@steve02081504/fount-p2p 0.0.0

package/discovery/index.mjs

@@ -0,0 +1,134 @@
+/** @typedef {{ id: string, priority: number, caps: { canDiscover?: boolean, canSignal?: boolean, canRelay?: boolean }, advertise?: (topic: string, bytes: Uint8Array) => (() => void) | Promise<() => void>, subscribe?: (topic: string, onAdvert: (bytes: Uint8Array, meta?: object) => void) => (() => void) | Promise<() => void>, sendSignal?: (topic: string, to: string, bytes: Uint8Array) => void | Promise<void>, onSignal?: (topic: string, onSignal: (bytes: Uint8Array, meta?: object) => void) => (() => void) | Promise<() => void> }} DiscoveryProvider */
+
+/** @type {Map<string, DiscoveryProvider>} */
+const providers = new Map()
+
+/**
+ * 注册 discovery provider。
+ * @param {DiscoveryProvider} provider 发现提供者
+ * @returns {() => void} 注销函数
+ */
+export function registerDiscoveryProvider(provider) {
+	if (!provider?.id) throw new Error('p2p: discovery provider requires id')
+	providers.set(String(provider.id), provider)
+	return () => unregisterDiscoveryProvider(provider.id)
+}
+
+/**
+ * 注销 discovery provider。
+ * @param {string} id 提供者 id
+ * @returns {void}
+ */
+export function unregisterDiscoveryProvider(id) {
+	providers.delete(String(id))
+}
+
+/**
+ * 列出已注册的 discovery provider（按 priority 排序）。
+ * @returns {DiscoveryProvider[]} 提供者列表
+ */
+export function listDiscoveryProviders() {
+	return [...providers.values()].sort((left, right) => Number(left.priority || 0) - Number(right.priority || 0))
+}
+
+/**
+ * 通过所有可用 provider 广播 topic advert。
+ * @param {string} topic advert 主题
+ * @param {Uint8Array} bytes advert 载荷
+ * @returns {Promise<() => void>} 统一取消函数
+ */
+export async function advertiseTopic(topic, bytes) {
+	const cleanups = []
+	for (const provider of listDiscoveryProviders()) {
+		if (!provider.caps?.canDiscover || typeof provider.advertise !== 'function') continue
+		let cleanup = null
+		try {
+			cleanup = await provider.advertise(topic, bytes)
+		}
+		catch (error) {
+			console.warn(`p2p: discovery advertise failed for ${provider.id}`, error)
+			continue
+		}
+		if (typeof cleanup === 'function') cleanups.push(cleanup)
+	}
+	return () => {
+		for (const cleanup of cleanups)
+			try { cleanup() } catch { /* ignore */ }
+	}
+}
+
+/**
+ * 通过所有可用 provider 订阅 topic advert。
+ * @param {string} topic advert 主题
+ * @param {(bytes: Uint8Array, meta?: object) => void} onAdvert advert 回调
+ * @returns {Promise<() => void>} 统一取消函数
+ */
+export async function subscribeTopic(topic, onAdvert) {
+	const cleanups = []
+	for (const provider of listDiscoveryProviders()) {
+		if (!provider.caps?.canDiscover || typeof provider.subscribe !== 'function') continue
+		let cleanup = null
+		try {
+			cleanup = await provider.subscribe(topic, onAdvert)
+		}
+		catch (error) {
+			console.warn(`p2p: discovery subscribe failed for ${provider.id}`, error)
+			continue
+		}
+		if (typeof cleanup === 'function') cleanups.push(cleanup)
+	}
+	return () => {
+		for (const cleanup of cleanups)
+			try { cleanup() } catch { /* ignore */ }
+	}
+}
+
+/**
+ * 通过 discovery provider 发送信令。
+ * @param {string} topic 信令 topic
+ * @param {string} to 目标节点标识
+ * @param {Uint8Array} bytes 信令载荷
+ * @returns {Promise<void>}
+ */
+export async function sendSignal(topic, to, bytes) {
+	const capable = listDiscoveryProviders().filter(provider => provider.caps?.canSignal && typeof provider.sendSignal === 'function')
+	if (!capable.length) throw new Error('p2p: no discovery provider can signal')
+	let sent = false
+	let lastError = null
+	for (const provider of capable)
+		try {
+			await Promise.resolve(provider.sendSignal(topic, to, bytes))
+			sent = true
+		}
+		catch (error) {
+			lastError = error
+			console.warn(`p2p: discovery signal failed for ${provider.id}`, error)
+		}
+	if (!sent) throw lastError || new Error('p2p: no discovery provider delivered signal')
+}
+
+/**
+ * 通过所有可用 provider 监听信令。
+ * @param {string} topic 信令 topic
+ * @param {(bytes: Uint8Array, meta?: object) => void} onSignal 信令回调
+ * @returns {Promise<() => void>} 统一取消函数
+ */
+export async function listenSignals(topic, onSignal) {
+	const cleanups = []
+	for (const provider of listDiscoveryProviders()) {
+		if (!provider.caps?.canSignal || typeof provider.onSignal !== 'function') continue
+		let cleanup = null
+		try {
+			cleanup = await provider.onSignal(topic, onSignal)
+		}
+		catch (error) {
+			console.warn(`p2p: discovery signal listener failed for ${provider.id}`, error)
+			continue
+		}
+		if (typeof cleanup === 'function') cleanups.push(cleanup)
+	}
+	return () => {
+		for (const cleanup of cleanups)
+			try { cleanup() } catch { /* ignore */ }
+	}
+}

package/discovery/mdns.mjs

@@ -0,0 +1,138 @@
+import { Buffer } from 'node:buffer'
+import dgram from 'node:dgram'
+
+const DEFAULT_PORT = 53531
+const DEFAULT_GROUP = '239.255.42.99'
+
+/**
+ * 轻量 multicast 发现插件：不做完整 DNS-SD，只复用 mDNS 的 LAN multicast 发现思路。
+ *
+ * @param {{ port?: number, group?: string }} [opts] 组播端口与组地址
+ * @returns {import('./index.mjs').DiscoveryProvider} mDNS 发现提供者
+ */
+export function createMdnsDiscoveryProvider(opts = {}) {
+	const port = Number(opts.port) || DEFAULT_PORT
+	const group = String(opts.group || DEFAULT_GROUP)
+	const socket = dgram.createSocket({ type: 'udp4', reuseAddr: true })
+	let bound = false
+	let bindPromise = null
+	/** @type {Map<string, Set<Function>>} */
+	const advertListeners = new Map()
+	/** @type {Map<string, Set<Function>>} */
+	const signalListeners = new Map()
+
+	/**
+	 * 绑定 UDP socket 并注册组播消息处理器。
+	 * @returns {Promise<void>}
+	 */
+	async function ensureBound() {
+		if (bound) return
+		if (!bindPromise)
+			bindPromise = (async () => {
+				await new Promise((resolve, reject) => {
+					socket.once('error', reject)
+					socket.bind(port, '0.0.0.0', () => {
+						socket.off('error', reject)
+						socket.addMembership(group)
+						socket.setMulticastTTL(1)
+						resolve()
+					})
+				})
+				socket.on('message', raw => {
+					let packet
+					try { packet = JSON.parse(String(raw)) } catch { return }
+					const listeners = packet.type === 'advert'
+						? advertListeners.get(String(packet.topic || ''))
+						: signalListeners.get(String(packet.topic || ''))
+					if (!listeners?.size) return
+					const bytes = Uint8Array.from(Buffer.from(String(packet.data || ''), 'base64'))
+					for (const listener of listeners)
+						listener(bytes, { provider: 'mdns' })
+				})
+				bound = true
+			})()
+				.finally(() => {
+					if (!bound) bindPromise = null
+				})
+		await bindPromise
+	}
+
+	/**
+	 * 向组播组发送 advert 或 signal 包。
+	 * @param {'advert' | 'signal'} type 包类型
+	 * @param {string} topic topic 名称
+	 * @param {Uint8Array} bytes 载荷字节
+	 * @returns {Promise<void>}
+	 */
+	async function multicast(type, topic, bytes) {
+		await ensureBound()
+		const packet = Buffer.from(JSON.stringify({
+			type,
+			topic,
+			data: Buffer.from(bytes).toString('base64'),
+		}))
+		await new Promise((resolve, reject) => {
+			socket.send(packet, port, group, error => error ? reject(error) : resolve())
+		})
+	}
+
+	/**
+	 * 向 topic bucket 注册监听器。
+	 * @param {Map<string, Set<Function>>} bucket topic → 监听器集合
+	 * @param {string} topic 订阅 topic
+	 * @param {Function} listener 回调函数
+	 * @returns {() => void} 取消订阅函数
+	 */
+	function addListener(bucket, topic, listener) {
+		if (!bucket.has(topic)) bucket.set(topic, new Set())
+		bucket.get(topic).add(listener)
+		return () => bucket.get(topic)?.delete(listener)
+	}
+
+	return {
+		id: 'mdns',
+		priority: 10,
+		caps: { canDiscover: true, canSignal: true, canRelay: false },
+		/**
+		 * 周期性组播广播 advert。
+		 * @param {string} topic advert 主题
+		 * @param {Uint8Array} bytes advert 载荷
+		 * @returns {Promise<() => void>} 取消广播函数
+		 */
+		async advertise(topic, bytes) {
+			await multicast('advert', topic, bytes)
+			const timer = setInterval(() => { void multicast('advert', topic, bytes).catch(() => { }) }, 30_000)
+			return () => clearInterval(timer)
+		},
+		/**
+		 * 订阅组播 advert。
+		 * @param {string} topic advert 主题
+		 * @param {Function} onAdvert advert 回调
+		 * @returns {Promise<() => void>} 取消订阅函数
+		 */
+		async subscribe(topic, onAdvert) {
+			await ensureBound()
+			return addListener(advertListeners, topic, onAdvert)
+		},
+		/**
+		 * 组播发送信令（忽略单播目标）。
+		 * @param {string} topic 信令 topic
+		 * @param {string} _to 目标标识（未使用）
+		 * @param {Uint8Array} bytes 信令载荷
+		 * @returns {Promise<void>}
+		 */
+		async sendSignal(topic, _to, bytes) {
+			await multicast('signal', topic, bytes)
+		},
+		/**
+		 * 订阅组播信令。
+		 * @param {string} topic 信令 topic
+		 * @param {Function} onSignal 信令回调
+		 * @returns {Promise<() => void>} 取消订阅函数
+		 */
+		async onSignal(topic, onSignal) {
+			await ensureBound()
+			return addListener(signalListeners, topic, onSignal)
+		},
+	}
+}

package/discovery/nostr.mjs

@@ -0,0 +1,273 @@
+import { randomBytes } from 'node:crypto'
+
+import { schnorr } from '@noble/curves/secp256k1.js'
+
+import { sha256Hex } from '../crypto/crypto.mjs'
+
+/** 默认 Nostr 中继 URL 列表。 */
+export const DEFAULT_RELAY_URLS = [
+	'wss://relay.damus.io',
+	'wss://nos.lol',
+	'wss://relay.nostr.band',
+]
+
+/** Nostr advert 事件 kind。 */
+export const NOSTR_ADVERT_KIND = 27235
+/** Nostr signal 事件 kind。 */
+export const NOSTR_SIGNAL_KIND = 27236
+
+/**
+ * 合并默认与用户配置的中继 URL（去重）。
+ * @param {string[] | undefined | null} userRelayUrls 用户自定义中继列表
+ * @returns {string[]} 合并后的中继 URL 列表
+ */
+export function mergeSignalingRelayUrls(userRelayUrls) {
+	const seen = new Set()
+	/** @type {string[]} */
+	const merged = []
+	for (const url of [...DEFAULT_RELAY_URLS, ...Array.isArray(userRelayUrls) ? userRelayUrls : []]) {
+		const trimmed = String(url || '').trim()
+		if (!trimmed || seen.has(trimmed)) continue
+		seen.add(trimmed)
+		merged.push(trimmed)
+	}
+	return merged.length ? merged : [...DEFAULT_RELAY_URLS]
+}
+
+/**
+ * 字节数组转十六进制字符串。
+ * @param {Uint8Array} bytes 输入字节
+ * @returns {string} 小写 hex 字符串
+ */
+function bytesToHex(bytes) {
+	return [...bytes].map(byte => byte.toString(16).padStart(2, '0')).join('')
+}
+
+/**
+ * 十六进制字符串转字节数组。
+ * @param {string} hex 输入 hex 字符串
+ * @returns {Uint8Array} 解码后的字节
+ */
+function hexToBytes(hex) {
+	const normalized = String(hex || '').trim().toLowerCase()
+	const out = new Uint8Array(Math.floor(normalized.length / 2))
+	for (let index = 0; index < out.length; index++)
+		out[index] = parseInt(normalized.slice(index * 2, index * 2 + 2), 16)
+	return out
+}
+
+/**
+ * 字节数组转 base64 字符串。
+ * @param {Uint8Array} bytes 输入字节
+ * @returns {string} base64 编码
+ */
+function bytesToBase64(bytes) {
+	return btoa(String.fromCharCode(...bytes))
+}
+
+/**
+ * base64 字符串转字节数组。
+ * @param {string} base64 输入 base64 字符串
+ * @returns {Uint8Array} 解码后的字节
+ */
+function base64ToBytes(base64) {
+	return Uint8Array.from(atob(base64).split('').map(ch => ch.charCodeAt(0)))
+}
+
+/**
+ * 签名 Nostr 事件。
+ * @param {number} kind 事件 kind
+ * @param {string[][]} tags 事件标签
+ * @param {string} content 事件内容
+ * @param {Uint8Array} secretKey Schnorr 私钥
+ * @returns {Promise<object>} 已签名的 Nostr 事件对象
+ */
+async function signNostrEvent(kind, tags, content, secretKey) {
+	const pubkey = bytesToHex(schnorr.getPublicKey(secretKey))
+	const created_at = Math.floor(Date.now() / 1000)
+	const serialized = JSON.stringify([0, pubkey, created_at, kind, tags, content])
+	const id = sha256Hex(serialized)
+	const sig = bytesToHex(await schnorr.sign(hexToBytes(id), secretKey))
+	return { id, pubkey, created_at, kind, tags, content, sig }
+}
+
+/**
+ * 连接 Nostr 中继 WebSocket。
+ * @param {string} relayUrl 中继 URL
+ * @returns {Promise<WebSocket>} 已打开的 WebSocket
+ */
+function connectRelay(relayUrl) {
+	return new Promise((resolve, reject) => {
+		const ws = new WebSocket(relayUrl)
+		const timer = setTimeout(() => {
+			try { ws.close() } catch { /* ignore */ }
+			reject(new Error(`nostr: connect timeout for ${relayUrl}`))
+		}, 10_000)
+		ws.addEventListener('open', () => {
+			clearTimeout(timer)
+			resolve(ws)
+		}, { once: true })
+		ws.addEventListener('error', () => {
+			clearTimeout(timer)
+			reject(new Error(`nostr: websocket error for ${relayUrl}`))
+		}, { once: true })
+	})
+}
+
+/**
+ * 向多个中继发布 Nostr 事件。
+ * @param {string[]} relayUrls 中继 URL 列表
+ * @param {object} event 待发布事件
+ * @returns {Promise<void>}
+ */
+async function publishEvent(relayUrls, event) {
+	let published = false
+	let lastError = null
+	await Promise.allSettled(relayUrls.map(async relayUrl => {
+		const ws = await connectRelay(relayUrl)
+		try {
+			ws.send(JSON.stringify(['EVENT', event]))
+			published = true
+		}
+		catch (error) {
+			lastError = error
+			throw error
+		}
+		finally {
+			setTimeout(() => { try { ws.close() } catch { /* ignore */ } }, 250)
+		}
+	}))
+	if (!published) throw lastError || new Error('nostr: no relay accepted publish')
+}
+
+/**
+ * 创建 Nostr discovery provider。
+ * @param {{ relayUrls?: string[] }} [opts] 可选中继 URL 覆盖
+ * @returns {import('./index.mjs').DiscoveryProvider} Nostr 发现提供者
+ */
+export function createNostrDiscoveryProvider(opts = {}) {
+	const relayUrls = mergeSignalingRelayUrls(opts.relayUrls)
+	const secretKey = randomBytes(32)
+	return {
+		id: 'nostr',
+		priority: 100,
+		caps: { canDiscover: true, canSignal: true, canRelay: false },
+		/**
+		 * 周期性向中继发布 advert 事件。
+		 * @param {string} topic advert 主题
+		 * @param {Uint8Array} bytes advert 载荷
+		 * @returns {Promise<() => void>} 取消广播函数
+		 */
+		async advertise(topic, bytes) {
+			let closed = false
+			/**
+			 * 向中继发布当前 advert。
+			 * @returns {Promise<void>}
+			 */
+			const publish = async () => {
+				if (closed) return
+				const event = await signNostrEvent(
+					NOSTR_ADVERT_KIND,
+					[['t', topic], ['x', 'advert']],
+					bytesToBase64(bytes),
+					secretKey,
+				)
+				await publishEvent(relayUrls, event)
+			}
+			await publish()
+			const timer = setInterval(() => { void publish().catch(() => { }) }, 5 * 60_000)
+			return () => {
+				closed = true
+				clearInterval(timer)
+			}
+		},
+		/**
+		 * 订阅中继上的 advert 事件。
+		 * @param {string} topic advert 主题
+		 * @param {Function} onAdvert advert 回调
+		 * @returns {Promise<() => void>} 取消订阅函数
+		 */
+		async subscribe(topic, onAdvert) {
+			let closed = false
+			const sockets = []
+			const subscriptionId = randomBytes(8).toString('hex')
+			let connected = 0
+			for (const relayUrl of relayUrls) {
+				let ws
+				try { ws = await connectRelay(relayUrl) }
+				catch { continue }
+				connected++
+				sockets.push(ws)
+				ws.addEventListener('message', event => {
+					if (closed) return
+					let parsed
+					try { parsed = JSON.parse(String(event.data)) } catch { return }
+					if (!Array.isArray(parsed) || parsed[0] !== 'EVENT') return
+					const nostrEvent = parsed[2]
+					if (nostrEvent?.kind !== NOSTR_ADVERT_KIND) return
+					try { onAdvert(base64ToBytes(String(nostrEvent.content || '')), { relayUrl, event: nostrEvent }) }
+					catch { /* ignore */ }
+				})
+				ws.send(JSON.stringify(['REQ', subscriptionId, { kinds: [NOSTR_ADVERT_KIND], '#t': [topic], '#x': ['advert'] }]))
+			}
+			if (!connected) throw new Error('nostr: no relay available for advert subscribe')
+			return () => {
+				closed = true
+				for (const ws of sockets)
+					try { ws.close() } catch { /* ignore */ }
+			}
+		},
+		/**
+		 * 向中继发布 signal 事件。
+		 * @param {string} topic 信令 topic
+		 * @param {string} to 目标节点标识
+		 * @param {Uint8Array} bytes 信令载荷
+		 * @returns {Promise<void>}
+		 */
+		async sendSignal(topic, to, bytes) {
+			const event = await signNostrEvent(
+				NOSTR_SIGNAL_KIND,
+				[['t', topic], ['x', 'signal'], ['p', String(to || '')]],
+				bytesToBase64(bytes),
+				secretKey,
+			)
+			await publishEvent(relayUrls, event)
+		},
+		/**
+		 * 订阅中继上的 signal 事件。
+		 * @param {string} topic 信令 topic
+		 * @param {Function} onSignal 信令回调
+		 * @returns {Promise<() => void>} 取消订阅函数
+		 */
+		async onSignal(topic, onSignal) {
+			let closed = false
+			const sockets = []
+			const subscriptionId = randomBytes(8).toString('hex')
+			let connected = 0
+			for (const relayUrl of relayUrls) {
+				let ws
+				try { ws = await connectRelay(relayUrl) }
+				catch { continue }
+				connected++
+				sockets.push(ws)
+				ws.addEventListener('message', event => {
+					if (closed) return
+					let parsed
+					try { parsed = JSON.parse(String(event.data)) } catch { return }
+					if (!Array.isArray(parsed) || parsed[0] !== 'EVENT') return
+					const nostrEvent = parsed[2]
+					if (nostrEvent?.kind !== NOSTR_SIGNAL_KIND) return
+					try { onSignal(base64ToBytes(String(nostrEvent.content || '')), { relayUrl, event: nostrEvent }) }
+					catch { /* ignore */ }
+				})
+				ws.send(JSON.stringify(['REQ', subscriptionId, { kinds: [NOSTR_SIGNAL_KIND], '#t': [topic], '#x': ['signal'] }]))
+			}
+			if (!connected) throw new Error('nostr: no relay available for signal subscribe')
+			return () => {
+				closed = true
+				for (const ws of sockets)
+					try { ws.close() } catch { /* ignore */ }
+			}
+		},
+	}
+}

package/entity/files/acl.mjs

@@ -0,0 +1,38 @@
+import { isLogicalEntityHash } from '../logical_entity.mjs'
+import { isWritableLocalEntity } from '../replica.mjs'
+
+import { checkManifestAcl, resolveManifestAclType } from './manifest_acl_registry.mjs'
+
+/**
+ * @param {string} replicaUsername 请求 replica
+ * @param {string} ownerEntityHash 文件 owner
+ * @param {import('../../files/manifest.mjs').FileManifest} manifest 清单
+ * @returns {Promise<boolean>} 是否允许读
+ */
+export async function canReadManifest(replicaUsername, ownerEntityHash, manifest) {
+	const type = resolveManifestAclType(manifest, ownerEntityHash)
+	if (type)
+		return checkManifestAcl(type, { replicaUsername, ownerEntityHash, manifest })
+
+	if (isLogicalEntityHash(ownerEntityHash))
+		return false
+
+	return true
+}
+
+/**
+ * @param {string} replicaUsername 请求 replica
+ * @param {string} ownerEntityHash 所有者
+ * @param {string} logicalPath 路径
+ * @returns {Promise<boolean>} 是否允许写
+ */
+export async function canWriteManifestPath(replicaUsername, ownerEntityHash, logicalPath) {
+	const type = resolveManifestAclType(null, ownerEntityHash)
+	if (type)
+		return checkManifestAcl(type, { replicaUsername, ownerEntityHash, manifest: /** @type {any} */ {} }, logicalPath)
+
+	if (isLogicalEntityHash(ownerEntityHash))
+		return false
+
+	return isWritableLocalEntity(ownerEntityHash)
+}