@xtr-dev/rondevu-server 0.5.14 → 0.5.16

package/dist/index.js

@@ -152,7 +152,7 @@ var init_memory = __esm({
         }
         return count;
       }
-      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags) {
+      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags, newExpiresAt) {
         const offer = await this.getOfferById(offerId);
         if (!offer) {
           return { success: false, error: "Offer not found or expired" };
@@ -165,6 +165,9 @@ var init_memory = __esm({
         offer.answerSdp = answerSdp;
         offer.answeredAt = now;
         offer.matchedTags = matchedTags;
+        if (newExpiresAt !== void 0) {
+          offer.expiresAt = newExpiresAt;
+        }
         if (!this.offersByAnswerer.has(answererPublicKey)) {
           this.offersByAnswerer.set(answererPublicKey, /* @__PURE__ */ new Set());
         }
@@ -546,7 +549,7 @@ var init_sqlite = __esm({
         const result = stmt.run(now);
         return result.changes;
       }
-      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags) {
+      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags, newExpiresAt) {
         const offer = await this.getOfferById(offerId);
         if (!offer) {
           return {
@@ -560,13 +563,15 @@ var init_sqlite = __esm({
             error: "Offer already answered"
           };
         }
+        const now = Date.now();
         const stmt = this.db.prepare(`
       UPDATE offers
-      SET answerer_public_key = ?, answer_sdp = ?, answered_at = ?, matched_tags = ?
+      SET answerer_public_key = ?, answer_sdp = ?, answered_at = ?, matched_tags = ?${newExpiresAt ? ", expires_at = ?" : ""}
       WHERE id = ? AND answerer_public_key IS NULL
     `);
         const matchedTagsJson = matchedTags ? JSON.stringify(matchedTags) : null;
-        const result = stmt.run(answererPublicKey, answerSdp, Date.now(), matchedTagsJson, offerId);
+        const params = newExpiresAt ? [answererPublicKey, answerSdp, now, matchedTagsJson, newExpiresAt, offerId] : [answererPublicKey, answerSdp, now, matchedTagsJson, offerId];
+        const result = stmt.run(...params);
         if (result.changes === 0) {
           return {
             success: false,
@@ -971,7 +976,7 @@ var init_mysql = __esm({
         );
         return result.affectedRows;
       }
-      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags) {
+      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags, newExpiresAt) {
         const offer = await this.getOfferById(offerId);
         if (!offer) {
           return { success: false, error: "Offer not found or expired" };
@@ -979,12 +984,11 @@ var init_mysql = __esm({
         if (offer.answererPublicKey) {
           return { success: false, error: "Offer already answered" };
         }
+        const now = Date.now();
         const matchedTagsJson = matchedTags ? JSON.stringify(matchedTags) : null;
-        const [result] = await this.pool.query(
-          `UPDATE offers SET answerer_public_key = ?, answer_sdp = ?, answered_at = ?, matched_tags = ?
-       WHERE id = ? AND answerer_public_key IS NULL`,
-          [answererPublicKey, answerSdp, Date.now(), matchedTagsJson, offerId]
-        );
+        const query = newExpiresAt ? `UPDATE offers SET answerer_public_key = ?, answer_sdp = ?, answered_at = ?, matched_tags = ?, expires_at = ? WHERE id = ? AND answerer_public_key IS NULL` : `UPDATE offers SET answerer_public_key = ?, answer_sdp = ?, answered_at = ?, matched_tags = ? WHERE id = ? AND answerer_public_key IS NULL`;
+        const params = newExpiresAt ? [answererPublicKey, answerSdp, now, matchedTagsJson, newExpiresAt, offerId] : [answererPublicKey, answerSdp, now, matchedTagsJson, offerId];
+        const [result] = await this.pool.query(query, params);
         if (result.affectedRows === 0) {
           return { success: false, error: "Offer already answered (race condition)" };
         }
@@ -1364,7 +1368,7 @@ var init_postgres = __esm({
         );
         return result.rowCount ?? 0;
       }
-      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags) {
+      async answerOffer(offerId, answererPublicKey, answerSdp, matchedTags, newExpiresAt) {
         const offer = await this.getOfferById(offerId);
         if (!offer) {
           return { success: false, error: "Offer not found or expired" };
@@ -1372,12 +1376,11 @@ var init_postgres = __esm({
         if (offer.answererPublicKey) {
           return { success: false, error: "Offer already answered" };
         }
+        const now = Date.now();
         const matchedTagsJson = matchedTags ? JSON.stringify(matchedTags) : null;
-        const result = await this.pool.query(
-          `UPDATE offers SET answerer_public_key = $1, answer_sdp = $2, answered_at = $3, matched_tags = $4
-       WHERE id = $5 AND answerer_public_key IS NULL`,
-          [answererPublicKey, answerSdp, Date.now(), matchedTagsJson, offerId]
-        );
+        const query = newExpiresAt ? `UPDATE offers SET answerer_public_key = $1, answer_sdp = $2, answered_at = $3, matched_tags = $4, expires_at = $5 WHERE id = $6 AND answerer_public_key IS NULL` : `UPDATE offers SET answerer_public_key = $1, answer_sdp = $2, answered_at = $3, matched_tags = $4 WHERE id = $5 AND answerer_public_key IS NULL`;
+        const params = newExpiresAt ? [answererPublicKey, answerSdp, now, matchedTagsJson, newExpiresAt, offerId] : [answererPublicKey, answerSdp, now, matchedTagsJson, offerId];
+        const result = await this.pool.query(query, params);
         if ((result.rowCount ?? 0) === 0) {
           return { success: false, error: "Offer already answered (race condition)" };
         }
@@ -2486,7 +2489,8 @@ var handlers = {
         throw new RpcError(ErrorCodes.INVALID_PARAMS, `matchedTags contains tags not on offer: ${invalidTags.join(", ")}`);
       }
     }
-    await storage.answerOffer(offerId, publicKey, sdp, matchedTags);
+    const newExpiresAt = Date.now() + config.answeredOfferTtl;
+    await storage.answerOffer(offerId, publicKey, sdp, matchedTags, newExpiresAt);
     return { success: true, offerId };
   },
   /**
@@ -2824,7 +2828,7 @@ function createApp(storage, config) {
       return config.corsOrigins[0];
     },
     allowMethods: ["GET", "POST", "OPTIONS"],
-    allowHeaders: ["Content-Type", "Origin", "X-Name", "X-Timestamp", "X-Nonce", "X-Signature"],
+    allowHeaders: ["Content-Type", "Origin", "X-PublicKey", "X-Timestamp", "X-Nonce", "X-Signature"],
     exposeHeaders: ["Content-Type"],
     credentials: false,
     maxAge: 86400
@@ -2833,7 +2837,7 @@ function createApp(storage, config) {
     return c.json({
       version: config.version,
       name: "Rondevu",
-      description: "WebRTC signaling with RPC interface and HMAC signature-based authentication"
+      description: "WebRTC signaling with RPC interface and Ed25519 signature-based authentication"
     }, 200);
   });
   app.get("/health", (c) => {
@@ -2889,7 +2893,7 @@ function createApp(storage, config) {
 }
 
 // src/config.ts
-var BUILD_VERSION = true ? "0.5.13" : "unknown";
+var BUILD_VERSION = true ? "0.5.15" : "unknown";
 function loadConfig() {
   function parsePositiveInt(value, defaultValue, name, min = 1) {
     const parsed = parseInt(value || defaultValue, 10);
@@ -2912,6 +2916,7 @@ function loadConfig() {
     offerDefaultTtl: parsePositiveInt(process.env.OFFER_DEFAULT_TTL, "60000", "OFFER_DEFAULT_TTL", 1e3),
     offerMaxTtl: parsePositiveInt(process.env.OFFER_MAX_TTL, "86400000", "OFFER_MAX_TTL", 1e3),
     offerMinTtl: parsePositiveInt(process.env.OFFER_MIN_TTL, "60000", "OFFER_MIN_TTL", 1e3),
+    answeredOfferTtl: parsePositiveInt(process.env.ANSWERED_OFFER_TTL, "30000", "ANSWERED_OFFER_TTL", 1e3),
     cleanupInterval: parsePositiveInt(process.env.CLEANUP_INTERVAL, "60000", "CLEANUP_INTERVAL", 1e3),
     maxOffersPerRequest: parsePositiveInt(process.env.MAX_OFFERS_PER_REQUEST, "100", "MAX_OFFERS_PER_REQUEST", 1),
     maxBatchSize: parsePositiveInt(process.env.MAX_BATCH_SIZE, "100", "MAX_BATCH_SIZE", 1),
@@ -2938,6 +2943,8 @@ var CONFIG_DEFAULTS = {
   offerDefaultTtl: 6e4,
   offerMaxTtl: 864e5,
   offerMinTtl: 6e4,
+  answeredOfferTtl: 3e4,
+  // 30 seconds TTL after offer is answered
   cleanupInterval: 6e4,
   maxOffersPerRequest: 100,
   maxBatchSize: 100,