@decentnetwork/lan 0.1.251 → 0.1.253

package/dist/config/loader.js

@@ -9,40 +9,70 @@ const DEFAULT_CONFIG_FILE = resolve(DEFAULT_CONFIG_DIR, "config.yaml");
 // Mirrored from peer SDK's legacy-bootstraps.mjs
 // 45.207.220.155 omitted — observed timing out repeatedly during testing,
 // causing relay#2 to flap which knocks the friend connection offline.
-// Ordered with US relays first so a US↔US session (the common case)
-// doesn't land on a China relay just because it was first in the list.
-// Observed in the wild: both Vultr (US public IP) and a Mac (US
-// residential) connected to 47.100.103.201 (Alibaba Cloud Shanghai)
-// as their sole TCP relay — every packet between them transited
-// China, ~600ms RTT, and net_crypto handshakes often dropped because
-// the path was lossy. Reordering puts AWS US-East/US-West first so
-// the SDK's "connect to top-N relays" path naturally picks closer
-// nodes. The China + Singapore nodes stay in the list as fallback for
-// peers actually in those regions.
+//
+// ORDER IS LOAD-BEARING, and more than the old comment implied. The SDK's TCP
+// relay pool takes the FIRST 3 entries positionally (TcpRelayPool.start(),
+// DECENT_TCP_MAX_RELAYS default 3) — not a random sample, not by health. So
+// every node running the same release dials the SAME three hosts, and those
+// three are effectively the fleet's rendezvous set. Two consequences:
+//
+//   1. A host in the top 3 that doesn't accept TCP burns one of only three
+//      relay slots on every node in the world. That is exactly what happened
+//      when gojipower was added at position 2 in 0.1.249: air-wli went from 6
+//      connected relays to 2 after picking up the new list, because gojipower's
+//      ufw has no rule for 33445 (verified 2026-07-25 — `ufw status` shows the
+//      port absent while ela-bootstrapd LISTENs locally: alive != serving).
+//   2. A China relay in the top 3 puts a US<->US session on a China path.
+//      Observed in the wild: a Vultr US box and a US residential Mac both
+//      landed on 47.100.103.201 (Alibaba Shanghai) as their sole relay —
+//      ~600ms RTT and lossy enough to drop net_crypto handshakes.
+//
+// So: positions 1-3 are US-reachable hosts whose TCP relay port is CONFIRMED
+// open; everything after is DHT-bootstrap breadth and the reserve pool that
+// the dynamic-relay-add path draws from when a friend advertises one.
+// TCP-relay reachability below was measured from a US vantage point on
+// 2026-07-25. "TCP filtered" does NOT mean dead — several still answer UDP
+// DHT, and CN-side reachability was not re-tested (see docs/BOOTSTRAP-FLEET.md
+// on why a single vantage point must not be used to prune).
 export const DEFAULT_BOOTSTRAP_NODES = [
+    // --- Rendezvous set: the three every node dials. Relay handshake verified
+    // with `node scripts/relay-probe.mjs` on 2026-07-25 — not just an open port.
+    // US-East — the historical workhorse, and the relay mac-dev has held
+    // continuously through every incident this month. AWS legacy infra we don't
+    // control, kept here for provider diversity against the two Vultr boxes.
+    { host: "13.58.208.50", port: 33445, pk: "89vny8MrKdDKs7Uta9RdVmspPjnRMdwMmaiEW27pZ7gh" },
     // lens (Vultr US) — OUR OWN ela-bootstrapd, same box as the express relay.
     // It was in the iOS app's bootstrap list but missing here, which is a big
     // part of why natives could always bootstrap while JS peers struggled
     // (2026-07-25 discovery-outage postmortem: docs/BOOTSTRAP-FLEET.md).
     { host: "144.202.113.167", port: 33445, pk: "EfT4YMq6qfHdDsCiBCgsEmA78E2NxVYVKVUS9bD6w9GH" },
-    // gojipower (Vultr US) — ours, deployed 2026-07-25, systemd + rcvbuf tuned.
+    // gojipower (Vultr US) — ours. Was demoted in 0.1.252 because its ufw had no
+    // rule for 33445; firewall opened and relay handshake now verified (192ms),
+    // so it takes the third slot over the legacy AWS nodes: we can monitor and
+    // fix our own boxes, and 18.216.102.47 / 54.193.141.205 have already gone
+    // dark without notice.
     { host: "149.28.98.141", port: 33445, pk: "81PPfuEyzSovgxymxr2ifiCWXdB5CGaiofx5MrxnhYV7" },
+    // --- Reserve pool. Relay handshake verified; reached via the
+    // dynamic-relay-add path when a friend advertises them, and used for DHT
+    // bootstrap breadth.
+    { host: "18.216.6.197", port: 33445, pk: "H8sqhRrQuJZ6iLtP2wanxt4LzdNrN2NNFnpPdq1uJ9n2" }, // US-East
+    { host: "52.57.248.163", port: 33445, pk: "CfJLve8FNQPQJ9xYQ8oEVkPxeAPCN7iSdhnYFkWmWgLn" }, // eu-central
+    { host: "35.179.41.220", port: 33445, pk: "6u2vKadPa9wqDf531QaZy7FJN3c7Wzntm7dKXxXqvyNB" }, // eu-west
+    { host: "52.63.19.190", port: 33445, pk: "EeNenbyS4sx3qtu82esT1V1NMe9dZib5LyQmYGM6fboK" }, // ap-southeast
+    // CN — ours. Nearest for peers actually in China; deliberately NOT in the
+    // top 3 so US<->US traffic can't land here as its only relay.
+    { host: "47.100.103.201", port: 33445, pk: "CX1XH419p4xJ5SV4KvDxBeKYSRdMJW9QpdWJY8owUxHd" }, // sh
     // gfax (Aliyun CN) — ours, running since 2026-07-02, moved under systemd
-    // 2026-07-25 (identity preserved). Nearest bootstrap for CN peers.
+    // 2026-07-25 (identity preserved).
     { host: "139.129.193.117", port: 33445, pk: "67UQhssARwMky1YgFA2oDGZ1RiQYQmS6JqWFHxtopKq5" },
-    // US-East — closest for typical North-American peers.
-    { host: "13.58.208.50", port: 33445, pk: "89vny8MrKdDKs7Uta9RdVmspPjnRMdwMmaiEW27pZ7gh" },
+    // --- No relay handshake from the US as of 2026-07-25 (7/16). Kept, NOT
+    // pruned: several may still answer UDP DHT, and CN-side reachability was not
+    // retested — a single vantage point must not be used to declare a node dead
+    // (docs/BOOTSTRAP-FLEET.md). They must simply never occupy a relay slot.
     { host: "18.216.102.47", port: 33445, pk: "G5z8MqiNDFTadFUPfMdYsYtkUDbX5mNCMVHMZtsCnFeb" },
-    { host: "18.216.6.197", port: 33445, pk: "H8sqhRrQuJZ6iLtP2wanxt4LzdNrN2NNFnpPdq1uJ9n2" },
-    // US-West.
     { host: "54.193.141.205", port: 33445, pk: "7TfZWZNV8vnBxxWzJXuvKgX2QyKkLpg2oXx3LQ5tg8LW" },
-    // Unknown / global.
     { host: "154.64.235.176", port: 33445, pk: "GdNtV2N74fZnLjhH7NhQ18nGdxb1k8jRM9dQaK7WnxmL" },
-    // Asia-Pacific (Singapore + China). Kept as fallback so peers
-    // actually in CN/SG can use a nearby relay. Peers in the US should
-    // not be hitting these for normal traffic.
     { host: "52.74.215.181", port: 33445, pk: "Xv6d34WaUw9bPn7YihzVAFw7D2igbQJZ3jwmzzfYVFV" },
-    { host: "47.100.103.201", port: 33445, pk: "CX1XH419p4xJ5SV4KvDxBeKYSRdMJW9QpdWJY8owUxHd" },
     { host: "52.83.171.135", port: 443, pk: "5tuHgK1Q4CYf4K5PutsEPK5E3Z7cbtEBdx7LwmdzqXHL" },
     { host: "52.83.191.228", port: 33445, pk: "3khtxZo89SBScAMaHhTvD68pPHiKxgZT6hTCSZZVgNEm" },
 ];

package/dist/console/console.js

@@ -665,29 +665,49 @@ import yaml from "js-yaml";
 var DEFAULT_CONFIG_DIR = resolve(homedir2(), ".agentnet");
 var DEFAULT_CONFIG_FILE = resolve(DEFAULT_CONFIG_DIR, "config.yaml");
 var DEFAULT_BOOTSTRAP_NODES = [
+  // --- Rendezvous set: the three every node dials. Relay handshake verified
+  // with `node scripts/relay-probe.mjs` on 2026-07-25 — not just an open port.
+  // US-East — the historical workhorse, and the relay mac-dev has held
+  // continuously through every incident this month. AWS legacy infra we don't
+  // control, kept here for provider diversity against the two Vultr boxes.
+  { host: "13.58.208.50", port: 33445, pk: "89vny8MrKdDKs7Uta9RdVmspPjnRMdwMmaiEW27pZ7gh" },
   // lens (Vultr US) — OUR OWN ela-bootstrapd, same box as the express relay.
   // It was in the iOS app's bootstrap list but missing here, which is a big
   // part of why natives could always bootstrap while JS peers struggled
   // (2026-07-25 discovery-outage postmortem: docs/BOOTSTRAP-FLEET.md).
   { host: "144.202.113.167", port: 33445, pk: "EfT4YMq6qfHdDsCiBCgsEmA78E2NxVYVKVUS9bD6w9GH" },
-  // gojipower (Vultr US) — ours, deployed 2026-07-25, systemd + rcvbuf tuned.
+  // gojipower (Vultr US) — ours. Was demoted in 0.1.252 because its ufw had no
+  // rule for 33445; firewall opened and relay handshake now verified (192ms),
+  // so it takes the third slot over the legacy AWS nodes: we can monitor and
+  // fix our own boxes, and 18.216.102.47 / 54.193.141.205 have already gone
+  // dark without notice.
   { host: "149.28.98.141", port: 33445, pk: "81PPfuEyzSovgxymxr2ifiCWXdB5CGaiofx5MrxnhYV7" },
+  // --- Reserve pool. Relay handshake verified; reached via the
+  // dynamic-relay-add path when a friend advertises them, and used for DHT
+  // bootstrap breadth.
+  { host: "18.216.6.197", port: 33445, pk: "H8sqhRrQuJZ6iLtP2wanxt4LzdNrN2NNFnpPdq1uJ9n2" },
+  // US-East
+  { host: "52.57.248.163", port: 33445, pk: "CfJLve8FNQPQJ9xYQ8oEVkPxeAPCN7iSdhnYFkWmWgLn" },
+  // eu-central
+  { host: "35.179.41.220", port: 33445, pk: "6u2vKadPa9wqDf531QaZy7FJN3c7Wzntm7dKXxXqvyNB" },
+  // eu-west
+  { host: "52.63.19.190", port: 33445, pk: "EeNenbyS4sx3qtu82esT1V1NMe9dZib5LyQmYGM6fboK" },
+  // ap-southeast
+  // CN — ours. Nearest for peers actually in China; deliberately NOT in the
+  // top 3 so US<->US traffic can't land here as its only relay.
+  { host: "47.100.103.201", port: 33445, pk: "CX1XH419p4xJ5SV4KvDxBeKYSRdMJW9QpdWJY8owUxHd" },
+  // sh
   // gfax (Aliyun CN) — ours, running since 2026-07-02, moved under systemd
-  // 2026-07-25 (identity preserved). Nearest bootstrap for CN peers.
+  // 2026-07-25 (identity preserved).
   { host: "139.129.193.117", port: 33445, pk: "67UQhssARwMky1YgFA2oDGZ1RiQYQmS6JqWFHxtopKq5" },
-  // US-East — closest for typical North-American peers.
-  { host: "13.58.208.50", port: 33445, pk: "89vny8MrKdDKs7Uta9RdVmspPjnRMdwMmaiEW27pZ7gh" },
+  // --- No relay handshake from the US as of 2026-07-25 (7/16). Kept, NOT
+  // pruned: several may still answer UDP DHT, and CN-side reachability was not
+  // retested — a single vantage point must not be used to declare a node dead
+  // (docs/BOOTSTRAP-FLEET.md). They must simply never occupy a relay slot.
   { host: "18.216.102.47", port: 33445, pk: "G5z8MqiNDFTadFUPfMdYsYtkUDbX5mNCMVHMZtsCnFeb" },
-  { host: "18.216.6.197", port: 33445, pk: "H8sqhRrQuJZ6iLtP2wanxt4LzdNrN2NNFnpPdq1uJ9n2" },
-  // US-West.
   { host: "54.193.141.205", port: 33445, pk: "7TfZWZNV8vnBxxWzJXuvKgX2QyKkLpg2oXx3LQ5tg8LW" },
-  // Unknown / global.
   { host: "154.64.235.176", port: 33445, pk: "GdNtV2N74fZnLjhH7NhQ18nGdxb1k8jRM9dQaK7WnxmL" },
-  // Asia-Pacific (Singapore + China). Kept as fallback so peers
-  // actually in CN/SG can use a nearby relay. Peers in the US should
-  // not be hitting these for normal traffic.
   { host: "52.74.215.181", port: 33445, pk: "Xv6d34WaUw9bPn7YihzVAFw7D2igbQJZ3jwmzzfYVFV" },
-  { host: "47.100.103.201", port: 33445, pk: "CX1XH419p4xJ5SV4KvDxBeKYSRdMJW9QpdWJY8owUxHd" },
   { host: "52.83.171.135", port: 443, pk: "5tuHgK1Q4CYf4K5PutsEPK5E3Z7cbtEBdx7LwmdzqXHL" },
   { host: "52.83.191.228", port: 33445, pk: "3khtxZo89SBScAMaHhTvD68pPHiKxgZT6hTCSZZVgNEm" }
 ];

package/dist/ui/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.251";
+window.__DK_UI_VERSION="0.1.253";
 const ICON_PATHS = {
   // ---- tab bar (the four must feel like one set) ----
   users: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.251",
+  "version": "0.1.253",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",