werift 0.24.1 → 0.24.2

package/lib/ice/src/stun/protocol.js

@@ -96,7 +96,15 @@ class StunProtocol {
                 message.messageClass === const_1.classes.ERROR) &&
                 this.transactionsKeys.includes(message.transactionIdHex)) {
                 const transaction = this.transactions[message.transactionIdHex];
-                transaction.responseReceived(message, addr);
+                // Re-parse with integrity key so unauthenticated responses are dropped.
+                const verified = transaction.integrityKey
+                    ? (0, message_1.parseMessage)(data, transaction.integrityKey)
+                    : message;
+                if (!verified) {
+                    log("STUN response failed MESSAGE-INTEGRITY check");
+                    return;
+                }
+                transaction.responseReceived(verified, addr);
             }
             else if (message.messageClass === const_1.classes.REQUEST) {
                 this.onRequestReceived.execute(message, addr, data);
@@ -125,7 +133,7 @@ class StunProtocol {
         }
         await this.transport.send(data, addr);
     }
-    async request(request, addr, integrityKey, retransmissions, onRequestSent) {
+    async request(request, addr, integrityKey, retransmissionsOrOptions, onRequestSent) {
         // """
         // Execute a STUN transaction and return the response.
         // """
@@ -135,7 +143,13 @@ class StunProtocol {
             request.addMessageIntegrity(integrityKey);
             request.addFingerprint();
         }
-        const transaction = new transaction_1.Transaction(request, addr, this, retransmissions, onRequestSent);
+        // Match DNS family to the bound socket so STUN hostname targets resolve correctly.
+        const socketType = this.transport
+            .socketType;
+        const family = socketType === "udp6" ? 6 : 4;
+        const resolvedAddr = await (0, transaction_1.resolveRequestAddress)(addr, family);
+        const options = (0, transaction_1.buildTransactionOptions)(integrityKey, retransmissionsOrOptions, onRequestSent);
+        const transaction = new transaction_1.Transaction(request, resolvedAddr, this, options);
         this.transactions[request.transactionIdHex] = transaction;
         try {
             return await transaction.run();

package/lib/ice/src/stun/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../../ice/src/stun/protocol.ts"],"names":[],"mappings":";;;AAAA,8CAA+D;AAM/D,mCAAkC;AAClC,uCAAuD;AACvD,+CAA4C;AAE5C,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,gDAAgD,CAAC,CAAC;AAEpE,MAAa,YAAY;IAKvB,IAAI,gBAAgB;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAQD;QAbS;;;;mBAAO,YAAY,CAAC,IAAI;WAAC;QAClC;;;;;WAAyB;QACzB;;;;mBAA+C,EAAE;WAAC;QAIlD;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAiB;QAER;;;;mBAAoB,IAAI,cAAK,EAA8B;WAAC;QAC5D;;;;mBAAiB,IAAI,cAAK,EAAY;WAAC;QAIhD;;;;mBAAiB,KAAK,EACpB,OAAgB,EAChB,SAA4B,EAC5B,kBAAuC,EACvC,EAAE;gBACF,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,SAAS,GAAG,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE;wBAC/C,SAAS;wBACT,kBAAkB;qBACnB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,SAAS,GAAG,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE;wBAC/C,SAAS;wBACT,kBAAkB;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;oBACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,CAAC,CAAC;YACJ,CAAC;WAAC;IAtBa,CAAC;IAwBR,gBAAgB,CAAC,IAAY,EAAE,IAAa;QAClD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO;YACT,CAAC;YACD,+CAA+C;YAC/C,IACE,CAAC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACxC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,CAAC;gBACzC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EACxD,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAChE,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,YAAY;QACV,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACvD,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC/C,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,eAAwB,EACxB,aAAyC;QAEzC,MAAM;QACN,sDAAsD;QACtD,MAAM;QACN,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAExC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,WAAW,GAAgB,IAAI,yBAAW,CAC9C,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,eAAe,EACf,aAAa,CACd,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACvD,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;;AAnIH,oCAoIC;AAnIiB;;;;WAAO,MAAM;EAAT,CAAU","sourcesContent":["import { Event, UdpTransport, debug } from \"../imports/common\";\n\nimport type { Address, InterfaceAddresses } from \"../../../common/src/network\";\nimport type { Candidate } from \"../candidate\";\n\nimport type { Protocol } from \"../types/model\";\nimport { classes } from \"./const\";\nimport { type Message, parseMessage } from \"./message\";\nimport { Transaction } from \"./transaction\";\n\nconst log = debug(\"werift-ice : packages/ice/src/stun/protocol.ts\");\n\nexport class StunProtocol implements Protocol {\n  static readonly type = \"stun\";\n  readonly type = StunProtocol.type;\n  transport!: UdpTransport;\n  transactions: { [key: string]: Transaction } = {};\n  get transactionsKeys() {\n    return Object.keys(this.transactions);\n  }\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  localIp?: string;\n\n  readonly onRequestReceived = new Event<[Message, Address, Buffer]>();\n  readonly onDataReceived = new Event<[Buffer]>();\n\n  constructor() {}\n\n  connectionMade = async (\n    useIpv4: boolean,\n    portRange?: [number, number],\n    interfaceAddresses?: InterfaceAddresses,\n  ) => {\n    if (useIpv4) {\n      this.transport = await UdpTransport.init(\"udp4\", {\n        portRange,\n        interfaceAddresses,\n      });\n    } else {\n      this.transport = await UdpTransport.init(\"udp6\", {\n        portRange,\n        interfaceAddresses,\n      });\n    }\n\n    this.transport.onData = (data, addr) => {\n      this.datagramReceived(data, addr);\n    };\n  };\n\n  private datagramReceived(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        if (this.localCandidate) {\n          this.onDataReceived.execute(data);\n        }\n        return;\n      }\n      // log(\"parseMessage\", addr, message.toJSON());\n      if (\n        (message.messageClass === classes.RESPONSE ||\n          message.messageClass === classes.ERROR) &&\n        this.transactionsKeys.includes(message.transactionIdHex)\n      ) {\n        const transaction = this.transactions[message.transactionIdHex];\n        transaction.responseReceived(message, addr);\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"datagramReceived error\", error);\n    }\n  }\n\n  getExtraInfo(): Address {\n    const { address: host, port } = this.transport.address;\n    return [host, port];\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    const data = message.bytes;\n    await this.transport.send(data, addr).catch(() => {\n      log(\"sendStun failed\", addr, message);\n    });\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    await this.transport.send(data, addr);\n  }\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissions?: number,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    // \"\"\"\n    // Execute a STUN transaction and return the response.\n    // \"\"\"\n    if (this.transactionsKeys.includes(request.transactionIdHex))\n      throw new Error(\"already request ed\");\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    const transaction: Transaction = new Transaction(\n      request,\n      addr,\n      this,\n      retransmissions,\n      onRequestSent,\n    );\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async close() {\n    Object.values(this.transactions).forEach((transaction) => {\n      transaction.cancel();\n    });\n    await this.transport.close();\n    this.onRequestReceived.complete();\n    this.onDataReceived.complete();\n  }\n}\n"]}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../../ice/src/stun/protocol.ts"],"names":[],"mappings":";;;AAAA,8CAA+D;AAM/D,mCAAkC;AAClC,uCAAuD;AACvD,+CAIuB;AAEvB,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,gDAAgD,CAAC,CAAC;AAEpE,MAAa,YAAY;IAKvB,IAAI,gBAAgB;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAQD;QAbS;;;;mBAAO,YAAY,CAAC,IAAI;WAAC;QAClC;;;;;WAAyB;QACzB;;;;mBAA+C,EAAE;WAAC;QAIlD;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAiB;QAER;;;;mBAAoB,IAAI,cAAK,EAA8B;WAAC;QAC5D;;;;mBAAiB,IAAI,cAAK,EAAY;WAAC;QAIhD;;;;mBAAiB,KAAK,EACpB,OAAgB,EAChB,SAA4B,EAC5B,kBAAuC,EACvC,EAAE;gBACF,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,SAAS,GAAG,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE;wBAC/C,SAAS;wBACT,kBAAkB;qBACnB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,SAAS,GAAG,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE;wBAC/C,SAAS;wBACT,kBAAkB;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;oBACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,CAAC,CAAC;YACJ,CAAC;WAAC;IAtBa,CAAC;IAwBR,gBAAgB,CAAC,IAAY,EAAE,IAAa;QAClD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO;YACT,CAAC;YACD,+CAA+C;YAC/C,IACE,CAAC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACxC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,CAAC;gBACzC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EACxD,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAChE,wEAAwE;gBACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY;oBACvC,CAAC,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;oBAC9C,CAAC,CAAC,OAAO,CAAC;gBACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,8CAA8C,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,YAAY;QACV,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACvD,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC/C,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,wBAA6D,EAC7D,aAAyC;QAEzC,MAAM;QACN,sDAAsD;QACtD,MAAM;QACN,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAExC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,mFAAmF;QACnF,MAAM,UAAU,GAAI,IAAI,CAAC,SAAgD;aACtE,UAAU,CAAC;QACd,MAAM,MAAM,GAAU,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAqB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAA,qCAAuB,EACrC,YAAY,EACZ,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,WAAW,GAAgB,IAAI,yBAAW,CAC9C,OAAO,EACP,YAAY,EACZ,IAAI,EACJ,OAAO,CACR,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACvD,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;;AArJH,oCAsJC;AArJiB;;;;WAAO,MAAM;EAAT,CAAU","sourcesContent":["import { Event, UdpTransport, debug } from \"../imports/common\";\n\nimport type { Address, InterfaceAddresses } from \"../../../common/src/network\";\nimport type { Candidate } from \"../candidate\";\n\nimport type { Protocol, TransactionRequestOptions } from \"../types/model\";\nimport { classes } from \"./const\";\nimport { type Message, parseMessage } from \"./message\";\nimport {\n  Transaction,\n  buildTransactionOptions,\n  resolveRequestAddress,\n} from \"./transaction\";\n\nconst log = debug(\"werift-ice : packages/ice/src/stun/protocol.ts\");\n\nexport class StunProtocol implements Protocol {\n  static readonly type = \"stun\";\n  readonly type = StunProtocol.type;\n  transport!: UdpTransport;\n  transactions: { [key: string]: Transaction } = {};\n  get transactionsKeys() {\n    return Object.keys(this.transactions);\n  }\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  localIp?: string;\n\n  readonly onRequestReceived = new Event<[Message, Address, Buffer]>();\n  readonly onDataReceived = new Event<[Buffer]>();\n\n  constructor() {}\n\n  connectionMade = async (\n    useIpv4: boolean,\n    portRange?: [number, number],\n    interfaceAddresses?: InterfaceAddresses,\n  ) => {\n    if (useIpv4) {\n      this.transport = await UdpTransport.init(\"udp4\", {\n        portRange,\n        interfaceAddresses,\n      });\n    } else {\n      this.transport = await UdpTransport.init(\"udp6\", {\n        portRange,\n        interfaceAddresses,\n      });\n    }\n\n    this.transport.onData = (data, addr) => {\n      this.datagramReceived(data, addr);\n    };\n  };\n\n  private datagramReceived(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        if (this.localCandidate) {\n          this.onDataReceived.execute(data);\n        }\n        return;\n      }\n      // log(\"parseMessage\", addr, message.toJSON());\n      if (\n        (message.messageClass === classes.RESPONSE ||\n          message.messageClass === classes.ERROR) &&\n        this.transactionsKeys.includes(message.transactionIdHex)\n      ) {\n        const transaction = this.transactions[message.transactionIdHex];\n        // Re-parse with integrity key so unauthenticated responses are dropped.\n        const verified = transaction.integrityKey\n          ? parseMessage(data, transaction.integrityKey)\n          : message;\n        if (!verified) {\n          log(\"STUN response failed MESSAGE-INTEGRITY check\");\n          return;\n        }\n        transaction.responseReceived(verified, addr);\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"datagramReceived error\", error);\n    }\n  }\n\n  getExtraInfo(): Address {\n    const { address: host, port } = this.transport.address;\n    return [host, port];\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    const data = message.bytes;\n    await this.transport.send(data, addr).catch(() => {\n      log(\"sendStun failed\", addr, message);\n    });\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    await this.transport.send(data, addr);\n  }\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    // \"\"\"\n    // Execute a STUN transaction and return the response.\n    // \"\"\"\n    if (this.transactionsKeys.includes(request.transactionIdHex))\n      throw new Error(\"already request ed\");\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    // Match DNS family to the bound socket so STUN hostname targets resolve correctly.\n    const socketType = (this.transport as unknown as { socketType?: string })\n      .socketType;\n    const family: 4 | 6 = socketType === \"udp6\" ? 6 : 4;\n    const resolvedAddr = await resolveRequestAddress(addr, family);\n\n    const options = buildTransactionOptions(\n      integrityKey,\n      retransmissionsOrOptions,\n      onRequestSent,\n    );\n    const transaction: Transaction = new Transaction(\n      request,\n      resolvedAddr,\n      this,\n      options,\n    );\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async close() {\n    Object.values(this.transactions).forEach((transaction) => {\n      transaction.cancel();\n    });\n    await this.transport.close();\n    this.onRequestReceived.complete();\n    this.onDataReceived.complete();\n  }\n}\n"]}

package/lib/ice/src/stun/tcpProtocol.d.ts

@@ -1,7 +1,7 @@
 import { type AddressInfo, type Socket } from "node:net";
 import type { Candidate } from "../candidate";
 import { type Address, Event } from "../imports/common";
-import type { Protocol } from "../types/model";
+import type { Protocol, TransactionRequestOptions } from "../types/model";
 import { type Message } from "./message";
 import { Transaction } from "./transaction";
 type SocketEntry = {
@@ -30,7 +30,7 @@ declare abstract class BaseTcpProtocol implements Protocol {
     private sendFrame;
     sendStun(message: Message, addr: Address): Promise<void>;
     sendData(data: Buffer, addr: Address): Promise<void>;
-    request(request: Message, addr: Address, integrityKey?: Buffer, retransmissions?: number, onRequestSent?: (attempt: number) => void): Promise<[Message, readonly [string, number]]>;
+    request(request: Message, addr: Address, integrityKey?: Buffer, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void): Promise<[Message, readonly [string, number]]>;
     pruneForSelection(remoteAddr?: Address): Promise<void>;
     get activeSocketCount(): number;
     get address(): AddressInfo;

package/lib/ice/src/stun/tcpProtocol.js

@@ -146,7 +146,15 @@ class BaseTcpProtocol {
             if ((message.messageClass === const_1.classes.RESPONSE ||
                 message.messageClass === const_1.classes.ERROR) &&
                 this.transactions[message.transactionIdHex]) {
-                this.transactions[message.transactionIdHex].responseReceived(message, addr);
+                const transaction = this.transactions[message.transactionIdHex];
+                const verified = transaction.integrityKey
+                    ? (0, message_1.parseMessage)(data, transaction.integrityKey)
+                    : message;
+                if (!verified) {
+                    log("STUN response failed MESSAGE-INTEGRITY check");
+                    return;
+                }
+                transaction.responseReceived(verified, addr);
             }
             else if (message.messageClass === const_1.classes.REQUEST) {
                 this.onRequestReceived.execute(message, addr, data);
@@ -174,7 +182,7 @@ class BaseTcpProtocol {
     async sendData(data, addr) {
         await this.sendFrame(data, addr);
     }
-    async request(request, addr, integrityKey, retransmissions, onRequestSent) {
+    async request(request, addr, integrityKey, retransmissionsOrOptions, onRequestSent) {
         if (this.transactions[request.transactionIdHex]) {
             throw new Error("already requested");
         }
@@ -182,7 +190,9 @@ class BaseTcpProtocol {
             request.addMessageIntegrity(integrityKey);
             request.addFingerprint();
         }
-        const transaction = new transaction_1.Transaction(request, addr, this, retransmissions, onRequestSent);
+        const resolvedAddr = await (0, transaction_1.resolveRequestAddress)(addr);
+        const options = (0, transaction_1.buildTransactionOptions)(integrityKey, retransmissionsOrOptions, onRequestSent);
+        const transaction = new transaction_1.Transaction(request, resolvedAddr, this, options);
         this.transactions[request.transactionIdHex] = transaction;
         try {
             return await transaction.run();

package/lib/ice/src/stun/tcpProtocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"tcpProtocol.js","sourceRoot":"","sources":["../../../../../ice/src/stun/tcpProtocol.ts"],"names":[],"mappings":";;;AAAA,uCAAgF;AAGhF,8CAA+D;AAE/D,mCAAkC;AAClC,uCAAuD;AACvD,yCAA4D;AAC5D,+CAA4C;AAE5C,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,iDAAiD,CAAC,CAAC;AAQrE,SAAS,SAAS,CAAC,IAAa;IAC9B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAY,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAuC,EACvC,IAAY,EACZ,IAAa;IAEb,OAAO,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,IAAI,EAAE,IAAI,IAAI,CAAC;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAe,eAAe;IAA9B;QAEW;;;;mBAAO,eAAe,CAAC,IAAI;WAAC;QACrC;;;;mBAA+C,EAAE;WAAC;QAClD;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAiB;QAER;;;;mBAAoB,IAAI,cAAK,EAA8B;WAAC;QAC5D;;;;mBAAiB,IAAI,cAAK,EAAY;WAAC;QAE7B;;;;mBAAU,IAAI,GAAG,EAAuB;WAAC;IAwK9D,CAAC;IAnKW,cAAc,CAAC,KAAkB;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAES,YAAY,CAAC,UAAoB;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,CAAC;IAES,cAAc,CAAC,MAAc,EAAE,UAAoB;QAC3D,MAAM,KAAK,GAAgB;YACzB,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,UAAU;SACX,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAc,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAEpB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC;gBACpC,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC9B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,IAAa;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,IACE,CAAC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACxC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,CAAC;gBACzC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC3C,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,CAC1D,OAAO,EACP,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAa;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,eAAwB,EACxB,aAAyC;QAEzC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,yBAAW,CACjC,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,eAAe,EACf,aAAa,CACd,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAoB;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,UAAU,IAAI,GAAG,KAAK,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACvD,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;;AAjLe;;;;WAAO,KAAK;EAAR,CAAS;AAoL/B,MAAa,iBAAkB,SAAQ,eAAe;IAAtD;;QACmB;;;;mBAAiB,IAAI,GAAG,EAAgC;WAAC;IA+C5E,CAAC;IA7CC,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAES,KAAK,CAAC,SAAS,CAAC,IAAa;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,MAAM,GAAG,IAAA,kBAAO,EAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACb,YAAY,EAAE,IAAI,CAAC,OAAO;aAC3B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,OAAO,MAAM,UAAU,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AAhDD,8CAgDC;AAED,MAAa,kBAAmB,SAAQ,eAAe;IAAvD;;QACU;;;;mBAAS,IAAA,uBAAY,EAAC,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC;WAAC;IA2CL,CAAC;IAzCC,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,SAA4B;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAA4B,CAAC;YACjC,KAAK,IAAI,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC3D,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,GAAG,KAAc,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAES,KAAK,CAAC,SAAS,CAAC,IAAa;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,aAAa;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;IAEQ,KAAK,CAAC,KAAK;QAClB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA9CD,gDA8CC","sourcesContent":["import { type AddressInfo, type Socket, connect, createServer } from \"node:net\";\n\nimport type { Candidate } from \"../candidate\";\nimport { type Address, Event, debug } from \"../imports/common\";\nimport type { Protocol } from \"../types/model\";\nimport { classes } from \"./const\";\nimport { type Message, parseMessage } from \"./message\";\nimport { encodeTcpFrame, splitTcpFrames } from \"./tcpFrame\";\nimport { Transaction } from \"./transaction\";\n\nconst log = debug(\"werift-ice:packages/ice/src/stun/tcpProtocol.ts\");\n\ntype SocketEntry = {\n  socket: Socket;\n  buffer: Buffer;\n  remoteAddr?: Address;\n};\n\nfunction socketKey(addr: Address) {\n  return `${addr[0]}:${addr[1]}`;\n}\n\nfunction addressFromSocket(socket: Socket) {\n  if (!socket.remoteAddress || !socket.remotePort) {\n    return;\n  }\n  return [socket.remoteAddress, socket.remotePort] as Address;\n}\n\nasync function waitForListening(\n  server: ReturnType<typeof createServer>,\n  host: string,\n  port?: number,\n) {\n  return await new Promise<void>((resolve, reject) => {\n    const onError = (error: Error) => {\n      server.off(\"listening\", onListening);\n      reject(error);\n    };\n    const onListening = () => {\n      server.off(\"error\", onError);\n      resolve();\n    };\n\n    server.once(\"error\", onError);\n    server.once(\"listening\", onListening);\n    server.listen({\n      host,\n      port: port ?? 0,\n      exclusive: true,\n    });\n  });\n}\n\nabstract class BaseTcpProtocol implements Protocol {\n  static readonly type = \"tcp\";\n  readonly type = BaseTcpProtocol.type;\n  transactions: { [key: string]: Transaction } = {};\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  localIp?: string;\n\n  readonly onRequestReceived = new Event<[Message, Address, Buffer]>();\n  readonly onDataReceived = new Event<[Buffer]>();\n\n  protected readonly sockets = new Map<string, SocketEntry>();\n\n  abstract connectionMade(...args: any[]): Promise<void>;\n  protected abstract getSocket(addr: Address): Promise<SocketEntry>;\n\n  protected rememberSocket(entry: SocketEntry) {\n    const remoteAddr = entry.remoteAddr;\n    if (!remoteAddr) {\n      return;\n    }\n\n    this.sockets.set(socketKey(remoteAddr), entry);\n  }\n\n  protected forgetSocket(remoteAddr?: Address) {\n    if (!remoteAddr) {\n      return;\n    }\n    this.sockets.delete(socketKey(remoteAddr));\n  }\n\n  protected registerSocket(socket: Socket, remoteAddr?: Address) {\n    const entry: SocketEntry = {\n      socket,\n      buffer: Buffer.alloc(0),\n      remoteAddr,\n    };\n\n    if (remoteAddr) {\n      this.rememberSocket(entry);\n    }\n\n    socket.on(\"data\", (data) => {\n      entry.buffer = Buffer.concat([entry.buffer, data]);\n      const { frames, rest } = splitTcpFrames(entry.buffer);\n      entry.buffer = rest;\n\n      const socketAddr = entry.remoteAddr ?? addressFromSocket(socket);\n      if (!entry.remoteAddr && socketAddr) {\n        entry.remoteAddr = socketAddr;\n        this.rememberSocket(entry);\n      }\n      if (!socketAddr) {\n        return;\n      }\n\n      for (const frame of frames) {\n        if (frame.length === 0) {\n          continue;\n        }\n        this.handleFrame(frame, socketAddr);\n      }\n    });\n    socket.on(\"close\", () => {\n      this.forgetSocket(entry.remoteAddr);\n    });\n    socket.on(\"error\", (error) => {\n      log(\"tcp socket error\", error);\n    });\n\n    return entry;\n  }\n\n  private handleFrame(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        this.onDataReceived.execute(data);\n        return;\n      }\n\n      if (\n        (message.messageClass === classes.RESPONSE ||\n          message.messageClass === classes.ERROR) &&\n        this.transactions[message.transactionIdHex]\n      ) {\n        this.transactions[message.transactionIdHex].responseReceived(\n          message,\n          addr,\n        );\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"tcp frame parse error\", error);\n    }\n  }\n\n  private async sendFrame(data: Buffer, addr: Address) {\n    const entry = await this.getSocket(addr);\n    await new Promise<void>((resolve, reject) => {\n      entry.socket.write(encodeTcpFrame(data), (error) => {\n        if (error) {\n          reject(error);\n          return;\n        }\n        resolve();\n      });\n    });\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    await this.sendFrame(message.bytes, addr);\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    await this.sendFrame(data, addr);\n  }\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissions?: number,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    if (this.transactions[request.transactionIdHex]) {\n      throw new Error(\"already requested\");\n    }\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    const transaction = new Transaction(\n      request,\n      addr,\n      this,\n      retransmissions,\n      onRequestSent,\n    );\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async pruneForSelection(remoteAddr?: Address) {\n    for (const [key, entry] of this.sockets.entries()) {\n      if (remoteAddr && key === socketKey(remoteAddr)) {\n        continue;\n      }\n      entry.socket.destroy();\n      this.sockets.delete(key);\n    }\n  }\n\n  get activeSocketCount() {\n    return this.sockets.size;\n  }\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  async close() {\n    Object.values(this.transactions).forEach((transaction) => {\n      transaction.cancel();\n    });\n\n    await this.pruneForSelection();\n    this.onRequestReceived.complete();\n    this.onDataReceived.complete();\n  }\n}\n\nexport class TcpActiveProtocol extends BaseTcpProtocol {\n  private readonly pendingSockets = new Map<string, Promise<SocketEntry>>();\n\n  async connectionMade(localIp: string) {\n    this.localIp = localIp;\n  }\n\n  protected async getSocket(addr: Address) {\n    const key = socketKey(addr);\n    const existing = this.sockets.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    const pending = this.pendingSockets.get(key);\n    if (pending) {\n      return await pending;\n    }\n\n    const connecting = new Promise<SocketEntry>((resolve, reject) => {\n      const socket = connect({\n        host: addr[0],\n        port: addr[1],\n        localAddress: this.localIp,\n      });\n      const entry = this.registerSocket(socket, addr);\n\n      const onError = (error: Error) => {\n        socket.off(\"connect\", onConnect);\n        reject(error);\n      };\n      const onConnect = () => {\n        socket.off(\"error\", onError);\n        resolve(entry);\n      };\n\n      socket.once(\"error\", onError);\n      socket.once(\"connect\", onConnect);\n    });\n\n    this.pendingSockets.set(key, connecting);\n\n    try {\n      return await connecting;\n    } finally {\n      this.pendingSockets.delete(key);\n    }\n  }\n}\n\nexport class TcpPassiveProtocol extends BaseTcpProtocol {\n  private server = createServer((socket) => {\n    this.registerSocket(socket, addressFromSocket(socket));\n  });\n\n  async connectionMade(localIp: string, portRange?: [number, number]) {\n    this.localIp = localIp;\n\n    if (portRange) {\n      let lastError: Error | undefined;\n      for (let port = portRange[0]; port <= portRange[1]; port++) {\n        try {\n          await waitForListening(this.server, localIp, port);\n          return;\n        } catch (error) {\n          lastError = error as Error;\n        }\n      }\n      throw lastError ?? new Error(\"tcp port not found\");\n    }\n\n    await waitForListening(this.server, localIp);\n  }\n\n  protected async getSocket(addr: Address) {\n    const entry = this.sockets.get(socketKey(addr));\n    if (!entry) {\n      throw new Error(\"tcp passive connection not established\");\n    }\n    return entry;\n  }\n\n  get listeningPort() {\n    const address = this.server.address();\n    if (!address || typeof address === \"string\") {\n      throw new Error(\"tcp passive protocol is not listening\");\n    }\n    return address.port;\n  }\n\n  override async close() {\n    await super.close();\n    await new Promise<void>((resolve) => {\n      this.server.close(() => resolve());\n    });\n  }\n}\n"]}
+{"version":3,"file":"tcpProtocol.js","sourceRoot":"","sources":["../../../../../ice/src/stun/tcpProtocol.ts"],"names":[],"mappings":";;;AAAA,uCAAgF;AAGhF,8CAA+D;AAE/D,mCAAkC;AAClC,uCAAuD;AACvD,yCAA4D;AAC5D,+CAIuB;AAEvB,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,iDAAiD,CAAC,CAAC;AAQrE,SAAS,SAAS,CAAC,IAAa;IAC9B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAY,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAuC,EACvC,IAAY,EACZ,IAAa;IAEb,OAAO,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,IAAI,EAAE,IAAI,IAAI,CAAC;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAe,eAAe;IAA9B;QAEW;;;;mBAAO,eAAe,CAAC,IAAI;WAAC;QACrC;;;;mBAA+C,EAAE;WAAC;QAClD;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAiB;QAER;;;;mBAAoB,IAAI,cAAK,EAA8B;WAAC;QAC5D;;;;mBAAiB,IAAI,cAAK,EAAY;WAAC;QAE7B;;;;mBAAU,IAAI,GAAG,EAAuB;WAAC;IA6K9D,CAAC;IAxKW,cAAc,CAAC,KAAkB;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAES,YAAY,CAAC,UAAoB;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,CAAC;IAES,cAAc,CAAC,MAAc,EAAE,UAAoB;QAC3D,MAAM,KAAK,GAAgB;YACzB,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,UAAU;SACX,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAc,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAEpB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC;gBACpC,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC9B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,IAAa;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,IACE,CAAC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACxC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,CAAC;gBACzC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC3C,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY;oBACvC,CAAC,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;oBAC9C,CAAC,CAAC,OAAO,CAAC;gBACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,8CAA8C,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAa;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,wBAA6D,EAC7D,aAAyC;QAEzC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAqB,EAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAA,qCAAuB,EACrC,YAAY,EACZ,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAoB;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,UAAU,IAAI,GAAG,KAAK,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACvD,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;;AAtLe;;;;WAAO,KAAK;EAAR,CAAS;AAyL/B,MAAa,iBAAkB,SAAQ,eAAe;IAAtD;;QACmB;;;;mBAAiB,IAAI,GAAG,EAAgC;WAAC;IA+C5E,CAAC;IA7CC,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAES,KAAK,CAAC,SAAS,CAAC,IAAa;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,MAAM,GAAG,IAAA,kBAAO,EAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACb,YAAY,EAAE,IAAI,CAAC,OAAO;aAC3B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,OAAO,MAAM,UAAU,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AAhDD,8CAgDC;AAED,MAAa,kBAAmB,SAAQ,eAAe;IAAvD;;QACU;;;;mBAAS,IAAA,uBAAY,EAAC,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC;WAAC;IA2CL,CAAC;IAzCC,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,SAA4B;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAA4B,CAAC;YACjC,KAAK,IAAI,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC3D,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,GAAG,KAAc,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAES,KAAK,CAAC,SAAS,CAAC,IAAa;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,aAAa;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;IAEQ,KAAK,CAAC,KAAK;QAClB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA9CD,gDA8CC","sourcesContent":["import { type AddressInfo, type Socket, connect, createServer } from \"node:net\";\n\nimport type { Candidate } from \"../candidate\";\nimport { type Address, Event, debug } from \"../imports/common\";\nimport type { Protocol, TransactionRequestOptions } from \"../types/model\";\nimport { classes } from \"./const\";\nimport { type Message, parseMessage } from \"./message\";\nimport { encodeTcpFrame, splitTcpFrames } from \"./tcpFrame\";\nimport {\n  Transaction,\n  buildTransactionOptions,\n  resolveRequestAddress,\n} from \"./transaction\";\n\nconst log = debug(\"werift-ice:packages/ice/src/stun/tcpProtocol.ts\");\n\ntype SocketEntry = {\n  socket: Socket;\n  buffer: Buffer;\n  remoteAddr?: Address;\n};\n\nfunction socketKey(addr: Address) {\n  return `${addr[0]}:${addr[1]}`;\n}\n\nfunction addressFromSocket(socket: Socket) {\n  if (!socket.remoteAddress || !socket.remotePort) {\n    return;\n  }\n  return [socket.remoteAddress, socket.remotePort] as Address;\n}\n\nasync function waitForListening(\n  server: ReturnType<typeof createServer>,\n  host: string,\n  port?: number,\n) {\n  return await new Promise<void>((resolve, reject) => {\n    const onError = (error: Error) => {\n      server.off(\"listening\", onListening);\n      reject(error);\n    };\n    const onListening = () => {\n      server.off(\"error\", onError);\n      resolve();\n    };\n\n    server.once(\"error\", onError);\n    server.once(\"listening\", onListening);\n    server.listen({\n      host,\n      port: port ?? 0,\n      exclusive: true,\n    });\n  });\n}\n\nabstract class BaseTcpProtocol implements Protocol {\n  static readonly type = \"tcp\";\n  readonly type = BaseTcpProtocol.type;\n  transactions: { [key: string]: Transaction } = {};\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  localIp?: string;\n\n  readonly onRequestReceived = new Event<[Message, Address, Buffer]>();\n  readonly onDataReceived = new Event<[Buffer]>();\n\n  protected readonly sockets = new Map<string, SocketEntry>();\n\n  abstract connectionMade(...args: any[]): Promise<void>;\n  protected abstract getSocket(addr: Address): Promise<SocketEntry>;\n\n  protected rememberSocket(entry: SocketEntry) {\n    const remoteAddr = entry.remoteAddr;\n    if (!remoteAddr) {\n      return;\n    }\n\n    this.sockets.set(socketKey(remoteAddr), entry);\n  }\n\n  protected forgetSocket(remoteAddr?: Address) {\n    if (!remoteAddr) {\n      return;\n    }\n    this.sockets.delete(socketKey(remoteAddr));\n  }\n\n  protected registerSocket(socket: Socket, remoteAddr?: Address) {\n    const entry: SocketEntry = {\n      socket,\n      buffer: Buffer.alloc(0),\n      remoteAddr,\n    };\n\n    if (remoteAddr) {\n      this.rememberSocket(entry);\n    }\n\n    socket.on(\"data\", (data) => {\n      entry.buffer = Buffer.concat([entry.buffer, data]);\n      const { frames, rest } = splitTcpFrames(entry.buffer);\n      entry.buffer = rest;\n\n      const socketAddr = entry.remoteAddr ?? addressFromSocket(socket);\n      if (!entry.remoteAddr && socketAddr) {\n        entry.remoteAddr = socketAddr;\n        this.rememberSocket(entry);\n      }\n      if (!socketAddr) {\n        return;\n      }\n\n      for (const frame of frames) {\n        if (frame.length === 0) {\n          continue;\n        }\n        this.handleFrame(frame, socketAddr);\n      }\n    });\n    socket.on(\"close\", () => {\n      this.forgetSocket(entry.remoteAddr);\n    });\n    socket.on(\"error\", (error) => {\n      log(\"tcp socket error\", error);\n    });\n\n    return entry;\n  }\n\n  private handleFrame(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        this.onDataReceived.execute(data);\n        return;\n      }\n\n      if (\n        (message.messageClass === classes.RESPONSE ||\n          message.messageClass === classes.ERROR) &&\n        this.transactions[message.transactionIdHex]\n      ) {\n        const transaction = this.transactions[message.transactionIdHex];\n        const verified = transaction.integrityKey\n          ? parseMessage(data, transaction.integrityKey)\n          : message;\n        if (!verified) {\n          log(\"STUN response failed MESSAGE-INTEGRITY check\");\n          return;\n        }\n        transaction.responseReceived(verified, addr);\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"tcp frame parse error\", error);\n    }\n  }\n\n  private async sendFrame(data: Buffer, addr: Address) {\n    const entry = await this.getSocket(addr);\n    await new Promise<void>((resolve, reject) => {\n      entry.socket.write(encodeTcpFrame(data), (error) => {\n        if (error) {\n          reject(error);\n          return;\n        }\n        resolve();\n      });\n    });\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    await this.sendFrame(message.bytes, addr);\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    await this.sendFrame(data, addr);\n  }\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    if (this.transactions[request.transactionIdHex]) {\n      throw new Error(\"already requested\");\n    }\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    const resolvedAddr = await resolveRequestAddress(addr);\n    const options = buildTransactionOptions(\n      integrityKey,\n      retransmissionsOrOptions,\n      onRequestSent,\n    );\n    const transaction = new Transaction(request, resolvedAddr, this, options);\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async pruneForSelection(remoteAddr?: Address) {\n    for (const [key, entry] of this.sockets.entries()) {\n      if (remoteAddr && key === socketKey(remoteAddr)) {\n        continue;\n      }\n      entry.socket.destroy();\n      this.sockets.delete(key);\n    }\n  }\n\n  get activeSocketCount() {\n    return this.sockets.size;\n  }\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  async close() {\n    Object.values(this.transactions).forEach((transaction) => {\n      transaction.cancel();\n    });\n\n    await this.pruneForSelection();\n    this.onRequestReceived.complete();\n    this.onDataReceived.complete();\n  }\n}\n\nexport class TcpActiveProtocol extends BaseTcpProtocol {\n  private readonly pendingSockets = new Map<string, Promise<SocketEntry>>();\n\n  async connectionMade(localIp: string) {\n    this.localIp = localIp;\n  }\n\n  protected async getSocket(addr: Address) {\n    const key = socketKey(addr);\n    const existing = this.sockets.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    const pending = this.pendingSockets.get(key);\n    if (pending) {\n      return await pending;\n    }\n\n    const connecting = new Promise<SocketEntry>((resolve, reject) => {\n      const socket = connect({\n        host: addr[0],\n        port: addr[1],\n        localAddress: this.localIp,\n      });\n      const entry = this.registerSocket(socket, addr);\n\n      const onError = (error: Error) => {\n        socket.off(\"connect\", onConnect);\n        reject(error);\n      };\n      const onConnect = () => {\n        socket.off(\"error\", onError);\n        resolve(entry);\n      };\n\n      socket.once(\"error\", onError);\n      socket.once(\"connect\", onConnect);\n    });\n\n    this.pendingSockets.set(key, connecting);\n\n    try {\n      return await connecting;\n    } finally {\n      this.pendingSockets.delete(key);\n    }\n  }\n}\n\nexport class TcpPassiveProtocol extends BaseTcpProtocol {\n  private server = createServer((socket) => {\n    this.registerSocket(socket, addressFromSocket(socket));\n  });\n\n  async connectionMade(localIp: string, portRange?: [number, number]) {\n    this.localIp = localIp;\n\n    if (portRange) {\n      let lastError: Error | undefined;\n      for (let port = portRange[0]; port <= portRange[1]; port++) {\n        try {\n          await waitForListening(this.server, localIp, port);\n          return;\n        } catch (error) {\n          lastError = error as Error;\n        }\n      }\n      throw lastError ?? new Error(\"tcp port not found\");\n    }\n\n    await waitForListening(this.server, localIp);\n  }\n\n  protected async getSocket(addr: Address) {\n    const entry = this.sockets.get(socketKey(addr));\n    if (!entry) {\n      throw new Error(\"tcp passive connection not established\");\n    }\n    return entry;\n  }\n\n  get listeningPort() {\n    const address = this.server.address();\n    if (!address || typeof address === \"string\") {\n      throw new Error(\"tcp passive protocol is not listening\");\n    }\n    return address.port;\n  }\n\n  override async close() {\n    await super.close();\n    await new Promise<void>((resolve) => {\n      this.server.close(() => resolve());\n    });\n  }\n}\n"]}

package/lib/ice/src/stun/transaction.d.ts

@@ -1,20 +1,57 @@
 import { type Address } from "../imports/common";
-import type { Protocol } from "../types/model";
+import type { Protocol, TransactionRequestOptions } from "../types/model";
 import type { Message } from "./message";
+/**
+ * Resolve a request target to a concrete IP before creating a Transaction so
+ * response source-address checks match the UDP peer address (hostname ≠ IP).
+ */
+export declare function resolveRequestAddress(addr: Address, family?: 0 | 4 | 6): Promise<Address>;
+/**
+ * Normalize legacy positional args and the options-object form into one shape.
+ * Existing callers pass `(retransmissions?, onRequestSent?)`.
+ */
+export declare function normalizeTransactionOptions(retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void): TransactionRequestOptions;
+/** Compare ICE transport addresses (host, port). */
+export declare function addressEquals(a: Address, b: Address): boolean;
 export declare class Transaction {
     private request;
     private addr;
     private protocol;
-    private retransmissions?;
-    private onRequestSent?;
     private timeoutDelay;
     ended: boolean;
     private tries;
     private readonly triesMax;
     private readonly onResponse;
-    constructor(request: Message, addr: Address, protocol: Protocol, retransmissions?: number | undefined, onRequestSent?: ((attempt: number) => void) | undefined);
+    private readonly onRequestSent?;
+    private readonly signal?;
+    /** Remote address this transaction was sent to; responses must match. */
+    readonly expectedAddr: Address;
+    /**
+     * When set, protocol layers re-parse the wire response with this key so
+     * MESSAGE-INTEGRITY failures are rejected before responseReceived.
+     */
+    readonly integrityKey?: Buffer;
+    private waitTimer?;
+    private waitResolve?;
+    private onAbort?;
+    constructor(request: Message, addr: Address, protocol: Protocol, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void);
+    /**
+     * Accept a matching authenticated non-error response from the expected
+     * remote address. Wrong address, missing MESSAGE-INTEGRITY (when required),
+     * or non-success class is rejected without completing the transaction
+     * (wrong address / unauthenticated responses are ignored so we keep waiting).
+     */
     responseReceived: (message: Message, addr: Address) => void;
     run: () => Promise<[Message, readonly [string, number]]>;
+    private attachAbortListener;
+    private failWithTimeout;
+    private clearWait;
+    private wait;
     private retry;
     cancel(): void;
 }
+/**
+ * Build Transaction options for Protocol.request, folding integrityKey into
+ * options so response path can re-verify MESSAGE-INTEGRITY.
+ */
+export declare function buildTransactionOptions(integrityKey: Buffer | undefined, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void): TransactionRequestOptions;

package/lib/ice/src/stun/transaction.js

@@ -1,12 +1,51 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Transaction = void 0;
+exports.resolveRequestAddress = resolveRequestAddress;
+exports.normalizeTransactionOptions = normalizeTransactionOptions;
+exports.addressEquals = addressEquals;
+exports.buildTransactionOptions = buildTransactionOptions;
+const node_dns_1 = require("node:dns");
+const node_net_1 = require("node:net");
 const common_1 = require("../imports/common");
 const exceptions_1 = require("../exceptions");
 const const_1 = require("./const");
 const log = (0, common_1.debug)("werift-ice:packages/ice/src/stun/transaction.ts");
+/**
+ * Resolve a request target to a concrete IP before creating a Transaction so
+ * response source-address checks match the UDP peer address (hostname ≠ IP).
+ */
+async function resolveRequestAddress(addr, family = 0) {
+    if ((0, node_net_1.isIP)(addr[0])) {
+        return addr;
+    }
+    const looked = await node_dns_1.promises.lookup(addr[0], { family });
+    return [looked.address, addr[1]];
+}
+/**
+ * Normalize legacy positional args and the options-object form into one shape.
+ * Existing callers pass `(retransmissions?, onRequestSent?)`.
+ */
+function normalizeTransactionOptions(retransmissionsOrOptions, onRequestSent) {
+    if (retransmissionsOrOptions !== null &&
+        typeof retransmissionsOrOptions === "object") {
+        return retransmissionsOrOptions;
+    }
+    // After the object branch, only number | undefined remains (legacy positional API).
+    const retransmissions = typeof retransmissionsOrOptions === "number"
+        ? retransmissionsOrOptions
+        : undefined;
+    return {
+        retransmissions,
+        onRequestSent,
+    };
+}
+/** Compare ICE transport addresses (host, port). */
+function addressEquals(a, b) {
+    return a[0] === b[0] && a[1] === b[1];
+}
 class Transaction {
-    constructor(request, addr, protocol, retransmissions, onRequestSent) {
+    constructor(request, addr, protocol, retransmissionsOrOptions, onRequestSent) {
         Object.defineProperty(this, "request", {
             enumerable: true,
             configurable: true,
@@ -25,62 +64,122 @@ class Transaction {
             writable: true,
             value: protocol
         });
-        Object.defineProperty(this, "retransmissions", {
+        Object.defineProperty(this, "timeoutDelay", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "ended", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: false
+        });
+        Object.defineProperty(this, "tries", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+        Object.defineProperty(this, "triesMax", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "onResponse", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: retransmissions
+            value: new common_1.Event()
         });
         Object.defineProperty(this, "onRequestSent", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: onRequestSent
+            value: void 0
+        });
+        Object.defineProperty(this, "signal", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
         });
-        Object.defineProperty(this, "timeoutDelay", {
+        /** Remote address this transaction was sent to; responses must match. */
+        Object.defineProperty(this, "expectedAddr", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: const_1.RETRY_RTO
+            value: void 0
         });
-        Object.defineProperty(this, "ended", {
+        /**
+         * When set, protocol layers re-parse the wire response with this key so
+         * MESSAGE-INTEGRITY failures are rejected before responseReceived.
+         */
+        Object.defineProperty(this, "integrityKey", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: false
+            value: void 0
         });
-        Object.defineProperty(this, "tries", {
+        Object.defineProperty(this, "waitTimer", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: 0
+            value: void 0
         });
-        Object.defineProperty(this, "triesMax", {
+        Object.defineProperty(this, "waitResolve", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: void 0
         });
-        Object.defineProperty(this, "onResponse", {
+        Object.defineProperty(this, "onAbort", {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: new common_1.Event()
+            value: void 0
         });
+        /**
+         * Accept a matching authenticated non-error response from the expected
+         * remote address. Wrong address, missing MESSAGE-INTEGRITY (when required),
+         * or non-success class is rejected without completing the transaction
+         * (wrong address / unauthenticated responses are ignored so we keep waiting).
+         */
         Object.defineProperty(this, "responseReceived", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: (message, addr) => {
-                if (this.onResponse.length > 0) {
-                    if (message.messageClass === const_1.classes.RESPONSE) {
-                        this.onResponse.execute(message, addr);
-                        this.onResponse.complete();
-                    }
-                    else {
-                        this.onResponse.error(new exceptions_1.TransactionFailed(message, addr));
+                if (this.ended || this.onResponse.length === 0) {
+                    return;
+                }
+                // RFC 7675 / ICE: only responses from the request's transport address.
+                if (!addressEquals(this.expectedAddr, addr)) {
+                    log("ignore STUN response from unexpected address", addr, "expected", this.expectedAddr);
+                    return;
+                }
+                // RFC 7675 authenticated consent: integrityKey requires MESSAGE-INTEGRITY.
+                // Wire HMAC is verified by protocol layers via parseMessage(data, key);
+                // this presence check is defense-in-depth if responseReceived is called
+                // with a constructed Message that skipped the wire re-parse path.
+                if (this.integrityKey) {
+                    const hasIntegrity = message.attributesKeys.includes("MESSAGE-INTEGRITY") ||
+                        message.attributesKeys.includes("MESSAGE-INTEGRITY-SHA256");
+                    if (!hasIntegrity) {
+                        log("ignore unauthenticated STUN response (MESSAGE-INTEGRITY required)");
+                        return;
                     }
                 }
+                if (message.messageClass === const_1.classes.RESPONSE) {
+                    this.onResponse.execute(message, addr);
+                    this.onResponse.complete();
+                }
+                else {
+                    // ERROR class or other non-success
+                    this.onResponse.error(new exceptions_1.TransactionFailed(message, addr));
+                }
             }
         });
         Object.defineProperty(this, "run", {
@@ -89,6 +188,10 @@ class Transaction {
             writable: true,
             value: async () => {
                 try {
+                    if (this.signal?.aborted) {
+                        throw new exceptions_1.TransactionTimeout();
+                    }
+                    this.attachAbortListener();
                     this.retry().catch((e) => {
                         log("retry failed", e);
                     });
@@ -113,24 +216,90 @@ class Transaction {
                     this.protocol.sendStun(this.request, this.addr).catch((e) => {
                         log("send stun failed", e);
                     });
-                    await new Promise((r) => setTimeout(r, this.timeoutDelay));
+                    await this.wait(this.timeoutDelay);
                     if (this.ended) {
                         break;
                     }
                     this.timeoutDelay *= 2;
                     this.tries++;
                 }
-                if (this.tries >= this.triesMax) {
+                if (this.tries >= this.triesMax && !this.ended) {
                     log(`retry failed times:${this.tries} maxLimit:${this.triesMax}`);
-                    this.onResponse.error(new exceptions_1.TransactionTimeout());
+                    this.failWithTimeout();
                 }
             }
         });
-        this.triesMax = 1 + (this.retransmissions ?? const_1.RETRY_MAX);
+        const options = normalizeTransactionOptions(retransmissionsOrOptions, onRequestSent);
+        // triesMax = initial send + retransmissions
+        this.triesMax = 1 + (options.retransmissions ?? const_1.RETRY_MAX);
+        // responseTimeout is independent of retransmission count (RFC 7675 / 8445)
+        this.timeoutDelay = options.responseTimeout ?? const_1.RETRY_RTO;
+        this.onRequestSent = options.onRequestSent;
+        this.signal = options.signal;
+        this.expectedAddr = addr;
+        this.integrityKey = options.integrityKey;
+    }
+    attachAbortListener() {
+        if (!this.signal) {
+            return;
+        }
+        this.onAbort = () => {
+            this.failWithTimeout();
+        };
+        this.signal.addEventListener("abort", this.onAbort, { once: true });
+    }
+    failWithTimeout() {
+        if (this.ended) {
+            return;
+        }
+        this.ended = true;
+        this.clearWait();
+        if (this.onResponse.length > 0) {
+            this.onResponse.error(new exceptions_1.TransactionTimeout());
+        }
+    }
+    clearWait() {
+        if (this.waitTimer !== undefined) {
+            clearTimeout(this.waitTimer);
+            this.waitTimer = undefined;
+        }
+        const resolve = this.waitResolve;
+        this.waitResolve = undefined;
+        resolve?.();
+    }
+    wait(ms) {
+        return new Promise((resolve) => {
+            if (this.ended || this.signal?.aborted) {
+                resolve();
+                return;
+            }
+            this.waitResolve = resolve;
+            this.waitTimer = setTimeout(() => {
+                this.waitTimer = undefined;
+                this.waitResolve = undefined;
+                resolve();
+            }, ms);
+        });
     }
     cancel() {
         this.ended = true;
+        this.clearWait();
+        if (this.signal && this.onAbort) {
+            this.signal.removeEventListener("abort", this.onAbort);
+            this.onAbort = undefined;
+        }
     }
 }
 exports.Transaction = Transaction;
+/**
+ * Build Transaction options for Protocol.request, folding integrityKey into
+ * options so response path can re-verify MESSAGE-INTEGRITY.
+ */
+function buildTransactionOptions(integrityKey, retransmissionsOrOptions, onRequestSent) {
+    const options = normalizeTransactionOptions(retransmissionsOrOptions, onRequestSent);
+    if (integrityKey && !options.integrityKey) {
+        options.integrityKey = integrityKey;
+    }
+    return options;
+}
 //# sourceMappingURL=transaction.js.map

package/lib/ice/src/stun/transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../../../../ice/src/stun/transaction.ts"],"names":[],"mappings":";;;AAAA,8CAA+D;AAE/D,8CAAsE;AAEtE,mCAAwD;AAGxD,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,iDAAiD,CAAC,CAAC;AAErE,MAAa,WAAW;IAOtB,YACU,OAAgB,EAChB,IAAa,EACb,QAAkB,EAClB,eAAwB,EACxB,aAAyC;QAJjD;;;;mBAAQ,OAAO;WAAS;QACxB;;;;mBAAQ,IAAI;WAAS;QACrB;;;;mBAAQ,QAAQ;WAAU;QAC1B;;;;mBAAQ,eAAe;WAAS;QAChC;;;;mBAAQ,aAAa;WAA4B;QAX3C;;;;mBAAe,iBAAS;WAAC;QACjC;;;;mBAAQ,KAAK;WAAC;QACN;;;;mBAAQ,CAAC;WAAC;QACD;;;;;WAAiB;QACjB;;;;mBAAa,IAAI,cAAK,EAAsB;WAAC;QAY9D;;;;mBAAmB,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;gBACrD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ,EAAE,CAAC;wBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;wBACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAC7B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,8BAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;WAAC;QAEF;;;;mBAAM,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACvB,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBACzB,CAAC,CAAC,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;oBAC9C,OAAO,GAAG,CAAC;gBACb,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAAQ,KAAK,IAAI,EAAE;gBACzB,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACjD,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC1D,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBACH,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;oBAC3D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;oBACvB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAChC,GAAG,CAAC,sBAAsB,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAClE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,+BAAkB,EAAE,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;WAAC;QA7CA,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,iBAAS,CAAC,CAAC;IAC1D,CAAC;IA8CD,MAAM;QACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;CACF;AAhED,kCAgEC","sourcesContent":["import { type Address, Event, debug } from \"../imports/common\";\n\nimport { TransactionFailed, TransactionTimeout } from \"../exceptions\";\nimport type { Protocol } from \"../types/model\";\nimport { RETRY_MAX, RETRY_RTO, classes } from \"./const\";\nimport type { Message } from \"./message\";\n\nconst log = debug(\"werift-ice:packages/ice/src/stun/transaction.ts\");\n\nexport class Transaction {\n  private timeoutDelay = RETRY_RTO;\n  ended = false;\n  private tries = 0;\n  private readonly triesMax: number;\n  private readonly onResponse = new Event<[Message, Address]>();\n\n  constructor(\n    private request: Message,\n    private addr: Address,\n    private protocol: Protocol,\n    private retransmissions?: number,\n    private onRequestSent?: (attempt: number) => void,\n  ) {\n    this.triesMax = 1 + (this.retransmissions ?? RETRY_MAX);\n  }\n\n  responseReceived = (message: Message, addr: Address) => {\n    if (this.onResponse.length > 0) {\n      if (message.messageClass === classes.RESPONSE) {\n        this.onResponse.execute(message, addr);\n        this.onResponse.complete();\n      } else {\n        this.onResponse.error(new TransactionFailed(message, addr));\n      }\n    }\n  };\n\n  run = async () => {\n    try {\n      this.retry().catch((e) => {\n        log(\"retry failed\", e);\n      });\n      const res = await this.onResponse.asPromise();\n      return res;\n    } catch (error) {\n      throw error;\n    } finally {\n      this.cancel();\n    }\n  };\n\n  private retry = async () => {\n    while (this.tries < this.triesMax && !this.ended) {\n      this.onRequestSent?.(this.tries);\n      this.protocol.sendStun(this.request, this.addr).catch((e) => {\n        log(\"send stun failed\", e);\n      });\n      await new Promise((r) => setTimeout(r, this.timeoutDelay));\n      if (this.ended) {\n        break;\n      }\n      this.timeoutDelay *= 2;\n      this.tries++;\n    }\n    if (this.tries >= this.triesMax) {\n      log(`retry failed times:${this.tries} maxLimit:${this.triesMax}`);\n      this.onResponse.error(new TransactionTimeout());\n    }\n  };\n\n  cancel() {\n    this.ended = true;\n  }\n}\n"]}
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../../../../ice/src/stun/transaction.ts"],"names":[],"mappings":";;;AAgBA,sDASC;AAMD,kEAmBC;AAGD,sCAEC;AA0LD,0DAaC;AA9PD,uCAA2C;AAC3C,uCAAgC;AAEhC,8CAA+D;AAE/D,8CAAsE;AAEtE,mCAAwD;AAGxD,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,iDAAiD,CAAC,CAAC;AAErE;;;GAGG;AACI,KAAK,UAAU,qBAAqB,CACzC,IAAa,EACb,SAAoB,CAAC;IAErB,IAAI,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,mBAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,wBAA6D,EAC7D,aAAyC;IAEzC,IACE,wBAAwB,KAAK,IAAI;QACjC,OAAO,wBAAwB,KAAK,QAAQ,EAC5C,CAAC;QACD,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,oFAAoF;IACpF,MAAM,eAAe,GACnB,OAAO,wBAAwB,KAAK,QAAQ;QAC1C,CAAC,CAAC,wBAAwB;QAC1B,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,eAAe;QACf,aAAa;KACd,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAgB,aAAa,CAAC,CAAU,EAAE,CAAU;IAClD,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAa,WAAW;IAmBtB,YACU,OAAgB,EAChB,IAAa,EACb,QAAkB,EAC1B,wBAA6D,EAC7D,aAAyC;QAJzC;;;;mBAAQ,OAAO;WAAS;QACxB;;;;mBAAQ,IAAI;WAAS;QACrB;;;;mBAAQ,QAAQ;WAAU;QArBpB;;;;;WAAqB;QAC7B;;;;mBAAQ,KAAK;WAAC;QACN;;;;mBAAQ,CAAC;WAAC;QACD;;;;;WAAiB;QACjB;;;;mBAAa,IAAI,cAAK,EAAsB;WAAC;QAC7C;;;;;WAA0C;QAC1C;;;;;WAAqB;QACtC,yEAAyE;QAChE;;;;;WAAsB;QAC/B;;;WAGG;QACM;;;;;WAAsB;QACvB;;;;;WAA0C;QAC1C;;;;;WAAyB;QACzB;;;;;WAAqB;QAuB7B;;;;;WAKG;QACH;;;;mBAAmB,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;gBACrD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC/C,OAAO;gBACT,CAAC;gBAED,uEAAuE;gBACvE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC5C,GAAG,CACD,8CAA8C,EAC9C,IAAI,EACJ,UAAU,EACV,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,2EAA2E;gBAC3E,wEAAwE;gBACxE,wEAAwE;gBACxE,kEAAkE;gBAClE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,YAAY,GAChB,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,mBAAmB,CAAC;wBACpD,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;oBAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,GAAG,CACD,mEAAmE,CACpE,CAAC;wBACF,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ,EAAE,CAAC;oBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,mCAAmC;oBACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,8BAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;WAAC;QAEF;;;;mBAAM,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBACzB,MAAM,IAAI,+BAAkB,EAAE,CAAC;oBACjC,CAAC;oBACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACvB,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBACzB,CAAC,CAAC,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;oBAC9C,OAAO,GAAG,CAAC;gBACb,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;WAAC;QAgDM;;;;mBAAQ,KAAK,IAAI,EAAE;gBACzB,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACjD,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC1D,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACnC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;oBACvB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/C,GAAG,CAAC,sBAAsB,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAClE,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,CAAC;YACH,CAAC;WAAC;QA9IA,MAAM,OAAO,GAAG,2BAA2B,CACzC,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,4CAA4C;QAC5C,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,iBAAS,CAAC,CAAC;QAC3D,2EAA2E;QAC3E,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAS,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAmEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,+BAAkB,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;IAqBD,MAAM;QACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAlLD,kCAkLC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,YAAgC,EAChC,wBAA6D,EAC7D,aAAyC;IAEzC,MAAM,OAAO,GAAG,2BAA2B,CACzC,wBAAwB,EACxB,aAAa,CACd,CAAC;IACF,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1C,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { promises as dns } from \"node:dns\";\nimport { isIP } from \"node:net\";\n\nimport { type Address, Event, debug } from \"../imports/common\";\n\nimport { TransactionFailed, TransactionTimeout } from \"../exceptions\";\nimport type { Protocol, TransactionRequestOptions } from \"../types/model\";\nimport { RETRY_MAX, RETRY_RTO, classes } from \"./const\";\nimport type { Message } from \"./message\";\n\nconst log = debug(\"werift-ice:packages/ice/src/stun/transaction.ts\");\n\n/**\n * Resolve a request target to a concrete IP before creating a Transaction so\n * response source-address checks match the UDP peer address (hostname ≠ IP).\n */\nexport async function resolveRequestAddress(\n  addr: Address,\n  family: 0 | 4 | 6 = 0,\n): Promise<Address> {\n  if (isIP(addr[0])) {\n    return addr;\n  }\n  const looked = await dns.lookup(addr[0], { family });\n  return [looked.address, addr[1]];\n}\n\n/**\n * Normalize legacy positional args and the options-object form into one shape.\n * Existing callers pass `(retransmissions?, onRequestSent?)`.\n */\nexport function normalizeTransactionOptions(\n  retransmissionsOrOptions?: number | TransactionRequestOptions,\n  onRequestSent?: (attempt: number) => void,\n): TransactionRequestOptions {\n  if (\n    retransmissionsOrOptions !== null &&\n    typeof retransmissionsOrOptions === \"object\"\n  ) {\n    return retransmissionsOrOptions;\n  }\n  // After the object branch, only number | undefined remains (legacy positional API).\n  const retransmissions =\n    typeof retransmissionsOrOptions === \"number\"\n      ? retransmissionsOrOptions\n      : undefined;\n  return {\n    retransmissions,\n    onRequestSent,\n  };\n}\n\n/** Compare ICE transport addresses (host, port). */\nexport function addressEquals(a: Address, b: Address): boolean {\n  return a[0] === b[0] && a[1] === b[1];\n}\n\nexport class Transaction {\n  private timeoutDelay: number;\n  ended = false;\n  private tries = 0;\n  private readonly triesMax: number;\n  private readonly onResponse = new Event<[Message, Address]>();\n  private readonly onRequestSent?: (attempt: number) => void;\n  private readonly signal?: AbortSignal;\n  /** Remote address this transaction was sent to; responses must match. */\n  readonly expectedAddr: Address;\n  /**\n   * When set, protocol layers re-parse the wire response with this key so\n   * MESSAGE-INTEGRITY failures are rejected before responseReceived.\n   */\n  readonly integrityKey?: Buffer;\n  private waitTimer?: ReturnType<typeof setTimeout>;\n  private waitResolve?: () => void;\n  private onAbort?: () => void;\n\n  constructor(\n    private request: Message,\n    private addr: Address,\n    private protocol: Protocol,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    const options = normalizeTransactionOptions(\n      retransmissionsOrOptions,\n      onRequestSent,\n    );\n    // triesMax = initial send + retransmissions\n    this.triesMax = 1 + (options.retransmissions ?? RETRY_MAX);\n    // responseTimeout is independent of retransmission count (RFC 7675 / 8445)\n    this.timeoutDelay = options.responseTimeout ?? RETRY_RTO;\n    this.onRequestSent = options.onRequestSent;\n    this.signal = options.signal;\n    this.expectedAddr = addr;\n    this.integrityKey = options.integrityKey;\n  }\n\n  /**\n   * Accept a matching authenticated non-error response from the expected\n   * remote address. Wrong address, missing MESSAGE-INTEGRITY (when required),\n   * or non-success class is rejected without completing the transaction\n   * (wrong address / unauthenticated responses are ignored so we keep waiting).\n   */\n  responseReceived = (message: Message, addr: Address) => {\n    if (this.ended || this.onResponse.length === 0) {\n      return;\n    }\n\n    // RFC 7675 / ICE: only responses from the request's transport address.\n    if (!addressEquals(this.expectedAddr, addr)) {\n      log(\n        \"ignore STUN response from unexpected address\",\n        addr,\n        \"expected\",\n        this.expectedAddr,\n      );\n      return;\n    }\n\n    // RFC 7675 authenticated consent: integrityKey requires MESSAGE-INTEGRITY.\n    // Wire HMAC is verified by protocol layers via parseMessage(data, key);\n    // this presence check is defense-in-depth if responseReceived is called\n    // with a constructed Message that skipped the wire re-parse path.\n    if (this.integrityKey) {\n      const hasIntegrity =\n        message.attributesKeys.includes(\"MESSAGE-INTEGRITY\") ||\n        message.attributesKeys.includes(\"MESSAGE-INTEGRITY-SHA256\");\n      if (!hasIntegrity) {\n        log(\n          \"ignore unauthenticated STUN response (MESSAGE-INTEGRITY required)\",\n        );\n        return;\n      }\n    }\n\n    if (message.messageClass === classes.RESPONSE) {\n      this.onResponse.execute(message, addr);\n      this.onResponse.complete();\n    } else {\n      // ERROR class or other non-success\n      this.onResponse.error(new TransactionFailed(message, addr));\n    }\n  };\n\n  run = async () => {\n    try {\n      if (this.signal?.aborted) {\n        throw new TransactionTimeout();\n      }\n      this.attachAbortListener();\n      this.retry().catch((e) => {\n        log(\"retry failed\", e);\n      });\n      const res = await this.onResponse.asPromise();\n      return res;\n    } catch (error) {\n      throw error;\n    } finally {\n      this.cancel();\n    }\n  };\n\n  private attachAbortListener() {\n    if (!this.signal) {\n      return;\n    }\n    this.onAbort = () => {\n      this.failWithTimeout();\n    };\n    this.signal.addEventListener(\"abort\", this.onAbort, { once: true });\n  }\n\n  private failWithTimeout() {\n    if (this.ended) {\n      return;\n    }\n    this.ended = true;\n    this.clearWait();\n    if (this.onResponse.length > 0) {\n      this.onResponse.error(new TransactionTimeout());\n    }\n  }\n\n  private clearWait() {\n    if (this.waitTimer !== undefined) {\n      clearTimeout(this.waitTimer);\n      this.waitTimer = undefined;\n    }\n    const resolve = this.waitResolve;\n    this.waitResolve = undefined;\n    resolve?.();\n  }\n\n  private wait(ms: number): Promise<void> {\n    return new Promise((resolve) => {\n      if (this.ended || this.signal?.aborted) {\n        resolve();\n        return;\n      }\n      this.waitResolve = resolve;\n      this.waitTimer = setTimeout(() => {\n        this.waitTimer = undefined;\n        this.waitResolve = undefined;\n        resolve();\n      }, ms);\n    });\n  }\n\n  private retry = async () => {\n    while (this.tries < this.triesMax && !this.ended) {\n      this.onRequestSent?.(this.tries);\n      this.protocol.sendStun(this.request, this.addr).catch((e) => {\n        log(\"send stun failed\", e);\n      });\n      await this.wait(this.timeoutDelay);\n      if (this.ended) {\n        break;\n      }\n      this.timeoutDelay *= 2;\n      this.tries++;\n    }\n    if (this.tries >= this.triesMax && !this.ended) {\n      log(`retry failed times:${this.tries} maxLimit:${this.triesMax}`);\n      this.failWithTimeout();\n    }\n  };\n\n  cancel() {\n    this.ended = true;\n    this.clearWait();\n    if (this.signal && this.onAbort) {\n      this.signal.removeEventListener(\"abort\", this.onAbort);\n      this.onAbort = undefined;\n    }\n  }\n}\n\n/**\n * Build Transaction options for Protocol.request, folding integrityKey into\n * options so response path can re-verify MESSAGE-INTEGRITY.\n */\nexport function buildTransactionOptions(\n  integrityKey: Buffer | undefined,\n  retransmissionsOrOptions?: number | TransactionRequestOptions,\n  onRequestSent?: (attempt: number) => void,\n): TransactionRequestOptions {\n  const options = normalizeTransactionOptions(\n    retransmissionsOrOptions,\n    onRequestSent,\n  );\n  if (integrityKey && !options.integrityKey) {\n    options.integrityKey = integrityKey;\n  }\n  return options;\n}\n"]}