@steve02081504/fount-p2p 0.0.35 → 0.0.37

package/node/reputation_store.mjs

@@ -1,4 +1,4 @@
-import { assertHex64, isHex64, normalizeHex64 } from '../core/hexIds.mjs'
+import { assertHex64, isHex64 } from '../core/hexIds.mjs'
 import { recordWantIdsBackoff, wantIdsPeerKey } from '../federation/want_ids.mjs'
 import {
 	applyDecayCollusionAfterSlashPure,
@@ -120,7 +120,7 @@ export function recordGossipAllUnknownWant(groupId, peerNodeHash) {
  * @returns {Promise<void>}
  */
 export function recordMessageRateViolation(peerNodeHash, excessRatio = 1) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return Promise.resolve()
 	return mutateReputation(data => {
 		recordMessageRateViolationPure(data, id, undefined, excessRatio)
@@ -134,7 +134,7 @@ export function recordMessageRateViolation(peerNodeHash, excessRatio = 1) {
  * @returns {Promise<boolean>} 是否触发异常隔离
  */
 export async function observePeerBehavior(peerNodeHash, sample) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return false
 	let anomaly = false
 	await mutateReputation(data => {
@@ -149,7 +149,7 @@ export async function observePeerBehavior(peerNodeHash, sample) {
  * @returns {void}
  */
 export function bumpChunkStorageReputation(storagePeerKey) {
-	const id = normalizeHex64(storagePeerKey)
+	const id = storagePeerKey
 	if (!id) return
 	void mutateReputation(data => {
 		bumpChunkStorageReputationPure(data, id)
@@ -161,7 +161,7 @@ export function bumpChunkStorageReputation(storagePeerKey) {
  * @returns {void}
  */
 export function penalizeChunkStorageFailure(blamePeerKey) {
-	const id = normalizeHex64(blamePeerKey)
+	const id = blamePeerKey
 	if (!id) return
 	void mutateReputation(data => {
 		penalizeChunkStorageFailurePure(data, id)
@@ -173,7 +173,7 @@ export function penalizeChunkStorageFailure(blamePeerKey) {
  * @returns {void}
  */
 export function penalizeArchiveServeMismatch(peerNodeHash) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return
 	void mutateReputation(data => {
 		penalizeArchiveServeMismatchPure(data, id)
@@ -187,9 +187,9 @@ export function penalizeArchiveServeMismatch(peerNodeHash) {
 export async function applyVolatileSlashAlert(alert) {
 	const expiresAt = Number(alert?.expiresAt)
 	if (Number.isFinite(expiresAt) && Date.now() > expiresAt) return false
-	const target = normalizeHex64(alert?.targetPubKeyHash)
-	const sender = normalizeHex64(alert?.sender)
-	if (!isHex64(target) || !isHex64(sender)) return false
+	const target = isHex64(alert?.targetPubKeyHash)
+	const sender = isHex64(alert?.sender)
+	if (!target || !sender) return false
 	const claim = Number.isFinite(Number(alert?.claim)) ? Number(alert.claim) : reputationTunables.slashDefaultClaim
 	await mutateReputation(data => {
 		applySubjectiveSlashPure(data, target, sender, claim, false)
@@ -227,13 +227,12 @@ export function buildUnverifiedSlashAlert(senderPubKeyHash, content, groupSettin
 export async function applySubjectiveSlashFromEvent(username, groupId, event, readEvents) {
 	if (event.type !== 'reputation_slash') return
 	const { content } = event
-	const target = normalizeHex64(content.targetPubKeyHash)
-	const sender = normalizeHex64(event.sender)
+	const target = content.targetPubKeyHash
 
 	await mutateReputation(async data => {
 		const verified = content.verified && await verifySlashProof(username, groupId, content, readEvents)
 		const claim = Number(content.claim ?? (verified ? reputationTunables.slashVerifiedDefaultClaim : reputationTunables.slashUnverifiedDefaultClaim))
-		applySubjectiveSlashPure(data, target, sender, claim, verified)
+		applySubjectiveSlashPure(data, target, event.sender, claim, verified)
 	})
 }
 
@@ -245,7 +244,7 @@ export async function applySubjectiveSlashFromEvent(username, groupId, event, re
  * @returns {Promise<boolean>} 是否找到 proof 对应事件
  */
 async function verifySlashProof(username, groupId, content, readEvents) {
-	const eventId = normalizeHex64(content?.proof?.eventId)
+	const eventId = content?.proof?.eventId
 	if (!eventId) return false
 	const events = await readEvents(username, groupId)
 	return events.some(event => event.id === eventId)
@@ -261,7 +260,7 @@ export function applyDecayCollusionAfterSlash(targetPubKeyHash, inviteEdges) {
 		const applied = applyDecayCollusionAfterSlashPure(data, targetPubKeyHash, inviteEdges)
 		if (applied.length)
 			getNodeLogger()?.warn?.('reputation: collusion decay after slash', {
-				target: normalizeHex64(targetPubKeyHash),
+				target: targetPubKeyHash,
 				upstreamCount: applied.length,
 				hops: applied.map(row => row.hop),
 			})

package/node/reputation_sync.mjs

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto'
 
-import { isHex64, normalizeHex64 } from '../core/hexIds.mjs'
+import { isHex64 } from '../core/hexIds.mjs'
 import { sendToNodeLink } from '../transport/link_registry.mjs'
 import { attachNodeScopeFeature } from '../transport/node_scope/features.mjs'
 import { ensureNodeScope, getNodeScopeWire } from '../transport/node_scope/wire.mjs'
@@ -55,9 +55,8 @@ function loadSyncConfig() {
 		? raw.lockedMaxPrevByNodeHash
 		: {}
 	for (const [nodeHash, score] of Object.entries(prevRaw)) {
-		const id = normalizeHex64(nodeHash)
 		const n = Number(score)
-		if (id && isHex64(id) && Number.isFinite(n)) lockedMaxPrevByNodeHash[id] = n
+		if (isHex64(nodeHash) && Number.isFinite(n)) lockedMaxPrevByNodeHash[nodeHash] = n
 	}
 	syncConfig = {
 		trustSyncDonors: normalizeHashList(raw.trustSyncDonors),
@@ -73,7 +72,7 @@ function loadSyncConfig() {
  * @returns {string[]} 规范化去重后的 64-hex 列表
  */
 function normalizeHashList(list) {
-	return [...new Set((Array.isArray(list) ? list : []).map(isHex64).filter(Boolean))]
+	return [...new Set(list?.map?.(isHex64)?.filter?.(Boolean) || [])]
 }
 
 /** 将当前 sync 配置写盘 */
@@ -91,8 +90,8 @@ export async function setReputationTable(table) {
 	await mutateReputation(data => {
 		data.byNodeHash = data.byNodeHash || {}
 		for (const [nodeHash, row] of Object.entries(incoming)) {
-			const id = normalizeHex64(nodeHash)
-			if (!id || !isHex64(id)) continue
+			const id = isHex64(nodeHash)
+			if (!id) continue
 			const score = Number(row?.score ?? row)
 			if (!Number.isFinite(score)) continue
 			data.byNodeHash[id] = { ...data.byNodeHash[id] || {}, score }
@@ -223,7 +222,7 @@ export function attachReputationSyncWire() {
 		 * @param {string} peerId 对端 nodeHash
 		 */
 		rep_sync_req(payload, peerId) {
-			const requester = normalizeHex64(peerId)
+			const requester = peerId
 			if (!requester || !getReputationExportAllowlist().includes(requester)) return
 			try {
 				wire.send('rep_sync_res', {
@@ -241,7 +240,7 @@ export function attachReputationSyncWire() {
 			const requestId = String(payload?.requestId || '')
 			const pending = pendingPulls.get(requestId)
 			if (!pending) return
-			if (normalizeHex64(peerId) !== pending.donor) return
+			if (peerId !== pending.donor) return
 			clearTimeout(pending.timer)
 			pendingPulls.delete(requestId)
 			pending.resolve(payload)
@@ -271,8 +270,8 @@ export function detachReputationSyncWire() {
  * @returns {Promise<object>} donor 返回的信誉表
  */
 export async function pullReputationFromNode(nodeHash) {
-	const donor = normalizeHex64(nodeHash)
-	if (!donor || !isHex64(donor)) throw new Error('p2p: pullReputationFromNode requires valid nodeHash')
+	const donor = isHex64(nodeHash)
+	if (!donor) throw new Error('p2p: pullReputationFromNode requires valid nodeHash')
 	if (!getTrustSyncDonors().includes(donor))
 		throw new Error('p2p: node not in trustSyncDonors')
 	attachReputationSyncWire()

package/node/storage.mjs

@@ -28,3 +28,26 @@ export function readNodeJsonSync(name) {
 export function writeNodeJsonSync(name, data) {
 	writeJsonFileSync(nodeJsonPath(name), data)
 }
+
+/**
+ * Nostr relay 池 / peer 路由持久化文件路径（`nodeDir/nostr/relays.json`）。
+ * @returns {string} 绝对路径
+ */
+export function nostrRelayJsonPath() {
+	return path.join(getNodeDir(), 'nostr', 'relays.json')
+}
+
+/**
+ * @returns {object | null} 解析后的 Nostr relay JSON 或 null
+ */
+export function readNostrRelaysJsonSync() {
+	return readJsonFileSync(nostrRelayJsonPath())
+}
+
+/**
+ * @param {unknown} data 数据
+ * @returns {void}
+ */
+export function writeNostrRelaysJsonSync(data) {
+	writeJsonFileSync(nostrRelayJsonPath(), data)
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@steve02081504/fount-p2p",
-	"version": "0.0.35",
+	"version": "0.0.37",
 	"description": "fount federation P2P layer — link, trust graph, mailbox, DAG, EVFS.",
 	"keywords": [
 		"network",
@@ -21,10 +21,11 @@
 		"node": ">=20"
 	},
 	"scripts": {
-		"test": "node --test --test-concurrency=1 --test-force-exit test/pure/*.test.mjs test/integration/*.test.mjs",
+		"test": "node --test --test-concurrency=1 --test-force-exit test/pure/*.test.mjs test/integration/*.test.mjs test/frontend/*.test.mjs",
 		"test:fount": "deno test -A --config deno.json test/fount/",
 		"test:live": "node --test --test-concurrency=1 --test-force-exit test/live/*.test.mjs",
-		"test:sim": "node --test --test-concurrency=1 --test-force-exit sim/test/*.test.mjs"
+		"test:sim": "node --test --test-concurrency=1 --test-force-exit sim/test/*.test.mjs",
+		"test:frontend": "node --test --test-concurrency=1 --test-force-exit test/frontend/*.test.mjs"
 	},
 	"bin": {
 		"fount-p2p": "infra/cli.mjs"
@@ -33,6 +34,8 @@
 		".": "./index.mjs",
 		"./infra": "./infra/service.mjs",
 		"./link": "./link/providers/index.mjs",
+		"./link/providers/nostr": "./link/providers/nostr/index.mjs",
+		"./link/providers/nostr/*": "./link/providers/nostr/*.mjs",
 		"./core/*": "./core/*.mjs",
 		"./crypto": "./crypto/crypto.mjs",
 		"./crypto/*": "./crypto/*.mjs",
@@ -43,6 +46,8 @@
 		"./discovery": "./discovery/index.mjs",
 		"./discovery/bt": "./discovery/bt/index.mjs",
 		"./discovery/bt/*": "./discovery/bt/*.mjs",
+		"./discovery/nostr": "./discovery/nostr/index.mjs",
+		"./discovery/nostr/*": "./discovery/nostr/*.mjs",
 		"./discovery/*": "./discovery/*.mjs",
 		"./transport/node_scope/*": "./transport/node_scope/*.mjs",
 		"./transport/*": "./transport/*.mjs",
@@ -73,7 +78,8 @@
 		"ws": "latest"
 	},
 	"devDependencies": {
-		"@steve02081504/exec": "latest"
+		"@steve02081504/exec": "latest",
+		"playwright-core": "latest"
 	},
 	"optionalDependencies": {
 		"@stoprocent/bleno": "latest",

package/pages/app.mjs

@@ -0,0 +1,172 @@
+/**
+ * fount 人口统计前端（独立实现，不依赖包内代码）。
+ * - 浏览器原生 WebSocket 订阅 Nostr 中继 kind=30789 / #t=fount / #x=census。
+ * - 本地用 @noble 验签（懒加载，仅 live 模式需要）。
+ * - 在线节点数估计 = Σ(1/p)（HT）。
+ * - `?demo=1`（或无 relay 参数）进入演示模式：喂入 20 条 p=0.1 的样本 → 估计 200。
+ */
+const CENSUS_KIND = 30789
+const CENSUS_TTL_MS = 10 * 60_000
+const CENSUS_SUB_ID = 'census'
+const CENSUS_MIN_P = 0.001
+/** relay 帧 content 最大长度（超出直接丢弃，避免先 Base64 解码再被拒）。 */
+const MAX_FRAME_BYTES = 16 * 1024
+/** 并发验签任务上限；达上限时多余帧直接丢弃。 */
+const MAX_INFLIGHT_VERIFICATIONS = 8
+
+const statusEl = document.querySelector('#status')
+const toggleEl = document.querySelector('#toggle')
+
+const params = new URLSearchParams(location.search)
+const relayUrl = params.get('relay')
+const demoMode = params.get('demo') === '1' || !relayUrl
+
+/** @type {Map<string, { p: number, at: number }>} */
+const events = new Map()
+let webSocket = null
+let enabled = true
+let inflightVerifications = 0
+
+/**
+ * HT 估计；遍历时逐出过期事件，避免窗口 Map 持续增长。
+ * @returns {{ estimate: number, sampleSize: number }} 估计与采样数
+ */
+function estimatePopulation() {
+	let total = 0
+	let sampleSize = 0
+	const now = Date.now()
+	for (const [hash, { p, at }] of events) {
+		if (!Number.isFinite(at) || now - at > CENSUS_TTL_MS) { events.delete(hash); continue }
+		total += 1 / p
+		sampleSize++
+	}
+	return { estimate: total, sampleSize }
+}
+
+let noblePromise = null
+/** @returns {Promise<[object, object]>} noble 模块 */
+function loadNoble() {
+	return noblePromise ||= Promise.all([
+		import('https://esm.sh/@noble/curves@1/ed25519.js'),
+		import('https://esm.sh/@noble/hashes@1/sha2.js'),
+	])
+}
+
+/**
+ * 校验 census 包：nodeHash=sha256(nodePubKey) 且 Ed25519 签名匹配 `fount-census\0ts\0nodeHash\0p`。
+ * @param {object} packet 原始包
+ * @returns {Promise<{ nodeHash: string, p: number, ts: number } | null>} 验签结果
+ */
+async function verifyCensusPacket(packet) {
+	const nodeHash = /^[\da-f]{64}$/u.test(String(packet?.nodeHash ?? '')) ? packet.nodeHash : null
+	const nodePubKey = /^[\da-f]{64}$/u.test(String(packet?.nodePubKey ?? '')) ? packet.nodePubKey : null
+	const sig = /^[\da-f]{128}$/u.test(String(packet?.sig ?? '')) ? packet.sig : null
+	const ts = Number(packet?.ts)
+	const p = Number(packet?.p)
+	if (!nodeHash || !nodePubKey || !sig || !Number.isFinite(ts)) return null
+	if (Math.abs(Date.now() - ts) > CENSUS_TTL_MS) return null
+	if (!Number.isFinite(p) || p < CENSUS_MIN_P || p > 1) return null
+	const [{ ed25519 }, { sha256 }] = await loadNoble()
+	const pubBytes = new Uint8Array(nodePubKey.match(/.{2}/gu).map(hex => parseInt(hex, 16)))
+	if ([...sha256(pubBytes)].map(byte => byte.toString(16).padStart(2, '0')).join('') !== nodeHash) return null
+	const ok = ed25519.verify(
+		new Uint8Array(sig.match(/.{2}/gu).map(hex => parseInt(hex, 16))),
+		new TextEncoder().encode(`fount-census\0${ts}\0${nodeHash}\0${p}`),
+		pubBytes,
+	)
+	return ok ? { nodeHash, p, ts } : null
+}
+
+/** @param {{ nodeHash: string, p: number, ts: number }} verified 已验签 census 包 @returns {void} */
+function ingest(verified) {
+	const existing = events.get(verified.nodeHash)
+	if (existing && verified.ts < existing.at) return
+	events.set(verified.nodeHash, { p: verified.p, at: verified.ts })
+	render()
+}
+
+/** @returns {void} 渲染人口估计 */
+function render() {
+	const { estimate, sampleSize } = estimatePopulation()
+	document.querySelector('#estimate').textContent = estimate.toLocaleString('zh-CN', { maximumFractionDigits: 1 })
+	document.querySelector('#sample-size').textContent = String(sampleSize)
+	document.querySelector('#window-events').textContent = String(events.size)
+}
+
+/** @returns {void} 注入演示数据 */
+function seedDemo() {
+	events.clear()
+	for (let index = 0; index < 20; index++)
+		events.set((index + 1).toString(16).padStart(2, '0').repeat(32), { p: 0.1, at: Date.now() })
+	statusEl.textContent = '演示模式：20 条 p=0.1 样本（HT 估计 = 200）'
+	document.querySelector('#footer').textContent = '演示模式样本为虚构数据；添加 ?relay=wss://... 进入 live 模式。'
+}
+
+/** @returns {void} 连接中继并订阅 */
+function connectRelay() {
+	if (webSocket) {
+		try { webSocket.close() } catch { /* ignore */ }
+		webSocket = null
+	}
+	if (!relayUrl || !enabled) return
+	statusEl.textContent = `连接 ${relayUrl} …`
+	const connection = new WebSocket(relayUrl)
+	webSocket = connection
+	/** WebSocket 已连接后发送 REQ 订阅 census 事件。 */
+	connection.onopen = () => {
+		if (connection !== webSocket || !enabled) return
+		connection.send(JSON.stringify(['REQ', CENSUS_SUB_ID, { kinds: [CENSUS_KIND], '#t': ['fount'], '#x': ['census'] }]))
+		statusEl.textContent = `监听 ${relayUrl}（kind ${CENSUS_KIND}）`
+	}
+	/**
+	 * @param {MessageEvent} rawMessage 中继消息事件
+	 * @returns {void}
+	 */
+	connection.onmessage = rawMessage => {
+		if (connection !== webSocket || !enabled) return
+		if (inflightVerifications >= MAX_INFLIGHT_VERIFICATIONS) return
+		if (typeof rawMessage.data !== 'string' || rawMessage.data.length > MAX_FRAME_BYTES) return
+		let parsed
+		try { parsed = JSON.parse(String(rawMessage.data)) } catch { return }
+		if (parsed?.[0] !== 'EVENT' || parsed[1] !== CENSUS_SUB_ID) return
+		if (parsed[2]?.kind !== CENSUS_KIND) return
+		const content = parsed[2]?.content
+		if (typeof content !== 'string' || content.length > MAX_FRAME_BYTES) return
+		inflightVerifications++
+		void (async () => {
+			try {
+				const verified = await verifyCensusPacket(JSON.parse(atob(content)))
+				if (connection !== webSocket || !enabled) return
+				if (verified) ingest(verified)
+			}
+			catch { /* ignore malformed */ }
+			finally { inflightVerifications-- }
+		})()
+	}
+	/** WebSocket 关闭时更新状态为已断开。 */
+	connection.onclose = () => {
+		if (connection !== webSocket || !enabled) return
+		statusEl.textContent = '已断开'
+	}
+	/** WebSocket 出错时提示中继连接失败。 */
+	connection.onerror = () => {
+		if (connection !== webSocket || !enabled) return
+		statusEl.textContent = '中继连接失败'
+	}
+}
+
+toggleEl.addEventListener('change', () => {
+	enabled = toggleEl.checked
+	if (!enabled) {
+		events.clear()
+		if (webSocket) { try { webSocket.close() } catch { /* ignore */ } webSocket = null }
+		statusEl.textContent = '已关闭'
+	}
+	else if (demoMode) seedDemo()
+	else connectRelay()
+	render()
+})
+
+if (demoMode) seedDemo()
+else connectRelay()
+render()

package/pages/index.html

@@ -0,0 +1,36 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+	<meta charset="utf-8">
+	<meta name="viewport" content="width=device-width, initial-scale=1">
+	<title>fount 人口统计</title>
+	<style>
+		:root { color-scheme: light dark; }
+		body { font-family: system-ui, sans-serif; max-width: 720px; margin: 3rem auto; padding: 0 1rem; line-height: 1.6; }
+		h1 { font-size: 1.4rem; }
+		.card { border: 1px solid #8884; border-radius: 8px; padding: 1rem 1.25rem; margin: 1rem 0; }
+		.metric { font-size: 2rem; font-weight: 700; }
+		label { display: flex; align-items: center; gap: .5rem; margin: 1rem 0; }
+		#status { opacity: .7; font-size: .9rem; }
+		code { background: #8882; padding: .1em .4em; border-radius: 4px; }
+	</style>
+</head>
+<body>
+	<h1>fount 节点人口统计</h1>
+	<p>基于 Nostr census 事件（kind 30789，<code>t=fount</code> / <code>x=census</code>）的采样估计。本页为独立前端实现，仅做展示：在线节点数 = <code>Σ(1/p)</code>（Horvitz–Thompson 估计）。</p>
+	<label>
+		<input type="checkbox" id="toggle" checked>
+		人口统计（census）
+	</label>
+	<div class="card">
+		<div>在线节点数估计</div>
+		<div class="metric" id="estimate">0</div>
+		<div id="status">初始化…</div>
+	</div>
+	<div class="card">
+		<div>采样事件数 <span id="sample-size">0</span> · 窗口内事件 <span id="window-events">0</span></div>
+	</div>
+	<footer id="footer" style="opacity:.6;font-size:.85rem"></footer>
+	<script type="module" src="./app.mjs"></script>
+</body>
+</html>

package/reputation/engine.mjs

@@ -1,8 +1,6 @@
 /**
  * 信誉纯内存算子（模拟器与磁盘 store 共用）。
  */
-import { normalizeHex64 } from '../core/hexIds.mjs'
-
 import {
 	clampReputationScore,
 	computeRepMaxEff,
@@ -178,7 +176,7 @@ export function pruneReputationFile(data, tunables = reputationTunables, now = D
  * @returns {boolean} 是否已加分
  */
 export function bumpReputationOnRelayPure(data, peerNodeHash, dedupeKey, now = Date.now(), tunables = reputationTunables) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return false
 	const key = dedupeKey || `conn:${id}`
 	data.relayBumpSeen = data.relayBumpSeen.filter(hit => now - hit.t <= tunables.relayBumpDedupeMs)
@@ -215,7 +213,7 @@ export function recordGossipAllUnknownWantPure(data, peerNodeHash, now = Date.no
  * @returns {void}
  */
 export function recordMessageRateViolationPure(data, peerNodeHash, tunables = reputationTunables, excessRatio = 1) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return
 	const ratio = Math.max(0, Math.min(1, Number(excessRatio) || 0))
 	if (ratio <= 0) return
@@ -229,7 +227,7 @@ export function recordMessageRateViolationPure(data, peerNodeHash, tunables = re
  * @returns {void}
  */
 export function bumpChunkStorageReputationPure(data, storagePeerKey, tunables = reputationTunables) {
-	const id = normalizeHex64(storagePeerKey)
+	const id = storagePeerKey
 	if (!id) return
 	adjustNodeReputation(data, id, tunables.chunkStoreRepBump)
 }
@@ -241,7 +239,7 @@ export function bumpChunkStorageReputationPure(data, storagePeerKey, tunables =
  * @returns {void}
  */
 export function penalizeChunkStorageFailurePure(data, blamePeerKey, tunables = reputationTunables) {
-	const id = normalizeHex64(blamePeerKey)
+	const id = blamePeerKey
 	if (!id) return
 	adjustNodeReputation(data, id, -tunables.chunkFetchFailPenalty)
 }
@@ -253,7 +251,7 @@ export function penalizeChunkStorageFailurePure(data, blamePeerKey, tunables = r
  * @returns {void}
  */
 export function penalizeArchiveServeMismatchPure(data, peerNodeHash, tunables = reputationTunables) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return
 	adjustNodeReputation(data, id, -tunables.archiveServeMismatchPenalty)
 }
@@ -282,7 +280,7 @@ export function applySubjectiveSlashPure(data, target, sender, claim, verified,
  * @returns {Array<{ hop: number, node: string, dRep: number }>} 已应用的上游惩罚
  */
 export function applyDecayCollusionAfterSlashPure(data, targetPubKeyHash, inviteEdges, tunables = reputationTunables) {
-	const target = normalizeHex64(targetPubKeyHash)
+	const target = targetPubKeyHash
 	/** @type {Array<{ hop: number, node: string, dRep: number }>} */
 	const applied = []
 	let frontier = new Set([target])
@@ -303,8 +301,7 @@ export function applyDecayCollusionAfterSlashPure(data, targetPubKeyHash, invite
 	for (let hop = 1; hop <= effectiveMaxHop(); hop++) {
 		const upstream = new Set()
 		for (const edge of inviteEdges) {
-			const to = normalizeHex64(edge.to)
-			const from = normalizeHex64(edge.from)
+			const { to, from } = edge
 			if (frontier.has(to) && from) upstream.add(from)
 		}
 		if (!upstream.size) break
@@ -333,7 +330,7 @@ export function applyDecayCollusionAfterSlashPure(data, targetPubKeyHash, invite
  * @returns {void}
  */
 export function applyReputationResetToScoresPure(data, targetPubKeyHash) {
-	const t = normalizeHex64(targetPubKeyHash)
+	const t = targetPubKeyHash
 	const row = repRow(data, t)
 	row.score = 0
 	delete row.offenseStreak
@@ -353,8 +350,8 @@ export function applyReputationResetToScoresPure(data, targetPubKeyHash) {
  * @returns {void}
  */
 export function seedMemberReputationFromIntroducerPure(data, memberPubKeyHash, introducerPubKeyHash, repEdge, tunables = reputationTunables, powBonus = 0) {
-	const memberKey = normalizeHex64(memberPubKeyHash)
-	const introducerKey = normalizeHex64(introducerPubKeyHash)
+	const memberKey = memberPubKeyHash
+	const introducerKey = introducerPubKeyHash
 	if (data.byNodeHash[memberKey]) return
 	const introducerReputation = introducerKey
 		? Number(data.byNodeHash[introducerKey]?.score ?? 0)
@@ -394,7 +391,7 @@ function baselineRow(row) {
  * @returns {{ z: number, anomaly: boolean }} 偏离度
  */
 export function observeBehaviorSamplePure(data, peerNodeHash, sample, now = Date.now(), tunables = reputationTunables) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return { z: 0, anomaly: false }
 	const row = repRow(data, id)
 	const baseline = baselineRow(row)
@@ -429,7 +426,7 @@ export function observeBehaviorSamplePure(data, peerNodeHash, sample, now = Date
  * @returns {void}
  */
 export function applyQuarantinePure(data, peerNodeHash, now = Date.now(), tunables = reputationTunables) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	if (!id) return
 	const row = repRow(data, id)
 	row.quarantinedUntil = now + Number(tunables.quarantineTtlMs ?? 900_000)
@@ -443,7 +440,7 @@ export function applyQuarantinePure(data, peerNodeHash, now = Date.now(), tunabl
  * @returns {boolean} 是否处于本地隔离
  */
 export function isQuarantinedPure(data, peerNodeHash, now = Date.now()) {
-	const id = normalizeHex64(peerNodeHash)
+	const id = peerNodeHash
 	const until = Number(data.byNodeHash?.[id]?.quarantinedUntil ?? 0)
 	return Number.isFinite(until) && until > now
 }

package/schemas/discovery.mjs

@@ -1,4 +1,4 @@
-import { assertHex64, isHex64, isSignatureHex128, normalizeHex64 } from '../core/hexIds.mjs'
+import { assertHex64, isHex64, isSignatureHex128 } from '../core/hexIds.mjs'
 import { isPlainObject } from '../core/object.mjs'
 
 const MAX_DISCOVERY_ADS = 64
@@ -10,16 +10,15 @@ const MAX_DISCOVERY_ADS = 64
 function sanitizeDiscoveryAdvertisement(ad) {
 	if (!isPlainObject(ad)) return null
 	const groupId = String(ad.groupId || '')
-	const advertiserPubKeyHash = normalizeHex64(ad.advertiserPubKeyHash)
-	const signature = String(ad.signature || '')
-	if (!groupId || !isHex64(advertiserPubKeyHash) || !isSignatureHex128(signature)) return null
-	const advertiserNodeHash = normalizeHex64(ad.advertiserNodeHash)
+	const advertiserPubKeyHash = isHex64(ad.advertiserPubKeyHash)
+	const signature = isSignatureHex128(ad.signature)
+	if (!groupId || !advertiserPubKeyHash || !signature) return null
 	const body = {
 		groupId,
 		title: String(ad.title || '').slice(0, 200),
 		blurb: String(ad.blurb || '').slice(0, 500),
 		advertiserPubKeyHash,
-		advertiserNodeHash: isHex64(advertiserNodeHash) || String(ad.advertiserNodeHash || ''),
+		advertiserNodeHash: isHex64(ad.advertiserNodeHash) || '',
 		observedAt: Number(ad.observedAt) || 0,
 		signature,
 	}

package/schemas/federation_pull.mjs

@@ -1,7 +1,7 @@
 /**
  * 联邦补拉 attestation / HPKE 响应 wire 解析（无 attestation/envelope 即丢弃）。
  */
-import { isHex64, isSignatureHex128, normalizeHex64 } from '../core/hexIds.mjs'
+import { isHex64, isSignatureHex128 } from '../core/hexIds.mjs'
 import { isPlainObject } from '../core/object.mjs'
 import { EVENT_ID_HEX } from '../dag/index.mjs'
 
@@ -23,15 +23,15 @@ function isEnvelopeBlob(value) {
  */
 export function parsePullAttestation(attestation) {
 	if (!isPlainObject(attestation)) return null
-	const requesterPubKeyHash = normalizeHex64(attestation.requesterPubKeyHash)
+	const requesterPubKeyHash = isHex64(attestation.requesterPubKeyHash)
 	const groupId = String(attestation.groupId || '')
 	const requestId = String(attestation.requestId || '')
 	const timestamp = Number(attestation.timestamp)
-	const signature = String(attestation.signature || '')
-	if (!isHex64(requesterPubKeyHash) || !groupId || !Number.isFinite(timestamp) || !isSignatureHex128(signature))
+	const signature = isSignatureHex128(attestation.signature)
+	if (!requesterPubKeyHash || !groupId || !Number.isFinite(timestamp) || !signature)
 		return null
 	const wantIds = attestation.wantIds?.length
-		? [...new Set(attestation.wantIds.map(id => normalizeHex64(id)).filter(id => EVENT_ID_HEX.test(id)))]
+		? [...new Set(attestation.wantIds.filter(id => EVENT_ID_HEX.test(id)))]
 		: undefined
 	return {
 		requesterPubKeyHash,
@@ -50,13 +50,13 @@ export function parsePullAttestation(attestation) {
 export function parsePullResponseEnvelope(envelope) {
 	if (!isPlainObject(envelope)) return null
 	const requestId = String(envelope.requestId || '')
-	const requesterPubKeyHash = normalizeHex64(envelope.requesterPubKeyHash)
+	const requesterPubKeyHash = isHex64(envelope.requesterPubKeyHash)
 	const requesterNodeHash = String(envelope.requesterNodeHash || '')
 	const ephemPub = String(envelope.ephemPub || '')
 	const iv = String(envelope.iv || '')
 	const ciphertext = String(envelope.ciphertext || '')
 	const authTag = String(envelope.authTag || '')
-	if (!requestId || !isHex64(requesterPubKeyHash) || !requesterNodeHash) return null
+	if (!requestId || !requesterPubKeyHash || !requesterNodeHash) return null
 	if (!isEnvelopeBlob(ephemPub) || !isEnvelopeBlob(iv) || !isEnvelopeBlob(ciphertext) || !isEnvelopeBlob(authTag))
 		return null
 	return {

package/schemas/mailbox.mjs

@@ -1,4 +1,4 @@
-import { normalizeHex64, HEX_ID_64 } from '../core/hexIds.mjs'
+import { isHex64 } from '../core/hexIds.mjs'
 
 /**
  * @typedef {{ ok: true, value: string }} MailboxWireOk
@@ -17,8 +17,8 @@ import { normalizeHex64, HEX_ID_64 } from '../core/hexIds.mjs'
  * @returns {MailboxWireResult} 规范化 hex64 或结构化错误
  */
 export function assertMailboxPubKeyHash(value) {
-	const normalized = normalizeHex64(value)
-	if (!HEX_ID_64.test(normalized))
+	const normalized = isHex64(value)
+	if (!normalized)
 		return { ok: false, code: 'invalid_hex64', field: 'toPubKeyHash' }
 	return { ok: true, value: normalized }
 }