@mtkruto/node 0.132.0 → 0.132.1

package/script/connection/1_connection_tls.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1_connection_tls.node.d.ts","sourceRoot":"","sources":["../../src/connection/1_connection_tls.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AASpD,qBAAa,aAAc,YAAW,UAAU;;IAY9C,kBAAkB,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;gBAE1C,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;IAarE,IAAI;IAyFV,IAAI,WAAW,YAEd;IAsDK,IAAI,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAclC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzC,KAAK;CAKN"}

package/script/connection/1_connection_tls.node.js

@@ -0,0 +1,203 @@
+"use strict";
+/**
+ * MTKruto - Cross-runtime JavaScript library for building Telegram clients
+ * Copyright (C) 2023-2026 Roj <https://roj.im/>
+ *
+ * This file is part of MTKruto.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionTLS = void 0;
+const node_net_1 = require("node:net");
+const _0_deps_js_1 = require("../0_deps.js");
+const _0_errors_js_1 = require("../0_errors.js");
+const _1_utilities_js_1 = require("../1_utilities.js");
+const _0_get_tls_header_js_1 = require("./0_get_tls_header.js");
+const HEADER_LENGTH = 5;
+const MAX_PACKET_LENGTH = 2878;
+const L = (0, _1_utilities_js_1.getLogger)("ConnectionTCP");
+const errConnectionNotOpen = new _0_errors_js_1.ConnectionError("The connection is not open.");
+class ConnectionTLS {
+    #hostname;
+    #port;
+    #secret;
+    #socket;
+    #rMutex = new _1_utilities_js_1.Mutex();
+    #wMutex = new _1_utilities_js_1.Mutex();
+    #buffer = new Array();
+    #nextResolve = null;
+    stateChangeHandler;
+    constructor(hostname, port, secret) {
+        this.#hostname = hostname;
+        this.#port = port;
+        this.#secret = (secret[0] === 0xDD || secret[0] === 0xEE) ? secret.slice(1) : secret;
+    }
+    #rejectRead() {
+        if (this.#nextResolve !== null) {
+            this.#nextResolve[1].reject(errConnectionNotOpen);
+            this.#nextResolve = null;
+        }
+    }
+    async open() {
+        if (this.isConnected) {
+            return;
+        }
+        this.#socket = new node_net_1.Socket();
+        this.#socket.on("close", () => {
+            this.#rejectRead();
+            this.stateChangeHandler?.(false);
+        });
+        this.#socket.on("data", (data) => {
+            if (typeof data === "string") {
+                return;
+            }
+            for (const byte of data) {
+                this.#buffer.push(byte);
+            }
+            if (this.#nextResolve !== null && this.#buffer.length >= this.#nextResolve[0]) {
+                const resolve = this.#nextResolve[1].resolve;
+                this.#nextResolve = null;
+                resolve();
+            }
+        });
+        await new Promise((resolve, reject) => {
+            this.#socket.connect(this.#port, this.#hostname);
+            this.#socket.once("error", reject);
+            this.#socket.once("connect", () => {
+                this.#socket.off("error", reject);
+                resolve();
+                this.stateChangeHandler?.(true);
+                L.debug("connected to", this.#hostname, "port", this.#port);
+            });
+        });
+        const header = await (0, _0_get_tls_header_js_1.getTlsHeader)(this.#secret);
+        const helloRand = header.subarray(11, 43);
+        await this.#write(header);
+        let offset = 0;
+        let read = new Uint8Array();
+        for (const prefix of [
+            new Uint8Array([0x16, 0x03, 0x03]),
+            new Uint8Array([0x14, 0x03, 0x03, 0x00, 0x01, 0x01, 0x17, 0x03, 0x03]),
+        ]) {
+            while (true) {
+                if ((read.byteLength - offset) >= (prefix.byteLength + 2)) {
+                    if (!(0, _0_deps_js_1.startsWith)(read.subarray(offset), prefix)) {
+                        throw new TypeError("Received an invalid prefix.");
+                    }
+                    const dataView = new DataView(read.buffer, read.byteOffset, read.byteLength);
+                    const size = dataView.getUint16(offset + prefix.byteLength, false);
+                    const total = prefix.byteLength + 2 + size;
+                    if ((read.byteLength - offset) >= total) {
+                        offset += total;
+                        break;
+                    }
+                }
+                await new Promise((resolve, reject) => this.#nextResolve = [0, { resolve, reject }]);
+                read = (0, _0_deps_js_1.concat)([read, new Uint8Array(this.#buffer.splice(0, this.#buffer.length))]);
+            }
+        }
+        const response = read.subarray(0, offset);
+        const actual = response.slice(11, 43);
+        const zeroed = response.slice();
+        zeroed.fill(0, 11, 43);
+        const expected = await (0, _1_utilities_js_1.hmacSha256)((0, _0_deps_js_1.concat)([helloRand, zeroed]), this.#secret.slice(0, 16));
+        if (!(0, _0_deps_js_1.equals)(actual, expected)) {
+            throw new TypeError("Failed to initialize TLS connection.");
+        }
+        L.debug(`initialized TLS connection with ${this.#hostname}`);
+    }
+    get isConnected() {
+        return this.#socket?.readyState === "open";
+    }
+    #assertConnected() {
+        if (!this.isConnected) {
+            throw errConnectionNotOpen;
+        }
+    }
+    #packetBuffer = new Uint8Array();
+    async #readPacket() {
+        const header = new Uint8Array(HEADER_LENGTH);
+        await this.#read(header);
+        if (!(0, _0_deps_js_1.startsWith)(header, new Uint8Array([0x17, 0x03, 0x03]))) {
+            throw new TypeError("Failed to read TLS packet.");
+        }
+        const length = new DataView(header.buffer).getUint16(3);
+        const packet = new Uint8Array(length);
+        await this.#read(packet);
+        this.#packetBuffer = (0, _0_deps_js_1.concat)([this.#packetBuffer, packet]);
+    }
+    #isFirstWrite = false;
+    async #writePacket(packet) {
+        const header = new Uint8Array([0x17, 0x03, 0x03, 0x00, 0x00]);
+        new DataView(header.buffer).setUint16(3, packet.byteLength);
+        let data = (0, _0_deps_js_1.concat)([header, packet]);
+        if (this.#isFirstWrite) {
+            this.#isFirstWrite = false;
+            data = (0, _0_deps_js_1.concat)([new Uint8Array([0x14, 0x03, 0x03, 0x00, 0x01, 0x01]), data]);
+        }
+        await this.#write(data);
+    }
+    async #read(p) {
+        if (this.#buffer.length < p.length) {
+            await new Promise((resolve, reject) => this.#nextResolve = [p.length, { resolve, reject }]);
+        }
+        p.set(this.#buffer.splice(0, p.length));
+    }
+    async #write(p) {
+        await new Promise((resolve, reject) => {
+            this.#socket.write(p, (err) => {
+                (err === undefined || err === null) ? resolve() : reject(err);
+            });
+        });
+    }
+    async read(p) {
+        this.#assertConnected();
+        const unlock = await this.#rMutex.lock();
+        try {
+            while (this.#packetBuffer.byteLength < p.byteLength) {
+                await this.#readPacket();
+            }
+            p.set(this.#packetBuffer.subarray(0, p.byteLength));
+            this.#packetBuffer = this.#packetBuffer.slice(p.byteLength);
+        }
+        finally {
+            unlock();
+        }
+    }
+    async write(p) {
+        this.#assertConnected();
+        const unlock = await this.#wMutex.lock();
+        try {
+            let offset = 0;
+            while (true) {
+                const packet = p.subarray(offset, offset + MAX_PACKET_LENGTH - HEADER_LENGTH);
+                if (packet.byteLength === 0) {
+                    break;
+                }
+                await this.#writePacket(packet);
+                offset += packet.byteLength;
+            }
+        }
+        finally {
+            unlock();
+        }
+    }
+    close() {
+        this.#assertConnected();
+        this.#socket.destroy();
+        this.#socket = undefined;
+    }
+}
+exports.ConnectionTLS = ConnectionTLS;

package/script/deps/jsr.io/@std/io/0.225.3/write_all.d.ts

@@ -0,0 +1,52 @@
+import type { Writer, WriterSync } from "./types.js";
+export type { Writer, WriterSync } from "./types.js";
+/**
+ * Write all the content of the array buffer (`arr`) to the writer (`w`).
+ *
+ * @example Writing to stdout
+ * ```ts no-assert
+ * import { writeAll } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * await writeAll(Deno.stdout, contentBytes);
+ * ```
+ *
+ * @example Writing to file
+ * ```ts ignore no-assert
+ * import { writeAll } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * using file = await Deno.open('test.file', { write: true });
+ * await writeAll(file, contentBytes);
+ * ```
+ *
+ * @param writer The writer to write to
+ * @param data The data to write
+ */
+export declare function writeAll(writer: Writer, data: Uint8Array): Promise<void>;
+/**
+ * Synchronously write all the content of the array buffer (`arr`) to the
+ * writer (`w`).
+ *
+ * @example "riting to stdout
+ * ```ts no-assert
+ * import { writeAllSync } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * writeAllSync(Deno.stdout, contentBytes);
+ * ```
+ *
+ * @example Writing to file
+ * ```ts ignore no-assert
+ * import { writeAllSync } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * using file = Deno.openSync("test.file", { write: true });
+ * writeAllSync(file, contentBytes);
+ * ```
+ *
+ * @param writer The writer to write to
+ * @param data The data to write
+ */
+export declare function writeAllSync(writer: WriterSync, data: Uint8Array): void;
+//# sourceMappingURL=write_all.d.ts.map

package/script/deps/jsr.io/@std/io/0.225.3/write_all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write_all.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/io/0.225.3/write_all.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErD,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,iBAK9D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,QAKhE"}

package/script/deps/jsr.io/@std/io/0.225.3/write_all.js

@@ -0,0 +1,65 @@
+"use strict";
+// Copyright 2018-2026 the Deno authors. MIT license.
+// This module is browser compatible.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeAll = writeAll;
+exports.writeAllSync = writeAllSync;
+/**
+ * Write all the content of the array buffer (`arr`) to the writer (`w`).
+ *
+ * @example Writing to stdout
+ * ```ts no-assert
+ * import { writeAll } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * await writeAll(Deno.stdout, contentBytes);
+ * ```
+ *
+ * @example Writing to file
+ * ```ts ignore no-assert
+ * import { writeAll } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * using file = await Deno.open('test.file', { write: true });
+ * await writeAll(file, contentBytes);
+ * ```
+ *
+ * @param writer The writer to write to
+ * @param data The data to write
+ */
+async function writeAll(writer, data) {
+    let nwritten = 0;
+    while (nwritten < data.length) {
+        nwritten += await writer.write(data.subarray(nwritten));
+    }
+}
+/**
+ * Synchronously write all the content of the array buffer (`arr`) to the
+ * writer (`w`).
+ *
+ * @example "riting to stdout
+ * ```ts no-assert
+ * import { writeAllSync } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * writeAllSync(Deno.stdout, contentBytes);
+ * ```
+ *
+ * @example Writing to file
+ * ```ts ignore no-assert
+ * import { writeAllSync } from "@std/io/write-all";
+ *
+ * const contentBytes = new TextEncoder().encode("Hello World");
+ * using file = Deno.openSync("test.file", { write: true });
+ * writeAllSync(file, contentBytes);
+ * ```
+ *
+ * @param writer The writer to write to
+ * @param data The data to write
+ */
+function writeAllSync(writer, data) {
+    let nwritten = 0;
+    while (nwritten < data.length) {
+        nwritten += writer.writeSync(data.subarray(nwritten));
+    }
+}

package/script/session/2_session_encrypted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"2_session_encrypted.d.ts","sourceRoot":"","sources":["../../src/session/2_session_encrypted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAwD,OAAO,EAAuC,MAAM,YAAY,CAAC;AAChI,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAI5C,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAa7D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACxD,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;IACtC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;IAC5D,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;CACxD;AAED,qBAAa,gBAAiB,SAAQ,OAAQ,YAAW,OAAO;;IAI9D,QAAQ,EAAE,QAAQ,CAAM;gBAiBZ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,aAAa;IAQpC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC;IAM7C,IAAI,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,CAErC;IAEc,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAe9B,UAAU,IAAI,IAAI;IA6ErB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;CAwX3D"}
+{"version":3,"file":"2_session_encrypted.d.ts","sourceRoot":"","sources":["../../src/session/2_session_encrypted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAwD,OAAO,EAAuC,MAAM,YAAY,CAAC;AAChI,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAI5C,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAa7D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACxD,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;IACtC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;IAC5D,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;CACxD;AAED,qBAAa,gBAAiB,SAAQ,OAAQ,YAAW,OAAO;;IAI9D,QAAQ,EAAE,QAAQ,CAAM;gBAiBZ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,aAAa;IAQpC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC;IAM7C,IAAI,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,CAErC;IAEc,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAe9B,UAAU,IAAI,IAAI;IA6ErB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;CA4X3D"}

package/script/session/2_session_encrypted.js

@@ -193,10 +193,13 @@ class SessionEncrypted extends _1_session_js_1.Session {
         return messageWriter.buffer;
     }
     async #decryptMessage(buffer) {
-        const reader = new _2_tl_js_1.TLReader(buffer);
+        let reader = new _2_tl_js_1.TLReader(buffer);
         (0, _0_deps_js_1.assertEquals)(reader.readInt64(), this.#authKeyId);
         const messageKey_ = reader.readInt128();
         const messageKey = (0, _1_utilities_js_1.intToBytes)(messageKey_, 16);
+        if (reader.buffer.length % 16 !== 0) {
+            reader = new _2_tl_js_1.TLReader(reader.buffer.subarray(0, -(reader.buffer.length % 16)));
+        }
         const a = await (0, _1_utilities_js_1.sha256)((0, _0_deps_js_1.concat)([messageKey, this.#authKey.subarray(8, 44)]));
         const b = await (0, _1_utilities_js_1.sha256)((0, _0_deps_js_1.concat)([this.#authKey.subarray(48, 84), messageKey]));
         const aesKey = (0, _0_deps_js_1.concat)([a.subarray(0, 8), b.subarray(8, 24), a.subarray(24, 32)]);

package/script/transport/0_obfuscation.d.ts

@@ -1,6 +1,10 @@
 import { CTR } from "../1_utilities.js";
 import type { Connection } from "../2_connection.js";
-export declare function getObfuscationParameters(protocol: number, connection: Connection): Promise<{
+export interface GetObfuscationParametersParams {
+    dcId?: number;
+    secret?: Uint8Array;
+}
+export declare function getObfuscationParameters(protocol: number, connection: Connection, params?: GetObfuscationParametersParams): Promise<{
     encryptionCTR: CTR;
     decryptionCTR: CTR;
 }>;

package/script/transport/0_obfuscation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"0_obfuscation.d.ts","sourceRoot":"","sources":["../../src/transport/0_obfuscation.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,GAAG,EAAc,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;;;GA0CtF"}
+{"version":3,"file":"0_obfuscation.d.ts","sourceRoot":"","sources":["../../src/transport/0_obfuscation.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,GAAG,EAAsB,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,WAAW,8BAA8B;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,8BAA8B;;;GAyD/H"}

package/script/transport/0_obfuscation.js

@@ -56,7 +56,7 @@ exports.getObfuscationParameters = getObfuscationParameters;
 const dntShim = __importStar(require("../_dnt.shims.js"));
 const _0_deps_js_1 = require("../0_deps.js");
 const _1_utilities_js_1 = require("../1_utilities.js");
-async function getObfuscationParameters(protocol, connection) {
+async function getObfuscationParameters(protocol, connection, params) {
     let init;
     while (true) {
         init = (0, _0_deps_js_1.concat)([dntShim.crypto.getRandomValues(new Uint8Array(56)), (0, _1_utilities_js_1.intToBytes)(protocol, 4, { byteOrder: "big", isSigned: false }), dntShim.crypto.getRandomValues(new Uint8Array(4))]);
@@ -74,14 +74,27 @@ async function getObfuscationParameters(protocol, connection) {
         }
         break;
     }
-    const encryptKey = init.slice(8, 8 + 32);
+    if (params?.dcId !== undefined) {
+        init.set((0, _1_utilities_js_1.intToBytes)(params.dcId, 2, { byteOrder: "little" }), 60);
+    }
+    let secret = params?.secret;
+    if (secret !== undefined && secret.byteLength >= 17) {
+        secret = secret.subarray(1, 17);
+    }
+    let encryptKey = init.slice(8, 8 + 32);
     const encryptIv = init.slice(40, 40 + 16);
+    if (secret) {
+        encryptKey = await (0, _1_utilities_js_1.sha256)((0, _0_deps_js_1.concat)([encryptKey, secret]));
+    }
     const importedEncryptedKey = await _1_utilities_js_1.CTR.importKey(encryptKey);
     const encryptionCTR = new _1_utilities_js_1.CTR(importedEncryptedKey, encryptIv);
     const encryptedInit = await encryptionCTR.call(init);
     const initRev = new Uint8Array(init).reverse();
-    const decryptKey = initRev.slice(8, 8 + 32);
+    let decryptKey = initRev.slice(8, 8 + 32);
     const decryptIv = initRev.slice(40, 40 + 16);
+    if (secret) {
+        decryptKey = await (0, _1_utilities_js_1.sha256)((0, _0_deps_js_1.concat)([decryptKey, secret]));
+    }
     const importedDecryptKey = await _1_utilities_js_1.CTR.importKey(decryptKey);
     const decryptionCTR = new _1_utilities_js_1.CTR(importedDecryptKey, decryptIv);
     await connection.write((0, _0_deps_js_1.concat)([init.subarray(0, 56), encryptedInit.subarray(56, 56 + 8)]));

package/script/transport/1_transport_intermediate.d.ts

@@ -1,27 +1,14 @@
-/**
- * MTKruto - Cross-runtime JavaScript library for building Telegram clients
- * Copyright (C) 2023-2026 Roj <https://roj.im/>
- *
- * This file is part of MTKruto.
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Lesser General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Lesser General Public License for more details.
- *
- * You should have received a copy of the GNU Lesser General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
- */
 import type { Connection } from "../2_connection.js";
 import { Transport } from "./0_transport.js";
+export interface TransportIntermediateParams {
+    isObfuscated?: boolean;
+    isPadded?: boolean;
+    dcId?: number;
+    secret?: Uint8Array;
+}
 export declare class TransportIntermediate extends Transport implements Transport {
     #private;
-    constructor(connection: Connection, obfuscated?: boolean);
+    constructor(connection: Connection, params?: TransportIntermediateParams);
     initialize(): Promise<void>;
     receive(): Promise<Uint8Array>;
     send(buffer: Uint8Array): Promise<void>;

package/script/transport/1_transport_intermediate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"1_transport_intermediate.d.ts","sourceRoot":"","sources":["../../src/transport/1_transport_intermediate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,qBAAa,qBAAsB,SAAQ,SAAU,YAAW,SAAS;;gBAI3D,UAAU,EAAE,UAAU,EAAE,UAAU,UAAQ;IAMhD,UAAU;IAQV,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IAiB9B,IAAI,CAAC,MAAM,EAAE,UAAU;CAM9B"}
+{"version":3,"file":"1_transport_intermediate.d.ts","sourceRoot":"","sources":["../../src/transport/1_transport_intermediate.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,WAAW,2BAA2B;IAC1C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,qBAAa,qBAAsB,SAAQ,SAAU,YAAW,SAAS;;gBAO3D,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,2BAA2B;IASlE,UAAU;IAYV,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IAiB9B,IAAI,CAAC,MAAM,EAAE,UAAU;CAW9B"}

package/script/transport/1_transport_intermediate.js

@@ -1,4 +1,39 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TransportIntermediate = void 0;
 /**
  * MTKruto - Cross-runtime JavaScript library for building Telegram clients
  * Copyright (C) 2023-2026 Roj <https://roj.im/>
@@ -18,26 +53,31 @@
  * You should have received a copy of the GNU Lesser General Public License
  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TransportIntermediate = void 0;
+const dntShim = __importStar(require("../_dnt.shims.js"));
 const _0_deps_js_1 = require("../0_deps.js");
 const _1_utilities_js_1 = require("../1_utilities.js");
 const _0_obfuscation_js_1 = require("./0_obfuscation.js");
 const _0_transport_js_1 = require("./0_transport.js");
 class TransportIntermediate extends _0_transport_js_1.Transport {
     #connection;
-    #obfuscated;
-    constructor(connection, obfuscated = false) {
+    #isObfuscated;
+    #isPadded;
+    #dcId;
+    #secret;
+    constructor(connection, params) {
         super();
         this.#connection = connection;
-        this.#obfuscated = obfuscated;
+        this.#isObfuscated = params?.isObfuscated ?? false;
+        this.#isPadded = params?.isPadded ?? false;
+        this.#dcId = params?.dcId;
+        this.#secret = params?.secret;
     }
     async initialize() {
-        if (this.#obfuscated) {
-            this.obfuscationParameters = await (0, _0_obfuscation_js_1.getObfuscationParameters)(0xEEEEEEEE, this.#connection);
+        if (this.#isObfuscated) {
+            this.obfuscationParameters = await (0, _0_obfuscation_js_1.getObfuscationParameters)(this.#isPadded ? 0xDDDDDDDD : 0xEEEEEEEE, this.#connection, { dcId: this.#dcId, secret: this.#secret });
         }
         else {
-            await this.#connection.write(new Uint8Array([0xEE, 0xEE, 0xEE, 0xEE]));
+            await this.#connection.write(new Uint8Array(this.#isPadded ? [0xDD, 0xDD, 0xDD, 0xDD] : [0xEE, 0xEE, 0xEE, 0xEE]));
         }
     }
     async receive() {
@@ -54,6 +94,10 @@ class TransportIntermediate extends _0_transport_js_1.Transport {
         return await this.decrypt(buffer);
     }
     async send(buffer) {
+        if (this.#isPadded) {
+            const padding = dntShim.crypto.getRandomValues(new Uint8Array(Math.abs((0, _1_utilities_js_1.getRandomId)(true) % 16)));
+            buffer = (0, _0_deps_js_1.concat)([buffer, padding]);
+        }
         const length = (0, _1_utilities_js_1.intToBytes)(buffer.length, 4);
         const data = (0, _0_deps_js_1.concat)([length, buffer]);
         await this.#connection.write(await this.encrypt(data));

package/script/transport/2_transport_provider_mtproxy.d.ts

@@ -0,0 +1,23 @@
+/**
+ * MTKruto - Cross-runtime JavaScript library for building Telegram clients
+ * Copyright (C) 2023-2026 Roj <https://roj.im/>
+ *
+ * This file is part of MTKruto.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+import { type TransportProvider } from "./1_transport_provider.js";
+export declare function transportProviderMtproxy(link: string): TransportProvider;
+export declare function transportProviderMtproxy(hostname: string, port: number, secret: Uint8Array<ArrayBuffer>): TransportProvider;
+//# sourceMappingURL=2_transport_provider_mtproxy.d.ts.map

package/script/transport/2_transport_provider_mtproxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2_transport_provider_mtproxy.d.ts","sourceRoot":"","sources":["../../src/transport/2_transport_provider_mtproxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAW,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAAC;AAC1E,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAAC"}

package/script/transport/2_transport_provider_mtproxy.js

@@ -0,0 +1,54 @@
+"use strict";
+/**
+ * MTKruto - Cross-runtime JavaScript library for building Telegram clients
+ * Copyright (C) 2023-2026 Roj <https://roj.im/>
+ *
+ * This file is part of MTKruto.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transportProviderMtproxy = transportProviderMtproxy;
+const _0_deps_js_1 = require("../0_deps.js");
+const _1_connection_tcp_node_js_1 = require("../connection/1_connection_tcp.node.js");
+const _1_connection_tls_node_js_1 = require("../connection/1_connection_tls.node.js");
+const _1_transport_intermediate_js_1 = require("./1_transport_intermediate.js");
+const _1_transport_provider_js_1 = require("./1_transport_provider.js");
+function transportProviderMtproxy(hostnameOrLink, port, secret) {
+    let hostname = hostnameOrLink;
+    if (port === undefined && secret === undefined) {
+        const url = new URL(hostnameOrLink);
+        const hostname_ = url.searchParams.get("server");
+        const port_ = url.searchParams.get("port");
+        const secret_ = url.searchParams.get("secret");
+        if (!hostname_ || !port_ || !secret_) {
+            throw new TypeError("Invalid MTProxy link.");
+        }
+        hostname = hostname_;
+        port = parseInt(port_);
+        secret = (0, _0_deps_js_1.decodeHex)(secret_);
+        if (isNaN(port) || port < 0 || port > 0xFFFF) {
+            throw new TypeError("Server port is invalid.");
+        }
+        if (secret.byteLength < 16) {
+            throw new TypeError("Proxy secret must be at least 16 bytes.");
+        }
+    }
+    return ({ dc, isCdn }) => {
+        const dcId = (0, _1_transport_provider_js_1.getDcId)(dc, isCdn);
+        const connection = secret.byteLength <= 17 ? new _1_connection_tcp_node_js_1.ConnectionTCP(hostname, port) : new _1_connection_tls_node_js_1.ConnectionTLS(hostname, port, secret);
+        const transport = new _1_transport_intermediate_js_1.TransportIntermediate(connection, { isPadded: true, isObfuscated: true, secret, dcId });
+        return { connection, transport, dcId };
+    };
+}

package/script/transport/2_transport_provider_web_socket.js

@@ -39,8 +39,8 @@ const transportProviderWebSocket = (params) => {
         params.wss ??= typeof location !== "undefined" && location.protocol === "http:" && location.hostname !== "localhost" ? false : true;
         const url = `${params.wss ? "wss" : "ws"}://${dcToNameMap[dc]}${isCdn ? "-1" : ""}.web.telegram.org/${dc.endsWith("-test") ? "apiws_test" : "apiws"}`;
         const connection = new _2_connection_js_1.ConnectionWebSocket(url);
-        const transport = new _1_transport_intermediate_js_1.TransportIntermediate(connection, true);
         const dcId = (0, _1_transport_provider_js_1.getDcId)(dc, isCdn);
+        const transport = new _1_transport_intermediate_js_1.TransportIntermediate(connection, { isObfuscated: true, dcId });
         return { connection, transport, dcId };
     };
 };

package/script/utilities/1_crypto.d.ts

@@ -28,4 +28,5 @@ export declare class CTR {
     static importKey(key: Uint8Array<ArrayBuffer>): Promise<dntShim.CryptoKey>;
     call(data: Uint8Array<ArrayBuffer>): Promise<Uint8Array<ArrayBuffer>>;
 }
+export declare function hmacSha256(data: Uint8Array<ArrayBuffer>, secret: Uint8Array<ArrayBuffer>): Promise<Uint8Array<ArrayBuffer>>;
 //# sourceMappingURL=1_crypto.d.ts.map

package/script/utilities/1_crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"1_crypto.d.ts","sourceRoot":"","sources":["../../src/utilities/1_crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAM5C,qBAAa,GAAG;;IAMd,IAAI,MAAM,IAAI;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAE9C;gBAEW,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU;WAKrC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;IAI1E,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;CAkD5E"}
+{"version":3,"file":"1_crypto.d.ts","sourceRoot":"","sources":["../../src/utilities/1_crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAM5C,qBAAa,GAAG;;IAMd,IAAI,MAAM,IAAI;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAE9C;gBAEW,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU;WAKrC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;IAI1E,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;CAkD5E;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,oCAe9F"}