@steve02081504/fount-p2p 0.0.4 → 0.0.5

package/files/assemble_stream.mjs

@@ -1,18 +1,15 @@
 import { Buffer } from 'node:buffer'
-import { createHash } from 'node:crypto'
+import { createHash, randomBytes } from 'node:crypto'
 import { Readable } from 'node:stream'
 
 import { FEDERATION_CHUNK_MAX_BYTES } from '../core/constants.mjs'
-import {
-	encryptConvergentPlaintext,
-	encryptRandomPlaintext,
-} from '../crypto/key.mjs'
 
+import { encryptSliceToPart } from './assemble.mjs'
 import { decryptPart } from './transfer_key.mjs'
 
 /**
  * @typedef {import('./manifest.mjs').CeMode} CeMode
- * @typedef {{ hash: string, size: number, raw: Buffer }} EncryptedPart
+ * @typedef {{ hash: string, size: number, raw: Buffer, contentHash?: string }} EncryptedPart
  */
 
 /**
@@ -21,15 +18,15 @@ import { decryptPart } from './transfer_key.mjs'
  * @param {CeMode} [ceMode] 加密模式
  * @param {(part: EncryptedPart) => Promise<void>} onPart 每块回调
  * @param {number} [maxBytes] 最大字节
- * @returns {Promise<{ contentHash: string, parts: Array<{ hash: string, size: number }>, contentKey?: Buffer }>} 分块结果
+ * @returns {Promise<{ contentHash: string, parts: Array<{ hash: string, size: number, contentHash?: string }>, contentKey?: Buffer }>} 分块结果
  */
 export async function encryptReadableToParts(readable, ceMode = 'convergent', onPart, maxBytes = Infinity) {
 	const digest = createHash('sha256')
 	/** @type {Buffer[]} */
 	let pending = Buffer.alloc(0)
-	/** @type {Array<{ hash: string, size: number }>} */
+	/** @type {Array<{ hash: string, size: number, contentHash?: string }>} */
 	const parts = []
-	let contentKey = null
+	const contentKey = ceMode === 'random' ? randomBytes(32) : null
 	let total = 0
 
 	/**
@@ -38,12 +35,11 @@ export async function encryptReadableToParts(readable, ceMode = 'convergent', on
 	 */
 	const flushSlice = async (slice) => {
 		digest.update(slice)
-		const enc = ceMode === 'random'
-			? encryptRandomPlaintext(slice)
-			: encryptConvergentPlaintext(slice)
-		if (ceMode === 'random') contentKey = enc.contentKey
-		const part = { hash: enc.ciphertextHash, size: enc.raw.length, raw: enc.raw }
-		parts.push({ hash: part.hash, size: part.size })
+		const part = encryptSliceToPart(slice, ceMode, contentKey)
+		/** @type {{ hash: string, size: number, contentHash?: string }} */
+		const meta = { hash: part.hash, size: part.size }
+		if (part.contentHash) meta.contentHash = part.contentHash
+		parts.push(meta)
 		await onPart(part)
 	}
 
@@ -71,55 +67,111 @@ export async function encryptReadableToParts(readable, ceMode = 'convergent', on
 }
 
 /**
- * 将 manifest 各密文块解密后串联为可读流。
+ * @param {import('node:stream').Readable} stream 密文流
+ * @returns {Promise<Buffer | null>} 下一可读块；流结束为 null
+ */
+function readStreamChunk(stream) {
+	const chunk = stream.read()
+	if (chunk) return Promise.resolve(Buffer.from(chunk))
+	if (stream.readableEnded) return Promise.resolve(null)
+	return new Promise((resolve, reject) => {
+		/**
+		 *
+		 */
+		const onReadable = () => {
+			cleanup()
+			const next = stream.read()
+			resolve(next ? Buffer.from(next) : Buffer.alloc(0))
+		}
+		/**
+		 *
+		 */
+		const onEnd = () => {
+			cleanup()
+			resolve(null)
+		}
+		/**
+		 * @param {Error} err 错误
+		 */
+		const onError = err => {
+			cleanup()
+			reject(err)
+		}
+		/**
+		 *
+		 */
+		const cleanup = () => {
+			stream.off('readable', onReadable)
+			stream.off('end', onEnd)
+			stream.off('error', onError)
+		}
+		stream.once('readable', onReadable)
+		stream.once('end', onEnd)
+		stream.once('error', onError)
+	})
+}
+
+/**
+ * 将 manifest 各密文块按 part.size 拼齐后解密，串联为明文可读流。
  * @param {import('./manifest.mjs').FileManifest} manifest 清单
  * @param {import('node:stream').Readable[]} partStreams 按序密文流
  * @param {Buffer | null} contentKey 随机密钥
  * @returns {Readable} 明文流
  */
 export function createManifestPlaintextStream(manifest, partStreams, contentKey) {
+	if (partStreams.length !== manifest.parts.length)
+		throw new Error('part stream count mismatch')
+
 	let partIndex = 0
-	let currentStream = null
+	/** @type {Buffer} */
+	let pending = Buffer.alloc(0)
 	const digest = createHash('sha256')
+	let finished = false
 
 	return new Readable({
 		/**
 		 *
 		 */
 		async read() {
+			if (finished) return
 			try {
-				while (true) {
-					if (!currentStream) {
-						if (partIndex >= partStreams.length) {
-							this.push(null)
-							return
-						}
-						currentStream = partStreams[partIndex++]
+				while (partIndex < manifest.parts.length) {
+					const need = Number(manifest.parts[partIndex].size) || 0
+					const stream = partStreams[partIndex]
+					while (pending.length < need) {
+						const more = await readStreamChunk(stream)
+						if (more === null) break
+						if (more.length) pending = Buffer.concat([pending, more])
+					}
+					if (pending.length < need) {
+						this.destroy(new Error('short ciphertext part'))
+						return
 					}
-					const chunk = currentStream.read()
-					if (chunk === null) {
-						currentStream = await new Promise((resolve, reject) => {
-							currentStream.once('end', () => resolve(null))
-							currentStream.once('error', reject)
-							currentStream.resume()
-						})
-						if (currentStream === null) {
-							currentStream = null
-							continue
-						}
+					const enc = pending.subarray(0, need)
+					pending = pending.subarray(need)
+					if (pending.length) {
+						this.destroy(new Error('trailing ciphertext in part stream'))
+						return
 					}
-					if (chunk?.length) {
-						const plain = decryptPart(Buffer.from(chunk), manifest, contentKey)
-						if (!plain) {
-							this.destroy(new Error('decrypt failed'))
-							return
-						}
-						digest.update(plain)
-						if (!this.push(plain))
-							return
+					const plain = decryptPart(enc, manifest, contentKey, partIndex)
+					if (!plain) {
+						this.destroy(new Error('decrypt failed'))
+						return
+					}
+					digest.update(plain)
+					partIndex++
+					this.push(plain)
+					return
+				}
+				if (manifest.contentHash) {
+					const got = digest.digest('hex')
+					if (got !== String(manifest.contentHash).toLowerCase()) {
+						this.destroy(new Error('contentHash mismatch'))
 						return
 					}
 				}
+				finished = true
+				this.push(null)
 			}
 			catch (error) {
 				this.destroy(error instanceof Error ? error : new Error(String(error)))

package/files/chunk_provider_registry.mjs

@@ -32,12 +32,6 @@ export function unregisterChunkProviders(ownerId) {
 	nodeHashProvidersByOwner.delete(key)
 }
 
-/** @returns {void} */
-export function clearChunkProviderRegistry() {
-	federationFetchersByOwner.clear()
-	nodeHashProvidersByOwner.clear()
-}
-
 /**
  * @param {string} username 用户
  * @param {string} groupId 群 ID

package/files/chunk_store.mjs

@@ -2,7 +2,6 @@ import { Buffer } from 'node:buffer'
 import fs from 'node:fs'
 import fsp from 'node:fs/promises'
 import { dirname, join } from 'node:path'
-import { Readable } from 'node:stream'
 import { pipeline } from 'node:stream/promises'
 
 import { isHex64 } from '../core/hexIds.mjs'
@@ -74,14 +73,5 @@ export async function putChunk(hash, data) {
 export async function putChunkFromStream(hash, readable) {
 	const filePath = chunkStorePath(hash)
 	await fsp.mkdir(dirname(filePath), { recursive: true })
-	const writable = fs.createWriteStream(filePath)
-	await pipeline(readable, writable)
-}
-
-/**
- * @param {string} hash 64 位十六进制
- * @returns {Readable} chunk 可读流
- */
-export function chunkToReadable(hash) {
-	return createChunkReadStream(hash)
+	await pipeline(readable, fs.createWriteStream(filePath))
 }

package/files/evfs.mjs

@@ -4,14 +4,52 @@ import { Readable } from 'node:stream'
 import { FEDERATION_CHUNK_MAX_BYTES } from '../core/constants.mjs'
 import { getEntityStore } from '../node/instance.mjs'
 
-import { buildFileManifestFromEnc, encryptPlaintextToParts, encryptPlaintextToMultiPartsAsync } from './assemble.mjs'
-import { encryptReadableToParts } from './assemble_stream.mjs'
+import { buildFileManifestFromEnc, encryptPlaintextToMultiPartsAsync, encryptPlaintextToParts, manifestPartsForPersist } from './assemble.mjs'
+import { createManifestPlaintextStream, encryptReadableToParts } from './assemble_stream.mjs'
 import { fetchChunk } from './chunk_fetch.mjs'
-import { getChunk, hasChunk, putChunk } from './chunk_store.mjs'
+import { createChunkReadStream, getChunk, hasChunk, putChunk } from './chunk_store.mjs'
 import { normalizeFileManifest, publicTransferKeyDescriptor } from './manifest.mjs'
-import { assembleManifestPlaintext } from './transfer_key.mjs'
+import { assembleManifestPlaintext, resolveContentKey } from './transfer_key.mjs'
 import { readDagManifestPlaintext, resolveTransferKeyDeps } from './transfer_key_registry.mjs'
 
+/**
+ * @param {string} replicaUsername 副本用户名
+ * @param {import('./manifest.mjs').FileManifest} manifest 清单
+ * @returns {{ getGroupFileMasterKey?: Function, getVaultMasterKey?: Function }} 密钥依赖
+ */
+function transferKeyDepsForReplica(replicaUsername, manifest) {
+	const rawDeps = resolveTransferKeyDeps(undefined, manifest)
+	return {
+		getGroupFileMasterKey: rawDeps.getGroupFileMasterKey
+			? (groupId, keyGeneration) => rawDeps.getGroupFileMasterKey(replicaUsername, groupId, keyGeneration)
+			: undefined,
+		getVaultMasterKey: rawDeps.getVaultMasterKey
+			? entityHash => rawDeps.getVaultMasterKey(replicaUsername, entityHash)
+			: undefined,
+	}
+}
+
+/**
+ * @param {string} username 拉取身份
+ * @param {import('./manifest.mjs').FileManifest} manifest 清单
+ * @param {{ fetchChunk?: Function }} [opts] miss 拉取
+ * @returns {Promise<boolean>} 全部 part 是否已就位
+ */
+async function ensureManifestPartsLocal(username, manifest, opts = {}) {
+	for (const part of manifest.parts) {
+		if (await hasChunk(part.hash)) continue
+		const fetchedChunk = await (opts.fetchChunk || fetchChunk)({
+			username,
+			ciphertextHash: part.hash,
+			ownerEntityHash: manifest.ownerEntityHash,
+			groupId: manifest.transferKeyDescriptor.groupId,
+		})
+		if (!fetchedChunk) return false
+		await putChunk(part.hash, fetchedChunk)
+	}
+	return true
+}
+
 /**
  * @param {string} ownerEntityHash 所有者
  * @param {string} logicalPath 路径
@@ -54,38 +92,14 @@ export async function readManifestPlaintext(replicaUsername, manifest, opts = {}
 	}
 
 	const username = opts.username || replicaUsername
+	if (!await ensureManifestPartsLocal(username, manifest, opts)) return null
+
 	/** @type {Buffer[]} */
 	const partBytes = []
-	for (const part of manifest.parts) {
-		let ciphertextBytes = null
-		if (await hasChunk(part.hash))
-			ciphertextBytes = await getChunk(part.hash)
-		else {
-			const fetchedChunk = await (opts.fetchChunk || fetchChunk)({
-				username,
-				ciphertextHash: part.hash,
-				ownerEntityHash: manifest.ownerEntityHash,
-				groupId: manifest.transferKeyDescriptor.groupId,
-			})
-			if (fetchedChunk) {
-				await putChunk(part.hash, fetchedChunk)
-				ciphertextBytes = Buffer.from(fetchedChunk)
-			}
-		}
-		if (!ciphertextBytes) return null
-		partBytes.push(ciphertextBytes)
-	}
+	for (const part of manifest.parts)
+		partBytes.push(await getChunk(part.hash))
 
-	const rawDeps = resolveTransferKeyDeps(undefined, manifest)
-	const deps = {
-		getGroupFileMasterKey: rawDeps.getGroupFileMasterKey
-			? (groupId, keyGeneration) => rawDeps.getGroupFileMasterKey(replicaUsername, groupId, keyGeneration)
-			: undefined,
-		getVaultMasterKey: rawDeps.getVaultMasterKey
-			? entityHash => rawDeps.getVaultMasterKey(replicaUsername, entityHash)
-			: undefined,
-	}
-	return assembleManifestPlaintext(manifest, partBytes, deps)
+	return assembleManifestPlaintext(manifest, partBytes, transferKeyDepsForReplica(replicaUsername, manifest))
 }
 
 /**
@@ -95,9 +109,22 @@ export async function readManifestPlaintext(replicaUsername, manifest, opts = {}
  * @returns {Promise<import('node:stream').Readable | null>} 明文流
  */
 export async function readManifestPlaintextStream(replicaUsername, manifest, opts = {}) {
-	const plain = await readManifestPlaintext(replicaUsername, manifest, opts)
-	if (!plain) return null
-	return Readable.from(plain)
+	const dagGroupId = manifest.meta?.groupId
+	if (Array.isArray(manifest.meta?.dagParts) && dagGroupId) {
+		const plain = await readManifestPlaintext(replicaUsername, manifest, opts)
+		if (!plain) return null
+		return Readable.from([plain])
+	}
+
+	const username = opts.username || replicaUsername
+	if (!await ensureManifestPartsLocal(username, manifest, opts)) return null
+
+	const deps = transferKeyDepsForReplica(replicaUsername, manifest)
+	const contentKey = await resolveContentKey(manifest.transferKeyDescriptor, manifest, deps)
+	if (manifest.ceMode === 'random' && !contentKey) return null
+
+	const partStreams = manifest.parts.map(part => createChunkReadStream(part.hash))
+	return createManifestPlaintextStream(manifest, partStreams, contentKey)
 }
 
 /**
@@ -178,7 +205,7 @@ export async function putFileManifestFromStream(params) {
 		size: plainSize,
 		contentHash: enc.contentHash,
 		ceMode,
-		parts: enc.parts,
+		parts: manifestPartsForPersist(enc.parts),
 		transferKeyDescriptor: transferKeyDescriptor || publicTransferKeyDescriptor(),
 		meta,
 	})

package/files/manifest.mjs

@@ -3,7 +3,7 @@ import { isHex64 } from '../core/hexIds.mjs'
 
 /** @typedef {'plain' | 'convergent' | 'random'} CeMode */
 
-/** @typedef {{ hash: string, size: number }} ManifestPart */
+/** @typedef {{ hash: string, size: number, contentHash?: string }} ManifestPart */
 
 /**
  * @typedef {{
@@ -48,7 +48,16 @@ export function normalizeFileManifest(input) {
 	if (!CE_MODES.has(ceMode)) return null
 	const parts = Array.isArray(input.parts)
 		? input.parts
-			.map(part => ({ hash: String(part?.hash || '').trim().toLowerCase(), size: Number(part?.size) || 0 }))
+			.map(part => {
+				/** @type {ManifestPart} */
+				const out = {
+					hash: String(part?.hash || '').trim().toLowerCase(),
+					size: Number(part?.size) || 0,
+				}
+				const partContentHash = String(part?.contentHash || '').trim().toLowerCase()
+				if (isHex64(partContentHash)) out.contentHash = partContentHash
+				return out
+			})
 			.filter(part => isHex64(part.hash))
 		: []
 	if (!parts.length) return null

package/files/manifest_acl_registry.mjs

@@ -61,12 +61,6 @@ export function unregisterManifestAclMatcher(ownerId) {
 	matchersByOwner.delete(String(ownerId))
 }
 
-/** @returns {void} */
-export function clearManifestAclRegistry() {
-	handlersByType.clear()
-	matchersByOwner.clear()
-}
-
 /**
  * @param {import('./manifest.mjs').FileManifest | null | undefined} manifest manifest
  * @param {string} ownerEntityHash 所有者

package/files/transfer_key.mjs

@@ -46,17 +46,23 @@ export async function resolveContentKey(descriptor, manifest, deps = {}) {
  * @param {Buffer | Uint8Array} encryptedPartBytes 密文块
  * @param {FileManifest} manifest manifest
  * @param {Buffer | null} contentKey random 模式密钥
+ * @param {number} [partIndex] 分块下标（多块 convergent 用 part.contentHash）
  * @returns {Buffer | null} 明文
  */
-export function decryptPart(encryptedPartBytes, manifest, contentKey) {
+export function decryptPart(encryptedPartBytes, manifest, contentKey, partIndex = 0) {
 	if (manifest.ceMode === 'plain')
 		return Buffer.from(encryptedPartBytes)
 
-	if (manifest.ceMode === 'convergent')
-		return decryptConvergentCiphertext(encryptedPartBytes, manifest.contentHash)
+	if (manifest.ceMode === 'convergent') {
+		const partPlainHash = manifest.parts[partIndex]?.contentHash || manifest.contentHash
+		return decryptConvergentCiphertext(encryptedPartBytes, partPlainHash)
+	}
 
-	if (manifest.ceMode === 'random' && contentKey)
-		return decryptRandomCiphertext(encryptedPartBytes, contentKey, manifest.contentHash)
+	if (manifest.ceMode === 'random' && contentKey) {
+		// 多块时各块明文 hash ≠ 整文件 contentHash；完整性在 assemble 末尾校验
+		const verifyHash = manifest.parts.length === 1 ? manifest.contentHash : ''
+		return decryptRandomCiphertext(encryptedPartBytes, contentKey, verifyHash)
+	}
 
 	return null
 }
@@ -73,7 +79,7 @@ export async function assembleManifestPlaintext(manifest, partBytes, deps = {})
 	/** @type {Buffer[]} */
 	const plains = []
 	for (let index = 0; index < manifest.parts.length; index++) {
-		const plain = decryptPart(partBytes[index], manifest, contentKey)
+		const plain = decryptPart(partBytes[index], manifest, contentKey, index)
 		if (!plain) return null
 		plains.push(plain)
 	}

package/files/transfer_key_registry.mjs

@@ -57,13 +57,6 @@ export function unregisterTransferKeyDeps(ownerId) {
 	unregisterManifestOwnerMatchers(key)
 }
 
-/** @returns {void} */
-export function clearTransferKeyRegistry() {
-	transferDepsByOwner.clear()
-	dagPlaintextReadersByOwner.clear()
-	manifestOwnerMatchers.length = 0
-}
-
 /**
  * 从 manifest 推断 transfer key 注册方 id（按 registerManifestOwnerMatcher 注册顺序匹配）。
  * @param {import('./manifest.mjs').FileManifest} manifest 清单

package/governance/branch.mjs

@@ -93,17 +93,6 @@ export function descendantClosureFromTip(rootId, byId) {
 	return out
 }
 
-/**
- * 事件是否在 root 的后代闭包中（含 root）。
- * @param {string} eventId 事件 id
- * @param {string} rootId 根 id
- * @param {Map<string, object>} byId id→事件
- * @returns {boolean} 是否为 root 的后代（含 root 自身）
- */
-export function isDescendantOfTip(eventId, rootId, byId) {
-	return descendantClosureFromTip(rootId, byId).has(eventId)
-}
-
 /**
  * @param {string} tipId 叶 id
  * @param {Map<string, object>} byId id→事件

package/link/channel_mux.mjs

@@ -38,6 +38,8 @@ const DEFAULT_ACTION_PRIORITIES = Object.freeze({
 	discovery_query_response: 3,
 	part_invoke: 3,
 	part_invoke_response: 3,
+	part_query_req: 5,
+	part_query_res: 5,
 	char_rpc: 3,
 	fed_chunk_put: 5,
 	fed_chunk_get: 5,

package/mailbox/importance.mjs

@@ -6,39 +6,6 @@
 
 const TIER_ORDER = { quarantine: 0, normal: 1, trusted: 2 }
 
-/**
- * @param {number} score 信誉分
- * @returns {MailboxTier} 分层
- */
-export function mailboxTierFromScore(score) {
-	const numericScore = Number(score)
-	if (!Number.isFinite(numericScore)) return 'quarantine'
-	if (numericScore >= 0.45) return 'trusted'
-	if (numericScore >= 0.12) return 'normal'
-	return 'quarantine'
-}
-
-/**
- * @param {object} opts 参数
- * @param {number} [opts.senderScore] 发件方信誉
- * @param {number} [opts.recipientScore] 收件方关系信誉（可选）
- * @param {boolean} [opts.knownMember] 是否本地已知成员/节点
- * @param {number} [opts.hop] 转发跳数
- * @returns {{ tier: MailboxTier, score: number }} 分层与分数
- */
-export function scoreMailboxImportance(opts = {}) {
-	const sender = Number(opts.senderScore ?? 0)
-	const recipient = Number(opts.recipientScore ?? sender)
-	const known = !!opts.knownMember
-	const hop = Math.max(0, Number(opts.hop) || 0)
-	let score = sender * 0.65 + recipient * 0.35
-	if (known) score += 0.15
-	score -= hop * 0.08
-	if (score < 0) score = 0
-	if (score > 1) score = 1
-	return { tier: mailboxTierFromScore(score), score }
-}
-
 /**
  * 按 tier 与 storedAt 排序（低 tier 先淘汰）。
  * @param {object[]} rows 记录

package/mailbox/settings.mjs

@@ -1,4 +1,3 @@
-import { getNodeTransportSettings } from '../node/identity.mjs'
 import {
 	resolveMailboxRelayFanout,
 	resolveMailboxWantFanout,
@@ -43,11 +42,3 @@ export function resolveMailboxRoutingForPeerCount(peerCount, raw = {}, batterySa
 		batterySaver: true,
 	}
 }
-
-/**
- * @returns {{ maxHop: number, relayFanoutTrusted: number, relayFanoutNormal: number, wantFanout: number, batterySaver: boolean }} mailbox 路由配置
- */
-export function getMailboxRoutingSettings() {
-	const { batterySaver, mailbox } = getNodeTransportSettings()
-	return resolveMailboxRoutingForPeerCount(0, mailbox, batterySaver)
-}

package/node/denylist.mjs

@@ -56,13 +56,6 @@ function buildDenylistIndex(blocked) {
 	return index
 }
 
-/**
- * @returns {void}
- */
-export function invalidateDenylistIndex() {
-	cachedIndex = null
-}
-
 /**
  * @returns {DenylistIndex} 缓存索引
  */
@@ -244,23 +237,6 @@ export async function addDenylistFromBanContent(banContent, groupId) {
 		await addDenylistEntry({ scope: 'subject', value: pk, ...sourceGroupId ? { groupId: sourceGroupId } : {} })
 }
 
-/**
- * @param {string} entityHash 128 位十六进制
- * @param {boolean} block true=拉黑
- * @returns {Promise<boolean>} 当前是否拉黑
- */
-export async function setEntityBlocked(entityHash, block) {
-	const id = String(entityHash || '').trim().toLowerCase()
-	if (!isEntityHash128(id)) throw new Error('invalid entityHash')
-	await mutateDenylist(() => {
-		const list = loadDenylist()
-		const without = list.blocked.filter(e => !(e.scope === 'entity' && e.value === id))
-		if (block) without.push({ scope: 'entity', value: id })
-		saveDenylist({ blocked: without })
-	})
-	return block
-}
-
 /**
  * 追加群 scope 拉黑项。
  * @param {string} groupId 群 ID

package/node/network.mjs

@@ -121,20 +121,6 @@ export function saveNetwork(data) {
 	invalidateTrustGraphCache()
 }
 
-/**
- * @param {string} nodeHash 64 位十六进制
- * @param {'trusted' | 'explore'} tier 池档位
- * @returns {void}
- */
-export function addNetworkPeer(nodeHash, tier = 'explore') {
-	const id = normalizeHex64(nodeHash)
-	if (!isHex64(id)) return
-	const net = loadNetwork()
-	const list = tier === 'trusted' ? net.trustedPeers : net.explorePeers
-	if (!list.includes(id)) list.push(id)
-	saveNetwork(net)
-}
-
 /**
  * @param {{ nodeHash: string, source: string, kind: string, weight?: number, expiresAt?: number, ttlMs?: number, groupId?: string }} hint 扩边 hint
  * @returns {void}
@@ -165,35 +151,6 @@ export function applyNetworkHint(hint) {
 	saveNetwork(net)
 }
 
-/**
- * @param {{ remoteNodeHash?: string }[]} roster Trystero roster
- * @param {string} [groupId] 来源群
- * @param {string} [source='roster'] hint 来源标签
- * @returns {void}
- */
-export function recordExplorePeersFromRoster(roster, groupId = '', source = 'roster') {
-	if (!roster?.length) return
-	const net = loadNetwork()
-	const now = Date.now()
-	for (const peer of roster) {
-		const nodeHash = normalizeHex64(peer?.remoteNodeHash)
-		if (!isHex64(nodeHash)) continue
-		if (!net.explorePeers.includes(nodeHash))
-			net.explorePeers.push(nodeHash)
-		net.hints.push({
-			nodeHash,
-			source: String(source || 'roster'),
-			kind: 'roster',
-			weight: 0.1,
-			expiresAt: now + 24 * 60 * 60 * 1000,
-			...groupId ? { groupId: String(groupId).trim() } : {},
-		})
-	}
-	net.hints = capHintsBySource(net.hints).slice(-MAX_HINTS)
-	net.lastRosterAt = now
-	saveNetwork(net)
-}
-
 /**
  * 疑似分区/eclipse 后：用 trusted 锚点加宽 explore，便于恢复联邦可达。
  * @returns {void}
@@ -239,14 +196,6 @@ export function mergeNetworkPeerPools(patch = {}) {
 	saveNetwork(net)
 }
 
-/**
- * @param {string[]} nodeHashes trusted 候选
- * @returns {void}
- */
-export function mergeTrustedPeers(nodeHashes) {
-	mergeNetworkPeerPools({ trustedPeers: nodeHashes })
-}
-
 /**
  * @param {string} groupId 群 scope
  * @param {'node' | 'subject' | 'entity'} scope denylist 作用域