@decentnetwork/lan 0.1.75 → 0.1.77

package/dist/proxy/connect-proxy.js

@@ -126,11 +126,15 @@ export class ConnectProxy {
         }
         let bytes = 0;
         let closed = false;
+        let lastBytes = -1;
+        let idleTimer;
         const upstream = net.connect(port, host);
         const tearDown = (reason) => {
             if (closed)
                 return;
             closed = true;
+            if (idleTimer)
+                clearInterval(idleTimer);
             upstream.destroy();
             clientSocket.destroy();
             this.stats.active = Math.max(0, this.stats.active - 1);
@@ -181,6 +185,26 @@ export class ConnectProxy {
         upstream.on("end", () => tearDown("upstream end"));
         clientSocket.on("error", (err) => tearDown(`client error: ${err.message}`));
         clientSocket.on("end", () => tearDown("client end"));
+        // "close" catches abrupt teardowns (RST / socket destroyed) that never
+        // emit "end" — without these, a half-dead tunnel leaks.
+        upstream.on("close", () => tearDown("upstream close"));
+        clientSocket.on("close", () => tearDown("client close"));
+        // Idle reaper: when the Carrier path drops mid-stream the broken side
+        // sends no FIN, so neither "end" nor "error" fires and the sockets would
+        // leak until the kernel's multi-hour TCP keepalive — they pile up under
+        // load (1080p opens many high-bandwidth tunnels; two clients on one exit
+        // compounds it) and starve the exit. If no bytes flow in EITHER direction
+        // across two idle ticks, tear it down. Active streaming keeps `bytes`
+        // climbing (and backpressure pauses a one-sided flow), so only genuinely
+        // dead tunnels are reaped. Tunable via AGENTNET_TUNNEL_IDLE_MS.
+        const idleMs = Number(process.env.AGENTNET_TUNNEL_IDLE_MS) || 120_000;
+        idleTimer = setInterval(() => {
+            if (bytes === lastBytes)
+                tearDown("idle (no data — Carrier path likely dropped)");
+            else
+                lastBytes = bytes;
+        }, idleMs);
+        idleTimer.unref?.();
     }
     refuse(clientSocket, src, srcName, target, code, reason) {
         this.stats.totalRefused += 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.75",
+  "version": "0.1.77",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",