werift 0.24.3 → 0.25.0-alpha.0

package/lib/common/src/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../common/src/transport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAKe;AAEf,8CAAgC;AAChC,8CAAgC;AAEhC,uCAA+E;AAC/E,+BAA8B;AAC9B,uCAMmB;AAEnB,MAAM,GAAG,GAAG,IAAA,WAAK,EAAC,0CAA0C,CAAC,CAAC;AAW9D,MAAa,YAAY;IAOvB,YACU,UAAsB,EACtB,UAIJ,EAAE;QALN;;;;mBAAQ,UAAU;WAAY;QAC9B;;;;mBAAQ,OAAO;WAIT;QAZC;;;;mBAAO,KAAK;WAAC;QACb;;;;;WAAe;QACxB;;;;;WAAsD;QACtD;;;;mBAAgD,GAAG,EAAE,GAAE,CAAC;WAAC;QACzD;;;;mBAAkB,KAAK;WAAC;QA0DxB;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,+EAA+E;oBAC/E,OAAO,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAK,CAAC,CAAC,CAAC,EAAE,IAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;4BACnD,IAAI,KAAK,EAAE,CAAC;gCACV,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gCAC9B,CAAC,CAAC,KAAK,CAAC,CAAC;4BACX,CAAC;iCAAM,CAAC;gCACN,CAAC,EAAE,CAAC;4BACN,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAK,CAAC,CAAC;oBACzD,0EAA0E;oBAC1E,4DAA4D;oBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;WAAC;QAcF;;;;mBAAQ,GAAG,EAAE,CACX,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,CAAC,EAAE,CAAC;gBACN,CAAC;YACH,CAAC,CAAC;WAAC;QA1FH,IAAI,CAAC,MAAM,GAAG,IAAA,oBAAY,EAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACvC,IAAI,IAAA,gCAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,4CAA4C;YACxF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,IAAgB,EAChB,UAII,EAAE;QAEN,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAC9B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EACzB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAuBD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;IACpC,CAAC;CAYF;AA1GD,oCA0GC;AAED,MAAa,YAAY;IAIvB,YAAoB,IAAa;QAHxB;;;;mBAAO,KAAc;WAAC;QACd;;;;;WAAwB;QAkCzC;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;WAAC;QArCA,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,CAC5C,IAAA,kBAAO,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAa;QAC7B,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,OAA8C;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC/B,CAAC;CASF;AA3CD,oCA2CC;AAED,MAAa,YAAY;IAIvB,YAAoB,IAAa,EAAE,UAAgC,EAAE;QAH5D;;;;mBAAO,KAAc;WAAC;QACd;;;;;WAAwB;QAsCzC;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;WAAC;QAzCA,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,CAC5C,GAAG,CAAC,OAAO,CAAC;YACV,GAAG,OAAO;YACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SACd,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,UAAgC,EAAE;QACjE,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,OAA8C;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC/B,CAAC;CASF;AA/CD,oCA+CC;AAED,MAAM,eAAe;IAOnB,YACE,IAAyB,EACjB,YAAgC,EAChC,eAAmC,IAAI,KAAK,KAAK;QACvD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS;QAHb;;;;mBAAQ,YAAY;WAAoB;QACxC;;;;mBAAQ,YAAY;WAEP;QAXN;;;;;WAA0B;QAC3B;;;;;WAA2B;QAC3B;;;;;WAAsB;QAC9B;;;;mBAAgD,GAAG,EAAE,GAAE,CAAC;WAAC;QACzD;;;;mBAAS,KAAK;WAAC;QA2Df;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,KAAK,IAAI,CAAC;gBACV,MAAM,IAAI,CAAC,UAAU,CAAC;gBACtB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC9B,IAAI,GAAG,EAAE,CAAC;4BACR,MAAM,CAAC,GAAG,CAAC,CAAC;4BACZ,OAAO;wBACT,CAAC;wBACD,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,CAAC;WAAC;QAnEA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBACpC,CAAC,EAAE,CAAC;YACN,CAAC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,KAAY,EAAE,EAAE;gBACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACzC,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG;gBACX,IAAI,CAAC,MAAM,CAAC,aAAc;gBAC1B,IAAI,CAAC,MAAM,CAAC,UAAW;aACb,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;CAoBF","sourcesContent":["import {\n  type RemoteInfo,\n  type Socket,\n  type SocketType,\n  createSocket,\n} from \"dgram\";\n\nimport * as net from \"node:net\";\nimport * as tls from \"node:tls\";\n\nimport { type AddressInfo, type Socket as TcpSocket, connect } from \"node:net\";\nimport { debug } from \"./log\";\nimport {\n  type Address,\n  type InterfaceAddresses,\n  findPort,\n  interfaceAddress,\n  normalizeFamilyNodeV18,\n} from \"./network\";\n\nconst log = debug(\"werift-ice:packages/ice/src/transport.ts\");\n\ntype StreamTransportType = \"tcp\" | \"tls\";\ntype StreamSocket = TcpSocket | tls.TLSSocket;\ntype StreamConnectEvent = \"connect\" | \"secureConnect\";\n\nexport type TlsConnectionOptions = Omit<\n  tls.ConnectionOptions,\n  \"host\" | \"port\" | \"socket\"\n>;\n\nexport class UdpTransport implements Transport {\n  readonly type = \"udp\";\n  readonly socket: Socket;\n  rinfo?: Partial<Pick<RemoteInfo, \"address\" | \"port\">>;\n  onData: (data: Buffer, addr: Address) => void = () => {};\n  closed: boolean = false;\n\n  private constructor(\n    private socketType: SocketType,\n    private options: {\n      portRange?: [number, number];\n      interfaceAddresses?: InterfaceAddresses;\n      port?: number;\n    } = {},\n  ) {\n    this.socket = createSocket(socketType);\n    this.socket.on(\"message\", (data, info) => {\n      if (normalizeFamilyNodeV18(info.family) === 6) {\n        [info.address] = info.address.split(\"%\"); // example fe80::1d3a:8751:4ffd:eb80%wlp82s0\n      }\n      this.rinfo = info;\n      try {\n        this.onData(data, [info.address, info.port]);\n      } catch (error) {\n        log(\"onData error\", error);\n      }\n    });\n  }\n\n  static async init(\n    type: SocketType,\n    options: {\n      portRange?: [number, number];\n      port?: number;\n      interfaceAddresses?: InterfaceAddresses;\n    } = {},\n  ) {\n    const transport = new UdpTransport(type, options);\n    await transport.init();\n    return transport;\n  }\n\n  private async init() {\n    const address = interfaceAddress(\n      this.socketType,\n      this.options.interfaceAddresses,\n    );\n    if (this.options.port) {\n      this.socket.bind({ port: this.options.port, address });\n    } else if (this.options.portRange) {\n      const port = await findPort(\n        this.options.portRange[0],\n        this.options.portRange[1],\n        this.socketType,\n        this.options.interfaceAddresses,\n      );\n      this.socket.bind({ port, address });\n    } else {\n      this.socket.bind({ address });\n    }\n    await new Promise((r) => this.socket.once(\"listening\", r));\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    if (addr && !net.isIP(addr[0])) {\n      // if address is not resolved, need to use send callback to handle dns failure.\n      return new Promise<void>((r, f) => {\n        this.socket.send(data, addr![1], addr![0], (error) => {\n          if (error) {\n            log(\"send error\", addr, data);\n            f(error);\n          } else {\n            r();\n          }\n        });\n      });\n    } else {\n      addr = addr ?? [this.rinfo?.address!, this.rinfo?.port!];\n      // a preestablished remote address does not need a callback to verify dns.\n      // this is faster because event loop is not used per packet.\n      this.socket.send(data, addr[1], addr[0]);\n    }\n  };\n\n  get address() {\n    return this.socket.address();\n  }\n\n  get host() {\n    return this.socket.address().address;\n  }\n\n  get port() {\n    return this.socket.address().port;\n  }\n\n  close = () =>\n    new Promise<void>((r) => {\n      this.closed = true;\n      this.socket.once(\"close\", r);\n      try {\n        this.socket.close();\n      } catch (error) {\n        r();\n      }\n    });\n}\n\nexport class TcpTransport implements Transport {\n  readonly type = \"tcp\" as const;\n  private readonly stream: StreamTransport;\n\n  private constructor(addr: Address) {\n    this.stream = new StreamTransport(\"tcp\", () =>\n      connect({ port: addr[1], host: addr[0] }),\n    );\n  }\n\n  static async init(addr: Address) {\n    const transport = new TcpTransport(addr);\n    await transport.init();\n    return transport;\n  }\n\n  private async init() {\n    await this.stream.waitForConnect();\n  }\n\n  get address() {\n    return this.stream.address;\n  }\n\n  get closed() {\n    return this.stream.closed;\n  }\n\n  get onData() {\n    return this.stream.onData;\n  }\n\n  set onData(handler: (data: Buffer, addr: Address) => void) {\n    this.stream.onData = handler;\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    await this.stream.send(data, addr);\n  };\n\n  close = async () => {\n    await this.stream.close();\n  };\n}\n\nexport class TlsTransport implements Transport {\n  readonly type = \"tls\" as const;\n  private readonly stream: StreamTransport;\n\n  private constructor(addr: Address, options: TlsConnectionOptions = {}) {\n    this.stream = new StreamTransport(\"tls\", () =>\n      tls.connect({\n        ...options,\n        host: addr[0],\n        port: addr[1],\n      }),\n    );\n  }\n\n  static async init(addr: Address, options: TlsConnectionOptions = {}) {\n    const transport = new TlsTransport(addr, options);\n    await transport.init();\n    return transport;\n  }\n\n  private async init() {\n    await this.stream.waitForConnect();\n  }\n\n  get address() {\n    return this.stream.address;\n  }\n\n  get closed() {\n    return this.stream.closed;\n  }\n\n  get onData() {\n    return this.stream.onData;\n  }\n\n  set onData(handler: (data: Buffer, addr: Address) => void) {\n    this.stream.onData = handler;\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    await this.stream.send(data, addr);\n  };\n\n  close = async () => {\n    await this.stream.close();\n  };\n}\n\nclass StreamTransport implements Transport {\n  readonly type: StreamTransportType;\n  private connecting!: Promise<void>;\n  private client!: StreamSocket;\n  onData: (data: Buffer, addr: Address) => void = () => {};\n  closed = false;\n\n  constructor(\n    type: StreamTransportType,\n    private createClient: () => StreamSocket,\n    private connectEvent: StreamConnectEvent = type === \"tls\"\n      ? \"secureConnect\"\n      : \"connect\",\n  ) {\n    this.type = type;\n    this.connect();\n  }\n\n  private connect() {\n    if (this.closed) {\n      return;\n    }\n\n    if (this.client) {\n      this.client.destroy();\n    }\n    const client = this.createClient();\n    this.client = client;\n    this.connecting = new Promise((r, f) => {\n      const onConnect = () => {\n        client.off(\"error\", onConnectError);\n        r();\n      };\n      const onConnectError = (error: Error) => {\n        client.off(this.connectEvent, onConnect);\n        f(error);\n      };\n      client.once(this.connectEvent, onConnect);\n      client.once(\"error\", onConnectError);\n    });\n\n    client.on(\"data\", (data) => {\n      const addr = [\n        this.client.remoteAddress!,\n        this.client.remotePort!,\n      ] as Address;\n      this.onData(data, addr);\n    });\n    client.on(\"end\", () => {\n      this.connect();\n    });\n    client.on(\"error\", (error) => {\n      log(`${this.type} transport error`, error);\n    });\n  }\n\n  async waitForConnect() {\n    await this.connecting;\n  }\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    void addr;\n    await this.connecting;\n    await new Promise<void>((resolve, reject) => {\n      this.client.write(data, (err) => {\n        if (err) {\n          reject(err);\n          return;\n        }\n        resolve();\n      });\n    });\n  };\n\n  close = async () => {\n    this.closed = true;\n    this.client?.destroy();\n  };\n}\n\nexport interface Transport {\n  type: string;\n  address: AddressInfo;\n  closed: boolean;\n  onData: (data: Buffer, addr: Address) => void;\n  send: (data: Buffer, addr?: Address) => Promise<void>;\n  close: () => Promise<void>;\n}\n"]}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../common/src/transport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAKe;AAEf,8CAAgC;AAChC,8CAAgC;AAEhC,uCAA+E;AAC/E,+BAA8B;AAC9B,uCAMmB;AAEnB,MAAM,GAAG,GAAG,IAAA,WAAK,EAAC,0CAA0C,CAAC,CAAC;AAgB9D,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAExC,MAAa,YAAY;IAOvB,YACU,UAAsB,EACtB,UAIJ,EAAE;QALN;;;;mBAAQ,UAAU;WAAY;QAC9B;;;;mBAAQ,OAAO;WAIT;QAZC;;;;mBAAO,KAAK;WAAC;QACb;;;;;WAAe;QACxB;;;;;WAAsD;QACtD;;;;mBAAgD,GAAG,EAAE,GAAE,CAAC;WAAC;QACzD;;;;mBAAkB,KAAK;WAAC;QA0DxB;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,+EAA+E;oBAC/E,OAAO,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAK,CAAC,CAAC,CAAC,EAAE,IAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;4BACnD,IAAI,KAAK,EAAE,CAAC;gCACV,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gCAC9B,CAAC,CAAC,KAAK,CAAC,CAAC;4BACX,CAAC;iCAAM,CAAC;gCACN,CAAC,EAAE,CAAC;4BACN,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAK,CAAC,CAAC;oBACzD,0EAA0E;oBAC1E,4DAA4D;oBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;WAAC;QAmBF;;;;mBAAQ,GAAG,EAAE,CACX,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,CAAC,EAAE,CAAC;gBACN,CAAC;YACH,CAAC,CAAC;WAAC;QA/FH,IAAI,CAAC,MAAM,GAAG,IAAA,oBAAY,EAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACvC,IAAI,IAAA,gCAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,4CAA4C;YACxF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,IAAgB,EAChB,UAII,EAAE;QAEN,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAC9B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EACzB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EACzB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAuBD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,6DAA6D;IAC7D,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;IACpC,CAAC;CAYF;AA/GD,oCA+GC;AAED,MAAa,YAAY;IAIvB,YAAoB,IAAa,EAAE,UAAkC,EAAE;QAH9D;;;;mBAAO,KAAc;WAAC;QACd;;;;;WAAwB;QA8CzC;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;WAAC;QAjDA,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAC/B,KAAK,EACL,GAAG,EAAE,CAAC,IAAA,kBAAO,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAC/C,SAAS,EACT,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,UAAkC,EAAE;QACnE,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,OAA8C;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC/B,CAAC;CASF;AAvDD,oCAuDC;AAED,MAAa,YAAY;IAIvB,YACE,IAAa,EACb,UAAgC,EAAE,EAClC,gBAAwC,EAAE;QANnC;;;;mBAAO,KAAc;WAAC;QACd;;;;;WAAwB;QA2DzC;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;WAAC;QA1DA,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAC/B,KAAK,EACL,GAAG,EAAE,CACH,GAAG,CAAC,OAAO,CAAC;YACV,GAAG,OAAO;YACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SACd,CAAC,EACJ,SAAS,EACT,aAAa,CAAC,gBAAgB,CAC/B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,IAAa,EACb,UAAgC,EAAE,EAClC,gBAAwC,EAAE;QAE1C,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,OAA8C;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC/B,CAAC;CASF;AApED,oCAoEC;AAED,MAAM,eAAe;IAQnB,YACE,IAAyB,EACjB,YAAgC,EAChC,eAAmC,IAAI,KAAK,KAAK;QACvD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS,EACL,mBAAmB,0BAA0B;QAJrD;;;;mBAAQ,YAAY;WAAoB;QACxC;;;;mBAAQ,YAAY;WAEP;QACb;;;;mBAAQ,gBAAgB;WAA6B;QAb9C;;;;;WAA0B;QAC3B;;;;;WAA2B;QAC3B;;;;;WAAsB;QAC9B;;;;mBAAgD,GAAG,EAAE,GAAE,CAAC;WAAC;QACzD;;;;mBAAS,KAAK;WAAC;QACP;;;;;WAA0C;QAkFlD;;;;mBAAO,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;gBAC5C,KAAK,IAAI,CAAC;gBACV,MAAM,IAAI,CAAC,UAAU,CAAC;gBACtB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC9B,IAAI,GAAG,EAAE,CAAC;4BACR,MAAM,CAAC,GAAG,CAAC,CAAC;4BACZ,OAAO;wBACT,CAAC;wBACD,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;mBAAQ,KAAK,IAAI,EAAE;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,CAAC;WAAC;QA1FA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBACpC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;gBAClC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,EAAE,CAAC;YACX,CAAC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,KAAY,EAAE,EAAE;gBACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,MAAM,CACJ,IAAI,KAAK,CACP,GAAG,IAAI,CAAC,IAAI,4BAA4B,IAAI,CAAC,gBAAgB,IAAI,CAClE,CACF,CAAC;gBACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;IAED,2DAA2D;IAC3D,IAAI,aAAa;QACf,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC;CAqBF;AAED,mEAAmE;AACnE,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import {\n  type RemoteInfo,\n  type Socket,\n  type SocketType,\n  createSocket,\n} from \"dgram\";\n\nimport * as net from \"node:net\";\nimport * as tls from \"node:tls\";\n\nimport { type AddressInfo, type Socket as TcpSocket, connect } from \"node:net\";\nimport { debug } from \"./log\";\nimport {\n  type Address,\n  type InterfaceAddresses,\n  findPort,\n  interfaceAddress,\n  normalizeFamilyNodeV18,\n} from \"./network\";\n\nconst log = debug(\"werift-ice:packages/ice/src/transport.ts\");\n\ntype StreamTransportType = \"tcp\" | \"tls\";\ntype StreamSocket = TcpSocket | tls.TLSSocket;\ntype StreamConnectEvent = \"connect\" | \"secureConnect\";\n\nexport type TlsConnectionOptions = Omit<\n  tls.ConnectionOptions,\n  \"host\" | \"port\" | \"socket\"\n>;\n\nexport interface StreamTransportOptions {\n  /** Maximum time to wait for TCP/TLS connection establishment, in milliseconds. */\n  connectTimeoutMs?: number;\n}\n\nconst DEFAULT_CONNECT_TIMEOUT_MS = 8000;\n\nexport class UdpTransport implements Transport {\n  readonly type = \"udp\";\n  readonly socket: Socket;\n  rinfo?: Partial<Pick<RemoteInfo, \"address\" | \"port\">>;\n  onData: (data: Buffer, addr: Address) => void = () => {};\n  closed: boolean = false;\n\n  private constructor(\n    private socketType: SocketType,\n    private options: {\n      portRange?: [number, number];\n      interfaceAddresses?: InterfaceAddresses;\n      port?: number;\n    } = {},\n  ) {\n    this.socket = createSocket(socketType);\n    this.socket.on(\"message\", (data, info) => {\n      if (normalizeFamilyNodeV18(info.family) === 6) {\n        [info.address] = info.address.split(\"%\"); // example fe80::1d3a:8751:4ffd:eb80%wlp82s0\n      }\n      this.rinfo = info;\n      try {\n        this.onData(data, [info.address, info.port]);\n      } catch (error) {\n        log(\"onData error\", error);\n      }\n    });\n  }\n\n  static async init(\n    type: SocketType,\n    options: {\n      portRange?: [number, number];\n      port?: number;\n      interfaceAddresses?: InterfaceAddresses;\n    } = {},\n  ) {\n    const transport = new UdpTransport(type, options);\n    await transport.init();\n    return transport;\n  }\n\n  private async init() {\n    const address = interfaceAddress(\n      this.socketType,\n      this.options.interfaceAddresses,\n    );\n    if (this.options.port) {\n      this.socket.bind({ port: this.options.port, address });\n    } else if (this.options.portRange) {\n      const port = await findPort(\n        this.options.portRange[0],\n        this.options.portRange[1],\n        this.socketType,\n        this.options.interfaceAddresses,\n      );\n      this.socket.bind({ port, address });\n    } else {\n      this.socket.bind({ address });\n    }\n    await new Promise((r) => this.socket.once(\"listening\", r));\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    if (addr && !net.isIP(addr[0])) {\n      // if address is not resolved, need to use send callback to handle dns failure.\n      return new Promise<void>((r, f) => {\n        this.socket.send(data, addr![1], addr![0], (error) => {\n          if (error) {\n            log(\"send error\", addr, data);\n            f(error);\n          } else {\n            r();\n          }\n        });\n      });\n    } else {\n      addr = addr ?? [this.rinfo?.address!, this.rinfo?.port!];\n      // a preestablished remote address does not need a callback to verify dns.\n      // this is faster because event loop is not used per packet.\n      this.socket.send(data, addr[1], addr[0]);\n    }\n  };\n\n  get address() {\n    return this.socket.address();\n  }\n\n  /** IP family of the bound socket: 4 for udp4, 6 for udp6. */\n  get addressFamily(): IpAddressFamily {\n    return this.socketType === \"udp6\" ? 6 : 4;\n  }\n\n  get host() {\n    return this.socket.address().address;\n  }\n\n  get port() {\n    return this.socket.address().port;\n  }\n\n  close = () =>\n    new Promise<void>((r) => {\n      this.closed = true;\n      this.socket.once(\"close\", r);\n      try {\n        this.socket.close();\n      } catch (error) {\n        r();\n      }\n    });\n}\n\nexport class TcpTransport implements Transport {\n  readonly type = \"tcp\" as const;\n  private readonly stream: StreamTransport;\n\n  private constructor(addr: Address, options: StreamTransportOptions = {}) {\n    this.stream = new StreamTransport(\n      \"tcp\",\n      () => connect({ port: addr[1], host: addr[0] }),\n      undefined,\n      options.connectTimeoutMs,\n    );\n  }\n\n  static async init(addr: Address, options: StreamTransportOptions = {}) {\n    const transport = new TcpTransport(addr, options);\n    try {\n      await transport.init();\n      return transport;\n    } catch (error) {\n      await transport.close();\n      throw error;\n    }\n  }\n\n  private async init() {\n    await this.stream.waitForConnect();\n  }\n\n  get address() {\n    return this.stream.address;\n  }\n\n  get remoteAddress() {\n    return this.stream.remoteAddress;\n  }\n\n  get closed() {\n    return this.stream.closed;\n  }\n\n  get onData() {\n    return this.stream.onData;\n  }\n\n  set onData(handler: (data: Buffer, addr: Address) => void) {\n    this.stream.onData = handler;\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    await this.stream.send(data, addr);\n  };\n\n  close = async () => {\n    await this.stream.close();\n  };\n}\n\nexport class TlsTransport implements Transport {\n  readonly type = \"tls\" as const;\n  private readonly stream: StreamTransport;\n\n  private constructor(\n    addr: Address,\n    options: TlsConnectionOptions = {},\n    streamOptions: StreamTransportOptions = {},\n  ) {\n    this.stream = new StreamTransport(\n      \"tls\",\n      () =>\n        tls.connect({\n          ...options,\n          host: addr[0],\n          port: addr[1],\n        }),\n      undefined,\n      streamOptions.connectTimeoutMs,\n    );\n  }\n\n  static async init(\n    addr: Address,\n    options: TlsConnectionOptions = {},\n    streamOptions: StreamTransportOptions = {},\n  ) {\n    const transport = new TlsTransport(addr, options, streamOptions);\n    try {\n      await transport.init();\n      return transport;\n    } catch (error) {\n      await transport.close();\n      throw error;\n    }\n  }\n\n  private async init() {\n    await this.stream.waitForConnect();\n  }\n\n  get address() {\n    return this.stream.address;\n  }\n\n  get remoteAddress() {\n    return this.stream.remoteAddress;\n  }\n\n  get closed() {\n    return this.stream.closed;\n  }\n\n  get onData() {\n    return this.stream.onData;\n  }\n\n  set onData(handler: (data: Buffer, addr: Address) => void) {\n    this.stream.onData = handler;\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    await this.stream.send(data, addr);\n  };\n\n  close = async () => {\n    await this.stream.close();\n  };\n}\n\nclass StreamTransport implements Transport {\n  readonly type: StreamTransportType;\n  private connecting!: Promise<void>;\n  private client!: StreamSocket;\n  onData: (data: Buffer, addr: Address) => void = () => {};\n  closed = false;\n  private rejectConnecting?: (error: Error) => void;\n\n  constructor(\n    type: StreamTransportType,\n    private createClient: () => StreamSocket,\n    private connectEvent: StreamConnectEvent = type === \"tls\"\n      ? \"secureConnect\"\n      : \"connect\",\n    private connectTimeoutMs = DEFAULT_CONNECT_TIMEOUT_MS,\n  ) {\n    this.type = type;\n    this.connect();\n  }\n\n  private connect() {\n    if (this.closed) {\n      return;\n    }\n\n    if (this.client) {\n      this.client.destroy();\n    }\n    const client = this.createClient();\n    this.client = client;\n    this.connecting = new Promise((resolve, reject) => {\n      let settled = false;\n      const settle = (error?: Error) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        client.off(this.connectEvent, onConnect);\n        client.off(\"error\", onConnectError);\n        this.rejectConnecting = undefined;\n        error ? reject(error) : resolve();\n      };\n      const onConnect = () => {\n        settle();\n      };\n      const onConnectError = (error: Error) => {\n        this.closed = true;\n        settle(error);\n        client.destroy();\n      };\n      const timer = setTimeout(() => {\n        this.closed = true;\n        settle(\n          new Error(\n            `${this.type} connect timed out after ${this.connectTimeoutMs}ms`,\n          ),\n        );\n        client.destroy();\n      }, this.connectTimeoutMs);\n      this.rejectConnecting = (error) => settle(error);\n      client.once(this.connectEvent, onConnect);\n      client.once(\"error\", onConnectError);\n    });\n\n    client.on(\"data\", (data) => {\n      this.onData(data, this.remoteAddress!);\n    });\n    client.on(\"error\", (error) => {\n      log(`${this.type} transport error`, error);\n    });\n  }\n\n  async waitForConnect() {\n    await this.connecting;\n  }\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  /** The peer the stream is connected to, once connected. */\n  get remoteAddress(): Address | undefined {\n    const { remoteAddress, remotePort } = this.client;\n    if (!remoteAddress || !remotePort) {\n      return undefined;\n    }\n    return [stripZoneId(remoteAddress), remotePort];\n  }\n\n  send = async (data: Buffer, addr?: Address) => {\n    void addr;\n    await this.connecting;\n    await new Promise<void>((resolve, reject) => {\n      this.client.write(data, (err) => {\n        if (err) {\n          reject(err);\n          return;\n        }\n        resolve();\n      });\n    });\n  };\n\n  close = async () => {\n    this.closed = true;\n    this.rejectConnecting?.(new Error(`${this.type} transport closed`));\n    this.client?.destroy();\n  };\n}\n\n/** Strip an IPv6 zone identifier, e.g. fe80::1%eth0 -> fe80::1. */\nfunction stripZoneId(address: string) {\n  return address.split(\"%\")[0];\n}\n\nexport type IpAddressFamily = 4 | 6;\n\nexport interface Transport {\n  type: string;\n  address: AddressInfo;\n  closed: boolean;\n  onData: (data: Buffer, addr: Address) => void;\n  send: (data: Buffer, addr?: Address) => Promise<void>;\n  close: () => Promise<void>;\n  /**\n   * IP family of a datagram socket. A datagram transport can only reach\n   * addresses of this family. Built-in UDP transports always set it; a custom\n   * transport that leaves it unset gets no family preference.\n   */\n  addressFamily?: IpAddressFamily;\n  /**\n   * The peer a connected (stream) transport is talking to. Responses arrive\n   * from this address. Built-in TCP/TLS transports set it once connected.\n   */\n  remoteAddress?: Address;\n}\n"]}

package/lib/ice/src/exceptions.d.ts

@@ -13,3 +13,12 @@ export declare class TransactionFailed extends TransactionError {
 export declare class TransactionTimeout extends TransactionError {
     get str(): string;
 }
+/**
+ * The request target is an IP literal of a different family than the socket
+ * that would carry it, so it can never be delivered.
+ */
+export declare class AddressFamilyMismatch extends Error {
+    addr: Address;
+    socketFamily: 4 | 6;
+    constructor(addr: Address, socketFamily: 4 | 6);
+}

package/lib/ice/src/exceptions.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TransactionTimeout = exports.TransactionFailed = exports.TransactionError = void 0;
+exports.AddressFamilyMismatch = exports.TransactionTimeout = exports.TransactionFailed = exports.TransactionError = void 0;
 class TransactionError extends Error {
     constructor() {
         super(...arguments);
@@ -52,4 +52,26 @@ class TransactionTimeout extends TransactionError {
     }
 }
 exports.TransactionTimeout = TransactionTimeout;
+/**
+ * The request target is an IP literal of a different family than the socket
+ * that would carry it, so it can never be delivered.
+ */
+class AddressFamilyMismatch extends Error {
+    constructor(addr, socketFamily) {
+        super(`cannot reach ${addr[0]}:${addr[1]} from an IPv${socketFamily} socket`);
+        Object.defineProperty(this, "addr", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: addr
+        });
+        Object.defineProperty(this, "socketFamily", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: socketFamily
+        });
+    }
+}
+exports.AddressFamilyMismatch = AddressFamilyMismatch;
 //# sourceMappingURL=exceptions.js.map

package/lib/ice/src/exceptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"exceptions.js","sourceRoot":"","sources":["../../../../ice/src/exceptions.ts"],"names":[],"mappings":";;;AAGA,MAAa,gBAAiB,SAAQ,KAAK;IAA3C;;QACE;;;;;WAAmB;QACnB;;;;;WAAe;IACjB,CAAC;CAAA;AAHD,4CAGC;AAED,MAAa,iBAAkB,SAAQ,gBAAgB;IACrD,YACS,QAAiB,EACjB,IAAa;QAEpB,KAAK,EAAE,CAAC;QAHR;;;;mBAAO,QAAQ;WAAS;QACxB;;;;mBAAO,IAAI;WAAS;IAGtB,CAAC;IAED,IAAI,GAAG;QACL,IAAI,GAAG,GAAG,yBAAyB,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;YAC9B,GAAG,IAAI,KAAK,IAAI,MAAM,GAAG,GAAG,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAjBD,8CAiBC;AAED,MAAa,kBAAmB,SAAQ,gBAAgB;IACtD,IAAI,GAAG;QACL,OAAO,4BAA4B,CAAC;IACtC,CAAC;CACF;AAJD,gDAIC","sourcesContent":["import type { Address } from \"./imports/common\";\nimport type { Message } from \"./stun/message\";\n\nexport class TransactionError extends Error {\n  response?: Message;\n  addr?: Address;\n}\n\nexport class TransactionFailed extends TransactionError {\n  constructor(\n    public response: Message,\n    public addr: Address,\n  ) {\n    super();\n  }\n\n  get str() {\n    let out = \"STUN transaction failed\";\n    const attribute = this.response.getAttributeValue(\"ERROR-CODE\");\n    if (attribute) {\n      const [code, msg] = attribute;\n      out += ` (${code} - ${msg})`;\n    }\n    return out;\n  }\n}\n\nexport class TransactionTimeout extends TransactionError {\n  get str() {\n    return \"STUN transaction timed out\";\n  }\n}\n"]}
+{"version":3,"file":"exceptions.js","sourceRoot":"","sources":["../../../../ice/src/exceptions.ts"],"names":[],"mappings":";;;AAGA,MAAa,gBAAiB,SAAQ,KAAK;IAA3C;;QACE;;;;;WAAmB;QACnB;;;;;WAAe;IACjB,CAAC;CAAA;AAHD,4CAGC;AAED,MAAa,iBAAkB,SAAQ,gBAAgB;IACrD,YACS,QAAiB,EACjB,IAAa;QAEpB,KAAK,EAAE,CAAC;QAHR;;;;mBAAO,QAAQ;WAAS;QACxB;;;;mBAAO,IAAI;WAAS;IAGtB,CAAC;IAED,IAAI,GAAG;QACL,IAAI,GAAG,GAAG,yBAAyB,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;YAC9B,GAAG,IAAI,KAAK,IAAI,MAAM,GAAG,GAAG,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAjBD,8CAiBC;AAED,MAAa,kBAAmB,SAAQ,gBAAgB;IACtD,IAAI,GAAG;QACL,OAAO,4BAA4B,CAAC;IACtC,CAAC;CACF;AAJD,gDAIC;AAED;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YACS,IAAa,EACb,YAAmB;QAE1B,KAAK,CACH,gBAAgB,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,YAAY,SAAS,CACvE,CAAC;QALF;;;;mBAAO,IAAI;WAAS;QACpB;;;;mBAAO,YAAY;WAAO;IAK5B,CAAC;CACF;AATD,sDASC","sourcesContent":["import type { Address } from \"./imports/common\";\nimport type { Message } from \"./stun/message\";\n\nexport class TransactionError extends Error {\n  response?: Message;\n  addr?: Address;\n}\n\nexport class TransactionFailed extends TransactionError {\n  constructor(\n    public response: Message,\n    public addr: Address,\n  ) {\n    super();\n  }\n\n  get str() {\n    let out = \"STUN transaction failed\";\n    const attribute = this.response.getAttributeValue(\"ERROR-CODE\");\n    if (attribute) {\n      const [code, msg] = attribute;\n      out += ` (${code} - ${msg})`;\n    }\n    return out;\n  }\n}\n\nexport class TransactionTimeout extends TransactionError {\n  get str() {\n    return \"STUN transaction timed out\";\n  }\n}\n\n/**\n * The request target is an IP literal of a different family than the socket\n * that would carry it, so it can never be delivered.\n */\nexport class AddressFamilyMismatch extends Error {\n  constructor(\n    public addr: Address,\n    public socketFamily: 4 | 6,\n  ) {\n    super(\n      `cannot reach ${addr[0]}:${addr[1]} from an IPv${socketFamily} socket`,\n    );\n  }\n}\n"]}

package/lib/ice/src/ice.d.ts

@@ -45,6 +45,22 @@ export declare class Connection implements IceConnection {
     readonly stateChanged: Event<[IceState]>;
     readonly onIceCandidate: Event<[Candidate]>;
     constructor(_iceControlling: boolean, options?: Partial<IceOptions>);
+    /**
+     * Replace STUN/TURN servers after construction.
+     * Server-related fields are replaced (not partial-merged) so that removing
+     * TURN clears residual credentials. W3C setConfiguration replaces the ICE
+     * server list rather than merging additively.
+     *
+     * Used when servers are learned after the gatherer was built (e.g. WHIP
+     * Link headers) and must take effect before the next gather pass.
+     */
+    setIceServers(options: Partial<IceOptions>): void;
+    /**
+     * Derive Connection.stunServer / turnServer from this.options.
+     * Shared by the constructor and setIceServers so both paths validate and
+     * default identically.
+     */
+    private applyStunTurnServersFromOptions;
     get iceControlling(): boolean;
     set iceControlling(value: boolean);
     get iceLite(): boolean;
@@ -58,6 +74,12 @@ export declare class Connection implements IceConnection {
     gatherCandidates(): Promise<void>;
     private appendLocalCandidate;
     private ensureProtocol;
+    /**
+     * RFC 6544: the selected TCP connection is the only path for this component;
+     * once it is closed no application data or consent check can reach the peer,
+     * so fail the same way as a consent expiry instead of waiting for it.
+     */
+    private handleConnectionClosed;
     private getCandidatePromises;
     connect(): Promise<void>;
     private unfreezeInitial;
@@ -94,6 +116,24 @@ export declare class Connection implements IceConnection {
         resolve: (value: void | PromiseLike<void>) => void;
         reject: (reason?: any) => void;
     };
+    private isTcpPair;
+    /**
+     * Aggressive nomination lets each side settle on whichever TCP connection
+     * finished first; the two sides can then pick different connections and
+     * pruning destroys the peer's choice. For TCP the controlling agent instead
+     * nominates exactly one valid pair (RFC 8445 §8.1.1 regular nomination).
+     */
+    private usesTcpRegularNomination;
+    private checkRequestOptions;
+    /**
+     * Controlling side: nominate the highest-priority TCP pair once every
+     * higher-priority TCP pair has finished its check, so the choice does not
+     * depend on which connection happened to complete first.
+     */
+    private nominateTcpPairIfReady;
+    private nominateTcpPair;
+    /** The agent was closed or restarted while the nomination was in flight. */
+    private isStaleNomination;
     private addPair;
     checkIncoming(message: Message, addr: Address, protocol: Protocol): void;
     private tryPair;

package/lib/ice/src/ice.js

@@ -49,6 +49,8 @@ const tcpProtocol_1 = require("./stun/tcpProtocol");
 const protocol_2 = require("./turn/protocol");
 const utils_1 = require("./utils");
 const log = (0, common_1.debug)("werift-ice : packages/ice/src/ice.ts : log");
+/** Fallback STUN server when none is configured (constructor / setIceServers). */
+const DEFAULT_STUN_SERVER = ["stun.l.google.com", 19302];
 class Connection {
     constructor(_iceControlling, options) {
         Object.defineProperty(this, "_iceControlling", {
@@ -463,7 +465,8 @@ class Connection {
                 const result = {};
                 const { remotePassword, remoteUsername, generation } = this;
                 const localUsername = pair.localCandidate.ufrag ?? this.localUsername;
-                const nominate = this.iceControlling && !this.remoteIsLite;
+                // TCP pairs use regular nomination (see nominateTcpPairIfReady).
+                const nominate = this.iceControlling && !this.remoteIsLite && !this.isTcpPair(pair);
                 const request = this.buildRequest({
                     nominate,
                     localUsername,
@@ -475,11 +478,7 @@ class Connection {
                 const startTime = performance.now();
                 try {
                     pair.requestsSent++;
-                    const [response, addr] = await pair.protocol.request(request, pair.remoteAddr, Buffer.from(remotePassword, "utf8"), pair.localCandidate.transport.toLowerCase() === "tcp" ? 0 : 4, (attempt) => {
-                        if (attempt > 0) {
-                            pair.retransmissionsSent++;
-                        }
-                    });
+                    const [response, addr] = await pair.protocol.request(request, pair.remoteAddr, Buffer.from(remotePassword, "utf8"), this.checkRequestOptions(pair));
                     pair.responsesReceived++;
                     // Calculate RTT
                     const endTime = performance.now();
@@ -546,6 +545,9 @@ class Connection {
                     // # nominated by agressive nomination or the remote party
                     pair.nominated = true;
                 }
+                else if (this.usesTcpRegularNomination(pair)) {
+                    // # nominated later by nominateTcpPairIfReady (from checkComplete)
+                }
                 else if (this.iceControlling && !this.nominating) {
                     // # perform regular nomination
                     this.nominating = true;
@@ -558,14 +560,11 @@ class Connection {
                     });
                     try {
                         pair.requestsSent++;
-                        await pair.protocol.request(request, pair.remoteAddr, Buffer.from(this.remotePassword, "utf8"), pair.localCandidate.transport.toLowerCase() === "tcp" ? 0 : 4, (attempt) => {
-                            if (attempt > 0) {
-                                pair.retransmissionsSent++;
-                            }
-                        });
+                        await pair.protocol.request(request, pair.remoteAddr, Buffer.from(this.remotePassword, "utf8"), this.checkRequestOptions(pair));
                         pair.responsesReceived++;
                     }
                     catch (error) {
+                        this.nominating = false;
                         pair.updateState(iceBase_1.CandidatePairState.FAILED);
                         this.checkComplete(pair);
                         return;
@@ -594,15 +593,55 @@ class Connection {
         if (this.iceLite) {
             this._iceControlling = false;
         }
-        const { stunServer, turnServer } = this.options;
-        this.stunServer = (0, iceBase_1.validateAddress)(stunServer) ?? [
-            "stun.l.google.com",
-            19302,
-        ];
-        this.turnServer = (0, iceBase_1.validateAddress)(turnServer);
+        this.applyStunTurnServersFromOptions();
         this.restart();
         log("new Connection", this.options);
     }
+    /**
+     * Replace STUN/TURN servers after construction.
+     * Server-related fields are replaced (not partial-merged) so that removing
+     * TURN clears residual credentials. W3C setConfiguration replaces the ICE
+     * server list rather than merging additively.
+     *
+     * Used when servers are learned after the gatherer was built (e.g. WHIP
+     * Link headers) and must take effect before the next gather pass.
+     */
+    setIceServers(options) {
+        // Explicitly assign server fields even when undefined so a STUN-only
+        // update cannot leave a previous TURN host/credential in options.
+        this.options = {
+            ...this.options,
+            stunServer: options.stunServer,
+            turnServer: options.turnServer,
+            turnUsername: options.turnUsername,
+            turnPassword: options.turnPassword,
+            turnTransport: options.turnTransport,
+        };
+        if (options.forceTurn !== undefined) {
+            this.options.forceTurn = options.forceTurn;
+        }
+        if (options.useTcp !== undefined) {
+            this.options.useTcp = options.useTcp;
+        }
+        if (options.turnTlsOptions !== undefined) {
+            this.options.turnTlsOptions = options.turnTlsOptions;
+        }
+        if (options.turnUdpFamily !== undefined) {
+            this.options.turnUdpFamily = options.turnUdpFamily;
+        }
+        this.applyStunTurnServersFromOptions();
+        log("Connection ice servers updated", this.options);
+    }
+    /**
+     * Derive Connection.stunServer / turnServer from this.options.
+     * Shared by the constructor and setIceServers so both paths validate and
+     * default identically.
+     */
+    applyStunTurnServersFromOptions() {
+        this.stunServer =
+            (0, iceBase_1.validateAddress)(this.options.stunServer) ?? DEFAULT_STUN_SERVER;
+        this.turnServer = (0, iceBase_1.validateAddress)(this.options.turnServer);
+    }
     get iceControlling() {
         return this._iceControlling;
     }
@@ -698,7 +737,7 @@ class Connection {
             if (this.options.additionalHostAddresses) {
                 address = Array.from(new Set([...this.options.additionalHostAddresses, ...address]));
             }
-            const candidatePromises = this.getCandidatePromises(address, 5);
+            const candidatePromises = this.getCandidatePromises(address, this.options.stunGatherTimeout);
             await Promise.allSettled(candidatePromises);
             this.localCandidatesEnd = true;
         }
@@ -775,6 +814,29 @@ class Connection {
                 log("dataReceived", error);
             }
         });
+        protocol.onConnectionClosed?.subscribe((remoteAddr) => {
+            this.handleConnectionClosed(protocol, remoteAddr);
+        });
+    }
+    /**
+     * RFC 6544: the selected TCP connection is the only path for this component;
+     * once it is closed no application data or consent check can reach the peer,
+     * so fail the same way as a consent expiry instead of waiting for it.
+     */
+    handleConnectionClosed(protocol, remoteAddr) {
+        const nominated = this.nominated;
+        if (!nominated ||
+            nominated.protocol !== protocol ||
+            nominated.remoteAddr[0] !== remoteAddr[0] ||
+            nominated.remoteAddr[1] !== remoteAddr[1]) {
+            return;
+        }
+        if (this.state === "closed" || this.state === "failed") {
+            return;
+        }
+        log("selected tcp connection closed", nominated.toJSON());
+        this.stopConsentLifecycle();
+        this.setState("failed");
     }
     getCandidatePromises(addresses, timeout = 5) {
         const candidatePromises = [];
@@ -823,16 +885,21 @@ class Connection {
         }
         if (!gatherRelayOnly && this.options.useTcp) {
             const tcpCandidatePromises = addresses.map(async (address) => {
-                const passiveProtocol = new tcpProtocol_1.TcpPassiveProtocol();
-                this.ensureProtocol(passiveProtocol);
-                await passiveProtocol.connectionMade(address, this.options.portRange);
-                passiveProtocol.localIp = address;
-                passiveProtocol.localCandidate = new candidate_1.Candidate((0, candidate_1.candidateFoundation)("host", "tcp", address), 1, "tcp", (0, candidate_1.candidatePriority)("host", {
-                    transport: "tcp",
-                    tcptype: "passive",
-                }), address, passiveProtocol.listeningPort, "host", undefined, undefined, "passive", this.generation, this.localUsername);
-                this.protocols.push(passiveProtocol);
-                this.appendLocalCandidate(passiveProtocol.localCandidate);
+                // Passive candidates open a listening TCP server; skip them when the
+                // agent only makes outbound connections (tcpPassive === false). Active
+                // candidates below still dial out, so direct TCP egress is unaffected.
+                if (this.options.tcpPassive !== false) {
+                    const passiveProtocol = new tcpProtocol_1.TcpPassiveProtocol();
+                    this.ensureProtocol(passiveProtocol);
+                    await passiveProtocol.connectionMade(address, this.options.portRange);
+                    passiveProtocol.localIp = address;
+                    passiveProtocol.localCandidate = new candidate_1.Candidate((0, candidate_1.candidateFoundation)("host", "tcp", address), 1, "tcp", (0, candidate_1.candidatePriority)("host", {
+                        transport: "tcp",
+                        tcptype: "passive",
+                    }), address, passiveProtocol.listeningPort, "host", undefined, undefined, "passive", this.generation, this.localUsername);
+                    this.protocols.push(passiveProtocol);
+                    this.appendLocalCandidate(passiveProtocol.localCandidate);
+                }
                 if (!gatherIceLite) {
                     const activeProtocol = new tcpProtocol_1.TcpActiveProtocol();
                     this.ensureProtocol(activeProtocol);
@@ -890,6 +957,8 @@ class Connection {
                     interfaceAddresses: this.options.interfaceAddresses,
                     transport: turnTransport,
                     tlsOptions: this.options.turnTlsOptions,
+                    connectTimeoutMs: (this.options.turnConnectTimeout ?? 8) * 1000,
+                    udpFamily: this.options.turnUdpFamily,
                 }).catch(async (e) => {
                     if (turnTransport === "udp") {
                         return await (0, protocol_2.createStunOverTurnClient)({
@@ -900,6 +969,7 @@ class Connection {
                             portRange: this.options.portRange,
                             interfaceAddresses: this.options.interfaceAddresses,
                             transport: "tcp",
+                            connectTimeoutMs: (this.options.turnConnectTimeout ?? 8) * 1000,
                         });
                     }
                     else {
@@ -1268,6 +1338,11 @@ class Connection {
                 }
             }
         }
+        this.nominateTcpPairIfReady();
+        // A nomination request is still in flight; its result decides the outcome.
+        if (this.nominating) {
+            return;
+        }
         {
             const list = [iceBase_1.CandidatePairState.SUCCEEDED, iceBase_1.CandidatePairState.FAILED];
             if (this.checkList.find(({ state }) => !list.includes(state))) {
@@ -1287,6 +1362,97 @@ class Connection {
             }));
         }
     }
+    isTcpPair(pair) {
+        return pair.localCandidate.transport.toLowerCase() === "tcp";
+    }
+    /**
+     * Aggressive nomination lets each side settle on whichever TCP connection
+     * finished first; the two sides can then pick different connections and
+     * pruning destroys the peer's choice. For TCP the controlling agent instead
+     * nominates exactly one valid pair (RFC 8445 §8.1.1 regular nomination).
+     */
+    usesTcpRegularNomination(pair) {
+        return this.iceControlling && !this.remoteIsLite && this.isTcpPair(pair);
+    }
+    checkRequestOptions(pair) {
+        const onRequestSent = (attempt) => {
+            if (attempt > 0) {
+                pair.retransmissionsSent++;
+            }
+        };
+        if (this.isTcpPair(pair)) {
+            // RFC 5389 §7.2.2: no retransmissions over a reliable transport.
+            return {
+                retransmissions: 0,
+                responseTimeout: const_1.TCP_CHECK_RESPONSE_TIMEOUT_MS,
+                onRequestSent,
+            };
+        }
+        return { retransmissions: 4, onRequestSent };
+    }
+    /**
+     * Controlling side: nominate the highest-priority TCP pair once every
+     * higher-priority TCP pair has finished its check, so the choice does not
+     * depend on which connection happened to complete first.
+     */
+    nominateTcpPairIfReady() {
+        if (!this.iceControlling ||
+            this.remoteIsLite ||
+            this.nominated ||
+            this.nominating) {
+            return;
+        }
+        for (const pair of this.checkList) {
+            if (!this.isTcpPair(pair)) {
+                continue;
+            }
+            if (pair.state === iceBase_1.CandidatePairState.SUCCEEDED) {
+                this.nominateTcpPair(pair);
+                return;
+            }
+            if (pair.state !== iceBase_1.CandidatePairState.FAILED) {
+                // A higher-priority pair may still succeed.
+                return;
+            }
+        }
+    }
+    nominateTcpPair(pair) {
+        this.nominating = true;
+        const { generation } = this;
+        const request = this.buildRequest({
+            nominate: true,
+            localUsername: pair.localCandidate.ufrag ?? this.localUsername,
+            remoteUsername: this.remoteUsername,
+            iceControlling: this.iceControlling,
+            localCandidate: pair.localCandidate,
+        });
+        pair.requestsSent++;
+        pair.protocol
+            .request(request, pair.remoteAddr, Buffer.from(this.remotePassword, "utf8"), this.checkRequestOptions(pair))
+            .then(() => {
+            if (this.isStaleNomination(pair, generation)) {
+                return;
+            }
+            pair.responsesReceived++;
+            pair.nominated = true;
+            this.nominating = false;
+            this.checkComplete(pair);
+        }, (error) => {
+            if (this.isStaleNomination(pair, generation)) {
+                return;
+            }
+            log("tcp nomination failed", pair.toJSON(), error);
+            this.nominating = false;
+            pair.updateState(iceBase_1.CandidatePairState.FAILED);
+            this.checkComplete(pair);
+        });
+    }
+    /** The agent was closed or restarted while the nomination was in flight. */
+    isStaleNomination(pair, generation) {
+        return (this.state === "closed" ||
+            this.generation !== generation ||
+            !this.checkList.includes(pair));
+    }
     addPair(pair) {
         this.checkList.push(pair);
         this.sortCheckList();