@byokit/pair 0.10.0 → 0.10.2

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## Unreleased
 
+## 0.10.2 (2026-10-17)
+
+- FIX: a busy host that answers a ping late no longer has its live link dropped. `DeviceLink` now counts any pong up to the latest ping, a reply to one of its own waiting requests, or a frame on one of its own streams as hearing from the host, and counts silence from its first ping rather than from the connect, so a host that answers even that first ping late stays online. A host that goes silent is still dropped after two silent ping rounds (`2 × pingMs`, checked once a round). Host events and broadcasts alone still do not keep a link up: they show only that the host can talk, not that it hears the device, so only an answer to something the device sent proves the round trip.
+
+## 0.10.1 (2026-10-16)
+
+- FIX: the browser pairing test opens the pairing page over the test browser's own private CDP pipe once Chromium answers there, not from the launch command line. On a slow first start Chromium's network service quits after 15 s unanswered and took the launch page's request with it, so the test silently sat out its 180 s deadline; the page now loads after Chromium restarts the service, and a page Chromium cannot open fails at once with Chromium's own navigation error.
+- FIX: pairing and setup checks split "can't reach the computer" from "the computer is slow": a socket that never opens within the timeout reports `unreachable` ("Check the phone and computer are on the same network, and that no firewall is blocking the connection."), while an open socket with no answer reports the new `slow` code ("Your computer is slow to answer. Wait a moment and try again."). Consumers relay the codes unchanged.
+
 ## 0.10.0 (2026-10-12)
 
 - DOCS: the "Checking reachability before pairing" section now shows both sides: setup self-checks its own advertised URLs with `check()` before printing the tick, and the phone re-checks the scanned offer before consent. The probe still spends nothing, so a checked offer pairs afterwards.

package/dist/channel.js

@@ -14,7 +14,7 @@ import Noise from 'noise-handshake';
 import { chacha20poly1305 } from '@noble/ciphers/chacha.js';
 import dh from 'noise-handshake/dh.js';
 import sodium from 'sodium-universal';
-import { CONFIRM_WORDS } from "./confirm-words.js";
+import { CONFIRM_WORDS } from './confirm-words.js';
 /** Mixed into every handshake, so a v2 of this protocol can never be confused with v1. */
 export const PROLOGUE = 'byokit-link-v1';
 const CHUNK = 60_000; // a Noise message is at most 65535 bytes; larger payloads go in pieces

package/dist/check.js

@@ -1,7 +1,7 @@
 // A per-URL reachability probe for onboarding: before pairing, the phone checks the offer's URLs (and the host
 // checks its own advertised URL) without claiming or burning the one-time offer. No platform APIs: the same code
 // runs in Node, browsers and React Native on the platform WebSocket, like `dial` in device.ts.
-import { LINK_WORDS } from "./device.js";
+import { LINK_WORDS } from './device.js';
 /** The first frame a probe sends. The host answers with LINK_PROBE_OK and closes; it touches no ticket, code,
 // grant or counter, so a checked offer still pairs afterwards. Relayed devices speak bare frames, so the same
 // exchange works through a relay with no relay change. */

package/dist/device.d.ts

@@ -44,22 +44,22 @@ export declare const LINK_WORDS: {
     readonly unreachable: "Can't reach your computer. Check the phone and computer are on the same network, and that no firewall is blocking the connection.";
     readonly 'wrong-host': "Something other than your computer answered, so this device didn't connect.";
     readonly 'wrong-code': "That code didn't match. Check it, or show a new one on your computer.";
-    readonly expired: "That pairing code has run out. Show a new one on your computer.";
-    readonly declined: "Your computer said no to this device.";
-    readonly full: "Your computer has all the devices it allows. Remove one there first.";
+    readonly expired: 'That pairing code has run out. Show a new one on your computer.';
+    readonly declined: 'Your computer said no to this device.';
+    readonly full: 'Your computer has all the devices it allows. Remove one there first.';
     readonly 'not-paired': "Your computer doesn't know this device any more. Pair it again.";
-    readonly removed: "This device was removed on your computer.";
-    readonly 'view-only': "This device can watch but not make changes.";
+    readonly removed: 'This device was removed on your computer.';
+    readonly 'view-only': 'This device can watch but not make changes.';
     readonly timeout: "Your computer didn't answer in time.";
-    readonly slow: "Your computer is slow to answer. Wait a moment and try again.";
+    readonly slow: 'Your computer is slow to answer. Wait a moment and try again.';
     readonly failed: "Your computer couldn't do that.";
-    readonly busy: "Your computer is still catching up. Try again in a moment.";
-    readonly stopped: "This link is stopped. Try connecting again.";
+    readonly busy: 'Your computer is still catching up. Try again in a moment.';
+    readonly stopped: 'This link is stopped. Try connecting again.';
     readonly 'not-supported': "The app on your computer can't do this yet. Update it there.";
     readonly ended: "This device's access has run out. Pair it again on your computer.";
     readonly 'not-allowed': "This device isn't allowed to do that.";
     readonly 'too-late': "That reached your computer too late, so it wasn't done.";
-    readonly unsupported: "Your computer needs an update for that.";
+    readonly unsupported: 'Your computer needs an update for that.';
 };
 export type LinkProblem = keyof typeof LINK_WORDS;
 /** A failure with a plain `message` and a `code` for the app. `sealed` means the host said it inside the encrypted
@@ -150,6 +150,9 @@ export declare class DeviceLink {
      *  A tick that fires long after it was due means this device's own timers were frozen (an app in the background,
      *  a hidden tab), not that the host went quiet: no ping went out, so none came back. */
     private ping;
+    /** Whether `m` answers something this device sent: any pong so far (a busy host answers late), a reply to a waiting
+     *  request, or a frame on one of its streams. Only those prove the host hears this device; its events alone do not. */
+    private answers;
     private sendPending;
     private settle;
     private again;

package/dist/device.js

@@ -2,9 +2,9 @@
 // the host's credentials. It pairs once (scan or typed code), then keeps one socket open, reconnecting on its own, and
 // its requests survive a reconnect: each carries a key, so a retried tap runs once. Uses only the platform's
 // WebSocket, so the same code runs in browsers, React Native and Node.
-import { Handshake, b64, b64url, keyPair, keyPairFrom, random, unb64url } from "./channel.js";
-import { cleanName, codeKey, decodeCompactOffer, parseCode, parseOffer, parseV1Offer, shortKey, COMPACT_TAG } from "./pairing.js";
-import { Streams } from "./stream.js";
+import { Handshake, b64, b64url, keyPair, keyPairFrom, random, unb64url } from './channel.js';
+import { cleanName, codeKey, decodeCompactOffer, parseCode, parseOffer, parseV1Offer, shortKey, COMPACT_TAG } from './pairing.js';
+import { Streams } from './stream.js';
 /** Every way the link can fail, in words a person can act on. */
 export const LINK_WORDS = {
     unreachable: "Can't reach your computer. Check the phone and computer are on the same network, and that no firewall is blocking the connection.",
@@ -320,7 +320,7 @@ export class DeviceLink {
                     let active;
                     const l = await dial(url, keyPairFrom(unb64url(secret)), { key: unb64url(this.grant.host) }, { t: 'auth', session: this.session, ack: this.ack, fresh: this.fresh }, this.o, {
                         message: (m) => { if (this.conn === active) {
-                            if (m.t === 'pong' && m.n === this.pingId)
+                            if (this.answers(m))
                                 this.heard = Date.now();
                             this.message(m);
                         } },
@@ -396,8 +396,9 @@ export class DeviceLink {
             if (this.conn !== l)
                 return;
             const now = Date.now();
-            // Count the silence from now; a socket that is really dead still misses the pings that follow.
-            if (now - due > every / 2)
+            // Count the silence from now; a socket that is really dead still misses the pings that follow. Before the first
+            // ping nothing was asked, so a host that answers it late is not silent either.
+            if (now - due > every / 2 || !this.pingId)
                 this.heard = now;
             else if (now - this.heard > 2 * every) {
                 l.close();
@@ -412,6 +413,11 @@ export class DeviceLink {
         };
         later(every, tick);
     }
+    /** Whether `m` answers something this device sent: any pong so far (a busy host answers late), a reply to a waiting
+     *  request, or a frame on one of its streams. Only those prove the host hears this device; its events alone do not. */
+    answers(m) {
+        return (m.t === 'pong' && m.n <= this.pingId) || (m.t === 'res' && this.pending.has(m.id)) || !!this.streams?.has(m.s);
+    }
     sendPending(l, id, p) {
         try {
             l.send(p.msg);

package/dist/host.js

@@ -1,11 +1,11 @@
 // The host: the computer that owns the credentials. It pairs devices (scanned or typed code, then a person says yes),
 // keeps one durable grant per device, answers their requests, and removes them. It never listens on anything itself:
 // the app hands it WebSockets (`accept`), or one relay socket that carries many devices (`relay`).
-import { Handshake, b64, b64url, firstFrame, hostId, messageBytes, random, unb64url } from "./channel.js";
-import { bindCode, cleanName, codeKey, encodeCompactOffer, newCode, normalizeCode, offerText } from "./pairing.js";
-import { PublicLinkError } from "./device.js";
-import { LINK_PROBE, LINK_PROBE_OK } from "./check.js";
-import { MAX_STREAMS, Streams } from "./stream.js";
+import { Handshake, b64, b64url, firstFrame, hostId, messageBytes, random, unb64url } from './channel.js';
+import { bindCode, cleanName, codeKey, encodeCompactOffer, newCode, normalizeCode, offerText } from './pairing.js';
+import { PublicLinkError } from './device.js';
+import { LINK_PROBE, LINK_PROBE_OK } from './check.js';
+import { MAX_STREAMS, Streams } from './stream.js';
 const HANDSHAKE_MS = 15_000;
 const MAX_TRIES = 5; // wrong codes before every open code is withdrawn
 const MAX_ANSWERS = 1000;

package/dist/index.js

@@ -1,8 +1,8 @@
-export { hostId, keyPair, keyPairFrom, b64url, unb64url } from "./channel.js";
-export { Host, } from "./host.js";
-export { DeviceLink, LINK_WORDS, LinkError, PublicLinkError, pairWithCode, pairWithOffer, pendingGrant, } from "./device.js";
-export { cleanName, decodeCompactOffer, decodeOffer, encodeCompactOffer, encodeOffer, normalizeCode, offerText, parseOffer, parseV1Offer, COMPACT_TAG } from "./pairing.js";
-export { LinkStream, NDJSON_LINE_TOO_LONG, NDJSON_MAX_LINE, WINDOW, ndjson } from "./stream.js";
-export { check, LINK_PROBE, LINK_PROBE_OK } from "./check.js";
-export { browserDeviceStore, browserDeviceStores, secureDeviceStore, secureDeviceStores } from "./stores.js";
-export { migrateGrant, GrantMigrationError } from "./migrate.js";
+export { hostId, keyPair, keyPairFrom, b64url, unb64url } from './channel.js';
+export { Host, } from './host.js';
+export { DeviceLink, LINK_WORDS, LinkError, PublicLinkError, pairWithCode, pairWithOffer, pendingGrant, } from './device.js';
+export { cleanName, decodeCompactOffer, decodeOffer, encodeCompactOffer, encodeOffer, normalizeCode, offerText, parseOffer, parseV1Offer, COMPACT_TAG } from './pairing.js';
+export { LinkStream, NDJSON_LINE_TOO_LONG, NDJSON_MAX_LINE, WINDOW, ndjson } from './stream.js';
+export { check, LINK_PROBE, LINK_PROBE_OK } from './check.js';
+export { browserDeviceStore, browserDeviceStores, secureDeviceStore, secureDeviceStores } from './stores.js';
+export { migrateGrant, GrantMigrationError } from './migrate.js';

package/dist/migrate.js

@@ -1,4 +1,4 @@
-import { b64, b64url, hash, unb64 } from "./channel.js";
+import { b64, b64url, hash, unb64 } from './channel.js';
 /** A migration failure. Neither the message nor the error retains the input or its keys. */
 export class GrantMigrationError extends Error {
     code;

package/dist/node.js

@@ -1,7 +1,7 @@
 // Node only (`@byokit/pair/node`): host key and device grant files. Kept out of the main entry for browsers and React Native.
 import { closeSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, unlinkSync, unwatchFile, watchFile, writeFileSync, writeSync } from 'node:fs';
 import { dirname } from 'node:path';
-import { b64url, keyPair, keyPairFrom, random, unb64url } from "./channel.js";
+import { b64url, keyPair, keyPairFrom, random, unb64url } from './channel.js';
 /** The host's key pair, kept in `path` (0600, in a 0700 folder, written atomically). The first call makes it.
  *  A file that exists but can't be read as a key is never replaced: a new key would silently cut off every paired
  *  device, so it throws and a person decides. */

package/dist/pairing.js

@@ -1,6 +1,6 @@
 // What pairing puts in front of a person: the QR's text (or a link that carries it), and the typed code.
 import b4a from 'b4a';
-import { b64url, hash, random, unb64url } from "./channel.js";
+import { b64url, hash, random, unb64url } from './channel.js';
 const TAG = 'byokit-link:1:';
 const UNSAFE = /[\u0000-\u001f\u007f\u200e\u200f\u202a-\u202e\u2066-\u2069]/gu; // control and direction-flipping characters
 /** A device or host name as a person should see it: no hidden characters, at most 60 of them. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/pair",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Scan a code to pair a phone or browser with the home computer over one encrypted link (Noise IK over WebSocket).",
   "license": "Apache-2.0",
   "type": "module",