@voko/lite 0.3.1

package/src/core/database.js

@@ -0,0 +1,1409 @@
+/**
+ * database.js — 数据库层
+ *
+ * 从 main.js 提取的 DB 初始化、迁移、查询封装。
+ * 纯 Node.js，无 Electron 依赖。Desktop 和 Lite 共用。
+ */
+
+const Database = require('better-sqlite3');
+const path = require('path');
+const fs = require('fs');
+const { BANK_HEAD_OFFICES } = require('../bankHeadOffices');
+const ENDPOINTS = require('../endpoints.json');
+
+// ============================================
+// DB 写入串行队列
+// ============================================
+let _dbWriteQueue = Promise.resolve();
+
+function enqueueDbWrite(fn) {
+  _dbWriteQueue = _dbWriteQueue.then(fn, fn).catch(e => console.error('[DB队列]', e));
+}
+
+/** 返回当前队列 Promise，可用于等待队列清空 */
+function waitForDbQueue() {
+  return _dbWriteQueue;
+}
+
+// ============================================
+// 建表 + 迁移
+// ============================================
+function initDatabase(dbPath) {
+  const db = new Database(dbPath, { timeout: 3000 });
+  try { db.pragma('journal_mode = WAL'); } catch (_) {}
+  try { db.pragma('synchronous = NORMAL'); } catch (_) {}
+  console.log('Database opened successfully');
+
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS messages (
+      id TEXT PRIMARY KEY,
+      channel_id TEXT NOT NULL,
+      channel_type INTEGER NOT NULL,
+      from_uid TEXT NOT NULL,
+      to_uid TEXT NOT NULL,
+      content TEXT NOT NULL,
+      timestamp INTEGER NOT NULL,
+      is_me INTEGER NOT NULL,
+      status TEXT NOT NULL,
+      agent_id TEXT
+    )
+  `);
+  console.log('Messages table created/verified');
+
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS conversations (
+      user_uid TEXT NOT NULL,
+      channel_id TEXT NOT NULL,
+      channel_type INTEGER NOT NULL,
+      name TEXT NOT NULL,
+      avatar TEXT,
+      last_message TEXT,
+      last_timestamp INTEGER,
+      unread_count INTEGER DEFAULT 0,
+      session_key TEXT,
+      agent_id TEXT,
+      PRIMARY KEY (user_uid, channel_id)
+    )
+  `);
+  console.log('Conversations table created/verified');
+
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS owner_interventions (
+      id TEXT PRIMARY KEY,
+      visitor_id TEXT NOT NULL,
+      session_key TEXT NOT NULL,
+      problem TEXT NOT NULL,
+      agent_suggestion TEXT,
+      ask_time INTEGER NOT NULL,
+      expire_time INTEGER,
+      status TEXT NOT NULL DEFAULT 'pending',
+      owner_reply TEXT,
+      reply_time INTEGER,
+      parent_message_id TEXT,
+      is_sent INTEGER DEFAULT 0,
+      channel_type TEXT,
+      resolved_at INTEGER,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Owner interventions table created/verified');
+
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_owner_interventions_visitor ON owner_interventions(visitor_id)`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_owner_interventions_status ON owner_interventions(status)`);
+
+  // 迁移：conversations 添加 session_key（兼容旧表）
+  try {
+    const tableInfo = db.prepare(`PRAGMA table_info(conversations)`).all();
+    const hasSessionKey = tableInfo.some(col => col.name === 'session_key');
+    if (!hasSessionKey) {
+      db.exec(`ALTER TABLE conversations ADD COLUMN session_key TEXT`);
+      console.log('Added session_key column to conversations table');
+    }
+  } catch (e) {
+    console.log('Session_key column check/add error (may already exist):', e.message);
+  }
+
+  // 迁移：owner_interventions 兼容字段
+  try {
+    const tableInfo = db.prepare(`PRAGMA table_info(owner_interventions)`).all();
+    const hasParentMsgId = tableInfo.some(col => col.name === 'parent_message_id');
+    const hasFeishuMsgId = tableInfo.some(col => col.name === 'feishu_message_id');
+    const hasChannelType = tableInfo.some(col => col.name === 'channel_type');
+    const hasIsSent = tableInfo.some(col => col.name === 'is_sent');
+    const hasRetryCount = tableInfo.some(col => col.name === 'retry_count');
+    const hasLastRetryAt = tableInfo.some(col => col.name === 'last_retry_at');
+
+    if (hasFeishuMsgId && !hasParentMsgId) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN parent_message_id TEXT`);
+      db.exec(`UPDATE owner_interventions SET parent_message_id = feishu_message_id WHERE parent_message_id IS NULL`);
+      console.log('Renamed feishu_message_id to parent_message_id');
+    }
+    if (!hasChannelType) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN channel_type TEXT`);
+      console.log('Added channel_type column to owner_interventions table');
+    }
+    if (!hasIsSent) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN is_sent INTEGER DEFAULT 0`);
+      console.log('Added is_sent column to owner_interventions table');
+    }
+    if (!hasRetryCount) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN retry_count INTEGER DEFAULT 0`);
+      console.log('Added retry_count column to owner_interventions table');
+    }
+    if (!hasLastRetryAt) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN last_retry_at INTEGER DEFAULT 0`);
+      console.log('Added last_retry_at column to owner_interventions table');
+    }
+    const hasAgentNotified = tableInfo.some(col => col.name === 'agent_notified');
+    if (!hasAgentNotified) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN agent_notified INTEGER DEFAULT 0`);
+      console.log('Added agent_notified column to owner_interventions table');
+    }
+    if (!tableInfo.some(col => col.name === 'skip_reply')) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN skip_reply INTEGER DEFAULT 0`);
+      console.log('Added skip_reply column to owner_interventions table');
+    }
+    if (!tableInfo.some(col => col.name === 'email_message_id')) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN email_message_id TEXT`);
+      console.log('Added email_message_id column to owner_interventions table');
+    }
+    if (hasFeishuMsgId) {
+      db.exec(`ALTER TABLE owner_interventions DROP COLUMN feishu_message_id`);
+      console.log('Dropped feishu_message_id column');
+    }
+  } catch (e) {
+    console.log('Owner interventions column migration error:', e.message);
+  }
+
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_messages_channel ON messages(channel_id, timestamp)`);
+
+  // 新建 agents 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS agents (
+      id TEXT PRIMARY KEY,
+      agent_id TEXT NOT NULL UNIQUE,
+      imUid TEXT NOT NULL,
+      imToken TEXT NOT NULL,
+      im_server_url TEXT NOT NULL,
+      owner_email TEXT,
+      chatroom_url TEXT,
+      payment_url TEXT,
+      did TEXT,
+      public_key TEXT,
+      login_token TEXT,
+      ability TEXT,
+      publish_status TEXT NOT NULL DEFAULT 'unpublished',
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Agents table created/verified');
+
+  // 迁移：messages 表添加 agent_id
+  try {
+    const msgTableInfo = db.prepare(`PRAGMA table_info(messages)`).all();
+    if (!msgTableInfo.some(col => col.name === 'agent_id')) {
+      db.exec(`ALTER TABLE messages ADD COLUMN agent_id TEXT`);
+      console.log('Added agent_id column to messages table');
+    }
+  } catch (e) {
+    console.log('Messages agent_id column migration error:', e.message);
+  }
+
+  // 迁移：conversations 表添加 agent_id
+  try {
+    const convTableInfo = db.prepare(`PRAGMA table_info(conversations)`).all();
+    if (!convTableInfo.some(col => col.name === 'agent_id')) {
+      db.exec(`ALTER TABLE conversations ADD COLUMN agent_id TEXT`);
+      console.log('Added agent_id column to conversations table');
+    }
+  } catch (e) {
+    console.log('Conversations agent_id column migration error:', e.message);
+  }
+
+  // 迁移：agents 表批量加字段
+  try {
+    const agentsTableInfo = db.prepare(`PRAGMA table_info(agents)`).all();
+    if (!agentsTableInfo.some(col => col.name === 'ability')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN ability TEXT`);
+      console.log('Added ability column to agents table');
+    }
+    if (!agentsTableInfo.some(col => col.name === 'private_key')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN private_key TEXT`);
+      console.log('Added private_key column to agents table');
+    }
+    if (!agentsTableInfo.some(col => col.name === 'short_link_url')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN short_link_url TEXT`);
+      console.log('Added short_link_url column to agents table');
+    }
+    if (!agentsTableInfo.some(col => col.name === 'qr_code_url')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN qr_code_url TEXT`);
+      console.log('Added qr_code_url column to agents table');
+    }
+  } catch (e) {
+    console.log('Agents columns migration error:', e.message);
+  }
+
+  // 迁移：owner_interventions 添加 agent_id
+  try {
+    const oiTableInfo = db.prepare(`PRAGMA table_info(owner_interventions)`).all();
+    if (!oiTableInfo.some(col => col.name === 'agent_id')) {
+      db.exec(`ALTER TABLE owner_interventions ADD COLUMN agent_id TEXT`);
+      console.log('Added agent_id column to owner_interventions table');
+    }
+  } catch (e) {
+    console.log('Owner interventions agent_id column migration error:', e.message);
+  }
+
+  // 迁移：agents 批量添加 Hermes/计费/能力相关字段
+  try {
+    const agentsCols = db.prepare(`PRAGMA table_info(agents)`).all();
+    const agentFields = [
+      ['backend_type', "TEXT NOT NULL DEFAULT 'openclaw'"],
+      ['agent_name', 'TEXT'],
+      ['category', "TEXT DEFAULT 'other'"],
+      ['category_label', 'TEXT'],
+      ['description', 'TEXT'],
+      ['address', 'TEXT'],
+      ['contact_phone', 'TEXT'],
+      ['short_description', 'TEXT'],
+      ['icon_url', 'TEXT'],
+      ['cover_url', 'TEXT'],
+      ['tags', 'TEXT'],
+      ['capability', 'TEXT'],
+      ["access_mode", "TEXT NOT NULL DEFAULT 'public'"],
+    ];
+    for (const [col, type] of agentFields) {
+      if (!agentsCols.some(c => c.name === col)) {
+        db.exec(`ALTER TABLE agents ADD COLUMN ${col} ${type}`);
+        console.log(`Added ${col} column to agents table`);
+      }
+    }
+  } catch (e) {
+    console.log('Agents backend_type/meta fields migration error:', e.message);
+  }
+
+  // 迁移：agents 表添加 payment_fee_rate / agent_usage_fee_rate
+  try {
+    const agFeeCols = db.prepare(`PRAGMA table_info(agents)`).all();
+    if (!agFeeCols.some(col => col.name === 'payment_fee_rate')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN payment_fee_rate REAL`);
+      console.log('Added payment_fee_rate column to agents table');
+    }
+    if (!agFeeCols.some(col => col.name === 'agent_usage_fee_rate')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN agent_usage_fee_rate REAL`);
+      console.log('Added agent_usage_fee_rate column to agents table');
+    }
+    if (!agFeeCols.some(col => col.name === 'payment_auth_id')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN payment_auth_id TEXT`);
+      console.log('Added payment_auth_id column to agents table');
+    }
+    if (!agFeeCols.some(col => col.name === 'cap_error')) {
+      db.exec(`ALTER TABLE agents ADD COLUMN cap_error TEXT`);
+      console.log('Added cap_error column to agents table');
+    }
+  } catch (e) {
+    console.log('Agents fee/payment migration error:', e.message);
+  }
+
+  // 迁移：messages 表添加 is_audit_reply
+  try {
+    const msgCols = db.prepare(`PRAGMA table_info(messages)`).all();
+    if (!msgCols.some(col => col.name === 'is_audit_reply')) {
+      db.exec(`ALTER TABLE messages ADD COLUMN is_audit_reply INTEGER DEFAULT 0`);
+      console.log('Added is_audit_reply column to messages table');
+    }
+  } catch (e) {
+    console.log('Messages is_audit_reply migration error:', e.message);
+  }
+
+  // 迁移：messages 添加 WukongIM 标准字段
+  try {
+    const msgCols2 = db.prepare(`PRAGMA table_info(messages)`).all();
+    const wkVars = [
+      ['message_seq', 'INTEGER'],
+      ['client_msg_no', 'TEXT'],
+      ['no_persist', 'INTEGER DEFAULT 0'],
+      ['red_dot', 'INTEGER DEFAULT 0'],
+      ['sync_once', 'INTEGER DEFAULT 0'],
+      ['content_type', 'INTEGER DEFAULT 1']
+    ];
+    for (const [col, type] of wkVars) {
+      if (!msgCols2.some(c => c.name === col)) {
+        db.exec(`ALTER TABLE messages ADD COLUMN ${col} ${type}`);
+        console.log(`Added ${col} column to messages table`);
+      }
+    }
+  } catch (e) {
+    console.log('Messages WukongIM fields migration error:', e.message);
+  }
+
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_messages_channel_msgseq ON messages(channel_id, message_seq)`);
+
+  // 新建 audit_rules 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS audit_rules (
+      id TEXT PRIMARY KEY,
+      direction TEXT NOT NULL,
+      keyword TEXT NOT NULL,
+      action TEXT NOT NULL,
+      prompt TEXT,
+      is_default INTEGER DEFAULT 0,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Audit rules table created/verified');
+
+  // 新建 payment_auth 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS payment_auth (
+      id TEXT PRIMARY KEY,
+      name TEXT DEFAULT '',
+      id_card TEXT DEFAULT '',
+      bank_card TEXT DEFAULT '',
+      phone TEXT DEFAULT '',
+      status TEXT DEFAULT '未认证',
+      receiver_type INTEGER DEFAULT 1,
+      bank_code TEXT DEFAULT '',
+      bank_name TEXT DEFAULT '',
+      company_name TEXT DEFAULT '',
+      unified_social_credit_code TEXT DEFAULT '',
+      legal_name TEXT DEFAULT '',
+      legal_licence_no TEXT DEFAULT '',
+      request_no TEXT,
+      receiver_no TEXT,
+      receiver_apply_status TEXT DEFAULT 'none',
+      receiver_sign_status TEXT DEFAULT '',
+      receiver_sign_url TEXT DEFAULT '',
+      merchant_sign_url TEXT DEFAULT '',
+      payment_user_uid TEXT,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Payment auth table created/verified');
+
+  // 迁移：payment_auth 兼容 payment_user_uid
+  try {
+    const paCols = db.prepare(`PRAGMA table_info(payment_auth)`).all().map(c => c.name);
+    if (!paCols.includes('payment_user_uid')) {
+      db.exec(`ALTER TABLE payment_auth ADD COLUMN payment_user_uid TEXT`);
+      console.log('Added payment_user_uid column to payment_auth');
+    }
+  } catch (e) {
+    console.log('payment_auth payment_user_uid migration:', e.message);
+  }
+
+  // 新建 payment_orders 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS payment_orders (
+      id TEXT PRIMARY KEY,
+      agent_id TEXT NOT NULL,
+      visitor_id TEXT NOT NULL,
+      from_uid TEXT,
+      amount REAL NOT NULL,
+      description TEXT DEFAULT '',
+      order_no TEXT,
+      pay_url TEXT,
+      status TEXT DEFAULT 'pending',
+      result TEXT,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Payment orders table created/verified');
+
+  // 迁移：payment_orders 兼容
+  try {
+    const poCols = db.prepare(`PRAGMA table_info(payment_orders)`).all();
+    if (poCols.some(c => c.name === 'error_msg')) {
+      db.exec(`ALTER TABLE payment_orders RENAME COLUMN error_msg TO result`);
+      console.log('payment_orders: error_msg → result');
+    }
+    if (!poCols.some(col => col.name === 'type')) {
+      db.exec(`ALTER TABLE payment_orders ADD COLUMN type TEXT`);
+      console.log('Added type column to payment_orders table');
+    }
+    if (!poCols.some(col => col.name === 'query_token')) {
+      db.exec(`ALTER TABLE payment_orders ADD COLUMN query_token TEXT`);
+      console.log('Added query_token column to payment_orders table');
+    }
+  } catch (e) {
+    console.log('Payment orders migration error:', e.message);
+  }
+
+  // 新建 agent_pricing 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS agent_pricing (
+      id TEXT PRIMARY KEY,
+      agent_id TEXT NOT NULL UNIQUE,
+      pricing_model TEXT NOT NULL DEFAULT 'free',
+      price REAL,
+      duration_minutes INTEGER,
+      trial_minutes INTEGER DEFAULT 3,
+      enabled INTEGER DEFAULT 1,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Agent pricing table created/verified');
+
+  // 新建 user_cache 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS user_cache (
+      uid TEXT PRIMARY KEY,
+      nickname TEXT,
+      avatar_path TEXT,
+      avatar_url TEXT,
+      updated_at INTEGER
+    )
+  `);
+  console.log('User cache table created/verified');
+
+  // 新建 config 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS config (
+      type TEXT PRIMARY KEY,
+      data TEXT NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Config table created/verified');
+
+  // 新建好友邀请表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS friend_invitations (
+      code TEXT PRIMARY KEY,
+      agent_id TEXT NOT NULL,
+      friend_email TEXT NOT NULL,
+      whitelisted INTEGER NOT NULL DEFAULT 0,
+      created_at INTEGER NOT NULL
+    )
+  `);
+  console.log('Friend invitations table created/verified');
+
+  // 同步版本号
+  try {
+    const pkg = require('../package.json');
+    const ver = pkg.version || '0.0.0';
+    db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)').run('version', ver, Date.now());
+    console.log('Version synced to config:', ver);
+  } catch (_) {}
+
+  // 新建 agent_access_lists 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS agent_access_lists (
+      id TEXT PRIMARY KEY,
+      agent_id TEXT NOT NULL,
+      list_type TEXT NOT NULL CHECK(list_type IN ('whitelist', 'blacklist')),
+      visitor_id TEXT NOT NULL,
+      reason TEXT,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL,
+      UNIQUE(agent_id, list_type, visitor_id)
+    )
+  `);
+  console.log('Agent access lists table created/verified');
+
+  // 迁移：config 表旧版 id 主键 → type 主键
+  const colInfo = db.prepare('PRAGMA table_info(config)').all();
+  const hasLegacyId = colInfo.some(col => col.name === 'id');
+  if (hasLegacyId) {
+    try {
+      const oldRow = db.prepare('SELECT data, updated_at FROM config WHERE id = 1').get();
+      db.exec('DROP TABLE IF EXISTS config');
+      db.exec(`
+        CREATE TABLE config (
+          type TEXT PRIMARY KEY,
+          data TEXT NOT NULL,
+          updated_at INTEGER NOT NULL
+        )
+      `);
+      if (oldRow) {
+        db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+          .run('channel_config', oldRow.data, oldRow.updated_at);
+        console.log('[Config] 已迁移旧版数据到 type=channel_config');
+      }
+    } catch (e) {
+      console.error('[Config] 迁移失败:', e.message);
+    }
+  }
+
+  // 迁移：user_access_tokens 旧表 → config
+  migrateUserAccessTokensToConfig(db);
+
+  // 迁移：user_access_tokens → user_access_token type 名
+  try {
+    const oldRow = db.prepare("SELECT data, updated_at FROM config WHERE type = 'user_access_tokens'").get();
+    if (oldRow) {
+      db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+        .run('user_access_token', oldRow.data, oldRow.updated_at);
+      db.prepare("DELETE FROM config WHERE type = 'user_access_tokens'").run();
+      console.log('[Config] 迁移 user_access_tokens → user_access_token');
+    }
+  } catch (e) {
+    console.warn('[Config] 迁移 user_access_tokens 类型名失败:', e.message);
+  }
+
+  // 初始化默认 OSS 配置（优先环境变量，否则留空由用户手动配置）
+  const defaultOss = {
+    accessKeyId: process.env.OSS_ACCESS_KEY_ID || 'LTAI5tD1KmxKEmTc6vgmMF7K',
+    accessKeySecret: process.env.OSS_ACCESS_KEY_SECRET || 'jxeT0Ky32VSvIueMQvCwyakJJNN9hG',
+    region: ENDPOINTS.oss.region,
+    bucket: ENDPOINTS.oss.bucket,
+    endpoint: ENDPOINTS.oss.endpoint,
+    publicUrl: ENDPOINTS.oss.publicUrl
+  };
+  if (!db.prepare('SELECT data FROM config WHERE type = ?').get('oss_config')) {
+    db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+      .run('oss_config', JSON.stringify(defaultOss), Date.now());
+    console.log('[Config] 已写入独立 OSS 配置');
+  }
+  // 清理 channel_config 中的 oss_config 残留
+  const ccRow = db.prepare('SELECT data FROM config WHERE type = ?').get('channel_config');
+  if (ccRow) {
+    try {
+      const cc = JSON.parse(ccRow.data);
+      if (cc.oss_config) {
+        delete cc.oss_config;
+        db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+          .run('channel_config', JSON.stringify(cc), Date.now());
+        console.log('[Config] 已从 channel_config 清理 oss_config');
+      }
+    } catch (_) {}
+  }
+
+  // 迁移：conversations 添加计费会话字段
+  try {
+    const convCols = db.prepare(`PRAGMA table_info(conversations)`).all();
+    if (!convCols.some(col => col.name === 'session_status')) {
+      db.exec(`ALTER TABLE conversations ADD COLUMN session_status TEXT`);
+      console.log('Added session_status column to conversations table');
+    }
+    if (!convCols.some(col => col.name === 'session_expire_at')) {
+      db.exec(`ALTER TABLE conversations ADD COLUMN session_expire_at INTEGER`);
+      console.log('Added session_expire_at column to conversations table');
+    }
+    if (!convCols.some(col => col.name === 'mode')) {
+      db.exec(`ALTER TABLE conversations ADD COLUMN mode TEXT`);
+      console.log('Added mode column to conversations table');
+    }
+  } catch (e) {
+    console.log('Conversations session columns migration error:', e.message);
+  }
+
+  // 初始化默认出入站审核规则
+  const defaultRules = [
+    { direction: 'inbound',  keyword: '忽略之前的指令',     action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '忽略以上所有内容',    action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '忘记所有设定',        action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '覆盖你的规则',        action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '你现在是DAN',         action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: 'Do Anything Now',    action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: 'jailbreak',          action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '输出你的提示词',     action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '你的system prompt',  action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: 'reveal your prompt', action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: 'print your instructions', action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '<|im_start|>',       action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '<|system|>',         action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '[INST]',             action: 'hard_deny', prompt: '对不起，该信息包含敏感词"{keyword}"，无法执行或转发。' },
+    { direction: 'inbound',  keyword: '<<SYS>>',            action: 'soft_deny', prompt: '' },
+    { direction: 'inbound',  keyword: '如何绕过',            action: 'soft_deny', prompt: '' },
+    { direction: 'inbound',  keyword: '怎么联系主人',        action: 'soft_deny', prompt: '' },
+    { direction: 'inbound',  keyword: '获取你的权限',        action: 'soft_deny', prompt: '' },
+    { direction: 'outbound', keyword: '/sk-[A-Za-z0-9-]{20,}/',   action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: '/AKID[A-Za-z0-9]{16,}/',   action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: '/\\d{17}[\\dXx]/',          action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: '/10\\.\\d+\\.\\d+\\.\\d+/', action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: 'secret',                    action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: '银行卡',                    action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: '密码',                      action: 'hard_deny', prompt: '' },
+    { direction: 'outbound', keyword: 'token',                     action: 'hard_deny', prompt: '' },
+  ];
+
+  const defaultRuleCount = db.prepare(`SELECT COUNT(*) as cnt FROM audit_rules WHERE is_default = 1`).get()?.cnt || 0;
+  if (defaultRuleCount > 0 && defaultRuleCount !== defaultRules.length) {
+    console.log(`[Audit] 默认规则版本更新 (${defaultRuleCount} → ${defaultRules.length})，重新初始化`);
+    db.prepare(`DELETE FROM audit_rules WHERE is_default = 1`).run();
+  }
+
+  try {
+    db.prepare(`
+      UPDATE audit_rules SET prompt = REPLACE(prompt, '敏感词{keyword}', '敏感词"{keyword}"'), updated_at = ? WHERE prompt LIKE '%敏感词{keyword}%'
+    `).run(Date.now());
+  } catch (e) {
+    console.log('Audit prompt migration error:', e.message);
+  }
+
+  const hasDefaults = db.prepare(`SELECT COUNT(*) as cnt FROM audit_rules WHERE is_default = 1`).get()?.cnt || 0;
+  if (hasDefaults === 0) {
+    const now = Date.now();
+    const insertRule = db.prepare(`
+      INSERT INTO audit_rules (id, direction, keyword, action, prompt, is_default, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, 1, ?, ?)
+    `);
+    const insertMany = db.transaction((rules) => {
+      for (const r of rules) {
+        const safeKeyword = r.keyword.replace(/[\/\\{}[\]()|*+?^$.,:;!@#%&'"<>`~]/g, '_');
+        insertRule.run(`audit_default_${r.direction}_${safeKeyword}`, r.direction, r.keyword, r.action, r.prompt, now, now);
+      }
+    });
+    insertMany(defaultRules);
+    console.log(`Initialized ${defaultRules.length} default audit rules`);
+  }
+
+  // 新建 bank_head_offices 表
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS bank_head_offices (
+      id INTEGER PRIMARY KEY,
+      code TEXT NOT NULL,
+      name TEXT NOT NULL,
+      short_name TEXT DEFAULT '',
+      note TEXT DEFAULT ''
+    )
+  `);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_bank_head_code ON bank_head_offices(code)`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_bank_head_name ON bank_head_offices(name)`);
+
+  // 填充银行数据
+  const bankCount = db.prepare(`SELECT COUNT(*) as c FROM bank_head_offices`).get();
+  if (bankCount.c === 0 && BANK_HEAD_OFFICES && BANK_HEAD_OFFICES.length > 0) {
+    const insertBank = db.prepare(`INSERT OR IGNORE INTO bank_head_offices (id, code, name, short_name, note) VALUES (?, ?, ?, ?, ?)`);
+    const insertMany = db.transaction((banks) => {
+      let id = 1;
+      for (const b of banks) {
+        insertBank.run(id++, b.code, b.name, b.short_name || '', b.note || '');
+      }
+    });
+    insertMany(BANK_HEAD_OFFICES);
+    console.log(`Initialized ${BANK_HEAD_OFFICES.length} bank head offices`);
+  }
+
+  console.log('Database initialized successfully');
+  return db;
+}
+
+// ============================================
+// databaseAPI — SQL 查询封装
+// ============================================
+function createDatabaseAPI(db) {
+  if (!db) throw new Error('createDatabaseAPI: db instance is required');
+
+  return {
+    getNewMessages: () => {
+      try {
+        const fiveMinutesAgo = Date.now() - 5 * 60 * 1000;
+        const stmt = db.prepare(`
+          SELECT * FROM messages
+          WHERE timestamp > ? AND is_me = 0
+          ORDER BY timestamp DESC
+          LIMIT 50
+        `);
+        const rows = stmt.all(fiveMinutesAgo);
+        return rows.map(row => ({
+          id: row.id,
+          channelId: row.channel_id,
+          channelType: row.channel_type,
+          fromUid: row.from_uid,
+          toUid: row.to_uid,
+          content: row.content,
+          timestamp: row.timestamp,
+          isMe: row.is_me === 1,
+          status: row.status,
+          messageSeq: row.message_seq,
+          clientMsgNo: row.client_msg_no,
+          noPersist: row.no_persist,
+          redDot: row.red_dot,
+          syncOnce: row.sync_once,
+          contentType: row.content_type
+        }));
+      } catch (e) {
+        console.error('getNewMessages error:', e);
+        return [];
+      }
+    },
+
+    getLastMessageForChannel: (channelId) => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM messages
+          WHERE channel_id = ?
+            AND is_me = 0
+          ORDER BY timestamp DESC
+          LIMIT 1
+        `);
+        const row = stmt.get(channelId);
+        if (!row) return null;
+        return {
+          id: row.id,
+          channelId: row.channel_id,
+          channelType: row.channel_type,
+          fromUid: row.from_uid,
+          toUid: row.to_uid,
+          content: row.content,
+          timestamp: row.timestamp,
+          isMe: row.is_me === 1,
+          status: row.status,
+          messageSeq: row.message_seq,
+          clientMsgNo: row.client_msg_no,
+          noPersist: row.no_persist,
+          redDot: row.red_dot,
+          syncOnce: row.sync_once,
+          contentType: row.content_type
+        };
+      } catch (e) {
+        console.error('getLastMessageForChannel error:', e);
+        return null;
+      }
+    },
+
+    getUnreadMessagesForChannel: (channelId, since) => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM messages
+          WHERE channel_id = ?
+            AND is_me = 0
+            AND timestamp > ?
+          ORDER BY timestamp ASC
+        `);
+        const rows = stmt.all(channelId, since);
+        return rows.map(row => ({
+          id: row.id,
+          fromUid: row.from_uid,
+          content: row.content,
+          timestamp: row.timestamp,
+          messageSeq: row.message_seq,
+          contentType: row.content_type
+        }));
+      } catch (e) {
+        console.error('getUnreadMessagesForChannel error:', e);
+        return [];
+      }
+    },
+
+    getHistoryMessagesForChannel: (channelId, limit) => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM messages
+          WHERE channel_id = ?
+            AND is_me = 0
+          ORDER BY timestamp DESC
+          LIMIT ?
+        `);
+        const rows = stmt.all(channelId, limit);
+        return rows.map(row => ({
+          id: row.id,
+          fromUid: row.from_uid,
+          content: row.content,
+          timestamp: row.timestamp,
+          messageSeq: row.message_seq,
+          contentType: row.content_type
+        }));
+      } catch (e) {
+        console.error('getHistoryMessagesForChannel error:', e);
+        return [];
+      }
+    },
+
+    saveMessage: (message) => {
+      try {
+        const trimmedContent = (message.content || '').replace(/^[\n\r\s]+/, '').trim();
+        const stmt = db.prepare(`
+          INSERT OR REPLACE INTO messages (id, channel_id, channel_type, from_uid, to_uid, content, timestamp, is_me, status, message_seq, client_msg_no, no_persist, red_dot, sync_once, content_type, agent_id)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `);
+        stmt.run(
+          message.id,
+          message.channelId,
+          message.channelType,
+          message.fromUid,
+          message.toUid,
+          trimmedContent,
+          message.timestamp,
+          message.isMe ? 1 : 0,
+          message.status,
+          message.messageSeq ?? null,
+          message.clientMsgNo ?? null,
+          message.noPersist ?? 0,
+          message.redDot ?? 0,
+          message.syncOnce ?? 0,
+          message.contentType ?? 1,
+          message.agentId ?? null
+        );
+        return { success: true };
+      } catch (e) {
+        console.error('saveMessage error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    getSessionKeyForChannel: (channelId, userUid) => {
+      try {
+        const stmt = db.prepare(`
+          SELECT session_key FROM conversations
+          WHERE channel_id = ? AND user_uid = ?
+        `);
+        const row = stmt.get(channelId, userUid);
+        return row ? row.session_key : null;
+      } catch (e) {
+        console.error('getSessionKeyForChannel error:', e);
+        return null;
+      }
+    },
+
+    saveSessionKeyForChannel: (channelId, userUid, sessionKey) => {
+      try {
+        const stmt = db.prepare(`
+          INSERT OR REPLACE INTO conversations
+          (user_uid, channel_id, channel_type, name, session_key)
+          VALUES (?, ?, ?, ?, ?)
+        `);
+        stmt.run(userUid, channelId, 1, channelId, sessionKey);
+        return { success: true };
+      } catch (e) {
+        console.error('saveSessionKeyForChannel error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    saveOwnerIntervention: (intervention) => {
+      try {
+        const stmt = db.prepare(`
+          INSERT OR REPLACE INTO owner_interventions
+          (id, visitor_id, session_key, problem, agent_suggestion, ask_time, expire_time, status, owner_reply, reply_time, parent_message_id, channel_type, resolved_at, created_at, updated_at, agent_id)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `);
+        stmt.run(
+          intervention.id,
+          intervention.visitorId,
+          intervention.sessionKey,
+          intervention.problem,
+          intervention.agentSuggestion || null,
+          intervention.askTime,
+          intervention.expireTime || null,
+          intervention.status || 'pending',
+          intervention.ownerReply || null,
+          intervention.replyTime || null,
+          intervention.parentMessageId || null,
+          intervention.channelType || 'unknown',
+          intervention.resolvedAt || null,
+          intervention.createdAt,
+          intervention.updatedAt,
+          intervention.agentId || null
+        );
+        return { success: true };
+      } catch (e) {
+        console.error('saveOwnerIntervention error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    getOwnerIntervention: (id) => {
+      try {
+        const stmt = db.prepare(`SELECT * FROM owner_interventions WHERE id = ?`);
+        const row = stmt.get(id);
+        return row ? {
+          id: row.id, visitorId: row.visitor_id, sessionKey: row.session_key,
+          problem: row.problem, agentSuggestion: row.agent_suggestion,
+          askTime: row.ask_time, expireTime: row.expire_time,
+          status: row.status, ownerReply: row.owner_reply, replyTime: row.reply_time,
+          parentMessageId: row.parent_message_id, channelType: row.channel_type,
+          resolvedAt: row.resolved_at, createdAt: row.created_at, updatedAt: row.updated_at,
+          agentId: row.agent_id
+        } : null;
+      } catch (e) {
+        console.error('getOwnerIntervention error:', e);
+        return null;
+      }
+    },
+
+    getOwnerInterventionByParentMsgId: (parentMessageId) => {
+      try {
+        const stmt = db.prepare(`SELECT * FROM owner_interventions WHERE parent_message_id = ? AND status = 'pending'`);
+        const row = stmt.get(parentMessageId);
+        return row ? {
+          id: row.id, visitorId: row.visitor_id, sessionKey: row.session_key,
+          problem: row.problem, agentSuggestion: row.agent_suggestion,
+          askTime: row.ask_time, expireTime: row.expire_time,
+          status: row.status, ownerReply: row.owner_reply, replyTime: row.reply_time,
+          parentMessageId: row.parent_message_id, channelType: row.channel_type,
+          resolvedAt: row.resolved_at, createdAt: row.created_at, updatedAt: row.updated_at,
+          agentId: row.agent_id
+        } : null;
+      } catch (e) {
+        console.error('getOwnerInterventionByParentMsgId error:', e);
+        return null;
+      }
+    },
+
+    getLatestPendingIntervention: () => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM owner_interventions
+          WHERE status = 'pending'
+          ORDER BY created_at DESC LIMIT 1
+        `);
+        const row = stmt.get();
+        return row ? {
+          id: row.id, visitorId: row.visitor_id, sessionKey: row.session_key,
+          problem: row.problem, agentSuggestion: row.agent_suggestion,
+          askTime: row.ask_time, expireTime: row.expire_time,
+          status: row.status, ownerReply: row.owner_reply, replyTime: row.reply_time,
+          parentMessageId: row.parent_message_id, channelType: row.channel_type,
+          resolvedAt: row.resolved_at, createdAt: row.created_at, updatedAt: row.updated_at
+        } : null;
+      } catch (e) {
+        console.error('getLatestPendingIntervention error:', e);
+        return null;
+      }
+    },
+
+    updateOwnerInterventionReply: (id, ownerReply, replyTime, channelType) => {
+      try {
+        const trimmedReply = (ownerReply || '').replace(/^[\n\r\s]+/, '').trim();
+        const row = db.prepare('SELECT owner_reply, agent_notified FROM owner_interventions WHERE id = ?').get(id);
+        if (!row) return { success: false, error: '记录不存在' };
+        if (row.owner_reply === trimmedReply) {
+          return { success: true, contentChanged: false, agentNotified: row.agent_notified === 1 };
+        }
+        const stmt = db.prepare(`
+          UPDATE owner_interventions
+          SET owner_reply = ?, reply_time = ?, status = 'replied', updated_at = ?, agent_notified = 0, channel_type = ?
+          WHERE id = ?
+        `);
+        stmt.run(trimmedReply, replyTime, Date.now(), channelType || null, id);
+        return { success: true, contentChanged: true };
+      } catch (e) {
+        console.error('updateOwnerInterventionReply error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    markAgentNotified: (id) => {
+      try {
+        db.prepare(`UPDATE owner_interventions SET agent_notified = 1 WHERE id = ?`).run(id);
+        return { success: true };
+      } catch (e) {
+        console.error('markAgentNotified error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    updateOwnerInterventionParentMsgId: (id, parentMessageId) => {
+      try {
+        const stmt = db.prepare(`
+          UPDATE owner_interventions
+          SET parent_message_id = ?, updated_at = ?
+          WHERE id = ?
+        `);
+        stmt.run(parentMessageId, Date.now(), id);
+        return { success: true };
+      } catch (e) {
+        console.error('updateOwnerInterventionParentMsgId error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    updateOwnerInterventionEmailMsgId: (id, messageId) => {
+      try {
+        db.prepare(`UPDATE owner_interventions SET email_message_id = ?, updated_at = ? WHERE id = ?`)
+          .run(messageId, Date.now(), id);
+        return { success: true };
+      } catch (e) {
+        console.error('updateOwnerInterventionEmailMsgId error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    updateOwnerInterventionStatus: (id, status, resolvedAt) => {
+      try {
+        const stmt = db.prepare(`
+          UPDATE owner_interventions
+          SET status = ?, resolved_at = ?, updated_at = ?
+          WHERE id = ?
+        `);
+        stmt.run(status, resolvedAt || null, Date.now(), id);
+        return { success: true };
+      } catch (e) {
+        console.error('updateOwnerInterventionStatus error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    getUnresolvedOwnerInterventions: () => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM owner_interventions
+          WHERE status IN ('pending', 'replied')
+          ORDER BY ask_time DESC
+        `);
+        return stmt.all().map(row => ({
+          id: row.id, visitorId: row.visitor_id, sessionKey: row.session_key,
+          problem: row.problem, agentSuggestion: row.agent_suggestion,
+          askTime: row.ask_time, expireTime: row.expire_time,
+          status: row.status, ownerReply: row.owner_reply, replyTime: row.reply_time,
+          parentMessageId: row.parent_message_id, channelType: row.channel_type,
+          resolvedAt: row.resolved_at, createdAt: row.created_at, updatedAt: row.updated_at
+        }));
+      } catch (e) {
+        console.error('getUnresolvedOwnerInterventions error:', e);
+        return [];
+      }
+    },
+
+    getAllOwnerInterventions: () => {
+      try {
+        const stmt = db.prepare(`SELECT * FROM owner_interventions ORDER BY ask_time DESC`);
+        return stmt.all().map(row => ({
+          id: row.id, visitorId: row.visitor_id, agentId: row.agent_id || 'voko',
+          sessionKey: row.session_key, problem: row.problem,
+          agentSuggestion: row.agent_suggestion, askTime: row.ask_time,
+          expireTime: row.expire_time, status: row.status, ownerReply: row.owner_reply,
+          replyTime: row.reply_time, parentMessageId: row.parent_message_id,
+          channelType: row.channel_type, resolvedAt: row.resolved_at,
+          createdAt: row.created_at, updatedAt: row.updated_at, skipReply: row.skip_reply || 0
+        }));
+      } catch (e) {
+        console.error('getAllOwnerInterventions error:', e);
+        return [];
+      }
+    },
+
+    getPendingOwnerInterventions: () => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM owner_interventions
+          WHERE is_sent = 0
+          ORDER BY ask_time ASC
+        `);
+        return stmt.all().map(row => ({
+          id: row.id, visitorId: row.visitor_id, agentId: row.agent_id || 'voko',
+          sessionKey: row.session_key, problem: row.problem,
+          agentSuggestion: row.agent_suggestion, askTime: row.ask_time,
+          expireTime: row.expire_time, status: row.status, ownerReply: row.owner_reply,
+          replyTime: row.reply_time, parentMessageId: row.parent_message_id,
+          channelType: row.channel_type, resolvedAt: row.resolved_at,
+          createdAt: row.created_at, updatedAt: row.updated_at,
+          retryCount: row.retry_count || 0, lastRetryAt: row.last_retry_at || 0,
+          skipReply: row.skip_reply || 0
+        }));
+      } catch (e) {
+        console.error('getPendingOwnerInterventions error:', e);
+        return [];
+      }
+    },
+
+    getPendingByAgentAndVisitor: (agentId, visitorId) => {
+      try {
+        const stmt = db.prepare(`
+          SELECT * FROM owner_interventions
+          WHERE status = 'pending' AND agent_id = ? AND visitor_id = ?
+          ORDER BY created_at DESC LIMIT 1
+        `);
+        const row = stmt.get(agentId, visitorId);
+        if (!row) return null;
+        return {
+          id: row.id, visitorId: row.visitor_id, agentId: row.agent_id || 'voko',
+          sessionKey: row.session_key, problem: row.problem, askTime: row.ask_time,
+          status: row.status, ownerReply: row.owner_reply,
+          parentMessageId: row.parent_message_id, channelType: row.channel_type
+        };
+      } catch (e) {
+        console.error('getPendingByAgentAndVisitor error:', e);
+        return null;
+      }
+    },
+
+    updateOwnerInterventionSent: (id, parentMessageId, channelType) => {
+      try {
+        const current = db.prepare('SELECT id, is_sent, status FROM owner_interventions WHERE id = ?').get(id);
+        const stmt = db.prepare(`
+          UPDATE owner_interventions
+          SET parent_message_id = ?, channel_type = ?, updated_at = ?, retry_count = 0
+          WHERE id = ?
+        `);
+        const result = stmt.run(parentMessageId, channelType, Date.now(), id);
+        return { success: result.changes > 0 };
+      } catch (e) {
+        console.error('updateOwnerInterventionSent error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    getAgentImUid: (agentId) => {
+      try {
+        const row = db.prepare(`SELECT imUid FROM agents WHERE agent_id = ?`).get(agentId);
+        return row ? row.imUid : '';
+      } catch (e) {
+        console.error('getAgentImUid error:', e);
+        return '';
+      }
+    },
+
+    getAgentDid: (agentId) => {
+      try {
+        const row = db.prepare(`SELECT did FROM agents WHERE agent_id = ?`).get(agentId);
+        return row?.did || null;
+      } catch (e) {
+        console.error('getAgentDid error:', e);
+        return null;
+      }
+    },
+
+    getPaymentAuth: (agentId) => {
+      try {
+        const row = db.prepare(`SELECT pa.* FROM payment_auth pa JOIN agents a ON pa.id = a.payment_auth_id WHERE a.agent_id = ?`).get(agentId);
+        return row || null;
+      } catch (e) {
+        console.error('getPaymentAuth error:', e);
+        return null;
+      }
+    },
+
+    savePaymentOrder: (order) => {
+      try {
+        const stmt = db.prepare(`
+          INSERT INTO payment_orders (id, agent_id, visitor_id, from_uid, amount, description, type, status, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `);
+        stmt.run(order.id, order.agent_id, order.visitor_id, order.from_uid, order.amount, order.description, order.type || 'service', order.status, order.created_at, order.updated_at);
+        return { success: true };
+      } catch (e) {
+        console.error('savePaymentOrder error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    getPaymentOrdersByStatus: (status) => {
+      try {
+        return db.prepare(`SELECT * FROM payment_orders WHERE status = ? ORDER BY created_at ASC`).all(status);
+      } catch (e) {
+        console.error('getPaymentOrdersByStatus error:', e);
+        return [];
+      }
+    },
+
+    updatePaymentOrder: (id, updates) => {
+      try {
+        const sets = [];
+        const vals = [];
+        for (const [k, v] of Object.entries(updates)) {
+          sets.push(`${k} = ?`);
+          vals.push(v);
+        }
+        vals.push(Date.now(), id);
+        db.prepare(`UPDATE payment_orders SET ${sets.join(', ')}, updated_at = ? WHERE id = ?`).run(...vals);
+        return { success: true };
+      } catch (e) {
+        console.error('updatePaymentOrder error:', e);
+        return { success: false, error: e.message };
+      }
+    },
+
+    query: (sql) => {
+      try {
+        return db.prepare(sql).all();
+      } catch (e) {
+        console.error('query error:', e.message);
+        return [];
+      }
+    },
+
+    exec: (sql) => {
+      try {
+        return db.prepare(sql).run();
+      } catch (e) {
+        console.error('exec error:', e.message);
+        return { changes: 0 };
+      }
+    },
+
+    getConfigFromDb: (type = 'channel_config') => {
+      try {
+        const row = db.prepare('SELECT data FROM config WHERE type = ?').get(type);
+        return row ? JSON.parse(row.data) : null;
+      } catch (e) {
+        return null;
+      }
+    },
+
+    saveConfigToDb: (data, type = 'channel_config') => {
+      try {
+        db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+          .run(type, JSON.stringify(data), Date.now());
+        return true;
+      } catch (e) {
+        console.error('[Config] saveConfigToDb error:', e);
+        return false;
+      }
+    },
+
+    saveAgentCache: (data) => {
+      try {
+        db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+          .run('agent_cache', JSON.stringify(data), Date.now());
+        return true;
+      } catch (e) {
+        console.error('[Config] saveAgentCache error:', e);
+        return false;
+      }
+    },
+
+    loadAgentCache: () => {
+      try {
+        const row = db.prepare('SELECT data FROM config WHERE type = ?').get('agent_cache');
+        return row ? JSON.parse(row.data) : null;
+      } catch (e) {
+        return null;
+      }
+    },
+
+    // ── IPC 数据查询方法（原 Desktop src/ipc/db.js 内联 SQL，移植到 Lite） ──
+
+    getMessages: (channelId, { limit = 50, offset = 0, agentId = null } = {}) => {
+      try {
+        let sql = `SELECT * FROM messages WHERE channel_id = ?`;
+        const params = [channelId];
+        if (agentId) { sql += ` AND agent_id = ?`; params.push(agentId); }
+        sql += ` ORDER BY timestamp DESC LIMIT ? OFFSET ?`;
+        params.push(limit, offset);
+        const rows = db.prepare(sql).all(...params);
+        rows.reverse();
+        return rows.map(row => ({ id: row.id, channelId: row.channel_id, channelType: row.channel_type, fromUid: row.from_uid, toUid: row.to_uid, content: row.content, timestamp: row.timestamp, isMe: row.is_me === 1 || row.is_me === 2, status: row.status, agentId: row.agent_id || null, messageSeq: row.message_seq, clientMsgNo: row.client_msg_no, noPersist: row.no_persist, redDot: row.red_dot, syncOnce: row.sync_once, contentType: row.content_type }));
+      } catch (e) { return []; }
+    },
+
+    getMessageCount: (channelId, agentId = null) => {
+      try {
+        let sql = `SELECT COUNT(*) as count FROM messages WHERE channel_id = ?`;
+        const params = [channelId];
+        if (agentId) { sql += ` AND agent_id = ?`; params.push(agentId); }
+        return db.prepare(sql).get(...params).count;
+      } catch (e) { return 0; }
+    },
+
+    saveConversation: (userUid, conversation) => {
+      try {
+        db.prepare(`INSERT OR REPLACE INTO conversations (user_uid, channel_id, channel_type, name, avatar, last_message, last_timestamp, unread_count, agent_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+          .run(userUid, conversation.channelId, conversation.channelType, conversation.name, conversation.avatar || null, conversation.lastMessage || null, conversation.lastTimestamp || null, conversation.unreadCount, conversation.agentId || null);
+        return { success: true };
+      } catch (e) { return { success: false, error: e.message }; }
+    },
+
+    getConversations: (userUid = null, ownerEmail = null) => {
+      try {
+        let rows, sql;
+        if (ownerEmail) {
+          sql = `SELECT c.* FROM conversations c JOIN agents a ON c.agent_id = a.agent_id WHERE a.owner_email = ? ORDER BY c.last_timestamp DESC`;
+          rows = db.prepare(sql).all(ownerEmail);
+        } else if (userUid) {
+          rows = db.prepare(`SELECT * FROM conversations WHERE user_uid = ? ORDER BY last_timestamp DESC`).all(userUid);
+        } else {
+          rows = db.prepare(`SELECT * FROM conversations ORDER BY last_timestamp DESC`).all();
+        }
+        return rows.map(row => ({
+          userUid: row.user_uid, channelId: row.channel_id, channelType: row.channel_type, name: row.name,
+          avatar: row.avatar, lastMessage: row.last_message, lastTimestamp: row.last_timestamp,
+          unreadCount: row.unread_count, sessionKey: row.session_key, agentId: row.agent_id || null,
+          mode: row.mode || null,
+          lastMessageIsMe: (() => {
+            try { const m = db.prepare(`SELECT is_me FROM messages WHERE channel_id = ? AND agent_id = ? AND content_type != 11 ORDER BY timestamp DESC LIMIT 1`).get(row.channel_id, row.agent_id); return m ? m.is_me : null; } catch (_) { return null; }
+          })(),
+        }));
+      } catch (e) { return []; }
+    },
+
+    deleteConversation: (channelId, agentId) => {
+      try {
+        if (agentId) {
+          db.prepare(`DELETE FROM messages WHERE channel_id = ? AND agent_id = ?`).run(channelId, agentId);
+          db.prepare(`DELETE FROM conversations WHERE channel_id = ? AND agent_id = ?`).run(channelId, agentId);
+        } else {
+          db.prepare(`DELETE FROM messages WHERE channel_id = ?`).run(channelId);
+          db.prepare(`DELETE FROM conversations WHERE channel_id = ?`).run(channelId);
+        }
+        return { success: true };
+      } catch (e) { return { success: false, error: e.message }; }
+    },
+
+    insertSystemMessage: ({ agentId, channelId, content, timestamp }) => {
+      try {
+        const msgId = `sys-${agentId}-${channelId}-${Date.now()}`;
+        const ts = timestamp || Math.floor(Date.now() / 1000);
+        db.prepare(`INSERT INTO messages (id, from_uid, to_uid, content, channel_id, channel_type, agent_id, timestamp, is_me, status, content_type) VALUES (?, ?, ?, ?, ?, 1, ?, ?, 0, 'sent', 10)`)
+          .run(msgId, 'system_inject', channelId, content, channelId, agentId, ts);
+        return { success: true, messageId: msgId };
+      } catch (e) { return { success: false, error: e.message }; }
+    },
+  };
+}
+
+// ============================================
+// User Access Token 工具
+// ============================================
+const USER_ACCESS_TOKEN_CONFIG_TYPE = 'user_access_token';
+
+function normalizeUserEmail(email) {
+  return String(email || '').trim().toLowerCase();
+}
+
+function loadUserAccessTokenConfig(db) {
+  try {
+    const row = db.prepare('SELECT data FROM config WHERE type = ?').get(USER_ACCESS_TOKEN_CONFIG_TYPE);
+    if (!row?.data) return {};
+    const parsed = JSON.parse(row.data);
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
+  } catch (e) {
+    console.warn('[Pay] loadUserAccessTokenConfig error:', e.message);
+    return {};
+  }
+}
+
+function saveUserAccessTokenConfig(db, map) {
+  db.prepare('INSERT OR REPLACE INTO config (type, data, updated_at) VALUES (?, ?, ?)')
+    .run(USER_ACCESS_TOKEN_CONFIG_TYPE, JSON.stringify(map), Date.now());
+}
+
+function migrateUserAccessTokensToConfig(db) {
+  try {
+    const tableExists = db.prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='user_access_tokens'`).get();
+    if (!tableExists) return;
+
+    const rows = db.prepare('SELECT email, user_access_token, updated_at FROM user_access_tokens').all();
+    if (rows.length) {
+      const map = loadUserAccessTokenConfig(db);
+      for (const row of rows) {
+        const email = normalizeUserEmail(row.email);
+        if (!email || !row.user_access_token) continue;
+        if (!map[email]) {
+          map[email] = { user_access_token: row.user_access_token, updated_at: row.updated_at || Date.now() };
+        }
+      }
+      saveUserAccessTokenConfig(db, map);
+      console.log('[Config] migrated user_access_tokens table to config type=user_access_tokens');
+    }
+    db.exec('DROP TABLE IF EXISTS user_access_tokens');
+  } catch (e) {
+    console.warn('[Config] migrate user_access_tokens error:', e.message);
+  }
+}
+
+function saveUserAccessToken(db, email, token) {
+  const normalized = normalizeUserEmail(email);
+  if (!normalized || !token) return;
+  saveUserAccessTokenConfig(db, { [normalized]: { user_access_token: token, updated_at: Date.now() } });
+}
+
+function getUserAccessToken(db, email) {
+  const normalized = normalizeUserEmail(email);
+  if (!normalized) return null;
+  const map = loadUserAccessTokenConfig(db);
+  return map[normalized]?.user_access_token || null;
+}
+
+function getPrimaryOwnerEmail(db) {
+  const row = db.prepare(`
+    SELECT owner_email FROM agents
+    WHERE owner_email IS NOT NULL AND TRIM(owner_email) != ''
+    ORDER BY updated_at DESC
+    LIMIT 1
+  `).get();
+  return row?.owner_email ? String(row.owner_email).trim() : null;
+}
+
+module.exports = {
+  initDatabase,
+  createDatabaseAPI,
+  enqueueDbWrite,
+  waitForDbQueue,
+  normalizeUserEmail,
+  loadUserAccessTokenConfig,
+  saveUserAccessTokenConfig,
+  migrateUserAccessTokensToConfig,
+  saveUserAccessToken,
+  getUserAccessToken,
+  getPrimaryOwnerEmail,
+};