@lakutata/webrtc 0.0.0-stage → 3.1.1

package/dist/esm/turn/TURNWorkerCode.js

@@ -0,0 +1 @@
+export const turnWorkerCode = "var rt=Object.defineProperty;var c=(n,e)=>rt(n,\"name\",{value:e,configurable:true});var st=require(\"node:util\");var W=require(\"node:worker_threads\");var Q;var it=new Set;function Re(n){const e=!!Q!==!!n;Q=n;if(e)for(const t of it)t(!!n)}c(Re,\"setDebugHandler\");function J(n){return(...e)=>{if(Q)Q(n,e)}}c(J,\"debug\");var je=require(\"node:crypto\");var ge=require(\"node:dgram\");var Qe=require(\"node:net\");var Je=require(\"node:os\");var Ze=require(\"node:tls\");var ot=3988292384;var ct=2197175160;function at(n){return typeof n!==\"string\"}c(at,\"isBufferLike\");function be(n){const e=new Array(256);for(let t=0;t<256;++t){let s=t;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;s=s&1?n^s>>>1:s>>>1;e[t]=s}return new Int32Array(e)}c(be,\"generateCRCTable\");function we(n){const e=new Int32Array(4096);let t;let s;let r;for(r=0;r<256;++r)e[r]=n[r];for(r=0;r<256;++r){s=n[r];for(t=256+r;t<4096;t+=256){s=e[t]=s>>>8^n[s&255]}}const i=[];for(r=1;r<16;++r){i[r-1]=e.subarray(r*256,r*256+256)}return i}c(we,\"generateSliceBy16Tables\");function dt(n,e,t){let s=e^-1;let r=0;const i=n.length;let o;let a;while(r<i){o=n.charCodeAt(r++);if(o<128){s=s>>>8^t[(s^o)&255]}else if(o<2048){s=s>>>8^t[(s^(192|o>>6&31))&255];s=s>>>8^t[(s^(128|o&63))&255]}else if(o>=55296&&o<57344){o=(o&1023)+64;a=n.charCodeAt(r++)&1023;s=s>>>8^t[(s^(240|o>>8&7))&255];s=s>>>8^t[(s^(128|o>>2&63))&255];s=s>>>8^t[(s^(128|a>>6&15|(o&3)<<4))&255];s=s>>>8^t[(s^(128|a&63))&255]}else{s=s>>>8^t[(s^(224|o>>12&15))&255];s=s>>>8^t[(s^(128|o>>6&63))&255];s=s>>>8^t[(s^(128|o&63))&255]}}return~s>>>0}c(dt,\"crcGenericString\");function ht(n,e,t,s){const[r,i,o,a,d,h,u,l,y,P,N,I,C,j,_]=s;let E=e^-1;let p=0;let oe=n.length-15;while(p<oe){E=_[n[p++]^E&255]^j[n[p++]^E>>>8&255]^C[n[p++]^E>>>16&255]^I[n[p++]^E>>>24]^N[n[p++]]^P[n[p++]]^y[n[p++]]^l[n[p++]]^u[n[p++]]^h[n[p++]]^d[n[p++]]^a[n[p++]]^o[n[p++]]^i[n[p++]]^r[n[p++]]^t[n[p++]]}for(oe+=15;p<oe;){E=E>>>8^t[(E^n[p++])&255]}return~E>>>0}c(ht,\"crcBuffer\");var ce=be(ot);var ut=we(ce);var lt=be(ct);var $t=we(lt);function Ie(n,e=0){if(at(n)){return ht(n,e,ce,ut)}return dt(n,e,ce)}c(Ie,\"crc32\");function G(n,e){return(...t)=>{try{const s=n(...t);if(s instanceof Promise)s.catch(e)}catch(s){e(s)}}}c(G,\"detached\");var ft=J(\"webrtc/common/transport\");var Te=4*1024*1024;function ae(n){try{if(n.getRecvBufferSize()<Te)n.setRecvBufferSize(Te)}catch(e){ft(\"the receive buffer cannot grow\",e)}}c(ae,\"growReceiveBuffer\");var de=class{static{c(this,\"BinaryWriter\")}constructor(){this.chunks=[];this.written=0}get bytes(){return this.written}writeBuffer(e){this.chunks.push(e);this.written+=e.length}writeUIntBE(e,t){const s=Buffer.allocUnsafe(t);switch(t){case 1:s.writeUInt8(e,0);break;case 2:s.writeUInt16BE(e,0);break;case 4:s.writeUInt32BE(e,0);break;default:s.writeUIntBE(e,0,t)}this.writeBuffer(s)}toBuffer(){return Buffer.concat(this.chunks,this.written)}};var Be=c(n=>typeof n===\"object\"&&n!==null,\"isObject\");var A=c(n=>Be(n)&&typeof n.encode===\"function\"&&typeof n.decode===\"function\",\"isType\");var Pe=c(n=>{if(!Be(n))return false;const e=Object.getPrototypeOf(n);return e===Object.prototype||e===null},\"isPlainObject\");var Se=c(n=>({node:n.node,current:n.current}),\"cloneContext\");var Ne=c((n,e)=>{if(!Pe(n)){throw new TypeError(e)}},\"assertSchema\");var pt=c((n,e,t,s)=>{if(A(e)){e.encode(n,t,s)}else{Ce(n,e,t,s)}},\"encodeCommon\");var Ce=c((n,e,t,s)=>{Ne(e,\"Argument `schema` should be a plain object.\");if(s.node===void 0){s.node=n}s.current=n;for(const r of Object.keys(e)){const i=e[r];const o=n[r];if(A(i)){i.encode(o,t,s)}else{Ce(o,i,t,s);s.current=n}}},\"encodeSchema\");var xe=c((n,e,t)=>{if(A(e)){return e.decode(n,t)}return De(n,e,t)},\"decodeCommon\");var De=c((n,e,t)=>{Ne(e,\"Argument #2 should be a plain object.\");const s=Object.create(null);if(t.node===void 0){t.node=s}t.current=s;for(const r of Object.keys(e)){const i=e[r];if(A(i)){s[r]=i.decode(n,t)}else{s[r]=De(n,i,t);t.current=s}}return s},\"decodeSchema\");var H=c(n=>({encode:c((e,t)=>t.writeUIntBE(e,n),\"encode\"),decode:c(e=>e.readUIntBE(n),\"decode\")}),\"createUIntBE\");var he=c(n=>{if(typeof n!==\"number\"&&!A(n)&&typeof n!==\"function\"){throw new TypeError(\"Unknown type of argument #1.\")}},\"assertLengthSpec\");var K=c((n,e,t)=>{if(n!==e){throw new Error(`${t} required length ${n} instead of ${e}`)}},\"checkLength\");var T=c((n,e)=>{if(typeof n!==\"number\"){throw new TypeError(e)}},\"checkLengthType\");function At(n){he(n);const e=\"Length of a buffer should be a number.\";return{encode(t,s,r){if(!Buffer.isBuffer(t)){throw new TypeError(\"Argument 1 should be a Buffer or a BinaryStream.\")}if(typeof n===\"number\"){K(n,t.length,\"Buffer\")}else if(A(n)){n.encode(t.length,s,r)}else{const i=n(r);T(i,e);K(i,t.length,\"Buffer\")}s.writeBuffer(t)},decode(t,s){let r;if(typeof n===\"number\"){r=n}else if(A(n)){r=n.decode(t,s)}else{r=n(s)}T(r,e);return t.readBuffer(r)}}}c(At,\"buffer\");function mt(n,e,t=\"count\"){if(!A(n)&&!Pe(n)){throw new TypeError(\"Argument #1 should be a valid type.\")}he(e);const s=t===\"bytes\";const r=\"Length of an array should be a number.\";return{encode(i,o,a){if(!Array.isArray(i)){throw new TypeError(\"Argument #1 should be an Array.\")}const d=Se(a);let h;if(typeof e===\"number\"){h=e}else if(A(e)){h=i.length}else{h=e(d);T(h,r)}const u=new de;for(const l of i){pt(l,n,u,d)}if(s){if(A(e)){h=u.bytes}K(u.bytes,h,\"Argument #1\")}else{K(h,i.length,\"Argument #1\")}if(A(e)){e.encode(h,o,d)}o.writeBuffer(u.toBuffer())},decode(i,o){const a=Se(o);let d;if(typeof e===\"number\"){d=e}else if(A(e)){d=e.decode(i,a)}else{d=e(a)}T(d,r);const h=[];if(s){const u=i.bytes;let l=0;while(l<d){h.push(xe(i,n,a));l=i.bytes-u}if(l>d){throw new Error(\"Incorrect length of an array.\")}}else{for(let u=0;u<d;u++){h.push(xe(i,n,a))}}return h}}}c(mt,\"array\");function Et(n,e=\"ascii\"){if(!Buffer.isEncoding(e)){throw new Error(\"Argument #2 should be an encoding name.\")}he(n);const t=\"Length of a buffer should be a number.\";return{encode(s,r,i){const o=Buffer.from(s.toString(),e);if(typeof n===\"number\"){if(o.length!==n){throw new Error(`Size of string should be ${n} in bytes.`)}}else if(A(n)){n.encode(o.length,r,i)}else{const a=n(i);T(a,t);K(a,o.length,\"Buffer\")}r.writeBuffer(o)},decode(s,r){let i;if(typeof n===\"number\"){i=n}else if(A(n)){i=n.decode(s,r);T(i,\"Size of a string should be a number.\")}else{i=n(r);T(i,t)}return s.readBuffer(i).toString(e)}}}c(Et,\"string\");var ls={uint8:H(1),uint16be:H(2),uint24be:H(3),uint32be:H(4),uint48be:H(6),buffer:At,array:mt,string:Et};var Y=require(\"node:crypto\");var D=554869826;var Oe=8;var ke=1398035790;var R=20;var ue=24;var le=1;var fe=2;var m;(function(n){n[n[\"REQUEST\"]=0]=\"REQUEST\";n[n[\"INDICATION\"]=16]=\"INDICATION\";n[n[\"RESPONSE\"]=256]=\"RESPONSE\";n[n[\"ERROR\"]=272]=\"ERROR\"})(m||(m={}));var f;(function(n){n[n[\"BINDING\"]=1]=\"BINDING\";n[n[\"SHARED_SECRET\"]=2]=\"SHARED_SECRET\";n[n[\"ALLOCATE\"]=3]=\"ALLOCATE\";n[n[\"REFRESH\"]=4]=\"REFRESH\";n[n[\"SEND\"]=6]=\"SEND\";n[n[\"DATA\"]=7]=\"DATA\";n[n[\"CREATE_PERMISSION\"]=8]=\"CREATE_PERMISSION\";n[n[\"CHANNEL_BIND\"]=9]=\"CHANNEL_BIND\"})(f||(f={}));function Z(n){return n>=0&&n<=32767}c(Z,\"isComprehensionRequiredAttribute\");function O(n){if(n.length<R){return false}if((n[0]&192)!==0){return false}if(n.readUInt32BE(4)!==D){return false}const e=n.readUInt16BE(2);if(e%4!==0){return false}return n.length===R+e}c(O,\"isStunMessage\");var k=require(\"node:net\");function pe(n){if((0,k.isIPv4)(n)){const r=Buffer.allocUnsafe(4);const i=n.split(\".\");for(let o=0;o<4;o++){r[o]=Number(i[o])&255}return r}if(!(0,k.isIPv6)(n)){throw new Error(`Invalid ip address: ${n}`)}const e=n.split(\":\",8);for(let r=0;r<e.length;r++){let i;if((0,k.isIPv4)(e[r])){i=pe(e[r]);e[r]=i.subarray(0,2).toString(\"hex\")}if(i&&++r<8){e.splice(r,0,i.subarray(2,4).toString(\"hex\"))}}if(e[0]===\"\"){while(e.length<8)e.unshift(\"0\")}else if(e[e.length-1]===\"\"){while(e.length<8)e.push(\"0\")}else if(e.length<8){let r=0;for(;r<e.length&&e[r]!==\"\";r++);const i=[];for(let o=9-e.length;o>0;o--){i.push(\"0\")}e.splice(r,1,...i)}const t=Buffer.allocUnsafe(16);let s=0;for(const r of e){const i=Number.parseInt(r,16)||0;t[s++]=i>>8&255;t[s++]=i&255}return t}c(pe,\"ipAddressToBuffer\");function Ae(n){if(n.length===4){return`${n[0]}.${n[1]}.${n[2]}.${n[3]}`}if(n.length!==16){throw new Error(`Invalid ip address buffer length: ${n.length}`)}const e=[];for(let s=0;s<16;s+=2){e.push(n.readUInt16BE(s).toString(16))}let t=e.join(\":\");t=t.replace(/(^|:)0(:0)*:0(:|$)/,\"$1::$3\");t=t.replace(/:{3,4}/,\"::\");return t}c(Ae,\"bufferToIpAddress\");function Ue(n){return(0,k.isIPv4)(n)}c(Ue,\"isIpV4Address\");function S(n){const[e]=n;const t=Ue(e)?le:fe;const s=Buffer.alloc(4);s.writeUInt8(0,0);s.writeUInt8(t,1);s.writeUInt16BE(n[1],2);return Buffer.concat([s,pe(e)])}c(S,\"packAddress\");function gt(n){if(n.length<4){throw new Error(\"STUN error code is less than 4 bytes\")}const e=n.readUInt8(2);const t=n.readUInt8(3);const s=n.slice(4).toString(\"utf8\");return[e*100+t,s]}c(gt,\"unpackErrorCode\");function x(n){if(n.length<4){throw new Error(\"STUN address length is less than 4 bytes\")}const e=n.readUInt8(1);const t=n.readUInt16BE(2);const s=n.slice(4);switch(e){case le:if(s.length!==4){throw new Error(\"STUN address has invalid length for IPv4\")}return[Ae(s),t];case fe:if(s.length!==16){throw new Error(\"STUN address has invalid length for IPv6\")}return[Ae(s),t];default:throw new Error(\"STUN address has unknown protocol\")}}c(x,\"unpackAddress\");var me=Buffer.alloc(6);me.writeUInt16BE(D>>16,0);me.writeUInt32BE(D,2);function ve(n,e){const t=[...me,...e];let s=n.slice(0,2);for(let r=2;r<n.length;r++){const i=n[r]^t[r-2];const o=Buffer.alloc(1);o.writeUIntBE(i,0,1);s=Buffer.concat([s,o])}return s}c(ve,\"xorAddress\");function q(n,e){return x(ve(n,e))}c(q,\"unpackXorAddress\");function Rt(n){const e=Buffer.alloc(4);e.writeUInt16BE(0,0);e.writeUInt8(Math.floor(n[0]/100),2);e.writeUInt8(n[0]%100,3);const t=Buffer.from(n[1],\"utf8\");return Buffer.concat([e,t])}c(Rt,\"packErrorCode\");function bt(n){const e=Buffer.alloc(n.length*2);n.forEach((t,s)=>{e.writeUInt16BE(t,s*2)});return e}c(bt,\"packUnknownAttributes\");function wt(n){if(n.length%2!==0){throw new Error(\"UNKNOWN-ATTRIBUTES must have an even length\")}const e=[];for(let t=0;t<n.length;t+=2){e.push(n.readUInt16BE(t))}return e}c(wt,\"unpackUnknownAttributes\");function z(n,e){return ve(S(n),e)}c(z,\"packXorAddress\");var U=c(n=>{const e=Buffer.alloc(4);e.writeUInt32BE(n,0);return e},\"packUnsigned\");var L=c(n=>n.readUInt32BE(0),\"unpackUnsigned\");var It=c(n=>{const e=Buffer.alloc(4);e.writeUInt16BE(n,0);return e},\"packUnsignedShort\");var Tt=c(n=>n.readUInt16BE(0),\"unpackUnsignedShort\");var Le=c(n=>{const e=Buffer.allocUnsafe(8);e.writeBigUInt64BE(n,0);return e},\"packUnsigned64\");var Me=c(n=>n.readBigUInt64BE(0),\"unpackUnsigned64\");var te=c(n=>Buffer.from(n,\"utf8\"),\"packString\");var ee=c(n=>n.toString(\"utf8\"),\"unpackString\");var St=c(n=>{if([...n].length>=128){throw new Error(\"SOFTWARE must be shorter than 128 characters\")}return te(n)},\"packSoftware\");var b=c(n=>n,\"packBytes\");var w=c(n=>n,\"unpackBytes\");var xt=c(()=>Buffer.alloc(0),\"packNone\");var Bt=c(()=>null,\"unpackNone\");var Fe=[[1,\"MAPPED-ADDRESS\",S,x],[3,\"CHANGE-REQUEST\",U,L],[4,\"SOURCE-ADDRESS\",S,x],[5,\"CHANGED-ADDRESS\",S,x],[6,\"USERNAME\",te,ee],[8,\"MESSAGE-INTEGRITY\",b,w],[9,\"ERROR-CODE\",Rt,gt],[10,\"UNKNOWN-ATTRIBUTES\",bt,wt],[12,\"CHANNEL-NUMBER\",It,Tt],[13,\"LIFETIME\",U,L],[18,\"XOR-PEER-ADDRESS\",z,q],[19,\"DATA\",b,w],[20,\"REALM\",te,ee],[21,\"NONCE\",b,w],[22,\"XOR-RELAYED-ADDRESS\",z,q],[23,\"REQUESTED-ADDRESS-FAMILY\",U,L],[24,\"EVEN-PORT\",b,w],[25,\"REQUESTED-TRANSPORT\",U,L],[28,\"MESSAGE-INTEGRITY-SHA256\",b,w],[29,\"PASSWORD-ALGORITHM\",b,w],[30,\"USERHASH\",b,w],[32,\"XOR-MAPPED-ADDRESS\",z,q],[34,\"RESERVATION-TOKEN\",b,w],[36,\"PRIORITY\",U,L],[37,\"USE-CANDIDATE\",xt,Bt],[32770,\"PASSWORD-ALGORITHMS\",b,w],[32771,\"ALTERNATE-DOMAIN\",te,ee],[32802,\"SOFTWARE\",St,ee],[32803,\"ALTERNATE-SERVER\",S,x],[32808,\"FINGERPRINT\",U,L],[32809,\"ICE-CONTROLLED\",Le,Me],[32810,\"ICE-CONTROLLING\",Le,Me],[32811,\"RESPONSE-ORIGIN\",S,x],[32812,\"OTHER-ADDRESS\",S,x]];var V=class{static{c(this,\"AttributeRepository\")}constructor(e=[]){this.attributes=e}getAttributes(){return this.attributes}setAttribute(e,t){const s=this.attributes.find(r=>r[0]===e);if(s){s[1]=t}else{this.attributes.push([e,t])}return this}getAttributeValue(e){const t=this.attributes.find(s=>s[0]===e);return t?.[1]}get attributesKeys(){return this.attributes.map(e=>e[0])}removeAttribute(e){this.attributes=this.attributes.filter(t=>t[0]!==e);return this}clear(){this.attributes=[]}};var _e=Fe.reduce((n,e)=>{n[e[0]]=e;return n},{});var Ge=Fe.reduce((n,e)=>{n[e[1]]=e;return n},{});function $(n,e){if(!O(n)){return void 0}const t=n.readUInt16BE(0);const s=Buffer.from(n.slice(R-12,R));const r=new V;const i=[];let o=false;for(let a=R;a<n.length;){if(a+4>n.length){return void 0}const d=n.readUInt16BE(a);const h=n.readUInt16BE(a+2);const u=a+4;const l=u+h;if(l>n.length){return void 0}const y=n.slice(u,l);const P=M(h);if(l+P>n.length){return void 0}const N=_e[d];if(N){const[,I,,C]=N;let j;try{j=C.name===q.name?C(y,s):C(y)}catch{return void 0}r.setAttribute(I,j);if(I===\"FINGERPRINT\"){const _=He(n.slice(0,a));if(r.getAttributeValue(\"FINGERPRINT\")!==_){return void 0}}else if(I===\"MESSAGE-INTEGRITY\"&&e){const _=Nt(n.slice(0,a),e);const E=r.getAttributeValue(\"MESSAGE-INTEGRITY\");if(!_.equals(E)){return void 0}o=true}}else{i.push({type:d,length:h,value:Buffer.from(y)})}a=l+P}if(e&&!o){return void 0}return new g(t&16111,t&272,s,r.getAttributes(),i)}c($,\"parseMessage\");var g=class extends V{static{c(this,\"Message\")}constructor(e,t,s=(0,Y.randomBytes)(12),r=[],i=[]){super(r);this.messageMethod=e;this.messageClass=t;this.transactionId=s;this.rawAttributes=i}toJSON(){return this.json}get json(){return{messageMethod:this.messageMethod,messageClass:this.messageClass,attributes:this.attributes,rawAttributes:this.rawAttributes.map(e=>({type:e.type,length:e.value.length}))}}get transactionIdHex(){return this.transactionId.toString(\"hex\")}appendRawAttribute(e,t){this.rawAttributes.push({type:e,value:Buffer.from(t)});return this}get unknownAttributeTypes(){return this.rawAttributes.map(e=>e.type)}get bytes(){const e=Buffer.concat(this.serializedAttributes.map(s=>Pt(s.type,s.value)));const t=Buffer.alloc(8);t.writeUInt16BE(this.messageMethod|this.messageClass,0);t.writeUInt16BE(e.length,2);t.writeUInt32BE(D,4);return Buffer.concat([t,this.transactionId,e])}addMessageIntegrity(e){this.removeAttribute(\"FINGERPRINT\").removeAttribute(\"MESSAGE-INTEGRITY\");this.setAttribute(\"MESSAGE-INTEGRITY\",this.messageIntegrity(e));return this}messageIntegrity(e){const t=Ee(this.bytes,this.bytes.length-R+ue);return Buffer.from((0,Y.createHmac)(\"sha1\",e).update(t).digest(\"hex\"),\"hex\")}addFingerprint(){this.removeAttribute(\"FINGERPRINT\");this.setAttribute(\"FINGERPRINT\",He(this.bytes));return this}get serializedAttributes(){const e=[];for(const t of this.attributesKeys){const s=this.getAttributeValue(t);const[r,,i]=Ge[t];const o=i.name===z.name?i(s,this.transactionId):i(s);e.push({type:r,value:o})}e.push(...this.rawAttributes.map(t=>({type:t.type,value:Buffer.from(t.value)})));return e}};function Pt(n,e){const t=e.length;const s=M(t);const r=Buffer.alloc(4);r.writeUInt16BE(n,0);r.writeUInt16BE(t,2);return Buffer.concat([r,e,Buffer.alloc(s)])}c(Pt,\"serializeAttribute\");var Ee=c((n,e)=>{const t=Buffer.alloc(n.length);n.copy(t,0,0,2);t.writeUInt16BE(e,2);n.copy(t,4,4);return t},\"setBodyLength\");function He(n){const e=Ee(n,n.length-R+Oe);return(Ie(e)^ke)>>>0}c(He,\"messageFingerprint\");function Nt(n,e){const t=Ee(n,n.length-R+ue);return Buffer.from((0,Y.createHmac)(\"sha1\",e).update(t).digest(\"hex\"),\"hex\")}c(Nt,\"messageIntegrity\");function M(n){const e=n%4;return e===0?0:4-e}c(M,\"paddingLength\");function v(n){return n.length>=4&&(n[0]&192)===64}c(v,\"isChannelData\");function Ke(n,e){const t=Buffer.alloc(4);t.writeUInt16BE(n,0);t.writeUInt16BE(e.length,2);return Buffer.concat([t,e])}c(Ke,\"encodeChannelData\");function qe(n){if(!v(n)||n.length<4){return void 0}const e=n.readUInt16BE(0);const t=n.readUInt16BE(2);if(n.length<4+t){return void 0}return{channelNumber:e,data:n.subarray(4,4+t)}}c(qe,\"decodeChannelData\");function ye(n){const e=M(n.length);return e>0?Buffer.concat([n,Buffer.alloc(e)]):n}c(ye,\"padTurnFrame\");function ze(n){const e=[];let t=0;let s=false;while(n.length-t>=4){let r;if(v(n.subarray(t))){const i=n.readUInt16BE(t+2);r=4+i+M(i)}else if((n[t]&192)===0){if(n.length-t<20){break}const i=n.readUInt16BE(t+2);r=20+i+M(i)}else{s=true;break}if(n.length-t<r){break}e.push(n.subarray(t,t+r));t+=r}return{frames:e,malformed:s,rest:n.subarray(t)}}c(ze,\"splitTurnTcpFrames\");var X=require(\"node:crypto\");var se=class{static{c(this,\"StunServerProtocol\")}constructor(e={}){this.software=e.software;this.fingerprint=e.fingerprint??\"if-present\";this.authenticateRequest=e.authenticateRequest}handleDatagram(e){if(!O(e.data)){return[{type:\"ignore\",reason:\"non-stun\"}]}const t=$(e.data);if(!t){return[{type:\"ignore\",reason:\"malformed\"}]}if(t.messageClass===m.INDICATION){return[{type:\"ignore\",reason:\"binding-indication\"}]}if(t.messageClass!==m.REQUEST){return[{type:\"ignore\",reason:\"non-request\"}]}const s={...e,message:t};const r=[...new Set(t.unknownAttributeTypes.filter(Z))].sort((o,a)=>o-a);if(r.length>0){return[this.sendAction(this.errorResponse(s,420,\"Unknown Attribute\",[[\"UNKNOWN-ATTRIBUTES\",r]]),e.remoteAddress)]}if(t.messageMethod!==f.BINDING){return[this.sendAction(this.errorResponse(s,400,\"Bad Request\"),e.remoteAddress)]}const i=this.authenticateRequest?.(s);if(i?.ok===false){return[this.sendAction(this.errorResponse(s,i.errorCode,i.reason,i.attributes),e.remoteAddress)]}return[this.sendAction(this.successResponse(s,i?.attributes),e.remoteAddress)]}sendAction(e,t){return{type:\"send\",data:e.bytes,remoteAddress:t}}successResponse(e,t=[]){const s=new g(f.BINDING,m.RESPONSE,e.message.transactionId);s.setAttribute(\"XOR-MAPPED-ADDRESS\",e.remoteAddress);this.addDefaultAttributes(s,e,t);return s}errorResponse(e,t,s,r=[]){const i=new g(e.message.messageMethod,m.ERROR,e.message.transactionId);i.setAttribute(\"ERROR-CODE\",[t,s]);this.addDefaultAttributes(i,e,r);return i}addDefaultAttributes(e,t,s){for(const[r,i]of s){e.setAttribute(r,i)}if(this.software){e.setAttribute(\"SOFTWARE\",this.software)}if(this.shouldAddFingerprint(t.message)){e.addFingerprint()}}shouldAddFingerprint(e){switch(this.fingerprint){case\"always\":return true;case\"if-present\":return e.getAttributeValue(\"FINGERPRINT\")!==void 0;default:return false}}};var Ve=require(\"node:crypto\");function Ye(n,e,t){return(0,Ve.createHash)(\"md5\").update(Buffer.from([n,e,t].join(\":\"))).digest()}c(Ye,\"makeTurnIntegrityKey\");var Ct=600;var Dt=300;var Ot=600;var kt=3600;var Ut=256;var Lt=17;var re=class{static{c(this,\"TurnServerProtocol\")}constructor(e={}){this.allocations=new Map;this.allocationIdByClientId=new Map;this.allocationIdByRelayId=new Map;this.nonces=new Map;this.tcpBuffers=new Map;this.realm=e.realm??\"lakutata\";this.software=e.software;this.fingerprint=e.fingerprint??\"if-present\";this.allocationLifetime=e.allocationLifetime??Ct;this.permissionLifetime=e.permissionLifetime??Dt;this.channelLifetime=e.channelLifetime??Ot;this.nonceLifetime=e.nonceLifetime??kt;this.maxAllocations=e.maxAllocations??Ut;this.allocationGate=e.allocationGate;this.getPassword=e.getPassword??(()=>void 0);this.nowProvider=e.now;this.bindingProtocol=new se({software:this.software,fingerprint:this.fingerprint})}get allocationCount(){return this.allocations.size}get nextTimeoutAt(){return this.computeNextTimeoutAt()}handleClientDatagram(e){if(v(e.data))return this.handleChannelData(e,this.now());return this.finalizeActions(this.handleClientPacket(e))}handleTcpChunk(e){const t=this.now();const s=[];const r=Buffer.concat([this.tcpBuffers.get(e.clientId)??Buffer.alloc(0),e.data]);const{frames:i,malformed:o,rest:a}=ze(r);if(o){this.tcpBuffers.delete(e.clientId);s.push({type:\"close-client\",clientId:e.clientId});return this.finalizeActions(s,t)}this.tcpBuffers.set(e.clientId,a);let d=false;for(const h of i){const u={clientId:e.clientId,data:h,remoteAddress:e.remoteAddress,localAddress:e.localAddress,transport:e.transport};if(v(h)){s.push(...this.handleChannelData(u,t));continue}d=true;s.push(...this.handleClientPacket(u))}return d?this.finalizeActions(s,t):s}handleRelayPacket(e){const t=this.now();const s=[];const r=this.liveAllocation(this.getRelayAllocation(e.relayId),t,s);if(!r||!r.relayedAddress){s.push({type:\"ignore\",reason:\"unknown-relay\"});return s}const i=this.getChannelBinding(r,e.remoteAddress,t);const o=this.getPermission(r,e.remoteAddress,t);if(!i&&!o){s.push({type:\"ignore\",reason:\"unknown-channel\"});return s}const a=i?Ke(i.number,e.data):new g(f.DATA,m.INDICATION).setAttribute(\"XOR-PEER-ADDRESS\",e.remoteAddress).setAttribute(\"DATA\",e.data).bytes;s.push(this.sendClient(r.client,a));return s}handleRelayBound(e){const t=this.now();const s=this.cleanupExpired(t);const r=this.allocations.get(e.allocationId);if(!r||r.relayId!==e.relayId){s.push({type:\"ignore\",reason:\"unknown-relay\"});return this.finalizeActions(s,t)}if(!r.pendingAllocate){s.push({type:\"ignore\",reason:\"unknown-relay\"});return this.finalizeActions(s,t)}r.relayedAddress=e.relayedAddress;r.expiresAt=t+r.lifetime*1e3;const i=r.pendingAllocate;r.pendingAllocate=void 0;const o=this.successResponse(i.message,f.ALLOCATE,[[\"XOR-RELAYED-ADDRESS\",e.relayedAddress],[\"XOR-MAPPED-ADDRESS\",r.mappedAddress],[\"LIFETIME\",r.lifetime]],i.integrityKey);s.push(this.sendClient(i.client,o.bytes));return this.finalizeActions(s,t)}handleRelayBindFailure(e){const t=this.now();const s=this.cleanupExpired(t);const r=this.allocations.get(e.allocationId);if(!r?.pendingAllocate){s.push({type:\"ignore\",reason:\"unknown-relay\"});return this.finalizeActions(s,t)}const i=r.pendingAllocate;this.deleteAllocation(r);const o=this.errorResponse(i.message,e.errorCode??508,e.reason??\"Insufficient Capacity\",[],i.integrityKey);s.push(this.sendClient(i.client,o.bytes));return this.finalizeActions(s,t)}handleClientClosed(e){const t=this.now();const s=this.cleanupExpired(t);this.tcpBuffers.delete(e.clientId);const r=this.getClientAllocation(e.clientId);if(r){s.push(...this.deleteAllocation(r))}return this.finalizeActions(s,t)}handleTimer(e=this.now()){return this.finalizeActions(this.cleanupExpired(e),e)}handleClientPacket(e){const t=this.now();if(v(e.data))return this.handleChannelData(e,t);const s=this.cleanupExpired(t);if(!O(e.data)){s.push({type:\"ignore\",reason:\"non-stun\"});return s}const r=$(e.data);if(!r){s.push({type:\"ignore\",reason:\"malformed\"});return s}if(r.messageClass===m.INDICATION){if(r.messageMethod===f.BINDING){s.push({type:\"ignore\",reason:\"binding-indication\"});return s}if(r.messageMethod!==f.SEND){s.push({type:\"ignore\",reason:\"unsupported-indication\"});return s}return[...s,...this.handleSendIndication(e,r,t)]}if(r.messageClass!==m.REQUEST){s.push({type:\"ignore\",reason:\"non-request\"});return s}const i=[...new Set(r.unknownAttributeTypes.filter(Z))].sort((o,a)=>o-a);if(i.length>0){s.push(this.sendClient(this.clientEndpoint(e),this.errorResponse(r,420,\"Unknown Attribute\",[[\"UNKNOWN-ATTRIBUTES\",i]]).bytes));return s}if(r.messageMethod===f.BINDING){return[...s,...this.handleBindingRequest(e)]}switch(r.messageMethod){case f.ALLOCATE:return[...s,...this.handleAllocateRequest(e,r,t)];case f.REFRESH:return[...s,...this.handleRefreshRequest(e,r,t)];case f.CREATE_PERMISSION:return[...s,...this.handleCreatePermissionRequest(e,r,t)];case f.CHANNEL_BIND:return[...s,...this.handleChannelBindRequest(e,r,t)];default:s.push(this.sendClient(this.clientEndpoint(e),this.errorResponse(r,400,\"Bad Request\").bytes));return s}}handleBindingRequest(e){const t=this.bindingProtocol.handleDatagram(e);return t.map(s=>this.mapBindingAction(e,s))}handleAllocateRequest(e,t,s){const r=this.authenticateRequest(e,t,f.ALLOCATE);if(\"response\"in r){return[this.sendClient(this.clientEndpoint(e),r.response.bytes)]}const i=t.getAttributeValue(\"REQUESTED-TRANSPORT\");if(i===void 0){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}if(i>>>24!==Lt){return[this.sendClient(r,this.errorResponse(t,442,\"Unsupported Transport Protocol\",[],r.integrityKey).bytes)]}const o=t.getAttributeValue(\"REQUESTED-ADDRESS-FAMILY\");if(o!==void 0&&o!==1){return[this.sendClient(r,this.errorResponse(t,440,\"Address Family not Supported\",[],r.integrityKey).bytes)]}if(t.getAttributeValue(\"EVEN-PORT\")!==void 0||t.getAttributeValue(\"RESERVATION-TOKEN\")!==void 0){return[this.sendClient(r,this.errorResponse(t,508,\"Insufficient Capacity\",[],r.integrityKey).bytes)]}if(this.getClientAllocation(e.clientId)){return[this.sendClient(r,this.errorResponse(t,437,\"Allocation Mismatch\",[],r.integrityKey).bytes)]}if(this.allocationGate?!this.allocationGate.reserve():this.allocations.size>=this.maxAllocations){return[this.sendClient(r,this.errorResponse(t,486,\"Allocation Quota Reached\",[],r.integrityKey).bytes)]}const a=(0,X.randomUUID)();const d=(0,X.randomUUID)();const h={id:a,relayId:d,username:r.username,integrityKey:r.integrityKey,client:this.clientEndpoint(r),mappedAddress:r.remoteAddress,lifetime:this.clampLifetime(t.getAttributeValue(\"LIFETIME\")),pendingAllocate:{client:this.clientEndpoint(r),integrityKey:r.integrityKey,message:t},permissions:new Map,channelsByNumber:new Map,channelsByPeer:new Map};this.allocations.set(a,h);this.allocationIdByClientId.set(r.clientId,a);this.allocationIdByRelayId.set(d,a);return[{type:\"bind-relay\",allocationId:a,relayId:d}]}handleRefreshRequest(e,t,s){const r=this.authenticateRequest(e,t,f.REFRESH);if(\"response\"in r){return[this.sendClient(this.clientEndpoint(e),r.response.bytes)]}const i=this.getClientAllocation(e.clientId);if(!i||i.username!==r.username){return[this.sendClient(r,this.errorResponse(t,437,\"Allocation Mismatch\",[],r.integrityKey).bytes)]}const o=t.getAttributeValue(\"LIFETIME\");if(o===0){const d=this.deleteAllocation(i);const h=this.successResponse(t,f.REFRESH,[[\"LIFETIME\",0]],r.integrityKey);return[this.sendClient(r,h.bytes),...d]}i.lifetime=this.clampLifetime(o);i.expiresAt=s+i.lifetime*1e3;const a=Math.max(0,Math.floor((i.expiresAt-s)/1e3));return[this.sendClient(r,this.successResponse(t,f.REFRESH,[[\"LIFETIME\",a]],r.integrityKey).bytes)]}handleCreatePermissionRequest(e,t,s){const r=this.authenticateRequest(e,t,f.CREATE_PERMISSION);if(\"response\"in r){return[this.sendClient(this.clientEndpoint(e),r.response.bytes)]}const i=this.getClientAllocation(e.clientId);if(!i||i.username!==r.username){return[this.sendClient(r,this.errorResponse(t,437,\"Allocation Mismatch\",[],r.integrityKey).bytes)]}const o=t.getAttributeValue(\"XOR-PEER-ADDRESS\");if(!o){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}if(!Xe(e.remoteAddress,o)){return[this.sendClient(r,this.errorResponse(t,443,\"Peer Address Family Mismatch\",[],r.integrityKey).bytes)]}this.setPermission(i,o,s);return[this.sendClient(r,this.successResponse(t,f.CREATE_PERMISSION,[],r.integrityKey).bytes)]}handleChannelBindRequest(e,t,s){const r=this.authenticateRequest(e,t,f.CHANNEL_BIND);if(\"response\"in r){return[this.sendClient(this.clientEndpoint(e),r.response.bytes)]}const i=this.getClientAllocation(e.clientId);if(!i||i.username!==r.username){return[this.sendClient(r,this.errorResponse(t,437,\"Allocation Mismatch\",[],r.integrityKey).bytes)]}const o=t.getAttributeValue(\"CHANNEL-NUMBER\");const a=t.getAttributeValue(\"XOR-PEER-ADDRESS\");if(!o||!a){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}if(o<16384||o>32767){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}if(!Xe(e.remoteAddress,a)){return[this.sendClient(r,this.errorResponse(t,443,\"Peer Address Family Mismatch\",[],r.integrityKey).bytes)]}const d=ne(a);const h=i.channelsByNumber.get(o);if(h&&ne(h.peerAddress)!==d){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}const u=i.channelsByPeer.get(d);if(u&&u.number!==o){return[this.sendClient(r,this.errorResponse(t,400,\"Bad Request\",[],r.integrityKey).bytes)]}this.setPermission(i,a,s);const l={peerAddress:a,number:o,expiresAt:s+this.channelLifetime*1e3};i.channelsByNumber.set(l.number,l);i.channelsByPeer.set(d,l);return[this.sendClient(r,this.successResponse(t,f.CHANNEL_BIND,[],r.integrityKey).bytes)]}handleSendIndication(e,t,s){const r=this.getClientAllocation(e.clientId);if(!r){return[{type:\"ignore\",reason:\"unknown-client\"}]}const i=t.getAttributeValue(\"XOR-PEER-ADDRESS\");const o=t.getAttributeValue(\"DATA\");if(!i||!Buffer.isBuffer(o)){return[{type:\"ignore\",reason:\"malformed\"}]}if(!this.getPermission(r,i,s)){return[{type:\"ignore\",reason:\"unknown-channel\"}]}return[{type:\"send-relay\",relayId:r.relayId,remoteAddress:i,data:o}]}authenticateRequest(e,t,s){const r=t.getAttributeValue(\"USERNAME\");const i=t.getAttributeValue(\"REALM\");const o=t.getAttributeValue(\"NONCE\");const a=t.getAttributeValue(\"MESSAGE-INTEGRITY\");if(!r||i!==this.realm||!o||!a){return{response:this.unauthorizedResponse(t,401,\"Unauthorized\")}}const d=this.nonces.get(o.toString(\"hex\"));if(!d||d.expiresAt<=this.now()){return{response:this.unauthorizedResponse(t,438,\"Stale Nonce\")}}const h=s===f.ALLOCATE?void 0:this.getClientAllocation(e.clientId);let u=h&&h.username===r?h.integrityKey:void 0;if(!u){const y=this.getPassword(r,this.realm);if(!y){return{response:this.unauthorizedResponse(t,401,\"Unauthorized\")}}u=Ye(r,this.realm,y)}const l=$(e.data,u);if(!l||l.messageMethod!==s){return{response:this.unauthorizedResponse(t,401,\"Unauthorized\")}}return{...e,integrityKey:u,message:l,username:r}}unauthorizedResponse(e,t,s){return this.errorResponse(e,t,s,[[\"REALM\",this.realm],[\"NONCE\",this.issueNonce()]])}successResponse(e,t,s=[],r){const i=new g(t,m.RESPONSE,e.transactionId);this.addResponseAttributes(i,e,s,r);return i}errorResponse(e,t,s,r=[],i){const o=new g(e.messageMethod,m.ERROR,e.transactionId);o.setAttribute(\"ERROR-CODE\",[t,s]);this.addResponseAttributes(o,e,r,i);return o}addResponseAttributes(e,t,s,r){for(const[i,o]of s){e.setAttribute(i,o)}if(this.software){e.setAttribute(\"SOFTWARE\",this.software)}if(r){e.addMessageIntegrity(r)}if(this.shouldAddFingerprint(t)){e.addFingerprint()}}shouldAddFingerprint(e){switch(this.fingerprint){case\"always\":return true;case\"if-present\":return e.getAttributeValue(\"FINGERPRINT\")!==void 0;default:return false}}issueNonce(){const e=(0,X.randomBytes)(16);this.nonces.set(e.toString(\"hex\"),{value:e,expiresAt:this.now()+this.nonceLifetime*1e3});return e}sendClient(e,t){return{type:\"send-client\",clientId:e.clientId,transport:e.transport,remoteAddress:e.remoteAddress,data:t}}mapBindingAction(e,t){if(t.type===\"send\"){return this.sendClient(this.clientEndpoint(e),t.data)}return t}clientEndpoint(e){return{clientId:e.clientId,transport:e.transport,remoteAddress:e.remoteAddress,localAddress:e.localAddress}}handleChannelData(e,t){const s=[];const r=qe(e.data);if(!r){s.push({type:\"ignore\",reason:\"malformed\"});return s}const i=this.liveAllocation(this.getClientAllocation(e.clientId),t,s);if(!i){s.push({type:\"ignore\",reason:\"unknown-client\"});return s}const o=i.channelsByNumber.get(r.channelNumber);if(!o||o.expiresAt<=t){if(o){this.removeChannelBinding(i,o)}s.push({type:\"ignore\",reason:\"unknown-channel\"});return s}s.push({type:\"send-relay\",relayId:i.relayId,remoteAddress:o.peerAddress,data:r.data});return s}liveAllocation(e,t,s){if(e?.expiresAt!==void 0&&e.expiresAt<=t){s.push(...this.deleteAllocation(e));return void 0}return e}getClientAllocation(e){const t=this.allocationIdByClientId.get(e);return t?this.allocations.get(t):void 0}getRelayAllocation(e){const t=this.allocationIdByRelayId.get(e);return t?this.allocations.get(t):void 0}setPermission(e,t,s){e.permissions.set($e(t),{peerAddress:t,expiresAt:s+this.permissionLifetime*1e3})}getPermission(e,t,s){const r=$e(t);const i=e.permissions.get(r);if(!i){return void 0}if(i.expiresAt<=s){e.permissions.delete(r);return void 0}return i}getChannelBinding(e,t,s){const r=ne(t);const i=e.channelsByPeer.get(r);if(!i){return void 0}if(i.expiresAt<=s){this.removeChannelBinding(e,i);return void 0}return i}removeChannelBinding(e,t){e.channelsByNumber.delete(t.number);e.channelsByPeer.delete(ne(t.peerAddress))}deleteAllocation(e){if(this.allocations.delete(e.id))this.allocationGate?.release();this.allocationIdByClientId.delete(e.client.clientId);this.allocationIdByRelayId.delete(e.relayId);return[{type:\"close-relay\",relayId:e.relayId}]}cleanupExpired(e){const t=[];for(const[s,r]of[...this.nonces]){if(r.expiresAt<=e){this.nonces.delete(s)}}for(const s of[...this.allocations.values()]){if(s.expiresAt&&s.expiresAt<=e){t.push(...this.deleteAllocation(s));continue}for(const[r,i]of[...s.permissions]){if(i.expiresAt<=e){s.permissions.delete(r)}}for(const r of[...s.channelsByNumber.values()]){if(r.expiresAt<=e){this.removeChannelBinding(s,r)}}}return t}computeNextTimeoutAt(){let e;for(const t of this.nonces.values()){e=e===void 0?t.expiresAt:Math.min(e,t.expiresAt)}for(const t of this.allocations.values()){if(t.expiresAt!==void 0){e=e===void 0?t.expiresAt:Math.min(e,t.expiresAt)}for(const s of t.permissions.values()){e=e===void 0?s.expiresAt:Math.min(e,s.expiresAt)}for(const s of t.channelsByNumber.values()){e=e===void 0?s.expiresAt:Math.min(e,s.expiresAt)}}return e}finalizeActions(e,t=this.now()){const s=this.computeNextTimeoutAt();if(s!==void 0){e.push({type:\"schedule-timeout\",at:Math.max(t,s)})}return e}clampLifetime(e){if(!e||e<=0){return this.allocationLifetime}return Math.min(e,this.allocationLifetime)}now(){return this.nowProvider?.()??Date.now()}};function ne(n){return`${n[0]}:${n[1]}`}c(ne,\"addressKey\");function $e(n){return n[0]}c($e,\"permissionKey\");function Xe(n,e){return We(n[0])===We(e[0])}c(Xe,\"hasSameAddressFamily\");function We(n){return n.includes(\":\")}c(We,\"isIpv6Address\");var F=J(\"webrtc/turn/server\");var ie=class{static{c(this,\"NodeTurnServer\")}constructor(e={}){this.tcpConnections=new Map;this.tlsConnections=new Map;this.relaySockets=new Map;this.relayBoundByPort=new Map;this.relayPorts=new Map;this.closed=false;const{host:t=\"0.0.0.0\",port:s=3478,relayAddress:r=t===\"0.0.0.0\"?\"127.0.0.1\":t,relayBindAddress:i=t,relayPortRange:o,udp:a=true,tcp:d=true,credentials:h,tls:u,getPassword:l,software:y=\"lakutata-webrtc\",reusePort:P=false,...N}=e;this.reusePort=P;this.host=t;this.port=s;this.udpEnabled=a;this.tcpEnabled=d;this.tlsEnabled=u!==void 0;this.tlsExternal=Boolean(u?.external);this.tlsOptions=u;this.tlsPort=u?.port??(s===0?0:5349);this.relayAddress=r;this.relayBindAddress=i;if(o&&o[0]>o[1]){throw new Error(`relayPortRange: the first port (${o[0]}) is above the last one (${o[1]})`)}this.relayPortRange=o;this.protocol=new re({software:y,getPassword:l??((I,C)=>h?.[I]),...N})}get address(){if(this.boundPort===void 0){return void 0}return[this.relayAddress,this.boundPort]}get tlsAddress(){if(this.boundTlsPort===void 0){return void 0}return[this.relayAddress,this.boundTlsPort]}async listen(){if(this.boundPort!==void 0||this.boundTlsPort!==void 0){return}this.closed=false;if(!this.udpEnabled&&!this.tcpEnabled&&!this.tlsEnabled){throw new Error(\"NodeTurnServer requires udp, tcp, or tls to be enabled\")}if(this.tcpEnabled&&this.tlsEnabled&&!this.tlsExternal&&this.tlsPort!==0&&this.tlsPort===this.port){throw new Error(\"NodeTurnServer cannot share the same port for tcp and tls\")}if(this.tlsEnabled&&!this.tlsExternal&&(!this.tlsOptions?.key||!this.tlsOptions?.cert)){throw new Error(\"NodeTurnServer tls requires both key and cert\")}const e=this.port===0&&this.udpEnabled&&this.tcpEnabled;const t=e?vt:1;for(let s=1;;s++){try{await this.listenTransports();break}catch(r){await this.closeListeners();if(Ft(r)&&s<t){continue}throw r}}this.updateTimer()}async listenTransports(){if(this.udpEnabled){await this.listenUdp()}if(this.tcpEnabled){await this.listenTcp(this.boundPort??this.port)}if(this.tlsEnabled){if(this.tlsExternal){if(this.tlsPort!==0){this.boundTlsPort=this.tlsPort}}else{await this.listenTls(this.tlsPort)}}}attachTlsSocket(e,t={}){if(!this.tlsEnabled){throw new Error(\"NodeTurnServer tls must be enabled before attaching sockets\")}this.handleStreamConnection(e,\"tls\",t)}async close(){this.closed=true;if(this.timer){clearTimeout(this.timer);this.timer=void 0}for(const t of this.tcpConnections.values()){t.destroy()}this.tcpConnections.clear();for(const t of this.tlsConnections.values()){t.destroy()}this.tlsConnections.clear();const e=[...this.relaySockets.values()].map(t=>new Promise(s=>{t.once(\"close\",s);t.close()}));this.relaySockets.clear();this.relayBoundByPort.clear();this.relayPorts.clear();await Promise.all([...e,this.closeListeners()])}async closeListeners(){const e=[];if(this.udpSocket){const t=this.udpSocket;this.udpSocket=void 0;e.push(new Promise(s=>{t.once(\"close\",s);t.close()}))}if(this.tcpServer){const t=this.tcpServer;this.tcpServer=void 0;e.push(new Promise(s=>{t.close(()=>s())}))}if(this.tlsServer){const t=this.tlsServer;this.tlsServer=void 0;e.push(new Promise(s=>{t.close(()=>s())}))}this.boundPort=void 0;this.boundTlsPort=void 0;await Promise.all(e)}async listenUdp(){const e=(0,ge.createSocket)({type:this.socketType(this.host),reusePort:this.reusePort});this.udpSocket=e;e.on(\"message\",G(async(t,s)=>{await this.executeActions(this.protocol.handleClientDatagram({clientId:Gt(s),data:t,remoteAddress:[B(s.address),s.port],localAddress:this.address,transport:\"udp\"}))},t=>F(\"client datagram failed\",t)));await new Promise((t,s)=>{e.once(\"error\",s);e.bind({address:this.host,port:this.port},()=>{e.off(\"error\",s);const r=e.address();if(typeof r===\"string\"){s(new Error(\"Expected UDP address info\"));return}this.boundPort=r.port;ae(e);t()})})}async listenTcp(e){const t=(0,Qe.createServer)(s=>{this.handleStreamConnection(s,\"tcp\")});this.tcpServer=t;await new Promise((s,r)=>{t.once(\"error\",r);t.listen({port:e,host:this.host,reusePort:this.reusePort},()=>{t.off(\"error\",r);const i=t.address();if(!i||typeof i===\"string\"){r(new Error(\"Expected TCP address info\"));return}this.boundPort=i.port;s()})})}async listenTls(e){const t=(0,Ze.createServer)(this.tlsOptions,s=>{this.handleStreamConnection(s,\"tls\")});this.tlsServer=t;await new Promise((s,r)=>{t.once(\"error\",r);t.listen({port:e,host:this.host,reusePort:this.reusePort},()=>{t.off(\"error\",r);const i=t.address();if(!i||typeof i===\"string\"){r(new Error(\"Expected TLS address info\"));return}this.boundTlsPort=i.port;s()})})}async executeActions(e){let t;for(const s of e){switch(s.type){case\"send-client\":await this.sendClient(s);break;case\"send-relay\":await this.sendRelay(s);break;case\"bind-relay\":await this.bindRelay(s.allocationId,s.relayId);break;case\"close-relay\":await this.closeRelay(s.relayId);break;case\"close-client\":this.closeClient(s.clientId);break;case\"schedule-timeout\":t=s.at;break;default:break}}if(t!==void 0)this.setTimer(t)}async sendClient(e){if(e.transport===\"tcp\"||e.transport===\"tls\"){const t=this.getStreamClient(e.transport,e.clientId);if(!t||t.destroyed){return}await new Promise((s,r)=>{t.write(ye(e.data),i=>{if(i){r(i);return}s()})}).catch(async s=>{if(!_t(s)){throw s}await this.executeActions(this.protocol.handleClientClosed({clientId:e.clientId}))});return}if(e.transport!==\"udp\"){return}if(!this.udpSocket){return}this.udpSocket.send(ye(e.data),e.remoteAddress[1],e.remoteAddress[0])}async sendRelay(e){const t=this.relaySockets.get(e.relayId);if(!t){return}t.send(e.data,e.remoteAddress[1],e.remoteAddress[0])}async bindRelaySocket(){const e=c(a=>new Promise((d,h)=>{const u=(0,ge.createSocket)(this.socketType(this.relayBindAddress));u.once(\"error\",l=>{try{u.close()}catch{}h(l)});u.bind({address:this.relayBindAddress,port:a},()=>{u.removeAllListeners(\"error\");ae(u);d(u)})}),\"bind\");if(!this.relayPortRange)return e(0);const[t,s]=this.relayPortRange;const r=s-t+1;const i=Math.floor(Math.random()*r);let o;for(let a=0;a<r;a++){try{return await e(t+(i+a)%r)}catch(d){o=d;if(d.code!==\"EADDRINUSE\")break}}throw o??new Error(\"no free port in the relay port range\")}async bindRelay(e,t){try{const s=await this.bindRelaySocket();this.relaySockets.set(t,s);s.on(\"error\",i=>F(\"relay socket error\",i));const r=s.address();if(typeof r===\"string\"){throw new Error(\"Expected relay UDP address info\")}this.relayBoundByPort.set(r.port,r);this.relayPorts.set(t,r.port);s.on(\"message\",G(async(i,o)=>{await this.executeActions(this.protocol.handleRelayPacket({relayId:t,data:i,remoteAddress:this.normalizeRelayRemoteAddress(o),localAddress:[this.relayAddress,r.port]}))},i=>F(\"relay datagram failed\",i)));await this.executeActions(this.protocol.handleRelayBound({allocationId:e,relayId:t,relayedAddress:[this.relayAddress,r.port]}))}catch(s){F(\"relay bind failed\",s);const r=this.relaySockets.get(t);this.relaySockets.delete(t);this.forgetRelayPort(t);try{r?.close()}catch{}await this.executeActions(this.protocol.handleRelayBindFailure({allocationId:e}))}}async closeRelay(e){const t=this.relaySockets.get(e);if(!t){return}this.relaySockets.delete(e);this.forgetRelayPort(e);await new Promise(s=>{t.once(\"close\",s);t.close()})}closeClient(e){const t=this.tcpConnections.get(e);if(t&&!t.destroyed){t.destroy();return}const s=this.tlsConnections.get(e);if(s&&!s.destroyed){s.destroy()}}updateTimer(){const e=this.protocol.nextTimeoutAt;if(e===void 0){if(this.timer)clearTimeout(this.timer);this.timer=void 0;return}this.setTimer(e)}setTimer(e){if(this.timer){clearTimeout(this.timer);this.timer=void 0}if(this.closed)return;this.timer=setTimeout(G(async()=>{this.timer=void 0;await this.executeActions(this.protocol.handleTimer())},t=>F(\"timer failed\",t)),Math.max(0,e-Date.now()))}normalizeRelayRemoteAddress(e){const t=B(e.address);const s=this.relayBoundByPort.get(e.port);if(s&&this.isRelaySocketAddress(s,t,e.port)){return[this.relayAddress,e.port]}return[t,e.port]}isRelaySocketAddress(e,t,s){if(e.port!==s){return false}const r=B(e.address);return r===t||(Mt(r)||this.isLocalInterfaceAddress(r))&&this.isLocalInterfaceAddress(t)}isLocalInterfaceAddress(e){if(e===this.relayAddress){return true}const t=Date.now();if(!this.interfaceAddresses||t-this.interfaceAddresses.at>1e3){const s=new Set;for(const r of Object.values((0,Je.networkInterfaces)()).flat()){if(r)s.add(B(r.address))}this.interfaceAddresses={at:t,addresses:s}}return this.interfaceAddresses.addresses.has(e)}forgetRelayPort(e){const t=this.relayPorts.get(e);this.relayPorts.delete(e);if(t!==void 0)this.relayBoundByPort.delete(t)}socketType(e){return e.includes(\":\")?\"udp6\":\"udp4\"}handleStreamConnection(e,t,s={}){const r=(0,je.randomUUID)();const i=s.localAddress??this.resolveStreamLocalAddress(e,t);if(t===\"tcp\"){this.tcpConnections.set(r,e)}else{this.tlsConnections.set(r,e)}const o=c(async a=>{await this.executeActions(this.protocol.handleTcpChunk({clientId:r,data:a,remoteAddress:[B(e.remoteAddress??\"\"),e.remotePort??0],localAddress:i,transport:t}))},\"handleData\");e.on(\"data\",a=>{void o(a)});e.on(\"close\",G(async()=>{if(t===\"tcp\"){this.tcpConnections.delete(r)}else{this.tlsConnections.delete(r)}await this.executeActions(this.protocol.handleClientClosed({clientId:r}))},a=>F(\"client close failed\",a)));e.on(\"error\",()=>{});if(s.initialData?.length){void o(s.initialData)}}getStreamClient(e,t){return e===\"tcp\"?this.tcpConnections.get(t):this.tlsConnections.get(t)}resolveStreamLocalAddress(e,t){if(e.localAddress&&e.localPort){return[B(e.localAddress),e.localPort]}return t===\"tcp\"?this.address:this.tlsAddress}};function B(n){return n.split(\"%\")[0]}c(B,\"normalizeAddress\");function Mt(n){return n===\"0.0.0.0\"||n===\"::\"}c(Mt,\"isWildcardAddress\");var vt=10;function Ft(n){return!!n&&typeof n===\"object\"&&\"code\"in n&&n.code===\"EADDRINUSE\"}c(Ft,\"isAddressInUseError\");function _t(n){const e=n&&typeof n===\"object\"&&\"code\"in n?n.code:void 0;return e===\"ECONNRESET\"||e===\"EPIPE\"||e===\"ERR_STREAM_DESTROYED\"}c(_t,\"isClosedTcpWriteError\");function Gt(n){return`udp:${B(n.address)}:${n.port}`}c(Gt,\"udpClientId\");var et=require(\"node:crypto\");function Ht(n,e){return(0,et.createHmac)(\"sha1\",n).update(e).digest(\"base64\")}c(Ht,\"turnPassword\");function tt(n,e,t=Date.now()){const s=e.indexOf(\":\");if(s<=0)return void 0;const r=Number(e.slice(0,s));if(!Number.isFinite(r)||r*1e3<t)return void 0;return Ht(n,e)}c(tt,\"turnPasswordIfValid\");function nt(){if(!W.parentPort)throw new Error(\"The TURN server serves in a worker thread only\");const n=W.parentPort;const e=W.workerData;const t=new Int32Array(e.allocations);const s=1+e.thread;const r=e.options.maxAllocations??Infinity;const i=new ie({...e.options,reusePort:true,getPassword:c(a=>e.users[a]??tt(e.secret,a),\"getPassword\"),allocationGate:{reserve:c(()=>{if(Atomics.add(t,0,1)<r){Atomics.add(t,s,1);return true}Atomics.sub(t,0,1);return false},\"reserve\"),release:c(()=>{Atomics.sub(t,0,1);Atomics.sub(t,s,1)},\"release\")}});const o=c(a=>n.postMessage(a),\"post\");n.on(\"message\",a=>{if(a.type===\"debug\"){Re(a.enabled?(d,h)=>o({type:\"log\",namespace:d,message:`[thread ${e.thread}] ${(0,st.format)(...h)}`}):void 0);return}i.close().then(()=>o({type:\"stopped\"}),()=>o({type:\"stopped\"}))});i.listen().then(()=>o({type:\"ready\",port:i.address?.[1],tlsPort:i.tlsAddress?.[1]}),a=>o({type:\"failed\",error:a instanceof Error?a.message:String(a)}))}c(nt,\"runTURNWorker\");nt();\n";

package/dist/esm/turn/TURNWorkers.js

@@ -0,0 +1,206 @@
+import { createSocket } from 'node:dgram';
+import { createServer, isIPv6 } from 'node:net';
+import { Worker } from 'node:worker_threads';
+import { debug, debugHandlerWatchers, hasDebugHandler } from '../lib/common/log.js';
+import { turnWorkerCode } from './TURNWorkerCode.js';
+const log = debug('webrtc/turn/workers');
+/**
+ * How long a thread asked to stop has to close its server, in milliseconds
+ */
+const STOP_TIMEOUT = 5000;
+/**
+ * Whether the listeners of several threads can share a port here, the system spreading the clients among them
+ * (SO_REUSEPORT): on Linux only (Bun lets the sockets of macOS share a port, but macOS gives all its datagrams to one
+ * of them), when two UDP sockets, then two TCP servers, bind to one port
+ * @param host The address the server listens on.
+ * @internal
+ */
+export async function portsShareable(host) {
+    if (process.platform !== 'linux')
+        return false;
+    const sockets = [];
+    const servers = [];
+    const bindUdp = (port) => new Promise((resolve, reject) => {
+        const socket = createSocket({ type: isIPv6(host) ? 'udp6' : 'udp4', reusePort: true });
+        sockets.push(socket);
+        socket.once('error', reject);
+        socket.bind(port, host, () => resolve(socket.address().port));
+    });
+    const listenTcp = (port) => new Promise((resolve, reject) => {
+        const server = createServer();
+        servers.push(server);
+        server.once('error', reject);
+        server.listen({ port: port, host: host, reusePort: true }, () => resolve(server.address().port));
+    });
+    try {
+        await bindUdp(await bindUdp(0));
+        await listenTcp(await listenTcp(0));
+        return true;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        for (const socket of sockets) {
+            try {
+                socket.close();
+            }
+            catch {
+                //Not bound
+            }
+        }
+        for (const server of servers)
+            server.close(() => undefined);
+    }
+}
+/**
+ * The worker threads of each TURN server serving in some (for the tests and the benchmarks)
+ * @internal
+ */
+export const turnWorkers = new WeakMap();
+/**
+ * The worker threads of a TURN server, sharing its ports (SO_REUSEPORT) and counting their allocations together
+ * @internal
+ */
+export class TURNWorkers {
+    #slots;
+    #data;
+    #counts;
+    //The ports the threads bound, the first thread choosing them when the options give 0
+    #port;
+    #tlsPort;
+    #stopping = false;
+    //Tells the threads whether the main thread has a debug handler
+    #debugging = (set) => {
+        for (const slot of this.#slots)
+            slot.worker?.postMessage({ type: 'debug', enabled: set });
+    };
+    /**
+     * Prepare the threads.
+     * @param data What each thread is started with (they share one counter of allocations).
+     * @throws {Error} When the code of the threads was not built.
+     */
+    constructor(data) {
+        if (!turnWorkerCode)
+            throw new Error('The code of the worker threads of the TURN server is not built (scripts/workers.mjs)');
+        this.#data = data;
+        this.#counts = new Int32Array(data[0].allocations);
+        this.#slots = data.map((_, index) => ({ index: index, ran: false }));
+    }
+    /**
+     * Start the threads: the first one, then the others on the ports it bound.
+     * @throws {Error} When a thread cannot serve (a port in use).
+     */
+    async start() {
+        debugHandlerWatchers.add(this.#debugging);
+        const first = await this.#start(this.#slots[0]);
+        this.#port = first.port;
+        this.#tlsPort = first.tlsPort;
+        await Promise.all(this.#slots.slice(1).map((slot) => this.#start(slot)));
+    }
+    /**
+     * Stop the threads, each closing its server.
+     */
+    async stop() {
+        this.#stopping = true;
+        debugHandlerWatchers.delete(this.#debugging);
+        await Promise.all(this.#slots.map(async (slot) => {
+            const worker = slot.worker;
+            if (!worker)
+                return;
+            let timer;
+            await Promise.race([
+                new Promise((resolve) => {
+                    worker.on('message', (message) => {
+                        if (message.type === 'stopped')
+                            resolve();
+                    });
+                    worker.postMessage({ type: 'stop' });
+                }),
+                new Promise((resolve) => {
+                    timer = setTimeout(resolve, STOP_TIMEOUT);
+                })
+            ]);
+            clearTimeout(timer);
+            await worker.terminate();
+        }));
+    }
+    /**
+     * The allocations of all the threads.
+     */
+    get allocations() {
+        return Atomics.load(this.#counts, 0);
+    }
+    /**
+     * The allocations of each thread.
+     */
+    get threadAllocations() {
+        return this.#slots.map((slot) => Atomics.load(this.#counts, 1 + slot.index));
+    }
+    /**
+     * The port of STUN and TURN over UDP and TCP.
+     */
+    get port() {
+        return this.#port;
+    }
+    /**
+     * The port of TURN over TLS.
+     */
+    get tlsPort() {
+        return this.#tlsPort;
+    }
+    /**
+     * Start the thread of a slot, on the ports of the first one when they are known
+     * @param slot
+     * @returns The ports it bound.
+     */
+    #start(slot) {
+        const data = this.#data[slot.index];
+        const options = this.#port === undefined ? data.options : {
+            ...data.options,
+            port: this.#port,
+            ...data.options.tls && this.#tlsPort !== undefined ? { tls: { ...data.options.tls, port: this.#tlsPort } } : {}
+        };
+        const worker = new Worker(turnWorkerCode, { eval: true, workerData: { ...data, options: options } });
+        slot.worker = worker;
+        if (hasDebugHandler())
+            worker.postMessage({ type: 'debug', enabled: true });
+        const ready = new Promise((resolve, reject) => {
+            worker.on('message', (message) => {
+                switch (message.type) {
+                    case 'ready':
+                        slot.ran = true;
+                        return resolve({ port: message.port, tlsPort: message.tlsPort });
+                    case 'failed':
+                        return reject(new Error(message.error));
+                    case 'log':
+                        return debug(message.namespace)(message.message);
+                }
+            });
+            worker.on('exit', () => reject(new Error('The worker thread of the TURN server stopped')));
+        });
+        worker.on('error', (error) => log('the worker thread %d failed: %O', slot.index, error));
+        worker.on('exit', (code) => {
+            if (!this.#stopping)
+                log('the worker thread %d stopped (exit code %d)', slot.index, code);
+            this.#exited(slot, worker);
+        });
+        return ready;
+    }
+    /**
+     * A thread stopped: its allocations are gone, and it is started again, unless it never served. Most clients of the
+     * other threads move too (the system spreads them over the threads left), and allocate again
+     * @param slot
+     * @param worker
+     */
+    #exited(slot, worker) {
+        if (slot.worker !== worker)
+            return;
+        slot.worker = undefined;
+        const own = Atomics.exchange(this.#counts, 1 + slot.index, 0);
+        Atomics.sub(this.#counts, 0, own);
+        if (this.#stopping || !slot.ran)
+            return;
+        this.#start(slot).catch((error) => log('the worker thread %d could not start again: %O', slot.index, error));
+    }
+}