@toon-protocol/connector 2.2.0 → 2.5.0

package/dist/transport/managed-anon-client.js

@@ -0,0 +1,265 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedAnonClient = void 0;
+exports.createDefaultAnonFactory = createDefaultAnonFactory;
+const tslib_1 = require("tslib");
+const fs_1 = require("fs");
+const path_1 = tslib_1.__importDefault(require("path"));
+const probe_tcp_port_1 = require("./probe-tcp-port");
+const socks_url_1 = require("./socks-url");
+const DEFAULT_STARTUP_TIMEOUT_MS = 60_000;
+const DEFAULT_STOP_TIMEOUT_MS = 10_000;
+class ManagedAnonClient {
+    _opts;
+    _logger;
+    _socksHost;
+    _socksPort;
+    _sdk;
+    _started = false;
+    _lastHealthyFlag = true;
+    _consecutiveProbeFailures = 0;
+    constructor(options) {
+        this._opts = options;
+        this._logger = options.logger.child({ component: 'managed-anon-client' });
+        const { host, port } = (0, socks_url_1.parseSocks5hUrl)(options.socksProxy);
+        this._socksHost = host;
+        this._socksPort = port;
+    }
+    async start() {
+        if (this._started && this._sdk) {
+            return;
+        }
+        const factoryOpts = await this._buildFactoryOptions();
+        let sdk;
+        try {
+            sdk = this._opts.anonFactory(factoryOpts);
+        }
+        catch (err) {
+            const cause = err;
+            if (cause?.code === 'MODULE_NOT_FOUND') {
+                throw new Error(`Managed ATOR transport requires the optional dependency ` +
+                    `"@anyone-protocol/anyone-client" but it was not found. ` +
+                    `Install it with: npm install @anyone-protocol/anyone-client`, { cause });
+            }
+            throw new Error(`Failed to construct @anyone-protocol/anyone-client SDK handle: ${cause?.message ?? String(err)}`, { cause });
+        }
+        try {
+            await sdk.start();
+        }
+        catch (err) {
+            const cause = err;
+            await this._bestEffortStop(sdk);
+            this._sdk = undefined;
+            this._started = false;
+            if (cause?.code === 'ENOENT' || /ENOENT/.test(cause?.message ?? '')) {
+                const hint = this._opts.binaryPath
+                    ? ` at configured binaryPath="${this._opts.binaryPath}"`
+                    : ' (the bundled binary shipped by @anyone-protocol/anyone-client could not be spawned)';
+                throw new Error(`anon binary not found${hint}. Install @anyone-protocol/anyone-client ` +
+                    `and ensure a compatible binary is available for this platform ` +
+                    `(npm install @anyone-protocol/anyone-client).`, { cause });
+            }
+            throw new Error(`Failed to start managed anon SDK: ${cause?.message ?? String(err)}`, {
+                cause,
+            });
+        }
+        const startupTimeoutMs = this._opts.startupTimeoutMs ?? DEFAULT_STARTUP_TIMEOUT_MS;
+        const socksPort = sdk.getSOCKSPort?.() ?? this._socksPort;
+        try {
+            await (0, probe_tcp_port_1.waitForTcpPort)(this._socksHost, socksPort, startupTimeoutMs);
+        }
+        catch (err) {
+            const cause = err;
+            await this._bestEffortStop(sdk);
+            this._sdk = undefined;
+            this._started = false;
+            throw new Error(`Managed anon SOCKS port ${socksPort} did not bind within ${startupTimeoutMs}ms timeout ` +
+                `(awaiting TCP readiness on ${this._socksHost}:${socksPort})`, { cause });
+        }
+        this._sdk = sdk;
+        this._started = true;
+        this._lastHealthyFlag = true;
+        this._logger.info({ event: 'managed_anon_started', socksPort }, 'Managed anon client started');
+    }
+    async stop() {
+        const sdk = this._sdk;
+        if (!sdk || !this._started) {
+            this._sdk = undefined;
+            this._started = false;
+            return;
+        }
+        this._sdk = undefined;
+        this._started = false;
+        const stopTimeoutMs = this._opts.stopTimeoutMs ?? DEFAULT_STOP_TIMEOUT_MS;
+        let timer;
+        const timeoutPromise = new Promise((resolve) => {
+            timer = setTimeout(() => resolve('timeout'), stopTimeoutMs);
+        });
+        let raceSettled = false;
+        const sdkStopPromise = sdk.stop();
+        sdkStopPromise.catch((lateErr) => {
+            if (raceSettled) {
+                this._logger.warn({
+                    event: 'managed_anon_stop_late_error',
+                    errorMessage: lateErr?.message ?? String(lateErr),
+                }, 'Managed anon SDK stop() rejected after the stop race had already settled');
+            }
+        });
+        try {
+            const result = await Promise.race([sdkStopPromise.then(() => 'ok'), timeoutPromise]);
+            raceSettled = true;
+            if (result === 'timeout') {
+                const stillRunning = safeIsRunning(sdk);
+                this._logger.warn({
+                    event: 'managed_anon_stop_timeout',
+                    stopTimeoutMs,
+                    sdkStillRunning: stillRunning,
+                }, 'Managed anon SDK stop() did not resolve within timeout; ' +
+                    (stillRunning ? 'operator intervention may be required' : 'proceeding with shutdown'));
+            }
+            else {
+                this._logger.info({ event: 'managed_anon_stopped' }, 'Managed anon client stopped');
+            }
+        }
+        catch (err) {
+            raceSettled = true;
+            const cause = err;
+            this._logger.warn({
+                event: 'managed_anon_stop_error',
+                errorMessage: cause?.message ?? String(err),
+            }, 'Managed anon SDK stop() threw; continuing shutdown');
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    isRunning() {
+        return this._started && safeIsRunning(this._sdk);
+    }
+    async healthCheck() {
+        if (!this._started || !this._sdk) {
+            return false;
+        }
+        const ok = safeIsRunning(this._sdk);
+        if (!ok && this._lastHealthyFlag) {
+            this._lastHealthyFlag = false;
+            this._logger.warn({ event: 'managed_anon_crash_detected' }, 'Managed anon SDK reports not running (binary may have crashed)');
+        }
+        else if (ok && !this._lastHealthyFlag) {
+            this._lastHealthyFlag = true;
+        }
+        if (ok) {
+            try {
+                await (0, probe_tcp_port_1.probeTcpPort)(this._socksHost, this._sdk.getSOCKSPort(), 250);
+                this._consecutiveProbeFailures = 0;
+            }
+            catch (err) {
+                this._consecutiveProbeFailures += 1;
+                if (this._consecutiveProbeFailures >= 2) {
+                    this._logger.warn({
+                        event: 'managed_anon_probe_failed',
+                        consecutiveFailures: this._consecutiveProbeFailures,
+                        errorMessage: err?.message ?? String(err),
+                    }, 'Managed anon SOCKS port probe failed on 2+ consecutive health checks');
+                    return false;
+                }
+            }
+        }
+        return ok;
+    }
+    async _buildFactoryOptions() {
+        const opts = {
+            displayLog: this._opts.logger.level === 'debug' || this._opts.logger.level === 'trace',
+            useExecFile: false,
+            socksPort: this._socksPort,
+            orPort: 0,
+            binaryPath: this._opts.binaryPath,
+            autoTermsAgreement: true,
+        };
+        if (this._opts.hiddenServiceDir) {
+            opts.hiddenServiceDir = this._opts.hiddenServiceDir;
+            if (this._opts.hiddenServicePort !== undefined) {
+                opts.hiddenServicePort = this._opts.hiddenServicePort;
+            }
+            try {
+                await fs_1.promises.mkdir(this._opts.hiddenServiceDir, { recursive: true });
+                const anonrcPath = path_1.default.join(this._opts.hiddenServiceDir, 'anonrc');
+                let anonrcExists = false;
+                try {
+                    await fs_1.promises.access(anonrcPath);
+                    anonrcExists = true;
+                }
+                catch {
+                    anonrcExists = false;
+                }
+                if (!anonrcExists) {
+                    const anonrc = `# Written by ManagedAnonClient (Epic 35 / Story 35.5) on first boot.\n` +
+                        `# Edit freely — ManagedAnonClient will NOT overwrite this file on subsequent starts.\n` +
+                        `AgreeToTerms 1\n` +
+                        `SocksPort ${this._socksPort}\n` +
+                        `HiddenServiceDir ${this._opts.hiddenServiceDir}\n` +
+                        (this._opts.hiddenServicePort !== undefined
+                            ? `HiddenServicePort ${this._opts.hiddenServicePort} 127.0.0.1:${this._opts.hiddenServicePort}\n`
+                            : '');
+                    await fs_1.promises.writeFile(anonrcPath, anonrc, { encoding: 'utf8', flag: 'wx' });
+                }
+                opts.configFilePath = anonrcPath;
+                opts.configFile = anonrcPath;
+            }
+            catch (err) {
+                this._logger.debug({ event: 'managed_anon_anonrc_write_failed', error: err.message }, 'Could not write anonrc; continuing with native options only');
+            }
+        }
+        return opts;
+    }
+    async _bestEffortStop(sdk) {
+        try {
+            await sdk.stop();
+        }
+        catch (err) {
+            this._logger.warn({
+                event: 'managed_anon_cleanup_stop_failed',
+                errorMessage: err.message,
+            }, 'Best-effort SDK stop() during failure cleanup threw; ignoring');
+        }
+    }
+}
+exports.ManagedAnonClient = ManagedAnonClient;
+function safeIsRunning(sdk) {
+    if (!sdk)
+        return false;
+    try {
+        return sdk.isRunning() === true;
+    }
+    catch {
+        return false;
+    }
+}
+async function createDefaultAnonFactory() {
+    let mod;
+    const pkg = '@anyone-protocol/anyone-client';
+    try {
+        mod = require(pkg);
+    }
+    catch {
+        try {
+            mod = await new Function('p', 'return import(p)')(pkg);
+        }
+        catch (err) {
+            const cause = err;
+            const wrapped = new Error(`Managed ATOR transport requires the optional dependency ` +
+                `"@anyone-protocol/anyone-client" but it was not found. ` +
+                `Install it with: npm install @anyone-protocol/anyone-client`, { cause });
+            wrapped.code = 'MODULE_NOT_FOUND';
+            throw wrapped;
+        }
+    }
+    const AnonCtor = mod?.Process ?? mod?.Anon ?? mod?.default?.Process ?? mod?.default?.Anon ?? mod?.default;
+    if (typeof AnonCtor !== 'function') {
+        throw new Error('@anyone-protocol/anyone-client did not export a `Process` or `Anon` constructor; ' +
+            'SDK surface may have changed.');
+    }
+    return (opts) => new AnonCtor(opts);
+}
+//# sourceMappingURL=managed-anon-client.js.map

package/dist/transport/managed-anon-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-anon-client.js","sourceRoot":"","sources":["../../src/transport/managed-anon-client.ts"],"names":[],"mappings":";;;AA+aA,4DA2CC;;AAlcD,2BAAqC;AACrC,wDAAwB;AAExB,qDAAgE;AAChE,2CAA8C;AAsE9C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAMvC,MAAa,iBAAiB;IACX,KAAK,CAA2B;IAChC,OAAO,CAAc;IACrB,UAAU,CAAS;IACnB,UAAU,CAAS;IAC5B,IAAI,CAA4B;IAMhC,QAAQ,GAAG,KAAK,CAAC;IACjB,gBAAgB,GAAG,IAAI,CAAC;IACxB,yBAAyB,GAAG,CAAC,CAAC;IAEtC,YAAY,OAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAE1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAA,2BAAe,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAQD,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAGtD,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAA4B,CAAC;YAC3C,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,0DAA0D;oBACxD,yDAAyD;oBACzD,6DAA6D,EAC/D,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kEAAkE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EACjG,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;QAGD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAA4B,CAAC;YAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU;oBAChC,CAAC,CAAC,8BAA8B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG;oBACxD,CAAC,CAAC,sFAAsF,CAAC;gBAC3F,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,2CAA2C;oBACrE,gEAAgE;oBAChE,+CAA+C,EACjD,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;gBACpF,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QACnF,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,IAAA,+BAAc,EAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAY,CAAC;YAC3B,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,wBAAwB,gBAAgB,aAAa;gBACvF,8BAA8B,IAAI,CAAC,UAAU,IAAI,SAAS,GAAG,EAC/D,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACjG,CAAC;IAMD,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE3B,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QAEtB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,uBAAuB,CAAC;QAE1E,IAAI,KAAiC,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YACxD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAQH,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,cAAc,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;YACxC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;oBACE,KAAK,EAAE,8BAA8B;oBACrC,YAAY,EAAG,OAAiB,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;iBAC7D,EACD,0EAA0E,CAC3E,CAAC;YACJ,CAAC;QAGH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAa,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;YAC9F,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;oBACE,KAAK,EAAE,2BAA2B;oBAClC,aAAa;oBACb,eAAe,EAAE,YAAY;iBAC9B,EACD,0DAA0D;oBACxD,CAAC,YAAY,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CACxF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,KAAK,GAAG,GAAY,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;gBACE,KAAK,EAAE,yBAAyB;gBAChC,YAAY,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;aAC5C,EACD,oDAAoD,CACrD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAMD,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,EAAE,KAAK,EAAE,6BAA6B,EAAE,EACxC,gEAAgE,CACjE,CAAC;QACJ,CAAC;aAAM,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;QAKD,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,IAAA,6BAAY,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnE,IAAI,CAAC,yBAAyB,GAAG,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,yBAAyB,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,yBAAyB,IAAI,CAAC,EAAE,CAAC;oBACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;wBACE,KAAK,EAAE,2BAA2B;wBAClC,mBAAmB,EAAE,IAAI,CAAC,yBAAyB;wBACnD,YAAY,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;qBACrD,EACD,sEAAsE,CACvE,CAAC;oBACF,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAQO,KAAK,CAAC,oBAAoB;QAChC,MAAM,IAAI,GAAuB;YAC/B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO;YACtF,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;YACjC,kBAAkB,EAAE,IAAI;SACzB,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAGhC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACxD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,aAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAMpE,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,aAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC7B,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC;gBACD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,MAAM,GACV,wEAAwE;wBACxE,wFAAwF;wBACxF,kBAAkB;wBAClB,aAAa,IAAI,CAAC,UAAU,IAAI;wBAChC,oBAAoB,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI;wBACnD,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;4BACzC,CAAC,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,iBAAiB,cAAc,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI;4BACjG,CAAC,CAAC,EAAE,CAAC,CAAC;oBACV,MAAM,aAAG,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBAKD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC;gBAChC,IAAqD,CAAC,UAAU,GAAG,UAAU,CAAC;YACjF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,KAAK,CAChB,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAC5E,6DAA6D,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAkB;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;gBACE,KAAK,EAAE,kCAAkC;gBACzC,YAAY,EAAG,GAAa,CAAC,OAAO;aACrC,EACD,+DAA+D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AArTD,8CAqTC;AAGD,SAAS,aAAa,CAAC,GAA8B;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAOM,KAAK,UAAU,wBAAwB;IAI5C,IAAI,GAAQ,CAAC;IAIb,MAAM,GAAG,GAAG,gCAAgC,CAAC;IAC7C,IAAI,CAAC;QAGH,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YAEH,GAAG,GAAG,MAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAiC,CAAC,GAAG,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAA4B,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,0DAA0D;gBACxD,yDAAyD;gBACzD,6DAA6D,EAC/D,EAAE,KAAK,EAAE,CACV,CAAC;YAGD,OAAiC,CAAC,IAAI,GAAG,kBAAkB,CAAC;YAC7D,MAAM,OAAO,CAAC;QAChB,CAAC;IACH,CAAC;IAID,MAAM,QAAQ,GACZ,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC;IAC3F,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAwB,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAkB,CAAC;AAC3E,CAAC"}

package/dist/transport/probe-tcp-port.d.ts

@@ -0,0 +1,3 @@
+export declare function probeTcpPort(host: string, port: number, timeoutMs: number): Promise<void>;
+export declare function waitForTcpPort(host: string, port: number, overallTimeoutMs: number, perProbeTimeoutMs?: number, pollIntervalMs?: number): Promise<void>;
+//# sourceMappingURL=probe-tcp-port.d.ts.map

package/dist/transport/probe-tcp-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-tcp-port.d.ts","sourceRoot":"","sources":["../../src/transport/probe-tcp-port.ts"],"names":[],"mappings":"AAyBA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCzF;AAeD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,SAAM,EACvB,cAAc,SAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/transport/probe-tcp-port.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.probeTcpPort = probeTcpPort;
+exports.waitForTcpPort = waitForTcpPort;
+const tslib_1 = require("tslib");
+const net_1 = tslib_1.__importDefault(require("net"));
+function probeTcpPort(host, port, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const socket = net_1.default.createConnection({ host, port });
+        let settled = false;
+        const cleanup = () => {
+            socket.removeAllListeners();
+            socket.destroy();
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve();
+        });
+        socket.once('timeout', () => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(new Error(`probe timed out after ${timeoutMs}ms`));
+        });
+        socket.once('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(err);
+        });
+    });
+}
+async function waitForTcpPort(host, port, overallTimeoutMs, perProbeTimeoutMs = 250, pollIntervalMs = 100) {
+    const deadline = Date.now() + overallTimeoutMs;
+    let lastErr;
+    while (Date.now() < deadline) {
+        const remaining = deadline - Date.now();
+        const probeTimeout = Math.min(perProbeTimeoutMs, Math.max(1, remaining));
+        try {
+            await probeTcpPort(host, port, probeTimeout);
+            return;
+        }
+        catch (err) {
+            lastErr = err;
+        }
+        if (Date.now() + pollIntervalMs >= deadline)
+            break;
+        await new Promise((r) => setTimeout(r, pollIntervalMs));
+    }
+    throw new Error(`TCP port ${host}:${port} did not become ready within ${overallTimeoutMs}ms timeout` +
+        (lastErr ? ` (last error: ${lastErr.message})` : ''));
+}
+//# sourceMappingURL=probe-tcp-port.js.map

package/dist/transport/probe-tcp-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-tcp-port.js","sourceRoot":"","sources":["../../src/transport/probe-tcp-port.ts"],"names":[],"mappings":";;AAyBA,oCAiCC;AAeD,wCA4BC;;AAtFD,sDAAsB;AAUtB,SAAgB,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IACxE,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,aAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,SAAS,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAeM,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAAY,EACZ,gBAAwB,EACxB,iBAAiB,GAAG,GAAG,EACvB,cAAc,GAAG,GAAG;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC/C,IAAI,OAA0B,CAAC;IAE/B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAY,CAAC;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,IAAI,QAAQ;YAAE,MAAM;QACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,IAAI,IAAI,gCAAgC,gBAAgB,YAAY;QAClF,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACvD,CAAC;AACJ,CAAC"}

package/dist/transport/socks-transport-provider.d.ts

@@ -0,0 +1,29 @@
+import type http from 'http';
+import type pino from 'pino';
+import type { ManagedAnonClient } from './managed-anon-client';
+import type { TransportProvider } from './transport-provider';
+export interface SocksTransportProviderOptions {
+    socksProxy: string;
+    externalUrl: string;
+    logger: pino.Logger;
+    managedClient?: ManagedAnonClient;
+    resolveExternalUrlOnStart?: () => Promise<string>;
+}
+export declare class SocksTransportProvider implements TransportProvider {
+    private readonly _socksProxy;
+    private _externalUrl;
+    private readonly _logger;
+    private readonly _proxyHost;
+    private readonly _proxyPort;
+    private readonly _managedClient;
+    private readonly _resolveExternalUrlOnStart;
+    private _managedHealthy;
+    constructor(options: SocksTransportProviderOptions);
+    createAgent(peerUrl: string): http.Agent;
+    getExternalUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    healthCheck(): Promise<boolean>;
+    private _probeProxy;
+}
+//# sourceMappingURL=socks-transport-provider.d.ts.map

package/dist/transport/socks-transport-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socks-transport-provider.d.ts","sourceRoot":"","sources":["../../src/transport/socks-transport-provider.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAK9D,MAAM,WAAW,6BAA6B;IAE5C,UAAU,EAAE,MAAM,CAAC;IAEnB,WAAW,EAAE,MAAM,CAAC;IAEpB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IAOpB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAQlC,yBAAyB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAcD,qBAAa,sBAAuB,YAAW,iBAAiB;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAC/D,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAsC;IACjF,OAAO,CAAC,eAAe,CAAQ;gBAOnB,OAAO,EAAE,6BAA6B;IA+ClD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK;IAOxC,cAAc,IAAI,MAAM;IAalB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgDtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IA+DrC,OAAO,CAAC,WAAW;CAGpB"}

package/dist/transport/socks-transport-provider.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocksTransportProvider = void 0;
+const socks_proxy_agent_1 = require("socks-proxy-agent");
+const probe_tcp_port_1 = require("./probe-tcp-port");
+const socks_url_1 = require("./socks-url");
+const START_PROBE_TIMEOUT_MS = 2000;
+const HEALTH_PROBE_TIMEOUT_MS = 1000;
+class SocksTransportProvider {
+    _socksProxy;
+    _externalUrl;
+    _logger;
+    _proxyHost;
+    _proxyPort;
+    _managedClient;
+    _resolveExternalUrlOnStart;
+    _managedHealthy = true;
+    constructor(options) {
+        const { socksProxy, externalUrl, logger, managedClient, resolveExternalUrlOnStart } = options;
+        if (!socksProxy || typeof socksProxy !== 'string') {
+            throw new Error('SocksTransportProvider: socksProxy must be a non-empty string starting with "socks5h://" ' +
+                '(socks5h:// is required to prevent DNS leaks -- the proxy, not the local resolver, ' +
+                'must resolve target hostnames)');
+        }
+        let host;
+        let port;
+        try {
+            const parsed = (0, socks_url_1.parseSocks5hUrl)(socksProxy);
+            host = parsed.host;
+            port = parsed.port;
+        }
+        catch (err) {
+            throw new Error(`SocksTransportProvider: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        if (!externalUrl || typeof externalUrl !== 'string') {
+            throw new Error('SocksTransportProvider: externalUrl must be a non-empty string');
+        }
+        this._socksProxy = socksProxy;
+        this._externalUrl = externalUrl;
+        this._proxyHost = host;
+        this._proxyPort = port;
+        this._logger = logger.child({ component: 'socks-transport-provider' });
+        this._managedClient = managedClient;
+        this._resolveExternalUrlOnStart = resolveExternalUrlOnStart;
+    }
+    createAgent(peerUrl) {
+        this._logger.debug({ event: 'socks_create_agent', peerUrl }, 'Creating SOCKS5 agent for peer');
+        return new socks_proxy_agent_1.SocksProxyAgent(this._socksProxy);
+    }
+    getExternalUrl() {
+        return this._externalUrl;
+    }
+    async start() {
+        if (this._managedClient) {
+            await this._managedClient.start();
+        }
+        if (this._resolveExternalUrlOnStart) {
+            try {
+                const resolved = await this._resolveExternalUrlOnStart();
+                if (!resolved || typeof resolved !== 'string') {
+                    throw new Error('resolver returned a non-string value');
+                }
+                if (!resolved.startsWith('ws://') && !resolved.startsWith('wss://')) {
+                    throw new Error('resolved externalUrl must start with ws:// or wss://');
+                }
+                this._externalUrl = resolved;
+            }
+            catch (err) {
+                const reason = err instanceof Error ? err.message : String(err);
+                throw new Error(`SocksTransportProvider: failed to resolve externalUrl from managed hidden service (${reason})`);
+            }
+        }
+        try {
+            await this._probeProxy(START_PROBE_TIMEOUT_MS);
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            throw new Error(`SocksTransportProvider: SOCKS5 proxy unreachable at ${this._proxyHost}:${this._proxyPort} (${reason})`);
+        }
+        this._managedHealthy = true;
+        this._logger.info({ event: 'socks_transport_started', proxyHost: this._proxyHost, proxyPort: this._proxyPort }, 'SOCKS5 transport started');
+    }
+    async stop() {
+        this._logger.info({ event: 'socks_transport_stopped' }, 'SOCKS5 transport stopped');
+        if (this._managedClient) {
+            await this._managedClient.stop();
+        }
+    }
+    async healthCheck() {
+        let managedOk = true;
+        if (this._managedClient) {
+            try {
+                managedOk = await this._managedClient.healthCheck();
+            }
+            catch {
+                managedOk = false;
+            }
+            if (!managedOk && this._managedHealthy) {
+                this._managedHealthy = false;
+                this._logger.warn({
+                    event: 'managed_anon_crash_detected',
+                    proxyHost: this._proxyHost,
+                    proxyPort: this._proxyPort,
+                }, 'Managed anon client reports not running');
+            }
+            else if (managedOk) {
+                this._managedHealthy = true;
+            }
+        }
+        try {
+            await this._probeProxy(HEALTH_PROBE_TIMEOUT_MS);
+            if (!managedOk) {
+                return false;
+            }
+            this._logger.debug({
+                event: 'socks_transport_health_ok',
+                proxyHost: this._proxyHost,
+                proxyPort: this._proxyPort,
+            }, 'SOCKS5 proxy healthy');
+            return true;
+        }
+        catch {
+            this._logger.warn({
+                event: 'socks_transport_health_failed',
+                proxyHost: this._proxyHost,
+                proxyPort: this._proxyPort,
+            }, 'SOCKS5 proxy health check failed');
+            return false;
+        }
+    }
+    _probeProxy(timeoutMs) {
+        return (0, probe_tcp_port_1.probeTcpPort)(this._proxyHost, this._proxyPort, timeoutMs);
+    }
+}
+exports.SocksTransportProvider = SocksTransportProvider;
+//# sourceMappingURL=socks-transport-provider.js.map

package/dist/transport/socks-transport-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socks-transport-provider.js","sourceRoot":"","sources":["../../src/transport/socks-transport-provider.ts"],"names":[],"mappings":";;;AAuBA,yDAAoD;AAEpD,qDAAgD;AAChD,2CAA8C;AA+B9C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AASrC,MAAa,sBAAsB;IAChB,WAAW,CAAS;IAC7B,YAAY,CAAS;IACZ,OAAO,CAAc;IACrB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,cAAc,CAAgC;IAC9C,0BAA0B,CAAsC;IACzE,eAAe,GAAG,IAAI,CAAC;IAO/B,YAAY,OAAsC;QAChD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC;QAI9F,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,2FAA2F;gBACzF,qFAAqF;gBACrF,gCAAgC,CACnC,CAAC;QACJ,CAAC;QAED,IAAI,IAAY,CAAC;QACjB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,0BAA0B,GAAG,yBAAyB,CAAC;IAC9D,CAAC;IAWD,WAAW,CAAC,OAAe;QAEzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/F,OAAO,IAAI,mCAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAGD,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAWD,KAAK,CAAC,KAAK;QAIT,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QAID,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACzD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CACb,sFAAsF,MAAM,GAAG,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,GAAG,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAC5F,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAGpF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAQD,KAAK,CAAC,WAAW;QAKf,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;oBAKE,KAAK,EAAE,6BAA6B;oBACpC,SAAS,EAAE,IAAI,CAAC,UAAU;oBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;iBAC3B,EACD,yCAAyC,CAC1C,CAAC;YACJ,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAChB;gBACE,KAAK,EAAE,2BAA2B;gBAClC,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,EACD,sBAAsB,CACvB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,IAAI,CACf;gBACE,KAAK,EAAE,+BAA+B;gBACtC,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,EACD,kCAAkC,CACnC,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAOO,WAAW,CAAC,SAAiB;QACnC,OAAO,IAAA,6BAAY,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;CACF;AAnND,wDAmNC"}

package/dist/transport/socks-url.d.ts

@@ -0,0 +1,6 @@
+export interface ParsedSocks5Url {
+    host: string;
+    port: number;
+}
+export declare function parseSocks5hUrl(socksProxy: string): ParsedSocks5Url;
+//# sourceMappingURL=socks-url.d.ts.map

package/dist/transport/socks-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socks-url.d.ts","sourceRoot":"","sources":["../../src/transport/socks-url.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,eAAe;IAE9B,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;CACd;AAYD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,CAiCnE"}

package/dist/transport/socks-url.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSocks5hUrl = parseSocks5hUrl;
+function parseSocks5hUrl(socksProxy) {
+    if (!socksProxy || typeof socksProxy !== 'string') {
+        throw new Error('socksProxy must be a non-empty string starting with "socks5h://" ' +
+            '(socks5h:// is required to prevent DNS leaks -- the proxy, not the local resolver, ' +
+            'must resolve target hostnames)');
+    }
+    if (!socksProxy.startsWith('socks5h://')) {
+        throw new Error(`socksProxy scheme must be "socks5h://" (got "${socksProxy.split('://')[0]}://"). ` +
+            'The "h" suffix is required to prevent DNS leaks: with socks5h, hostname resolution ' +
+            'happens at the proxy (Tor exit / ATOR), not on the local host.');
+    }
+    let parsed;
+    try {
+        parsed = new URL(socksProxy.replace(/^socks5h:\/\//, 'http://'));
+    }
+    catch {
+        throw new Error(`socksProxy is not a valid URL (expected socks5h://host:port)`);
+    }
+    const host = parsed.hostname;
+    const port = parsed.port ? Number.parseInt(parsed.port, 10) : NaN;
+    if (!host || !Number.isFinite(port) || port < 0 || port > 65535) {
+        throw new Error('socksProxy must include a valid host and port (e.g., socks5h://127.0.0.1:9050)');
+    }
+    return { host, port };
+}
+//# sourceMappingURL=socks-url.js.map

package/dist/transport/socks-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socks-url.js","sourceRoot":"","sources":["../../src/transport/socks-url.ts"],"names":[],"mappings":";;AA8BA,0CAiCC;AAjCD,SAAgB,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,qFAAqF;YACrF,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,gDAAgD,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,qFAAqF;YACrF,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/transport/transport-provider.d.ts

@@ -0,0 +1,9 @@
+import type http from 'http';
+export interface TransportProvider {
+    createAgent(peerUrl: string): http.Agent | undefined;
+    getExternalUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    healthCheck(): Promise<boolean>;
+}
+//# sourceMappingURL=transport-provider.d.ts.map

package/dist/transport/transport-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-provider.d.ts","sourceRoot":"","sources":["../../src/transport/transport-provider.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAY7B,MAAM,WAAW,iBAAiB;IAYhC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IASrD,cAAc,IAAI,MAAM,CAAC;IASzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IASvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAStB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC"}

package/dist/transport/transport-provider.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=transport-provider.js.map

package/dist/transport/transport-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-provider.js","sourceRoot":"","sources":["../../src/transport/transport-provider.ts"],"names":[],"mappings":""}

package/dist/utils/redact.d.ts

@@ -0,0 +1,3 @@
+export declare function redactPeerUrl(url: string): string;
+export declare function redactAnonInMessage(message: string): string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/utils/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AA+BA,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMjD;AAuBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI3D"}

package/dist/utils/redact.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactPeerUrl = redactPeerUrl;
+exports.redactAnonInMessage = redactAnonInMessage;
+const REDACTION_SENTINEL = '<redacted-anon>';
+function redactPeerUrl(url) {
+    if (!url)
+        return url;
+    if (url.toLowerCase().includes('.anon')) {
+        return REDACTION_SENTINEL;
+    }
+    return url;
+}
+function redactAnonInMessage(message) {
+    if (!message)
+        return message;
+    if (!message.toLowerCase().includes('.anon'))
+        return message;
+    return message.replace(/\S*\.anon\S*/gi, REDACTION_SENTINEL);
+}
+//# sourceMappingURL=redact.js.map

package/dist/utils/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":";;AA+BA,sCAMC;AAuBD,kDAIC;AAjDD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAgB7C,SAAgB,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAuBD,SAAgB,mBAAmB,CAAC,OAAe;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAC/D,CAAC"}