@decentnetwork/lan 0.1.147 → 0.1.149

package/dist/cli/commands.js

@@ -1400,8 +1400,19 @@ export async function cmdProxyRouter(args) {
                 exits.push(ex);
             }
         }
-        defaultRegion = routesFile.default ?? "direct";
+        // --all forces a FULL tunnel even with a routes.yaml: unmatched hosts go
+        // through an exit region instead of DIRECT, so nothing can leak to the
+        // local (out-of-region) IP. Previously --all was silently ignored on this
+        // file-driven path. Prefer the file's declared default, else the first
+        // region (e.g. china).
+        // --all OVERRIDES the file's default (e.g. `default: direct`) — route every
+        // unmatched host through the first exit region instead of leaking direct.
+        defaultRegion = args.all
+            ? (regions[0]?.name ?? "direct")
+            : (routesFile.default ?? "direct");
         console.log(`Loaded ${regions.length} region(s) from ${routesPath}`);
+        if (args.all)
+            console.log(`--all: unmatched hosts → region [${defaultRegion}] (full tunnel, no DIRECT leak)`);
     }
     else if (args.all) {
         // ---- --all: every discovered peer through exits, single region --------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.147",
+  "version": "0.1.149",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",