Lines 12-52javascript
12import { CRYPTO_PACKET_DHTPK, CRYPTO_PACKET_FRIEND_REQ, NET_PACKET_CRYPTO, createToxDhtCryptoRequest, openToxDhtCryptoRequest } from "./compat/tox-dht-crypto.js";
13import { NET_PACKET_PING_REQUEST, NET_PACKET_PING_RESPONSE, NET_PACKET_GET_NODES, NET_PACKET_SEND_NODES, encodeDhtRpc, decodeDhtRpc, buildPingPlain, parsePingPlain, buildGetNodesPlain, parseGetNodesPlain, buildSendNodesPlain, parseSendNodesNodeBytes, packUdpNodeV4 } from "./compat/dht-rpc.js";
14import { FileTransferManager, PACKET_ID_FILE_SENDREQUEST, PACKET_ID_FILE_CONTROL, PACKET_ID_FILE_DATA, PACKET_ID_FILE_FEC } from "./compat/filetransfer.js";
15import { NET_PACKET_CRYPTO_DATA, NET_PACKET_CRYPTO_HS, NET_PACKET_COOKIE_REQUEST, NET_PACKET_COOKIE_RESPONSE, createCookieRequest, createCookieResponse, createCryptoDataPacket, createCryptoHandshake, openCookieRequest, openCookieResponse, openCryptoDataPacket, openCryptoHandshake, incrementNonce } from "./compat/net-crypto.js";
16import { LegacyExpressClient } from "./compat/express.js";
17import { TcpRelayPool } from "./compat/tcp-relay-pool.js";
18import { LegacyDhtClient } from "./compat/dht.js";
19import { loadOrCreateKeyPair } from "./crypto/keypair.js";
20import { signDetached } from "./crypto/sign.js";
21import { base58ToBytes } from "./utils/base58.js";
22import { UdpTransport } from "./transport/udp.js";
23import { bytesToHex, concatBytes, randomBytes } from "./utils/bytes.js";
24import { buildBindingRequest, decodeStun, decodeXorMappedAddress, findAttr, STUN_ATTR_XOR_MAPPED_ADDRESS, STUN_BINDING_SUCCESS } from "./stun.js";
25import { TurnClient } from "./turn.js";
26import { createSocket as createDgramSocket } from "dgram";
27// Dedicated TURN relay servers — fixed public relays used as a stable
28// fallback path when direct UDP hole-punch fails or flaps (symmetric NAT,
29// NAT remaps, lossy direct path). A relay endpoint never NAT-flaps, so the
30// path stays put even when the peers' NATs churn. Static long-term creds.
31const TURN_RELAY_SERVERS = [
32 { host: "tokyo.fi.chat", port: 3478, username: "allcom", password: "allcompass" }
34const ANNOUNCE_WAIT_TIMEOUT_MS = readEnvInt("DECENT_ANNOUNCE_WAIT_TIMEOUT_MS", 4000);
35const MAX_FRIEND_ROUTE_ATTEMPTS = readEnvInt("DECENT_FRIEND_ROUTE_MAX_ATTEMPTS", 12);
36// How many in-flight announce step1 requests to fan out at once. Toxcore
37// pipelines all 12 of its onion clients in parallel; we batch up to this
38// many concurrent #sendAnnounceAndWait calls so the worst-case walk drops
39// from (per-node-timeout × 12) ≈ 60s down to ~10s. Configurable via
40// DECENT_FRIEND_ROUTE_BATCH_SIZE — set to 1 to revert to sequential.
41const FRIEND_ROUTE_BATCH_SIZE = readEnvInt("DECENT_FRIEND_ROUTE_BATCH_SIZE", 8);
42// Node soft-blacklist: after N consecutive failures (timeouts) a node
43// is parked for a TTL window so we don't waste batch slots on it.
44// Set NODE_BLACKLIST_THRESHOLD=0 to disable. Successful response from
45// the same node clears it instantly.
46const NODE_BLACKLIST_THRESHOLD = readEnvInt("DECENT_NODE_BLACKLIST_THRESHOLD", 5);
47const NODE_BLACKLIST_BASE_TTL_MS = readEnvInt("DECENT_NODE_BLACKLIST_BASE_TTL_MS", 60_000);
48const NODE_BLACKLIST_MAX_TTL_MS = readEnvInt("DECENT_NODE_BLACKLIST_MAX_TTL_MS", 600_000);
49const FRIEND_ANNOUNCE_ATTEMPTS = readEnvInt("DECENT_FRIEND_ANNOUNCE_ATTEMPTS", 1);
50const JOIN_ANNOUNCE_TIMEOUT_MS = readEnvInt("DECENT_JOIN_ANNOUNCE_TIMEOUT_MS", 12000);
51const SELF_ANNOUNCE_INTERVAL_MS = readEnvInt("DECENT_SELF_ANNOUNCE_INTERVAL_MS", 20000);
52// Classic-DHT maintenance cadence. Every tick we get_nodes toward our own key