@threadbase-sh/streamer 1.58.2 → 1.58.3

package/dist/cli.cjs

@@ -149112,7 +149112,7 @@ var PairTokenStore = class {
     };
   }
   /**
-   * Whether `consume` would succeed right now, WITHOUT spending the token.
+   * What `consume` would answer right now, WITHOUT spending the token.
    *
    * Exists so a caller can reject a bad token before doing any work, and still
    * spend the token only once the work has succeeded. A pair token is
@@ -149121,10 +149121,14 @@ var PairTokenStore = class {
    * indistinguishable from an attacker replaying a photographed code, which is
    * the one signal `design.md` §2.6 designates as replay detection.
    *
-   * Advisory, not a reservation: it takes no lock and holds nothing. The
-   * authoritative answer is still `consume`'s.
+   * **Named for its relationship to `consume`, deliberately.** It reserves
+   * nothing and takes no lock, so two callers can both be told `{ ok: true }`
+   * for the same token. A name like `verify` would read as a gate that had
+   * decided something, and inviting a caller to act on this alone is precisely
+   * the misuse the ordering it enables exists to prevent. A reader who sees
+   * `wouldConsume` asks where the `consume` is, which is the right question.
    */
-  verify(token) {
+  wouldConsume(token) {
     const result = this.check(token);
     return result.ok ? { ok: true } : result;
   }
@@ -154212,8 +154216,14 @@ var StreamerServer = class {
       json2(res, 400, { error: "Missing token or clientPublicKey" });
       return;
     }
-    const precheck = this.pairTokens.verify(token);
+    const precheck = this.pairTokens.wouldConsume(token);
     if (!precheck.ok) {
+      if (precheck.reason === "used") {
+        this.log.warn(
+          "[pair] a pair token was replayed. If you did not just pair a device, check the paired-devices list and revoke anything you do not recognise.",
+          { event: "pair.token_replayed", ip }
+        );
+      }
       json2(res, 401, { error: `Pair token ${precheck.reason}` });
       return;
     }