@decentnetwork/peer 0.1.107 → 0.1.109

package/dist/compat/filetransfer.js

@@ -119,6 +119,8 @@ const LAN_STARTUP_QUEUE_MS = 500; // unmistakable raw queue spike; smaller app-l
 const LAN_STARTUP_HARD_QUEUE_MS = 2000; // one multi-second queue sample is unsafe
 const LAN_STARTUP_QUEUE_ROUNDS = 2; // tolerate one scheduler/session-handover outlier on LAN
 const LAN_STARTUP_KEEPUP = 0.70; // delivered goodput below 70% of pace means the receiver is no longer keeping up
+const LAN_RECOVERY_GAIN = 1.20; // after a LAN overshoot drains, climb out of the 120KB/s floor quickly but smoothly
+const LAN_RECOVERY_QUEUE_MS = 250; // only recover while queueing is clearly gone
 // Five 200 ms samples was still only about one Windows ACK scheduling cycle in
 // practice: a clean LAN (0% loss) exited STARTUP after ~3 MB and threw away a
 // healthy 2.3 MB/s probe. Require a few seconds of sustained under-delivery;
@@ -923,8 +925,18 @@ export class FileTransferManager {
                         }
                         else {
                             // PROBE_BW cruise: one sample probes up, one drains, six cruise.
+                            // If LAN STARTUP hit one real overshoot (e.g. a 1s ACK pause with
+                            // high reported loss), the normal max-filter can be rebuilt from
+                            // tiny post-drain samples and then takes tens of seconds to climb
+                            // out of the 120KB/s floor. Once loss and queueing are gone, let
+                            // a validated LAN recover toward its safe initial probe rate. The
+                            // existing loss/queue brakes still stop a bad path immediately.
                             const gain = PACE_CYCLE_GAINS[st.roundCount % PACE_CYCLE_GAINS.length];
-                            st.paceRateBps = Math.max(PACE_INIT_BPS * 0.5, st.btlBwBps * gain * lossMult);
+                            const cruiseRate = Math.max(PACE_INIT_BPS * 0.5, st.btlBwBps * gain * lossMult);
+                            const healthyLan = lanNow && st.lossEwma < 0.02 && rawQueue < LAN_RECOVERY_QUEUE_MS;
+                            st.paceRateBps = healthyLan
+                                ? Math.max(cruiseRate, Math.min(LAN_PACE_INIT_BPS, Math.max(st.paceRateBps * LAN_RECOVERY_GAIN, measuredRate * LAN_STARTUP_DELIVERY_GAIN)))
+                                : cruiseRate;
                         }
                         // Hard safety cap: never pace faster than a full window drains in 1 RTT.
                         if (st.minRttMs !== Infinity && st.minRttMs > 0) {

package/dist/peer.js

@@ -2169,17 +2169,21 @@ export class Peer {
                     // syscall (that was the CCTV CPU regression) — safe at CCTV packet
                     // rates.
                     this.#adoptRemote(state, remote.address, remote.port);
-                    // A successfully decrypted packet arriving from a private address in
-                    // one of our physical subnets is stronger LAN proof than an endpoint
-                    // hint: it demonstrates that this exact host:port already reaches us.
-                    // Lock it immediately. Without this, duplicate public/relay copies
-                    // arriving a moment later overwrite `remote`, so file DATA travels on
-                    // the LAN but ACKs hairpin through the public Internet (observed as
-                    // ~38KB/s between mac-dev and WSL on the same 10.0.0.0/24).
+                    // A successfully decrypted packet arriving from a private address is
+                    // stronger proof than an endpoint hint: it demonstrates that this
+                    // exact host:port already reaches us. Do not require the address to be
+                    // in one of this process' physical subnets. WSL commonly has only a
+                    // 172.16/12 vNIC while the real LAN peer is 10.0.0.x via the Windows
+                    // host NAT; direct UDP is confirmed, but a strict same-subnet check
+                    // leaves file transfer on the conservative public/relay pacer.
+                    //
+                    // Unverified private candidates still require same-subnet matching at
+                    // candidate-learn time. This relaxed lock is only for decrypted UDP,
+                    // so it cannot promote a spoofed or merely advertised private host.
                     if (!state.lanRemoteHost &&
                         isPrivateAddress(remote.address) &&
                         !isCgnatAddress(remote.address) &&
-                        getPhysicalLanSubnets().some((s) => isInIpv4Subnet(remote.address, s))) {
+                        !this.#isUnroutableSelfSource(remote.address, remote.port)) {
                         state.lanRemoteHost = remote.address;
                         this.#rememberEndpointCandidate(state, remote.address, remote.port);
                         this.#debugLog(`lan_lock_confirmed friend=${friendId} host=${remote.address}:${remote.port} (decrypted UDP source)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.107",
+  "version": "0.1.109",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",