@couch-kit/client 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # @couch-kit/client
 
+## 0.7.0
+
+### Minor Changes
+
+- [#16](https://github.com/faluciano/react-native-couch-kit/pull/16) [`86b5ff3`](https://github.com/faluciano/react-native-couch-kit/commit/86b5ff353ce9baac0c48e6a8315bbb57eb155daf) Thanks [@faluciano](https://github.com/faluciano)! - ### Phase 1: Quick Wins — Bug Fixes, Security, and Cleanup
+
+  **Bug fixes:**
+  - Fix `simulate` command: add missing `secret` to JOIN payload so bots are no longer rejected with `INVALID_SECRET`
+  - Send `RECONNECTED` message (instead of `WELCOME`) when a player reconnects, enabling clients to distinguish reconnections
+  - Wire `ASSETS_LOADED` end-to-end: `usePreload` now accepts an optional `sendMessage` callback to notify the host when assets finish loading; host tracks per-player asset status
+  - Include dispatched action(s) in `STATE_UPDATE` broadcasts via an action queue, so clients receive the `action` field
+
+  **Security:**
+  - Replace `derivePlayerId` with SHA-256 (Web Crypto API) — the old implementation exposed the first 16 hex chars of the player secret
+  - Add dual-derivation migration: host tries SHA-256 first, falls back to legacy ID for existing players
+  - Add per-socket rate limiting (60 actions/second) with `RATE_LIMITED` error response
+  - Cache `socketId → playerId` mapping to avoid async derivation in hot paths
+
+  **Cleanup:**
+  - Remove dead code: `buffer-utils.ts`, `declarations.d.ts`, and their test file (TCP WebSocket remnants)
+  - Deprecate unused constants: `MAX_FRAME_SIZE`, `KEEPALIVE_INTERVAL`, `KEEPALIVE_TIMEOUT` (will be removed in next major)
+  - Extract `DEFAULT_DISCONNECT_TIMEOUT` constant (replaces hardcoded 5-minute magic number)
+  - Add configurable `disconnectTimeout` to `GameHostConfig`
+
+  **DX improvements:**
+  - Auto-detect package manager in `bundle` command (checks lock files instead of hardcoding `bun`)
+  - Show build output (`stdio: "inherit"` instead of `"ignore"`)
+  - Log bot WELCOME/ERROR responses in `simulate` command
+
+### Patch Changes
+
+- Updated dependencies [[`86b5ff3`](https://github.com/faluciano/react-native-couch-kit/commit/86b5ff353ce9baac0c48e6a8315bbb57eb155daf)]:
+  - @couch-kit/core@0.6.0
+
+## 0.6.1
+
+### Patch Changes
+
+- [#9](https://github.com/faluciano/react-native-couch-kit/pull/9) [`db8bbc9`](https://github.com/faluciano/react-native-couch-kit/commit/db8bbc95c3a3334c97da3e000b2c28b9c2959fb1) Thanks [@faluciano](https://github.com/faluciano)! - Add publishConfig with public access and provenance attestation to all packages. Add missing prepublishOnly build script to CLI package.
+
+- Updated dependencies [[`db8bbc9`](https://github.com/faluciano/react-native-couch-kit/commit/db8bbc95c3a3334c97da3e000b2c28b9c2959fb1)]:
+  - @couch-kit/core@0.5.1
+
 ## 0.6.0
 
 ### Minor Changes

package/README.md

@@ -28,6 +28,7 @@ Config:
 - `reducer`: `(state, action) => state` (your shared reducer)
 - `initialState`: initial state used until the host hydrates
 - `url?`: explicit WebSocket URL. If omitted, the hook uses `ws(s)://{window.location.hostname}:8082`.
+- `wsPort?`: WebSocket port override (default: auto-detected from page URL using HTTP port + 2)
 - `name?`: player display name (default: `"Player"`)
 - `avatar?`: player avatar emoji (default: `"\u{1F600}"`)
 - `maxRetries?`: maximum reconnection attempts before giving up (default: `5`)

package/dist/index.js

@@ -240,6 +240,7 @@ function useGameClient(config) {
 }
 // src/assets.ts
 import { useState as useState3, useEffect as useEffect3, useRef as useRef3 } from "react";
+import { MessageTypes as MessageTypes3 } from "@couch-kit/core";
 function arraysEqual(a, b) {
   if (a.length !== b.length)
     return false;
@@ -249,10 +250,12 @@ function arraysEqual(a, b) {
   }
   return true;
 }
-function usePreload(assets) {
+function usePreload(assets, sendMessage) {
   const [loaded, setLoaded] = useState3(false);
   const [progress, setProgress] = useState3(0);
   const [failedAssets, setFailedAssets] = useState3([]);
+  const sendMessageRef = useRef3(sendMessage);
+  sendMessageRef.current = sendMessage;
   const prevAssets = useRef3(assets);
   if (!arraysEqual(prevAssets.current, assets)) {
     prevAssets.current = assets;
@@ -263,6 +266,10 @@ function usePreload(assets) {
       setLoaded(true);
       setProgress(100);
       setFailedAssets([]);
+      sendMessageRef.current?.({
+        type: MessageTypes3.ASSETS_LOADED,
+        payload: true
+      });
       return;
     }
     let loadedCount = 0;
@@ -277,6 +284,10 @@ function usePreload(assets) {
       if (loadedCount === total) {
         setFailedAssets([...failed]);
         setLoaded(true);
+        sendMessageRef.current?.({
+          type: MessageTypes3.ASSETS_LOADED,
+          payload: true
+        });
       }
     };
     setLoaded(false);

package/lib/assets.d.ts

@@ -13,5 +13,8 @@ export interface PreloadResult {
  * that failed to load). Failed assets still count toward progress so the hook
  * always reaches 100 % — check `failedAssets.length` to decide how to react.
  */
-export declare function usePreload(assets: string[]): PreloadResult;
+export declare function usePreload(assets: string[], sendMessage?: (msg: {
+    type: string;
+    payload: unknown;
+}) => void): PreloadResult;
 //# sourceMappingURL=assets.d.ts.map

package/lib/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../src/assets.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAcD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAqE1D"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../src/assets.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAcD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EAAE,EAChB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,GAC9D,aAAa,CAkFf"}

package/package.json

@@ -1,6 +1,10 @@
 {
   "name": "@couch-kit/client",
-  "version": "0.6.0",
+  "version": "0.7.0",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "description": "React hooks for phone controllers in Couch Kit party games — WebSocket client and action dispatch",
   "license": "MIT",
   "repository": {
@@ -43,7 +47,7 @@
     "clean": "rm -rf dist lib"
   },
   "dependencies": {
-    "@couch-kit/core": "0.5.0"
+    "@couch-kit/core": "0.6.0"
   },
   "devDependencies": {
     "react": "^18.2.0",

package/src/assets.ts

@@ -1,4 +1,5 @@
 import { useState, useEffect, useRef } from "react";
+import { MessageTypes } from "@couch-kit/core";
 
 export interface PreloadResult {
   /** Whether all assets have finished loading (including failures). */
@@ -28,11 +29,19 @@ function arraysEqual(a: string[], b: string[]): boolean {
  * that failed to load). Failed assets still count toward progress so the hook
  * always reaches 100 % — check `failedAssets.length` to decide how to react.
  */
-export function usePreload(assets: string[]): PreloadResult {
+export function usePreload(
+  assets: string[],
+  sendMessage?: (msg: { type: string; payload: unknown }) => void,
+): PreloadResult {
   const [loaded, setLoaded] = useState(false);
   const [progress, setProgress] = useState(0);
   const [failedAssets, setFailedAssets] = useState<string[]>([]);
 
+  // Stable ref for the callback to avoid re-triggering the effect
+  // when the caller passes a new function reference each render.
+  const sendMessageRef = useRef(sendMessage);
+  sendMessageRef.current = sendMessage;
+
   // Stable reference to the last asset list so we don't depend on
   // `JSON.stringify(assets)` — which creates a new string every render.
   const prevAssets = useRef<string[]>(assets);
@@ -49,6 +58,10 @@ export function usePreload(assets: string[]): PreloadResult {
       setLoaded(true);
       setProgress(100);
       setFailedAssets([]);
+      sendMessageRef.current?.({
+        type: MessageTypes.ASSETS_LOADED,
+        payload: true,
+      });
       return;
     }
 
@@ -64,6 +77,10 @@ export function usePreload(assets: string[]): PreloadResult {
       if (loadedCount === total) {
         setFailedAssets([...failed]);
         setLoaded(true);
+        sendMessageRef.current?.({
+          type: MessageTypes.ASSETS_LOADED,
+          payload: true,
+        });
       }
     };