echoclaw-relay-agent 0.19.3 → 0.19.4

package/dist/RelayAgent.js

@@ -602,18 +602,19 @@ export class RelayAgent extends EventEmitter {
                 this._identityExchanged = true;
                 return;
             }
-            // Remove early handler before entering wait — prevents both handlers from
-            // processing the same message simultaneously (Reviewer #2, #3 finding).
-            this.removeListener('message', earlyHandler);
-            // Use early-captured message if available, otherwise wait with timeout
-            const peerIdentity = earlyIdentity ?? await this._waitForIdentityExchange(10000);
-            // Respond with our own identity
+            // SYMMETRIC EXCHANGE: Send our identity FIRST, then wait for peer's.
+            // Both sides send immediately upon pairing — eliminates "who sends first" race.
             const myPubKeyBase64 = toBase64(ed.publicKeyRaw);
             await this.send({
                 type: 'identity_exchange',
                 ed25519_pubkey: myPubKeyBase64,
                 device_id: identity.deviceId,
             });
+            // Remove early handler before entering wait — prevents both handlers from
+            // processing the same message simultaneously.
+            this.removeListener('message', earlyHandler);
+            // Use early-captured message if available, otherwise wait with timeout
+            const peerIdentity = earlyIdentity ?? await this._waitForIdentityExchange(15000);
             // Persist peer's public key
             await this.identityStore.updatePeer(peerIdentity.ed25519_pubkey);
             sessionData.peerPublicKeyRaw = peerIdentity.ed25519_pubkey;

package/dist/RelayClient.js

@@ -286,11 +286,20 @@ export class RelayClient extends EventEmitter {
             await this.onPaired(result, 'paired');
         }
         catch (err) {
-            // Identity exchange failed on fresh pairing — tear down transport to
-            // prevent leaking an authenticated-but-unusable WebSocket, then re-throw.
-            // Do NOT emit('error') here — the throw propagates to connect() caller.
-            this.transport?.disconnect();
-            throw err;
+            // Identity exchange failed — non-fatal for fresh pairing.
+            // ECDH succeeded, encrypted channel works. Identity exchange only enables
+            // V2 identity-based reconnect. Keep connection alive, emit warning.
+            const isIdentityErr = err?.message?.includes('Identity exchange');
+            if (isIdentityErr) {
+                console.warn('[RelayClient] Identity exchange failed (non-fatal):', err?.message);
+                this.emit('error', Object.assign(new Error(`Identity exchange failed: ${err?.message}`), { name: 'IdentityExchangeError' }));
+                // Connection is usable — don't tear down
+            }
+            else {
+                // Non-identity errors are still fatal
+                this.transport?.disconnect();
+                throw err;
+            }
         }
     }
     async resumeSession(session) {
@@ -577,7 +586,8 @@ export class RelayClient extends EventEmitter {
                 this._identityExchanged = true;
                 return; // finally will clean up earlyHandler
             }
-            // Send our Ed25519 public key to the agent (through E2E encrypted DATA channel)
+            // SYMMETRIC EXCHANGE: Send our identity FIRST, then wait for peer's.
+            // Both sides send immediately upon pairing — eliminates "who sends first" race.
             const myPubKeyBase64 = toBase64(ed.publicKeyRaw);
             await this.send({
                 type: 'identity_exchange',
@@ -586,8 +596,8 @@ export class RelayClient extends EventEmitter {
             });
             // Remove early handler before entering wait — prevents dual listeners
             this.removeListener('message', earlyHandler);
-            // Use early-captured message if available, otherwise wait with timeout
-            const peerIdentity = earlyIdentity ?? await this._waitForIdentityExchange(10000);
+            // Use early-captured message if available, otherwise wait with timeout (15s for setup)
+            const peerIdentity = earlyIdentity ?? await this._waitForIdentityExchange(15000);
             // Persist peer's public key
             await this.identityStore.updatePeer(peerIdentity.ed25519_pubkey);
             sessionData.peerPublicKeyRaw = peerIdentity.ed25519_pubkey;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "echoclaw-relay-agent",
-  "version": "0.19.3",
+  "version": "0.19.4",
   "description": "EchoClaw Relay Connection — E2E encrypted relay transport, pairing, and session management",
   "type": "module",
   "main": "./dist/index.js",