@seasonkoh/webaz 0.1.27 → 0.1.28

package/dist/runtime/webaz-schema-helpers.js

@@ -0,0 +1,1848 @@
+// ─── 验证员白名单表 ───────────────────────────────────────────────
+export function initVerifierWhitelistSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verifier_whitelist (
+    user_id   TEXT PRIMARY KEY,
+    added_at  TEXT DEFAULT (datetime('now')),
+    note      TEXT
+  )
+`);
+}
+// ─── MCP 工具调用埋点表（远程上报）─────────────────────────────────
+export function initMcpToolCallsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS mcp_tool_calls (
+    id             INTEGER PRIMARY KEY AUTOINCREMENT,
+    tool_name      TEXT NOT NULL,
+    user_id_hash   TEXT,
+    server_version TEXT,
+    outcome        TEXT NOT NULL,
+    latency_ms     INTEGER NOT NULL,
+    ts             TEXT NOT NULL DEFAULT (datetime('now'))
+  )
+`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_mcp_tc_ts   ON mcp_tool_calls(ts)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_mcp_tc_tool ON mcp_tool_calls(tool_name, ts)`);
+}
+// ─── 笔记图片 hash 索引表（审计修 C-1）─────────────────────────────
+// hash PRIMARY KEY 天然唯一约束；删笔记时同步删对应行
+export function initNotePhotoIndexSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS note_photo_index (
+    hash         TEXT PRIMARY KEY,
+    shareable_id TEXT NOT NULL
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_npi_shareable ON note_photo_index(shareable_id)");
+    }
+    catch { }
+}
+// ─── Wave A-1: 个人心愿单（独立于慈善 wishes）──────────────────────
+export function initUserWishlistSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS user_wishlist (
+    user_id      TEXT NOT NULL,
+    product_id   TEXT NOT NULL,
+    note         TEXT,
+    notify_price_drop    INTEGER DEFAULT 1,
+    notify_back_in_stock INTEGER DEFAULT 1,
+    price_at_add REAL,
+    created_at   TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY(user_id, product_id)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_wl_product ON user_wishlist(product_id)');
+    }
+    catch { }
+}
+// ─── Wave A-2: 商品 Q&A（公开问答 — 自动 FAQ + 防虚假承诺）─────────
+export function initProductQaSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_qa (
+    id           TEXT PRIMARY KEY,
+    product_id   TEXT NOT NULL,
+    asker_id     TEXT NOT NULL,
+    seller_id    TEXT NOT NULL,
+    question     TEXT NOT NULL,
+    answer       TEXT,
+    answered_at  TEXT,
+    is_public    INTEGER DEFAULT 1,
+    helpful_count INTEGER DEFAULT 0,
+    created_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_qa_product ON product_qa(product_id, created_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_qa_seller ON product_qa(seller_id, answered_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_qa_asker ON product_qa(asker_id)');
+    }
+    catch { }
+    // 防重复 +1 的 votes 表
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_qa_helpful_voters (
+    qa_id TEXT NOT NULL,
+    user_id TEXT NOT NULL,
+    voted_at TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (qa_id, user_id)
+  )
+`);
+}
+// ─── Wave A-3: 优惠券 / 限时折扣（卖家发券 · 全店满减 · 单品限时）──
+export function initCouponsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS coupons (
+    id               TEXT PRIMARY KEY,
+    seller_id        TEXT NOT NULL,
+    code             TEXT NOT NULL,
+    scope            TEXT NOT NULL,           -- 'product' | 'shop' | 'all'
+    scope_id         TEXT,                    -- product_id when scope='product'
+    discount_type    TEXT NOT NULL,           -- 'percentage' | 'fixed'
+    discount_value   REAL NOT NULL,
+    min_order_amount REAL DEFAULT 0,
+    max_uses         INTEGER DEFAULT 0,       -- 0 = unlimited
+    uses_count       INTEGER DEFAULT 0,
+    starts_at        TEXT,
+    expires_at       TEXT,
+    is_active        INTEGER DEFAULT 1,
+    created_at       TEXT DEFAULT (datetime('now')),
+    UNIQUE(seller_id, code)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_coupons_seller ON coupons(seller_id, is_active)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_coupons_scope ON coupons(scope, scope_id) WHERE is_active = 1');
+    }
+    catch { }
+}
+// ─── Wave A-4: 平台公告（admin 发布 → 角色 / 区域定向）+ 阅读记录 ──
+export function initAnnouncementsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS announcements (
+    id              TEXT PRIMARY KEY,
+    author_id       TEXT NOT NULL,
+    title           TEXT NOT NULL,
+    body            TEXT NOT NULL,
+    target_roles    TEXT,                    -- JSON array: ['buyer','seller'] or null=all
+    target_regions  TEXT,                    -- JSON array: ['china','us'] or null=all
+    severity        TEXT DEFAULT 'info',     -- 'info' | 'warning' | 'critical'
+    is_active       INTEGER DEFAULT 1,
+    starts_at       TEXT,
+    expires_at      TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_ann_active ON announcements(is_active, created_at DESC)');
+    }
+    catch { }
+    // 用户阅读记录（PK 防重复 dismiss）
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS announcement_reads (
+    user_id      TEXT NOT NULL,
+    announcement_id TEXT NOT NULL,
+    read_at      TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (user_id, announcement_id)
+  )
+`);
+}
+// ─── Wave B-2: 预售 / waitlist（缺货商品允许买家排队 → 回货时通知）──
+export function initProductWaitlistSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_waitlist (
+    user_id      TEXT NOT NULL,
+    product_id   TEXT NOT NULL,
+    desired_qty  INTEGER DEFAULT 1,
+    note         TEXT,
+    notified_at  TEXT,                    -- 回货时填，表示已发通知
+    created_at   TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (user_id, product_id)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_waitlist_product ON product_waitlist(product_id) WHERE notified_at IS NULL');
+    }
+    catch { }
+}
+// ─── Wave D-4: 限时促销 / Flash Sale ───────────────────────────────
+export function initFlashSalesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS flash_sales (
+    id              TEXT PRIMARY KEY,
+    seller_id       TEXT NOT NULL,
+    product_id      TEXT NOT NULL,
+    variant_id      TEXT,                 -- 可选，绑定具体规格
+    sale_price      REAL NOT NULL,
+    original_price  REAL NOT NULL,        -- 创建时快照，用于显示「省 X」
+    max_qty         INTEGER DEFAULT 0,    -- 0 = 不限
+    sold_count      INTEGER DEFAULT 0,
+    starts_at       TEXT NOT NULL,
+    ends_at         TEXT NOT NULL,
+    is_active       INTEGER DEFAULT 1,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_flash_product ON flash_sales(product_id, is_active)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_flash_seller ON flash_sales(seller_id, ends_at DESC)');
+    }
+    catch { }
+}
+// ─── 首屏「我有建议」公开收集（匿名可投，登录态自动绑 user_id）──────
+export function initPublicIdeasSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS public_ideas (
+    id            TEXT PRIMARY KEY,
+    user_id       TEXT,                                  -- 可空（匿名提交）
+    contact       TEXT,                                  -- 可选 email / handle / 任何联系方式
+    content       TEXT NOT NULL,
+    ip_hash       TEXT,
+    ua_hash       TEXT,
+    status        TEXT NOT NULL DEFAULT 'new',          -- new / triaged / resolved / spam
+    created_at    TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pi_status ON public_ideas(status, created_at DESC)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pi_rate ON public_ideas(ip_hash, created_at)");
+    }
+    catch { }
+}
+// ─── #959: 拍卖「⏰ 提醒我」（1 订阅 = 多行，每个 lead 时间一行）────
+export function initAuctionRemindersSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS auction_reminders (
+    id            TEXT PRIMARY KEY,                   -- arm_xxxx
+    auction_id    TEXT NOT NULL REFERENCES auctions(id),
+    user_id       TEXT NOT NULL REFERENCES users(id),
+    lead_minutes  INTEGER NOT NULL,                   -- 提前多少分钟提醒
+    fire_at       TEXT NOT NULL,                      -- deadline - lead_minutes（创建时算好）
+    sent_at       TEXT,
+    created_at    TEXT DEFAULT (datetime('now')),
+    UNIQUE(auction_id, user_id, lead_minutes)
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_arm_due ON auction_reminders(sent_at, fire_at) WHERE sent_at IS NULL");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_arm_user ON auction_reminders(user_id, auction_id)");
+    }
+    catch { }
+}
+// ─── 邮箱订阅独立表（GDPR-ready）— 与 ideas 解耦 ───────────────────
+// consent 显式存；unsubscribe_token 让用户主动退订；source 区分来源
+// 注：后续 ALTER 列扩展刻意保留在 server.ts 原位（紧跟本 init 调用之后）
+export function initEmailSubscriptionsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS email_subscriptions (
+    id                   TEXT PRIMARY KEY,
+    email                TEXT NOT NULL UNIQUE,
+    source               TEXT NOT NULL DEFAULT 'welcome',
+    consent_at           TEXT NOT NULL DEFAULT (datetime('now')),
+    unsubscribe_token    TEXT NOT NULL UNIQUE,
+    unsubscribed_at      TEXT,
+    ip_hash              TEXT,
+    user_id              TEXT,
+    created_at           TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_es_status ON email_subscriptions(unsubscribed_at, created_at DESC)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_es_source ON email_subscriptions(source, created_at DESC)");
+    }
+    catch { }
+}
+// ─── Wave D-3: 用户反馈 / 客服工单（buyer-to-platform，独立于 disputes）──
+// 注：后续 ALTER 列扩展刻意保留在 server.ts 原位（紧跟本 init 调用之后）
+export function initFeedbackTicketsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS feedback_tickets (
+    id            TEXT PRIMARY KEY,
+    user_id       TEXT NOT NULL,
+    category      TEXT NOT NULL,         -- 'bug' | 'abuse' | 'feature' | 'account' | 'other'
+    severity      TEXT DEFAULT 'medium', -- 'low' | 'medium' | 'high'
+    subject       TEXT NOT NULL,
+    body          TEXT NOT NULL,
+    status        TEXT NOT NULL DEFAULT 'open',  -- open | in_progress | resolved | closed
+    admin_reply   TEXT,
+    replied_by    TEXT,
+    replied_at    TEXT,
+    created_at    TEXT DEFAULT (datetime('now')),
+    updated_at    TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_feedback_user ON feedback_tickets(user_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── W7 客服 ticket-thread — 多轮消息（user ↔ admin）─────────────────
+// 注：后续 ALTER 列扩展刻意保留在 server.ts 原位（紧跟本 init 调用之后）
+export function initFeedbackMessagesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS feedback_messages (
+    id          TEXT PRIMARY KEY,            -- fmsg_xxx
+    ticket_id   TEXT NOT NULL,
+    sender_id   TEXT NOT NULL,
+    sender_role TEXT NOT NULL,               -- 'user' | 'admin'
+    body        TEXT NOT NULL,
+    created_at  TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_fmsg_ticket ON feedback_messages(ticket_id, created_at)');
+    }
+    catch { }
+}
+// ─── 公开判例（裁决后脱敏版本，disputes 是当事人/仲裁员私域）────────
+export function initDisputeCasesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS dispute_cases (
+    id              TEXT PRIMARY KEY,            -- dcase_xxx
+    dispute_id      TEXT,                         -- 原始 disputes.id (内部追溯)
+    order_id        TEXT,
+    product_id      TEXT,                         -- 关键索引：按商品查公开判例
+    seller_id       TEXT,
+    buyer_id        TEXT,                         -- 仅内部使用，不外露
+    category_tag    TEXT,                         -- 物流 / 质量 / 描述不符 / 售后 / 拒收 / 其他
+    winner          TEXT,                         -- buyer / seller / split / dismissed
+    resolution      TEXT,                         -- 简短人读判决 (如 '全额退款')
+    amount_bucket   TEXT,                         -- '0-100' / '100-500' / '500-2000' / '2000+' WAZ
+    buyer_argument  TEXT,                         -- 脱敏后买家陈述
+    seller_argument TEXT,                         -- 脱敏后卖家陈述
+    ruling_text     TEXT,                         -- 仲裁员判决书
+    arbitrator_id   TEXT,
+    fairness_yes    INTEGER DEFAULT 0,
+    fairness_no     INTEGER DEFAULT 0,
+    comment_count   INTEGER DEFAULT 0,
+    published_at    TEXT DEFAULT (datetime('now')),
+    created_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_dcase_product ON dispute_cases(product_id, published_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_dcase_seller ON dispute_cases(seller_id, published_at DESC)');
+    }
+    catch { }
+}
+// ─── 公开判例评论（一案一人一次；anonymous ALTER + 索引留 server.ts 原位）──
+export function initDisputeCommentsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS dispute_comments (
+    id              TEXT PRIMARY KEY,            -- dcom_xxx
+    case_id         TEXT NOT NULL,
+    commenter_id    TEXT NOT NULL,
+    body            TEXT NOT NULL,
+    flagged         INTEGER DEFAULT 0,
+    likes           INTEGER DEFAULT 0,
+    created_at      TEXT DEFAULT (datetime('now')),
+    UNIQUE(case_id, commenter_id)                -- 一案一人一次（防刷）
+  )
+`);
+}
+// ─── W5 仲裁公开评论楼中楼 — 单层子回复 ────────────────────────────
+export function initDisputeCommentRepliesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS dispute_comment_replies (
+    id                TEXT PRIMARY KEY,           -- drep_xxx
+    parent_comment_id TEXT NOT NULL,              -- 指向 dispute_comments.id
+    case_id           TEXT NOT NULL,
+    replier_id        TEXT NOT NULL,
+    body              TEXT NOT NULL,
+    anonymous         INTEGER DEFAULT 0,
+    likes             INTEGER DEFAULT 0,
+    created_at        TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_drep_parent ON dispute_comment_replies(parent_comment_id, created_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_drep_case ON dispute_comment_replies(case_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── W6 笔记评论 — 原生 parent_id 楼中楼（仅 1 层）─────────────────
+export function initShareableCommentsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS shareable_comments (
+    id           TEXT PRIMARY KEY,                -- scom_xxx
+    shareable_id TEXT NOT NULL,                    -- shareables.id
+    commenter_id TEXT NOT NULL,
+    parent_id    TEXT,                             -- 子评论指向父评论；root = NULL
+    body         TEXT NOT NULL,
+    flagged      INTEGER DEFAULT 0,
+    likes        INTEGER DEFAULT 0,
+    created_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_scom_shareable ON shareable_comments(shareable_id, parent_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── 公开判例公平性投票（一案一人一票）──────────────────────────────
+export function initDisputeFairnessVotesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS dispute_fairness_votes (
+    case_id     TEXT NOT NULL,
+    voter_id    TEXT NOT NULL,
+    vote        TEXT NOT NULL,                   -- 'yes' / 'no'
+    created_at  TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (case_id, voter_id)
+  )
+`);
+}
+// ─── Wave C-3: 买家评价 / 评分（完成订单后给卖家 1-5 星 + 文字）──────
+// 注：后续结构化维度 ALTER + 跨表 orders 索引刻意保留在 server.ts 原位
+export function initOrderRatingsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS order_ratings (
+    order_id     TEXT PRIMARY KEY,
+    buyer_id     TEXT NOT NULL,
+    seller_id    TEXT NOT NULL,
+    product_id   TEXT NOT NULL,
+    stars        INTEGER NOT NULL,            -- 1-5
+    comment      TEXT,
+    reply        TEXT,                        -- seller 可回复
+    replied_at   TEXT,
+    created_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_rating_seller ON order_ratings(seller_id, created_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_rating_product ON order_ratings(product_id, created_at DESC)');
+    }
+    catch { }
+    // P2 hot-path：覆盖 recommend_count 子查询（COUNT DISTINCT buyer_id WHERE product_id=? AND stars>=4）
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_rating_recommend ON order_ratings(product_id, stars, buyer_id)');
+    }
+    catch { }
+}
+// ─── 反向评价：卖家给买家评分（双盲）──────────────────────────────
+export function initBuyerRatingsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS buyer_ratings (
+    order_id              TEXT PRIMARY KEY,
+    seller_id             TEXT NOT NULL,
+    buyer_id              TEXT NOT NULL,
+    stars                 INTEGER NOT NULL,
+    comment               TEXT,
+    dim_payment_speed     INTEGER,
+    dim_communication     INTEGER,
+    dim_responsiveness    INTEGER,
+    hidden_until          TEXT,
+    created_at            TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_buyer_ratings_buyer ON buyer_ratings(buyer_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── Wave C-2: 多收货地址簿（buyer 保存常用地址，下单时选默认）──────
+export function initUserAddressesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS user_addresses (
+    id           TEXT PRIMARY KEY,
+    user_id      TEXT NOT NULL,
+    label        TEXT NOT NULL,           -- 标签（家 / 公司 / 父母家）
+    recipient    TEXT NOT NULL,
+    phone        TEXT,
+    region       TEXT,                    -- 省/市/区
+    detail       TEXT NOT NULL,           -- 详细地址
+    is_default   INTEGER DEFAULT 0,
+    created_at   TEXT DEFAULT (datetime('now')),
+    updated_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_addr_user ON user_addresses(user_id, is_default DESC)');
+    }
+    catch { }
+}
+// ─── P2P 店铺 ──────────────────────────────────────────────────────
+export function initP2pShopsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS p2p_shops (
+    id              TEXT PRIMARY KEY,
+    owner_id        TEXT NOT NULL,
+    name            TEXT NOT NULL,
+    description     TEXT,
+    thumbnail_uri   TEXT,
+    peer_endpoint   TEXT,
+    peer_pubkey     TEXT,
+    status          TEXT NOT NULL DEFAULT 'active',
+    created_at      TEXT DEFAULT (datetime('now')),
+    updated_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_p2p_shops_owner ON p2p_shops(owner_id, status)');
+    }
+    catch { }
+}
+// ─── 笔记点赞 ──────────────────────────────────────────────────────
+export function initShareableLikesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS shareable_likes (
+    id            TEXT PRIMARY KEY,
+    shareable_id  TEXT NOT NULL,
+    user_id       TEXT NOT NULL,
+    created_at    TEXT DEFAULT (datetime('now')),
+    UNIQUE(shareable_id, user_id)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_likes_shr ON shareable_likes(shareable_id)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_likes_user ON shareable_likes(user_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── audit P2：收藏功能（小红书风格"收藏" tab）───────────────────────
+export function initShareableBookmarksSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS shareable_bookmarks (
+    id            TEXT PRIMARY KEY,
+    shareable_id  TEXT NOT NULL,
+    user_id       TEXT NOT NULL,
+    created_at    TEXT DEFAULT (datetime('now')),
+    UNIQUE(shareable_id, user_id)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_bm_user ON shareable_bookmarks(user_id, created_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_bm_shr ON shareable_bookmarks(shareable_id)');
+    }
+    catch { }
+}
+// ─── audit P1 backlog：# 话题/标签系统（小红书风格内容分发）──────────
+export function initShareableTagsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS shareable_tags (
+    id            INTEGER PRIMARY KEY AUTOINCREMENT,
+    shareable_id  TEXT NOT NULL,
+    tag           TEXT NOT NULL,          -- 已 lowercase + trim，最长 30 字符
+    created_at    TEXT DEFAULT (datetime('now')),
+    UNIQUE(shareable_id, tag)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_tags_tag ON shareable_tags(tag, created_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_shr_tags_shr ON shareable_tags(shareable_id)');
+    }
+    catch { }
+}
+// ─── manifest_registry = 原生 P2P 内容索引（仅 hash + 签名 + 元数据）──
+export function initManifestRegistrySchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS manifest_registry (
+    hash                 TEXT PRIMARY KEY,
+    owner_id             TEXT NOT NULL,
+    content_type         TEXT NOT NULL,
+    byte_size            INTEGER NOT NULL,
+    title                TEXT,
+    description          TEXT,
+    thumbnail_data_uri   TEXT,
+    signature            TEXT NOT NULL,
+    signed_at            TEXT NOT NULL,
+    related_product_id   TEXT,
+    related_anchor       TEXT,
+    status               TEXT DEFAULT 'active',
+    takedown_reason      TEXT,
+    takedown_at          TEXT,
+    takedown_by          TEXT,
+    created_at           TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_owner ON manifest_registry(owner_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_product ON manifest_registry(related_product_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_anchor ON manifest_registry(related_anchor, status)");
+    }
+    catch { }
+}
+// ─── peer_directory = 在线 peer 注册（hash cache 持有者，heartbeat 5min 失效）──
+export function initPeerDirectorySchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS peer_directory (
+    peer_id             TEXT NOT NULL,
+    manifest_hash       TEXT NOT NULL,
+    is_owner            INTEGER DEFAULT 0,
+    pin_intent          INTEGER DEFAULT 0,
+    last_heartbeat      TEXT NOT NULL,
+    bytes_served_total  INTEGER DEFAULT 0,
+    PRIMARY KEY (peer_id, manifest_hash)
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_peer_hash ON peer_directory(manifest_hash, last_heartbeat DESC)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_peer_heartbeat ON peer_directory(last_heartbeat)");
+    }
+    catch { }
+}
+// ─── signaling_queue = WebRTC SDP/ICE 中继（TTL 2min，cron 清理）─────
+export function initSignalingQueueSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS signaling_queue (
+    id              TEXT PRIMARY KEY,
+    to_peer_id      TEXT NOT NULL,
+    from_peer_id    TEXT NOT NULL,
+    signal_type     TEXT NOT NULL,
+    signal_data     TEXT NOT NULL,
+    created_at      TEXT NOT NULL,
+    delivered_at    TEXT
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_sig_to ON signaling_queue(to_peer_id, delivered_at)");
+    }
+    catch { }
+}
+// ─── CHAT — 上下文绑定聊天（order / rfq / listing_qa）────────────────
+export function initConversationsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS conversations (
+    id              TEXT PRIMARY KEY,
+    kind            TEXT NOT NULL,
+    context_id      TEXT NOT NULL,
+    user_a          TEXT NOT NULL,
+    user_b          TEXT NOT NULL,
+    last_message_at TEXT,
+    last_preview    TEXT,
+    unread_a        INTEGER NOT NULL DEFAULT 0,
+    unread_b        INTEGER NOT NULL DEFAULT 0,
+    status          TEXT NOT NULL DEFAULT 'active',
+    created_at      TEXT DEFAULT (datetime('now')),
+    UNIQUE(kind, context_id, user_a, user_b)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_conv_a ON conversations(user_a, last_message_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_conv_b ON conversations(user_b, last_message_at DESC)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_conv_ctx ON conversations(kind, context_id)');
+    }
+    catch { }
+}
+// ─── 聊天消息（后续 kind/meta ALTER 刻意保留在 server.ts 原位）────────
+export function initMessagesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS messages (
+    id              TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    sender_id       TEXT NOT NULL,
+    body            TEXT NOT NULL DEFAULT '',
+    attachments     TEXT,
+    flagged         INTEGER NOT NULL DEFAULT 0,
+    flag_reasons    TEXT,
+    read_at         TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_msg_conv ON messages(conversation_id, created_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_msg_sender ON messages(sender_id, created_at DESC)');
+    }
+    catch { }
+}
+// ─── 反诈举报表（chat report → 人工审核）──────────────────────────────
+export function initChatReportsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS chat_reports (
+    id              TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    message_id      TEXT,
+    reporter_id     TEXT NOT NULL,
+    reported_id     TEXT NOT NULL,
+    reason          TEXT NOT NULL,
+    note            TEXT,
+    status          TEXT NOT NULL DEFAULT 'pending',
+    created_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_chatrpt_status ON chat_reports(status, created_at)');
+    }
+    catch { }
+}
+// ─── 配额提升申请 ──────────────────────────────────────────────────
+export function initQuotaIncreaseApplicationsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS quota_increase_applications (
+    id              TEXT PRIMARY KEY,
+    user_id         TEXT NOT NULL,
+    current_quota   INTEGER,
+    requested_quota INTEGER,
+    reason          TEXT,
+    status          TEXT DEFAULT 'pending',
+    applied_at      TEXT DEFAULT (datetime('now')),
+    reviewed_at     TEXT,
+    reviewed_by     TEXT,
+    decision_note   TEXT
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_quota_apps_status ON quota_increase_applications(status)');
+    }
+    catch { }
+}
+// ─── Verifier 申请记录 ─────────────────────────────────────────────
+export function initVerifierApplicationsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verifier_applications (
+    id              TEXT PRIMARY KEY,
+    user_id         TEXT NOT NULL,
+    status          TEXT DEFAULT 'pending',
+    applied_at      TEXT DEFAULT (datetime('now')),
+    reviewed_at     TEXT,
+    reviewed_by     TEXT,
+    decision_note   TEXT,
+    snapshot        TEXT
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_verifier_apps_status ON verifier_applications(status)');
+    }
+    catch { }
+}
+// ─── Arbitrator 申请 + 白名单（外部仲裁员路径 — 与 verifier 平行）────
+// 注：legacy 内部仲裁员 → 白名单的 migration INSERT 刻意保留在 server.ts 原位
+export function initArbitratorReviewSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS arbitrator_applications (
+    id              TEXT PRIMARY KEY,
+    user_id         TEXT NOT NULL,
+    status          TEXT DEFAULT 'pending',
+    applied_at      TEXT DEFAULT (datetime('now')),
+    reviewed_at     TEXT,
+    reviewed_by     TEXT,
+    decision_note   TEXT,
+    snapshot        TEXT
+  );
+  CREATE TABLE IF NOT EXISTS arbitrator_whitelist (
+    user_id         TEXT PRIMARY KEY,
+    added_at        TEXT DEFAULT (datetime('now')),
+    note            TEXT,
+    is_system       INTEGER DEFAULT 0,
+    granted_by      TEXT,
+    stake_amount    INTEGER DEFAULT 0
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_arb_apps_status ON arbitrator_applications(status)');
+    }
+    catch { }
+}
+// ─── Verifier 申诉记录 ─────────────────────────────────────────────
+export function initVerifierAppealsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verifier_appeals (
+    id            TEXT PRIMARY KEY,
+    user_id       TEXT NOT NULL,
+    task_id       TEXT,
+    submission_id TEXT,
+    reason        TEXT NOT NULL,
+    evidence_urls TEXT DEFAULT '[]',
+    status        TEXT DEFAULT 'pending',
+    admin_note    TEXT,
+    reviewed_by   TEXT,
+    reviewed_at   TEXT,
+    created_at    TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_verifier_appeals_status ON verifier_appeals(status)');
+    }
+    catch { }
+}
+// ─── 用户暂停状态（admin 管理）────────────────────────────────────
+export function initUserModerationSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS user_moderation (
+    user_id        TEXT PRIMARY KEY,
+    suspended      INTEGER DEFAULT 0,
+    reason         TEXT,
+    suspended_by   TEXT,
+    suspended_at   TEXT
+  )
+`);
+}
+// ─── admin 操作审计日志（initAdminCoordinationSchema FK 依赖本表，须先建）──
+export function initAdminAuditLogSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS admin_audit_log (
+    id           TEXT PRIMARY KEY,
+    admin_id     TEXT NOT NULL,
+    action       TEXT NOT NULL,
+    target_type  TEXT,
+    target_id    TEXT,
+    detail       TEXT,
+    created_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_admin_audit_log_created ON admin_audit_log(created_at)');
+    }
+    catch { }
+}
+// ─── 验证码表（邮箱绑定 / 找回密钥 / 改密码 等共用）────────────────
+export function initVerificationCodesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verification_codes (
+    id          TEXT PRIMARY KEY,
+    user_id     TEXT NOT NULL,
+    channel     TEXT NOT NULL,           -- 'email' / 'phone'
+    target      TEXT NOT NULL,           -- 邮箱地址 / 手机号
+    code        TEXT NOT NULL,           -- 6 位数字
+    purpose     TEXT NOT NULL,           -- 'bind_email' / 'recover_key' / ...
+    attempts    INTEGER DEFAULT 0,
+    used_at     TEXT,
+    expires_at  TEXT NOT NULL,
+    created_at  TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_verification_codes_lookup ON verification_codes(channel, target, purpose)');
+    }
+    catch { }
+}
+// ─── 里程碑 4：Agent observability/reputation schema ─────────────────
+// 注：调用方 server.ts 保留原 try/catch 边界与 console.error label；
+// 这些 DDL 原本无逐句 try/catch（靠外层大 try 兜底），此处照搬不加。
+export function initAgentCallLogSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_call_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    api_key TEXT,
+    user_id TEXT,
+    endpoint TEXT NOT NULL,
+    method TEXT,
+    status_code INTEGER,
+    created_at TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_acl_apikey_ts ON agent_call_log(api_key, created_at)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_acl_user_ts ON agent_call_log(user_id, created_at)`);
+}
+export function initAgentReputationSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_reputation (
+    api_key TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    trust_score REAL DEFAULT 0,
+    level TEXT DEFAULT 'new',
+    signals TEXT,                    -- JSON
+    last_calculated_at TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_ar_user ON agent_reputation(user_id)`);
+}
+// ─── Agent 治理（spec: docs/AGENT-GOVERNANCE.md）────────────────────
+// agent_declarations：agent 自声明（trust > new 必须先登记）
+export function initAgentDeclarationsSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_declarations (
+    api_key           TEXT PRIMARY KEY,
+    user_id           TEXT NOT NULL,
+    operator_name     TEXT NOT NULL,             -- 公司/开发者名
+    operator_contact  TEXT NOT NULL,             -- email/handle/DID
+    purpose           TEXT NOT NULL,             -- ≤200 字
+    declared_scope    TEXT NOT NULL,             -- JSON: {roles, actions, regions}
+    attestations      TEXT,                      -- JSON: {gdpr, kids_safe, no_pii_export, ...}
+    repo_url          TEXT,
+    homepage          TEXT,
+    revoked_at        TEXT,                      -- 撤销时间（用户主动 revoke）
+    revoked_reason    TEXT,
+    created_at        TEXT DEFAULT (datetime('now')),
+    updated_at        TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_agd_operator ON agent_declarations(operator_name)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_agd_revoked ON agent_declarations(revoked_at) WHERE revoked_at IS NOT NULL`);
+}
+// agent_attestations：bilateral consent（用户主动同意某 agent 的 scope）
+export function initAgentAttestationsSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_attestations (
+    id                TEXT PRIMARY KEY,
+    api_key           TEXT NOT NULL,             -- agent 的 api_key
+    user_id           TEXT NOT NULL,             -- 同意此 agent 行动的用户
+    approved_scope    TEXT NOT NULL,             -- JSON：用户实际批准的子集
+    spend_cap_per_order REAL,                    -- 该用户给此 agent 的单笔下单上限（可空 = 沿用 declared_scope）
+    spend_cap_daily   REAL,                      -- 24h 累计上限
+    granted_at        TEXT DEFAULT (datetime('now')),
+    revoked_at        TEXT,
+    UNIQUE(api_key, user_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_aat_user ON agent_attestations(user_id, revoked_at)`);
+}
+// agent_strikes：违规累积（3-strike state machine）
+export function initAgentStrikesSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_strikes (
+    id                INTEGER PRIMARY KEY AUTOINCREMENT,
+    api_key           TEXT NOT NULL,
+    user_id           TEXT NOT NULL,
+    severity          TEXT NOT NULL,             -- 'warning' | 'suspend_7d' | 'permanent'
+    reason_code       TEXT NOT NULL,             -- 'fake_shipment' | 'mass_spam' | 'overlimit_order' | 'fraud_claim' | ...
+    reason_detail     TEXT,
+    reported_by       TEXT,                      -- user_id（举报人 / system / admin）
+    related_ref       TEXT,                      -- 关联 order/dispute/claim_task id
+    issued_at         TEXT DEFAULT (datetime('now')),
+    expires_at        TEXT,                      -- warning=24h; suspend_7d=7d; permanent=null
+    appeal_status     TEXT DEFAULT 'none',       -- 'none' | 'pending' | 'approved' | 'denied'
+    appeal_reason     TEXT,
+    appeal_decided_by TEXT,
+    appeal_decided_at TEXT
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_apikey ON agent_strikes(api_key, issued_at DESC)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_user ON agent_strikes(user_id, issued_at DESC)`);
+    // 注：SQLite 不允许 partial index 用非确定性函数 (datetime('now'))；用 expires_at 普通索引代替
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_active ON agent_strikes(api_key, expires_at)`);
+}
+// agent_revocations：operator-级撤销（封禁同 operator 名下所有 agent）
+export function initAgentRevocationsSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS agent_revocations (
+    id                INTEGER PRIMARY KEY AUTOINCREMENT,
+    target_kind       TEXT NOT NULL,             -- 'api_key' | 'operator_name'
+    target_value      TEXT NOT NULL,
+    revoked_by        TEXT NOT NULL,             -- user_id（用户自己 OR root admin）
+    revoked_by_role   TEXT,                      -- 'self' | 'admin'
+    reason            TEXT,
+    revoked_at        TEXT DEFAULT (datetime('now')),
+    UNIQUE(target_kind, target_value, revoked_by)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_arev_target ON agent_revocations(target_kind, target_value)`);
+}
+// ─── 里程碑 7.2：商品 alias 系统 schema ─────────────────────────────
+// 注：调用方 server.ts 保留原 try/catch 边界与 console.error label；
+// 这些 DDL 原本无逐句 try/catch（靠外层 try 兜底），此处照搬不加。
+export function initProductAliasesSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS product_aliases (
+    id              TEXT PRIMARY KEY,
+    product_id      TEXT NOT NULL,
+    alias_type      TEXT NOT NULL,            -- 'external_id' | 'external_title' | 'short_url' | 'kouling_token' | 'title_substring'
+    alias_value     TEXT NOT NULL,
+    min_match_chars INTEGER DEFAULT 6,
+    created_at      TEXT DEFAULT (datetime('now')),
+    challenged_at   TEXT,                     -- M7.4 verifier 挑战时间
+    status          TEXT DEFAULT 'active',    -- 'active' | 'revoked' | 'challenged'
+    UNIQUE(alias_type, alias_value, product_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_value ON product_aliases(alias_value)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_product ON product_aliases(product_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_type ON product_aliases(alias_type)`);
+}
+// ─── M-5：region 切换 audit log + 24h 限流 ──────────────────────────
+export function initRegionChangeLogSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS region_change_log (
+    id          TEXT PRIMARY KEY,
+    user_id     TEXT NOT NULL,
+    from_region TEXT,
+    to_region   TEXT NOT NULL,
+    ip          TEXT,
+    created_at  TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_region_change_user_ts ON region_change_log(user_id, created_at DESC)`);
+}
+// ─── P13: 购物车 ───────────────────────────────────────────────────
+export function initCartItemsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS cart_items (
+    user_id     TEXT NOT NULL,
+    product_id  TEXT NOT NULL,
+    qty         INTEGER NOT NULL DEFAULT 1,
+    added_at    TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (user_id, product_id)
+  )
+`);
+}
+// ─── P14: 关注关系（社交电商）──────────────────────────────────────
+export function initFollowsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS follows (
+    follower_id  TEXT NOT NULL,
+    followee_id  TEXT NOT NULL,
+    created_at   TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (follower_id, followee_id)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_follows_followee ON follows(followee_id)');
+    }
+    catch { }
+}
+// ─── Web Push 订阅 ─────────────────────────────────────────────────
+export function initPushSubscriptionsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS push_subscriptions (
+    id            TEXT PRIMARY KEY,
+    user_id       TEXT NOT NULL,
+    endpoint      TEXT NOT NULL,
+    p256dh        TEXT NOT NULL,
+    auth          TEXT NOT NULL,
+    user_agent    TEXT,
+    enabled       INTEGER DEFAULT 1,
+    created_at    TEXT DEFAULT (datetime('now')),
+    UNIQUE(user_id, endpoint)
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_push_user ON push_subscriptions(user_id, enabled)');
+    }
+    catch { }
+}
+// ─── 用户会话（一键全登出 = rotate users.api_key）──────────────────
+export function initUserSessionsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS user_sessions (
+    id              TEXT PRIMARY KEY,
+    user_id         TEXT NOT NULL,
+    api_key         TEXT NOT NULL,
+    ip              TEXT,
+    user_agent      TEXT,
+    fingerprint_hash TEXT,
+    created_at      TEXT DEFAULT (datetime('now')),
+    last_seen_at    TEXT DEFAULT (datetime('now')),
+    revoked_at      TEXT
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_sessions_user ON user_sessions(user_id, revoked_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_sessions_key ON user_sessions(api_key)');
+    }
+    catch { }
+}
+// ─── A2 黑名单（精准匹配护栏）──────────────────────────────────────
+export function initUserBlocklistSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS user_blocklist (
+    blocker_id  TEXT NOT NULL,
+    blocked_id  TEXT NOT NULL,
+    reason      TEXT,
+    created_at  TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (blocker_id, blocked_id)
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_blocklist_blocker ON user_blocklist(blocker_id)");
+    }
+    catch { }
+}
+// ─── 导入次数追踪表 ────────────────────────────────────────────────
+export function initImportLogsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS import_logs (
+    id         TEXT PRIMARY KEY,
+    user_id    TEXT NOT NULL,
+    created_at TEXT DEFAULT (datetime('now'))
+  )
+`);
+}
+// ─── 错误日志（server uncaught/rejection + client onerror）──────────
+export function initErrorLogSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS error_log (
+    id          INTEGER PRIMARY KEY AUTOINCREMENT,
+    source      TEXT NOT NULL,    -- 'server-uncaught' | 'server-rejection' | 'client'
+    message     TEXT NOT NULL,
+    stack       TEXT,
+    url         TEXT,             -- 客户端 location.href
+    user_agent  TEXT,             -- 客户端 UA
+    user_id     TEXT,             -- 已登录用户（可空）
+    created_at  TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_error_log_created ON error_log(created_at)');
+    }
+    catch { }
+}
+// ─── 二手市场（1 件即 1 件，个人卖家，协议费 1%）───────────────────
+// 注：调用方 server.ts 保留原 try/catch + [secondhand schema] label；
+// 这些 DDL 原本无逐句 try/catch（靠外层 try 兜底），此处照搬不加。
+export function initSecondhandItemsSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_items (
+    id            TEXT PRIMARY KEY,
+    seller_id     TEXT NOT NULL,
+    title         TEXT NOT NULL,
+    description   TEXT,
+    category      TEXT NOT NULL,        -- phone/computer/appliance/furniture/clothing/book/toy/sports/other
+    condition_grade TEXT NOT NULL,      -- brand_new/like_new/lightly_used/well_used/heavily_used
+    price         REAL NOT NULL,
+    negotiable    INTEGER DEFAULT 0,
+    images        TEXT,                 -- JSON 数组：dataURL 字符串 (最多 9 张)
+    region        TEXT,
+    fulfillment   TEXT DEFAULT 'both',  -- shipping / in_person / both
+    status        TEXT DEFAULT 'available',  -- available / reserved / sold / closed
+    view_count    INTEGER DEFAULT 0,
+    created_at    TEXT DEFAULT (datetime('now')),
+    updated_at    TEXT DEFAULT (datetime('now')),
+    sold_at       TEXT,
+    sold_order_id TEXT
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_status_created ON secondhand_items(status, created_at DESC)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_seller ON secondhand_items(seller_id, status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_cat ON secondhand_items(category, status)`);
+}
+// ─── 测评免单计划（1 product 1 row；后续无 ALTER）──────────────────
+export function initProductTrialCampaignsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_trial_campaigns (
+    id                TEXT PRIMARY KEY,                   -- ptc_xxxx
+    -- 1 product 1 row (复用同一行：关闭后再开 = UPDATE status='active'，避免 UNIQUE 阻断 reopen)
+    product_id        TEXT NOT NULL UNIQUE REFERENCES products(id),
+    seller_id         TEXT NOT NULL REFERENCES users(id),
+    quota_total       INTEGER NOT NULL,                   -- 总名额 1-200
+    quota_claimed     INTEGER NOT NULL DEFAULT 0,
+    reach_threshold   INTEGER NOT NULL,                   -- 综合 reach 阈值 (默认 50)
+    min_chars         INTEGER NOT NULL DEFAULT 50,        -- 笔记最少字数
+    min_days_live     INTEGER NOT NULL DEFAULT 7,         -- 笔记需 live 至少 N 天才评估
+    status            TEXT NOT NULL DEFAULT 'active',     -- active / paused / closed
+    created_at        TEXT DEFAULT (datetime('now')),
+    closed_at         TEXT
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_ptc_seller ON product_trial_campaigns(seller_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_ptc_product ON product_trial_campaigns(product_id, status)");
+    }
+    catch { }
+}
+// ─── 测评免单认领（snap/audit ALTER 刻意留 server.ts 原位）──────────
+export function initProductTrialClaimsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_trial_claims (
+    id                TEXT PRIMARY KEY,                   -- pcl_xxxx
+    campaign_id       TEXT NOT NULL REFERENCES product_trial_campaigns(id),
+    product_id        TEXT NOT NULL REFERENCES products(id),
+    seller_id         TEXT NOT NULL REFERENCES users(id),
+    buyer_id          TEXT NOT NULL REFERENCES users(id),
+    order_id          TEXT NOT NULL REFERENCES orders(id),
+    note_id           TEXT,                               -- shareables.id with type='note'
+    status            TEXT NOT NULL DEFAULT 'pending_note', -- pending_note / pending_threshold / refunded / expired / cancelled
+    reach_score       REAL DEFAULT 0,
+    metrics_json      TEXT,                               -- 最新评估的 {views, shares, conversions} 快照
+    refund_amount     REAL,
+    refunded_at       TEXT,
+    expired_at        TEXT,
+    last_eval_at      TEXT,
+    claimed_at        TEXT DEFAULT (datetime('now')),
+    note_linked_at    TEXT,
+    UNIQUE(buyer_id, product_id)                          -- 一买家一商品仅 1 个名额
+  )
+`);
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_campaign ON product_trial_claims(campaign_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_buyer ON product_trial_claims(buyer_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_seller ON product_trial_claims(seller_id, status)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_eval ON product_trial_claims(status, last_eval_at)");
+    }
+    catch { }
+    try {
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_note ON product_trial_claims(note_id) WHERE note_id IS NOT NULL");
+    }
+    catch { }
+}
+// ─── Wave B-3: 退货请求（pickup ALTER 刻意留 server.ts 原位）────────
+export function initReturnRequestsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS return_requests (
+    id                   TEXT PRIMARY KEY,
+    order_id             TEXT NOT NULL,
+    buyer_id             TEXT NOT NULL,
+    seller_id            TEXT NOT NULL,
+    product_id           TEXT NOT NULL,
+    reason               TEXT NOT NULL,          -- 'quality' | 'wrong_item' | 'damaged' | 'no_longer_needed' | 'other'
+    reason_text          TEXT,
+    refund_amount        DECIMAL(18,2),          -- 默认 = order.total_amount
+    status               TEXT NOT NULL DEFAULT 'pending', -- pending | accepted | rejected | refunded | escalated | cancelled
+    seller_response      TEXT,
+    escalated_dispute_id TEXT,
+    created_at           TEXT DEFAULT (datetime('now')),
+    resolved_at          TEXT
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_returns_seller_pending ON return_requests(seller_id, status) WHERE status = \'pending\'');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_returns_buyer ON return_requests(buyer_id, created_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_returns_order ON return_requests(order_id)');
+    }
+    catch { }
+}
+// ─── W2 售后协商时间线（flagged/flag_reasons ALTER 刻意留 server.ts 原位）──
+export function initReturnMessagesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS return_messages (
+    id          TEXT PRIMARY KEY,            -- rmsg_xxx
+    return_id   TEXT NOT NULL,
+    sender_id   TEXT NOT NULL,
+    sender_role TEXT NOT NULL,               -- 'buyer' | 'seller' | 'system'
+    body        TEXT NOT NULL,
+    created_at  TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_rmsg_return ON return_messages(return_id, created_at)');
+    }
+    catch { }
+}
+// ─── Wave B-1: 商品 variants（has_variants/options_key ALTER + 回填 + uniq 索引刻意留 server.ts 原位）──
+export function initProductVariantsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_variants (
+    id              TEXT PRIMARY KEY,
+    product_id      TEXT NOT NULL,
+    sku             TEXT,                 -- 卖家内部 SKU 编号（可选）
+    options_json    TEXT NOT NULL,        -- {"颜色":"红","尺寸":"L"} 必填
+    price_override  REAL,                 -- null = 用 product.price
+    stock           INTEGER DEFAULT 0,
+    images_json     TEXT,                 -- variant 专属图（可选，null = 用 product.images）
+    is_active       INTEGER DEFAULT 1,
+    created_at      TEXT DEFAULT (datetime('now')),
+    updated_at      TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_pv_product ON product_variants(product_id, is_active)');
+    }
+    catch { }
+}
+// ─── B-4: 编辑精选 / 每周推荐 ──────────────────────────────────────
+export function initEditorPicksSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS editor_picks (
+    id          TEXT PRIMARY KEY,
+    kind        TEXT NOT NULL,     -- 'product' | 'seller'
+    target_id   TEXT NOT NULL,
+    title       TEXT,              -- 编辑推荐语
+    note        TEXT,
+    starts_at   TEXT NOT NULL,
+    ends_at     TEXT NOT NULL,
+    sort_order  INTEGER DEFAULT 0,
+    created_by  TEXT,
+    created_at  TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_ep_active ON editor_picks(kind, ends_at, sort_order)');
+    }
+    catch { }
+}
+// ─── D-3: KYC light — 实名认证（轻度，不存原始证件号）──────────────
+export function initKycRecordsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS kyc_records (
+    user_id        TEXT PRIMARY KEY,
+    real_name      TEXT NOT NULL,
+    id_type        TEXT NOT NULL,            -- 'passport' | 'national_id' | 'driver_license'
+    id_number_hash TEXT NOT NULL,            -- sha256(id_number + MASTER_SEED)
+    id_number_last4 TEXT,                    -- 末 4 位明文（便于核对）
+    status         TEXT NOT NULL DEFAULT 'pending',  -- pending / approved / rejected
+    reject_reason  TEXT,
+    reviewed_by    TEXT,
+    reviewed_at    TEXT,
+    submitted_at   TEXT DEFAULT (datetime('now'))
+  )
+`);
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_kyc_status ON kyc_records(status, submitted_at)');
+    }
+    catch { }
+}
+// ─── WebAuthn / Passkey — 敏感操作二次确认 ─────────────────────────
+// 注：调用方 server.ts 保留原外层 try/catch + [webauthn schema] label，并在本
+// init 调用之后、同一 try 内保留 users.webauthn_required_for_withdraw ALTER。
+// 这些 DDL 原本无逐句 try/catch（靠外层 try 兜底），此处照搬不加。
+export function initWebauthnSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_credentials (
+    id              TEXT PRIMARY KEY,         -- credential.id (base64url)
+    user_id         TEXT NOT NULL,
+    public_key      BLOB NOT NULL,            -- COSE public key
+    counter         INTEGER NOT NULL DEFAULT 0,
+    transports      TEXT,                     -- JSON array
+    device_label    TEXT,                     -- user-friendly label
+    created_at      TEXT DEFAULT (datetime('now')),
+    last_used_at    TEXT
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_user ON webauthn_credentials(user_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_challenges (
+    id           TEXT PRIMARY KEY,
+    user_id      TEXT NOT NULL,
+    challenge    TEXT NOT NULL,
+    purpose      TEXT NOT NULL,                -- 'register' | 'withdraw' | 'change-password' | 'reveal-key' | 'region'
+    purpose_data TEXT,                          -- JSON：例如 {amount: 1000, to_address: '0x...'}
+    created_at   TEXT DEFAULT (datetime('now')),
+    expires_at   TEXT NOT NULL,
+    consumed_at  TEXT
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_chall_user ON webauthn_challenges(user_id, expires_at)`);
+    // gate token：auth/finish 成功后颁发，绑定 user + purpose + 业务参数（防重放）
+    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_gate_tokens (
+    id           TEXT PRIMARY KEY,             -- token
+    user_id      TEXT NOT NULL,
+    purpose      TEXT NOT NULL,
+    purpose_data TEXT,                          -- JSON
+    expires_at   TEXT NOT NULL,                 -- now + 60s
+    consumed_at  TEXT
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_gate_user ON webauthn_gate_tokens(user_id, expires_at)`);
+}
+// ─── M7.3：claim 验证任务系统（base） ──────────────────────────────
+// 注：调用方 server.ts 保留原外层 try/catch + [M7.3 schema claim_verification]；
+// 本函数只含 claim_verification_tasks/votes + indexes，结算扩展 ALTER
+// (majority_vote / was_majority) 刻意留在 server.ts 本函数调用之后。
+export function initClaimVerificationBaseSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS claim_verification_tasks (
+    id                  TEXT PRIMARY KEY,
+    order_id            TEXT NOT NULL,
+    buyer_id            TEXT NOT NULL,
+    seller_id           TEXT NOT NULL,
+    product_id          TEXT NOT NULL,
+    claim_target        TEXT NOT NULL,    -- 'price' | 'commission' | 'protection' | 'return' | 'warranty' | 'handling' | 'other'
+    claim_text          TEXT NOT NULL,    -- 买家陈述（≤ 500 字）
+    evidence_uri        TEXT,             -- 买家证据（URL / hash）
+    stake_buyer         REAL NOT NULL,    -- 买家锁定的质押金
+    seller_evidence_uri TEXT,             -- 卖家提交的证据
+    seller_evidence_at  TEXT,
+    deadline_at         TEXT NOT NULL,    -- 默认 48h；卖家提交证据后 +24h
+    status              TEXT NOT NULL DEFAULT 'open',  -- 'open' | 'sealed' | 'resolved_pass' | 'resolved_fail' | 'resolved_no_fault' | 'timeout_pass' | 'timeout_fail'
+    resolved_at         TEXT,
+    created_at          TEXT DEFAULT (datetime('now')),
+    UNIQUE(order_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_status ON claim_verification_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_buyer ON claim_verification_tasks(buyer_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_seller ON claim_verification_tasks(seller_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_deadline ON claim_verification_tasks(deadline_at) WHERE status = 'open'`);
+    db.exec(`CREATE TABLE IF NOT EXISTS claim_verification_votes (
+    id           TEXT PRIMARY KEY,
+    task_id      TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,   -- 'pass' | 'fail' | 'no_fault'
+    evidence_uri TEXT,
+    note         TEXT,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(task_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvv_task ON claim_verification_votes(task_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvv_verifier ON claim_verification_votes(verifier_id)`);
+}
+// ─── verifier 禁言 / 永封记录（outlier 累计触发）────────────────────
+export function initClaimVerifierSuspensionsSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS claim_verifier_suspensions (
+    id            TEXT PRIMARY KEY,
+    user_id       TEXT NOT NULL,
+    type          TEXT NOT NULL,    -- 'suspended' | 'revoked'
+    until_at      TEXT,             -- NULL = permanent (revoked)
+    reason        TEXT,
+    outlier_count INTEGER,
+    created_at    TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvs_user ON claim_verifier_suspensions(user_id, created_at DESC)`);
+}
+// ─── Sprint 1: 商品声明验证（product 层，与 order claim 平行）────────
+export function initProductClaimSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS product_claim_tasks (
+    id              TEXT PRIMARY KEY,
+    product_id      TEXT NOT NULL,
+    claimant_id     TEXT NOT NULL,
+    seller_id       TEXT NOT NULL,
+    claim_target    TEXT NOT NULL,    -- 'title' | 'description' | 'condition' | 'return_days' | 'handling_hours' | 'warranty_days' | 'shipping_regions' | 'origin' | 'other'
+    claim_text      TEXT NOT NULL,    -- 发起人陈述 6-500 字
+    evidence_uri    TEXT,             -- 发起人证据 URL
+    stake_claimant  REAL NOT NULL,    -- 发起人锁定质押
+    seller_evidence_uri TEXT,         -- 卖家反驳证据
+    seller_evidence_at  TEXT,
+    deadline_at     TEXT NOT NULL,    -- 默认 72h；卖家提交证据后 +24h
+    status          TEXT NOT NULL DEFAULT 'open',  -- 'open' | 'sealed' | 'resolved_upheld' | 'resolved_dismissed' | 'expired'
+    ruling          TEXT,             -- 'upheld' | 'dismissed' | 'insufficient'
+    majority_vote   TEXT,
+    resolved_at     TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_status ON product_claim_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_product ON product_claim_tasks(product_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_claimant ON product_claim_tasks(claimant_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_seller ON product_claim_tasks(seller_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS product_claim_votes (
+    id           TEXT PRIMARY KEY,
+    claim_id     TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,    -- 'upheld' | 'dismissed' | 'insufficient'
+    evidence_uri TEXT,
+    note         TEXT,
+    was_majority INTEGER,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(claim_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pcv_claim ON product_claim_votes(claim_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_pcv_verifier ON product_claim_votes(verifier_id)`);
+}
+// ─── Sprint 2-A: 测评真实性验证（shareables / manifests）────────────
+export function initReviewClaimSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS review_claim_tasks (
+    id              TEXT PRIMARY KEY,
+    review_type     TEXT NOT NULL,    -- 'shareable' | 'manifest'
+    review_id       TEXT NOT NULL,    -- shareable.id 或 manifest.hash
+    product_id      TEXT,             -- 关联商品（用于显示）
+    reviewer_id     TEXT NOT NULL,    -- 被诉评测作者
+    claimant_id     TEXT NOT NULL,
+    claim_target    TEXT NOT NULL,    -- 'not_real_purchase' | 'paid_promo' | 'incentivized' | 'misleading' | 'fake' | 'other'
+    claim_text      TEXT NOT NULL,
+    evidence_uri    TEXT,
+    stake_claimant  REAL NOT NULL,
+    deadline_at     TEXT NOT NULL,
+    status          TEXT NOT NULL DEFAULT 'open',
+    ruling          TEXT,
+    majority_vote   TEXT,
+    resolved_at     TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_status ON review_claim_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_review ON review_claim_tasks(review_type, review_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_reviewer ON review_claim_tasks(reviewer_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS review_claim_votes (
+    id           TEXT PRIMARY KEY,
+    claim_id     TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,    -- 'upheld' | 'dismissed' | 'insufficient'
+    evidence_uri TEXT,
+    note         TEXT,
+    was_majority INTEGER,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(claim_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_rcv_claim ON review_claim_votes(claim_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_rcv_verifier ON review_claim_votes(verifier_id)`);
+}
+// ─── Sprint 2-B: 二手成色验证（secondhand_items）───────────────────
+export function initSecondhandClaimSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_claim_tasks (
+    id              TEXT PRIMARY KEY,
+    sh_item_id      TEXT NOT NULL,
+    seller_id       TEXT NOT NULL,    -- 二手卖家
+    claimant_id     TEXT NOT NULL,
+    claim_target    TEXT NOT NULL,    -- 'condition' | 'images' | 'description' | 'title' | 'price' | 'other'
+    claim_text      TEXT NOT NULL,
+    evidence_uri    TEXT,
+    stake_claimant  REAL NOT NULL,
+    deadline_at     TEXT NOT NULL,
+    status          TEXT NOT NULL DEFAULT 'open',
+    ruling          TEXT,
+    majority_vote   TEXT,
+    resolved_at     TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_status ON secondhand_claim_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_item ON secondhand_claim_tasks(sh_item_id)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_seller ON secondhand_claim_tasks(seller_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_claim_votes (
+    id           TEXT PRIMARY KEY,
+    claim_id     TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,
+    evidence_uri TEXT,
+    note         TEXT,
+    was_majority INTEGER,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(claim_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_scv_claim ON secondhand_claim_votes(claim_id)`);
+}
+// ─── Sprint 3-A: 拍卖声明（auctions）───────────────────────────────
+export function initAuctionClaimSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS auction_claim_tasks (
+    id              TEXT PRIMARY KEY,
+    auction_id      TEXT NOT NULL,
+    seller_id       TEXT NOT NULL,
+    claimant_id     TEXT NOT NULL,
+    claim_target    TEXT NOT NULL,    -- 'unreasonable_reserve' | 'shill_bidding' | 'collusion' | 'fake_listing' | 'other'
+    claim_text      TEXT NOT NULL,
+    evidence_uri    TEXT,
+    stake_claimant  REAL NOT NULL,
+    deadline_at     TEXT NOT NULL,
+    status          TEXT NOT NULL DEFAULT 'open',
+    ruling          TEXT,
+    majority_vote   TEXT,
+    resolved_at     TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_act_status ON auction_claim_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_act_auction ON auction_claim_tasks(auction_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS auction_claim_votes (
+    id           TEXT PRIMARY KEY,
+    claim_id     TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,
+    evidence_uri TEXT,
+    note         TEXT,
+    was_majority INTEGER,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(claim_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_acv_claim ON auction_claim_votes(claim_id)`);
+}
+// ─── Sprint 3-B: 慈善许愿声明（wishes）─────────────────────────────
+export function initWishClaimSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS wish_claim_tasks (
+    id              TEXT PRIMARY KEY,
+    wish_id         TEXT NOT NULL,
+    wisher_id       TEXT NOT NULL,
+    claimant_id     TEXT NOT NULL,
+    claim_target    TEXT NOT NULL,    -- 'fake_identity' | 'fake_story' | 'already_fulfilled' | 'duplicate' | 'inappropriate' | 'other'
+    claim_text      TEXT NOT NULL,
+    evidence_uri    TEXT,
+    stake_claimant  REAL NOT NULL,
+    deadline_at     TEXT NOT NULL,
+    status          TEXT NOT NULL DEFAULT 'open',
+    ruling          TEXT,
+    majority_vote   TEXT,
+    resolved_at     TEXT,
+    created_at      TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wct_status ON wish_claim_tasks(status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wct_wish ON wish_claim_tasks(wish_id)`);
+    db.exec(`CREATE TABLE IF NOT EXISTS wish_claim_votes (
+    id           TEXT PRIMARY KEY,
+    claim_id     TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    vote         TEXT NOT NULL,
+    evidence_uri TEXT,
+    note         TEXT,
+    was_majority INTEGER,
+    voted_at     TEXT DEFAULT (datetime('now')),
+    UNIQUE(claim_id, verifier_id)
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_wcv_claim ON wish_claim_votes(claim_id)`);
+}
+// ─── 里程碑 3：反操纵层 schema ──────────────────────────────────────
+// 注：调用方 server.ts 保留原外层 try/catch + label（[M3 schema scl/cal/ral]）；
+// 这些 DDL 原本无逐句 try/catch（靠外层 try 兜底），此处照搬不加。
+// shareables 的 unique_click_count / flag_new_account ALTER 刻意留在 server.ts
+// 原位（scl init 之后、cal init 之前）。
+export function initShareableClickLogSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS shareable_click_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    shareable_id TEXT NOT NULL,
+    ip_hash TEXT NOT NULL,
+    ua_hash TEXT NOT NULL,
+    ref_path TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_scl_share_ts ON shareable_click_log(shareable_id, created_at)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_scl_share_ipua ON shareable_click_log(shareable_id, ip_hash, ua_hash, created_at)`);
+}
+export function initCommissionAuditLogSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS commission_audit_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    order_id TEXT,
+    buyer_id TEXT NOT NULL,
+    seller_id TEXT NOT NULL,
+    flag TEXT NOT NULL,                  -- 'sponsor_chain_cross' / 'self_in_chain'
+    detail TEXT,                          -- JSON: { relation: 'buyer_ancestor_of_seller' | ..., path: '...' }
+    created_at TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_cal_buyer ON commission_audit_log(buyer_id, created_at)`);
+}
+export function initRegistrationAuditLogSchema(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS registration_audit_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    user_id TEXT NOT NULL,
+    ip_hash TEXT NOT NULL,
+    ua_hash TEXT NOT NULL,
+    sponsor_id TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+  )`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_ral_ip_ts ON registration_audit_log(ip_hash, created_at)`);
+}
+// ─── 外部链接验证 schema ────────────────────────────────────────────
+// 注：product_external_links 的 revoked/platform/external_id/external_title ALTER、
+// idx_pel_platform_ext / idx_pel_ext_title 索引、以及回填 IIFE 刻意留 server.ts 原位。
+// 这些 DDL 原本是 top-level db.exec 无外层 catch，helper 不新增 catch。
+export function initProductExternalLinksBaseSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS product_external_links (
+    id          TEXT PRIMARY KEY,
+    product_id  TEXT NOT NULL,
+    url         TEXT NOT NULL,
+    source      TEXT DEFAULT 'manual',
+    verified    INTEGER DEFAULT 0,
+    verify_note TEXT,
+    added_at    TEXT DEFAULT (datetime('now')),
+    verified_at TEXT,
+    UNIQUE(product_id, url)
+  )
+`);
+}
+export function initLinkChallengesSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS link_challenges (
+    id          TEXT PRIMARY KEY,
+    product_id  TEXT NOT NULL,
+    url         TEXT NOT NULL,
+    code        TEXT NOT NULL,
+    status      TEXT DEFAULT 'pending',
+    created_at  TEXT DEFAULT (datetime('now')),
+    expires_at  TEXT NOT NULL,
+    verified_at TEXT
+  )
+`);
+}
+export function initVerifyTasksSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verify_tasks (
+    id                  TEXT PRIMARY KEY,
+    type                TEXT NOT NULL DEFAULT 'code_check',
+    product_id          TEXT NOT NULL,
+    url                 TEXT NOT NULL,
+    code                TEXT,
+    verifiers_needed    INTEGER NOT NULL DEFAULT 3,
+    reward_per_verifier REAL NOT NULL DEFAULT 0.1,
+    fee_locked          REAL NOT NULL DEFAULT 0,
+    status              TEXT NOT NULL DEFAULT 'open',
+    result              TEXT,
+    created_at          TEXT DEFAULT (datetime('now')),
+    expires_at          TEXT NOT NULL,
+    settled_at          TEXT
+  )
+`);
+}
+export function initVerifySubmissionsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verify_submissions (
+    id           TEXT PRIMARY KEY,
+    task_id      TEXT NOT NULL,
+    verifier_id  TEXT NOT NULL,
+    submission   TEXT,
+    verdict      TEXT,
+    claimed_at   TEXT DEFAULT (datetime('now')),
+    submitted_at TEXT,
+    UNIQUE(task_id, verifier_id)
+  )
+`);
+}
+export function initVerifierStatsSchema(db) {
+    db.exec(`
+  CREATE TABLE IF NOT EXISTS verifier_stats (
+    user_id       TEXT PRIMARY KEY,
+    verify_rights INTEGER NOT NULL DEFAULT 3,
+    tasks_done    INTEGER NOT NULL DEFAULT 0,
+    tasks_correct INTEGER NOT NULL DEFAULT 0,
+    tasks_wrong   INTEGER NOT NULL DEFAULT 0,
+    suspended_until TEXT
+  )
+`);
+}
+/**
+ * Non-money columns the MCP sandbox register → list_product → search path needs
+ * that previously lived ONLY as inline `ALTER TABLE` statements in
+ * src/pwa/server.ts boot (so an MCP-initialized fresh DB never got them, and a
+ * sandbox `webaz_register` / `webaz_list_product` failed with "no such column").
+ *
+ * Single source shared by the PWA boot path (called from the same boot position
+ * the inline `handle` pre-warm ran, before the anchor migration) and the MCP
+ * runtime schema composition root. All guarded + idempotent; the `users` /
+ * `products` CREATE TABLEs are in L0 initDatabase(), so call this AFTER it
+ * (CREATE-before-ALTER preserved).
+ *
+ * SCOPE GUARD: exactly the 14 non-money identity/locale/product-attribute
+ * columns the register/list/search regression requires — NO wallet / order /
+ * status / escrow / commission / fund / tokenomics columns. DDL text is
+ * byte-identical to the former inline statements, so schema:verify is zero-diff.
+ */
+export function initRegisterListSearchColumns(db) {
+    for (const stmt of [
+        // users — 4-layer identity model short code + handle + sales/commission region
+        'ALTER TABLE users ADD COLUMN permanent_code TEXT',
+        'ALTER TABLE users ADD COLUMN handle TEXT',
+        "ALTER TABLE users ADD COLUMN region       TEXT DEFAULT 'global'",
+        // products — structured listing attributes (specs / sourcing ref / shipping / returns / warranty)
+        'ALTER TABLE products ADD COLUMN specs TEXT',
+        'ALTER TABLE products ADD COLUMN brand TEXT',
+        'ALTER TABLE products ADD COLUMN model TEXT',
+        'ALTER TABLE products ADD COLUMN source_price REAL',
+        'ALTER TABLE products ADD COLUMN ship_regions TEXT DEFAULT "全国"',
+        'ALTER TABLE products ADD COLUMN handling_hours INTEGER DEFAULT 24',
+        'ALTER TABLE products ADD COLUMN estimated_days TEXT',
+        'ALTER TABLE products ADD COLUMN fragile INTEGER DEFAULT 0',
+        'ALTER TABLE products ADD COLUMN return_days INTEGER DEFAULT 7',
+        'ALTER TABLE products ADD COLUMN return_condition TEXT',
+        'ALTER TABLE products ADD COLUMN warranty_days INTEGER DEFAULT 0',
+    ]) {
+        try {
+            db.exec(stmt);
+        }
+        catch { /* column already exists */ }
+    }
+    // unique short-code / handle indexes (partial — only non-NULL)
+    try {
+        db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_users_permanent_code ON users(permanent_code) WHERE permanent_code IS NOT NULL");
+    }
+    catch { /* exists */ }
+    try {
+        db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_users_handle ON users(handle) WHERE handle IS NOT NULL");
+    }
+    catch { /* exists */ }
+}
+/**
+ * RFC-020 PR-B — agent delegation grants (Passkey-approved, scoped, short-lived,
+ * revocable agent credentials; NOT a permanent api_key). A NEW table — deliberately
+ * separate from `agent_attestations` (RFC-020 decision: do not overload it). Pure
+ * idempotent DDL; the composition root (applyWebazRuntimeSchema) auto-runs this so
+ * MCP also has the table for the future `webaz_pair` consumer.
+ *
+ * Bearer-first: `token_hash` stores a SHA-256 of the bearer (raw bearer is shown
+ * once, never stored). `agent_pubkey` / `pkce_challenge` are RESERVED for the PoP /
+ * device-flow phase (required before any risk scope or longer-lived delegation) —
+ * unused/NULL in PR-B. `human_confirm_required` is a design field only; its
+ * enforcement reuses the existing `webauthn_gate_tokens` / requireHumanPresence
+ * gate (no second confirmation mechanism). NO money/order/status columns.
+ */
+export function initAgentDelegationGrantsSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS agent_delegation_grants (
+      grant_id        TEXT PRIMARY KEY,                 -- grt_xxx
+      human_id        TEXT NOT NULL,                    -- delegating human (users.id)
+      agent_label     TEXT,                             -- human-friendly agent name
+      capabilities    TEXT NOT NULL DEFAULT '[]',       -- JSON [{capability, constraints}] — SAFE scopes only in PR-B
+      token_hash      TEXT,                             -- SHA-256 of bearer (bearer-first); raw never stored
+      agent_pubkey    TEXT,                             -- RESERVED (PoP, RFC-020 §3.3); NULL in PR-B
+      pkce_challenge  TEXT,                             -- RESERVED (device-flow pairing); NULL in PR-B
+      human_confirm_required INTEGER NOT NULL DEFAULT 0,-- design field; enforcement reuses webauthn_gate_tokens
+      status          TEXT NOT NULL DEFAULT 'active',   -- active | revoked | expired
+      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+      expires_at      TEXT NOT NULL,                    -- short-lived (clamped, RFC-020 bearer-first)
+      revoked_at      TEXT,
+      revoked_reason  TEXT
+    )
+  `);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_adg_human  ON agent_delegation_grants(human_id, status)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_adg_token  ON agent_delegation_grants(token_hash)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_adg_expiry ON agent_delegation_grants(status, expires_at)`);
+}
+/**
+ * RFC-020 PR-C1 — agent pairing sessions (OAuth device-flow + PKCE shape).
+ *
+ * One short-lived, one-time pairing per attempt: the agent starts a pairing (sends a
+ * PKCE code_challenge), a logged-in human approves it (server-generated consent), and
+ * the agent retrieves the credential ONCE using its PKCE verifier. NO raw bearer is
+ * ever stored here — the bearer is generated at retrieval and only its SHA-256 hash is
+ * persisted on the grant (agent_delegation_grants). `agent_pubkey` is reserved for the
+ * PoP phase (stored if sent, NOT verified in C1). Pure idempotent DDL; the composition
+ * root auto-runs it so MCP also has the table. NO money/order/status columns.
+ */
+export function initAgentPairingSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS agent_pairing_sessions (
+      pairing_id      TEXT PRIMARY KEY,                 -- par_xxx (agent holds this)
+      user_code       TEXT NOT NULL,                    -- short one-time code the human approves
+      code_challenge  TEXT NOT NULL,                    -- PKCE S256 = base64url(sha256(verifier))
+      agent_label     TEXT,
+      agent_pubkey    TEXT,                             -- RESERVED (PoP); stored if sent, NOT verified in C1
+      reason          TEXT,                             -- agent free-text reason (shown in consent)
+      capabilities    TEXT NOT NULL DEFAULT '[]',       -- requested SAFE scopes (validated safe-only at start)
+      status          TEXT NOT NULL DEFAULT 'pending',  -- pending | approved | consumed | expired | revoked
+      human_id        TEXT,                             -- set on approve
+      grant_id        TEXT,                             -- set on approve (issued grant; token_hash filled at retrieve)
+      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+      expires_at      TEXT NOT NULL,                    -- short TTL
+      approved_at     TEXT,
+      consumed_at     TEXT                              -- one-time retrieval marker
+    )
+  `);
+    db.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_aps_user_code ON agent_pairing_sessions(user_code)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_aps_status ON agent_pairing_sessions(status, expires_at)`);
+}
+/**
+ * RFC-020 PR-C2a — per-request audit of delegation-grant authorizations (RFC-020 §3.7).
+ *
+ * Records each grant-scoped access attempt (allow/deny + reason) so "every agent action
+ * is backed by an accountable human" is checkable. Append-only log; pure idempotent DDL;
+ * composition root auto-runs it for MCP. NO money/order/status columns.
+ */
+export function initAgentGrantAuthLogSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS agent_grant_auth_log (
+      id          INTEGER PRIMARY KEY AUTOINCREMENT,
+      grant_id    TEXT,                              -- null when token missing / grant not found
+      human_id    TEXT,                              -- the accountable human (when resolved)
+      capability  TEXT NOT NULL,                     -- the required safe scope checked
+      outcome     TEXT NOT NULL,                     -- 'allow' | 'deny'
+      error_code  TEXT,                              -- typed denial reason (null on allow)
+      ts          TEXT NOT NULL DEFAULT (datetime('now'))
+    )
+  `);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_agal_grant ON agent_grant_auth_log(grant_id, ts)`);
+    db.exec(`CREATE INDEX IF NOT EXISTS idx_agal_ts ON agent_grant_auth_log(ts)`);
+}