@erfan_bahramali/tping 1.0.0

package/dist/mtproto/connection.js

@@ -0,0 +1,198 @@
+import { Socket } from 'net';
+import { randomBytes } from 'crypto';
+import { initObfuscation } from './obfuscation.js';
+import { parseSecret, generateFakeTLSClientHello, wrapInTLSRecords, extractTlsRecords, tryVerifyFakeTLSServerHello, } from './fake-tls.js';
+import { buildReqPqMulti, buildUnencryptedMessage, generateMessageId, parseResPQ, } from './messages.js';
+/**
+ * MTProto proxy connection supporting both simple (dd) and fake TLS (ee) modes.
+ *
+ * A ping is a real MTProto handshake: req_pq_multi is sent and a valid ResPQ
+ * must come back from the Telegram datacenter. In fake TLS mode the proxy's
+ * ServerHello is also verified against an HMAC of the proxy secret, so a wrong
+ * secret is detected immediately.
+ */
+export class MTProtoConnection {
+    options;
+    socket;
+    encryptor;
+    decryptor;
+    isFakeTLS = false;
+    receiveBuffer = Buffer.alloc(0);
+    pending = null;
+    phase = 'handshake';
+    clientRandom;
+    constructor(options) {
+        this.options = options;
+        this.socket = new Socket();
+        this.socket.on('data', (data) => this.onData(data));
+        this.socket.on('error', () => { });
+        this.socket.on('close', () => this.failPending('Connection closed by proxy'));
+    }
+    /**
+     * Connect to the MTProto proxy and perform the obfuscation (+ fake TLS) handshake.
+     * Resolves only after the proxy's ServerHello is HMAC-verified (fake TLS mode).
+     */
+    async connect() {
+        const { host, port, secret, dcId = 2, timeout = 10000 } = this.options;
+        const parsed = parseSecret(secret);
+        this.isFakeTLS = parsed.isFakeTLS;
+        const { header, encryptor, decryptor } = initObfuscation(parsed.secret, dcId);
+        this.encryptor = encryptor;
+        this.decryptor = decryptor;
+        await new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.socket.destroy();
+                reject(new Error('Connection timeout'));
+            }, timeout);
+            const onError = (err) => {
+                clearTimeout(timer);
+                reject(err);
+            };
+            this.socket.once('error', onError);
+            this.socket.connect(port, host, () => {
+                clearTimeout(timer);
+                this.socket.off('error', onError);
+                resolve();
+            });
+        });
+        this.socket.write(header);
+        if (this.isFakeTLS && parsed.domain) {
+            const clientHello = generateFakeTLSClientHello(parsed.domain, parsed.secret);
+            this.clientRandom = clientHello.subarray(11, 43);
+            this.socket.write(clientHello);
+            // ServerHello = ServerHello + ChangeCipherSpec + one ApplicationData record.
+            const verdict = await this.awaitVerdict(parsed.secret, timeout);
+            if (verdict === 'invalid') {
+                throw new Error('FakeTLS handshake failed (bad secret or not a proxy)');
+            }
+        }
+    }
+    /**
+     * Send a real MTProto ping: req_pq_multi and wait for a valid ResPQ.
+     *
+     * @returns Round-trip time in ms
+     */
+    async ping(timeout = 10000) {
+        if (!this.encryptor || !this.decryptor) {
+            throw new Error('Not connected');
+        }
+        const nonce = randomBytes(16);
+        const message = buildUnencryptedMessage(buildReqPqMulti(nonce), generateMessageId());
+        // Intermediate transport framing: 4-byte LE length prefix before the message.
+        const framed = Buffer.alloc(4 + message.length);
+        framed.writeUInt32LE(message.length, 0);
+        message.copy(framed, 4);
+        const payload = this.isFakeTLS
+            ? wrapInTLSRecords(this.encryptor.encrypt(framed))
+            : this.encryptor.encrypt(framed);
+        const start = Date.now();
+        this.phase = 'ping';
+        this.receiveBuffer = Buffer.alloc(0);
+        const response = await new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending = null;
+                reject(new Error('Ping timeout'));
+            }, timeout);
+            this.pending = (data) => {
+                clearTimeout(timer);
+                this.pending = null;
+                resolve(data);
+            };
+            this.socket.write(payload);
+        });
+        this.phase = 'done';
+        const parsed = parseResPQ(response);
+        if (!parsed || !parsed.nonce.equals(nonce)) {
+            throw new Error('Invalid ResPQ response');
+        }
+        return Date.now() - start;
+    }
+    /**
+     * Connect + single real ping in one call. Closes the connection afterwards.
+     */
+    static async pingOnce(options, timeout = 10000) {
+        const conn = new MTProtoConnection(options);
+        try {
+            await conn.connect();
+            return await conn.ping(timeout);
+        }
+        finally {
+            conn.close();
+        }
+    }
+    /**
+     * Handle incoming socket data depending on the current phase.
+     */
+    onData(data) {
+        if (this.phase === 'handshake') {
+            this.receiveBuffer = Buffer.concat([this.receiveBuffer, data]);
+            const handler = this.pending;
+            if (handler)
+                handler(this.receiveBuffer);
+            return;
+        }
+        if (this.phase !== 'ping' || !this.decryptor) {
+            return;
+        }
+        // Ping phase: decrypt, strip TLS records, feed the MTProto stream.
+        const decrypted = this.decryptor.encrypt(data);
+        const { payload } = this.isFakeTLS ? extractTlsRecords(decrypted) : { payload: decrypted };
+        this.receiveBuffer = Buffer.concat([this.receiveBuffer, payload]);
+        // Intermediate framed message: 4-byte LE length then the message.
+        // Pass the whole frame (length prefix included) so parseResPQ sees it.
+        if (this.receiveBuffer.length >= 4) {
+            const len = this.receiveBuffer.readUInt32LE(0);
+            if (this.receiveBuffer.length >= 4 + len) {
+                const handler = this.pending;
+                if (handler)
+                    handler(this.receiveBuffer.subarray(0, 4 + len));
+            }
+        }
+    }
+    /**
+     * Wait until the FakeTLS ServerHello can be verified.
+     */
+    async awaitVerdict(proxySecret, timeout) {
+        const clientRandom = this.clientRandom;
+        const started = this.receiveBuffer;
+        this.receiveBuffer = Buffer.alloc(0);
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending = null;
+                reject(new Error('FakeTLS handshake timeout'));
+            }, timeout);
+            const check = (data) => {
+                const verdict = tryVerifyFakeTLSServerHello(data, clientRandom, proxySecret);
+                if (verdict !== 'incomplete') {
+                    clearTimeout(timer);
+                    this.pending = null;
+                    resolve(verdict);
+                }
+            };
+            this.pending = check;
+            if (started.length > 0)
+                check(started);
+        });
+    }
+    /**
+     * Reject any pending waiters (socket closed mid-handshake/ping).
+     */
+    failPending(_reason) {
+        const handler = this.pending;
+        this.pending = null;
+        if (handler) {
+            if (this.phase === 'ping') {
+                handler(Buffer.alloc(0)); // empty data -> parse fails -> error surfaces
+            }
+            // Handshake waiters resolve via their timeout; socket is gone anyway.
+        }
+    }
+    /**
+     * Close the connection.
+     */
+    close() {
+        this.phase = 'done';
+        this.socket.destroy();
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/mtproto/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/mtproto/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,GACX,MAAM,eAAe,CAAC;AAYvB;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAUR;IATZ,MAAM,CAAS;IACf,SAAS,CAAU;IACnB,SAAS,CAAU;IACnB,SAAS,GAAG,KAAK,CAAC;IAClB,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,GAAoC,IAAI,CAAC;IAChD,KAAK,GAAU,WAAW,CAAC;IAC3B,YAAY,CAAU;IAE9B,YAAoB,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEvE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAElC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC1C,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1B,IAAI,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7E,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE/B,6EAA6E;YAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,uBAAuB,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAErF,8EAA8E;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACpC,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QAEpB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAiC,EAAE,OAAO,GAAG,KAAK;QACtE,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QAElE,kEAAkE;QAClE,uEAAuE;QACvE,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC7B,IAAI,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,WAAmB,EACnB,OAAe;QAEf,MAAM,YAAY,GAAG,IAAI,CAAC,YAAa,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACjD,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;gBAC7B,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC7E,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;oBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACpB,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8CAA8C;YAC1E,CAAC;YACD,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/mtproto/fake-tls.d.ts

@@ -0,0 +1,56 @@
+/**
+ * FakeTLS layer for MTProto proxies (secret with "ee" prefix).
+ */
+/**
+ * Parse MTProto proxy secret and extract components.
+ */
+export interface ParsedSecret {
+    secret: Buffer;
+    domain?: string;
+    isFakeTLS: boolean;
+}
+/**
+ * Parse MTProto proxy secret (dd or ee prefix).
+ *
+ * @param secretHex - Hex-encoded secret (with or without dd/ee prefix)
+ */
+export declare function parseSecret(secretHex: string): ParsedSecret;
+/**
+ * TLS record content types.
+ */
+export declare const TLS_RECORD: {
+    readonly CHANGE_CIPHER_SPEC: 20;
+    readonly ALERT: 21;
+    readonly HANDSHAKE: 22;
+    readonly APPLICATION_DATA: 23;
+};
+/**
+ * Generate a FakeTLS ClientHello with a valid HMAC digest in the client random,
+ * exactly as official Telegram clients do. The proxy verifies this digest.
+ *
+ * @param domain - SNI domain from the ee secret
+ * @param secret - 16-byte proxy secret
+ */
+export declare function generateFakeTLSClientHello(domain: string, secret: Buffer): Buffer;
+/**
+ * Wrap data into TLS Application Data record(s).
+ */
+export declare function wrapInTLSRecords(data: Buffer): Buffer;
+/**
+ * Extract complete TLS record payloads from a stream buffer.
+ *
+ * @returns Concatenated payload of complete records and the remaining (incomplete) buffer
+ */
+export declare function extractTlsRecords(buffer: Buffer): {
+    payload: Buffer;
+    rest: Buffer;
+};
+/**
+ * Try to read and verify the proxy's ServerHello response.
+ * The proxy answers with exactly 3 records: ServerHello + ChangeCipherSpec + noise AppData,
+ * placing HMAC(secret, clientRandom || records-with-zeroed-digest) at RANDOM_OFFSET.
+ *
+ * @returns 'incomplete' while waiting for more bytes, 'valid' or 'invalid' when decided
+ */
+export declare function tryVerifyFakeTLSServerHello(buffer: Buffer, clientRandom: Buffer, secret: Buffer): 'incomplete' | 'valid' | 'invalid';
+//# sourceMappingURL=fake-tls.d.ts.map

package/dist/mtproto/fake-tls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-tls.d.ts","sourceRoot":"","sources":["../../src/mtproto/fake-tls.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CA0B3D;AAED;;GAEG;AACH,eAAO,MAAM,UAAU;;;;;CAKb,CAAC;AA+BX;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAkDjF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAarD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUnF;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,YAAY,GAAG,OAAO,GAAG,SAAS,CAmBpC"}

package/dist/mtproto/fake-tls.js

@@ -0,0 +1,175 @@
+import { createHmac, randomBytes } from 'crypto';
+/**
+ * Parse MTProto proxy secret (dd or ee prefix).
+ *
+ * @param secretHex - Hex-encoded secret (with or without dd/ee prefix)
+ */
+export function parseSecret(secretHex) {
+    const hex = secretHex.toLowerCase().replace(/[^0-9a-f]/g, '');
+    if (hex.startsWith('dd')) {
+        const secret = Buffer.from(hex.slice(2), 'hex');
+        if (secret.length !== 16) {
+            throw new Error('dd secret must be 16 bytes');
+        }
+        return { secret, isFakeTLS: false };
+    }
+    if (hex.startsWith('ee')) {
+        const rest = hex.slice(2);
+        if (rest.length < 32) {
+            throw new Error('ee secret must have at least 16 bytes');
+        }
+        const secret = Buffer.from(rest.slice(0, 32), 'hex');
+        const domain = rest.length > 32 ? Buffer.from(rest.slice(32), 'hex').toString('ascii') : undefined;
+        return { secret, domain, isFakeTLS: true };
+    }
+    const secret = Buffer.from(hex, 'hex');
+    if (secret.length !== 16) {
+        throw new Error('Secret must be 16 bytes');
+    }
+    return { secret, isFakeTLS: false };
+}
+/**
+ * TLS record content types.
+ */
+export const TLS_RECORD = {
+    CHANGE_CIPHER_SPEC: 0x14,
+    ALERT: 0x15,
+    HANDSHAKE: 0x16,
+    APPLICATION_DATA: 0x17,
+};
+/** Random field offset inside the ClientHello record:
+ * record header (5) + handshake type (1) + handshake length (3) + client version (2). */
+const RANDOM_OFFSET = 11;
+const RANDOM_LEN = 32;
+const u16 = (n) => {
+    const b = Buffer.alloc(2);
+    b.writeUInt16BE(n, 0);
+    return b;
+};
+const u24 = (n) => {
+    const b = Buffer.alloc(3);
+    b.writeUIntBE(n, 0, 3);
+    return b;
+};
+const extension = (type, data) => Buffer.concat([u16(type), u16(data.length), data]);
+/**
+ * Build the SNI (server_name) extension.
+ */
+const sniExtension = (domain) => {
+    const host = Buffer.from(domain, 'ascii');
+    const list = Buffer.concat([Buffer.from([0x00]), u16(host.length), host]);
+    return extension(0x0000, Buffer.concat([u16(list.length), list]));
+};
+/**
+ * Generate a FakeTLS ClientHello with a valid HMAC digest in the client random,
+ * exactly as official Telegram clients do. The proxy verifies this digest.
+ *
+ * @param domain - SNI domain from the ee secret
+ * @param secret - 16-byte proxy secret
+ */
+export function generateFakeTLSClientHello(domain, secret) {
+    const sessionId = randomBytes(32);
+    const keyShare = randomBytes(32);
+    // Include a trailing GREASE value like real browsers do.
+    const cipherSuites = [
+        0x1301, 0x1302, 0x1303, 0x1305, 0xc02b, 0xc02f, 0xc02c, 0xc030, 0xcca9,
+        0xcca8, 0xc013, 0xc014, 0x009c, 0x009d, 0x002f, 0x0035, 0x000a, 0x0a0a,
+    ];
+    const csBuf = Buffer.alloc(cipherSuites.length * 2);
+    cipherSuites.forEach((c, i) => csBuf.writeUInt16BE(c, i * 2));
+    const alpn = Buffer.concat([
+        u16(2 + 1 + 2 + 1 + 8), // protocol name list length
+        Buffer.from([2]), Buffer.from('h2', 'ascii'),
+        Buffer.from([8]), Buffer.from('http/1.1', 'ascii'),
+    ]);
+    const extensions = Buffer.concat([
+        sniExtension(domain),
+        extension(0x0010, alpn), // ALPN
+        extension(0x000a, Buffer.concat([u16(4), u16(0x001d), u16(0x0017)])), // supported_groups: x25519, secp256r1
+        extension(0x000b, Buffer.concat([u16(2), Buffer.from([0x01, 0x00])])), // ec_point_formats: uncompressed
+        extension(0x000d, Buffer.concat([u16(4), u16(0x0804), u16(0x0401)])), // signature_algorithms
+        extension(0x002b, Buffer.concat([u16(4), Buffer.from([0x03, 0x04, 0x03, 0x03])])), // supported_versions: TLS1.3, TLS1.2
+        extension(0x0033, Buffer.concat([u16(2 + 2 + keyShare.length), u16(0x001d), u16(keyShare.length), keyShare])), // key_share x25519
+        extension(0x0016, Buffer.alloc(0)), // encrypt_then_mac
+        extension(0x0017, Buffer.alloc(0)), // extended_master_secret
+    ]);
+    const body = Buffer.concat([
+        Buffer.from([0x03, 0x03]), // client version TLS 1.2
+        Buffer.alloc(RANDOM_LEN), // placeholder: random filled below
+        Buffer.from([sessionId.length]), sessionId,
+        u16(csBuf.length), csBuf,
+        Buffer.from([0x01, 0x00]), // compression methods: null
+        u16(extensions.length), extensions,
+    ]);
+    const handshake = Buffer.concat([Buffer.from([0x01]), u24(body.length), body]); // ClientHello
+    const packet = Buffer.concat([
+        Buffer.from([TLS_RECORD.HANDSHAKE, 0x03, 0x01]), u16(handshake.length), handshake,
+    ]);
+    // Client random = HMAC(secret, handshake with zeroed random); last 4 bytes = UNIX timestamp (LE).
+    const digest = createHmac('sha256', secret).update(packet).digest();
+    digest.writeUInt32LE(Math.floor(Date.now() / 1000) >>> 0, RANDOM_LEN - 4);
+    digest.copy(packet, RANDOM_OFFSET);
+    return packet;
+}
+/**
+ * Wrap data into TLS Application Data record(s).
+ */
+export function wrapInTLSRecords(data) {
+    const MAX_CHUNK_SIZE = 16384;
+    const chunks = [];
+    for (let i = 0; i < data.length; i += MAX_CHUNK_SIZE) {
+        const chunk = data.subarray(i, Math.min(i + MAX_CHUNK_SIZE, data.length));
+        const record = Buffer.alloc(5 + chunk.length);
+        record.writeUInt8(TLS_RECORD.APPLICATION_DATA, 0);
+        record.writeUInt16BE(0x0303, 1);
+        record.writeUInt16BE(chunk.length, 3);
+        chunk.copy(record, 5);
+        chunks.push(record);
+    }
+    return Buffer.concat(chunks);
+}
+/**
+ * Extract complete TLS record payloads from a stream buffer.
+ *
+ * @returns Concatenated payload of complete records and the remaining (incomplete) buffer
+ */
+export function extractTlsRecords(buffer) {
+    let offset = 0;
+    let payload = Buffer.alloc(0);
+    while (buffer.length - offset >= 5) {
+        const len = buffer.readUInt16BE(offset + 3);
+        if (buffer.length - offset < 5 + len)
+            break;
+        payload = Buffer.concat([payload, buffer.subarray(offset + 5, offset + 5 + len)]);
+        offset += 5 + len;
+    }
+    return { payload, rest: buffer.subarray(offset) };
+}
+/**
+ * Try to read and verify the proxy's ServerHello response.
+ * The proxy answers with exactly 3 records: ServerHello + ChangeCipherSpec + noise AppData,
+ * placing HMAC(secret, clientRandom || records-with-zeroed-digest) at RANDOM_OFFSET.
+ *
+ * @returns 'incomplete' while waiting for more bytes, 'valid' or 'invalid' when decided
+ */
+export function tryVerifyFakeTLSServerHello(buffer, clientRandom, secret) {
+    let offset = 0;
+    for (let i = 0; i < 3; i++) {
+        if (buffer.length - offset < 5)
+            return 'incomplete';
+        offset += 5 + buffer.readUInt16BE(offset + 3);
+    }
+    if (buffer.length < offset)
+        return 'incomplete';
+    const packet = buffer.subarray(0, offset);
+    if (packet[0] !== TLS_RECORD.HANDSHAKE)
+        return 'invalid';
+    const mac = createHmac('sha256', secret)
+        .update(clientRandom)
+        .update(packet.subarray(0, RANDOM_OFFSET))
+        .update(Buffer.alloc(RANDOM_LEN))
+        .update(packet.subarray(RANDOM_OFFSET + RANDOM_LEN))
+        .digest();
+    return mac.equals(packet.subarray(RANDOM_OFFSET, RANDOM_OFFSET + RANDOM_LEN)) ? 'valid' : 'invalid';
+}
+//# sourceMappingURL=fake-tls.js.map

package/dist/mtproto/fake-tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-tls.js","sourceRoot":"","sources":["../../src/mtproto/fake-tls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAejD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAE9D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,kBAAkB,EAAE,IAAI;IACxB,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;IACf,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX;yFACyF;AACzF,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CACvD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD;;GAEG;AACH,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,OAAO,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc,EAAE,MAAc;IACvE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAEjC,yDAAyD;IACzD,MAAM,YAAY,GAAG;QACnB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QACtE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;KACvE,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAE9D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,YAAY,CAAC,MAAM,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;QAChC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,sCAAsC;QAC5G,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,iCAAiC;QACxG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,uBAAuB;QAC7F,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,qCAAqC;QACxH,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB;QAClI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB;QACvD,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,yBAAyB;KAC9D,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,yBAAyB;QACpD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,mCAAmC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS;QAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK;QACxB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,4BAA4B;QACvD,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,UAAU;KACnC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc;IAC9F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS;KAClF,CAAC,CAAC;IAEH,kGAAkG;IAClG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,cAAc,GAAG,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,GAAG;YAAE,MAAM;QAC5C,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,IAAI,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAc,EACd,YAAoB,EACpB,MAAc;IAEd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QACpD,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,YAAY,CAAC;IAEhD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEzD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SACrC,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;SACzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;SACnD,MAAM,EAAE,CAAC;IAEZ,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC"}

package/dist/mtproto/messages.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Generate MTProto message_id.
+ * Format: time.time() * 2^32, must be divisible by 4
+ * Client message IDs must be divisible by 4
+ */
+export declare function generateMessageId(): bigint;
+/**
+ * Build req_pq_multi message.
+ * TL Schema: req_pq_multi#be7e8ef1 nonce:int128 = ResPQ;
+ *
+ * @param nonce - 16-byte random nonce
+ * @returns TL-serialized message
+ */
+export declare function buildReqPqMulti(nonce: Buffer): Buffer;
+/**
+ * Build unencrypted MTProto message wrapper.
+ *
+ * Format:
+ * - auth_key_id: 8 bytes (all zeros for unencrypted)
+ * - message_id: 8 bytes
+ * - message_length: 4 bytes
+ * - message: N bytes
+ *
+ * @param tlMessage - TL-serialized message
+ * @param messageId - Message ID
+ * @returns Unencrypted message
+ */
+export declare function buildUnencryptedMessage(tlMessage: Buffer, messageId: bigint): Buffer;
+/**
+ * Add Intermediate protocol length prefix.
+ *
+ * @param payload - Message payload
+ * @returns Payload with length prefix
+ */
+export declare function addLengthPrefix(payload: Buffer): Buffer;
+/**
+ * Parse ResPQ response.
+ * TL Schema: resPQ#05162463 nonce:int128 server_nonce:int128 pq:string server_public_key_fingerprints:Vector<long> = ResPQ;
+ *
+ * @param data - Decrypted response data
+ * @returns Parsed response or null if invalid
+ */
+export declare function parseResPQ(data: Buffer): {
+    nonce: Buffer;
+    serverNonce: Buffer;
+    constructor: number;
+} | null;
+//# sourceMappingURL=messages.d.ts.map

package/dist/mtproto/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/mtproto/messages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAW1C;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAyCpE"}

package/dist/mtproto/messages.js

@@ -0,0 +1,104 @@
+/**
+ * Generate MTProto message_id.
+ * Format: time.time() * 2^32, must be divisible by 4
+ * Client message IDs must be divisible by 4
+ */
+export function generateMessageId() {
+    // Get current time in seconds (with milliseconds as decimal)
+    const now = Date.now() / 1000; // seconds with decimal
+    // Multiply by 2^32
+    let msgId = BigInt(Math.floor(now * 2 ** 32));
+    // Must be divisible by 4 (client messages)
+    msgId = (msgId / 4n) * 4n;
+    return msgId;
+}
+/**
+ * Build req_pq_multi message.
+ * TL Schema: req_pq_multi#be7e8ef1 nonce:int128 = ResPQ;
+ *
+ * @param nonce - 16-byte random nonce
+ * @returns TL-serialized message
+ */
+export function buildReqPqMulti(nonce) {
+    // Constructor ID: 0xbe7e8ef1 (little-endian)
+    const constructor = Buffer.from([0xf1, 0x8e, 0x7e, 0xbe]);
+    return Buffer.concat([constructor, nonce]);
+}
+/**
+ * Build unencrypted MTProto message wrapper.
+ *
+ * Format:
+ * - auth_key_id: 8 bytes (all zeros for unencrypted)
+ * - message_id: 8 bytes
+ * - message_length: 4 bytes
+ * - message: N bytes
+ *
+ * @param tlMessage - TL-serialized message
+ * @param messageId - Message ID
+ * @returns Unencrypted message
+ */
+export function buildUnencryptedMessage(tlMessage, messageId) {
+    const authKeyId = Buffer.alloc(8, 0); // All zeros
+    const msgIdBuf = Buffer.alloc(8);
+    msgIdBuf.writeBigInt64LE(messageId, 0);
+    const msgLen = Buffer.alloc(4);
+    msgLen.writeUInt32LE(tlMessage.length, 0);
+    return Buffer.concat([authKeyId, msgIdBuf, msgLen, tlMessage]);
+}
+/**
+ * Add Intermediate protocol length prefix.
+ *
+ * @param payload - Message payload
+ * @returns Payload with length prefix
+ */
+export function addLengthPrefix(payload) {
+    const length = Buffer.alloc(4);
+    length.writeUInt32LE(payload.length, 0);
+    return Buffer.concat([length, payload]);
+}
+/**
+ * Parse ResPQ response.
+ * TL Schema: resPQ#05162463 nonce:int128 server_nonce:int128 pq:string server_public_key_fingerprints:Vector<long> = ResPQ;
+ *
+ * @param data - Decrypted response data
+ * @returns Parsed response or null if invalid
+ */
+export function parseResPQ(data) {
+    try {
+        let offset = 0;
+        // Intermediate frame: 4-byte LE length prefix, then the unencrypted
+        // MTProto envelope: auth_key_id(8) + message_id(8) + body_length(4) + body.
+        if (data.length < 4)
+            return null;
+        const length = data.readUInt32LE(offset);
+        offset += 4;
+        if (data.length < 4 + length)
+            return null;
+        // Parse auth_key_id (8 bytes) - should be all zeros
+        const authKeyId = data.slice(offset, offset + 8);
+        offset += 8;
+        if (!authKeyId.equals(Buffer.alloc(8, 0)))
+            return null;
+        // Parse message_id (8 bytes) - skip
+        offset += 8;
+        // Parse message_length (4 bytes) - skip
+        offset += 4;
+        // Parse constructor (4 bytes)
+        const constructor = data.readUInt32LE(offset);
+        offset += 4;
+        // Valid constructors: 0x05162463 or 0x83c95aec
+        if (constructor !== 0x05162463 && constructor !== 0x83c95aec) {
+            return null;
+        }
+        // Parse nonce (16 bytes)
+        const nonce = data.slice(offset, offset + 16);
+        offset += 16;
+        // Parse server_nonce (16 bytes)
+        const serverNonce = data.slice(offset, offset + 16);
+        return { nonce, serverNonce, constructor };
+    }
+    catch (err) {
+        return null;
+    }
+}
+//# sourceMappingURL=messages.js.map

package/dist/mtproto/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/mtproto/messages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,6DAA6D;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,uBAAuB;IAEtD,mBAAmB;IACnB,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9C,2CAA2C;IAC3C,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAE1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,6CAA6C;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAE1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAiB,EACjB,SAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;IAElD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAExC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY;IAEZ,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,oEAAoE;QACpE,4EAA4E;QAC5E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC;QAE1C,oDAAoD;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEvD,oCAAoC;QACpC,MAAM,IAAI,CAAC,CAAC;QAEZ,wCAAwC;QACxC,MAAM,IAAI,CAAC,CAAC;QAEZ,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,CAAC;QAEZ,+CAA+C;QAC/C,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,yBAAyB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,EAAE,CAAC;QAEb,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAEpD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/mtproto/obfuscation.d.ts

@@ -0,0 +1,26 @@
+import { AESCTR } from '../crypto/aes-ctr.js';
+/**
+ * Protocol tags for MTProto transports.
+ */
+export declare const PROTO_TAG: {
+    ABRIDGED: Buffer<ArrayBuffer>;
+    INTERMEDIATE: Buffer<ArrayBuffer>;
+    SECURE: Buffer<ArrayBuffer>;
+};
+interface ObfuscationKeys {
+    header: Buffer;
+    encryptor: AESCTR;
+    decryptor: AESCTR;
+}
+/**
+ * Initialize MTProto obfuscation layer.
+ * Generates random 64-byte header and derives encryption keys.
+ *
+ * @param secret - 16-byte secret from proxy
+ * @param dcId - Telegram datacenter ID
+ * @param protocolTag - Transport protocol tag (default: INTERMEDIATE)
+ * @returns Header buffer and encryptor/decryptor ciphers
+ */
+export declare function initObfuscation(secret: Buffer, dcId: number, protocolTag?: Buffer): ObfuscationKeys;
+export {};
+//# sourceMappingURL=obfuscation.d.ts.map

package/dist/mtproto/obfuscation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscation.d.ts","sourceRoot":"","sources":["../../src/mtproto/obfuscation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,SAAS;;;;CAIrB,CAAC;AAYF,UAAU,eAAe;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,GAAE,MAA+B,GAC3C,eAAe,CA+DjB"}