@seasonkoh/webaz 0.1.27 → 0.1.29

package/dist/pwa/server.js

@@ -22,11 +22,15 @@ import crypto from 'crypto';
 import { initDatabase, generateId } from '../layer0-foundation/L0-1-database/schema.js';
 import { setSeamDb } from '../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 import { initSystemUser, transition, getOrderStatus, checkTimeouts, settleFault } from '../layer0-foundation/L0-2-state-machine/engine.js';
+import { genuineSalePredicate } from '../layer0-foundation/L0-2-state-machine/genuine-sale.js';
+import { settleDirectPayFeeAtCompletion } from '../direct-pay-fee-ar.js'; // RFC-018 PR4 genuine-sale SSOT + Direct Pay Rail 1 平台费链下应收(完成时释放遗留模拟 stake + accrue)
 import { endpointToAction, endpointToReadAction } from './endpoint-actions.js';
 import { AGENT_RATE_PER_MIN_DEFAULTS, CROSS_USER_READ_DAILY_CAP, MASS_ACTION_TYPES, MASS_ACTION_DAILY_CAPS } from './limits.js';
 // #420 P1-2/P1-3/P1-4 — 反滥用阈值单一真相源（governance-adjustable protocol_params）+ 纯决策函数
 import { ANTI_ABUSE_PARAMS, readAntiAbuseThresholds, agentTrustLevel, agentSybilPenalty, agentStrikeSeverity, verifierOutlierBand } from './anti-abuse-thresholds.js';
+import { DIRECT_PAY_CONTROL_PARAMS, DIRECT_PAY_AML_PARAMS } from '../direct-pay-controls.js'; // PR-4a 控制面 + PR-6D AML 监控 param 默认 seed(均 fail-closed / inert)
 import { initOrderChainSchema, appendOrderEvent, getOrderChain, verifyOrderChain } from '../layer0-foundation/L0-2-state-machine/order-chain.js';
+import { initVerifierWhitelistSchema, initMcpToolCallsSchema, initNotePhotoIndexSchema, initUserWishlistSchema, initProductQaSchema, initCouponsSchema, initAnnouncementsSchema, initProductWaitlistSchema, initFlashSalesSchema, initPublicIdeasSchema, initAuctionRemindersSchema, initEmailSubscriptionsSchema, initFeedbackTicketsSchema, initFeedbackMessagesSchema, initDisputeCasesSchema, initDisputeCommentsSchema, initDisputeCommentRepliesSchema, initShareableCommentsSchema, initDisputeFairnessVotesSchema, initOrderRatingsSchema, initBuyerRatingsSchema, initUserAddressesSchema, initP2pShopsSchema, initShareableLikesSchema, initShareableBookmarksSchema, initShareableTagsSchema, initManifestRegistrySchema, initPeerDirectorySchema, initSignalingQueueSchema, initConversationsSchema, initMessagesSchema, initChatReportsSchema, initQuotaIncreaseApplicationsSchema, initVerifierApplicationsSchema, initArbitratorReviewSchema, initVerifierAppealsSchema, initUserModerationSchema, initAdminAuditLogSchema, initVerificationCodesSchema, initAgentCallLogSchema, initAgentReputationSchema, initAgentDeclarationsSchema, initAgentAttestationsSchema, initAgentStrikesSchema, initAgentRevocationsSchema, initProductAliasesSchema, initRegionChangeLogSchema, initCartItemsSchema, initFollowsSchema, initPushSubscriptionsSchema, initUserSessionsSchema, initUserBlocklistSchema, initImportLogsSchema, initErrorLogSchema, initSecondhandItemsSchema, initProductTrialCampaignsSchema, initProductTrialClaimsSchema, initReturnRequestsSchema, initReturnMessagesSchema, initProductVariantsSchema, initEditorPicksSchema, initKycRecordsSchema, initWebauthnSchema, initClaimVerificationBaseSchema, initClaimVerifierSuspensionsSchema, initProductClaimSchema, initReviewClaimSchema, initSecondhandClaimSchema, initAuctionClaimSchema, initWishClaimSchema, initShareableClickLogSchema, initCommissionAuditLogSchema, initRegistrationAuditLogSchema, initProductExternalLinksBaseSchema, initLinkChallengesSchema, initVerifyTasksSchema, initVerifySubmissionsSchema, initVerifierStatsSchema, initRegisterListSearchColumns, initPendingCommissionEscrowSchema } from './server-schema.js';
 // RFC-014 PR4 — 正常成交结算走整数 base-units + allocate + 绝对值落库。
 import { toUnits, toDecimal, mulRate, allocate } from '../money.js';
 import { applyWalletDelta, creditColumns } from '../ledger.js';
@@ -83,6 +87,7 @@ import { registerClaimVerifyRoutes, processClaimTaskQueue, isEligibleClaimVerifi
 import { registerFollowsRoutes } from './routes/follows.js';
 // Leaderboard (#1013 Phase 11) — 单 endpoint 8 kinds（products/creators/buyers/sellers/value/agents/arbitrators/verifiers）
 import { registerLeaderboardRoutes } from './routes/leaderboard.js';
+import { registerFxRoutes } from './routes/fx.js'; // FX = display-only USDC→local rates
 // Shareables 互动 (#1013 Phase 12) — click/like/comments/bookmark 8 endpoints
 import { registerShareablesInteractionsRoutes } from './routes/shareables-interactions.js';
 // Shareables CRUD (#1013 Phase 13) — 11 endpoints (notes-photo + create + me + creator-stats + by-* + feed + detail + PATCH + DELETE)
@@ -153,6 +158,8 @@ import { registerArbitratorRoutes } from './routes/arbitrator.js';
 import { registerGovernanceOnboardingRoutes } from './routes/governance-onboarding.js';
 import { startAutoDeactivateCron, runAutoDeactivateSweep } from './routes/governance-auto-deactivate.js';
 import { startEscrowExpireCron } from './routes/rewards-escrow-expire.js';
+import { startDirectPayTimeoutCron } from './routes/direct-pay-timeouts.js';
+import { startClearingMatureCron } from './routes/rewards-clearing-mature.js';
 import { startAutoDowngradeCron } from './routes/rewards-auto-downgrade.js';
 import { registerRewardsApplyRoutes } from './routes/rewards-apply.js';
 // 卖家配额 + 数据中心 (#1013 Phase 45) — 4 user + 3 admin
@@ -241,6 +248,11 @@ import { registerOrdersReadRoutes } from './routes/orders-read.js';
 import { registerOrdersActionRoutes } from './routes/orders-action.js';
 // Orders 下单端点 (#1013 Phase 85) — 1 endpoint (338-line POST /api/orders)
 import { registerOrdersCreateRoutes } from './routes/orders-create.js';
+import { registerDirectPayDisclosureAckRoutes } from './routes/direct-pay-disclosure-acks.js'; // PR-4d: Direct Pay 风险披露 ack 端点(薄 adapter)
+import { registerDirectReceivePaymentInstructionRoutes } from './routes/direct-receive-payment-instructions.js';
+import { registerDirectReceiveAccountsRoutes } from './routes/direct-receive-accounts.js'; // PR-4f-a instruction CRUD + Phase C1 multi-account+QR
+import { registerDirectPayAvailabilityRoutes } from './routes/direct-pay-availability.js'; // PR-4a: Direct Pay 可用性只读(控制面 SSOT)
+import { registerAdminDirectReceiveDepositsRoutes } from './routes/admin-direct-receive-deposits.js'; // PR-4b-3: ROOT 生产保证金 receipt 确认(fail-closed scaffold)
 // Disputes 读端点 (#1013 Phase 86) — 5 endpoints (list/similar/detail/evidence-list/parties)
 import { registerDisputesReadRoutes } from './routes/disputes-read.js';
 // Disputes 写端点 (#1013 Phase 87) — 5 endpoints (respond/arbitrate/add-evidence/evidence-blob/request-evidence)
@@ -388,6 +400,7 @@ initSkillSchema(db);
 initSkillMarketSchema(db);
 initReputationSchema(db);
 initOrderChainSchema(db);
+initPendingCommissionEscrowSchema(db); // RFC-018 PR1: relocated from inline (was ~8250) so all escrow schema is built in this early batch — see helper. matures_at + reversed added (schema-only).
 initBuildFeedbackSchema(db); // RFC-004 build_feedback
 initBuildTasksSchema(db); // RFC-006 build_tasks(协调层)
 initBuildTaskAgentMetadataSchema(db); // PR9B — agent-ready task metadata satellite(schema only;FUTURE-TASK-BOARD-V1-DESIGN #326)
@@ -417,11 +430,11 @@ ensureEvidenceColumns(db);
 initAnchorRegistrySchema(db);
 // boot-order fix（2026-05-26）：anchor migration 引用 users.handle / search_anchor，
 // 但对应 ALTER TABLE 在 735+/958+ 行才跑。旧 DB（v3 era）触发 prepare 失败 → 此处 catch
-// 后 warn 不阻塞 server，但日志噪音 → 预热那两列让 migration 真正能跑
-try {
-    db.exec("ALTER TABLE users ADD COLUMN handle TEXT");
-}
-catch { }
+// 后 warn 不阻塞 server，但日志噪音 → 预热那两列让 migration 真正能跑。
+// handle 现由 initRegisterListSearchColumns 在此预热(与 MCP runtime schema 同源,见
+// src/runtime/webaz-schema-helpers.ts)；该 helper 同时建 permanent_code/region + 11 个
+// products 结构化字段(纯非钱列,从下方各 inline 块单点收口到此处,CREATE-before-ALTER 不变)。
+initRegisterListSearchColumns(db);
 try {
     db.exec("ALTER TABLE users ADD COLUMN search_anchor TEXT");
 }
@@ -459,27 +472,9 @@ catch (e) {
     console.warn('[anchor-registry] migration:', e.message);
 }
 // ─── 验证员白名单表 ───────────────────────────────────────────────
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verifier_whitelist (
-    user_id   TEXT PRIMARY KEY,
-    added_at  TEXT DEFAULT (datetime('now')),
-    note      TEXT
-  )
-`);
+initVerifierWhitelistSchema(db);
 // ─── MCP 工具调用埋点表（远程上报）─────────────────────────────────
-db.exec(`
-  CREATE TABLE IF NOT EXISTS mcp_tool_calls (
-    id             INTEGER PRIMARY KEY AUTOINCREMENT,
-    tool_name      TEXT NOT NULL,
-    user_id_hash   TEXT,
-    server_version TEXT,
-    outcome        TEXT NOT NULL,
-    latency_ms     INTEGER NOT NULL,
-    ts             TEXT NOT NULL DEFAULT (datetime('now'))
-  )
-`);
-db.exec(`CREATE INDEX IF NOT EXISTS idx_mcp_tc_ts   ON mcp_tool_calls(ts)`);
-db.exec(`CREATE INDEX IF NOT EXISTS idx_mcp_tc_tool ON mcp_tool_calls(tool_name, ts)`);
+initMcpToolCallsSchema(db);
 // ─── 内部审核账号（固定 ID，密钥由 MASTER_SEED 派生，幂等）────────
 const INTERNAL_AUDITOR_ID = 'usr_iaudit_001';
 const INTERNAL_AUDITOR_KEY = 'key_iaudit_' + createHmac('sha256', MASTER_SEED).update('internal_auditor_v1').digest('hex').slice(0, 32);
@@ -540,7 +535,7 @@ catch { }
 for (const stmt of [
     'ALTER TABLE users ADD COLUMN sponsor_id   TEXT',
     'ALTER TABLE users ADD COLUMN sponsor_path TEXT',
-    "ALTER TABLE users ADD COLUMN region       TEXT DEFAULT 'global'",
+    // users.region moved to initRegisterListSearchColumns (single source, shared w/ MCP) — see ~line 494.
     // Admin 分级：root 全权 / regional 按 admin_scope 区域受限
     "ALTER TABLE users ADD COLUMN admin_type   TEXT", // root | regional
     "ALTER TABLE users ADD COLUMN admin_scope  TEXT", // global | china | us | eu | india | singapore
@@ -598,28 +593,7 @@ for (const stmt of [
 // M8 二手板块：独立表，避免污染 products 商家货架
 // 关键差异：1 件即 1 件（无库存）、个人卖家无需 seller 角色、无质保、协议费 1%（vs 商家 2%）
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_items (
-    id            TEXT PRIMARY KEY,
-    seller_id     TEXT NOT NULL,
-    title         TEXT NOT NULL,
-    description   TEXT,
-    category      TEXT NOT NULL,        -- phone/computer/appliance/furniture/clothing/book/toy/sports/other
-    condition_grade TEXT NOT NULL,      -- brand_new/like_new/lightly_used/well_used/heavily_used
-    price         REAL NOT NULL,
-    negotiable    INTEGER DEFAULT 0,
-    images        TEXT,                 -- JSON 数组：dataURL 字符串 (最多 9 张)
-    region        TEXT,
-    fulfillment   TEXT DEFAULT 'both',  -- shipping / in_person / both
-    status        TEXT DEFAULT 'available',  -- available / reserved / sold / closed
-    view_count    INTEGER DEFAULT 0,
-    created_at    TEXT DEFAULT (datetime('now')),
-    updated_at    TEXT DEFAULT (datetime('now')),
-    sold_at       TEXT,
-    sold_order_id TEXT
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_status_created ON secondhand_items(status, created_at DESC)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_seller ON secondhand_items(seller_id, status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_si_cat ON secondhand_items(category, status)`);
+    initSecondhandItemsSchema(db);
 }
 catch (e) {
     console.error('[secondhand schema]', e);
@@ -795,29 +769,9 @@ catch { }
     }
     catch { }
 });
-// P13: 购物车
-db.exec(`
-  CREATE TABLE IF NOT EXISTS cart_items (
-    user_id     TEXT NOT NULL,
-    product_id  TEXT NOT NULL,
-    qty         INTEGER NOT NULL DEFAULT 1,
-    added_at    TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (user_id, product_id)
-  )
-`);
-// P14: 关注关系（社交电商）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS follows (
-    follower_id  TEXT NOT NULL,
-    followee_id  TEXT NOT NULL,
-    created_at   TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (follower_id, followee_id)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_follows_followee ON follows(followee_id)');
-}
-catch { }
+// P13: 购物车 / P14: 关注关系（社交电商）→ server-schema.ts
+initCartItemsSchema(db);
+initFollowsSchema(db);
 // P14: 用户 feed 可见性开关（默认公开）
 try {
     db.exec("ALTER TABLE users ADD COLUMN feed_visible INTEGER DEFAULT 1");
@@ -975,6 +929,7 @@ const DEFAULT_PARAMS = [
     // #420 P1-2/P1-3/P1-4:反滥用阈值(agent 信任公式 / strike 阶梯 / verifier outlier)→ 治理可调。
     // 默认值 === 抽取前硬编码字面量(单一真相源在 anti-abuse-thresholds.ts;测试强制校验一致)。
     ...ANTI_ABUSE_PARAMS,
+    ...DIRECT_PAY_CONTROL_PARAMS, ...DIRECT_PAY_AML_PARAMS,
 ];
 for (const p of DEFAULT_PARAMS) {
     try {
@@ -1188,23 +1143,7 @@ function disbursePlatformReward(userId, amount, source, ref) {
 // Wave E-5: PWA Push 订阅
 // 注：实际 push 投递需要 web-push 库（npm i web-push）+ VAPID 私钥签名；
 // 当前实现只做订阅层 + SW push 事件处理，留待 web-push 接入后即可发送
-db.exec(`
-  CREATE TABLE IF NOT EXISTS push_subscriptions (
-    id            TEXT PRIMARY KEY,
-    user_id       TEXT NOT NULL,
-    endpoint      TEXT NOT NULL,
-    p256dh        TEXT NOT NULL,
-    auth          TEXT NOT NULL,
-    user_agent    TEXT,
-    enabled       INTEGER DEFAULT 1,
-    created_at    TEXT DEFAULT (datetime('now')),
-    UNIQUE(user_id, endpoint)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_push_user ON push_subscriptions(user_id, enabled)');
-}
-catch { }
+initPushSubscriptionsSchema(db);
 // 2026-05-22 V2：verifier 新任务通知偏好（默认开，可关）
 try {
     db.exec('ALTER TABLE users ADD COLUMN notify_claim_tasks INTEGER DEFAULT 1');
@@ -1277,14 +1216,8 @@ catch { } // 完整店铺介绍（多段）
 // ─── 4 层身份模型 ─────────────────────────────────────────
 // id (内部 usr_xxx, 永不可改) + permanent_code (6 位 Crockford base32, 永不可改, 对外短码)
 // + handle (@username, 可改 7天1次/年3次) + name (昵称, 可重复可改)
-try {
-    db.exec("ALTER TABLE users ADD COLUMN permanent_code TEXT");
-}
-catch { }
-try {
-    db.exec("ALTER TABLE users ADD COLUMN handle TEXT");
-}
-catch { }
+// permanent_code / handle + 其唯一索引已上移到 initRegisterListSearchColumns(~line 494,
+// 与 MCP runtime schema 同源);此处仅保留 handle 的附属列(不在 register/list/search 路径上)。
 try {
     db.exec("ALTER TABLE users ADD COLUMN handle_last_created_at TEXT");
 }
@@ -1293,14 +1226,6 @@ try {
     db.exec("ALTER TABLE users ADD COLUMN handle_change_log TEXT");
 }
 catch { } // JSON: [{at, from}], 保留近 365 天
-try {
-    db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_users_permanent_code ON users(permanent_code) WHERE permanent_code IS NOT NULL");
-}
-catch { }
-try {
-    db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_users_handle ON users(handle) WHERE handle IS NOT NULL");
-}
-catch { }
 // P15 雷达扫描：粗粒度地理位置（0.1° ≈ 11km × 11km，QVOD 风格匿名聚合）
 try {
     db.exec("ALTER TABLE users ADD COLUMN geo_lat REAL");
@@ -1396,27 +1321,7 @@ const LARGE_WITHDRAW_THRESHOLD = 100;
 // 用途：防 api_key 泄露后无法吊销的根本问题。每个 api_key 关联一个 session 行；
 // 用户可在 "活跃会话" 页查看 IP/UA/最后活跃，单点吊销或一键全登出。
 // "一键全登出" = rotate users.api_key（所有旧 key 即刻 401，新 key 在 session 表里）。
-db.exec(`
-  CREATE TABLE IF NOT EXISTS user_sessions (
-    id              TEXT PRIMARY KEY,
-    user_id         TEXT NOT NULL,
-    api_key         TEXT NOT NULL,
-    ip              TEXT,
-    user_agent      TEXT,
-    fingerprint_hash TEXT,
-    created_at      TEXT DEFAULT (datetime('now')),
-    last_seen_at    TEXT DEFAULT (datetime('now')),
-    revoked_at      TEXT
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_sessions_user ON user_sessions(user_id, revoked_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_sessions_key ON user_sessions(api_key)');
-}
-catch { }
+initUserSessionsSchema(db);
 // A4 智能下单：用户默认地址（搜索时自动过滤不可达商品 + 下单时预填）
 try {
     db.exec("ALTER TABLE users ADD COLUMN default_address_text TEXT");
@@ -1432,19 +1337,7 @@ try {
 }
 catch { }
 // A2 黑名单（精准匹配护栏）：买家可拉黑卖家，搜索时自动过滤
-db.exec(`
-  CREATE TABLE IF NOT EXISTS user_blocklist (
-    blocker_id  TEXT NOT NULL,
-    blocked_id  TEXT NOT NULL,
-    reason      TEXT,
-    created_at  TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (blocker_id, blocked_id)
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_blocklist_blocker ON user_blocklist(blocker_id)");
-}
-catch { }
+initUserBlocklistSchema(db);
 // P-Distrib β：分布式内容层（外链 shareables + P2P 原生 manifests + pin 经济）
 // shareables = 外链分享（YouTube/TikTok/小红书 等外部内容）— 仅索引 URL，零内容存储
 db.exec(`
@@ -1530,99 +1423,12 @@ try {
     db.exec("CREATE INDEX IF NOT EXISTS idx_share_order ON shareables(related_order_id) WHERE related_order_id IS NOT NULL");
 }
 catch { }
-// 审计修 C-1：笔记图片 hash 索引表 — O(1) 剽窃检测，替代全表扫描
-// hash PRIMARY KEY 天然唯一约束；删笔记时同步删对应行
-db.exec(`
-  CREATE TABLE IF NOT EXISTS note_photo_index (
-    hash         TEXT PRIMARY KEY,
-    shareable_id TEXT NOT NULL
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_npi_shareable ON note_photo_index(shareable_id)");
-}
-catch { }
-// Wave A-1: 个人心愿单（独立于慈善 wishes）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS user_wishlist (
-    user_id      TEXT NOT NULL,
-    product_id   TEXT NOT NULL,
-    note         TEXT,
-    notify_price_drop    INTEGER DEFAULT 1,
-    notify_back_in_stock INTEGER DEFAULT 1,
-    price_at_add REAL,
-    created_at   TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY(user_id, product_id)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_wl_product ON user_wishlist(product_id)');
-}
-catch { }
-// Wave A-2: 商品 Q&A（公开问答 — 自动 FAQ + 防虚假承诺）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_qa (
-    id           TEXT PRIMARY KEY,
-    product_id   TEXT NOT NULL,
-    asker_id     TEXT NOT NULL,
-    seller_id    TEXT NOT NULL,
-    question     TEXT NOT NULL,
-    answer       TEXT,
-    answered_at  TEXT,
-    is_public    INTEGER DEFAULT 1,
-    helpful_count INTEGER DEFAULT 0,
-    created_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_qa_product ON product_qa(product_id, created_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_qa_seller ON product_qa(seller_id, answered_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_qa_asker ON product_qa(asker_id)');
-}
-catch { }
-// 防重复 +1 的 votes 表
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_qa_helpful_voters (
-    qa_id TEXT NOT NULL,
-    user_id TEXT NOT NULL,
-    voted_at TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (qa_id, user_id)
-  )
-`);
-// Wave A-3: 优惠券 / 限时折扣（卖家发券 · 全店满减 · 单品限时）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS coupons (
-    id               TEXT PRIMARY KEY,
-    seller_id        TEXT NOT NULL,
-    code             TEXT NOT NULL,
-    scope            TEXT NOT NULL,           -- 'product' | 'shop' | 'all'
-    scope_id         TEXT,                    -- product_id when scope='product'
-    discount_type    TEXT NOT NULL,           -- 'percentage' | 'fixed'
-    discount_value   REAL NOT NULL,
-    min_order_amount REAL DEFAULT 0,
-    max_uses         INTEGER DEFAULT 0,       -- 0 = unlimited
-    uses_count       INTEGER DEFAULT 0,
-    starts_at        TEXT,
-    expires_at       TEXT,
-    is_active        INTEGER DEFAULT 1,
-    created_at       TEXT DEFAULT (datetime('now')),
-    UNIQUE(seller_id, code)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_coupons_seller ON coupons(seller_id, is_active)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_coupons_scope ON coupons(scope, scope_id) WHERE is_active = 1');
-}
-catch { }
+// 笔记图片 hash 索引 / Wave A 购物表（心愿单 · 商品Q&A · 优惠券）→ server-schema.ts
+// 纯幂等建表/建索引 DDL，原位调用保持 boot 顺序不变
+initNotePhotoIndexSchema(db);
+initUserWishlistSchema(db);
+initProductQaSchema(db);
+initCouponsSchema(db);
 // Orders 表加 coupon 字段（记录使用了哪张券、折扣多少）
 for (const stmt of [
     'ALTER TABLE orders ADD COLUMN coupon_id TEXT',
@@ -1633,147 +1439,20 @@ for (const stmt of [
     }
     catch { }
 }
-// Wave A-4: 平台公告（admin 发布 → 角色 / 区域定向）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS announcements (
-    id              TEXT PRIMARY KEY,
-    author_id       TEXT NOT NULL,
-    title           TEXT NOT NULL,
-    body            TEXT NOT NULL,
-    target_roles    TEXT,                    -- JSON array: ['buyer','seller'] or null=all
-    target_regions  TEXT,                    -- JSON array: ['china','us'] or null=all
-    severity        TEXT DEFAULT 'info',     -- 'info' | 'warning' | 'critical'
-    is_active       INTEGER DEFAULT 1,
-    starts_at       TEXT,
-    expires_at      TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_ann_active ON announcements(is_active, created_at DESC)');
-}
-catch { }
-// 用户阅读记录（PK 防重复 dismiss）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS announcement_reads (
-    user_id      TEXT NOT NULL,
-    announcement_id TEXT NOT NULL,
-    read_at      TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (user_id, announcement_id)
-  )
-`);
-// Wave B-2: 预售 / waitlist（缺货商品允许买家排队 → 回货时通知）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_waitlist (
-    user_id      TEXT NOT NULL,
-    product_id   TEXT NOT NULL,
-    desired_qty  INTEGER DEFAULT 1,
-    note         TEXT,
-    notified_at  TEXT,                    -- 回货时填，表示已发通知
-    created_at   TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (user_id, product_id)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_waitlist_product ON product_waitlist(product_id) WHERE notified_at IS NULL');
-}
-catch { }
-// Wave D-4: 限时促销 / Flash Sale
-db.exec(`
-  CREATE TABLE IF NOT EXISTS flash_sales (
-    id              TEXT PRIMARY KEY,
-    seller_id       TEXT NOT NULL,
-    product_id      TEXT NOT NULL,
-    variant_id      TEXT,                 -- 可选，绑定具体规格
-    sale_price      REAL NOT NULL,
-    original_price  REAL NOT NULL,        -- 创建时快照，用于显示「省 X」
-    max_qty         INTEGER DEFAULT 0,    -- 0 = 不限
-    sold_count      INTEGER DEFAULT 0,
-    starts_at       TEXT NOT NULL,
-    ends_at         TEXT NOT NULL,
-    is_active       INTEGER DEFAULT 1,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_flash_product ON flash_sales(product_id, is_active)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_flash_seller ON flash_sales(seller_id, ends_at DESC)');
-}
-catch { }
+// Wave A-4 公告+阅读 / Wave B-2 预售waitlist / Wave D-4 限时促销 → server-schema.ts
+// 纯幂等建表/建索引 DDL，原位调用保持 boot 顺序不变
+initAnnouncementsSchema(db);
+initProductWaitlistSchema(db);
+initFlashSalesSchema(db);
 // 公共助手：拿商品（含 variant 选项）当前生效的 flash sale
 // #1013 Phase 23: 已迁出到 routes/flash-sales.ts，本地 wrapper 让 orders 流程签名不变
 const getActiveFlashSale = (productId, variantId) => getActiveFlashSaleRaw(db, productId, variantId);
 // 2026-05-24 #978: 测评免单 (Trial Review Refund)
 // 卖家发新品时可开启「测评免单」计划：买家以原价正常下单，发笔记达 reach 阈值后系统自动退款
 // reach_score = views * 0.1 + shares * 1 + conversions * 10
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_trial_campaigns (
-    id                TEXT PRIMARY KEY,                   -- ptc_xxxx
-    -- 1 product 1 row (复用同一行：关闭后再开 = UPDATE status='active'，避免 UNIQUE 阻断 reopen)
-    product_id        TEXT NOT NULL UNIQUE REFERENCES products(id),
-    seller_id         TEXT NOT NULL REFERENCES users(id),
-    quota_total       INTEGER NOT NULL,                   -- 总名额 1-200
-    quota_claimed     INTEGER NOT NULL DEFAULT 0,
-    reach_threshold   INTEGER NOT NULL,                   -- 综合 reach 阈值 (默认 50)
-    min_chars         INTEGER NOT NULL DEFAULT 50,        -- 笔记最少字数
-    min_days_live     INTEGER NOT NULL DEFAULT 7,         -- 笔记需 live 至少 N 天才评估
-    status            TEXT NOT NULL DEFAULT 'active',     -- active / paused / closed
-    created_at        TEXT DEFAULT (datetime('now')),
-    closed_at         TEXT
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_ptc_seller ON product_trial_campaigns(seller_id, status)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_ptc_product ON product_trial_campaigns(product_id, status)");
-}
-catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_trial_claims (
-    id                TEXT PRIMARY KEY,                   -- pcl_xxxx
-    campaign_id       TEXT NOT NULL REFERENCES product_trial_campaigns(id),
-    product_id        TEXT NOT NULL REFERENCES products(id),
-    seller_id         TEXT NOT NULL REFERENCES users(id),
-    buyer_id          TEXT NOT NULL REFERENCES users(id),
-    order_id          TEXT NOT NULL REFERENCES orders(id),
-    note_id           TEXT,                               -- shareables.id with type='note'
-    status            TEXT NOT NULL DEFAULT 'pending_note', -- pending_note / pending_threshold / refunded / expired / cancelled
-    reach_score       REAL DEFAULT 0,
-    metrics_json      TEXT,                               -- 最新评估的 {views, shares, conversions} 快照
-    refund_amount     REAL,
-    refunded_at       TEXT,
-    expired_at        TEXT,
-    last_eval_at      TEXT,
-    claimed_at        TEXT DEFAULT (datetime('now')),
-    note_linked_at    TEXT,
-    UNIQUE(buyer_id, product_id)                          -- 一买家一商品仅 1 个名额
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_campaign ON product_trial_claims(campaign_id, status)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_buyer ON product_trial_claims(buyer_id, status)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_seller ON product_trial_claims(seller_id, status)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_eval ON product_trial_claims(status, last_eval_at)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pcl_note ON product_trial_claims(note_id) WHERE note_id IS NOT NULL");
-}
-catch { }
+// 测评免单计划 + 认领 → server-schema.ts；claims 的 snap/audit ALTER 刻意留原位（紧跟下方）
+initProductTrialCampaignsSchema(db);
+initProductTrialClaimsSchema(db);
 // 审计 P0-1：claim 时快照 campaign 配置，cron 评估按快照而非当前活动（防卖家中途上调阈值白嫖）
 for (const col of [
     'ALTER TABLE product_trial_claims ADD COLUMN snap_reach_threshold INTEGER',
@@ -1790,29 +1469,8 @@ for (const col of [
     }
     catch { /* 已存在 */ }
 }
-// 2026-05-25 邮箱订阅独立表（GDPR-ready）— 与 ideas 解耦
-// consent 显式存；unsubscribe_token 让用户主动退订；source 区分来源
-db.exec(`
-  CREATE TABLE IF NOT EXISTS email_subscriptions (
-    id                   TEXT PRIMARY KEY,
-    email                TEXT NOT NULL UNIQUE,
-    source               TEXT NOT NULL DEFAULT 'welcome',
-    consent_at           TEXT NOT NULL DEFAULT (datetime('now')),
-    unsubscribe_token    TEXT NOT NULL UNIQUE,
-    unsubscribed_at      TEXT,
-    ip_hash              TEXT,
-    user_id              TEXT,
-    created_at           TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_es_status ON email_subscriptions(unsubscribed_at, created_at DESC)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_es_source ON email_subscriptions(source, created_at DESC)");
-}
-catch { }
+// 邮箱订阅独立表（GDPR-ready）→ server-schema.ts；后续 ALTER 列扩展刻意留原位（紧跟下方）
+initEmailSubscriptionsSchema(db);
 // 2026-05-26: 用户期望身份 + 备注（welcome 表单丰富化）
 try {
     db.exec("ALTER TABLE email_subscriptions ADD COLUMN role_preference TEXT");
@@ -1835,71 +1493,13 @@ try {
     db.exec("ALTER TABLE email_subscriptions ADD COLUMN handled_by    TEXT");
 }
 catch { }
-// 2026-05-24 首屏「我有建议」公开收集（匿名可投，登录态自动绑 user_id）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS public_ideas (
-    id            TEXT PRIMARY KEY,
-    user_id       TEXT,                                  -- 可空（匿名提交）
-    contact       TEXT,                                  -- 可选 email / handle / 任何联系方式
-    content       TEXT NOT NULL,
-    ip_hash       TEXT,
-    ua_hash       TEXT,
-    status        TEXT NOT NULL DEFAULT 'new',          -- new / triaged / resolved / spam
-    created_at    TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pi_status ON public_ideas(status, created_at DESC)");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_pi_rate ON public_ideas(ip_hash, created_at)");
-}
-catch { }
-// 2026-05-24 #959: 拍卖「⏰ 提醒我」
-// 买家订阅拍卖，cron 在 deadline - lead_minutes 时发通知；1 个订阅 = 多行（每个 lead 时间一行）
-// 默认订阅 = [60, 10]（结束前 1h + 10min 各提醒一次）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS auction_reminders (
-    id            TEXT PRIMARY KEY,                   -- arm_xxxx
-    auction_id    TEXT NOT NULL REFERENCES auctions(id),
-    user_id       TEXT NOT NULL REFERENCES users(id),
-    lead_minutes  INTEGER NOT NULL,                   -- 提前多少分钟提醒
-    fire_at       TEXT NOT NULL,                      -- deadline - lead_minutes（创建时算好）
-    sent_at       TEXT,
-    created_at    TEXT DEFAULT (datetime('now')),
-    UNIQUE(auction_id, user_id, lead_minutes)
-  )
-`);
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_arm_due ON auction_reminders(sent_at, fire_at) WHERE sent_at IS NULL");
-}
-catch { }
-try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_arm_user ON auction_reminders(user_id, auction_id)");
-}
-catch { }
-// Wave D-3: 用户反馈 / 客服工单（buyer-to-platform，独立于 disputes）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS feedback_tickets (
-    id            TEXT PRIMARY KEY,
-    user_id       TEXT NOT NULL,
-    category      TEXT NOT NULL,         -- 'bug' | 'abuse' | 'feature' | 'account' | 'other'
-    severity      TEXT DEFAULT 'medium', -- 'low' | 'medium' | 'high'
-    subject       TEXT NOT NULL,
-    body          TEXT NOT NULL,
-    status        TEXT NOT NULL DEFAULT 'open',  -- open | in_progress | resolved | closed
-    admin_reply   TEXT,
-    replied_by    TEXT,
-    replied_at    TEXT,
-    created_at    TEXT DEFAULT (datetime('now')),
-    updated_at    TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_feedback_user ON feedback_tickets(user_id, created_at DESC)');
-}
-catch { }
+// 首屏「我有建议」公开收集 / #959 拍卖「⏰ 提醒我」 → server-schema.ts
+// 纯幂等建表/建索引 DDL，原位调用保持 boot 顺序不变（email_subscriptions 仍留原位）
+initPublicIdeasSchema(db);
+initAuctionRemindersSchema(db);
+// Wave D-3: 用户反馈 / 客服工单（buyer-to-platform，独立于 disputes）→ server-schema.ts
+// 后续 ALTER 列扩展刻意留原位（紧跟下方）
+initFeedbackTicketsSchema(db);
 // G-4: AI 建议回复
 try {
     db.exec('ALTER TABLE feedback_tickets ADD COLUMN ai_suggested_reply TEXT');
@@ -1918,21 +1518,9 @@ try {
     db.exec('ALTER TABLE feedback_tickets ADD COLUMN admin_seen_at TEXT');
 }
 catch { }
-// W7 客服 ticket-thread — 多轮消息（user ↔ admin）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS feedback_messages (
-    id          TEXT PRIMARY KEY,            -- fmsg_xxx
-    ticket_id   TEXT NOT NULL,
-    sender_id   TEXT NOT NULL,
-    sender_role TEXT NOT NULL,               -- 'user' | 'admin'
-    body        TEXT NOT NULL,
-    created_at  TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_fmsg_ticket ON feedback_messages(ticket_id, created_at)');
-}
-catch { }
+// W7 客服 ticket-thread — 多轮消息（user ↔ admin）→ server-schema.ts
+// 后续 ALTER 列扩展刻意留原位（紧跟下方）
+initFeedbackMessagesSchema(db);
 // 跨窗反诈一致性：所有 thread 消息表加 flagged + flag_reasons
 try {
     db.exec('ALTER TABLE feedback_messages ADD COLUMN flagged INTEGER DEFAULT 0');
@@ -1943,50 +1531,10 @@ try {
 }
 catch { }
 // ─── 公开仲裁判例 (P1) ─────────────────────────────────────
-// disputes 是当事人/仲裁员私域；dispute_cases 是裁决后的公开脱敏版本
-db.exec(`
-  CREATE TABLE IF NOT EXISTS dispute_cases (
-    id              TEXT PRIMARY KEY,            -- dcase_xxx
-    dispute_id      TEXT,                         -- 原始 disputes.id (内部追溯)
-    order_id        TEXT,
-    product_id      TEXT,                         -- 关键索引：按商品查公开判例
-    seller_id       TEXT,
-    buyer_id        TEXT,                         -- 仅内部使用，不外露
-    category_tag    TEXT,                         -- 物流 / 质量 / 描述不符 / 售后 / 拒收 / 其他
-    winner          TEXT,                         -- buyer / seller / split / dismissed
-    resolution      TEXT,                         -- 简短人读判决 (如 '全额退款')
-    amount_bucket   TEXT,                         -- '0-100' / '100-500' / '500-2000' / '2000+' WAZ
-    buyer_argument  TEXT,                         -- 脱敏后买家陈述
-    seller_argument TEXT,                         -- 脱敏后卖家陈述
-    ruling_text     TEXT,                         -- 仲裁员判决书
-    arbitrator_id   TEXT,
-    fairness_yes    INTEGER DEFAULT 0,
-    fairness_no     INTEGER DEFAULT 0,
-    comment_count   INTEGER DEFAULT 0,
-    published_at    TEXT DEFAULT (datetime('now')),
-    created_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_dcase_product ON dispute_cases(product_id, published_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_dcase_seller ON dispute_cases(seller_id, published_at DESC)');
-}
-catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS dispute_comments (
-    id              TEXT PRIMARY KEY,            -- dcom_xxx
-    case_id         TEXT NOT NULL,
-    commenter_id    TEXT NOT NULL,
-    body            TEXT NOT NULL,
-    flagged         INTEGER DEFAULT 0,
-    likes           INTEGER DEFAULT 0,
-    created_at      TEXT DEFAULT (datetime('now')),
-    UNIQUE(case_id, commenter_id)                -- 一案一人一次（防刷）
-  )
-`);
+// 公开判例（裁决后脱敏版本，disputes 是当事人/仲裁员私域）→ server-schema.ts
+initDisputeCasesSchema(db);
+// 公开判例评论 → server-schema.ts；anonymous ALTER + idx_dcom_case 刻意留原位
+initDisputeCommentsSchema(db);
 try {
     db.exec('ALTER TABLE dispute_comments ADD COLUMN anonymous INTEGER DEFAULT 0');
 }
@@ -1995,27 +1543,8 @@ try {
     db.exec('CREATE INDEX IF NOT EXISTS idx_dcom_case ON dispute_comments(case_id, created_at DESC)');
 }
 catch { }
-// W5 仲裁公开评论楼中楼 — 单层子回复；保留原 dispute_comments UNIQUE
-db.exec(`
-  CREATE TABLE IF NOT EXISTS dispute_comment_replies (
-    id                TEXT PRIMARY KEY,           -- drep_xxx
-    parent_comment_id TEXT NOT NULL,              -- 指向 dispute_comments.id
-    case_id           TEXT NOT NULL,
-    replier_id        TEXT NOT NULL,
-    body              TEXT NOT NULL,
-    anonymous         INTEGER DEFAULT 0,
-    likes             INTEGER DEFAULT 0,
-    created_at        TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_drep_parent ON dispute_comment_replies(parent_comment_id, created_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_drep_case ON dispute_comment_replies(case_id, created_at DESC)');
-}
-catch { }
+// W5 仲裁公开评论楼中楼 — 单层子回复 → server-schema.ts；后续 ALTER 刻意留原位
+initDisputeCommentRepliesSchema(db);
 // 跨窗反诈一致性
 try {
     db.exec('ALTER TABLE dispute_comment_replies ADD COLUMN flagged INTEGER DEFAULT 0');
@@ -2030,68 +1559,21 @@ try {
     db.exec('ALTER TABLE dispute_comments ADD COLUMN flag_reasons TEXT');
 }
 catch { }
-// W6 笔记评论 — 原生 parent_id 楼中楼（仅 1 层；非 root 不可再 reply）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS shareable_comments (
-    id           TEXT PRIMARY KEY,                -- scom_xxx
-    shareable_id TEXT NOT NULL,                    -- shareables.id
-    commenter_id TEXT NOT NULL,
-    parent_id    TEXT,                             -- 子评论指向父评论；root = NULL
-    body         TEXT NOT NULL,
-    flagged      INTEGER DEFAULT 0,
-    likes        INTEGER DEFAULT 0,
-    created_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_scom_shareable ON shareable_comments(shareable_id, parent_id, created_at DESC)');
-}
-catch { }
+// W6 笔记评论 — 原生 parent_id 楼中楼（仅 1 层）→ server-schema.ts；flag_reasons ALTER 刻意留原位
+initShareableCommentsSchema(db);
 try {
     db.exec('ALTER TABLE shareable_comments ADD COLUMN flag_reasons TEXT');
 }
 catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS dispute_fairness_votes (
-    case_id     TEXT NOT NULL,
-    voter_id    TEXT NOT NULL,
-    vote        TEXT NOT NULL,                   -- 'yes' / 'no'
-    created_at  TEXT DEFAULT (datetime('now')),
-    PRIMARY KEY (case_id, voter_id)
-  )
-`);
+// 公开判例公平性投票 → server-schema.ts；idx_feedback_open 刻意留原位（非本表索引，不相邻）
+initDisputeFairnessVotesSchema(db);
 try {
     db.exec('CREATE INDEX IF NOT EXISTS idx_feedback_open ON feedback_tickets(status, created_at DESC) WHERE status IN (\'open\', \'in_progress\')');
 }
 catch { }
-// Wave C-3: 买家评价 / 评分 — 完成订单后给卖家 1-5 星 + 文字
-db.exec(`
-  CREATE TABLE IF NOT EXISTS order_ratings (
-    order_id     TEXT PRIMARY KEY,
-    buyer_id     TEXT NOT NULL,
-    seller_id    TEXT NOT NULL,
-    product_id   TEXT NOT NULL,
-    stars        INTEGER NOT NULL,            -- 1-5
-    comment      TEXT,
-    reply        TEXT,                        -- seller 可回复
-    replied_at   TEXT,
-    created_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_rating_seller ON order_ratings(seller_id, created_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_rating_product ON order_ratings(product_id, created_at DESC)');
-}
-catch { }
-// P2 hot-path：覆盖 recommend_count 子查询（COUNT DISTINCT buyer_id WHERE product_id=? AND stars>=4）
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_rating_recommend ON order_ratings(product_id, stars, buyer_id)');
-}
-catch { }
-// P2 hot-path：覆盖 sales_count 子查询（COUNT WHERE product_id=? AND status=completed）
+// Wave C-3: 买家评价 / 评分 → server-schema.ts；后续结构化维度 ALTER + 跨表 orders 索引刻意留原位
+initOrderRatingsSchema(db);
+// P2 hot-path：覆盖 sales_count 子查询（COUNT WHERE product_id=? AND status=completed）—— orders 表索引，留原位
 try {
     db.exec('CREATE INDEX IF NOT EXISTS idx_orders_product_status ON orders(product_id, status)');
 }
@@ -2122,325 +1604,104 @@ try {
     db.exec('ALTER TABLE order_ratings ADD COLUMN buyer_followup_at TEXT');
 }
 catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS buyer_ratings (
-    order_id              TEXT PRIMARY KEY,
-    seller_id             TEXT NOT NULL,
-    buyer_id              TEXT NOT NULL,
-    stars                 INTEGER NOT NULL,
-    comment               TEXT,
-    dim_payment_speed     INTEGER,
-    dim_communication     INTEGER,
-    dim_responsiveness    INTEGER,
-    hidden_until          TEXT,
-    created_at            TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_buyer_ratings_buyer ON buyer_ratings(buyer_id, created_at DESC)');
-}
-catch { }
-// Wave C-2: 多收货地址簿 — buyer 保存常用地址，下单时选择默认地址
-db.exec(`
-  CREATE TABLE IF NOT EXISTS user_addresses (
-    id           TEXT PRIMARY KEY,
-    user_id      TEXT NOT NULL,
-    label        TEXT NOT NULL,           -- 标签（家 / 公司 / 父母家）
-    recipient    TEXT NOT NULL,
-    phone        TEXT,
-    region       TEXT,                    -- 省/市/区
-    detail       TEXT NOT NULL,           -- 详细地址
-    is_default   INTEGER DEFAULT 0,
-    created_at   TEXT DEFAULT (datetime('now')),
-    updated_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_addr_user ON user_addresses(user_id, is_default DESC)');
-}
-catch { }
-// Wave B-3: 退货请求 — 买家在 return_days 窗口内可发起，卖家可接受/拒绝；拒绝后可走 dispute
-db.exec(`
-  CREATE TABLE IF NOT EXISTS return_requests (
-    id                   TEXT PRIMARY KEY,
-    order_id             TEXT NOT NULL,
-    buyer_id             TEXT NOT NULL,
-    seller_id            TEXT NOT NULL,
-    product_id           TEXT NOT NULL,
-    reason               TEXT NOT NULL,          -- 'quality' | 'wrong_item' | 'damaged' | 'no_longer_needed' | 'other'
-    reason_text          TEXT,
-    refund_amount        DECIMAL(18,2),          -- 默认 = order.total_amount
-    status               TEXT NOT NULL DEFAULT 'pending', -- pending | accepted | rejected | refunded | escalated | cancelled
-    seller_response      TEXT,
-    escalated_dispute_id TEXT,
-    created_at           TEXT DEFAULT (datetime('now')),
-    resolved_at          TEXT
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_returns_seller_pending ON return_requests(seller_id, status) WHERE status = \'pending\'');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_returns_buyer ON return_requests(buyer_id, created_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_returns_order ON return_requests(order_id)');
-}
-catch { }
+// 反向评价：卖家给买家评分（双盲）→ server-schema.ts
+initBuyerRatingsSchema(db);
+// Wave C-2: 多收货地址簿 → server-schema.ts
+initUserAddressesSchema(db);
+// Wave B-3: 退货请求 → server-schema.ts；pickup ALTER 刻意留原位（紧跟下方）
+initReturnRequestsSchema(db);
 // 2026-05-22 L3+B3：退货上门取件（MVP — 仅声明阶段）
 // 完整状态机（accepted_pickup_pending → picked_up → refunded）留 Phase 2
 try {
-    db.exec('ALTER TABLE return_requests ADD COLUMN pickup_requested INTEGER DEFAULT 0');
-}
-catch { }
-try {
-    db.exec('ALTER TABLE return_requests ADD COLUMN pickup_address TEXT');
-}
-catch { }
-// W2 售后协商时间线 — 多轮消息（buyer ↔ seller）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS return_messages (
-    id          TEXT PRIMARY KEY,            -- rmsg_xxx
-    return_id   TEXT NOT NULL,
-    sender_id   TEXT NOT NULL,
-    sender_role TEXT NOT NULL,               -- 'buyer' | 'seller' | 'system'
-    body        TEXT NOT NULL,
-    created_at  TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_rmsg_return ON return_messages(return_id, created_at)');
-}
-catch { }
-// 跨窗反诈一致性
-try {
-    db.exec('ALTER TABLE return_messages ADD COLUMN flagged INTEGER DEFAULT 0');
-}
-catch { }
-try {
-    db.exec('ALTER TABLE return_messages ADD COLUMN flag_reasons TEXT');
-}
-catch { }
-// Wave B-1 Phase 1: 商品 variants（同款多 SKU — 颜色/尺寸/规格组合）
-// schema + CRUD 端点；Phase 2 再集成订单/购物车
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_variants (
-    id              TEXT PRIMARY KEY,
-    product_id      TEXT NOT NULL,
-    sku             TEXT,                 -- 卖家内部 SKU 编号（可选）
-    options_json    TEXT NOT NULL,        -- {"颜色":"红","尺寸":"L"} 必填
-    price_override  REAL,                 -- null = 用 product.price
-    stock           INTEGER DEFAULT 0,
-    images_json     TEXT,                 -- variant 专属图（可选，null = 用 product.images）
-    is_active       INTEGER DEFAULT 1,
-    created_at      TEXT DEFAULT (datetime('now')),
-    updated_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_pv_product ON product_variants(product_id, is_active)');
-}
-catch { }
-// 给 products 加 has_variants 标记（避免每次查 join 检查）
-try {
-    db.exec('ALTER TABLE products ADD COLUMN has_variants INTEGER DEFAULT 0');
-}
-catch { }
-// P2-1: variants 唯一性 — options 的 canonical key (sorted keys) 用于防止同 product 内重复 SKU
-try {
-    db.exec('ALTER TABLE product_variants ADD COLUMN options_key TEXT');
-}
-catch { }
-// 回填历史行的 options_key（一次性，新行在 POST/PATCH 时写入）
-try {
-    const rows = db.prepare('SELECT id, options_json FROM product_variants WHERE options_key IS NULL').all();
-    const upd = db.prepare('UPDATE product_variants SET options_key = ? WHERE id = ?');
-    for (const r of rows) {
-        try {
-            const obj = JSON.parse(r.options_json || '{}');
-            const key = Object.keys(obj).sort().map(k => `${k}=${String(obj[k])}`).join('|');
-            upd.run(key, r.id);
-        }
-        catch { }
-    }
-}
-catch { }
-// 唯一性索引（同 product + 同 options 组合不可有两条 active 行）
-try {
-    db.exec('CREATE UNIQUE INDEX IF NOT EXISTS uniq_pv_product_options ON product_variants(product_id, options_key) WHERE is_active = 1');
-}
-catch { }
-// Sprint 4 — claim_loss_count (历史被验证不实次数 — 用于搜索降权 + 公开 badge)
-for (const stmt of [
-    'ALTER TABLE products ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
-    'ALTER TABLE secondhand_items ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
-    'ALTER TABLE auctions ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
-]) {
-    try {
-        db.exec(stmt);
-    }
-    catch { }
-}
-// P2P 原生商店 — 卖家本地节点存详情，WebAZ 只锚定 hash + 关键字段
-for (const stmt of [
-    'ALTER TABLE products ADD COLUMN p2p_mode INTEGER DEFAULT 0',
-    'ALTER TABLE products ADD COLUMN content_hash TEXT', // sha256 of canonical detail JSON
-    'ALTER TABLE products ADD COLUMN peer_endpoint TEXT', // WS/HTTPS 拉取点
-    'ALTER TABLE products ADD COLUMN content_signature TEXT', // HMAC(api_key, hash + signed_at)
-    'ALTER TABLE products ADD COLUMN content_signed_at TEXT',
-    'ALTER TABLE orders   ADD COLUMN content_hash_at_order TEXT', // 下单时锚定的 hash 版本（争议证据）
-]) {
-    try {
-        db.exec(stmt);
-    }
-    catch { }
-}
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_products_p2p ON products(p2p_mode, status)');
-}
-catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS p2p_shops (
-    id              TEXT PRIMARY KEY,
-    owner_id        TEXT NOT NULL,
-    name            TEXT NOT NULL,
-    description     TEXT,
-    thumbnail_uri   TEXT,
-    peer_endpoint   TEXT,
-    peer_pubkey     TEXT,
-    status          TEXT NOT NULL DEFAULT 'active',
-    created_at      TEXT DEFAULT (datetime('now')),
-    updated_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_p2p_shops_owner ON p2p_shops(owner_id, status)');
-}
-catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS shareable_likes (
-    id            TEXT PRIMARY KEY,
-    shareable_id  TEXT NOT NULL,
-    user_id       TEXT NOT NULL,
-    created_at    TEXT DEFAULT (datetime('now')),
-    UNIQUE(shareable_id, user_id)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_likes_shr ON shareable_likes(shareable_id)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_likes_user ON shareable_likes(user_id, created_at DESC)');
-}
-catch { }
-// 2026-05-22 audit P2：收藏功能（小红书风格"收藏" tab）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS shareable_bookmarks (
-    id            TEXT PRIMARY KEY,
-    shareable_id  TEXT NOT NULL,
-    user_id       TEXT NOT NULL,
-    created_at    TEXT DEFAULT (datetime('now')),
-    UNIQUE(shareable_id, user_id)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_bm_user ON shareable_bookmarks(user_id, created_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_bm_shr ON shareable_bookmarks(shareable_id)');
-}
-catch { }
-// 2026-05-22 audit P1 backlog：# 话题/标签系统（小红书风格内容分发）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS shareable_tags (
-    id            INTEGER PRIMARY KEY AUTOINCREMENT,
-    shareable_id  TEXT NOT NULL,
-    tag           TEXT NOT NULL,          -- 已 lowercase + trim，最长 30 字符
-    created_at    TEXT DEFAULT (datetime('now')),
-    UNIQUE(shareable_id, tag)
-  )
-`);
+    db.exec('ALTER TABLE return_requests ADD COLUMN pickup_requested INTEGER DEFAULT 0');
+}
+catch { }
 try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_tags_tag ON shareable_tags(tag, created_at DESC)');
+    db.exec('ALTER TABLE return_requests ADD COLUMN pickup_address TEXT');
 }
 catch { }
+// W2 售后协商时间线 — 多轮消息（buyer ↔ seller）→ server-schema.ts；flagged/flag_reasons ALTER 刻意留原位（紧跟下方）
+initReturnMessagesSchema(db);
+// 跨窗反诈一致性
 try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_shr_tags_shr ON shareable_tags(shareable_id)');
+    db.exec('ALTER TABLE return_messages ADD COLUMN flagged INTEGER DEFAULT 0');
 }
 catch { }
-// manifest_registry = 原生 P2P 内容索引（仅 hash + 签名 + 元数据；字节在用户设备）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS manifest_registry (
-    hash                 TEXT PRIMARY KEY,
-    owner_id             TEXT NOT NULL,
-    content_type         TEXT NOT NULL,
-    byte_size            INTEGER NOT NULL,
-    title                TEXT,
-    description          TEXT,
-    thumbnail_data_uri   TEXT,
-    signature            TEXT NOT NULL,
-    signed_at            TEXT NOT NULL,
-    related_product_id   TEXT,
-    related_anchor       TEXT,
-    status               TEXT DEFAULT 'active',
-    takedown_reason      TEXT,
-    takedown_at          TEXT,
-    takedown_by          TEXT,
-    created_at           TEXT DEFAULT (datetime('now'))
-  )
-`);
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_owner ON manifest_registry(owner_id, status)");
+    db.exec('ALTER TABLE return_messages ADD COLUMN flag_reasons TEXT');
 }
 catch { }
+// Wave B-1 Phase 1: 商品 variants（同款多 SKU — 颜色/尺寸/规格组合）
+// schema + CRUD 端点；Phase 2 再集成订单/购物车
+// Wave B-1: 商品 variants → server-schema.ts；has_variants/options_key ALTER + 回填 + uniq 索引刻意留原位（紧跟下方）
+initProductVariantsSchema(db);
+// 给 products 加 has_variants 标记（避免每次查 join 检查）
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_product ON manifest_registry(related_product_id, status)");
+    db.exec('ALTER TABLE products ADD COLUMN has_variants INTEGER DEFAULT 0');
 }
 catch { }
+// P2-1: variants 唯一性 — options 的 canonical key (sorted keys) 用于防止同 product 内重复 SKU
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_mfst_anchor ON manifest_registry(related_anchor, status)");
+    db.exec('ALTER TABLE product_variants ADD COLUMN options_key TEXT');
 }
 catch { }
-// peer_directory = 在线 peer 注册（哪些 user 持有哪些 hash 的 cache，heartbeat 5min 失效）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS peer_directory (
-    peer_id             TEXT NOT NULL,
-    manifest_hash       TEXT NOT NULL,
-    is_owner            INTEGER DEFAULT 0,
-    pin_intent          INTEGER DEFAULT 0,
-    last_heartbeat      TEXT NOT NULL,
-    bytes_served_total  INTEGER DEFAULT 0,
-    PRIMARY KEY (peer_id, manifest_hash)
-  )
-`);
+// 回填历史行的 options_key（一次性，新行在 POST/PATCH 时写入）
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_peer_hash ON peer_directory(manifest_hash, last_heartbeat DESC)");
+    const rows = db.prepare('SELECT id, options_json FROM product_variants WHERE options_key IS NULL').all();
+    const upd = db.prepare('UPDATE product_variants SET options_key = ? WHERE id = ?');
+    for (const r of rows) {
+        try {
+            const obj = JSON.parse(r.options_json || '{}');
+            const key = Object.keys(obj).sort().map(k => `${k}=${String(obj[k])}`).join('|');
+            upd.run(key, r.id);
+        }
+        catch { }
+    }
 }
 catch { }
+// 唯一性索引（同 product + 同 options 组合不可有两条 active 行）
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_peer_heartbeat ON peer_directory(last_heartbeat)");
+    db.exec('CREATE UNIQUE INDEX IF NOT EXISTS uniq_pv_product_options ON product_variants(product_id, options_key) WHERE is_active = 1');
 }
 catch { }
-// signaling_queue = WebRTC SDP/ICE 中继（TTL 2min，cron 清理）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS signaling_queue (
-    id              TEXT PRIMARY KEY,
-    to_peer_id      TEXT NOT NULL,
-    from_peer_id    TEXT NOT NULL,
-    signal_type     TEXT NOT NULL,
-    signal_data     TEXT NOT NULL,
-    created_at      TEXT NOT NULL,
-    delivered_at    TEXT
-  )
-`);
+// Sprint 4 — claim_loss_count (历史被验证不实次数 — 用于搜索降权 + 公开 badge)
+for (const stmt of [
+    'ALTER TABLE products ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
+    'ALTER TABLE secondhand_items ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
+    'ALTER TABLE auctions ADD COLUMN claim_loss_count INTEGER DEFAULT 0',
+]) {
+    try {
+        db.exec(stmt);
+    }
+    catch { }
+}
+// P2P 原生商店 — 卖家本地节点存详情，WebAZ 只锚定 hash + 关键字段
+for (const stmt of [
+    'ALTER TABLE products ADD COLUMN p2p_mode INTEGER DEFAULT 0',
+    'ALTER TABLE products ADD COLUMN content_hash TEXT', // sha256 of canonical detail JSON
+    'ALTER TABLE products ADD COLUMN peer_endpoint TEXT', // WS/HTTPS 拉取点
+    'ALTER TABLE products ADD COLUMN content_signature TEXT', // HMAC(api_key, hash + signed_at)
+    'ALTER TABLE products ADD COLUMN content_signed_at TEXT',
+    'ALTER TABLE orders   ADD COLUMN content_hash_at_order TEXT', // 下单时锚定的 hash 版本（争议证据）
+]) {
+    try {
+        db.exec(stmt);
+    }
+    catch { }
+}
 try {
-    db.exec("CREATE INDEX IF NOT EXISTS idx_sig_to ON signaling_queue(to_peer_id, delivered_at)");
+    db.exec('CREATE INDEX IF NOT EXISTS idx_products_p2p ON products(p2p_mode, status)');
 }
 catch { }
+// P2P 店铺 / 笔记点赞·收藏·标签 / manifest·peer·signaling（原生 P2P 内容层）→ server-schema.ts
+// 纯幂等建表/建索引 DDL，原位调用保持 boot 顺序不变
+initP2pShopsSchema(db);
+initShareableLikesSchema(db);
+initShareableBookmarksSchema(db);
+initShareableTagsSchema(db);
+initManifestRegistrySchema(db);
+initPeerDirectorySchema(db);
+initSignalingQueueSchema(db);
 // pin_receipts = 服务证明（pinner 给 recipient 传输 N bytes 时双签的回执）
 // recipient 之后下单同商品 → settlePinRewards 从 basin 拨 0.5% 订单额分给最近 5 个 pinners
 db.exec(`
@@ -3188,56 +2449,10 @@ try {
     db.exec('CREATE INDEX IF NOT EXISTS idx_aucbids_buyer ON auction_bids(buyer_id, status, submitted_at DESC)');
 }
 catch { }
-// CHAT — 上下文绑定聊天（order / rfq / listing_qa）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS conversations (
-    id              TEXT PRIMARY KEY,
-    kind            TEXT NOT NULL,
-    context_id      TEXT NOT NULL,
-    user_a          TEXT NOT NULL,
-    user_b          TEXT NOT NULL,
-    last_message_at TEXT,
-    last_preview    TEXT,
-    unread_a        INTEGER NOT NULL DEFAULT 0,
-    unread_b        INTEGER NOT NULL DEFAULT 0,
-    status          TEXT NOT NULL DEFAULT 'active',
-    created_at      TEXT DEFAULT (datetime('now')),
-    UNIQUE(kind, context_id, user_a, user_b)
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_conv_a ON conversations(user_a, last_message_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_conv_b ON conversations(user_b, last_message_at DESC)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_conv_ctx ON conversations(kind, context_id)');
-}
-catch { }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS messages (
-    id              TEXT PRIMARY KEY,
-    conversation_id TEXT NOT NULL,
-    sender_id       TEXT NOT NULL,
-    body            TEXT NOT NULL DEFAULT '',
-    attachments     TEXT,
-    flagged         INTEGER NOT NULL DEFAULT 0,
-    flag_reasons    TEXT,
-    read_at         TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_msg_conv ON messages(conversation_id, created_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_msg_sender ON messages(sender_id, created_at DESC)');
-}
-catch { }
+// CHAT — 上下文绑定聊天（order / rfq / listing_qa）→ server-schema.ts
+initConversationsSchema(db);
+// 聊天消息 → server-schema.ts；kind/meta ALTER 刻意留原位（紧跟下方）
+initMessagesSchema(db);
 // W1 私信结构化消息：kind = 'text' | 'offer' | 'tracking'；meta = JSON payload
 try {
     db.exec("ALTER TABLE messages ADD COLUMN kind TEXT DEFAULT 'text'");
@@ -3247,24 +2462,8 @@ try {
     db.exec('ALTER TABLE messages ADD COLUMN meta TEXT');
 }
 catch { }
-// 反诈举报表（chat report → 人工审核）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS chat_reports (
-    id              TEXT PRIMARY KEY,
-    conversation_id TEXT NOT NULL,
-    message_id      TEXT,
-    reporter_id     TEXT NOT NULL,
-    reported_id     TEXT NOT NULL,
-    reason          TEXT NOT NULL,
-    note            TEXT,
-    status          TEXT NOT NULL DEFAULT 'pending',
-    created_at      TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_chatrpt_status ON chat_reports(status, created_at)');
-}
-catch { }
+// 反诈举报表（chat report → 人工审核）→ server-schema.ts
+initChatReportsSchema(db);
 // 基金池入池流水（depositToFund 审计 + 4 周历史均值数据源）
 db.exec(`
   CREATE TABLE IF NOT EXISTS fund_deposits (
@@ -3629,68 +2828,13 @@ for (const stmt of [
     }
     catch { }
 }
-db.exec(`
-  CREATE TABLE IF NOT EXISTS quota_increase_applications (
-    id              TEXT PRIMARY KEY,
-    user_id         TEXT NOT NULL,
-    current_quota   INTEGER,
-    requested_quota INTEGER,
-    reason          TEXT,
-    status          TEXT DEFAULT 'pending',
-    applied_at      TEXT DEFAULT (datetime('now')),
-    reviewed_at     TEXT,
-    reviewed_by     TEXT,
-    decision_note   TEXT
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_quota_apps_status ON quota_increase_applications(status)');
-}
-catch { }
-// Verifier 申请记录
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verifier_applications (
-    id              TEXT PRIMARY KEY,
-    user_id         TEXT NOT NULL,
-    status          TEXT DEFAULT 'pending',
-    applied_at      TEXT DEFAULT (datetime('now')),
-    reviewed_at     TEXT,
-    reviewed_by     TEXT,
-    decision_note   TEXT,
-    snapshot        TEXT
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_verifier_apps_status ON verifier_applications(status)');
-}
-catch { }
-// Arbitrator 申请 + 白名单（外部仲裁员路径 — 与 verifier 平行）
-// 内部仲裁员：role='arbitrator'（admin 通过 /admin/admins 创建，自动 is_system=1）
-// 外部仲裁员：role='buyer' + arbitrator_whitelist 行（buyer 申请→admin 批准）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS arbitrator_applications (
-    id              TEXT PRIMARY KEY,
-    user_id         TEXT NOT NULL,
-    status          TEXT DEFAULT 'pending',
-    applied_at      TEXT DEFAULT (datetime('now')),
-    reviewed_at     TEXT,
-    reviewed_by     TEXT,
-    decision_note   TEXT,
-    snapshot        TEXT
-  );
-  CREATE TABLE IF NOT EXISTS arbitrator_whitelist (
-    user_id         TEXT PRIMARY KEY,
-    added_at        TEXT DEFAULT (datetime('now')),
-    note            TEXT,
-    is_system       INTEGER DEFAULT 0,
-    granted_by      TEXT,
-    stake_amount    INTEGER DEFAULT 0
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_arb_apps_status ON arbitrator_applications(status)');
-}
-catch { }
+// 配额提升申请 → server-schema.ts
+initQuotaIncreaseApplicationsSchema(db);
+// Verifier 申请记录 → server-schema.ts
+initVerifierApplicationsSchema(db);
+// Arbitrator 申请 + 白名单（外部仲裁员路径）→ server-schema.ts
+// legacy 内部仲裁员 → 白名单的 migration INSERT 刻意留原位（紧跟下方）
+initArbitratorReviewSchema(db);
 // Migration：legacy 内部仲裁员 (role='arbitrator') → 自动加入白名单（is_system=1）
 try {
     db.prepare(`
@@ -3701,26 +2845,8 @@ try {
 catch (e) {
     console.warn('[arb migration]', e.message);
 }
-// Verifier 申诉记录
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verifier_appeals (
-    id            TEXT PRIMARY KEY,
-    user_id       TEXT NOT NULL,
-    task_id       TEXT,
-    submission_id TEXT,
-    reason        TEXT NOT NULL,
-    evidence_urls TEXT DEFAULT '[]',
-    status        TEXT DEFAULT 'pending',
-    admin_note    TEXT,
-    reviewed_by   TEXT,
-    reviewed_at   TEXT,
-    created_at    TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_verifier_appeals_status ON verifier_appeals(status)');
-}
-catch { }
+// Verifier 申诉记录 → server-schema.ts
+initVerifierAppealsSchema(db);
 // 扩展 verifier_whitelist
 for (const stmt of [
     "ALTER TABLE verifier_whitelist ADD COLUMN tier             TEXT DEFAULT 'active-2'", // 旧数据兼容：当满级
@@ -3743,32 +2869,10 @@ try {
     db.prepare("UPDATE verifier_whitelist SET is_system = 1, tier = 'active-2', daily_quota = 9999 WHERE user_id = ?").run(INTERNAL_AUDITOR_ID);
 }
 catch { }
-// 用户暂停状态（admin 管理）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS user_moderation (
-    user_id        TEXT PRIMARY KEY,
-    suspended      INTEGER DEFAULT 0,
-    reason         TEXT,
-    suspended_by   TEXT,
-    suspended_at   TEXT
-  )
-`);
-// admin 操作审计日志
-db.exec(`
-  CREATE TABLE IF NOT EXISTS admin_audit_log (
-    id           TEXT PRIMARY KEY,
-    admin_id     TEXT NOT NULL,
-    action       TEXT NOT NULL,
-    target_type  TEXT,
-    target_id    TEXT,
-    detail       TEXT,
-    created_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_admin_audit_log_created ON admin_audit_log(created_at)');
-}
-catch { }
+// 用户暂停状态（admin 管理）→ server-schema.ts
+initUserModerationSchema(db);
+// admin 操作审计日志 → server-schema.ts（initAdminCoordinationSchema FK 依赖本表，须先建）
+initAdminAuditLogSchema(db);
 // admin/agent coordination contribution — operator-claim + agent-mandate event logs + fact-source link
 // (schema only). Placed HERE because it FKs users + contribution_facts (both created above) AND
 // admin_audit_log (created just above). No ingestion runs at boot.
@@ -3795,41 +2899,16 @@ initAdminCoordinationSchema(db);
         .run(JSON.stringify(roles), u.id);
     console.log(`[WebAZ] ✓ ${u.name} 已升级为 admin (bootstrap)`);
 })();
-// 验证码表（邮箱绑定 / 找回密钥 / 改密码 等共用）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verification_codes (
-    id          TEXT PRIMARY KEY,
-    user_id     TEXT NOT NULL,
-    channel     TEXT NOT NULL,           -- 'email' / 'phone'
-    target      TEXT NOT NULL,           -- 邮箱地址 / 手机号
-    code        TEXT NOT NULL,           -- 6 位数字
-    purpose     TEXT NOT NULL,           -- 'bind_email' / 'recover_key' / ...
-    attempts    INTEGER DEFAULT 0,
-    used_at     TEXT,
-    expires_at  TEXT NOT NULL,
-    created_at  TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_verification_codes_lookup ON verification_codes(channel, target, purpose)');
-}
-catch { }
+// 验证码表（邮箱绑定 / 找回密钥 / 改密码 等共用）→ server-schema.ts
+initVerificationCodesSchema(db);
 const NEW_PRODUCT_COLS = [
-    'ALTER TABLE products ADD COLUMN specs TEXT',
-    'ALTER TABLE products ADD COLUMN brand TEXT',
-    'ALTER TABLE products ADD COLUMN model TEXT',
+    // specs/brand/model/source_price/ship_regions/handling_hours/estimated_days/
+    // fragile/return_days/return_condition/warranty_days moved to
+    // initRegisterListSearchColumns (single source, shared w/ MCP) — see ~line 494.
     'ALTER TABLE products ADD COLUMN source_url TEXT',
-    'ALTER TABLE products ADD COLUMN source_price REAL',
     'ALTER TABLE products ADD COLUMN source_price_at TEXT',
     'ALTER TABLE products ADD COLUMN weight_kg REAL',
-    'ALTER TABLE products ADD COLUMN ship_regions TEXT DEFAULT "全国"',
     'ALTER TABLE products ADD COLUMN excluded_regions TEXT',
-    'ALTER TABLE products ADD COLUMN handling_hours INTEGER DEFAULT 24',
-    'ALTER TABLE products ADD COLUMN estimated_days TEXT',
-    'ALTER TABLE products ADD COLUMN fragile INTEGER DEFAULT 0',
-    'ALTER TABLE products ADD COLUMN return_days INTEGER DEFAULT 7',
-    'ALTER TABLE products ADD COLUMN return_condition TEXT',
-    'ALTER TABLE products ADD COLUMN warranty_days INTEGER DEFAULT 0',
     'ALTER TABLE products ADD COLUMN commitment_hash TEXT',
     'ALTER TABLE products ADD COLUMN description_hash TEXT',
     'ALTER TABLE products ADD COLUMN price_hash TEXT',
@@ -3891,7 +2970,7 @@ catch { }
         const upd = db.prepare(`UPDATE products SET
       last_sold_at = (SELECT MAX(COALESCE(updated_at, created_at)) FROM orders WHERE product_id = ? AND status = 'completed'),
       first_sold_at = (SELECT MIN(COALESCE(updated_at, created_at)) FROM orders WHERE product_id = ? AND status = 'completed'),
-      completion_count = (SELECT COUNT(1) FROM orders WHERE product_id = ? AND status = 'completed'),
+      completion_count = (SELECT COUNT(1) FROM orders WHERE product_id = ? AND ${genuineSalePredicate('orders')}),
       dispute_loss_count = (
         SELECT COUNT(1) FROM disputes d JOIN orders o ON o.id = d.order_id
         WHERE o.product_id = ? AND d.ruling_type IN ('refund_buyer','partial_refund')
@@ -3933,20 +3012,12 @@ catch { }
 })();
 // ─── 里程碑 3：反操纵层 schema ─────────────────────────────────
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS shareable_click_log (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    shareable_id TEXT NOT NULL,
-    ip_hash TEXT NOT NULL,
-    ua_hash TEXT NOT NULL,
-    ref_path TEXT,
-    created_at TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_scl_share_ts ON shareable_click_log(shareable_id, created_at)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_scl_share_ipua ON shareable_click_log(shareable_id, ip_hash, ua_hash, created_at)`);
+    initShareableClickLogSchema(db);
 }
 catch (e) {
     console.error('[M3 schema scl]', e);
 }
+// shareables ALTER 刻意留原位（scl init 之后、cal init 之前）
 try {
     db.exec('ALTER TABLE shareables ADD COLUMN unique_click_count INTEGER DEFAULT 0');
 }
@@ -3956,137 +3027,42 @@ try {
 }
 catch { }
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS commission_audit_log (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    order_id TEXT,
-    buyer_id TEXT NOT NULL,
-    seller_id TEXT NOT NULL,
-    flag TEXT NOT NULL,                  -- 'sponsor_chain_cross' / 'self_in_chain'
-    detail TEXT,                          -- JSON: { relation: 'buyer_ancestor_of_seller' | ..., path: '...' }
-    created_at TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cal_buyer ON commission_audit_log(buyer_id, created_at)`);
+    initCommissionAuditLogSchema(db);
 }
 catch (e) {
     console.error('[M3 schema cal]', e);
 }
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS registration_audit_log (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    ip_hash TEXT NOT NULL,
-    ua_hash TEXT NOT NULL,
-    sponsor_id TEXT,
-    created_at TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_ral_ip_ts ON registration_audit_log(ip_hash, created_at)`);
+    initRegistrationAuditLogSchema(db);
 }
 catch (e) {
     console.error('[M3 schema ral]', e);
 }
-// ─── 里程碑 4：Agent Reputation schema ─────────────────────────
+// ─── 里程碑 4：Agent observability/reputation schema → server-schema.ts ─
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_call_log (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    api_key TEXT,
-    user_id TEXT,
-    endpoint TEXT NOT NULL,
-    method TEXT,
-    status_code INTEGER,
-    created_at TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_acl_apikey_ts ON agent_call_log(api_key, created_at)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_acl_user_ts ON agent_call_log(user_id, created_at)`);
+    initAgentCallLogSchema(db);
 }
 catch (e) {
     console.error('[M4 schema acl]', e);
 }
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_reputation (
-    api_key TEXT PRIMARY KEY,
-    user_id TEXT NOT NULL,
-    trust_score REAL DEFAULT 0,
-    level TEXT DEFAULT 'new',
-    signals TEXT,                    -- JSON
-    last_calculated_at TEXT,
-    created_at TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_ar_user ON agent_reputation(user_id)`);
+    initAgentReputationSchema(db);
 }
 catch (e) {
     console.error('[M4 schema ar]', e);
 }
-// ─── 2026-05-23 Agent 治理（spec: docs/AGENT-GOVERNANCE.md）─────
-try {
-    // agent_declarations：agent 自声明（trust > new 必须先登记）
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_declarations (
-    api_key           TEXT PRIMARY KEY,
-    user_id           TEXT NOT NULL,
-    operator_name     TEXT NOT NULL,             -- 公司/开发者名
-    operator_contact  TEXT NOT NULL,             -- email/handle/DID
-    purpose           TEXT NOT NULL,             -- ≤200 字
-    declared_scope    TEXT NOT NULL,             -- JSON: {roles, actions, regions}
-    attestations      TEXT,                      -- JSON: {gdpr, kids_safe, no_pii_export, ...}
-    repo_url          TEXT,
-    homepage          TEXT,
-    revoked_at        TEXT,                      -- 撤销时间（用户主动 revoke）
-    revoked_reason    TEXT,
-    created_at        TEXT DEFAULT (datetime('now')),
-    updated_at        TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_agd_operator ON agent_declarations(operator_name)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_agd_revoked ON agent_declarations(revoked_at) WHERE revoked_at IS NOT NULL`);
-    // agent_attestations：bilateral consent（用户主动同意某 agent 的 scope）
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_attestations (
-    id                TEXT PRIMARY KEY,
-    api_key           TEXT NOT NULL,             -- agent 的 api_key
-    user_id           TEXT NOT NULL,             -- 同意此 agent 行动的用户
-    approved_scope    TEXT NOT NULL,             -- JSON：用户实际批准的子集
-    spend_cap_per_order REAL,                    -- 该用户给此 agent 的单笔下单上限（可空 = 沿用 declared_scope）
-    spend_cap_daily   REAL,                      -- 24h 累计上限
-    granted_at        TEXT DEFAULT (datetime('now')),
-    revoked_at        TEXT,
-    UNIQUE(api_key, user_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_aat_user ON agent_attestations(user_id, revoked_at)`);
-    // agent_strikes：违规累积（3-strike state machine）
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_strikes (
-    id                INTEGER PRIMARY KEY AUTOINCREMENT,
-    api_key           TEXT NOT NULL,
-    user_id           TEXT NOT NULL,
-    severity          TEXT NOT NULL,             -- 'warning' | 'suspend_7d' | 'permanent'
-    reason_code       TEXT NOT NULL,             -- 'fake_shipment' | 'mass_spam' | 'overlimit_order' | 'fraud_claim' | ...
-    reason_detail     TEXT,
-    reported_by       TEXT,                      -- user_id（举报人 / system / admin）
-    related_ref       TEXT,                      -- 关联 order/dispute/claim_task id
-    issued_at         TEXT DEFAULT (datetime('now')),
-    expires_at        TEXT,                      -- warning=24h; suspend_7d=7d; permanent=null
-    appeal_status     TEXT DEFAULT 'none',       -- 'none' | 'pending' | 'approved' | 'denied'
-    appeal_reason     TEXT,
-    appeal_decided_by TEXT,
-    appeal_decided_at TEXT
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_apikey ON agent_strikes(api_key, issued_at DESC)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_user ON agent_strikes(user_id, issued_at DESC)`);
-    // 注：SQLite 不允许 partial index 用非确定性函数 (datetime('now'))；用 expires_at 普通索引代替
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_ast_active ON agent_strikes(api_key, expires_at)`);
-    // 2026-05-23 P1 fix 5.3：skills 加 disabled_by_strike_at（被 strike 自动停用后可恢复）
+// ─── 2026-05-23 Agent 治理（spec: docs/AGENT-GOVERNANCE.md）→ server-schema.ts ─
+// 顺序须保持：declarations → attestations → strikes →（ALTER skills 留原位）→ revocations
+try {
+    initAgentDeclarationsSchema(db);
+    initAgentAttestationsSchema(db);
+    initAgentStrikesSchema(db);
+    // 2026-05-23 P1 fix 5.3：skills 加 disabled_by_strike_at（被 strike 自动停用后可恢复）—— 留 server.ts 原位
     try {
         db.exec(`ALTER TABLE skills ADD COLUMN disabled_by_strike_at TEXT`);
     }
     catch { }
-    // agent_revocations：operator-级撤销（封禁同 operator 名下所有 agent）
-    db.exec(`CREATE TABLE IF NOT EXISTS agent_revocations (
-    id                INTEGER PRIMARY KEY AUTOINCREMENT,
-    target_kind       TEXT NOT NULL,             -- 'api_key' | 'operator_name'
-    target_value      TEXT NOT NULL,
-    revoked_by        TEXT NOT NULL,             -- user_id（用户自己 OR root admin）
-    revoked_by_role   TEXT,                      -- 'self' | 'admin'
-    reason            TEXT,
-    revoked_at        TEXT DEFAULT (datetime('now')),
-    UNIQUE(target_kind, target_value, revoked_by)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_arev_target ON agent_revocations(target_kind, target_value)`);
+    initAgentRevocationsSchema(db);
 }
 catch (e) {
     console.error('[agent_governance schema]', e);
@@ -4095,73 +3071,22 @@ catch (e) {
 // 协议级精准匹配：卖家声明该 SKU 的多种 alias（外部 id / 标题 / 短链 / 淘口令 token / 标题片段）
 // 服务端用 findProductsByAlias 做"完全相等 + 包含"判定。alias 至少 6 字符，反通用词。
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS product_aliases (
-    id              TEXT PRIMARY KEY,
-    product_id      TEXT NOT NULL,
-    alias_type      TEXT NOT NULL,            -- 'external_id' | 'external_title' | 'short_url' | 'kouling_token' | 'title_substring'
-    alias_value     TEXT NOT NULL,
-    min_match_chars INTEGER DEFAULT 6,
-    created_at      TEXT DEFAULT (datetime('now')),
-    challenged_at   TEXT,                     -- M7.4 verifier 挑战时间
-    status          TEXT DEFAULT 'active',    -- 'active' | 'revoked' | 'challenged'
-    UNIQUE(alias_type, alias_value, product_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_value ON product_aliases(alias_value)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_product ON product_aliases(product_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_alias_type ON product_aliases(alias_type)`);
+    initProductAliasesSchema(db);
 }
 catch (e) {
     console.error('[M7.2 schema product_aliases]', e);
 }
-// M-5：region 切换 audit log + 24h 限流
+// M-5：region 切换 audit log + 24h 限流 → server-schema.ts
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS region_change_log (
-    id          TEXT PRIMARY KEY,
-    user_id     TEXT NOT NULL,
-    from_region TEXT,
-    to_region   TEXT NOT NULL,
-    ip          TEXT,
-    created_at  TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_region_change_user_ts ON region_change_log(user_id, created_at DESC)`);
+    initRegionChangeLogSchema(db);
 }
 catch (e) {
     console.error('[M-5 schema region_change_log]', e);
 }
-// WebAuthn / Passkey — 大额提现 等敏感操作的二次确认（commit B）
+// WebAuthn / Passkey — 大额提现 等敏感操作的二次确认（commit B）→ server-schema.ts
+// users.webauthn_required_for_withdraw ALTER 刻意留原位（init 后、同一 try 内）
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_credentials (
-    id              TEXT PRIMARY KEY,         -- credential.id (base64url)
-    user_id         TEXT NOT NULL,
-    public_key      BLOB NOT NULL,            -- COSE public key
-    counter         INTEGER NOT NULL DEFAULT 0,
-    transports      TEXT,                     -- JSON array
-    device_label    TEXT,                     -- user-friendly label
-    created_at      TEXT DEFAULT (datetime('now')),
-    last_used_at    TEXT
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_user ON webauthn_credentials(user_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_challenges (
-    id           TEXT PRIMARY KEY,
-    user_id      TEXT NOT NULL,
-    challenge    TEXT NOT NULL,
-    purpose      TEXT NOT NULL,                -- 'register' | 'withdraw' | 'change-password' | 'reveal-key' | 'region'
-    purpose_data TEXT,                          -- JSON：例如 {amount: 1000, to_address: '0x...'}
-    created_at   TEXT DEFAULT (datetime('now')),
-    expires_at   TEXT NOT NULL,
-    consumed_at  TEXT
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_chall_user ON webauthn_challenges(user_id, expires_at)`);
-    // gate token：auth/finish 成功后颁发，绑定 user + purpose + 业务参数（防重放）
-    db.exec(`CREATE TABLE IF NOT EXISTS webauthn_gate_tokens (
-    id           TEXT PRIMARY KEY,             -- token
-    user_id      TEXT NOT NULL,
-    purpose      TEXT NOT NULL,
-    purpose_data TEXT,                          -- JSON
-    expires_at   TEXT NOT NULL,                 -- now + 60s
-    consumed_at  TEXT
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wac_gate_user ON webauthn_gate_tokens(user_id, expires_at)`);
+    initWebauthnSchema(db);
     // 用户 opt-in 设置
     try {
         db.exec("ALTER TABLE users ADD COLUMN webauthn_required_for_withdraw INTEGER DEFAULT 0");
@@ -4183,41 +3108,8 @@ const WEBAUTHN_CHALLENGE_TTL_MS = 5 * 60 * 1000; // 5 分钟
 const WEBAUTHN_GATE_TTL_MS = 90 * 1000; // 90 秒
 // M7.3：claim 验证任务系统 — 买家对推荐理由发起验证，3 verifier 共识仲裁
 try {
-    db.exec(`CREATE TABLE IF NOT EXISTS claim_verification_tasks (
-    id                  TEXT PRIMARY KEY,
-    order_id            TEXT NOT NULL,
-    buyer_id            TEXT NOT NULL,
-    seller_id           TEXT NOT NULL,
-    product_id          TEXT NOT NULL,
-    claim_target        TEXT NOT NULL,    -- 'price' | 'commission' | 'protection' | 'return' | 'warranty' | 'handling' | 'other'
-    claim_text          TEXT NOT NULL,    -- 买家陈述（≤ 500 字）
-    evidence_uri        TEXT,             -- 买家证据（URL / hash）
-    stake_buyer         REAL NOT NULL,    -- 买家锁定的质押金
-    seller_evidence_uri TEXT,             -- 卖家提交的证据
-    seller_evidence_at  TEXT,
-    deadline_at         TEXT NOT NULL,    -- 默认 48h；卖家提交证据后 +24h
-    status              TEXT NOT NULL DEFAULT 'open',  -- 'open' | 'sealed' | 'resolved_pass' | 'resolved_fail' | 'resolved_no_fault' | 'timeout_pass' | 'timeout_fail'
-    resolved_at         TEXT,
-    created_at          TEXT DEFAULT (datetime('now')),
-    UNIQUE(order_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_status ON claim_verification_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_buyer ON claim_verification_tasks(buyer_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_seller ON claim_verification_tasks(seller_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvt_deadline ON claim_verification_tasks(deadline_at) WHERE status = 'open'`);
-    db.exec(`CREATE TABLE IF NOT EXISTS claim_verification_votes (
-    id           TEXT PRIMARY KEY,
-    task_id      TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,   -- 'pass' | 'fail' | 'no_fault'
-    evidence_uri TEXT,
-    note         TEXT,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(task_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvv_task ON claim_verification_votes(task_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvv_verifier ON claim_verification_votes(verifier_id)`);
-    // M7.3b 结算扩展
+    initClaimVerificationBaseSchema(db);
+    // M7.3b 结算扩展 — 刻意留 server.ts 原位（base init 之后，按原顺序）
     try {
         db.exec(`ALTER TABLE claim_verification_tasks ADD COLUMN majority_vote TEXT`);
     }
@@ -4226,187 +3118,18 @@ try {
         db.exec(`ALTER TABLE claim_verification_votes ADD COLUMN was_majority INTEGER`);
     }
     catch { }
-    // verifier 禁言 / 永封记录（outlier 累计触发）
-    db.exec(`CREATE TABLE IF NOT EXISTS claim_verifier_suspensions (
-    id            TEXT PRIMARY KEY,
-    user_id       TEXT NOT NULL,
-    type          TEXT NOT NULL,    -- 'suspended' | 'revoked'
-    until_at      TEXT,             -- NULL = permanent (revoked)
-    reason        TEXT,
-    outlier_count INTEGER,
-    created_at    TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_cvs_user ON claim_verifier_suspensions(user_id, created_at DESC)`);
-    // Sprint 1: 商品声明验证（与 order claim 平行，但作用于 product 层）
-    // 任何登录用户（除 seller 本人）可对商品的某项声明发起验证
-    // 3 verifier 共识投票判定 upheld（声明不实，卖家失分）/ dismissed（声明属实，发起人失质押）
-    db.exec(`CREATE TABLE IF NOT EXISTS product_claim_tasks (
-    id              TEXT PRIMARY KEY,
-    product_id      TEXT NOT NULL,
-    claimant_id     TEXT NOT NULL,
-    seller_id       TEXT NOT NULL,
-    claim_target    TEXT NOT NULL,    -- 'title' | 'description' | 'condition' | 'return_days' | 'handling_hours' | 'warranty_days' | 'shipping_regions' | 'origin' | 'other'
-    claim_text      TEXT NOT NULL,    -- 发起人陈述 6-500 字
-    evidence_uri    TEXT,             -- 发起人证据 URL
-    stake_claimant  REAL NOT NULL,    -- 发起人锁定质押
-    seller_evidence_uri TEXT,         -- 卖家反驳证据
-    seller_evidence_at  TEXT,
-    deadline_at     TEXT NOT NULL,    -- 默认 72h；卖家提交证据后 +24h
-    status          TEXT NOT NULL DEFAULT 'open',  -- 'open' | 'sealed' | 'resolved_upheld' | 'resolved_dismissed' | 'expired'
-    ruling          TEXT,             -- 'upheld' | 'dismissed' | 'insufficient'
-    majority_vote   TEXT,
-    resolved_at     TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_status ON product_claim_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_product ON product_claim_tasks(product_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_claimant ON product_claim_tasks(claimant_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pct_seller ON product_claim_tasks(seller_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS product_claim_votes (
-    id           TEXT PRIMARY KEY,
-    claim_id     TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,    -- 'upheld' | 'dismissed' | 'insufficient'
-    evidence_uri TEXT,
-    note         TEXT,
-    was_majority INTEGER,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(claim_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pcv_claim ON product_claim_votes(claim_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_pcv_verifier ON product_claim_votes(verifier_id)`);
-    // Sprint 2-A: 测评真实性验证（针对 shareables / manifests）
-    // 任何登录用户可对某条评测发起验证（不是真实购买/付费推广/利益相关等）
-    db.exec(`CREATE TABLE IF NOT EXISTS review_claim_tasks (
-    id              TEXT PRIMARY KEY,
-    review_type     TEXT NOT NULL,    -- 'shareable' | 'manifest'
-    review_id       TEXT NOT NULL,    -- shareable.id 或 manifest.hash
-    product_id      TEXT,             -- 关联商品（用于显示）
-    reviewer_id     TEXT NOT NULL,    -- 被诉评测作者
-    claimant_id     TEXT NOT NULL,
-    claim_target    TEXT NOT NULL,    -- 'not_real_purchase' | 'paid_promo' | 'incentivized' | 'misleading' | 'fake' | 'other'
-    claim_text      TEXT NOT NULL,
-    evidence_uri    TEXT,
-    stake_claimant  REAL NOT NULL,
-    deadline_at     TEXT NOT NULL,
-    status          TEXT NOT NULL DEFAULT 'open',
-    ruling          TEXT,
-    majority_vote   TEXT,
-    resolved_at     TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_status ON review_claim_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_review ON review_claim_tasks(review_type, review_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_rct_reviewer ON review_claim_tasks(reviewer_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS review_claim_votes (
-    id           TEXT PRIMARY KEY,
-    claim_id     TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,    -- 'upheld' | 'dismissed' | 'insufficient'
-    evidence_uri TEXT,
-    note         TEXT,
-    was_majority INTEGER,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(claim_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_rcv_claim ON review_claim_votes(claim_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_rcv_verifier ON review_claim_votes(verifier_id)`);
-    // Sprint 2-B: 二手成色验证（针对 secondhand_items）
-    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_claim_tasks (
-    id              TEXT PRIMARY KEY,
-    sh_item_id      TEXT NOT NULL,
-    seller_id       TEXT NOT NULL,    -- 二手卖家
-    claimant_id     TEXT NOT NULL,
-    claim_target    TEXT NOT NULL,    -- 'condition' | 'images' | 'description' | 'title' | 'price' | 'other'
-    claim_text      TEXT NOT NULL,
-    evidence_uri    TEXT,
-    stake_claimant  REAL NOT NULL,
-    deadline_at     TEXT NOT NULL,
-    status          TEXT NOT NULL DEFAULT 'open',
-    ruling          TEXT,
-    majority_vote   TEXT,
-    resolved_at     TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_status ON secondhand_claim_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_item ON secondhand_claim_tasks(sh_item_id)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_sct_seller ON secondhand_claim_tasks(seller_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS secondhand_claim_votes (
-    id           TEXT PRIMARY KEY,
-    claim_id     TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,
-    evidence_uri TEXT,
-    note         TEXT,
-    was_majority INTEGER,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(claim_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_scv_claim ON secondhand_claim_votes(claim_id)`);
-    // Sprint 3-A: 拍卖声明（auctions）
-    // 任何非 seller 用户可对 active auction 的合理性发起验证
-    db.exec(`CREATE TABLE IF NOT EXISTS auction_claim_tasks (
-    id              TEXT PRIMARY KEY,
-    auction_id      TEXT NOT NULL,
-    seller_id       TEXT NOT NULL,
-    claimant_id     TEXT NOT NULL,
-    claim_target    TEXT NOT NULL,    -- 'unreasonable_reserve' | 'shill_bidding' | 'collusion' | 'fake_listing' | 'other'
-    claim_text      TEXT NOT NULL,
-    evidence_uri    TEXT,
-    stake_claimant  REAL NOT NULL,
-    deadline_at     TEXT NOT NULL,
-    status          TEXT NOT NULL DEFAULT 'open',
-    ruling          TEXT,
-    majority_vote   TEXT,
-    resolved_at     TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_act_status ON auction_claim_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_act_auction ON auction_claim_tasks(auction_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS auction_claim_votes (
-    id           TEXT PRIMARY KEY,
-    claim_id     TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,
-    evidence_uri TEXT,
-    note         TEXT,
-    was_majority INTEGER,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(claim_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_acv_claim ON auction_claim_votes(claim_id)`);
-    // Sprint 3-B: 慈善许愿声明（wishes）
-    // 任何非 wisher 用户可对 wish 真实性发起验证
-    db.exec(`CREATE TABLE IF NOT EXISTS wish_claim_tasks (
-    id              TEXT PRIMARY KEY,
-    wish_id         TEXT NOT NULL,
-    wisher_id       TEXT NOT NULL,
-    claimant_id     TEXT NOT NULL,
-    claim_target    TEXT NOT NULL,    -- 'fake_identity' | 'fake_story' | 'already_fulfilled' | 'duplicate' | 'inappropriate' | 'other'
-    claim_text      TEXT NOT NULL,
-    evidence_uri    TEXT,
-    stake_claimant  REAL NOT NULL,
-    deadline_at     TEXT NOT NULL,
-    status          TEXT NOT NULL DEFAULT 'open',
-    ruling          TEXT,
-    majority_vote   TEXT,
-    resolved_at     TEXT,
-    created_at      TEXT DEFAULT (datetime('now'))
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wct_status ON wish_claim_tasks(status)`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wct_wish ON wish_claim_tasks(wish_id)`);
-    db.exec(`CREATE TABLE IF NOT EXISTS wish_claim_votes (
-    id           TEXT PRIMARY KEY,
-    claim_id     TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    vote         TEXT NOT NULL,
-    evidence_uri TEXT,
-    note         TEXT,
-    was_majority INTEGER,
-    voted_at     TEXT DEFAULT (datetime('now')),
-    UNIQUE(claim_id, verifier_id)
-  )`);
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_wcv_claim ON wish_claim_votes(claim_id)`);
+    // verifier 禁言 / 永封记录 → server-schema.ts
+    initClaimVerifierSuspensionsSchema(db);
+    // Sprint 1: 商品声明验证 → server-schema.ts
+    initProductClaimSchema(db);
+    // Sprint 2-A: 测评真实性验证 → server-schema.ts
+    initReviewClaimSchema(db);
+    // Sprint 2-B: 二手成色验证 → server-schema.ts
+    initSecondhandClaimSchema(db);
+    // Sprint 3-A: 拍卖声明 → server-schema.ts
+    initAuctionClaimSchema(db);
+    // Sprint 3-B: 慈善许愿声明 → server-schema.ts
+    initWishClaimSchema(db);
 }
 catch (e) {
     console.error('[M7.3 schema claim_verification]', e);
@@ -4523,8 +3246,8 @@ function computeAgentTrust(apiKey) {
     if (!user)
         return null;
     const ageDays = Math.max(0, (Date.now() - new Date(user.created_at.replace(' ', 'T') + 'Z').getTime()) / 86400_000);
-    const completedBuyer = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE buyer_id = ? AND status = 'completed'`).get(user.id).n;
-    const completedSeller = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE seller_id = ? AND status = 'completed'`).get(user.id).n;
+    const completedBuyer = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE buyer_id = ? AND ${genuineSalePredicate('orders')}`).get(user.id).n;
+    const completedSeller = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE seller_id = ? AND ${genuineSalePredicate('orders')}`).get(user.id).n;
     const disputeLoss = db.prepare(`SELECT COUNT(*) as n FROM disputes WHERE defendant_id = ? AND ruling_type IN ('refund_buyer','partial_refund')`).get(user.id).n;
     // 商品分享带来的真实成交（创作者贡献）
     const shareConversions = db.prepare(`
@@ -4960,19 +3683,8 @@ db.exec(`
     used_at    TEXT
   )
 `);
-db.exec(`
-  CREATE TABLE IF NOT EXISTS product_external_links (
-    id          TEXT PRIMARY KEY,
-    product_id  TEXT NOT NULL,
-    url         TEXT NOT NULL,
-    source      TEXT DEFAULT 'manual',
-    verified    INTEGER DEFAULT 0,
-    verify_note TEXT,
-    added_at    TEXT DEFAULT (datetime('now')),
-    verified_at TEXT,
-    UNIQUE(product_id, url)
-  )
-`);
+// 外部链接验证 base → server-schema.ts；ALTER/index/回填 IIFE 刻意留原位（紧跟下方）
+initProductExternalLinksBaseSchema(db);
 try {
     db.exec('ALTER TABLE product_external_links ADD COLUMN revoked INTEGER DEFAULT 0');
 }
@@ -5023,58 +3735,12 @@ catch { }
         console.error('[backfill failed]', e.message);
     }
 })();
-// link_challenges 保留用于向后兼容，新流程用 verify_tasks
-db.exec(`
-  CREATE TABLE IF NOT EXISTS link_challenges (
-    id          TEXT PRIMARY KEY,
-    product_id  TEXT NOT NULL,
-    url         TEXT NOT NULL,
-    code        TEXT NOT NULL,
-    status      TEXT DEFAULT 'pending',
-    created_at  TEXT DEFAULT (datetime('now')),
-    expires_at  TEXT NOT NULL,
-    verified_at TEXT
-  )
-`);
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verify_tasks (
-    id                  TEXT PRIMARY KEY,
-    type                TEXT NOT NULL DEFAULT 'code_check',
-    product_id          TEXT NOT NULL,
-    url                 TEXT NOT NULL,
-    code                TEXT,
-    verifiers_needed    INTEGER NOT NULL DEFAULT 3,
-    reward_per_verifier REAL NOT NULL DEFAULT 0.1,
-    fee_locked          REAL NOT NULL DEFAULT 0,
-    status              TEXT NOT NULL DEFAULT 'open',
-    result              TEXT,
-    created_at          TEXT DEFAULT (datetime('now')),
-    expires_at          TEXT NOT NULL,
-    settled_at          TEXT
-  )
-`);
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verify_submissions (
-    id           TEXT PRIMARY KEY,
-    task_id      TEXT NOT NULL,
-    verifier_id  TEXT NOT NULL,
-    submission   TEXT,
-    verdict      TEXT,
-    claimed_at   TEXT DEFAULT (datetime('now')),
-    submitted_at TEXT,
-    UNIQUE(task_id, verifier_id)
-  )
-`);
-db.exec(`
-  CREATE TABLE IF NOT EXISTS verifier_stats (
-    user_id       TEXT PRIMARY KEY,
-    verify_rights INTEGER NOT NULL DEFAULT 3,
-    tasks_done    INTEGER NOT NULL DEFAULT 0,
-    tasks_correct INTEGER NOT NULL DEFAULT 0,
-    tasks_wrong   INTEGER NOT NULL DEFAULT 0,
-    suspended_until TEXT
-  )
-`);
+// link_challenges 保留用于向后兼容，新流程用 verify_tasks → server-schema.ts
+initLinkChallengesSchema(db);
+initVerifyTasksSchema(db);
+initVerifySubmissionsSchema(db);
+// verifier_stats 须在 PERMANENT_ACCOUNTS bootstrap 之前完成 → server-schema.ts
+initVerifierStatsSchema(db);
 (() => {
     for (const acc of PERMANENT_ACCOUNTS) {
         const apiKey = 'key_perm_' + createHmac('sha256', MASTER_SEED).update(acc.seed).digest('hex');
@@ -5807,6 +4473,11 @@ registerAgentReputationRoutes(app, {
 });
 // #1013 Phase 47: 6 公开用户主页 endpoints 已迁出到 routes/users-public.ts
 registerUsersPublicRoutes(app, { db, auth, noteAuthenticityBadges });
+registerDirectPayDisclosureAckRoutes(app, { db, auth, generateId, consumeGateToken }); // PR-4d
+registerDirectReceivePaymentInstructionRoutes(app, { db, auth, generateId });
+registerDirectReceiveAccountsRoutes(app, { db, auth, generateId, consumeGateToken }); // PR-4f-a + Phase C1
+registerDirectPayAvailabilityRoutes(app, { db, auth, getProtocolParam, generateId }); // PR-4a + 缓交 apply/status
+registerAdminDirectReceiveDepositsRoutes(app, { db, requireRootAdmin: (req, res) => requireRootAdmin(req, res), consumeGateToken, logAdminAction, getProtocolParam }); // PR-4b-3 + readiness
 // RFC-004 build_feedback — agent-native "use → build" 反馈管道
 registerBuildFeedbackRoutes(app, {
     db, auth,
@@ -6574,25 +5245,8 @@ registerAdminTokenomicsRoutes(app, {
 });
 // system-flags — Phase 107 已迁出
 // #1013 Phase 73: GET /api/reviews/recent 已迁出（claim 2 端点也由同模块注册，定义在下游）
-// B-4: 编辑精选 / 每周推荐
-db.exec(`
-  CREATE TABLE IF NOT EXISTS editor_picks (
-    id          TEXT PRIMARY KEY,
-    kind        TEXT NOT NULL,     -- 'product' | 'seller'
-    target_id   TEXT NOT NULL,
-    title       TEXT,              -- 编辑推荐语
-    note        TEXT,
-    starts_at   TEXT NOT NULL,
-    ends_at     TEXT NOT NULL,
-    sort_order  INTEGER DEFAULT 0,
-    created_by  TEXT,
-    created_at  TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_ep_active ON editor_picks(kind, ends_at, sort_order)');
-}
-catch { }
+// B-4: 编辑精选 / 每周推荐 → server-schema.ts
+initEditorPicksSchema(db);
 // editor-picks 公开 — Phase 107 已迁出
 // #1013 Phase 66: 3 admin/editor-picks endpoints 已迁出
 registerAdminEditorPicksRoutes(app, {
@@ -6654,25 +5308,8 @@ registerAdminOpsRoutes(app, {
 });
 // AI 2 endpoints — Phase 100 已迁出
 registerAiRoutes(app, { db, auth, anthropic });
-// D-3: KYC light — 实名认证（轻度，不存原始证件号）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS kyc_records (
-    user_id        TEXT PRIMARY KEY,
-    real_name      TEXT NOT NULL,
-    id_type        TEXT NOT NULL,            -- 'passport' | 'national_id' | 'driver_license'
-    id_number_hash TEXT NOT NULL,            -- sha256(id_number + MASTER_SEED)
-    id_number_last4 TEXT,                    -- 末 4 位明文（便于核对）
-    status         TEXT NOT NULL DEFAULT 'pending',  -- pending / approved / rejected
-    reject_reason  TEXT,
-    reviewed_by    TEXT,
-    reviewed_at    TEXT,
-    submitted_at   TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_kyc_status ON kyc_records(status, submitted_at)');
-}
-catch { }
+// D-3: KYC light — 实名认证（轻度，不存原始证件号）→ server-schema.ts
+initKycRecordsSchema(db);
 // KYC 2 endpoints — Phase 97 已迁出
 registerKycRoutes(app, { db, auth, MASTER_SEED });
 // #1013 Phase 68: 6 admin/kyc+risk endpoints 已迁出
@@ -7033,7 +5670,7 @@ function checkVerifierEligibility(userId) {
     const ageDays = Math.floor((Date.now() - new Date(user.created_at).getTime()) / 86400_000);
     items.push({ key: 'age', label: '账户年龄 ≥ 60 天', current: ageDays, required: 60, ok: ageDays >= 60 });
     items.push({ key: 'email', label: '邮箱已验证', current: user.email_verified ? '✓' : '✗', required: '✓', ok: !!user.email_verified });
-    const orders = db.prepare("SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status = 'completed'").get(userId, userId).n;
+    const orders = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND ${genuineSalePredicate('orders')}`).get(userId, userId).n;
     items.push({ key: 'orders', label: '完成订单 ≥ 20 笔', current: orders, required: 20, ok: orders >= 20 });
     const disputeLost = db.prepare(`
     SELECT COUNT(*) as n FROM disputes
@@ -7180,7 +5817,7 @@ function checkArbitratorEligibility(userId) {
     const ageDays = Math.floor((Date.now() - new Date(user.created_at).getTime()) / 86400_000);
     items.push({ key: 'age', label: '账户年龄 ≥ 90 天', current: ageDays, required: 90, ok: ageDays >= 90 });
     items.push({ key: 'email', label: '邮箱已验证', current: user.email_verified ? '✓' : '✗', required: '✓', ok: !!user.email_verified });
-    const orders = db.prepare("SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status = 'completed'").get(userId, userId).n;
+    const orders = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND ${genuineSalePredicate('orders')}`).get(userId, userId).n;
     items.push({ key: 'orders', label: '完成订单 ≥ 50 笔', current: orders, required: 50, ok: orders >= 50 });
     const disputeLost = db.prepare(`
     SELECT COUNT(*) as n FROM disputes
@@ -7400,7 +6037,7 @@ registerOrdersReadRoutes(app, { db, auth, getOrderStatus, getOrderChain, verifyO
 registerOrdersActionRoutes(app, {
     db, auth, isTrustedRole, generateId, transition, notifyTransition,
     settleOrder, settleFault, detectFraud, createDispute, checkTimeouts, recordViolationReputation,
-    broadcastSystemEvent,
+    broadcastSystemEvent, consumeGateToken,
 });
 // #1013 Phase 85: POST /api/orders 巨型事务已迁出
 registerOrdersCreateRoutes(app, {
@@ -7515,8 +6152,8 @@ function awardBidAndCreateOrder(rfq, winner) {
             db.prepare(`
         INSERT INTO products (id, seller_id, title, description, price, stock, status, images,
           ship_regions, handling_hours, commission_rate, category_id, stake_amount,
-          listing_id, fulfillment_type, eta_hours, freshness_ts, cold_start_remaining)
-        VALUES (?,?,?,?,?,?,'active','[]',?,?,?,?,0,?,?,?,datetime('now'),?)
+          listing_id, fulfillment_type, eta_hours, freshness_ts, cold_start_remaining, currency)
+        VALUES (?,?,?,?,?,?,'active','[]',?,?,?,?,0,?,?,?,datetime('now'),?,'WAZ')
       `).run(productId, sellerId, String(rfq.title), `[RFQ ${rfqId}] ` + (rfq.notes ? String(rfq.notes).slice(0, 200) : '协议撮合订单'), price, qty, String(rfq.region_required || '全国'), 24, 0, 'cat_default', lstId, fulfillmentType, etaHours, 30);
         }
     }
@@ -7970,8 +6607,8 @@ function settleAuctionInner(aucId) {
         productId = generateId('p');
         db.prepare(`
       INSERT INTO products (id, seller_id, title, description, price, stock, status, images,
-        ship_regions, handling_hours, commission_rate, category_id, stake_amount, listing_id, freshness_ts, cold_start_remaining)
-      VALUES (?,?,?,?,?,?,'active','[]',?,?,?,?,0,?,datetime('now'),?)
+        ship_regions, handling_hours, commission_rate, category_id, stake_amount, listing_id, freshness_ts, cold_start_remaining, currency)
+      VALUES (?,?,?,?,?,?,'active','[]',?,?,?,?,0,?,datetime('now'),?,'WAZ')
     `).run(productId, sellerId, String(auc.title), `[AUC ${aucId}] ` + (auc.notes ? String(auc.notes).slice(0, 200) : '拍卖成交'), price, qty, '全国', 24, 0.10, 'cat_default', auc.listing_id ? String(auc.listing_id) : null, 30);
     }
     // 5) 截止期 — 拍卖订单走标准 17 天链（拍卖结束后再谈履约时效）
@@ -8053,14 +6690,8 @@ setInterval(() => {
 // #1013 Phase 4: 8 endpoints + 4 helpers 已迁出到 routes/chat.ts
 // ============================================================
 registerChatRoutes(app, { db, auth, generateId, rateLimitOk });
-// 初始化导入次数追踪表
-db.exec(`
-  CREATE TABLE IF NOT EXISTS import_logs (
-    id         TEXT PRIMARY KEY,
-    user_id    TEXT NOT NULL,
-    created_at TEXT DEFAULT (datetime('now'))
-  )
-`);
+// 初始化导入次数追踪表 → server-schema.ts
+initImportLogsSchema(db);
 const FREE_IMPORT_LIMIT = 10;
 // #1013 Phase 114: import-product 已迁出
 registerImportProductRoutes(app, {
@@ -8105,7 +6736,7 @@ const TASK_DEFS = {
 };
 // 计算用户当前任务进度（不写库，纯读）
 function computeTaskProgress(userId) {
-    const completed = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE buyer_id = ? AND status = 'completed'`).get(userId).n;
+    const completed = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE buyer_id = ? AND ${genuineSalePredicate('orders')}`).get(userId).n;
     const ratingsGiven = db.prepare(`SELECT COUNT(*) as n FROM order_ratings WHERE buyer_id = ?`).get(userId).n;
     const ratingsReceived = db.prepare(`SELECT COUNT(*) as n FROM order_ratings WHERE seller_id = ?`).get(userId).n;
     const follows = db.prepare(`SELECT COUNT(*) as n FROM follows WHERE follower_id = ?`).get(userId).n;
@@ -8297,6 +6928,7 @@ registerShareablesInteractionsRoutes(app, {
     parseMentions, notifyMentions,
 });
 registerLeaderboardRoutes(app, { db, internalAuditorId: INTERNAL_AUDITOR_ID, rateLimitOk });
+registerFxRoutes(app, { rateLimitOk });
 // like-status / bookmark-status / bookmarked-shareables 已迁出 (#1013 Phase 12)
 // ─── Manifest Registry API（原生 P2P 内容索引，零字节存储）─────
 // ============================================================
@@ -8574,28 +7206,19 @@ function settleCommission(orderId, effectiveBase) {
         { level: 2, beneficiary: l2Uid },
         { level: 3, beneficiary: l3Uid },
     ];
-    // #7 Commission source_type — 查 attribution 找到带来 buyer 的 shareable，确定 channel 类型
-    // 反推: 该 uid 作为 sharer 把 product 分享给"下家"的 shareable 类型
-    function resolveSourceType(uid) {
-        if (!uid)
-            return 'sponsor';
-        const attr = db.prepare(`
-      SELECT shareable_id FROM product_share_attribution
-      WHERE product_id = ? AND sharer_id = ? AND shareable_id IS NOT NULL
-      ORDER BY created_at DESC LIMIT 1
-    `).get(order.product_id, uid);
-        if (!attr)
-            return 'sponsor';
-        const sh = db.prepare(`SELECT type FROM shareables WHERE id = ?`).get(attr.shareable_id);
-        if (!sh)
-            return 'sponsor';
-        return sh.type === 'note' ? 'note' : 'link';
-    }
+    // #7 Commission source_type resolution moved to module-level commissionSourceType() — RFC-018
+    // Option A writes commission_records at MATURATION (not here), so source_type is stamped there.
     // 2026-06-04：所有兜底统一入 commission_reserve（三级公池，独立科目，只进不出）。
     // commission 不再回流 global_fund（PV 资金）—— 三套科目解耦，redirected 始终 0。
     let toCommissionReserve = 0; // → commission_reserve（仅作日志/返回信息用）
     // 三级金额一次性 allocate(精确求和 ≡ poolU);各级再按 gate 路由到钱包/公池/escrow。
     const levelAmtU = allocate(poolU, [LEVEL_RATES[1], LEVEL_RATES[2], LEVEL_RATES[3]]);
+    // RFC-018 clearing window: opted-in commission accrues to pending_commission_escrow and matures
+    // after the product's return window + buffer. Anchor = now (settleCommission runs at order→completed).
+    const nowMsClearing = Date.now();
+    const returnDaysClearing = Number(db.prepare("SELECT return_days FROM products WHERE id = ?").get(order.product_id)?.return_days ?? 7);
+    const clearingBufferDays = Number(db.prepare("SELECT value FROM protocol_params WHERE key = 'settlement.clearing_buffer_days'").get()?.value ?? 2);
+    const maturesAtClearing = nowMsClearing + Math.max(0, returnDaysClearing + clearingBufferDays) * 86400 * 1000;
     for (const { level, beneficiary } of recipients) {
         const amountU = levelAmtU[level - 1];
         const amount = toDecimal(amountU);
@@ -8641,15 +7264,17 @@ function settleCommission(orderId, effectiveBase) {
             catch (e) { /* UNIQUE 冲突 — settleCommission 重入幂等 */ }
             continue;
         }
-        // ⑤ 正常分账
+        // ⑤ RFC-018 clearing (Option A): opted-in commission ACCRUES to pending_commission_escrow with a
+        // matures_at — it is NOT credited to the wallet now and writes NO commission_records yet. The
+        // maturation cron (rewards-clearing-mature) re-validates the order is still genuinely closed, then
+        // writes commission_records + credits the wallet. A return in-window reverses the pending row
+        // (proportionally) — never paid, never clawed back. expires_at is a NOT-NULL filler = matures_at;
+        // the escrow-expire cron ignores rows where matures_at IS NOT NULL (i.e. clearing rows).
         try {
-            const srcType = resolveSourceType(beneficiary);
-            db.prepare(`INSERT INTO commission_records (id, order_id, beneficiary_id, source_buyer_id, level, amount, rate, region, source, source_type)
-                  VALUES (?,?,?,?,?,?,?,?,?,?)`)
-                .run(generateId('comm'), orderId, beneficiary, order.buyer_id, level, amount, rate, region, routeSource, srcType);
-            applyWalletDelta(db, beneficiary, { balance: amountU, earned: amountU });
+            db.prepare(`INSERT INTO pending_commission_escrow (recipient_user_id, order_id, amount, attribution_path, status, created_at, expires_at, matures_at) VALUES (?,?,?,?,'pending',?,?,?)`)
+                .run(beneficiary, orderId, amount, `L${level}`, nowMsClearing, maturesAtClearing, maturesAtClearing);
         }
-        catch (e) { /* UNIQUE 冲突 */ }
+        catch (e) { /* UNIQUE (recipient,order,path) — settleCommission re-entry idempotent */ }
     }
     db.prepare("UPDATE orders SET settled_commission_at = datetime('now') WHERE id = ?").run(orderId);
     // redirected 恒为 0：commission 兜底全部入 commission_reserve，不再回流 global_fund(PV 资金)。
@@ -8765,6 +7390,10 @@ function settleOrder(orderId) {
     // 内部 try/catch 用于非关键 hook（settlePinRewards / metrics 更新）失败不回滚资金主流程
     db.transaction(() => {
         const order = db.prepare('SELECT * FROM orders WHERE id = ?').get(orderId);
+        if (order && order.payment_rail === 'direct_p2p') {
+            settleDirectPayFeeAtCompletion(db, order, generateId('dpfr'));
+            return;
+        } // Rail1 直付:跳过 escrow 结算;平台费=链下应收(释放遗留模拟 stake + accrue,fail-closed 同原子边界)
         const total = order.total_amount;
         const isSecondhand = order.source === 'secondhand';
         const isInPerson = order.fulfillment_mode === 'in_person';
@@ -9212,7 +7841,7 @@ registerEvidenceRoutes(app, { db, auth, detectFraud });
 // #1013 Phase 1: 7 endpoint handlers 已迁出到 src/pwa/routes/webauthn.ts
 // helpers (consumeGateToken / requireHumanPresence) 仍在本文件，被 withdraw/arbitrate/vote 等引用
 registerWebauthnRoutes(app, {
-    db, auth, generateId,
+    db, auth, generateId, rateLimitOk,
     rpId: WEBAUTHN_RP_ID,
     rpName: WEBAUTHN_RP_NAME,
     origin: WEBAUTHN_ORIGIN,
@@ -9964,22 +8593,7 @@ function startDepositWatcher() {
 // 轻量级自建错误上报 — 避免外部 Sentry 依赖
 // 后端：进程级 uncaughtException + unhandledRejection
 // 前端：POST /api/error-report（window.onerror → 入此表）
-db.exec(`
-  CREATE TABLE IF NOT EXISTS error_log (
-    id          INTEGER PRIMARY KEY AUTOINCREMENT,
-    source      TEXT NOT NULL,    -- 'server-uncaught' | 'server-rejection' | 'client'
-    message     TEXT NOT NULL,
-    stack       TEXT,
-    url         TEXT,             -- 客户端 location.href
-    user_agent  TEXT,             -- 客户端 UA
-    user_id     TEXT,             -- 已登录用户（可空）
-    created_at  TEXT DEFAULT (datetime('now'))
-  )
-`);
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_error_log_created ON error_log(created_at)');
-}
-catch { }
+initErrorLogSchema(db);
 // ─── 治理岗位上岗(W3.5-B,2026-06-02)──────────────────────────
 // docs/GOVERNANCE-ONBOARDING.md — arbitrator + verifier 申请 / 上岗 / 卸任 / 申诉
 // 1 表:governance_applications(append-only,记录 apply/activate/resign/auto_deactivate/appeal)
@@ -10106,72 +8720,10 @@ try {
     db.exec('CREATE INDEX IF NOT EXISTS idx_rewards_apps_action ON rewards_applications(user_id, action, created_at DESC)');
 }
 catch { }
-// 5. pending_commission_escrow:opt-out promoter 待激活领取队列(§3.5b)
-// PR-1c-b: order_id is NULLable so attribution_path='pv_pair' rows (which accrue
-// across many orders) can record amount without inventing a fake order_id.
-// L1/L2/L3 rows still carry a real order_id, enforced by the gate code path
-// in settleCommission (not by NOT NULL constraint).
-db.exec(`
-  CREATE TABLE IF NOT EXISTS pending_commission_escrow (
-    id                       INTEGER PRIMARY KEY AUTOINCREMENT,
-    recipient_user_id        TEXT NOT NULL,
-    order_id                 TEXT,                                 -- NULL for pv_pair (PR-1c-b)
-    amount                   REAL NOT NULL,    -- WAZ amount
-    attribution_path         TEXT NOT NULL,    -- 'L1' | 'L2' | 'L3' | 'pv_pair' | etc.
-    status                   TEXT NOT NULL DEFAULT 'pending',  -- 'pending' | 'settled' | 'expired'
-    created_at               INTEGER NOT NULL,
-    expires_at               INTEGER NOT NULL,
-    settled_at               INTEGER,
-    expired_to_charity_at    INTEGER,
-    FOREIGN KEY (recipient_user_id) REFERENCES users(id),
-    FOREIGN KEY (order_id) REFERENCES orders(id)
-  )
-`);
-(function migrateEscrowOrderIdNullable() {
-    const cols = db.prepare("PRAGMA table_info(pending_commission_escrow)").all();
-    const orderIdCol = cols.find(c => c.name === 'order_id');
-    if (!orderIdCol || orderIdCol.notnull === 0)
-        return; // already nullable (or table missing entirely)
-    console.log('[pc-escrow-migrate] order_id is NOT NULL — recreating table to allow NULL for pv_pair');
-    db.exec('PRAGMA foreign_keys = OFF');
-    db.transaction(() => {
-        db.exec(`
-      CREATE TABLE pending_commission_escrow_new (
-        id                       INTEGER PRIMARY KEY AUTOINCREMENT,
-        recipient_user_id        TEXT NOT NULL,
-        order_id                 TEXT,
-        amount                   REAL NOT NULL,
-        attribution_path         TEXT NOT NULL,
-        status                   TEXT NOT NULL DEFAULT 'pending',
-        created_at               INTEGER NOT NULL,
-        expires_at               INTEGER NOT NULL,
-        settled_at               INTEGER,
-        expired_to_charity_at    INTEGER,
-        FOREIGN KEY (recipient_user_id) REFERENCES users(id),
-        FOREIGN KEY (order_id) REFERENCES orders(id)
-      )
-    `);
-        db.exec('INSERT INTO pending_commission_escrow_new SELECT * FROM pending_commission_escrow');
-        db.exec('DROP TABLE pending_commission_escrow');
-        db.exec('ALTER TABLE pending_commission_escrow_new RENAME TO pending_commission_escrow');
-    })();
-    db.exec('PRAGMA foreign_keys = ON');
-})();
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_escrow_recipient ON pending_commission_escrow(recipient_user_id, status, expires_at)');
-}
-catch { }
-try {
-    db.exec('CREATE INDEX IF NOT EXISTS idx_escrow_expiry ON pending_commission_escrow(status, expires_at)');
-}
-catch { }
-// PR-1c-a: UNIQUE (recipient, order, path) defends against double-insert if settleCommission ever retries
-// Note: NULL order_id (PR-1c-b pv_pair) is distinct in SQLite UNIQUE — idempotency for pv_pair relies
-// on binary_score_records.settled_at instead (source-side dedup).
-try {
-    db.exec('CREATE UNIQUE INDEX IF NOT EXISTS uniq_escrow_recipient_order_path ON pending_commission_escrow(recipient_user_id, order_id, attribution_path)');
-}
-catch { }
+// pending_commission_escrow schema (table + migration + indexes) lives in
+// initPendingCommissionEscrowSchema (early helper batch above) — RFC-018 PR1 relocated it there so
+// all of its DDL is built once, never half-inline (fresh-DB silent-fail铁律). The backfill below
+// only READS the table; it still runs after the build (early batch precedes this line).
 // Codex #69 P1:pv_escrow_reserve(#1106 隔离负债账)回填历史 pending pv_pair escrow —— 按 delta 对账,不全量转。
 //   该列在 global_fund 上新增(line ~2319);#1106 之后新建的 pv_pair escrow 结算时【已】pv_escrow_reserve += wazAmount,
 //   但加列【之前】产生的 pending pv_pair 从没进过 reserve。升级窗口里两者混存。
@@ -10221,6 +8773,7 @@ const RFC002_PARAMS = [
     { key: 'rewards_opt_in.min_completed_orders', value: '1', type: 'number', description: 'RFC-002 §3.2:申请 rewards opt-in 的最小已完成订单数', category: 'rewards', min: 0, max: 100, metaRuleLocked: false },
     { key: 'rewards_opt_in.require_passkey', value: '1', type: 'number', description: 'RFC-002 §3.3:申请 / 关闭是否需 Passkey(1=必须,0=允许 password)— META-RULE LOCKED,降低需 60d meta-rule track', category: 'rewards', min: 0, max: 1, metaRuleLocked: true },
     { key: 'rewards_opt_in.escrow_days', value: '30', type: 'number', description: 'RFC-002 §3.5b:pending commission escrow 过期天数(过期后流入 charity_fund)', category: 'rewards', min: 7, max: 180, metaRuleLocked: false },
+    { key: 'settlement.clearing_buffer_days', value: '2', type: 'number', description: 'RFC-018:佣金清算期 = 商品 return_days + 此 buffer(成熟才入钱包;窗内退货则冲销,永不 clawback)', category: 'rewards', min: 0, max: 30, metaRuleLocked: false },
     { key: 'rewards_opt_in.consent_delay_seconds', value: '8', type: 'number', description: 'RFC-002 §3.3:server-side 8s 反诱导延迟 — META-RULE LOCKED,降低需 60d meta-rule track', category: 'rewards', min: 0, max: 60, metaRuleLocked: true },
     { key: 'rewards_opt_in.reconfirm_grace_days', value: '14', type: 'number', description: 'RFC-002 §3.10:major consent 变更后用户重新确认 grace 期(过期 auto_downgrade)', category: 'rewards', min: 3, max: 90, metaRuleLocked: false },
 ];
@@ -10309,6 +8862,8 @@ app.listen(PORT, () => {
     startAutoDeactivateCron({ db, generateId, getProtocolParam });
     // #1090 RFC-002 PR-1c-a: escrow expire cron (every 1h)
     startEscrowExpireCron({ db, redirectToCommissionReserve });
+    startDirectPayTimeoutCron({ db });
+    startClearingMatureCron({ db }); // RFC-018: pay/hold matured clearing commission (logic in the cron module)
     // #1090 RFC-002 PR-3 slice 2: auto_downgrade cron (every 24h)
     // Triggered when a new major consent text is published; opted-in users
     // who don't reconfirm within reconfirm_grace_days (14d default) get