@decentnetwork/lan

npm install @decentnetwork/lan@0.1.316
npx agentnet --help

mkdir lan-demo && cd lan-demo
npm init -y
npm install @decentnetwork/lan@0.1.316

# 1. Config + identity in ./agentnet-demo (skip contacting the public doras for now)
npx agentnet init --name docs-demo --config-dir ./agentnet-demo --no-dora
npx agentnet identity show --config-dir ./agentnet-demo
npx agentnet status --config-dir ./agentnet-demo

# 2. Optional: run the daemon as a normal user (mock TUN, no virtual interface)
npx agentnet dora disable --config-dir ./agentnet-demo   # keep this test node off the public registry
npx agentnet up --config-dir ./agentnet-demo             # foreground; Ctrl+C to stop
# in a second terminal:
npx agentnet status --config-dir ./agentnet-demo
npx agentnet diag --config-dir ./agentnet-demo

$ npx agentnet init --name docs-demo --config-dir ./agentnet-demo --no-dora
Created config directory: ./agentnet-demo
Created config: …/lan-demo/agentnet-demo/config.yaml
[IPAM] INFO: Creating new IPAM file: …/lan-demo/agentnet-demo/ipam.yaml
[IPAM] INFO: IPAM saved to …/lan-demo/agentnet-demo/ipam.yaml
[Policy] INFO: Policy saved to …/lan-demo/agentnet-demo/policy.yaml

Decent AgentNet initialized:
  Node name: docs-demo
  Config dir: ./agentnet-demo
  Subnet: 10.86.0.0/16
  Interface: agentnet0

Skipping dora friend-requests (--no-dora); the daemon joins a dora itself on first start.

Next: sudo agentnet service install   # or 'agentnet up --real-tun' to run in foreground

$ npx agentnet identity show --config-dir ./agentnet-demo
(generated new identity at …/lan-demo/agentnet-demo/carrier/keypair.json)
Address:    HYGw5jP6gVPKJ5Ggumss8GG5BRyyon1kZrJ3g74SscnAsndBWvkd
Public Key: 6fce427433ff79b62e4efd2e301bcef3f10ecc3948d9f30c8056f293d3655e07
User ID:    8XSfwqkwfduQBTS9HtA5fq7vVTYzqonAgjb2xdXZTgFG

$ npx agentnet status --config-dir ./agentnet-demo
Decent AgentNet
Node: docs-demo
Namespace: agentnet-main
Daemon: not running — everything below is CONFIGURED, not live
Subnet: 10.86.0.0/16
Interface: agentnet0
Virtual IP: 10.86.1.10
Bootstrap: 15 nodes
Peers (on disk): 0
ACL rules: 0

$ npx agentnet dora disable --config-dir ./agentnet-demo
Dora disabled. Restart the daemon to take effect.

$ npx agentnet up …        # mock TUN, dora disabled
[Daemon] INFO: Starting daemon (node: docs-demo)
[PeerManager] INFO: Peer started: HYGw5jP6gVPKJ5Ggumss8GG5BRyyon1kZrJ3g74SscnAsndBWvkd
[IPC] INFO: Listening on carrier/daemon.sock
[Daemon] INFO: Using deterministic fallback IP 10.86.84.251 (derived from userid; avoids the 10.86.1.10 init-default collision)
[TunDevice[agentnet0]] INFO: Using mock TUN mode (no real /dev/net/tun)
[Daemon] INFO: Daemon started successfully
Daemon started. Identity: HYGw5jP6gVPKJ5Ggumss8GG5BRyyon1kZrJ3g74SscnAsndBWvkd
Press Ctrl+C to stop.
[PeerManager] INFO: Joined Carrier network
[Daemon] INFO: Self-announce complete

$ npx agentnet status …    # second terminal, daemon up
Decent AgentNet
Node: docs-demo
Namespace: agentnet-main
Daemon: running
Userid: 8XSfwqkwfduQBTS9HtA5fq7vVTYzqonAgjb2xdXZTgFG
Address: HYGw5jP6gVPKJ5Ggumss8GG5BRyyon1kZrJ3g74SscnAsndBWvkd
Subnet: 10.86.0.0/16
Interface: agentnet0
Virtual IP: 10.86.84.251
  note: config.yaml still says 10.86.1.10 — the daemon's address wins
Bootstrap: 15 nodes
Peers (roster): 0
Friends: 0 (0 online)
Sessions: 0 active
Traffic: 0 sent / 0 received / 0 dropped
ACL rules: 0

$ npx agentnet diag …      # trimmed
{
  "identity": { "address": "HYGw5jP6…vkd", "userid": "8XSfwqkw…TgFG", … },
  "node": { "name": "docs-demo", "autoAccept": false, … },
  "tun": { "name": "agentnet0", "ip": "10.86.84.251", "subnet": "10.86.0.0/16" },
  "dht": { "bootstrapsConfigured": 15, "knownNodesCount": 73, "tcpRelayConnected": 3, … },
  "friends": [], "ipam": [], …
}

sudo npm install -g @decentnetwork/lan
agentnet init --name my-machine                              # also friends the default public doras
sudo agentnet service install --config-dir $HOME/.agentnet   # systemd / LaunchDaemon / Windows startup task
# or run in the foreground with a real TUN:
sudo agentnet up --real-tun --config-dir $HOME/.agentnet

agentnet ipam list           # roster from dora
agentnet diag                # your allocated 10.86.x.x
sudo $(which agentnet) dns install --config-dir $HOME/.agentnet   # optional: resolve *.decent system-wide

node:
  name: docs-demo
  namespace: agentnet-main
carrier:
  dataDir: /home/you/.agentnet/carrier
  bootstrapNodes:            # 15 public Carrier bootstrap nodes
    - host: 13.58.208.50
      port: 33445
      pk: 89vny8MrKdDKs7Uta9RdVmspPjnRMdwMmaiEW27pZ7gh
  expressNodes:              # offline-message relays
    - host: lens.beagle.chat
      port: 443
      pk: ECbs4GxwGzxGerNkmqDJFibEmevu8jAXqAZtikccvD95
    - host: tokyo.fi.chat
      port: 8443
      pk: EzpBtoUkjeMQfuLGWwTUbvzCn9rK4J648Ziy21EKxefo
network:
  interface: agentnet0       # macOS uses a kernel-assigned utun* instead
  ip: 10.86.1.10             # fallback; dora's allocation wins
  subnet: 10.86.0.0/16
  dnsDomain: decent
  dnsPort: 5354
paths:
  ipamFile: /home/you/.agentnet/ipam.yaml
  policyFile: /home/you/.agentnet/policy.yaml
  auditLog: /home/you/.agentnet/audit.log
proxy:
  enabled: false
  port: 8888
friends:
  autoAccept: false          # queue incoming requests for `friends accept`
dora:
  enabled: true
  userids: [ …3 public dora userids… ]
  refreshIntervalMs: 60000
  autoFriend: [ …8 userids… ]   # whitelist; also accepts "none" or "all"

defaultAction: deny
rules:
  - peer: alice.decent          # name or carrier id
    direction: inbound          # inbound | outbound | both
    allow:
      - { proto: tcp, port: 22, purpose: "ssh" }
    deny: []
    expiresAt: 2026-12-31T23:59:00Z
    audit: true