@mt-tl/server 0.1.0

package/dist/server/message-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-pipeline.js","sourceRoot":"","sources":["../../src/server/message-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,UAAU,EAAe,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAM1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,OAAO,EAAE,gBAAgB,EAAyD,MAAM,sBAAsB,CAAA;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AA8BlE;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAMK;IAL7B,yFAAyF;IACzF,UAAU,CAAa;IACN,MAAM,CAAgB;IACtB,GAAG,CAAQ;IAE5B,YAA6B,IAAkB;QAAlB,SAAI,GAAJ,IAAI,CAAc;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAA;QACrD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;QACpC,sEAAsE;QACtE,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBACjC,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,kFAAkF;aAC3F,CAAC,CAAA;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAgB;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,EAAE,CAAA;YACZ,OAAM;QACV,CAAC;QACD,yEAAyE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAChF,IAAI,WAAW;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAgB;QAC1D,iDAAiD;QACjD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QAE5D,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;QAC1D,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC9B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,OAAM;QAExC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACxD,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClB,OAAM;QACV,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAEO,SAAS,CAAC,IAAgB,EAAE,IAAc;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA,CAAC,cAAc;QAC9B,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAA;QACjC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAgB;QAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACtC,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;YACnE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QACvB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QAE9C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAEnD,2EAA2E;QAC3E,+EAA+E;QAC/E,8EAA8E;QAC9E,8EAA8E;QAC9E,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,oEAAoE;gBACpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;gBACjD,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;YACvB,CAAC;QACL,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,EAAE,CAAA;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QACtD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3B,6CAA6C;QAC7C,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;QAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAA;QAC1B,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;QAC9B,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QACzC,CAAC;QAED,4EAA4E;QAC5E,wEAAwE;QACxE,6EAA6E;QAC7E,sDAAsD;QACtD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/E,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,OAAO,CAAA;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC,aAAa,CACd,IAAI,EACJ;gBACI,CAAC,EAAE,iBAAiB;gBACpB,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,EAAE;gBACd,eAAe,EAAE,OAAO;aAC3B,EACD,EAAE,cAAc,EAAE,KAAK,EAAE,CAC5B,CAAA;YACD,OAAM;QACV,CAAC;QAED,qFAAqF;QACrF,gEAAgE;QAChE,gFAAgF;QAChF,0EAA0E;QAC1E,6EAA6E;QAC7E,yCAAyC;QACzC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAA;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE;YAC5C,GAAG,YAAY,CAAC,OAAO,CAAC;YACxB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,QAAQ;SACvB,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5D,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;YACjD,OAAM;QACV,CAAC;QAED,MAAM,aAAa,CACf,IAAI,CAAC,IAAI,CAAC,OAAO,EACjB,IAAI,EACJ,IAAI,EACJ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,EAC9E,IAAI,CAAC,GAAG,CACX,CAAA;QAED,2EAA2E;QAC3E,gDAAgD;QAChD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE5E,MAAM,GAAG,GAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC7D,CAAC;IAED,2EAA2E;IAE3E,aAAa,CAAC,IAAgB,EAAE,IAAc,EAAE,OAAoB,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAA;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAA;QACpC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,SAAS;YAAE,OAAM;QAE/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACxD,kEAAkE;QAClE,uEAAuE;QACvE,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACrB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAA;QAC1D,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAExB,4EAA4E;QAC5E,MAAM,MAAM,GAAG,EAAE,CAAA;QACjB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;QACjE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAEhD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;CACJ"}

package/dist/session/inbound-tracker.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Per-connection inbound-message guard and state tracker.
+ *
+ * Implements the client→server half of the MTProto message-id / sequence-number
+ * rules (https://core.telegram.org/mtproto/description) and backs the
+ * `msgs_state_req` / `msgs_state_info` service messages
+ * (https://core.telegram.org/mtproto/service_messages_about_messages).
+ *
+ * A connection carries a single session's message stream, so one tracker per
+ * connection is sufficient. The tracker is purely in-memory: replay protection
+ * is per-connection-process, while the time-window check (codes 16/17) bounds
+ * cross-process replay since stale msg_ids are rejected everywhere.
+ *
+ * Sequence-number parity (34/35) and ordering (32) are enforced when `checkSeqNo`
+ * / `checkOrder` are set (gated by the `disableSeqNoCheck` config). Code 33 (seqno
+ * too high) is unreachable under serial in-order processing; code 64 (invalid
+ * container) is raised by the dispatcher. The outer envelope and each
+ * container-inner message both run through {@link InboundTracker.accept}. See
+ * docs/internals/protocol-compliance.md.
+ */
+/** `bad_msg_notification` error codes. 16–35 come from {@link InboundTracker.accept};
+ *  64 (invalid container) is raised by the dispatcher. */
+export type BadMsgCode = 16 | 17 | 18 | 19 | 20 | 32 | 33 | 34 | 35 | 64;
+/** The cached answer (`rpc_result`) to a request, for `msg_detailed_info`. */
+export interface CachedAnswer {
+    answerMsgId: bigint;
+    bytes: number;
+}
+export type AcceptResult = {
+    ok: true;
+}
+/** Reject and reply `bad_msg_notification` with this code. */
+ | {
+    ok: false;
+    code: BadMsgCode;
+}
+/** Duplicate of an already-answered request — reply `msg_detailed_info`. */
+ | {
+    ok: false;
+    detailed: CachedAnswer;
+}
+/** Benign duplicate with no cached answer — drop silently, send no reply. */
+ | {
+    ok: false;
+    drop: true;
+};
+/** Classification of an inbound message, derived from its constructor id. */
+export interface AcceptOptions {
+    /** The payload is a `msg_container` (a duplicate of one is a protocol error → 19). */
+    isContainer?: boolean;
+    /** The message requires acknowledgment (RPC queries); odd seqno expected. */
+    contentRelated?: boolean;
+    /** Enforce seqno parity (codes 34/35). */
+    checkSeqNo?: boolean;
+    /** Enforce content-seqno ordering (code 32). Only the top-level stream — inner
+     *  container messages are skipped, since a resend container carries old seqnos. */
+    checkOrder?: boolean;
+}
+/** Classify a raw payload by its leading constructor id (used to drive `accept`). */
+export declare function messageClass(payload: Buffer): {
+    isContainer: boolean;
+    contentRelated: boolean;
+};
+export interface InboundTrackerOptions {
+    /** Clock in milliseconds (default `Date.now`); injectable for tests. */
+    nowMs?: () => number;
+    /** Reject msg_ids whose timestamp is more than this far in the future. */
+    futureToleranceSec?: number;
+    /** Reject msg_ids whose timestamp is more than this far in the past. */
+    pastToleranceSec?: number;
+    /** Size of the recent-msg_id window kept for dedup/state (FIFO eviction). */
+    maxTracked?: number;
+}
+export declare class InboundTracker {
+    private readonly received;
+    /** Insertion order, for FIFO eviction once the window is full. */
+    private readonly order;
+    /** Highest msg_id evicted from the window — anything ≤ this is "too old to verify". */
+    private evictedHigh;
+    /** Highest msg_id ever accepted (distinguishes "in range" from "too high"). */
+    private maxReceived;
+    /** Highest odd seqno of a content-related message seen (for ordering code 32). */
+    private lastContentSeqNo;
+    private readonly now;
+    private readonly futureTolerance;
+    private readonly pastTolerance;
+    private readonly maxTracked;
+    constructor(opts?: InboundTrackerOptions);
+    /**
+     * Validate and record an inbound message. Returns the `bad_msg_notification`
+     * error code if the message must be rejected, `{ drop: true }` for a benign
+     * duplicate to ignore silently, or `{ ok: true }` if it should be processed. A
+     * rejected message is NOT recorded, so the client may correct and resend it
+     * (e.g. after a `bad_server_salt`, which re-uses the same msg_id).
+     */
+    accept(msgId: bigint, seqNo: number, opts?: AcceptOptions): AcceptResult;
+    /**
+     * Record the reply (`rpc_result`) generated for a request, so a later duplicate
+     * of that request can be answered with `msg_detailed_info` instead of dropped.
+     * No-op if the request id is no longer tracked.
+     */
+    recordAnswer(reqMsgId: bigint, answerMsgId: bigint, bytes: number): void;
+    /**
+     * Record a received msg_id without validation. Used for messages observed
+     * inside a container (their ids are not individually validated), so that
+     * `msgs_state_req` can still report them as received.
+     */
+    note(msgId: bigint, seqNo: number): void;
+    /**
+     * Per-id status bytes for `msgs_state_info.info` — one byte per requested id
+     * (see the spec's status-byte table). Reports received messages as state 4
+     * with the appropriate high bits, and unseen ids as 1/2/3 by position relative
+     * to the tracking window.
+     */
+    stateOf(ids: bigint[]): Buffer;
+    private stateByte;
+}
+//# sourceMappingURL=inbound-tracker.d.ts.map

package/dist/session/inbound-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-tracker.d.ts","sourceRoot":"","sources":["../../src/session/inbound-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;0DAC0D;AAC1D,MAAM,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAExE,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,YAAY,GAClB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE;AACd,8DAA8D;GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AACjC,4EAA4E;GAC1E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE;AACvC,6EAA6E;GAC3E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAAA;AAE/B,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC1B,sFAAsF;IACtF,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;uFACmF;IACnF,UAAU,CAAC,EAAE,OAAO,CAAA;CACvB;AAsBD,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAI/F;AAED,MAAM,WAAW,qBAAqB;IAClC,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IACpB,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;CACtB;AAQD,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,uFAAuF;IACvF,OAAO,CAAC,WAAW,CAAK;IACxB,+EAA+E;IAC/E,OAAO,CAAC,WAAW,CAAK;IACxB,kFAAkF;IAClF,OAAO,CAAC,gBAAgB,CAAK;IAE7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;gBAEvB,IAAI,GAAE,qBAA0B;IAO5C;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,YAAY;IAyC5E;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAKxE;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAYxC;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM;IAK9B,OAAO,CAAC,SAAS;CAcpB"}

package/dist/session/inbound-tracker.js

@@ -0,0 +1,170 @@
+/**
+ * Per-connection inbound-message guard and state tracker.
+ *
+ * Implements the client→server half of the MTProto message-id / sequence-number
+ * rules (https://core.telegram.org/mtproto/description) and backs the
+ * `msgs_state_req` / `msgs_state_info` service messages
+ * (https://core.telegram.org/mtproto/service_messages_about_messages).
+ *
+ * A connection carries a single session's message stream, so one tracker per
+ * connection is sufficient. The tracker is purely in-memory: replay protection
+ * is per-connection-process, while the time-window check (codes 16/17) bounds
+ * cross-process replay since stale msg_ids are rejected everywhere.
+ *
+ * Sequence-number parity (34/35) and ordering (32) are enforced when `checkSeqNo`
+ * / `checkOrder` are set (gated by the `disableSeqNoCheck` config). Code 33 (seqno
+ * too high) is unreachable under serial in-order processing; code 64 (invalid
+ * container) is raised by the dispatcher. The outer envelope and each
+ * container-inner message both run through {@link InboundTracker.accept}. See
+ * docs/internals/protocol-compliance.md.
+ */
+// Constructor ids of client→server messages that do NOT require acknowledgment
+// (carry an even seqno). Everything else is content-related (odd seqno).
+const ID_MSG_CONTAINER = 0x73f1f8dc;
+const NON_CONTENT_IDS = new Set([
+    ID_MSG_CONTAINER, // msg_container
+    0x62d6b459, // msgs_ack
+    0x7abe77ec, // ping
+    0xf3427b8c, // ping_delay_disconnect
+    0x9299359f, // http_wait
+    0x8cc0d131, // msgs_all_info
+]);
+/** Classify a raw payload by its leading constructor id (used to drive `accept`). */
+export function messageClass(payload) {
+    if (payload.length < 4)
+        return { isContainer: false, contentRelated: true };
+    const id = payload.readUInt32LE(0);
+    return { isContainer: id === ID_MSG_CONTAINER, contentRelated: !NON_CONTENT_IDS.has(id) };
+}
+// Spec tolerances: a client msg_id encodes unix time in its high 32 bits and must
+// be divisible by 4. Telegram ignores ids more than 30s ahead or 300s behind.
+const FUTURE_TOLERANCE_SEC = 30;
+const PAST_TOLERANCE_SEC = 300;
+const MAX_TRACKED = 1024;
+export class InboundTracker {
+    received = new Map();
+    /** Insertion order, for FIFO eviction once the window is full. */
+    order = [];
+    /** Highest msg_id evicted from the window — anything ≤ this is "too old to verify". */
+    evictedHigh = 0n;
+    /** Highest msg_id ever accepted (distinguishes "in range" from "too high"). */
+    maxReceived = 0n;
+    /** Highest odd seqno of a content-related message seen (for ordering code 32). */
+    lastContentSeqNo = -1;
+    now;
+    futureTolerance;
+    pastTolerance;
+    maxTracked;
+    constructor(opts = {}) {
+        this.now = opts.nowMs ?? (() => Date.now());
+        this.futureTolerance = opts.futureToleranceSec ?? FUTURE_TOLERANCE_SEC;
+        this.pastTolerance = opts.pastToleranceSec ?? PAST_TOLERANCE_SEC;
+        this.maxTracked = Math.max(1, opts.maxTracked ?? MAX_TRACKED);
+    }
+    /**
+     * Validate and record an inbound message. Returns the `bad_msg_notification`
+     * error code if the message must be rejected, `{ drop: true }` for a benign
+     * duplicate to ignore silently, or `{ ok: true }` if it should be processed. A
+     * rejected message is NOT recorded, so the client may correct and resend it
+     * (e.g. after a `bad_server_salt`, which re-uses the same msg_id).
+     */
+    accept(msgId, seqNo, opts = {}) {
+        const { isContainer = false, contentRelated = true, checkSeqNo = false, checkOrder = false } = opts;
+        // 18: the two low bits of a client msg_id must be 0 (divisible by 4).
+        if ((msgId & 3n) !== 0n)
+            return { ok: false, code: 18 };
+        const nowSec = Math.floor(this.now() / 1000);
+        const msgSec = Number(msgId >> 32n);
+        // 16 / 17: client clock skew beyond tolerance.
+        if (msgSec < nowSec - this.pastTolerance)
+            return { ok: false, code: 16 };
+        if (msgSec > nowSec + this.futureTolerance)
+            return { ok: false, code: 17 };
+        const dup = this.received.get(msgId);
+        if (dup) {
+            // A duplicate container msg_id is a protocol error (19). For a duplicate
+            // regular message: reply `msg_detailed_info` if its answer is still cached,
+            // else drop silently — re-processing is unsafe and a bad_msg reply would
+            // wrongly make the client resync its clock/salt.
+            if (isContainer)
+                return { ok: false, code: 19 };
+            return dup.answer ? { ok: false, detailed: dup.answer } : { ok: false, drop: true };
+        }
+        // 20: older than anything we still remember — can't verify it's not a replay.
+        if (msgId <= this.evictedHigh)
+            return { ok: false, code: 20 };
+        if (checkSeqNo) {
+            const odd = seqNo % 2 === 1;
+            // 34/35: content-related messages carry an odd seqno, pure service ones even.
+            if (contentRelated && !odd)
+                return { ok: false, code: 35 };
+            if (!contentRelated && odd)
+                return { ok: false, code: 34 };
+        }
+        if (checkOrder && contentRelated) {
+            // 32: a content-related seqno must exceed every earlier one (they arrive in
+            // msg_id order). Code 33 (too high) can't occur under serial processing.
+            if (seqNo <= this.lastContentSeqNo)
+                return { ok: false, code: 32 };
+            this.lastContentSeqNo = seqNo;
+        }
+        this.note(msgId, seqNo);
+        return { ok: true };
+    }
+    /**
+     * Record the reply (`rpc_result`) generated for a request, so a later duplicate
+     * of that request can be answered with `msg_detailed_info` instead of dropped.
+     * No-op if the request id is no longer tracked.
+     */
+    recordAnswer(reqMsgId, answerMsgId, bytes) {
+        const e = this.received.get(reqMsgId);
+        if (e)
+            e.answer = { answerMsgId, bytes };
+    }
+    /**
+     * Record a received msg_id without validation. Used for messages observed
+     * inside a container (their ids are not individually validated), so that
+     * `msgs_state_req` can still report them as received.
+     */
+    note(msgId, seqNo) {
+        if (this.received.has(msgId))
+            return;
+        this.received.set(msgId, { seqNo, contentRelated: seqNo % 2 === 1 });
+        this.order.push(msgId);
+        if (msgId > this.maxReceived)
+            this.maxReceived = msgId;
+        while (this.order.length > this.maxTracked) {
+            const evicted = this.order.shift();
+            this.received.delete(evicted);
+            if (evicted > this.evictedHigh)
+                this.evictedHigh = evicted;
+        }
+    }
+    /**
+     * Per-id status bytes for `msgs_state_info.info` — one byte per requested id
+     * (see the spec's status-byte table). Reports received messages as state 4
+     * with the appropriate high bits, and unseen ids as 1/2/3 by position relative
+     * to the tracking window.
+     */
+    stateOf(ids) {
+        const nowSec = Math.floor(this.now() / 1000);
+        return Buffer.from(ids.map(id => this.stateByte(id, nowSec)));
+    }
+    stateByte(id, nowSec) {
+        const e = this.received.get(id);
+        if (e) {
+            // 4 = received. Pure service messages don't require an ack (+16);
+            // content-related queries are processed and answered (+32 +64).
+            return e.contentRelated ? 4 + 32 + 64 : 4 + 16;
+        }
+        const msgSec = Number(id >> 32n);
+        // 1 = nothing known (too old / already forgotten); 3 = too high (not yet
+        // received); 2 = within the known range but not received.
+        if (msgSec < nowSec - this.pastTolerance || id <= this.evictedHigh)
+            return 1;
+        if (id > this.maxReceived)
+            return 3;
+        return 2;
+    }
+}
+//# sourceMappingURL=inbound-tracker.js.map

package/dist/session/inbound-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-tracker.js","sourceRoot":"","sources":["../../src/session/inbound-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA0CH,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,UAAU,CAAA;AACnC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACpC,gBAAgB,EAAE,gBAAgB;IAClC,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,wBAAwB;IACpC,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,gBAAgB;CAC/B,CAAC,CAAA;AAEF,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAA;IAC3E,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAClC,OAAO,EAAE,WAAW,EAAE,EAAE,KAAK,gBAAgB,EAAE,cAAc,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAA;AAC7F,CAAC;AAaD,kFAAkF;AAClF,8EAA8E;AAC9E,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAA;AAC9B,MAAM,WAAW,GAAG,IAAI,CAAA;AAExB,MAAM,OAAO,cAAc;IACN,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAA;IACzD,kEAAkE;IACjD,KAAK,GAAa,EAAE,CAAA;IACrC,uFAAuF;IAC/E,WAAW,GAAG,EAAE,CAAA;IACxB,+EAA+E;IACvE,WAAW,GAAG,EAAE,CAAA;IACxB,kFAAkF;IAC1E,gBAAgB,GAAG,CAAC,CAAC,CAAA;IAEZ,GAAG,CAAc;IACjB,eAAe,CAAQ;IACvB,aAAa,CAAQ;IACrB,UAAU,CAAQ;IAEnC,YAAY,OAA8B,EAAE;QACxC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAA;QACtE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAA;QAChE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC,CAAA;IACjE,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAa,EAAE,KAAa,EAAE,OAAsB,EAAE;QACzD,MAAM,EAAE,WAAW,GAAG,KAAK,EAAE,cAAc,GAAG,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,UAAU,GAAG,KAAK,EAAE,GAAG,IAAI,CAAA;QAEnG,sEAAsE;QACtE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAA;QACnC,+CAA+C;QAC/C,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QACxE,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,eAAe;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,GAAG,EAAE,CAAC;YACN,yEAAyE;YACzE,4EAA4E;YAC5E,yEAAyE;YACzE,iDAAiD;YACjD,IAAI,WAAW;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACvF,CAAC;QACD,8EAA8E;QAC9E,IAAI,KAAK,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QAE7D,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;YAC3B,8EAA8E;YAC9E,IAAI,cAAc,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;YAC1D,IAAI,CAAC,cAAc,IAAI,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QAC9D,CAAC;QACD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;YAC/B,4EAA4E;YAC5E,yEAAyE;YACzE,IAAI,KAAK,IAAI,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;YAClE,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAA;QACjC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACvB,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,QAAgB,EAAE,WAAmB,EAAE,KAAa;QAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrC,IAAI,CAAC;YAAE,CAAC,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC5C,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,KAAa,EAAE,KAAa;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAM;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACpE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,CAAA;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC7B,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAA;QAC9D,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,GAAa;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IAEO,SAAS,CAAC,EAAU,EAAE,MAAc;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC,EAAE,CAAC;YACJ,kEAAkE;YAClE,gEAAgE;YAChE,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,CAAA;QAChC,yEAAyE;QACzE,0DAA0D;QAC1D,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,CAAA;QAC5E,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,CAAA;QACnC,OAAO,CAAC,CAAA;IACZ,CAAC;CACJ"}

package/dist/session/message-id.d.ts

@@ -0,0 +1,19 @@
+/**
+ * MTProto message-id and sequence-number generation, ported from the existing
+ * server (`mtproto-tools.generateId` + `generateMessageId`/`generateMessageSeqNo`).
+ *
+ * A message id encodes a unix timestamp in its high bits; the low 2 bits encode
+ * direction/intent: server responses end in 1, notifications in 3. Ids are kept
+ * strictly increasing per connection.
+ */
+export interface MsgIdState {
+    lastMessageId: bigint | null;
+    messageSeqNo: number;
+}
+export declare function nextMessageId(state: MsgIdState, isNotification?: boolean): bigint;
+/**
+ * Sequence number for an outgoing message. Content-related messages (rpc_result,
+ * updates) consume a slot and get an odd seqno; pure service messages do not.
+ */
+export declare function nextSeqNo(state: MsgIdState, contentRelated?: boolean): number;
+//# sourceMappingURL=message-id.d.ts.map

package/dist/session/message-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-id.d.ts","sourceRoot":"","sources":["../../src/session/message-id.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;CACvB;AAUD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,UAAQ,GAAG,MAAM,CAS/E;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,UAAO,GAAG,MAAM,CAI1E"}

package/dist/session/message-id.js

@@ -0,0 +1,30 @@
+import { randomBytes } from 'node:crypto';
+function generateId() {
+    const ticks = Date.now();
+    const timeSec = Math.floor(ticks / 1000);
+    const timeMSec = ticks % 1000;
+    const random = randomBytes(2).readUInt16LE(0);
+    return (BigInt(timeSec) << 32n) | BigInt((timeMSec << 21) | (random << 3) | 4);
+}
+export function nextMessageId(state, isNotification = false) {
+    let id = generateId();
+    if (state.lastMessageId !== null && id <= state.lastMessageId) {
+        id = state.lastMessageId + 1n;
+    }
+    const target = isNotification ? 3n : 1n;
+    while (id % 4n !== target)
+        id++;
+    state.lastMessageId = id;
+    return id;
+}
+/**
+ * Sequence number for an outgoing message. Content-related messages (rpc_result,
+ * updates) consume a slot and get an odd seqno; pure service messages do not.
+ */
+export function nextSeqNo(state, contentRelated = true) {
+    const seq = state.messageSeqNo;
+    if (contentRelated)
+        state.messageSeqNo++;
+    return seq * 2 + (contentRelated ? 1 : 0);
+}
+//# sourceMappingURL=message-id.js.map

package/dist/session/message-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-id.js","sourceRoot":"","sources":["../../src/session/message-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAezC,SAAS,UAAU;IACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAA;IAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,cAAc,GAAG,KAAK;IACnE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAA;IACrB,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC5D,EAAE,GAAG,KAAK,CAAC,aAAa,GAAG,EAAE,CAAA;IACjC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACvC,OAAO,EAAE,GAAG,EAAE,KAAK,MAAM;QAAE,EAAE,EAAE,CAAA;IAC/B,KAAK,CAAC,aAAa,GAAG,EAAE,CAAA;IACxB,OAAO,EAAE,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB,EAAE,cAAc,GAAG,IAAI;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAA;IAC9B,IAAI,cAAc;QAAE,KAAK,CAAC,YAAY,EAAE,CAAA;IACxC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7C,CAAC"}

package/dist/session/salts.d.ts

@@ -0,0 +1,51 @@
+import type { SaltRepo, SaltScheduleEntry } from '../storage/types.js';
+export interface SaltServiceOptions {
+    /** Validity length of each salt, seconds (default 1800 = 30 min). */
+    windowSec?: number;
+    /** Spacing between consecutive window starts, seconds. Must be `<= windowSec`
+     *  for overlap (default 900 = 15 min, giving two concurrently-valid salts). */
+    stepSec?: number;
+    /** Windows to keep minted ahead of the current one (default 1). */
+    prefetch?: number;
+    /** Injectable clock returning unix seconds (default `Date.now()/1000`). */
+    nowSec?: () => number;
+}
+/** Result of {@link SaltService.resolve}: the salt to advertise + whether the
+ *  salt the client used is currently valid. */
+export interface SaltCheck {
+    current: bigint;
+    valid: boolean;
+}
+export declare class SaltService {
+    private readonly repo;
+    private readonly window;
+    private readonly step;
+    private readonly prefetch;
+    private readonly now;
+    constructor(repo: SaltRepo, opts?: SaltServiceOptions);
+    /**
+     * Seed the schedule's first window from the handshake-derived salt. Idempotent
+     * (a no-op if a schedule already exists), and wire-compatible: the first salt
+     * keeps its `xor(newNonce, serverNonce)` value.
+     */
+    seed(authKeyId: bigint, firstSalt: bigint): Promise<void>;
+    /**
+     * Advertise the current salt and report whether `clientSalt` is valid right
+     * now. Mints the current window (and `prefetch` successors) on demand. The
+     * decrypt path uses this to drive `bad_server_salt`.
+     */
+    resolve(authKeyId: bigint, clientSalt: bigint): Promise<SaltCheck>;
+    /**
+     * The next `num` scheduled salts starting from the current window, minting
+     * more if the schedule is short. Backs `get_future_salts(num)`.
+     */
+    future(authKeyId: bigint, num: number): Promise<SaltScheduleEntry[]>;
+    /**
+     * Ensure the schedule contains the window covering `now` plus `ahead` further
+     * grid windows; return the refreshed, ascending schedule. Opportunistically
+     * prunes windows that expired more than one window ago.
+     */
+    private ensure;
+    private windowAt;
+}
+//# sourceMappingURL=salts.d.ts.map

package/dist/session/salts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"salts.d.ts","sourceRoot":"","sources":["../../src/session/salts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAoBtE,MAAM,WAAW,kBAAkB;IAC/B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;mFAC+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CACxB;AAED;+CAC+C;AAC/C,MAAM,WAAW,SAAS;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,OAAO,CAAA;CACjB;AAED,qBAAa,WAAW;IAOhB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAGb,IAAI,EAAE,QAAQ,EAC/B,IAAI,GAAE,kBAAuB;IAWjC;;;;OAIG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D;;;;OAIG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IASxE;;;OAGG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAc1E;;;;OAIG;YACW,MAAM;IAyBpB,OAAO,CAAC,QAAQ;CAGnB"}

package/dist/session/salts.js

@@ -0,0 +1,132 @@
+import { randomBytes } from 'node:crypto';
+import { toBigIntLE } from '../util/bytes.js';
+/**
+ * Server-salt scheduler — the spec-faithful core of the salt subsystem
+ * (https://core.telegram.org/mtproto/service_messages).
+ *
+ * Each auth key gets a rolling schedule of 64-bit salts, each valid for a bounded
+ * window (~30 min) with overlap: a new salt is minted before the previous expires,
+ * so there is always a current salt and a ready successor.
+ *
+ * Windows lie on a deterministic grid anchored at the first (handshake-derived)
+ * salt's `validSince`: window `k` is `[t0 + k·step, t0 + k·step + window)`. Because
+ * the anchor is persisted and `step`/`window` are constants, every gateway node
+ * derives the same window boundaries and (via the repo's insert-if-absent
+ * semantics) converges on one salt per window — so any node validates any salt.
+ */
+const DEFAULT_WINDOW_SEC = 30 * 60;
+const DEFAULT_STEP_SEC = 15 * 60;
+export class SaltService {
+    repo;
+    window;
+    step;
+    prefetch;
+    now;
+    constructor(repo, opts = {}) {
+        this.repo = repo;
+        this.window = opts.windowSec ?? DEFAULT_WINDOW_SEC;
+        this.step = opts.stepSec ?? DEFAULT_STEP_SEC;
+        this.prefetch = Math.max(0, opts.prefetch ?? 1);
+        this.now = opts.nowSec ?? (() => Math.floor(Date.now() / 1000));
+        if (this.step <= 0 || this.step > this.window) {
+            throw new Error('SaltService: require 0 < stepSec <= windowSec for overlapping windows');
+        }
+    }
+    /**
+     * Seed the schedule's first window from the handshake-derived salt. Idempotent
+     * (a no-op if a schedule already exists), and wire-compatible: the first salt
+     * keeps its `xor(newNonce, serverNonce)` value.
+     */
+    async seed(authKeyId, firstSalt) {
+        if ((await this.repo.list(authKeyId)).length)
+            return;
+        const since = this.now();
+        await this.repo.append(authKeyId, [
+            { salt: firstSalt, validSince: since, validUntil: since + this.window },
+        ]);
+    }
+    /**
+     * Advertise the current salt and report whether `clientSalt` is valid right
+     * now. Mints the current window (and `prefetch` successors) on demand. The
+     * decrypt path uses this to drive `bad_server_salt`.
+     */
+    async resolve(authKeyId, clientSalt) {
+        const now = this.now();
+        const list = await this.ensure(authKeyId, now, this.prefetch);
+        return {
+            current: pickCurrent(list, now).salt,
+            valid: list.some(e => covers(e, now) && e.salt === clientSalt),
+        };
+    }
+    /**
+     * The next `num` scheduled salts starting from the current window, minting
+     * more if the schedule is short. Backs `get_future_salts(num)`.
+     */
+    async future(authKeyId, num) {
+        const n = Math.max(1, num);
+        const now = this.now();
+        const list = await this.ensure(authKeyId, now, n - 1);
+        const { t0, kNow } = grid(list, now, this.step);
+        const out = [];
+        for (let k = kNow; k < kNow + n; k++) {
+            const since = t0 + k * this.step;
+            const e = list.find(x => x.validSince === since);
+            if (e)
+                out.push(e);
+        }
+        return out;
+    }
+    /**
+     * Ensure the schedule contains the window covering `now` plus `ahead` further
+     * grid windows; return the refreshed, ascending schedule. Opportunistically
+     * prunes windows that expired more than one window ago.
+     */
+    async ensure(authKeyId, now, ahead) {
+        let list = await this.repo.list(authKeyId);
+        if (!list.length) {
+            // Defensive: no handshake seed (e.g. get_future_salts on a key with no
+            // persisted schedule). Anchor a fresh grid at now.
+            await this.repo.append(authKeyId, [this.windowAt(now, randomSalt())]);
+            list = await this.repo.list(authKeyId);
+        }
+        const { t0, kNow } = grid(list, now, this.step);
+        const missing = [];
+        for (let k = kNow; k <= kNow + ahead; k++) {
+            const since = t0 + k * this.step;
+            if (!list.some(e => e.validSince === since))
+                missing.push(this.windowAt(since, randomSalt()));
+        }
+        if (missing.length) {
+            await this.repo.append(authKeyId, missing);
+            list = await this.repo.list(authKeyId);
+        }
+        // Keep one window of expired history (covers messages still in flight).
+        await this.repo.prune(authKeyId, now - this.window).catch(() => { });
+        return list;
+    }
+    windowAt(since, salt) {
+        return { salt, validSince: since, validUntil: since + this.window };
+    }
+}
+function covers(e, now) {
+    return e.validSince <= now && now < e.validUntil;
+}
+/** The grid anchor `t0` (first window start) and the index `kNow` of the window
+ *  covering `now`. All windows sit on `t0 + k·step`, so any surviving entry is a
+ *  valid anchor — pruning the first one keeps the grid aligned. */
+function grid(list, now, step) {
+    const t0 = list[0].validSince;
+    return { t0, kNow: Math.max(0, Math.floor((now - t0) / step)) };
+}
+/** Newest window covering `now`; falls back to the latest entry if a gap. */
+function pickCurrent(list, now) {
+    let best;
+    for (const e of list)
+        if (covers(e, now) && (!best || e.validSince > best.validSince))
+            best = e;
+    return best ?? list[list.length - 1];
+}
+function randomSalt() {
+    return toBigIntLE(randomBytes(8));
+}
+//# sourceMappingURL=salts.js.map

package/dist/session/salts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salts.js","sourceRoot":"","sources":["../../src/session/salts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG7C;;;;;;;;;;;;;GAaG;AAEH,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,CAAA;AAClC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,CAAA;AAqBhC,MAAM,OAAO,WAAW;IAOC;IANJ,MAAM,CAAQ;IACd,IAAI,CAAQ;IACZ,QAAQ,CAAQ;IAChB,GAAG,CAAc;IAElC,YACqB,IAAc,EAC/B,OAA2B,EAAE;QADZ,SAAI,GAAJ,IAAI,CAAU;QAG/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAA;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QAC/D,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;QAC5F,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,SAAiB;QAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAAE,OAAM;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE;SAC1E,CAAC,CAAA;IACN,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,UAAkB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7D,OAAO;YACH,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI;YACpC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SACjE,CAAA;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,GAAG,GAAwB,EAAE,CAAA;QACnC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;YAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAA;YAChD,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,GAAG,CAAA;IACd,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAa;QAC9D,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,uEAAuE;YACvE,mDAAmD;YACnD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAA;YACrE,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAwB,EAAE,CAAA;QACvC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;YAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAC1C,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,CAAC;QAED,wEAAwE;QACxE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACnE,OAAO,IAAI,CAAA;IACf,CAAC;IAEO,QAAQ,CAAC,KAAa,EAAE,IAAY;QACxC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;IACvE,CAAC;CACJ;AAED,SAAS,MAAM,CAAC,CAAoB,EAAE,GAAW;IAC7C,OAAO,CAAC,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,CAAA;AACpD,CAAC;AAED;;mEAEmE;AACnE,SAAS,IAAI,CAAC,IAAyB,EAAE,GAAW,EAAE,IAAY;IAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU,CAAA;IAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAA;AACnE,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAAyB,EAAE,GAAW;IACvD,IAAI,IAAmC,CAAA;IACvC,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,GAAG,CAAC,CAAA;IAC/F,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;AACzC,CAAC;AAED,SAAS,UAAU;IACf,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AACrC,CAAC"}

package/dist/session/session-manager.d.ts

@@ -0,0 +1,18 @@
+import { type Logger } from '@mt-tl/tl';
+import type { Connection } from '../transport/connection.js';
+import type { Storage } from '../storage/index.js';
+import type { Responder } from '../dispatch/types.js';
+export interface SessionInfo {
+    sessionId: bigint;
+    authKeyId: bigint;
+    firstMsgId: bigint;
+    subject?: string;
+}
+/**
+ * Ensures a persisted session exists for the connection. On the first message
+ * of a new session, persists it and emits `new_session_created`. Ported from
+ * the existing `handleSessionMessage`, but the session is durable (storage),
+ * not an in-memory-only Map.
+ */
+export declare function ensureSession(storage: Storage, responder: Responder, conn: Connection, info: SessionInfo, log?: Logger): Promise<void>;
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/session/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAGrD,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAC/B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,WAAW,EACjB,GAAG,GAAE,MAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,CAwCf"}

package/dist/session/session-manager.js

@@ -0,0 +1,43 @@
+import { noopLogger } from '@mt-tl/tl';
+import { randomBigInt } from '../crypto/hashes.js';
+/**
+ * Ensures a persisted session exists for the connection. On the first message
+ * of a new session, persists it and emits `new_session_created`. Ported from
+ * the existing `handleSessionMessage`, but the session is durable (storage),
+ * not an in-memory-only Map.
+ */
+export async function ensureSession(storage, responder, conn, info, log = noopLogger) {
+    const existing = await storage.sessions.get(info.sessionId);
+    if (existing && existing.authKeyId === info.authKeyId) {
+        await storage.sessions.touch(info.sessionId);
+        conn.ctx.uniqueId = existing.uniqueId;
+        conn.ctx.apiLayer = existing.apiLayer;
+        conn.ctx.subject = existing.subject;
+        return;
+    }
+    if (existing)
+        await storage.sessions.delete(info.sessionId);
+    const uniqueId = randomBigInt(64);
+    conn.ctx.uniqueId = uniqueId;
+    conn.ctx.subject = info.subject;
+    await storage.sessions.save({
+        sessionId: info.sessionId,
+        authKeyId: info.authKeyId,
+        uniqueId,
+        apiLayer: conn.ctx.apiLayer,
+        subject: info.subject,
+        lastActivity: Date.now(),
+    });
+    log.info('session.new', {
+        sessionId: info.sessionId,
+        authKeyId: info.authKeyId,
+        subject: info.subject,
+    });
+    responder.sendEncrypted(conn, {
+        _: 'new_session_created',
+        first_msg_id: info.firstMsgId,
+        unique_id: uniqueId,
+        server_salt: conn.ctx.serverSalt ?? 0n,
+    }, { isNotification: true, contentRelated: false });
+}
+//# sourceMappingURL=session-manager.js.map