trustbase-seller-backend 0.1.5

package/core/alerting.js

@@ -0,0 +1,379 @@
+"use strict";
+/**
+ * Security Alerting System - 安全告警系统
+ *
+ * 功能：
+ * - 安全事件实时监控
+ * - 自动告警通知（邮件、短信、Webhook）
+ * - 告警规则配置
+ * - 告警历史记录
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadAlertingConfig = loadAlertingConfig;
+exports.saveAlertingConfig = saveAlertingConfig;
+exports.loadAlertHistory = loadAlertHistory;
+exports.saveAlertHistory = saveAlertHistory;
+exports.monitorAndAlert = monitorAndAlert;
+exports.startAlertingMonitor = startAlertingMonitor;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const intrusion_detection_1 = require("./intrusion-detection");
+const runtime_data_1 = require("./runtime-data");
+const ALERTING_CONFIG_FILE = runtime_data_1.runtimeDataFile('alerting-config.json');
+const ALERT_HISTORY_FILE = runtime_data_1.runtimeDataFile('alert-history.json');
+/**
+ * 加载告警配置
+ */
+function loadAlertingConfig() {
+    if (!fs_1.default.existsSync(ALERTING_CONFIG_FILE)) {
+        // 默认配置
+        return {
+            enabled: false,
+            rules: [],
+            channels: [],
+            cooldownMs: 5 * 60 * 1000, // 5 分钟冷却
+            maxAlertsPerHour: 50,
+        };
+    }
+    const data = fs_1.default.readFileSync(ALERTING_CONFIG_FILE, 'utf-8');
+    return JSON.parse(data);
+}
+/**
+ * 保存告警配置
+ */
+function saveAlertingConfig(config) {
+    const dir = path_1.default.dirname(ALERTING_CONFIG_FILE);
+    if (!fs_1.default.existsSync(dir)) {
+        fs_1.default.mkdirSync(dir, { recursive: true });
+    }
+    fs_1.default.writeFileSync(ALERTING_CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+/**
+ * 加载告警历史
+ */
+function loadAlertHistory() {
+    if (!fs_1.default.existsSync(ALERT_HISTORY_FILE)) {
+        return [];
+    }
+    const data = fs_1.default.readFileSync(ALERT_HISTORY_FILE, 'utf-8');
+    return JSON.parse(data);
+}
+/**
+ * 保存告警历史
+ */
+function saveAlertHistory(history) {
+    const dir = path_1.default.dirname(ALERT_HISTORY_FILE);
+    if (!fs_1.default.existsSync(dir)) {
+        fs_1.default.mkdirSync(dir, { recursive: true });
+    }
+    // 只保留最近 1000 条
+    const trimmed = history.slice(-1000);
+    fs_1.default.writeFileSync(ALERT_HISTORY_FILE, JSON.stringify(trimmed, null, 2));
+}
+// ===================== 告警触发器 =====================
+/**
+ * 检查是否应该触发告警
+ */
+function shouldTriggerAlert(rule, events) {
+    if (!rule.enabled)
+        return false;
+    const now = Date.now();
+    const windowStart = rule.timeWindowMs ? now - rule.timeWindowMs : now - 60 * 60 * 1000;
+    let filteredEvents = events.filter(e => e.timestamp >= windowStart);
+    // 按事件类型过滤
+    if (rule.eventType) {
+        filteredEvents = filteredEvents.filter(e => e.eventType === rule.eventType);
+    }
+    // 按严重程度过滤
+    if (rule.severity) {
+        filteredEvents = filteredEvents.filter(e => e.severity === rule.severity);
+    }
+    // 检查阈值
+    if (rule.threshold && filteredEvents.length >= rule.threshold) {
+        return true;
+    }
+    // 检查是否有严重事件
+    const critical = filteredEvents.find(e => e.severity === 'critical');
+    if (critical) {
+        return true;
+    }
+    return false;
+}
+/**
+ * 监控安全事件并触发告警
+ */
+async function monitorAndAlert() {
+    const config = loadAlertingConfig();
+    if (!config.enabled) {
+        console.log('[Alerting] 告警系统未启用');
+        return;
+    }
+    const events = (0, intrusion_detection_1.loadSecurityEvents)();
+    const history = loadAlertHistory();
+    // 检查每小时告警限制
+    const recentAlerts = history.filter(a => a.timestamp > Date.now() - 60 * 60 * 1000);
+    if (recentAlerts.length >= config.maxAlertsPerHour) {
+        console.warn(`[Alerting] 已达到每小时告警限制 (${config.maxAlertsPerHour})`);
+        return;
+    }
+    // 检查每个规则
+    for (const rule of config.rules) {
+        // 检查冷却时间
+        const lastAlert = history.find(a => a.ruleId === rule.id);
+        if (lastAlert && Date.now() - lastAlert.timestamp < config.cooldownMs) {
+            console.log(`[Alerting] 规则 "${rule.name}" 在冷却期`);
+            continue;
+        }
+        // 检查是否应该触发
+        if (shouldTriggerAlert(rule, events)) {
+            console.log(`[Alerting] 🚨 触发告警规则: ${rule.name}`);
+            // 获取相关事件
+            const relevantEvents = events.filter(e => {
+                const windowStart = rule.timeWindowMs ? Date.now() - rule.timeWindowMs : Date.now() - 60 * 60 * 1000;
+                return e.timestamp >= windowStart &&
+                    (!rule.eventType || e.eventType === rule.eventType) &&
+                    (!rule.severity || e.severity === rule.severity);
+            }).slice(-5);
+            // 构建告警消息
+            const message = buildAlertMessage(rule, relevantEvents);
+            // 发送告警
+            const success = await sendAlerts(rule.channels, message, config);
+            // 记录告警
+            const record = {
+                id: `alert_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`,
+                timestamp: Date.now(),
+                ruleId: rule.id,
+                ruleName: rule.name,
+                eventType: rule.eventType || 'all',
+                severity: rule.severity || 'high',
+                message,
+                channels: rule.channels,
+                success,
+            };
+            history.push(record);
+            saveAlertHistory(history);
+        }
+    }
+}
+/**
+ * 构建告警消息
+ */
+function buildAlertMessage(rule, events) {
+    let message = rule.messageTemplate || `
+🚨 TrustCoin 安全告警
+
+规则: ${rule.name}
+事件类型: ${rule.eventType || '全部'}
+严重程度: ${rule.severity || '高危'}
+
+最近事件:
+`;
+    events.forEach(e => {
+        message += `
+- ${new Date(e.timestamp).toISOString()}
+  类型: ${e.eventType}
+  IP: ${e.ip}
+  详情: ${e.details}
+`;
+    });
+    message += `
+时间: ${new Date().toISOString()}
+请立即检查安全日志！
+`;
+    return message;
+}
+// ===================== 告警发送 =====================
+/**
+ * 发送告警到多个渠道
+ */
+async function sendAlerts(channelIds, message, config) {
+    const channels = config.channels.filter(c => channelIds.includes(c.id) && c.enabled);
+    if (channels.length === 0) {
+        console.warn('[Alerting] 没有可用的告警渠道');
+        return false;
+    }
+    let success = true;
+    for (const channel of channels) {
+        try {
+            const sent = await sendToChannel(channel, message);
+            console.log(`[Alerting] ✅ 发送到 ${channel.name}: ${sent}`);
+        }
+        catch (error) {
+            console.error(`[Alerting] ❌ 发送到 ${channel.name} 失败:`, error);
+            success = false;
+        }
+    }
+    return success;
+}
+/**
+ * 发送告警到指定渠道
+ */
+async function sendToChannel(channel, message) {
+    switch (channel.type) {
+        case 'email':
+            return await sendEmail(channel, message);
+        case 'sms':
+            return await sendSMS(channel, message);
+        case 'webhook':
+            return await sendWebhook(channel, message);
+        case 'slack':
+            return await sendSlack(channel, message);
+        case 'discord':
+            return await sendDiscord(channel, message);
+        case 'telegram':
+            return await sendTelegram(channel, message);
+        case 'wechat':
+            return await sendWeChat(channel, message);
+        default:
+            console.warn(`[Alerting] 未知的渠道类型: ${channel.type}`);
+            return false;
+    }
+}
+/**
+ * 发送邮件
+ */
+async function sendEmail(channel, message) {
+    // TODO: 实现邮件发送
+    // 示例：使用 nodemailer
+    console.log(`[Alerting] 发送邮件到: ${channel.config.to?.join(', ')}`);
+    console.log(`[Alerting] 消息: ${message.substring(0, 100)}...`);
+    // 这里需要实际实现邮件发送逻辑
+    // const nodemailer = require('nodemailer');
+    // const transporter = nodemailer.createTransport({...});
+    // await transporter.sendMail({...});
+    return true; // 模拟成功
+}
+/**
+ * 发送短信
+ */
+async function sendSMS(channel, message) {
+    // TODO: 实现短信发送
+    // 示例：使用阿里云短信 API
+    console.log(`[Alerting] 发送短信到: ${channel.config.phones?.join(', ')}`);
+    console.log(`[Alerting] 消息: ${message.substring(0, 50)}...`);
+    return true; // 模拟成功
+}
+/**
+ * 发送 Webhook
+ */
+async function sendWebhook(channel, message) {
+    if (!channel.config.url) {
+        return false;
+    }
+    try {
+        const response = await fetch(channel.config.url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                ...channel.config.headers,
+            },
+            body: JSON.stringify({
+                timestamp: Date.now(),
+                message,
+                source: 'TrustCoin Security',
+            }),
+        });
+        return response.ok;
+    }
+    catch (error) {
+        console.error('[Alerting] Webhook 发送失败:', error);
+        return false;
+    }
+}
+/**
+ * 发送 Slack
+ */
+async function sendSlack(channel, message) {
+    if (!channel.config.webhookUrl) {
+        return false;
+    }
+    try {
+        const response = await fetch(channel.config.webhookUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                text: message,
+                username: 'TrustCoin Security Bot',
+                icon_emoji: ':warning:',
+            }),
+        });
+        return response.ok;
+    }
+    catch (error) {
+        console.error('[Alerting] Slack 发送失败:', error);
+        return false;
+    }
+}
+/**
+ * 发送 Discord
+ */
+async function sendDiscord(channel, message) {
+    if (!channel.config.webhookUrl) {
+        return false;
+    }
+    try {
+        const response = await fetch(channel.config.webhookUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                content: message,
+                username: 'TrustCoin Security Bot',
+            }),
+        });
+        return response.ok;
+    }
+    catch (error) {
+        console.error('[Alerting] Discord 发送失败:', error);
+        return false;
+    }
+}
+/**
+ * 发送 Telegram
+ */
+async function sendTelegram(channel, message) {
+    if (!channel.config.botToken || !channel.config.channelId) {
+        return false;
+    }
+    try {
+        const url = `https://api.telegram.org/bot${channel.config.botToken}/sendMessage`;
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                chat_id: channel.config.channelId,
+                text: message,
+                parse_mode: 'HTML',
+            }),
+        });
+        return response.ok;
+    }
+    catch (error) {
+        console.error('[Alerting] Telegram 发送失败:', error);
+        return false;
+    }
+}
+/**
+ * 发送微信企业号
+ */
+async function sendWeChat(channel, message) {
+    // TODO: 实现微信企业号发送
+    console.log(`[Alerting] 发送微信到: ${channel.config.users?.join(', ')}`);
+    console.log(`[Alerting] 消息: ${message.substring(0, 100)}...`);
+    return true; // 模拟成功
+}
+// ===================== 定时监控 =====================
+/**
+ * 启动定时监控（每 5 分钟检查一次）
+ */
+function startAlertingMonitor(intervalMs = 5 * 60 * 1000) {
+    console.log(`[Alerting] 启动告警监控，间隔 ${intervalMs / 1000} 秒`);
+    setInterval(async () => {
+        await monitorAndAlert();
+    }, intervalMs);
+    // 立即执行一次
+    monitorAndAlert().catch(console.error);
+}
+//# sourceMappingURL=alerting.js.map

package/core/alerting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerting.js","sourceRoot":"","sources":["../../src/core/alerting.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;AA+FH,gDAcC;AAKD,gDAMC;AAKD,4CAOC;AAKD,4CASC;AA0CD,0CA8DC;AA2PD,oDASC;AA5fD,4CAAoB;AACpB,gDAAwB;AACxB,+DAA0E;AAqF1E,MAAM,oBAAoB,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;AACrF,MAAM,kBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAEjF;;GAEG;AACH,SAAgB,kBAAkB;IAChC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACzC,OAAO;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAG,SAAS;YACrC,gBAAgB,EAAE,EAAE;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,MAAsB;IACvD,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,YAAE,CAAC,aAAa,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAsB;IACrD,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,eAAe;IACf,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,YAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,oDAAoD;AAEpD;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAe,EAAE,MAAuB;IAClE,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEvF,IAAI,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC;IAEpE,UAAU;IACV,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9E,CAAC;IAED,UAAU;IACV,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO;IACP,IAAI,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;IACZ,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,wCAAkB,GAAE,CAAC;IACpC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAEnC,YAAY;IACZ,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpF,IAAI,YAAY,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,SAAS;IACT,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,SAAS;QACT,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QAED,WAAW;QACX,IAAI,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACvC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACrG,OAAO,CAAC,CAAC,SAAS,IAAI,WAAW;oBAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;oBACnD,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAEb,SAAS;YACT,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAExD,OAAO;YACP,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEjE,OAAO;YACP,MAAM,MAAM,GAAgB;gBAC1B,EAAE,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACpE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;gBACjC,OAAO;gBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO;aACR,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAe,EAAE,MAAuB;IACjE,IAAI,OAAO,GAAG,IAAI,CAAC,eAAe,IAAI;;;MAGlC,IAAI,CAAC,IAAI;QACP,IAAI,CAAC,SAAS,IAAI,IAAI;QACtB,IAAI,CAAC,QAAQ,IAAI,IAAI;;;CAG5B,CAAC;IAEA,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACjB,OAAO,IAAI;IACX,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO;CAChB,CAAC;IACA,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI;MACP,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;CAE7B,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mDAAmD;AAEnD;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,UAAoB,EACpB,OAAe,EACf,MAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1C,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CACvC,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC;IAEnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,IAAI,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,OAAqB,EAAE,OAAe;IACjE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE3C,KAAK,KAAK;YACR,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEzC,KAAK,SAAS;YACZ,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE7C,KAAK,OAAO;YACV,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE3C,KAAK,SAAS;YACZ,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE7C,KAAK,UAAU;YACb,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE9C,KAAK,QAAQ;YACX,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE5C;YACE,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,OAAqB,EAAE,OAAe;IAC7D,eAAe;IACf,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAE9D,iBAAiB;IACjB,4CAA4C;IAC5C,yDAAyD;IACzD,qCAAqC;IAErC,OAAO,IAAI,CAAC,CAAE,OAAO;AACvB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,OAAqB,EAAE,OAAe;IAC3D,eAAe;IACf,iBAAiB;IACjB,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAE7D,OAAO,IAAI,CAAC,CAAE,OAAO;AACvB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,OAAe;IAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO;aAC1B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO;gBACP,MAAM,EAAE,oBAAoB;aAC7B,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,OAAqB,EAAE,OAAe;IAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,wBAAwB;gBAClC,UAAU,EAAE,WAAW;aACxB,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,OAAe;IAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,wBAAwB;aACnC,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAqB,EAAE,OAAe;IAChE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,+BAA+B,OAAO,CAAC,MAAM,CAAC,QAAQ,cAAc,CAAC;QACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;gBACjC,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,MAAM;aACnB,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE,OAAe;IAC9D,kBAAkB;IAClB,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAE9D,OAAO,IAAI,CAAC,CAAE,OAAO;AACvB,CAAC;AAED,mDAAmD;AAEnD;;GAEG;AACH,SAAgB,oBAAoB,CAAC,aAAqB,CAAC,GAAG,EAAE,GAAG,IAAI;IACrE,OAAO,CAAC,GAAG,CAAC,wBAAwB,UAAU,GAAG,IAAI,IAAI,CAAC,CAAC;IAE3D,WAAW,CAAC,KAAK,IAAI,EAAE;QACrB,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,SAAS;IACT,eAAe,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/core/app-store.d.ts

@@ -0,0 +1,77 @@
+/**
+ * App Store + Authorization System - 应用商店 + 授权系统
+ *
+ * 流程：
+ * 1. 开发者在索引器注册应用
+ * 2. 用户在 Web Panel 浏览应用
+ * 3. 用户点击"安装"，生成授权码/二维码
+ * 4. APP 扫码/输入授权码
+ * 5. 索引器验证授权，返回 API Key
+ * 6. APP 登录成功
+ */
+interface RegisteredApp {
+    id: string;
+    name: string;
+    description: string;
+    icon: string;
+    developer: string;
+    category: string;
+    permissions: string[];
+    website?: string;
+    downloadUrl?: string;
+    createdAt: number;
+    verified: boolean;
+    rating: number;
+    downloads: number;
+}
+/**
+ * 加载已注册应用
+ */
+export declare function loadRegisteredApps(): RegisteredApp[];
+/**
+ * 保存已注册应用
+ */
+export declare function saveRegisteredApps(apps: RegisteredApp[]): void;
+/**
+ * 注册新应用（开发者使用）
+ */
+export declare function registerApp(app: Omit<RegisteredApp, 'id' | 'createdAt' | 'verified' | 'rating' | 'downloads'>): RegisteredApp;
+interface AuthCode {
+    code: string;
+    walletAddress: string;
+    appId: string;
+    permissions: string[];
+    createdAt: number;
+    expiresAt: number;
+    used: boolean;
+    qrCode?: string;
+}
+/**
+ * 生成授权码
+ */
+export declare function generateAuthCode(walletAddress: string, appId: string): Promise<{
+    code: string;
+    qrCode: string;
+}>;
+/**
+ * 验证授权码
+ */
+export declare function verifyAuthCode(code: string, appId: string, walletAddress: string): {
+    valid: boolean;
+    authCode?: AuthCode;
+    error?: string;
+};
+/**
+ * 创建授权会话（APP 登录成功）
+ */
+export declare function createAuthSession(walletAddress: string, appId: string, permissions: string[], deviceInfo?: {
+    userAgent?: string;
+    ip?: string;
+    deviceName?: string;
+}): {
+    apiKey: string;
+    sessionId: string;
+    expiresAt: number;
+};
+export {};
+//# sourceMappingURL=app-store.d.ts.map

package/core/app-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-store.d.ts","sourceRoot":"","sources":["../../src/core/app-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,UAAU,aAAa;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,aAAa,EAAE,CAoDpD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAM9D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,aAAa,CAgB7H;AAID,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmCD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2C3C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAW1D"}

package/core/app-store.js

@@ -0,0 +1,207 @@
+"use strict";
+/**
+ * App Store + Authorization System - 应用商店 + 授权系统
+ *
+ * 流程：
+ * 1. 开发者在索引器注册应用
+ * 2. 用户在 Web Panel 浏览应用
+ * 3. 用户点击"安装"，生成授权码/二维码
+ * 4. APP 扫码/输入授权码
+ * 5. 索引器验证授权，返回 API Key
+ * 6. APP 登录成功
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadRegisteredApps = loadRegisteredApps;
+exports.saveRegisteredApps = saveRegisteredApps;
+exports.registerApp = registerApp;
+exports.generateAuthCode = generateAuthCode;
+exports.verifyAuthCode = verifyAuthCode;
+exports.createAuthSession = createAuthSession;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const qrcode_1 = __importDefault(require("qrcode"));
+const session_manager_1 = require("./session-manager");
+const runtime_data_1 = require("./runtime-data");
+const APPS_FILE = runtime_data_1.runtimeDataFile('registered-apps.json');
+const AUTH_CODES_FILE = runtime_data_1.runtimeDataFile('auth-codes.json');
+/**
+ * 加载已注册应用
+ */
+function loadRegisteredApps() {
+    if (!fs_1.default.existsSync(APPS_FILE)) {
+        // 初始化一些示例应用
+        const defaultApps = [
+            {
+                id: 'trustshop',
+                name: 'TrustShop',
+                description: 'TrustCoin 官方电商应用，安全买卖商品',
+                icon: '/icons/trustshop.png',
+                developer: 'TrustCoin Team',
+                category: '购物',
+                permissions: ['read:profile', 'read:orders', 'write:orders', 'read:products'],
+                website: 'https://trustcoin.network',
+                createdAt: Date.now(),
+                verified: true,
+                rating: 4.8,
+                downloads: 12500,
+            },
+            {
+                id: 'trustsocial',
+                name: 'TrustSocial',
+                description: 'TrustCoin 社交应用，关注好友，私信互动',
+                icon: '/icons/trustsocial.png',
+                developer: 'TrustCoin Team',
+                category: '社交',
+                permissions: ['read:profile', 'read:relationships', 'write:relationships', 'read:messages', 'write:messages'],
+                createdAt: Date.now(),
+                verified: true,
+                rating: 4.5,
+                downloads: 8900,
+            },
+            {
+                id: 'trustwallet',
+                name: 'TrustWallet',
+                description: 'TrustCoin 官方钱包应用，管理 TCT 资产',
+                icon: '/icons/trustwallet.png',
+                developer: 'TrustCoin Team',
+                category: '金融',
+                permissions: ['read:profile', 'read:balance', 'write:transfer'],
+                createdAt: Date.now(),
+                verified: true,
+                rating: 4.9,
+                downloads: 25000,
+            },
+        ];
+        saveRegisteredApps(defaultApps);
+        return defaultApps;
+    }
+    const data = fs_1.default.readFileSync(APPS_FILE, 'utf-8');
+    return JSON.parse(data);
+}
+/**
+ * 保存已注册应用
+ */
+function saveRegisteredApps(apps) {
+    const dir = path_1.default.dirname(APPS_FILE);
+    if (!fs_1.default.existsSync(dir)) {
+        fs_1.default.mkdirSync(dir, { recursive: true });
+    }
+    fs_1.default.writeFileSync(APPS_FILE, JSON.stringify(apps, null, 2));
+}
+/**
+ * 注册新应用（开发者使用）
+ */
+function registerApp(app) {
+    const apps = loadRegisteredApps();
+    const newApp = {
+        ...app,
+        id: crypto_1.default.randomBytes(8).toString('hex'),
+        createdAt: Date.now(),
+        verified: false, // 新应用需要审核
+        rating: 0,
+        downloads: 0,
+    };
+    apps.push(newApp);
+    saveRegisteredApps(apps);
+    return newApp;
+}
+/**
+ * 加载授权码
+ */
+function loadAuthCodes() {
+    if (!fs_1.default.existsSync(AUTH_CODES_FILE)) {
+        return [];
+    }
+    const data = fs_1.default.readFileSync(AUTH_CODES_FILE, 'utf-8');
+    return JSON.parse(data);
+}
+/**
+ * 保存授权码
+ */
+function saveAuthCodes(codes) {
+    const dir = path_1.default.dirname(AUTH_CODES_FILE);
+    if (!fs_1.default.existsSync(dir)) {
+        fs_1.default.mkdirSync(dir, { recursive: true });
+    }
+    fs_1.default.writeFileSync(AUTH_CODES_FILE, JSON.stringify(codes, null, 2));
+}
+/**
+ * 生成授权码
+ */
+async function generateAuthCode(walletAddress, appId) {
+    const apps = loadRegisteredApps();
+    const app = apps.find(a => a.id === appId);
+    if (!app) {
+        throw new Error('应用不存在');
+    }
+    // 生成 6 位数字授权码
+    const code = Math.floor(100000 + Math.random() * 900000).toString();
+    // 生成二维码内容
+    const qrContent = JSON.stringify({
+        type: 'trustcoin_app_auth',
+        code,
+        appId,
+        walletAddress,
+        permissions: app.permissions,
+        exp: Date.now() + 5 * 60 * 1000, // 5 分钟有效
+    });
+    // 生成二维码图片（base64）
+    const qrCode = await qrcode_1.default.toDataURL(qrContent);
+    // 保存授权码
+    const authCode = {
+        code,
+        walletAddress,
+        appId,
+        permissions: app.permissions,
+        createdAt: Date.now(),
+        expiresAt: Date.now() + 5 * 60 * 1000, // 5 分钟
+        used: false,
+        qrCode,
+    };
+    const codes = loadAuthCodes();
+    codes.push(authCode);
+    saveAuthCodes(codes);
+    console.log(`[Auth] 生成授权码: ${code} for ${app.name} by ${walletAddress}`);
+    return { code, qrCode };
+}
+/**
+ * 验证授权码
+ */
+function verifyAuthCode(code, appId, walletAddress) {
+    const codes = loadAuthCodes();
+    const authCode = codes.find(c => c.code === code && c.appId === appId);
+    if (!authCode) {
+        return { valid: false, error: '授权码无效' };
+    }
+    if (authCode.used) {
+        return { valid: false, error: '授权码已使用' };
+    }
+    if (Date.now() > authCode.expiresAt) {
+        return { valid: false, error: '授权码已过期' };
+    }
+    if (authCode.walletAddress !== walletAddress) {
+        return { valid: false, error: '钱包地址不匹配' };
+    }
+    // 标记为已使用
+    authCode.used = true;
+    saveAuthCodes(codes);
+    return { valid: true, authCode };
+}
+/**
+ * 创建授权会话（APP 登录成功）
+ */
+function createAuthSession(walletAddress, appId, permissions, deviceInfo) {
+    // 使用会话管理器创建会话
+    const session = (0, session_manager_1.createSession)(walletAddress, appId, permissions, deviceInfo);
+    console.log(`[Auth] 创建会话: ${session.sessionId} for ${appId} by ${walletAddress}`);
+    return {
+        apiKey: session.apiKey,
+        sessionId: session.sessionId,
+        expiresAt: session.expiresAt,
+    };
+}
+//# sourceMappingURL=app-store.js.map