Files
paseo/packages/client/src/daemon-client-transport.ts
T
Mohamed Boudra 793b16c0df fix(relay): protect sessions against replayed commands (#7610)
Protect relay sessions against replayed commands with authenticated Noise NK negotiation, ordered records, and identity-bound security pins. Preserve legacy admission during migration and add daemon enforcement policy.

All 21 CI checks passed. General engineering review is complete; specialist cryptographic review of the handwritten Noise implementation and static-key reuse remains required before release or deployment.

Closes #359
2026-10-22 19:50:06 +07:00

28 lines
705 B
TypeScript

export type {
DaemonTransport,
DaemonTransportFactory,
TransportLogger,
WebSocketFactory,
WebSocketLike,
} from "./daemon-client-transport-types.js";
export {
decodeMessageData,
describeTransportClose,
describeTransportError,
encodeUtf8String,
extractRelayMessage,
normalizeTransportPayload,
safeRandomId,
} from "./daemon-client-transport-utils.js";
export {
createEncryptedTransport,
createRelayE2eeTransportFactory,
createRelayUpgradeTransportFactory,
describeEndpointSecurityClose,
} from "./daemon-client-relay-e2ee-transport.js";
export {
bindWsHandler,
createWebSocketTransportFactory,
defaultWebSocketFactory,
} from "./daemon-client-websocket-transport.js";