@steve02081504/fount-p2p 0.0.12 → 0.0.14

package/infra/priority.mjs

@@ -0,0 +1,56 @@
+import { normalizeHex64 } from '../core/hexIds.mjs'
+import { getReputationTable } from '../node/reputation_sync.mjs'
+import { pickNodeScoreFromReputation } from '../reputation/pick_score.mjs'
+import { getLinkRegistry } from '../transport/link_registry.mjs'
+
+
+/** @type {{ useLocalReputation: boolean }} */
+let priorityConfig = { useLocalReputation: false }
+
+const PRIORITY_BOOST = 1000
+
+/**
+ * 配置 infra 路由加权（是否用本地 reputation）。
+ * @param {{ useLocalReputation?: boolean }} config - 是否用本地 reputation 加权路由
+ * @returns {void}
+ */
+export function setInfraPriority(config = {}) {
+	priorityConfig = {
+		useLocalReputation: Boolean(config.useLocalReputation),
+	}
+	applyPriorityToRegistry()
+}
+
+/**
+ * @returns {{ useLocalReputation: boolean }} 当前 priority 配置副本
+ */
+export function getInfraPriority() {
+	return { ...priorityConfig }
+}
+
+/**
+ * @returns {void}
+ */
+export function applyPriorityToRegistry() {
+	const registry = getLinkRegistry()
+	if (!priorityConfig.useLocalReputation) {
+		registry.setPriorityWeightFunction(null)
+		return
+	}
+	registry.setPriorityWeightFunction(nodeHash => {
+		const score = pickNodeScoreFromReputation(
+			getReputationTable(),
+			normalizeHex64(nodeHash) || nodeHash,
+		)
+		return Math.floor(score * PRIORITY_BOOST)
+	})
+}
+
+/**
+ * stopInfra：卸 weight，并重置 priority 配置，避免再次 startInfra 幽灵恢复加权。
+ * @returns {void}
+ */
+export function clearInfraPriorityFromRegistry() {
+	priorityConfig = { useLocalReputation: false }
+	getLinkRegistry().setPriorityWeightFunction(null)
+}

package/infra/service.mjs

@@ -0,0 +1,140 @@
+
+import { isNodeInitialized } from '../node/instance.mjs'
+import { setOverlayRateGate, clearOverlayRateGate } from '../overlay/index.mjs'
+import { getLinkRegistry } from '../transport/link_registry.mjs'
+import { attachNodeScopeMailbox } from '../transport/node_scope.mjs'
+
+import { attachInfraDebugLog, detachInfraDebugLog } from './debug_log.mjs'
+import {
+	applyPriorityToRegistry,
+	clearInfraPriorityFromRegistry,
+	getInfraPriority,
+	setInfraPriority,
+} from './priority.mjs'
+import infraTunables from './tunables.json' with { type: 'json' }
+
+/** @type {Map<string, { tokens: number, updatedAt: number }>} */
+const overlayRateBuckets = new Map()
+
+/**
+ * Token bucket：桶容量 = burst，补充速率 = perMin/min。
+ * @param {Map<string, { tokens: number, updatedAt: number }>} buckets - 每 sender 桶状态
+ * @param {string} sender - 发送方 nodeHash
+ * @param {number} now - 当前时间戳（ms）
+ * @param {{ perMin: number, burst: number }} limits - 限速参数
+ * @returns {boolean} 是否允许本次 overlay 动作
+ */
+export function consumeOverlayRateToken(buckets, sender, now, limits) {
+	const perMin = Math.max(1, limits.perMin)
+	const burst = Math.max(1, limits.burst)
+	const refillPerMs = perMin / 60_000
+	let bucket = buckets.get(sender)
+	if (!bucket) bucket = { tokens: burst, updatedAt: now }
+	const elapsed = Math.max(0, now - bucket.updatedAt)
+	bucket.tokens = Math.min(burst, bucket.tokens + elapsed * refillPerMs)
+	bucket.updatedAt = now
+	if (bucket.tokens < 1) {
+		buckets.set(sender, bucket)
+		return false
+	}
+	bucket.tokens -= 1
+	buckets.set(sender, bucket)
+	return true
+}
+
+/**
+ * @returns {void}
+ */
+function installOverlayRateLimit() {
+	const limits = {
+		perMin: Math.max(1, Number(infraTunables.overlayRatePerMin) || 120),
+		burst: Math.max(1, Number(infraTunables.overlayRateBurst) || 30),
+	}
+	setOverlayRateGate((sender, action) => {
+		if (action !== 'route_req' && action !== 'relay') return true
+		return consumeOverlayRateToken(overlayRateBuckets, sender, Date.now(), limits)
+	})
+}
+
+/**
+ * @returns {void}
+ */
+function removeOverlayRateLimit() {
+	clearOverlayRateGate()
+	overlayRateBuckets.clear()
+}
+
+/** @type {boolean} */
+let infraRunning = false
+
+/** @type {(() => void) | null} */
+let mailboxDispose = null
+
+/** @type {(() => void) | null} */
+let debugDispose = null
+
+/** @type {number | null} */
+let savedMaxActive = null
+
+/**
+ * @returns {boolean} infra relay 是否在运行
+ */
+export function isInfraRunning() {
+	return infraRunning
+}
+
+/**
+ * 启动 public-good infra：overlay、mailbox、rate limit、priority、debug log。
+ * @param {{ maxActive?: number, logger?: { info?: Function, warn?: Function, error?: Function, log?: Function } | null }} [options] - maxActive 与 debug logger
+ * @returns {Promise<void>}
+ */
+export async function startInfra(options = {}) {
+	if (!isNodeInitialized()) throw new Error('p2p: startInfra requires initNode')
+	if (infraRunning) {
+		if (options.maxActive != null) await getLinkRegistry().setMaxActive(options.maxActive)
+		if (options.logger !== undefined) {
+			detachInfraDebugLog()
+			debugDispose = attachInfraDebugLog(options.logger ?? null)
+		}
+		applyPriorityToRegistry()
+		return
+	}
+	const registry = getLinkRegistry()
+	await registry.ensureRuntime()
+	registry.ensureOverlayRouter()
+	installOverlayRateLimit()
+	savedMaxActive = registry.getMaxActive()
+	if (options.maxActive != null)
+		await registry.setMaxActive(options.maxActive)
+	else
+		await registry.setMaxActive(infraTunables.defaultMaxActive ?? savedMaxActive)
+	if (!mailboxDispose) mailboxDispose = attachNodeScopeMailbox()
+	const logger = options.logger === undefined ? console : options.logger ?? null
+	debugDispose = attachInfraDebugLog(logger)
+	applyPriorityToRegistry()
+	infraRunning = true
+}
+
+/**
+ * 卸掉 infra 自己挂的面（mailbox / rate / debug / priority / maxActive 恢复）。
+ * 不碰用户另行 attach 的 wires，不绑信誉同步。
+ * @returns {Promise<void>}
+ */
+export async function stopInfra() {
+	if (!infraRunning) return
+	debugDispose?.()
+	debugDispose = null
+	detachInfraDebugLog()
+	clearInfraPriorityFromRegistry()
+	removeOverlayRateLimit()
+	mailboxDispose?.()
+	mailboxDispose = null
+	const registry = getLinkRegistry()
+	if (savedMaxActive != null)
+		await registry.setMaxActive(savedMaxActive)
+	savedMaxActive = null
+	infraRunning = false
+}
+
+/** 再导出：infra 路由加权配置（见 `priority.mjs`）。 */
+export { getInfraPriority, setInfraPriority }

package/infra/tunables.json

@@ -0,0 +1,5 @@
+{
+	"defaultMaxActive": 96,
+	"overlayRatePerMin": 120,
+	"overlayRateBurst": 30
+}

package/link/frame.mjs

@@ -2,12 +2,10 @@ import { randomBytes } from 'node:crypto'
 
 import { bytesToHex, hexToBytes, toBytes } from '../core/bytes_codec.mjs'
 
-/** 二进制帧协议版本号。 */
-export const FRAME_VERSION = 1
 /** frameId 字段字节长度（128 位）。 */
 export const FRAME_ID_BYTES = 16
-/** 帧头：version(1) + frameId(16) + seq(4) + total(4)。 */
-export const FRAME_HEADER_BYTES = 1 + FRAME_ID_BYTES + 4 + 4
+/** 帧头：frameId(16) + seq(4) + total(4)。 */
+export const FRAME_HEADER_BYTES = FRAME_ID_BYTES + 4 + 4
 /** 默认单帧最大 chunk 大小（15 KiB）。 */
 export const DEFAULT_MAX_FRAME_CHUNK_BYTES = 15 * 1024
 /** 重组后消息最大字节数（8 MiB）。 */
@@ -62,11 +60,10 @@ export function encodeFrames(frameId, bytes, maxChunkBytes = DEFAULT_MAX_FRAME_C
 		const end = Math.min(body.byteLength, start + chunkBytes)
 		const chunk = body.subarray(start, end)
 		const frame = new Uint8Array(FRAME_HEADER_BYTES + chunk.byteLength)
-		frame[0] = FRAME_VERSION
-		frame.set(idBytes, 1)
+		frame.set(idBytes, 0)
 		const view = new DataView(frame.buffer, frame.byteOffset, frame.byteLength)
-		view.setUint32(1 + FRAME_ID_BYTES, seq, false)
-		view.setUint32(1 + FRAME_ID_BYTES + 4, total, false)
+		view.setUint32(FRAME_ID_BYTES, seq, false)
+		view.setUint32(FRAME_ID_BYTES + 4, total, false)
 		frame.set(chunk, FRAME_HEADER_BYTES)
 		frames.push(frame)
 	}
@@ -76,23 +73,19 @@ export function encodeFrames(frameId, bytes, maxChunkBytes = DEFAULT_MAX_FRAME_C
 /**
  * 解析单帧头与 chunk。
  * @param {Uint8Array | ArrayBuffer | ArrayBufferView} frame 原始帧
- * @returns {{ version: number, frameId: string, seq: number, total: number, chunk: Uint8Array }} 帧字段
+ * @returns {{ frameId: string, seq: number, total: number, chunk: Uint8Array }} 帧字段
  */
 export function decodeFrame(frame) {
 	const bytes = toBytes(frame)
 	if (bytes.byteLength < FRAME_HEADER_BYTES)
 		throw new Error('p2p: frame too short')
-	const version = bytes[0]
-	if (version !== FRAME_VERSION)
-		throw new Error(`p2p: unsupported frame version ${version}`)
-	const frameId = bytesToHex(bytes.subarray(1, 1 + FRAME_ID_BYTES))
+	const frameId = bytesToHex(bytes.subarray(0, FRAME_ID_BYTES))
 	const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength)
-	const seq = view.getUint32(1 + FRAME_ID_BYTES, false)
-	const total = view.getUint32(1 + FRAME_ID_BYTES + 4, false)
+	const seq = view.getUint32(FRAME_ID_BYTES, false)
+	const total = view.getUint32(FRAME_ID_BYTES + 4, false)
 	if (!total || seq >= total)
 		throw new Error('p2p: invalid frame sequence')
 	return {
-		version,
 		frameId,
 		seq,
 		total,

package/link/handshake.mjs

@@ -2,6 +2,7 @@ import { Buffer } from 'node:buffer'
 import { randomBytes } from 'node:crypto'
 
 import { isHex64, normalizeHex64 } from '../core/hexIds.mjs'
+import { normalizeLanHosts } from '../discovery/lan_interfaces.mjs'
 import { normalizeTcpPort } from '../core/tcp_port.mjs'
 import { keyPairFromSeed, pubKeyHash, sign, verify } from '../crypto/crypto.mjs'
 import { ensureNodeSeed, getNodeHash } from '../node/identity.mjs'
@@ -51,7 +52,7 @@ export function buildAuthMessage(peerNonce, localBinding, localNodeHash) {
 /**
  * 构造 link hello 握手包。
  * @param {{ nodeHash?: string, nodePubKey?: string, nonce?: string }} [options] 可选身份字段，省略则从本地节点种子推导
- * @returns {{ v: 1, nodeHash: string, nodePubKey: string, nonce: string }} hello 对象
+ * @returns {{ nodeHash: string, nodePubKey: string, nonce: string }} hello 对象
  */
 export function buildHello(options = {}) {
 	let publicKey = null
@@ -66,7 +67,7 @@ export function buildHello(options = {}) {
 		throw new Error('p2p: invalid hello fields')
 	if (pubKeyHash(Buffer.from(nodePubKey, 'hex')) !== nodeHash)
 		throw new Error('p2p: hello nodePubKey does not match nodeHash')
-	return { v: 1, nodeHash, nodePubKey, nonce }
+	return { nodeHash, nodePubKey, nonce }
 }
 
 /**
@@ -92,13 +93,12 @@ export async function buildAuth(peerNonce, localBinding, options = {}) {
 /**
  * 解析并校验 hello 对象，无效时返回 null。
  * @param {unknown} hello 原始 hello 载荷
- * @returns {{ v: 1, nodeHash: string, nodePubKey: string, nonce: string } | null} 规范化 hello 或 null
+ * @returns {{ nodeHash: string, nodePubKey: string, nonce: string } | null} 规范化 hello 或 null
  */
 export function parseHello(hello) {
 	const nodeHash = normalizeHex64(hello?.nodeHash)
 	const nodePubKey = normalizeHex64(hello?.nodePubKey)
 	const nonce = normalizeHex64(hello?.nonce)
-	if (Number(hello?.v) !== 1) return null
 	if (!isHex64(nodeHash) || !isHex64(nodePubKey) || !isHex64(nonce)) return null
 	try {
 		if (pubKeyHash(Buffer.from(nodePubKey, 'hex')) !== nodeHash) return null
@@ -106,7 +106,7 @@ export function parseHello(hello) {
 	catch {
 		return null
 	}
-	return { v: 1, nodeHash, nodePubKey, nonce }
+	return { nodeHash, nodePubKey, nonce }
 }
 
 /**
@@ -136,26 +136,30 @@ export async function verifyAuth(hello, auth, expectedNonce, remoteBinding) {
 
 /**
  * 构造 discovery advert 待签名字节串。
- * @param {string} topic 广播主题
+ * @param {string} rendezvousKey discovery 内部汇合键
  * @param {number} ts 时间戳（毫秒）
  * @param {string} nodeHash 节点 nodeHash
  * @param {number | null} [tcpPort=null] 可选 LAN TCP 监听端口（签入消息）
+ * @param {unknown} [lanHosts=null] 可选 LAN IPv4 列表（签入消息）
  * @returns {Uint8Array} 待签名消息字节
  */
-export function buildAdvertMessage(topic, ts, nodeHash, tcpPort = null) {
-	const base = `fount-advert\0${String(topic)}\0${String(ts)}\0${normalizeHex64(nodeHash)}`
+export function buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort = null, lanHosts = null) {
+	const base = `fount-advert\0${String(rendezvousKey)}\0${String(ts)}\0${normalizeHex64(nodeHash)}`
 	const port = normalizeTcpPort(tcpPort)
-	return Buffer.from(port ? `${base}\0${port}` : base, 'utf8')
+	let message = port ? `${base}\0${port}` : base
+	const hosts = normalizeLanHosts(lanHosts)
+	if (hosts.length) message += `\0${hosts.join(',')}`
+	return Buffer.from(message, 'utf8')
 }
 
 /**
  * 构造带签名的 discovery advert。
- * @param {string} topic 广播主题
+ * @param {string} rendezvousKey discovery 内部汇合键
  * @param {number} [ts=Date.now()] 时间戳（毫秒）
- * @param {{ secretKey?: Uint8Array, nodeHash?: string, nodePubKey?: string, tcpPort?: number } | null} [options] 签名身份与可选 tcpPort
- * @returns {Promise<{ nodeHash: string, nodePubKey: string, ts: number, sig: string, tcpPort?: number }>} 签名 advert
+ * @param {{ secretKey?: Uint8Array, nodeHash?: string, nodePubKey?: string, tcpPort?: number, lanHosts?: unknown }} | null} [options] 签名身份与可选 tcpPort / lanHosts
+ * @returns {Promise<{ nodeHash: string, nodePubKey: string, ts: number, sig: string, tcpPort?: number, lanHosts?: string[] }>} 签名 advert
  */
-export async function buildSignedAdvert(topic, ts = Date.now(), options = null) {
+export async function buildSignedAdvert(rendezvousKey, ts = Date.now(), options = null) {
 	const seed = options?.secretKey
 		? Buffer.from(options.secretKey)
 		: Buffer.from(ensureNodeSeed(), 'hex')
@@ -167,7 +171,8 @@ export async function buildSignedAdvert(topic, ts = Date.now(), options = null)
 	const tcpPort = normalizeTcpPort(options?.tcpPort)
 	if (options?.tcpPort && !tcpPort)
 		throw new Error('p2p: advert tcpPort invalid')
-	const message = buildAdvertMessage(topic, ts, nodeHash, tcpPort)
+	const lanHosts = normalizeLanHosts(options?.lanHosts)
+	const message = buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort, lanHosts)
 	const sig = await sign(message, secretKey)
 	const advert = {
 		nodeHash,
@@ -176,19 +181,20 @@ export async function buildSignedAdvert(topic, ts = Date.now(), options = null)
 		sig: Buffer.from(sig).toString('hex'),
 	}
 	if (tcpPort) advert.tcpPort = tcpPort
+	if (lanHosts.length) advert.lanHosts = lanHosts
 	return advert
 }
 
 /**
  * 验证 discovery advert 签名与时间戳，成功返回发布者 nodeHash。
- * @param {string} topic 期望的广播主题
+ * @param {string} rendezvousKey 期望的汇合键
  * @param {unknown} advert 原始 advert 载荷
  * @param {number} [now=Date.now()] 当前时间（毫秒）
  * @param {number} [maxSkewMs=10 * 60_000] 允许的最大时钟偏差（毫秒）
  * @returns {Promise<string | null>} 验证通过的 nodeHash，失败返回 null
  */
-export async function verifySignedAdvert(topic, advert, now = Date.now(), maxSkewMs = 10 * 60_000) {
-	const parsedHello = parseHello({ v: 1, nodeHash: advert?.nodeHash, nodePubKey: advert?.nodePubKey, nonce: '0'.repeat(64) })
+export async function verifySignedAdvert(rendezvousKey, advert, now = Date.now(), maxSkewMs = 10 * 60_000) {
+	const parsedHello = parseHello({ nodeHash: advert?.nodeHash, nodePubKey: advert?.nodePubKey, nonce: '0'.repeat(64) })
 	if (!parsedHello) return null
 	const ts = Number(advert?.ts)
 	const sig = String(advert?.sig ?? '').trim().toLowerCase()
@@ -196,7 +202,8 @@ export async function verifySignedAdvert(topic, advert, now = Date.now(), maxSke
 	const hasTcpPortField = !!advert?.tcpPort
 	const tcpPort = normalizeTcpPort(advert?.tcpPort)
 	if (hasTcpPortField && !tcpPort) return null
-	const message = buildAdvertMessage(topic, ts, parsedHello.nodeHash, tcpPort)
+	const lanHosts = normalizeLanHosts(advert?.lanHosts)
+	const message = buildAdvertMessage(rendezvousKey, ts, parsedHello.nodeHash, tcpPort, lanHosts)
 	const ok = await verify(Buffer.from(sig, 'hex'), message, Buffer.from(parsedHello.nodePubKey, 'hex'))
 	return ok ? parsedHello.nodeHash : null
 }

package/link/pipe.mjs

@@ -28,25 +28,25 @@ export function asLinkHandle(pipe, extras = {}) {
 		/** @returns {number} 提供者 level */
 		get level() { return pipe.level },
 		/**
-		 * @param {...any} args 透传 send
+		 * @param {...any} callArguments 透传 send
 		 * @returns {ReturnType<typeof pipe.send>} 是否发送成功
 		 */
-		send: (...args) => pipe.send(...args),
+		send: (...callArguments) => pipe.send(...callArguments),
 		/**
-		 * @param {...any} args 透传 onEnvelope
+		 * @param {...any} callArguments 透传 onEnvelope
 		 * @returns {ReturnType<typeof pipe.onEnvelope>} 取消订阅
 		 */
-		onEnvelope: (...args) => pipe.onEnvelope(...args),
+		onEnvelope: (...callArguments) => pipe.onEnvelope(...callArguments),
 		/**
-		 * @param {...any} args 透传 onDown
+		 * @param {...any} callArguments 透传 onDown
 		 * @returns {ReturnType<typeof pipe.onDown>} 取消订阅
 		 */
-		onDown: (...args) => pipe.onDown(...args),
+		onDown: (...callArguments) => pipe.onDown(...callArguments),
 		/**
-		 * @param {...any} args 透传 close
+		 * @param {...any} callArguments 透传 close
 		 * @returns {ReturnType<typeof pipe.close>} 关闭完成
 		 */
-		close: (...args) => pipe.close(...args),
+		close: (...callArguments) => pipe.close(...callArguments),
 		/** @returns {ReturnType<typeof pipe.stats>} 运行时统计 */
 		stats: () => pipe.stats(),
 		...extras,

package/link/providers/ble_gatt.mjs

@@ -207,9 +207,9 @@ export function createBleGattLinkProvider() {
 			 * @returns {void}
 			 */
 			onWriteRequest(_connection, data, _offset, _withoutResponse, callback) {
-				const buf = Buffer.from(data)
-				if (sessionInbound) sessionInbound(buf)
-				else void acceptPeripheralWrite(buf).catch(() => { })
+				const buffer = Buffer.from(data)
+				if (sessionInbound) sessionInbound(buffer)
+				else void acceptPeripheralWrite(buffer).catch(() => { })
 				callback(bleno.Characteristic.RESULT_SUCCESS)
 			},
 		})
@@ -228,12 +228,12 @@ export function createBleGattLinkProvider() {
 	}
 
 	/**
-	 * @param {Buffer} buf 入站写（首包应为 link-open）
+	 * @param {Buffer} buffer 入站写（首包应为 link-open）
 	 * @returns {Promise<void>}
 	 */
-	async function acceptPeripheralWrite(buf) {
+	async function acceptPeripheralWrite(buffer) {
 		if (activeInbound || acceptInflight || !onInbound || !localIdentity) return
-		const opened = parseLinkOpen(buf)
+		const opened = parseLinkOpen(buffer)
 		if (!opened) return
 		acceptInflight = true
 		try {

package/link/providers/lan_tcp.mjs

@@ -3,13 +3,50 @@ import { randomBytes } from 'node:crypto'
 import net from 'node:net'
 
 import { normalizeHex64 } from '../../core/hexIds.mjs'
-import { getLanPeerHint } from '../../discovery/lan_peer_hints.mjs'
+import { getLanPeerHint, listLanPeerHints } from '../../discovery/lan_peer_hints.mjs'
 import { asLinkHandle } from '../pipe.mjs'
 
 import { LINK_LEVEL_LAN_TCP } from './levels.mjs'
 import { buildLinkOpen, createLinkIdBoundPipe, parseLinkOpen } from './link_id_pipe.mjs'
 
 const MAX_FRAME_BYTES = 1 << 20
+/** LAN TCP 单 endpoint 连接超时。 */
+const LAN_TCP_CONNECT_TIMEOUT_MS = 3_000
+
+/**
+ * @param {string} host 目标 host
+ * @param {number} port 目标 port
+ * @param {number} [timeoutMs=LAN_TCP_CONNECT_TIMEOUT_MS] 超时
+ * @returns {Promise<import('node:net').Socket>} 已连接 socket
+ */
+function connectTcp(host, port, timeoutMs = LAN_TCP_CONNECT_TIMEOUT_MS) {
+	return new Promise((resolve, reject) => {
+		const conn = net.createConnection({ host, port })
+		const timer = setTimeout(() => {
+			conn.destroy()
+			reject(new Error(`p2p: lan_tcp connect timeout ${host}:${port}`))
+		}, timeoutMs)
+		/**
+		 * @param {Error} error 连接错误
+		 * @returns {void}
+		 */
+		const onError = error => {
+			clearTimeout(timer)
+			conn.off('connect', onConnect)
+			reject(error)
+		}
+		/**
+		 * @returns {void}
+		 */
+		function onConnect() {
+			clearTimeout(timer)
+			conn.off('error', onError)
+			resolve(conn)
+		}
+		conn.once('error', onError)
+		conn.once('connect', onConnect)
+	})
+}
 
 /**
  * 在 socket 上挂 length-prefix 编解码（u32be + payload）。
@@ -168,41 +205,33 @@ async function openTcpPipe(options) {
  */
 async function dialLanTcp(options) {
 	const remoteNodeHash = normalizeHex64(options.nodeHash)
-	const hint = getLanPeerHint(remoteNodeHash)
-	if (!hint) throw new Error('p2p: lan_tcp no peer hint')
+	const hints = listLanPeerHints(remoteNodeHash)
+	if (!hints.length) throw new Error('p2p: lan_tcp no peer hint')
 
-	const socket = await new Promise((resolve, reject) => {
-		const conn = net.createConnection({ host: hint.host, port: hint.port })
-		/**
-		 * @param {Error} error 连接错误
-		 * @returns {void}
-		 */
-		const onError = error => {
-			conn.off('connect', onConnect)
-			reject(error)
+	let lastError = null
+	for (const hint of hints) {
+		/** @type {import('node:net').Socket | null} */
+		let socket = null
+		try {
+			socket = await connectTcp(hint.host, hint.port)
+			const link = await openTcpPipe({
+				initiator: true,
+				linkId: randomBytes(32).toString('hex'),
+				nodeHash: remoteNodeHash,
+				localIdentity: options.localIdentity,
+				socket,
+				host: hint.host,
+				port: hint.port,
+			})
+			await link.ready
+			return link
 		}
-		/**
-		 * @returns {void}
-		 */
-		function onConnect() {
-			conn.off('error', onError)
-			resolve(conn)
+		catch (error) {
+			lastError = error
+			try { socket?.destroy() } catch { /* ignore */ }
 		}
-		conn.once('error', onError)
-		conn.once('connect', onConnect)
-	})
-
-	const link = await openTcpPipe({
-		initiator: true,
-		linkId: randomBytes(32).toString('hex'),
-		nodeHash: remoteNodeHash,
-		localIdentity: options.localIdentity,
-		socket,
-		host: hint.host,
-		port: hint.port,
-	})
-	await link.ready
-	return link
+	}
+	throw lastError || new Error('p2p: lan_tcp dial failed')
 }
 
 /**

package/link/providers/webrtc.mjs

@@ -1,4 +1,5 @@
 import { getSignalingRuntimeConfig } from '../../node/instance.mjs'
+import { nodeDebug } from '../../node/log.mjs'
 import { ms } from '../../utils/duration.mjs'
 import { createLruMap } from '../../utils/lru.mjs'
 import {
@@ -43,8 +44,9 @@ export async function canUseWebRtcLink() {
 		await loadNodeRtcPolyfill()
 		cachedAvailable = true
 	}
-	catch {
+	catch (error) {
 		cachedAvailable = false
+		nodeDebug('p2p:webrtc unavailable', { err: formatErrorReason(error) })
 	}
 	return cachedAvailable
 }

package/link/rtc.mjs

@@ -2,7 +2,7 @@ import process from 'node:process'
 
 import { toBytes } from '../core/bytes_codec.mjs'
 import { getSignalingRuntimeConfig } from '../node/instance.mjs'
-import { wrapRtcPeerConnectionForMdns } from '../transport/rtc_mdns_filter.mjs'
+import { wrapRtcPeerConnectionForIceLocalHostname } from '../transport/rtc_ice_local_hostname.mjs'
 
 /**
  * 注册进程退出时销毁 libdatachannel 全部原生资源（仅一次）。
@@ -20,9 +20,9 @@ process.on('exit', () => {
  */
 export async function loadNodeRtcPolyfill() {
 	const mod = await import('node-datachannel/polyfill')
-	const { mdnsPolicy } = getSignalingRuntimeConfig()
+	const { iceLocalHostnamePolicy } = getSignalingRuntimeConfig()
 	return {
-		RTCPeerConnection: wrapRtcPeerConnectionForMdns(mod.RTCPeerConnection, mod.RTCIceCandidate, mdnsPolicy),
+		RTCPeerConnection: wrapRtcPeerConnectionForIceLocalHostname(mod.RTCPeerConnection, mod.RTCIceCandidate, iceLocalHostnamePolicy),
 		RTCIceCandidate: mod.RTCIceCandidate,
 	}
 }

package/mailbox/consumer_registry.mjs

@@ -54,8 +54,8 @@ export async function dispatchMailboxRecordsToConsumers(username, records) {
 			const ids = await handler(username, scoped)
 			for (const id of ids || []) delivered.add(String(id))
 		}
-		catch (err) {
-			console.error('mailbox: consumer batch failed, retry per record', err)
+		catch (error) {
+			console.error('mailbox: consumer batch failed, retry per record', error)
 			for (const row of scoped)
 				try {
 					const ids = await handler(username, [row])

package/mailbox/deliver_or_store.mjs

@@ -1,6 +1,6 @@
 import { normalizeHex64 } from '../core/hexIds.mjs'
 import { getNodeTransportSettings, getNodeHash } from '../node/identity.mjs'
-import { deliverToUserRoomPeers, ensureUserRoom } from '../transport/user_room.mjs'
+import { activeLinkRoster, deliverToUserRoomPeers } from '../transport/user_room.mjs'
 import { DEFAULT_TRUST_GRAPH_OWNER, requireTrustGraphProvider } from '../trust_graph/registry.mjs'
 
 import { allowMailboxRelayForTier } from './importance.mjs'
@@ -23,9 +23,9 @@ import {
  * @returns {Promise<string | null>} 已验证的 remote nodeHash
  */
 async function resolveRemoteNodeHashForPeer(username, peerId) {
+	void username
 	if (!peerId) return null
-	const slot = await ensureUserRoom({ replicaUsername: username })
-	const entry = slot?.getRoster()?.find(row => row.peerId === peerId)
+	const entry = activeLinkRoster().find(row => row.peerId === peerId)
 	const remote = entry?.remoteNodeHash?.trim().toLowerCase()
 	return remote || null
 }
@@ -51,9 +51,9 @@ async function resolveRelayHopForIngress(record) {
  * @returns {Promise<{ maxHop: number, relayFanoutTrusted: number, relayFanoutNormal: number, wantFanout: number, batterySaver: boolean }>} 按在线 peer 数缩放的路由
  */
 async function resolveRouting(username) {
+	void username
 	const { batterySaver, mailbox } = getNodeTransportSettings()
-	const slot = await ensureUserRoom({ replicaUsername: username })
-	const peerCount = slot?.getRoster()?.length ?? 0
+	const peerCount = activeLinkRoster().length
 	return resolveMailboxRoutingForPeerCount(peerCount, mailbox, batterySaver)
 }