@net-mesh/browser 0.41.1 → 0.43.0

package/CHANGELOG.md

@@ -14,6 +14,30 @@ missing method at the call site rather than at install time. Unlike
 `@net-mesh/sdk`, this package never depends on `@net-mesh/core` — see
 the README on why it is a sibling package rather than a sub-path.
 
+## 0.43.0 — one identity per origin, bounded streams
+
+- **`connect()` locks its identity.** With a custodial identity it takes
+  a per-identity Web Lock, so a second tab running the same identity is
+  refused with `IdentityError` until the first closes. `openSession()`
+  elects under the same lock. A page that runs several nodes with one
+  identity on purpose passes `lockIdentity: false`.
+- **An unread `LeafStream` is bounded.** Before a consumer attaches it
+  holds at most 1,024 frames or 1 MiB, dropping the oldest;
+  `droppedBeforeConsumer` counts them. It used to buffer every frame,
+  and the store, netcode and region links never read theirs.
+- **Store handles are capped at 16 per peer.**
+- **A follower tab's org calls have a deadline,** across the open and
+  every stream leg; a proxied call carries the absolute deadline.
+- **A leader change no longer strands a store:** session streams retire
+  with the reopenable "stale stream handle" error, and
+  `joinStore().reconnect()` closes the stream it replaces.
+- **`lobby.kick` reads node ids in decimal,** and the join key reaches
+  `authorize` on every read decision.
+- **The STUN probe's `notRun`** now also covers gathering that completes
+  beside a public host candidate with nothing reflexive and no "no
+  response" report (an engine may suppress that reflexive candidate).
+  Anywhere else it is silence, and blocked UDP is still `udp-blocked`.
+
 ## 0.41.1 — two pages can connect to each other at once
 
 - **`connectPeer` from both sides no longer cancels both attempts.** When

package/README.md

@@ -583,6 +583,18 @@ are the *same* player — and a player can't join itself. (Without it, every tab
 player.) To test with two players on one machine, use two browser profiles, or
 two different browsers.
 
+**A second tab with the same identity is refused.** Two live nodes under one
+identity would evict each other at the anchor, so `connect()` holds a Web Lock
+for its identity while the node is open: a second tab's `connect()` rejects
+with an `IdentityError` (kind `identity`) until the first node closes. Catch it
+and tell the player the game is already open, or run the page through
+`openSession()`, which elects one node per origin and shares it across tabs.
+A `connect()` tab and an `openSession()` tab given the same `entitySecretHex`
+contend for the same lock, so they cannot both run the identity either.
+(`lockIdentity: false` opts out. Where Web Locks are unavailable `connect()`
+takes no lock, and `openSession()` is not a fallback there: it needs Web Locks
+to elect a leader, so it rejects with an `IdentityError`.)
+
 **Announcements expire.** A host that announces once disappears from searches
 a few seconds later. Keep re-announcing on a timer, as in step 3a.