefined;\n  }\n  const body = await request.arrayBuffer();\n  if (body.byteLength === 0) {\n    return undefined;\n  }\n  return Buffer.from(body).toString('base64');\n}\n\nasync function responseToBase64(response: Response): Promise<string | undefined> {\n  const body = await response.arrayBuffer();\n  if (body.byteLength === 0) {\n    return undefined;\n  }\n  return Buffer.from(body).toString('base64');\n}\n\nfunction base64ToBody(value?: string): BodyInit | undefined {\n  if (!value) {\n    return undefined;\n  }\n  return Buffer.from(value, 'base64');\n}\n"]}

package/dist/edge/reachability/P2PDataPlane.jsonld

@@ -0,0 +1,134 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame",
+      "@type": "AbstractClass",
+      "requireElement": "P2PHttpRequestFrame",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_protocol",
+          "memberFieldName": "protocol"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_requestId",
+          "memberFieldName": "requestId"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_method",
+          "memberFieldName": "method"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_url",
+          "memberFieldName": "url"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_headers",
+          "memberFieldName": "headers"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpRequestFrame__member_bodyBase64",
+          "memberFieldName": "bodyBase64"
+        }
+      ],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame",
+      "@type": "AbstractClass",
+      "requireElement": "P2PHttpResponseFrame",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_protocol",
+          "memberFieldName": "protocol"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_requestId",
+          "memberFieldName": "requestId"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_status",
+          "memberFieldName": "status"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_statusText",
+          "memberFieldName": "statusText"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_headers",
+          "memberFieldName": "headers"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PHttpResponseFrame__member_bodyBase64",
+          "memberFieldName": "bodyBase64"
+        }
+      ],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneTransport",
+      "@type": "AbstractClass",
+      "requireElement": "P2PDataPlaneTransport",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneTransport__member_request",
+          "memberFieldName": "request"
+        }
+      ],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneFetchOptions",
+      "@type": "AbstractClass",
+      "requireElement": "P2PDataPlaneFetchOptions",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneFetchOptions__member_route",
+          "memberFieldName": "route"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneFetchOptions__member_transport",
+          "memberFieldName": "transport"
+        }
+      ],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneHandlerOptions",
+      "@type": "AbstractClass",
+      "requireElement": "P2PDataPlaneHandlerOptions",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneHandlerOptions__member_targetBaseUrl",
+          "memberFieldName": "targetBaseUrl"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneHandlerOptions__member_fetchImpl",
+          "memberFieldName": "fetchImpl"
+        }
+      ],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneHandler",
+      "@type": "AbstractClass",
+      "requireElement": "P2PDataPlaneHandler",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/P2PDataPlane.jsonld#P2PDataPlaneHandler__member_handleRequest",
+          "memberFieldName": "handleRequest"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/edge/reachability/P2PRealnetAcceptance.d.ts

@@ -0,0 +1,74 @@
+export interface P2PRealnetAcceptancePlanOptions {
+    apiBaseUrl: string;
+    nodeId: string;
+    nodeToken: string;
+    baseUrl: string;
+    targetBaseUrl: string;
+    nodeHost?: string;
+    nodeAddress?: string;
+    nodeLocalAddress?: string;
+    clientHost?: string;
+    clientAddress?: string;
+    clientLocalAddress?: string;
+    clientId: string;
+    token?: string;
+    resourceUrl: string;
+    runTimeoutMs?: number;
+    connectTimeoutMs?: number;
+    waitTimeoutMs?: number;
+    requestTimeoutMs?: number;
+    pollIntervalMs?: number;
+    winnerSelectionWindowMs?: number;
+    windowSeconds?: number;
+    maxClockErrorSeconds?: number;
+    minRunWindowSeconds?: number;
+    numPorts?: number;
+    basePort?: number;
+    portRange?: number;
+}
+export interface P2PRealnetAcceptanceCommand {
+    role: 'node' | 'client';
+    command: string[];
+    shell: string;
+    description: string;
+}
+export interface P2PRealnetAcceptanceMobilePlan {
+    appLabel: 'LinX P2P Smoke';
+    packageName: 'com.linxmobile.p2psmoke';
+    fields: {
+        idpUrl: string;
+        storageUrl: string;
+        clientId: string;
+        resourcePath: string;
+    };
+    description: string;
+}
+export interface P2PRealnetAcceptancePlan {
+    kind: 'raw-tcp-p2p-realnet-acceptance';
+    node: P2PRealnetAcceptanceCommand;
+    client: P2PRealnetAcceptanceCommand;
+    mobile: P2PRealnetAcceptanceMobilePlan;
+    successCriteria: string[];
+    routeFallbacksPreserved: string[];
+    caveats: string[];
+}
+export interface P2PRealnetAcceptanceVerifyOptions {
+    clientId: string;
+    expectedStatus?: number;
+    expectedPutStatus?: number;
+    requirePutStatus2xx?: boolean;
+    nodeResult: unknown;
+    clientResult: unknown;
+}
+export interface P2PRealnetAcceptanceCheck {
+    name: string;
+    ok: boolean;
+    detail: string;
+}
+export interface P2PRealnetAcceptanceVerification {
+    smokeOk: boolean;
+    checks: P2PRealnetAcceptanceCheck[];
+    routeFallbacksPreserved: string[];
+}
+export declare function createP2PRealnetAcceptancePlan(options: P2PRealnetAcceptancePlanOptions): P2PRealnetAcceptancePlan;
+export declare function verifyP2PRealnetAcceptance(options: P2PRealnetAcceptanceVerifyOptions): P2PRealnetAcceptanceVerification;

package/dist/edge/reachability/P2PRealnetAcceptance.js

@@ -0,0 +1,240 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createP2PRealnetAcceptancePlan = createP2PRealnetAcceptancePlan;
+exports.verifyP2PRealnetAcceptance = verifyP2PRealnetAcceptance;
+const FALLBACKS = ['Cloudflare Tunnel', 'FRP/SakuraFRP'];
+function createP2PRealnetAcceptancePlan(options) {
+    const apiBaseUrl = ensureTrailingSlash(options.apiBaseUrl);
+    const signalEndpoint = new URL('/v1/signal', apiBaseUrl).toString();
+    const nodeCommand = compactCommand([
+        'bun',
+        'run',
+        'smoke:p2p:node-accept',
+        '--signal-endpoint',
+        signalEndpoint,
+        '--node-id',
+        options.nodeId,
+        '--node-token',
+        options.nodeToken,
+        '--base-url',
+        options.baseUrl,
+        '--target-base-url',
+        options.targetBaseUrl,
+        ...optionalPair('--host', options.nodeHost),
+        ...optionalPair('--address', options.nodeAddress),
+        ...optionalPair('--local-address', options.nodeLocalAddress),
+        ...optionalNumberPair('--connect-timeout-ms', options.connectTimeoutMs),
+        ...optionalNumberPair('--winner-selection-window-ms', options.winnerSelectionWindowMs),
+        ...optionalNumberPair('--run-timeout-ms', options.runTimeoutMs),
+        '--require-accept',
+    ]);
+    const clientCommand = compactCommand([
+        'bun',
+        'run',
+        'smoke:p2p:managed',
+        '--api-base-url',
+        apiBaseUrl,
+        '--node-id',
+        options.nodeId,
+        '--client-id',
+        options.clientId,
+        ...optionalPair('--token', options.token),
+        ...optionalPair('--host', options.clientHost),
+        ...optionalPair('--address', options.clientAddress),
+        ...optionalPair('--local-address', options.clientLocalAddress),
+        '--resource-url',
+        options.resourceUrl,
+        ...optionalNumberPair('--connect-timeout-ms', options.connectTimeoutMs),
+        ...optionalNumberPair('--winner-selection-window-ms', options.winnerSelectionWindowMs),
+        ...optionalNumberPair('--wait-timeout-ms', options.waitTimeoutMs),
+        ...optionalNumberPair('--poll-interval-ms', options.pollIntervalMs),
+        ...optionalNumberPair('--request-timeout-ms', options.requestTimeoutMs),
+        ...optionalNumberPair('--window-seconds', options.windowSeconds),
+        ...optionalNumberPair('--max-clock-error-seconds', options.maxClockErrorSeconds),
+        ...optionalNumberPair('--min-run-window-seconds', options.minRunWindowSeconds),
+        ...optionalNumberPair('--num-ports', options.numPorts),
+        ...optionalNumberPair('--base-port', options.basePort),
+        ...optionalNumberPair('--port-range', options.portRange),
+        '--require-p2p',
+    ]);
+    return {
+        kind: 'raw-tcp-p2p-realnet-acceptance',
+        node: {
+            role: 'node',
+            command: nodeCommand,
+            shell: shellQuoteCommand(nodeCommand),
+            description: 'Run this on the local node/SP machine that can reach the local CSS/SP target base URL.',
+        },
+        client: {
+            role: 'client',
+            command: clientCommand,
+            shell: shellQuoteCommand(clientCommand),
+            description: 'Run this from a second non-browser runtime on another network/device.',
+        },
+        mobile: createMobilePlan(options),
+        successCriteria: [
+            `node accepted at least one raw TCP P2P session for client ${options.clientId}`,
+            'client selected route.kind=p2p and route.id=p2p-raw-tcp',
+            'client emitted a raw TCP connector success event',
+            'client evidence reports clientAddress=signal-observed',
+            'node accepted evidence for the same client reports nodeAddress=signal-observed',
+            'canonical Solid HTTP request returned the expected status over xpod-p2p-http/1',
+            'mobile write/read validation may require both putStatus and status to match expected 2xx values',
+            'both peers may omit host/address and rely on signal-observed address enrichment for port-only candidates',
+            'Cloudflare Tunnel and FRP/SakuraFRP remain available as independent user-tunnel fallback routes',
+        ],
+        routeFallbacksPreserved: [...FALLBACKS],
+        caveats: [
+            'This is for non-browser runtimes only; it does not prove browser P2P because browsers cannot open raw TCP sockets.',
+            'A successful loopback/local smoke is not enough; run the node and client commands from separate network contexts for cross-NAT evidence.',
+            'When host/address is omitted, signal injects the observed address for port-only candidates; observed address discovery does not guarantee NAT reachability.',
+            'Mobile smoke evidence must still be verified with the same realnet verifier; phone USB is only for install/log collection, not the data plane.',
+            'Cloudflare Tunnel and FRP/SakuraFRP remain fallback routes and are not replaced by raw TCP P2P.',
+        ],
+    };
+}
+function verifyP2PRealnetAcceptance(options) {
+    const node = asRecord(options.nodeResult);
+    const client = asRecord(options.clientResult);
+    const accepted = Array.isArray(node.accepted) ? node.accepted.filter(asRecord) : [];
+    const route = asRecord(client.route);
+    const connectorEvents = Array.isArray(client.connectorEvents) ? client.connectorEvents.filter(asRecord) : [];
+    const routeFallbacksPreserved = fallbackEvidence(node);
+    const checks = [
+        {
+            name: 'node smoke ok',
+            ok: node.smokeOk === true,
+            detail: node.smokeOk === true ? 'node runner reported smokeOk=true' : 'node runner did not report smokeOk=true',
+        },
+        {
+            name: 'node accepted client',
+            ok: accepted.some((event) => event.clientId === options.clientId),
+            detail: accepted.length > 0
+                ? `accepted clients: ${accepted.map((event) => String(event.clientId ?? '<unknown>')).join(', ')}`
+                : 'node runner accepted no sessions',
+        },
+        {
+            name: 'client smoke ok',
+            ok: client.smokeOk === true,
+            detail: client.smokeOk === true ? 'client runner reported smokeOk=true' : 'client runner did not report smokeOk=true',
+        },
+        {
+            name: 'client selected p2p route',
+            ok: route.kind === 'p2p',
+            detail: `client route.kind=${String(route.kind ?? '<missing>')}`,
+        },
+        {
+            name: 'raw tcp connector succeeded',
+            ok: connectorEvents.some((event) => event.type === 'success'),
+            detail: connectorEvents.length > 0
+                ? `connector events: ${connectorEvents.map((event) => String(event.type ?? '<unknown>')).join(', ')}`
+                : 'client runner emitted no connector events',
+        },
+        {
+            name: 'client address came from signal',
+            ok: client.clientAddress === 'signal-observed',
+            detail: `clientAddress=${String(client.clientAddress ?? '<missing>')}`,
+        },
+        {
+            name: 'node address came from signal',
+            ok: accepted.some((event) => event.clientId === options.clientId && event.nodeAddress === 'signal-observed'),
+            detail: accepted.length > 0
+                ? `accepted nodeAddress evidence: ${accepted.map((event) => `${String(event.clientId ?? '<unknown>')}=${String(event.nodeAddress ?? '<missing>')}`).join(', ')}`
+                : 'node runner accepted no sessions',
+        },
+        {
+            name: 'expected http status',
+            ok: options.expectedStatus === undefined || client.status === options.expectedStatus,
+            detail: options.expectedStatus === undefined
+                ? 'no expected HTTP status was configured'
+                : `client status=${String(client.status ?? '<missing>')}, expected=${options.expectedStatus}`,
+        },
+        {
+            name: 'expected write http status',
+            ok: options.expectedPutStatus === undefined || client.putStatus === options.expectedPutStatus,
+            detail: options.expectedPutStatus === undefined
+                ? 'no expected write HTTP status was configured'
+                : `client putStatus=${String(client.putStatus ?? '<missing>')}, expected=${options.expectedPutStatus}`,
+        },
+        {
+            name: 'write http status is 2xx',
+            ok: options.requirePutStatus2xx !== true || is2xxStatus(client.putStatus),
+            detail: options.requirePutStatus2xx !== true
+                ? '2xx write HTTP status was not required'
+                : `client putStatus=${String(client.putStatus ?? '<missing>')}`,
+        },
+        {
+            name: 'tunnel fallbacks preserved',
+            ok: FALLBACKS.every((fallback) => routeFallbacksPreserved.includes(fallback)),
+            detail: `fallback evidence: ${routeFallbacksPreserved.join(', ') || '<none>'}`,
+        },
+    ];
+    return {
+        smokeOk: checks.every((check) => check.ok),
+        checks,
+        routeFallbacksPreserved,
+    };
+}
+function createMobilePlan(options) {
+    const resource = new URL(options.resourceUrl);
+    const storageUrl = `${resource.origin}/`;
+    return {
+        appLabel: 'LinX P2P Smoke',
+        packageName: 'com.linxmobile.p2psmoke',
+        fields: {
+            idpUrl: deriveIdpBaseUrlFromApiBaseUrl(options.apiBaseUrl),
+            storageUrl,
+            clientId: options.clientId,
+            resourcePath: resource.pathname,
+        },
+        description: 'Install/run the mobile smoke package over USB/ADB/HDB/Xcode, log in on-device, and use the same clientId as the node acceptance command. The app obtains auth from its own client session; no signal token is a human input.',
+    };
+}
+function deriveIdpBaseUrlFromApiBaseUrl(apiBaseUrl) {
+    const api = new URL(ensureTrailingSlash(apiBaseUrl));
+    const labels = api.hostname.split('.');
+    if (labels[0] === 'api' && labels.length > 1) {
+        labels[0] = 'id';
+    }
+    return `${api.protocol}//${labels.join('.')}/`;
+}
+function optionalPair(name, value) {
+    return value === undefined || value.length === 0 ? [] : [name, value];
+}
+function optionalNumberPair(name, value) {
+    return value === undefined ? [] : [name, String(value)];
+}
+function compactCommand(parts) {
+    return parts.filter((part) => part.length > 0);
+}
+function shellQuoteCommand(command) {
+    return command.map(shellQuote).join(' ');
+}
+function shellQuote(value) {
+    if (/^[A-Za-z0-9_./:=@+-]+$/u.test(value)) {
+        return value;
+    }
+    return `'${value.replace(/'/gu, `'\\''`)}'`;
+}
+function ensureTrailingSlash(value) {
+    return value.endsWith('/') ? value : `${value}/`;
+}
+function asRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function is2xxStatus(value) {
+    return typeof value === 'number' && Number.isInteger(value) && value >= 200 && value <= 299;
+}
+function fallbackEvidence(node) {
+    const explicit = Array.isArray(node.routeFallbacksPreserved)
+        ? node.routeFallbacksPreserved.filter((value) => typeof value === 'string')
+        : [];
+    const caveats = Array.isArray(node.caveats)
+        ? node.caveats.filter((value) => typeof value === 'string').join('\n')
+        : '';
+    return [...new Set([
+            ...explicit,
+            ...FALLBACKS.filter((fallback) => caveats.includes(fallback)),
+        ])];
+}
+//# sourceMappingURL=P2PRealnetAcceptance.js.map