@steve02081504/fount-p2p 0.0.41 → 0.0.43

package/overlay/index.mjs

@@ -1,29 +1,52 @@
 import { Buffer } from 'node:buffer'
 
+import { canonicalStringify } from '../core/canonical_json.mjs'
 import { pubKeyHash, sign, verify } from '../crypto/crypto.mjs'
 import { randomFrameIdHex } from '../link/frame.mjs'
 import { createLruMap } from '../utils/lru.mjs'
+import { consumeToken } from '../utils/token_bucket.mjs'
+
+import overlayTunables from './tunables.json' with { type: 'json' }
 
 const ROUTE_DOMAIN = 'fount-route'
+const RELAY_DOMAIN = 'fount-relay'
+
+/** 默认 overlay 限速桶；不依赖 infra 启动，`startNode` 单独使用时也生效。 */
+const defaultOverlayRateBuckets = new Map()
+/** @type {{ perMin: number, burst: number }} */
+const DEFAULT_OVERLAY_RATE_LIMITS = {
+	perMin: Math.max(1, Number(overlayTunables.overlayRatePerMin) || 120),
+	burst: Math.max(1, Number(overlayTunables.overlayRateBurst) || 30),
+}
+
+/**
+ * @param {string} senderNodeHash 发送方节点
+ * @param {string} action overlay 动作
+ * @returns {boolean} 是否允许
+ */
+function defaultOverlayRateGate(senderNodeHash, action) {
+	if (action !== 'route_req' && action !== 'relay') return true
+	return consumeToken(defaultOverlayRateBuckets, senderNodeHash, Date.now(), DEFAULT_OVERLAY_RATE_LIMITS)
+}
 
-/** @type {((senderNodeHash: string, action: string) => boolean) | null} */
-let overlayRateGate = null
+/** @type {((senderNodeHash: string, action: string) => boolean)} */
+let overlayRateGate = defaultOverlayRateGate
 
 /**
- * 安装 overlay 入站限速门（返回 false 则丢弃）。
+ * 安装 overlay 入站限速门（返回 false 则丢弃）。传 null 恢复默认限速。
  * @param {((senderNodeHash: string, action: string) => boolean) | null} rateGate 返回 false 则丢弃
  * @returns {void}
  */
 export function setOverlayRateGate(rateGate) {
-	overlayRateGate = rateGate || null
+	overlayRateGate = rateGate || defaultOverlayRateGate
 }
 
 /**
- * 清除 overlay 限速门。
+ * 清除自定义 overlay 限速门，恢复默认限速。
  * @returns {void}
  */
 export function clearOverlayRateGate() {
-	overlayRateGate = null
+	overlayRateGate = defaultOverlayRateGate
 }
 
 /**
@@ -36,6 +59,17 @@ function routeSignBytes(reqId, path) {
 	return Buffer.from(`${ROUTE_DOMAIN}\0${reqId}\0${path.join(',')}`, 'utf8')
 }
 
+/**
+ * 构造 relay 源身份签名用的字节序列。覆盖完整 path 与 body：
+ * 末端据此确认 path[0] 确为原始发送者，且路径与载荷未被中间节点篡改。
+ * @param {string[]} path 完整节点路径
+ * @param {unknown} body relay 载荷
+ * @returns {Uint8Array} 待签名字节
+ */
+function relaySignBytes(path, body) {
+	return Buffer.from(`${RELAY_DOMAIN}\0${path.join(',')}\0${canonicalStringify(body)}`, 'utf8')
+}
+
 /**
  * 创建 overlay 多跳路由与 relay 路由器。
  * @param {object} registry link registry（含 localIdentity、sendToNodeLink、listLinks、subscribeScope）
@@ -47,7 +81,7 @@ export function createOverlayRouter(registry, ttl = 3) {
 	const selfPubKey = registry.localIdentity.nodePubKey
 	const { secretKey } = registry.localIdentity
 	const seenReqs = createLruMap(4096)
-	/** @type {Map<string, { resolve: (path: string[]) => void, reject: (error: Error) => void, timer: number }>} */
+	/** @type {Map<string, { resolve: (path: string[]) => void, reject: (error: Error) => void, timer: number, target: string }>} */
 	const pendingRoutes = new Map()
 	/** @type {Set<(body: unknown, meta: { path: string[], from: string }) => void>} */
 	const relayListeners = new Set()
@@ -118,6 +152,8 @@ export function createOverlayRouter(registry, ttl = 3) {
 			if (path[0] === selfNodeHash) {
 				const pending = pendingRoutes.get(reqId)
 				if (!pending) return
+				// 终点必须就是本次发现的目标，否则任何直连邻居都能回一条以自己结尾的合法路径劫持路由。
+				if (path[path.length - 1] !== pending.target) return
 				clearTimeout(pending.timer)
 				pendingRoutes.delete(reqId)
 				pending.resolve(path)
@@ -132,6 +168,17 @@ export function createOverlayRouter(registry, ttl = 3) {
 			const path = payload.path || []
 			const index = Number(payload.idx)
 			if (!path.length || path[index] !== selfNodeHash) return
+			// origin 必须对 (path, body) 签名，否则任何直连 peer 都能伪造 path[0] 冒充发送者。
+			const originPubKey = payload.nodePubKey
+			const sigHex = payload.sig
+			if (typeof originPubKey !== 'string' || typeof sigHex !== 'string') return
+			if (pubKeyHash(Buffer.from(originPubKey, 'hex')) !== path[0]) return
+			const ok = await verify(
+				Buffer.from(sigHex, 'hex'),
+				relaySignBytes(path, payload.body),
+				Buffer.from(originPubKey, 'hex'),
+			)
+			if (!ok) return
 			if (index === path.length - 1) {
 				for (const listener of relayListeners)
 					listener(payload.body, { path, from: senderNodeHash })
@@ -142,6 +189,8 @@ export function createOverlayRouter(registry, ttl = 3) {
 				path,
 				idx: index + 1,
 				body: payload.body,
+				nodePubKey: originPubKey,
+				sig: sigHex,
 			})
 		}
 	}
@@ -166,7 +215,7 @@ export function createOverlayRouter(registry, ttl = 3) {
 					pendingRoutes.delete(reqId)
 					reject(new Error(`overlay: route discovery timeout for ${targetNodeHash}`))
 				}, timeoutMs)
-				pendingRoutes.set(reqId, { resolve, reject, timer })
+				pendingRoutes.set(reqId, { resolve, reject, timer, target: targetNodeHash })
 			})
 			for (const { nodeHash } of registry.listLinks())
 				await sendOverlay(nodeHash, {
@@ -187,7 +236,15 @@ export function createOverlayRouter(registry, ttl = 3) {
 		async relay(path, body) {
 			if (path?.[0] !== selfNodeHash || path.length < 2)
 				throw new Error('overlay: invalid relay path')
-			await sendOverlay(path[1], { action: 'relay', path, idx: 1, body })
+			const signature = await sign(relaySignBytes(path, body), secretKey)
+			await sendOverlay(path[1], {
+				action: 'relay',
+				path,
+				idx: 1,
+				body,
+				nodePubKey: selfPubKey,
+				sig: Buffer.from(signature).toString('hex'),
+			})
 		},
 		/**
 		 * 订阅 relay 到达本节点（路径末端）的载荷。

package/overlay/tunables.json

@@ -0,0 +1,4 @@
+{
+	"overlayRatePerMin": 120,
+	"overlayRateBurst": 30
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@steve02081504/fount-p2p",
-	"version": "0.0.41",
+	"version": "0.0.43",
 	"description": "fount federation P2P layer — link, trust graph, mailbox, DAG, EVFS.",
 	"keywords": [
 		"network",
@@ -84,7 +84,7 @@
 	"optionalDependencies": {
 		"@stoprocent/bleno": "latest",
 		"@stoprocent/noble": "latest",
-		"node-datachannel": "0.33.0"
+		"node-datachannel": "latest"
 	},
 	"allowScripts": {
 		"node-datachannel": true

package/pages/index.html

@@ -17,7 +17,7 @@
 </head>
 <body>
 	<h1>fount 节点人口统计</h1>
-	<p>基于 Nostr census 事件（kind 30789，<code>t=fount</code> / <code>x=census</code>）的采样估计。本页为独立前端实现，仅做展示：在线节点数 = <code>Σ(1/p)</code>（Horvitz–Thompson 估计）。</p>
+	<p>基于 Nostr census 事件（kind 30789，<code>t=fount</code> / <code>x=census</code>）的采样估计。监听逻辑由包内 <code>census_monitor</code> 封装：自动监听默认/传入 relay 并经 NIP-66 发现更多，取人口最大的 relay 作为显示源。在线节点数 = <code>Σ(1/p)</code>（Horvitz–Thompson 估计）。</p>
 	<label>
 		<input type="checkbox" id="toggle" checked>
 		人口统计（census）
@@ -30,7 +30,7 @@
 	<div class="card">
 		<div>采样事件数 <span id="sample-size">0</span> · 窗口内事件 <span id="window-events">0</span></div>
 	</div>
-	<footer id="footer" style="opacity:.6;font-size:.85rem"></footer>
-	<script type="module" src="./app.mjs"></script>
+	<footer id="footer" style="opacity:.6;font-size:.85rem">通过 URL 参数 ?relay=wss://... 指定中继；缺省监听默认 relay。</footer>
+	<script type="module" src="./index.mjs"></script>
 </body>
 </html>

package/pages/index.mjs

@@ -0,0 +1,62 @@
+/**
+ * fount 人口统计前端（薄壳，逻辑由包内 `census_monitor` 封装）。
+ * - `createPopulationMonitor` 自动监听全部默认（或传入）relay、经 NIP-66 发现更多，
+ *   并取人口估计最大的 relay 作为显示源，把 `{ estimate, sampleSize, eventsInWindow, relayUrl, relays }`
+ *   快照连同 relay 地址传给 onUpdate。
+ * - 页面只负责：导入监控器、传显示函数与可选 relay 地址。
+ */
+import { createPopulationMonitor } from 'https://esm.sh/@steve02081504/fount-p2p/discovery/nostr/census_monitor.mjs'
+
+const statusEl = document.querySelector('#status')
+const toggleEl = document.querySelector('#toggle')
+
+const params = new URLSearchParams(location.search)
+const relayUrl = params.get('relay')
+
+/** @type {{ stop: () => void } | null} */
+let monitor = null
+
+/**
+ * @param {{ estimate: number, sampleSize: number, eventsInWindow: number }} snapshot 快照
+ * @returns {void}
+ */
+function render(snapshot) {
+	document.querySelector('#estimate').textContent = snapshot.estimate.toLocaleString('zh-CN', { maximumFractionDigits: 1 })
+	document.querySelector('#sample-size').textContent = String(snapshot.sampleSize)
+	document.querySelector('#window-events').textContent = String(snapshot.eventsInWindow)
+}
+
+/** @returns {void} 启动 live 监控（默认/传入 relay 全交给库） */
+function startLive() {
+	if (monitor) return
+	try {
+		monitor = createPopulationMonitor({
+			relays: relayUrl ? [relayUrl] : undefined,
+			onUpdate: snapshot => {
+				render(snapshot)
+				statusEl.textContent = `监听 ${snapshot.relayUrl}（census，共 ${snapshot.relays} 个 relay）`
+			},
+		})
+	}
+	catch (error) {
+		statusEl.textContent = `中继配置无效：${String(error?.message || error)}`
+	}
+}
+
+/** @returns {void} 停止监控 */
+function stopLive() {
+	monitor?.stop()
+	monitor = null
+}
+
+toggleEl.addEventListener('change', () => {
+	if (!toggleEl.checked) {
+		stopLive()
+		render({ estimate: 0, sampleSize: 0, eventsInWindow: 0 })
+		statusEl.textContent = '已关闭'
+		return
+	}
+	startLive()
+})
+
+if (toggleEl.checked) startLive()

package/reputation/engine.mjs

@@ -57,7 +57,7 @@ export function computeRecidivismMultiplier(streak, tunables = reputationTunable
  * @returns {NonNullable<ReputationFile['byNodeHash'][string]>} 节点行（可变引用）
  */
 function ensureRow(data, nodeId) {
-	if (!data.byNodeHash[nodeId]) data.byNodeHash[nodeId] = { score: 0 }
+	if (!Object.hasOwn(data.byNodeHash, nodeId)) data.byNodeHash[nodeId] = { score: 0 }
 	return data.byNodeHash[nodeId]
 }
 
@@ -147,7 +147,8 @@ export function incrementBadInviteeCount(data, nodeId, badDelta = 1) {
  * @returns {ReputationFile} 补齐字段后的同一对象
  */
 export function ensureReputationShape(data) {
-	data.byNodeHash ??= {}
+	// 无原型字典：键来自不可信 nodeHash，普通 `{}` 会让 `__proto__` 命中 Object.prototype（原型污染）。
+	data.byNodeHash = Object.assign(Object.create(null), data.byNodeHash ?? {})
 	data.wantUnknownHits ??= []
 	data.relayBumpSeen ??= []
 	return data

package/schemas/part_query.mjs

@@ -1,7 +1,7 @@
 import { Buffer } from 'node:buffer'
 
 import { canonicalStringify } from '../core/canonical_json.mjs'
-import { isHex64 } from '../core/hexIds.mjs'
+import { isHex64, isSignatureHex128 } from '../core/hexIds.mjs'
 import { isPlainObject } from '../core/object.mjs'
 import { parsePartpath } from '../core/partpath.mjs'
 
@@ -24,6 +24,8 @@ import partQueryTunables from './part_query.tunables.json' with { type: 'json' }
  *   requestId: string
  *   fromNodeHash: string
  *   rows: unknown[]
+ *   nodePubKey: string
+ *   sig: string
  * }} PartQueryRes
  */
 
@@ -132,9 +134,14 @@ export function parsePartQueryRes(value, tunables = partQueryTunables) {
 	if (!requestId) return null
 	const fromNodeHash = isHex64(value.fromNodeHash)
 	if (!fromNodeHash) return null
+	// 响应必须自证来源：nodePubKey 的哈希即 fromNodeHash，sig 覆盖 (requestId, fromNodeHash, rows)。
+	const nodePubKey = isHex64(value.nodePubKey)
+	if (!nodePubKey) return null
+	const sig = isSignatureHex128(value.sig)
+	if (!sig) return null
 	const rows = clampPartQueryRows(value.rows, tunables.maxHits, tunables.maxRowsBytes)
 	if (!rows) return null
-	return { requestId, fromNodeHash, rows }
+	return { requestId, fromNodeHash, rows, nodePubKey, sig }
 }
 
 /**

package/transport/offer_answer.mjs

@@ -5,9 +5,30 @@ import { decryptNodeSignalPacket, sendNodeSignalPacket } from '../discovery/inde
 import { listLinkProviders } from '../link/providers/index.mjs'
 import { nodeDebug, shortHash } from '../node/log.mjs'
 
+import { loadTransportTunables } from './tunables.mjs'
+
 /** accept/dial 挂起期间 ICE 信令 backlog 上限 */
 const SIGNAL_BACKLOG_MAX = 64
 
+/** 并发信令会话上限（按插入序淘汰最旧）。 */
+const MAX_SIGNAL_SESSIONS = Math.max(1, Math.floor(Number(loadTransportTunables().maxSignalSessions) || 256))
+
+/**
+ * 入站 offer 可被攻击者用任意 connId 无上限创建会话；建新会话前淘汰到低于上限。
+ * @param {Map<string, { clear: () => void }>} sessions 信令会话表
+ * @param {number} maxSize 上限
+ * @returns {void}
+ */
+export function ensureSignalSessionBudget(sessions, maxSize) {
+	const cap = Math.max(1, Math.floor(Number(maxSize) || 1))
+	while (sessions.size >= cap) {
+		const oldest = sessions.keys().next().value
+		if (oldest === undefined) return
+		sessions.get(oldest)?.clear?.()
+		sessions.delete(oldest)
+	}
+}
+
 /**
  * @param {(message: unknown) => Promise<void>} sendRemote 远端发送回调
  * @returns {object} 信令会话
@@ -114,7 +135,8 @@ export function createOfferAnswerDial(deps) {
 	 */
 	async function buildConnLink({ provider, remoteNodeHash, connId, session, initiator }) {
 		try {
-			if (initiator) await trimToBudget()
+			// 被动 accept 同样受活跃链路预算约束，否则攻击者可无上限占用连接。
+			await trimToBudget()
 			const link = await (initiator ? provider.dial : provider.accept)({
 				nodeHash: remoteNodeHash,
 				signal: session,
@@ -165,6 +187,7 @@ export function createOfferAnswerDial(deps) {
 				peer: shortHash(remoteNodeHash),
 				provider: provider.id,
 			})
+			ensureSignalSessionBudget(signalSessions, MAX_SIGNAL_SESSIONS)
 			session = createConnSession(remoteNodeHash, connId)
 			signalSessions.set(connId, session)
 			void buildConnLink({ provider, remoteNodeHash, connId, session, initiator: false })
@@ -195,6 +218,7 @@ export function createOfferAnswerDial(deps) {
 	async function dialOfferAnswer(provider, remoteNodeHash) {
 		const connId = randomBytes(16).toString('hex')
 		const session = createConnSession(remoteNodeHash, connId)
+		ensureSignalSessionBudget(signalSessions, MAX_SIGNAL_SESSIONS)
 		signalSessions.set(connId, session)
 		return await buildConnLink({ provider, remoteNodeHash, connId, session, initiator: true })
 	}

package/transport/tunables.json

@@ -7,5 +7,6 @@
 	"meshNLow": 4,
 	"meshKMaxLow": 2,
 	"groupMemberScanIntervalMs": 30000,
-	"groupMemberScanLimit": 64
+	"groupMemberScanLimit": 64,
+	"maxSignalSessions": 256
 }

package/utils/token_bucket.mjs

@@ -0,0 +1,25 @@
+/**
+ * 令牌桶限速：桶容量 burst，补充速率 perMin/分钟。
+ * @param {Map<string, { tokens: number, updatedAt: number }>} buckets 每键桶状态
+ * @param {string} key 桶键（如发送方 nodeHash）
+ * @param {number} now 当前时间戳（ms）
+ * @param {{ perMin: number, burst: number }} limits 限速参数
+ * @returns {boolean} 是否允许本次消费
+ */
+export function consumeToken(buckets, key, now, limits) {
+	const perMin = Math.max(1, limits.perMin)
+	const burst = Math.max(1, limits.burst)
+	const refillPerMs = perMin / 60_000
+	let bucket = buckets.get(key)
+	if (!bucket) bucket = { tokens: burst, updatedAt: now }
+	const elapsed = Math.max(0, now - bucket.updatedAt)
+	bucket.tokens = Math.min(burst, bucket.tokens + elapsed * refillPerMs)
+	bucket.updatedAt = now
+	if (bucket.tokens < 1) {
+		buckets.set(key, bucket)
+		return false
+	}
+	bucket.tokens -= 1
+	buckets.set(key, bucket)
+	return true
+}

package/wire/part/query.mjs

@@ -61,7 +61,7 @@ export function attachPartQueryWire(wireContext, wire, dependencies = {}) {
 		part_query_res(data, peerId) {
 			const response = parsePartQueryRes(data)
 			if (!response) return
-			handleIncomingPartQueryResponse(response, peerId, deps)
+			void handleIncomingPartQueryResponse(response, peerId, deps)
 		},
 	})
 }

package/pages/app.mjs

@@ -1,172 +0,0 @@
-/**
- * fount 人口统计前端（独立实现，不依赖包内代码）。
- * - 浏览器原生 WebSocket 订阅 Nostr 中继 kind=30789 / #t=fount / #x=census。
- * - 本地用 @noble 验签（懒加载，仅 live 模式需要）。
- * - 在线节点数估计 = Σ(1/p)（HT）。
- * - `?demo=1`（或无 relay 参数）进入演示模式：喂入 20 条 p=0.1 的样本 → 估计 200。
- */
-const CENSUS_KIND = 30789
-const CENSUS_TTL_MS = 10 * 60_000
-const CENSUS_SUB_ID = 'census'
-const CENSUS_MIN_P = 0.001
-/** relay 帧 content 最大长度（超出直接丢弃，避免先 Base64 解码再被拒）。 */
-const MAX_FRAME_BYTES = 16 * 1024
-/** 并发验签任务上限；达上限时多余帧直接丢弃。 */
-const MAX_INFLIGHT_VERIFICATIONS = 8
-
-const statusEl = document.querySelector('#status')
-const toggleEl = document.querySelector('#toggle')
-
-const params = new URLSearchParams(location.search)
-const relayUrl = params.get('relay')
-const demoMode = params.get('demo') === '1' || !relayUrl
-
-/** @type {Map<string, { p: number, at: number }>} */
-const events = new Map()
-let webSocket = null
-let enabled = true
-let inflightVerifications = 0
-
-/**
- * HT 估计；遍历时逐出过期事件，避免窗口 Map 持续增长。
- * @returns {{ estimate: number, sampleSize: number }} 估计与采样数
- */
-function estimatePopulation() {
-	let total = 0
-	let sampleSize = 0
-	const now = Date.now()
-	for (const [hash, { p, at }] of events) {
-		if (!Number.isFinite(at) || now - at > CENSUS_TTL_MS) { events.delete(hash); continue }
-		total += 1 / p
-		sampleSize++
-	}
-	return { estimate: total, sampleSize }
-}
-
-let noblePromise = null
-/** @returns {Promise<[object, object]>} noble 模块 */
-function loadNoble() {
-	return noblePromise ||= Promise.all([
-		import('https://esm.sh/@noble/curves@1/ed25519.js'),
-		import('https://esm.sh/@noble/hashes@1/sha2.js'),
-	])
-}
-
-/**
- * 校验 census 包：nodeHash=sha256(nodePubKey) 且 Ed25519 签名匹配 `fount-census\0ts\0nodeHash\0p`。
- * @param {object} packet 原始包
- * @returns {Promise<{ nodeHash: string, p: number, ts: number } | null>} 验签结果
- */
-async function verifyCensusPacket(packet) {
-	const nodeHash = /^[\da-f]{64}$/u.test(String(packet?.nodeHash ?? '')) ? packet.nodeHash : null
-	const nodePubKey = /^[\da-f]{64}$/u.test(String(packet?.nodePubKey ?? '')) ? packet.nodePubKey : null
-	const sig = /^[\da-f]{128}$/u.test(String(packet?.sig ?? '')) ? packet.sig : null
-	const ts = Number(packet?.ts)
-	const p = Number(packet?.p)
-	if (!nodeHash || !nodePubKey || !sig || !Number.isFinite(ts)) return null
-	if (Math.abs(Date.now() - ts) > CENSUS_TTL_MS) return null
-	if (!Number.isFinite(p) || p < CENSUS_MIN_P || p > 1) return null
-	const [{ ed25519 }, { sha256 }] = await loadNoble()
-	const pubBytes = new Uint8Array(nodePubKey.match(/.{2}/gu).map(hex => parseInt(hex, 16)))
-	if ([...sha256(pubBytes)].map(byte => byte.toString(16).padStart(2, '0')).join('') !== nodeHash) return null
-	const ok = ed25519.verify(
-		new Uint8Array(sig.match(/.{2}/gu).map(hex => parseInt(hex, 16))),
-		new TextEncoder().encode(`fount-census\0${ts}\0${nodeHash}\0${p}`),
-		pubBytes,
-	)
-	return ok ? { nodeHash, p, ts } : null
-}
-
-/** @param {{ nodeHash: string, p: number, ts: number }} verified 已验签 census 包 @returns {void} */
-function ingest(verified) {
-	const existing = events.get(verified.nodeHash)
-	if (existing && verified.ts < existing.at) return
-	events.set(verified.nodeHash, { p: verified.p, at: verified.ts })
-	render()
-}
-
-/** @returns {void} 渲染人口估计 */
-function render() {
-	const { estimate, sampleSize } = estimatePopulation()
-	document.querySelector('#estimate').textContent = estimate.toLocaleString('zh-CN', { maximumFractionDigits: 1 })
-	document.querySelector('#sample-size').textContent = String(sampleSize)
-	document.querySelector('#window-events').textContent = String(events.size)
-}
-
-/** @returns {void} 注入演示数据 */
-function seedDemo() {
-	events.clear()
-	for (let index = 0; index < 20; index++)
-		events.set((index + 1).toString(16).padStart(2, '0').repeat(32), { p: 0.1, at: Date.now() })
-	statusEl.textContent = '演示模式：20 条 p=0.1 样本（HT 估计 = 200）'
-	document.querySelector('#footer').textContent = '演示模式样本为虚构数据；添加 ?relay=wss://... 进入 live 模式。'
-}
-
-/** @returns {void} 连接中继并订阅 */
-function connectRelay() {
-	if (webSocket) {
-		try { webSocket.close() } catch { /* ignore */ }
-		webSocket = null
-	}
-	if (!relayUrl || !enabled) return
-	statusEl.textContent = `连接 ${relayUrl} …`
-	const connection = new WebSocket(relayUrl)
-	webSocket = connection
-	/** WebSocket 已连接后发送 REQ 订阅 census 事件。 */
-	connection.onopen = () => {
-		if (connection !== webSocket || !enabled) return
-		connection.send(JSON.stringify(['REQ', CENSUS_SUB_ID, { kinds: [CENSUS_KIND], '#t': ['fount'], '#x': ['census'] }]))
-		statusEl.textContent = `监听 ${relayUrl}（kind ${CENSUS_KIND}）`
-	}
-	/**
-	 * @param {MessageEvent} rawMessage 中继消息事件
-	 * @returns {void}
-	 */
-	connection.onmessage = rawMessage => {
-		if (connection !== webSocket || !enabled) return
-		if (inflightVerifications >= MAX_INFLIGHT_VERIFICATIONS) return
-		if (typeof rawMessage.data !== 'string' || rawMessage.data.length > MAX_FRAME_BYTES) return
-		let parsed
-		try { parsed = JSON.parse(String(rawMessage.data)) } catch { return }
-		if (parsed?.[0] !== 'EVENT' || parsed[1] !== CENSUS_SUB_ID) return
-		if (parsed[2]?.kind !== CENSUS_KIND) return
-		const content = parsed[2]?.content
-		if (typeof content !== 'string' || content.length > MAX_FRAME_BYTES) return
-		inflightVerifications++
-		void (async () => {
-			try {
-				const verified = await verifyCensusPacket(JSON.parse(atob(content)))
-				if (connection !== webSocket || !enabled) return
-				if (verified) ingest(verified)
-			}
-			catch { /* ignore malformed */ }
-			finally { inflightVerifications-- }
-		})()
-	}
-	/** WebSocket 关闭时更新状态为已断开。 */
-	connection.onclose = () => {
-		if (connection !== webSocket || !enabled) return
-		statusEl.textContent = '已断开'
-	}
-	/** WebSocket 出错时提示中继连接失败。 */
-	connection.onerror = () => {
-		if (connection !== webSocket || !enabled) return
-		statusEl.textContent = '中继连接失败'
-	}
-}
-
-toggleEl.addEventListener('change', () => {
-	enabled = toggleEl.checked
-	if (!enabled) {
-		events.clear()
-		if (webSocket) { try { webSocket.close() } catch { /* ignore */ } webSocket = null }
-		statusEl.textContent = '已关闭'
-	}
-	else if (demoMode) seedDemo()
-	else connectRelay()
-	render()
-})
-
-if (demoMode) seedDemo()
-else connectRelay()
-render()