@decentnetwork/lan 0.1.233 → 0.1.235

package/dist/cli/commands.js

@@ -17,6 +17,7 @@ import yaml from "js-yaml";
 import { startMultiExitRouter } from "../proxy/multi-exit-router.js";
 import { resolveEgressBindIp } from "../proxy/egress.js";
 import { startFriendUi } from "../ui/server.js";
+import { installLogThrottle } from "../utils/log-throttle.js";
 /**
  * Refuse to open a second Carrier peer with this identity if the
  * daemon is already running with the same keypair. Two peers sharing
@@ -381,31 +382,50 @@ export async function cmdStatus(args) {
         return;
     }
     const config = await ConfigLoader.load(configPath);
-    let liveTun = null;
+    let diag = null;
     try {
         const res = await ipcCall(config, { op: "diag" }, 5_000);
         if (res.ok)
-            liveTun = (res.data?.tun) ?? null;
+            diag = res.data ?? null;
     }
     catch {
         // daemon not running — fall back to config below
     }
-    const running = !!liveTun;
     console.log(`Decent AgentNet`);
     console.log(`Node: ${config.node.name}`);
     console.log(`Namespace: ${config.node.namespace}`);
-    console.log(`Daemon: ${running ? "running" : "not running (values below are configured, not live)"}`);
-    console.log(`Subnet: ${liveTun?.subnet ?? config.network.subnet}`);
-    console.log(`Interface: ${liveTun?.name ?? config.network.interface}${running ? "" : " (configured)"}`);
-    console.log(`Virtual IP: ${liveTun?.ip ?? config.network.ip}${running ? "" : " (configured)"}`);
-    if (running && liveTun?.ip && liveTun.ip !== config.network.ip) {
+    if (!diag) {
+        console.log(`Daemon: not running — everything below is CONFIGURED, not live`);
+        console.log(`Subnet: ${config.network.subnet}`);
+        console.log(`Interface: ${config.network.interface}`);
+        console.log(`Virtual IP: ${config.network.ip}`);
+        console.log(`Bootstrap: ${config.carrier.bootstrapNodes.length} nodes`);
+        const ipamOffline = await Ipam.loadOrCreate(config.paths.ipamFile, config.node.namespace);
+        console.log(`Peers (on disk): ${ipamOffline.getPeers().length}`);
+        const policyOffline = await Policy.loadOrCreate(config.paths.policyFile);
+        console.log(`ACL rules: ${policyOffline.getRules().length}`);
+        console.log(`\nStart it with 'agentnet up --real-tun' (or 'agentnet service install').`);
+        return;
+    }
+    const friends = diag.friends ?? [];
+    const online = friends.filter((f) => f.status === "online" || f.status === "connected").length;
+    const s = diag.stats ?? {};
+    console.log(`Daemon: running`);
+    if (diag.identity?.userid)
+        console.log(`Userid: ${diag.identity.userid}`);
+    if (diag.identity?.address)
+        console.log(`Address: ${diag.identity.address}`);
+    console.log(`Subnet: ${diag.tun?.subnet ?? config.network.subnet}`);
+    console.log(`Interface: ${diag.tun?.name ?? config.network.interface}`);
+    console.log(`Virtual IP: ${diag.tun?.ip ?? "(no TUN)"}`);
+    if (diag.tun?.ip && diag.tun.ip !== config.network.ip) {
         console.log(`  note: config.yaml still says ${config.network.ip} — the daemon's address wins`);
     }
     console.log(`Bootstrap: ${config.carrier.bootstrapNodes.length} nodes`);
-    // Show IPAM peers count
-    const ipam = await Ipam.loadOrCreate(config.paths.ipamFile, config.node.namespace);
-    console.log(`Peers configured: ${ipam.getPeers().length}`);
-    // Show ACL rules count
+    console.log(`Peers (roster): ${diag.ipam?.length ?? 0}`);
+    console.log(`Friends: ${friends.length} (${online} online)`);
+    console.log(`Sessions: ${s.activeSessions ?? 0} active`);
+    console.log(`Traffic: ${s.packetsForwarded ?? 0} sent / ${s.packetsReceived ?? 0} received / ${s.packetsDropped ?? 0} dropped`);
     const policy = await Policy.loadOrCreate(config.paths.policyFile);
     console.log(`ACL rules: ${policy.getRules().length}`);
 }
@@ -423,6 +443,12 @@ export async function cmdUp(args) {
     if (args.name) {
         config.node.name = args.name;
     }
+    // Collapse repeated log lines before they reach stdout. A daemon that runs
+    // for weeks repeats the same message shape endlessly (a peer re-keying, an
+    // onion path failing); unthrottled that produced a 12 GB log file, and a
+    // full disk stops the daemon outright. Covers the SDK's [peer-debug] output
+    // too, since this wraps the process console rather than our Logger.
+    installLogThrottle();
     const daemon = new DaemonServer({
         config,
         configDir: dir,
@@ -2371,6 +2397,22 @@ WantedBy=multi-user.target
             const msg = err instanceof Error ? err.message : String(err);
             throw new Error(`Could not write ${plistPath} (need root? try 'sudo'): ${msg}`);
         }
+        // launchd never rotates StandardOutPath — the file grows until the disk is
+        // full and the daemon dies with it (a 12 GB agentnet log is how we found
+        // this). systemd users get journald rotation for free; on macOS the native
+        // equivalent is a newsyslog rule, so install one alongside the plist:
+        // rotate at 10 MB, keep 5 compressed generations.
+        try {
+            const fs = await import("fs/promises");
+            await fs.mkdir("/etc/newsyslog.d", { recursive: true });
+            await fs.writeFile("/etc/newsyslog.d/com.decentlan.agentnet.conf", "# logfilename          [owner:group]  mode count size(KB) when  flags\n" +
+                "/var/log/agentnet.log  root:wheel     644  5     10240    *     GZ\n", "utf-8");
+            console.log("Log rotation: /var/log/agentnet.log rotates at 10 MB, 5 compressed generations kept.");
+        }
+        catch (err) {
+            // Not fatal — the daemon's own log throttling already bounds the volume.
+            console.log(`Note: could not install the newsyslog rotation rule (${err instanceof Error ? err.message : err}). The log is still throttled in-process.`);
+        }
         execSync(`launchctl load ${plistPath}`);
         console.log(`Installed ${plistPath} and started com.decentlan.agentnet.`);
         console.log(`Optional — watch China video (CCTV etc.): agentnet proxy trust-ca && agentnet proxy router --hls-accel  (docs/CCTV-VIEWING.md)`);

package/dist/ui/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.233";
+window.__DK_UI_VERSION="0.1.235";
 const ICON_PATHS = {
   // ---- tab bar (the four must feel like one set) ----
   users: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>',
@@ -41,6 +41,8 @@ const ICON_PATHS = {
   // ---- account ----
   shield: '<path d="M12 21.5s7.5-3.8 7.5-9.5V5.5L12 2.8 4.5 5.5V12c0 5.7 7.5 9.5 7.5 9.5Z"/>',
   download: '<path d="M12 3.5v11M7.5 10l4.5 4.5 4.5-4.5"/><path d="M5 20.5h14"/>',
+  // Folder with a magnifier corner — "reveal / show in file manager".
+  folderOpen: '<path d="M3 7.5a2 2 0 0 1 2-2h4l2 2.5h8a2 2 0 0 1 2 2V17a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2Z"/><circle cx="12" cy="13" r="2.4"/><path d="M13.9 14.9 15.5 16.5"/>',
   migrate: '<path d="M8 4 4 8l4 4"/><path d="M4 8h13a3 3 0 0 1 3 3v1"/><path d="m16 20 4-4-4-4"/><path d="M20 16H7a3 3 0 0 1-3-3v-1"/>',
   starCoin: '<circle cx="12" cy="12" r="9"/><path d="m12 7.2 1.4 2.9 3.2.4-2.3 2.2.6 3.1-2.9-1.5-2.9 1.5.6-3.1L8.4 10.5l3.2-.4L12 7.2Z" fill="currentColor" stroke="none"/>',
   link: '<path d="M10.5 13.5a4 4 0 0 0 5.7 0l2.3-2.3a4 4 0 0 0-5.7-5.7l-1 1"/><path d="M13.5 10.5a4 4 0 0 0-5.7 0l-2.3 2.3a4 4 0 0 0 5.7 5.7l1-1"/>',
@@ -232,6 +234,8 @@ const dkApi = {
   alias: (userid, alias) => dkPost("/api/friend-alias", { userid, alias }),
   markRead: (userid) => dkPost("/api/chat-mark-read", { userid }),
   delFiles: (userid, ids) => dkPost("/api/file-delete", { userid, ids }),
+  // Reveal a received file in the OS file manager (localhost-only on the daemon side).
+  revealFile: (name) => dkPost("/api/file-reveal", { name }),
   cancelSend: (userid, ids) => dkPost("/api/file-cancel", { userid, ids }),
   retrySend: (userid, ids) => dkPost("/api/file-retry", { userid, ids }),
   setProfile: (name, description) => dkPost("/api/set-profile", { name, description }),
@@ -1140,10 +1144,17 @@ function PeerRow({ peer, T, active, onClick }) {
     minWidth: 0
   } }, peer.lastMsg))), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", flexDirection: "column", alignItems: "flex-end", gap: 4, flexShrink: 0 } }, /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 10.5, color: "var(--faint)" } }, peer.lastTime), peer.unread ? /* @__PURE__ */ React.createElement(Unread, { n: peer.unread }) : /* @__PURE__ */ React.createElement(StatusDot, { online: peer.online })));
 }
-function PeerSidebar({ T, peers, requests, activeId, onSelect, onAct, onAdd }) {
+function PeerSidebar({ T, peers, requests, activeId, onSelect, onAct, onAdd, prefillAddr, onPrefillConsumed }) {
   const [q, setQ] = React.useState("");
   const [addr, setAddr] = React.useState("");
   const [addState, setAddState] = React.useState(null);
+  const [fromDeepLink, setFromDeepLink] = React.useState(false);
+  React.useEffect(() => {
+    if (prefillAddr) {
+      setAddr(prefillAddr);
+      setFromDeepLink(true);
+    }
+  }, [prefillAddr]);
   const submitAddr = () => {
     const v = addr.trim();
     if (!v || addState && addState.kind === "sending") return;
@@ -1151,6 +1162,8 @@ function PeerSidebar({ T, peers, requests, activeId, onSelect, onAct, onAdd }) {
     Promise.resolve(onAdd(v)).then((r) => {
       if (r && r.ok) {
         setAddr("");
+        setFromDeepLink(false);
+        onPrefillConsumed && onPrefillConsumed();
         setAddState({ kind: "ok", msg: T.addSent });
       } else {
         setAddState({ kind: "err", msg: r && r.error ? `${T.addFailed}: ${r.error}` : T.addFailed });
@@ -1167,9 +1180,30 @@ function PeerSidebar({ T, peers, requests, activeId, onSelect, onAct, onAdd }) {
     return s.toLowerCase().includes(q.toLowerCase());
   });
   const online = peers.filter((p) => p.online).length;
-  return /* @__PURE__ */ React.createElement("div", { style: { width: 320, flexShrink: 0, borderRight: "1px solid var(--line)", display: "flex", flexDirection: "column", background: "var(--panel)" } }, /* @__PURE__ */ React.createElement("div", { style: { padding: "12px 12px 10px", borderBottom: "1px solid var(--line)", display: "flex", flexDirection: "column", gap: 8 } }, /* @__PURE__ */ React.createElement("div", { style: { display: "flex", gap: 7 } }, /* @__PURE__ */ React.createElement("input", { value: addr, onChange: (e) => setAddr(e.target.value), onKeyDown: (e) => {
-    if (e.key === "Enter") submitAddr();
-  }, placeholder: T.addPlaceholder, style: inputStyle }), /* @__PURE__ */ React.createElement(Btn, { tone: "solid", icon: "userPlus", onClick: submitAddr }, T.add)), addState && /* @__PURE__ */ React.createElement("div", { style: {
+  return /* @__PURE__ */ React.createElement("div", { style: { width: 320, flexShrink: 0, borderRight: "1px solid var(--line)", display: "flex", flexDirection: "column", background: "var(--panel)" } }, /* @__PURE__ */ React.createElement("div", { style: { padding: "12px 12px 10px", borderBottom: "1px solid var(--line)", display: "flex", flexDirection: "column", gap: 8 } }, fromDeepLink && /* @__PURE__ */ React.createElement("div", { style: {
+    fontFamily: "var(--ui)",
+    fontSize: 12,
+    lineHeight: 1.4,
+    color: "var(--text)",
+    background: "color-mix(in oklab, var(--accent), transparent 88%)",
+    border: "1px solid var(--accent)",
+    borderRadius: 8,
+    padding: "7px 10px"
+  } }, T.deepLinkConfirm || "\u901A\u8FC7\u94FE\u63A5\u6DFB\u52A0\u8FD9\u4F4D\u597D\u53CB? \u70B9\u300C\u6DFB\u52A0\u300D\u53D1\u9001\u597D\u53CB\u8BF7\u6C42 / Add this contact from the link? Tap Add to send a friend request."), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", gap: 7 } }, /* @__PURE__ */ React.createElement(
+    "input",
+    {
+      value: addr,
+      onChange: (e) => {
+        setAddr(e.target.value);
+        if (fromDeepLink) setFromDeepLink(false);
+      },
+      onKeyDown: (e) => {
+        if (e.key === "Enter") submitAddr();
+      },
+      placeholder: T.addPlaceholder,
+      style: { ...inputStyle, ...fromDeepLink ? { borderColor: "var(--accent)" } : null }
+    }
+  ), /* @__PURE__ */ React.createElement(Btn, { tone: "solid", icon: "userPlus", onClick: submitAddr }, T.add)), addState && /* @__PURE__ */ React.createElement("div", { style: {
     fontFamily: "var(--mono)",
     fontSize: 11.5,
     lineHeight: 1.35,
@@ -1306,7 +1340,7 @@ function dkMarkdownHtml(src) {
 function MarkdownText({ text }) {
   return /* @__PURE__ */ React.createElement("div", { className: "dk-md", dangerouslySetInnerHTML: { __html: dkMarkdownHtml(text) } });
 }
-function Msg({ m, peer, T, onTheater, onDelete, onCancel, onRetry, onCall, selMode, selected, onToggleSel, busy }) {
+function Msg({ m, peer, T, onTheater, onDelete, onCancel, onRetry, onReveal, onCall, selMode, selected, onToggleSel, busy }) {
   const mine = m.from === "me";
   const rtcFile = !mine && !m.file ? dkRtcFileFromText(peer.userId || peer.id, m.text) : null;
   const callRec = !m.file ? dkCallFromText(m.text) : null;
@@ -1444,7 +1478,18 @@ function Msg({ m, peer, T, onTheater, onDelete, onCancel, onRetry, onCall, selMo
             style: mediaBtnStyle
           },
           /* @__PURE__ */ React.createElement(Icon, { name: "maximize", size: 16, stroke: 2, color: "#fff" })
-        ))), m.file.media === "audio" && /* @__PURE__ */ React.createElement("audio", { src: dkFileUrl(m.file.name), controls: true, style: { width: "100%" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8, padding: "0 2px" } }, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 11, color: "var(--faint)", whiteSpace: "nowrap", overflow: "hidden", textOverflow: "ellipsis" } }, m.file.name), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 11, color: "var(--faint)", flexShrink: 0 } }, m.file.size), /* @__PURE__ */ React.createElement("a", { href: dkFileDownloadUrl(m.file.name), download: m.file.name, title: "download", style: { display: "inline-flex", flexShrink: 0 } }, /* @__PURE__ */ React.createElement(Icon, { name: "download", size: 15, stroke: 2, color: "var(--accent)" }))))
+        ))), m.file.media === "audio" && /* @__PURE__ */ React.createElement("audio", { src: dkFileUrl(m.file.name), controls: true, style: { width: "100%" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8, padding: "0 2px" } }, /* @__PURE__ */ React.createElement("span", { style: { flex: 1, minWidth: 0, fontFamily: "var(--mono)", fontSize: 11, color: "var(--faint)", whiteSpace: "nowrap", overflow: "hidden", textOverflow: "ellipsis" } }, m.file.name), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 11, color: "var(--faint)", flexShrink: 0 } }, m.file.size), onReveal && /* @__PURE__ */ React.createElement(
+          "button",
+          {
+            title: T.revealInFinder || "\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u663E\u793A / Show in file manager",
+            onClick: (e) => {
+              e.stopPropagation();
+              onReveal(m.file.name);
+            },
+            style: { background: "none", border: "none", cursor: "pointer", padding: 0, display: "inline-flex", flexShrink: 0 }
+          },
+          /* @__PURE__ */ React.createElement(Icon, { name: "folderOpen", size: 15, stroke: 2, color: "var(--accent)" })
+        ), /* @__PURE__ */ React.createElement("a", { href: dkFileDownloadUrl(m.file.name), download: m.file.name, title: "download", style: { display: "inline-flex", flexShrink: 0 } }, /* @__PURE__ */ React.createElement(Icon, { name: "download", size: 15, stroke: 2, color: "var(--accent)" }))))
       ) : (() => {
         const cardStyle = {
           display: "flex",
@@ -1497,6 +1542,18 @@ function Msg({ m, peer, T, onTheater, onDelete, onCancel, onRetry, onCall, selMo
           },
           icon,
           meta,
+          onReveal && /* @__PURE__ */ React.createElement(
+            "button",
+            {
+              title: T.revealInFinder || "\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u663E\u793A / Show in file manager",
+              onClick: (e) => {
+                e.stopPropagation();
+                onReveal(m.file.name);
+              },
+              style: { background: "none", border: "none", cursor: "pointer", padding: 0, display: "inline-flex", flexShrink: 0 }
+            },
+            /* @__PURE__ */ React.createElement(Icon, { name: "folderOpen", size: 16, stroke: 2, color: "var(--accent)" })
+          ),
           /* @__PURE__ */ React.createElement(
             "a",
             {
@@ -1621,6 +1678,14 @@ function Conversation({ T, peer, lang, thread: threadProp, onSend, onSendFile, o
     delete n[id];
     return n;
   });
+  const doReveal = (name) => {
+    if (!name) return;
+    dkApi.revealFile(name).then((r) => {
+      if (!r || r.ok === false) {
+        showFlash("err", (lang === "zh" ? "\u65E0\u6CD5\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u663E\u793A: " : "Could not reveal file: ") + (r && r.error || ""));
+      }
+    });
+  };
   const doCancel = (id) => {
     if (!id || fileBusy[id]) return;
     setFileBusy((b) => ({ ...b, [id]: "cancel" }));
@@ -1807,6 +1872,7 @@ ${peer.address}`
         onDelete: (id) => doDelete([id]),
         onCancel: doCancel,
         onRetry: doRetry,
+        onReveal: doReveal,
         onCall,
         busy: m.id ? fileBusy[m.id] : void 0,
         selMode,
@@ -1930,9 +1996,9 @@ function MenuItem({ icon, label, onClick, danger }) {
 function ChatEmpty({ T }) {
   return /* @__PURE__ */ React.createElement("div", { style: { flex: 1, display: "flex", flexDirection: "column", alignItems: "center", justifyContent: "center", gap: 12, color: "var(--faint)", background: "var(--bg)" } }, /* @__PURE__ */ React.createElement(Icon, { name: "message", size: 40, stroke: 1.4, color: "var(--line)" }), /* @__PURE__ */ React.createElement("div", { style: { fontFamily: "var(--mono)", fontSize: 13 } }, T.pickPeer));
 }
-function ChatTab({ T, lang, peers, requests, activeId, thread, onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread }) {
+function ChatTab({ T, lang, peers, requests, activeId, thread, onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread, prefillAddr, onPrefillConsumed }) {
   const peer = peers.find((p) => p.id === activeId);
-  return /* @__PURE__ */ React.createElement("div", { style: { flex: 1, display: "flex", minWidth: 0, minHeight: 0 } }, /* @__PURE__ */ React.createElement(PeerSidebar, { T, peers, requests, activeId, onSelect, onAct, onAdd }), peer ? /* @__PURE__ */ React.createElement(Conversation, { T, peer, lang, thread, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread }) : /* @__PURE__ */ React.createElement(ChatEmpty, { T }));
+  return /* @__PURE__ */ React.createElement("div", { style: { flex: 1, display: "flex", minWidth: 0, minHeight: 0 } }, /* @__PURE__ */ React.createElement(PeerSidebar, { T, peers, requests, activeId, onSelect, onAct, onAdd, prefillAddr, onPrefillConsumed }), peer ? /* @__PURE__ */ React.createElement(Conversation, { T, peer, lang, thread, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread }) : /* @__PURE__ */ React.createElement(ChatEmpty, { T }));
 }
 Object.assign(window, { ChatTab });
 function StatTile({ label, value, sub, tone }) {
@@ -2645,6 +2711,20 @@ function CallOverlay({ T, ctl, peers }) {
   })() : /* @__PURE__ */ React.createElement("div", { style: { flex: 1, display: "flex", flexDirection: "column", alignItems: "center", justifyContent: "center", gap: 22 } }, /* @__PURE__ */ React.createElement("div", { style: { position: "relative", display: "flex", alignItems: "center", justifyContent: "center" } }, !connected && /* @__PURE__ */ React.createElement("span", { style: { position: "absolute", width: 150, height: 150, borderRadius: 999, border: "2px solid var(--accent)", animation: "dkpulse 2s ease-out infinite" } }), /* @__PURE__ */ React.createElement(DkIdenticon, { seed: call.peerId, size: 108, radius: 26 })), /* @__PURE__ */ React.createElement("div", { style: { textAlign: "center" } }, /* @__PURE__ */ React.createElement("div", { style: { fontFamily: "var(--mono)", fontSize: 22, fontWeight: 700, color: "var(--text)" } }, name), /* @__PURE__ */ React.createElement("div", { style: { marginTop: 8, fontFamily: "var(--mono)", fontSize: 12.5, color: "var(--faint)" } }, stateLabel)), /* @__PURE__ */ React.createElement("div", { style: { marginTop: 18 } }, controls)));
 }
 Object.assign(window, { useCallController, CallOverlay, IncomingCallModal });
+function dkParseDeepLinkAddress() {
+  try {
+    const h = window.location.hash || "";
+    const qi = h.indexOf("?");
+    if (qi >= 0) {
+      const a = new URLSearchParams(h.slice(qi + 1)).get("address");
+      if (a && a.trim()) return a.trim();
+    }
+    const a2 = new URLSearchParams(window.location.search || "").get("address");
+    if (a2 && a2.trim()) return a2.trim();
+  } catch (e) {
+  }
+  return "";
+}
 const DK_DEFAULTS = (
   /*EDITMODE-BEGIN*/
   {
@@ -2922,6 +3002,34 @@ function DkApp() {
     sessionStorage.setItem(key, "1");
     window.location.reload();
   }, [me && me.lanVer]);
+  const [pendingAddr, setPendingAddr] = React.useState(() => dkParseDeepLinkAddress());
+  React.useEffect(() => {
+    const onHash = () => {
+      const a = dkParseDeepLinkAddress();
+      if (a) setPendingAddr(a);
+    };
+    window.addEventListener("hashchange", onHash);
+    return () => window.removeEventListener("hashchange", onHash);
+  }, []);
+  React.useEffect(() => {
+    if (!pendingAddr) return;
+    setTab("chat");
+    if (!peers || !peers.length) return;
+    const hit = peers.find((p) => p.address && p.address === pendingAddr);
+    if (hit) {
+      setActiveId(hit.id);
+      setPendingAddr("");
+      try {
+        window.history.replaceState(null, "", window.location.pathname);
+      } catch (e) {
+      }
+    } else {
+      try {
+        window.history.replaceState(null, "", window.location.pathname);
+      } catch (e) {
+      }
+    }
+  }, [pendingAddr, peers]);
   const peers = data.peers;
   const requests = data.requests;
   const exits = data.exits;
@@ -3020,7 +3128,7 @@ function DkApp() {
     { id: "network", icon: "network", label: T.network },
     { id: "profile", icon: "userRound", label: T.profile }
   ];
-  return /* @__PURE__ */ React.createElement("div", { style: { ...vars, "--row-pad": rowPad, position: "fixed", inset: 0, display: "flex", background: "var(--bg)", color: "var(--text)", fontFamily: "var(--ui)" } }, /* @__PURE__ */ React.createElement("div", { style: { width: 68, flexShrink: 0, borderRight: "1px solid var(--line)", background: "var(--rail)", display: "flex", flexDirection: "column", alignItems: "center", padding: "14px 0", gap: 8 } }, /* @__PURE__ */ React.createElement("div", { style: { width: 38, height: 38, borderRadius: 10, background: "var(--accent)", display: "flex", alignItems: "center", justifyContent: "center", marginBottom: 8 } }, /* @__PURE__ */ React.createElement(Icon, { name: "terminal", size: 20, color: "#fff", stroke: 2.2 })), nav.map((n) => /* @__PURE__ */ React.createElement(RailBtn, { key: n.id, icon: n.icon, label: n.label, active: tab === n.id, soon: n.soon, onClick: () => setTab(n.id) })), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement("div", { style: { position: "relative" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 36, radius: 9 }))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1, minWidth: 0, minHeight: 0, display: "flex", flexDirection: "column" } }, /* @__PURE__ */ React.createElement("div", { style: { height: 46, flexShrink: 0, borderBottom: "1px solid var(--line)", background: "var(--panel)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px" } }, /* @__PURE__ */ React.createElement("svg", { width: 20, height: 20, viewBox: "0 0 24 24", fill: "none", stroke: "var(--accent)", strokeWidth: 2.2, strokeLinecap: "round", strokeLinejoin: "round", style: { display: "block", flexShrink: 0 } }, /* @__PURE__ */ React.createElement("path", { d: "m4.5 17 6-6-6-6" }), /* @__PURE__ */ React.createElement("path", { d: "M12 18.5h7.5" })), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 14, fontWeight: 700, letterSpacing: -0.3, color: "var(--text)" } }, "beagle"), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12, color: "var(--faint)" } }, "\xB7 ", nav.find((n) => n.id === tab).label.toLowerCase()), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, me.channel, " \xB7 lan ", me.lanVer), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 7, padding: "0 4px" } }, /* @__PURE__ */ React.createElement(StatusDot, { online: me.online }), /* @__PURE__ */ React.createElement(Mono, { size: 12.5, copy: me.ip }, me.ip)), /* @__PURE__ */ React.createElement("span", { style: { width: 1, height: 22, background: "var(--line)" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 26, radius: 7 }), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, fontWeight: 600, color: "var(--text)" } }, me.name))), tab === "chat" && /* @__PURE__ */ React.createElement(ChatTab, { T, lang: t.lang, peers, requests, activeId, thread: data.threads[activeId], onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread: () => activeId && data.loadThread(activeId) }), tab === "network" && /* @__PURE__ */ React.createElement(NetworkTab, { T, me, peers, exits, activeExit, reqCount: requests.length, onSetExit, onOpenChat }), tab === "profile" && /* @__PURE__ */ React.createElement(ProfileTab, { T, me, onEdit })), /* @__PURE__ */ React.createElement(TweaksPanel, null, /* @__PURE__ */ React.createElement(TweakSection, { label: t.lang === "zh" ? "\u5916\u89C2" : "Appearance" }), /* @__PURE__ */ React.createElement(
+  return /* @__PURE__ */ React.createElement("div", { style: { ...vars, "--row-pad": rowPad, position: "fixed", inset: 0, display: "flex", background: "var(--bg)", color: "var(--text)", fontFamily: "var(--ui)" } }, /* @__PURE__ */ React.createElement("div", { style: { width: 68, flexShrink: 0, borderRight: "1px solid var(--line)", background: "var(--rail)", display: "flex", flexDirection: "column", alignItems: "center", padding: "14px 0", gap: 8 } }, /* @__PURE__ */ React.createElement("div", { style: { width: 38, height: 38, borderRadius: 10, background: "var(--accent)", display: "flex", alignItems: "center", justifyContent: "center", marginBottom: 8 } }, /* @__PURE__ */ React.createElement(Icon, { name: "terminal", size: 20, color: "#fff", stroke: 2.2 })), nav.map((n) => /* @__PURE__ */ React.createElement(RailBtn, { key: n.id, icon: n.icon, label: n.label, active: tab === n.id, soon: n.soon, onClick: () => setTab(n.id) })), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement("div", { style: { position: "relative" } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 36, radius: 9 }))), /* @__PURE__ */ React.createElement("div", { style: { flex: 1, minWidth: 0, minHeight: 0, display: "flex", flexDirection: "column" } }, /* @__PURE__ */ React.createElement("div", { style: { height: 46, flexShrink: 0, borderBottom: "1px solid var(--line)", background: "var(--panel)", display: "flex", alignItems: "center", gap: 12, padding: "0 16px" } }, /* @__PURE__ */ React.createElement("svg", { width: 20, height: 20, viewBox: "0 0 24 24", fill: "none", stroke: "var(--accent)", strokeWidth: 2.2, strokeLinecap: "round", strokeLinejoin: "round", style: { display: "block", flexShrink: 0 } }, /* @__PURE__ */ React.createElement("path", { d: "m4.5 17 6-6-6-6" }), /* @__PURE__ */ React.createElement("path", { d: "M12 18.5h7.5" })), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 14, fontWeight: 700, letterSpacing: -0.3, color: "var(--text)" } }, "beagle"), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12, color: "var(--faint)" } }, "\xB7 ", nav.find((n) => n.id === tab).label.toLowerCase()), /* @__PURE__ */ React.createElement("div", { style: { flex: 1 } }), /* @__PURE__ */ React.createElement(Tag, { tone: "accent" }, me.channel, " \xB7 lan ", me.lanVer), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 7, padding: "0 4px" } }, /* @__PURE__ */ React.createElement(StatusDot, { online: me.online }), /* @__PURE__ */ React.createElement(Mono, { size: 12.5, copy: me.ip }, me.ip)), /* @__PURE__ */ React.createElement("span", { style: { width: 1, height: 22, background: "var(--line)" } }), /* @__PURE__ */ React.createElement("div", { style: { display: "flex", alignItems: "center", gap: 8 } }, /* @__PURE__ */ React.createElement(DkAvatar, { peer: { ...me, id: me.userId, agent: false }, size: 26, radius: 7 }), /* @__PURE__ */ React.createElement("span", { style: { fontFamily: "var(--mono)", fontSize: 12.5, fontWeight: 600, color: "var(--text)" } }, me.name))), tab === "chat" && /* @__PURE__ */ React.createElement(ChatTab, { T, lang: t.lang, peers, requests, activeId, thread: data.threads[activeId], onSelect, onAct, onAdd, onSend, onSendFile, onSendRtcFile, onAlias, onRemove, onOpenNet, onCall, onReloadThread: () => activeId && data.loadThread(activeId), prefillAddr: pendingAddr, onPrefillConsumed: () => setPendingAddr("") }), tab === "network" && /* @__PURE__ */ React.createElement(NetworkTab, { T, me, peers, exits, activeExit, reqCount: requests.length, onSetExit, onOpenChat }), tab === "profile" && /* @__PURE__ */ React.createElement(ProfileTab, { T, me, onEdit })), /* @__PURE__ */ React.createElement(TweaksPanel, null, /* @__PURE__ */ React.createElement(TweakSection, { label: t.lang === "zh" ? "\u5916\u89C2" : "Appearance" }), /* @__PURE__ */ React.createElement(
     TweakRadio,
     {
       label: t.lang === "zh" ? "\u4E3B\u9898" : "Theme",

package/dist/ui/server.js

@@ -35,6 +35,74 @@ function isLocalRequest(req) {
     const a = req.socket.remoteAddress ?? "";
     return a === "127.0.0.1" || a === "::1" || a === "::ffff:127.0.0.1";
 }
+/**
+ * Reveal a file in the OS file manager (Finder / Explorer / Nautilus), so the
+ * user can play, share, AirDrop, copy or delete it with native tools instead
+ * of re-downloading — the file is already on disk under downloadsDir.
+ *
+ * Two things make this fiddly:
+ *  - The daemon usually runs as ROOT (started via sudo). A GUI command run as
+ *    root either opens in root's own (invisible) session or is refused. On
+ *    macOS the fix is `launchctl asuser <uid>` to hop into the logged-in
+ *    user's Aqua session; elsewhere we drop to `SUDO_USER` with `sudo -u`.
+ *  - WSL has no Linux file manager but can drive Windows Explorer via the
+ *    translated \\wsl$ path.
+ *
+ * Best-effort: returns {ok:false, error} rather than throwing so the caller
+ * can surface a message. `filePath` MUST already be validated as inside
+ * downloadsDir by the caller.
+ */
+async function revealInFileManager(filePath) {
+    const { spawn } = await import("node:child_process");
+    const run = (cmd, args) => new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(cmd, args, { stdio: "ignore", detached: true });
+        }
+        catch (e) {
+            resolve({ ok: false, error: `${cmd}: ${e.message}` });
+            return;
+        }
+        child.on("error", (e) => resolve({ ok: false, error: `${cmd}: ${e.message}` }));
+        // Windows Explorer returns exit code 1 even on success, so treat spawn
+        // without an 'error' event as success rather than gating on the code.
+        child.unref();
+        setTimeout(() => resolve({ ok: true }), 150);
+    });
+    const asRoot = typeof process.getuid === "function" && process.getuid() === 0;
+    const sudoUser = process.env.SUDO_USER;
+    const sudoUid = process.env.SUDO_UID;
+    if (process.platform === "darwin") {
+        // Run `open -R` inside the login user's GUI session when we're root.
+        if (asRoot && sudoUid) {
+            return run("launchctl", ["asuser", sudoUid, "open", "-R", filePath]);
+        }
+        return run("open", ["-R", filePath]);
+    }
+    if (process.platform === "win32") {
+        return run("explorer.exe", [`/select,${filePath}`]);
+    }
+    // Linux (incl. WSL). WSL: drive Windows Explorer with the \\wsl$ UNC path.
+    const isWsl = existsSync("/proc/version") &&
+        (await import("node:fs/promises")).readFile("/proc/version", "utf-8").then((v) => v.toLowerCase().includes("microsoft"), () => false);
+    if (await isWsl) {
+        let winPath = filePath;
+        try {
+            const { execFileSync } = await import("node:child_process");
+            winPath = execFileSync("wslpath", ["-w", filePath], { encoding: "utf-8" }).trim() || filePath;
+        }
+        catch {
+            // wslpath missing — fall through with the raw path
+        }
+        return run("explorer.exe", [`/select,${winPath}`]);
+    }
+    // A headless server has no file manager; xdg-open on the parent folder is the
+    // best we can do where a desktop exists. Drop privileges to the login user.
+    const dir = filePath.slice(0, filePath.lastIndexOf("/")) || "/";
+    if (asRoot && sudoUser)
+        return run("sudo", ["-u", sudoUser, "xdg-open", dir]);
+    return run("xdg-open", [dir]);
+}
 /** Validate and normalize a website origin (scheme://host[:port], no path).
  *  Returns the canonical origin string or null if malformed. Only http/https
  *  are accepted. */
@@ -400,6 +468,31 @@ export function startFriendUi(opts) {
             // download (?dl=1 → attachment) and inline preview/playback (no dl → the
             // right media content-type + inline disposition + HTTP Range so <video>/
             // <audio> can seek without buffering the whole file).
+            // Reveal a received file in the OS file manager. LOCALHOST-ONLY: this
+            // opens Finder/Explorer on the machine the DAEMON runs on, so it's
+            // meaningful only for someone sitting at that machine — never honour it
+            // for a remotely-opened UI (which could otherwise pop a file manager on
+            // the host at a stranger's request).
+            if (req.method === "POST" && url === "/api/file-reveal") {
+                if (!opts.downloadsDir) {
+                    sendJson(res, 404, { ok: false, error: "downloads disabled" });
+                    return;
+                }
+                if (!isLocalRequest(req)) {
+                    sendJson(res, 403, { ok: false, error: "reveal is available only on this machine" });
+                    return;
+                }
+                const body = await readBody(req);
+                const name = (typeof body.name === "string" ? body.name : "").replace(/[/\\]/g, "");
+                const file = join(opts.downloadsDir, name);
+                if (!name || !file.startsWith(opts.downloadsDir) || !existsSync(file)) {
+                    sendJson(res, 404, { ok: false, error: "not found" });
+                    return;
+                }
+                const r = await revealInFileManager(file);
+                sendJson(res, r.ok ? 200 : 500, r);
+                return;
+            }
             if (req.method === "GET" && url === "/api/file-download") {
                 if (!opts.downloadsDir) {
                     res.writeHead(404);

package/dist/utils/log-throttle.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Bound the daemon's log volume by collapsing repeated lines.
+ *
+ * A long-running daemon emits the same message shape over and over — a peer
+ * that keeps re-keying, an onion path that keeps failing, a node blacklisted
+ * on a loop. Left alone that filled a 12 GB log file. The value of the 30,000th
+ * copy of a line is zero, but the disk cost is not, and on a full disk the
+ * daemon stops working entirely.
+ *
+ * This wraps the process's console so EVERY writer is covered, including the
+ * `[peer-debug]` output from `@decentnetwork/peer` (which logs via console and
+ * so can't be reached by our own Logger class). Messages are bucketed by
+ * "shape" — ids, addresses and numbers stripped — so a line that differs only
+ * by which peer or port it names still collapses into one bucket.
+ *
+ * Behaviour per shape, per window: print the first BURST copies verbatim, then
+ * go quiet; when the window closes, print a single "(… ×N suppressed)" line so
+ * the volume is still visible. Nothing is dropped silently.
+ */
+export interface LogThrottleOptions {
+    /** Copies of one shape printed verbatim before suppression. */
+    burst?: number;
+    /** Window length; the counter and suppression reset after this. */
+    windowMs?: number;
+    /** Distinct shapes tracked at once (guards the map itself from a leak). */
+    maxShapes?: number;
+}
+/** Collapse a message to its shape: strip ids, IPs, numbers and durations so
+ *  the same event about different peers shares one bucket. */
+export declare function logShape(message: string): string;
+/**
+ * Install the throttle on `console`. Returns a restore function (used by tests;
+ * the daemon never uninstalls).
+ */
+export declare function installLogThrottle(opts?: LogThrottleOptions): () => void;

package/dist/utils/log-throttle.js

@@ -0,0 +1,105 @@
+/**
+ * Bound the daemon's log volume by collapsing repeated lines.
+ *
+ * A long-running daemon emits the same message shape over and over — a peer
+ * that keeps re-keying, an onion path that keeps failing, a node blacklisted
+ * on a loop. Left alone that filled a 12 GB log file. The value of the 30,000th
+ * copy of a line is zero, but the disk cost is not, and on a full disk the
+ * daemon stops working entirely.
+ *
+ * This wraps the process's console so EVERY writer is covered, including the
+ * `[peer-debug]` output from `@decentnetwork/peer` (which logs via console and
+ * so can't be reached by our own Logger class). Messages are bucketed by
+ * "shape" — ids, addresses and numbers stripped — so a line that differs only
+ * by which peer or port it names still collapses into one bucket.
+ *
+ * Behaviour per shape, per window: print the first BURST copies verbatim, then
+ * go quiet; when the window closes, print a single "(… ×N suppressed)" line so
+ * the volume is still visible. Nothing is dropped silently.
+ */
+/** Collapse a message to its shape: strip ids, IPs, numbers and durations so
+ *  the same event about different peers shares one bucket. */
+export function logShape(message) {
+    return message
+        .replace(/\b[0-9a-fA-F]{16,}\b/g, "<hex>")
+        .replace(/\b[1-9A-HJ-NP-Za-km-z]{40,}\b/g, "<id>") // base58 userid/address
+        .replace(/\b\d+\.\d+\.\d+\.\d+\b/g, "<ip>")
+        // No word boundaries: counters are routinely glued to a unit ("60s",
+        // "250ms", "step2"). Requiring \b left those unnormalized, so every
+        // distinct duration became its own bucket and nothing collapsed.
+        .replace(/\d+(\.\d+)?/g, "<n>")
+        .slice(0, 200);
+}
+/**
+ * Install the throttle on `console`. Returns a restore function (used by tests;
+ * the daemon never uninstalls).
+ */
+export function installLogThrottle(opts = {}) {
+    const burst = opts.burst ?? 5;
+    const windowMs = opts.windowMs ?? 60_000;
+    const maxShapes = opts.maxShapes ?? 500;
+    const shapes = new Map();
+    const original = {
+        log: console.log.bind(console),
+        debug: console.debug.bind(console),
+        info: console.info.bind(console),
+        warn: console.warn.bind(console),
+        error: console.error.bind(console),
+    };
+    const wrap = (emit) => (message, ...args) => {
+        // Only throttle plain string messages; structured/objects pass through.
+        if (typeof message !== "string") {
+            emit(message, ...args);
+            return;
+        }
+        const now = Date.now();
+        const key = logShape(message);
+        let st = shapes.get(key);
+        if (!st) {
+            // Bound the tracking map. Evicting the oldest window is enough: a
+            // genuinely hot shape re-registers on its next line.
+            if (shapes.size >= maxShapes) {
+                let oldestKey;
+                let oldest = Infinity;
+                for (const [k, v] of shapes) {
+                    if (v.windowStart < oldest) {
+                        oldest = v.windowStart;
+                        oldestKey = k;
+                    }
+                }
+                if (oldestKey)
+                    shapes.delete(oldestKey);
+            }
+            st = { count: 0, windowStart: now, suppressed: 0, sample: message };
+            shapes.set(key, st);
+        }
+        if (now - st.windowStart >= windowMs) {
+            // Window closed — report what we swallowed, then start fresh.
+            if (st.suppressed > 0) {
+                emit(`… ${st.suppressed} more like this suppressed in the last ${Math.round(windowMs / 1000)}s: ${st.sample.slice(0, 160)}`);
+            }
+            st.count = 0;
+            st.suppressed = 0;
+            st.windowStart = now;
+        }
+        st.count++;
+        if (st.count <= burst) {
+            emit(message, ...args);
+            return;
+        }
+        st.suppressed++;
+    };
+    console.log = wrap(original.log);
+    console.debug = wrap(original.debug);
+    console.info = wrap(original.info);
+    console.warn = wrap(original.warn);
+    // Errors are rare and each one matters — never suppress them.
+    console.error = original.error;
+    return () => {
+        console.log = original.log;
+        console.debug = original.debug;
+        console.info = original.info;
+        console.warn = original.warn;
+        console.error = original.error;
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.233",
+  "version": "0.1.235",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",