yaver-feedback-react-native 0.9.0 → 0.9.3

package/README.md

@@ -60,7 +60,7 @@ Starting with **0.6.0**, the SDK login screen mirrors the Yaver mobile app: nati
 Drop in `<FeedbackModal />` and the first time a user triggers feedback without a cached session, they get:
 
 1. A full-screen login modal — Apple (native) / Google / GitHub / GitLab / Microsoft (in-app browser) / email + password (inline).
-2. A picker of the machines they can reach — **their own dev boxes** plus **guest-shared machines** (where another user invited them).
+2. A picker of the authenticated account's own dev boxes.
 
 Both screens persist their selection to `AsyncStorage`, so subsequent launches reconnect silently.
 
@@ -89,6 +89,107 @@ function App() {
 
 Shake your phone to open the feedback modal. On mobile the quick-access icon stays hidden until that first shake, then remains tappable for the rest of the session unless the user hides it. For launch, the sheet exposes three actions only: hot reload, vibing, and screenshot & fix.
 
+### Account-scoped Dogfood mode
+
+An app can send only explicitly approved app accounts directly into Vibing,
+while everyone else keeps the normal Feedback sheet:
+
+```tsx
+YaverFeedback.init({
+  dogfood: {
+    enabled: true,
+    currentAccountId: session.user.id,
+    accountIds: ['approved-app-account-id'],
+    label: 'My App',
+    onExit: () => setDogfoodPreference(false),
+  },
+});
+```
+
+The match is exact and fails closed when the current account is absent. The
+small `Y` identifies Dogfood mode; tapping it offers a confirmed exit back to
+Feedback mode. This allowlist controls SDK presentation only—tasks and reloads
+still require the user's normal Yaver authentication.
+
+### Device-enrolled Dogfood for apps without their own OAuth/backend
+
+Mount `FeedbackModal`, then call the reusable wizard from the host app's
+Settings button:
+
+```tsx
+YaverFeedback.beginDogfoodOnboarding({
+  appId: 'io.example.app',
+  label: 'Example',
+  projectName: 'example',
+  framework: 'expo',
+});
+```
+
+The wizard runs Yaver OAuth first, then machine, coding runner/model, project,
+and Browser/Hermes/WebRTC selection. It renders raw build logs and exposes the
+ready preview. The app also creates a random installation ID and an Ed25519 key
+inside SecureStore. The ID is a public handle, not a credential: enrollment
+and each short session require a server challenge signed by the private key.
+An owner approves, cancels, or revokes the installation from Yaver Settings or
+MCP. Re-registering rotates the key/ID, preserves only the logical local slot,
+and supersedes that slot's prior active generation without disabling another
+phone.
+
+Install `expo-secure-store` and `expo-crypto` in Expo hosts. Bare React Native
+hosts may provide a `secureStore` implementation. Runtime/build controls still
+require full Yaver OAuth; the account-free installation token defaults to
+`feedback` + `blackbox` and cannot be rotated into a long-lived owner token.
+
+### Embeddable Dogfood runtime
+
+App owners can also embed the actual source → dev-server → render lifecycle.
+`DogfoodController` is deliberately headless: constructing it does nothing;
+your own button calls `trigger()`, your preview renders `result.url`, and your
+console renders `snapshot.logs`. Retry and partial-session cleanup are handled
+by the controller.
+
+```tsx
+import {
+  DogfoodController,
+  P2PClient,
+  createP2PDogfoodDriver,
+} from 'yaver-feedback-react-native';
+
+const client = new P2PClient(agentUrl, signedInUserToken);
+const dogfood = new DogfoodController(
+  {
+    name: 'My App',
+    workDir: '/workspace/my-app',
+    framework: 'expo',       // also react-native, flutter, vite, next
+    lane: 'browser',         // Hermes is Expo/RN only; Flutter uses browser/WebRTC
+  },
+  createP2PDogfoodDriver(client),
+  {
+    onChange(snapshot) {
+      setPhase(snapshot.phase);
+      setConsoleText(snapshot.logs.map((line) => line.text).join('\n'));
+    },
+  },
+);
+
+// Explicit user intent: call only from your Dogfood button.
+const onDogfoodPress = () => dogfood.trigger().then(({ url }) => setPreviewUrl(url));
+const onRetryPress = () => dogfood.retry();
+const onLeaveScreen = () => dogfood.stop();
+```
+
+The default P2P driver calls the same `/dev/start`, `/dev/status`, `/dev/stop`,
+and `/dev/events` endpoints as Yaver's Projects browser lane. Package-manager
+and compiler output—including `$ npm install`, Expo/Metro, and Flutter web
+output—arrives uncollapsed in `snapshot.logs`. Starting tools requires the
+normal signed-in Yaver user token; a narrow feedback-only SDK token cannot
+spawn processes.
+
+For Yaver itself, installing `yaver-cli` supplies these agent endpoints. The
+native Yaver app checks the selected box for a real Yaver checkout and offers
+`Clone Yaver source` when it is absent; cloning still occurs only after that
+explicit tap.
+
 ### Quick Icon Styling
 
 The quick icon is configurable at compile time through `YaverFeedback.init(...)`, with render-time overrides still available through `<QuickActionIcon />` props when needed. If you do nothing, the SDK uses a high-visibility orange bubble by default so it stays distinct from the blue/indigo FAB styling many mobile apps already have.

package/app.plugin.js

@@ -387,14 +387,135 @@ function withYaverAndroidHotReload(config) {
     },
   ]);
 
-  // Patch MainApplication to register the package and use hot bundle
+  // Patch MainApplication to register the package and use hot bundle.
+  //
+  // MainApplication is Kotlin on React Native 0.73+ (every current Expo
+  // template) and Java before that. The two need genuinely different code —
+  // `new Foo()`, `final`, and `@Override` are all syntax errors in Kotlin —
+  // so branch on the language Expo reports rather than assuming.
   config = withMainApplication(config, (config) => {
-    let contents = config.modResults.contents;
-
-    if (contents.includes("YaverHotReload")) {
+    if (config.modResults.contents.includes("YaverHotReload")) {
       return config;
     }
+    config.modResults.contents =
+      config.modResults.language === "kt"
+        ? patchMainApplicationKotlin(config.modResults.contents)
+        : patchMainApplicationJava(config.modResults.contents);
+    return config;
+  });
+
+  return config;
+}
+
+/**
+ * Insert `snippet` immediately before the closing brace of the method whose
+ * signature contains `anchor`, by matching braces from the method's opening
+ * one.
+ *
+ * The boot guard has to run at the END of onCreate: it touches
+ * reactNativeHost, and reaching that before super.onCreate() and
+ * SoLoader.init() would initialise React before its native libraries are
+ * loaded. Returns the contents unchanged if the anchor isn't found — a
+ * missing safety net is survivable, a corrupted MainApplication is not.
+ */
+function insertAtEndOfMethod(contents, anchor, snippet) {
+  const anchorIdx = contents.indexOf(anchor);
+  if (anchorIdx === -1) return contents;
+  const open = contents.indexOf("{", anchorIdx);
+  if (open === -1) return contents;
+
+  let depth = 0;
+  for (let i = open; i < contents.length; i++) {
+    const ch = contents[i];
+    if (ch === "{") depth++;
+    else if (ch === "}") {
+      depth--;
+      if (depth === 0) {
+        return contents.slice(0, i) + snippet + contents.slice(i);
+      }
+    }
+  }
+  return contents;
+}
 
+/** Kotlin MainApplication (React Native 0.73+). */
+function patchMainApplicationKotlin(contents) {
+  // Imports. Kotlin takes no semicolons.
+  contents = contents.replace(
+    "import com.facebook.react.ReactApplication",
+    "import com.facebook.react.ReactApplication\nimport io.yaver.feedback.YaverHotReloadModule\nimport io.yaver.feedback.YaverHotReloadPackage"
+  );
+
+  // Register the package. Anchor on `return packages` rather than on
+  // `packages.add(` — the template's only occurrence of that is inside a
+  // commented-out example line.
+  contents = contents.replace(
+    /(\n([ \t]*)return packages\n)/,
+    "\n$2packages.add(YaverHotReloadPackage())\n$1"
+  );
+
+  // Load a hot-pushed bundle when one is present. Inserted before
+  // getJSMainModuleName, which every Expo template defines.
+  if (!contents.includes("getJSBundleFile")) {
+    contents = contents.replace(
+      /(\n([ \t]*)override fun getJSMainModuleName\(\))/,
+      `
+$2override fun getJSBundleFile(): String? {
+$2  // Yaver Feedback SDK: load hot-reloaded bundle if available
+$2  val hotBundle = YaverHotReloadModule.getSavedBundleFile(application.applicationContext)
+$2  return hotBundle?.absolutePath ?: super.getJSBundleFile()
+$2}
+$1`
+    );
+  }
+
+  // Crash-revert safety net: clear the boot-attempt counter once the React
+  // context initialises (bundle loaded successfully), AND via a 10-s fallback
+  // in case that listener never fires (e.g. an infinite loop in the root
+  // component). If neither fires, YaverHotReloadModule.getSavedBundleFile()
+  // reverts to the APK-bundled bundle after 3 failed cold starts. Parity with
+  // YaverHotReload.swift on iOS.
+  if (!contents.includes("yaverHotReloadBootListener")) {
+    contents = insertAtEndOfMethod(
+      contents,
+      "override fun onCreate()",
+      `
+    // Yaver Feedback SDK hot-reload crash-revert safety net
+    val yaverHotReloadCtx: android.content.Context = applicationContext
+    android.os.Handler(android.os.Looper.getMainLooper()).postDelayed(
+      { YaverHotReloadModule.markBootSuccessful(yaverHotReloadCtx) },
+      10000
+    )
+    try {
+      // Anonymous object, not a lambda: SAM conversion needs a Java interface
+      // or a Kotlin \`fun interface\`, and as of RN 0.81
+      // com.facebook.react.ReactInstanceEventListener is a plain Kotlin
+      // interface (ReactInstanceEventListener.kt). A lambda there fails
+      // :app:compileReleaseKotlin with "Argument type mismatch: actual type is
+      // 'Function0<Unit>'" — i.e. the host app cannot build a release AAB at
+      // all. The Java path below already did this correctly.
+      reactNativeHost.reactInstanceManager.addReactInstanceEventListener(
+        object : com.facebook.react.ReactInstanceEventListener {
+          override fun onReactContextInitialized(
+            context: com.facebook.react.bridge.ReactContext
+          ) {
+            YaverHotReloadModule.markBootSuccessful(yaverHotReloadCtx)
+          }
+        }
+      )
+    } catch (yaverHotReloadBootListener: Throwable) {
+      // Bridgeless / New Architecture does not expose reactInstanceManager;
+      // the 10-s fallback above still covers us.
+    }
+`
+    );
+  }
+
+  return contents;
+}
+
+/** Java MainApplication (React Native < 0.73). */
+function patchMainApplicationJava(contents) {
     // Add import
     contents = contents.replace(
       "import com.facebook.react.ReactApplication",
@@ -468,11 +589,7 @@ function withYaverAndroidHotReload(config) {
         contents.slice(0, insertionPoint) + bootGuard + contents.slice(insertionPoint);
     }
 
-    config.modResults.contents = contents;
-    return config;
-  });
-
-  return config;
+  return contents;
 }
 
 function withYaverFeedback(config, props) {

package/dist/AuthOverlay.d.ts

@@ -1,16 +1,3 @@
 import React from 'react';
-/**
- * Presentation layer for the SDK's auth + machine-picker modals.
- *
- * Mounts automatically inside `<FeedbackModal />`, so consumers of the SDK
- * get in-app login with no extra wiring. It listens for events emitted by
- * `YaverFeedback.showLogin()` / `showMachinePicker()`:
- *
- *   yaverFeedback:startLogin          → show login modal
- *   yaverFeedback:startMachinePicker  → show machine picker
- *
- * The overlay closes itself once login/pick succeeds, then re-emits
- * `yaverFeedback:startReport` so the user continues straight into the
- * feedback flow they originally triggered.
- */
+/** Owner sign-in and owner-machine selection for the Feedback SDK. */
 export declare const AuthOverlay: React.FC;

package/dist/AuthOverlay.js

@@ -38,74 +38,47 @@ const react_1 = __importStar(require("react"));
 const react_native_1 = require("react-native");
 const LoginScreen_1 = require("./LoginScreen");
 const MachinePickerScreen_1 = require("./MachinePickerScreen");
-const GuestOnboardingScreen_1 = require("./GuestOnboardingScreen");
 const YaverFeedback_1 = require("./YaverFeedback");
 const auth_1 = require("./auth");
-/**
- * Presentation layer for the SDK's auth + machine-picker modals.
- *
- * Mounts automatically inside `<FeedbackModal />`, so consumers of the SDK
- * get in-app login with no extra wiring. It listens for events emitted by
- * `YaverFeedback.showLogin()` / `showMachinePicker()`:
- *
- *   yaverFeedback:startLogin          → show login modal
- *   yaverFeedback:startMachinePicker  → show machine picker
- *
- * The overlay closes itself once login/pick succeeds, then re-emits
- * `yaverFeedback:startReport` so the user continues straight into the
- * feedback flow they originally triggered.
- */
+/** Owner sign-in and owner-machine selection for the Feedback SDK. */
 const AuthOverlay = () => {
     const [loginVisible, setLoginVisible] = (0, react_1.useState)(false);
-    const [guestVisible, setGuestVisible] = (0, react_1.useState)(false);
     const [pickerVisible, setPickerVisible] = (0, react_1.useState)(false);
     const [token, setToken] = (0, react_1.useState)(null);
-    const [pendingInviteCode, setPendingInviteCode] = (0, react_1.useState)(null);
     const activeOverlayRef = (0, react_1.useRef)('none');
     const openLogin = (0, react_1.useCallback)(() => {
         activeOverlayRef.current = 'login';
-        setGuestVisible(false);
         setPickerVisible(false);
         setLoginVisible(true);
     }, []);
-    const openGuest = (0, react_1.useCallback)(() => {
-        activeOverlayRef.current = 'guest';
-        setLoginVisible(false);
-        setPickerVisible(false);
-        setGuestVisible(true);
-    }, []);
     const openPicker = (0, react_1.useCallback)(() => {
         activeOverlayRef.current = 'picker';
         setLoginVisible(false);
-        setGuestVisible(false);
         setPickerVisible(true);
     }, []);
     const closeAll = (0, react_1.useCallback)(() => {
         activeOverlayRef.current = 'none';
         setLoginVisible(false);
-        setGuestVisible(false);
         setPickerVisible(false);
     }, []);
     (0, react_1.useEffect)(() => {
         let mounted = true;
-        (async () => {
-            const cached = await (0, auth_1.getToken)();
+        void (0, auth_1.getToken)().then((cached) => {
             if (mounted && cached)
                 setToken(cached);
-        })();
+        });
         const loginSub = react_native_1.DeviceEventEmitter.addListener('yaverFeedback:startLogin', () => {
-            if (activeOverlayRef.current !== 'none')
-                return;
-            openLogin();
+            if (activeOverlayRef.current === 'none')
+                openLogin();
         });
         const pickerSub = react_native_1.DeviceEventEmitter.addListener('yaverFeedback:startMachinePicker', async () => {
             if (activeOverlayRef.current !== 'none')
                 return;
             const cached = await (0, auth_1.getToken)();
-            if (cached)
+            if (cached) {
                 setToken(cached);
-            if (cached)
                 openPicker();
+            }
         });
         return () => {
             mounted = false;
@@ -113,49 +86,23 @@ const AuthOverlay = () => {
             pickerSub.remove();
         };
     }, [openLogin, openPicker]);
-    const continueAfterAuth = async (newToken, inviteCode) => {
+    const handleLoggedIn = async (newToken) => {
         setToken(newToken);
         await YaverFeedback_1.YaverFeedback.setAuthToken(newToken);
-        const devices = await (0, auth_1.listReachableDevices)(newToken).catch(() => ({ owned: [], shared: [] }));
-        const cleanedInviteCode = (inviteCode ?? '').trim().toUpperCase();
-        if (cleanedInviteCode) {
-            setPendingInviteCode(cleanedInviteCode);
-            openGuest();
-            return;
-        }
-        if (devices.owned.length === 0 && devices.shared.length === 0) {
-            openGuest();
-            return;
-        }
         openPicker();
     };
-    const handleLoggedIn = async (newToken, opts) => {
-        await continueAfterAuth(newToken, opts?.inviteCode);
-    };
     const handleDevicePicked = async (device) => {
         await YaverFeedback_1.YaverFeedback.setPreferredDevice(device.deviceId);
         closeAll();
-        // Continue straight into the feedback flow the user originally triggered.
         react_native_1.DeviceEventEmitter.emit('yaverFeedback:startReport');
     };
     return (<>
       <react_native_1.Modal visible={loginVisible} animationType="slide" presentationStyle="fullScreen" onRequestClose={closeAll}>
-        <LoginScreen_1.YaverLoginScreen onLoggedIn={handleLoggedIn} onCancel={closeAll} initialInviteCode={pendingInviteCode ?? YaverFeedback_1.YaverFeedback.getConfig()?.guestInviteCode}/>
+        <LoginScreen_1.YaverLoginScreen onLoggedIn={handleLoggedIn} onCancel={closeAll}/>
       </react_native_1.Modal>
-
       <react_native_1.Modal visible={pickerVisible && !!token} animationType="slide" presentationStyle="fullScreen" onRequestClose={closeAll}>
         {token && (<MachinePickerScreen_1.YaverMachinePickerScreen token={token} currentDeviceId={YaverFeedback_1.YaverFeedback.getConfig()?.preferredDeviceId} onPick={handleDevicePicked} onCancel={closeAll}/>)}
       </react_native_1.Modal>
-
-      <react_native_1.Modal visible={guestVisible && !!token} animationType="slide" presentationStyle="fullScreen" onRequestClose={closeAll}>
-        {token && (<GuestOnboardingScreen_1.YaverGuestOnboardingScreen token={token} initialInviteCode={pendingInviteCode ?? YaverFeedback_1.YaverFeedback.getConfig()?.guestInviteCode} onContinue={() => {
-                setPendingInviteCode(null);
-                openPicker();
-            }} onCancel={() => {
-                setPendingInviteCode(null);
-                openPicker();
-            }}/>)}
-      </react_native_1.Modal>
     </>);
 };
 exports.AuthOverlay = AuthOverlay;

package/dist/BlackBox.js

@@ -3,6 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BlackBox = void 0;
 const react_native_1 = require("react-native");
 const YaverFeedback_1 = require("./YaverFeedback");
+function unrefTimer(timer) {
+    const maybeNodeTimer = timer;
+    if (typeof maybeNodeTimer.unref === 'function') {
+        maybeNodeTimer.unref();
+    }
+}
 class BlackBox {
     /**
      * Start the black box stream. Call after `YaverFeedback.init()`.
@@ -18,7 +24,7 @@ class BlackBox {
         }
         BlackBox.baseUrl = feedbackConfig.agentUrl.replace(/\/$/, '');
         BlackBox.authToken = feedbackConfig.authToken ?? null;
-        BlackBox.relayPassword = feedbackConfig.relayPassword ?? '';
+        BlackBox.relayPassword = YaverFeedback_1.YaverFeedback.getRelayPassword();
         BlackBox.deviceId = config?.deviceId ?? BlackBox.generateDeviceId();
         BlackBox.appName = config?.appName ?? '';
         BlackBox.flushInterval = config?.flushInterval ?? 2000;
@@ -29,6 +35,7 @@ class BlackBox {
         if (BlackBox.flushTimer)
             clearInterval(BlackBox.flushTimer);
         BlackBox.flushTimer = setInterval(() => BlackBox.flush(), BlackBox.flushInterval);
+        unrefTimer(BlackBox.flushTimer);
         // Log the session start
         BlackBox.push({
             type: 'lifecycle',
@@ -343,6 +350,7 @@ class BlackBox {
             if (BlackBox.started)
                 BlackBox.connectSSE();
         }, 5000);
+        unrefTimer(BlackBox.sseReconnectTimer);
     }
     // ─── Internal ────────────────────────────────────────────────────
     static push(event) {

package/dist/DeployPanel.js

@@ -151,6 +151,45 @@ const DeployPanel = ({ onClose }) => {
         </react_native_1.Text>
       </react_native_1.Pressable>);
     };
+    // First-class App Store screenshots: walk the app's routes on THIS
+    // device, screenshot each, upload to the agent (which runs the ASC
+    // backend). Closes the overlay first so the captures are clean (no
+    // modal in frame), then reports via an alert.
+    const runStoreShots = () => {
+        const cfg = YaverFeedback_1.YaverFeedback.getConfig();
+        const ss = cfg?.storeShots;
+        if (!ss?.routes?.length) {
+            setStatus('Set config.storeShots.routes (and a navigationRef) to enable.');
+            setStatusTone('error');
+            return;
+        }
+        const app = resolveAppSlug();
+        onClose();
+        // Defer so the overlay is fully dismissed before the first capture.
+        setTimeout(async () => {
+            try {
+                const res = await YaverFeedback_1.YaverFeedback.captureStoreScreenshots({
+                    app,
+                    routes: ss.routes,
+                    navigationRef: ss.navigationRef,
+                    screens: ss.screens,
+                    submit: ss.submit,
+                });
+                const msg = res.ok
+                    ? res.submitted
+                        ? 'Submitted for App Store review 🎉'
+                        : res.staged
+                            ? `Uploaded ${res.uploaded} screenshots — staged. One tap left in App Store Connect.`
+                            : `Uploaded ${res.uploaded} App Store screenshots.`
+                    : res.message || 'Capture failed.';
+                react_native_1.Alert.alert('App Store screenshots', msg);
+            }
+            catch (e) {
+                react_native_1.Alert.alert('App Store screenshots', e?.message ?? 'Capture failed.');
+            }
+        }, 500);
+    };
+    const storeShotsEnabled = (YaverFeedback_1.YaverFeedback.getConfig()?.storeShots?.routes?.length ?? 0) > 0;
     const triggerDeploy = async (machine) => {
         if (!options)
             return;
@@ -233,6 +272,13 @@ const DeployPanel = ({ onClose }) => {
           <react_native_1.ActivityIndicator color="rgba(255,255,255,0.6)"/>
         </react_native_1.View>) : error ? (<react_native_1.Text style={styles.error}>{error}</react_native_1.Text>) : options ? (<react_native_1.ScrollView style={styles.list}>{options.devices.map(machineRow)}</react_native_1.ScrollView>) : null}
 
+      {storeShotsEnabled && (<react_native_1.Pressable onPress={runStoreShots} disabled={shipping} style={({ pressed }) => [styles.shotsBtn, pressed && styles.rowPressed]}>
+          <react_native_1.Text style={styles.shotsBtnText}>📸 App Store screenshots</react_native_1.Text>
+          <react_native_1.Text style={styles.shotsBtnSub}>
+            capture this app on-device + upload to App Store Connect
+          </react_native_1.Text>
+        </react_native_1.Pressable>)}
+
       {status && (<react_native_1.Text style={[
                 styles.status,
                 statusTone === 'success' && styles.statusSuccess,
@@ -339,6 +385,25 @@ const styles = react_native_1.StyleSheet.create({
     rowMetaWarning: {
         color: 'rgb(255,178,115)',
     },
+    shotsBtn: {
+        marginTop: 12,
+        paddingVertical: 12,
+        paddingHorizontal: 14,
+        borderRadius: 10,
+        backgroundColor: 'rgba(124,109,255,0.16)',
+        borderWidth: 1,
+        borderColor: 'rgba(124,109,255,0.4)',
+    },
+    shotsBtnText: {
+        color: '#fff',
+        fontSize: 14,
+        fontWeight: '600',
+    },
+    shotsBtnSub: {
+        color: 'rgba(255,255,255,0.55)',
+        fontSize: 12,
+        marginTop: 2,
+    },
     status: {
         color: 'rgba(255,255,255,0.55)',
         fontSize: 12,

package/dist/Discovery.js

@@ -34,6 +34,12 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.YaverDiscovery = void 0;
+function unrefTimer(timer) {
+    const maybeNodeTimer = timer;
+    if (typeof maybeNodeTimer.unref === 'function') {
+        maybeNodeTimer.unref();
+    }
+}
 function getAsyncStorage() {
     try {
         const mod = require('@react-native-async-storage/async-storage');
@@ -173,12 +179,6 @@ class YaverDiscovery {
                 needsAuth: !!d.needsAuth,
                 runnerDown: !!d.runnerDown,
                 lastHeartbeat: d.lastHeartbeat ?? 0,
-                isGuest: !!d.isGuest,
-                hostUserId: d.hostUserId,
-                hostName: d.hostName,
-                hostEmail: d.hostEmail,
-                hostUserIdString: d.hostUserIdString,
-                accessScope: d.accessScope ?? 'owner',
                 quicHost: d.quicHost ?? d.host ?? '',
                 quicPort: d.quicPort ?? 0,
                 httpPort: d.httpPort ?? d.quicPort,
@@ -333,14 +333,15 @@ class YaverDiscovery {
     static async probe(url) {
         const base = url.replace(/\/$/, '');
         const start = Date.now();
+        let timeoutId = null;
         try {
             const controller = new AbortController();
-            const timeoutId = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+            timeoutId = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+            unrefTimer(timeoutId);
             const response = await fetch(`${base}/health`, {
                 method: 'GET',
                 signal: controller.signal,
             });
-            clearTimeout(timeoutId);
             if (!response.ok)
                 return null;
             const latency = Date.now() - start;
@@ -359,6 +360,10 @@ class YaverDiscovery {
         catch {
             return null;
         }
+        finally {
+            if (timeoutId)
+                clearTimeout(timeoutId);
+        }
     }
     static async connect(url) {
         const result = await YaverDiscovery.probe(url);