@steve02081504/fount-p2p 0.0.36 → 0.0.38

package/link/handshake.mjs

@@ -5,7 +5,10 @@ import { isHex64, isSignatureHex128 } from '../core/hexIds.mjs'
 import { normalizeTcpPort } from '../core/tcp_port.mjs'
 import { keyPairFromSeed, pubKeyHash, sign, verify } from '../crypto/crypto.mjs'
 import { normalizeLanHosts } from '../discovery/lan_interfaces.mjs'
+import { MAX_ADVERT_LISTEN_RELAYS, MAX_ADVERT_RELAY_POOL, MAX_RTT_MS } from '../discovery/nostr/constants.mjs'
+import { normalizeNostrRelayUrl } from '../discovery/nostr/relays.mjs'
 import { ensureNodeSeed, getNodeHash } from '../node/identity.mjs'
+import { nodeDebug } from '../node/log.mjs'
 
 import { normalizeDtlsFingerprint } from './sdp_fingerprint.mjs'
 
@@ -20,9 +23,7 @@ export const LINK_HANDSHAKE_DOMAIN = 'fount-link'
  * @returns {string | null} 规范化 binding，无效时 null
  */
 export function normalizeLinkBinding(value) {
-	const dtls = normalizeDtlsFingerprint(value)
-	if (dtls) return dtls
-	return isHex64(value)
+	return normalizeDtlsFingerprint(value) || isHex64(value)
 }
 
 /**
@@ -33,16 +34,14 @@ export function normalizeLinkBinding(value) {
  * @returns {Uint8Array} 待签名消息字节
  */
 export function buildAuthMessage(peerNonce, localBinding, localNodeHash) {
-	const nonce = peerNonce
 	const binding = normalizeLinkBinding(localBinding)
-	const nodeHash = localNodeHash
-	if (!/^[\da-f]{64}$/u.test(nonce))
+	if (!/^[\da-f]{64}$/u.test(peerNonce))
 		throw new Error('p2p: auth nonce must be 64 hex characters')
 	if (!binding)
 		throw new Error('p2p: link binding missing or invalid')
-	if (!isHex64(nodeHash))
+	if (!isHex64(localNodeHash))
 		throw new Error('p2p: nodeHash must be 64 hex characters')
-	return Buffer.from(`${LINK_HANDSHAKE_DOMAIN}\0${nonce}\0${binding}\0${nodeHash}`, 'utf8')
+	return Buffer.from(`${LINK_HANDSHAKE_DOMAIN}\0${peerNonce}\0${binding}\0${localNodeHash}`, 'utf8')
 }
 
 /**
@@ -137,23 +136,130 @@ export async function verifyAuth(hello, auth, expectedNonce, remoteBinding) {
  * @param {string} nodeHash 节点 nodeHash
  * @param {number | null} [tcpPort=null] 可选 LAN TCP 监听端口（签入消息）
  * @param {unknown} [lanHosts=null] 可选 LAN IPv4 列表（签入消息）
+ * @param {string | null} [relayBlobHex=null] 可选规范化 relay 字段 hex 段（签入消息）
  * @returns {Uint8Array} 待签名消息字节
  */
-export function buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort = null, lanHosts = null) {
-	const base = `fount-advert\0${rendezvousKey}\0${ts}\0${nodeHash}`
+export function buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort = null, lanHosts = null, relayBlobHex = null) {
+	let message = `fount-advert\0${rendezvousKey}\0${ts}\0${nodeHash}`
 	const port = normalizeTcpPort(tcpPort)
-	let message = port ? `${base}\0${port}` : base
+	if (port) message += `\0${port}`
 	const hosts = normalizeLanHosts(lanHosts)
 	if (hosts.length) message += `\0${hosts.join(',')}`
+	if (relayBlobHex) message += `\0relays:${relayBlobHex}`
 	return Buffer.from(message, 'utf8')
 }
 
 /**
- * 构造带签名的 discovery advert（tcpPort / lanHosts 一并签入消息）。
+ * 规范化并裁剪入站（不可信）advert 携带的 relay 字段：无效项丢弃并记审计日志，不抛错。
+ * - pool：url 经 normalize 有效且 rttMs∈[0,MAX_RTT_MS]，取整、去重、裁剪前 MAX_ADVERT_RELAY_POOL。
+ * - listen：url normalize 有效、去重、裁剪前 MAX_ADVERT_LISTEN_RELAYS。
+ * - 每个丢弃项记审计日志（含原始值），不静默。
+ * @param {unknown} rawPool 原始 pool（[{url, rttMs}]）
+ * @param {unknown} rawListen 原始 listen（[url]）
+ * @returns {{ pool: Array<{ url: string, rtt: number }>, listen: string[] }} 规范化结果
+ */
+export function sanitizeAdvertRelayFields(rawPool, rawListen) {
+	/** @type {Array<{ url: string, rtt: number }>} */
+	const pool = []
+	/** @type {Set<string>} */
+	const seenPool = new Set()
+	if (Array.isArray(rawPool)) for (const item of rawPool) {
+		const url = normalizeNostrRelayUrl(item?.url)
+		if (!url) {
+			nodeDebug('invalidRelayUrl', { url: String(item?.url), reason: 'advert-pool-invalid-url' })
+			continue
+		}
+		const rtt = Number(item?.rttMs ?? item?.rtt)
+		if (!Number.isFinite(rtt) || rtt < 0 || rtt > MAX_RTT_MS) {
+			nodeDebug('invalidRelayUrl', { url, reason: 'advert-pool-invalid-rtt', rttMs: item?.rttMs ?? item?.rtt })
+			continue
+		}
+		if (seenPool.has(url)) continue
+		seenPool.add(url)
+		pool.push({ url, rtt: Math.round(rtt) })
+		if (pool.length >= MAX_ADVERT_RELAY_POOL) break
+	}
+
+	/** @type {string[]} */
+	const listen = []
+	/** @type {Set<string>} */
+	const seenListen = new Set()
+	if (Array.isArray(rawListen)) for (const raw of rawListen) {
+		const url = normalizeNostrRelayUrl(raw)
+		if (!url) {
+			nodeDebug('invalidRelayUrl', { url: String(raw), reason: 'advert-listen-invalid-url' })
+			continue
+		}
+		if (seenListen.has(url)) continue
+		seenListen.add(url)
+		listen.push(url)
+		if (listen.length >= MAX_ADVERT_LISTEN_RELAYS) break
+	}
+
+	return { pool, listen }
+}
+
+/**
+ * 构建规范化 relay 字段的 canonical blob（pool/listen 各按 url 排序 → `{p,l}` JSON → UTF-8 → hex）。
+ * @param {Array<{ url: string, rtt: number }>} pool 规范化 pool
+ * @param {string[]} listen 规范化 listen
+ * @returns {string} hex 编码 blob
+ */
+export function canonicalAdvertRelayBlob(pool, listen) {
+	return Buffer.from(JSON.stringify({
+		p: [...pool].sort((a, b) => a.url < b.url ? -1 : a.url > b.url ? 1 : 0),
+		l: [...listen].sort(),
+	}), 'utf8').toString('hex')
+}
+
+/**
+ * 严格规范化本机（出站）提供的 relay 字段：无效数据立即抛错，不静默丢弃。
+ * 本地调用方应提供已规范化字段；入站校验仍走 lenient 的 sanitizeAdvertRelayFields。
+ * @param {unknown} rawPool 原始 pool（[{url, rttMs}]）
+ * @param {unknown} rawListen 原始 listen（[url]）
+ * @returns {{ pool: Array<{ url: string, rtt: number }>, listen: string[] }} 规范化结果
+ */
+function normalizeLocalRelayFields(rawPool, rawListen) {
+	/** @type {Array<{ url: string, rtt: number }>} */
+	const pool = []
+	/** @type {Set<string>} */
+	const seenPool = new Set()
+	if (rawPool != null && !Array.isArray(rawPool)) throw new Error('p2p: advert pool invalid type')
+	if (Array.isArray(rawPool)) for (const item of rawPool) {
+		const url = normalizeNostrRelayUrl(item?.url)
+		if (!url) throw new Error('p2p: advert pool invalid url')
+		const rtt = Number(item?.rttMs ?? item?.rtt)
+		if (!Number.isFinite(rtt) || rtt < 0 || rtt > MAX_RTT_MS)
+			throw new Error('p2p: advert pool invalid rtt')
+		if (seenPool.has(url)) continue
+		seenPool.add(url)
+		pool.push({ url, rtt: Math.round(rtt) })
+		if (pool.length >= MAX_ADVERT_RELAY_POOL) break
+	}
+
+	/** @type {string[]} */
+	const listen = []
+	/** @type {Set<string>} */
+	const seenListen = new Set()
+	if (rawListen != null && !Array.isArray(rawListen)) throw new Error('p2p: advert listen invalid type')
+	if (Array.isArray(rawListen)) for (const raw of rawListen) {
+		const url = normalizeNostrRelayUrl(raw)
+		if (!url) throw new Error('p2p: advert listen invalid url')
+		if (seenListen.has(url)) continue
+		seenListen.add(url)
+		listen.push(url)
+		if (listen.length >= MAX_ADVERT_LISTEN_RELAYS) break
+	}
+
+	return { pool, listen }
+}
+
+/**
+ * 构造带签名的 discovery advert（tcpPort / lanHosts / relay 字段一并签入消息）。
  * @param {string} rendezvousKey discovery 内部汇合键
  * @param {number} [ts=Date.now()] 时间戳（毫秒）
- * @param {{ secretKey?: Uint8Array, nodeHash?: string, nodePubKey?: string, tcpPort?: number, lanHosts?: unknown } | null} [options] 签名身份；可选 LAN 监听端口与本机 IPv4 列表
- * @returns {Promise<{ nodeHash: string, nodePubKey: string, ts: number, sig: string, tcpPort?: number, lanHosts?: string[] }>} 签名 advert
+ * @param {{ secretKey?: Uint8Array, nodeHash?: string, nodePubKey?: string, tcpPort?: number, lanHosts?: unknown, nostrRelayPool?: unknown, listenNostrRelays?: unknown } | null} [options] 签名身份；可选 LAN 监听端口、本机 IPv4 列表与 relay 字段
+ * @returns {Promise<{ nodeHash: string, nodePubKey: string, ts: number, sig: string, tcpPort?: number, lanHosts?: string[], nostrRelayPool?: Array<{ url: string, rtt: number }>, listenNostrRelays?: string[] }>} 签名 advert
  */
 export async function buildSignedAdvert(rendezvousKey, ts = Date.now(), options = null) {
 	const seed = options?.secretKey
@@ -168,7 +274,10 @@ export async function buildSignedAdvert(rendezvousKey, ts = Date.now(), options
 	if (options?.tcpPort && !tcpPort)
 		throw new Error('p2p: advert tcpPort invalid')
 	const lanHosts = normalizeLanHosts(options?.lanHosts)
-	const message = buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort, lanHosts)
+	// 出站字段要求已规范化，无效数据直接抛错（入站路径才用 lenient sanitize）。
+	const normalized = normalizeLocalRelayFields(options?.nostrRelayPool, options?.listenNostrRelays)
+	const message = buildAdvertMessage(rendezvousKey, ts, nodeHash, tcpPort, lanHosts,
+		canonicalAdvertRelayBlob(normalized.pool, normalized.listen))
 	const sig = await sign(message, secretKey)
 	const advert = {
 		nodeHash,
@@ -178,16 +287,18 @@ export async function buildSignedAdvert(rendezvousKey, ts = Date.now(), options
 	}
 	if (tcpPort) advert.tcpPort = tcpPort
 	if (lanHosts.length) advert.lanHosts = lanHosts
+	if (normalized.pool.length) advert.nostrRelayPool = normalized.pool
+	if (normalized.listen.length) advert.listenNostrRelays = normalized.listen
 	return advert
 }
 
 /**
- * 验证 discovery advert 签名与时间戳，成功返回发布者 nodeHash。
+ * 验证 discovery advert 签名与时间戳，成功返回发布者 nodeHash 与规范化后的 relay 字段。
  * @param {string} rendezvousKey 期望的汇合键
  * @param {unknown} advert 原始 advert 载荷
  * @param {number} [now=Date.now()] 当前时间（毫秒）
  * @param {number} [maxSkewMs=10 * 60_000] 允许的最大时钟偏差（毫秒）
- * @returns {Promise<string | null>} 验证通过的 nodeHash，失败返回 null
+ * @returns {Promise<{ nodeHash: string, relayPool: Array<{ url: string, rtt: number }>, listenRelays: string[] } | null>} 验证通过返回 nodeHash 与规范化 relay 字段，失败返回 null
  */
 export async function verifySignedAdvert(rendezvousKey, advert, now = Date.now(), maxSkewMs = 10 * 60_000) {
 	const parsedHello = parseHello({ nodeHash: advert?.nodeHash, nodePubKey: advert?.nodePubKey, nonce: '0'.repeat(64) })
@@ -195,11 +306,12 @@ export async function verifySignedAdvert(rendezvousKey, advert, now = Date.now()
 	const ts = Number(advert?.ts)
 	const sig = isSignatureHex128(advert?.sig)
 	if (!Number.isFinite(ts) || Math.abs(now - ts) > maxSkewMs || !sig) return null
-	const hasTcpPortField = !!advert?.tcpPort
 	const tcpPort = normalizeTcpPort(advert?.tcpPort)
-	if (hasTcpPortField && !tcpPort) return null
-	const lanHosts = normalizeLanHosts(advert?.lanHosts)
-	const message = buildAdvertMessage(rendezvousKey, ts, parsedHello.nodeHash, tcpPort, lanHosts)
-	const ok = await verify(Buffer.from(sig, 'hex'), message, Buffer.from(parsedHello.nodePubKey, 'hex'))
-	return ok ? parsedHello.nodeHash : null
+	if (advert?.tcpPort != null && !tcpPort) return null
+	const sanitized = sanitizeAdvertRelayFields(advert?.nostrRelayPool, advert?.listenNostrRelays)
+	if (!await verify(Buffer.from(sig, 'hex'),
+		buildAdvertMessage(rendezvousKey, ts, parsedHello.nodeHash, tcpPort, normalizeLanHosts(advert?.lanHosts),
+			canonicalAdvertRelayBlob(sanitized.pool, sanitized.listen)),
+		Buffer.from(parsedHello.nodePubKey, 'hex'))) return null
+	return { nodeHash: parsedHello.nodeHash, relayPool: sanitized.pool, listenRelays: sanitized.listen }
 }

package/link/providers/link_id_pipe.mjs

@@ -34,7 +34,7 @@ export function parseLinkOpen(raw) {
  * @returns {ReturnType<typeof createLinkPipe>} link pipe
  */
 export function createLinkIdBoundPipe(options) {
-	const linkId = options.linkId
+	const { linkId } = options
 	if (!linkId) throw new Error(`p2p: ${options.providerId || 'link'} linkId required`)
 	return createLinkPipe({
 		...options,

package/link/providers/{nostr.mjs → nostr/index.mjs}

@@ -1,17 +1,16 @@
 import { Buffer } from 'node:buffer'
 import { randomBytes } from 'node:crypto'
 
-import { base64ToBytes, bytesToBase64 } from '../../core/bytes_codec.mjs'
-import { isHex64 } from '../../core/hexIds.mjs'
-import { getDiscoveryProvider, sendNodeSignalPacket } from '../../discovery/index.mjs'
-import { NOSTR_SIGNAL_KIND, resolveNostrRelayUrls } from '../../discovery/nostr.mjs'
-import { ms } from '../../utils/duration.mjs'
-import { createLruMap } from '../../utils/lru.mjs'
-import { FRAME_HEADER_BYTES, maxFrameChunkBytesForPayload } from '../frame.mjs'
-import { asLinkHandle } from '../pipe.mjs'
-
-import { LINK_LEVEL_NOSTR } from './levels.mjs'
-import { createLinkIdBoundPipe } from './link_id_pipe.mjs'
+import { base64ToBytes, bytesToBase64 } from '../../../core/bytes_codec.mjs'
+import { isHex64 } from '../../../core/hexIds.mjs'
+import { getDiscoveryProvider, sendNodeSignalPacket } from '../../../discovery/index.mjs'
+import { NOSTR_SIGNAL_KIND, resolveNostrRelayUrls } from '../../../discovery/nostr/index.mjs'
+import { ms } from '../../../utils/duration.mjs'
+import { createLruMap } from '../../../utils/lru.mjs'
+import { FRAME_HEADER_BYTES, maxFrameChunkBytesForPayload } from '../../frame.mjs'
+import { asLinkHandle } from '../../pipe.mjs'
+import { LINK_LEVEL_NOSTR } from '../levels.mjs'
+import { createLinkIdBoundPipe } from '../link_id_pipe.mjs'
 
 /** 单包 payload（UTF-8 / base64）上限，避免撞 relay content 限制。
  *  默认兜底取 2026-08 本机对默认公共 relay 的 NIP-11 `max_message_length` 非零最小值（131072 = nostr.mom）。
@@ -317,8 +316,7 @@ export function createNostrLinkProvider(options = {}) {
 	 */
 	async function deliverPacket(packet) {
 		if (packet?.type !== 'link') return
-		const linkId = packet.linkId
-		const from = packet.from
+		const { linkId, from } = packet
 		if (!isHex64(linkId) || !isHex64(from)) return
 		if (localIdentity?.nodeHash && from === localIdentity.nodeHash) return
 
@@ -398,8 +396,15 @@ export function createNostrLinkProvider(options = {}) {
 		ensureListening(handlers) {
 			onInbound = handlers.onInbound
 			localIdentity = handlers.localIdentity
-			void refreshPayloadCap(resolveRelayUrls())
+			// 探测延迟到启动路径之外（首个 macrotask），避免同步 fetch 阻塞 startup 预算。
+			const capTimer = setTimeout(() => {
+				let relayUrls
+				try { relayUrls = resolveRelayUrls() } catch { return }
+				void refreshPayloadCap(relayUrls).catch(() => { })
+			}, 0)
+			capTimer.unref?.()
 			return () => {
+				clearTimeout(capTimer)
 				onInbound = null
 				for (const session of sessions.values())
 					void session.pipe.close('listen-stop')

package/mailbox/deliver_or_store.mjs

@@ -62,7 +62,7 @@ async function resolveRouting(username) {
  */
 export async function deliverOrStoreMailboxPut(username, options) {
 	const routing = await resolveRouting(username)
-	const toPubKeyHash = options.toPubKeyHash
+	const { toPubKeyHash } = options
 	if (!isHex64(toPubKeyHash)) return { stored: false, delivered: false, relayed: 0 }
 	const hop = normalizeMailboxHop(options.hop)
 	if (hop >= routing.maxHop) return { stored: false, delivered: false, relayed: 0 }
@@ -76,9 +76,8 @@ export async function deliverOrStoreMailboxPut(username, options) {
 		fromNodeHash: options.record?.fromNodeHash || nodeHash,
 	}
 	const stored = await storeMailboxRecord(record)
-	const toNodeHash = options.toNodeHash
-	const delivered = isHex64(toNodeHash) && isMailboxRecordWithinSizeLimit(record)
-		? await requireTrustGraphProvider(DEFAULT_TRUST_GRAPH_OWNER).sendToNode(username, toNodeHash, 'mailbox_put', { nodeHash, record })
+	const delivered = isHex64(options.toNodeHash) && isMailboxRecordWithinSizeLimit(record)
+		? await requireTrustGraphProvider(DEFAULT_TRUST_GRAPH_OWNER).sendToNode(username, options.toNodeHash, 'mailbox_put', { nodeHash, record })
 		: false
 
 	let relayed = 0

package/mailbox/store.mjs

@@ -150,7 +150,7 @@ export function mailboxEnvelopeId(envelope) {
  */
 export async function storeMailboxRecord(record) {
 	if (!isMailboxRecordWithinSizeLimit(record)) return false
-	const toPubKeyHash = record.toPubKeyHash
+	const { toPubKeyHash } = record
 	if (!isHex64(toPubKeyHash)) return false
 	const hop = normalizeMailboxHop(record.hop)
 	const { tier } = record

package/node/feature_config.mjs

@@ -0,0 +1,30 @@
+/**
+ * 通用包级行为开关（布尔 feature map）：`{ census: true, ... }`。
+ * 新增功能只需加入新布尔 key，无需新增专属设置界面。
+ */
+
+/** 默认 feature：census 默认开启（人口统计，基于 nostr）。 */
+const DEFAULT_P2P_FEATURES = { census: true }
+
+/**
+ * @returns {Record<string, boolean>} 默认 feature map 快照
+ */
+export function defaultP2PFeatures() {
+	return { ...DEFAULT_P2P_FEATURES }
+}
+
+/**
+ * 归一化 feature map：已知 key 用默认值，patch 中未知 key 原样透传（值必须为 boolean）。
+ * @param {Record<string, boolean>} [patch] 部分 feature 覆盖
+ * @returns {Record<string, boolean>} 完整 boolean feature map
+ */
+export function resolveP2PFeatures(patch = {}) {
+	/** @type {Record<string, boolean>} */
+	const out = defaultP2PFeatures()
+	for (const [key, value] of Object.entries(patch)) {
+		if (value !== true && value !== false)
+			throw new Error(`p2p: feature "${key}" must be boolean`)
+		out[key] = value
+	}
+	return out
+}

package/node/instance.mjs

@@ -1,6 +1,7 @@
 import path from 'node:path'
 
 import { createFsEntityStore } from './entity_store.mjs'
+import { resolveP2PFeatures } from './feature_config.mjs'
 import { closeAllFileStreams } from './handles.mjs'
 import { defaultSignalingRuntimeConfig, resolveSignalingRuntimeConfig } from './signaling_config.mjs'
 
@@ -14,6 +15,7 @@ import { defaultSignalingRuntimeConfig, resolveSignalingRuntimeConfig } from './
  *   entityStore: import('./entity_store.mjs').EntityStore
  *   logger: NodeLogger | null
  *   signaling: SignalingRuntimeConfig
+ *   features: Record<string, boolean>
  * }} NodeRuntime
  */
 
@@ -49,6 +51,7 @@ export function initNode(options) {
 		entityStore,
 		logger: console,
 		signaling: resolveSignalingRuntimeConfig(),
+		features: resolveP2PFeatures(),
 	}
 	return runtime
 }
@@ -101,6 +104,24 @@ export function getSignalingRuntimeConfig() {
 	return runtime?.signaling ?? defaultSignalingRuntimeConfig()
 }
 
+/**
+ * 设置包级行为开关（布尔 feature map）；运行时切换，生效于对应 feature 的下一轮。
+ * @param {Record<string, boolean>} config - feature 补丁
+ * @returns {void}
+ */
+export function setP2PFeatures(config) {
+	if (!runtime) throw new Error('p2p: setP2PFeatures requires initNode')
+	runtime.features = resolveP2PFeatures({ ...runtime.features, ...config })
+	emitNodeChange('features-changed', runtime.features)
+}
+
+/**
+ * @returns {Record<string, boolean>} 当前包级 feature map
+ */
+export function getP2PFeatures() {
+	return { ...getNode().features }
+}
+
 /**
  * @returns {string} 节点数据目录绝对路径
  */

package/node/reputation_store.mjs

@@ -228,12 +228,11 @@ export async function applySubjectiveSlashFromEvent(username, groupId, event, re
 	if (event.type !== 'reputation_slash') return
 	const { content } = event
 	const target = content.targetPubKeyHash
-	const sender = event.sender
 
 	await mutateReputation(async data => {
 		const verified = content.verified && await verifySlashProof(username, groupId, content, readEvents)
 		const claim = Number(content.claim ?? (verified ? reputationTunables.slashVerifiedDefaultClaim : reputationTunables.slashUnverifiedDefaultClaim))
-		applySubjectiveSlashPure(data, target, sender, claim, verified)
+		applySubjectiveSlashPure(data, target, event.sender, claim, verified)
 	})
 }
 

package/node/storage.mjs

@@ -28,3 +28,26 @@ export function readNodeJsonSync(name) {
 export function writeNodeJsonSync(name, data) {
 	writeJsonFileSync(nodeJsonPath(name), data)
 }
+
+/**
+ * Nostr relay 池 / peer 路由持久化文件路径（`nodeDir/nostr/relays.json`）。
+ * @returns {string} 绝对路径
+ */
+export function nostrRelayJsonPath() {
+	return path.join(getNodeDir(), 'nostr', 'relays.json')
+}
+
+/**
+ * @returns {object | null} 解析后的 Nostr relay JSON 或 null
+ */
+export function readNostrRelaysJsonSync() {
+	return readJsonFileSync(nostrRelayJsonPath())
+}
+
+/**
+ * @param {unknown} data 数据
+ * @returns {void}
+ */
+export function writeNostrRelaysJsonSync(data) {
+	writeJsonFileSync(nostrRelayJsonPath(), data)
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@steve02081504/fount-p2p",
-	"version": "0.0.36",
+	"version": "0.0.38",
 	"description": "fount federation P2P layer — link, trust graph, mailbox, DAG, EVFS.",
 	"keywords": [
 		"network",
@@ -21,10 +21,11 @@
 		"node": ">=20"
 	},
 	"scripts": {
-		"test": "node --test --test-concurrency=1 --test-force-exit test/pure/*.test.mjs test/integration/*.test.mjs",
+		"test": "node --test --test-concurrency=1 --test-force-exit test/pure/*.test.mjs test/integration/*.test.mjs test/frontend/*.test.mjs",
 		"test:fount": "deno test -A --config deno.json test/fount/",
 		"test:live": "node --test --test-concurrency=1 --test-force-exit test/live/*.test.mjs",
-		"test:sim": "node --test --test-concurrency=1 --test-force-exit sim/test/*.test.mjs"
+		"test:sim": "node --test --test-concurrency=1 --test-force-exit sim/test/*.test.mjs",
+		"test:frontend": "node --test --test-concurrency=1 --test-force-exit test/frontend/*.test.mjs"
 	},
 	"bin": {
 		"fount-p2p": "infra/cli.mjs"
@@ -33,6 +34,8 @@
 		".": "./index.mjs",
 		"./infra": "./infra/service.mjs",
 		"./link": "./link/providers/index.mjs",
+		"./link/providers/nostr": "./link/providers/nostr/index.mjs",
+		"./link/providers/nostr/*": "./link/providers/nostr/*.mjs",
 		"./core/*": "./core/*.mjs",
 		"./crypto": "./crypto/crypto.mjs",
 		"./crypto/*": "./crypto/*.mjs",
@@ -43,6 +46,8 @@
 		"./discovery": "./discovery/index.mjs",
 		"./discovery/bt": "./discovery/bt/index.mjs",
 		"./discovery/bt/*": "./discovery/bt/*.mjs",
+		"./discovery/nostr": "./discovery/nostr/index.mjs",
+		"./discovery/nostr/*": "./discovery/nostr/*.mjs",
 		"./discovery/*": "./discovery/*.mjs",
 		"./transport/node_scope/*": "./transport/node_scope/*.mjs",
 		"./transport/*": "./transport/*.mjs",
@@ -73,7 +78,8 @@
 		"ws": "latest"
 	},
 	"devDependencies": {
-		"@steve02081504/exec": "latest"
+		"@steve02081504/exec": "latest",
+		"playwright-core": "latest"
 	},
 	"optionalDependencies": {
 		"@stoprocent/bleno": "latest",