* **Security** of the connection. This includes verification of the remote webserver with certificates and the privacy of data exchanged with strong ciphers.

import okhttp3.internal.toImmutableList

/**
 * A specification for a connection to an origin server. For simple connections, this is the
 * server's hostname and port. If an explicit proxy is requested (or [no proxy][Proxy.NO_PROXY] is
 * explicitly requested), this also includes that proxy information. For secure connections the
 * address also includes the SSL socket factory, hostname verifier, and certificate pinner.
 *

     * `ID > lastGoodStreamId` on a new connection.  In- flight streams with
     * `ID <= lastGoodStreamId` can only be replayed on a new connection if they are idempotent.
     *
     * @param lastGoodStreamId the last stream ID the peer processed before sending this message. If
     *     [lastGoodStreamId] is zero, the peer processed no frames.
     * @param errorCode reason for closing the connection.

}

// Returns a peer S3 client.
func newPeerS3Client(node Node) peerS3Client {
	var gridConn atomic.Pointer[grid.Connection]

	return &remotePeerS3Client{
		node: node,
		gridConn: func() *grid.Connection {
			// Lazy initialization of grid connection.
			// When we create this peer client, the grid connection is likely not yet initialized.
			if node.GridHost == "" {

    /**
     * Standard SMB error codes
     */
    public enum ErrorCode {
        // Network errors
        CONNECTION_FAILED("Network connection failed", ErrorCategory.NETWORK, true), CONNECTION_TIMEOUT("Connection timed out",
                ErrorCategory.NETWORK, true), CONNECTION_RESET("Connection reset by peer", ErrorCategory.NETWORK,
                        true), HOST_NOT_FOUND("Host not found", ErrorCategory.NETWORK, false),

          ioe: IOException,
        ) = TODO()

        override fun connectionAcquired(
          call: Call,
          connection: Connection,
        ) = TODO()

        override fun connectionReleased(
          call: Call,
          connection: Connection,
        ) = TODO()

        override fun requestHeadersStart(call: Call) = TODO()

        override fun requestHeadersEnd(

      val logHeaders = logBody || level == Level.HEADERS

      val requestBody = request.body

      val connection = chain.connection()
      var requestStartMessage =
        ("--> ${request.method} ${redactUrl(request.url)}${if (connection != null) " " + connection.protocol() else ""}")
      if (!logHeaders && requestBody != null) {
        requestStartMessage += " (${requestBody.contentLength()}-byte body)"

      // Cleanup log handler if failed.
      logger.removeHandler(loggerHandler)
    }

    override fun connectionAcquired(
      call: Call,
      connection: Connection,
    ) {
      if (random != null) {
        val sslSocket = connection.socket() as SSLSocket
        val session = sslSocket.session

        val masterSecretHex =
          session.masterSecret
            ?.encoded

/**
 * The concrete route used by a connection to reach an abstract origin server. When creating a
 * connection the client has many options:
 *
 *  * **HTTP proxy:** a proxy server may be explicitly configured for the client. Otherwise, the
 *    [proxy selector][java.net.ProxySelector] is used. It may return multiple proxies to attempt.
 *  * **IP address:** whether connecting directly to an origin server or a proxy, opening a socket

     * Connect to the logon share
     *
     * @throws SmbException if the connection fails
     */
    void treeConnectLogon() throws SmbException;

    /**
     * Gets or creates an SMB tree connection for the specified share and service.
     *
     * @param share the share name to connect to
     * @param service the service type for the connection
     * @return tree instance
     */