Initial release — secure local P2P mesh networking for iOS/macOS

Zero-dependency MultipeerConnectivity library with DTLS encryption,
HMAC-SHA256 envelope integrity, multi-hop relay routing, brute-force
protection, and host-side pool code authentication.

Author: ibnbd

.gitignore

@@ -0,0 +1,7 @@
+.DS_Store
+.build/
+*.xcodeproj/
+xcuserdata/
+DerivedData/
+.swiftpm/
+Package.resolved

Package.swift

@@ -0,0 +1,16 @@
+// swift-tools-version: 6.0
+import PackageDescription
+
+let package = Package(
+    name: "ConnectionPool",
+    platforms: [.iOS(.v17), .macOS(.v14)],
+    products: [
+        .library(name: "ConnectionPool", targets: ["ConnectionPool"]),
+    ],
+    targets: [
+        .target(
+            name: "ConnectionPool",
+            path: "Sources"
+        ),
+    ]
+)

README.md

@@ -0,0 +1,41 @@
+// ConnectionPoolConfiguration.swift
+// ConnectionPool
+//
+// Created by Olib AI (www.olib.ai)
+// StealthOS - stealthos.app
+
+import Foundation
+
+/// Protocol for pluggable block list storage.
+///
+/// Implement this protocol to provide encrypted or otherwise secure persistence
+/// for the device block list. If no provider is configured on
+/// `ConnectionPoolConfiguration`, `DeviceBlockListService` falls back to plain
+/// `UserDefaults`.
+public protocol BlockListStorageProvider: Sendable {
+    /// Persist raw data for the given key.
+    func save(_ data: Data, forKey key: String) throws
+    /// Load previously persisted data for the given key, or `nil` if none exists.
+    func load(forKey key: String) throws -> Data?
+}
+
+/// Static configuration point for the ConnectionPool package.
+///
+/// The host app should call `ConnectionPoolConfiguration.logger = ...` at startup
+/// to inject its logging infrastructure. If not configured, a default `os.Logger`
+/// fallback is used.
+public enum ConnectionPoolConfiguration {
+    /// Logger instance injected by the host app.
+    /// Set this before any ConnectionPool APIs are used.
+    nonisolated(unsafe) public static var logger: ConnectionPoolLogger?
+
+    /// Optional secure storage provider for the device block list.
+    ///
+    /// When set, `DeviceBlockListService` persists block list data through this
+    /// provider instead of plain `UserDefaults`. The host app should wire this to
+    /// an encrypted storage backend (e.g., Keychain or SecureDataStore).
+    ///
+    /// Set this at app startup alongside the logger, before any ConnectionPool
+    /// APIs are used.
+    @MainActor public static var blockListStorageProvider: BlockListStorageProvider?
+}

Sources/Configuration/ConnectionPoolConfiguration.swift

@@ -0,0 +1,14 @@
+// ConnectionPool.swift
+// ConnectionPool
+//
+// Created by Olib AI (www.olib.ai)
+// StealthOS - stealthos.app
+
+/// ConnectionPool Module
+/// Provides local peer-to-peer connectivity using MultipeerConnectivity framework.
+/// Enables secure local chat, multiplayer gaming, and file sharing without internet.
+
+@_exported import Foundation
+
+// Re-export public types
+public typealias PeerID = String

Sources/ConnectionPool.swift

@@ -0,0 +1,35 @@
+// BlockedDevice.swift
+// ConnectionPool
+//
+// Created by Olib AI (www.olib.ai)
+// StealthOS - stealthos.app
+
+import Foundation
+
+/// Reason a device was blocked
+public enum BlockReason: String, Codable, Sendable {
+    /// Host manually blocked the device
+    case manual
+    /// Device was auto-blocked after too many failed join attempts
+    case bruteForce
+}
+
+/// Represents a device that has been blocked from joining the pool
+public struct BlockedDevice: Identifiable, Codable, Sendable {
+    public let id: String
+    public let peerDisplayName: String
+    public let blockedAt: Date
+    public let reason: BlockReason
+
+    public init(
+        id: String,
+        peerDisplayName: String,
+        blockedAt: Date = Date(),
+        reason: BlockReason
+    ) {
+        self.id = id
+        self.peerDisplayName = peerDisplayName
+        self.blockedAt = blockedAt
+        self.reason = reason
+    }
+}