trustbase-seller-backend 0.1.5

package/utils/jwt.d.ts

@@ -0,0 +1,110 @@
+/**
+ * TrustChain OAuth Bridge — JWT helper (HS256, 实战锁版)
+ *
+ * 设计要点 (baobei #312/#314 实战锁版, 2026-08-23):
+ * - HS256 签名 (HMAC-SHA256), 用 process.env.JWT_SECRET 或 default
+ * - header.payload.signature 三段 base64url
+ * - iss/aud/exp/iat/nbf 全套标准 claim
+ * - sub = chain_address (跨平台身份主键, Lesson #313 锁版)
+ * - platform claim: wechat | alipay | douyin (哪个平台签发)
+ *
+ * 实战风格 (Lesson #266a fail loud):
+ * - verify 失败抛 JwtVerifyError (不静默 return null)
+ * - expired token 单独 message, 客户端可区分 refresh 路径
+ *
+ * 跟 Lesson #335 三处一致:
+ * - DB: users.chain_address
+ * - API: sub claim
+ * - JWT: sub + chain_address claim
+ *
+ * @see docs/oauth-bridge-v0.1-spec.md
+ */
+export declare class JwtSignError extends Error {
+    constructor(message: string);
+}
+export declare class JwtVerifyError extends Error {
+    readonly code: 'malformed' | 'invalid_signature' | 'expired' | 'not_yet_valid' | 'wrong_issuer' | 'wrong_audience';
+    constructor(code: 'malformed' | 'invalid_signature' | 'expired' | 'not_yet_valid' | 'wrong_issuer' | 'wrong_audience', message: string);
+}
+export type OAuthPlatform = 'wechat' | 'alipay' | 'douyin';
+export interface OAuthBridgeClaims {
+    /** sub = chain address (主键, Lesson #313) */
+    sub: string;
+    /** 冗余 chain_address (跟 sub 一致, Lesson #335 三处一致) */
+    chain_address: string;
+    /** 签发平台: wechat/alipay/douyin */
+    platform: OAuthPlatform;
+    /** 该平台的 openid (audit 链, 不参与鉴权) */
+    openid: string;
+    /** 签发者 (节点 ID) */
+    iss: string;
+    /** 受众 (固定 'trustchain-oauth-bridge') */
+    aud: string;
+    /** issued at (秒) */
+    iat: number;
+    /** expires at (秒) */
+    exp: number;
+    /** not before (秒, 可选) */
+    nbf?: number;
+    /** JWT ID (jti, 可选, 用于精细撤销) */
+    jti?: string;
+}
+export interface SignOptions {
+    /** 过期秒数, 默认 3600 (1h) */
+    expiresIn?: number;
+    /** not-before 偏移秒数, 默认 0 (立即生效) */
+    notBefore?: number;
+    /** 自定义 jti, 默认 UUID */
+    jti?: string;
+}
+export interface VerifyOptions {
+    /** 校验 iss: 不传 = 不校验, 传字符串 = 必须等于该值 */
+    validateIss?: string;
+    /** 校验 aud, 默认 true (固定 'trustchain-oauth-bridge') */
+    validateAud?: boolean;
+    /** clock skew tolerance (秒), 默认 0 */
+    clockTolerance?: number;
+}
+export declare const OAUTH_BRIDGE_AUDIENCE = "trustchain-oauth-bridge";
+/**
+ * 获取 JWT 签名密钥
+ *
+ * 优先级 (Lesson #345 写路径风格):
+ * 1. process.env.JWT_SECRET (生产)
+ * 2. process.env.OAUTH_BRIDGE_SECRET (备用)
+ * 3. 默认固定 secret (测试用, 不安全)
+ *
+ * @internal 在生产环境必须设置 JWT_SECRET, 否则 fail loud 警告
+ */
+export declare function getJwtSecret(): Buffer;
+/**
+ * 重置缓存 (测试用)
+ */
+export declare function _resetJwtSecretCache(): void;
+/**
+ * 签发 JWT
+ *
+ * @throws JwtSignError when input invalid
+ */
+export declare function signJwt(claims: Omit<OAuthBridgeClaims, 'iss' | 'aud' | 'iat' | 'exp' | 'nbf' | 'jti'> & {
+    iss?: string;
+    aud?: string;
+}, options?: SignOptions, signerNodeId?: string): string;
+/**
+ * 校验 JWT
+ *
+ * @throws JwtVerifyError on any failure (Lesson #266a fail loud, 不静默)
+ */
+export declare function verifyJwt(token: string, options?: VerifyOptions): OAuthBridgeClaims;
+export interface VerifyResult {
+    ok: boolean;
+    claims?: OAuthBridgeClaims;
+    error?: string;
+    errorCode?: JwtVerifyError['code'];
+}
+export declare function tryVerifyJwt(token: string, options?: VerifyOptions): VerifyResult;
+/**
+ * 仅解析 payload (不验签), 用于 debug / 显示
+ */
+export declare function decodeJwtPayload(token: string): OAuthBridgeClaims | null;
+//# sourceMappingURL=jwt.d.ts.map

package/utils/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/utils/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,SAAgB,IAAI,EAChB,WAAW,GACX,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,cAAc,GACd,gBAAgB,CAAC;gBAEnB,IAAI,EACA,WAAW,GACX,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,cAAc,GACd,gBAAgB,EACpB,OAAO,EAAE,MAAM;CAMlB;AAID,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,QAAQ,EAAE,aAAa,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qCAAqC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAiCD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAM/D;;;;;;;;;GASG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAqBrC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAID;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,EACD,OAAO,GAAE,WAAgB,EACzB,YAAY,GAAE,MAA0B,GACvC,MAAM,CA4CR;AAID;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,iBAAiB,CAwEvF;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;CACpC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,YAAY,CAUjF;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQxE"}

package/utils/jwt.js

@@ -0,0 +1,275 @@
+"use strict";
+/**
+ * TrustChain OAuth Bridge — JWT helper (HS256, 实战锁版)
+ *
+ * 设计要点 (baobei #312/#314 实战锁版, 2026-08-23):
+ * - HS256 签名 (HMAC-SHA256), 用 process.env.JWT_SECRET 或 default
+ * - header.payload.signature 三段 base64url
+ * - iss/aud/exp/iat/nbf 全套标准 claim
+ * - sub = chain_address (跨平台身份主键, Lesson #313 锁版)
+ * - platform claim: wechat | alipay | douyin (哪个平台签发)
+ *
+ * 实战风格 (Lesson #266a fail loud):
+ * - verify 失败抛 JwtVerifyError (不静默 return null)
+ * - expired token 单独 message, 客户端可区分 refresh 路径
+ *
+ * 跟 Lesson #335 三处一致:
+ * - DB: users.chain_address
+ * - API: sub claim
+ * - JWT: sub + chain_address claim
+ *
+ * @see docs/oauth-bridge-v0.1-spec.md
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAUTH_BRIDGE_AUDIENCE = exports.JwtVerifyError = exports.JwtSignError = void 0;
+exports.getJwtSecret = getJwtSecret;
+exports._resetJwtSecretCache = _resetJwtSecretCache;
+exports.signJwt = signJwt;
+exports.verifyJwt = verifyJwt;
+exports.tryVerifyJwt = tryVerifyJwt;
+exports.decodeJwtPayload = decodeJwtPayload;
+const crypto = __importStar(require("crypto"));
+// ===================== 错误类型 (Lesson #266a fail loud) =====================
+class JwtSignError extends Error {
+    constructor(message) {
+        super(`[JwtSignError] ${message}`);
+        this.name = 'JwtSignError';
+    }
+}
+exports.JwtSignError = JwtSignError;
+class JwtVerifyError extends Error {
+    code;
+    constructor(code, message) {
+        super(`[JwtVerifyError:${code}] ${message}`);
+        this.name = 'JwtVerifyError';
+        this.code = code;
+    }
+}
+exports.JwtVerifyError = JwtVerifyError;
+// ===================== base64url 编解码 =====================
+function base64UrlEncode(input) {
+    const buf = typeof input === 'string' ? Buffer.from(input, 'utf8') : input;
+    return buf
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
+function base64UrlDecode(input) {
+    // 还原 padding
+    const pad = (4 - (input.length % 4)) % 4;
+    const padded = input + '='.repeat(pad);
+    const b64 = padded.replace(/-/g, '+').replace(/_/g, '/');
+    return Buffer.from(b64, 'base64');
+}
+function encodeHeader() {
+    const header = { alg: 'HS256', typ: 'JWT' };
+    return base64UrlEncode(JSON.stringify(header));
+}
+exports.OAUTH_BRIDGE_AUDIENCE = 'trustchain-oauth-bridge';
+// ===================== 密钥 =====================
+let _cachedSecret = null;
+/**
+ * 获取 JWT 签名密钥
+ *
+ * 优先级 (Lesson #345 写路径风格):
+ * 1. process.env.JWT_SECRET (生产)
+ * 2. process.env.OAUTH_BRIDGE_SECRET (备用)
+ * 3. 默认固定 secret (测试用, 不安全)
+ *
+ * @internal 在生产环境必须设置 JWT_SECRET, 否则 fail loud 警告
+ */
+function getJwtSecret() {
+    if (_cachedSecret)
+        return _cachedSecret;
+    const secret = process.env.JWT_SECRET || process.env.OAUTH_BRIDGE_SECRET;
+    if (secret) {
+        if (secret.length < 32) {
+            console.warn('[JWT] WARN: secret shorter than 32 chars, weak. Consider rotating.');
+        }
+        _cachedSecret = Buffer.from(secret, 'utf8');
+        return _cachedSecret;
+    }
+    // 默认 fallback (仅测试)
+    console.warn('[JWT] WARN: no JWT_SECRET env, using insecure default. Set JWT_SECRET in production!');
+    _cachedSecret = Buffer.from('trustchain-oauth-bridge-default-insecure-secret-DO-NOT-USE-IN-PROD', 'utf8');
+    return _cachedSecret;
+}
+/**
+ * 重置缓存 (测试用)
+ */
+function _resetJwtSecretCache() {
+    _cachedSecret = null;
+}
+// ===================== Sign =====================
+/**
+ * 签发 JWT
+ *
+ * @throws JwtSignError when input invalid
+ */
+function signJwt(claims, options = {}, signerNodeId = 'trustchain-node') {
+    if (!claims || !claims.sub || typeof claims.sub !== 'string') {
+        throw new JwtSignError('sub (chain address) required');
+    }
+    if (!claims.platform) {
+        throw new JwtSignError('platform required');
+    }
+    if (!claims.openid || typeof claims.openid !== 'string') {
+        throw new JwtSignError('openid required');
+    }
+    if (!claims.chain_address) {
+        throw new JwtSignError('chain_address required (Lesson #335 三处一致)');
+    }
+    if (claims.sub !== claims.chain_address) {
+        // Lesson #335 三处一致: DB chain_address == JWT sub == API 参数
+        throw new JwtSignError(`sub (${claims.sub}) must equal chain_address (${claims.chain_address})`);
+    }
+    const now = Math.floor(Date.now() / 1000);
+    const expiresIn = options.expiresIn ?? 3600;
+    const fullClaims = {
+        sub: claims.sub,
+        chain_address: claims.chain_address,
+        platform: claims.platform,
+        openid: claims.openid,
+        iss: claims.iss || signerNodeId,
+        aud: claims.aud || exports.OAUTH_BRIDGE_AUDIENCE,
+        iat: now,
+        exp: now + expiresIn,
+        nbf: options.notBefore ? now + options.notBefore : undefined,
+        jti: options.jti || crypto.randomUUID(),
+    };
+    const header = encodeHeader();
+    const payload = base64UrlEncode(JSON.stringify(fullClaims));
+    const signingInput = `${header}.${payload}`;
+    const secret = getJwtSecret();
+    const sig = crypto.createHmac('sha256', secret).update(signingInput).digest();
+    const signature = base64UrlEncode(sig);
+    return `${signingInput}.${signature}`;
+}
+// ===================== Verify =====================
+/**
+ * 校验 JWT
+ *
+ * @throws JwtVerifyError on any failure (Lesson #266a fail loud, 不静默)
+ */
+function verifyJwt(token, options = {}) {
+    if (!token || typeof token !== 'string') {
+        throw new JwtVerifyError('malformed', 'token empty');
+    }
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw new JwtVerifyError('malformed', 'expected 3 parts (header.payload.signature)');
+    }
+    const [headerB64, payloadB64, signatureB64] = parts;
+    // 验签 (constant-time 比较)
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const expectedSig = crypto
+        .createHmac('sha256', getJwtSecret())
+        .update(signingInput)
+        .digest();
+    let givenSig;
+    try {
+        givenSig = base64UrlDecode(signatureB64);
+    }
+    catch {
+        throw new JwtVerifyError('malformed', 'signature base64url decode failed');
+    }
+    if (expectedSig.length !== givenSig.length ||
+        !crypto.timingSafeEqual(expectedSig, givenSig)) {
+        throw new JwtVerifyError('invalid_signature', 'signature mismatch');
+    }
+    // 解析 payload
+    let payload;
+    try {
+        payload = JSON.parse(base64UrlDecode(payloadB64).toString('utf8'));
+    }
+    catch {
+        throw new JwtVerifyError('malformed', 'payload JSON parse failed');
+    }
+    // 校验必需 claim
+    if (!payload.sub || !payload.iat || !payload.exp) {
+        throw new JwtVerifyError('malformed', 'payload missing sub/iat/exp');
+    }
+    const tolerance = options.clockTolerance ?? 0;
+    const now = Math.floor(Date.now() / 1000);
+    // exp
+    if (payload.exp + tolerance < now) {
+        throw new JwtVerifyError('expired', `token expired at ${payload.exp}`);
+    }
+    // nbf
+    if (payload.nbf && payload.nbf - tolerance > now) {
+        throw new JwtVerifyError('not_yet_valid', `token not valid until ${payload.nbf}`);
+    }
+    // aud (默认校验)
+    if (options.validateAud !== false) {
+        if (payload.aud !== exports.OAUTH_BRIDGE_AUDIENCE) {
+            throw new JwtVerifyError('wrong_audience', `expected '${exports.OAUTH_BRIDGE_AUDIENCE}', got '${payload.aud}'`);
+        }
+    }
+    // iss (默认不校验, 多 issuer 场景)
+    if (options.validateIss && payload.iss !== options.validateIss) {
+        throw new JwtVerifyError('wrong_issuer', `expected iss='${options.validateIss}'`);
+    }
+    return payload;
+}
+function tryVerifyJwt(token, options) {
+    try {
+        const claims = verifyJwt(token, options);
+        return { ok: true, claims };
+    }
+    catch (e) {
+        if (e instanceof JwtVerifyError) {
+            return { ok: false, error: e.message, errorCode: e.code };
+        }
+        return { ok: false, error: e.message };
+    }
+}
+// ===================== 工具: decode (不验签) =====================
+/**
+ * 仅解析 payload (不验签), 用于 debug / 显示
+ */
+function decodeJwtPayload(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        return JSON.parse(base64UrlDecode(parts[1]).toString('utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwt.js.map

package/utils/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/utils/jwt.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiIH,oCAqBC;AAKD,oDAEC;AASD,0BAmDC;AASD,8BAwEC;AAWD,oCAUC;AAOD,4CAQC;AA5UD,+CAAiC;AAEjC,4EAA4E;AAE5E,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvB,IAAI,CAMC;IACrB,YACE,IAMoB,EACpB,OAAe;QAEf,KAAK,CAAC,mBAAmB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAtBD,wCAsBC;AA+CD,4DAA4D;AAE5D,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,OAAO,GAAG;SACP,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,aAAa;IACb,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AASD,SAAS,YAAY;IACnB,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACvD,OAAO,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAEY,QAAA,qBAAqB,GAAG,yBAAyB,CAAC;AAE/D,iDAAiD;AAEjD,IAAI,aAAa,GAAkB,IAAI,CAAC;AAExC;;;;;;;;;GASG;AACH,SAAgB,YAAY;IAC1B,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CACV,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,oBAAoB;IACpB,OAAO,CAAC,IAAI,CACV,sFAAsF,CACvF,CAAC;IACF,aAAa,GAAG,MAAM,CAAC,IAAI,CACzB,oEAAoE,EACpE,MAAM,CACP,CAAC;IACF,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,mDAAmD;AAEnD;;;;GAIG;AACH,SAAgB,OAAO,CACrB,MAGC,EACD,UAAuB,EAAE,EACzB,eAAuB,iBAAiB;IAExC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,YAAY,CAAC,8BAA8B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,2CAA2C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;QACxC,0DAA0D;QAC1D,MAAM,IAAI,YAAY,CACpB,QAAQ,MAAM,CAAC,GAAG,+BAA+B,MAAM,CAAC,aAAa,GAAG,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,UAAU,GAAsB;QACpC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,YAAY;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,6BAAqB;QACxC,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,SAAS;QACpB,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC5D,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE;KACxC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IAE5C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEvC,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,qDAAqD;AAErD;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAAa,EAAE,UAAyB,EAAE;IAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;IAEpD,wBAAwB;IACxB,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM;SACvB,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;SACpC,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,EAAE,CAAC;IACZ,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtC,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IACtE,CAAC;IAED,aAAa;IACb,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IACrE,CAAC;IAED,aAAa;IACb,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM;IACN,IAAI,OAAO,CAAC,GAAG,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,oBAAoB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM;IACN,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,aAAa;IACb,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,GAAG,KAAK,6BAAqB,EAAE,CAAC;YAC1C,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,aAAa,6BAAqB,WAAW,OAAO,CAAC,GAAG,GAAG,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/D,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,iBAAiB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAWD,SAAgB,YAAY,CAAC,KAAa,EAAE,OAAuB;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,cAAc,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/utils/qrcode-reader.d.ts

@@ -0,0 +1,22 @@
+/**
+ * 二维码识别模块
+ * 使用 jsqr 库识别二维码
+ */
+/**
+ * 二维码识别器
+ */
+export declare class QRCodeReader {
+    /**
+     * 从图片文件识别二维码
+     */
+    static readFromFile(filePath: string): Promise<string>;
+    /**
+     * 从 Buffer 识别二维码
+     */
+    static readFromBuffer(buffer: Buffer): Promise<string>;
+    /**
+     * 从 ImageData 识别二维码（用于浏览器）
+     */
+    static readFromImageData(imageData: any): string | null;
+}
+//# sourceMappingURL=qrcode-reader.d.ts.map

package/utils/qrcode-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode-reader.d.ts","sourceRoot":"","sources":["../../src/utils/qrcode-reader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;GAEG;AACH,qBAAa,YAAY;IACvB;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoB5D;;OAEG;WACU,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoB5D;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI;CAIxD"}

package/utils/qrcode-reader.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * 二维码识别模块
+ * 使用 jsqr 库识别二维码
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QRCodeReader = void 0;
+const jsqr_1 = __importDefault(require("jsqr"));
+// 2026-09-20 kimi: canvas 改懒加载 (native 依赖, 仅 readFromFile 路径用; 商户版免装)
+// 2026-09-22 kimi: 修懒加载 bug (之前调用点用未赋值的 canvas_1 变量, 永远 TypeError);
+// canvas 已挪 optionalDependencies — 缺库时一次性警告并优雅降级 (二维码图片识别不可用)
+let canvas_1;
+let canvasWarned = false;
+function _canvas() {
+    if (!canvas_1) {
+        canvas_1 = require("canvas"); // 缺库抛错, 由调用方 catch 转成业务错误
+        if (!canvasWarned) { canvasWarned = true; }
+    }
+    return canvas_1;
+}
+function canvasAvailable() {
+    try { _canvas(); return true; } catch (_) {
+        if (!canvasWarned) {
+            canvasWarned = true;
+            console.warn("[qrcode-reader] canvas 未安装 (可选原生模块), 二维码图片识别功能禁用; 安装: npm install canvas");
+        }
+        return false;
+    }
+}
+/**
+ * 二维码识别器
+ */
+class QRCodeReader {
+    /**
+     * 从图片文件识别二维码
+     */
+    static async readFromFile(filePath) {
+        if (!canvasAvailable()) throw new Error('二维码图片识别不可用: canvas 未安装 (可选原生模块), 请执行 npm install canvas 后重试');
+        try {
+            const cv = _canvas();
+            const image = await cv.loadImage(filePath);
+            const canvas = cv.createCanvas(image.width, image.height);
+            const ctx = canvas.getContext('2d');
+            ctx.drawImage(image, 0, 0);
+            const imageData = ctx.getImageData(0, 0, image.width, image.height);
+            const code = (0, jsqr_1.default)(imageData.data, imageData.width, imageData.height);
+            if (!code) {
+                throw new Error('No QR code found in image');
+            }
+            return code.data;
+        }
+        catch (error) {
+            throw new Error('Failed to read QR code: ' + error.message);
+        }
+    }
+    /**
+     * 从 Buffer 识别二维码
+     */
+    static async readFromBuffer(buffer) {
+        if (!canvasAvailable()) throw new Error('二维码图片识别不可用: canvas 未安装 (可选原生模块), 请执行 npm install canvas 后重试');
+        try {
+            const cv = _canvas();
+            const image = await cv.loadImage(buffer);
+            const canvas = cv.createCanvas(image.width, image.height);
+            const ctx = canvas.getContext('2d');
+            ctx.drawImage(image, 0, 0);
+            const imageData = ctx.getImageData(0, 0, image.width, image.height);
+            const code = (0, jsqr_1.default)(imageData.data, imageData.width, imageData.height);
+            if (!code) {
+                throw new Error('No QR code found in image');
+            }
+            return code.data;
+        }
+        catch (error) {
+            throw new Error('Failed to read QR code: ' + error.message);
+        }
+    }
+    /**
+     * 从 ImageData 识别二维码（用于浏览器）
+     */
+    static readFromImageData(imageData) {
+        const code = (0, jsqr_1.default)(imageData.data, imageData.width, imageData.height);
+        return code ? code.data : null;
+    }
+}
+exports.QRCodeReader = QRCodeReader;
+//# sourceMappingURL=qrcode-reader.js.map

package/utils/qrcode-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode-reader.js","sourceRoot":"","sources":["../../src/utils/qrcode-reader.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAEH,gDAAwB;AACxB,mCAAwD;AAExD;;GAEG;AACH,MAAa,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,kBAAS,EAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAE3B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAA,cAAI,EAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAc;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,kBAAS,EAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAE3B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAA,cAAI,EAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAErE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAc;QACrC,MAAM,IAAI,GAAG,IAAA,cAAI,EAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;CACF;AAtDD,oCAsDC"}

package/utils/qrcode.d.ts

@@ -0,0 +1,26 @@
+/**
+ * 二维码生成模块
+ * 使用 qrcode 库生成二维码
+ */
+/**
+ * 二维码管理器
+ */
+export declare class QRCodeManager {
+    /**
+     * 生成二维码（Data URL）
+     */
+    static generateDataURL(text: string, size?: number): Promise<string>;
+    /**
+     * 生成二维码（Buffer）
+     */
+    static generateBuffer(text: string, size?: number): Promise<Buffer>;
+    /**
+     * 生成二维码（SVG 字符串）
+     */
+    static generateSVG(text: string, size?: number): Promise<string>;
+    /**
+     * 生成终端二维码（ASCII）
+     */
+    static generateTerminal(text: string): Promise<string>;
+}
+//# sourceMappingURL=qrcode.d.ts.map

package/utils/qrcode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode.d.ts","sourceRoot":"","sources":["../../src/utils/qrcode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,qBAAa,aAAa;IACxB;;OAEG;WACU,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB/E;;OAEG;WACU,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB9E;;OAEG;WACU,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB3E;;OAEG;WACU,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAU7D"}

package/utils/qrcode.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * 二维码生成模块
+ * 使用 qrcode 库生成二维码
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QRCodeManager = void 0;
+const qrcode_1 = __importDefault(require("qrcode"));
+/**
+ * 二维码管理器
+ */
+class QRCodeManager {
+    /**
+     * 生成二维码（Data URL）
+     */
+    static async generateDataURL(text, size = 512) {
+        try {
+            return await qrcode_1.default.toDataURL(text, {
+                width: size,
+                margin: 2,
+                color: {
+                    dark: '#000000',
+                    light: '#FFFFFF',
+                },
+                // 宝贝 2026-06-18: 改 L 纠错，v40 L 可存 2953 字节（之前 M 只有 2331，超出）
+                // 2484 字节 base64 + seeds 之后会超过 M
+                errorCorrectionLevel: 'L',
+            });
+        }
+        catch (error) {
+            throw new Error('Failed to generate QR code: ' + error.message);
+        }
+    }
+    /**
+     * 生成二维码（Buffer）
+     */
+    static async generateBuffer(text, size = 512) {
+        try {
+            return await qrcode_1.default.toBuffer(text, {
+                width: size,
+                margin: 2,
+                color: {
+                    dark: '#000000',
+                    light: '#FFFFFF',
+                },
+                errorCorrectionLevel: 'L',
+            });
+        }
+        catch (error) {
+            throw new Error('Failed to generate QR code: ' + error.message);
+        }
+    }
+    /**
+     * 生成二维码（SVG 字符串）
+     */
+    static async generateSVG(text, size = 512) {
+        try {
+            return await qrcode_1.default.toString(text, {
+                type: 'svg',
+                width: size,
+                margin: 2,
+                color: {
+                    dark: '#000000',
+                    light: '#FFFFFF',
+                },
+                errorCorrectionLevel: 'L',
+            });
+        }
+        catch (error) {
+            throw new Error('Failed to generate QR code: ' + error.message);
+        }
+    }
+    /**
+     * 生成终端二维码（ASCII）
+     */
+    static async generateTerminal(text) {
+        try {
+            return await qrcode_1.default.toString(text, {
+                type: 'terminal',
+                small: true,
+            });
+        }
+        catch (error) {
+            throw new Error('Failed to generate QR code: ' + error.message);
+        }
+    }
+}
+exports.QRCodeManager = QRCodeManager;
+//# sourceMappingURL=qrcode.js.map

package/utils/qrcode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode.js","sourceRoot":"","sources":["../../src/utils/qrcode.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAEH,oDAA4B;AAE5B;;GAEG;AACH,MAAa,aAAa;IACxB;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,OAAe,GAAG;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,SAAS,CAAC,IAAI,EAAE;gBAClC,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,CAAC;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,SAAS;iBACjB;gBACD,0DAA0D;gBAC1D,iCAAiC;gBACjC,oBAAoB,EAAE,GAAG;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,OAAe,GAAG;QAC1D,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,CAAC;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,SAAS;iBACjB;gBACD,oBAAoB,EAAE,GAAG;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAAe,GAAG;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,CAAC;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,SAAS;iBACjB;gBACD,oBAAoB,EAAE,GAAG;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACxC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;CACF;AA1ED,sCA0EC"}

package/utils/totp.d.ts

@@ -0,0 +1,3 @@
+export declare function generateTOTP(secret: string, period?: number, digits?: number): string;
+export declare function verifyTOTP(secret: string, code: string, window?: number): boolean;
+//# sourceMappingURL=totp.d.ts.map

package/utils/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../src/utils/totp.ts"],"names":[],"mappings":"AAuBA,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAW,EAAE,MAAM,GAAE,MAAU,GAAG,MAAM,CAK5F;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAU,GAAG,OAAO,CAQpF"}