fognode 0.2.2__tar.gz → 0.2.4__tar.gz

fognode-0.2.4/CHANGELOG.md

@@ -0,0 +1,53 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on Keep a Changelog,
+and this project adheres to Semantic Versioning.
+
+
+
+## [dev] - 2026-05-16
+
+### Added
+
+- add event classes in core/events.py ([`18bef8c`](https://github.com/reekeer/fognode/commit/18bef8c63a3ecd4b8b568960a5d46bd31ed6baa0))
+- add on_event decorator and event-driven Server/Client API ([`bf132b5`](https://github.com/reekeer/fognode/commit/bf132b5ee0085e365ddfd8bd2523d2740292aa6c))
+
+### Changed
+
+- trigger release workflow on tag push instead of main branch ([`6e4087c`](https://github.com/reekeer/fognode/commit/6e4087c94e76a5fa359445ef1a4e853f4ba8483a))
+- run release on main/tag push only when HEAD is tagged ([`2d6b8f2`](https://github.com/reekeer/fognode/commit/2d6b8f22b067cdf68a115217b83a37dfd47cc1cc))
+
+### Changed
+
+- disable local version suffix for PyPI compatibility ([`c539563`](https://github.com/reekeer/fognode/commit/c539563b076afe33985d82e967cb5b21181a3136))
+
+
+
+## [dev] - 2026-05-16
+
+### Changed
+
+- remove chat history and user concept from protocol, server, handshake ([`3c601ed`](https://github.com/reekeer/fognode/commit/3c601eded9dcb68a492042efb338b9921b922618))
+- add Client/Server classes, remove logs, builtin commands, chat state ([`99c74ce`](https://github.com/reekeer/fognode/commit/99c74ce89763dde522415b661d968c1c7ac809bc))
+
+### Changed
+
+- auto-release on main push using latest tag ([`a0afea7`](https://github.com/reekeer/fognode/commit/a0afea7183baf99281b6cd4679084942574cd646))
+- add pr summary ([`f733c98`](https://github.com/reekeer/fognode/commit/f733c9870b3c1174f9cb8e35b76a5206187dd9bf))
+
+
+
+# Changelog
+
+## 0.1.0
+
+- Initial release.
+- TLS 1.2+ with strong cipher suite.
+- X25519 ephemeral key exchange over TLS.
+- AESGCM-256 + HMAC-SHA256 frame encryption.
+- PBKDF2-HMAC-SHA256 password derivation.
+- Monotonic counter + timestamp replay protection.
+- IP-to-word encoding for human-readable addresses.
+- Rate-limited authentication.

fognode-0.2.4/PKG-INFO

@@ -0,0 +1,233 @@
+Metadata-Version: 2.4
+Name: fognode
+Version: 0.2.4
+Summary: fognode - headless secure encrypted data transmission. TLS + X25519 + AESGCM + PBKDF2.
+Project-URL: Repository, https://github.com/reekeer/fognode
+Author: reekeer
+License: MIT License
+        
+        Copyright (c) 2026 reekeer
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Requires-Python: >=3.10
+Requires-Dist: cryptography>=44.0.0
+Requires-Dist: pycryptodome>=3.20.0
+Provides-Extra: dev
+Requires-Dist: black>=24.0.0; extra == 'dev'
+Requires-Dist: pyright>=1.1.409; extra == 'dev'
+Requires-Dist: pytest-asyncio>=1.3.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.5.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<h1 align="center">fognode</h1>
+
+<h4 align="center">headless secure encrypted data transmission</h4>
+
+<p align="center">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-green?style=for-the-badge&logo=opensourceinitiative&logoColor=FFFFFF" alt="License"></a>
+  <img src="https://img.shields.io/badge/Python-3.10%2B-blue?style=for-the-badge&logo=python&logoColor=white" alt="Python">
+  <img src="https://img.shields.io/badge/Platform-Linux%20%7C%20macOS%20%7C%20Windows-lightgrey?style=for-the-badge&logo=linux&logoColor=FCC624" alt="Platform">
+  <img src="https://img.shields.io/badge/code%20style-black-000000?style=for-the-badge" alt="black">
+  <img src="https://img.shields.io/badge/linting-ruff-orange?style=for-the-badge" alt="ruff">
+</p>
+
+---
+
+Peer-to-peer encrypted channel library for headless projects. Built for speed and zero-trust networking.
+
+## Security Stack
+
+| Layer | Technology |
+|---|---|
+| Transport | TLS 1.2+ with self-signed RSA-4096 certs |
+| Key Exchange | X25519 ephemeral ECDH |
+| Session Keys | HKDF-SHA256 |
+| Channel Cipher | mini-MTProto (AES-256-IGE + SHA-256 msg_key) |
+| Password Derivation | PBKDF2-HMAC-SHA256 (390k iterations) |
+| Auth Challenge | HMAC-SHA256 over random nonce |
+| Cert Pinning | SHA-256 fingerprint verification |
+
+## How connection works
+
+<p align="center">
+  <img src="./docs/fognode_connection.svg" alt="fognode connection flow" width="900"/>
+</p>
+
+## Install
+
+```bash
+pip install fognode
+```
+
+## Quick Start
+
+### Server
+
+```python
+from fognode import Server, MessageEvent, ConnectEvent, DisconnectEvent
+
+server = Server(host="0.0.0.0", port=9443, password="secret")
+
+@server.on_event(MessageEvent)
+async def on_message(ctx):
+    if ctx.event.text:
+        await ctx.answer(f"echo: {ctx.event.text}")
+
+@server.on_event(ConnectEvent)
+async def on_connect(ctx):
+    print("+ peer connected")
+
+@server.on_event(DisconnectEvent)
+async def on_disconnect(ctx):
+    print("- peer disconnected")
+
+if __name__ == "__main__":
+    server.run()
+```
+
+### Client
+
+```python
+from fognode import Client, MessageEvent, ClosedEvent, ErrorEvent
+
+client = Client(connect_string="oak-pine-stone-field:9443", password="secret")
+
+@client.on_event(MessageEvent)
+async def on_message(ctx):
+    print(f"msg: {ctx.event.text}")
+
+@client.on_event(ClosedEvent)
+async def on_closed(ctx):
+    print("connection closed")
+
+@client.on_event(ErrorEvent)
+async def on_error(ctx):
+    print(f"error: {ctx.event.exception}")
+
+if __name__ == "__main__":
+    client.connect()
+```
+
+### Classic API
+
+```python
+from fognode import start_server, client_connect
+
+ip, code, fp = start_server("0.0.0.0", 9443, "secret")
+print(f"Server running at {code}:9443")
+```
+
+## Events
+
+| Event | Server | Client | Description |
+|---|---|---|---|
+| `StartEvent` | yes | yes | Server/client started |
+| `ConnectEvent` | yes | yes | Peer connected |
+| `DisconnectEvent` | yes | yes | Peer disconnected |
+| `MessageEvent` | yes | yes | Message received (`type`, `text`, `ts`) |
+| `ClosedEvent` | no | yes | Connection closed |
+| `ErrorEvent` | no | yes | Error occurred (`exception`) |
+
+### Decorators
+
+```python
+# Specific event
+@server.on_event(MessageEvent)
+async def handler(ctx):
+    pass
+
+# Aliases
+@server.on_connect()
+@server.on_disconnect()
+@server.on_message()
+@client.on_closed()
+@client.on_error()
+```
+
+## How mini-MTProto Works
+
+Each message is encrypted independently using a simplified MTProto 2.0 scheme:
+
+1. **Serialize** JSON payload to bytes
+2. **Pad** to AES block size (16 bytes)
+3. **Compute msg_key** = `SHA-256(padded)[8:24]` (128 bits)
+4. **Derive AES key** = `SHA-256(auth_key + msg_key)`
+5. **Derive AES IV** = `SHA-256(msg_key + auth_key)`
+6. **Encrypt** with AES-256-IGE
+7. **Send** `length(4 bytes) + msg_key(16 bytes) + ciphertext`
+
+Decryption reverses the process and verifies `msg_key` integrity.
+
+## CLI
+
+```bash
+# Run server
+fognode server --host 0.0.0.0 --port 9443 --password secret
+
+# Interactive client
+fognode client oak-pine-stone-field:9443 --password secret
+
+# Probe TLS fingerprint (no auth)
+fognode probe oak-pine-stone-field:9443
+
+# Server status via authenticated channel
+fognode status oak-pine-stone-field:9443 --password secret
+
+# Send one message and exit
+fognode send oak-pine-stone-field:9443 --password secret --text "hello"
+
+# Monitor messages only
+fognode monitor oak-pine-stone-field:9443 --password secret
+
+# Show certificate info
+fognode cert --file fognode_cert.pem
+```
+
+## Project Structure
+
+```
+src/fognode/
+├── app.py              # Server, Client, Context
+├── cipher.py           # mini-MTProto AES-256-IGE encrypt/decrypt
+├── cli/
+│   └── entrypoint.py   # argparse CLI
+├── core/
+│   ├── client.py       # client_connect()
+│   ├── events.py       # Event classes
+│   ├── probe.py        # probe_server()
+│   └── server.py       # start_server()
+├── crypto/
+│   ├── cert.py         # Self-signed cert generation
+│   ├── channel.py      # SecureChannel (mini-MTProto)
+│   ├── kdf.py          # Session key helpers
+│   ├── kx.py           # X25519 keypair + shared secret
+│   ├── password.py     # PBKDF2 password store
+│   └── primitives.py   # pbkdf2, hmac256, hkdf_expand
+├── filters/            # BaseFilter, Command, Text
+├── handlers/           # HandlerObject
+├── types/              # constants, exceptions, protocol
+├── utils/              # ipwords, ratelimit, net
+└── wire/               # Length-prefixed JSON framing
+```
+
+---
+
+<p align="center"><sub><a href="LICENSE">MIT</a> © reekeer</sub></p>

fognode-0.2.4/README.md

@@ -0,0 +1,194 @@
+<h1 align="center">fognode</h1>
+
+<h4 align="center">headless secure encrypted data transmission</h4>
+
+<p align="center">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-green?style=for-the-badge&logo=opensourceinitiative&logoColor=FFFFFF" alt="License"></a>
+  <img src="https://img.shields.io/badge/Python-3.10%2B-blue?style=for-the-badge&logo=python&logoColor=white" alt="Python">
+  <img src="https://img.shields.io/badge/Platform-Linux%20%7C%20macOS%20%7C%20Windows-lightgrey?style=for-the-badge&logo=linux&logoColor=FCC624" alt="Platform">
+  <img src="https://img.shields.io/badge/code%20style-black-000000?style=for-the-badge" alt="black">
+  <img src="https://img.shields.io/badge/linting-ruff-orange?style=for-the-badge" alt="ruff">
+</p>
+
+---
+
+Peer-to-peer encrypted channel library for headless projects. Built for speed and zero-trust networking.
+
+## Security Stack
+
+| Layer | Technology |
+|---|---|
+| Transport | TLS 1.2+ with self-signed RSA-4096 certs |
+| Key Exchange | X25519 ephemeral ECDH |
+| Session Keys | HKDF-SHA256 |
+| Channel Cipher | mini-MTProto (AES-256-IGE + SHA-256 msg_key) |
+| Password Derivation | PBKDF2-HMAC-SHA256 (390k iterations) |
+| Auth Challenge | HMAC-SHA256 over random nonce |
+| Cert Pinning | SHA-256 fingerprint verification |
+
+## How connection works
+
+<p align="center">
+  <img src="./docs/fognode_connection.svg" alt="fognode connection flow" width="900"/>
+</p>
+
+## Install
+
+```bash
+pip install fognode
+```
+
+## Quick Start
+
+### Server
+
+```python
+from fognode import Server, MessageEvent, ConnectEvent, DisconnectEvent
+
+server = Server(host="0.0.0.0", port=9443, password="secret")
+
+@server.on_event(MessageEvent)
+async def on_message(ctx):
+    if ctx.event.text:
+        await ctx.answer(f"echo: {ctx.event.text}")
+
+@server.on_event(ConnectEvent)
+async def on_connect(ctx):
+    print("+ peer connected")
+
+@server.on_event(DisconnectEvent)
+async def on_disconnect(ctx):
+    print("- peer disconnected")
+
+if __name__ == "__main__":
+    server.run()
+```
+
+### Client
+
+```python
+from fognode import Client, MessageEvent, ClosedEvent, ErrorEvent
+
+client = Client(connect_string="oak-pine-stone-field:9443", password="secret")
+
+@client.on_event(MessageEvent)
+async def on_message(ctx):
+    print(f"msg: {ctx.event.text}")
+
+@client.on_event(ClosedEvent)
+async def on_closed(ctx):
+    print("connection closed")
+
+@client.on_event(ErrorEvent)
+async def on_error(ctx):
+    print(f"error: {ctx.event.exception}")
+
+if __name__ == "__main__":
+    client.connect()
+```
+
+### Classic API
+
+```python
+from fognode import start_server, client_connect
+
+ip, code, fp = start_server("0.0.0.0", 9443, "secret")
+print(f"Server running at {code}:9443")
+```
+
+## Events
+
+| Event | Server | Client | Description |
+|---|---|---|---|
+| `StartEvent` | yes | yes | Server/client started |
+| `ConnectEvent` | yes | yes | Peer connected |
+| `DisconnectEvent` | yes | yes | Peer disconnected |
+| `MessageEvent` | yes | yes | Message received (`type`, `text`, `ts`) |
+| `ClosedEvent` | no | yes | Connection closed |
+| `ErrorEvent` | no | yes | Error occurred (`exception`) |
+
+### Decorators
+
+```python
+# Specific event
+@server.on_event(MessageEvent)
+async def handler(ctx):
+    pass
+
+# Aliases
+@server.on_connect()
+@server.on_disconnect()
+@server.on_message()
+@client.on_closed()
+@client.on_error()
+```
+
+## How mini-MTProto Works
+
+Each message is encrypted independently using a simplified MTProto 2.0 scheme:
+
+1. **Serialize** JSON payload to bytes
+2. **Pad** to AES block size (16 bytes)
+3. **Compute msg_key** = `SHA-256(padded)[8:24]` (128 bits)
+4. **Derive AES key** = `SHA-256(auth_key + msg_key)`
+5. **Derive AES IV** = `SHA-256(msg_key + auth_key)`
+6. **Encrypt** with AES-256-IGE
+7. **Send** `length(4 bytes) + msg_key(16 bytes) + ciphertext`
+
+Decryption reverses the process and verifies `msg_key` integrity.
+
+## CLI
+
+```bash
+# Run server
+fognode server --host 0.0.0.0 --port 9443 --password secret
+
+# Interactive client
+fognode client oak-pine-stone-field:9443 --password secret
+
+# Probe TLS fingerprint (no auth)
+fognode probe oak-pine-stone-field:9443
+
+# Server status via authenticated channel
+fognode status oak-pine-stone-field:9443 --password secret
+
+# Send one message and exit
+fognode send oak-pine-stone-field:9443 --password secret --text "hello"
+
+# Monitor messages only
+fognode monitor oak-pine-stone-field:9443 --password secret
+
+# Show certificate info
+fognode cert --file fognode_cert.pem
+```
+
+## Project Structure
+
+```
+src/fognode/
+├── app.py              # Server, Client, Context
+├── cipher.py           # mini-MTProto AES-256-IGE encrypt/decrypt
+├── cli/
+│   └── entrypoint.py   # argparse CLI
+├── core/
+│   ├── client.py       # client_connect()
+│   ├── events.py       # Event classes
+│   ├── probe.py        # probe_server()
+│   └── server.py       # start_server()
+├── crypto/
+│   ├── cert.py         # Self-signed cert generation
+│   ├── channel.py      # SecureChannel (mini-MTProto)
+│   ├── kdf.py          # Session key helpers
+│   ├── kx.py           # X25519 keypair + shared secret
+│   ├── password.py     # PBKDF2 password store
+│   └── primitives.py   # pbkdf2, hmac256, hkdf_expand
+├── filters/            # BaseFilter, Command, Text
+├── handlers/           # HandlerObject
+├── types/              # constants, exceptions, protocol
+├── utils/              # ipwords, ratelimit, net
+└── wire/               # Length-prefixed JSON framing
+```
+
+---
+
+<p align="center"><sub><a href="LICENSE">MIT</a> © reekeer</sub></p>

fognode-0.2.4/docs/fognode_connection.svg

@@ -0,0 +1,108 @@
+<svg width="900" height="540" viewBox="0 0 900 540" xmlns="http://www.w3.org/2000/svg">
+  <defs>
+    <marker id="a" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="6" markerHeight="6" orient="auto-start-reverse">
+      <path d="M2 1L8 5L2 9" fill="none" stroke="context-stroke" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+    </marker>
+    <style>
+      text { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif; }
+      .lbl  { font-size: 13px; fill: #24292f; }
+      .sec  { font-size: 12px; fill: #8c959f; }
+      .hdr  { font-size: 15px; font-weight: 600; fill: #24292f; }
+      .note { font-size: 12px; fill: #57606a; }
+      @media (prefers-color-scheme: dark) {
+        .lbl  { fill: #e6edf3; }
+        .hdr  { fill: #f0f6fc; }
+        .note { fill: #8b949e; }
+        .sec  { fill: #6e7681; }
+        .box  { fill: #21262d !important; stroke: #30363d !important; }
+        .pill { fill: #161b22 !important; stroke: #30363d !important; }
+        .pgray{ fill: #21262d !important; stroke: #30363d !important; }
+        .life { stroke: #30363d !important; }
+        .div  { stroke: #21262d !important; }
+        .arr  { stroke: #8b949e !important; }
+        .arrb { stroke: #e6edf3 !important; }
+      }
+    </style>
+  </defs>
+
+  <!-- center=450, pill w=360, x=270, x2=630 -->
+  <!-- server lifeline x=100, client lifeline x=800 -->
+
+  <rect class="box" x="40" y="28" width="120" height="40" rx="8" fill="#f6f8fa" stroke="#d0d7de" stroke-width="1"/>
+  <text class="hdr" x="100" y="53" text-anchor="middle">Server</text>
+
+  <rect class="box" x="740" y="28" width="120" height="40" rx="8" fill="#f6f8fa" stroke="#d0d7de" stroke-width="1"/>
+  <text class="hdr" x="800" y="53" text-anchor="middle">Client</text>
+
+  <line class="life" x1="100" y1="68" x2="100" y2="510" stroke="#d0d7de" stroke-width="1" stroke-dasharray="5 4"/>
+  <line class="life" x1="800" y1="68" x2="800" y2="510" stroke="#d0d7de" stroke-width="1" stroke-dasharray="5 4"/>
+
+  <!-- TLS -->
+  <text class="sec" x="450" y="96" text-anchor="middle">TLS</text>
+  <line class="div" x1="102" y1="92" x2="428" y2="92" stroke="#e0e0e0" stroke-width="0.5"/>
+  <line class="div" x1="472" y1="92" x2="798" y2="92" stroke="#e0e0e0" stroke-width="0.5"/>
+
+  <line class="arr" x1="798" y1="116" x2="632" y2="116" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="105" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="268" y1="116" x2="102" y2="116" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="121" text-anchor="middle">TCP connect</text>
+
+  <line class="arr" x1="102" y1="152" x2="268" y2="152" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="141" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="630" y1="152" x2="798" y2="152" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="157" text-anchor="middle">TLS 1.2+ handshake — RSA-4096 self-signed cert</text>
+
+  <line class="arr" x1="798" y1="188" x2="632" y2="188" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="177" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="268" y1="188" x2="102" y2="188" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="193" text-anchor="middle">SHA-256 cert fingerprint verify</text>
+
+  <!-- Key exchange -->
+  <text class="sec" x="450" y="220" text-anchor="middle">Key exchange</text>
+  <line class="div" x1="102" y1="216" x2="390" y2="216" stroke="#e0e0e0" stroke-width="0.5"/>
+  <line class="div" x1="510" y1="216" x2="798" y2="216" stroke="#e0e0e0" stroke-width="0.5"/>
+
+  <line class="arr" x1="798" y1="240" x2="632" y2="240" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="229" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="268" y1="240" x2="102" y2="240" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="245" text-anchor="middle">X25519 ephemeral public key</text>
+
+  <line class="arr" x1="102" y1="276" x2="268" y2="276" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="265" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="630" y1="276" x2="798" y2="276" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="281" text-anchor="middle">X25519 ephemeral public key</text>
+
+  <rect class="pgray" x="270" y="296" width="360" height="24" rx="5" fill="#f6f8fa" stroke="#ccc" stroke-width="0.5"/>
+  <text class="note" x="450" y="312" text-anchor="middle">both sides derive: ECDH → HKDF-SHA256 → session key</text>
+
+  <!-- Auth -->
+  <text class="sec" x="450" y="344" text-anchor="middle">Auth</text>
+  <line class="div" x1="102" y1="340" x2="424" y2="340" stroke="#e0e0e0" stroke-width="0.5"/>
+  <line class="div" x1="476" y1="340" x2="798" y2="340" stroke="#e0e0e0" stroke-width="0.5"/>
+
+  <line class="arr" x1="102" y1="364" x2="268" y2="364" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="353" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="630" y1="364" x2="798" y2="364" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="369" text-anchor="middle">random nonce</text>
+
+  <line class="arr" x1="798" y1="400" x2="632" y2="400" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="389" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="268" y1="400" x2="102" y2="400" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="405" text-anchor="middle">HMAC-SHA256(nonce, PBKDF2 password)</text>
+
+  <line class="arr" x1="102" y1="436" x2="268" y2="436" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="425" width="360" height="24" rx="5" fill="#fff" stroke="#d0d7de" stroke-width="0.5"/>
+  <line class="arr" x1="630" y1="436" x2="798" y2="436" stroke="#555" stroke-width="1.2" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="441" text-anchor="middle">auth OK / reject</text>
+
+  <!-- Messaging -->
+  <text class="sec" x="450" y="466" text-anchor="middle">Messaging</text>
+  <line class="div" x1="102" y1="462" x2="396" y2="462" stroke="#e0e0e0" stroke-width="0.5"/>
+  <line class="div" x1="504" y1="462" x2="798" y2="462" stroke="#e0e0e0" stroke-width="0.5"/>
+
+  <line class="arrb" x1="798" y1="490" x2="632" y2="490" stroke="#24292f" stroke-width="1.5" marker-end="url(#a)"/>
+  <rect class="pill" x="270" y="479" width="360" height="24" rx="5" fill="#fff" stroke="#8c959f" stroke-width="0.8"/>
+  <line class="arrb" x1="268" y1="490" x2="102" y2="490" stroke="#24292f" stroke-width="1.5" marker-end="url(#a)"/>
+  <text class="lbl" x="450" y="495" text-anchor="middle" style="font-weight:600">mini-MTProto · AES-256-IGE · ↻ until disconnect</text>
+
+</svg>

fognode-0.2.4/examples/headless_server.py

@@ -0,0 +1,21 @@
+from __future__ import annotations
+
+from fognode import Server, ConnectEvent, DisconnectEvent, MessageEvent
+
+server = Server(host="0.0.0.0", port=9443, password="secret")
+
+@server.on_event(ConnectEvent)
+async def on_connect(ctx):
+    print("+ peer connected")
+
+@server.on_event(DisconnectEvent)
+async def on_disconnect(ctx):
+    print("- peer disconnected")
+
+@server.on_event(MessageEvent)
+async def on_message(ctx):
+    if ctx.event.text:
+        await ctx.answer(f"echo: {ctx.event.text}")
+
+if __name__ == "__main__":
+    server.run()

{fognode-0.2.2 → fognode-0.2.4}/pyproject.toml

@@ -17,6 +17,7 @@ mainteiners = [
 ]
 dependencies = [
     "cryptography>=44.0.0",
+    "pycryptodome>=3.20.0",
 ]
 
 [project.urls]