@decentnetwork/peer 0.1.115 → 0.1.116

package/dist/peer.js

@@ -841,7 +841,24 @@ export class Peer {
         // reply) makes the hot distance-sort + memory grow without limit; a few
         // hundred nodes is plenty to stay findable and to announce on the closest.
         const merged = dedupeNodes([...nodes, ...this.#knownNodes]);
-        this.#knownNodes = merged.length > MAX_KNOWN_NODES ? merged.slice(0, MAX_KNOWN_NODES) : merged;
+        if (merged.length > MAX_KNOWN_NODES) {
+            const kept = merged.slice(0, MAX_KNOWN_NODES);
+            // Pin the bootstrap nodes. They are the only guaranteed-public,
+            // onion-capable nodes we have; newest-first truncation on a busy DHT
+            // evicted them within hours, leaving the onion hop pool with only
+            // NAT'd/CGNAT peers — every onion path died at hop A, so announce and
+            // DHTPK delivery failed for days ("no onion path" / "self announce
+            // step1 no response" floods) and natives could never (re)discover us.
+            const keptIds = new Set(kept.map((node) => `${node.host}:${node.port}`));
+            for (const bn of this.#opts.bootstrapNodes) {
+                if (!keptIds.has(`${bn.host}:${bn.port}`))
+                    kept.push(bn);
+            }
+            this.#knownNodes = kept;
+        }
+        else {
+            this.#knownNodes = merged;
+        }
     }
     knownNodes() {
         return [...this.#knownNodes];
@@ -6184,6 +6201,15 @@ export class Peer {
             if (id === nodeDId || node.host === nodeD.host || seenHosts.has(node.host)) {
                 continue;
             }
+            // Onion hops must be PUBLICLY routable: they forward our request onward
+            // and route the response back. A CGNAT (Tailscale 100.64/10), RFC1918,
+            // or own-host address cannot do either from the open internet — yet
+            // such peer endpoints leak into #knownNodes and were being picked as
+            // hop A (observed: 1900+ onion initials sent via a friend's Tailscale
+            // 100.76.x address, all black-holed).
+            if (isPrivateAddress(node.host) || isCgnatAddress(node.host) || isOwnAddress(node.host)) {
+                continue;
+            }
             // Skip blacklisted relays — onion paths through dead nodes
             // silently swallow the request and the announce times out.
             if (this.#isNodeBlacklisted(id)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.115",
+  "version": "0.1.116",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",