@mega-yfue/eufy-sdk 0.3.0-beta.3 → 0.3.0-beta.4

package/dist/transport/http/mega-client.d.ts

@@ -91,8 +91,9 @@ export declare class SessionExpiredError extends Error {
     /**
      * Whether this rejection landed inside that bar — a token replaced recently and rejected again since.
      *
-     * It says the session is being DISPLACED rather than expiring: something else is signing in on this
-     * account, and replacing the token again only trades one login for another.
+     * That is the shape displacement by another client signed in on this account has, where replacing the
+     * token again only trades one login for another. It is not proof of one, since a cloud refusing to
+     * re-issue the session looks the same.
      */
     readonly contended: boolean;
     constructor(message: string, opts?: {
@@ -212,6 +213,8 @@ export declare class MegaHttpClient {
     private sessionKey?;
     /** Per-host ECDH session keys for non-mega gateways (e.g. eufylife) keyed by host. */
     private readonly sessionKeys;
+    /** The in-flight key exchanges, by host and the token they carry — see {@link ensureSessionKey}. */
+    private readonly keyExchanges;
     /**
      * The held credential. `userId` is the login reply's `ap_cloud_user_id` where it has one — the Anker
      * Passport cloud's id — while `accountUserId` is the eufy account's own `user_id`.
@@ -318,6 +321,8 @@ export declare class MegaHttpClient {
      * so it MUST be reused (don't re-exchange after login).
      */
     ensureSessionKey(targetHost?: string): Promise<SessionEntry>;
+    /** One key exchange against `host`, installed as that host's key. */
+    private exchangeSessionKey;
     /**
      * Signed + encrypted POST. Content-type auto-falls-back (text/plain ↔ json).
      *
@@ -523,8 +528,8 @@ export declare class MegaHttpClient {
      * like the same device — and the cloud keeps one session per device. Each finds its token rejected, replaces
      * it, and evicts the other: an unbounded login war, silent, and repeated logins are exactly what makes an
      * account start demanding captchas. The first replacement is immediate, because a token displaced once is
-     * the ordinary case; a second one soon after is evidence of contention rather than expiry, so the wait grows
-     * and a caller is told the honest reason instead of being served a fight.
+     * the ordinary case; a second one soon after has the shape of contention rather than expiry, so the wait grows
+     * and a caller is told what was seen instead of being served a fight.
      */
     private recoveryDue;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mega-yfue/eufy-sdk",
-  "version": "0.3.0-beta.3",
+  "version": "0.3.0-beta.4",
   "description": "One typed TypeScript client for the Anker eufy v6 cloud — capability-driven devices, realtime events over P2P/MQTT/push, and live media",
   "license": "Apache-2.0",
   "author": "mega-yfue",