@steve02081504/fount-p2p 0.0.30 → 0.0.32

package/sim/tunables_bundle.mjs

@@ -0,0 +1,71 @@
+/**
+ * 聚合各模块 tunables（运行时默认值 + 挖矿候选参数）。
+ */
+import archiveTunables from '../dag/tunables.json' with { type: 'json' }
+import admissionTunables from '../governance/tunables.json' with { type: 'json' }
+import mailboxTunables from '../mailbox/tunables.json' with { type: 'json' }
+import reputationTunables from '../reputation/tunables.json' with { type: 'json' }
+import trustGraphTunables from '../trust_graph/tunables.json' with { type: 'json' }
+
+import socialTunables from './reputation_social.tunables.json' with { type: 'json' }
+
+/**
+ * @typedef {{
+ *   reputation: typeof reputationTunables,
+ *   trustGraph: typeof trustGraphTunables,
+ *   social: typeof socialTunables,
+ *   mailbox: typeof mailboxTunables,
+ *   archive: typeof archiveTunables,
+ *   admission: typeof admissionTunables,
+ * }} TunablesBundle
+ */
+
+/** @type {Readonly<Record<keyof TunablesBundle, string>>} */
+export const TUNABLES_PATHS = Object.freeze({
+	reputation: new URL('../reputation/tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+	trustGraph: new URL('../trust_graph/tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+	social: new URL('./reputation_social.tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+	mailbox: new URL('../mailbox/tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+	archive: new URL('../dag/tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+	admission: new URL('../governance/tunables.json', import.meta.url).pathname.replace(/\\/g, '/'),
+})
+
+/** 只读默认模板（模块加载时构建一次） */
+const DEFAULT_TUNABLES_TEMPLATE = Object.freeze({
+	reputation: structuredClone(reputationTunables),
+	trustGraph: structuredClone(trustGraphTunables),
+	social: structuredClone(socialTunables),
+	mailbox: structuredClone(mailboxTunables),
+	archive: structuredClone(archiveTunables),
+	admission: structuredClone(admissionTunables),
+})
+
+/**
+ * @returns {TunablesBundle} 当前默认 tunables 深拷贝
+ */
+export function loadDefaultTunables() {
+	return {
+		reputation: structuredClone(DEFAULT_TUNABLES_TEMPLATE.reputation),
+		trustGraph: structuredClone(DEFAULT_TUNABLES_TEMPLATE.trustGraph),
+		social: structuredClone(DEFAULT_TUNABLES_TEMPLATE.social),
+		mailbox: structuredClone(DEFAULT_TUNABLES_TEMPLATE.mailbox),
+		archive: structuredClone(DEFAULT_TUNABLES_TEMPLATE.archive),
+		admission: structuredClone(DEFAULT_TUNABLES_TEMPLATE.admission),
+	}
+}
+
+/**
+ * @param {Partial<TunablesBundle>} patch 局部覆盖
+ * @returns {TunablesBundle} 合并后的 tunables
+ */
+export function mergeTunables(patch = {}) {
+	const base = loadDefaultTunables()
+	return {
+		reputation: { ...base.reputation, ...patch.reputation },
+		trustGraph: { ...base.trustGraph, ...patch.trustGraph },
+		social: { ...base.social, ...patch.social },
+		mailbox: { ...base.mailbox, ...patch.mailbox },
+		archive: { ...base.archive, ...patch.archive },
+		admission: { ...base.admission, ...patch.admission },
+	}
+}

package/sim/vulnerability.mjs

@@ -0,0 +1,532 @@
+/**
+ * 按攻击者类型评估当前 tunables 的防御薄弱点。
+ */
+
+/** @typedef {import('./attacks.mjs').AttackKind} AttackKind */
+/** @typedef {import('./metrics.mjs').SimSnapshot} SimSnapshot */
+/** @typedef {import('./scenarios.mjs').SimScenario} SimScenario */
+
+/**
+ * @typedef {{
+ *   attack: AttackKind,
+ *   label: string,
+ *   defenseRate: number,
+ *   severity: string,
+ *   impact: string,
+ *   worstScenario: string,
+ *   worstScenarioLabel: string,
+ *   metricHint: string,
+ *   meanDefenseRate?: number,
+ *   defenseVariance?: number,
+ *   weakSeedFraction?: number,
+ *   stableWeak?: boolean,
+ * }} VulnerabilityEntry
+ */
+
+/** @typedef {(snap: SimSnapshot, attack: AttackKind) => number} DefenseMetricFn */
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 该类型节点被抑制的比率
+ */
+function attackSuppression(snap, attack) {
+	return snap.byAttackDefense?.[attack]?.rate ?? snap.malSuppressionRate
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 联邦/邮箱可达综合防御
+ */
+function reachDefense(snap) {
+	return (snap.federationReachRate + snap.mailboxReachRate) / 2
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 共谋环崩溃率（叠加 topK 俘获）
+ */
+function defenseCollusion(snap) {
+	const harm = attackImpactHarm(snap, 'collusion')
+	const suppression = snap.byAttackDefense?.collusion?.rate ?? snap.malSuppressionRate
+	const structural = Math.max(snap.collusionCollapseRate, suppression)
+	return Math.min(structural, 1 - harm)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} Sybil 容纳率（叠加 topK 俘获）
+ */
+function defenseSybil(snap) {
+	const harm = attackImpactHarm(snap, 'sybil')
+	return Math.min(snap.sybilContainmentRate, 1 - harm * 0.85)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} rep_pump 综合防御
+ */
+function defenseRepPump(snap) {
+	const harm = attackImpactHarm(snap, 'rep_pump')
+	const late = Math.min(snap.archiveDefenseRate, snap.archiveQuorumAccuracy)
+	return Math.min(Math.max(snap.sybilContainmentRate, 1 - harm), late)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 社交攻击综合防御
+ */
+function defenseSocialAttack(snap) {
+	return Math.min(snap.honestPreservationRate, 1 - snap.falsePositiveRate)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 诚实节点保留率
+ */
+function defenseHonestPreservation(snap) { return snap.honestPreservationRate }
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 中转刷信誉综合防御
+ */
+function defenseRelayFarmer(snap, attack) {
+	return defenseGainType(snap, attack)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 可达综合防御（含 eclipse 影响）
+ */
+function defenseReach(snap, attack) {
+	const base = reachDefense(snap)
+	const harm = attackImpactHarm(snap, attack)
+	if (attack === 'eclipse' || attack === 'targeted_eclipse')
+		return Math.min(base, defenseGainType(snap, attack), 1 - harm)
+	return base
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 节点抑制率
+ */
+function defenseBySuppression(snap, attack) { return attackSuppression(snap, attack) }
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} chunk 与仲裁综合防御
+ */
+function defenseLazyChunk(snap, attack) {
+	return Math.min(attackSuppression(snap, attack), snap.archiveQuorumAccuracy)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 归档伪造综合防御
+ */
+function defenseArchiveForger(snap) {
+	return Math.min(snap.archiveDefenseRate, snap.archiveQuorumAccuracy)
+}
+
+/** reach 型攻击才计入 reachCollapse 伤害 */
+const REACH_IMPACT_ATTACKS = new Set(['eclipse', 'targeted_eclipse', 'hint_poisoner'])
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 增益型攻击的影响伤害 0..1（越高=攻击越成功）
+ */
+function attackImpactHarm(snap, attack) {
+	const impact = snap.byAttackImpact?.[attack]
+	const topK = impact?.topKCapture ?? 0
+	const reachCollapse = REACH_IMPACT_ATTACKS.has(attack) ? impact?.reachCollapse ?? 0 : 0
+	return Math.max(topK, reachCollapse * 0.75)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @param {AttackKind} attack 攻击类型
+ * @returns {number} 增益型综合防御率
+ */
+function defenseGainType(snap, attack) {
+	const harm = attackImpactHarm(snap, attack)
+	const suppression = attackSuppression(snap, attack)
+	return Math.max(1 - harm, suppression * 0.55)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 误伤反向防御
+ */
+function defenseReportFlooder(snap) { return 1 - snap.falsePositiveRate }
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 身份盗用容纳率
+ */
+function defenseKeyThief(snap) { return snap.compromiseContainmentRate }
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 肉鸡反应率
+ */
+function defenseSleeper(snap) { return snap.sleeperReactionRate }
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 等价欺骗综合防御
+ */
+function defenseEquivocator(snap) {
+	return Math.min(snap.equivocationDefenseRate, snap.archiveQuorumAccuracy)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 定向 eclipse 综合防御
+ */
+function defenseTargetedEclipse(snap) {
+	const harm = attackImpactHarm(snap, 'targeted_eclipse')
+	return Math.min(Math.min(reachDefense(snap), snap.churnReachRate), 1 - harm)
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 信令洪水防御
+ */
+function defenseSignalingFlood(snap) {
+	return Math.min(Number(snap.joinThrottleEffectiveness ?? 0), Number(snap.transportReachRate ?? 0))
+}
+
+/**
+ * @param {SimSnapshot} snap 快照
+ * @returns {number} 信令 eclipse 防御
+ */
+function defenseSignalingEclipse(snap) {
+	return Math.min(Number(snap.signalingDiversityRate ?? 0), Number(snap.transportReachRate ?? 0))
+}
+
+/** @type {Record<AttackKind, { label: string, metricHint: string, stressScenarios?: string[], defense: DefenseMetricFn }>} */
+export const ATTACK_PROFILES = {
+	sybil: {
+		label: 'Sybil 分身洪水',
+		metricHint: 'sybilContainmentRate',
+		stressScenarios: ['sybil_heavy'],
+		defense: defenseSybil,
+	},
+	rep_pump: {
+		label: '信誉刷分泵',
+		metricHint: 'defenseRepPump (sybilContainment + archive)',
+		defense: defenseRepPump,
+	},
+	collusion: {
+		label: '邀请链共谋环',
+		metricHint: 'collusionCollapseRate + byAttackDefense.collusion',
+		stressScenarios: ['collusion_ring'],
+		defense: defenseCollusion,
+	},
+	spammer: {
+		label: '消息刷屏',
+		metricHint: 'byAttackDefense.spammer',
+		stressScenarios: ['spam_eclipse'],
+		defense: defenseBySuppression,
+	},
+	false_accuser: {
+		label: '诬告诚实节点',
+		metricHint: 'honestPreservationRate + falsePositiveRate',
+		stressScenarios: ['social_war'],
+		defense: defenseSocialAttack,
+	},
+	eclipse: {
+		label: 'Want 列表 eclipse',
+		metricHint: 'federationReachRate + mailboxReachRate',
+		stressScenarios: ['spam_eclipse', 'eclipse_targeted'],
+		defense: defenseReach,
+	},
+	lazy_chunk: {
+		label: '惰性/错误 chunk 服务',
+		metricHint: 'archiveQuorumAccuracy',
+		defense: defenseLazyChunk,
+	},
+	social_mob: {
+		label: 'Social 群体拉黑',
+		metricHint: 'honestPreservationRate + falsePositiveRate',
+		stressScenarios: ['social_war'],
+		defense: defenseSocialAttack,
+	},
+	archive_forger: {
+		label: '归档摘要伪造',
+		metricHint: 'archiveDefenseRate',
+		stressScenarios: ['digest_equivocation', 'key_compromise'],
+		defense: defenseArchiveForger,
+	},
+	relay_farmer: {
+		label: '中转刷信誉',
+		metricHint: 'relayPreservationRate + byAttackImpact.topKCapture（非 reachCollapse）',
+		stressScenarios: ['relay_mesh'],
+		defense: defenseRelayFarmer,
+	},
+	whitewasher: {
+		label: '洗白复活',
+		metricHint: 'byAttackDefense.whitewasher',
+		stressScenarios: ['collusion_ring'],
+		defense: defenseBySuppression,
+	},
+	report_flooder: {
+		label: '举报洪泛',
+		metricHint: '1 - falsePositiveRate',
+		stressScenarios: ['social_war'],
+		defense: defenseReportFlooder,
+	},
+	oscillator: {
+		label: '信誉振荡',
+		metricHint: 'byAttackDefense.oscillator',
+		stressScenarios: ['spam_eclipse'],
+		defense: defenseBySuppression,
+	},
+	hint_poisoner: {
+		label: '发现提示投毒',
+		metricHint: 'byAttackImpact.hint_poisoner.topKCapture',
+		defense: defenseGainType,
+	},
+	key_thief: {
+		label: '高信誉身份被盗',
+		metricHint: 'compromiseContainmentRate',
+		stressScenarios: ['key_compromise'],
+		defense: defenseKeyThief,
+	},
+	sleeper: {
+		label: '肉鸡休眠突变',
+		metricHint: 'sleeperReactionRate',
+		stressScenarios: ['sleeper_turn'],
+		defense: defenseSleeper,
+	},
+	equivocator: {
+		label: '归档 digest 等价欺骗',
+		metricHint: 'equivocationDefenseRate',
+		stressScenarios: ['digest_equivocation'],
+		defense: defenseEquivocator,
+	},
+	targeted_eclipse: {
+		label: '定向 eclipse 分区',
+		metricHint: 'churnReachRate + federationReachRate',
+		stressScenarios: ['eclipse_targeted'],
+		defense: defenseTargetedEclipse,
+	},
+	slow_drip_spammer: {
+		label: '慢速 drip 刷屏',
+		metricHint: 'byAttackDefense.slow_drip_spammer',
+		defense: defenseBySuppression,
+	},
+	signaling_flood: {
+		label: '信令 join 洪水',
+		metricHint: 'joinThrottleEffectiveness + transportReachRate',
+		stressScenarios: ['transport_siege'],
+		defense: defenseSignalingFlood,
+	},
+	signaling_eclipse: {
+		label: '信令源 eclipse',
+		metricHint: 'signalingDiversityRate + transportReachRate',
+		stressScenarios: ['fresh_join_eclipse'],
+		defense: defenseSignalingEclipse,
+	},
+}
+
+/**
+ * @param {number} defenseRate 防御率（越高越好）
+ * @returns {{ severity: string, impact: string }} 严重度与影响描述
+ */
+export function classifyDefenseSeverity(defenseRate) {
+	const d = Math.max(0, Math.min(1, defenseRate))
+	if (d < 0.2)
+		return {
+			severity: '群级瘫痪',
+			impact: '作用域为单个群/小联邦（非全网崩溃）：该群内联邦发现或消息可达可能瘫痪，攻击者可主导该群',
+		}
+	if (d < 0.4)
+		return {
+			severity: '群级接管',
+			impact: '作用域为单个群/小联邦：约半数以上能力丧失，或该类型攻击者大面积漏网、诚实节点误伤显著',
+		}
+	if (d < 0.6)
+		return {
+			severity: '明显薄弱',
+			impact: '三成左右未抑制或连带误伤，该群/小联邦韧性明显下降但尚未全面崩溃',
+		}
+	if (d < 0.75)
+		return {
+			severity: '尚可',
+			impact: '多数情况能挡住，但该攻击在压力场景下仍有可乘之机',
+		}
+	return {
+		severity: '较稳',
+		impact: '该类型攻击下表现良好，不是当前配置的主要短板',
+	}
+}
+
+/**
+ * @param {number[]} samples 防御率样本
+ * @returns {{ mean: number, variance: number, min: number }} 跨 seed 统计
+ */
+export function defenseStatsAcrossSeeds(samples) {
+	if (!samples.length) return { mean: NaN, variance: 0, min: NaN }
+	const mean = samples.reduce((a, b) => a + b, 0) / samples.length
+	const variance = samples.reduce((a, b) => a + (b - mean) ** 2, 0) / samples.length
+	return { mean, variance, min: Math.min(...samples) }
+}
+
+/**
+ * @param {SimScenario[]} scenarios 场景列表
+ * @param {{ byScenario: Record<string, { snapshots?: SimSnapshot[] }> }} evalResult 评估结果
+ * @param {number} [topN=5] 返回最弱条目数
+ * @returns {{ weakest: VulnerabilityEntry | null, ranked: VulnerabilityEntry[], seedVariance?: object[] }} 薄弱攻击分析
+ */
+export function analyzeVulnerabilities(scenarios, evalResult, topN = 5) {
+	const scenarioById = new Map(scenarios.map(s => [s.id, s]))
+	/** @type {VulnerabilityEntry[]} */
+	const ranked = []
+
+	for (const [attack, profile] of Object.entries(ATTACK_PROFILES)) {
+		const relevant = scenarios.filter(s => (s.attacks[/** @type {AttackKind} */ attack] ?? 0) > 0)
+		if (!relevant.length) continue
+
+		const stressIds = profile.stressScenarios?.filter(id => relevant.some(s => s.id === id)) ?? []
+		const pool = stressIds.length ? relevant.filter(s => stressIds.includes(s.id)) : relevant
+
+		/** @type {number[]} */
+		const defenses = []
+		let worstDefense = Infinity
+		let worstScenario = pool[0]?.id ?? ''
+		for (const sc of pool) {
+			const agg = evalResult.byScenario[sc.id]
+			if (!agg?.snapshots?.length) continue
+			for (const snap of agg.snapshots) {
+				const defense = profile.defense(snap, /** @type {AttackKind} */ attack)
+				defenses.push(defense)
+				if (defense < worstDefense) {
+					worstDefense = defense
+					worstScenario = sc.id
+				}
+			}
+		}
+
+		if (!Number.isFinite(worstDefense) || !defenses.length) continue
+
+		const { mean, variance } = defenseStatsAcrossSeeds(defenses)
+		const weakThreshold = 0.55
+		const weakSeedFraction = defenses.filter(d => d < weakThreshold).length / defenses.length
+		const stableWeak = weakSeedFraction >= 0.5 || (mean < weakThreshold && variance < 0.02)
+
+		const { severity, impact } = classifyDefenseSeverity(mean)
+		const scMeta = scenarioById.get(worstScenario)
+		ranked.push({
+			attack: /** @type {AttackKind} */ attack,
+			label: profile.label,
+			defenseRate: mean,
+			meanDefenseRate: mean,
+			defenseVariance: variance,
+			weakSeedFraction,
+			stableWeak,
+			severity,
+			impact,
+			worstScenario,
+			worstScenarioLabel: scMeta?.label ?? worstScenario,
+			metricHint: profile.metricHint,
+		})
+	}
+
+	ranked.sort((a, b) => {
+		const aScore = (1 - a.meanDefenseRate) * (0.35 + (a.stableWeak ? a.weakSeedFraction : a.weakSeedFraction * 0.5))
+		const bScore = (1 - b.meanDefenseRate) * (0.35 + (b.stableWeak ? b.weakSeedFraction : b.weakSeedFraction * 0.5))
+		if (bScore !== aScore) return bScore - aScore
+		return a.meanDefenseRate - b.meanDefenseRate
+	})
+	return {
+		weakest: ranked[0] ?? null,
+		ranked: ranked.slice(0, topN),
+		seedVariance: ranked.map(r => ({
+			attack: r.attack,
+			mean: r.meanDefenseRate,
+			variance: r.defenseVariance,
+			weakSeedFraction: r.weakSeedFraction,
+			stableWeak: r.stableWeak,
+		})),
+	}
+}
+
+/**
+ * @param {{ weakest: VulnerabilityEntry | null, ranked: VulnerabilityEntry[] }} analysis 分析结果
+ * @returns {string[]} 控制台行
+ */
+export function formatVulnerabilityConsole(analysis) {
+	const lines = ['', '=== 防御薄弱点（跨 seed 均值 + 稳定弱项） ===']
+	if (!analysis.weakest) {
+		lines.push('（无可用攻击场景数据）')
+		return lines
+	}
+
+	const w = analysis.weakest
+	lines.push(
+		`最弱: ${w.label} (${w.attack}) — 均值防御 ${(w.meanDefenseRate * 100).toFixed(1)}%` +
+		`（跨 seed 方差 ${(w.defenseVariance ?? 0).toFixed(4)}，${((w.weakSeedFraction ?? 0) * 100).toFixed(0)}% seed 低于 55%${w.stableWeak ? '，稳定弱项' : ''}）`,
+		`严重度: ${w.severity} — ${w.impact}`,
+		`最差场景: ${w.worstScenarioLabel} (${w.worstScenario})`,
+	)
+
+	if (analysis.ranked.length > 1) {
+		lines.push('', '其他薄弱项:')
+		for (const row of analysis.ranked.slice(1))
+			lines.push(`  · ${row.label}: 均值 ${(row.meanDefenseRate * 100).toFixed(1)}%` +
+				` (var ${(row.defenseVariance ?? 0).toFixed(4)}${row.stableWeak ? ', 稳定' : ''}) — ${row.severity}`)
+	}
+
+	return lines
+}
+
+/**
+ * @param {{ weakest: VulnerabilityEntry | null, ranked: VulnerabilityEntry[] }} analysis 分析结果
+ * @returns {string[]} Markdown 行
+ */
+export function formatVulnerabilityMarkdown(analysis) {
+	const lines = ['## 防御薄弱点', '']
+	if (!analysis.weakest) {
+		lines.push('无可用攻击场景数据。', '')
+		return lines
+	}
+
+	const w = analysis.weakest
+	lines.push(
+		`当前配置**最不擅长**应对 **${w.label}**（\`${w.attack}\`）。`,
+		'',
+		'| 项目 | 值 |',
+		'| --- | --- |',
+		`| 跨 seed 均值防御率 | ${(w.meanDefenseRate * 100).toFixed(1)}% |`,
+		`| 跨 seed 方差 | ${(w.defenseVariance ?? 0).toFixed(4)} |`,
+		`| 弱 seed 占比 (<55%) | ${((w.weakSeedFraction ?? 0) * 100).toFixed(0)}% |`,
+		`| 稳定弱项 | ${w.stableWeak ? '是' : '否'} |`,
+		`| 严重度 | **${w.severity}** |`,
+		`| 影响 | ${w.impact} |`,
+		`| 最差场景 | ${w.worstScenarioLabel} (\`${w.worstScenario}\`) |`,
+		`| 参考指标 | ${w.metricHint} |`,
+		'',
+	)
+
+	if (analysis.ranked.length > 1) {
+		lines.push('### 其他薄弱攻击者', '', '| 攻击者 | 均值防御 | 方差 | 稳定弱项 | 严重度 | 最差场景 |', '| --- | ---: | ---: | --- | --- | --- |')
+		for (const row of analysis.ranked.slice(1))
+			lines.push(`| ${row.label} | ${(row.meanDefenseRate * 100).toFixed(1)}% | ${(row.defenseVariance ?? 0).toFixed(4)} | ${row.stableWeak ? '是' : '否'} | ${row.severity} | ${row.worstScenarioLabel} |`)
+		lines.push('')
+	}
+
+	if (analysis.seedVariance?.length) {
+		lines.push('### 跨 seed 方差（全部攻击类型）', '', '| 攻击者 | 均值 | 方差 | 弱 seed 占比 | 稳定 |', '| --- | ---: | ---: | ---: | --- |')
+		for (const row of analysis.seedVariance.slice(0, 12))
+			lines.push(`| \`${row.attack}\` | ${(row.mean * 100).toFixed(1)}% | ${row.variance.toFixed(4)} | ${(row.weakSeedFraction * 100).toFixed(0)}% | ${row.stableWeak ? '是' : '否'} |`)
+		lines.push('')
+	}
+
+	return lines
+}

package/deno.json

@@ -1,7 +0,0 @@
-{
-	"nodeModulesDir": "none",
-	"lock": false,
-	"allowScripts": [
-		"npm:node-datachannel"
-	]
-}