@statewalker/httpeers-libp2p 0.1.3 → 0.1.4

package/dist/hub-link.d.ts

@@ -6,6 +6,7 @@
  * so the same code runs in a page and under the Node tests.
  */
 import type { Connection, Libp2p } from "@libp2p/interface";
+import { type Multiaddr } from "@multiformats/multiaddr";
 import { type RelaySupervisor } from "./reservation.js";
 /**
  * The address a member dials another member at: through their hub, with a
@@ -20,6 +21,28 @@ import { type RelaySupervisor } from "./reservation.js";
  * connection it already holds to the hub.
  */
 export declare function hubRoute(hubPeerId: string, peerId: string): string;
+/** How many times `dialWebRTC` tries a WebRTC upgrade before giving up. */
+export declare const WEBRTC_UPGRADE_ATTEMPTS = 3;
+/**
+ * Dial a `/webrtc` address, trying the upgrade again when it fails.
+ *
+ * WHY. Under Node, WebRTC is libdatachannel (`node-datachannel`), and
+ * libdatachannel <= 0.24.5 can lose a race on the OFFERER: setting the remote
+ * answer hands it to the ICE agent before the answer's fingerprint is
+ * committed, ICE can complete at once (the answerer has been sending checks),
+ * and the DTLS handshake that follows finds no remote fingerprint to verify
+ * against -- `DTLS alert: unknown CA`, the peer connection fails, and
+ * libp2p's dial times out. It needs the threads to interleave badly, which a
+ * busy CPU makes common: the conformance suite lost it in most runs under
+ * load. Each attempt is an independent race, so one retry nearly always
+ * succeeds. Fixed upstream by libdatachannel 0235225 ("start DTLS after
+ * remote description"); drop the retry once node-datachannel ships it.
+ * Browsers implement WebRTC themselves and are not affected.
+ *
+ * A WebRTC path that cannot come up fails every attempt, and the caller's
+ * fallback (the relay circuit) runs as before.
+ */
+export declare function dialWebRTC(node: Libp2p, target: Multiaddr | Multiaddr[], attempts?: number): Promise<Connection>;
 /**
  * Reach the hub over WebRTC through the public relay, and keep ONLY the
  * WebRTC connection.

package/dist/hub-link.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub-link.d.ts","sourceRoot":"","sources":["../src/hub-link.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAI5D,OAAO,EAAE,KAAK,eAAe,EAAkB,MAAM,kBAAkB,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhG;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAErB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,qBAAqB,GAC7B,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,UAAU,GACV,WAAW,GACX,OAAO,CAAC;AAEZ,uHAAuH;AACvH,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,oHAAoH;IACpH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB;IAJzC,YACW,SAAS,EAAE,MAAM;IAC1B,oHAAoH;IAC3G,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,EAAE,qBAAqB,EACvC,OAAO,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,EAI5B;CACF;AA2ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAenF;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/E;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,2BAA2B,GAAG,eAAe,CAY1F"}
+{"version":3,"file":"hub-link.d.ts","sourceRoot":"","sources":["../src/hub-link.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,KAAK,SAAS,EAAa,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,KAAK,eAAe,EAAkB,MAAM,kBAAkB,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,EAC/B,QAAQ,GAAE,MAAgC,GACzC,OAAO,CAAC,UAAU,CAAC,CAUrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhG;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAErB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,qBAAqB,GAC7B,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,UAAU,GACV,WAAW,GACX,OAAO,CAAC;AAEZ,uHAAuH;AACvH,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,oHAAoH;IACpH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB;IAJzC,YACW,SAAS,EAAE,MAAM;IAC1B,oHAAoH;IAC3G,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,EAAE,qBAAqB,EACvC,OAAO,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,EAI5B;CACF;AA2ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAenF;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/E;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,2BAA2B,GAAG,eAAe,CAY1F"}

package/dist/hub-link.js

@@ -24,6 +24,39 @@ import { superviseRelay } from "./reservation.js";
 export function hubRoute(hubPeerId, peerId) {
     return `/p2p/${hubPeerId}/p2p-circuit/webrtc/p2p/${peerId}`;
 }
+/** How many times `dialWebRTC` tries a WebRTC upgrade before giving up. */
+export const WEBRTC_UPGRADE_ATTEMPTS = 3;
+/**
+ * Dial a `/webrtc` address, trying the upgrade again when it fails.
+ *
+ * WHY. Under Node, WebRTC is libdatachannel (`node-datachannel`), and
+ * libdatachannel <= 0.24.5 can lose a race on the OFFERER: setting the remote
+ * answer hands it to the ICE agent before the answer's fingerprint is
+ * committed, ICE can complete at once (the answerer has been sending checks),
+ * and the DTLS handshake that follows finds no remote fingerprint to verify
+ * against -- `DTLS alert: unknown CA`, the peer connection fails, and
+ * libp2p's dial times out. It needs the threads to interleave badly, which a
+ * busy CPU makes common: the conformance suite lost it in most runs under
+ * load. Each attempt is an independent race, so one retry nearly always
+ * succeeds. Fixed upstream by libdatachannel 0235225 ("start DTLS after
+ * remote description"); drop the retry once node-datachannel ships it.
+ * Browsers implement WebRTC themselves and are not affected.
+ *
+ * A WebRTC path that cannot come up fails every attempt, and the caller's
+ * fallback (the relay circuit) runs as before.
+ */
+export async function dialWebRTC(node, target, attempts = WEBRTC_UPGRADE_ATTEMPTS) {
+    let lastError;
+    for (let attempt = 1; attempt <= attempts; attempt++) {
+        try {
+            return await node.dial(target);
+        }
+        catch (err) {
+            lastError = err;
+        }
+    }
+    throw lastError;
+}
 /**
  * Reach the hub over WebRTC through the public relay, and keep ONLY the
  * WebRTC connection.
@@ -37,7 +70,7 @@ export function hubRoute(hubPeerId, peerId) {
  * prototype; the "connects two members directly" test fails without it.
  */
 export async function reachHub(node, relayAddr, hubPeerId) {
-    await node.dial(multiaddr(`${relayAddr}/p2p-circuit/webrtc/p2p/${hubPeerId}`));
+    await dialWebRTC(node, multiaddr(`${relayAddr}/p2p-circuit/webrtc/p2p/${hubPeerId}`));
     const limited = node.getConnections(peerIdFromString(hubPeerId)).filter((c) => c.limits != null);
     await Promise.all(limited.map((c) => c.close()));
 }

package/dist/index.d.ts

@@ -16,7 +16,7 @@
  */
 export { createDuplexMounts, DUPLEX_PROTOCOL, type DuplexContext, type DuplexHandler, type DuplexMounts, NO_MOUNT, type OpenDuplexInit, openDuplex, type PeerDuplex, type ServeDuplexInit, serveDuplex, } from "./duplex.js";
 export { decodeHopAnswer, HOP_RESERVE_TIMEOUT_MS, HOP_STATUS_NAMES, HOP_STATUS_OK, type HopAnswer, RelayNotConnectedError, type RelayReservationGrant, RelayReservationRefusedError, requestRelayReservation, } from "./hop-reserve.js";
-export { HubReservationError, type HubReservationRefusal, hubRoute, leaveRelay, reachHub, reachHubRelayed, reserveOnHub, type SuperviseHubReservationInit, superviseHubReservation, } from "./hub-link.js";
+export { dialWebRTC, HubReservationError, type HubReservationRefusal, hubRoute, leaveRelay, reachHub, reachHubRelayed, reserveOnHub, type SuperviseHubReservationInit, superviseHubReservation, WEBRTC_UPGRADE_ATTEMPTS, } from "./hub-link.js";
 export { HUB_MAX_RESERVATIONS, type HubRelayComponents, type HubRelayServiceInit, hubRelayService, type IsMember, membershipGater, releaseReservation, } from "./hub-relay.js";
 export { type BytesStore, decodeKey, encodeKey, type GenerateKeyInit, generateKey, type IdentityStore, type IdentityStoreInit, identityStore, peerIdOf, type SignerLike, signerOf, } from "./identity.js";
 export type { CallOnLimitedConnection } from "./link.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;GAOG;AACH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,QAAQ,EACR,KAAK,cAAc,EACnB,UAAU,EACV,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,KAAK,SAAS,EACd,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,KAAK,2BAA2B,EAChC,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,eAAe,EACf,KAAK,QAAQ,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,UAAU,EACf,SAAS,EACT,SAAS,EACT,KAAK,eAAe,EACpB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,aAAa,EACb,QAAQ,EACR,KAAK,UAAU,EACf,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,KAAK,YAAY,EACjB,YAAY,EACZ,2BAA2B,EAC3B,SAAS,EACT,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,QAAQ,EACb,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,6BAA6B,EAClC,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,UAAU,EACV,YAAY,EACZ,wBAAwB,EACxB,mBAAmB,EACnB,QAAQ,EACR,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;GAOG;AACH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,QAAQ,EACR,KAAK,cAAc,EACnB,UAAU,EACV,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,KAAK,SAAS,EACd,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,KAAK,2BAA2B,EAChC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,eAAe,EACf,KAAK,QAAQ,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,UAAU,EACf,SAAS,EACT,SAAS,EACT,KAAK,eAAe,EACpB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,aAAa,EACb,QAAQ,EACR,KAAK,UAAU,EACf,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,KAAK,YAAY,EACjB,YAAY,EACZ,2BAA2B,EAC3B,SAAS,EACT,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,QAAQ,EACb,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,6BAA6B,EAClC,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,UAAU,EACV,YAAY,EACZ,wBAAwB,EACxB,mBAAmB,EACnB,QAAQ,EACR,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -16,7 +16,7 @@
  */
 export { createDuplexMounts, DUPLEX_PROTOCOL, NO_MOUNT, openDuplex, serveDuplex, } from "./duplex.js";
 export { decodeHopAnswer, HOP_RESERVE_TIMEOUT_MS, HOP_STATUS_NAMES, HOP_STATUS_OK, RelayNotConnectedError, RelayReservationRefusedError, requestRelayReservation, } from "./hop-reserve.js";
-export { HubReservationError, hubRoute, leaveRelay, reachHub, reachHubRelayed, reserveOnHub, superviseHubReservation, } from "./hub-link.js";
+export { dialWebRTC, HubReservationError, hubRoute, leaveRelay, reachHub, reachHubRelayed, reserveOnHub, superviseHubReservation, WEBRTC_UPGRADE_ATTEMPTS, } from "./hub-link.js";
 export { HUB_MAX_RESERVATIONS, hubRelayService, membershipGater, releaseReservation, } from "./hub-relay.js";
 export { decodeKey, encodeKey, generateKey, identityStore, peerIdOf, signerOf, } from "./identity.js";
 export { lastPeerIdOf } from "./multiaddr-parts.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@statewalker/httpeers-libp2p",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "description": "The transport: nodes, identity, and servePeer — the one place in the extraction that knows what libp2p is.",
   "license": "MIT",
@@ -48,7 +48,7 @@
     "@multiformats/multiaddr": "^13.0.3",
     "@statewalker/webrun-http-streams": "^0.2.2",
     "@statewalker/webrun-streams": "^0.2.0",
-    "@statewalker/webrun-streams-libp2p": "^0.1.2",
+    "@statewalker/webrun-streams-libp2p": "^0.1.6",
     "libp2p": "^3.3.11",
     "@statewalker/httpeers-bridge": "^0.1.3",
     "@statewalker/httpeers-core": "^0.1.2"

package/src/hub-link.ts

@@ -8,7 +8,7 @@
 
 import type { Connection, Libp2p } from "@libp2p/interface";
 import { peerIdFromString } from "@libp2p/peer-id";
-import { multiaddr } from "@multiformats/multiaddr";
+import { type Multiaddr, multiaddr } from "@multiformats/multiaddr";
 import { lastPeerIdOf } from "./multiaddr-parts.js";
 import { type RelaySupervisor, superviseRelay } from "./reservation.js";
 
@@ -28,6 +28,44 @@ export function hubRoute(hubPeerId: string, peerId: string): string {
   return `/p2p/${hubPeerId}/p2p-circuit/webrtc/p2p/${peerId}`;
 }
 
+/** How many times `dialWebRTC` tries a WebRTC upgrade before giving up. */
+export const WEBRTC_UPGRADE_ATTEMPTS = 3;
+
+/**
+ * Dial a `/webrtc` address, trying the upgrade again when it fails.
+ *
+ * WHY. Under Node, WebRTC is libdatachannel (`node-datachannel`), and
+ * libdatachannel <= 0.24.5 can lose a race on the OFFERER: setting the remote
+ * answer hands it to the ICE agent before the answer's fingerprint is
+ * committed, ICE can complete at once (the answerer has been sending checks),
+ * and the DTLS handshake that follows finds no remote fingerprint to verify
+ * against -- `DTLS alert: unknown CA`, the peer connection fails, and
+ * libp2p's dial times out. It needs the threads to interleave badly, which a
+ * busy CPU makes common: the conformance suite lost it in most runs under
+ * load. Each attempt is an independent race, so one retry nearly always
+ * succeeds. Fixed upstream by libdatachannel 0235225 ("start DTLS after
+ * remote description"); drop the retry once node-datachannel ships it.
+ * Browsers implement WebRTC themselves and are not affected.
+ *
+ * A WebRTC path that cannot come up fails every attempt, and the caller's
+ * fallback (the relay circuit) runs as before.
+ */
+export async function dialWebRTC(
+  node: Libp2p,
+  target: Multiaddr | Multiaddr[],
+  attempts: number = WEBRTC_UPGRADE_ATTEMPTS,
+): Promise<Connection> {
+  let lastError: unknown;
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    try {
+      return await node.dial(target);
+    } catch (err) {
+      lastError = err;
+    }
+  }
+  throw lastError;
+}
+
 /**
  * Reach the hub over WebRTC through the public relay, and keep ONLY the
  * WebRTC connection.
@@ -41,7 +79,7 @@ export function hubRoute(hubPeerId: string, peerId: string): string {
  * prototype; the "connects two members directly" test fails without it.
  */
 export async function reachHub(node: Libp2p, relayAddr: string, hubPeerId: string): Promise<void> {
-  await node.dial(multiaddr(`${relayAddr}/p2p-circuit/webrtc/p2p/${hubPeerId}`));
+  await dialWebRTC(node, multiaddr(`${relayAddr}/p2p-circuit/webrtc/p2p/${hubPeerId}`));
   const limited = node.getConnections(peerIdFromString(hubPeerId)).filter((c) => c.limits != null);
   await Promise.all(limited.map((c) => c.close()));
 }

package/src/index.ts

@@ -40,6 +40,7 @@ export {
   requestRelayReservation,
 } from "./hop-reserve.js";
 export {
+  dialWebRTC,
   HubReservationError,
   type HubReservationRefusal,
   hubRoute,
@@ -49,6 +50,7 @@ export {
   reserveOnHub,
   type SuperviseHubReservationInit,
   superviseHubReservation,
+  WEBRTC_UPGRADE_ATTEMPTS,
 } from "./hub-link.js";
 export {
   HUB_MAX_RESERVATIONS,