@decentnetwork/lan 0.1.187 → 0.1.189

package/dist/cli/commands.js

@@ -169,6 +169,8 @@ export async function cmdInit(args) {
         }
     }
     console.log(`\nNext: sudo agentnet service install   # or 'agentnet up --real-tun' to run in foreground`);
+    console.log(`Optional — watch China video (CCTV etc.) through a China exit:`);
+    console.log(`  agentnet proxy trust-ca && agentnet proxy router --hls-accel   # see docs/CCTV-VIEWING.md`);
 }
 /**
  * Show identity information.
@@ -2166,6 +2168,7 @@ WantedBy=multi-user.target
         execSync("systemctl enable --now agentnet");
         console.log(`Installed ${unitPath} and started agentnet.service.`);
         console.log(`Logs: journalctl -u agentnet -f`);
+        console.log(`Optional — watch China video (CCTV etc.): agentnet proxy trust-ca && agentnet proxy router --hls-accel  (docs/CCTV-VIEWING.md)`);
         return;
     }
     if (process.platform === "darwin") {
@@ -2225,6 +2228,7 @@ WantedBy=multi-user.target
         }
         execSync(`launchctl load ${plistPath}`);
         console.log(`Installed ${plistPath} and started com.decentlan.agentnet.`);
+        console.log(`Optional — watch China video (CCTV etc.): agentnet proxy trust-ca && agentnet proxy router --hls-accel  (docs/CCTV-VIEWING.md)`);
         console.log(`Logs: tail -f /var/log/agentnet.log`);
         return;
     }

package/dist/daemon/server.js

@@ -664,43 +664,51 @@ export class DaemonServer {
                 selfRestart: async () => {
                     // Detach a child process that waits briefly and then re-execs
                     // the same argv we were started with. Inherits privileges
-                    // (root daemon → root child, no sudo prompt). The current
-                    // process exits cleanly after responding to the IPC call so
-                    // the child can rebind the TUN. The brief sleep gives the
-                    // current process time to flush its IPC response, close
-                    // sockets, and release the pidfile/TUN before the new
-                    // process tries to claim them.
+                    // (root daemon → root child, no sudo prompt).
+                    //
+                    // IMPORTANT: run the normal graceful shutdown before spawning
+                    // the replacement. Peer.stop() notifies established friends that
+                    // this net_crypto session is going away; skipping it strands the
+                    // remote side on our old ephemeral session key. Presence then
+                    // remains online while chat/TUN packets from the restarted process
+                    // are rejected until the remote daemon is restarted too.
                     const { spawn } = await import("child_process");
                     const argv = process.argv.slice();
                     const node = argv.shift();
                     this.logger.info(`Self-restart requested via IPC — relaunching ${node} ${argv.join(" ")}`);
                     // Schedule shutdown for after the IPC response goes out. The
-                    // 50ms timeout is plenty for the response to leave; the
-                    // child's own 1s sleep below is the real arbiter.
+                    // 50ms timeout lets the response leave before cleanup closes IPC.
                     setTimeout(() => {
-                        try {
-                            // sh -c so we can shell-quote argv safely and use sleep.
-                            // The trailing `&` puts the relauncher into the
-                            // background of sh — sh then exits — and Node's detached
-                            // flag reparents the relauncher to PID 1. Result: a
-                            // fully detached new daemon that inherits our uid/gid.
-                            const cmd = `sleep 1 && exec ${shellQuote([node, ...argv])}`;
-                            const child = spawn("sh", ["-c", cmd], {
-                                detached: true,
-                                stdio: "ignore",
-                                env: process.env,
-                            });
-                            child.unref();
-                        }
-                        catch (err) {
-                            this.logger.error(`Self-restart spawn failed: ${err instanceof Error ? err.message : err}`);
-                        }
-                        // Give the child its 1s head-start, then exit so the
-                        // pidfile and TUN are released before the relauncher tries
-                        // to grab them.
-                        setTimeout(() => process.exit(0), 200);
+                        void (async () => {
+                            try {
+                                await this.stop();
+                            }
+                            catch (err) {
+                                // cleanup() is already best-effort component by component,
+                                // but do not make an upgrade impossible if an unexpected
+                                // shutdown error escapes it.
+                                this.logger.error(`Self-restart cleanup failed: ${err instanceof Error ? err.message : err}`);
+                            }
+                            try {
+                                // sh -c so we can shell-quote argv safely and use sleep.
+                                // Node's detached flag reparents the relauncher to PID 1.
+                                // At this point stop() has released IPC, TUN and the pidfile;
+                                // the extra delay also lets relay writes flush remotely.
+                                const cmd = `sleep 1 && exec ${shellQuote([node, ...argv])}`;
+                                const child = spawn("sh", ["-c", cmd], {
+                                    detached: true,
+                                    stdio: "ignore",
+                                    env: process.env,
+                                });
+                                child.unref();
+                            }
+                            catch (err) {
+                                this.logger.error(`Self-restart spawn failed: ${err instanceof Error ? err.message : err}`);
+                            }
+                            setTimeout(() => process.exit(0), 200);
+                        })();
                     }, 50);
-                    return { scheduledMs: 250, argv: [node, ...argv] };
+                    return { scheduledMs: 1500, argv: [node, ...argv] };
                 },
                 diag: async () => {
                     // Snapshot of everything an operator needs to debug why

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.187",
+  "version": "0.1.189",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -79,7 +79,7 @@
   },
   "dependencies": {
     "@decentnetwork/dora": "^0.1.13",
-    "@decentnetwork/peer": "^0.1.92",
+    "@decentnetwork/peer": "^0.1.93",
     "@decentnetwork/peer-webrtc": "^0.2.10",
     "ink": "^5.2.1",
     "js-yaml": "^4.1.0",