@steve02081504/fount-p2p 0.0.26 → 0.0.28

package/files/transfer_key_registry.mjs

@@ -10,7 +10,7 @@ const dagPlaintextReadersByOwner = new Map()
  * @returns {void}
  */
 export function registerTransferKeyDependencies(ownerId, dependencies) {
-	const key = String(ownerId)
+	const key = ownerId
 	const prev = transferDependenciesByOwner.get(key) || {}
 	transferDependenciesByOwner.set(key, { ...prev, ...dependencies })
 }
@@ -21,7 +21,7 @@ export function registerTransferKeyDependencies(ownerId, dependencies) {
  * @returns {void}
  */
 export function registerDagManifestPlaintextReader(ownerId, reader) {
-	dagPlaintextReadersByOwner.set(String(ownerId), reader)
+	dagPlaintextReadersByOwner.set(ownerId, reader)
 }
 
 /** @type {Array<{ ownerId: string, match: (manifest: import('./manifest/normalize.mjs').FileManifest) => boolean }>} */
@@ -33,7 +33,7 @@ const manifestOwnerMatchers = []
  * @returns {void}
  */
 export function registerManifestOwnerMatcher(ownerId, match) {
-	manifestOwnerMatchers.push({ ownerId: String(ownerId), match })
+	manifestOwnerMatchers.push({ ownerId, match })
 }
 
 /**
@@ -41,7 +41,7 @@ export function registerManifestOwnerMatcher(ownerId, match) {
  * @returns {void}
  */
 export function unregisterManifestOwnerMatchers(ownerId) {
-	const id = String(ownerId)
+	const id = ownerId
 	for (let i = manifestOwnerMatchers.length - 1; i >= 0; i--)
 		if (manifestOwnerMatchers[i].ownerId === id) manifestOwnerMatchers.splice(i, 1)
 }
@@ -51,7 +51,7 @@ export function unregisterManifestOwnerMatchers(ownerId) {
  * @returns {void}
  */
 export function unregisterTransferKeyDependencies(ownerId) {
-	const key = String(ownerId)
+	const key = ownerId
 	transferDependenciesByOwner.delete(key)
 	dagPlaintextReadersByOwner.delete(key)
 	unregisterManifestOwnerMatchers(key)
@@ -75,7 +75,7 @@ export function resolveManifestTransferOwnerId(manifest) {
  */
 export function resolveTransferKeyDependencies(ownerId, manifest) {
 	const resolved = ownerId || (manifest ? resolveManifestTransferOwnerId(manifest) : null)
-	if (resolved) return transferDependenciesByOwner.get(String(resolved)) || {}
+	if (resolved) return transferDependenciesByOwner.get(resolved) || {}
 	return {}
 }
 

package/governance/branch.mjs

@@ -1,3 +1,4 @@
+import { normalizeHex64 } from '../core/hexIds.mjs'
 import { sortedPrevEventIds } from '../dag/index.mjs'
 import { getGovernanceAuthzTypes } from '../registries/event_type.mjs'
 
@@ -104,7 +105,7 @@ function governanceAuthzScoreForTip(tipId, byId, reputationBySender) {
 	for (const eventId of ancestorClosureFromTip(tipId, byId)) {
 		const event = byId.get(eventId)
 		if (!event || !getGovernanceAuthzTypes().has(event.type)) continue
-		const sender = String(event.sender).trim().toLowerCase()
+		const sender = normalizeHex64(event.sender)
 		if (sender) score += Number(reputationBySender[sender] ?? 0)
 	}
 	return score

package/governance/join_pow.mjs

@@ -3,6 +3,8 @@
  */
 import { createHash } from 'node:crypto'
 
+import { normalizeHex64 } from '../core/hexIds.mjs'
+
 import admissionTunables from './tunables.json' with { type: 'json' }
 
 /** 默认 epoch 窗口（1 小时） */
@@ -21,7 +23,7 @@ export const JOIN_POW_DEFAULT_EPOCH_SKEW = 1
  * @returns {string} SHA-256 十六进制
  */
 export function computeJoinPowHash({ groupId, anchorRef, joinerNodeHash, epoch, nonce }) {
-	const preimage = `${String(groupId)}:${String(anchorRef)}:${String(joinerNodeHash)}:${String(epoch)}:${String(nonce)}`
+	const preimage = `${groupId}:${anchorRef}:${joinerNodeHash}:${String(epoch)}:${String(nonce)}`
 	return createHash('sha256').update(preimage, 'utf8').digest('hex')
 }
 
@@ -100,16 +102,16 @@ export function verifyJoinPow(powSolution, options) {
 	if (floorBits <= 0) return { ok: true, achievedBits: 0 }
 	if (!powSolution || typeof powSolution !== 'object') return { ok: false, achievedBits: 0 }
 
-	const anchorRef = String(powSolution.anchorRef ?? '').trim()
+	const anchorRef = String(powSolution.anchorRef ?? '')
 	const { nonce } = powSolution
 	const epoch = Number(powSolution.epoch)
-	const joinerNodeHash = String(powSolution.joinerNodeHash ?? options.senderNodeHash ?? '').trim().toLowerCase()
-	const senderNodeHash = String(options.senderNodeHash ?? '').trim().toLowerCase()
+	const joinerNodeHash = normalizeHex64(powSolution.joinerNodeHash ?? options.senderNodeHash)
+	const senderNodeHash = normalizeHex64(options.senderNodeHash)
 
 	if (!anchorRef || nonce == null || !Number.isFinite(epoch)) return { ok: false, achievedBits: 0 }
 	if (!joinerNodeHash || joinerNodeHash !== senderNodeHash) return { ok: false, achievedBits: 0 }
 
-	const anchors = (options.knownAnchors ?? []).map(a => String(a).trim()).filter(Boolean)
+	const anchors = (options.knownAnchors ?? []).filter(Boolean)
 	if (!anchors.length || !anchors.includes(anchorRef)) return { ok: false, achievedBits: 0 }
 
 	const epochMs = Math.max(60_000, Number(options.epochMs) || JOIN_POW_DEFAULT_EPOCH_MS)

package/governance/owner_succession_ballot.mjs

@@ -4,7 +4,7 @@
 import { Buffer } from 'node:buffer'
 
 import { canonicalStringify } from '../core/canonical_json.mjs'
-import { isHex64, isSignatureHex128 } from '../core/hexIds.mjs'
+import { isHex64, isSignatureHex128, normalizeHex64 } from '../core/hexIds.mjs'
 import { pubKeyHash, verify } from '../crypto/crypto.mjs'
 
 const BALLOT_DOMAIN = 'fount-owner-succession'
@@ -15,9 +15,9 @@ const BALLOT_DOMAIN = 'fount-owner-succession'
  */
 export function ownerSuccessionBallotSignBytes(ballot) {
 	const body = {
-		proposedOwnerPubKeyHash: String(ballot.proposedOwnerPubKeyHash ?? '').trim().toLowerCase(),
-		groupId: String(ballot.groupId ?? '').trim(),
-		ballotId: String(ballot.ballotId ?? '').trim(),
+		proposedOwnerPubKeyHash: normalizeHex64(ballot.proposedOwnerPubKeyHash),
+		groupId: ballot.groupId,
+		ballotId: ballot.ballotId,
 	}
 	return Buffer.from(`${BALLOT_DOMAIN}\0${canonicalStringify(body)}`, 'utf8')
 }
@@ -42,8 +42,8 @@ export async function verifyOwnerSuccessionThreshold(ballot, adminPubKeyHashes,
 	let valid = 0
 
 	for (const entry of ballot.adminSignatures || []) {
-		const pubKeyHex = String(entry?.pubKeyHex ?? '').trim().toLowerCase()
-		const signatureHex = String(entry?.signature ?? '').trim().toLowerCase()
+		const pubKeyHex = normalizeHex64(entry.pubKeyHex)
+		const signatureHex = entry.signature
 		if (!isHex64(pubKeyHex) || !isSignatureHex128(signatureHex)) continue
 
 		const hash = pubKeyHash(Buffer.from(pubKeyHex, 'hex'))

package/index.mjs

@@ -18,11 +18,11 @@ import {
 	setSignalingRuntimeConfig,
 } from './node/instance.mjs'
 import { setConnectivityDebug } from './node/log.mjs'
+import { loadReputation } from './node/reputation_store.mjs'
 import {
 	attachReputationSyncWire,
 	getReputationExportAllowlist,
 	getReputationLocks,
-	getReputationTable,
 	getTrustSyncDonors,
 	lockReputationMax,
 	pullReputationFromNode,
@@ -38,6 +38,9 @@ import {
 	ensureLinkToNode,
 	ensureOverlayRouter,
 	getLinkRegistry,
+	getPeerHealth,
+	listPeerHealth,
+	onPeerHealth,
 	reloadDiscoveryRelays,
 	sendToNodeLink,
 } from './transport/link_registry.mjs'
@@ -66,16 +69,19 @@ export {
 	getLinkRegistry,
 	getNodeDir,
 	getNodeHash,
+	getPeerHealth,
 	getReputationExportAllowlist,
 	getReputationLocks,
-	getReputationTable,
 	getRoutingProfile,
 	getTrustSyncDonors,
 	getUserRoomSlot,
 	initNode,
 	isInfraRunning,
 	isNodeInitialized,
+	listPeerHealth,
+	loadReputation,
 	lockReputationMax,
+	onPeerHealth,
 	pullReputationFromNode,
 	registerDiscoveryProvider,
 	registerLinkProvider,

package/infra/default_node_dir.mjs

@@ -17,6 +17,6 @@ export function defaultNodeDir() {
  * @returns {string} 解析后的绝对 node 目录
  */
 export function resolveNodeDir(override) {
-	const trimmed = String(override || '').trim()
-	return trimmed ? path.resolve(trimmed) : defaultNodeDir()
+	const value = override || ''
+	return value ? path.resolve(value) : defaultNodeDir()
 }

package/infra/priority.mjs

@@ -1,5 +1,5 @@
 import { normalizeHex64 } from '../core/hexIds.mjs'
-import { getReputationTable } from '../node/reputation_sync.mjs'
+import { loadReputation } from '../node/reputation_store.mjs'
 import { pickNodeScoreFromReputation } from '../reputation/pick_score.mjs'
 import { getLinkRegistry } from '../transport/link_registry.mjs'
 
@@ -39,7 +39,7 @@ export function applyPriorityToRegistry() {
 	}
 	registry.setPriorityWeightFunction(nodeHash => {
 		const score = pickNodeScoreFromReputation(
-			getReputationTable(),
+			loadReputation(),
 			normalizeHex64(nodeHash) || nodeHash,
 		)
 		return Math.floor(score * PRIORITY_BOOST)

package/link/frame.mjs

@@ -25,11 +25,10 @@ function normalizeFrameIdBytes(frameId) {
 			throw new Error(`p2p: frameId must be ${FRAME_ID_BYTES} bytes`)
 		return frameId
 	}
-	const text = frameId.trim().toLowerCase()
-	if (text.length !== FRAME_ID_BYTES * 2)
+	if (frameId.length !== FRAME_ID_BYTES * 2)
 		throw new Error('p2p: frameId must be 32 hex characters')
 	try {
-		return hexToBytes(text)
+		return hexToBytes(frameId)
 	}
 	catch {
 		throw new Error('p2p: frameId must be 32 hex characters')

package/link/handshake.mjs

@@ -1,7 +1,7 @@
 import { Buffer } from 'node:buffer'
 import { randomBytes } from 'node:crypto'
 
-import { isHex64, normalizeHex64 } from '../core/hexIds.mjs'
+import { isHex64, isSignatureHex128, normalizeHex64 } from '../core/hexIds.mjs'
 import { normalizeTcpPort } from '../core/tcp_port.mjs'
 import { keyPairFromSeed, pubKeyHash, sign, verify } from '../crypto/crypto.mjs'
 import { normalizeLanHosts } from '../discovery/lan_interfaces.mjs'
@@ -117,9 +117,9 @@ export function parseHello(hello) {
 export async function verifyAuth(hello, auth, expectedNonce, remoteBinding) {
 	const parsedHello = parseHello(hello)
 	if (!parsedHello) return null
-	const signatureHex = String(auth?.sig ?? '').trim().toLowerCase()
+	const signatureHex = String(auth?.sig ?? '')
 	const binding = normalizeLinkBinding(remoteBinding)
-	if (!/^[\da-f]{128}$/u.test(signatureHex) || !binding) return null
+	if (!isSignatureHex128(signatureHex) || !binding) return null
 	const normalizedNonce = normalizeHex64(expectedNonce)
 	if (!isHex64(normalizedNonce)) return null
 	const message = buildAuthMessage(normalizedNonce, binding, parsedHello.nodeHash)
@@ -141,7 +141,7 @@ export async function verifyAuth(hello, auth, expectedNonce, remoteBinding) {
  * @returns {Uint8Array} 待签名消息字节
  */
 export function buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort = null, lanHosts = null) {
-	const base = `fount-advert\0${String(rendezvousKey)}\0${String(ts)}\0${normalizeHex64(nodeHash)}`
+	const base = `fount-advert\0${rendezvousKey}\0${ts}\0${normalizeHex64(nodeHash)}`
 	const port = normalizeTcpPort(tcpPort)
 	let message = port ? `${base}\0${port}` : base
 	const hosts = normalizeLanHosts(lanHosts)
@@ -194,8 +194,8 @@ export async function verifySignedAdvert(rendezvousKey, advert, now = Date.now()
 	const parsedHello = parseHello({ nodeHash: advert?.nodeHash, nodePubKey: advert?.nodePubKey, nonce: '0'.repeat(64) })
 	if (!parsedHello) return null
 	const ts = Number(advert?.ts)
-	const sig = String(advert?.sig ?? '').trim().toLowerCase()
-	if (!Number.isFinite(ts) || Math.abs(now - ts) > maxSkewMs || !/^[\da-f]{128}$/u.test(sig)) return null
+	const sig = String(advert?.sig ?? '')
+	if (!Number.isFinite(ts) || Math.abs(now - ts) > maxSkewMs || !isSignatureHex128(sig)) return null
 	const hasTcpPortField = !!advert?.tcpPort
 	const tcpPort = normalizeTcpPort(advert?.tcpPort)
 	if (hasTcpPortField && !tcpPort) return null

package/link/pipe.mjs

@@ -10,6 +10,11 @@ import { buildAuth, buildHello, parseHello, verifyAuth } from './handshake.mjs'
 const encoder = new TextEncoder()
 const decoder = new TextDecoder()
 
+/** RTT 样本滑动窗口大小。 */
+const RTT_WINDOW_SIZE = 10
+/** 未收到 pong 的 ping 记录保留时长。 */
+const PING_RECORD_TTL_MS = 30000
+
 /**
  * 把 createLinkPipe 句柄收成上层 LinkHandle（可附带测试/内部字段）。
  * @param {ReturnType<typeof createLinkPipe>} pipe pipe 句柄
@@ -42,6 +47,11 @@ export function asLinkHandle(pipe, extras = {}) {
 		 * @returns {ReturnType<typeof pipe.onDown>} 取消订阅
 		 */
 		onDown: (...callArguments) => pipe.onDown(...callArguments),
+		/**
+		 * @param {...any} callArguments 透传 onRtt
+		 * @returns {ReturnType<typeof pipe.onRtt>} 取消订阅
+		 */
+		onRtt: (...callArguments) => pipe.onRtt(...callArguments),
 		/**
 		 * @param {...any} callArguments 透传 close
 		 * @returns {ReturnType<typeof pipe.close>} 关闭完成
@@ -70,6 +80,7 @@ export function asLinkHandle(pipe, extras = {}) {
  * @param {number} [options.heartbeatMs] 心跳间隔
  * @param {number} [options.idleTimeoutMs] 空闲超时
  * @param {number} [options.handshakeTimeoutMs] 握手超时
+ * @param {number} [options.rttWindowSize] RTT 样本滑动窗口大小
  * @returns {object} link 句柄 + 入站 API
  */
 export function createLinkPipe(options) {
@@ -96,6 +107,20 @@ export function createLinkPipe(options) {
 	let lastOutboundAt = 0
 	let sentFrames = 0
 	let recvFrames = 0
+	const rttWindowSize = Math.max(2, Math.floor(Number(options.rttWindowSize) || RTT_WINDOW_SIZE))
+	let pingSeq = 0
+	/** @type {Map<number, number>} seq -> 发送时间戳，未收到 pong 的 ping */
+	const outstandingPings = new Map()
+	let rttMs = null
+	let avgRttMs = null
+	let minRttMs = null
+	let maxRttMs = null
+	let pingCount = 0
+	let pongCount = 0
+	/** @type {number[]} */
+	const rttSamples = []
+	/** @type {Set<(rttMs: number) => void>} */
+	const rttListeners = new Set()
 	const envelopeListeners = new Set()
 	const downListeners = new Set()
 	const completedFrameIds = createLruMap(4096)
@@ -142,7 +167,14 @@ export function createLinkPipe(options) {
 		ready = true
 		clearTimeout(handshakeTimer)
 		heartbeatTimer = setInterval(() => {
-			void send({ scope: 'link', action: 'ping', payload: {} }).catch(() => { })
+			pingCount++
+			const seq = pingSeq++
+			const ts = Date.now()
+			const cutoff = ts - PING_RECORD_TTL_MS
+			for (const [outSeq, outTs] of outstandingPings)
+				if (outTs < cutoff) outstandingPings.delete(outSeq)
+			outstandingPings.set(seq, ts)
+			void send({ scope: 'link', action: 'ping', payload: { ts, seq } }).catch(() => { })
 		}, heartbeatMs)
 		idleTimer = setInterval(() => {
 			if (Date.now() - lastInboundAt > idleTimeoutMs)
@@ -218,10 +250,29 @@ export function createLinkPipe(options) {
 			if (frameId) completedFrameIds.touch(frameId, true)
 			if (envelope?.scope === 'link') {
 				if (envelope.action === 'ping') {
-					void send({ scope: 'link', action: 'pong', payload: {} }).catch(() => { })
+					const pingPayload = envelope.payload ?? {}
+					void send({ scope: 'link', action: 'pong', payload: { ts: pingPayload.ts, seq: pingPayload.seq } }).catch(() => { })
+					return
+				}
+				if (envelope.action === 'pong') {
+					const pongPayload = envelope.payload ?? {}
+					const sentTs = outstandingPings.get(pongPayload.seq)
+					if (Number.isFinite(pongPayload.ts) && sentTs !== undefined && sentTs === pongPayload.ts) {
+						outstandingPings.delete(pongPayload.seq)
+						pongCount++
+						const sample = Date.now() - sentTs
+						if (sample >= 0) {
+							rttMs = sample
+							rttSamples.push(sample)
+							if (rttSamples.length > rttWindowSize) rttSamples.shift()
+							avgRttMs = Math.round(rttSamples.reduce((total, value) => total + value, 0) / rttSamples.length)
+							minRttMs = rttSamples.reduce((minimum, sample) => Math.min(minimum, sample))
+							maxRttMs = rttSamples.reduce((minimum, sample) => Math.max(minimum, sample))
+							emitSafe(rttListeners, rttMs)
+						}
+					}
 					return
 				}
-				if (envelope.action === 'pong') return
 			}
 			if (ready && remoteNodeHash)
 				emitSafe(envelopeListeners, envelope, remoteNodeHash)
@@ -299,8 +350,7 @@ export function createLinkPipe(options) {
 		}))
 		for (const frame of encodeFrames(frameId, bytes)) {
 			const sent = options.sendFrame(envelope.action, frame)
-			if (sent != null && typeof /** @type {{ then?: unknown }} */ sent.then === 'function')
-				await sent
+			if (sent?.then) await sent
 			sentFrames++
 		}
 		lastOutboundAt = Date.now()
@@ -351,6 +401,14 @@ export function createLinkPipe(options) {
 			downListeners.add(callback)
 			return () => downListeners.delete(callback)
 		},
+		/**
+		 * @param {(rttMs: number) => void} callback RTT 样本回调
+		 * @returns {() => void} 取消订阅
+		 */
+		onRtt(callback) {
+			rttListeners.add(callback)
+			return () => rttListeners.delete(callback)
+		},
 		close,
 		handleInbound,
 		startHandshake,
@@ -370,6 +428,12 @@ export function createLinkPipe(options) {
 				lastOutboundAt,
 				sentFrames,
 				recvFrames,
+				rttMs,
+				avgRttMs,
+				minRttMs,
+				maxRttMs,
+				pingCount,
+				pongCount,
 				closeReason,
 				...options.extraStats?.() ?? {},
 			}

package/link/providers/ble_gatt.mjs

@@ -15,14 +15,6 @@ export const BLE_DATA_SERVICE_UUID = 'f017f017f017f017f017f017f017f019'
 export const BLE_DATA_CHAR_UUID = 'f017f017f017f017f017f017f017f01a'
 const BT_DEVICE_NAME = 'fount-bt'
 
-/**
- * 探测 BLE GATT 数据链路是否可用；失败则回落其它 link provider。
- * @returns {Promise<boolean>} 可用为 true
- */
-export async function canUseBleGattLink() {
-	return canUseBluetoothRuntime()
-}
-
 /**
  * 在 GATT write/notify 上建立 pipe。
  * @param {object} options 配置
@@ -279,7 +271,7 @@ export function createBleGattLinkProvider() {
 		id: instanceId,
 		level: LINK_LEVEL_BLE_GATT,
 		caps: { needsOfferAnswer: false, needsDiscoverySignal: false, probe: 'native' },
-		isAvailable: canUseBleGattLink,
+		isAvailable: canUseBluetoothRuntime,
 		/**
 		 * @param {{ nodeHash: string }} remote 远端
 		 * @returns {boolean} 是否有 BT peer hint

package/link/providers/index.mjs

@@ -35,7 +35,7 @@ const providers = new Map()
  */
 export function registerLinkProvider(provider) {
 	if (!provider?.id) throw new Error('p2p: link provider requires id')
-	providers.set(String(provider.id), provider)
+	providers.set(provider.id, provider)
 	return () => unregisterLinkProvider(provider.id)
 }
 
@@ -45,7 +45,7 @@ export function registerLinkProvider(provider) {
  * @returns {void}
  */
 export function unregisterLinkProvider(id) {
-	providers.delete(String(id))
+	providers.delete(id)
 }
 
 /**

package/link/providers/nostr.mjs

@@ -48,9 +48,7 @@ async function publishLinkPacket(remoteNodeHash, packet) {
  * @returns {import('./index.mjs').LinkProvider & { deliverPacket: (packet: object) => void }} provider
  */
 export function createNostrLinkProvider(options = {}) {
-	const resolveRelayUrls = typeof options.getRelayUrls === 'function'
-		? options.getRelayUrls
-		: resolveDefaultRelayUrls
+	const resolveRelayUrls = options.getRelayUrls || resolveDefaultRelayUrls
 
 	/** @type {((link: import('./index.mjs').LinkHandle) => void) | null} */
 	let onInbound = null

package/link/providers/webrtc.mjs

@@ -264,7 +264,7 @@ export async function createWebRtcLink(options) {
 		 */
 		channel.onmessage = event => {
 			try {
-				const data = event.data
+				const { data } = event
 				pipe.handleInbound(typeof data === 'string' ? data : toBytes(data, { allowString: true }))
 			}
 			catch { /* drop */ }
@@ -304,7 +304,7 @@ export async function createWebRtcLink(options) {
 		if (trickleIceOff || !event.candidate) return
 		void sendSignal({
 			type: 'ice',
-			candidate: typeof event.candidate.toJSON === 'function' ? event.candidate.toJSON() : event.candidate,
+			candidate: event.candidate.toJSON?.() || event.candidate,
 		}).catch(error => pipe.close(`signal-send-failed:${formatErrorReason(error)}`))
 	}
 	/**

package/link/rtc/ice_local_hostname.mjs

@@ -11,7 +11,7 @@
  * @returns {string | null} 处理后的 SDP；drop 策略下不可用时返回 null
  */
 export function applyIceLocalHostnamePolicy(candidateSdp, policy) {
-	const sdp = String(candidateSdp || '').trim()
+	const sdp = candidateSdp || ''
 	if (!sdp || !/\.local/i.test(sdp)) return sdp || null
 	if (!/\btyp host\b/i.test(sdp)) return sdp
 	if (policy === 'drop') return null
@@ -34,9 +34,10 @@ export function filterIceLocalHostnameCandidate(candidate, RTCIceCandidateCtor,
 	const rewritten = applyIceLocalHostnamePolicy(raw, policy)
 	if (!rewritten) return null
 	if (rewritten === raw) return candidate
-	const init = typeof candidate.toJSON === 'function'
-		? { ...candidate.toJSON(), candidate: rewritten }
-		: { candidate: rewritten, sdpMid: candidate.sdpMid, sdpMLineIndex: candidate.sdpMLineIndex }
+	const init = {
+		...candidate.toJSON?.() || { sdpMid: candidate.sdpMid, sdpMLineIndex: candidate.sdpMLineIndex },
+		candidate: rewritten,
+	}
 	return new RTCIceCandidateCtor(init)
 }
 
@@ -49,7 +50,7 @@ export function filterIceLocalHostnameCandidate(candidate, RTCIceCandidateCtor,
 export function wrapRtcPeerConnectionForIceLocalHostname(BaseRTC, RTCIceCandidate, policy = 'drop') {
 	if (policy === 'none') return BaseRTC
 
-	const baseRoutesIce = typeof BaseRTC.prototype.prepareIceCandidateEvent === 'function'
+	const baseRoutesIce = !!BaseRTC.prototype.prepareIceCandidateEvent
 
 	return class IceLocalHostnameFilteredRTCPeerConnection extends BaseRTC {
 		/** @type {((event: RTCPeerConnectionIceEvent) => void) | null} */

package/link/rtc/w3c_bridge.mjs

@@ -36,7 +36,7 @@ function defineEmitterHandler(target, property, eventName, adapt = payload => pa
  * @returns {RTCDataChannel} 已挂 W3C handler 的通道
  */
 export function bridgeDataChannel(channel) {
-	if (bridgedChannels.has(channel) || typeof channel.on !== 'function') return channel
+	if (bridgedChannels.has(channel) || !channel.on) return channel
 	bridgedChannels.add(channel)
 	defineEmitterHandler(channel, 'onmessage', 'message')
 	defineEmitterHandler(channel, 'onopen', 'open')

package/link/sdp_fingerprint.mjs

@@ -20,6 +20,6 @@ export function normalizeDtlsFingerprint(value) {
  * @returns {string | null} 规范化 fingerprint，未找到时返回 null
  */
 export function extractDtlsFingerprint(sdp) {
-	const line = String(sdp || '').match(/^a=fingerprint:sha-256\s+([\d:A-Fa-f]+)$/mu)?.[1]
+	const line = sdp.match(/^a=fingerprint:sha-256\s+([\d:A-Fa-f]+)$/mu)?.[1]
 	return normalizeDtlsFingerprint(line)
 }

package/mailbox/consumer_registry.mjs

@@ -19,7 +19,7 @@ const consumers = new Map()
  * @returns {void}
  */
 export function registerMailboxConsumer(app, handler) {
-	consumers.set(String(app), { handler })
+	consumers.set(app, { handler })
 }
 
 /**
@@ -27,7 +27,7 @@ export function registerMailboxConsumer(app, handler) {
  * @returns {void}
  */
 export function unregisterMailboxConsumer(app) {
-	consumers.delete(String(app))
+	consumers.delete(app)
 }
 
 /**

package/mailbox/deliver_or_store.mjs

@@ -25,7 +25,7 @@ import {
 async function resolveRemoteNodeHashForPeer(username, peerId) {
 	if (!peerId) return null
 	const entry = activeLinkRoster().find(row => row.peerId === peerId)
-	const remote = entry?.remoteNodeHash?.trim().toLowerCase()
+	const remote = normalizeHex64(entry?.remoteNodeHash)
 	return remote || null
 }
 
@@ -76,7 +76,7 @@ export async function deliverOrStoreMailboxPut(username, options) {
 		fromNodeHash: options.record?.fromNodeHash || nodeHash,
 	}
 	const stored = await storeMailboxRecord(record)
-	const toNodeHash = options.toNodeHash?.trim().toLowerCase()
+	const toNodeHash = normalizeHex64(options.toNodeHash)
 	const delivered = toNodeHash && isMailboxRecordWithinSizeLimit(record)
 		? await requireTrustGraphProvider(DEFAULT_TRUST_GRAPH_OWNER).sendToNode(username, toNodeHash, 'mailbox_put', { nodeHash, record })
 		: false
@@ -116,7 +116,7 @@ export async function ingestMailboxPut(wireContext, put, peerId = '') {
 	if (!record?.envelope || !record?.toPubKeyHash) return
 	const fromNode = normalizeHex64(put.nodeHash)
 	if (!fromNode || !takeIncomingMailboxPutSlot(fromNode)) return
-	const username = String(wireContext.replicaUsername || '').trim()
+	const username = wireContext.replicaUsername || ''
 	if (!username) return
 	if (peerId) {
 		const remote = await resolveRemoteNodeHashForPeer(username, peerId)
@@ -162,7 +162,7 @@ export async function respondMailboxWant(want, sendGive, peerId) {
 export async function ingestMailboxGive(wireContext, give) {
 	const records = (give.records || []).filter(isDeliverableMailboxRecord)
 	if (!records.length) return 0
-	const username = String(wireContext.replicaUsername || '').trim()
+	const username = wireContext.replicaUsername || ''
 	if (!username) return 0
 	const { dispatchMailboxRecordsToConsumers } = await import('./consumer_registry.mjs')
 	const { deleteMailboxRecords } = await import('./store.mjs')

package/mailbox/parse.mjs

@@ -64,7 +64,7 @@ export function parseMailboxGive(payload) {
 			return { ok: false, code: shape.code, field: `records[${i}].${shape.field}` }
 		if (!record.envelope || typeof record.envelope !== 'object')
 			return { ok: false, code: 'required', field: `records[${i}].envelope` }
-		const app = String(record.app || '').trim()
+		const app = String(record.app || '')
 		if (!app)
 			return { ok: false, code: 'required', field: `records[${i}].app` }
 		records.push(record)

package/mailbox/prune.mjs

@@ -32,8 +32,8 @@ export function mailboxRecordBytes(record) {
  */
 export function mailboxBucketKey(record) {
 	const to = normalizeHex64(record.toPubKeyHash) || ''
-	const from = record.fromNodeHash?.trim().toLowerCase()
-		|| record.envelope?.sender?.trim().toLowerCase()
+	const from = normalizeHex64(record.fromNodeHash)
+		|| normalizeHex64(record.envelope?.sender)
 		|| 'unknown'
 	return `${to}\0${from}`
 }

package/mailbox/rate.mjs

@@ -1,6 +1,7 @@
 /**
  * Mailbox 入站 put 限速（按来源节点，节点级单例）。
  */
+import { normalizeHex64 } from '../core/hexIds.mjs'
 
 const DEFAULT_WINDOW_MS = 60_000
 const DEFAULT_MAX_PUTS = 20
@@ -14,21 +15,13 @@ const inboundByKey = new Map()
  * @param {object} [limits] 可选限额
  * @returns {{ windowMs: number, maxPuts: number }} 生效限额
  */
-export function resolveMailboxRateLimits(limits = {}) {
+function resolveMailboxRateLimits(limits = {}) {
 	return {
 		windowMs: Math.max(1000, Number(limits.windowMs) || DEFAULT_WINDOW_MS),
 		maxPuts: Math.max(1, Math.min(256, Number(limits.maxPuts) || DEFAULT_MAX_PUTS)),
 	}
 }
 
-/**
- * @param {string} fromNodeHash 来源节点
- * @returns {string} 限速键
- */
-export function mailboxRateKey(fromNodeHash) {
-	return String(fromNodeHash || '').trim()
-}
-
 /**
  * @param {number} now 当前时间戳
  * @returns {void}
@@ -69,7 +62,7 @@ function evictLruIfNeeded(key) {
  */
 export function takeIncomingMailboxPutSlot(fromNodeHash, limits) {
 	const { windowMs, maxPuts } = resolveMailboxRateLimits(limits)
-	const key = mailboxRateKey(fromNodeHash)
+	const key = normalizeHex64(fromNodeHash)
 	const now = Date.now()
 	if (inboundByKey.size >= MAX_KEYS) sweepExpiredEntries(now)
 	evictLruIfNeeded(key)