@steve02081504/fount-p2p 0.0.12 → 0.0.14

package/node/reputation_sync.mjs

@@ -0,0 +1,318 @@
+import { randomUUID } from 'node:crypto'
+
+import { isHex64, normalizeHex64 } from '../core/hexIds.mjs'
+import { sendToNodeLink } from '../transport/link_registry.mjs'
+import { attachNodeScopeFeature, ensureNodeScope, getNodeScopeWire } from '../transport/node_scope.mjs'
+
+import {
+	loadReputation,
+	mutateReputation,
+} from './reputation_store.mjs'
+import { readNodeJsonSync, writeNodeJsonSync } from './storage.mjs'
+
+const SYNC_DATA_NAME = 'reputation_sync'
+const MAX_LOCKED_SCORE = 1
+
+/**
+ * @typedef {{
+ *   trustSyncDonors: string[]
+ *   reputationExportAllowlist: string[]
+ *   lockedMaxNodeHashes: string[]
+ *   lockedMaxPrevByNodeHash: Record<string, number>
+ * }} ReputationSyncConfig
+ */
+
+/** @type {ReputationSyncConfig | null} */
+let syncConfig = null
+
+/** @type {Map<string, { resolve: (v: object) => void, reject: (e: Error) => void, timer: ReturnType<typeof setTimeout>, donor: string }>} */
+const pendingPulls = new Map()
+
+/** @type {Set<() => void>} */
+const syncWireDisposers = new Set()
+
+let pullTimeoutMs = 8000
+
+/**
+ * @param {number} ms 超时毫秒；测试用
+ * @returns {void}
+ */
+export function setReputationPullTimeoutMsForTests(ms) {
+	pullTimeoutMs = Math.max(1, Number(ms) || 8000)
+}
+
+/**
+ * @returns {ReputationSyncConfig} 内存中的 sync 配置（首次从盘加载）
+ */
+function loadSyncConfig() {
+	if (syncConfig) return syncConfig
+	const raw = readNodeJsonSync(SYNC_DATA_NAME) || {}
+	/** @type {Record<string, number>} */
+	const lockedMaxPrevByNodeHash = {}
+	const prevRaw = raw.lockedMaxPrevByNodeHash && typeof raw.lockedMaxPrevByNodeHash === 'object'
+		? raw.lockedMaxPrevByNodeHash
+		: {}
+	for (const [nodeHash, score] of Object.entries(prevRaw)) {
+		const id = normalizeHex64(nodeHash)
+		const n = Number(score)
+		if (id && isHex64(id) && Number.isFinite(n)) lockedMaxPrevByNodeHash[id] = n
+	}
+	syncConfig = {
+		trustSyncDonors: normalizeHashList(raw.trustSyncDonors),
+		reputationExportAllowlist: normalizeHashList(raw.reputationExportAllowlist),
+		lockedMaxNodeHashes: normalizeHashList(raw.lockedMaxNodeHashes),
+		lockedMaxPrevByNodeHash,
+	}
+	return syncConfig
+}
+
+/**
+ * @param {unknown} list - 原始 hash 列表
+ * @returns {string[]} 规范化去重后的 64-hex 列表
+ */
+function normalizeHashList(list) {
+	return [...new Set((Array.isArray(list) ? list : [])
+		.map(id => normalizeHex64(id))
+		.filter(id => isHex64(id)))]
+}
+
+/**
+ * @returns {void}
+ */
+function persistSyncConfig() {
+	writeNodeJsonSync(SYNC_DATA_NAME, loadSyncConfig())
+}
+
+/**
+ * @returns {object} 当前 reputation 表（byNodeHash）
+ */
+export function getReputationTable() {
+	return loadReputation()
+}
+
+/**
+ * @param {object} table - 含 byNodeHash 的信誉表或裸 byNodeHash 对象
+ * @returns {void}
+ */
+export async function setReputationTable(table) {
+	const incoming = table?.byNodeHash && typeof table.byNodeHash === 'object' ? table.byNodeHash : table
+	if (!incoming || typeof incoming !== 'object') throw new Error('p2p: setReputationTable requires byNodeHash object')
+	await mutateReputation(data => {
+		data.byNodeHash = data.byNodeHash || {}
+		for (const [nodeHash, row] of Object.entries(incoming)) {
+			const id = normalizeHex64(nodeHash)
+			if (!id || !isHex64(id)) continue
+			const score = Number(row?.score ?? row)
+			if (!Number.isFinite(score)) continue
+			data.byNodeHash[id] = { ...data.byNodeHash[id] || {}, score }
+		}
+		applyLocksToReputation(data)
+	})
+}
+
+/**
+ * @param {object} data - reputation 存储对象
+ * @returns {void}
+ */
+function applyLocksToReputation(data) {
+	for (const nodeHash of loadSyncConfig().lockedMaxNodeHashes)
+		if (!data.byNodeHash[nodeHash]) data.byNodeHash[nodeHash] = { score: MAX_LOCKED_SCORE }
+		else data.byNodeHash[nodeHash].score = MAX_LOCKED_SCORE
+}
+
+/**
+ * 将节点分数钳到上限；首次 lock 时记下原分，unlock 时还原。
+ * @param {string[]} nodeHashes - 要 lock 的节点 hash 列表
+ * @returns {Promise<void>}
+ */
+export function lockReputationMax(nodeHashes) {
+	const config = loadSyncConfig()
+	const hashes = normalizeHashList(nodeHashes)
+	return mutateReputation(data => {
+		data.byNodeHash = data.byNodeHash || {}
+		for (const hash of hashes) {
+			if (config.lockedMaxNodeHashes.includes(hash)) continue
+			const prev = Number(data.byNodeHash[hash]?.score)
+			config.lockedMaxPrevByNodeHash[hash] = Number.isFinite(prev) ? prev : 0
+			config.lockedMaxNodeHashes.push(hash)
+		}
+		persistSyncConfig()
+		applyLocksToReputation(data)
+	})
+}
+
+/**
+ * 解除上限钳；还原 lock 前记下的分数。
+ * @param {string[]} nodeHashes - 要 unlock 的节点 hash 列表
+ * @returns {Promise<void>}
+ */
+export function unlockReputationMax(nodeHashes) {
+	const config = loadSyncConfig()
+	const remove = new Set(normalizeHashList(nodeHashes))
+	if (!remove.size) return Promise.resolve()
+	config.lockedMaxNodeHashes = config.lockedMaxNodeHashes.filter(id => !remove.has(id))
+	/** @type {Record<string, number>} */
+	const restore = {}
+	for (const hash of remove)
+		if (Object.hasOwn(config.lockedMaxPrevByNodeHash, hash)) {
+			restore[hash] = config.lockedMaxPrevByNodeHash[hash]
+			delete config.lockedMaxPrevByNodeHash[hash]
+		}
+
+	persistSyncConfig()
+	return mutateReputation(data => {
+		data.byNodeHash = data.byNodeHash || {}
+		for (const [hash, score] of Object.entries(restore))
+			if (!data.byNodeHash[hash]) data.byNodeHash[hash] = { score }
+			else data.byNodeHash[hash].score = score
+	})
+}
+
+/**
+ * @returns {string[]} 当前锁定为满分的节点 hash 列表
+ */
+export function getReputationLocks() {
+	return [...loadSyncConfig().lockedMaxNodeHashes]
+}
+
+/**
+ * @param {string[]} donors - 允许拉取信誉的 donor 节点
+ * @returns {void}
+ */
+export function setTrustSyncDonors(donors) {
+	loadSyncConfig().trustSyncDonors = normalizeHashList(donors)
+	persistSyncConfig()
+}
+
+/**
+ * @returns {string[]} 当前 trustSyncDonors 副本
+ */
+export function getTrustSyncDonors() {
+	return [...loadSyncConfig().trustSyncDonors]
+}
+
+/**
+ * @param {string[]} allowlist - 允许导出本机信誉表的节点
+ * @returns {void}
+ */
+export function setReputationExportAllowlist(allowlist) {
+	loadSyncConfig().reputationExportAllowlist = normalizeHashList(allowlist)
+	persistSyncConfig()
+}
+
+/**
+ * @returns {string[]} 当前 reputationExportAllowlist 副本
+ */
+export function getReputationExportAllowlist() {
+	return [...loadSyncConfig().reputationExportAllowlist]
+}
+
+/**
+ * @returns {object} 仅含 score 的导出表
+ */
+function exportScoreTable() {
+	const rep = loadReputation()
+	/** @type {Record<string, { score: number }>} */
+	const byNodeHash = {}
+	for (const [nodeHash, row] of Object.entries(rep.byNodeHash || {}))
+		byNodeHash[nodeHash] = { score: Number(row?.score ?? 0) }
+	return { byNodeHash }
+}
+
+/**
+ * 挂载信誉同步 wire（refcount；处理 rep_sync_req / rep_sync_res）。
+ * @returns {() => void} 取消 wire 挂载的 dispose
+ */
+export function attachReputationSyncWire() {
+	ensureNodeScope()
+	if (!getNodeScopeWire()) throw new Error('p2p: attachReputationSyncWire requires node scope wire')
+	const dispose = attachNodeScopeFeature('rep_sync', wire => {
+		const offs = [
+			wire.on('rep_sync_req', (payload, peerId) => {
+				const requester = normalizeHex64(peerId)
+				if (!requester || !getReputationExportAllowlist().includes(requester)) return
+				try {
+					wire.send('rep_sync_res', {
+						requestId: payload?.requestId,
+						...exportScoreTable(),
+					}, peerId)
+				}
+				catch { /* disconnected */ }
+			}),
+			wire.on('rep_sync_res', (payload, peerId) => {
+				const requestId = String(payload?.requestId || '')
+				const pending = pendingPulls.get(requestId)
+				if (!pending) return
+				if (normalizeHex64(peerId) !== pending.donor) return
+				clearTimeout(pending.timer)
+				pendingPulls.delete(requestId)
+				pending.resolve(payload)
+			}),
+		]
+		return () => {
+			for (const off of offs)
+				try { off?.() } catch { /* ignore */ }
+		}
+	})
+	syncWireDisposers.add(dispose)
+	return () => {
+		if (!syncWireDisposers.delete(dispose)) return
+		dispose()
+	}
+}
+
+/**
+ * 卸掉信誉同步 wire（强制清掉全部 ref）。
+ * @returns {void}
+ */
+export function detachReputationSyncWire() {
+	for (const dispose of [...syncWireDisposers]) {
+		syncWireDisposers.delete(dispose)
+		try { dispose() } catch { /* ignore */ }
+	}
+}
+
+/**
+ * 从 donor 拉取信誉表 JSON；不落盘。应用需自行 `setReputationTable`。
+ * @param {string} nodeHash - donor 节点 64-hex hash
+ * @returns {Promise<object>} donor 返回的信誉表
+ */
+export async function pullReputationFromNode(nodeHash) {
+	const donor = normalizeHex64(nodeHash)
+	if (!donor || !isHex64(donor)) throw new Error('p2p: pullReputationFromNode requires valid nodeHash')
+	if (!getTrustSyncDonors().includes(donor))
+		throw new Error('p2p: node not in trustSyncDonors')
+	attachReputationSyncWire()
+	const requestId = randomUUID()
+	const resultPromise = new Promise((resolve, reject) => {
+		const timer = setTimeout(() => {
+			pendingPulls.delete(requestId)
+			reject(new Error('p2p: rep_sync timeout'))
+		}, pullTimeoutMs)
+		pendingPulls.set(requestId, { resolve, reject, timer, donor })
+	})
+	const ok = await sendToNodeLink(donor, {
+		scope: 'node',
+		action: 'rep_sync_req',
+		payload: { requestId },
+	})
+	if (!ok) {
+		const pending = pendingPulls.get(requestId)
+		if (pending) {
+			clearTimeout(pending.timer)
+			pendingPulls.delete(requestId)
+		}
+		throw new Error('p2p: rep_sync_req send failed')
+	}
+	return await resultPromise
+}
+
+/**
+ * @returns {void}
+ */
+export function resetReputationSyncForTests() {
+	syncConfig = null
+	detachReputationSyncWire()
+	pendingPulls.clear()
+	pullTimeoutMs = 8000
+}

package/node/routing_profile.mjs

@@ -0,0 +1,21 @@
+import { getNodeTransportSettings, saveNodeTransportSettings } from './identity.mjs'
+
+/** @typedef {'default' | 'low'} RoutingProfile */
+
+/**
+ * @param {RoutingProfile} profile - `default` 或 `low`（省电）
+ * @returns {RoutingProfile} 写入后的当前 profile
+ */
+export function setRoutingProfile(profile) {
+	if (profile !== 'default' && profile !== 'low')
+		throw new Error('p2p: setRoutingProfile expects default|low')
+	saveNodeTransportSettings({ batterySaver: profile === 'low' })
+	return getRoutingProfile()
+}
+
+/**
+ * @returns {RoutingProfile} 当前路由 profile
+ */
+export function getRoutingProfile() {
+	return getNodeTransportSettings().batterySaver ? 'low' : 'default'
+}

package/node/signaling_config.mjs

@@ -1,32 +1,51 @@
 import process from 'node:process'
 
-/** @typedef {'none' | 'rewrite-loopback' | 'drop'} MdnsCandidatePolicy */
+/** @typedef {'none' | 'rewrite-loopback' | 'drop'} IceLocalHostnamePolicy */
 
 /**
  * @typedef {{
  *   relayOverride: string[] | null
- *   mdnsPolicy: MdnsCandidatePolicy
+ *   iceLocalHostnamePolicy: IceLocalHostnamePolicy
  *   trickleIceOff: boolean
  * }} SignalingRuntimeConfig
  */
 
+const ICE_LOCAL_HOSTNAME_POLICIES = new Set(['none', 'rewrite-loopback', 'drop'])
+
 /**
- * 生产默认：win32 丢弃 .local host candidate；其它平台不过滤。
- * @returns {SignalingRuntimeConfig} 生产默认信令配置
+ * 生产默认：win32 丢弃 `.local` host candidate；其它平台不过滤。
+ * @returns {SignalingRuntimeConfig} 默认信令运行时配置
  */
 export function defaultSignalingRuntimeConfig() {
-	const mdnsPolicy = process.platform === 'win32' ? 'drop' : 'none'
+	const iceLocalHostnamePolicy = process.platform === 'win32' ? 'drop' : 'none'
 	return {
 		relayOverride: null,
-		mdnsPolicy,
-		trickleIceOff: mdnsPolicy !== 'none',
+		iceLocalHostnamePolicy,
+		trickleIceOff: iceLocalHostnamePolicy !== 'none',
 	}
 }
 
 /**
- * 生产默认信令配置；测试通过 initNode({ signaling }) 注入。
- * @returns {SignalingRuntimeConfig} 生产默认信令配置
+ * @param {Partial<SignalingRuntimeConfig>} [patch] 合并字段
+ * @returns {SignalingRuntimeConfig} 合并后的信令运行时配置
  */
-export function resolveSignalingRuntimeConfig() {
-	return defaultSignalingRuntimeConfig()
+export function resolveSignalingRuntimeConfig(patch = {}) {
+	const base = defaultSignalingRuntimeConfig()
+	if (!patch || typeof patch !== 'object') return base
+	const policyRaw = patch.iceLocalHostnamePolicy
+	const iceLocalHostnamePolicy = ICE_LOCAL_HOSTNAME_POLICIES.has(/** @type {string} */ policyRaw)
+		? /** @type {IceLocalHostnamePolicy} */ policyRaw
+		: base.iceLocalHostnamePolicy
+	let { relayOverride } = base
+	if (Object.prototype.hasOwnProperty.call(patch, 'relayOverride'))
+		relayOverride = patch.relayOverride == null
+			? null
+			: [...new Set((Array.isArray(patch.relayOverride) ? patch.relayOverride : [])
+				.map(url => String(url || '').trim())
+				.filter(url => url.startsWith('wss://')))]
+	return {
+		relayOverride,
+		iceLocalHostnamePolicy,
+		trickleIceOff: patch.trickleIceOff !== undefined ? !!patch.trickleIceOff : iceLocalHostnamePolicy !== 'none',
+	}
 }

package/overlay/index.mjs

@@ -6,6 +6,26 @@ import { createLruMap } from '../utils/lru.mjs'
 
 const ROUTE_DOMAIN = 'fount-route'
 
+/** @type {((senderNodeHash: string, action: string) => boolean) | null} */
+let overlayRateGate = null
+
+/**
+ * 安装 overlay 入站限速门（返回 false 则丢弃）。
+ * @param {((senderNodeHash: string, action: string) => boolean) | null} rateGate 返回 false 则丢弃
+ * @returns {void}
+ */
+export function setOverlayRateGate(rateGate) {
+	overlayRateGate = typeof rateGate === 'function' ? rateGate : null
+}
+
+/**
+ * 清除 overlay 限速门。
+ * @returns {void}
+ */
+export function clearOverlayRateGate() {
+	overlayRateGate = null
+}
+
 /**
  * 构造 overlay 路由签名用的字节序列。
  * @param {string} reqId 路由请求 id
@@ -27,7 +47,7 @@ export function createOverlayRouter(registry, ttl = 3) {
 	const selfPubKey = registry.localIdentity.nodePubKey
 	const { secretKey } = registry.localIdentity
 	const seenReqs = createLruMap(4096)
-	/** @type {Map<string, { resolve: (path: string[]) => void, reject: (err: Error) => void, timer: number }>} */
+	/** @type {Map<string, { resolve: (path: string[]) => void, reject: (error: Error) => void, timer: number }>} */
 	const pendingRoutes = new Map()
 	/** @type {Set<(body: unknown, meta: { path: string[], from: string }) => void>} */
 	const relayListeners = new Set()
@@ -52,6 +72,7 @@ export function createOverlayRouter(registry, ttl = 3) {
 		const payload = envelope?.payload
 		const action = envelope?.action || ''
 		if (!payload) return
+		if (overlayRateGate && !overlayRateGate(senderNodeHash, action)) return
 		if (action === 'route_req') {
 			const reqId = payload.reqId || ''
 			const target = payload.target || ''

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@steve02081504/fount-p2p",
-	"version": "0.0.12",
+	"version": "0.0.14",
 	"description": "fount federation P2P layer — link, trust graph, mailbox, DAG, EVFS.",
 	"keywords": [
 		"network",
@@ -30,8 +30,13 @@
 		"!sim/**",
 		"!scripts/**"
 	],
+	"bin": {
+		"fount-p2p": "./infra/cli.mjs"
+	},
 	"exports": {
 		".": "./index.mjs",
+		"./infra": "./infra/service.mjs",
+		"./link": "./link/providers/index.mjs",
 		"./core/*": "./core/*.mjs",
 		"./crypto": "./crypto/crypto.mjs",
 		"./crypto/*": "./crypto/*.mjs",
@@ -42,7 +47,12 @@
 		"./discovery/bt": "./discovery/bt/index.mjs",
 		"./discovery/bt/*": "./discovery/bt/*.mjs",
 		"./discovery/*": "./discovery/*.mjs",
-		"./transport/*": "./transport/*.mjs",
+		"./transport/link_registry": "./transport/link_registry.mjs",
+		"./transport/user_room": "./transport/user_room.mjs",
+		"./transport/group_link_set": "./transport/group_link_set.mjs",
+		"./transport/node_scope": "./transport/node_scope.mjs",
+		"./transport/room_scopes": "./transport/room_scopes.mjs",
+		"./transport/remote_user_room": "./transport/remote_user_room.mjs",
 		"./rooms/*": "./rooms/*.mjs",
 		"./overlay": "./overlay/index.mjs",
 		"./overlay/*": "./overlay/*.mjs",
@@ -62,6 +72,7 @@
 	"dependencies": {
 		"@noble/curves": "latest",
 		"node-datachannel": "latest",
+		"on-shutdown": "latest",
 		"ws": "latest"
 	},
 	"devDependencies": {

package/rooms/scoped_link.mjs

@@ -1,171 +1,22 @@
-import { advertiseTopic, subscribeTopic } from '../discovery/index.mjs'
-import { ingestSignedAdvert } from '../transport/advert_ingest.mjs'
-import { getLinkRegistry } from '../transport/link_registry.mjs'
-import {
-	encryptSignalPacket,
-	groupRendezvousTopic,
-} from '../transport/signal_crypto.mjs'
-import { emitSafe } from '../utils/emit_safe.mjs'
+import { createGroupLinkSet } from '../transport/group_link_set.mjs'
 
 /**
- * 在指定 scope 与 roomSecret 下创建 link 层房间（discovery + registry 转发）。
- * @param {object} options 房间选项
- * @param {string} options.scope link registry scope（如 `group:{id}`）
- * @param {string} options.roomSecret 房间 rendezvous 密钥
- * @param {(nodeHash: string) => boolean} [options.allowNode] 是否允许与某 nodeHash 通信
- * @returns {{ start: () => Promise<void>, leave: () => Promise<void>, makeAction: (name: string) => [(payload: unknown, peerId?: string | string[] | null) => Promise<void>, (handler: (payload: unknown, peerId: string) => void) => void], onPeerJoin: (callback: (peerId: string) => void) => () => void, onPeerLeave: (callback: (peerId: string) => void) => () => void, getPeers: () => Record<string, true> }} 房间句柄
+ * scoped 房间：group_link_set 的薄预设（任意 scope + allowNode + 发现即拨）。
+ * @param {object} options - 房间选项
+ * @param {string} options.scope - link registry scope
+ * @param {string} options.roomSecret - rendezvous 密钥
+ * @param {(nodeHash: string) => boolean} [options.allowNode] - 节点准入过滤
+ * @returns {ReturnType<typeof createGroupLinkSet>} scoped link 房间句柄
  */
 export function createScopedLinkRoom(options) {
-	const registry = getLinkRegistry()
-	const { scope } = options
-	const topic = groupRendezvousTopic(options.roomSecret)
-	const allowNode = options.allowNode ?? (() => true)
-	/** @type {Set<string>} */
-	const discoveredPeers = new Set()
-	/** @type {Set<string>} */
-	const announcedPeers = new Set()
-	/** @type {Set<(peerId: string) => void>} */
-	const joinListeners = new Set()
-	/** @type {Set<(peerId: string) => void>} */
-	const leaveListeners = new Set()
-	/** @type {Set<() => void>} */
-	const cleanups = new Set()
-	/** @type {Map<string, { handler: ((payload: unknown, peerId: string) => void) | null, backlog: Array<{ payload: unknown, peerId: string }> }>} */
-	const actionEntries = new Map()
-
-	/**
-	 * @returns {string[]} 当前已连接且通过 allowNode 过滤的 peer nodeHash 列表
-	 */
-	function activePeerIds() {
-		return [...discoveredPeers].filter(nodeHash => allowNode(nodeHash) && registry.getLink(nodeHash))
-	}
-
-	/**
-	 * @param {string} peerId 节点 hash
-	 * @returns {void}
-	 */
-	function notePeerJoin(peerId) {
-		if (!peerId || announcedPeers.has(peerId)) return
-		announcedPeers.add(peerId)
-		emitSafe(joinListeners, peerId)
-	}
-
-	/**
-	 * @param {string} peerId 节点 hash
-	 * @returns {void}
-	 */
-	function notePeerLeave(peerId) {
-		if (!peerId || !announcedPeers.has(peerId)) return
-		announcedPeers.delete(peerId)
-		emitSafe(leaveListeners, peerId)
-	}
-
-	/**
-	 * @param {string} name action 名称
-	 * @returns {{ handler: ((payload: unknown, peerId: string) => void) | null, backlog: Array<{ payload: unknown, peerId: string }> }} action 槽（含待处理 backlog）
-	 */
-	function getActionEntry(name) {
-		if (!actionEntries.has(name))
-			actionEntries.set(name, { handler: null, backlog: [] })
-		return actionEntries.get(name)
-	}
-
-	return {
-		/**
-		 * @returns {Promise<void>}
-		 */
-		async start() {
-			await registry.ensureRuntime()
-			cleanups.add(registry.subscribeScope(scope, (senderNodeHash, envelope) => {
-				if (!allowNode(senderNodeHash)) return
-				const entry = actionEntries.get(envelope.action)
-				if (!entry) return
-				if (entry.handler) entry.handler(envelope.payload, senderNodeHash)
-				else entry.backlog.push({ payload: envelope.payload, peerId: senderNodeHash })
-			}))
-			cleanups.add(registry.onLinkUp(nodeHash => {
-				if (!discoveredPeers.has(nodeHash) || !allowNode(nodeHash)) return
-				notePeerJoin(nodeHash)
-			}))
-			cleanups.add(registry.onLinkDown(nodeHash => {
-				if (!discoveredPeers.has(nodeHash)) return
-				notePeerLeave(nodeHash)
-			}))
-			cleanups.add(await subscribeTopic(topic, async (bytes, meta) => {
-				const ingested = await ingestSignedAdvert(topic, bytes, meta)
-				if (!ingested || !allowNode(ingested.verifiedNodeHash)) return
-				discoveredPeers.add(ingested.verifiedNodeHash)
-				await registry.ensureLinkToNode(ingested.verifiedNodeHash).catch(() => null)
-				if (registry.getLink(ingested.verifiedNodeHash)) notePeerJoin(ingested.verifiedNodeHash)
-			}))
-			cleanups.add(await advertiseTopic(topic, encryptSignalPacket(topic, {
-				type: 'advert',
-				body: await registry.buildLocalAdvert(topic),
-			})))
-			for (const peerId of activePeerIds())
-				notePeerJoin(peerId)
-		},
-		/**
-		 * @returns {Promise<void>}
-		 */
-		async leave() {
-			for (const cleanup of cleanups)
-				try { cleanup() } catch { /* ignore */ }
-			cleanups.clear()
-			for (const peerId of [...announcedPeers])
-				notePeerLeave(peerId)
-		},
-		/**
-		 * @param {string} name action 名称
-		 * @returns {[(payload: unknown, peerId?: string | string[] | null) => Promise<void>, (handler: (payload: unknown, peerId: string) => void) => void]} [send, onReceive] 发送与订阅元组
-		 */
-		makeAction(name) {
-			return [
-				async (payload, peerId = null) => {
-					if (Array.isArray(peerId)) {
-						await Promise.all(peerId.map(targetPeerId =>
-							registry.sendToNodeLink(targetPeerId, { scope, action: name, payload })))
-						return
-					}
-					if (peerId)
-						await registry.sendToNodeLink(peerId, { scope, action: name, payload })
-					else
-						await Promise.all(activePeerIds().map(targetPeerId =>
-							registry.sendToNodeLink(targetPeerId, { scope, action: name, payload })))
-				},
-				handler => {
-					const entry = getActionEntry(name)
-					entry.handler = handler
-					for (const pending of entry.backlog.splice(0))
-						handler(pending.payload, pending.peerId)
-				},
-			]
-		},
-		/**
-		 * @param {(peerId: string) => void} callback 新 peer 上线回调
-		 * @returns {() => void} 取消订阅
-		 */
-		onPeerJoin(callback) {
-			joinListeners.add(callback)
-			for (const peerId of activePeerIds())
-				announcedPeers.add(peerId)
-			for (const peerId of announcedPeers)
-				try { callback(peerId) } catch { /* ignore */ }
-			return () => joinListeners.delete(callback)
-		},
-		/**
-		 * @param {(peerId: string) => void} callback peer 离线回调
-		 * @returns {() => void} 取消订阅
-		 */
-		onPeerLeave(callback) {
-			leaveListeners.add(callback)
-			return () => leaveListeners.delete(callback)
-		},
-		/**
-		 * @returns {Record<string, true>} 当前活跃 peer 的 nodeHash 集合
-		 */
-		getPeers() {
-			return Object.fromEntries(activePeerIds().map(peerId => [peerId, true]))
-		},
-	}
+	const { scope, roomSecret, allowNode } = options
+	return createGroupLinkSet({
+		groupId: scope,
+		scope,
+		roomSecret,
+		members: [],
+		allowNode,
+		dialAll: true,
+		autoconnect: true,
+	})
 }