@decentnetwork/peer 0.1.58 → 0.1.59

package/dist/peer.js

@@ -90,6 +90,9 @@ const FRIEND_TIMEOUT_MS = readEnvInt("DECENT_FRIEND_TIMEOUT_MS", 32000);
 const REHS_ACCEPT_COUNT = readEnvInt("DECENT_REHS_ACCEPT_COUNT", 4);
 const REHS_ACCEPT_MS = readEnvInt("DECENT_REHS_ACCEPT_MS", 2500);
 const REHS_WINDOW_MS = readEnvInt("DECENT_REHS_WINDOW_MS", 8000);
+// Re-handshake when we keep receiving undecryptable crypto data from a known
+// friend's endpoint (desynced sessions), rate-limited per friend.
+const REINIT_ON_DESYNC_MS = readEnvInt("DECENT_REINIT_ON_DESYNC_MS", 2000);
 // How long a relay path stays "confirmed" (carrying bulk data on its own, no
 // tcp-relay fan-out) after the last packet received over it. The relay
 // keepalive refreshes this every ~4s on a healthy path, so a generous window
@@ -1825,7 +1828,27 @@ export class Peer {
                 this.#debugVerboseLog(`unknown messenger packet kind ${kind} from ${friendId}`);
                 return;
             }
-            this.#debugLog(`crypto data received from ${remote.address}:${remote.port} but no session matched`);
+            // We received crypto data we can't decrypt from a KNOWN friend's endpoint:
+            // our two sessions are desynced (different keys) and NEITHER side will
+            // re-handshake on its own, because each believes it is still established
+            // (the half-open breaker can't help — no handshakes are being exchanged).
+            // Kick a fresh handshake so we re-converge. Rate-limited per friend so a
+            // flood of undecryptable packets doesn't spam cookie requests.
+            if (!this.#remoteIsTcp(remote) && !viaRelay) {
+                for (const [fid, st] of this.#friendSessions.entries()) {
+                    const matches = (st.remote?.host === remote.address && st.remote?.port === remote.port) ||
+                        (st.endpointCandidates ?? []).some((c) => c.host === remote.address && c.port === remote.port);
+                    if (!matches)
+                        continue;
+                    if (Date.now() - (st.lastReinitMs ?? 0) > REINIT_ON_DESYNC_MS) {
+                        st.lastReinitMs = Date.now();
+                        this.#debugLog(`no-session-matched from ${remote.address}:${remote.port} (friend ${fid}) — desynced, re-initiating handshake`);
+                        void this.#initiateSession(fid).catch(() => undefined);
+                    }
+                    break;
+                }
+            }
+            this.#debugVerboseLog(`crypto data received from ${remote.address}:${remote.port} but no session matched`);
             return;
         }
         if (packet[0] === NET_PACKET_ONION_DATA_RESPONSE && this.#announceDataKey) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",