trustbase-seller-backend 0.1.5

package/test-order-lifecycle-v394.js

@@ -0,0 +1,528 @@
+// 订单生命周期端点契约测试 (v3.9.4 / D2: ship / confirm / cancel / dispute + create 停用)
+//
+// 覆盖 routes/order.js 的四条 POST:
+//   - 正向: 打桩"链" + 真 cosmjs 签名 (JS 直签通道) → **从签名后的 TxRaw 字节里解出** msg 类型/字段,
+//     并用独立重构的 SignDoc 做 secp256k1 验签 (证明签名者 = 本机卖家 key = submitter/seller 字段);
+//   - 负向: 缺字段 / 字段非法 / 未授权 / 订单不属于本店 / 状态不符 → 4xx 且**不发链**;
+//   - 链上拒: 502 + hint 分类 + raw_log 原样;
+//   - create: 410 Gone (改用 /api/orders)。
+// 不连真链、不碰真机。
+//
+// 运行: node --test test-order-lifecycle-v394.js
+
+const assert = require('node:assert');
+const http = require('node:http');
+const express = require('express');
+const Database = require('better-sqlite3');
+const test = require('node:test');
+const { TxRaw, TxBody, AuthInfo, SignDoc } = require('cosmjs-types/cosmos/tx/v1beta1/tx');
+
+const chainSigner = require('./core/chain-signer');
+const orderIntent = require('./core/order-intent');
+
+const VECTOR_MNEMONIC = 'economy stock theory fatal elder harbor betray wasp final emotion task crumble siren bottom lizard educate guess current outdoor pair theory focus wife stone';
+const SIGNER_ADDR = 'tct1pkptre7fdkl6gfrzlesjjvhxhlc3r4gmw38fjc';  // 本机卖家 (签名者)
+const BUYER_ADDR = 'tct1rmmed4yuddn64nx79c39yh2tuvz934d03zc4ul';   // 订单买家
+const OTHER_ADDR = 'tct1m083grl0az2shvc9za2sk4zyx8x4a2ynn48ccr';   // 第三方 (既非买家也非卖家)
+
+process.env.SIGN_MODE = 'js';
+process.env.SELLER_MNEMONIC = VECTOR_MNEMONIC;
+process.env.CHAIN_ID = 'trustchain-1';
+process.env.CHAIN_TX_POLL_INTERVAL_MS = '5';
+
+// ---------------------------------------------------------------- 打桩的"链"
+
+function createStubChain() {
+  const state = { order: null, orderUnavailable: false, reject: null, broadcasts: [], rpcMethods: [] };
+  const server = http.createServer((req, res) => {
+    let raw = '';
+    req.on('data', (d) => { raw += d; });
+    req.on('end', () => {
+      const url = new URL(req.url || '/', 'http://stub');
+      const send = (code, obj) => {
+        res.writeHead(code, { 'content-type': 'application/json' });
+        res.end(JSON.stringify(obj));
+      };
+      if (req.method === 'GET') {
+        // ---- LCD: 订单查询 ----
+        if (url.pathname.startsWith('/oxiaom/trustchain/order/v1/orders/')) {
+          if (state.orderUnavailable)
+            return send(503, { message: 'stub: order query unavailable' });
+          if (!state.order)
+            return send(404, { code: 5, message: 'order not found' });
+          return send(200, { order: state.order });
+        }
+        // ---- LCD: 账户 (queryAccount) ----
+        if (url.pathname.startsWith('/cosmos/auth/v1beta1/accounts/')) {
+          return send(200, { account: { base_account: { account_number: '82', sequence: '0' } } });
+        }
+        // ---- LCD: tx 查询 (事件里的 submitter / submit_path) ----
+        if (url.pathname.startsWith('/cosmos/tx/v1beta1/txs/')) {
+          const hash = url.pathname.split('/').pop();
+          return send(200, {
+            tx_response: {
+              height: '500', code: 0, raw_log: '', txhash: hash,
+              events: [
+                { type: 'confirm_order', attributes: [{ key: 'order_id', value: '7' }, { key: 'submitter', value: SIGNER_ADDR }, { key: 'submit_path', value: 'seller' }] },
+                { type: 'dispute_order', attributes: [{ key: 'order_id', value: '7' }, { key: 'disputer', value: BUYER_ADDR }, { key: 'submitter', value: SIGNER_ADDR }, { key: 'submit_path', value: 'seller' }] },
+                { type: 'ship_order', attributes: [{ key: 'order_id', value: '7' }, { key: 'seller', value: SIGNER_ADDR }] },
+              ],
+            },
+          });
+        }
+        return send(404, { message: 'not found' });
+      }
+      // ---- CometBFT JSON-RPC ----
+      let rpc = {};
+      try { rpc = JSON.parse(raw || '{}'); } catch (_) { /* ignore */ }
+      const id = rpc.id === undefined ? 1 : rpc.id;
+      const ok = (result) => send(200, { jsonrpc: '2.0', id, result });
+      state.rpcMethods.push(rpc.method);
+      if (rpc.method === 'status') {
+        return ok({
+          node_info: {
+            protocol_version: { p2p: '8', block: '11', app: '0' },
+            id: 'a'.repeat(40), listen_addr: 'tcp://127.0.0.1:26656', network: 'trustchain-1',
+            version: '0.37.0', channels: '40202122233038606100', moniker: 'stub',
+            other: { tx_index: 'on', rpc_address: 'tcp://127.0.0.1:26657' },
+          },
+          sync_info: {
+            latest_block_hash: 'AA'.repeat(32), latest_app_hash: 'BB'.repeat(32), latest_block_height: '500',
+            latest_block_time: '2026-01-01T00:00:00.000Z', catching_up: false,
+          },
+          validator_info: {
+            address: 'CC'.repeat(20),
+            pub_key: { type: 'tendermint/PubKeyEd25519', value: 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=' },
+            voting_power: '0',
+          },
+        });
+      }
+      if (rpc.method === 'genesis' || rpc.method === 'genesis_chunked') {
+        return ok({
+          genesis: {
+            genesis_time: '2026-01-01T00:00:00.000Z', chain_id: 'trustchain-1', initial_height: '1',
+            consensus_params: {
+              block: { max_bytes: '22020096', max_gas: '-1' },
+              evidence: { max_age_num_blocks: '100000', max_age_duration: '172800000000000', max_bytes: '1048576' },
+              validator: { pub_key_types: ['ed25519'] },
+            },
+            validators: [], app_hash: '', app_state: {},
+          },
+          chunks: [],
+        });
+      }
+      if (rpc.method === 'abci_info') {
+        return ok({ response: { data: '', version: '0.37.0', app_version: '1', last_block_height: '500', last_block_app_hash: 'CC' } });
+      }
+      if (rpc.method === 'broadcast_tx_sync') {
+        state.broadcasts.push(rpc.params && rpc.params.tx);
+        if (state.reject)
+          return ok({ code: state.reject.code, log: state.reject.log, codespace: 'order', hash: 'A'.repeat(64) });
+        return ok({ code: 0, log: '', codespace: '', hash: 'B'.repeat(64) });
+      }
+      console.error('[stub-chain] 未打桩的 RPC 方法:', rpc.method);
+      return send(200, { jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + rpc.method } });
+    });
+  });
+  return { server, state };
+}
+
+// ---------------------------------------------------------------- 解码 + 验签
+
+/** 从签名后的 tx (base64 TxRaw) 解出 memo + 每条 msg (看链上真正收到什么) */
+function decodeSignedTx(txBase64) {
+  const txRaw = TxRaw.decode(Buffer.from(txBase64, 'base64'));
+  const body = TxBody.decode(txRaw.bodyBytes);
+  const authInfo = AuthInfo.decode(txRaw.authInfoBytes);
+  const registry = chainSigner.makeRegistry();
+  return {
+    txRaw,
+    memo: body.memo,
+    authInfo,
+    messages: body.messages.map((m) => ({ typeUrl: m.typeUrl, value: registry.decode({ typeUrl: m.typeUrl, value: m.value }) })),
+  };
+}
+
+/**
+ * 独立验签 (cosmos SIGN_MODE_DIRECT): 用助记词重新派生 pubkey, 校验签名对重构 SignDoc 的 sha256。
+ * 这一步证明的是"这笔 tx 确实由本机卖家 key 签的" —— 也就是链上 signer 注解字段必须等于的那个地址。
+ */
+async function verifySignatureBySeller(txRaw, { accountNumber = 82, chainId = 'trustchain-1' } = {}) {
+  const { makeSignDoc } = require('@cosmjs/proto-signing');
+  const { Secp256k1, Secp256k1Signature, sha256, EnglishMnemonic, Bip39, Slip10, Slip10Curve, stringToPath } = require('@cosmjs/crypto');
+  const signDoc = makeSignDoc(txRaw.bodyBytes, txRaw.authInfoBytes, chainId, accountNumber);
+  const signDocBytes = SignDoc.encode(signDoc).finish();
+  const seed = await Bip39.mnemonicToSeed(new EnglishMnemonic(VECTOR_MNEMONIC));
+  const { privkey } = Slip10.derivePath(Slip10Curve.Secp256k1, seed, stringToPath("m/44'/118'/0'/0/0"));
+  const kp = await Secp256k1.makeKeypair(privkey);
+  const pubkey = Secp256k1.compressPubkey(kp.pubkey);
+  return Secp256k1.verifySignature(
+    Secp256k1Signature.fromFixedLength(Secp256k1.trimRecoveryByte(txRaw.signatures[0])),
+    sha256(signDocBytes),
+    pubkey,
+  );
+}
+
+// ---------------------------------------------------------------- 夹具
+
+function orderFixture(over = {}) {
+  return {
+    order_id: '7',
+    buyer: BUYER_ADDR,
+    seller: SIGNER_ADDR,
+    sku_id: 'sxo-1',
+    quantity: '1',
+    price_per_unit: '1000000',
+    total_amount: '1000000',
+    escrow_amount: '0',
+    status: 'ORDER_STATUS_SHIPPED',
+    created_at: '100',
+    shipped_at: '200',
+    confirmed_at: '0',
+    tracking_info: '',
+    dispute_reason: '',
+    resolution: '',
+    resolved_at: '0',
+    insurance_application_id: '',
+    is_insured: false,
+    source_chain: '',
+    payment_method: 'fiat',
+    psp_payment_id: '',
+    paid_at: '150',
+    settled: false,
+    ...over,
+  };
+}
+
+const stub = createStubChain();
+let apiUrl;
+let db;
+let appServer;
+
+test.before(async () => {
+  await new Promise((r) => stub.server.listen(0, '127.0.0.1', r));
+  const base = `http://127.0.0.1:${stub.server.address().port}`;
+  process.env.CHAIN_RPC_URL = base;
+  process.env.CHAIN_LCD_URL = base;
+  process.env.LCD_URL = base;
+  process.env.RPC_URL = base;
+
+  db = new Database(':memory:');
+  const { createOrderRoutes } = require('./routes/order');
+  const authPlugin = {
+    verifyToken: async (token) => (token === 'good-token' ? { userId: 'operator-1' } : null),
+  };
+  const app = express();
+  app.use(express.json());
+  app.use('/api/order', createOrderRoutes(authPlugin, { db }));
+  await new Promise((r) => { appServer = app.listen(0, '127.0.0.1', r); });
+  apiUrl = `http://127.0.0.1:${appServer.address().port}`;
+});
+
+test.after(async () => {
+  await new Promise((r) => appServer.close(r));
+  await new Promise((r) => stub.server.close(r));
+  db.close();
+});
+
+async function post(path, body, { token = 'good-token' } = {}) {
+  const headers = { 'content-type': 'application/json' };
+  if (token)
+    headers.authorization = `Bearer ${token}`;
+  const res = await fetch(`${apiUrl}/api/order${path}`, { method: 'POST', headers, body: JSON.stringify(body || {}) });
+  return { status: res.status, body: await res.json().catch(() => null) };
+}
+
+function reset(order, reject = null) {
+  stub.state.order = order;
+  stub.state.reject = reject;
+  stub.state.broadcasts.length = 0;
+}
+
+const lastTx = () => decodeSignedTx(stub.state.broadcasts[stub.state.broadcasts.length - 1]);
+
+// ---------------------------------------------------------------- /ship
+
+test('ship: 正向 — msg=seller/order_id/tracking_info (字段名不是 tracking_number), 签名者=本机卖家', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PAID' }));
+  const { status, body } = await post('/ship', { orderId: '7', trackingNumber: 'SF123456' });
+  assert.strictEqual(status, 200, JSON.stringify(body));
+  assert.ok(body.txhash);
+  assert.strictEqual(body.seller, SIGNER_ADDR);
+
+  const tx = lastTx();
+  assert.strictEqual(tx.messages.length, 1);
+  assert.strictEqual(tx.messages[0].typeUrl, '/trustchain.order.v1.MsgShipOrder');
+  assert.strictEqual(tx.messages[0].value.seller, SIGNER_ADDR);
+  assert.strictEqual(String(tx.messages[0].value.order_id), '7');
+  assert.strictEqual(tx.messages[0].value.tracking_info, 'SF123456', 'proto 字段是 tracking_info');
+  assert.strictEqual(tx.memo, '', 'ship 不带 memo');
+  assert.ok(await verifySignatureBySeller(tx.txRaw), '必须是本机卖家 key 的签名');
+});
+
+test('ship: 状态不是 PAID → 409 order_not_paid, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/ship', { orderId: '7' });
+  assert.strictEqual(status, 409);
+  assert.strictEqual(body.error, 'order_not_paid');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+// ---------------------------------------------------------------- /confirm
+
+test('confirm: 正向 — buyer 取自链上订单, submitter=本机卖家, 签名者=卖家 (D2 signer 解析验证)', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const { status, body } = await post('/confirm', { orderId: '7', rating: 5, review: '很好' });
+  assert.strictEqual(status, 200, JSON.stringify(body));
+  assert.strictEqual(body.buyer, BUYER_ADDR);
+  assert.strictEqual(body.submitter, SIGNER_ADDR);
+  assert.strictEqual(body.submit_path, 'seller', '从 tx 事件里取到 submit_path');
+
+  const tx = lastTx();
+  assert.strictEqual(tx.messages[0].typeUrl, '/trustchain.order.v1.MsgConfirmOrder');
+  const v = tx.messages[0].value;
+  assert.strictEqual(v.buyer, BUYER_ADDR, 'buyer = 实际发起方记录 = 订单买家 (不是签名者)');
+  assert.strictEqual(v.submitter, SIGNER_ADDR, 'submitter = 签名者 = 本机卖家');
+  assert.notStrictEqual(v.buyer, v.submitter, '两个字段语义不同: buyer≠submitter');
+  assert.strictEqual(String(v.order_id), '7');
+  assert.strictEqual(String(v.rating), '5');
+  assert.strictEqual(v.review, '很好');
+  assert.strictEqual(tx.memo, '', 'confirm 不带 memo');
+  assert.ok(await verifySignatureBySeller(tx.txRaw), '签名者必须是本机卖家 (链上 submitter 白名单第 1 条)');
+  // auth_info 里的公钥也必须 = 本机卖家 (链上拿它对 submitter 字段做地址比对)
+  const { decodePubkey } = require('@cosmjs/proto-signing');
+  const { Secp256k1, EnglishMnemonic, Bip39, Slip10, Slip10Curve, stringToPath } = require('@cosmjs/crypto');
+  const seed = await Bip39.mnemonicToSeed(new EnglishMnemonic(VECTOR_MNEMONIC));
+  const { privkey } = Slip10.derivePath(Slip10Curve.Secp256k1, seed, stringToPath("m/44'/118'/0'/0/0"));
+  const kp = await Secp256k1.makeKeypair(privkey);
+  const expectedPubB64 = Buffer.from(Secp256k1.compressPubkey(kp.pubkey)).toString('base64');
+  const signerPub = decodePubkey(tx.authInfo.signerInfos[0].publicKey);
+  assert.strictEqual(signerPub.value, expectedPubB64, 'auth_info 公钥 = 本机卖家公钥 → 链上 address(submitter) 比对会通过');
+});
+
+test('confirm: buyer_address 与链上订单不符 → 400, 不发链 (不信 payload 的买家字段)', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const { status, body } = await post('/confirm', { orderId: '7', buyer_address: OTHER_ADDR });
+  assert.strictEqual(status, 400);
+  assert.strictEqual(body.error, 'buyer_mismatch');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('confirm: 状态不是 SHIPPED → 409 order_not_shipped, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PAID' }));
+  const { status, body } = await post('/confirm', { orderId: '7' });
+  assert.strictEqual(status, 409);
+  assert.strictEqual(body.error, 'order_not_shipped');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('confirm: 订单不属于本店 → 403 order_not_ours, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED', seller: OTHER_ADDR }));
+  const { status, body } = await post('/confirm', { orderId: '7' });
+  assert.strictEqual(status, 403);
+  assert.strictEqual(body.error, 'order_not_ours');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('confirm: 订单不存在 (LCD 404) → 404 order_not_found', async () => {
+  reset(null);
+  const { status, body } = await post('/confirm', { orderId: '999' });
+  assert.strictEqual(status, 404);
+  assert.strictEqual(body.error, 'order_not_found');
+});
+
+test('confirm: rating 非法 → 400, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const { status, body } = await post('/confirm', { orderId: '7', rating: '9' });
+  assert.strictEqual(status, 400);
+  assert.strictEqual(body.error, 'rating_invalid');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+// ---------------------------------------------------------------- /cancel
+
+test('cancel: 正向 — canceller 缺省记卖家, seller=签名者; proto 无 reason 字段', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/cancel', { orderId: '7', reason: '买家拍错了' });
+  assert.strictEqual(status, 200, JSON.stringify(body));
+  assert.strictEqual(body.canceller, SIGNER_ADDR);
+  assert.strictEqual(body.seller, SIGNER_ADDR);
+  assert.match(String(body.note), /reason/, 'reason 只本地记录, 要明确告知');
+
+  const tx = lastTx();
+  assert.strictEqual(tx.messages[0].typeUrl, '/trustchain.order.v1.MsgCancelOrder');
+  const v = tx.messages[0].value;
+  assert.strictEqual(v.canceller, SIGNER_ADDR);
+  assert.strictEqual(v.seller, SIGNER_ADDR, 'seller 字段 = 签名者 (keeper 校验必须 = 订单卖家)');
+  assert.strictEqual(String(v.order_id), '7');
+  assert.strictEqual(v.reason, undefined, 'MsgCancelOrder 没有 reason 字段 (不该被塞进去)');
+  assert.ok(await verifySignatureBySeller(tx.txRaw));
+});
+
+test('cancel: initiator=buyer → canceller 记买家 (卖家代买家取消)', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/cancel', { orderId: '7', initiator: 'buyer' });
+  assert.strictEqual(status, 200);
+  assert.strictEqual(body.canceller, BUYER_ADDR);
+  const v = lastTx().messages[0].value;
+  assert.strictEqual(v.canceller, BUYER_ADDR);
+  assert.strictEqual(v.seller, SIGNER_ADDR, '签名者仍是本机卖家');
+});
+
+test('cancel: 发起方既非买家也非卖家 → 400 party_not_in_order, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/cancel', { orderId: '7', canceller: OTHER_ADDR });
+  assert.strictEqual(status, 400);
+  assert.strictEqual(body.error, 'party_not_in_order');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('cancel: 状态不是 PENDING → 409 order_not_pending, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const { status, body } = await post('/cancel', { orderId: '7' });
+  assert.strictEqual(status, 409);
+  assert.strictEqual(body.error, 'order_not_pending');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+// ---------------------------------------------------------------- /dispute
+
+test('dispute: 正向 — disputer 缺省记买家, submitter=卖家, memo=tb-auth:<64hex>, 意愿落库', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const evidence = 'ab'.repeat(32);
+  const { status, body } = await post('/dispute', { orderId: '7', reason: '货不对板', evidence_hash: evidence });
+  assert.strictEqual(status, 200, JSON.stringify(body));
+  assert.strictEqual(body.disputer, BUYER_ADDR, '缺省 = 卖家代买家立案');
+  assert.strictEqual(body.submitter, SIGNER_ADDR);
+  assert.strictEqual(body.submit_path, 'seller');
+  assert.strictEqual(body.evidence_hash, evidence);
+  assert.match(body.dispute_intent_hash, /^[0-9a-f]{64}$/);
+  assert.strictEqual(body.dispute_intent_memo, 'tb-auth:' + body.dispute_intent_hash);
+
+  const tx = lastTx();
+  assert.strictEqual(tx.messages[0].typeUrl, '/trustchain.order.v1.MsgDisputeOrder');
+  const v = tx.messages[0].value;
+  assert.strictEqual(v.disputer, BUYER_ADDR, 'disputer = 实际发起方 (不是签名者)');
+  assert.strictEqual(v.submitter, SIGNER_ADDR, 'submitter = 签名者');
+  assert.strictEqual(String(v.order_id), '7');
+  assert.strictEqual(v.reason, '货不对板');
+  assert.strictEqual(v.evidence_hash, evidence);
+  assert.strictEqual(tx.memo, body.dispute_intent_memo, 'memo 必须真的进 tx');
+  assert.ok(await verifySignatureBySeller(tx.txRaw));
+
+  // 意愿原文落库 + 可用原文复算回同一个 hash
+  const row = db.prepare('SELECT * FROM order_intent_log WHERE intent_hash = ?').get(body.dispute_intent_hash);
+  assert.ok(row, '申诉意愿必须落库');
+  assert.strictEqual(row.kind, 'tb.dispute.intent');
+  assert.strictEqual(row.order_id, '7');
+  assert.strictEqual(row.status, 'success');
+  assert.strictEqual(row.txhash, body.txhash);
+  const parsed = JSON.parse(row.intent_json);
+  assert.strictEqual(parsed.kind, 'tb.dispute.intent');
+  assert.strictEqual(parsed.evidence_hash, evidence);
+  const rehashed = orderIntent.buildDisputeIntentHash({
+    disputer: parsed.disputer, seller: parsed.seller, submitter: parsed.submitter,
+    order_id: parsed.order_id, reason: parsed.reason, evidence_hash: parsed.evidence_hash,
+    timestamp_ms: parsed.timestamp_ms,
+  });
+  assert.strictEqual(rehashed.hash, body.dispute_intent_hash, '原文复算 = 链上 memo 的 hash');
+});
+
+test('dispute: evidence_hash 非法 (不是 64 位小写 hex) → 400, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  for (const bad of ['xyz', 'AB'.repeat(32), 'ab'.repeat(31)]) {
+    const { status, body } = await post('/dispute', { orderId: '7', reason: 'x', evidence_hash: bad });
+    assert.strictEqual(status, 400, `${bad} 应被拒`);
+    assert.strictEqual(body.error, 'evidence_hash_invalid');
+  }
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('dispute: reason 缺失 → 400 reason_required, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  const { status, body } = await post('/dispute', { orderId: '7' });
+  assert.strictEqual(status, 400);
+  assert.strictEqual(body.error, 'reason_required');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('dispute: 状态不允许 (PENDING) → 409 order_not_disputable, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/dispute', { orderId: '7', reason: 'x' });
+  assert.strictEqual(status, 409);
+  assert.strictEqual(body.error, 'order_not_disputable');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('dispute: CONFIRMED 但已结算 → 409 order_settled, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_CONFIRMED', settled: true }));
+  const { status, body } = await post('/dispute', { orderId: '7', reason: 'x' });
+  assert.strictEqual(status, 409);
+  assert.strictEqual(body.error, 'order_settled');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+// ---------------------------------------------------------------- 链上拒绝
+
+test('链上拒 (状态机) → 502 + hint=status_not_shipped + raw_log 原样回传', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }),
+    { code: 11, log: 'failed to execute message; message index: 0: order is not shipped, cannot confirm' });
+  const { status, body } = await post('/confirm', { orderId: '7' });
+  assert.strictEqual(status, 502);
+  assert.strictEqual(body.error, 'chain_tx_failed');
+  assert.strictEqual(body.hint, 'status_not_shipped');
+  assert.strictEqual(body.code, 11);
+  assert.match(body.raw_log, /order is not shipped, cannot confirm/, 'raw_log 必须原样, 不能吞');
+  stub.state.reject = null;
+});
+
+test('confirm: LCD 读不到订单 (fail-open) — 未带 buyer_address 时 503 拒发, 带了合法值则放行', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }));
+  stub.state.orderUnavailable = true;
+  const noBuyer = await post('/confirm', { orderId: '7' });
+  assert.strictEqual(noBuyer.status, 503);
+  assert.strictEqual(noBuyer.body.error, 'order_lookup_unavailable');
+  assert.strictEqual(stub.state.broadcasts.length, 0, '宁可不发, 也不发一笔注定被链拒 (buyer 空) 的 tx');
+  const withBuyer = await post('/confirm', { orderId: '7', buyer_address: BUYER_ADDR });
+  assert.strictEqual(withBuyer.status, 200, JSON.stringify(withBuyer.body));
+  const v = lastTx().messages[0].value;
+  assert.strictEqual(v.buyer, BUYER_ADDR);
+  assert.strictEqual(v.submitter, SIGNER_ADDR);
+  stub.state.orderUnavailable = false;
+});
+
+test('链上拒 (submitter 不在白名单) → 502 + hint=submitter_not_allowed', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_SHIPPED' }),
+    { code: 5, log: "failed to execute message; message index: 0: only the order's seller, the dispute authority, or (after auto_confirm_timeout) any account can submit this; submitter=tct1xxx" });
+  const { status, body } = await post('/confirm', { orderId: '7' });
+  assert.strictEqual(status, 502);
+  assert.strictEqual(body.hint, 'submitter_not_allowed');
+  assert.match(body.raw_log, /only the order's seller/);
+  stub.state.reject = null;
+});
+
+// ---------------------------------------------------------------- 鉴权 / create 停用
+
+test('未带 token / 错 token → 401 (操作员鉴权沿用 JWT 口径)', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  assert.strictEqual((await post('/cancel', { orderId: '7' }, { token: '' })).status, 401);
+  assert.strictEqual((await post('/cancel', { orderId: '7' }, { token: 'bad' })).status, 401);
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('order_id 非数字 → 400 order_id_invalid, 不发链', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/cancel', { orderId: 'abc' });
+  assert.strictEqual(status, 400);
+  assert.strictEqual(body.error, 'order_id_invalid');
+  assert.strictEqual(stub.state.broadcasts.length, 0);
+});
+
+test('POST /create → 410 停用 + 指路 POST /api/orders (不做第二套下单)', async () => {
+  reset(orderFixture({ status: 'ORDER_STATUS_PENDING' }));
+  const { status, body } = await post('/create', { seller: SIGNER_ADDR, productId: 'sxo-1', amount: 1, price: 1 });
+  assert.strictEqual(status, 410);
+  assert.strictEqual(body.error, 'endpoint_gone');
+  assert.strictEqual(body.use, 'POST /api/orders');
+  assert.strictEqual(stub.state.broadcasts.length, 0, 'create 绝不发链');
+});

package/test-p2p-message.d.ts

@@ -0,0 +1,13 @@
+/**
+ * M0 私信止血 — 手动验证脚本
+ *
+ * 演示新模型（2026-07-30 M0 后）：
+ * 1. 客户端自持钱包私钥（secp256k1）+ 消息私钥（RSA），服务端只注册公钥
+ * 2. 发送：客户端签名（X-Address/X-Pubkey/X-Signature/X-Timestamp/X-Nonce 五头）
+ * 3. 读取：服务端只回密文，解密在客户端
+ *
+ * 直接调插件层（不起 HTTP 服务）；路由层的签名信封构造见 routes/p2p-message.ts 头注释。
+ * 运行: npx ts-node src/test-p2p-message.ts
+ */
+export {};
+//# sourceMappingURL=test-p2p-message.d.ts.map

package/test-p2p-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-p2p-message.d.ts","sourceRoot":"","sources":["../src/test-p2p-message.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/test-p2p-message.js

@@ -0,0 +1,106 @@
+"use strict";
+/**
+ * M0 私信止血 — 手动验证脚本
+ *
+ * 演示新模型（2026-07-30 M0 后）：
+ * 1. 客户端自持钱包私钥（secp256k1）+ 消息私钥（RSA），服务端只注册公钥
+ * 2. 发送：客户端签名（X-Address/X-Pubkey/X-Signature/X-Timestamp/X-Nonce 五头）
+ * 3. 读取：服务端只回密文，解密在客户端
+ *
+ * 直接调插件层（不起 HTTP 服务）；路由层的签名信封构造见 routes/p2p-message.ts 头注释。
+ * 运行: npx ts-node src/test-p2p-message.ts
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const p2p_message_1 = require("./plugins/p2p-message");
+const crypto = __importStar(require("crypto"));
+async function testP2PMessage() {
+    console.log('🧪 M0 P2P Message — 新模型手动验证\n');
+    const p2pPlugin = new p2p_message_1.P2PMessagePlugin({ encryptionEnabled: true });
+    await p2pPlugin.init('./data/test-p2p-messages.db');
+    // 两个用户的链地址（演示用伪地址；真实场景由钱包 secp256k1 pubkey 派生）
+    const user1 = 'tct1user1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa';
+    const user2 = 'tct1user2bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb';
+    // ✅ M0：密钥对在客户端生成，私钥不出设备；服务端只注册公钥
+    console.log('1. 客户端生成消息密钥对（私钥自持）');
+    const user2Keys = crypto.generateKeyPairSync('rsa', {
+        modulusLength: 2048,
+        publicKeyEncoding: { type: 'spki', format: 'pem' },
+        privateKeyEncoding: { type: 'pkcs8', format: 'pem' }
+    });
+    p2pPlugin.registerPubkey(user2, user2Keys.publicKey);
+    console.log('   user2 公钥已注册到索引器（服务端无私钥）\n');
+    // ✅ M0：未注册公钥的接收者会被拒（不再"没公钥就存明文"）
+    console.log('2. 反向用例：接收者未注册公钥 → 拒发');
+    try {
+        await p2pPlugin.sendMessage(user1, 'tct1nokeycccccccccccccccccccccccccccccccc', 'hello', 'text');
+        console.log('   ❌ 应该拒绝却成功了\n');
+    }
+    catch (e) {
+        console.log('   ✅ 拒发:', e.message, '\n');
+    }
+    // 发送消息（真实场景 signature 由路由层验过的钱包签名传入）
+    console.log('3. 发送加密消息 user1 → user2');
+    const message1 = await p2pPlugin.sendMessage(user1, user2, 'Hello! This is a test message.', 'text', undefined, 'demo-sig');
+    console.log('   Message ID:', message1.id);
+    console.log('   Content (ciphertext):', message1.content.slice(0, 60) + '...\n');
+    // 服务端只回密文
+    console.log('4. 服务端读取（只回密文，无明文路径）');
+    const messages = await p2pPlugin.getMessages(user1, user2);
+    const row = messages[0];
+    console.log('   服务端返回 content:', row.content.slice(0, 60) + '...');
+    console.log('   ✅ 服务端无明文（M0：decryptedContent 字段已删）\n');
+    // 客户端解密（私钥在客户端）
+    console.log('5. 客户端用自持私钥解密');
+    const [encryptedKeyB64, encrypted] = row.content.split(':');
+    const keyMaterial = crypto.privateDecrypt(user2Keys.privateKey, Buffer.from(encryptedKeyB64, 'base64'));
+    const key = keyMaterial.slice(0, 32);
+    const iv = keyMaterial.slice(32, 48);
+    const authTag = keyMaterial.slice(48);
+    const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(authTag);
+    let plain = decipher.update(encrypted, 'hex', 'utf8');
+    plain += decipher.final('utf8');
+    console.log('   解密结果:', plain);
+    console.log('   ✅ 与原文一致:', plain === 'Hello! This is a test message.');
+    // 会话与未读数
+    const conversations = await p2pPlugin.getConversations(user1);
+    const unreadCount = await p2pPlugin.getUnreadCount(user2);
+    console.log('6. 会话数:', conversations.length, '/ user2 未读:', unreadCount);
+    await p2pPlugin.close();
+    console.log('\n✅ M0 新模型验证完成');
+}
+testP2PMessage().catch(console.error);
+//# sourceMappingURL=test-p2p-message.js.map

package/test-p2p-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-p2p-message.js","sourceRoot":"","sources":["../src/test-p2p-message.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uDAAyD;AACzD,+CAAiC;AAEjC,KAAK,UAAU,cAAc;IAC3B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAI,8BAAgB,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,KAAK,GAAG,4CAA4C,CAAC;IAC3D,MAAM,KAAK,GAAG,4CAA4C,CAAC;IAE3D,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;QAClD,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAE5C,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,2CAA2C,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,qCAAqC;IACrC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAC1C,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAC9E,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;IAEjF,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IAEvD,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACtD,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,KAAK,gCAAgC,CAAC,CAAC;IAEvE,SAAS;IACT,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAEzE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChC,CAAC;AAED,cAAc,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}