appium-ios-remotexpc 0.0.3 → 0.0.5

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [0.0.5](https://github.com/appium/appium-ios-remotexpc/compare/v0.0.4...v0.0.5) (2025-07-04)
+
+### Miscellaneous Chores
+
+* add appletv encryption module for RemoteXPC support ([#50](https://github.com/appium/appium-ios-remotexpc/issues/50)) ([0e5f3c6](https://github.com/appium/appium-ios-remotexpc/commit/0e5f3c6064bb0dc02f05f9349bac942c4c3bc951))
+
+## [0.0.4](https://github.com/appium/appium-ios-remotexpc/compare/v0.0.3...v0.0.4) (2025-07-03)
+
+### Miscellaneous Chores
+
+* Add build release to npm module ([#49](https://github.com/appium/appium-ios-remotexpc/issues/49)) ([77c7720](https://github.com/appium/appium-ios-remotexpc/commit/77c77201d730e8a501813fc39bf1a768de2bf497))
+
 ## [0.0.3](https://github.com/appium/appium-ios-remotexpc/compare/v0.0.2...v0.0.3) (2025-07-03)
 
 ### Miscellaneous Chores

package/build/src/base-plist-service.d.ts

@@ -0,0 +1,51 @@
+import { Socket } from 'node:net';
+import { PlistService, type PlistServiceOptions } from './lib/plist/plist-service.js';
+import type { PlistDictionary } from './lib/types.js';
+/**
+ * Message type for plist communications
+ */
+type PlistMessage = PlistDictionary;
+/**
+ * Base class for services that use PlistService for communication
+ */
+export declare abstract class BasePlistService {
+    /**
+     * Sends a message and waits for a response
+     * @param message The message to send
+     * @param timeout Timeout in milliseconds
+     * @returns Promise resolving to the response
+     */
+    sendAndReceive(message: PlistMessage, timeout?: number): Promise<PlistMessage>;
+    /**
+     * Closes the underlying connection
+     */
+    close(): void;
+    /**
+     * Gets the PlistService instance
+     * @returns The PlistService instance
+     */
+    protected getPlistService(): PlistService;
+    /**
+     * The underlying PlistService instance
+     */
+    protected _plistService: PlistService;
+    /**
+     * Creates a new BasePlistService
+     * @param plistServiceOrSocket PlistService instance or Socket
+     * @param options Configuration options for PlistService
+     */
+    protected constructor(plistServiceOrSocket: PlistService | Socket, options?: PlistServiceOptions);
+    /**
+     * Sends a message without waiting for a response
+     * @param message The message to send
+     */
+    protected send(message: PlistMessage): void;
+    /**
+     * Waits for a message
+     * @param timeout Timeout in milliseconds
+     * @returns Promise resolving to the received message
+     */
+    protected receive(timeout?: number): Promise<PlistMessage>;
+}
+export {};
+//# sourceMappingURL=base-plist-service.d.ts.map

package/build/src/base-plist-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-plist-service.d.ts","sourceRoot":"","sources":["../../src/base-plist-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;GAEG;AACH,KAAK,YAAY,GAAG,eAAe,CAAC;AAEpC;;GAEG;AACH,8BAAsB,gBAAgB;IACpC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC;IAIxB;;OAEG;IACI,KAAK,IAAI,IAAI;IAIpB;;;OAGG;IACH,SAAS,CAAC,eAAe,IAAI,YAAY;IAIzC;;OAEG;IACH,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC;IAEtC;;;;OAIG;IACH,SAAS,aACP,oBAAoB,EAAE,YAAY,GAAG,MAAM,EAC3C,OAAO,GAAE,mBAAwB;IASnC;;;OAGG;IACH,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAI3C;;;;OAIG;cACa,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAGjE"}

package/build/src/base-plist-service.js

@@ -0,0 +1,61 @@
+import { Socket } from 'node:net';
+import { PlistService, } from './lib/plist/plist-service.js';
+/**
+ * Base class for services that use PlistService for communication
+ */
+export class BasePlistService {
+    /**
+     * Sends a message and waits for a response
+     * @param message The message to send
+     * @param timeout Timeout in milliseconds
+     * @returns Promise resolving to the response
+     */
+    async sendAndReceive(message, timeout) {
+        return this._plistService.sendPlistAndReceive(message, timeout);
+    }
+    /**
+     * Closes the underlying connection
+     */
+    close() {
+        this._plistService.close();
+    }
+    /**
+     * Gets the PlistService instance
+     * @returns The PlistService instance
+     */
+    getPlistService() {
+        return this._plistService;
+    }
+    /**
+     * The underlying PlistService instance
+     */
+    _plistService;
+    /**
+     * Creates a new BasePlistService
+     * @param plistServiceOrSocket PlistService instance or Socket
+     * @param options Configuration options for PlistService
+     */
+    constructor(plistServiceOrSocket, options = {}) {
+        if (plistServiceOrSocket instanceof PlistService) {
+            this._plistService = plistServiceOrSocket;
+        }
+        else {
+            this._plistService = new PlistService(plistServiceOrSocket, options);
+        }
+    }
+    /**
+     * Sends a message without waiting for a response
+     * @param message The message to send
+     */
+    send(message) {
+        this._plistService.sendPlist(message);
+    }
+    /**
+     * Waits for a message
+     * @param timeout Timeout in milliseconds
+     * @returns Promise resolving to the received message
+     */
+    async receive(timeout) {
+        return this._plistService.receivePlist(timeout);
+    }
+}

package/build/src/base-socket-service.d.ts

@@ -0,0 +1,15 @@
+import { EventEmitter } from 'node:events';
+import { Socket } from 'node:net';
+import { Readable } from 'node:stream';
+declare class BaseSocketService extends EventEmitter {
+    protected _socketClient: Socket;
+    protected _isConnected: boolean;
+    /**
+     * @param socketClient
+     */
+    constructor(socketClient: Socket);
+    _assignClientFailureHandlers(...sourceStreams: Readable[]): void;
+    close(): void;
+}
+export { BaseSocketService };
+//# sourceMappingURL=base-socket-service.d.ts.map

package/build/src/base-socket-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-socket-service.d.ts","sourceRoot":"","sources":["../../src/base-socket-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,cAAM,iBAAkB,SAAQ,YAAY;IAC1C,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC;IAChC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAS;IAExC;;OAEG;gBACS,YAAY,EAAE,MAAM;IA0BhC,4BAA4B,CAAC,GAAG,aAAa,EAAE,QAAQ,EAAE,GAAG,IAAI;IAUhE,KAAK,IAAI,IAAI;CAKd;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/build/src/base-socket-service.js

@@ -0,0 +1,46 @@
+import { EventEmitter } from 'node:events';
+import { Socket } from 'node:net';
+import { Readable } from 'node:stream';
+class BaseSocketService extends EventEmitter {
+    _socketClient;
+    _isConnected = false;
+    /**
+     * @param socketClient
+     */
+    constructor(socketClient) {
+        super();
+        this._socketClient = socketClient;
+        // Check if already connected
+        this._isConnected = !socketClient.connecting && !socketClient.destroyed;
+        // if not connected and it's a raw socket
+        if (!this._isConnected && socketClient instanceof Socket) {
+            this._socketClient.once('connect', () => {
+                this._isConnected = true;
+                this.emit('connect');
+            });
+        }
+        // setup basic error handling
+        this._socketClient.on('error', (err) => {
+            this.emit('error', err);
+        });
+        this._socketClient.on('close', () => {
+            this._isConnected = false;
+            this.emit('close');
+        });
+    }
+    _assignClientFailureHandlers(...sourceStreams) {
+        for (const evt of ['close', 'end']) {
+            this._socketClient.once(evt, () => {
+                sourceStreams.map((s) => {
+                    s.unpipe(this._socketClient);
+                });
+            });
+        }
+    }
+    close() {
+        if (!this._socketClient.destroyed) {
+            this._socketClient.end();
+        }
+    }
+}
+export { BaseSocketService };

package/build/src/index.d.ts

@@ -0,0 +1,9 @@
+import { createLockdownServiceByUDID } from './lib/lockdown/index.js';
+import { PacketStreamClient, PacketStreamServer, TunnelManager } from './lib/tunnel/index.js';
+import { TunnelRegistryServer, startTunnelRegistryServer } from './lib/tunnel/tunnel-registry-server.js';
+import { Usbmux, createUsbmux } from './lib/usbmux/index.js';
+import * as Services from './services.js';
+import { startCoreDeviceProxy } from './services/ios/tunnel-service/index.js';
+export type { DiagnosticsService, SyslogService, SocketInfo, TunnelResult, TunnelRegistry, TunnelRegistryEntry, } from './lib/types.js';
+export { createUsbmux, Services, Usbmux, TunnelManager, PacketStreamServer, PacketStreamClient, createLockdownServiceByUDID, startCoreDeviceProxy, TunnelRegistryServer, startTunnelRegistryServer, };
+//# sourceMappingURL=index.d.ts.map

package/build/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,YAAY,EACZ,cAAc,EACd,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,CAAC"}

package/build/src/index.js

@@ -0,0 +1,7 @@
+import { createLockdownServiceByUDID } from './lib/lockdown/index.js';
+import { PacketStreamClient, PacketStreamServer, TunnelManager, } from './lib/tunnel/index.js';
+import { TunnelRegistryServer, startTunnelRegistryServer, } from './lib/tunnel/tunnel-registry-server.js';
+import { Usbmux, createUsbmux } from './lib/usbmux/index.js';
+import * as Services from './services.js';
+import { startCoreDeviceProxy } from './services/ios/tunnel-service/index.js';
+export { createUsbmux, Services, Usbmux, TunnelManager, PacketStreamServer, PacketStreamClient, createLockdownServiceByUDID, startCoreDeviceProxy, TunnelRegistryServer, startTunnelRegistryServer, };

package/build/src/lib/apple-tv/constants.d.ts

@@ -0,0 +1,77 @@
+export declare const DEFAULT_PAIRING_CONFIG: {
+    readonly timeout: 30000;
+    readonly discoveryTimeout: 5000;
+    readonly maxRetries: 3;
+    readonly pairingDirectory: ".pairing";
+};
+export declare const PairingDataComponentType: {
+    readonly METHOD: 0;
+    readonly IDENTIFIER: 1;
+    readonly SALT: 2;
+    readonly PUBLIC_KEY: 3;
+    readonly PROOF: 4;
+    readonly ENCRYPTED_DATA: 5;
+    readonly STATE: 6;
+    readonly ERROR: 7;
+    readonly RETRY_DELAY: 8;
+    readonly CERTIFICATE: 9;
+    readonly SIGNATURE: 10;
+    readonly PERMISSIONS: 11;
+    readonly FRAGMENT_DATA: 12;
+    readonly FRAGMENT_LAST: 13;
+    readonly SESSION_ID: 14;
+    readonly TTL: 15;
+    readonly EXTRA_DATA: 16;
+    readonly INFO: 17;
+    readonly ACL: 18;
+    readonly FLAGS: 19;
+    readonly VALIDATION_DATA: 20;
+    readonly MFI_AUTH_TOKEN: 21;
+    readonly MFI_PRODUCT_TYPE: 22;
+    readonly SERIAL_NUMBER: 23;
+    readonly MFI_AUTH_TOKEN_UUID: 24;
+    readonly APP_FLAGS: 25;
+    readonly OWNERSHIP_PROOF: 26;
+    readonly SETUP_CODE_TYPE: 27;
+    readonly PRODUCTION_DATA: 28;
+    readonly APP_INFO: 29;
+    readonly SEPARATOR: 255;
+};
+export declare const TLV8_MAX_FRAGMENT_SIZE = 255;
+export declare const SRP_PRIME_3072: bigint;
+export declare const SRP_GENERATOR: bigint;
+export declare const SRP_HASH_ALGORITHM = "sha512";
+export declare const SRP_USERNAME = "Pair-Setup";
+export declare const SRP_KEY_LENGTH_BYTES = 384;
+export declare const SRP_PRIVATE_KEY_BITS = 256;
+export declare const HKDF_HASH_ALGORITHM = "sha512";
+export declare const HKDF_HASH_LENGTH = 64;
+export declare const OPACK2_NULL = 3;
+export declare const OPACK2_TRUE = 1;
+export declare const OPACK2_FALSE = 2;
+export declare const OPACK2_SMALL_INT_OFFSET = 8;
+export declare const OPACK2_SMALL_INT_MAX = 39;
+export declare const OPACK2_SMALL_STRING_MAX = 32;
+export declare const OPACK2_SMALL_BYTES_MAX = 32;
+export declare const OPACK2_SMALL_ARRAY_MAX = 15;
+export declare const OPACK2_SMALL_DICT_MAX = 15;
+export declare const OPACK2_INT8_MARKER = 48;
+export declare const OPACK2_INT32_MARKER = 50;
+export declare const OPACK2_INT64_MARKER = 51;
+export declare const OPACK2_FLOAT_MARKER = 53;
+export declare const OPACK2_SMALL_STRING_BASE = 64;
+export declare const OPACK2_STRING_8BIT_LEN_MARKER = 97;
+export declare const OPACK2_STRING_16BIT_LEN_MARKER = 98;
+export declare const OPACK2_STRING_32BIT_LEN_MARKER = 99;
+export declare const OPACK2_SMALL_BYTES_BASE = 112;
+export declare const OPACK2_BYTES_8BIT_LEN_MARKER = 145;
+export declare const OPACK2_BYTES_16BIT_LEN_MARKER = 146;
+export declare const OPACK2_BYTES_32BIT_LEN_MARKER = 147;
+export declare const OPACK2_SMALL_ARRAY_BASE = 208;
+export declare const OPACK2_VARIABLE_ARRAY_MARKER = 223;
+export declare const OPACK2_SMALL_DICT_BASE = 224;
+export declare const OPACK2_VARIABLE_DICT_MARKER = 239;
+export declare const OPACK2_UINT8_MAX = 255;
+export declare const OPACK2_UINT16_MAX = 65535;
+export declare const OPACK2_UINT32_MAX = 4294967295;
+//# sourceMappingURL=constants.d.ts.map

package/build/src/lib/apple-tv/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/lib/apple-tv/constants.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,sBAAsB;;;;;CAKzB,CAAC;AAGX,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC3B,CAAC;AAGX,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAG1C,eAAO,MAAM,cAAc,QAc1B,CAAC;AAGF,eAAO,MAAM,aAAa,QAAY,CAAC;AAGvC,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAG3C,eAAO,MAAM,YAAY,eAAe,CAAC;AAGzC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAGxC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAGxC,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAG5C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAGnC,eAAO,MAAM,WAAW,IAAO,CAAC;AAChC,eAAO,MAAM,WAAW,IAAO,CAAC;AAChC,eAAO,MAAM,YAAY,IAAO,CAAC;AACjC,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,oBAAoB,KAAO,CAAC;AACzC,eAAO,MAAM,uBAAuB,KAAO,CAAC;AAC5C,eAAO,MAAM,sBAAsB,KAAO,CAAC;AAC3C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAGxC,eAAO,MAAM,kBAAkB,KAAO,CAAC;AACvC,eAAO,MAAM,mBAAmB,KAAO,CAAC;AACxC,eAAO,MAAM,mBAAmB,KAAO,CAAC;AACxC,eAAO,MAAM,mBAAmB,KAAO,CAAC;AAGxC,eAAO,MAAM,wBAAwB,KAAO,CAAC;AAC7C,eAAO,MAAM,6BAA6B,KAAO,CAAC;AAClD,eAAO,MAAM,8BAA8B,KAAO,CAAC;AACnD,eAAO,MAAM,8BAA8B,KAAO,CAAC;AAGnD,eAAO,MAAM,uBAAuB,MAAO,CAAC;AAC5C,eAAO,MAAM,4BAA4B,MAAO,CAAC;AACjD,eAAO,MAAM,6BAA6B,MAAO,CAAC;AAClD,eAAO,MAAM,6BAA6B,MAAO,CAAC;AAGlD,eAAO,MAAM,uBAAuB,MAAO,CAAC;AAC5C,eAAO,MAAM,4BAA4B,MAAO,CAAC;AAGjD,eAAO,MAAM,sBAAsB,MAAO,CAAC;AAC3C,eAAO,MAAM,2BAA2B,MAAO,CAAC;AAGhD,eAAO,MAAM,gBAAgB,MAAO,CAAC;AACrC,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,eAAO,MAAM,iBAAiB,aAAa,CAAC"}

package/build/src/lib/apple-tv/constants.js

@@ -0,0 +1,106 @@
+// Default configuration values for Apple TV pairing behavior
+export const DEFAULT_PAIRING_CONFIG = {
+    timeout: 30000,
+    discoveryTimeout: 5000,
+    maxRetries: 3,
+    pairingDirectory: '.pairing',
+};
+// TLV8 component type identifiers used in pairing data exchange
+export const PairingDataComponentType = {
+    METHOD: 0x00,
+    IDENTIFIER: 0x01,
+    SALT: 0x02,
+    PUBLIC_KEY: 0x03,
+    PROOF: 0x04,
+    ENCRYPTED_DATA: 0x05,
+    STATE: 0x06,
+    ERROR: 0x07,
+    RETRY_DELAY: 0x08,
+    CERTIFICATE: 0x09,
+    SIGNATURE: 0x0a,
+    PERMISSIONS: 0x0b,
+    FRAGMENT_DATA: 0x0c,
+    FRAGMENT_LAST: 0x0d,
+    SESSION_ID: 0x0e,
+    TTL: 0x0f,
+    EXTRA_DATA: 0x10,
+    INFO: 0x11,
+    ACL: 0x12,
+    FLAGS: 0x13,
+    VALIDATION_DATA: 0x14,
+    MFI_AUTH_TOKEN: 0x15,
+    MFI_PRODUCT_TYPE: 0x16,
+    SERIAL_NUMBER: 0x17,
+    MFI_AUTH_TOKEN_UUID: 0x18,
+    APP_FLAGS: 0x19,
+    OWNERSHIP_PROOF: 0x1a,
+    SETUP_CODE_TYPE: 0x1b,
+    PRODUCTION_DATA: 0x1c,
+    APP_INFO: 0x1d,
+    SEPARATOR: 0xff,
+};
+// Maximum allowed size of a TLV8 fragment
+export const TLV8_MAX_FRAGMENT_SIZE = 255;
+// RFC 5054 3072-bit safe prime used for SRP key exchange
+export const SRP_PRIME_3072 = BigInt('0x' +
+    'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74' +
+    '020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F1437' +
+    '4FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' +
+    'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3DC2007CB8A163BF05' +
+    '98DA48361C55D39A69163FA8FD24CF5F83655D23DCA3AD961C62F356208552BB' +
+    '9ED529077096966D670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B' +
+    'E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718' +
+    '3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D04507A33' +
+    'A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7' +
+    'ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6BF12FFA06D98A0864' +
+    'D87602733EC86A64521F2B18177B200CBBE117577A615D6C770988C0BAD946E2' +
+    '08E24FA074E5AB3143DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF');
+// Generator value (g=5) used in SRP key exchange
+export const SRP_GENERATOR = BigInt(5);
+// Hash algorithm used in SRP protocol (per HomeKit spec)
+export const SRP_HASH_ALGORITHM = 'sha512';
+// SRP username identifier used in Apple Pair-Setup
+export const SRP_USERNAME = 'Pair-Setup';
+// Key length in bytes for SRP (3072 bits = 384 bytes)
+export const SRP_KEY_LENGTH_BYTES = 384;
+// Number of bits for SRP private key (usually 256 bits)
+export const SRP_PRIVATE_KEY_BITS = 256;
+// Hash algorithm used for HKDF in pairing encryption
+export const HKDF_HASH_ALGORITHM = 'sha512';
+// Output length (in bytes) for HKDF key derivation
+export const HKDF_HASH_LENGTH = 64;
+// OPACK2 encoding constants
+export const OPACK2_NULL = 0x03;
+export const OPACK2_TRUE = 0x01;
+export const OPACK2_FALSE = 0x02;
+export const OPACK2_SMALL_INT_OFFSET = 8;
+export const OPACK2_SMALL_INT_MAX = 0x27;
+export const OPACK2_SMALL_STRING_MAX = 0x20;
+export const OPACK2_SMALL_BYTES_MAX = 0x20;
+export const OPACK2_SMALL_ARRAY_MAX = 15;
+export const OPACK2_SMALL_DICT_MAX = 15;
+// OPACK2 number type markers
+export const OPACK2_INT8_MARKER = 0x30;
+export const OPACK2_INT32_MARKER = 0x32;
+export const OPACK2_INT64_MARKER = 0x33;
+export const OPACK2_FLOAT_MARKER = 0x35;
+// OPACK2 string type markers
+export const OPACK2_SMALL_STRING_BASE = 0x40;
+export const OPACK2_STRING_8BIT_LEN_MARKER = 0x61;
+export const OPACK2_STRING_16BIT_LEN_MARKER = 0x62;
+export const OPACK2_STRING_32BIT_LEN_MARKER = 0x63;
+// OPACK2 bytes type markers
+export const OPACK2_SMALL_BYTES_BASE = 0x70;
+export const OPACK2_BYTES_8BIT_LEN_MARKER = 0x91;
+export const OPACK2_BYTES_16BIT_LEN_MARKER = 0x92;
+export const OPACK2_BYTES_32BIT_LEN_MARKER = 0x93;
+// OPACK2 array type markers
+export const OPACK2_SMALL_ARRAY_BASE = 0xd0;
+export const OPACK2_VARIABLE_ARRAY_MARKER = 0xdf;
+// OPACK2 dictionary type markers
+export const OPACK2_SMALL_DICT_BASE = 0xe0;
+export const OPACK2_VARIABLE_DICT_MARKER = 0xef;
+// OPACK2 size limits
+export const OPACK2_UINT8_MAX = 0xff;
+export const OPACK2_UINT16_MAX = 0xffff;
+export const OPACK2_UINT32_MAX = 0xffffffff;

package/build/src/lib/apple-tv/encryption/chacha20-poly1305.d.ts

@@ -0,0 +1,22 @@
+export interface ChaCha20Poly1305Params {
+    plaintext?: Buffer;
+    ciphertext?: Buffer;
+    key: Buffer;
+    nonce: Buffer;
+    aad?: Buffer;
+}
+/**
+ * Encrypts data using ChaCha20-Poly1305 AEAD cipher
+ * @param params - Encryption parameters including plaintext, key, nonce, and optional AAD
+ * @returns Buffer containing encrypted data concatenated with authentication tag
+ * @throws CryptographyError if encryption fails or required parameters are missing
+ */
+export declare function encryptChaCha20Poly1305(params: ChaCha20Poly1305Params): Buffer;
+/**
+ * Decrypts data using ChaCha20-Poly1305 AEAD cipher with multiple fallback strategies
+ * @param params - Decryption parameters including ciphertext, key, nonce, and optional AAD
+ * @returns Buffer containing decrypted plaintext
+ * @throws CryptographyError if all decryption attempts fail or required parameters are missing
+ */
+export declare function decryptChaCha20Poly1305(params: ChaCha20Poly1305Params): Buffer;
+//# sourceMappingURL=chacha20-poly1305.d.ts.map

package/build/src/lib/apple-tv/encryption/chacha20-poly1305.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chacha20-poly1305.d.ts","sourceRoot":"","sources":["../../../../../src/lib/apple-tv/encryption/chacha20-poly1305.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAOD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAiCR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CA2ER"}

package/build/src/lib/apple-tv/encryption/chacha20-poly1305.js

@@ -0,0 +1,97 @@
+import { logger } from '@appium/support';
+import { createCipheriv, createDecipheriv } from 'node:crypto';
+import { CryptographyError } from '../errors.js';
+const log = logger.getLogger('ChaCha20Poly1305');
+/**
+ * Encrypts data using ChaCha20-Poly1305 AEAD cipher
+ * @param params - Encryption parameters including plaintext, key, nonce, and optional AAD
+ * @returns Buffer containing encrypted data concatenated with authentication tag
+ * @throws CryptographyError if encryption fails or required parameters are missing
+ */
+export function encryptChaCha20Poly1305(params) {
+    const { plaintext, key, nonce, aad } = params;
+    if (!plaintext) {
+        throw new CryptographyError('Plaintext is required for encryption');
+    }
+    if (!key || key.length !== 32) {
+        throw new CryptographyError('Key must be 32 bytes');
+    }
+    if (!nonce || nonce.length !== 12) {
+        throw new CryptographyError('Nonce must be 12 bytes');
+    }
+    try {
+        const cipher = createCipheriv('chacha20-poly1305', key, nonce);
+        if (aad) {
+            cipher.setAAD(aad, { plaintextLength: plaintext.length });
+        }
+        const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        const authTag = cipher.getAuthTag();
+        return Buffer.concat([encrypted, authTag]);
+    }
+    catch (error) {
+        log.error('ChaCha20-Poly1305 encryption failed:', error);
+        const message = error instanceof Error ? error.message : String(error);
+        throw new CryptographyError(`ChaCha20-Poly1305 encryption failed: ${message}`);
+    }
+}
+/**
+ * Decrypts data using ChaCha20-Poly1305 AEAD cipher with multiple fallback strategies
+ * @param params - Decryption parameters including ciphertext, key, nonce, and optional AAD
+ * @returns Buffer containing decrypted plaintext
+ * @throws CryptographyError if all decryption attempts fail or required parameters are missing
+ */
+export function decryptChaCha20Poly1305(params) {
+    const { ciphertext, key, nonce, aad } = params;
+    if (!ciphertext) {
+        throw new CryptographyError('Ciphertext is required for decryption');
+    }
+    if (!key || key.length !== 32) {
+        throw new CryptographyError('Key must be 32 bytes');
+    }
+    if (!nonce || nonce.length !== 12) {
+        throw new CryptographyError('Nonce must be 12 bytes');
+    }
+    if (ciphertext.length < 16) {
+        throw new CryptographyError('Ciphertext too short to contain authentication tag');
+    }
+    // ChaCha20-Poly1305 in Node.js only supports 16-byte authentication tags
+    const tagLength = 16;
+    const decryptionAttempts = [
+        { tagLen: tagLength, aad },
+        { tagLen: tagLength, aad: Buffer.alloc(0) },
+        { tagLen: tagLength, aad: undefined },
+    ];
+    let lastError;
+    for (const attempt of decryptionAttempts) {
+        try {
+            const encrypted = ciphertext.subarray(0, ciphertext.length - attempt.tagLen);
+            const authTag = ciphertext.subarray(ciphertext.length - attempt.tagLen);
+            const decipher = createDecipheriv('chacha20-poly1305', key, nonce);
+            decipher.setAuthTag(authTag);
+            if (attempt.aad !== undefined) {
+                decipher.setAAD(attempt.aad, { plaintextLength: encrypted.length });
+            }
+            const decrypted = Buffer.concat([
+                decipher.update(encrypted),
+                decipher.final(),
+            ]);
+            log.debug('Decryption successful with AAD:', attempt.aad ? 'provided' : 'none');
+            return decrypted;
+        }
+        catch (error) {
+            lastError = error instanceof Error ? error : new Error(String(error));
+        }
+    }
+    const errorMessage = lastError
+        ? `ChaCha20-Poly1305 decryption failed: ${lastError.message}`
+        : 'ChaCha20-Poly1305 decryption failed: invalid ciphertext or authentication tag';
+    // Log the error with stack trace for debugging real failures
+    // Skip logging in test environment to avoid cluttering test output with expected failures
+    if (lastError && process.env.NODE_ENV !== 'test') {
+        log.error('All ChaCha20-Poly1305 decryption attempts failed:', {
+            message: lastError.message,
+            stack: lastError.stack,
+        });
+    }
+    throw new CryptographyError(errorMessage);
+}

package/build/src/lib/apple-tv/encryption/ed25519.d.ts

@@ -0,0 +1,16 @@
+import type { PairingKeys } from '../types.js';
+/**
+ * Generates a new Ed25519 key pair for cryptographic operations
+ * @returns PairingKeys object containing 32-byte public and private key buffers
+ * @throws CryptographyError if key generation fails
+ */
+export declare function generateEd25519KeyPair(): PairingKeys;
+/**
+ * Creates an Ed25519 digital signature for the provided data
+ * @param data - The data to sign
+ * @param privateKey - 32-byte Ed25519 private key
+ * @returns Buffer containing the 64-byte signature
+ * @throws CryptographyError if signing fails or private key is invalid
+ */
+export declare function createEd25519Signature(data: Buffer, privateKey: Buffer): Buffer;
+//# sourceMappingURL=ed25519.d.ts.map

package/build/src/lib/apple-tv/encryption/ed25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.d.ts","sourceRoot":"","sources":["../../../../../src/lib/apple-tv/encryption/ed25519.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW/C;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,WAAW,CA4BpD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,MAAM,CA0BR"}

package/build/src/lib/apple-tv/encryption/ed25519.js

@@ -0,0 +1,93 @@
+import { logger } from '@appium/support';
+import { generateKeyPairSync, sign, } from 'node:crypto';
+import { CryptographyError } from '../errors.js';
+const log = logger.getLogger('Ed25519');
+const ED25519_PUBLIC_KEY_LENGTH = 32;
+const ED25519_PRIVATE_KEY_LENGTH = 32;
+const ED25519_PKCS8_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+/**
+ * Generates a new Ed25519 key pair for cryptographic operations
+ * @returns PairingKeys object containing 32-byte public and private key buffers
+ * @throws CryptographyError if key generation fails
+ */
+export function generateEd25519KeyPair() {
+    try {
+        const keyPair = generateKeyPairSync('ed25519');
+        const publicKeyDer = keyPair.publicKey.export({
+            type: 'spki',
+            format: 'der',
+        });
+        const privateKeyDer = keyPair.privateKey.export({
+            type: 'pkcs8',
+            format: 'der',
+        });
+        const publicKeyBuffer = extractEd25519PublicKey(publicKeyDer);
+        const privateKeyBuffer = extractEd25519PrivateKey(privateKeyDer);
+        return {
+            publicKey: publicKeyBuffer,
+            privateKey: privateKeyBuffer,
+        };
+    }
+    catch (error) {
+        log.error('Failed to generate Ed25519 key pair:', error);
+        const message = error instanceof Error ? error.message : String(error);
+        throw new CryptographyError(`Failed to generate Ed25519 key pair: ${message}`);
+    }
+}
+/**
+ * Creates an Ed25519 digital signature for the provided data
+ * @param data - The data to sign
+ * @param privateKey - 32-byte Ed25519 private key
+ * @returns Buffer containing the 64-byte signature
+ * @throws CryptographyError if signing fails or private key is invalid
+ */
+export function createEd25519Signature(data, privateKey) {
+    if (!data || data.length === 0) {
+        throw new CryptographyError('Data to sign cannot be empty');
+    }
+    if (!privateKey || privateKey.length !== ED25519_PRIVATE_KEY_LENGTH) {
+        throw new CryptographyError(`Private key must be ${ED25519_PRIVATE_KEY_LENGTH} bytes`);
+    }
+    try {
+        const privateKeyDer = Buffer.concat([ED25519_PKCS8_PREFIX, privateKey]);
+        return sign(null, data, {
+            key: privateKeyDer,
+            format: 'der',
+            type: 'pkcs8',
+        });
+    }
+    catch (error) {
+        log.error('Failed to create Ed25519 signature:', error);
+        const message = error instanceof Error ? error.message : String(error);
+        throw new CryptographyError(`Failed to create Ed25519 signature: ${message}`);
+    }
+}
+/**
+ * Extracts the raw 32-byte public key from DER-encoded SPKI format
+ * @param publicKeyDer - DER-encoded public key
+ * @returns 32-byte public key buffer
+ * @throws CryptographyError if extraction fails
+ */
+function extractEd25519PublicKey(publicKeyDer) {
+    if (publicKeyDer.length < ED25519_PUBLIC_KEY_LENGTH) {
+        throw new CryptographyError('Invalid public key DER format');
+    }
+    return publicKeyDer.subarray(publicKeyDer.length - ED25519_PUBLIC_KEY_LENGTH);
+}
+/**
+ * Extracts the raw 32-byte private key from DER-encoded PKCS#8 format
+ * @param privateKeyDer - DER-encoded private key
+ * @returns 32-byte private key buffer
+ * @throws CryptographyError if extraction fails
+ */
+function extractEd25519PrivateKey(privateKeyDer) {
+    const octetStringPattern = Buffer.from([0x04, 0x20]);
+    const index = privateKeyDer.indexOf(octetStringPattern);
+    if (index !== -1 && index + 34 <= privateKeyDer.length) {
+        return privateKeyDer.subarray(index + 2, index + 34);
+    }
+    if (privateKeyDer.length >= 48) {
+        return privateKeyDer.subarray(16, 48);
+    }
+    throw new CryptographyError('Unable to extract private key from DER format');
+}