@decentnetwork/lan 0.1.7 → 0.1.8

package/dist/config/loader.js

@@ -108,11 +108,13 @@ export class ConfigLoader {
                 enabled: false,
                 userids: [],
                 refreshIntervalMs: 60_000,
-                // Default: do NOT auto-friend roster peers. Dora is a naming
-                // / IP service, not a trust statement. Operators opt in with
-                // `agentnet dora autofriend all` (closed labs) or
-                // `agentnet dora autofriend allow <name|userid>` (whitelist).
-                autoFriend: "none",
+                // Default: auto-friend every peer in the dora roster. Dora
+                // membership IS the trust statement — joining a dora means
+                // "I want to be on this network", and a single-tenant lab is
+                // the common case. Operators on a multi-tenant / public
+                // dora opt out with `agentnet dora autofriend none` or
+                // whitelist via `agentnet dora autofriend allow <peer>...`.
+                autoFriend: "all",
             },
         };
     }

package/dist/dora/dora-integration.js

@@ -318,14 +318,16 @@ export class DoraIntegration {
             this.friendRequested.add(entry.userid);
             return;
         }
-        // Policy gate. Dora is a name service, not a trust statement.
-        // Default ("none") means we DON'T auto-friend roster peers —
-        // an operator on a multi-tenant dora isn't asking to be
-        // mutually-friended with everyone else just because they share
-        // a name service. "all" reproduces the old behavior (closed
-        // labs). Otherwise the policy is a whitelist of names or
-        // userids; only matches are friended.
-        const policy = this.opts.config.autoFriend ?? "none";
+        // Policy gate. The undefined default is "all" because a peer
+        // that just joined a dora explicitly said "I want to be on
+        // this network" — that's the trust statement. Without "all"
+        // as the legacy-config default, new peers can never join an
+        // existing mesh: their roster fills up but everyone else's
+        // legacy configs (lacking autoFriend) silently refuse to
+        // friend them back. Operators on a public / multi-tenant dora
+        // can opt out with `agentnet dora autofriend none` or supply
+        // a whitelist via `agentnet dora autofriend allow <peer>...`.
+        const policy = this.opts.config.autoFriend ?? "all";
         if (!this.policyAllows(entry, policy)) {
             // Mark as "seen" so we don't re-evaluate the policy every
             // 60s for entries we deliberately skip — but DON'T mark as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",