@steve02081504/fount-p2p 0.0.26 → 0.0.28

package/discovery/lan_interfaces.mjs

@@ -17,7 +17,7 @@ export function normalizeLanHosts(input) {
 	/** @type {string[]} */
 	const out = []
 	for (const item of arr) {
-		const host = String(item || '').trim()
+		const host = String(item || '')
 		if (!host || !IPV4_RE.test(host) || seen.has(host)) continue
 		seen.add(host)
 		out.push(host)
@@ -68,7 +68,7 @@ export function listMulticastIpv4Addresses() {
 		if (!ifaces) continue
 		for (const iface of ifaces) {
 			if (iface.internal || !isIpv4Family(iface.family)) continue
-			const addr = String(iface.address || '').trim()
+			const addr = String(iface.address || '')
 			if (!addr || seen.has(addr)) continue
 			seen.add(addr)
 			addrs.push(addr)

package/discovery/lan_peer_hints.mjs

@@ -20,7 +20,7 @@ const hints = createTtlMap(LAN_PEER_HINT_TTL_MS)
  */
 export function noteLanPeerHint(nodeHash, endpoint) {
 	const hash = normalizeHex64(nodeHash)
-	const host = String(endpoint?.host || '').trim()
+	const host = String(endpoint?.host || '')
 	const port = normalizeTcpPort(endpoint?.port)
 	if (!hash || !host || !port) return
 	const existing = hints.get(hash)?.endpoints ?? []

package/discovery/nostr.mjs

@@ -82,13 +82,12 @@ export function noteNostrVisibleNode(nodeHash, now = Date.now()) {
  * @returns {void}
  */
 export function noteNostrGroupVisibleNode(roomSecret, nodeHash, now = Date.now()) {
-	const key = String(roomSecret || '')
 	const hash = normalizeHex64(nodeHash)
-	if (!key || !isHex64(hash)) return
-	let pool = visibleByGroup.get(key)
+	if (!roomSecret || !isHex64(hash)) return
+	let pool = visibleByGroup.get(roomSecret)
 	if (!pool) {
 		pool = new Map()
-		visibleByGroup.set(key, pool)
+		visibleByGroup.set(roomSecret, pool)
 	}
 	pool.set(hash, now)
 }
@@ -109,11 +108,10 @@ export function listNostrVisibleNodeHashes(now = Date.now(), ttlMs = ADVERT_TTL_
  * @returns {string[]} 该群可见 nodeHash
  */
 export function listNostrGroupVisibleNodeHashes(roomSecret, now = Date.now(), ttlMs = ADVERT_TTL_MS) {
-	const key = String(roomSecret || '')
-	const pool = visibleByGroup.get(key)
+	const pool = visibleByGroup.get(roomSecret)
 	if (!pool) return []
 	const out = listPoolHashes(pool, now, ttlMs)
-	if (!pool.size) visibleByGroup.delete(key)
+	if (!pool.size) visibleByGroup.delete(roomSecret)
 	return out
 }
 
@@ -130,12 +128,11 @@ export async function acceptNostrAdvert(rendezvousKey, bytes, options = {}) {
 	const hash = ingested.verifiedNodeHash
 	const skipHash = options.skipNodeHash ? normalizeHex64(options.skipNodeHash) : null
 	if (skipHash && hash === skipHash) return hash
-	const roomSecret = options.roomSecret
+	const { roomSecret } = options
 	let firstSeen = true
 	if (roomSecret) {
-		const key = String(roomSecret || '')
-		firstSeen = !visibleByGroup.get(key)?.has(hash)
-		noteNostrGroupVisibleNode(key, hash)
+		firstSeen = !visibleByGroup.get(roomSecret)?.has(hash)
+		noteNostrGroupVisibleNode(roomSecret, hash)
 	}
 	else {
 		firstSeen = !visibleByHash.has(hash)
@@ -188,8 +185,8 @@ function dropWebSocket(ws) {
 function dedupeRelayUrls(urls) {
 	const seen = new Set()
 	return (urls || [])
-		.map(url => url.trim())
-		.filter(trimmed => trimmed && !seen.has(trimmed) && (seen.add(trimmed), true))
+		.map(url => String(url || ''))
+		.filter(url => url && !seen.has(url) && (seen.add(url), true))
 }
 
 /**
@@ -502,7 +499,7 @@ function releaseSharedRelaySub(relayUrl, subscriptionId) {
 	const session = sharedRelaySessions.get(relayUrl)
 	if (!session) return
 	session.subs.delete(subscriptionId)
-	const ws = session.ws
+	const { ws } = session
 	if (ws?.readyState === WebSocket.OPEN)
 		try { ws.send(JSON.stringify(['CLOSE', subscriptionId])) } catch { /* ignore */ }
 	if (session.subs.size) return
@@ -521,7 +518,7 @@ function releaseSharedRelaySub(relayUrl, subscriptionId) {
  */
 function registerSharedRelaySub(session, subscriptionId, filter, onEvent) {
 	session.subs.set(subscriptionId, { filter, onEvent })
-	const ws = session.ws
+	const { ws } = session
 	if (ws?.readyState !== WebSocket.OPEN) return
 	try { ws.send(JSON.stringify(['REQ', subscriptionId, filter])) } catch { /* ignore */ }
 }
@@ -568,7 +565,7 @@ export function createNostrDiscoveryProvider(options = {}) {
 	 * @returns {string[]} 去重后的中继 URL 列表
 	 */
 	const resolveRelayUrls = () => {
-		if (typeof options.getRelayUrls === 'function') {
+		if (options.getRelayUrls) {
 			const urls = options.getRelayUrls()
 			return dedupeRelayUrls(urls == null ? DEFAULT_RELAY_URLS : urls)
 		}
@@ -676,11 +673,10 @@ export function createNostrDiscoveryProvider(options = {}) {
 	 * @returns {() => void} 取消 listener
 	 */
 	function ensureGroupSubscription(roomSecret, listener) {
-		const key = String(roomSecret || '')
-		if (!key) return () => { }
-		return ensureAdvertSubscription('group:' + key, {
-			rendezvousKey: groupRendezvousKey(key),
-			roomSecret: key,
+		if (!roomSecret) return () => { }
+		return ensureAdvertSubscription('group:' + roomSecret, {
+			rendezvousKey: groupRendezvousKey(roomSecret),
+			roomSecret,
 		}, listener)
 	}
 
@@ -828,10 +824,9 @@ export function createNostrDiscoveryProvider(options = {}) {
 		 * @returns {Promise<() => void>} 停止群 presence 广播
 		 */
 		async startGroupPresence(roomSecret, getBeacon) {
-			const key = String(roomSecret || '')
-			const rendezvousKey = groupRendezvousKey(key)
+			const rendezvousKey = groupRendezvousKey(roomSecret)
 			const abortController = new AbortController()
-			ensureGroupSubscription(key)
+			ensureGroupSubscription(roomSecret)
 			/**
 			 * @returns {Promise<void>}
 			 */

package/federation/entity_key_chain.mjs

@@ -23,28 +23,11 @@ export const ENTITY_KEY_REVOKE_DOMAIN = 'fount-entity-key-revoke'
  */
 
 /**
- * @param {unknown} recoveryPubKeyHex 64 位十六进制 recovery 公钥
- * @returns {string} 稳定 subjectHash（entityHash 后半）
- */
-export function recoverySubjectHashFromPubKeyHex(recoveryPubKeyHex) {
-	return hashFromPubKeyHex(recoveryPubKeyHex)
-}
-
-/**
- * @param {unknown} activePubKeyHex 64 位十六进制 活跃公钥
- * @returns {string} 时间线 sender（pubKeyHash）
- */
-export function activeSenderHashFromPubKeyHex(activePubKeyHex) {
-	return hashFromPubKeyHex(activePubKeyHex)
-}
-
-/**
- * @param {string} recoveryPubKeyHex recovery 公钥
  * @param {string} activePubKeyHex 初始活跃公钥
  * @param {number} [validFrom] 生效时间
  * @returns {EntityKeyHistoryEntry[]} 创世链
  */
-export function createGenesisKeyHistory(recoveryPubKeyHex, activePubKeyHex, validFrom = Date.now()) {
+export function createGenesisKeyHistory(activePubKeyHex, validFrom = Date.now()) {
 	return [{
 		generation: 0,
 		activePubKeyHex: normalizeHex64(activePubKeyHex),
@@ -76,17 +59,15 @@ export function isActiveGenerationRevoked(keyHistory, generation) {
 
 /**
  * @param {EntityKeyHistoryEntry[]} keyHistory 密钥历史
- * @param {string} recoveryPubKeyHex recovery 公钥
  * @param {string} senderPubKeyHash 事件 sender（64 hex pubKeyHash）
  * @returns {boolean} sender 是否为未吊销的活跃钥
  */
-export function isValidActiveSender(keyHistory, recoveryPubKeyHex, senderPubKeyHash) {
+export function isValidActiveSender(keyHistory, senderPubKeyHash) {
 	const sender = normalizeHex64(senderPubKeyHash)
 	if (!isHex64(sender)) return false
-	void recoveryPubKeyHex
 	for (const entry of keyHistory || []) {
 		if (isActiveGenerationRevoked(keyHistory, entry.generation)) continue
-		if (activeSenderHashFromPubKeyHex(entry.activePubKeyHex) === sender)
+		if (hashFromPubKeyHex(entry.activePubKeyHex) === sender)
 			return true
 	}
 	return false
@@ -98,7 +79,7 @@ export function isValidActiveSender(keyHistory, recoveryPubKeyHex, senderPubKeyH
  * @returns {boolean} 是否为 recovery 钥签名
  */
 export function isRecoverySender(recoveryPubKeyHex, senderPubKeyHash) {
-	return recoverySubjectHashFromPubKeyHex(recoveryPubKeyHex) === normalizeHex64(senderPubKeyHash)
+	return hashFromPubKeyHex(recoveryPubKeyHex) === normalizeHex64(senderPubKeyHash)
 }
 
 /**
@@ -183,7 +164,7 @@ export function entityKeyRevokeSignBytes(revokeBody) {
 		revokeGenerations: (revokeBody.revokeGenerations || []).map(Number),
 		newGeneration: Number(revokeBody.newGeneration),
 		activePubKeyHex: normalizeHex64(revokeBody.activePubKeyHex || ''),
-		entityHash: String(revokeBody.entityHash || '').trim().toLowerCase(),
+		entityHash: String(revokeBody.entityHash || ''),
 	}
 	return Buffer.from(`${ENTITY_KEY_REVOKE_DOMAIN}\0${canonicalStringify(body)}`, 'utf8')
 }

package/federation/message_rate_limit.mjs

@@ -1,15 +1,16 @@
 /**
  * 群级消息限速纯函数（无 I/O，供单测与 governance 复用）。
  */
+import { normalizeHex64 } from '../core/hexIds.mjs'
 
 /**
  * @param {object} event DAG 事件
  * @returns {string} 限速实体键
  */
 export function messageRateEntityKey(event) {
-	const charId = String(event?.charId || '').trim()
+	const charId = String(event?.charId || '')
 	if (charId) return `char:${charId}`
-	return String(event?.sender || '').trim().toLowerCase()
+	return normalizeHex64(event?.sender)
 }
 
 /**

package/federation/part_query/runtime.mjs

@@ -102,15 +102,6 @@ export function resolvePartQueryState(dependencies = {}) {
 	return dependencies.state || defaultState
 }
 
-/**
- * @param {string} partpath part 路径
- * @param {string} kind 查询标签
- * @returns {string} handler 键
- */
-function handlerKey(partpath, kind) {
-	return compositeKey(partpath, kind)
-}
-
 /**
  * Shell 注册 kind 语义处理器（怎么匹配、返回什么）。
  * @param {string} partpath part 路径
@@ -120,7 +111,7 @@ function handlerKey(partpath, kind) {
  * @returns {void}
  */
 export function registerQueryInboundHandler(partpath, kind, handler, state = defaultState) {
-	state.handlers.set(handlerKey(partpath, kind), handler)
+	state.handlers.set(compositeKey(partpath, kind), handler)
 }
 
 /**
@@ -144,12 +135,10 @@ export function resolvePartQueryHopTimeoutMs(ttl, tunables = partQueryTunables)
 export function mergeQueryRows(lists, maxHits, rowKey) {
 	const out = []
 	const seen = new Set()
-	const keyOf = typeof rowKey === 'function'
-		? rowKey
-		: row => {
-			try { return JSON.stringify(row) }
-			catch { return `\0${out.length}` }
-		}
+	const keyOf = rowKey || (row => {
+		try { return JSON.stringify(row) }
+		catch { return `\0${out.length}` }
+	})
 	for (const list of lists) {
 		if (!Array.isArray(list)) continue
 		for (const row of list) {
@@ -172,7 +161,7 @@ export function mergeQueryRows(lists, maxHits, rowKey) {
  * @returns {Promise<unknown[]>} 本地 rows
  */
 async function runLocalHandler(state, queryContext, partpath, kind, query) {
-	const handler = state.handlers.get(handlerKey(partpath, kind))
+	const handler = state.handlers.get(compositeKey(partpath, kind))
 	if (!handler) return []
 	return await handler(queryContext, query) || []
 }
@@ -260,7 +249,7 @@ export async function processIncomingPartQueryRequest(wireContext, wire, request
 	const state = resolvePartQueryState(dependencies)
 	const nodeHashOf = dependencies.getNodeHash || getNodeHash
 	const now = dependencies.now || Date.now
-	const username = String(wireContext.replicaUsername || '')
+	const username = wireContext.replicaUsername || ''
 
 	const cached = state.cache.get(request.partpath, request.kind, request.query, now())
 	if (cached) {
@@ -284,7 +273,7 @@ export async function processIncomingPartQueryRequest(wireContext, wire, request
 	}
 
 	const selfHash = nodeHashOf()
-	const exclude = new Set([selfHash, request.originNodeHash, String(peerId || '').trim().toLowerCase()].filter(Boolean))
+	const exclude = new Set([selfHash, request.originNodeHash, peerId].filter(Boolean))
 	const forwardPayload = { ...request, ttl: nextTtl }
 
 	/** @type {RelayPending} */
@@ -332,7 +321,7 @@ export async function processIncomingPartQueryRequest(wireContext, wire, request
  */
 export function handleIncomingPartQueryResponse(response, peerId = '', dependencies = {}) {
 	const state = resolvePartQueryState(dependencies)
-	const responderKey = String(peerId || response.fromNodeHash || '').trim().toLowerCase()
+	const responderKey = peerId || response.fromNodeHash
 	const relay = state.relayPending.get(response.requestId)
 	if (relay) {
 		if (responderKey) {

package/files/assemble.mjs

@@ -171,7 +171,7 @@ export function buildFileManifest(parameters) {
 	} = parameters
 	const enc = encryptPlaintextToParts(plaintext, ceMode)
 	const manifest = normalizeFileManifest({
-		ownerEntityHash: ownerEntityHash.toLowerCase(),
+		ownerEntityHash,
 		logicalPath: logicalPath.replace(/^\/+/, ''),
 		name: name || logicalPath.split('/').pop() || 'file',
 		mimeType,
@@ -204,7 +204,7 @@ export function buildFileManifestFromEnc(parameters, enc) {
 		meta,
 	} = parameters
 	const manifest = normalizeFileManifest({
-		ownerEntityHash: ownerEntityHash.toLowerCase(),
+		ownerEntityHash,
 		logicalPath: logicalPath.replace(/^\/+/, ''),
 		name: name || logicalPath.split('/').pop() || 'file',
 		mimeType,
@@ -229,7 +229,7 @@ export function buildFileManifestFromEnc(parameters, enc) {
 export function vaultWrapDescriptor(entityHash, fileId, contentKey, H) {
 	return {
 		type: 'vault-wrap',
-		entityHash: entityHash.toLowerCase(),
+		entityHash,
 		fileId,
 		wrappedKey: wrapContentKey(contentKey, H, fileId),
 	}

package/files/assemble_stream.mjs

@@ -165,7 +165,7 @@ export function createManifestPlaintextStream(manifest, partStreams, contentKey)
 				}
 				if (manifest.contentHash) {
 					const got = digest.digest('hex')
-					if (got !== String(manifest.contentHash).toLowerCase()) {
+					if (got !== manifest.contentHash) {
 						this.destroy(new Error('contentHash mismatch'))
 						return
 					}

package/files/chunk/fetch.mjs

@@ -34,8 +34,7 @@ const chunkInflight = createInflightTable({
  * @returns {Promise<Uint8Array | null>} 密文块
  */
 export async function fetchChunk(context) {
-	const hash = String(context.ciphertextHash || '').trim().toLowerCase()
-	const { username } = context
+	const { username, ciphertextHash: hash } = context
 	if (!hash || !username) return null
 
 	if (await hasChunk(hash))

package/files/chunk/responder.mjs

@@ -4,43 +4,6 @@ import { resolvePendingManifestFetch } from '../manifest/pending.mjs'
 import { handleIncomingChunkGet } from './fetch.mjs'
 import { resolvePendingChunkFetch } from './pending.mjs'
 
-/**
- * 群联邦 / TrustGraph 路径：响应带 requestId 的 fed_chunk_get。
- * @param {object} data 入站 fed_chunk_get
- * @param {string} peerId 对端 id
- * @param {(resp: object, peerId: string) => void} sendChunkData 发送 fed_chunk_data
- * @returns {Promise<void>}
- */
-export async function handleFedChunkGetIngress(data, peerId, sendChunkData) {
-	await handleIncomingChunkGet(data, sendChunkData, peerId)
-}
-
-/**
- * @param {object} data 入站 fed_chunk_data（含 requestId 时 resolve pending fetch）
- * @returns {boolean} 是否命中 pending
- */
-export function handleFedChunkDataIngress(data) {
-	return resolvePendingChunkFetch(data)
-}
-
-/**
- * @param {object} data 入站 fed_manifest_get
- * @param {string} peerId 对端 id
- * @param {(resp: object, peerId: string) => void} sendManifestData 发送 fed_manifest_data
- * @returns {Promise<void>}
- */
-export async function handleFedManifestGetIngress(data, peerId, sendManifestData) {
-	await handleIncomingManifestGet(data, sendManifestData, peerId)
-}
-
-/**
- * @param {object} data 入站 fed_manifest_data
- * @returns {Promise<boolean>} 是否命中 pending
- */
-export function handleFedManifestDataIngress(data) {
-	return resolvePendingManifestFetch(data)
-}
-
 /**
  * @param {(resp: object, peerId: string) => void} sendData 发送
  * @param {{ enqueue: (prio: number, cleanup: () => void) => void }} [fedOut] 出站限速队列
@@ -83,22 +46,22 @@ export function attachTrustGraphFedChunkResponder(room, fedOut, guardGet, rtcLim
 	getChunkGet((data, peerId) => {
 		if (guardGet && !guardGet(roomKey, 'fed_chunk_get', rtcLimits)) return
 		if (!data?.requestId) return
-		void handleFedChunkGetIngress(data, peerId, sendChunk)
+		void handleIncomingChunkGet(data, sendChunk, peerId)
 	})
 
 	getChunkData(data => {
 		if (!data?.requestId) return
-		handleFedChunkDataIngress(data)
+		resolvePendingChunkFetch(data)
 	})
 
 	getManifestGet((data, peerId) => {
 		if (guardGet && !guardGet(roomKey, 'fed_manifest_get', rtcLimits)) return
 		if (!data?.requestId) return
-		void handleFedManifestGetIngress(data, peerId, sendManifest)
+		void handleIncomingManifestGet(data, sendManifest, peerId)
 	})
 
 	getManifestData(data => {
 		if (!data?.requestId) return
-		handleFedManifestDataIngress(data)
+		resolvePendingManifestFetch(data)
 	})
 }

package/files/chunk/store.mjs

@@ -19,9 +19,8 @@ export function chunkStoreRoot() {
  * @returns {string} 块文件绝对路径
  */
 export function chunkStorePath(hash) {
-	const chunkHash = String(hash).trim().toLowerCase()
-	if (!isHex64(chunkHash)) throw new Error('invalid chunk hash')
-	return join(chunkStoreRoot(), chunkHash.slice(0, 2), `${chunkHash}.bin`)
+	if (!isHex64(hash)) throw new Error('invalid chunk hash')
+	return join(chunkStoreRoot(), hash.slice(0, 2), `${hash}.bin`)
 }
 
 /**

package/files/chunk/verify.mjs

@@ -7,9 +7,8 @@ import { sha256Hex } from '../../crypto/crypto.mjs'
  * @returns {boolean} 是否与 hash 一致
  */
 export function chunkBytesMatchHash(chunkHash, data) {
-	const hash = String(chunkHash || '').trim().toLowerCase()
-	if (!isHex64(hash) || !data?.byteLength) return false
-	return sha256Hex(data) === hash
+	if (!isHex64(chunkHash) || !data?.byteLength) return false
+	return sha256Hex(data) === chunkHash
 }
 
 /**

package/files/evfs.mjs

@@ -197,7 +197,7 @@ export async function putFileManifestFromStream(parameters) {
 	const enc = await encryptReadableToParts(readable, ceMode, async part =>
 		putChunk(part.hash, part.raw), plainSize)
 	const manifest = normalizeFileManifest({
-		ownerEntityHash: ownerEntityHash.toLowerCase(),
+		ownerEntityHash,
 		logicalPath: logicalPath.replace(/^\/+/, ''),
 		name: name || logicalPath.split('/').pop() || 'file',
 		mimeType: mimeType || 'application/octet-stream',

package/files/evfs_ref.mjs

@@ -10,9 +10,8 @@ export const EVFS_SCHEME = 'evfs:'
  * @returns {string} evfs URI 引用
  */
 export function formatEvfsRef(entityHash, logicalPath) {
-	const eh = String(entityHash).trim().toLowerCase()
 	const safePath = assertSafeEvfsLogicalPath(logicalPath)
-	return `${EVFS_SCHEME}//${eh}/${safePath}`
+	return `${EVFS_SCHEME}//${entityHash}/${safePath}`
 }
 
 /**
@@ -24,8 +23,8 @@ export function parseEvfsRef(ref) {
 	try {
 		const url = new URL(ref)
 		if (url.protocol !== 'evfs:') return null
-		const entityHash = String(url.hostname || '').trim().toLowerCase()
-		const logicalPath = String(url.pathname || '').replace(/^\/+/, '')
+		const entityHash = url.hostname
+		const logicalPath = url.pathname.replace(/^\/+/, '')
 		if (!isEntityHash128(entityHash)) return null
 		return { entityHash, logicalPath: assertSafeEvfsLogicalPath(logicalPath) }
 	}

package/files/fetch_fanout.mjs

@@ -10,12 +10,12 @@ function fetchPeerTargets() {
 	/** @type {Set<string>} */
 	const targets = new Set()
 	for (const { nodeHash } of listLinks())
-		if (nodeHash) targets.add(String(nodeHash).toLowerCase())
+		if (nodeHash) targets.add(nodeHash)
 	const net = loadNetwork()
 	for (const nodeHash of [...net.trustedPeers || [], ...net.explorePeers || []])
-		if (nodeHash) targets.add(String(nodeHash).toLowerCase())
+		if (nodeHash) targets.add(nodeHash)
 	for (const hint of net.hints || [])
-		if (hint?.nodeHash) targets.add(String(hint.nodeHash).toLowerCase())
+		if (hint?.nodeHash) targets.add(hint.nodeHash)
 	return [...targets]
 }
 

package/files/manifest/fetch.mjs

@@ -31,9 +31,8 @@ const manifestInflight = createInflightTable({
  * @returns {Promise<import('./normalize.mjs').FileManifest | null>} 验签后的 manifest，失败为 null
  */
 export async function fetchPublicManifest(context) {
-	const ownerEntityHash = String(context.ownerEntityHash || '').trim().toLowerCase()
-	const logicalPath = String(context.logicalPath || '').trim().replace(/^\/+/, '')
-	const { username } = context
+	const { ownerEntityHash, username } = context
+	const logicalPath = context.logicalPath.replace(/^\/+/, '')
 	if (!ownerEntityHash || !logicalPath || !username) return null
 
 	const timeoutMs = Number(context.timeoutMs) > 0

package/files/manifest/normalize.mjs

@@ -40,9 +40,9 @@ const TRANSFER_TYPES = new Set(['public', 'file-master-key-wrap', 'vault-wrap',
  */
 export function normalizeFileManifest(input) {
 	if (!input || typeof input !== 'object') return null
-	const ownerEntityHash = String(input.ownerEntityHash || '').trim().toLowerCase()
+	const ownerEntityHash = String(input.ownerEntityHash || '')
 	if (!isEntityHash128(ownerEntityHash)) return null
-	const logicalPath = String(input.logicalPath || '').trim().replace(/^\/+/, '').replace(/\\/g, '/')
+	const logicalPath = String(input.logicalPath || '').replace(/^\/+/, '').replace(/\\/g, '/')
 	if (!logicalPath) return null
 	const ceMode = String(input.ceMode || 'convergent')
 	if (!CE_MODES.has(ceMode)) return null
@@ -51,10 +51,10 @@ export function normalizeFileManifest(input) {
 			.map(part => {
 				/** @type {ManifestPart} */
 				const out = {
-					hash: String(part?.hash || '').trim().toLowerCase(),
+					hash: String(part?.hash || ''),
 					size: Number(part?.size) || 0,
 				}
-				const partContentHash = String(part?.contentHash || '').trim().toLowerCase()
+				const partContentHash = String(part?.contentHash || '')
 				if (isHex64(partContentHash)) out.contentHash = partContentHash
 				return out
 			})
@@ -69,7 +69,7 @@ export function normalizeFileManifest(input) {
 		name: String(input.name || logicalPath.split('/').pop() || 'file'),
 		mimeType: String(input.mimeType || 'application/octet-stream'),
 		size: Number(input.size) || 0,
-		contentHash: String(input.contentHash || '').trim().toLowerCase(),
+		contentHash: String(input.contentHash || ''),
 		ceMode: /** @type {CeMode} */ ceMode,
 		parts,
 		transferKeyDescriptor,
@@ -83,7 +83,7 @@ export function normalizeFileManifest(input) {
  */
 export function normalizeTransferKeyDescriptor(input) {
 	if (!input || typeof input !== 'object') return null
-	const type = String(input.type || '').trim()
+	const type = String(input.type || '')
 	if (!TRANSFER_TYPES.has(type)) return null
 	/** @type {TransferKeyDescriptor} */
 	const out = { type: /** @type {TransferKeyDescriptor['type']} */ type }
@@ -93,9 +93,9 @@ export function normalizeTransferKeyDescriptor(input) {
 			ciphertext: String(input.wrappedKey.ciphertext || ''),
 			authTag: String(input.wrappedKey.authTag || ''),
 		}
-	if (input.groupId) out.groupId = String(input.groupId).trim()
-	if (input.fileId) out.fileId = String(input.fileId).trim()
-	if (input.entityHash) out.entityHash = String(input.entityHash).trim().toLowerCase()
+	if (input.groupId) out.groupId = String(input.groupId)
+	if (input.fileId) out.fileId = String(input.fileId)
+	if (input.entityHash) out.entityHash = String(input.entityHash)
 	if (input.keyGeneration != null) out.keyGeneration = Number(input.keyGeneration) || 0
 	return out
 }

package/files/manifest/pending.mjs

@@ -17,10 +17,7 @@ export const pendingManifestFetches = table.pending
  * @returns {string} 期望键
  */
 export function manifestFetchExpectedKey(ownerEntityHash, logicalPath) {
-	return compositeKey(
-		String(ownerEntityHash || '').trim().toLowerCase(),
-		String(logicalPath || '').trim().replace(/^\/+/, ''),
-	)
+	return compositeKey(ownerEntityHash, logicalPath.replace(/^\/+/, ''))
 }
 
 /**

package/files/manifest/public.mjs

@@ -3,7 +3,7 @@ import { Buffer } from 'node:buffer'
 import { canonicalStringify } from '../../core/canonical_json.mjs'
 import { hashFromPubKeyHex, parseEntityHash } from '../../core/entity_id.mjs'
 import { assertSafeEvfsLogicalPath } from '../../core/evfs_logical_path.mjs'
-import { isHex64, normalizeHex64 } from '../../core/hexIds.mjs'
+import { isHex64, isSignatureHex128, normalizeHex64 } from '../../core/hexIds.mjs'
 import { sign, verify } from '../../crypto/crypto.mjs'
 import { putFileManifest, saveFileManifest } from '../evfs.mjs'
 
@@ -19,14 +19,14 @@ export const ENTITY_PUBLIC_MANIFEST_DOMAIN = 'fount-entity-public-manifest'
 export function publicManifestSignBytes(fields) {
 	return Buffer.from(canonicalStringify([
 		ENTITY_PUBLIC_MANIFEST_DOMAIN,
-		String(fields.ownerEntityHash || '').trim().toLowerCase(),
+		fields.ownerEntityHash || '',
 		assertSafeEvfsLogicalPath(fields.logicalPath),
 		Number(fields.publishedAt) || 0,
-		String(fields.contentHash || '').trim().toLowerCase(),
+		fields.contentHash || '',
 		Number(fields.size) || 0,
-		String(fields.mimeType || ''),
-		String(fields.name || ''),
-		String(fields.ceMode || ''),
+		fields.mimeType || '',
+		fields.name || '',
+		fields.ceMode || '',
 		fields.parts || [],
 	]), 'utf8')
 }
@@ -74,8 +74,8 @@ export async function verifySignedPublicManifest(input) {
 	if (!publicSig || typeof publicSig !== 'object') return null
 	const publishedAt = Number(publicSig.publishedAt) || 0
 	const pubKeyHex = normalizeHex64(publicSig.pubKeyHex)
-	const sigHex = String(publicSig.sigHex || '').trim().toLowerCase()
-	if (!isHex64(pubKeyHex) || !/^[\da-f]{128}$/u.test(sigHex) || publishedAt <= 0) return null
+	const sigHex = String(publicSig.sigHex || '')
+	if (!isHex64(pubKeyHex) || !isSignatureHex128(sigHex) || publishedAt <= 0) return null
 
 	const parsed = parseEntityHash(manifest.ownerEntityHash)
 	if (!parsed) return null

package/files/transfer_key.mjs

@@ -26,7 +26,7 @@ export async function resolveContentKey(descriptor, manifest, dependencies = {})
 	if (type === 'file-master-key-wrap') {
 		const { groupId, fileId } = descriptor
 		if (!groupId || !fileId || !descriptor.wrappedKey || !dependencies.getGroupFileMasterKey) return null
-		const groupKey = await dependencies.getGroupFileMasterKey(String(groupId), descriptor.keyGeneration)
+		const groupKey = await dependencies.getGroupFileMasterKey(groupId, descriptor.keyGeneration)
 		if (!groupKey) return null
 		return unwrapContentKey(descriptor.wrappedKey, groupKey, fileId)
 	}
@@ -34,7 +34,7 @@ export async function resolveContentKey(descriptor, manifest, dependencies = {})
 	if (type === 'vault-wrap') {
 		const { entityHash, fileId } = descriptor
 		if (!entityHash || !fileId || !descriptor.wrappedKey || !dependencies.getVaultMasterKey) return null
-		const vaultKey = await dependencies.getVaultMasterKey(String(entityHash))
+		const vaultKey = await dependencies.getVaultMasterKey(entityHash)
 		if (!vaultKey) return null
 		return unwrapContentKey(descriptor.wrappedKey, vaultKey, fileId)
 	}
@@ -85,7 +85,7 @@ export async function assembleManifestPlaintext(manifest, partBytes, dependencie
 	}
 	const merged = Buffer.concat(plains)
 	if (manifest.contentHash)
-		if (createHash('sha256').update(merged).digest('hex') !== manifest.contentHash.toLowerCase()) return null
+		if (createHash('sha256').update(merged).digest('hex') !== manifest.contentHash) return null
 
 	return merged
 }