@floegence/flowersec-core 3.2.1 → 4.0.0

package/dist/node/rawQuicServer.d.ts

@@ -1,24 +0,0 @@
-import type { CarrierSessionV2 } from "../v2/carrier.js";
-import type { PathKind } from "../v2/contract.js";
-import type { NativeRawQuicDriver } from "./nativeTransportAddon.js";
-export type NodeRawQuicServerOptions = Readonly<{
-    host: string;
-    port: number;
-    path: PathKind;
-    tls: Readonly<{
-        certificate: string | Uint8Array;
-        privateKey: string | Uint8Array;
-    }>;
-    inboundBidirectionalStreamCapacity: number;
-}>;
-export type NodeRawQuicServer = Readonly<{
-    address(): Readonly<{
-        host: string;
-        port: number;
-    }>;
-    accept(options?: Readonly<{
-        signal?: AbortSignal;
-    }>): Promise<CarrierSessionV2>;
-    close(): Promise<void>;
-}>;
-export declare function startNodeRawQuicServer(driver: NativeRawQuicDriver, options: NodeRawQuicServerOptions): Promise<NodeRawQuicServer>;

package/dist/node/rawQuicServer.js

@@ -1,37 +0,0 @@
-import { adaptNativeCarrierSessionV2 } from "../v2/carrier.js";
-import { normalizeCertificateChain, normalizePrivateKey } from "./rawQuicAdapter.js";
-export async function startNodeRawQuicServer(driver, options) {
-    validateOptions(options);
-    let listener;
-    try {
-        listener = await driver.bindRawQuic({
-            host: options.host,
-            port: options.port,
-            path: options.path,
-            certificateChainDer: normalizeCertificateChain(options.tls.certificate),
-            privateKeyDer: normalizePrivateKey(options.tls.privateKey),
-            inboundBidirectionalStreamCapacity: options.inboundBidirectionalStreamCapacity,
-        });
-    }
-    catch (error) {
-        if (error instanceof TypeError)
-            throw error;
-        throw new Error("Flowersec raw QUIC listener failed to bind");
-    }
-    return {
-        address: () => listener.address(),
-        accept: async (operation = {}) => adaptNativeCarrierSessionV2(await listener.accept(operation)),
-        close: async () => await listener.close(),
-    };
-}
-function validateOptions(options) {
-    if (!Number.isInteger(options.port) || options.port < 0 || options.port > 65_535 ||
-        !Number.isInteger(options.inboundBidirectionalStreamCapacity) ||
-        options.inboundBidirectionalStreamCapacity < 3 ||
-        options.inboundBidirectionalStreamCapacity > 130) {
-        throw new TypeError("invalid Node raw QUIC listener options");
-    }
-    if (options.tls.certificate.length === 0 || options.tls.privateKey.length === 0) {
-        throw new TypeError("raw QUIC listener requires explicit TLS material");
-    }
-}

package/dist/node/runtimeCapability.d.ts

@@ -1,14 +0,0 @@
-export declare const NODE_RUNTIME_PROFILE_V2: Readonly<{
-    language: string;
-    runtime: string;
-    schemaVersion: 2;
-    tuples: readonly import("../v2/capability.js").RuntimeCapabilityTupleV2[];
-    unsupported: readonly import("../v2/capability.js").UnsupportedRuntimeCarrierV2[];
-}>;
-export declare function detectNodeRuntimeCapabilityV2(rawQuicAvailable: boolean): Readonly<{
-    language: string;
-    runtime: string;
-    schemaVersion: 2;
-    tuples: readonly import("../v2/capability.js").RuntimeCapabilityTupleV2[];
-    unsupported: readonly import("../v2/capability.js").UnsupportedRuntimeCarrierV2[];
-}>;

package/dist/node/runtimeCapability.js

@@ -1,24 +0,0 @@
-import { defineRuntimeCapabilityDescriptorV2 } from "../v2/capability.js";
-const nodeWebSocketTuples = [
-    { carrier: "websocket", datagrams: false, migration: false, networkMode: "dial", path: "direct", reliableStreams: true, sessionRole: "client" },
-    { carrier: "websocket", datagrams: false, migration: false, networkMode: "dial", path: "tunnel", reliableStreams: true, sessionRole: "client" },
-    { carrier: "websocket", datagrams: false, migration: false, networkMode: "dial", path: "tunnel", reliableStreams: true, sessionRole: "server" },
-    { carrier: "websocket", datagrams: false, migration: false, networkMode: "listen", path: "direct", reliableStreams: true, sessionRole: "server" },
-];
-export const NODE_RUNTIME_PROFILE_V2 = defineRuntimeCapabilityDescriptorV2("node", [
-    { carrier: "raw_quic", datagrams: true, migration: false, networkMode: "dial", path: "direct", reliableStreams: true, sessionRole: "client" },
-    { carrier: "raw_quic", datagrams: true, migration: false, networkMode: "dial", path: "tunnel", reliableStreams: true, sessionRole: "client" },
-    { carrier: "raw_quic", datagrams: true, migration: false, networkMode: "dial", path: "tunnel", reliableStreams: true, sessionRole: "server" },
-    { carrier: "raw_quic", datagrams: true, migration: false, networkMode: "listen", path: "direct", reliableStreams: true, sessionRole: "server" },
-    ...nodeWebSocketTuples,
-], [
-    { carrier: "webtransport", reason: "node_webtransport_driver_unavailable" },
-]);
-export function detectNodeRuntimeCapabilityV2(rawQuicAvailable) {
-    if (rawQuicAvailable)
-        return NODE_RUNTIME_PROFILE_V2;
-    return defineRuntimeCapabilityDescriptorV2("node", nodeWebSocketTuples, [
-        { carrier: "raw_quic", reason: "node_native_transport_unavailable" },
-        { carrier: "webtransport", reason: "node_webtransport_driver_unavailable" },
-    ]);
-}

package/dist/node/sessionRuntime.d.ts

@@ -1,2 +0,0 @@
-import type { SessionProtocolRuntimeV2 } from "../v2/session.js";
-export declare const nodeSessionRuntimeV2: SessionProtocolRuntimeV2;

package/dist/node/sessionRuntime.js

@@ -1,13 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { performance } from "node:perf_hooks";
-export const nodeSessionRuntimeV2 = Object.freeze({
-    entropy(length) {
-        if (!Number.isSafeInteger(length) || length < 1 || length > 65_536) {
-            throw new RangeError("entropy length must be an integer from 1 to 65536");
-        }
-        return Uint8Array.from(randomBytes(length));
-    },
-    monotonicMilliseconds() {
-        return performance.now();
-    },
-});

package/dist/node/tunnelRuntime.d.ts

@@ -1,42 +0,0 @@
-import type { OperationOptions } from "../public/contract.js";
-import { TunnelAuthorizationResponse, type TunnelAuthorizationDecision as ControlPlaneTunnelAuthorizationDecision, type RuntimeAuthorizationRequest } from "./controlplane.js";
-export type TunnelAuthorizationDecision = ControlPlaneTunnelAuthorizationDecision;
-export type TunnelRuntimeListener = Readonly<{
-    carrier: "websocket";
-    host: string;
-    port: number;
-    tls: Readonly<{
-        certificate: string;
-        privateKey: string;
-    }>;
-    allowedOrigins: readonly string[];
-}> | Readonly<{
-    carrier: "raw_quic";
-    host: string;
-    port: number;
-    tls: Readonly<{
-        certificate: string;
-        privateKey: string;
-    }>;
-}>;
-export type TunnelRuntimeOptions = Readonly<{
-    listeners: readonly TunnelRuntimeListener[];
-    maxInboundStreams: number;
-    maxPendingLegs?: number;
-    maxActivePairs?: number;
-    maxConcurrentStreams?: number;
-    pairTimeoutMs?: number;
-    cleanupTimeoutMs?: number;
-    authorize(request: RuntimeAuthorizationRequest, options: OperationOptions): Promise<TunnelAuthorizationDecision | TunnelAuthorizationResponse>;
-    release?(leaseId: string): Promise<void> | void;
-}>;
-export declare class TunnelRuntime {
-    private constructor();
-    start(): Promise<void>;
-    addresses(): readonly Readonly<{
-        host: string;
-        port: number;
-    }>[];
-    close(): Promise<void>;
-}
-export declare function createTunnelRuntime(options: TunnelRuntimeOptions): TunnelRuntime;