@decentnetwork/lan 0.1.230 → 0.1.232

package/dist/cli/commands.js

@@ -381,13 +381,27 @@ export async function cmdStatus(args) {
         return;
     }
     const config = await ConfigLoader.load(configPath);
+    let liveTun = null;
+    try {
+        const res = await ipcCall(config, { op: "diag" }, 5_000);
+        if (res.ok)
+            liveTun = (res.data?.tun) ?? null;
+    }
+    catch {
+        // daemon not running — fall back to config below
+    }
+    const running = !!liveTun;
     console.log(`Decent AgentNet`);
     console.log(`Node: ${config.node.name}`);
     console.log(`Namespace: ${config.node.namespace}`);
-    console.log(`Subnet: ${config.network.subnet}`);
-    console.log(`Interface: ${config.network.interface}`);
-    console.log(`Virtual IP: ${config.network.ip}`);
-    console.log(`Bootstrap: ${config.carrier.bootstrapNodes.join(", ")}`);
+    console.log(`Daemon: ${running ? "running" : "not running (values below are configured, not live)"}`);
+    console.log(`Subnet: ${liveTun?.subnet ?? config.network.subnet}`);
+    console.log(`Interface: ${liveTun?.name ?? config.network.interface}${running ? "" : " (configured)"}`);
+    console.log(`Virtual IP: ${liveTun?.ip ?? config.network.ip}${running ? "" : " (configured)"}`);
+    if (running && liveTun?.ip && liveTun.ip !== config.network.ip) {
+        console.log(`  note: config.yaml still says ${config.network.ip} — the daemon's address wins`);
+    }
+    console.log(`Bootstrap: ${config.carrier.bootstrapNodes.length} nodes`);
     // Show IPAM peers count
     const ipam = await Ipam.loadOrCreate(config.paths.ipamFile, config.node.namespace);
     console.log(`Peers configured: ${ipam.getPeers().length}`);

package/dist/config/loader.d.ts

@@ -22,7 +22,34 @@ export interface DefaultDora {
     name: string;
     userid: string;
     address: string;
+    /** The IP band this registry allocates from, `<start>-<end>`. A dora is
+     *  authoritative for exactly this range and nothing else, so the bands
+     *  MUST NOT overlap: two registries handing out the same address give two
+     *  nodes the same virtual IP. This is real data, not a comment — see
+     *  `findDoraSegmentOverlaps`, which fails a startup check on collisions. */
+    segment?: string;
 }
+/** Parse `"<start>-<end>"` into numeric bounds. */
+export declare function parseDoraSegment(segment?: string): {
+    start: number;
+    end: number;
+} | null;
+/**
+ * Every pair of registries whose allocation bands intersect.
+ *
+ * Segment uniqueness used to be a convention in a comment, enforced by
+ * nothing: the allocator even defaulted to the whole /16, so a
+ * misconfigured registry silently claimed its siblings' ranges and handed
+ * out addresses inside them. Two nodes then hold the same virtual IP and
+ * routing to either is a coin flip. Making it checkable is what turns the
+ * convention into an invariant.
+ */
+export declare function findDoraSegmentOverlaps(doras: DefaultDora[]): Array<{
+    a: string;
+    b: string;
+    segmentA: string;
+    segmentB: string;
+}>;
 export declare const DEFAULT_DORAS: DefaultDora[];
 export declare const DEFAULT_DORA_USERID: string;
 export declare const DEFAULT_DORA_ADDRESS: string;

package/dist/config/loader.js

@@ -47,10 +47,63 @@ const DEFAULT_EXPRESS_NODES = [
     { host: "tokyo.fi.chat", port: 8443, pk: "EzpBtoUkjeMQfuLGWwTUbvzCn9rK4J648Ziy21EKxefo" },
 ];
 const DEFAULT_DORAS_FALLBACK = [
-    { name: "dora-beagle", userid: "AxKFEZFLDi23EmnJFNP6gjUM4CaNMPfWUvbFR9ixtMBN", address: "NsuN81dZdEoyvwEFgWaHkT8SPJB6UWeRmdYcCGFV5CdbbPXoK2RM" }, // 10.86.64.10–127.254
-    { name: "dora-sh", userid: "GMEMLmCWLMBK6BJiMkbLPNkEjF4S2xRf1SqR9hM8fWV3", address: "ajg1ZMBw86UyujmEJzqKSCbi3wwEtg6tdGFTdESakyqujyxmqJZK" }, // 10.86.128.10–191.254
-    { name: "dora-tokyo", userid: "AB6BZfbrTFWw9eUoVpHdJqhhRnY8bTttp4CHTZ2Xfzxi", address: "MAW2eBqBuQ6SmaXTrnZRRayQjAj3aLatwPy4xmBp7spnJeV569op" }, // 10.86.192.10–254.254
+    { name: "dora-beagle", userid: "AxKFEZFLDi23EmnJFNP6gjUM4CaNMPfWUvbFR9ixtMBN", address: "NsuN81dZdEoyvwEFgWaHkT8SPJB6UWeRmdYcCGFV5CdbbPXoK2RM", segment: "10.86.64.10-10.86.127.254" },
+    { name: "dora-sh", userid: "GMEMLmCWLMBK6BJiMkbLPNkEjF4S2xRf1SqR9hM8fWV3", address: "ajg1ZMBw86UyujmEJzqKSCbi3wwEtg6tdGFTdESakyqujyxmqJZK", segment: "10.86.128.10-10.86.191.254" },
+    { name: "dora-tokyo", userid: "AB6BZfbrTFWw9eUoVpHdJqhhRnY8bTttp4CHTZ2Xfzxi", address: "MAW2eBqBuQ6SmaXTrnZRRayQjAj3aLatwPy4xmBp7spnJeV569op", segment: "10.86.192.10-10.86.254.254" },
 ];
+/** `10.86.64.10` → 176177162, or null when unparseable. */
+function ipToNum(ip) {
+    const parts = ip.trim().split(".");
+    if (parts.length !== 4)
+        return null;
+    let n = 0;
+    for (const p of parts) {
+        const v = Number(p);
+        if (!Number.isInteger(v) || v < 0 || v > 255)
+            return null;
+        n = n * 256 + v;
+    }
+    return n;
+}
+/** Parse `"<start>-<end>"` into numeric bounds. */
+export function parseDoraSegment(segment) {
+    if (!segment)
+        return null;
+    const [a, b] = segment.split("-");
+    if (!a || !b)
+        return null;
+    const start = ipToNum(a);
+    const end = ipToNum(b);
+    if (start === null || end === null || start > end)
+        return null;
+    return { start, end };
+}
+/**
+ * Every pair of registries whose allocation bands intersect.
+ *
+ * Segment uniqueness used to be a convention in a comment, enforced by
+ * nothing: the allocator even defaulted to the whole /16, so a
+ * misconfigured registry silently claimed its siblings' ranges and handed
+ * out addresses inside them. Two nodes then hold the same virtual IP and
+ * routing to either is a coin flip. Making it checkable is what turns the
+ * convention into an invariant.
+ */
+export function findDoraSegmentOverlaps(doras) {
+    const parsed = doras
+        .map((d) => ({ name: d.name, segment: d.segment, range: parseDoraSegment(d.segment) }))
+        .filter((d) => !!d.range);
+    const clashes = [];
+    for (let i = 0; i < parsed.length; i++) {
+        for (let j = i + 1; j < parsed.length; j++) {
+            const x = parsed[i];
+            const y = parsed[j];
+            if (x.range.start <= y.range.end && y.range.start <= x.range.end) {
+                clashes.push({ a: x.name, b: y.name, segmentA: x.segment, segmentB: y.segment });
+            }
+        }
+    }
+    return clashes;
+}
 function loadDefaultDoras() {
     // dist/config/loader.js → package root is two levels up; data file ships
     // at <pkg>/config/default-doras.yaml. Same path holds when running from
@@ -59,8 +112,16 @@ function loadDefaultDoras() {
         const file = resolve(dirname(new URL(import.meta.url).pathname), "../../config/default-doras.yaml");
         const parsed = yaml.load(readFileSync(file, "utf-8"));
         const doras = (parsed?.doras ?? []).filter((d) => d && d.userid && d.address);
-        if (doras.length > 0)
+        if (doras.length > 0) {
+            // Shipping overlapping segments would hand two nodes the same virtual
+            // IP across the federation. Loud on stderr rather than thrown: a bad
+            // data file must not stop an existing install from starting.
+            for (const c of findDoraSegmentOverlaps(doras)) {
+                console.error(`[dora] SEGMENT OVERLAP: ${c.a} (${c.segmentA}) and ${c.b} (${c.segmentB}) ` +
+                    `allocate from the same addresses — they will hand out duplicate virtual IPs.`);
+            }
             return doras;
+        }
     }
     catch {
         // missing/unreadable/malformed — use the fallback below

package/dist/console/console.js

@@ -692,19 +692,57 @@ var DEFAULT_EXPRESS_NODES = [
   { host: "tokyo.fi.chat", port: 8443, pk: "EzpBtoUkjeMQfuLGWwTUbvzCn9rK4J648Ziy21EKxefo" }
 ];
 var DEFAULT_DORAS_FALLBACK = [
-  { name: "dora-beagle", userid: "AxKFEZFLDi23EmnJFNP6gjUM4CaNMPfWUvbFR9ixtMBN", address: "NsuN81dZdEoyvwEFgWaHkT8SPJB6UWeRmdYcCGFV5CdbbPXoK2RM" },
-  // 10.86.64.10–127.254
-  { name: "dora-sh", userid: "GMEMLmCWLMBK6BJiMkbLPNkEjF4S2xRf1SqR9hM8fWV3", address: "ajg1ZMBw86UyujmEJzqKSCbi3wwEtg6tdGFTdESakyqujyxmqJZK" },
-  // 10.86.128.10–191.254
-  { name: "dora-tokyo", userid: "AB6BZfbrTFWw9eUoVpHdJqhhRnY8bTttp4CHTZ2Xfzxi", address: "MAW2eBqBuQ6SmaXTrnZRRayQjAj3aLatwPy4xmBp7spnJeV569op" }
-  // 10.86.192.10–254.254
+  { name: "dora-beagle", userid: "AxKFEZFLDi23EmnJFNP6gjUM4CaNMPfWUvbFR9ixtMBN", address: "NsuN81dZdEoyvwEFgWaHkT8SPJB6UWeRmdYcCGFV5CdbbPXoK2RM", segment: "10.86.64.10-10.86.127.254" },
+  { name: "dora-sh", userid: "GMEMLmCWLMBK6BJiMkbLPNkEjF4S2xRf1SqR9hM8fWV3", address: "ajg1ZMBw86UyujmEJzqKSCbi3wwEtg6tdGFTdESakyqujyxmqJZK", segment: "10.86.128.10-10.86.191.254" },
+  { name: "dora-tokyo", userid: "AB6BZfbrTFWw9eUoVpHdJqhhRnY8bTttp4CHTZ2Xfzxi", address: "MAW2eBqBuQ6SmaXTrnZRRayQjAj3aLatwPy4xmBp7spnJeV569op", segment: "10.86.192.10-10.86.254.254" }
 ];
+function ipToNum(ip) {
+  const parts = ip.trim().split(".");
+  if (parts.length !== 4) return null;
+  let n = 0;
+  for (const p of parts) {
+    const v = Number(p);
+    if (!Number.isInteger(v) || v < 0 || v > 255) return null;
+    n = n * 256 + v;
+  }
+  return n;
+}
+function parseDoraSegment(segment) {
+  if (!segment) return null;
+  const [a, b] = segment.split("-");
+  if (!a || !b) return null;
+  const start = ipToNum(a);
+  const end = ipToNum(b);
+  if (start === null || end === null || start > end) return null;
+  return { start, end };
+}
+function findDoraSegmentOverlaps(doras) {
+  const parsed = doras.map((d) => ({ name: d.name, segment: d.segment, range: parseDoraSegment(d.segment) })).filter((d) => !!d.range);
+  const clashes = [];
+  for (let i = 0; i < parsed.length; i++) {
+    for (let j = i + 1; j < parsed.length; j++) {
+      const x = parsed[i];
+      const y = parsed[j];
+      if (x.range.start <= y.range.end && y.range.start <= x.range.end) {
+        clashes.push({ a: x.name, b: y.name, segmentA: x.segment, segmentB: y.segment });
+      }
+    }
+  }
+  return clashes;
+}
 function loadDefaultDoras() {
   try {
     const file = resolve(dirname(new URL(import.meta.url).pathname), "../../config/default-doras.yaml");
     const parsed = yaml.load(readFileSync(file, "utf-8"));
     const doras = (parsed?.doras ?? []).filter((d) => d && d.userid && d.address);
-    if (doras.length > 0) return doras;
+    if (doras.length > 0) {
+      for (const c of findDoraSegmentOverlaps(doras)) {
+        console.error(
+          `[dora] SEGMENT OVERLAP: ${c.a} (${c.segmentA}) and ${c.b} (${c.segmentB}) allocate from the same addresses \u2014 they will hand out duplicate virtual IPs.`
+        );
+      }
+      return doras;
+    }
   } catch {
   }
   return DEFAULT_DORAS_FALLBACK;

package/dist/daemon/server.d.ts

@@ -63,6 +63,10 @@ export declare class DaemonServer {
     private isRunning;
     private tunRebuildInProgress;
     private lastTunRebuildMs;
+    /** Devices whose close was DELIBERATE (IP swap / rebuild). Their "closed"
+     *  event must not trigger crash-recovery — that race spawned a second
+     *  helper holding the same address (two utuns, half the traffic lost). */
+    private retiredTuns;
     private statusTimer?;
     private pidFile?;
     private configDir;

package/dist/daemon/server.js

@@ -109,6 +109,10 @@ export class DaemonServer {
     isRunning = false;
     tunRebuildInProgress = false;
     lastTunRebuildMs = 0;
+    /** Devices whose close was DELIBERATE (IP swap / rebuild). Their "closed"
+     *  event must not trigger crash-recovery — that race spawned a second
+     *  helper holding the same address (two utuns, half the traffic lost). */
+    retiredTuns = new WeakSet();
     statusTimer;
     pidFile;
     configDir;
@@ -137,6 +141,9 @@ export class DaemonServer {
         this.logger.info(`Reconfiguring TUN: allocated IP changed ${currentIp} -> ${newIp}`);
         const ifname = this.tunDevice.getInterface();
         try {
+            // Mark this close as intentional so attachTunRecovery doesn't treat it
+            // as a crash and spawn a competing helper (see attachTunRecovery).
+            this.retiredTuns.add(this.tunDevice);
             await this.tunDevice.close();
             await this.routeManager.cleanup(ifname, this.config.network.subnet, currentIp);
             this.tunDevice = new TunDevice({
@@ -174,6 +181,15 @@ export class DaemonServer {
         device.once("closed", () => {
             if (!this.isRunning || this.useMockTun)
                 return;
+            // An INTENTIONAL close (reconfigureTunTo swapping to a dora-assigned IP,
+            // or rebuildTun retiring us) must not trigger recovery. Without this
+            // guard the two paths race: reconfigure closes the old device, recovery
+            // sees "closed" and rebuilds a SECOND helper one second after
+            // reconfigure opened its own — two utun devices then hold the same
+            // address, the kernel routes into whichever won, and half the traffic
+            // (observed: ICMP, while TCP survived) vanishes into the orphan.
+            if (this.retiredTuns.has(device))
+                return;
             const delay = Date.now() - this.lastTunRebuildMs < 10_000 ? 5_000 : 1_000;
             this.logger.warn(`TUN closed unexpectedly — rebuilding data plane in ${delay}ms`);
             setTimeout(() => void this.rebuildTun(), delay);
@@ -187,6 +203,17 @@ export class DaemonServer {
         this.lastTunRebuildMs = Date.now();
         try {
             const ip = this.tunDevice.getConfig().ip;
+            // Retire the device we're replacing BEFORE opening its successor. On a
+            // genuine helper crash this is a no-op; in any other path it kills the
+            // old helper process, which otherwise lives on holding a second utun
+            // with our address and steals routed traffic from the new device.
+            this.retiredTuns.add(this.tunDevice);
+            try {
+                await this.tunDevice.close();
+            }
+            catch {
+                // already dead — the common case for a real crash
+            }
             const dev = new TunDevice({
                 config: { name: this.config.network.interface, ip, subnet: this.config.network.subnet },
                 mockMode: false,
@@ -408,6 +435,10 @@ export class DaemonServer {
                         const realName = f.name && f.name !== "@decentnetwork/peer" ? f.name : undefined;
                         return {
                             userid: uid,
+                            // Full Carrier address (pubkey+nospam+checksum) — the form a NEW
+                            // node needs to friend this peer. userid alone can't be added,
+                            // so the UI surfaces this for "recommend a friend to a friend".
+                            address: f.address,
                             alias: meta?.alias,
                             name: meta?.alias || realName || uid,
                             status: f.status,
@@ -954,6 +985,11 @@ export class DaemonServer {
             // hands us a different IP, the backgrounded bootstrap below swaps the
             // TUN via reconfigureTunTo.
             this.routeManager = new RouteManager();
+            // A previous instance that was killed rather than stopped leaves its
+            // virtual address aliased on lo0. dora usually hands us a DIFFERENT
+            // address now, and the stale one keeps answering TCP over loopback while
+            // ICMP to it black-holes — a contradiction that reads as a broken tunnel.
+            await this.routeManager.sweepStaleAddresses(this.config.network.subnet, tunIp);
             this.tunDevice = new TunDevice({
                 config: {
                     name: this.config.network.interface,

package/dist/dora/dora-integration.d.ts

@@ -82,6 +82,26 @@ export declare class DoraIntegration {
      * stored it in the friend record when the original (failed) request
      * went out, so we don't need it threaded through config.
      */
+    /**
+     * Make sure a friend-request has gone out to EVERY configured dora, so the
+     * node connects to all of them (and thus reads the full federated roster),
+     * not just the subset it was already friends with. This is the fix for the
+     * dora-world split: a node that lists dora A + B but is only friends with A
+     * reads only A's segment and can't resolve peers registered with B.
+     *
+     * Address resolution order for a userid:
+     *   1. an existing friend record (persisted address, for a dora that was
+     *      friended before — e.g. a private dora added via `friend-request`),
+     *   2. the baked-in DEFAULT_DORAS address (beagle/sh/tokyo).
+     * A configured dora that is neither a known friend nor a default has no
+     * address form and cannot be auto-friended from its userid alone — the
+     * operator must `agentnet friend-request <address>` it once; after that its
+     * address persists in the friend record and this method keeps it healed.
+     *
+     * Idempotent: skips doras already online (never re-handshakes a healthy
+     * session); a re-sent request to an offline/requested dora just re-asserts.
+     */
+    private ensureDoraFriendships;
     private resendStuckFriendRequests;
     private scheduleBootstrapRetry;
     /**

package/dist/dora/dora-integration.js

@@ -12,6 +12,7 @@
  * peers need to manually share ipam.yaml entries.
  */
 import { DoraClient, AllRegistriesUnavailableError } from "@decentnetwork/dora";
+import { DEFAULT_DORAS } from "../config/loader.js";
 import { Logger } from "../utils/logger.js";
 export class DoraIntegration {
     opts;
@@ -66,6 +67,15 @@ export class DoraIntegration {
             this.logger.warn("dora.userids empty — skipping dora registration");
             return this.opts.preferredIp ?? "";
         }
+        // Ensure we have a FRIENDSHIP to every configured dora — not just the
+        // one that happened to get friended at `agentnet init`. Without this a
+        // node silently connects to only a SUBSET of its dora.userids (whichever
+        // it was already friends with), so it reads only that dora's slice of the
+        // federation and can't resolve/ping peers registered with a sibling dora
+        // (the "friend online, chat works, but ping fails / no IP" split). Runs on
+        // every start + bootstrap retry until registered; skips already-online
+        // doras, so it never spams a healthy session.
+        this.ensureDoraFriendships();
         // Kick session establishment with each registry so the first call
         // doesn't fail on cold-start cookie/handshake delay. peer-manager
         // swallows the "friend offline" error internally.
@@ -216,6 +226,62 @@ export class DoraIntegration {
      * stored it in the friend record when the original (failed) request
      * went out, so we don't need it threaded through config.
      */
+    /**
+     * Make sure a friend-request has gone out to EVERY configured dora, so the
+     * node connects to all of them (and thus reads the full federated roster),
+     * not just the subset it was already friends with. This is the fix for the
+     * dora-world split: a node that lists dora A + B but is only friends with A
+     * reads only A's segment and can't resolve peers registered with B.
+     *
+     * Address resolution order for a userid:
+     *   1. an existing friend record (persisted address, for a dora that was
+     *      friended before — e.g. a private dora added via `friend-request`),
+     *   2. the baked-in DEFAULT_DORAS address (beagle/sh/tokyo).
+     * A configured dora that is neither a known friend nor a default has no
+     * address form and cannot be auto-friended from its userid alone — the
+     * operator must `agentnet friend-request <address>` it once; after that its
+     * address persists in the friend record and this method keeps it healed.
+     *
+     * Idempotent: skips doras already online (never re-handshakes a healthy
+     * session); a re-sent request to an offline/requested dora just re-asserts.
+     */
+    ensureDoraFriendships() {
+        const userids = this.opts.config.userids ?? [];
+        if (userids.length === 0)
+            return;
+        const peer = this.opts.peerManager;
+        let friends = [];
+        try {
+            friends = peer.getFriends();
+        }
+        catch {
+            return;
+        }
+        const byId = new Map();
+        for (const f of friends) {
+            if (f.userid)
+                byId.set(f.userid, f);
+            if (f.pubkey)
+                byId.set(f.pubkey, f);
+        }
+        const defaultAddr = new Map(DEFAULT_DORAS.map((d) => [d.userid, d.address]));
+        for (const id of userids) {
+            const f = byId.get(id);
+            if (f && f.status === "online")
+                continue; // already connected — leave it
+            const address = f?.address ?? defaultAddr.get(id);
+            if (!address) {
+                this.logger.debug(`dora ${id.slice(0, 12)}…: no known address (not a default dora, not yet a friend) — run 'agentnet friend-request <address>' once to connect it`);
+                continue;
+            }
+            this.logger.info(`Ensuring dora friendship: ${id.slice(0, 12)}… (status=${f?.status ?? "not-a-friend"})`);
+            peer
+                .sendFriendRequest(address, `decentlan: connect all doras (${this.opts.nodeName})`)
+                .catch((err) => {
+                this.logger.debug(`ensureDoraFriendship ${id.slice(0, 12)}: ${err instanceof Error ? err.message : err}`);
+            });
+        }
+    }
     resendStuckFriendRequests() {
         const userids = this.opts.config.userids ?? [];
         const peer = this.opts.peerManager;

package/dist/tun/route-manager.d.ts

@@ -38,6 +38,22 @@ export declare class RouteManager {
      * configureTun; without that, the alias persists across daemon
      * restarts (harmless, but leaks state).
      */
+    /**
+     * Drop leftover virtual addresses from a PREVIOUS daemon instance.
+     *
+     * `cleanup()` only runs on a graceful shutdown. Kill the daemon — `service
+     * uninstall`, SIGKILL, a crash — and its lo0 alias plus host route for the
+     * old address survive. dora hands out a different address on the next
+     * registration, so the host ends up answering on BOTH: the dead address
+     * still completes TCP connections via loopback while ICMP to it goes
+     * nowhere. That contradiction ("telnet works but ping doesn't") is what
+     * makes the leak so expensive to diagnose — it reads as a broken tunnel.
+     *
+     * Called at startup with the address we're about to use; everything else in
+     * our subnet is a leftover and goes. Best-effort throughout: a host with no
+     * leftovers must still start normally.
+     */
+    sweepStaleAddresses(subnet: string, keepIp: string): Promise<void>;
     cleanup(name: string, subnet: string, ip?: string): Promise<void>;
     /**
      * Enable IP forwarding (Linux only)

package/dist/tun/route-manager.js

@@ -225,6 +225,56 @@ export class RouteManager {
      * configureTun; without that, the alias persists across daemon
      * restarts (harmless, but leaks state).
      */
+    /**
+     * Drop leftover virtual addresses from a PREVIOUS daemon instance.
+     *
+     * `cleanup()` only runs on a graceful shutdown. Kill the daemon — `service
+     * uninstall`, SIGKILL, a crash — and its lo0 alias plus host route for the
+     * old address survive. dora hands out a different address on the next
+     * registration, so the host ends up answering on BOTH: the dead address
+     * still completes TCP connections via loopback while ICMP to it goes
+     * nowhere. That contradiction ("telnet works but ping doesn't") is what
+     * makes the leak so expensive to diagnose — it reads as a broken tunnel.
+     *
+     * Called at startup with the address we're about to use; everything else in
+     * our subnet is a leftover and goes. Best-effort throughout: a host with no
+     * leftovers must still start normally.
+     */
+    async sweepStaleAddresses(subnet, keepIp) {
+        if (this.platform !== "darwin")
+            return; // lo0-alias leak is macOS-specific
+        const prefix = `${this.subnetBase(subnet).split(".").slice(0, 2).join(".")}.`;
+        let routes = "";
+        try {
+            routes = this.commandRunner("netstat -rn -f inet");
+        }
+        catch {
+            return; // can't enumerate — nothing safe to do
+        }
+        const stale = new Set();
+        for (const line of routes.split("\n")) {
+            // Host routes we install look like: "10.86.64.11  127.0.0.1  UGHS  lo0"
+            const m = /^(\d+\.\d+\.\d+\.\d+)\s+127\.0\.0\.1\s+\S*H\S*\s+lo0/.exec(line.trim());
+            const addr = m?.[1];
+            if (addr && addr.startsWith(prefix) && addr !== keepIp)
+                stale.add(addr);
+        }
+        for (const addr of stale) {
+            try {
+                this.exec(`route -n delete -host ${addr}`);
+            }
+            catch {
+                // already gone
+            }
+            try {
+                this.exec(`ifconfig lo0 -alias ${addr}`);
+            }
+            catch {
+                // not aliased
+            }
+            this.logger.info(`Removed stale virtual address ${addr} left by a previous daemon`);
+        }
+    }
     async cleanup(name, subnet, ip) {
         try {
             this.logger.info(`Cleaning up TUN and routes`);

package/dist/ui/desktop/app.js

@@ -15,6 +15,9 @@ const ICON_PATHS = {
   check: '<path d="M20 6 9 17l-5-5"/>',
   checkCheck: '<path d="M18 6 7 17l-5-5"/><path d="m22 10-7.6 7.6L13 16"/>',
   copy: '<rect x="9" y="9" width="12" height="12" rx="2.4"/><path d="M6 15H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h8a2 2 0 0 1 2 2v1"/>',
+  // Three linked nodes — an address is for passing ON to someone else, so it
+  // must not wear the same glyph as the userid's plain copy.
+  share: '<circle cx="18" cy="5" r="2.6"/><circle cx="6" cy="12" r="2.6"/><circle cx="18" cy="19" r="2.6"/><path d="M8.3 10.8l7.4-4.3M8.3 13.2l7.4 4.3"/>',
   refresh: '<path d="M21 12a9 9 0 1 1-2.6-6.3"/><path d="M21 4v4.5h-4.5"/>',
   clock: '<circle cx="12" cy="12" r="9.5"/><path d="M12 7.5V12l3 2"/>',
   edit: '<path d="M11 4H6a2 2 0 0 0-2 2v12a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2v-5"/><path d="M18.5 2.5a2.12 2.12 0 0 1 3 3L12 15l-4 1 1-4Z"/>',
@@ -500,7 +503,7 @@ function StatusDot({ online, size = 8 }) {
     boxShadow: online ? "0 0 0 3px color-mix(in oklab, var(--online), transparent 80%)" : "none"
   } });
 }
-function Mono({ children, dim, size = 12.5, copy, title }) {
+function Mono({ children, dim, size = 12.5, copy, title, icon = "copy" }) {
   const [hit, setHit] = React.useState(false);
   const onCopy = (e) => {
     e.stopPropagation();
@@ -518,7 +521,7 @@ function Mono({ children, dim, size = 12.5, copy, title }) {
     alignItems: "center",
     gap: 5,
     whiteSpace: "nowrap"
-  } }, children, copy && /* @__PURE__ */ React.createElement(Icon, { name: hit ? "check" : "copy", size: 12, stroke: 2, color: hit ? "var(--online)" : "var(--faint)" }));
+  } }, children, copy && /* @__PURE__ */ React.createElement(Icon, { name: hit ? "check" : icon, size: 12, stroke: 2, color: hit ? "var(--online)" : "var(--faint)" }));
 }
 function shortKey(s, head = 6, tail = 5) {
   if (!s || s.length <= head + tail + 1) return s;
@@ -1760,7 +1763,18 @@ function Conversation({ T, peer, lang, thread: threadProp, onSend, onSendFile, o
       onDrop
     },
     dragOver && /* @__PURE__ */ React.createElement("div", { style: { position: "absolute", inset: 0, zIndex: 30, background: "rgba(91,140,255,0.10)", border: "2px dashed var(--accent)", borderRadius: 12, display: "flex", alignItems: "center", justifyContent: "center", pointerEvents: "none", fontFamily: "var(--mono)", fontSize: 14, color: "var(--accent)" } }, lang === "zh" ? "\u677E\u5F00\u53D1\u9001\u6587\u4EF6" : "Drop to send file"),
-    /* @__PURE__ */ React.createElement("div", { style: { height: 60, flexShrink: 0, borderBottom: "1px solid var(--line)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px", background: "var(--panel)" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer, size: 34, radius: 8 }), /* @__PURE__ */ React.createElement("div", { style: { minWidth: 0 } }, /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: peer.alias ? "var(--ui)" : "var(--mono)", fontSize: 15, fontWeight: 700, color: "var(--text)" } }, peer.alias || shortKey(peer.userId, 10, 6)), peer.agent && /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, "agent"), /* @__PURE__ */ React.createElement(RouteTag, { peer })), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8, marginTop: 2 } }, /* @__PURE__ */ React.createElement(Mono, { size: 11.5, dim: true, copy: peer.userId, title: peer.userId }, shortKey(peer.userId, 10, 6)), /* @__PURE__ */ React.createElement("span", { style: { color: "var(--line)" } }, "\xB7"), /* @__PURE__ */ React.createElement("button", { onClick: () => onOpenNet(peer), style: { background: "none", border: "none", cursor: "pointer", padding: 0, fontFamily: "var(--mono)", fontSize: 11.5, color: "var(--accent)", display: "inline-flex", alignItems: "center", gap: 4 } }, /* @__PURE__ */ React.createElement(Icon, { name: "network", size: 12, stroke: 2 }), " ", peer.ip))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), onCall && /* @__PURE__ */ React.createElement(Btn, { icon: "phone", title: T && T.audioCall || "Audio call", onClick: () => onCall(peer.userId, false) }), onCall && /* @__PURE__ */ React.createElement(Btn, { icon: "video", title: T && T.videoCall || "Video call", onClick: () => onCall(peer.userId, true) }), onSendRtcFile && /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(
+    /* @__PURE__ */ React.createElement("div", { style: { height: 60, flexShrink: 0, borderBottom: "1px solid var(--line)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px", background: "var(--panel)" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer, size: 34, radius: 8 }), /* @__PURE__ */ React.createElement("div", { style: { minWidth: 0 } }, /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: peer.alias ? "var(--ui)" : "var(--mono)", fontSize: 15, fontWeight: 700, color: "var(--text)" } }, peer.alias || shortKey(peer.userId, 10, 6)), peer.agent && /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, "agent"), /* @__PURE__ */ React.createElement(RouteTag, { peer })), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8, marginTop: 2 } }, /* @__PURE__ */ React.createElement(Mono, { size: 11.5, dim: true, copy: peer.userId, title: peer.userId }, shortKey(peer.userId, 10, 6)), /* @__PURE__ */ React.createElement("span", { style: { color: "var(--line)" } }, "\xB7"), /* @__PURE__ */ React.createElement("button", { onClick: () => onOpenNet(peer), title: T && T.openNet || "Network view", style: { background: "none", border: "none", cursor: "pointer", padding: 0, color: "var(--accent)", display: "inline-flex", alignItems: "center" } }, /* @__PURE__ */ React.createElement(Icon, { name: "network", size: 12, stroke: 2 })), /* @__PURE__ */ React.createElement(Mono, { size: 11.5, dim: true, copy: peer.ip, title: peer.ip }, peer.ip), peer.address && /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("span", { style: { color: "var(--line)" } }, "\xB7"), /* @__PURE__ */ React.createElement(
+      Mono,
+      {
+        size: 11.5,
+        dim: true,
+        icon: "share",
+        copy: peer.address,
+        title: `${T && T.copyAddr || "Copy address \u2014 share it so someone else can add this friend"}
+${peer.address}`
+      },
+      shortKey(peer.address, 8, 6)
+    )))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), onCall && /* @__PURE__ */ React.createElement(Btn, { icon: "phone", title: T && T.audioCall || "Audio call", onClick: () => onCall(peer.userId, false) }), onCall && /* @__PURE__ */ React.createElement(Btn, { icon: "video", title: T && T.videoCall || "Video call", onClick: () => onCall(peer.userId, true) }), onSendRtcFile && /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(
       "input",
       {
         ref: rtcFileRef,
@@ -2958,14 +2972,9 @@ function DkApp() {
     if (!activeId || !text || !text.trim()) return;
     dkApi.send(activeId, text.trim()).then(() => data.loadThread(activeId)).then(data.refresh);
   };
-  const onSendFile = (file, onProgress) => {
+  const onSendFile = (file) => {
     if (!activeId || !file) return Promise.resolve({ ok: false });
-    return rtcFileCtl.sendFile(activeId, file, onProgress).then((r) => {
-      if (r && r.ok && r.via === "webrtc") {
-        return dkApi.send(activeId, (t.lang === "zh" ? "\u5DF2\u901A\u8FC7 WebRTC \u53D1\u9001\u6587\u4EF6: " : "sent file via WebRTC: ") + file.name).then(() => ({ ok: true, via: "webrtc" }));
-      }
-      return dkApi.sendFile(activeId, file);
-    }).then((r) => {
+    return dkApi.sendFile(activeId, file).then((r) => {
       data.loadThread(activeId);
       data.refresh();
       return r;
@@ -3001,7 +3010,7 @@ function DkApp() {
     { id: "network", icon: "network", label: T.network },
     { id: "profile", icon: "userRound", label: T.profile }
   ];
-  return /* @__PURE__ */ React.createElement("div", { style: { ...vars, "--row-pad": rowPad, position: "fixed", inset: 0, display: "flex", background: "var(--bg)", color: "var(--text)", fontFamily: "var(--ui)" } }, /* @__PURE__ */ React.createElement("div", { style: { width: 68, flexShrink: 0, borderRight: "1px solid var(--line)", background: "var(--rail)", display: "flex", flexDirection: "column", alignItems: "center", padding: "14px 0", gap: 8 } }, /* @__PURE__ */ React.createElement("div", { style: { width: 38, height: 38, borderRadius: 10, background: "var(--accent)", display: "flex", alignItems: "center", justifyContent: "center", marginBottom: 8 } }, /* @__PURE__ */ React.createElement(Icon, { name: "terminal", size: 20, color: "#fff", stroke: 2.2 })), nav.map((n) => /* @__PURE__ */ React.createElement(RailBtn, { key: n.id, icon: n.icon, label: n.label, active: tab === n.id, soon: n.soon, onClick: () => setTab(n.id) })), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement("div", { style: { position: "relative" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 36, radius: 9 }))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1, minWidth: 0, minHeight: 0, display: "flex", flexDirection: "column" } }, /* @__PURE__ */ React.createElement("div", { style: { height: 46, flexShrink: 0, borderBottom: "1px solid var(--line)", background: "var(--panel)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px" } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 14, fontWeight: 700, letterSpacing: -0.3, color: "var(--text)" } }, "beagle"), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12, color: "var(--faint)" } }, "\xB7 ", nav.find((n) => n.id === tab).label.toLowerCase()), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, me.channel, " \xB7 lan ", me.lanVer), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 7, padding: "0 4px" } }, /* @__PURE__ */ React.createElement(StatusDot, { online: me.online }), /* @__PURE__ */ React.createElement(Mono, { size: 12.5, copy: me.ip }, me.ip)), /* @__PURE__ */ React.createElement("span", { style: { width: 1, height: 22, background: "var(--line)" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 26, radius: 7 }), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, fontWeight: 600, color: "var(--text)" } }, me.name))), tab === "chat" && /* @__PURE__ */ React.createElement(ChatTab, { T, lang: t.lang, peers, requests, activeId, thread: data.threads[activeId], onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread: () => activeId && data.loadThread(activeId) }), tab === "network" && /* @__PURE__ */ React.createElement(NetworkTab, { T, me, peers, exits, activeExit, reqCount: requests.length, onSetExit, onOpenChat }), tab === "profile" && /* @__PURE__ */ React.createElement(ProfileTab, { T, me, onEdit })), /* @__PURE__ */ React.createElement(TweaksPanel, null, /* @__PURE__ */ React.createElement(TweakSection, { label: t.lang === "zh" ? "\u5916\u89C2" : "Appearance" }), /* @__PURE__ */ React.createElement(
+  return /* @__PURE__ */ React.createElement("div", { style: { ...vars, "--row-pad": rowPad, position: "fixed", inset: 0, display: "flex", background: "var(--bg)", color: "var(--text)", fontFamily: "var(--ui)" } }, /* @__PURE__ */ React.createElement("div", { style: { width: 68, flexShrink: 0, borderRight: "1px solid var(--line)", background: "var(--rail)", display: "flex", flexDirection: "column", alignItems: "center", padding: "14px 0", gap: 8 } }, /* @__PURE__ */ React.createElement("div", { style: { width: 38, height: 38, borderRadius: 10, background: "var(--accent)", display: "flex", alignItems: "center", justifyContent: "center", marginBottom: 8 } }, /* @__PURE__ */ React.createElement(Icon, { name: "terminal", size: 20, color: "#fff", stroke: 2.2 })), nav.map((n) => /* @__PURE__ */ React.createElement(RailBtn, { key: n.id, icon: n.icon, label: n.label, active: tab === n.id, soon: n.soon, onClick: () => setTab(n.id) })), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement("div", { style: { position: "relative" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 36, radius: 9 }))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1, minWidth: 0, minHeight: 0, display: "flex", flexDirection: "column" } }, /* @__PURE__ */ React.createElement("div", { style: { height: 46, flexShrink: 0, borderBottom: "1px solid var(--line)", background: "var(--panel)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px" } }, /* @__PURE__ */ React.createElement("svg", { width: 20, height: 20, viewBox: "0 0 24 24", fill: "none", stroke: "var(--accent)", strokeWidth: 2.2, strokeLinecap: "round", strokeLinejoin: "round", style: { display: "block", flexShrink: 0 } }, /* @__PURE__ */ React.createElement("path", { d: "m4.5 17 6-6-6-6" }), /* @__PURE__ */ React.createElement("path", { d: "M12 18.5h7.5" })), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 14, fontWeight: 700, letterSpacing: -0.3, color: "var(--text)" } }, "beagle"), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12, color: "var(--faint)" } }, "\xB7 ", nav.find((n) => n.id === tab).label.toLowerCase()), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, me.channel, " \xB7 lan ", me.lanVer), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 7, padding: "0 4px" } }, /* @__PURE__ */ React.createElement(StatusDot, { online: me.online }), /* @__PURE__ */ React.createElement(Mono, { size: 12.5, copy: me.ip }, me.ip)), /* @__PURE__ */ React.createElement("span", { style: { width: 1, height: 22, background: "var(--line)" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 26, radius: 7 }), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, fontWeight: 600, color: "var(--text)" } }, me.name))), tab === "chat" && /* @__PURE__ */ React.createElement(ChatTab, { T, lang: t.lang, peers, requests, activeId, thread: data.threads[activeId], onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread: () => activeId && data.loadThread(activeId) }), tab === "network" && /* @__PURE__ */ React.createElement(NetworkTab, { T, me, peers, exits, activeExit, reqCount: requests.length, onSetExit, onOpenChat }), tab === "profile" && /* @__PURE__ */ React.createElement(ProfileTab, { T, me, onEdit })), /* @__PURE__ */ React.createElement(TweaksPanel, null, /* @__PURE__ */ React.createElement(TweakSection, { label: t.lang === "zh" ? "\u5916\u89C2" : "Appearance" }), /* @__PURE__ */ React.createElement(
     TweakRadio,
     {
       label: t.lang === "zh" ? "\u4E3B\u9898" : "Theme",

package/dist/ui/desktop/index.html

@@ -3,7 +3,8 @@
 <head>
 <meta charset="UTF-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-<title>Beagle</title>
+<title>Beagle Chat</title>
+<link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Crect width='24' height='24' rx='5' fill='%230d1117'/%3E%3Cg fill='none' stroke='%233fb950' stroke-width='2.2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='m4.5 17 6-6-6-6'/%3E%3Cpath d='M12 18.5h7.5'/%3E%3C/g%3E%3C/svg%3E" />
 <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700;800&display=swap" rel="stylesheet" />
 <style>
   * { box-sizing: border-box; }

package/dist/ui/server.js

@@ -574,6 +574,9 @@ export function startFriendUi(opts) {
                         id: uid,
                         alias: f.alias || realName || null,
                         userId: uid,
+                        // Shareable Carrier address so a friend can be recommended to
+                        // another friend (userid only works once already friends).
+                        address: f.address || "",
                         online,
                         via: online ? viaFromTransport(sess?.transport) : null,
                         ping: null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.230",
+  "version": "0.1.232",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",