@decentnetwork/peer 0.1.50 → 0.1.52

package/dist/peer.js

@@ -193,6 +193,11 @@ export class Peer {
     #persistSeq = 0; // makes atomic friend-store temp filenames unique per write
     #cookieSymmetricKey;
     #friendSessions = new Map();
+    /** source "ip:port" → friendId, so an inbound crypto-data packet is decrypted
+     *  against the right session FIRST instead of scanning every friend (O(N) nacl
+     *  ops/packet starved high-rate CCTV forwarding). Self-correcting: stale
+     *  entries just miss and fall back to the scan. */
+    #cryptoEndpointIndex = new Map();
     #express;
     #expressPollTimer;
     /**
@@ -1549,8 +1554,17 @@ export class Peer {
             return;
         }
         if (packet[0] === NET_PACKET_CRYPTO_DATA) {
-            for (const [friendId, state] of this.#friendSessions.entries()) {
-                if (!state.sessionSharedKey || !state.peerBaseNonce) {
+            // Demux by source endpoint: try the session last seen here FIRST so a
+            // high-rate stream (CCTV) isn't decrypted against every friend session
+            // (O(friends) nacl ops per packet, which starved forwarding). Falls back
+            // to scanning all sessions for a new/changed endpoint, then caches the
+            // match. A stale hint just misses and falls through harmlessly.
+            const epKey = `${remote.address}:${remote.port}`;
+            const hinted = this.#cryptoEndpointIndex.get(epKey);
+            const ids = hinted !== undefined ? [hinted, ...this.#friendSessions.keys()] : this.#friendSessions.keys();
+            for (const friendId of ids) {
+                const state = this.#friendSessions.get(friendId);
+                if (!state || !state.sessionSharedKey || !state.peerBaseNonce) {
                     continue;
                 }
                 const opened = openCryptoDataPacket(packet, {
@@ -1560,6 +1574,11 @@ export class Peer {
                 if (!opened) {
                     continue;
                 }
+                if (hinted !== friendId) {
+                    if (this.#cryptoEndpointIndex.size > 4096)
+                        this.#cryptoEndpointIndex.clear();
+                    this.#cryptoEndpointIndex.set(epKey, friendId);
+                }
                 // De-duplicate — but ONLY for dual-sent channels. The dual-send path
                 // delivers a lossless packet over BOTH UDP and relay with the SAME
                 // packet number, so without this guard a chat message is dispatched

package/dist/transport/udp.js

@@ -62,6 +62,19 @@ export class UdpTransport extends EventEmitter {
             const onListening = () => {
                 cleanup();
                 this.#bound = true;
+                // Enlarge the kernel socket buffers. The default (often ~64-256 KB) is
+                // smaller than a single file-transfer send window (≈ 256 KB) plus the
+                // CCTV stream, so sustained bursts overflowed and the kernel silently
+                // dropped datagrams — a big file would stick at 0% as its early chunks
+                // kept getting dropped. 4 MB absorbs the bursts on both directions.
+                try {
+                    socket.setSendBufferSize(4 * 1024 * 1024);
+                }
+                catch { /* best-effort */ }
+                try {
+                    socket.setRecvBufferSize(4 * 1024 * 1024);
+                }
+                catch { /* best-effort */ }
                 resolve();
             };
             const onError = (error) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.50",
+  "version": "0.1.52",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",