@decentnetwork/lan 0.1.68 → 0.1.70

package/dist/carrier/peer-manager.d.ts

@@ -11,6 +11,8 @@ export interface PeerManagerOptions {
     keyFile: string;
     bootstrapNodes: BootstrapNode[];
     expressNodes?: BootstrapNode[];
+    /** Use express only for friend-request bootstrap, never for data-plane sendText. */
+    expressControlPlaneOnly?: boolean;
 }
 export declare class PeerManager extends EventEmitter {
     private peer;

package/dist/carrier/peer-manager.js

@@ -30,6 +30,7 @@ export class PeerManager extends EventEmitter {
             compatibilityMode: "legacy",
             bootstrapNodes: opts.bootstrapNodes,
             expressNodes: opts.expressNodes,
+            expressControlPlaneOnly: opts.expressControlPlaneOnly,
         });
         this.setupEventHandlers();
         this.logger.info("Peer instance created (not yet started)");

package/dist/daemon/server.js

@@ -108,26 +108,30 @@ export class DaemonServer {
             // optional dora registration can decide our IP.
             const keyFile = resolve(this.config.carrier.dataDir, "keypair.json");
             this.peerManager = new PeerManager();
-            // Daemon does NOT use express nodes. decentlan is a virtual
-            // LAN — peers must be ONLINE for IP packets to flow. Express
-            // is an offline-message store-and-forward relay for chat-style
-            // apps; if we enable it, sendText silently falls back to a
-            // queue when a friend is offline. That creates the illusion of
-            // connectivity ("the daemon says X is reachable") while
-            // packets actually pile up in HTTPS storage and never get
-            // forwarded in real time. For a VPN-like data plane, that's
-            // wrong — better to fail fast and let the operator see the
-            // peer as offline.
+            // The daemon enables express in CONTROL-PLANE-ONLY mode. Two
+            // distinct concerns were previously conflated:
             //
-            // Friend-request bootstrap is the only thing that benefits
-            // from express; for that case use the standalone CLI
-            // `agentnet friend-request` (which DOES use express via its
-            // own short-lived Peer instance) and accept the request on
-            // both ends before bringing the daemon up.
+            //  - DATA plane (sendText / IP packets): express must NEVER be a
+            //    fallback. decentlan is a virtual LAN — if `sendText` silently
+            //    queued to HTTPS store-and-forward when a friend is offline, the
+            //    daemon would report "reachable" while packets piled up undelivered.
+            //    A VPN-like data plane must fail fast and surface the peer as
+            //    offline. `expressControlPlaneOnly: true` enforces exactly that.
+            //
+            //  - CONTROL plane (friend-request bootstrap): express IS needed. The
+            //    dora-registration friend-request (and the 30s re-send loop in
+            //    dora-integration) runs INSIDE this daemon. With express disabled
+            //    here, a node whose onion announce hasn't propagated — e.g. callpass
+            //    behind a strict NAT — could NEVER deliver its friend-request to the
+            //    dora, so it never registered and never got a virtual IP. Routing
+            //    operators through the standalone `agentnet friend-request` CLI was a
+            //    manual workaround, not a fix. Giving the daemon express for the
+            //    one-time handshake closes that gap without touching the data plane.
             await this.peerManager.create({
                 keyFile,
                 bootstrapNodes: this.config.carrier.bootstrapNodes,
-                expressNodes: [],
+                expressNodes: this.config.carrier.expressNodes ?? [],
+                expressControlPlaneOnly: true,
             });
             await this.peerManager.start();
             this.logger.info(`Identity: ${this.peerManager.getAddress()}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",
@@ -75,7 +75,7 @@
   },
   "dependencies": {
     "@decentnetwork/dora": "^0.1.6",
-    "@decentnetwork/peer": "^0.1.30",
+    "@decentnetwork/peer": "^0.1.32",
     "js-yaml": "^4.1.0",
     "yargs": "^17.7.2"
   },