@floegence/flowersec-core 0.3.2 → 0.4.0

package/dist/node/connect.js

@@ -2,12 +2,40 @@ import { connectDirect } from "../direct-client/connect.js";
 import { connectTunnel } from "../tunnel-client/connect.js";
 import { connect } from "../facade.js";
 import { createNodeWsFactory } from "./wsFactory.js";
+const defaultMaxHandshakePayload = 8 * 1024;
+const defaultMaxRecordBytes = 1 << 20;
+const handshakeFrameOverheadBytes = 4 + 1 + 1 + 4;
+const wsMaxPayloadSlackBytes = 64;
+function defaultWsMaxPayload(opts) {
+    const maxHandshakePayload = opts.maxHandshakePayload ?? 0;
+    const maxRecordBytes = opts.maxRecordBytes ?? 0;
+    const hp = Number.isSafeInteger(maxHandshakePayload) && maxHandshakePayload > 0 ? maxHandshakePayload : defaultMaxHandshakePayload;
+    const rb = Number.isSafeInteger(maxRecordBytes) && maxRecordBytes > 0 ? maxRecordBytes : defaultMaxRecordBytes;
+    const handshakeMax = Math.min(Number.MAX_SAFE_INTEGER, hp + handshakeFrameOverheadBytes);
+    const max = Math.max(rb, handshakeMax);
+    return Math.min(Number.MAX_SAFE_INTEGER, max + wsMaxPayloadSlackBytes);
+}
 export async function connectNode(input, opts) {
-    return await connect(input, { ...opts, wsFactory: opts.wsFactory ?? createNodeWsFactory() });
+    const wsFactory = opts.wsFactory ??
+        createNodeWsFactory({
+            maxPayload: defaultWsMaxPayload(opts),
+            perMessageDeflate: false,
+        });
+    return await connect(input, { ...opts, wsFactory });
 }
 export async function connectTunnelNode(grant, opts) {
-    return await connectTunnel(grant, { ...opts, wsFactory: opts.wsFactory ?? createNodeWsFactory() });
+    const wsFactory = opts.wsFactory ??
+        createNodeWsFactory({
+            maxPayload: defaultWsMaxPayload(opts),
+            perMessageDeflate: false,
+        });
+    return await connectTunnel(grant, { ...opts, wsFactory });
 }
 export async function connectDirectNode(info, opts) {
-    return await connectDirect(info, { ...opts, wsFactory: opts.wsFactory ?? createNodeWsFactory() });
+    const wsFactory = opts.wsFactory ??
+        createNodeWsFactory({
+            maxPayload: defaultWsMaxPayload(opts),
+            perMessageDeflate: false,
+        });
+    return await connectDirect(info, { ...opts, wsFactory });
 }

package/dist/node/wsFactory.d.ts

@@ -1,2 +1,6 @@
 import type { WebSocketLike } from "../ws-client/binaryTransport.js";
-export declare function createNodeWsFactory(): (url: string, origin: string) => WebSocketLike;
+export type NodeWsFactoryOptions = Readonly<{
+    maxPayload?: number;
+    perMessageDeflate?: boolean;
+}>;
+export declare function createNodeWsFactory(opts?: NodeWsFactoryOptions): (url: string, origin: string) => WebSocketLike;

package/dist/node/wsFactory.js

@@ -2,12 +2,21 @@ import { createRequire } from "node:module";
 // createNodeWsFactory returns a wsFactory compatible with connectTunnel/connectDirect in Node.js.
 //
 // It uses the "ws" package to set the Origin header explicitly (browsers set Origin automatically).
-export function createNodeWsFactory() {
+export function createNodeWsFactory(opts = {}) {
     const require = createRequire(import.meta.url);
     const wsMod = require("ws");
     const WebSocketCtor = wsMod?.WebSocket ?? wsMod;
+    const maxPayload = opts.maxPayload;
+    if (maxPayload !== undefined && (!Number.isSafeInteger(maxPayload) || maxPayload <= 0)) {
+        throw new Error("maxPayload must be a positive integer");
+    }
+    const perMessageDeflate = opts.perMessageDeflate ?? false;
     return (url, origin) => {
-        const raw = new WebSocketCtor(url, { headers: { Origin: origin } });
+        const raw = new WebSocketCtor(url, {
+            headers: { Origin: origin },
+            ...(maxPayload !== undefined ? { maxPayload } : {}),
+            perMessageDeflate,
+        });
         // Map (type -> user listener -> wrapped listener) so removeEventListener works.
         const listeners = new Map();
         const addEventListener = (type, listener) => {

package/dist/utils/errors.d.ts

@@ -6,7 +6,7 @@ export declare class AbortError extends Error {
 }
 export type FlowersecPath = "auto" | "tunnel" | "direct";
 export type FlowersecStage = "validate" | "connect" | "attach" | "handshake" | "secure" | "yamux" | "rpc" | "close";
-export type FlowersecErrorCode = "timeout" | "canceled" | "invalid_version" | "invalid_input" | "invalid_option" | "invalid_endpoint_instance_id" | "invalid_psk" | "invalid_suite" | "missing_grant" | "missing_connect_info" | "missing_conn" | "missing_handler" | "missing_stream_kind" | "role_mismatch" | "missing_tunnel_url" | "missing_ws_url" | "missing_origin" | "missing_channel_id" | "missing_token" | "missing_init_exp" | "timestamp_after_init_exp" | "timestamp_out_of_skew" | "auth_tag_mismatch" | "resolve_failed" | "random_failed" | "upgrade_failed" | "dial_failed" | "attach_failed" | "too_many_connections" | "expected_attach" | "invalid_attach" | "invalid_token" | "channel_mismatch" | "init_exp_mismatch" | "idle_timeout_mismatch" | "token_replay" | "replace_rate_limited" | "handshake_failed" | "ping_failed" | "mux_failed" | "accept_stream_failed" | "open_stream_failed" | "stream_hello_failed" | "not_connected";
+export type FlowersecErrorCode = "timeout" | "canceled" | "invalid_version" | "invalid_input" | "invalid_option" | "invalid_endpoint_instance_id" | "invalid_psk" | "invalid_suite" | "missing_grant" | "missing_connect_info" | "missing_conn" | "missing_handler" | "missing_stream_kind" | "role_mismatch" | "missing_tunnel_url" | "missing_ws_url" | "missing_origin" | "missing_channel_id" | "missing_token" | "missing_init_exp" | "timestamp_after_init_exp" | "timestamp_out_of_skew" | "auth_tag_mismatch" | "resolve_failed" | "random_failed" | "upgrade_failed" | "dial_failed" | "attach_failed" | "too_many_connections" | "expected_attach" | "invalid_attach" | "invalid_token" | "channel_mismatch" | "init_exp_mismatch" | "idle_timeout_mismatch" | "token_replay" | "replace_rate_limited" | "handshake_failed" | "ping_failed" | "mux_failed" | "accept_stream_failed" | "open_stream_failed" | "stream_hello_failed" | "rpc_failed" | "not_connected";
 export declare class FlowersecError extends Error {
     readonly code: FlowersecErrorCode;
     readonly stage: FlowersecStage;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "Flowersec core TypeScript library (browser-friendly E2EE + multiplexing over WebSocket).",
   "license": "MIT",
   "repository": {