@decentnetwork/peer 0.1.147 → 0.1.149

package/dist/compat/express.js

@@ -54,6 +54,7 @@ export class LegacyExpressClient {
         await this.#postEncrypted(friendUserId, friendEncrypted);
     }
     async pullOnce() {
+        this.#debugLog(`pullOnce: ${this.#nodes.length} node(s)`);
         if (!this.#nodes.length) {
             return;
         }
@@ -77,6 +78,9 @@ export class LegacyExpressClient {
             }
             const messages = parseExpressResponseFrames(body);
             if (messages.length === 0) {
+                // Silent until now: a body that arrives but parses to nothing looked
+                // exactly like an empty inbox.
+                this.#debugLog(`pullOnce: ${body.length} byte(s) from ${node.host} parsed to 0 frames`);
                 continue;
             }
             this.#debugLog(`pullOnce got ${messages.length} offline frame(s) from ${node.host}:${node.port}`);

package/dist/peer.js

@@ -571,7 +571,13 @@ export class Peer {
         if (this.#started) {
             return;
         }
-        this.#keyPair = await loadOrCreateKeyPair(this.#opts.keyFile);
+        // An explicit keypair wins over the file. A browser holds its key in
+        // IndexedDB and passes it here; loading from keyFile regardless made the
+        // peer run as a DIFFERENT identity than the app thought it had — it
+        // announced under one userid, showed the user another, polled express for
+        // the wrong inbox, and every friend request sent to the visible userid
+        // reached an identity nobody was listening as.
+        this.#keyPair = this.#opts.keyPair ?? await loadOrCreateKeyPair(this.#opts.keyFile);
         this.#bootstrap = new LegacyBootstrapClient({
             nodes: this.#opts.bootstrapNodes,
             keyPair: this.#keyPair,

package/dist/types/peer.d.ts

@@ -1,3 +1,4 @@
+import type { KeyPair } from "../crypto/keypair.js";
 export type CompatibilityMode = "legacy";
 export type NetworkNode = {
     host: string;
@@ -99,6 +100,15 @@ export type PeerOptions = {
      *  waits 30s for a datagram that cannot arrive, and everything downstream
      *  of it never runs: self-announce (so nobody can find this peer) and the
      *  express pull loop (so offline messages are never collected). */
+    /** Use THIS keypair instead of loading one from keyFile.
+     *
+     *  For hosts where the key does not live on a filesystem — a browser holds
+     *  it in IndexedDB. Without it, start() loaded from keyFile regardless and
+     *  the peer ran as a DIFFERENT identity than the app believed it was: it
+     *  announced under one userid while showing the user another, so friend
+     *  requests sent to the visible one reached nobody and offline mail was
+     *  polled for the wrong inbox. */
+    keyPair?: KeyPair;
     tcpOnlyBootstrap?: boolean;
     /** Turn on peer debug logging without env vars — the only route in from a
      *  browser, where process.env does not exist. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.147",
+  "version": "0.1.149",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",