dsh-relay-phone 0.18.3 → 0.18.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-relay-phone",
-  "version": "0.18.3",
+  "version": "0.18.4",
   "description": "Remote-control your local DeepSeek Harness from a phone through your own zero-knowledge relay: phone-first page, QR pairing, end-to-end encryption, approvals, full desktop UI fallback.",
   "type": "module",
   "main": "src/index.js",

package/src/relay-client.js

@@ -167,13 +167,13 @@ export class RelayClient extends EventTarget {
         let msg
         try { msg = JSON.parse(data.toString()) } catch { return }
         if (msg.t === 'challenge') {
-          // The relay stores only sha256(key) for a tenant key, so a tenant proof
-          // is keyed by that hash; the legacy admin --key is keyed by the key
-          // itself. Older relays do not send `mode` and only ever meant the admin
-          // derivation, so that stays the fallback.
+          // A tenant proof is keyed by a hash of the relay key (the relay never
+          // stores the key itself); the legacy admin --key is keyed by the key.
+          // Version 2 domain-separates the secret from the key id, and an older
+          // relay sends no `v`, so the v1 derivation stays the fallback.
           const key = String(this.relayKey)
           const secret = msg.mode === 'tenant'
-            ? crypto.createHash('sha256').update(key).digest('hex')
+            ? crypto.createHash('sha256').update(msg.v >= 2 ? `dsh-relay:hmac:v2:${key}` : key).digest('hex')
             : key
           const proof = crypto.createHmac('sha256', secret)
             .update(`${msg.nonce}|${this.identity.id}`).digest('hex')