trustbase-seller-backend 0.1.5

package/api/storefront-products.d.ts

@@ -0,0 +1,21 @@
+/**
+ * TrustChain 前台商品 API (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 接口契约 (跟 docs/seller-storefront-api-spec.md §6 一致):
+ *   GET /api/storefront/products              列表 (公开, 过滤 + 分页 + 排序)
+ *   GET /api/storefront/products/:id          详情 (公开)
+ *   GET /api/storefront/products/featured     推荐商品 (公开)
+ *
+ * 设计原则:
+ * - 公开 API, 不走 walletAuth (任何用户可浏览)
+ * - 仅显示 status='active' 的商品
+ * - 不暴露 seller_address 之外的商家隐私字段 (例: stock 隐藏内部数字? MVP 暴露)
+ * - Lesson #335: 字段跟 DB + UI form 一致
+ */
+import { Router } from 'express';
+import Database = require('better-sqlite3');
+export interface StorefrontProductsConfig {
+    db: Database.Database;
+}
+export declare function createStorefrontProductsRouter(config: StorefrontProductsConfig): Router;
+//# sourceMappingURL=storefront-products.d.ts.map

package/api/storefront-products.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-products.d.ts","sourceRoot":"","sources":["../../src/api/storefront-products.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAM5C,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACvB;AAWD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAqJvF"}

package/api/storefront-products.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * TrustChain 前台商品 API (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 接口契约 (跟 docs/seller-storefront-api-spec.md §6 一致):
+ *   GET /api/storefront/products              列表 (公开, 过滤 + 分页 + 排序)
+ *   GET /api/storefront/products/:id          详情 (公开)
+ *   GET /api/storefront/products/featured     推荐商品 (公开)
+ *
+ * 设计原则:
+ * - 公开 API, 不走 walletAuth (任何用户可浏览)
+ * - 仅显示 status='active' 的商品
+ * - 不暴露 seller_address 之外的商家隐私字段 (例: stock 隐藏内部数字? MVP 暴露)
+ * - Lesson #335: 字段跟 DB + UI form 一致
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStorefrontProductsRouter = createStorefrontProductsRouter;
+const express_1 = require("express");
+const VALID_SORT = ['newest', 'price_asc', 'price_desc', 'sales_desc'];
+function parsePagination(req) {
+    const page = Math.max(1, parseInt(String(req.query.page || '1'), 10) || 1);
+    const pageSize = Math.min(100, Math.max(1, parseInt(String(req.query.page_size || '20'), 10) || 20));
+    return { page, pageSize, offset: (page - 1) * pageSize };
+}
+function createStorefrontProductsRouter(config) {
+    const router = (0, express_1.Router)();
+    const { db } = config;
+    // ============================================================
+    // GET /api/storefront/products — 列表 (公开)
+    // ============================================================
+    router.get('/products', (req, res) => {
+        try {
+            const { page, pageSize, offset } = parsePagination(req);
+            const category = req.query.category;
+            const seller = req.query.seller;
+            const q = req.query.q?.trim();
+            const sortRaw = String(req.query.sort || 'newest');
+            const sort = VALID_SORT.includes(sortRaw) ? sortRaw : 'newest';
+            // 总是只看 active
+            let where = `status = 'active'`;
+            const params = [];
+            if (category) {
+                where += ` AND category = ?`;
+                params.push(category);
+            }
+            if (seller) {
+                where += ` AND seller_address = ?`;
+                params.push(seller);
+            }
+            if (q) {
+                where += ` AND (title LIKE ? OR description LIKE ?)`;
+                const like = `%${q}%`;
+                params.push(like, like);
+            }
+            // sort
+            let orderBy = 'created_at DESC';
+            switch (sort) {
+                case 'price_asc':
+                    orderBy = 'price_utct ASC';
+                    break;
+                case 'price_desc':
+                    orderBy = 'price_utct DESC';
+                    break;
+                case 'sales_desc':
+                    orderBy = 'sales_count DESC';
+                    break;
+            }
+            const rows = db.prepare(`SELECT * FROM store_products WHERE ${where}
+         ORDER BY ${orderBy} LIMIT ? OFFSET ?`).all(...params, pageSize, offset);
+            const totalRow = db.prepare(`SELECT COUNT(*) AS cnt FROM store_products WHERE ${where}`).get(...params);
+            res.json({
+                success: true,
+                products: rows.map(rowToProduct),
+                page,
+                page_size: pageSize,
+                total: totalRow.cnt,
+                sort,
+            });
+        }
+        catch (err) {
+            console.error('[storefront-products] GET /products error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // GET /api/storefront/products/featured — 推荐商品 (公开)
+    // 必须在 /products/:id 之前注册 (Express 路由匹配: 'featured' 也是 :id)
+    // ============================================================
+    router.get('/products/featured', (req, res) => {
+        try {
+            const limit = Math.min(50, Math.max(1, parseInt(String(req.query.limit || '10'), 10) || 10));
+            const rows = db.prepare(`SELECT * FROM store_products
+         WHERE status = 'active' AND featured = 1
+         ORDER BY sales_count DESC, created_at DESC
+         LIMIT ?`).all(limit);
+            res.json({
+                success: true,
+                products: rows.map(rowToProduct),
+                count: rows.length,
+            });
+        }
+        catch (err) {
+            console.error('[storefront-products] GET /products/featured error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // GET /api/storefront/products/:id — 详情 (公开, 仅 active)
+    // ============================================================
+    router.get('/products/:id', (req, res) => {
+        try {
+            const productId = String(req.params.id);
+            const row = db
+                .prepare(`SELECT * FROM store_products WHERE id = ?`)
+                .get(productId);
+            if (!row) {
+                return res.status(404).json({
+                    success: false,
+                    errorCode: 'PRODUCT_NOT_FOUND',
+                    errorMessage: 'Product not found',
+                });
+            }
+            // 前台: 仅 active 商品可看, 其他 404 (不泄露存在性)
+            if (row.status !== 'active') {
+                return res.status(404).json({
+                    success: false,
+                    errorCode: 'PRODUCT_NOT_FOUND',
+                    errorMessage: 'Product not found',
+                });
+            }
+            // 增加 sales_count 不在这里做 (仅浏览不计数, 真正下单才 +1)
+            res.json({
+                success: true,
+                product: rowToProduct(row),
+            });
+        }
+        catch (err) {
+            console.error('[storefront-products] GET /:id error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    return router;
+}
+function rowToProduct(row) {
+    let tags = [];
+    try {
+        tags = row.tags ? JSON.parse(row.tags) : [];
+    }
+    catch {
+        tags = [];
+    }
+    return {
+        id: row.id,
+        seller_address: row.seller_address,
+        title: row.title,
+        description: row.description,
+        price_utct: row.price_utct,
+        stock: row.stock,
+        status: row.status,
+        category: row.category,
+        image_url: row.image_url,
+        tags,
+        featured: row.featured === 1 ? 1 : 0,
+        sales_count: row.sales_count,
+        created_at: row.created_at,
+        updated_at: row.updated_at,
+    };
+}
+//# sourceMappingURL=storefront-products.js.map

package/api/storefront-products.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-products.js","sourceRoot":"","sources":["../../src/api/storefront-products.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAsBH,wEAqJC;AAzKD,qCAAoD;AAWpD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAGhF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;AAC3D,CAAC;AAED,SAAgB,8BAA8B,CAAC,MAAgC;IAC7E,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAEtB,+DAA+D;IAC/D,yCAAyC;IACzC,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAA8B,CAAC;YAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;YACtD,MAAM,CAAC,GAAI,GAAG,CAAC,KAAK,CAAC,CAAwB,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC;YACnD,MAAM,IAAI,GAAc,UAAgC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC;YAE9G,cAAc;YACd,IAAI,KAAK,GAAG,mBAAmB,CAAC;YAChC,MAAM,MAAM,GAAU,EAAE,CAAC;YAEzB,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,IAAI,mBAAmB,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,IAAI,yBAAyB,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,EAAE,CAAC;gBACN,KAAK,IAAI,2CAA2C,CAAC;gBACrD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO;YACP,IAAI,OAAO,GAAG,iBAAiB,CAAC;YAChC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW;oBACd,OAAO,GAAG,gBAAgB,CAAC;oBAC3B,MAAM;gBACR,KAAK,YAAY;oBACf,OAAO,GAAG,iBAAiB,CAAC;oBAC5B,MAAM;gBACR,KAAK,YAAY;oBACf,OAAO,GAAG,kBAAkB,CAAC;oBAC7B,MAAM;YACV,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,sCAAsC,KAAK;oBAC/B,OAAO,mBAAmB,CACvC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;YAE5C,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CACzB,oDAAoD,KAAK,EAAE,CAC5D,CAAC,GAAG,CAAC,GAAG,MAAM,CAAQ,CAAC;YAExB,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChC,IAAI;gBACJ,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,oDAAoD;IACpD,2DAA2D;IAC3D,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAE7F,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB;;;iBAGS,CACV,CAAC,GAAG,CAAC,KAAK,CAAU,CAAC;YAEtB,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChC,KAAK,EAAE,IAAI,CAAC,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,uDAAuD;IACvD,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAExC,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CAAC,2CAA2C,CAAC;iBACpD,GAAG,CAAC,SAAS,CAAQ,CAAC;YAEzB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,mBAAmB;oBAC9B,YAAY,EAAE,mBAAmB;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,qCAAqC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,mBAAmB;oBAC9B,YAAY,EAAE,mBAAmB;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,0CAA0C;YAC1C,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ;IAC5B,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAuB;QACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI;QACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC"}

package/api/storefront-router.d.ts

@@ -0,0 +1,33 @@
+/**
+ * TrustChain Storefront API 主路由 (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 集成 storefront-products + storefront-orders + storefront-user 三个 router
+ *
+ * 挂载点: /api/storefront
+ *
+ * 顺序很关键:
+ * - storefront-products 的 /products/featured 必须在 /products/:id 之前
+ *   (Express 路由: 'featured' 也会被 :id 匹配)
+ * - storefront-orders 的 /orders/my 必须在 /orders/:id 之前
+ *
+ * 设计原则:
+ * - storefront-products 是公开 API, 不走 walletAuth
+ * - storefront-orders 走 walletAuth
+ * - storefront-user 走 walletAuth (5 头)
+ */
+import { Router } from 'express';
+import Database = require('better-sqlite3');
+export interface StorefrontConfig {
+    db: Database.Database;
+    enableAuth?: boolean;
+}
+/**
+ * 创建 storefront 主路由
+ *
+ * 挂载到 /api/storefront 即可
+ */
+export declare function createStorefrontRouter(config: StorefrontConfig): Router;
+export { createStorefrontProductsRouter } from './storefront-products';
+export { createStorefrontOrdersRouter } from './storefront-orders';
+export { createStorefrontUserRouter } from './storefront-user';
+//# sourceMappingURL=storefront-router.d.ts.map

package/api/storefront-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-router.d.ts","sourceRoot":"","sources":["../../src/api/storefront-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAK5C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAUvE;AAGD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC"}

package/api/storefront-router.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * TrustChain Storefront API 主路由 (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 集成 storefront-products + storefront-orders + storefront-user 三个 router
+ *
+ * 挂载点: /api/storefront
+ *
+ * 顺序很关键:
+ * - storefront-products 的 /products/featured 必须在 /products/:id 之前
+ *   (Express 路由: 'featured' 也会被 :id 匹配)
+ * - storefront-orders 的 /orders/my 必须在 /orders/:id 之前
+ *
+ * 设计原则:
+ * - storefront-products 是公开 API, 不走 walletAuth
+ * - storefront-orders 走 walletAuth
+ * - storefront-user 走 walletAuth (5 头)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStorefrontUserRouter = exports.createStorefrontOrdersRouter = exports.createStorefrontProductsRouter = void 0;
+exports.createStorefrontRouter = createStorefrontRouter;
+const express_1 = require("express");
+const storefront_products_1 = require("./storefront-products");
+const storefront_orders_1 = require("./storefront-orders");
+const storefront_user_1 = require("./storefront-user");
+/**
+ * 创建 storefront 主路由
+ *
+ * 挂载到 /api/storefront 即可
+ */
+function createStorefrontRouter(config) {
+    const router = (0, express_1.Router)();
+    const { db, enableAuth = true } = config;
+    // 顺序: products 公开 → orders 鉴权 → user 鉴权
+    router.use((0, storefront_products_1.createStorefrontProductsRouter)({ db }));
+    router.use((0, storefront_orders_1.createStorefrontOrdersRouter)({ db, enableAuth }));
+    router.use((0, storefront_user_1.createStorefrontUserRouter)({ db, enableAuth }));
+    return router;
+}
+// Re-export
+var storefront_products_2 = require("./storefront-products");
+Object.defineProperty(exports, "createStorefrontProductsRouter", { enumerable: true, get: function () { return storefront_products_2.createStorefrontProductsRouter; } });
+var storefront_orders_2 = require("./storefront-orders");
+Object.defineProperty(exports, "createStorefrontOrdersRouter", { enumerable: true, get: function () { return storefront_orders_2.createStorefrontOrdersRouter; } });
+var storefront_user_2 = require("./storefront-user");
+Object.defineProperty(exports, "createStorefrontUserRouter", { enumerable: true, get: function () { return storefront_user_2.createStorefrontUserRouter; } });
+//# sourceMappingURL=storefront-router.js.map

package/api/storefront-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-router.js","sourceRoot":"","sources":["../../src/api/storefront-router.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAkBH,wDAUC;AA1BD,qCAAiC;AAEjC,+DAAuE;AACvE,2DAAmE;AACnE,uDAA+D;AAO/D;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,EAAE,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAEzC,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,IAAA,oDAA8B,EAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,IAAA,gDAA4B,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,IAAA,4CAA0B,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAE3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,YAAY;AACZ,6DAAuE;AAA9D,qIAAA,8BAA8B,OAAA;AACvC,yDAAmE;AAA1D,iIAAA,4BAA4B,OAAA;AACrC,qDAA+D;AAAtD,6HAAA,0BAA0B,OAAA"}

package/api/storefront-user.d.ts

@@ -0,0 +1,23 @@
+/**
+ * TrustChain 前台用户 + 购物车 + OAuth 桥接 API (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 接口契约 (跟 docs/seller-storefront-api-spec.md §8 一致):
+ *   GET    /api/storefront/user/profile       用户信息
+ *   GET    /api/storefront/user/cart          购物车列表
+ *   POST   /api/storefront/user/cart          加购物车 (同 product 自动 merge)
+ *   DELETE /api/storefront/user/cart/:id      删购物车项
+ *   POST   /api/storefront/user/oauth-bridge  OAuth 桥接 (wechat/alipay/douyin → chain address)
+ *
+ * 设计原则:
+ * - 全部走 wallet signature (Lesson #308)
+ * - cart 走 snapshot (Lesson #335: 商品改价不影响 cart)
+ * - oauth-bridge 模拟三方登录 → chain_address (Lesson #312/#314 实战风格)
+ */
+import { Router } from 'express';
+import Database = require('better-sqlite3');
+export interface StorefrontUserConfig {
+    db: Database.Database;
+    enableAuth?: boolean;
+}
+export declare function createStorefrontUserRouter(config: StorefrontUserConfig): Router;
+//# sourceMappingURL=storefront-user.d.ts.map

package/api/storefront-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-user.d.ts","sourceRoot":"","sources":["../../src/api/storefront-user.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAEpD,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAS5C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AASD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAiU/E"}

package/api/storefront-user.js

@@ -0,0 +1,336 @@
+"use strict";
+/**
+ * TrustChain 前台用户 + 购物车 + OAuth 桥接 API (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 接口契约 (跟 docs/seller-storefront-api-spec.md §8 一致):
+ *   GET    /api/storefront/user/profile       用户信息
+ *   GET    /api/storefront/user/cart          购物车列表
+ *   POST   /api/storefront/user/cart          加购物车 (同 product 自动 merge)
+ *   DELETE /api/storefront/user/cart/:id      删购物车项
+ *   POST   /api/storefront/user/oauth-bridge  OAuth 桥接 (wechat/alipay/douyin → chain address)
+ *
+ * 设计原则:
+ * - 全部走 wallet signature (Lesson #308)
+ * - cart 走 snapshot (Lesson #335: 商品改价不影响 cart)
+ * - oauth-bridge 模拟三方登录 → chain_address (Lesson #312/#314 实战风格)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStorefrontUserRouter = createStorefrontUserRouter;
+const express_1 = require("express");
+const crypto_1 = require("crypto");
+const wallet_auth_1 = require("../middleware/wallet-auth");
+/** OAuth platform → 模拟 openid prefix (MVP 测试用, 真实平台替换) */
+const PLATFORM_PREFIX = {
+    wechat: 'wx',
+    alipay: 'ali',
+    douyin: 'dy',
+};
+function createStorefrontUserRouter(config) {
+    const router = (0, express_1.Router)();
+    const { db, enableAuth = true } = config;
+    if (enableAuth !== false) {
+        router.use((0, wallet_auth_1.walletAuth)());
+    }
+    // ============================================================
+    // GET /api/storefront/user/profile — 用户信息 (走 5 头鉴权, 限自己)
+    // ============================================================
+    router.get('/user/profile', (req, res) => {
+        try {
+            const chainAddress = req.walletAddress;
+            let user = db
+                .prepare(`SELECT * FROM storefront_users WHERE chain_address = ?`)
+                .get(chainAddress);
+            // Lesson #419 锁版: 用户首次访问 profile 自动创建 (lazy register)
+            if (!user) {
+                const now = Date.now();
+                const userId = (0, crypto_1.randomUUID)();
+                db.prepare(`INSERT INTO storefront_users (
+            id, chain_address, display_name, oauth_platforms, created_at, updated_at
+          ) VALUES (?, ?, ?, '[]', ?, ?)`).run(userId, chainAddress, `user_${chainAddress.slice(-6)}`, now, now);
+                user = db
+                    .prepare(`SELECT * FROM storefront_users WHERE chain_address = ?`)
+                    .get(chainAddress);
+            }
+            res.json({
+                success: true,
+                user: rowToUser(user),
+            });
+        }
+        catch (err) {
+            console.error('[storefront-user] GET /user/profile error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // GET /api/storefront/user/cart — 购物车列表
+    // ============================================================
+    router.get('/user/cart', (req, res) => {
+        try {
+            const chainAddress = req.walletAddress;
+            // 取 user_id
+            const user = ensureUser(db, chainAddress);
+            const rows = db.prepare(`SELECT * FROM store_cart WHERE user_id = ? ORDER BY created_at DESC`).all(user.id);
+            const items = rows.map(rowToCart);
+            // 计算 cart 总价 (snapshot 价格)
+            let totalUtct = 0;
+            for (const it of items) {
+                totalUtct += it.snapshot_price_utct * it.quantity;
+            }
+            res.json({
+                success: true,
+                items,
+                total_utct: totalUtct,
+                count: items.length,
+            });
+        }
+        catch (err) {
+            console.error('[storefront-user] GET /user/cart error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // POST /api/storefront/user/cart — 加购物车 (同 product 自动 upsert)
+    // ============================================================
+    router.post('/user/cart', (req, res) => {
+        try {
+            const chainAddress = req.walletAddress;
+            const { product_id, quantity } = req.body;
+            // 1. 验 input
+            if (!product_id || typeof product_id !== 'string') {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'INVALID_PRODUCT_ID',
+                    errorMessage: 'product_id required',
+                });
+            }
+            if (typeof quantity !== 'number' || quantity <= 0 || !Number.isInteger(quantity)) {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'INVALID_QUANTITY',
+                    errorMessage: 'quantity must be positive integer',
+                });
+            }
+            // 2. 查商品 (snapshot 必须)
+            const product = db
+                .prepare(`SELECT * FROM store_products WHERE id = ?`)
+                .get(product_id);
+            if (!product) {
+                return res.status(404).json({
+                    success: false,
+                    errorCode: 'PRODUCT_NOT_FOUND',
+                    errorMessage: 'Product not found',
+                });
+            }
+            if (product.status !== 'active') {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'PRODUCT_NOT_ACTIVE',
+                    errorMessage: 'Product not available',
+                });
+            }
+            // 3. upsert (UNIQUE (user_id, product_id))
+            const user = ensureUser(db, chainAddress);
+            const now = Date.now();
+            const existing = db.prepare(`SELECT * FROM store_cart WHERE user_id = ? AND product_id = ?`).get(user.id, product_id);
+            if (existing) {
+                db.prepare(`UPDATE store_cart SET quantity = quantity + ?, updated_at = ? WHERE id = ?`).run(quantity, now, existing.id);
+            }
+            else {
+                db.prepare(`INSERT INTO store_cart (
+            id, user_id, product_id, quantity, snapshot_title,
+            snapshot_price_utct, snapshot_image_url, created_at, updated_at
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run((0, crypto_1.randomUUID)(), user.id, product_id, quantity, product.title, product.price_utct, product.image_url, now, now);
+            }
+            // 返回更新后的 cart
+            const rows = db.prepare(`SELECT * FROM store_cart WHERE user_id = ? ORDER BY created_at DESC`).all(user.id);
+            res.json({
+                success: true,
+                items: rows.map(rowToCart),
+            });
+        }
+        catch (err) {
+            console.error('[storefront-user] POST /user/cart error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // DELETE /api/storefront/user/cart/:id — 删购物车项
+    // ============================================================
+    router.delete('/user/cart/:id', (req, res) => {
+        try {
+            const cartId = String(req.params.id);
+            const chainAddress = req.walletAddress;
+            const user = ensureUser(db, chainAddress);
+            const row = db.prepare(`SELECT * FROM store_cart WHERE id = ?`).get(cartId);
+            if (!row) {
+                return res.status(404).json({
+                    success: false,
+                    errorCode: 'CART_ITEM_NOT_FOUND',
+                    errorMessage: 'Cart item not found',
+                });
+            }
+            if (row.user_id !== user.id) {
+                return res.status(403).json({
+                    success: false,
+                    errorCode: 'NOT_OWNER',
+                    errorMessage: 'Only owner can delete cart item',
+                });
+            }
+            db.prepare(`DELETE FROM store_cart WHERE id = ?`).run(cartId);
+            // 返回剩余 cart
+            const rows = db.prepare(`SELECT * FROM store_cart WHERE user_id = ? ORDER BY created_at DESC`).all(user.id);
+            res.json({
+                success: true,
+                items: rows.map(rowToCart),
+            });
+        }
+        catch (err) {
+            console.error('[storefront-user] DELETE /user/cart/:id error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    // ============================================================
+    // POST /api/storefront/user/oauth-bridge — OAuth 桥接
+    // 跟 oauth-bridge.ts (existing) 联动 (Lesson #312/#314 实战风格)
+    // ============================================================
+    router.post('/user/oauth-bridge', (req, res) => {
+        try {
+            const chainAddress = req.walletAddress;
+            const { platform, code, state } = req.body;
+            // 1. 验 platform
+            if (!platform || !['wechat', 'alipay', 'douyin'].includes(platform)) {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'INVALID_PLATFORM',
+                    errorMessage: 'platform must be wechat|alipay|douyin',
+                });
+            }
+            if (!code || typeof code !== 'string' || code.length < 3) {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'INVALID_CODE',
+                    errorMessage: 'code required (>= 3 chars)',
+                });
+            }
+            if (!state || typeof state !== 'string') {
+                return res.status(400).json({
+                    success: false,
+                    errorCode: 'INVALID_STATE',
+                    errorMessage: 'state required (csrf protection)',
+                });
+            }
+            // 2. MVP: 模拟三方登录 — code + state → 派生 openid
+            const openid = `${PLATFORM_PREFIX[platform]}_${Buffer.from(code + state).toString('hex').slice(0, 24)}`;
+            // 3. upsert session
+            const user = ensureUser(db, chainAddress);
+            const now = Date.now();
+            const expiresAt = now + 30 * 24 * 3600 * 1000; // 30d
+            const accessToken = `at_${(0, crypto_1.randomUUID)().replace(/-/g, '')}`;
+            const refreshToken = `rt_${(0, crypto_1.randomUUID)().replace(/-/g, '')}`;
+            db.prepare(`INSERT INTO oauth_bridge_sessions (
+          id, user_id, chain_address, platform, platform_openid,
+          access_token, refresh_token, expires_at, created_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run((0, crypto_1.randomUUID)(), user.id, chainAddress, platform, openid, accessToken, refreshToken, expiresAt, now);
+            // 4. 更新用户 oauth_platforms (累加)
+            let platforms = [];
+            try {
+                platforms = user.oauth_platforms ? JSON.parse(user.oauth_platforms) : [];
+            }
+            catch {
+                platforms = [];
+            }
+            if (!platforms.includes(platform)) {
+                platforms.push(platform);
+            }
+            db.prepare(`UPDATE storefront_users SET oauth_platforms = ?, last_login_at = ?, updated_at = ? WHERE id = ?`).run(JSON.stringify(platforms), now, now, user.id);
+            // 5. 返回
+            const updated = db.prepare(`SELECT * FROM storefront_users WHERE id = ?`).get(user.id);
+            res.json({
+                success: true,
+                chain_address: chainAddress,
+                access_token: accessToken,
+                refresh_token: refreshToken,
+                platform,
+                openid,
+                expires_in: Math.floor((expiresAt - now) / 1000),
+                user: rowToUser(updated),
+            });
+        }
+        catch (err) {
+            console.error('[storefront-user] POST /user/oauth-bridge error:', err.message);
+            res.status(500).json({
+                success: false,
+                errorCode: 'INTERNAL_ERROR',
+                errorMessage: err.message,
+            });
+        }
+    });
+    return router;
+}
+/* ============================================================
+ * Helpers
+ * ============================================================ */
+function ensureUser(db, chainAddress) {
+    let user = db
+        .prepare(`SELECT * FROM storefront_users WHERE chain_address = ?`)
+        .get(chainAddress);
+    if (!user) {
+        const now = Date.now();
+        const userId = (0, crypto_1.randomUUID)();
+        db.prepare(`INSERT INTO storefront_users (
+        id, chain_address, display_name, oauth_platforms, created_at, updated_at
+      ) VALUES (?, ?, ?, '[]', ?, ?)`).run(userId, chainAddress, `user_${chainAddress.slice(-6)}`, now, now);
+        user = db
+            .prepare(`SELECT * FROM storefront_users WHERE chain_address = ?`)
+            .get(chainAddress);
+    }
+    return user;
+}
+function rowToUser(row) {
+    let platforms = [];
+    try {
+        platforms = row.oauth_platforms ? JSON.parse(row.oauth_platforms) : [];
+    }
+    catch {
+        platforms = [];
+    }
+    return {
+        id: row.id,
+        chain_address: row.chain_address,
+        display_name: row.display_name,
+        email: row.email,
+        avatar_url: row.avatar_url,
+        oauth_platforms: platforms,
+        created_at: row.created_at,
+        last_login_at: row.last_login_at,
+    };
+}
+function rowToCart(row) {
+    return {
+        id: row.id,
+        user_id: row.user_id,
+        product_id: row.product_id,
+        quantity: row.quantity,
+        snapshot_title: row.snapshot_title,
+        snapshot_price_utct: row.snapshot_price_utct,
+        snapshot_image_url: row.snapshot_image_url,
+        created_at: row.created_at,
+    };
+}
+//# sourceMappingURL=storefront-user.js.map