@decentnetwork/peer 0.1.108 → 0.1.109

package/dist/peer.js

@@ -2169,17 +2169,21 @@ export class Peer {
                     // syscall (that was the CCTV CPU regression) — safe at CCTV packet
                     // rates.
                     this.#adoptRemote(state, remote.address, remote.port);
-                    // A successfully decrypted packet arriving from a private address in
-                    // one of our physical subnets is stronger LAN proof than an endpoint
-                    // hint: it demonstrates that this exact host:port already reaches us.
-                    // Lock it immediately. Without this, duplicate public/relay copies
-                    // arriving a moment later overwrite `remote`, so file DATA travels on
-                    // the LAN but ACKs hairpin through the public Internet (observed as
-                    // ~38KB/s between mac-dev and WSL on the same 10.0.0.0/24).
+                    // A successfully decrypted packet arriving from a private address is
+                    // stronger proof than an endpoint hint: it demonstrates that this
+                    // exact host:port already reaches us. Do not require the address to be
+                    // in one of this process' physical subnets. WSL commonly has only a
+                    // 172.16/12 vNIC while the real LAN peer is 10.0.0.x via the Windows
+                    // host NAT; direct UDP is confirmed, but a strict same-subnet check
+                    // leaves file transfer on the conservative public/relay pacer.
+                    //
+                    // Unverified private candidates still require same-subnet matching at
+                    // candidate-learn time. This relaxed lock is only for decrypted UDP,
+                    // so it cannot promote a spoofed or merely advertised private host.
                     if (!state.lanRemoteHost &&
                         isPrivateAddress(remote.address) &&
                         !isCgnatAddress(remote.address) &&
-                        getPhysicalLanSubnets().some((s) => isInIpv4Subnet(remote.address, s))) {
+                        !this.#isUnroutableSelfSource(remote.address, remote.port)) {
                         state.lanRemoteHost = remote.address;
                         this.#rememberEndpointCandidate(state, remote.address, remote.port);
                         this.#debugLog(`lan_lock_confirmed friend=${friendId} host=${remote.address}:${remote.port} (decrypted UDP source)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.108",
+  "version": "0.1.109",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",