feat(vpn transport): add QUIC transport support with auto fallback to WebSocket

ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartvpn',
-  version: '1.3.0',
+  version: '1.4.0',
   description: 'A VPN solution with TypeScript control plane and Rust data plane daemon'
 }

ts/smartvpn.classes.vpnconfig.ts

@@ -15,8 +15,11 @@ export class VpnConfig {
     if (!config.serverUrl) {
       throw new Error('VpnConfig: serverUrl is required');
     }
-    if (!config.serverUrl.startsWith('wss://') && !config.serverUrl.startsWith('ws://')) {
-      throw new Error('VpnConfig: serverUrl must start with wss:// or ws://');
+    // For QUIC-only transport, serverUrl is a host:port address; for WebSocket/auto it must be ws:// or wss://
+    if (config.transport !== 'quic') {
+      if (!config.serverUrl.startsWith('wss://') && !config.serverUrl.startsWith('ws://')) {
+        throw new Error('VpnConfig: serverUrl must start with wss:// or ws:// (for WebSocket transport)');
+      }
     }
     if (!config.serverPublicKey) {
       throw new Error('VpnConfig: serverPublicKey is required');

ts/smartvpn.interfaces.ts

@@ -32,6 +32,10 @@ export interface IVpnClientConfig {
   mtu?: number;
   /** Keepalive interval in seconds (default: 30) */
   keepaliveIntervalSecs?: number;
+  /** Transport protocol: 'auto' (default, tries QUIC then WS), 'websocket', or 'quic' */
+  transport?: 'auto' | 'websocket' | 'quic';
+  /** For QUIC: SHA-256 hash of server certificate (base64) for cert pinning */
+  serverCertHash?: string;
 }
 
 export interface IVpnClientOptions {
@@ -68,6 +72,12 @@ export interface IVpnServerConfig {
   defaultRateLimitBytesPerSec?: number;
   /** Default burst size for new clients (bytes). Omit for unlimited. */
   defaultBurstBytes?: number;
+  /** Transport mode: 'both' (default, WS+QUIC), 'websocket', or 'quic' */
+  transportMode?: 'websocket' | 'quic' | 'both';
+  /** QUIC listen address (host:port). Defaults to listenAddr. */
+  quicListenAddr?: string;
+  /** QUIC idle timeout in seconds (default: 30) */
+  quicIdleTimeoutSecs?: number;
 }
 
 export interface IVpnServerOptions {