@steve02081504/fount-p2p 0.0.32 → 0.0.34

package/README.md

@@ -88,7 +88,7 @@ Facade entry: `index.mjs` (`startNode`, `createGroupLinkSet`, `registerDiscovery
 | `user_room.mjs` / `group_link_set.mjs` / `node_scope/wire` + `node_scope/features` | rooms + composable node-scope wires (`registerNodeScopeWireHook`, attaches) |
 | `room_scopes.mjs` / `remote_user_room.mjs` | scope constants / remote user slot |
 
-`runtime_bootstrap`, `offer_answer` are **internal** (transport). Signal crypto / rendezvous live under `discovery/internal/signal_crypto.mjs` (used by discovery `nostr.mjs` / `adverts.mjs`; not a package export). The Nostr **link** provider (`link/providers/nostr.mjs`) reuses the same discovery signal path (`type: 'link'`) as a last-resort duplex pipe. `ensureRuntime` returns after registration and scheduling warm-up; it does not await lan_tcp listen, public relays, or Bluetooth. `setSignalingRuntimeConfig` → `reloadDiscoveryRelays`. See [docs/runtime.md](./docs/runtime.md) and [docs/transports.md](./docs/transports.md).
+`runtime_bootstrap`, `offer_answer` are **internal** (transport). Signal crypto / rendezvous live under `discovery/internal/signal_crypto.mjs` (used by discovery `nostr.mjs` / `adverts.mjs`; not a package export). The Nostr **link** provider (`link/providers/nostr.mjs`) reuses the same discovery signal path (`type: 'link'`) as a last-resort duplex pipe. `ensureRuntime` returns after registration and scheduling warm-up; it does not await lan_tcp listen, public relays, or Bluetooth. Call `ensureChannelAvailable('bt')` to await BT discovery readiness. `setSignalingRuntimeConfig` → `reloadDiscoveryRelays`. See [docs/runtime.md](./docs/runtime.md) and [docs/transports.md](./docs/transports.md).
 
 Root contains only the facade and package metadata; all modules live in layered subdirectories.
 

package/discovery/nostr.mjs

@@ -6,6 +6,8 @@ import WebSocket from 'ws'
 import { base64ToBytes, hexToBytes, bytesToBase64, bytesToHex } from '../core/bytes_codec.mjs'
 import { isHex64, normalizeHex64 } from '../core/hexIds.mjs'
 import { sha256Hex } from '../crypto/crypto.mjs'
+import { getNodeTransportSettings } from '../node/identity.mjs'
+import { getSignalingRuntimeConfig } from '../node/instance.mjs'
 import { nodeDebug, shortHash } from '../node/log.mjs'
 
 import { noteAdvertPeerHints } from './advert_peer_hints.mjs'
@@ -23,6 +25,10 @@ export const DEFAULT_RELAY_URLS = [
 	'wss://relay.damus.io',
 	'wss://nos.lol',
 	'wss://relay.nostr.band',
+	'wss://relay.nostr.com',
+	'wss://nostr.bitcoiner.social',
+	'wss://nostr.mom',
+	'wss://relay.snort.social',
 ]
 
 /** 单中继 WebSocket 首连超时（短超时 + 并行，避免串行 10s×N）。 */
@@ -42,6 +48,9 @@ export const NOSTR_ADVERT_KIND = 30787
 /** Nostr signal 事件 kind（ephemeral，实时转发）。 */
 export const NOSTR_SIGNAL_KIND = 20787
 
+/** 打广告用的话题 tag（hashtag，NIP-01），公开可被搜索聚合。 */
+const NOSTR_TOPIC_TAG = ['t', 'fount']
+
 const ADVERT_TTL_MS = 10 * 60_000
 
 /** @type {Map<string, number>} 网络域 nodeHash → lastSeenAt */
@@ -200,6 +209,15 @@ export function mergeSignalingRelayUrls(userRelayUrls) {
 	return merged.length ? merged : [...DEFAULT_RELAY_URLS]
 }
 
+/**
+ * 当前可用 nostr 中继：nostr 通道配置 relay（替换默认），否则节点默认 + 公共中继。
+ * @returns {string[]} relay URL 列表
+ */
+export function resolveNostrRelayUrls() {
+	const relay = getSignalingRuntimeConfig().channels?.nostr?.relay
+	return relay?.length ? relay : mergeSignalingRelayUrls(getNodeTransportSettings().relayUrls)
+}
+
 /**
  * @param {number} kind 事件 kind
  * @param {string[][]} tags 事件标签
@@ -914,7 +932,7 @@ export function createNostrDiscoveryProvider(options = {}) {
 				const bytes = encryptSignalPacket(rendezvousKey, { type: 'advert', body: advertBody })
 				const event = await signNostrEvent(
 					NOSTR_ADVERT_KIND,
-					[['t', rendezvousKey], ['x', 'advert'], ['d', rendezvousKey]],
+					[NOSTR_TOPIC_TAG, ['t', rendezvousKey], ['x', 'advert'], ['d', rendezvousKey]],
 					bytesToBase64(bytes),
 					secretKey,
 				)
@@ -946,7 +964,7 @@ export function createNostrDiscoveryProvider(options = {}) {
 			const rendezvousKey = nodeRendezvousKey(hash)
 			const event = await signNostrEvent(
 				NOSTR_SIGNAL_KIND,
-				[['t', rendezvousKey], ['x', 'signal'], ['p', hash]],
+				[NOSTR_TOPIC_TAG, ['t', rendezvousKey], ['x', 'signal'], ['p', hash]],
 				bytesToBase64(bytes),
 				secretKey,
 			)
@@ -1008,7 +1026,7 @@ export function createNostrDiscoveryProvider(options = {}) {
 				const bytes = encryptSignalPacket(rendezvousKey, { type: 'advert', body: advertBody })
 				const event = await signNostrEvent(
 					NOSTR_ADVERT_KIND,
-					[['t', rendezvousKey], ['x', 'advert'], ['d', rendezvousKey]],
+					[NOSTR_TOPIC_TAG, ['t', rendezvousKey], ['x', 'advert'], ['d', rendezvousKey]],
 					bytesToBase64(bytes),
 					secretKey,
 				)

package/docs/runtime.md

@@ -4,15 +4,27 @@
 
 ## `ensureRuntime` contract
 
-Returns after registering lan / nostr / bt discovery providers and scheduling background warm — does **not** await lan_tcp listen, Nostr relays, or BT.
+Returns after registering lan / nostr discovery providers (subject to the signaling `channels` whitelist), registering all enabled link providers (including `ble_gatt`), and scheduling background warm — does **not** await lan_tcp listen, Nostr relays, or BT availability.
 
 | Who waits | For what |
 | --- | --- |
 | Shells (`startNode` / `ensureUserRoom`) | Nothing beyond `ensureRuntime` itself — never read `lanTcpPort` or await public-signaling warm-up |
 | `buildLocalAdvert` / `whenListening` | Local lan_tcp listen only |
 | `ensureLinkToNode` | `whenSignalListening` (Nostr `listenNodeSignals` attached) before dial, so offer/answer does not drop the first signal |
+| `ensureChannelAvailable('bt')` | BT discovery provider registered and BT signal/presence fan-in restarted |
 
-Nostr / LAN / BT hooks are progressive. BT discovery / `ble_gatt` always warm in the background.
+Nostr / LAN hooks are progressive. The `bt` discovery provider is **not** registered by `ensureRuntime`; it is registered on demand via `ensureChannelAvailable('bt')`.
+
+## `ensureChannelAvailable(channel)` contract
+
+Await this to make a specific channel available:
+
+- `bt` — probes the Bluetooth runtime, registers the `bt` discovery provider if available, and restarts the signal/presence fan-in so BT participates.
+- `lan` — awaits `whenListening` (local lan_tcp listen).
+- `nostr` — awaits `whenSignalListening` (Nostr `listenNodeSignals` attached).
+- `webrtc` — awaits `whenSignalListening` (the shared signal medium WebRTC depends on).
+
+`startNode` does not call `ensureChannelAvailable` automatically; shells that need BT discovery should `await getLinkRegistry().ensureChannelAvailable('bt')` (or the top-level `ensureChannelAvailable('bt')` export) after `startNode`.
 
 ### Fast-listen & dial path
 
@@ -28,7 +40,7 @@ Nostr / LAN / BT hooks are progressive. BT discovery / `ble_gatt` always warm in
 | init → shutdown → natural exit | ≤10s | `test/pure/shutdown_exit.test.mjs` |
 | 10s warm → shutdown → exit | ≤2s | same |
 
-Shutdown-exit tests use the production path (default public Nostr + lan). Do not use `relayOverride` / dead-relay crutches there.
+Shutdown-exit tests use the production path (default public Nostr + lan). Do not use per-channel relay / dead-relay crutches there.
 
 ## Nostr cleanup
 

package/docs/signaling.md

@@ -18,6 +18,16 @@ Frames: `hello` then `auth`. On simultaneous dial, peer `auth` can arrive before
 
 When set: send final offer/answer after ICE gathering, dedupe remote signals, queue remote ICE until both descriptions are ready.
 
-## Runtime relay override
+## Runtime channels
 
-`setSignalingRuntimeConfig({ relayOverride, iceLocalHostnamePolicy, trickleIceOff })` after `initNode` (or pass `signaling` once on first `startNode`). `relayOverride` **replaces** the default public relay list (do not merge defaults back in). Changes emit `signaling-changed` and trigger `reloadDiscoveryRelays` (swap Nostr provider + rebind node presence/signals).
+`setSignalingRuntimeConfig({ channels })` after `initNode` (or pass `signaling` once on first `startNode`). Changes emit `signaling-changed` and trigger `reloadDiscoveryRelays` (rebind discovery providers + node presence/signals).
+
+`channels` selects which discovery/link media are active — `nostr`, `lan`, `bt`, `webrtc`. Semantics per channel key: `false` **disables**; any other value (`undefined`, `true`, or an object) **enables** — an object is merged over that channel's default config. Channels not mentioned keep their default enabled state.
+
+Channel → components:
+- `nostr` (nostr discovery + nostr link) — config `relay` **replaces** the default public relay list (do not merge defaults back in).
+- `lan` (lan discovery + lan_tcp link)
+- `bt` (bt discovery + ble_gatt link)
+- `webrtc` (webrtc link data-transport fallback) — config `iceLocalHostnamePolicy` (`none` / `rewrite-loopback` / `drop`, Windows defaults `drop`) and `trickleIceOff` (send final offer/answer after ICE gathering).
+
+To run a node on only a few channels, use the `disableAllChannels` helper: `{ channels: disableAllChannels({ nostr: { relay: [...] } }) }` enables only `nostr` (with its per-channel relay) and disables the rest; use `true` to enable a channel with its default config (`disableAllChannels({ nostr: true, webrtc: true })`).

package/docs/transports.md

@@ -33,7 +33,7 @@ Topic / rendezvous / signal crypto live under `discovery/` (`nostr.mjs`, `intern
 | **Discovery** (`discovery/`) | Per medium: `listVisibleNodeHashes` + `connectToNode`. Encrypted adverts/signals via `adverts.mjs` + `index.mjs` helpers. |
 | **Link providers** (`link/providers/`) | Open a duplex pipe; sorted by **`level` (descending)** — not a shell import |
 | **Registry** (`transport/link_registry.mjs`) | fount-network facade: dial fallback, scope/overlay, one canonical link per peer |
-| **Bootstrap** (`transport/runtime_bootstrap.mjs`) | `ensureRuntime` register + progressive listen/discovery/BT warm; `reloadDiscoveryRelays` on `signaling-changed` |
+| **Bootstrap** (`transport/runtime_bootstrap.mjs`) | `ensureRuntime` register + progressive listen/discovery; `ensureChannelAvailable` for BT discovery; `reloadDiscoveryRelays` on `signaling-changed` |
 | **Offer/answer** (`transport/offer_answer.mjs`) | Discovery-signal glare path for `caps.needsOfferAnswer` (**internal**; uses `sendNodeSignalPacket`) |
 | **Mesh keepalive** (`transport/mesh_keepalive.mjs`) | N/K pool, explore eviction, stable promote to `trustedPeers` |
 

package/index.mjs

@@ -36,6 +36,7 @@ import { getRoutingProfile, setRoutingProfile } from './node/routing_profile.mjs
 import { createGroupLinkSet } from './transport/group_link_set.mjs'
 import {
 	configureLinkRegistry,
+	ensureChannelAvailable,
 	ensureLinkToNode,
 	ensureOverlayRouter,
 	getLinkRegistry,
@@ -63,6 +64,7 @@ export {
 	configureLinkRegistry,
 	createGroupLinkSet,
 	createScopedLinkRoom,
+	ensureChannelAvailable,
 	ensureLinkToNode,
 	ensureNodeDefaults,
 	ensureNodeScope,

package/link/frame.mjs

@@ -1,6 +1,6 @@
 import { randomBytes } from 'node:crypto'
 
-import { bytesToHex, hexToBytes, toBytes } from '../core/bytes_codec.mjs'
+import { bytesToBase64, bytesToHex, hexToBytes, toBytes } from '../core/bytes_codec.mjs'
 
 /** frameId 字段字节长度（128 位）。 */
 export const FRAME_ID_BYTES = 16
@@ -40,6 +40,28 @@ export function randomFrameIdHex() {
 	return bytesToHex(randomBytes(FRAME_ID_BYTES))
 }
 
+/**
+ * 在单包字符上限下，求单片最大可承载 chunk 字节数。
+ * 以 base64 逐片精确贴合上限为目标，用二分在 [0, limit] 内找最大 chunkBytes，
+ * 使 base64Len(headerBytes + chunkBytes) <= limit —— 最大化单帧载荷利用率，
+ * 而不是按 base64 膨胀预留固定比例（预留比例会浪费余量且对帧头/填充不精确）。
+ * @param {number} maxPayloadChars 单包载荷字符上限（编码后）
+ * @param {(bytes: Uint8Array) => string} [encode] 载荷编码函数（默认 base64）
+ * @param {number} [headerBytes=FRAME_HEADER_BYTES] 帧头字节数
+ * @returns {number} 最大 chunk 字节数（>=0）
+ */
+export function maxFrameChunkBytesForPayload(maxPayloadChars, encode = bytesToBase64, headerBytes = FRAME_HEADER_BYTES) {
+	const limit = Math.max(1, Math.floor(Number(maxPayloadChars) || 0))
+	let lowerBound = 0
+	let upperBound = limit
+	while (lowerBound < upperBound) {
+		const candidateChunkBytes = Math.ceil((lowerBound + upperBound + 1) / 2)
+		if (encode(new Uint8Array(headerBytes + candidateChunkBytes)).length <= limit) lowerBound = candidateChunkBytes
+		else upperBound = candidateChunkBytes - 1
+	}
+	return lowerBound
+}
+
 /**
  * 将消息切成带帧头的分片。
  * @param {string | Uint8Array} frameId 消息 id（hex 或 16 字节）
@@ -50,7 +72,7 @@ export function randomFrameIdHex() {
 export function encodeFrames(frameId, bytes, maxChunkBytes = DEFAULT_MAX_FRAME_CHUNK_BYTES) {
 	const body = toBytes(bytes)
 	const idBytes = normalizeFrameIdBytes(frameId)
-	const chunkBytes = Math.max(256, Math.min(DEFAULT_MAX_MESSAGE_BYTES, Number(maxChunkBytes) || DEFAULT_MAX_FRAME_CHUNK_BYTES))
+	const chunkBytes = Math.min(DEFAULT_MAX_MESSAGE_BYTES, Number(maxChunkBytes) || DEFAULT_MAX_FRAME_CHUNK_BYTES)
 	const total = Math.max(1, Math.ceil(body.byteLength / chunkBytes))
 	/** @type {Uint8Array[]} */
 	const frames = []

package/link/pipe.mjs

@@ -4,7 +4,7 @@ import { ms } from '../utils/duration.mjs'
 import { emitSafe } from '../utils/emit_safe.mjs'
 import { createLruMap } from '../utils/lru.mjs'
 
-import { createReassembler, encodeFrames, randomFrameIdHex } from './frame.mjs'
+import { createReassembler, DEFAULT_MAX_FRAME_CHUNK_BYTES, encodeFrames, FRAME_HEADER_BYTES, randomFrameIdHex } from './frame.mjs'
 import { buildAuth, buildHello, parseHello, verifyAuth } from './handshake.mjs'
 
 const encoder = new TextEncoder()
@@ -81,10 +81,14 @@ export function asLinkHandle(pipe, extras = {}) {
  * @param {number} [options.idleTimeoutMs] 空闲超时
  * @param {number} [options.handshakeTimeoutMs] 握手超时
  * @param {number} [options.rttWindowSize] RTT 样本滑动窗口大小
+ * @param {number} [options.maxFrameBytes] 单帧最大字节数（provider 按其传输载荷上限折算；默认 15 KiB）
  * @returns {object} link 句柄 + 入站 API
  */
 export function createLinkPipe(options) {
 	const { providerId, level } = options
+	const maxFrameBytes = options.maxFrameBytes == null ? DEFAULT_MAX_FRAME_CHUNK_BYTES : Number(options.maxFrameBytes)
+	if (maxFrameBytes < FRAME_HEADER_BYTES)
+		throw new Error(`p2p: ${providerId} maxFrameBytes too small to carry a frame header`)
 	const heartbeatMs = Number(options.heartbeatMs) || ms('15s')
 	const idleTimeoutMs = Number(options.idleTimeoutMs) || ms('45s')
 	const handshakeTimeoutMs = Number(options.handshakeTimeoutMs) || ms('10s')
@@ -348,7 +352,7 @@ export function createLinkPipe(options) {
 			payload: envelope.payload ?? null,
 			frameId,
 		}))
-		for (const frame of encodeFrames(frameId, bytes)) {
+		for (const frame of encodeFrames(frameId, bytes, maxFrameBytes)) {
 			const sent = options.sendFrame(envelope.action, frame)
 			if (sent?.then) await sent
 			sentFrames++

package/link/providers/nostr.mjs

@@ -4,18 +4,102 @@ import { randomBytes } from 'node:crypto'
 import { base64ToBytes, bytesToBase64 } from '../../core/bytes_codec.mjs'
 import { normalizeHex64 } from '../../core/hexIds.mjs'
 import { getDiscoveryProvider, sendNodeSignalPacket } from '../../discovery/index.mjs'
-import { mergeSignalingRelayUrls } from '../../discovery/nostr.mjs'
-import { getNodeTransportSettings } from '../../node/identity.mjs'
-import { getSignalingRuntimeConfig } from '../../node/instance.mjs'
+import { NOSTR_SIGNAL_KIND, resolveNostrRelayUrls } from '../../discovery/nostr.mjs'
 import { ms } from '../../utils/duration.mjs'
 import { createLruMap } from '../../utils/lru.mjs'
+import { FRAME_HEADER_BYTES, maxFrameChunkBytesForPayload } from '../frame.mjs'
 import { asLinkHandle } from '../pipe.mjs'
 
 import { LINK_LEVEL_NOSTR } from './levels.mjs'
 import { createLinkIdBoundPipe } from './link_id_pipe.mjs'
 
-/** 单包 payload（UTF-8 / base64）上限，避免撞 relay content 限制。 */
-const MAX_LINK_PAYLOAD_CHARS = 12 * 1024
+/** 单包 payload（UTF-8 / base64）上限，避免撞 relay content 限制。
+ *  默认兜底取 2026-08 本机对默认公共 relay 的 NIP-11 `max_message_length` 非零最小值（131072 = nostr.mom）。
+ *  有 relay 信息时用实测非零最小值覆盖（见 refreshPayloadCap），无 relay / 未探测到时用此默认。 */
+export const MAX_LINK_PAYLOAD_CHARS = 131072
+
+/** relay info（NIP-11）单次探测超时。 */
+const RELAY_INFO_TIMEOUT_MS = ms('4s')
+/** 实测 payload 上限缓存有效期。 */
+const PAYLOAD_CAP_CACHE_TTL_MS = ms('10m')
+const textEncoder = new TextEncoder()
+/** 固定 64 位 hex 占位（id/pubkey/sig/rendezvousKey/nodeHash 均固定宽度）。 */
+const HEX64 = 'a'.repeat(64)
+/** AES-GCM 封装输出中的固定长度字段占位：iv = base64(12B) = 16，authTag = base64(16B) = 24。 */
+const GCM_IV_BASE64 = 'a'.repeat(16)
+const GCM_AUTH_TAG_BASE64 = 'a'.repeat(24)
+
+/**
+ * 估算把给定 link 包发布为 Nostr EVENT 后，完整 WebSocket 消息（["EVENT", event]）的 UTF-8 字节长度。
+ * id/pubkey/sig/rendezvousKey/nodeHash 均为固定 64 hex，created_at/kind/tags 固定，故长度仅随 packet.payload 变化，
+ * 可同步精确构造（含加密封装壳与 event 字段），无需真正 AES-GCM 封装与 Schnorr 签名。
+ * @param {object} packet link 包
+ * @returns {number} 完整消息字节长度
+ */
+export function estimateEventMessageBytes(packet) {
+	// encryptSignalPacket 输出全 ASCII：{"iv":<16>,"authTag":<24>,"ciphertext":base64(packetJson bytes)}。
+	return textEncoder.encode(JSON.stringify(['EVENT', {
+		id: HEX64,
+		pubkey: HEX64,
+		created_at: Math.floor(Date.now() / 1000),
+		kind: NOSTR_SIGNAL_KIND,
+		tags: [['t', HEX64], ['x', 'signal'], ['p', HEX64]],
+		content: bytesToBase64(textEncoder.encode(JSON.stringify({
+			iv: GCM_IV_BASE64,
+			authTag: GCM_AUTH_TAG_BASE64,
+			ciphertext: bytesToBase64(textEncoder.encode(JSON.stringify(packet))),
+		}))),
+		sig: HEX64,
+	}])).length
+}
+
+/** relay cap 低于此字符数视为无法承载最小正 chunk（帧头 + 1 字节 chunk 的完整 EVENT 封装），从统一上限中剔除。
+ *  这类 relay 即便能传也无法携带有效载荷（maxFrameChunkBytesForPayload 得 0），参与取最小值只会无谓拖低/毒化整条链路。 */
+export const MIN_USABLE_RELAY_CAP_CHARS = estimateEventMessageBytes({
+	type: 'link',
+	op: 'b',
+	from: HEX64,
+	linkId: HEX64,
+	payload: bytesToBase64(new Uint8Array(FRAME_HEADER_BYTES + 1)),
+})
+
+/**
+ * 拉取单个 relay 的 NIP-11 relay info 并读取 max_message_length。
+ * @param {string} relayUrl relay URL
+ * @returns {Promise<number | null>} 非零上限；失败/未声明返回 null
+ */
+async function queryRelayMaxMessageLength(relayUrl) {
+	const httpUrl = relayUrl.replace(/^wss:/, 'https:').replace(/^ws:/, 'http:')
+	const controller = new AbortController()
+	const timer = setTimeout(() => controller.abort(), RELAY_INFO_TIMEOUT_MS)
+	timer.unref?.()
+	try {
+		const response = await fetch(httpUrl, { headers: { Accept: 'application/nostr+json' }, signal: controller.signal })
+		const info = await response.json()
+		const limit = { ...info?.limit || {}, ...info?.limitation || {} }
+		const value = Number(limit.max_message_length)
+		return Number.isFinite(value) && value > 0 ? value : null
+	}
+	catch {
+		return null
+	}
+	finally {
+		clearTimeout(timer)
+	}
+}
+
+/**
+ * 从各 relay 上报的 cap 中取「可用」（>= 最小可用帧，能产生正数 chunk budget）的非零最小值。
+ * cap 过低的 relay 无法承载最小正 chunk（完整 EVENT 封装装不下），取最小值只会拖低/毒化整条链路，故剔除；
+ * 剩余 relay 的最小值保证任意一个可用 relay 都能传该帧（publishEvent 只要求任一 relay 接受）。
+ * @param {Array<number | null | undefined>} caps 各 relay 上报的 cap
+ * @returns {number | null} 可用最小值；无可用 relay 返回 null
+ */
+export function minUsablePayloadCap(caps) {
+	const usable = caps.filter(value => Number.isFinite(value) && value >= MIN_USABLE_RELAY_CAP_CHARS)
+	return usable.length ? Math.min(...usable) : null
+}
+
 /** open 到达前为同一 linkId 暂存的 c/b 包上限。 */
 const PENDING_PACKETS_MAX = 32
 /** Nostr 链握手超时（relay RTT 更慢）。 */
@@ -25,14 +109,6 @@ const NOSTR_HEARTBEAT_MS = ms('60s')
 /** Nostr 链空闲超时。 */
 const NOSTR_IDLE_TIMEOUT_MS = ms('3m')
 
-/**
- * @returns {string[]} 当前可用中继 URL
- */
-function resolveDefaultRelayUrls() {
-	return getSignalingRuntimeConfig().relayOverride
-		?? mergeSignalingRelayUrls(getNodeTransportSettings().relayUrls)
-}
-
 /**
  * @param {string} remoteNodeHash 对端
  * @param {object} packet link 包
@@ -45,10 +121,48 @@ async function publishLinkPacket(remoteNodeHash, packet) {
 /**
  * 创建 Nostr 末位数据链路 provider（level = -∞）。
  * @param {{ getRelayUrls?: () => string[] }} [options] 中继解析（测试可注入）
- * @returns {import('./index.mjs').LinkProvider & { deliverPacket: (packet: object) => void }} provider
+	 * @returns {import('./index.mjs').LinkProvider & { deliverPacket: (packet: object) => void | Promise<void> }} provider
  */
 export function createNostrLinkProvider(options = {}) {
-	const resolveRelayUrls = options.getRelayUrls || resolveDefaultRelayUrls
+	const resolveRelayUrls = options.getRelayUrls || resolveNostrRelayUrls
+
+	/** @type {number | null} 本实例实测非零最小 payload 上限（NIP-11 max_message_length） */
+	let queriedPayloadCap = null
+	/** @type {number} 本实例最近一次实测时间戳 */
+	let payloadCapQueriedAt = 0
+	/** @type {Promise<void> | null} 本实例进行中的探测（去重并发） */
+	let payloadCapRefreshPromise = null
+
+	/**
+	 * 探测各 relay 的 payload 上限，缓存「可用 relay」的最小值（TTL 内不重复探测）。
+	 * 仅在实际 wss/ws/https/http 中继上探测；失败或未声明的 relay 忽略。
+	 * @param {string[]} relayUrls 中继 URL 列表
+	 * @returns {Promise<void>}
+	 */
+	async function refreshPayloadCap(relayUrls) {
+		if (payloadCapRefreshPromise) return payloadCapRefreshPromise
+		if (queriedPayloadCap != null && Date.now() - payloadCapQueriedAt < PAYLOAD_CAP_CACHE_TTL_MS) return
+		const urls = [...new Set(relayUrls.filter(url => /^(wss?|https?):\/\//i.test(url)))]
+		if (!urls.length) return
+		payloadCapRefreshPromise = Promise.allSettled(urls.map(queryRelayMaxMessageLength))
+			.then(results => {
+				const value = minUsablePayloadCap(results.map(result => result.status === 'fulfilled' ? result.value : null))
+				if (value != null) {
+					queriedPayloadCap = value
+					payloadCapQueriedAt = Date.now()
+				}
+			})
+			.finally(() => { payloadCapRefreshPromise = null })
+		return payloadCapRefreshPromise
+	}
+
+	/**
+	 * 当前生效的单包上限：有 relay 实测非零最小值则用它（最大化载荷利用率），否则用默认兜底。
+	 * @returns {number} 上限（针对完整 Nostr EVENT 消息的字节数）
+	 */
+	function currentMaxPayloadChars() {
+		return queriedPayloadCap ?? MAX_LINK_PAYLOAD_CHARS
+	}
 
 	/** @type {((link: import('./index.mjs').LinkHandle) => void) | null} */
 	let onInbound = null
@@ -119,11 +233,10 @@ export function createNostrLinkProvider(options = {}) {
 	 * @param {string} linkId 链路 id
 	 * @param {string} op open|c|b|close
 	 * @param {string} [payload] 可选载荷
+	 * @param {number} [maxChars=MAX_LINK_PAYLOAD_CHARS] 该 pipe 冻结的字符上限
 	 * @returns {Promise<void>}
 	 */
-	async function sendOp(remoteNodeHash, linkId, op, payload) {
-		if (payload != null && payload.length > MAX_LINK_PAYLOAD_CHARS)
-			throw new Error('p2p: nostr link payload too large')
+	async function sendOp(remoteNodeHash, linkId, op, payload, maxChars = MAX_LINK_PAYLOAD_CHARS) {
 		const packet = {
 			type: 'link',
 			op,
@@ -131,6 +244,8 @@ export function createNostrLinkProvider(options = {}) {
 			linkId,
 		}
 		if (payload != null) packet.payload = payload
+		if (estimateEventMessageBytes(packet) > maxChars)
+			throw new Error('p2p: nostr link payload too large')
 		await publishLinkPacket(remoteNodeHash, packet)
 	}
 
@@ -140,6 +255,19 @@ export function createNostrLinkProvider(options = {}) {
 	 */
 	function openPipe(opts) {
 		const { linkId, remoteNodeHash, initiator } = opts
+		// 冻结该 pipe 的字符上限：按完整 Nostr EVENT 消息字节数切帧，与发送校验共用同一上限，保持自洽。
+		const payloadChars = currentMaxPayloadChars()
+		const maxFrameBytes = maxFrameChunkBytesForPayload(
+			payloadChars,
+			// maxFrameChunkBytesForPayload 用 encode(...).length 度量载荷，故返回等长字符串。
+			frameBytes => 'x'.repeat(estimateEventMessageBytes({
+				type: 'link',
+				op: 'b',
+				from: (opts.localIdentity || localIdentity)?.nodeHash || '',
+				linkId,
+				payload: bytesToBase64(frameBytes),
+			})),
+		)
 		const pipe = createLinkIdBoundPipe({
 			providerId: 'nostr',
 			level: LINK_LEVEL_NOSTR,
@@ -147,6 +275,7 @@ export function createNostrLinkProvider(options = {}) {
 			linkId,
 			nodeHash: remoteNodeHash,
 			localIdentity: opts.localIdentity || localIdentity,
+			maxFrameBytes,
 			handshakeTimeoutMs: NOSTR_HANDSHAKE_TIMEOUT_MS,
 			heartbeatMs: NOSTR_HEARTBEAT_MS,
 			idleTimeoutMs: NOSTR_IDLE_TIMEOUT_MS,
@@ -155,7 +284,7 @@ export function createNostrLinkProvider(options = {}) {
 			 * @returns {Promise<void>}
 			 */
 			async sendControlText(text) {
-				await sendOp(remoteNodeHash, linkId, 'c', text)
+				await sendOp(remoteNodeHash, linkId, 'c', text, payloadChars)
 			},
 			/**
 			 * @param {string} _action action
@@ -163,7 +292,7 @@ export function createNostrLinkProvider(options = {}) {
 			 * @returns {Promise<void>}
 			 */
 			async sendFrame(_action, frame) {
-				await sendOp(remoteNodeHash, linkId, 'b', bytesToBase64(frame))
+				await sendOp(remoteNodeHash, linkId, 'b', bytesToBase64(frame), payloadChars)
 			},
 			/**
 			 * @returns {Promise<void>}
@@ -184,9 +313,9 @@ export function createNostrLinkProvider(options = {}) {
 	/**
 	 * 入站已解密的 link 包（由信令 demux 调用）。
 	 * @param {object} packet link 包
-	 * @returns {void}
+	 * @returns {Promise<void>}
 	 */
-	function deliverPacket(packet) {
+	async function deliverPacket(packet) {
 		if (packet?.type !== 'link') return
 		const linkId = normalizeHex64(packet.linkId)
 		const from = normalizeHex64(packet.from)
@@ -197,6 +326,8 @@ export function createNostrLinkProvider(options = {}) {
 		if (op === 'open') {
 			if (sessions.has(linkId)) return
 			if (!onInbound || !localIdentity) return
+			await refreshPayloadCap(resolveRelayUrls())
+			if (sessions.has(linkId)) return
 			const pipe = openPipe({
 				linkId,
 				remoteNodeHash: from,
@@ -248,6 +379,7 @@ export function createNostrLinkProvider(options = {}) {
 			if (!remoteNodeHash) return null
 			localIdentity = dialOptions.localIdentity || localIdentity
 			if (!localIdentity?.nodeHash) throw new Error('p2p: nostr dial requires localIdentity')
+			await refreshPayloadCap(resolveRelayUrls())
 			const linkId = randomBytes(32).toString('hex')
 			const pipe = openPipe({
 				linkId,
@@ -266,6 +398,7 @@ export function createNostrLinkProvider(options = {}) {
 		ensureListening(handlers) {
 			onInbound = handlers.onInbound
 			localIdentity = handlers.localIdentity
+			void refreshPayloadCap(resolveRelayUrls())
 			return () => {
 				onInbound = null
 				for (const session of sessions.values())

package/link/providers/webrtc.mjs

@@ -68,7 +68,7 @@ export async function createWebRtcLink(options) {
 	const handshakeTimeoutMs = Number(options.handshakeTimeoutMs) || ms('10s')
 	const channelOpenTimeoutMs = Math.max(handshakeTimeoutMs, ms('30s'))
 	const rtc = options.rtc ?? await loadNodeRtcPolyfill()
-	const trickleIceOff = getSignalingRuntimeConfig().trickleIceOff === true
+	const trickleIceOff = getSignalingRuntimeConfig().channels.webrtc?.trickleIceOff === true
 	const peerConnection = new rtc.RTCPeerConnection(options.iceServers?.length ? { iceServers: options.iceServers } : undefined)
 	const remoteSignalQueue = []
 	const seenRemoteSignals = createLruMap(1024)

package/link/rtc/polyfill.mjs

@@ -99,7 +99,7 @@ async function loadNodeRtcPolyfillUncached(options) {
 	for (const backend of backends)
 		try {
 			const mod = await backend.load()
-			const { iceLocalHostnamePolicy } = getSignalingRuntimeConfig()
+			const iceLocalHostnamePolicy = getSignalingRuntimeConfig().channels.webrtc?.iceLocalHostnamePolicy
 			return {
 				RTCPeerConnection: wrapRtcPeerConnectionForIceLocalHostname(
 					mod.RTCPeerConnection,

package/node/instance.mjs

@@ -83,9 +83,13 @@ export function setNodeLogger(logger) {
  */
 export function setSignalingRuntimeConfig(config) {
 	if (!runtime) throw new Error('p2p: setSignalingRuntimeConfig requires initNode')
-	const previousPolicy = runtime.signaling.iceLocalHostnamePolicy
-	runtime.signaling = resolveSignalingRuntimeConfig({ ...runtime.signaling, ...config })
-	if (runtime.signaling.iceLocalHostnamePolicy !== previousPolicy)
+	const previousPolicy = runtime.signaling.channels.webrtc?.iceLocalHostnamePolicy
+	runtime.signaling = resolveSignalingRuntimeConfig({
+		...runtime.signaling,
+		...config,
+		channels: { ...runtime.signaling.channels, ...config?.channels },
+	})
+	if (runtime.signaling.channels.webrtc?.iceLocalHostnamePolicy !== previousPolicy)
 		rtcPolyfillCacheEpoch++
 	emitNodeChange('signaling-changed', runtime.signaling)
 }

package/node/signaling_config.mjs

@@ -4,25 +4,64 @@ import process from 'node:process'
 
 /**
  * @typedef {{
- *   relayOverride: string[] | null
- *   iceLocalHostnamePolicy: IceLocalHostnamePolicy
- *   trickleIceOff: boolean
+ *   channels: ChannelsConfig
  * }} SignalingRuntimeConfig
  */
 
-const ICE_LOCAL_HOSTNAME_POLICIES = new Set(['none', 'rewrite-loopback', 'drop'])
+/**
+ * @typedef {Record<string, object | boolean>} ChannelsConfig
+ */
 
 /**
- * 生产默认：win32 丢弃 `.local` host candidate；其它平台不过滤。
- * @returns {SignalingRuntimeConfig} 默认信令运行时配置
+ * webrtc 通道默认配置。
+ * @returns {{ iceLocalHostnamePolicy: IceLocalHostnamePolicy, trickleIceOff: boolean }} webrtc 通道默认配置
  */
-export function defaultSignalingRuntimeConfig() {
+function defaultWebRtcConfig() {
 	const iceLocalHostnamePolicy = process.platform === 'win32' ? 'drop' : 'none'
-	return {
-		relayOverride: null,
-		iceLocalHostnamePolicy,
-		trickleIceOff: iceLocalHostnamePolicy !== 'none',
+	return { iceLocalHostnamePolicy, trickleIceOff: iceLocalHostnamePolicy !== 'none' }
+}
+
+/** 各介质的默认 channel 配置；对象值是启用并覆盖默认。 */
+const DEFAULT_CHANNEL_CONFIG = {
+	nostr: true,
+	lan: true,
+	bt: true,
+	webrtc: defaultWebRtcConfig(),
+}
+
+/**
+ * 归一到完整 channels 记录：false 禁用，其余（undefined / true / object）启用并合并默认配置。
+ * 未提及的通道保持默认启用。
+ * @param {object | undefined} [raw] 原始 channels 配置
+ * @returns {ChannelsConfig} 每个已知通道都有明确值（object | false）的完整记录
+ */
+function resolveChannels(raw = {}) {
+	/** @type {ChannelsConfig} */
+	const out = {}
+	for (const name of Object.keys(DEFAULT_CHANNEL_CONFIG)) {
+		const value = raw[name]
+		out[name] = value !== false && { ...Object(DEFAULT_CHANNEL_CONFIG[name]), ...Object(value) }
 	}
+	return out
+}
+
+/**
+ * 生成禁用全部通道的 channels 配置；`overrides` 可重新启用/覆盖指定通道。
+ * @param {Record<string, object | boolean>} [overrides] 需覆盖的通道配置
+ * @returns {ChannelsConfig} 除覆盖外全部 false 的 channels 配置
+ */
+export function disableAllChannels(overrides = {}) {
+	/** @type {ChannelsConfig} */
+	const disabledChannels = {}
+	for (const name of Object.keys(DEFAULT_CHANNEL_CONFIG)) disabledChannels[name] = false
+	return { ...disabledChannels, ...overrides }
+}
+
+/**
+ * @returns {SignalingRuntimeConfig} 默认信令运行时配置
+ */
+export function defaultSignalingRuntimeConfig() {
+	return { channels: resolveChannels() }
 }
 
 /**
@@ -30,22 +69,6 @@ export function defaultSignalingRuntimeConfig() {
  * @returns {SignalingRuntimeConfig} 合并后的信令运行时配置
  */
 export function resolveSignalingRuntimeConfig(patch = {}) {
-	const base = defaultSignalingRuntimeConfig()
-	if (!patch || typeof patch !== 'object') return base
-	const policyRaw = patch.iceLocalHostnamePolicy
-	const iceLocalHostnamePolicy = ICE_LOCAL_HOSTNAME_POLICIES.has(/** @type {string} */ policyRaw)
-		? /** @type {IceLocalHostnamePolicy} */ policyRaw
-		: base.iceLocalHostnamePolicy
-	let { relayOverride } = base
-	if (Object.prototype.hasOwnProperty.call(patch, 'relayOverride'))
-		relayOverride = patch.relayOverride == null
-			? null
-			: [...new Set((Array.isArray(patch.relayOverride) ? patch.relayOverride : [])
-				.map(url => String(url || ''))
-				.filter(url => url.startsWith('wss://')))]
-	return {
-		relayOverride,
-		iceLocalHostnamePolicy,
-		trickleIceOff: patch.trickleIceOff !== undefined ? !!patch.trickleIceOff : iceLocalHostnamePolicy !== 'none',
-	}
+	if (!patch || typeof patch !== 'object') return defaultSignalingRuntimeConfig()
+	return { channels: resolveChannels(patch.channels) }
 }

package/package.json

@@ -1,12 +1,15 @@
 {
 	"name": "@steve02081504/fount-p2p",
-	"version": "0.0.32",
+	"version": "0.0.34",
 	"description": "fount federation P2P layer — link, trust graph, mailbox, DAG, EVFS.",
 	"keywords": [
 		"network",
 		"p2p",
 		"fount",
-		"AI"
+		"AI",
+		"nostr",
+		"LAN",
+		"bluetooth"
 	],
 	"type": "module",
 	"repository": {

package/transport/link_registry.mjs

@@ -536,6 +536,7 @@ export function createLinkRegistry(options = {}) {
 		lanTcpPort: bootstrap.lanTcpPort,
 		whenListening: bootstrap.whenListening,
 		ensureRuntime: ensureRuntimeWithMesh,
+		ensureChannelAvailable: bootstrap.ensureChannelAvailable,
 		reloadDiscoveryRelays: bootstrap.reloadDiscoveryRelays,
 		ensureOverlayRouter,
 		getOverlayRouter,
@@ -759,6 +760,12 @@ export const ensureOverlayRouter = bindRegistryMethod('ensureOverlayRouter')
 export const reloadDiscoveryRelays = bindRegistryMethod('reloadDiscoveryRelays')
 /** 确保到 nodeHash 的活跃链路。 @type {(...methodArguments: unknown[]) => unknown} */
 export const ensureLinkToNode = bindRegistryMethod('ensureLinkToNode')
+/**
+ * 确保指定 channel 可用。
+ * @param {string} channel 通道名
+ * @returns {Promise<boolean>} 该 channel 可用为 true
+ */
+export const ensureChannelAvailable = bindRegistryMethod('ensureChannelAvailable')
 /** @type {(...methodArguments: unknown[]) => unknown} */
 export const getLink = bindRegistryMethod('getLink')
 /** @type {(...methodArguments: unknown[]) => unknown} */

package/transport/runtime_bootstrap.mjs

@@ -10,7 +10,7 @@ import {
 	unregisterDiscoveryProvider,
 } from '../discovery/index.mjs'
 import { createLanDiscoveryProvider } from '../discovery/lan.mjs'
-import { mergeSignalingRelayUrls, createNostrDiscoveryProvider } from '../discovery/nostr.mjs'
+import { createNostrDiscoveryProvider, resolveNostrRelayUrls } from '../discovery/nostr.mjs'
 import { createBleGattLinkProvider } from '../link/providers/ble_gatt.mjs'
 import {
 	listLinkProviders,
@@ -20,7 +20,6 @@ import {
 import { createLanTcpLinkProvider } from '../link/providers/lan_tcp.mjs'
 import { createNostrLinkProvider } from '../link/providers/nostr.mjs'
 import { createWebRtcLinkProvider } from '../link/providers/webrtc.mjs'
-import { getNodeTransportSettings } from '../node/identity.mjs'
 import { getSignalingRuntimeConfig, onNodeChange } from '../node/instance.mjs'
 import { isConnectivityDebug, nodeDebug, shortHash } from '../node/log.mjs'
 
@@ -85,14 +84,12 @@ export function createRuntimeBootstrap(deps) {
 	let signalListenReady = null
 	/** @type {Promise<void> | null} */
 	let runtimeWarm = null
-	/** @type {Promise<void> | null} */
-	let bluetoothWarm = null
 	/** @type {(() => void) | null} */
 	let stopPresence = null
 	/** @type {(() => void) | null} */
 	let stopSignalListener = null
-	/** @type {Array<() => void>} */
-	const stopLinkListeners = []
+	/** @type {Map<string, () => void>} */
+	const stopLinkListeners = new Map()
 	/** @type {ReturnType<typeof createLanTcpLinkProvider> | null} */
 	let ownedLanTcp = null
 	/** @type {ReturnType<typeof createBleGattLinkProvider> | null} */
@@ -104,22 +101,11 @@ export function createRuntimeBootstrap(deps) {
 	let stopSignalingWatch = null
 
 	/**
-	 * @returns {string[]} 当前 Nostr relay URL 列表
+	 * @param {string} name 通道名
+	 * @returns {boolean} 该通道是否启用（默认启用，false 禁用）
 	 */
-	function resolveNostrRelayUrls() {
-		return getSignalingRuntimeConfig().relayOverride
-			?? mergeSignalingRelayUrls(getNodeTransportSettings().relayUrls)
-	}
-
-	/** 注册默认 discovery provider（lan/nostr） */
-	function registerDiscoveryDefaults() {
-		const providerIds = new Set(listDiscoveryProviders().map(provider => provider.id))
-		if (!providerIds.has('lan'))
-			registerDiscoveryProvider(createLanDiscoveryProvider({
-				localNodeHash: localIdentity.nodeHash,
-			}))
-		if (!providerIds.has('nostr'))
-			registerNostrProvider()
+	function isChannelEnabled(name) {
+		return getSignalingRuntimeConfig().channels[name] !== false
 	}
 
 	/** 注册/替换 nostr discovery provider */
@@ -138,26 +124,6 @@ export function createRuntimeBootstrap(deps) {
 		return runtimeStarted
 	}
 
-	/**
-	 * @returns {Promise<void>}
-	 */
-	async function ensureLinkProviders() {
-		if (!autoRegisterLinkProviders) return
-		if (!ownedLanTcp) {
-			ownedLanTcp = createLanTcpLinkProvider()
-			registerLinkProvider(ownedLanTcp)
-		}
-		if (!ownedBleGatt) {
-			ownedBleGatt = createBleGattLinkProvider()
-			registerLinkProvider(ownedBleGatt)
-		}
-		const ids = new Set(listLinkProviders().map(provider => provider.id))
-		if (!ids.has('webrtc'))
-			registerLinkProvider(createWebRtcLinkProvider())
-		if (!ids.has('nostr'))
-			registerLinkProvider(createNostrLinkProvider({ getRelayUrls: resolveNostrRelayUrls }))
-	}
-
 	/**
 	 * @returns {number | null} 本机 lan_tcp 监听端口，未就绪为 null
 	 */
@@ -196,12 +162,13 @@ export function createRuntimeBootstrap(deps) {
 	 */
 	async function startProviderListening(provider) {
 		if (!provider.ensureListening) return
+		stopLinkListeners.get(provider.id)?.()
 		try {
 			const stop = await provider.ensureListening({
 				localIdentity,
 				onInbound: onInboundLink,
 			})
-			if (stop) stopLinkListeners.push(stop)
+			if (stop) stopLinkListeners.set(provider.id, stop)
 		}
 		catch { /* provider listen unavailable */ }
 	}
@@ -214,60 +181,6 @@ export function createRuntimeBootstrap(deps) {
 		return encryptAdvertForScope('network', localIdentity, body)
 	}
 
-	/**
-	 * @param {number} gen 启动世代
-	 * @returns {Promise<void>}
-	 */
-	async function warmBluetoothTask(gen) {
-		if (autoRegisterDiscoveryProviders) {
-			const providerIds = new Set(listDiscoveryProviders().map(provider => provider.id))
-			if (!providerIds.has('bt')) {
-				const bt = await import('../discovery/bt/index.mjs').catch(() => null)
-				if (generation !== gen || !isLive()) return
-				if (await bt?.canUseBluetoothRuntime?.()) {
-					if (generation !== gen || !isLive()) return
-					const provider = bt.createBluetoothDiscoveryProvider()
-					registerDiscoveryProvider(provider)
-					if (generation !== gen || !isLive()) return
-					if (provider.startPresence)
-						try {
-							const stop = await provider.startPresence(async () => ({
-								nodeHash: localIdentity.nodeHash,
-								advertBytes: await buildNetworkAdvertBytes(),
-							}))
-							if (stop && generation === gen && isLive()) {
-								const prev = stopPresence
-								/**
-								 * 停止 presence 广播并链式调用上一轮清理。
-								 */
-								stopPresence = () => { try { stop() } catch { /* ignore */ }; prev?.() }
-							}
-						}
-						catch { /* ignore */ }
-					if (provider.caps?.canSignal && provider.listenNodeSignals)
-						try {
-							const stop = await provider.listenNodeSignals(localIdentity.nodeHash, bytes => {
-								void handleIncomingSignal(bytes).catch(() => { })
-							})
-							if (stop && generation === gen && isLive()) {
-								const prev = stopSignalListener
-								/**
-								 * 停止信令监听并链式调用上一轮清理。
-								 */
-								stopSignalListener = () => { try { stop() } catch { /* ignore */ }; prev?.() }
-							}
-						}
-						catch { /* ignore */ }
-				}
-			}
-		}
-		if (generation !== gen || !isLive()) return
-		if (ownedBleGatt && await Promise.resolve(ownedBleGatt.isAvailable())) {
-			if (generation !== gen || !isLive()) return
-			await startProviderListening(ownedBleGatt)
-		}
-	}
-
 	/**
 	 * @param {number} gen 启动世代
 	 * @returns {Promise<void>}
@@ -306,20 +219,91 @@ export function createRuntimeBootstrap(deps) {
 		})()
 	}
 
+	/**
+	 * 释放指定 id 的 link provider 监听与注册
+	 * @param {id: string} id link provider id
+	 */
+	function releaseLinkProvider(id) {
+		const stop = stopLinkListeners.get(id)
+		stopLinkListeners.delete(id)
+		try { stop?.() } catch { /* ignore */ }
+		unregisterLinkProvider(id)
+	}
+
+	/** 按 channels 配置同步 link provider（启用注册 / 禁用注销） */
+	function reconcileLinkProviders() {
+		if (!autoRegisterLinkProviders) return
+		const present = new Set(listLinkProviders().map(provider => provider.id.split(':')[0]))
+		if (isChannelEnabled('nostr')) {
+			if (!present.has('nostr'))
+				registerLinkProvider(createNostrLinkProvider({ getRelayUrls: resolveNostrRelayUrls }))
+		}
+		else releaseLinkProvider('nostr')
+
+		if (isChannelEnabled('lan')) {
+			if (!ownedLanTcp) {
+				ownedLanTcp = createLanTcpLinkProvider()
+				registerLinkProvider(ownedLanTcp)
+			}
+		}
+		else if (ownedLanTcp) {
+			releaseLinkProvider(ownedLanTcp.id)
+			ownedLanTcp = null
+		}
+		if (isChannelEnabled('bt')) {
+			if (!ownedBleGatt) {
+				ownedBleGatt = createBleGattLinkProvider()
+				registerLinkProvider(ownedBleGatt)
+			}
+		}
+		else if (ownedBleGatt) {
+			releaseLinkProvider(ownedBleGatt.id)
+			ownedBleGatt = null
+		}
+		if (isChannelEnabled('webrtc')) {
+			if (!listLinkProviders().some(provider => provider.id.split(':')[0] === 'webrtc'))
+				registerLinkProvider(createWebRtcLinkProvider())
+		}
+		else releaseLinkProvider('webrtc')
+	}
+
+	/** 按 channels 配置同步 discovery provider（启用注册 / 禁用注销；BT discovery 由 ensureChannelAvailable 显式注册） */
+	function reconcileDiscoveryProviders() {
+		if (!autoRegisterDiscoveryProviders) return
+		const present = new Set(listDiscoveryProviders().map(provider => provider.id))
+		if (isChannelEnabled('lan')) {
+			if (!present.has('lan'))
+				registerDiscoveryProvider(createLanDiscoveryProvider({ localNodeHash: localIdentity.nodeHash }))
+		}
+		else unregisterDiscoveryProvider('lan')
+
+		if (isChannelEnabled('nostr')) registerNostrProvider()
+		else unregisterDiscoveryProvider('nostr')
+		if (!isChannelEnabled('bt')) unregisterDiscoveryProvider('bt')
+	}
+
 	/**
 	 * @returns {Promise<void>}
 	 */
 	async function reloadDiscoveryRelays() {
-		if (!runtimeStarted || !autoRegisterDiscoveryProviders) return
 		if (reloadInflight) return await reloadInflight
 		reloadInflight = (async () => {
+			if (runtimeStart) await runtimeStart
+			await runtimeWarm?.catch(() => { })
 			const gen = generation
+			if (!isLive()) return
 			stopPresence?.()
 			stopSignalListener?.()
 			stopPresence = null
 			stopSignalListener = null
-			registerNostrProvider()
+			reconcileLinkProviders()
+			reconcileDiscoveryProviders()
 			if (generation !== gen || !isLive()) return
+			if (ownedLanTcp && !stopLinkListeners.has(ownedLanTcp.id))
+				await startProviderListening(ownedLanTcp)
+			if (ownedBleGatt && !stopLinkListeners.has(ownedBleGatt.id)
+				&& await Promise.resolve(ownedBleGatt.isAvailable()))
+				await startProviderListening(ownedBleGatt)
 			signalListenReady = (async () => {
 				if (generation !== gen || !isLive()) return
 				if (!listDiscoveryProviders().length) return
@@ -353,9 +337,9 @@ export function createRuntimeBootstrap(deps) {
 		runtimeStart = (async () => {
 			runtimeStarted = true
 			const gen = generation
-			await ensureLinkProviders()
+			reconcileLinkProviders()
 			if (autoRegisterDiscoveryProviders)
-				registerDiscoveryDefaults()
+				reconcileDiscoveryProviders()
 			if (isConnectivityDebug())
 				nodeDebug('p2p:runtime ensure', {
 					self: shortHash(localIdentity.nodeHash),
@@ -367,7 +351,6 @@ export function createRuntimeBootstrap(deps) {
 					if (event === 'signaling-changed')
 						void reloadDiscoveryRelays().catch(() => { })
 				})
-			bluetoothWarm = warmBluetoothTask(gen).catch(() => { })
 			runtimeWarm = warmListenAndDiscovery(gen)
 			void runtimeWarm.catch(() => { })
 		})()
@@ -379,6 +362,39 @@ export function createRuntimeBootstrap(deps) {
 		}
 	}
 
+	/**
+	 * 确保指定 channel 可用：重 channel（bt）做探测并注册 discovery；其余 await 其渐进式就绪。
+	 * @param {string} channel 通道名
+	 * @returns {Promise<boolean>} 该 channel 可用为 true
+	 */
+	async function ensureChannelAvailable(channel) {
+		if (!autoRegisterDiscoveryProviders) return false
+		if (runtimeStart) await runtimeStart
+		if (!isLive()) return false
+		switch (channel) {
+			case 'lan':
+				await whenListening()
+				return isChannelEnabled('lan')
+			case 'nostr':
+			case 'webrtc':
+				await whenSignalListening()
+				return isChannelEnabled(channel)
+			case 'bt': {
+				if (!isChannelEnabled('bt')) return false
+				if (listDiscoveryProviders().some(provider => provider.id === 'bt')) return true
+				const bt = await import('../discovery/bt/index.mjs')
+				if (!isLive()) return false
+				if (await bt.canUseBluetoothRuntime()) {
+					registerDiscoveryProvider(bt.createBluetoothDiscoveryProvider())
+					await reloadDiscoveryRelays()
+				}
+				return listDiscoveryProviders().some(provider => provider.id === 'bt')
+			}
+			default:
+				throw new Error(`p2p: unknown channel ${channel}`)
+		}
+	}
+
 	/**
 	 * @returns {Promise<void>}
 	 */
@@ -395,8 +411,9 @@ export function createRuntimeBootstrap(deps) {
 			runtimeWarm?.catch(() => { }) ?? Promise.resolve(),
 			new Promise(resolve => setTimeout(resolve, 500)),
 		])
-		for (const stop of stopLinkListeners.splice(0))
+		for (const stop of stopLinkListeners.values())
 			try { stop() } catch { /* ignore */ }
+		stopLinkListeners.clear()
 		clearDiscoveryProviders()
 		if (ownedLanTcp) {
 			unregisterLinkProvider(ownedLanTcp.id)
@@ -409,12 +426,12 @@ export function createRuntimeBootstrap(deps) {
 		lanListenReady = null
 		signalListenReady = null
 		runtimeWarm = null
-		bluetoothWarm = null
 		reloadInflight = null
 	}
 
 	return {
 		ensureRuntime,
+		ensureChannelAvailable,
 		whenListening,
 		whenSignalListening,
 		buildLocalAdvert,