@swal/edge-mesh 0.0.0-stage → 0.1.0

package/dist/transport/pqc-handshake.js

@@ -0,0 +1,129 @@
+/// <reference types="node" />
+import crypto from "node:crypto";
+import { ml_kem768 } from "@noble/post-quantum/ml-kem.js";
+import { EncryptedChannel } from "../namespaces/encrypted-plugin.js";
+import { bytesAHex, hexABytes } from "../protocol/utils.js";
+/**
+ * PqcHandshake orchestrates ML-KEM-768 key exchanges with ML-DSA-65 signatures.
+ */
+export class PqcHandshake {
+    identity;
+    getPeerPublicKey;
+    constructor(identity, getPeerPublicKey) {
+        this.identity = identity;
+        this.getPeerPublicKey = getPeerPublicKey;
+    }
+    /**
+     * Step 1: Alice initiates the handshake.
+     */
+    async initiate(targetPeerId) {
+        const keysA = ml_kem768.keygen();
+        const challengeA = crypto.randomBytes(16).toString("hex");
+        const payload = {
+            kemPubKey: bytesAHex(keysA.publicKey),
+            challenge: challengeA,
+        };
+        // Sign { kemPubKey, challenge } + targetPeerId to prevent MITM/Replay
+        const signData = new TextEncoder().encode(payload.kemPubKey + payload.challenge + targetPeerId);
+        const signatureBytes = await this.identity.firmar(signData);
+        const signature = bytesAHex(signatureBytes);
+        return {
+            payload: {
+                ...payload,
+                signature,
+            },
+            keysA,
+            challengeA,
+        };
+    }
+    /**
+     * Step 2: Bob responds to Alice's handshake.
+     */
+    async respond(fromPeerId, initPayload) {
+        const pubKeyA = this.getPeerPublicKey(fromPeerId);
+        if (!pubKeyA) {
+            throw new Error(`Public key of peer ${fromPeerId} not found in registry`);
+        }
+        // Verify Alice's signature
+        const signData = new TextEncoder().encode(initPayload.kemPubKey + initPayload.challenge + this.identity.nodoId);
+        const verified = await this.identity.verificar(signData, hexABytes(initPayload.signature), pubKeyA);
+        if (!verified) {
+            throw new Error("Handshake signature verification failed for initiator");
+        }
+        // Encapsulate
+        const kemPubKeyBytes = hexABytes(initPayload.kemPubKey);
+        const { sharedSecret, cipherText } = ml_kem768.encapsulate(kemPubKeyBytes);
+        const channel = new EncryptedChannel(sharedSecret);
+        const challengeB = crypto.randomBytes(16).toString("hex");
+        const replyPayload = {
+            cipherText: bytesAHex(cipherText),
+            challenge: challengeB,
+        };
+        // Sign Bob's response (challengeA + challengeB + cipherText + fromPeerId)
+        const replySignData = new TextEncoder().encode(initPayload.challenge + challengeB + replyPayload.cipherText + fromPeerId);
+        const replySignatureBytes = await this.identity.firmar(replySignData);
+        const replySignature = bytesAHex(replySignatureBytes);
+        return {
+            payload: {
+                ...replyPayload,
+                signature: replySignature,
+            },
+            channel,
+            challengeB,
+        };
+    }
+    /**
+     * Step 3: Alice finalizes the handshake.
+     */
+    async finalize(fromPeerId, state, replyPayload) {
+        if (state.status !== "initiating" || !state.keysA || !state.challengeA) {
+            throw new Error("Invalid handshake state for finalization");
+        }
+        const pubKeyB = this.getPeerPublicKey(fromPeerId);
+        if (!pubKeyB) {
+            throw new Error(`Public key of peer ${fromPeerId} not found in registry`);
+        }
+        // Verify Bob's signature
+        const signData = new TextEncoder().encode(state.challengeA +
+            replyPayload.challenge +
+            replyPayload.cipherText +
+            this.identity.nodoId);
+        const verified = await this.identity.verificar(signData, hexABytes(replyPayload.signature), pubKeyB);
+        if (!verified) {
+            throw new Error("Handshake signature verification failed for responder");
+        }
+        // Decapsulate to get shared secret
+        const cipherTextBytes = hexABytes(replyPayload.cipherText);
+        const sharedSecret = ml_kem768.decapsulate(cipherTextBytes, state.keysA.secretKey);
+        const channel = new EncryptedChannel(sharedSecret);
+        // Sign Bob's challenge + fromPeerId (ACK)
+        const ackSignData = new TextEncoder().encode(replyPayload.challenge + fromPeerId);
+        const ackSignatureBytes = await this.identity.firmar(ackSignData);
+        const ackSignature = bytesAHex(ackSignatureBytes);
+        return {
+            payload: {
+                signature: ackSignature,
+            },
+            channel,
+        };
+    }
+    /**
+     * Step 4: Bob verifies Alice's final ACK.
+     */
+    async verifyAck(fromPeerId, state, ackPayload) {
+        if (state.status !== "responding" || !state.challengeB || !state.channel) {
+            throw new Error("Invalid handshake state for ACK verification");
+        }
+        const pubKeyA = this.getPeerPublicKey(fromPeerId);
+        if (!pubKeyA) {
+            throw new Error(`Public key of peer ${fromPeerId} not found in registry`);
+        }
+        // Verify Alice's ACK signature
+        const ackSignData = new TextEncoder().encode(state.challengeB + this.identity.nodoId);
+        const verified = await this.identity.verificar(ackSignData, hexABytes(ackPayload.signature), pubKeyA);
+        if (!verified) {
+            throw new Error("Handshake signature verification failed for ACK");
+        }
+    }
+}
+//# sourceMappingURL=pqc-handshake.js.map

package/dist/transport/pqc-handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pqc-handshake.js","sourceRoot":"","sources":["../../src/transport/pqc-handshake.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAc5D;;GAEG;AACH,MAAM,OAAO,YAAY;IACP,QAAQ,CAAsB;IAC9B,gBAAgB,CAA6C;IAE9E,YACC,QAA6B,EAC7B,gBAA4D;QAE5D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAoB;QAYlC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE1D,MAAM,OAAO,GAAG;YACf,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;YACrC,SAAS,EAAE,UAAU;SACrB,CAAC;QAEF,sEAAsE;QACtE,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,YAAY,CACpD,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;QAE5C,OAAO;YACN,OAAO,EAAE;gBACR,GAAG,OAAO;gBACV,SAAS;aACT;YACD,KAAK;YACL,UAAU;SACV,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACZ,UAAkB,EAClB,WAIC;QAUD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,wBAAwB,CAAC,CAAC;QAC3E,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,WAAW,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CACpE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC7C,QAAQ,EACR,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,EAChC,OAAO,CACP,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC1E,CAAC;QAED,cAAc;QACd,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG;YACpB,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;YACjC,SAAS,EAAE,UAAU;SACrB,CAAC;QAEF,0EAA0E;QAC1E,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7C,WAAW,CAAC,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC,UAAU,GAAG,UAAU,CACzE,CAAC;QACF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAEtD,OAAO;YACN,OAAO,EAAE;gBACR,GAAG,YAAY;gBACf,SAAS,EAAE,cAAc;aACzB;YACD,OAAO;YACP,UAAU;SACV,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACb,UAAkB,EAClB,KAAsB,EACtB,YAIC;QAOD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,wBAAwB,CAAC,CAAC;QAC3E,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,KAAK,CAAC,UAAU;YACf,YAAY,CAAC,SAAS;YACtB,YAAY,CAAC,UAAU;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CACrB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC7C,QAAQ,EACR,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EACjC,OAAO,CACP,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC1E,CAAC;QAED,mCAAmC;QACnC,MAAM,eAAe,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CACzC,eAAe,EACf,KAAK,CAAC,KAAK,CAAC,SAAS,CACrB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAEnD,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC3C,YAAY,CAAC,SAAS,GAAG,UAAU,CACnC,CAAC;QACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAElD,OAAO;YACN,OAAO,EAAE;gBACR,SAAS,EAAE,YAAY;aACvB;YACD,OAAO;SACP,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACd,UAAkB,EAClB,KAAsB,EACtB,UAEC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,wBAAwB,CAAC,CAAC;QAC3E,CAAC;QAED,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC3C,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CACvC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC7C,WAAW,EACX,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAC/B,OAAO,CACP,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;CACD"}

package/dist/transport/relay-config.d.ts

@@ -0,0 +1,11 @@
+export interface ParsedRelayConfig {
+    host: string;
+    port: number;
+    path: string;
+    secure: boolean;
+    rawUrl: string;
+}
+export declare function resolveRelayUrl(optionsUrl?: string): string;
+export declare function parseRelayUrl(relayUrl: string): ParsedRelayConfig;
+export declare function getRelayConfig(optionsUrl?: string): ParsedRelayConfig;
+//# sourceMappingURL=relay-config.d.ts.map

package/dist/transport/relay-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-config.d.ts","sourceRoot":"","sources":["../../src/transport/relay-config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAyBjE;AAED,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAGrE"}

package/dist/transport/relay-config.js

@@ -0,0 +1,48 @@
+export function resolveRelayUrl(optionsUrl) {
+    if (optionsUrl && optionsUrl.trim().length > 0) {
+        return optionsUrl.trim();
+    }
+    if (typeof process !== "undefined" && process.env) {
+        if (process.env.SWAL_RELAY_URL &&
+            process.env.SWAL_RELAY_URL.trim().length > 0) {
+            return process.env.SWAL_RELAY_URL.trim();
+        }
+        const host = process.env.SWAL_RELAY_HOST || "localhost";
+        const portStr = process.env.SWAL_RELAY_PORT || "9000";
+        const port = parseInt(portStr, 10);
+        const validPort = !isNaN(port) && port > 0 ? port : 9000;
+        return `http://${host}:${validPort}/`;
+    }
+    return "http://localhost:9000/";
+}
+export function parseRelayUrl(relayUrl) {
+    try {
+        const url = new URL(relayUrl);
+        const secure = url.protocol === "https:" || url.protocol === "wss:";
+        const defaultPort = secure ? 443 : 80;
+        const port = url.port ? parseInt(url.port, 10) : defaultPort;
+        const path = url.pathname.endsWith("/") ? url.pathname : `${url.pathname}/`;
+        return {
+            host: url.hostname,
+            port,
+            path,
+            secure,
+            rawUrl: relayUrl,
+        };
+    }
+    catch {
+        // Fallback parse if URL parsing fails
+        return {
+            host: "localhost",
+            port: 9000,
+            path: "/",
+            secure: false,
+            rawUrl: relayUrl,
+        };
+    }
+}
+export function getRelayConfig(optionsUrl) {
+    const resolved = resolveRelayUrl(optionsUrl);
+    return parseRelayUrl(resolved);
+}
+//# sourceMappingURL=relay-config.js.map

package/dist/transport/relay-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-config.js","sourceRoot":"","sources":["../../src/transport/relay-config.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,eAAe,CAAC,UAAmB;IAClD,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,IACC,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAC3C,CAAC;YACF,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,OAAO,UAAU,IAAI,IAAI,SAAS,GAAG,CAAC;IACvC,CAAC;IAED,OAAO,wBAAwB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;QACpE,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC;QAE5E,OAAO;YACN,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,QAAQ;SAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,sCAAsC;QACtC,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,QAAQ;SAChB,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAmB;IACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC"}

package/dist/transport/relay-server.d.ts

@@ -0,0 +1,37 @@
+import { EventEmitter } from "node:events";
+export interface IceServerConfig {
+    urls: string | string[];
+    username?: string;
+    credential?: string;
+}
+export interface RelayServerOptions {
+    port?: number;
+    host?: string;
+    path?: string;
+    key?: string;
+    iceServers?: IceServerConfig[];
+    rateLimitTokensPerSec?: number;
+    rateLimitMaxTokens?: number;
+}
+export declare class RelayServer extends EventEmitter {
+    private readonly port;
+    private readonly host;
+    private readonly path;
+    private readonly key;
+    private readonly iceServers;
+    private readonly rateLimiter;
+    private httpServer?;
+    private wss?;
+    private clients;
+    private running;
+    private actualPort;
+    constructor(options?: RelayServerOptions);
+    start(): Promise<number>;
+    private handleConnection;
+    private handleSignalingMessage;
+    getConnectedPeers(): string[];
+    getPort(): number;
+    getIceServers(): IceServerConfig[];
+    close(): Promise<void>;
+}
+//# sourceMappingURL=relay-server.d.ts.map

package/dist/transport/relay-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-server.d.ts","sourceRoot":"","sources":["../../src/transport/relay-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IAErD,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,GAAG,CAAC,CAAkB;IAC9B,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAK;IAEvB,YAAY,OAAO,GAAE,kBAAuB,EAuB3C;IAEK,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAqE7B;IAED,OAAO,CAAC,gBAAgB;IAqFxB,OAAO,CAAC,sBAAsB;IA0C9B,iBAAiB,IAAI,MAAM,EAAE,CAE5B;IAED,OAAO,IAAI,MAAM,CAEhB;IAED,aAAa,IAAI,eAAe,EAAE,CAEjC;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CA0B3B;CACD"}

package/dist/transport/relay-server.js

@@ -0,0 +1,230 @@
+import { EventEmitter } from "node:events";
+import { createServer, } from "node:http";
+import { WebSocketServer } from "ws";
+import { TokenBucketRateLimiter } from "../security/rate-limiter.js";
+export class RelayServer extends EventEmitter {
+    port;
+    host;
+    path;
+    key;
+    iceServers;
+    rateLimiter;
+    httpServer;
+    wss;
+    clients = new Map();
+    running = false;
+    actualPort = 0;
+    constructor(options = {}) {
+        super();
+        const envPort = process.env.SWAL_RELAY_PORT
+            ? parseInt(process.env.SWAL_RELAY_PORT, 10)
+            : undefined;
+        this.port = options.port ?? envPort ?? 9000;
+        this.host = options.host ?? process.env.SWAL_RELAY_HOST ?? "0.0.0.0";
+        this.path = options.path ?? "/";
+        if (!this.path.endsWith("/")) {
+            this.path += "/";
+        }
+        this.key = options.key ?? "peerjs";
+        this.iceServers = options.iceServers ?? [
+            { urls: "stun:stun.l.google.com:19302" },
+        ];
+        const tokensPerSec = options.rateLimitTokensPerSec ?? 50;
+        const maxTokens = options.rateLimitMaxTokens ?? 100;
+        this.rateLimiter = new TokenBucketRateLimiter({
+            tokensPerInterval: tokensPerSec,
+            intervalMs: 1000,
+            maxTokens: maxTokens,
+        });
+    }
+    async start() {
+        if (this.running) {
+            return this.actualPort;
+        }
+        return new Promise((resolve, reject) => {
+            this.httpServer = createServer((req, res) => {
+                if (req.url === "/health" || req.url === "/status") {
+                    res.writeHead(200, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({
+                        status: "ok",
+                        peers: this.clients.size,
+                        iceServers: this.iceServers,
+                    }));
+                    return;
+                }
+                res.writeHead(404);
+                res.end("Not Found");
+            });
+            this.wss = new WebSocketServer({ noServer: true });
+            this.httpServer.on("upgrade", (req, socket, head) => {
+                const url = new URL(req.url ?? "", `http://${req.headers.host ?? "localhost"}`);
+                const clientIp = req.socket.remoteAddress || "unknown";
+                if (!this.rateLimiter.consume(clientIp, 1)) {
+                    socket.write("HTTP/1.1 429 Too Many Requests\r\n\r\n");
+                    socket.destroy();
+                    return;
+                }
+                if (!url.pathname.startsWith(this.path)) {
+                    socket.write("HTTP/1.1 404 Not Found\r\n\r\n");
+                    socket.destroy();
+                    return;
+                }
+                this.wss?.handleUpgrade(req, socket, head, (ws) => {
+                    this.wss?.emit("connection", ws, req);
+                });
+            });
+            this.wss.on("connection", (ws, req) => {
+                this.handleConnection(ws, req);
+            });
+            this.httpServer.on("error", (err) => {
+                this.emit("error", err);
+                reject(err);
+            });
+            this.httpServer.listen(this.port, this.host, () => {
+                this.running = true;
+                const addr = this.httpServer?.address();
+                if (addr && typeof addr === "object") {
+                    this.actualPort = addr.port;
+                }
+                else {
+                    this.actualPort = this.port;
+                }
+                this.emit("listening", { port: this.actualPort, host: this.host });
+                resolve(this.actualPort);
+            });
+        });
+    }
+    handleConnection(ws, req) {
+        const url = new URL(req.url ?? "", `http://${req.headers.host ?? "localhost"}`);
+        const peerId = url.searchParams.get("id");
+        const key = url.searchParams.get("key");
+        if (key && key !== this.key) {
+            ws.send(JSON.stringify({
+                type: "INVALID-KEY",
+                payload: { msg: "Invalid key provided" },
+            }));
+            ws.close();
+            return;
+        }
+        if (!peerId) {
+            ws.send(JSON.stringify({
+                type: "ERROR",
+                payload: { msg: "No peer ID specified" },
+            }));
+            ws.close();
+            return;
+        }
+        if (!this.rateLimiter.consume(`peer:${peerId}`, 1)) {
+            ws.send(JSON.stringify({
+                type: "ERROR",
+                payload: { msg: "Rate limit exceeded" },
+            }));
+            ws.close();
+            return;
+        }
+        if (this.clients.has(peerId)) {
+            ws.send(JSON.stringify({
+                type: "ID-TAKEN",
+                payload: { msg: `ID "${peerId}" is taken` },
+            }));
+            ws.close();
+            return;
+        }
+        this.clients.set(peerId, ws);
+        this.emit("peerConnect", { peerId });
+        ws.send(JSON.stringify({
+            type: "OPEN",
+        }));
+        ws.on("message", (raw) => {
+            if (!this.rateLimiter.consume(`peer:${peerId}`, 1)) {
+                return;
+            }
+            try {
+                const msg = JSON.parse(raw.toString());
+                this.handleSignalingMessage(peerId, msg);
+            }
+            catch {
+                // Ignore invalid JSON
+            }
+        });
+        ws.on("close", () => {
+            if (this.clients.get(peerId) === ws) {
+                this.clients.delete(peerId);
+                this.emit("peerDisconnect", { peerId });
+            }
+        });
+        ws.on("error", (err) => {
+            this.emit("peerError", { peerId, error: err });
+        });
+    }
+    handleSignalingMessage(srcPeerId, msg) {
+        if (!msg || typeof msg !== "object")
+            return;
+        const type = msg.type;
+        if (type === "HEARTBEAT") {
+            const ws = this.clients.get(srcPeerId);
+            if (ws && ws.readyState === ws.OPEN) {
+                ws.send(JSON.stringify({ type: "HEARTBEAT" }));
+            }
+            return;
+        }
+        const dstPeerId = msg.dst;
+        if (!dstPeerId)
+            return;
+        const targetWs = this.clients.get(dstPeerId);
+        if (!targetWs || targetWs.readyState !== targetWs.OPEN) {
+            const srcWs = this.clients.get(srcPeerId);
+            if (srcWs && srcWs.readyState === srcWs.OPEN) {
+                srcWs.send(JSON.stringify({
+                    type: "LEAVE",
+                    src: dstPeerId,
+                    dst: srcPeerId,
+                }));
+            }
+            return;
+        }
+        // Relay signaling message (OFFER, ANSWER, CANDIDATE, LEAVE) - payload only!
+        targetWs.send(JSON.stringify({
+            type,
+            src: srcPeerId,
+            dst: dstPeerId,
+            payload: msg.payload,
+        }));
+    }
+    getConnectedPeers() {
+        return Array.from(this.clients.keys());
+    }
+    getPort() {
+        return this.actualPort;
+    }
+    getIceServers() {
+        return this.iceServers;
+    }
+    async close() {
+        if (!this.running)
+            return;
+        for (const ws of this.clients.values()) {
+            try {
+                ws.close();
+            }
+            catch {
+                // Ignore
+            }
+        }
+        this.clients.clear();
+        if (this.wss) {
+            this.wss.close();
+        }
+        await new Promise((resolve) => {
+            if (this.httpServer) {
+                this.httpServer.close(() => resolve());
+            }
+            else {
+                resolve();
+            }
+        });
+        this.running = false;
+        this.emit("close");
+    }
+}
+//# sourceMappingURL=relay-server.js.map

package/dist/transport/relay-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-server.js","sourceRoot":"","sources":["../../src/transport/relay-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACN,YAAY,GAGZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAkB,eAAe,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAkBrE,MAAM,OAAO,WAAY,SAAQ,YAAY;IAC3B,IAAI,CAAS;IACb,IAAI,CAAS;IACb,IAAI,CAAS;IACb,GAAG,CAAS;IACZ,UAAU,CAAoB;IAC9B,WAAW,CAAyB;IAE7C,UAAU,CAAc;IACxB,GAAG,CAAmB;IACtB,OAAO,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC5C,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,GAAG,CAAC,CAAC;IAEvB,YAAY,OAAO,GAAuB,EAAE;QAC3C,KAAK,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;YAC1C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI;YACvC,EAAE,IAAI,EAAE,8BAA8B,EAAE;SACxC,CAAC;QAEF,MAAM,YAAY,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,sBAAsB,CAAC;YAC7C,iBAAiB,EAAE,YAAY;YAC/B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,SAAS;SACpB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,UAAU,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3C,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC;wBACd,MAAM,EAAE,IAAI;wBACZ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;wBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC3B,CAAC,CACF,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,EAAE,EACb,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;gBACF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;gBAEvD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC5C,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;oBACvD,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;oBAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAa,EAAE,EAAE;oBAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;gBACvC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAa,EAAE,GAAoB,EAAE,EAAE;gBACjE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;gBACxC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC7B,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,EAAa,EAAE,GAAoB;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,EAAE,EACb,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE;aACxC,CAAC,CACF,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE;aACxC,CAAC,CACF,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YACpD,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE;aACvC,CAAC,CACF,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,MAAM,YAAY,EAAE;aAC3C,CAAC,CACF,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,MAAM;SACZ,CAAC,CACF,CAAC;QAEF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,EAAE;YACzC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpD,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACR,sBAAsB;YACvB,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,SAAiB,EAAE,GAAQ;QACzD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO;QAE5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,OAAO;QACR,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,SAAS;iBACd,CAAC,CACF,CAAC;YACH,CAAC;YACD,OAAO;QACR,CAAC;QAED,4EAA4E;QAC5E,QAAQ,CAAC,IAAI,CACZ,IAAI,CAAC,SAAS,CAAC;YACd,IAAI;YACJ,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC,CACF,CAAC;IACH,CAAC;IAED,iBAAiB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACN,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAED,aAAa;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;QACF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACX,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;CACD"}

package/dist/transport/tor.d.ts

@@ -0,0 +1,47 @@
+import type { NodoId, TipoMensaje, TipoTransporte } from "../types/index.js";
+import type { ITransport, TransportEventMap } from "./types.js";
+export interface TorConfig {
+    readonly enabled: boolean;
+    readonly localPort?: number;
+    readonly dataDir?: string;
+    readonly socksPort?: number;
+    readonly controlPort?: number;
+    readonly torBinary?: string;
+}
+export declare const DEFAULT_TOR_CONFIG: TorConfig;
+/**
+ * Resolve data directory for Tor state and hidden service keys.
+ */
+export declare function getTorDataDir(customPath?: string): string;
+/**
+ * Generate standard torrc configuration for an Onion v3 Hidden Service.
+ */
+export declare function generateTorrc(config: TorConfig, dataDir: string): string;
+/**
+ * TorOnionTransport provides opt-in Tor Onion v3 Hidden Service connectivity.
+ */
+export declare class TorOnionTransport implements ITransport {
+    readonly tipo: TipoTransporte;
+    readonly eventTarget: EventTarget;
+    readonly nodoId: NodoId;
+    readonly config: TorConfig;
+    private readonly deduplicator;
+    private torProcess;
+    private onionAddress;
+    private conectado;
+    private readonly dataDir;
+    constructor(nodoId: NodoId, config?: Partial<TorConfig>);
+    start(localPort?: number): Promise<string | null>;
+    getOnionAddress(): string | null;
+    conectar(_peerId: string): Promise<void>;
+    desconectar(): Promise<void>;
+    transmitir(datos: unknown, tipo?: TipoMensaje): Promise<void>;
+    enviar(destino: NodoId, datos: unknown, tipo?: TipoMensaje): Promise<void>;
+    obtenerConexiones(): readonly string[];
+    estaConectado(): boolean;
+    cerrar(): Promise<void>;
+    on<K extends keyof TransportEventMap>(tipo: K, handler: (ev: TransportEventMap[K]) => void): void;
+    off<K extends keyof TransportEventMap>(tipo: K, handler: (ev: TransportEventMap[K]) => void): void;
+    private emit;
+}
+//# sourceMappingURL=tor.d.ts.map

package/dist/transport/tor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tor.d.ts","sourceRoot":"","sources":["../../src/transport/tor.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAEX,MAAM,EACN,WAAW,EACX,cAAc,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,kBAAkB,EAAE,SAMhC,CAAC;AAEF;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAoBzD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAexE;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IACnD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAuB;IACpD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAE3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,YAAY,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,CAAC,SAAS,CAAM,EAM1D;IAEK,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuDtD;IAED,eAAe,IAAI,MAAM,GAAG,IAAI,CAO/B;IAEK,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7C;IAEK,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAMjC;IAEK,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CASlE;IAEK,MAAM,CACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,CASf;IAED,iBAAiB,IAAI,SAAS,MAAM,EAAE,CAErC;IAED,aAAa,IAAI,OAAO,CAEvB;IAEK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5B;IAED,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACnC,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI,GACzC,IAAI,CAEN;IAED,GAAG,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACpC,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI,GACzC,IAAI,CAKN;IAED,OAAO,CAAC,IAAI;CAOZ"}