@harrylabsj/kiwi 0.8.0 → 0.10.0

package/dist/agent/merchant/types.js

@@ -64,6 +64,51 @@ export function parseMerchantCatalogProduct(value) {
         handoff_destination: typeof v.handoff_destination === "string" ? v.handoff_destination : undefined,
     };
 }
+/**
+ * 解析商品创建入参（白名单 + 类型校验；MCP/命令面共用）。merchant_id 强制
+ * 归属商家：缺省补 ownerId，传入不一致直接拒绝（防跨租户写）。非数值/负数
+ * price、负数或非整数 stock 一律拒绝——审批前的 prepare 即失败，不烧人工确认。
+ */
+export function parseProductCreateInput(value, ownerId) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new TypeError("product 必须是对象");
+    }
+    const v = value;
+    const merchantId = typeof v.merchant_id === "string" && v.merchant_id !== "" ? v.merchant_id : ownerId;
+    if (merchantId !== ownerId) {
+        throw new TypeError(`product.merchant_id 与本实例商家不一致（不允许跨商家创建）`);
+    }
+    const sku = typeof v.sku === "string" ? v.sku.trim() : "";
+    if (sku === "")
+        throw new TypeError("product.sku 必须是非空字符串");
+    const title = typeof v.title === "string" ? v.title.trim() : "";
+    if (title === "")
+        throw new TypeError("product.title 必须是非空字符串");
+    if (typeof v.price !== "number" || !Number.isFinite(v.price) || v.price < 0) {
+        throw new TypeError("product.price 必须是非负有限数值");
+    }
+    if (typeof v.stock !== "number" || !Number.isInteger(v.stock) || v.stock < 0) {
+        throw new TypeError("product.stock 必须是非负整数");
+    }
+    const input = {
+        merchant_id: merchantId,
+        sku,
+        title,
+        price: v.price,
+        stock: v.stock,
+    };
+    if (typeof v.currency === "string" && v.currency !== "")
+        input.currency = v.currency;
+    if (typeof v.category === "string" && v.category !== "")
+        input.category = v.category;
+    if (typeof v.description === "string")
+        input.description = v.description;
+    if (Array.isArray(v.tags))
+        input.tags = stringArray(v.tags, "product.tags");
+    if (Array.isArray(v.delivery_attributes))
+        input.delivery_attributes = stringArray(v.delivery_attributes, "product.delivery_attributes");
+    return input;
+}
 export function parseInventorySnapshot(value, sku) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         fail("inventory snapshot must be an object");

package/dist/agent/merchant/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agent/merchant/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA+GH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAoD;IACjE,YAAY,IAAiC,EAAE,OAAe;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,+EAA+E;AAE/E,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,mBAAmB,CAAC,YAAY,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,EAAU;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,EAAU;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,EAAU;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,qBAAqB,CAAC;QAC5D,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC;QAC1C,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACnE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC1D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;QACtE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QAC7D,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACvD,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;YACnE,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK;QACrE,mBAAmB,EAAE,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;KACnG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,GAAW;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC5C,KAAK,EACH,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAC9B,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACZ,CAAC,CAAC,SAAS;QACjB,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,mEAAmE;IACnE,2EAA2E;IAC3E,MAAM,cAAc,GAClB,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACnC,CAAC,CAAC,CAAC,CAAC,eAAe;QACnB,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YACpD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACd,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtF,mEAAmE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO;QACL,eAAe,EAAE,cAAc;QAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;QAC9E,eAAe,EACb,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;YACnC,CAAC,CAAC,CAAC,CAAC,eAAe;YACnB,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAChC,CAAC,CAAC,CAAC,CAAC,UAAU;gBACd,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,EAAU;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,CAAC,GAAG,EAAE,iDAAiD,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,2EAA2E;QAC3E,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,qBAAqB,CAAC;QAC5D,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,EAAE,2BAA2B,CAAC;QAClF,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAClD,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC;QACnC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QAC9D,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agent/merchant/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6GH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAoD;IACjE,YAAY,IAAiC,EAAE,OAAe;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,+EAA+E;AAE/E,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,mBAAmB,CAAC,YAAY,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,EAAU;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,EAAU;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,EAAU;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,qBAAqB,CAAC;QAC5D,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC;QAC1C,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACnE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC1D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;QACtE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QAC7D,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACvD,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;YACnE,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK;QACrE,mBAAmB,EAAE,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;KACnG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,OAAe;IAEf,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;IACvG,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,IAAI,GAAG,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAyB;QAClC,WAAW,EAAE,UAAU;QACvB,GAAG;QACH,KAAK;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;QAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;QAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrF,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACtC,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC,CAAC,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,GAAW;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC5C,KAAK,EACH,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAC9B,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACZ,CAAC,CAAC,SAAS;QACjB,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,mEAAmE;IACnE,2EAA2E;IAC3E,MAAM,cAAc,GAClB,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACnC,CAAC,CAAC,CAAC,CAAC,eAAe;QACnB,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YACpD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACd,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtF,mEAAmE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO;QACL,eAAe,EAAE,cAAc;QAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;QAC9E,eAAe,EACb,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;YACnC,CAAC,CAAC,CAAC,CAAC,eAAe;YACnB,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAChC,CAAC,CAAC,CAAC,CAAC,UAAU;gBACd,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,EAAU;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,CAAC,GAAG,EAAE,iDAAiD,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO;QACL,2EAA2E;QAC3E,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,qBAAqB,CAAC;QAC5D,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,EAAE,2BAA2B,CAAC;QAClF,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAClD,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC;QACnC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QAC9D,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC"}

package/dist/auth/merchant-authorization.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Merchant MCP 的 OAuth 授权校验（V2 阶段一）。
+ *
+ * 在 MerchantMcpAuthVerifier 接缝上叠加 OAuth Bearer 校验：access_token 查
+ * 授权服务器 store（签发方本服务、有效期、未撤销），并返回 principal/scope
+ * 授权上下文。租户隔离（前置决策 3）：token 在签发时绑定 merchant_id，校验
+ * 时必须等于本实例的 expectedMerchantId——用户参数不能选择任意 merchant_id，
+ * 跨商家访问一律拒绝。
+ *
+ * scope 设计：merchant:read（只读工具）/ merchant:write（写类工具，本轮仅
+ * 审批候选生成）。本轮接入校验；tools/list 按 scope 过滤留给后续波次。
+ */
+import type { MerchantOAuthStore } from "./merchant-oauth.js";
+import type { MerchantMcpAuthContext, MerchantMcpAuthResult, MerchantMcpAuthVerifier } from "../mcp/merchant-auth.js";
+/** 本服务支持的 scope（读/写两类；写类工具要求 merchant:write）。 */
+export declare const MERCHANT_OAUTH_SCOPES: readonly ["merchant:read", "merchant:write"];
+export type MerchantOAuthScope = (typeof MERCHANT_OAUTH_SCOPES)[number];
+/** 校验通过的授权上下文（principal/merchant/scope；供 tools 过滤与审计）。 */
+export interface MerchantAuthorization {
+    principal_id: string;
+    merchant_id: string;
+    scopes: string[];
+}
+export declare class MerchantOAuthVerifier implements MerchantMcpAuthVerifier {
+    readonly name = "oauth-bearer";
+    private readonly store;
+    private readonly expectedMerchantId;
+    constructor(options: {
+        store: MerchantOAuthStore;
+        expectedMerchantId?: string;
+        multiMerchant?: boolean;
+    });
+    verify(ctx: MerchantMcpAuthContext): MerchantMcpAuthResult;
+}

package/dist/auth/merchant-authorization.js

@@ -0,0 +1,61 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** 本服务支持的 scope（读/写两类；写类工具要求 merchant:write）。 */
+export const MERCHANT_OAUTH_SCOPES = ["merchant:read", "merchant:write"];
+export class MerchantOAuthVerifier {
+    name = "oauth-bearer";
+    store;
+    expectedMerchantId;
+    constructor(options) {
+        if (options.multiMerchant === true) {
+            if (options.expectedMerchantId !== undefined) {
+                throw new Error("通用 OAuth 校验器不能同时固定 expectedMerchantId");
+            }
+        }
+        else if (!options.expectedMerchantId) {
+            throw new Error("单商家 OAuth 校验器必须配置 expectedMerchantId；通用网关须显式 multiMerchant=true");
+        }
+        this.store = options.store;
+        this.expectedMerchantId = options.expectedMerchantId;
+    }
+    verify(ctx) {
+        const header = ctx.authorizationHeader;
+        if (header === undefined || header === "") {
+            return { ok: false, reason: "missing Authorization header" };
+        }
+        const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+        if (match === null) {
+            return { ok: false, reason: "Authorization header is not a bearer token" };
+        }
+        const token = this.store.getAccessToken(match[1] ?? "");
+        if (token === undefined) {
+            return { ok: false, reason: "invalid or expired access token" };
+        }
+        // 租户校验（前置决策 3）：token 签发给哪个商家就只能访问哪个商家。
+        if (this.expectedMerchantId !== undefined && token.merchant_id !== this.expectedMerchantId) {
+            return { ok: false, reason: "token merchant 不属于本实例（租户越权拒绝）" };
+        }
+        return {
+            ok: true,
+            authorization: {
+                principal_id: token.principal_id,
+                merchant_id: token.merchant_id,
+                scopes: token.scope,
+            },
+        };
+    }
+}
+//# sourceMappingURL=merchant-authorization.js.map

package/dist/auth/merchant-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merchant-authorization.js","sourceRoot":"","sources":["../../src/auth/merchant-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsBH,iDAAiD;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAU,CAAC;AAUlF,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,cAAc,CAAC;IACd,KAAK,CAAqB;IAC1B,kBAAkB,CAAqB;IAExD,YAAY,OAA4F;QACtG,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,GAA2B;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAClE,CAAC;QACD,uCAAuC;QACvC,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAChE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,aAAa,EAAE;gBACb,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,KAAK;aACpB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/merchant-oauth.d.ts

@@ -0,0 +1,255 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { DatabaseSync } from "node:sqlite";
+/** 授权码有效期（10 分钟，一次性使用）。 */
+export declare const OAUTH_CODE_TTL_MS: number;
+/** access_token 有效期（1 小时）。 */
+export declare const OAUTH_ACCESS_TOKEN_TTL_MS: number;
+/** refresh_token 有效期（30 天）。 */
+export declare const OAUTH_REFRESH_TOKEN_TTL_MS: number;
+/** 授权请求（授权页挂起单）有效期（10 分钟）。 */
+export declare const OAUTH_AUTH_REQUEST_TTL_MS: number;
+/** WorkBuddy 私有协议回调（source 占位替换为实际连接器 source）。 */
+export declare function workbuddyCallbackUri(source: string): string;
+/**
+ * OAuth 回调策略（可配置：source、期望回调与 loopback 回退都随部署确定）。
+ *
+ * - ``expectedCallbackUri``：显式期望的回调地址；缺省按连接器 source 派生
+ *   WorkBuddy 私有协议回调（`workbuddy://…/connector%3A<source>/oauth/callback`）。
+ *   平台侧回调规则未实机核验前，保持“由 source 派生”即可；核验后如平台给出
+ *   不同形式，用本项覆盖而不改代码；
+ * - ``allowLoopbackFallback``：私有协议回调被平台拒绝时是否允许 http loopback
+ *   回退（官方文档的回退路径）。缺省 true；如需严格锁定为单一回调可置 false。
+ */
+export interface OAuthCallbackPolicy {
+    expectedCallbackUri?: string;
+    allowLoopbackFallback?: boolean;
+}
+/** 解析生效的期望回调地址（显式配置优先，否则按 source 派生）。 */
+export declare function expectedCallbackUri(connectorSource: string, policy?: OAuthCallbackPolicy): string;
+/** redirect_uri 白名单判定：期望回调（source 派生或显式配置） 或 http loopback 回退。 */
+export declare function isAllowedRedirectUri(uri: string, connectorSource: string, policy?: OAuthCallbackPolicy): boolean;
+/** 端点处理结果：JSON body / HTML 页面 / 302 重定向。 */
+export type OAuthHttpResult = {
+    status: number;
+    body?: unknown;
+    html?: string;
+    headers?: Record<string, string>;
+};
+/** PKCE S256：base64url(sha256(verifier))。 */
+export declare function pkceS256(verifier: string): string;
+export interface OAuthClientRow {
+    client_id: string;
+    client_name: string | null;
+    redirect_uris: string[];
+    created_at: string;
+}
+export interface OAuthTokenRow {
+    client_id: string;
+    principal_id: string;
+    merchant_id: string;
+    scope: string[];
+    expires_at: string;
+    revoked_at: string | null;
+    created_at: string;
+}
+export declare class MerchantOAuthStore {
+    private readonly db;
+    private readonly now;
+    constructor(options: {
+        db: DatabaseSync;
+        now?: () => string;
+    });
+    /**
+     * 过期行清理（审查 P2：此前全库只增不删，长期运行单调膨胀）。只删完全
+     * 失效的行：挂起单/授权码/一次性凭证按各自 expires_at；token 需 access
+     * 与 refresh 双过期（撤销行在 refresh 未过期前保留可查）。
+     */
+    cleanupExpired(): void;
+    private isoAfter;
+    private expired;
+    registerClient(input: {
+        client_name?: string;
+        redirect_uris: string[];
+    }): OAuthClientRow;
+    getClient(clientId: string): OAuthClientRow | undefined;
+    createAuthRequest(input: {
+        client_id: string;
+        redirect_uri: string;
+        scope: string;
+        state?: string;
+        code_challenge: string;
+        merchant_id: string;
+        /** 认证主体（BUG-01：来自管理登录会话，不是启动参数）。 */
+        principal_id: string;
+    }): string;
+    /** 取出并删除（一次性；过期或缺认证主体（迁移老数据）视为不存在）。 */
+    consumeAuthRequest(csrf: string): {
+        client_id: string;
+        redirect_uri: string;
+        scope: string;
+        state?: string;
+        code_challenge: string;
+        merchant_id: string;
+        principal_id: string;
+    } | undefined;
+    createCode(input: {
+        client_id: string;
+        redirect_uri: string;
+        scope: string;
+        principal_id: string;
+        merchant_id: string;
+        code_challenge: string;
+    }): string;
+    /** 核销授权码（一次性；过期/已用返回 undefined）。事务 + 条件更新：与
+     *  rotateRefreshToken 同口径，双进程误开同一 oauth.sqlite 时同一授权码也
+     *  只能被核销一次（审查 P2：原 SELECT→UPDATE 无原子性）。 */
+    consumeCode(code: string): {
+        client_id: string;
+        redirect_uri: string;
+        scope: string;
+        principal_id: string;
+        merchant_id: string;
+        code_challenge: string;
+    } | undefined;
+    issueTokenPair(input: {
+        client_id: string;
+        principal_id: string;
+        merchant_id: string;
+        scope: string;
+    }): {
+        access_token: string;
+        refresh_token: string;
+        expires_in: number;
+    };
+    /** 查 access token（未过期、未撤销才返回）。 */
+    getAccessToken(accessToken: string): OAuthTokenRow | undefined;
+    /**
+     * 刷新轮换（BUG-10）：同一事务内验证旧 refresh 未撤销、未过期（独立
+     *  refresh_expires_at）并核销，再签发新 token 对——并发轮换只有一个成功
+     *  （UPDATE … WHERE revoked_at IS NULL 的条件更新，未命中即已被轮换）。
+     */
+    rotateRefreshToken(refreshToken: string, expectedClientId?: string): {
+        access_token: string;
+        refresh_token: string;
+        expires_in: number;
+    } | undefined;
+    /** RFC 7009 撤销（access 或 refresh；幂等，未知 token 也视为成功）。 */
+    revokeToken(token: string): void;
+    /**
+     * 签发一次性确认凭证（管理确认页渲染时按候选生成；绑定候选内容摘要 +
+     * 主体 + 商家 + 动作 + 10 分钟有效期）。返回明文 token（只进表单，不落库）。
+     */
+    createConfirmation(input: {
+        candidateId: string;
+        candidateDigest: string;
+        principalId: string;
+        merchantId: string;
+        action: "approve" | "reject";
+    }): string;
+    /**
+     * 核销确认凭证（单次用途；逐项核对候选/摘要/主体/商家/动作，未过期未使用
+     * 才返回记录）。核对失败返回 undefined（fail-closed）。
+     */
+    consumeConfirmation(token: string, expected: {
+        candidateId: string;
+        candidateDigest: string;
+        principalId: string;
+        merchantId: string;
+        action: "approve" | "reject";
+    }): {
+        candidate_id: string;
+        principal_id: string;
+        action: "approve" | "reject";
+        created_at: string;
+    } | undefined;
+}
+export interface MerchantOAuthServerOptions {
+    store: MerchantOAuthStore;
+    /** 本服务 base URL（https；loopback 开发可 http）。 */
+    issuer: string;
+    /** 被保护资源地址（MCP endpoint URL）。 */
+    resource: string;
+    /** 连接器 source（workbuddy 回调白名单用）。 */
+    connectorSource: string;
+    /** 单商家实例的展示名；通用网关省略时由已认证会话提供。 */
+    merchantName?: string;
+    /** 单商家实例归属商家；通用网关省略时由已认证会话决定。 */
+    merchantId?: string;
+    /** 只有通用网关才可开启：由经过验证的会话决定商家，不能意外省略 merchantId。 */
+    multiMerchant?: boolean;
+    /** 支持的 scope（缺省 merchant:read / merchant:write）。 */
+    scopes?: string[];
+    /** 回调策略（缺省按 connectorSource 派生 + 允许 loopback 回退）。 */
+    callbackPolicy?: OAuthCallbackPolicy;
+    /**
+     * 无会话时 authorize 的 303 落点（缺省单商家管理登录页 /admin/login）。
+     * 商家连接器入口传连接流程入口（如 /connect）：它负责把商家送到目录登录/注册，
+     * 完成后带着会话回到同一 authorize 请求。
+     */
+    loginPath?: string;
+    now?: () => string;
+}
+export declare class MerchantOAuthServer {
+    private readonly store;
+    private readonly issuer;
+    private readonly resource;
+    private readonly connectorSource;
+    private readonly merchantName;
+    private readonly merchantId;
+    private readonly scopes;
+    private readonly loginPath;
+    private readonly callbackPolicy;
+    constructor(options: MerchantOAuthServerOptions);
+    /** RFC 9728 resource metadata URL（401 WWW-Authenticate 指引用）。 */
+    get resourceMetadataUrl(): string;
+    /** RFC 9728 protected resource metadata。 */
+    protectedResourceMetadata(): OAuthHttpResult;
+    /** RFC 8414 authorization server metadata。 */
+    authorizationServerMetadata(): OAuthHttpResult;
+    /** RFC 7591 动态注册：只接受公共客户端（无 client_secret）；回显 redirect_uris。 */
+    register(body: unknown): OAuthHttpResult;
+    /** GET /oauth/authorize：校验请求 → 授权确认页（CSRF 挂起单）。 */
+    /**
+     * GET /oauth/authorize：校验请求 → 授权确认页（CSRF 挂起单）。
+     * BUG-01：授权前必须持有有效管理登录会话——未登录 → 303 登录页（回跳
+     * 原授权 URL）；会话商家 ≠ 本实例商家 → 拒绝（跨商家授权拒绝）。
+     * 挂起单绑定会话认证的 principal_id，授权码主体只能来自认证用户。
+     */
+    authorize(query: Record<string, string | undefined>, session?: {
+        principal_id: string;
+        merchant_id: string;
+        merchant_name?: string;
+    }): OAuthHttpResult;
+    /**
+     * 授权流程在建立会话之前被中止（商家在目录拒绝了连接、连接失败）时的
+     * OAuth 2.1 错误回跳。
+     *
+     * 与 authorize 同一校验口径：client_id 与 redirect_uri 校验通过才回跳，
+     * 否则返回 400（防开放重定向）。客户端据此看到标准的 access_denied /
+     * server_error，而不是一个卡住的授权窗口。
+     */
+    authorizationError(query: Record<string, string | undefined>, error: string, description: string): OAuthHttpResult;
+    /** POST /oauth/authorize（表单）：会话 + CSRF 校验 → 授权码回跳 / access_denied。 */
+    authorizeSubmit(form: Record<string, string | undefined>, session: {
+        principal_id: string;
+        merchant_id: string;
+    }): OAuthHttpResult;
+    /** POST /oauth/token：authorization_code（PKCE 校验）/ refresh_token（轮换）。 */
+    token(form: Record<string, string | undefined>): OAuthHttpResult;
+    /** POST /oauth/revoke（RFC 7009；幂等，未知 token 也返回 200）。 */
+    revoke(form: Record<string, string | undefined>): OAuthHttpResult;
+}