@decentnetwork/beagle 0.1.68 → 0.1.70

package/config/bootstrap-nodes.yaml

@@ -48,3 +48,16 @@ bootstrapNodes:
   - host: 52.83.191.228
     port: 33445
     pk: 3khtxZo89SBScAMaHhTvD68pPHiKxgZT6hTCSZZVgNEm
+
+# Store-and-forward relays. Shipped for the same reason the bootstraps are:
+# without them a fresh install has no express client at all, so it never
+# collects offline mail and a friend request sent while it was away is never
+# seen. Previously these came only from config.yaml, which a new install does
+# not have — measured 2026-08-30: a browser posted a friend request to express
+# (recipient inbox grew 320 -> 672 bytes) and the recipient, a fresh desktop
+# install, never pulled it.
+expressNodes:
+  - host: lens.beagle.chat
+    port: 443
+    pk: ECbs4GxwGzxGerNkmqDJFibEmevu8jAXqAZtikccvD95
+    tls: true

package/dist/carrier-node.d.ts

@@ -91,9 +91,13 @@ export declare class CarrierNode extends EventEmitter {
     sessionStatus(pubkey: string): unknown;
     dhtHealth(): unknown;
     sendText(userid: string, text: string): Promise<void>;
-    sendFriendRequest(address: string, hello?: string): Promise<void>;
+    sendFriendRequest(address: string, hello?: string, opts?: {
+        force?: boolean;
+    }): Promise<void>;
     acceptFriendRequest(pubkey: string): Promise<void>;
     removeFriend(userid: string): boolean;
+    /** Decline an inbound request and clear what it created in the SDK. */
+    rejectFriendRequest(pubkey: string): void;
     setUserInfo(info: {
         name?: string;
         description?: string;

package/dist/carrier-node.js

@@ -180,8 +180,8 @@ export class CarrierNode extends EventEmitter {
     sendText(userid, text) {
         return this.#require().sendText(userid, text);
     }
-    sendFriendRequest(address, hello) {
-        return this.#require().sendFriendRequest(address, hello);
+    sendFriendRequest(address, hello, opts) {
+        return this.#require().sendFriendRequest(address, hello, opts);
     }
     acceptFriendRequest(pubkey) {
         return this.#require().acceptFriendRequest(pubkey);
@@ -189,6 +189,10 @@ export class CarrierNode extends EventEmitter {
     removeFriend(userid) {
         return this.#require().removeFriend(userid);
     }
+    /** Decline an inbound request and clear what it created in the SDK. */
+    rejectFriendRequest(pubkey) {
+        this.#require().rejectFriendRequest(pubkey);
+    }
     setUserInfo(info) {
         this.#require().setUserInfo(info);
     }

package/dist/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.68";
+window.__DK_UI_VERSION="0.1.70";
 "use strict";
 (() => {
   // packages/beagle-ui/dist/beagle-ui.js

package/dist/embedded-host.js

@@ -474,7 +474,12 @@ export class EmbeddedHost {
                 if (!address)
                     throw new Error("friend-request requires an address");
                 void this.#node
-                    .sendFriendRequest(address, req.hello)
+                    // force: this op only runs because a person pressed Add. The SDK's
+                    // idempotency guard is for automatic retries; here it would silently
+                    // swallow the one case that needs to get through — re-adding someone
+                    // whose earlier request was rejected, where the two sides' notions
+                    // of "friend" have come apart and only a real send can fix it.
+                    .sendFriendRequest(address, req.hello, { force: true })
                     .catch((e) => this.#logger.info(`friend-request to ${address.slice(0, 8)} failed: ${e.message}`));
                 return {};
             }
@@ -499,9 +504,23 @@ export class EmbeddedHost {
                 }
                 return {};
             }
-            case "friends-reject":
+            case "friends-reject": {
+                // Read BEFORE deleting — the pubkey is what the SDK is keyed on.
+                const entry = this.#pending.get(uid);
                 this.#pending.delete(uid);
+                // Tell the PEER too. Dropping only this map left the SDK holding the
+                // friend record the request created, so the next request from that
+                // person hit its "already a friend — treat as reconnection" path and
+                // was swallowed before the app ever saw it. Reject once and they could
+                // never reach you again, with nothing on either side saying why.
+                try {
+                    this.#node.rejectFriendRequest(entry?.pubkey ?? uid);
+                }
+                catch (e) {
+                    this.#logger.info(`reject cleanup failed for ${uid}: ${e.message}`);
+                }
                 return {};
+            }
             case "friends-autoaccept": {
                 // Without an explicit boolean this is a READ — a bare call must never
                 // flip the switch off (Boolean(undefined) === false).

package/dist/node-config.js

@@ -12,16 +12,26 @@ import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, resolve } from "node:path";
 import yaml from "js-yaml";
-function shippedBootstraps() {
+function shippedConfig() {
     try {
         const file = resolve(dirname(fileURLToPath(import.meta.url)), "..", "config", "bootstrap-nodes.yaml");
-        const parsed = yaml.load(readFileSync(file, "utf-8"));
-        return (parsed?.bootstrapNodes ?? []).filter((n) => n?.host && n?.pk);
+        return (yaml.load(readFileSync(file, "utf-8")) ?? {});
     }
     catch {
-        return [];
+        return {};
     }
 }
+function shippedBootstraps() {
+    return (shippedConfig().bootstrapNodes ?? []).filter((n) => n?.host && n?.pk);
+}
+/** Store-and-forward relays, shipped like the bootstraps.
+ *
+ *  These used to come ONLY from config.yaml, which a fresh install does not
+ *  have — so a new desktop had no express client, never pulled offline mail,
+ *  and silently missed every friend request sent while it was away. */
+function shippedExpress() {
+    return (shippedConfig().expressNodes ?? []).filter((n) => n?.host && n?.pk);
+}
 function valid(nodes) {
     return Array.isArray(nodes) && nodes.length > 0 && nodes.every((n) => n && typeof n.host === "string" && typeof n.pk === "string");
 }
@@ -39,7 +49,8 @@ export function loadNodeConfig(configDir) {
             const merged = valid(fromFile) ? [...fromFile, ...extra] : shipped;
             return {
                 bootstrapNodes: merged.length ? merged : shipped,
-                expressNodes: cfg.carrier?.expressNodes,
+                // Config first, shipped defaults when it says nothing.
+                expressNodes: cfg.carrier?.expressNodes?.length ? cfg.carrier.expressNodes : shippedExpress(),
                 nickname: cfg.node?.name,
                 statusMessage: cfg.node?.statusMessage,
                 autoAccept: cfg.friends?.autoAccept ?? true,
@@ -49,7 +60,9 @@ export function loadNodeConfig(configDir) {
             // Malformed config must not stop the app — fall through to defaults.
         }
     }
-    return { bootstrapNodes: shipped, autoAccept: true };
+    // No config.yaml at all — a fresh install. It still needs the express
+    // relays, or it will never collect a friend request sent while it was away.
+    return { bootstrapNodes: shipped, expressNodes: shippedExpress(), autoAccept: true };
 }
 /** Persist the auto-accept switch into config.yaml, preserving everything
  *  else in the file. Without this the runtime toggle lasted until the next

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/beagle",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "Beagle — P2P chat, file transfer and calls for regular users, on the Decent Network. No admin privilege required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,7 +27,7 @@
   "dependencies": {
     "@decentnetwork/chat-components": "^0.1.3",
     "@decentnetwork/lan": "^0.1.283",
-    "@decentnetwork/peer": "0.1.151",
+    "@decentnetwork/peer": "0.1.152",
     "@decentnetwork/peer-webrtc": "^0.2.16",
     "js-yaml": "^4.1.0",
     "yargs": "^17.7.2"