@decentnetwork/peer 0.1.9 → 0.1.10

package/dist/peer.js

@@ -1915,27 +1915,6 @@ export class Peer {
             .sort((a, b) => this.#nodeScore(`${b.host}:${b.port}`) - this.#nodeScore(`${a.host}:${a.port}`))
             .slice(0, MAX_SELF_ANNOUNCE_TARGETS);
         const zeroPing = new Uint8Array(32);
-        // Fresh ephemeral keypair for THIS announce sweep. Matches toxcore
-        // onion_client.c::do_announce which uses Onion_Client.temp_*_key
-        // — a per-client ephemeral pair regenerated on each round — as the
-        // announce sender, NOT the real identity key.
-        //
-        // The bug we just hit: before this fix, runSelfAnnounce used
-        // this.#keyPair (real identity) as both senderPublicKey AND
-        // searchPublicKey. Bootstrap nodes reject `isStored=2` when
-        // sender == search because the protocol's slot-allocation assumes
-        // the announcing party can be revoked by knowing the secret of
-        // the sender pubkey; if that's our long-lived identity, every
-        // bootstrap conservatively refuses. Observed in the wild as
-        // selfAnnounceStoredOn=0 across 9 bootstrap nodes on both a
-        // public-IP VPS and a NAT'd Mac — identical zero, not an
-        // environmental issue.
-        //
-        // searchPublicKey stays as our real identity (so peers querying
-        // for our pubkey find this slot). dataPublicKey also stays as
-        // #announceDataKey.publicKey (so peers can encrypt onion-data
-        // requests to us). Only the sender envelope rotates.
-        const announceSender = createEphemeralKeyPair();
         const candidates = [];
         for (const node of targets) {
             if (!node.pk)
@@ -1975,8 +1954,8 @@ export class Peer {
             const step1Settled = await Promise.allSettled(wave.map((c) => this.#sendAnnounceAndWait({
                 node: c.node,
                 nodePublicKey: c.nodePk,
-                senderPublicKey: announceSender.publicKey,
-                senderSecretKey: announceSender.secretKey,
+                senderPublicKey: this.#keyPair.publicKey,
+                senderSecretKey: this.#keyPair.secretKey,
                 pingId: zeroPing,
                 searchPublicKey: this.#keyPair.publicKey,
                 dataPublicKey: this.#announceDataKey.publicKey,
@@ -1999,12 +1978,8 @@ export class Peer {
             const step2Settled = await Promise.allSettled(step1Hits.map(({ c, resp1 }) => this.#sendAnnounceAndWait({
                 node: c.node,
                 nodePublicKey: c.nodePk,
-                // Step2 MUST be re-encrypted to the bootstrap by the SAME
-                // ephemeral sender that step1 used — bootstrap matches the
-                // ping_id against the sender envelope of the request that
-                // issued it. Use the same announceSender as step1.
-                senderPublicKey: announceSender.publicKey,
-                senderSecretKey: announceSender.secretKey,
+                senderPublicKey: this.#keyPair.publicKey,
+                senderSecretKey: this.#keyPair.secretKey,
                 pingId: resp1.pingOrDataPublicKey,
                 searchPublicKey: this.#keyPair.publicKey,
                 dataPublicKey: this.#announceDataKey.publicKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/peer",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Pure TypeScript port of Elastos Carrier (toxcore-derived) P2P messaging. DHT, onion routing, TCP relay, FlatBuffers app payloads, Express offline relay. Wire-compatible with iOS Beagle and the Carrier C SDK.",
   "type": "module",
   "main": "./dist/index.js",