trustbase-seller-backend 0.1.5

package/routes/security-monitoring.js

@@ -0,0 +1,373 @@
+"use strict";
+/**
+ * Security Monitoring Routes - 安全监控路由
+ *
+ * 功能：
+ * - 安全统计
+ * - 安全事件查询
+ * - IP 黑名单管理
+ * - 系统健康检查
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const intrusion_detection_1 = require("../core/intrusion-detection");
+const session_manager_1 = require("../core/session-manager");
+const router = (0, express_1.Router)();
+/**
+ * GET /api/security/stats
+ * 安全统计（最近 24 小时）
+ */
+router.get('/stats', async (req, res) => {
+    try {
+        const hours = parseInt(req.query.hours) || 24;
+        const securityStats = (0, intrusion_detection_1.getSecurityStats)(hours);
+        const sessionStats = (0, session_manager_1.getSessionStats)();
+        res.json({
+            success: true,
+            data: {
+                security: securityStats,
+                sessions: sessionStats,
+                timestamp: new Date().toISOString(),
+            },
+        });
+    }
+    catch (error) {
+        console.error('[Security] 获取统计失败:', error);
+        res.status(500).json({
+            error: 'Failed to get security stats',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * GET /api/security/events
+ * 查询安全事件
+ */
+router.get('/events', async (req, res) => {
+    try {
+        const hours = parseInt(req.query.hours) || 24;
+        const severity = req.query.severity;
+        const type = req.query.type;
+        const events = (0, intrusion_detection_1.loadSecurityEvents)();
+        const since = Date.now() - hours * 60 * 60 * 1000;
+        let filtered = events.filter(e => e.timestamp >= since);
+        if (severity) {
+            filtered = filtered.filter(e => e.severity === severity);
+        }
+        if (type) {
+            filtered = filtered.filter(e => e.eventType === type);
+        }
+        res.json({
+            success: true,
+            data: filtered.slice(-100), // 最多返回 100 条
+            count: filtered.length,
+        });
+    }
+    catch (error) {
+        console.error('[Security] 查询事件失败:', error);
+        res.status(500).json({
+            error: 'Failed to get security events',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * GET /api/security/blacklist
+ * 查看 IP 黑名单
+ */
+router.get('/blacklist', async (req, res) => {
+    try {
+        const blacklist = (0, intrusion_detection_1.loadIPBlacklist)();
+        // 过滤掉过期的条目
+        const active = blacklist.filter(b => b.permanent || Date.now() <= b.expiresAt);
+        res.json({
+            success: true,
+            data: active,
+            count: active.length,
+        });
+    }
+    catch (error) {
+        console.error('[Security] 获取黑名单失败:', error);
+        res.status(500).json({
+            error: 'Failed to get blacklist',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * POST /api/security/blacklist
+ * 添加 IP 到黑名单
+ */
+router.post('/blacklist', async (req, res) => {
+    try {
+        const { ip, reason, duration } = req.body;
+        if (!ip || !reason) {
+            return res.status(400).json({
+                error: 'Missing required fields',
+                message: 'ip and reason are required',
+            });
+        }
+        (0, intrusion_detection_1.addToBlacklist)(ip, reason, duration);
+        res.json({
+            success: true,
+            message: 'IP added to blacklist',
+        });
+    }
+    catch (error) {
+        console.error('[Security] 添加黑名单失败:', error);
+        res.status(500).json({
+            error: 'Failed to add to blacklist',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * DELETE /api/security/blacklist/:ip
+ * 从黑名单移除 IP
+ */
+router.delete('/blacklist/:ip', async (req, res) => {
+    try {
+        const { ip } = req.params;
+        (0, intrusion_detection_1.removeFromBlacklist)(ip);
+        res.json({
+            success: true,
+            message: 'IP removed from blacklist',
+        });
+    }
+    catch (error) {
+        console.error('[Security] 移除黑名单失败:', error);
+        res.status(500).json({
+            error: 'Failed to remove from blacklist',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * GET /api/security/health
+ * 系统安全健康检查
+ */
+router.get('/health', async (req, res) => {
+    try {
+        const checks = {
+            timestamp: new Date().toISOString(),
+            checks: {},
+            status: 'healthy',
+        };
+        // 1. 检查加密系统
+        try {
+            const { validateEncryptionKey } = await Promise.resolve().then(() => __importStar(require('../utils/encryption')));
+            checks.checks.encryption = {
+                status: validateEncryptionKey() ? 'ok' : 'error',
+                message: 'AES-256 encryption system',
+            };
+        }
+        catch (error) {
+            checks.checks.encryption = {
+                status: 'error',
+                message: 'Encryption module not loaded',
+            };
+            checks.status = 'degraded';
+        }
+        // 2. 检查会话管理
+        try {
+            const sessionStats = (0, session_manager_1.getSessionStats)();
+            checks.checks.sessions = {
+                status: 'ok',
+                active: sessionStats.active,
+                total: sessionStats.total,
+                message: 'Session manager running',
+            };
+        }
+        catch (error) {
+            checks.checks.sessions = {
+                status: 'error',
+                message: 'Session manager error',
+            };
+            checks.status = 'degraded';
+        }
+        // 3. 检查入侵检测
+        try {
+            const stats = (0, intrusion_detection_1.getSecurityStats)(1);
+            checks.checks.intrusionDetection = {
+                status: 'ok',
+                eventsLastHour: stats.total,
+                message: 'IDS running',
+            };
+        }
+        catch (error) {
+            checks.checks.intrusionDetection = {
+                status: 'error',
+                message: 'IDS error',
+            };
+            checks.status = 'degraded';
+        }
+        // 4. 检查黑名单
+        try {
+            const blacklist = (0, intrusion_detection_1.loadIPBlacklist)();
+            checks.checks.blacklist = {
+                status: 'ok',
+                count: blacklist.filter(b => b.permanent || Date.now() <= b.expiresAt).length,
+                message: 'IP blacklist active',
+            };
+        }
+        catch (error) {
+            checks.checks.blacklist = {
+                status: 'error',
+                message: 'Blacklist error',
+            };
+            checks.status = 'degraded';
+        }
+        // 5. 检查备份
+        const fs = await Promise.resolve().then(() => __importStar(require('fs')));
+        const path = await Promise.resolve().then(() => __importStar(require('path')));
+        const backupDir = path.join(__dirname, '../../backups');
+        if (fs.existsSync(backupDir)) {
+            const backups = fs.readdirSync(backupDir).filter(f => f.startsWith('backup-'));
+            const latestBackup = backups.sort().reverse()[0];
+            if (latestBackup) {
+                const stat = fs.statSync(path.join(backupDir, latestBackup));
+                const hoursSinceBackup = (Date.now() - stat.mtime.getTime()) / (1000 * 60 * 60);
+                checks.checks.backup = {
+                    status: hoursSinceBackup < 26 ? 'ok' : 'warning',
+                    latestBackup: latestBackup,
+                    hoursSinceBackup: Math.round(hoursSinceBackup),
+                    message: hoursSinceBackup < 26 ? 'Backup recent' : 'Backup overdue',
+                };
+                if (hoursSinceBackup > 26) {
+                    checks.status = 'degraded';
+                }
+            }
+            else {
+                checks.checks.backup = {
+                    status: 'warning',
+                    message: 'No backups found',
+                };
+                checks.status = 'degraded';
+            }
+        }
+        else {
+            checks.checks.backup = {
+                status: 'warning',
+                message: 'Backup directory not found',
+            };
+            checks.status = 'degraded';
+        }
+        // 返回状态码
+        const statusCode = checks.status === 'healthy' ? 200 :
+            checks.status === 'degraded' ? 200 : 503;
+        res.status(statusCode).json(checks);
+    }
+    catch (error) {
+        console.error('[Security] 健康检查失败:', error);
+        res.status(503).json({
+            status: 'unhealthy',
+            error: error instanceof Error ? error.message : 'Unknown error',
+            timestamp: new Date().toISOString(),
+        });
+    }
+});
+/**
+ * GET /api/security/dashboard
+ * 安全仪表板数据
+ */
+router.get('/dashboard', async (req, res) => {
+    try {
+        const securityStats = (0, intrusion_detection_1.getSecurityStats)(24);
+        const sessionStats = (0, session_manager_1.getSessionStats)();
+        const blacklist = (0, intrusion_detection_1.loadIPBlacklist)().filter(b => b.permanent || Date.now() <= b.expiresAt);
+        const dashboard = {
+            timestamp: new Date().toISOString(),
+            overview: {
+                securityEvents24h: securityStats.total,
+                activeSessions: sessionStats.active,
+                bannedIPs: blacklist.length,
+                criticalEvents: securityStats.bySeverity.critical || 0,
+            },
+            charts: {
+                eventsByType: securityStats.byType,
+                eventsBySeverity: securityStats.bySeverity,
+                topOffenderIPs: securityStats.topIPs.slice(0, 5),
+            },
+            recentEvents: (0, intrusion_detection_1.loadSecurityEvents)()
+                .filter(e => e.timestamp > Date.now() - 60 * 60 * 1000)
+                .slice(-10),
+            recommendations: generateRecommendations(securityStats, sessionStats, blacklist),
+        };
+        res.json({
+            success: true,
+            data: dashboard,
+        });
+    }
+    catch (error) {
+        console.error('[Security] 仪表板数据失败:', error);
+        res.status(500).json({
+            error: 'Failed to get dashboard data',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * 生成安全建议
+ */
+function generateRecommendations(securityStats, sessionStats, blacklist) {
+    const recommendations = [];
+    // 检查暴力破解
+    if (securityStats.byType.brute_force > 0) {
+        recommendations.push('⚠️ 检测到暴力破解攻击，建议检查 IP 黑名单配置');
+    }
+    // 检查频率限制
+    if (securityStats.byType.rate_limit > 10) {
+        recommendations.push('⚠️ 多个 IP 触发频率限制，考虑调整限流策略');
+    }
+    // 检查会话
+    if (sessionStats.expired > 10) {
+        recommendations.push('ℹ️ 有多个过期会话，建议执行会话清理');
+    }
+    // 检查黑名单
+    if (blacklist.length > 20) {
+        recommendations.push('ℹ️ 黑名单 IP 较多，建议定期审查');
+    }
+    // 检查认证失败
+    if (securityStats.byType.auth_failure > 50) {
+        recommendations.push('🔴 认证失败次数较多，建议检查认证策略');
+    }
+    if (recommendations.length === 0) {
+        recommendations.push('✅ 系统安全状态良好');
+    }
+    return recommendations;
+}
+exports.default = router;
+//# sourceMappingURL=security-monitoring.js.map

package/routes/security-monitoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-monitoring.js","sourceRoot":"","sources":["../../src/routes/security-monitoring.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qCAAoD;AACpD,qEAMqC;AACrC,6DAA0D;AAE1D,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,IAAA,sCAAgB,EAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAA,iCAAe,GAAE,CAAC;QAEvC,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,8BAA8B;YACrC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAA,wCAAkB,GAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAElD,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAExD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAG,aAAa;YAC1C,KAAK,EAAE,QAAQ,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,+BAA+B;YACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAA,qCAAe,GAAE,CAAC;QAEpC,WAAW;QACX,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,CACzC,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE1C,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAA,oCAAc,EAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErC,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAE5C,IAAA,yCAAmB,EAAC,EAAE,CAAC,CAAC;QAExB,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,iCAAiC;YACxC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAQ;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,YAAY;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,qBAAqB,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG;gBACzB,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;gBAChD,OAAO,EAAE,2BAA2B;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG;gBACzB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,8BAA8B;aACxC,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,YAAY;QACZ,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAA,iCAAe,GAAE,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG;gBACvB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,OAAO,EAAE,yBAAyB;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG;gBACvB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,uBAAuB;aACjC,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,YAAY;QACZ,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,sCAAgB,EAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,kBAAkB,GAAG;gBACjC,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,KAAK,CAAC,KAAK;gBAC3B,OAAO,EAAE,aAAa;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,kBAAkB,GAAG;gBACjC,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,WAAW;aACrB,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,WAAW;QACX,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,qCAAe,GAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG;gBACxB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;gBAC7E,OAAO,EAAE,qBAAqB;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG;gBACxB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,iBAAiB;aAC3B,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,UAAU;QACV,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,wDAAa,MAAM,GAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAExD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAEjD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC7D,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBAEhF,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;oBACrB,MAAM,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBAChD,YAAY,EAAE,YAAY;oBAC1B,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBAC9C,OAAO,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB;iBACpE,CAAC;gBAEF,IAAI,gBAAgB,GAAG,EAAE,EAAE,CAAC;oBAC1B,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;oBACrB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,kBAAkB;iBAC5B,CAAC;gBACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;gBACrB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,4BAA4B;aACtC,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,QAAQ;QACR,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE5D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YAC/D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,sCAAgB,EAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAA,iCAAe,GAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAA,qCAAe,GAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,CACzC,CAAC;QAEF,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE;gBACR,iBAAiB,EAAE,aAAa,CAAC,KAAK;gBACtC,cAAc,EAAE,YAAY,CAAC,MAAM;gBACnC,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,cAAc,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC;aACvD;YACD,MAAM,EAAE;gBACN,YAAY,EAAE,aAAa,CAAC,MAAM;gBAClC,gBAAgB,EAAE,aAAa,CAAC,UAAU;gBAC1C,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACjD;YACD,YAAY,EAAE,IAAA,wCAAkB,GAAE;iBAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;iBACtD,KAAK,CAAC,CAAC,EAAE,CAAC;YACb,eAAe,EAAE,uBAAuB,CAAC,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC;SACjF,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,8BAA8B;YACrC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,uBAAuB,CAAC,aAAkB,EAAE,YAAiB,EAAE,SAAgB;IACtF,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,SAAS;IACT,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACzC,eAAe,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACrD,CAAC;IAED,SAAS;IACT,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QACzC,eAAe,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnD,CAAC;IAED,OAAO;IACP,IAAI,YAAY,CAAC,OAAO,GAAG,EAAE,EAAE,CAAC;QAC9B,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAED,QAAQ;IACR,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1B,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS;IACT,IAAI,aAAa,CAAC,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,CAAC;QAC3C,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,kBAAe,MAAM,CAAC"}

package/routes/shop.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Shop API Routes - 店铺管理 API
+ * 对接链上 shop + trustcoin + reputation 模块 LCD API
+ */
+import { Router } from 'express';
+import type { AuthPlugin } from '../plugins/auth';
+export declare function createShopRoutes(authPlugin: AuthPlugin): Router;
+//# sourceMappingURL=shop.d.ts.map

package/routes/shop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shop.d.ts","sourceRoot":"","sources":["../../src/routes/shop.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CA2K/D"}

package/routes/shop.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ * Shop API Routes - 店铺管理 API
+ * 对接链上 shop + trustcoin + reputation 模块 LCD API
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createShopRoutes = createShopRoutes;
+const express_1 = require("express");
+function createShopRoutes(authPlugin) {
+    const router = (0, express_1.Router)();
+    const lcdUrl = process.env.LCD_URL || 'http://localhost:1317';
+    /**
+     * 获取店铺参数
+     * GET /api/shop/params
+     */
+    router.get('/params', async (req, res) => {
+        try {
+            const [shopRes, trustcoinRes] = await Promise.all([
+                fetch(`${lcdUrl}/oxiaom/trustchain/shop/v1/params`),
+                fetch(`${lcdUrl}/oxiaom/trustchain/trustcoin/v1/params`),
+            ]);
+            const shopData = shopRes.ok ? await shopRes.json() : { params: {} };
+            const trustcoinData = trustcoinRes.ok ? await trustcoinRes.json() : { params: {} };
+            res.json({
+                success: true,
+                shop: shopData.params,
+                trustcoin: trustcoinData.params,
+            });
+        }
+        catch (error) {
+            console.error('[ShopAPI] Get params error:', error);
+            res.status(400).json({ error: error.message });
+        }
+    });
+    /**
+     * 获取店铺综合信息
+     * GET /api/shop/:address
+     * 聚合: 余额 + 商品列表 + 信誉 + 经营范围
+     */
+    router.get('/:address', async (req, res) => {
+        try {
+            // kimi #15345: 逛店主页免登录公开 (买家不注册就能逛)
+            const { address } = req.params;
+            // 并行查询多个链上接口
+            const [balanceRes, slotsRes, reputationRes] = await Promise.allSettled([
+                fetch(`${lcdUrl}/cosmos/bank/v1beta1/balances/${address}`),
+                fetch(`${lcdUrl}/oxiaom/trustchain/marketplace/v1/sellers/${address}/slots`),
+                fetch(`${lcdUrl}/oxiaom/trustchain/reputation/v1/params`), // 信誉参数暂代
+            ]);
+            let balances = [];
+            let slots = [];
+            let reputation = null;
+            // P1 (kimi #15430): 非法/不存在的地址返 404, 别放假数据
+            if (balanceRes.status === 'rejected' || (balanceRes.status === 'fulfilled' && !balanceRes.value.ok)) {
+                return res.status(404).json({ error: 'Address not found' });
+            }
+            if (balanceRes.status === 'fulfilled' && balanceRes.value.ok) {
+                const data = await balanceRes.value.json();
+                balances = data.balances || [];
+            }
+            if (slotsRes.status === 'fulfilled' && slotsRes.value.ok) {
+                const data = await slotsRes.value.json();
+                slots = data.slots?.slots || [];
+            }
+            if (reputationRes.status === 'fulfilled' && reputationRes.value.ok) {
+                const data = await reputationRes.value.json();
+                reputation = data.params;
+            }
+            // 统计商品数量
+            const activeSlots = slots.filter((s) => s.product && s.product.title);
+            const totalProducts = activeSlots.length;
+            // 余额中查找 utct
+            const utctBalance = balances.find((b) => b.denom === 'utct');
+            const balanceAmount = utctBalance ? parseInt(utctBalance.amount) / 1_000_000 : 0;
+            res.json({
+                success: true,
+                address,
+                shop: {
+                    address,
+                    balances,
+                    utctBalance: balanceAmount,
+                    productCount: totalProducts,
+                    slots,
+                    reputation,
+                },
+            });
+        }
+        catch (error) {
+            console.error('[ShopAPI] Get shop info error:', error);
+            res.status(400).json({ error: error.message });
+        }
+    });
+    /**
+     * 获取经营范围
+     * GET /api/shop/:address/business-scope
+     */
+    router.get('/:address/business-scope', async (req, res) => {
+        try {
+            // kimi #15345: 经营范围浏览免登录公开 (公开只读)
+            const { address } = req.params;
+            // P1 (kimi #15430): 去 stub, 改真实 LCD 查询 (business_scope 下划线, 非连字符)
+            const resp = await fetch(`${lcdUrl}/oxiaom/trustchain/trustcoin/v1/business_scope/${address}`, {
+                signal: AbortSignal.timeout(5000),
+            });
+            if (!resp.ok) {
+                return res.status(404).json({ error: 'Business scope not found' });
+            }
+            const data = await resp.json();
+            const scope = data.business_scope || data;
+            res.json({
+                success: true,
+                address,
+                categories: scope.categories || [],
+                sub_categories: scope.sub_categories || [],
+                certification_hash: scope.certification_hash || '',
+            });
+        }
+        catch (error) {
+            console.error('[ShopAPI] Get business scope error:', error);
+            res.status(400).json({ error: error.message });
+        }
+    });
+    /**
+     * 注册经营范围（构造交易体）
+     * POST /api/shop/register
+     */
+    router.post('/register', async (req, res) => {
+        try {
+            const authHeader = req.headers.authorization;
+            if (!authHeader || !authHeader.startsWith('Bearer ')) {
+                return res.status(401).json({ error: 'Missing authorization header' });
+            }
+            const token = authHeader.substring(7);
+            const tokenData = await authPlugin.verifyToken(token);
+            if (!tokenData) {
+                return res.status(401).json({ error: 'Invalid token' });
+            }
+            const { categories, subCategories, certificationHash } = req.body;
+            if (!categories || !subCategories) {
+                return res.status(400).json({ error: 'Missing required fields: categories, subCategories' });
+            }
+            res.json({
+                success: true,
+                message: 'Register business scope message constructed',
+                msg: {
+                    type: '/trustchain.trustcoin.v1.MsgRegisterBusinessScope',
+                    value: {
+                        address: tokenData.userId,
+                        categories: Array.isArray(categories) ? categories.join(',') : categories,
+                        sub_categories: Array.isArray(subCategories) ? subCategories.join(',') : subCategories,
+                        certification_hash: certificationHash || '',
+                    },
+                },
+                cli_command: `trustchaind tx trustcoin register-business-scope "${Array.isArray(categories) ? categories.join(',') : categories}" "${Array.isArray(subCategories) ? subCategories.join(',') : subCategories}" "${certificationHash || '0'}" --from <address> --chain-id trustchain --yes`,
+            });
+        }
+        catch (error) {
+            console.error('[ShopAPI] Register business scope error:', error);
+            res.status(400).json({ error: error.message });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=shop.js.map

package/routes/shop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shop.js","sourceRoot":"","sources":["../../src/routes/shop.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAKH,4CA2KC;AA9KD,qCAAoD;AAGpD,SAAgB,gBAAgB,CAAC,UAAsB;IACrD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAC;IAE9D;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,KAAK,CAAC,GAAG,MAAM,mCAAmC,CAAC;gBACnD,KAAK,CAAC,GAAG,MAAM,wCAAwC,CAAC;aACzD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC3E,MAAM,aAAa,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAE1F,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ,CAAC,MAAM;gBACrB,SAAS,EAAE,aAAa,CAAC,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAE/B,aAAa;YACb,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACrE,KAAK,CAAC,GAAG,MAAM,iCAAiC,OAAO,EAAE,CAAC;gBAC1D,KAAK,CAAC,GAAG,MAAM,6CAA6C,OAAO,QAAQ,CAAC;gBAC5E,KAAK,CAAC,GAAG,MAAM,yCAAyC,CAAC,EAAG,SAAS;aACtE,CAAC,CAAC;YAEH,IAAI,QAAQ,GAAU,EAAE,CAAC;YACzB,IAAI,KAAK,GAAU,EAAE,CAAC;YACtB,IAAI,UAAU,GAAQ,IAAI,CAAC;YAE3B,0CAA0C;YAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAS,CAAC;gBAClD,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YACjC,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAS,CAAC;gBAChD,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAS,CAAC;gBACrD,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,CAAC;YAED,SAAS;YACT,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC;YAEzC,aAAa;YACb,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjF,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO;gBACP,IAAI,EAAE;oBACJ,OAAO;oBACP,QAAQ;oBACR,WAAW,EAAE,aAAa;oBAC1B,YAAY,EAAE,aAAa;oBAC3B,KAAK;oBACL,UAAU;iBACX;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAE/B,kEAAkE;YAClE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,kDAAkD,OAAO,EAAE,EAAE;gBAC7F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAQ,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO;gBACP,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;gBAClC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAElE,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;gBAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC,CAAC;YAC/F,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,6CAA6C;gBACtD,GAAG,EAAE;oBACH,IAAI,EAAE,mDAAmD;oBACzD,KAAK,EAAE;wBACL,OAAO,EAAE,SAAS,CAAC,MAAM;wBACzB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU;wBACzE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;wBACtF,kBAAkB,EAAE,iBAAiB,IAAI,EAAE;qBAC5C;iBACF;gBACD,WAAW,EAAE,qDAAqD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,iBAAiB,IAAI,GAAG,gDAAgD;aAC1R,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/routes/social.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Social Message API Routes — 用户社交私信（B 治本, Lesson #309 鉴权分离）
+ *
+ * 与 M2M 私信 (routes/p2p-message.ts) 严格分离:
+ * - M2M:        walletAuth() 钱包签名五件套, channel='m2m',       E2E 加密(客户端自持私钥)
+ * - user-social: requireScope() Bearer token,  channel='user-social', 明文(服务端 Bearer 鉴权信任)
+ *
+ * 鉴权: requireScope('social:read'/'social:write') 复用 scope-auth.ts。
+ *   - 第一方登录 token → 隐式全权限 (isOAuth=false), req.oauthUser.address = 用户地址。
+ *     不检查 scope (scope-auth 第一方分支语义), 所以用户登录后直接可用社交私信。
+ *   - 第三方 OAuth token → 严格 scope (需 social:read/write 授权), 暂非 MVP 主场景。
+ *
+ * 对象级授权: user_id 一律从 req.oauthUser.address 取 (token 解析), 不在 path/body 传,
+ * 防伪造 (POST 的 from 固定为 token subject, 不接受客户端传 from)。
+ */
+import { Router } from 'express';
+import { ScopeAuthV2Deps } from '../middleware/scope-auth';
+import type { OAuthPlugin } from '../plugins/oauth';
+import type { AuthPlugin } from '../plugins/auth';
+import { P2PMessagePlugin } from '../plugins/p2p-message';
+export declare function createSocialRoutes(oauthPlugin: OAuthPlugin, authPlugin: AuthPlugin, v2Deps: ScopeAuthV2Deps | undefined, p2pPlugin: P2PMessagePlugin): Router;
+//# sourceMappingURL=social.d.ts.map

package/routes/social.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.d.ts","sourceRoot":"","sources":["../../src/routes/social.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAmB,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAK1D,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,SAAS,EAAE,gBAAgB,GAC1B,MAAM,CAwER"}