trustbase-seller-backend 0.1.5

package/verifyer/index.js

@@ -0,0 +1,372 @@
+"use strict";
+/**
+ * 验证者模块 - 完全静默运行
+ *
+ * 当用户注册为卖家后，自动在后台运行验证者服务。
+ * 用户无需知道任何细节。
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Verifyer = void 0;
+exports.detectSellerConfig = detectSellerConfig;
+const path_1 = require("path");
+const fs_1 = require("fs");
+const crypto = __importStar(require("crypto"));
+const hsm_1 = require("./hsm");
+// ===================== Crypto Helpers =====================
+const ALGO = 'aes-256-gcm';
+const KEY_LEN = 32;
+const SALT_LEN = 16;
+const IV_LEN = 12;
+function deriveKey(password, salt) {
+    return crypto.pbkdf2Sync(password, salt, 600000, KEY_LEN, 'sha256');
+}
+function encrypt(data, password) {
+    const salt = crypto.randomBytes(SALT_LEN);
+    const iv = crypto.randomBytes(IV_LEN);
+    const key = crypto.pbkdf2Sync(password, salt, 600000, KEY_LEN, 'sha256');
+    const cipher = crypto.createCipheriv(ALGO, key, iv);
+    const encrypted = Buffer.concat([cipher.update(data, 'utf8'), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    // format: salt(16) + iv(12) + tag(16) + encrypted
+    return Buffer.concat([salt, iv, tag, encrypted]).toString('base64');
+}
+function decrypt(encrypted, password) {
+    const buf = Buffer.from(encrypted, 'base64');
+    const salt = buf.subarray(0, SALT_LEN);
+    const iv = buf.subarray(SALT_LEN, SALT_LEN + IV_LEN);
+    const tag = buf.subarray(SALT_LEN + IV_LEN, SALT_LEN + IV_LEN + 16);
+    const data = buf.subarray(SALT_LEN + IV_LEN + 16);
+    const key = crypto.pbkdf2Sync(password, salt, 600000, KEY_LEN, 'sha256');
+    const decipher = crypto.createDecipheriv(ALGO, key, iv);
+    decipher.setAuthTag(tag);
+    return decipher.update(data) + decipher.final('utf8');
+}
+// ===================== Ed25519 Key Generation =====================
+// 使用 Node.js 内置 crypto.generateKeyPairSync (Node 18+)
+function generateEd25519KeyPair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519', {
+        publicKeyEncoding: { type: 'spki', format: 'der' },
+        privateKeyEncoding: { type: 'pkcs8', format: 'der' },
+    });
+    // Ed25519 DER 格式：提取最后 32 字节作为原始密钥
+    const pubRaw = publicKey.subarray(-32).toString('hex');
+    const privRaw = privateKey.subarray(-32).toString('hex');
+    return { publicKey: pubRaw, privateKey: privRaw };
+}
+// ===================== Sign/Verify =====================
+function sign(privateKeyHex, message) {
+    const key = crypto.createPrivateKey({
+        key: Buffer.from(
+        // PKCS8 DER header for Ed25519 + raw key
+        Buffer.from('302e020100300506032b657004220420' + privateKeyHex, 'hex')),
+        format: 'der',
+        type: 'pkcs8',
+    });
+    const sig = crypto.sign(null, Buffer.from(message, 'utf8'), key);
+    return sig.toString('hex');
+}
+function verify(publicKeyHex, message, signatureHex) {
+    const key = crypto.createPublicKey({
+        key: Buffer.from(
+        // SPKI DER header for Ed25519 + raw key
+        Buffer.from('302a300506032b6570032100' + publicKeyHex, 'hex')),
+        format: 'der',
+        type: 'spki',
+    });
+    return crypto.verify(null, Buffer.from(message, 'utf8'), key, Buffer.from(signatureHex, 'hex'));
+}
+// ===================== Verifyer =====================
+class Verifyer {
+    config;
+    keyPair = null;
+    signer = null;
+    hsmInfo = null;
+    timer = null;
+    running = false;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * 静默启动
+     */
+    async start() {
+        // 检查是否有卖家配置
+        if (!this.config.sellerId || !this.config.apiKey) {
+            return; // 不是卖家，静默跳过
+        }
+        // 确保数据目录存在
+        const dataDir = (0, path_1.resolve)(this.config.dataDir, '.validator');
+        if (!(0, fs_1.existsSync)(dataDir)) {
+            (0, fs_1.mkdirSync)(dataDir, { recursive: true });
+        }
+        // 初始化密钥
+        await this.initKeys(dataDir);
+        // 检测 HSM 并创建签名器
+        this.hsmInfo = await (0, hsm_1.detectHSM)();
+        if (this.keyPair) {
+            this.signer = await (0, hsm_1.createSigner)(this.keyPair.publicKey, this.keyPair.privateKey, this.hsmInfo);
+        }
+        // 启动后台任务（静默）
+        this.running = true;
+        this.timer = setInterval(() => this.tick(), 5 * 60 * 1000); // 5分钟一次
+        // 立即执行一次
+        this.tick();
+    }
+    /**
+     * 停止
+     */
+    stop() {
+        this.running = false;
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /**
+     * 初始化密钥对
+     */
+    async initKeys(dataDir) {
+        const keyFile = (0, path_1.join)(dataDir, 'keys.json');
+        if ((0, fs_1.existsSync)(keyFile)) {
+            // 加载已有密钥
+            const data = JSON.parse((0, fs_1.readFileSync)(keyFile, 'utf8'));
+            // 解密私钥
+            const privDecrypted = decrypt(data.encryptedPrivateKey, this.config.apiKey);
+            this.keyPair = {
+                publicKey: data.publicKey,
+                privateKey: privDecrypted,
+            };
+            // ⚠️ SECURITY: 解密失败直接 throw，绝不静默重新生成
+            // 防止攻击者删除 keys.json 导致密钥被替换
+        }
+        else {
+            // 首次生成
+            this.keyPair = generateEd25519KeyPair();
+            this.saveKeys(keyFile);
+            // 上传公钥到验证服务器
+            await this.registerPublicKey();
+        }
+    }
+    /**
+     * 保存密钥（私钥加密）
+     */
+    saveKeys(keyFile) {
+        if (!this.keyPair)
+            return;
+        const data = {
+            publicKey: this.keyPair.publicKey,
+            encryptedPrivateKey: encrypt(this.keyPair.privateKey, this.config.apiKey),
+            createdAt: Date.now(),
+        };
+        (0, fs_1.writeFileSync)(keyFile, JSON.stringify(data, null, 2), { mode: 0o600 });
+    }
+    /**
+     * 注册公钥到验证服务器
+     */
+    async registerPublicKey() {
+        if (!this.keyPair)
+            return;
+        try {
+            await fetch(`${this.config.verifyServer}/api/register-key`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${this.config.apiKey}`,
+                },
+                body: JSON.stringify({
+                    seller_id: this.config.sellerId,
+                    public_key: this.keyPair.publicKey,
+                }),
+            });
+        }
+        catch {
+            // 静默失败，下次重试
+        }
+    }
+    static MAX_SIGN_PER_TICK = 10; // 每次 tick 最多签名 10 笔
+    static SIGN_COOLDOWN_MS = 1000; // 每笔签名间隔 1 秒
+    static ALLOWED_VERIFY_PROTOCOLS = ['https:', 'http:']; // 仅允许的协议
+    /**
+     * 后台 tick
+     */
+    async tick() {
+        if (!this.running || !this.keyPair)
+            return;
+        // SECURITY: 验证 verifyServer URL
+        try {
+            const url = new URL(this.config.verifyServer);
+            if (!Verifyer.ALLOWED_VERIFY_PROTOCOLS.includes(url.protocol)) {
+                return; // 不合法的 URL，静默跳过
+            }
+        }
+        catch {
+            return; // URL 解析失败
+        }
+        try {
+            // 1. 拉取待签名交易
+            const txs = await this.fetchPendingTx();
+            // SECURITY: 限制每次最多签名数量
+            const limited = txs.slice(0, Verifyer.MAX_SIGN_PER_TICK);
+            // 2. 逐个签名并提交
+            for (const tx of limited) {
+                if (!this.running)
+                    break; // 已停止
+                await this.signAndSubmit(tx);
+                // SECURITY: 签名间隔冷却
+                await new Promise(r => setTimeout(r, Verifyer.SIGN_COOLDOWN_MS));
+            }
+        }
+        catch {
+            // 静默
+        }
+    }
+    /**
+     * 拉取待签名交易
+     */
+    async fetchPendingTx() {
+        try {
+            const resp = await fetch(`${this.config.verifyServer}/api/pending-tx`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${this.config.apiKey}`,
+                },
+                body: JSON.stringify({ seller_id: this.config.sellerId }),
+            });
+            if (!resp.ok)
+                return [];
+            const data = await resp.json();
+            return data.transactions || [];
+        }
+        catch {
+            return [];
+        }
+    }
+    /**
+     * 签名并提交
+     */
+    async signAndSubmit(tx) {
+        if (!this.signer)
+            return;
+        // 使用 HSM 或软件签名（私钥不暴露）
+        const signature = await this.signer.sign(tx.data);
+        try {
+            await fetch(`${this.config.verifyServer}/api/submit-signature`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${this.config.apiKey}`,
+                },
+                body: JSON.stringify({
+                    seller_id: this.config.sellerId,
+                    transaction_id: tx.id,
+                    signature,
+                    public_key: this.signer?.getPublicKey() || this.keyPair?.publicKey,
+                }),
+            });
+        }
+        catch {
+            // 静默
+        }
+    }
+    /**
+     * 检查是否正在运行
+     */
+    isActive() {
+        return this.running && this.keyPair !== null;
+    }
+    /**
+     * 获取公钥（供外部查询）
+     */
+    getPublicKey() {
+        return this.signer?.getPublicKey() || this.keyPair?.publicKey || null;
+    }
+    /**
+     * 获取 HSM 信息（调试用）
+     */
+    getHSMInfo() {
+        return this.hsmInfo;
+    }
+    /**
+     * 当前签名模式
+     */
+    getSignerType() {
+        return this.signer?.getType() || null;
+    }
+}
+exports.Verifyer = Verifyer;
+// ===================== 自动检测 + 启动 =====================
+/**
+ * 从环境变量或配置文件自动检测卖家身份
+ */
+function detectSellerConfig(baseDataDir) {
+    // 1. 从环境变量读取
+    const sellerId = process.env.TRUSTCOIN_SELLER_ID || '';
+    const apiKey = process.env.TRUSTCOIN_SELLER_API_KEY || '';
+    const verifyServer = process.env.TRUSTCOIN_VERIFY_SERVER || '';
+    if (!sellerId || !apiKey) {
+        // 2. 从本地配置文件读取（卖家注册后自动生成）
+        const configFile = (0, path_1.resolve)(baseDataDir, '.validator', 'config.json');
+        if ((0, fs_1.existsSync)(configFile)) {
+            try {
+                const config = JSON.parse((0, fs_1.readFileSync)(configFile, 'utf8'));
+                if (config.sellerId && config.apiKey) {
+                    return {
+                        sellerId: config.sellerId,
+                        apiKey: config.apiKey,
+                        verifyServer: config.verifyServer || 'https://verify.trustchain.io',
+                        rpcUrl: config.rpcUrl || 'http://127.0.0.1:26657',
+                        chainId: config.chainId || 'trustchain-local',
+                        dataDir: baseDataDir,
+                    };
+                }
+            }
+            catch {
+                // 配置文件损坏，忽略
+            }
+        }
+        return null;
+    }
+    return {
+        sellerId,
+        apiKey,
+        verifyServer: verifyServer || 'https://verify.trustchain.io',
+        rpcUrl: process.env.TRUSTCOIN_RPC_URL || 'http://127.0.0.1:26657',
+        chainId: process.env.TRUSTCOIN_CHAIN_ID || 'trustchain-local',
+        dataDir: baseDataDir,
+    };
+}
+//# sourceMappingURL=index.js.map

package/verifyer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verifyer/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuWH,gDAqCC;AA1YD,+BAAqC;AACrC,2BAAgF;AAChF,+CAAiC;AACjC,+BAAwE;AAyBxE,6DAA6D;AAE7D,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,MAAM,GAAG,EAAE,CAAC;AAElB,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAgB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,kDAAkD;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,QAAgB;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,qEAAqE;AAErE,sDAAsD;AACtD,SAAS,sBAAsB;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE;QACtE,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,0DAA0D;AAE1D,SAAS,IAAI,CAAC,aAAqB,EAAE,OAAe;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAClC,GAAG,EAAE,MAAM,CAAC,IAAI;QACd,yCAAyC;QACzC,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,aAAa,EAAE,KAAK,CAAC,CACvE;QACD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,YAAoB,EAAE,OAAe,EAAE,YAAoB;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;QACjC,GAAG,EAAE,MAAM,CAAC,IAAI;QACd,wCAAwC;QACxC,MAAM,CAAC,IAAI,CAAC,0BAA0B,GAAG,YAAY,EAAE,KAAK,CAAC,CAC9D;QACD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,uDAAuD;AAEvD,MAAa,QAAQ;IACX,MAAM,CAAkB;IACxB,OAAO,GAAmB,IAAI,CAAC;IAC/B,MAAM,GAAqB,IAAI,CAAC;IAChC,OAAO,GAAmB,IAAI,CAAC;IAC/B,KAAK,GAA0C,IAAI,CAAC;IACpD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,YAAY;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,YAAY;QACtB,CAAC;QAED,WAAW;QACX,MAAM,OAAO,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACzB,IAAA,cAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,QAAQ;QACR,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE7B,gBAAgB;QAChB,IAAI,CAAC,OAAO,GAAG,MAAM,IAAA,eAAS,GAAE,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAA,kBAAY,EAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,CAAC;QAED,aAAa;QACb,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ;QAEpE,SAAS;QACT,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CAAC,OAAe;QACpC,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE3C,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACxB,SAAS;YACT,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACvD,OAAO;YACP,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,GAAG;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,aAAa;aAC1B,CAAC;YACF,qCAAqC;YACrC,4BAA4B;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO;YACP,IAAI,CAAC,OAAO,GAAG,sBAAsB,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEvB,aAAa;YACb,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAe;QAC9B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACzE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAA,kBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,mBAAmB,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;iBACnC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAEO,MAAM,CAAU,iBAAiB,GAAG,EAAE,CAAC,CAAC,oBAAoB;IAC5D,MAAM,CAAU,gBAAgB,GAAG,IAAI,CAAC,CAAE,aAAa;IACvD,MAAM,CAAU,wBAAwB,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;IAEjF;;OAEG;IACK,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE3C,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9D,OAAO,CAAC,gBAAgB;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,WAAW;QACrB,CAAC;QAED,IAAI,CAAC;YACH,aAAa;YACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAExC,uBAAuB;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAEzD,aAAa;YACb,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM;gBAChC,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAC7B,mBAAmB;gBACnB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,iBAAiB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;aAC1D,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAExB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAmC,CAAC;YAChE,OAAO,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,EAAa;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,sBAAsB;QACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,uBAAuB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,cAAc,EAAE,EAAE,CAAC,EAAE;oBACrB,SAAS;oBACT,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;iBACnE,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;IACxC,CAAC;;AAhPH,4BAiPC;AAED,wDAAwD;AAExD;;GAEG;AACH,SAAgB,kBAAkB,CAAC,WAAmB;IACpD,aAAa;IACb,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC;IAE/D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAA,cAAO,EAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBACrC,OAAO;wBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,8BAA8B;wBACnE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,wBAAwB;wBACjD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,kBAAkB;wBAC7C,OAAO,EAAE,WAAW;qBACrB,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,QAAQ;QACR,MAAM;QACN,YAAY,EAAE,YAAY,IAAI,8BAA8B;QAC5D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,wBAAwB;QACjE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,kBAAkB;QAC7D,OAAO,EAAE,WAAW;KACrB,CAAC;AACJ,CAAC"}

package/ws/peer-monitor-broadcaster.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Peer Monitor WebSocket Broadcaster (PRD-F Phase 2 §6)
+ *
+ * Singleton — maintains a Set of WebSocket subscribers to the
+ * 'peer-monitor' channel. p2p-auth.ts call-log埋点会调用 broadcast()；
+ * run-unified.ts 启动时挂一个 WS server 在 /ws/peer-monitor 路径上
+ * 接受订阅者。订阅者断开时自动清理。
+ *
+ * 不引入 ws 广播库；用 Set + try/catch 包裹 ws.send，写入失败时直接
+ * 丢弃坏连接，避免一条坏 socket 把整个 broadcast 拖累。
+ */
+import type { WebSocket } from 'ws';
+declare class PeerMonitorBroadcaster {
+    private readonly subs;
+    /** 注册一个订阅者；返回反注册函数。 */
+    register(ws: WebSocket): () => void;
+    /** 当前订阅者数量（监控/调试用）。 */
+    size(): number;
+    /** 推一条 JSON 给所有订阅者；写入失败则丢弃该连接。 */
+    broadcast(payload: unknown): number;
+}
+export declare const peerMonitorBroadcaster: PeerMonitorBroadcaster;
+export {};
+//# sourceMappingURL=peer-monitor-broadcaster.d.ts.map

package/ws/peer-monitor-broadcaster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-monitor-broadcaster.d.ts","sourceRoot":"","sources":["../../src/ws/peer-monitor-broadcaster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,cAAM,sBAAsB;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwB;IAE7C,uBAAuB;IACvB,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,IAAI;IAUnC,uBAAuB;IACvB,IAAI,IAAI,MAAM;IAId,kCAAkC;IAClC,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;CAmBpC;AAED,eAAO,MAAM,sBAAsB,wBAA+B,CAAC"}

package/ws/peer-monitor-broadcaster.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * Peer Monitor WebSocket Broadcaster (PRD-F Phase 2 §6)
+ *
+ * Singleton — maintains a Set of WebSocket subscribers to the
+ * 'peer-monitor' channel. p2p-auth.ts call-log埋点会调用 broadcast()；
+ * run-unified.ts 启动时挂一个 WS server 在 /ws/peer-monitor 路径上
+ * 接受订阅者。订阅者断开时自动清理。
+ *
+ * 不引入 ws 广播库；用 Set + try/catch 包裹 ws.send，写入失败时直接
+ * 丢弃坏连接，避免一条坏 socket 把整个 broadcast 拖累。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.peerMonitorBroadcaster = void 0;
+class PeerMonitorBroadcaster {
+    subs = new Set();
+    /** 注册一个订阅者；返回反注册函数。 */
+    register(ws) {
+        this.subs.add(ws);
+        let removed = false;
+        return () => {
+            if (removed)
+                return;
+            removed = true;
+            this.subs.delete(ws);
+        };
+    }
+    /** 当前订阅者数量（监控/调试用）。 */
+    size() {
+        return this.subs.size;
+    }
+    /** 推一条 JSON 给所有订阅者；写入失败则丢弃该连接。 */
+    broadcast(payload) {
+        if (this.subs.size === 0)
+            return 0;
+        const json = JSON.stringify(payload);
+        let pushed = 0;
+        for (const ws of Array.from(this.subs)) {
+            if (ws.readyState !== 1 /* OPEN */) {
+                this.subs.delete(ws);
+                continue;
+            }
+            try {
+                ws.send(json);
+                pushed++;
+            }
+            catch (e) {
+                console.warn('[peer-monitor-broadcaster] send failed, dropping sub:', e?.message ?? e);
+                this.subs.delete(ws);
+            }
+        }
+        return pushed;
+    }
+}
+exports.peerMonitorBroadcaster = new PeerMonitorBroadcaster();
+//# sourceMappingURL=peer-monitor-broadcaster.js.map

package/ws/peer-monitor-broadcaster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-monitor-broadcaster.js","sourceRoot":"","sources":["../../src/ws/peer-monitor-broadcaster.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAIH,MAAM,sBAAsB;IACT,IAAI,GAAG,IAAI,GAAG,EAAa,CAAC;IAE7C,uBAAuB;IACvB,QAAQ,CAAC,EAAa;QACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,EAAE;YACV,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,kCAAkC;IAClC,SAAS,CAAC,OAAgB;QACxB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,EAAE,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,MAAM,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;gBACvF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAEY,QAAA,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC"}