chainlesschain 0.161.8 → 0.161.10

package/src/assets/web-panel/assets/{zoom-Beg44Pk9.js → zoom-DR60LSPO.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-D8S-7oDQ.js";import{i as f}from"./motion-B10pjDA-.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-BqsvxElz.js";import{i as f}from"./motion-BAgV2nZt.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,9 +8,9 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-D8S-7oDQ.js"></script>
-  <link rel="modulepreload" crossorigin href="./assets/vendor-Ci2pTZ_t.js">
-  <link rel="modulepreload" crossorigin href="./assets/icons-B2G69bhT.js">
+  <script type="module" crossorigin src="./assets/index-BqsvxElz.js"></script>
+  <link rel="modulepreload" crossorigin href="./assets/vendor-BVLz_z7V.js">
+  <link rel="modulepreload" crossorigin href="./assets/icons-Q99MnhG8.js">
   <link rel="stylesheet" crossorigin href="./assets/index-CfX1DEtk.css">
 </head>
 <body>

package/src/commands/marketplace.js

@@ -34,6 +34,17 @@ import {
   setInvocationStatus,
   getMarketplaceStatsV2,
 } from "../lib/skill-marketplace.js";
+import {
+  openMultisigManager,
+  defaultMultisigDbPath,
+  defaultMultisigLogPath,
+  readSecretKey,
+} from "../lib/multisig-runtime.js";
+
+// v1.2 m-of-n Phase 2 — marketplace.purchase 大额触发阈值。设计文档 §1 写的
+// "商品 price ≥ ¥1000"。fen = ¥ × 100。可由命令行 --threshold-fen 覆盖（测试用）。
+export const LARGE_PURCHASE_THRESHOLD_FEN = 100_000;
+const MULTISIG_DOMAIN = "marketplace.purchase";
 
 function _dbFromCtx(ctx) {
   if (!ctx.db) {
@@ -579,6 +590,281 @@ export function registerMarketplaceCommand(program) {
         process.exit(1);
       }
     });
+
+  /* ── v1.2 m-of-n Phase 2: marketplace.purchase mediator ─────── */
+
+  mp.command("purchase <itemId>")
+    .description(
+      "Initiate a purchase. Large orders (≥ threshold) route through M-of-N multisig.",
+    )
+    .requiredOption("--amount-fen <n>", "Order amount in fen (¥ × 100)", (v) =>
+      parseInt(v, 10),
+    )
+    .requiredOption("--buyer <did>", "Buyer DID (multisig initiator)")
+    .option("--alg <alg>", "Initiator signing alg", "Ed25519")
+    .option("--key <hex|path>", "Initiator secret key hex / file")
+    .option(
+      "--threshold-fen <n>",
+      `Override large-order threshold (default ${LARGE_PURCHASE_THRESHOLD_FEN})`,
+      (v) => parseInt(v, 10),
+    )
+    .option("--item-name <name>", "Optional item display name")
+    .option("--db <path>", "Multisig DB path", defaultMultisigDbPath())
+    .option("--log <path>", "Governance log path", defaultMultisigLogPath())
+    .option("--json", "Output JSON")
+    .action(async (itemId, options) => {
+      try {
+        const threshold = options.thresholdFen ?? LARGE_PURCHASE_THRESHOLD_FEN;
+        const amountFen = options.amountFen;
+        if (!Number.isFinite(amountFen) || amountFen <= 0) {
+          logger.error("--amount-fen must be positive integer");
+          process.exit(2);
+        }
+        const requiresMultisig = amountFen >= threshold;
+
+        if (!requiresMultisig) {
+          // Below threshold: direct path. No real payment processor in CLI scope
+          // — emit a "purchased" record. Phase 2 doesn't aim to wire a real
+          // payment gateway; it aims to gate large orders through multisig.
+          if (options.json) {
+            console.log(
+              JSON.stringify(
+                {
+                  status: "purchased",
+                  itemId,
+                  amountFen,
+                  buyer: options.buyer,
+                  path: "direct",
+                },
+                null,
+                2,
+              ),
+            );
+          } else {
+            logger.log(
+              chalk.green(
+                `✓ Purchase executed (direct, below ¥${(threshold / 100).toFixed(2)} threshold)`,
+              ),
+            );
+            logger.log(`  itemId: ${itemId}`);
+            logger.log(`  amount: ¥${(amountFen / 100).toFixed(2)}`);
+          }
+          return;
+        }
+
+        // Above threshold: route through multisig.
+        const { store, mgr, close } = await openMultisigManager(
+          options.db,
+          options.log,
+        );
+        try {
+          const policy = store.getPolicy(MULTISIG_DOMAIN);
+          if (!policy) {
+            const msg = `No multisig policy for domain "${MULTISIG_DOMAIN}" — cannot route ¥${(amountFen / 100).toFixed(2)} (≥ threshold). Run: cc multisig policy set ${MULTISIG_DOMAIN} --m <M> --members <json>`;
+            if (options.json) {
+              console.log(
+                JSON.stringify(
+                  {
+                    status: "blocked",
+                    reason: "no_policy",
+                    itemId,
+                    amountFen,
+                    path: "multisig",
+                  },
+                  null,
+                  2,
+                ),
+              );
+            } else {
+              logger.error(chalk.red(`✗ ${msg}`));
+            }
+            process.exit(2);
+          }
+          const secretKey = readSecretKey(options.key);
+          const result = mgr.propose({
+            domain: MULTISIG_DOMAIN,
+            payload: {
+              itemId,
+              amountFen,
+              buyer: options.buyer,
+              itemName: options.itemName || null,
+            },
+            policy,
+            initiator: {
+              did: options.buyer,
+              alg: options.alg,
+              secretKey,
+            },
+          });
+          if (options.json) {
+            console.log(
+              JSON.stringify(
+                {
+                  status: "needs_co_sign",
+                  path: "multisig",
+                  proposalId: result.proposal.id,
+                  reachedThreshold: result.reachedThreshold,
+                  requiredSigs: policy.m,
+                  itemId,
+                  amountFen,
+                },
+                null,
+                2,
+              ),
+            );
+          } else {
+            logger.log(
+              chalk.cyan(
+                `↪ Routed through multisig (¥${(amountFen / 100).toFixed(2)} ≥ ¥${(threshold / 100).toFixed(2)} threshold)`,
+              ),
+            );
+            logger.log(`  proposalId: ${result.proposal.id}`);
+            logger.log(
+              `  needs ${policy.m} of ${policy.members.length} signatures`,
+            );
+            if (result.reachedThreshold) {
+              logger.log(
+                chalk.green(
+                  "  ✓ threshold reached on first signature — run: cc marketplace consume",
+                ),
+              );
+            } else {
+              logger.log(
+                `  next: co-signers run: cc multisig sign ${result.proposal.id}`,
+              );
+            }
+          }
+        } finally {
+          close();
+        }
+      } catch (err) {
+        logger.error(`Purchase failed: ${err.message}`);
+        process.exit(1);
+      }
+    });
+
+  mp.command("consume <proposalId>")
+    .description(
+      "Execute a multisig-gated purchase after threshold reached (marks proposal consumed)",
+    )
+    .option("--db <path>", "Multisig DB path", defaultMultisigDbPath())
+    .option("--log <path>", "Governance log path", defaultMultisigLogPath())
+    .option("--json", "Output JSON")
+    .action(async (proposalId, options) => {
+      try {
+        const { mgr, close } = await openMultisigManager(
+          options.db,
+          options.log,
+        );
+        try {
+          const got = mgr.get(proposalId);
+          if (!got) {
+            if (options.json) {
+              console.log(
+                JSON.stringify(
+                  { status: "error", reason: "proposal_not_found" },
+                  null,
+                  2,
+                ),
+              );
+            } else {
+              logger.error(chalk.red(`No proposal: ${proposalId}`));
+            }
+            process.exit(2);
+          }
+          if (got.proposal.domain !== MULTISIG_DOMAIN) {
+            if (options.json) {
+              console.log(
+                JSON.stringify(
+                  {
+                    status: "error",
+                    reason: "wrong_domain",
+                    expected: MULTISIG_DOMAIN,
+                    actual: got.proposal.domain,
+                  },
+                  null,
+                  2,
+                ),
+              );
+            } else {
+              logger.error(
+                chalk.red(
+                  `Proposal domain "${got.proposal.domain}" is not "${MULTISIG_DOMAIN}" — use cc multisig finalize instead.`,
+                ),
+              );
+            }
+            process.exit(2);
+          }
+          if (got.proposal.state !== "reached") {
+            if (options.json) {
+              console.log(
+                JSON.stringify(
+                  {
+                    status: "error",
+                    reason: `proposal_state_${got.proposal.state}`,
+                  },
+                  null,
+                  2,
+                ),
+              );
+            } else {
+              logger.error(
+                chalk.red(
+                  `Proposal state is "${got.proposal.state}", need "reached" — sign more before consume.`,
+                ),
+              );
+            }
+            process.exit(2);
+          }
+
+          // Execute purchase from proposal payload (CLI stub — Phase 2 doesn't
+          // ship a real payment processor). Just print the order, then finalize.
+          const order = JSON.parse(got.proposal.payloadJcs);
+          const finalizeRes = mgr.finalize(proposalId);
+          if (!finalizeRes.ok) {
+            if (options.json) {
+              console.log(
+                JSON.stringify(
+                  { status: "error", reason: finalizeRes.reason },
+                  null,
+                  2,
+                ),
+              );
+            } else {
+              logger.error(chalk.red(`Finalize failed: ${finalizeRes.reason}`));
+            }
+            process.exit(1);
+          }
+          if (options.json) {
+            console.log(
+              JSON.stringify(
+                {
+                  status: "consumed",
+                  proposalId,
+                  order,
+                },
+                null,
+                2,
+              ),
+            );
+          } else {
+            logger.log(
+              chalk.green(
+                `✓ Purchase consumed — order ${order.itemId} for ¥${(order.amountFen / 100).toFixed(2)}`,
+              ),
+            );
+            logger.log(`  buyer: ${order.buyer}`);
+            if (order.itemName) logger.log(`  item: ${order.itemName}`);
+            logger.log(`  proposalId: ${proposalId}`);
+          }
+        } finally {
+          close();
+        }
+      } catch (err) {
+        logger.error(`Consume failed: ${err.message}`);
+        process.exit(1);
+      }
+    });
 }
 
 // === Iter16 V2 governance overlay ===

package/src/commands/mtc.js

@@ -11,7 +11,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import chalk from "chalk";
-import { ed25519 as nobleEd25519 } from "@noble/curves/ed25519";
+import { ed25519 as nobleEd25519 } from "@noble/curves/ed25519.js";
 import { logger } from "../lib/logger.js";
 import { bootstrap, shutdown } from "../runtime/bootstrap.js";
 import { getAllIdentities, getIdentity } from "../lib/did-manager.js";