trustbase-seller-backend 0.1.5

package/.env.example

@@ -0,0 +1,70 @@
+# TrustBase Seller Backend — 商户版配置模板
+# 复制为 .env 后按需修改; 私钥/密钥行不要进 git
+
+# ===== 服务 =====
+PORT=3004
+HOST=0.0.0.0
+NODE_ENV=production
+LOG_LEVEL=info
+
+# ===== 链连接 (指向任一健康节点; 默认公网入口见安装器) =====
+CHAIN_ID=trustchain-1
+CHAIN_RPC_URL=http://192.168.1.119:26657
+CHAIN_LCD_URL=http://192.168.1.119:1317
+LCD_URL=http://192.168.1.119:1317
+RPC_ENDPOINT=http://192.168.1.119:26657
+
+# ===== 卖家签名身份 (核心! 私钥在 CHAIN_HOME 的 keyring 里, 不出本机) =====
+# 签名通道: js (cosmjs 直签, 读 tb-keyring/mnemonic.txt, 无需 trustchaind) /
+#           trustchaind (CLI) / auto (默认: js 优先, 失败降级 CLI)
+# SIGN_MODE=auto
+# 密钥名: 安装器会在首次运行时生成并写入 keyring-backend=test
+CHAIN_KEY_NAME=seller
+# 安装目录 (含 tb-keyring/ data/ 与 .env 的目录): 所有相对路径的解析锚点。
+# 不设也能工作 (按 <base>/node_modules/trustbase-seller-backend 包布局 → 启动 cwd 推导),
+# 但显式写死最稳: 换 cwd / systemd 重启不会让密钥路径漂移。
+TB_BASE_DIR=/opt/trustbase/seller-backend
+# 运行时数据目录 (api-keys.json / .encryption-key / auth-sessions.json 等落盘处)。
+# 默认 = 安装目录 data/ (node_modules 同级, npm 升级不影响), 一般不需设置;
+# 特殊布局 (只读目录/自定义挂载) 用它显式指定, 优先级最高, doctor 会打印实际目录。
+# TRUSTBASE_DATA_DIR=/opt/trustbase/seller-backend/data
+# CHAIN_HOME 必须是绝对路径 (或相对 TB_BASE_DIR 的路径)。
+# 写 "./tb-keyring" 也安全 (会按 TB_BASE_DIR 解析), 但不能依赖进程 cwd —
+# 历史故障: cwd 变了 → trustchaind --home /tb-keyring (空 keyring) → tx sign 直接失败。
+CHAIN_HOME=/opt/trustbase/seller-backend/tb-keyring
+CHAIN_TX_FEE_AMOUNT=5000
+CHAIN_TX_FEE_DENOM=utct
+CHAIN_TX_GAS=300000
+CHAIN_TX_POLL_INTERVAL_MS=3000
+# 1 USD = 多少 utct (PoC 期 1:1; 生产由链上喂价/治理定)
+CHAIN_USD_TO_MICROTCT_RATE=1000000
+
+# ===== 商品上链默认值 =====
+# 单件默认质押 (utct): 链端 min_stake_per_unit=1000000 (1 TCT), 低于会被拒
+CHAIN_STAKE_PER_UNIT=1000000
+# P2P_ENDPOINT=
+
+# ===== 安全 =====
+# JWT 密钥: 生产必须改! (安装器自动生成 64 位随机值)
+JWT_SECRET=CHANGE_ME
+# API Key 鉴权 (LAN 默认放行; 公网部署必须 REQUIRE_API_KEY_FOR_LAN=1)
+REQUIRE_API_KEY_FOR_LAN=1
+ENABLE_API_KEY_AUTH=1
+ALLOWED_ORIGINS=http://localhost:3003
+IP_WHITELIST=127.0.0.1,::1
+
+# ===== 限流/熔断 =====
+RATE_LIMIT_MAX=1000
+RATE_LIMIT_WINDOW_MS=1000
+CIRCUIT_BREAKER_FAILURE_THRESHOLD=5
+CIRCUIT_BREAKER_TIMEOUT_MS=60000
+
+# ---- 微信支付 (可选, 真轨) ----
+# WXPAY_MCHID=1110995821
+# WXPAY_APPID=wx4868d8a5e7eb3f95
+# WXPAY_SERIAL=<证书序列号>
+# WXPAY_KEY_PATH=./secrets/apiclient_key.pem
+# WXPAY_APIV3_KEY=<32位>
+# 回调地址: 可选项! 未配置=查单模式(每2分钟主动查单, 无需公网); 配置公网HTTPS=实时回调
+# WXPAY_NOTIFY_URL=
+

package/MERCHANT-EDITION.md

@@ -0,0 +1,56 @@
+# 商户版裁剪清单 (MERCHANT-EDITION)
+
+目标: 把全量 indexer (`run-unified.js`) 裁成商户自托管后端 —
+只保留"卖家写链 + 商品查询"所需, 减小攻击面/依赖/内存。
+
+状态: **未裁剪** (0.1.0 直搬全量, 先跑通安装器)。裁剪按本清单分批做,
+每批裁完跑 `test/e2e-contract.md` 全量回归再发版。
+
+## KEEP (必须保留)
+
+| 路由/模块 | 用途 |
+|---|---|
+| `routes/chain-writes.js` | 订单 /api/orders /api/payments |
+| `routes/chain-writes-products.js` | 商品 /api/products (+pause/resume/delete/stock) |
+| `routes/chain-writes-pledge.js` | 国库质押 (进件用) |
+| `api/seller-products-chain.js` | update-pledge / list-on-chain |
+| `routes/marketplace.js` | 商品搜索/详情 (未质押不可见) |
+| `middleware/security.js` + API key 鉴权 | 访问控制 |
+| `db` / `plugins/sqlite.js` | SQLite 存储 |
+| 健康检查 + `/api/wallet/resolve` | 安装器自检 |
+
+## TRIM (商户版去掉)
+
+- `council/` `oracle/` `search/` `shipping/` `tools/` `oauth/` `verifyer/`
+- `p2p/` `peer/` `mcp/` `ws/` (P2P/M2M/MCP 是平台侧协作件)
+- `payments/` `payment/` (PSP 平台聚合支付; 商户收款在各自微信商户号)
+- `routes/economy.js` `routes/council.js` `routes/chain-registry.js` 等平台路由
+- TLS/port-manager (安装器交给 nginx/caddy)
+
+## 依赖裁剪对照
+
+KEEP 后可去掉: `@modelcontextprotocol/sdk` `http-proxy-middleware` `qrcode`
+`bcrypt`(若 oauth 走) `axios`(多数平台路由用) — 以 TRIM 批次实测为准。
+
+## 回归口径 (每批 TRIM 后必过)
+
+1. POST /api/products (sxo- 前缀) → 链上入块, slot 可查
+2. 重复 POST 同 sku → 转 AddStock 语义
+3. PUT update-pledge (完整 sku) → code 0
+4. POST /api/orders 多 items → chain_order_ids 对齐
+5. POST /api/payments (链上单号) → code 0
+6. 15s 未入块 → 502 tx_delivery_timeout
+7. 同账户 burst 8 连发 → 全部入块 (串行化生效)
+
+## 身份与签名 (2026-09-21 起)
+
+- **身份生成**: `core/seller-identity.js` 内置实现 (BIP39 24 词 → `m/44'/118'/0'/0/0`
+  → secp256k1 → bech32 tct 地址, 全部走项目已有 @cosmjs 依赖, 派生正确性由
+  `test-seller-identity.js` 的 cosmos 测试向量保证)。入驻页提交时幂等生成,
+  落盘 `<cwd>/tb-keyring/mnemonic.txt` + `address.txt` (Unix 0600)。
+- **交易签名**: **JS 直签已上线** (2026-09-21, `core/chain-signer.js`) — tb-keyring 助记词
+  → DirectSecp256k1HdWallet → SigningStargateClient (protobufjs 反射 Registry, vendor proto/)
+  → RPC broadcast_tx_sync → LCD 轮询 DeliverTx, 语义与 CLI 路径逐一对齐。`SIGN_MODE=js|trustchaind|auto`
+  (默认 auto: js 优先, 失败降级 CLI)。CLI 路径 (trustchaind) 保留作 fallback。
+- **后续 (未做)**: gas simulate (当前固定 CHAIN_TX_GAS=300000 与 CLI 等价); serviceprovider
+  消息端到端 (等 v3.9.3 上舰队); CLI 路径淘汰评估 (直签稳定跑一个版本后)。

package/README.md

@@ -0,0 +1,99 @@
+# trustbase-seller-backend (商户版)
+
+TrustBase 保障链生态的卖家自托管后端: 商品上链 / 订单 / 支付确认 / 单件质押 的写入口。
+**单卖家形态** — 签名 key 即卖家身份, 私钥不出本机。
+
+给「`npx @trustbase/shopxo-init` 一键安装器」当依赖用, 也可以独立运行。
+
+## 快速开始
+
+```bash
+npm install -g trustbase-seller-backend
+cp .env.example .env   # 编辑链端点与卖家 key
+tb-seller-backend
+```
+
+前置条件:
+
+- Node.js >= 18
+- 卖家身份: **内置生成** (入驻页或首次提交时自动生成, BIP39 24 词 → `m/44'/118'/0'/0/0` → tct1 地址,
+  助记词落盘 `tb-keyring/mnemonic.txt`, 只存本机)。也可继续用 trustchaind 生成:
+  `trustchaind keys add seller --keyring-backend test --home ./tb-keyring`
+  (生产建议 keyring-backend=file + 强口令)
+- 卖家地址需要 TCT: 上链列表费 (0.5 TCT/条) + 单件质押 (>=1 TCT/件)
+
+> ✅ 2026-09-21 更新: **JS 直签已上线** (`core/chain-signer.js`)。`SIGN_MODE` 三态:
+> - `js` — cosmjs 直签 (tb-keyring 助记词 → secp256k1 → 广播), 不需要 trustchaind 二进制
+> - `trustchaind` — 原 CLI 路径 (保留)
+> - `auto` (默认) — 有助记词走 js, 缺失或 js 签名失败自动降级 CLI
+>
+> Windows 商家机默认 auto, 装好即用, 无需 trustchaind。
+
+> 🔧 2026-09-22 更新: **路径不再依赖进程 cwd** (`core/paths.js`)。安装目录 = `TB_BASE_DIR`
+> → `<base>/node_modules/trustbase-seller-backend` 包布局 → 启动 cwd, 启动时解析一次并冻结;
+> `CHAIN_HOME` 相对值一律按安装目录解析成绝对路径 (历史故障: `cd /` 启动 → `trustchaind
+> tx sign --home /tb-keyring` 空 keyring → 签名失败)。
+> 一条命令自检 (路径/身份/签名通道/链上账户):
+>
+> ```bash
+> tb-seller-doctor          # 或 tb-seller-backend doctor / npm run doctor
+> ```
+>
+> 启动日志会打印一行 `[boot] base=... keyring=... mnemonic=yes/no signMode=js|trustchaind`。
+
+> 🔧 2026-09-23 更新: **运行时数据 (api-keys.json / .encryption-key / auth-sessions.json 等)
+> 迁出 node_modules** — 原来落在 `<base>/node_modules/data/`, `npm install <tgz>` 升级会把
+> node_modules 下非声明目录清掉 → **升级即清空全部 API key 和加密密钥** (.215 实际发生过)。
+> 现在统一由 `core/runtime-data.js` 解析: 默认 `<安装目录>/data` (node_modules 同级, npm 碰不到),
+> 启动时自动把旧 `node_modules/data/` 的数据搬迁过来 (rename 优先, 失败 copy+校验+删,
+> 新目录同名文件先备份 `.bak-<ts>`); 环境变量 `TRUSTBASE_DATA_DIR` 可显式覆盖 (优先级最高,
+> doctor 会打印实际目录)。
+
+## 与插件/安装器的契约
+
+| 端点 | 用途 | 备注 |
+|---|---|---|
+| `POST /api/products` | 商品上架 (sku_prefix=sxo) | wp_post_id=小整数 goods_id |
+| `PUT /api/seller/products/{sku}/update-pledge` | 改单件质押 | sku 支持完整 `sxo-{id}` |
+| `POST /api/orders` | 订单上链 | **v3.9.4**: `buyer_address` 必填 (真实买家 tct1, 不再回填卖家); 响应带 `chain_order_ids` + `order_intent_hash`/`order_intent_memo` |
+| `POST /api/order/ship` | 发货 | 仅 `PAID` 可发; `MsgShipOrder.seller` = 签名者; 字段是 `tracking_info` |
+| `POST /api/order/confirm` | 确认收货 (+评分) | 仅 `SHIPPED`; signer=**submitter**=本机卖家, `buyer` 取链上订单; 响应带 `submit_path` |
+| `POST /api/order/cancel` | 取消订单 | 仅 `PENDING`; signer=**seller**; `canceller` 缺省记卖家, `initiator:"buyer"` 记买家; 链上**无 reason 字段** |
+| `POST /api/order/dispute` | 发起争议 | `SHIPPED`/`CONFIRMED` 且未结算; signer=**submitter**; memo=`tb-auth:<sha256(申诉意愿)>` + 原文落 `order_intent_log` |
+| `POST /api/order/create` | ⛔ 410 停用 | 下单走 `POST /api/orders` (不做第二套) |
+| `POST /api/payments` | 支付确认 | order_id 用链上单号 |
+| `GET /api/marketplace/*` | 商品搜索/详情 | 未质押不可见 |
+
+> `/api/order/{ship,confirm,cancel,dispute}` 沿用 `Bearer JWT` 操作员鉴权 (与同文件既有 GET 一致);
+> 签名者恒为**本机卖家 key**, 与调用方是谁无关 —— 这是"卖家代买家提交"的实现方式。
+
+安全语义 (2026-09-20 起): 订单/支付的 seller/authority 强制取签名 key;
+广播后 15s 未入块返回 502 `tx_delivery_timeout` (调用方走重试); 同账户发送串行化。
+
+v3.9.4 卖家代建单 (2026-09 起, 必须与链升级同批上线): `MsgCreateOrder` 的 signer = **seller**
+(买家不装节点、浏览器不持私钥), `buyer` 必须由调用方给真实买家 tct1 地址
+(非空/合法 bech32/≠卖家, 且该买家已注册 trustcoin 账户); 买家意愿走 tx
+memo `tb-auth:<sha256(整批订单意愿)>`, 原文落本地 `order_intent_log` 备查。
+详见 `core/order-intent.js` 与 `POST /api/orders` 注释。
+
+v3.9.4 / D2 订单生命周期 (同一批上线, 剧本 §7 的上线顺序):
+
+| 消息 | signer (proto 注解) | "实际发起方"记录字段 | 备注 |
+|---|---|---|---|
+| `MsgShipOrder` | `seller` | — | 语义未变 |
+| `MsgConfirmOrder` | **`submitter`** | `buyer` (keeper 校验 = 订单买家) | 白名单: 订单卖家 / `params.dispute_authority` / 超时兜底 |
+| `MsgCancelOrder` | **`seller`** | `canceller` (buyer 或 seller) | 仅 PENDING; keeper 校验 `seller` = 订单卖家 |
+| `MsgDisputeOrder` | **`submitter`** | `disputer` (buyer 或 seller) | 白名单同 Confirm |
+
+> ⚠️ **上线顺序 (硬约束): 先发本后端, 再换链。**
+> 链升级后旧后端发出的 tx 会全部被链拒 (缺 `submitter`/`seller` 字段, 或 `buyer == seller`);
+> 而本后端不发新语义的 Confirm/Cancel/Dispute, 则"确认收货 / 取消 / 争议"在链上不可用 (订单死锁)。
+> 本仓的 vendored proto (`proto/trustchain/order/v1/tx.proto`) 已按 trustchain-relmerge 对齐;
+> 再同步链侧 proto 时**必须一起 vendor** —— protobufjs 对未知字段是**静默丢弃**,
+> 漏 vendor 的症状是链上 `submitter is required`, 而不是本地报错。
+
+## 商户版裁剪 (路线)
+
+当前包是全量 indexer 的直搬 (跑 `run-unified.js`)。商户版裁剪目标:
+只留 chain-writes / marketplace / seller 三组路由 + 健康检查, 去掉
+council/oracle/p2p/m2m/mcp 等平台侧组件。裁剪清单见 `MERCHANT-EDITION.md`。

package/api/__tests__/test-utils.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Minimal supertest replacement for HTTP route tests.
+ *
+ * Why we don't depend on supertest:
+ *   - The project doesn't already have it; adding a new devDep on Windows
+ *     risks npm install failure (per [[trustchain-cgo-windows]]).
+ *   - All we need is: spin up the express app on an ephemeral port, fire
+ *     a request, return { status, body, headers }. ~30 LOC.
+ *
+ * Usage:
+ *   const server = await startTestServer(app);
+ *   const res = await post(server, '/foo', { hello: 'world' }, { 'X-Foo': 'bar' });
+ *   expect(res.status).toBe(200);
+ *   await server.close();
+ */
+import http from 'http';
+import type { Express } from 'express';
+export interface TestServer {
+    url: string;
+    port: number;
+    close: () => Promise<void>;
+}
+export declare function startTestServer(app: Express): Promise<TestServer>;
+export interface TestResponse {
+    status: number;
+    body: any;
+    headers: http.IncomingHttpHeaders;
+    raw: string;
+}
+export declare const get: (server: TestServer, path: string, headers?: Record<string, string>) => Promise<TestResponse>;
+export declare const post: (server: TestServer, path: string, body: object | null, headers?: Record<string, string>) => Promise<TestResponse>;
+export declare const put: (server: TestServer, path: string, body: object | null, headers?: Record<string, string>) => Promise<TestResponse>;
+//# sourceMappingURL=test-utils.d.ts.map

package/api/__tests__/test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/test-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAgBvE;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;CACb;AAsDD,eAAO,MAAM,GAAG,GAAI,QAAQ,UAAU,EAAE,MAAM,MAAM,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,0BACjC,CAAC;AAEtD,eAAO,MAAM,IAAI,GACf,QAAQ,UAAU,EAClB,MAAM,MAAM,EACZ,MAAM,MAAM,GAAG,IAAI,EACnB,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,0BACuB,CAAC;AAE1D,eAAO,MAAM,GAAG,GACd,QAAQ,UAAU,EAClB,MAAM,MAAM,EACZ,MAAM,MAAM,GAAG,IAAI,EACnB,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,0BACsB,CAAC"}

package/api/__tests__/test-utils.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * Minimal supertest replacement for HTTP route tests.
+ *
+ * Why we don't depend on supertest:
+ *   - The project doesn't already have it; adding a new devDep on Windows
+ *     risks npm install failure (per [[trustchain-cgo-windows]]).
+ *   - All we need is: spin up the express app on an ephemeral port, fire
+ *     a request, return { status, body, headers }. ~30 LOC.
+ *
+ * Usage:
+ *   const server = await startTestServer(app);
+ *   const res = await post(server, '/foo', { hello: 'world' }, { 'X-Foo': 'bar' });
+ *   expect(res.status).toBe(200);
+ *   await server.close();
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.put = exports.post = exports.get = void 0;
+exports.startTestServer = startTestServer;
+const http_1 = __importDefault(require("http"));
+async function startTestServer(app) {
+    return new Promise((resolve, reject) => {
+        const server = app.listen(0, '127.0.0.1');
+        server.once('error', reject);
+        server.once('listening', () => {
+            const addr = server.address();
+            resolve({
+                url: `http://127.0.0.1:${addr.port}`,
+                port: addr.port,
+                close: () => new Promise((res, rej) => {
+                    server.close((err) => (err ? rej(err) : res()));
+                }),
+            });
+        });
+    });
+}
+function makeRequest(method, baseUrl, path, body, headers) {
+    return new Promise((resolve, reject) => {
+        const url = new URL(path, baseUrl);
+        const data = body !== undefined && body !== null ? Buffer.from(JSON.stringify(body)) : null;
+        const reqHeaders = {
+            Accept: 'application/json',
+            ...(headers ?? {}),
+        };
+        if (data) {
+            reqHeaders['Content-Type'] = reqHeaders['Content-Type'] ?? 'application/json';
+            reqHeaders['Content-Length'] = String(data.length);
+        }
+        const req = http_1.default.request({
+            method,
+            hostname: url.hostname,
+            port: url.port,
+            path: url.pathname + url.search,
+            headers: reqHeaders,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const raw = Buffer.concat(chunks).toString('utf8');
+                let parsed = raw;
+                try {
+                    parsed = JSON.parse(raw);
+                }
+                catch {
+                    /* leave as raw string */
+                }
+                resolve({
+                    status: res.statusCode ?? 0,
+                    body: parsed,
+                    headers: res.headers,
+                    raw,
+                });
+            });
+        });
+        req.on('error', reject);
+        if (data)
+            req.write(data);
+        req.end();
+    });
+}
+const get = (server, path, headers) => makeRequest('GET', server.url, path, null, headers);
+exports.get = get;
+const post = (server, path, body, headers) => makeRequest('POST', server.url, path, body, headers);
+exports.post = post;
+const put = (server, path, body, headers) => makeRequest('PUT', server.url, path, body, headers);
+exports.put = put;
+//# sourceMappingURL=test-utils.js.map

package/api/__tests__/test-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.js","sourceRoot":"","sources":["../../../src/api/__tests__/test-utils.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAYH,0CAgBC;AA1BD,gDAAwB;AAUjB,KAAK,UAAU,eAAe,CAAC,GAAY;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YAC7C,OAAO,CAAC;gBACN,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,WAAW,CAClB,MAA8B,EAC9B,OAAe,EACf,IAAY,EACZ,IAAoB,EACpB,OAAgC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5F,MAAM,UAAU,GAA2B;YACzC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;SACnB,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACT,UAAU,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;YAC9E,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CACtB;YACE,MAAM;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC/B,OAAO,EAAE,UAAU;SACpB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,IAAI,MAAM,GAAQ,GAAG,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;gBACD,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,MAAM,GAAG,GAAG,CAAC,MAAkB,EAAE,IAAY,EAAE,OAAgC,EAAE,EAAE,CACxF,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AADzC,QAAA,GAAG,OACsC;AAE/C,MAAM,IAAI,GAAG,CAClB,MAAkB,EAClB,IAAY,EACZ,IAAmB,EACnB,OAAgC,EAChC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAL7C,QAAA,IAAI,QAKyC;AAEnD,MAAM,GAAG,GAAG,CACjB,MAAkB,EAClB,IAAY,EACZ,IAAmB,EACnB,OAAgC,EAChC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAL5C,QAAA,GAAG,OAKyC"}

package/api/db/case-library-types.d.ts

@@ -0,0 +1,47 @@
+import type { Database } from 'better-sqlite3';
+export type Outcome = 'buyer_win' | 'seller_win' | 'draw' | 'stalled_upgraded';
+export type DisputeType = 'refund_only' | 'return_refund' | 'non_delivery' | 'quality_mismatch' | 'fake_refund' | 'malicious_review' | 'other';
+export type FiatOrTct = 'fiat_arb' | 'tct';
+export interface CaseRow {
+    case_id: number;
+    order_id: number;
+    category: string;
+    sub_category: string | null;
+    dispute_type: DisputeType;
+    amount_tier: number;
+    fiat_or_tct: FiatOrTct;
+    outcome: Outcome;
+    vote_yes: number;
+    vote_no: number;
+    vote_abstain: number;
+    voter_count: number;
+    commit_end: string | null;
+    resolved_at: string;
+    resolved_height: number;
+    summary: string | null;
+    overturned_by_case_id: number | null;
+    created_at: string;
+}
+export interface CaseCitationRow {
+    from_case: number;
+    to_case: number;
+    context: string | null;
+    created_at: string;
+}
+export declare function insertCase(db: Database, c: Omit<CaseRow, 'created_at'>): void;
+export declare function getCaseById(db: Database, caseId: number): CaseRow | undefined;
+export declare function searchCases(db: Database, opts?: {
+    category?: string;
+    dispute_type?: DisputeType;
+    outcome?: Outcome;
+    amount_tier?: number;
+    fiat_or_tct?: FiatOrTct;
+    q?: string;
+    limit?: number;
+    offset?: number;
+}): CaseRow[];
+export declare function getSimilarCases(db: Database, caseId: number, limit?: number): CaseRow[];
+export declare function insertCitation(db: Database, c: CaseCitationRow): void;
+export declare function getCitations(db: Database, fromCase: number): CaseCitationRow[];
+export declare function getCitedBy(db: Database, toCase: number): CaseCitationRow[];
+//# sourceMappingURL=case-library-types.d.ts.map

package/api/db/case-library-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-library-types.d.ts","sourceRoot":"","sources":["../../../src/api/db/case-library-types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,MAAM,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAC/E,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,aAAa,GACb,kBAAkB,GAClB,OAAO,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AAE3C,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,WAAW,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,SAAS,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,IAAI,CAkB7E;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7E;AAED,wBAAgB,WAAW,CACzB,EAAE,EAAE,QAAQ,EACZ,IAAI,GAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ,GACL,OAAO,EAAE,CA2CX;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,SAAK,GACT,OAAO,EAAE,CAcX;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,GAAG,IAAI,CAKrE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE,CAI9E;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAI1E"}

package/api/db/case-library-types.js

@@ -0,0 +1,105 @@
+"use strict";
+// indexer/src/api/db/case-library-types.ts — 判例库 TypeScript 类型 + DAO
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.insertCase = insertCase;
+exports.getCaseById = getCaseById;
+exports.searchCases = searchCases;
+exports.getSimilarCases = getSimilarCases;
+exports.insertCitation = insertCitation;
+exports.getCitations = getCitations;
+exports.getCitedBy = getCitedBy;
+function insertCase(db, c) {
+    // FTS5 索引由 AFTER INSERT 触发器自动维护 (见 case-library.db.ts schema)
+    const stmt = db.prepare(`
+    INSERT OR REPLACE INTO cases (
+      case_id, order_id, category, sub_category, dispute_type,
+      amount_tier, fiat_or_tct, outcome,
+      vote_yes, vote_no, vote_abstain, voter_count,
+      commit_end, resolved_at, resolved_height, summary,
+      overturned_by_case_id
+    ) VALUES (
+      @case_id, @order_id, @category, @sub_category, @dispute_type,
+      @amount_tier, @fiat_or_tct, @outcome,
+      @vote_yes, @vote_no, @vote_abstain, @voter_count,
+      @commit_end, @resolved_at, @resolved_height, @summary,
+      @overturned_by_case_id
+    )
+  `);
+    stmt.run(c);
+}
+function getCaseById(db, caseId) {
+    return db.prepare('SELECT * FROM cases WHERE case_id = ?').get(caseId);
+}
+function searchCases(db, opts = {}) {
+    const limit = opts.limit ?? 50;
+    const offset = opts.offset ?? 0;
+    // FTS5 path
+    if (opts.q) {
+        const fts = db
+            .prepare(`SELECT c.* FROM cases c
+         INNER JOIN cases_fts ON cases_fts.case_id = c.case_id
+         WHERE cases_fts.summary MATCH ?
+         ORDER BY c.resolved_height DESC
+         LIMIT ? OFFSET ?`)
+            .all(opts.q, limit, offset);
+        return fts;
+    }
+    // structured filter path
+    const conds = [];
+    const params = [];
+    if (opts.category) {
+        conds.push('category = ?');
+        params.push(opts.category);
+    }
+    if (opts.dispute_type) {
+        conds.push('dispute_type = ?');
+        params.push(opts.dispute_type);
+    }
+    if (opts.outcome) {
+        conds.push('outcome = ?');
+        params.push(opts.outcome);
+    }
+    if (opts.amount_tier !== undefined) {
+        conds.push('amount_tier = ?');
+        params.push(opts.amount_tier);
+    }
+    if (opts.fiat_or_tct) {
+        conds.push('fiat_or_tct = ?');
+        params.push(opts.fiat_or_tct);
+    }
+    const where = conds.length ? `WHERE ${conds.join(' AND ')}` : '';
+    return db
+        .prepare(`SELECT * FROM cases ${where} ORDER BY resolved_height DESC LIMIT ? OFFSET ?`)
+        .all(...params, limit, offset);
+}
+function getSimilarCases(db, caseId, limit = 10) {
+    const target = getCaseById(db, caseId);
+    if (!target)
+        return [];
+    return db
+        .prepare(`SELECT * FROM cases
+       WHERE case_id != ?
+         AND dispute_type = ?
+         AND category = ?
+         AND amount_tier = ?
+       ORDER BY resolved_height DESC
+       LIMIT ?`)
+        .all(caseId, target.dispute_type, target.category, target.amount_tier, limit);
+}
+function insertCitation(db, c) {
+    db.prepare(`INSERT OR REPLACE INTO case_citations (from_case, to_case, context, created_at)
+     VALUES (@from_case, @to_case, @context, @created_at)`).run(c);
+}
+function getCitations(db, fromCase) {
+    return db
+        .prepare('SELECT * FROM case_citations WHERE from_case = ?')
+        .all(fromCase);
+}
+function getCitedBy(db, toCase) {
+    return db
+        .prepare('SELECT * FROM case_citations WHERE to_case = ?')
+        .all(toCase);
+}
+// syncFtsIndex 删了: FTS5 索引现在通过 AFTER INSERT/UPDATE/DELETE 触发器自动维护
+// (kimi #14273 拍板). 应用代码写 cases, FTS 自动跟随, 不再手动 sync.
+//# sourceMappingURL=case-library-types.js.map

package/api/db/case-library-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-library-types.js","sourceRoot":"","sources":["../../../src/api/db/case-library-types.ts"],"names":[],"mappings":";AAAA,qEAAqE;;AA2CrE,gCAkBC;AAED,kCAEC;AAED,kCAuDC;AAED,0CAkBC;AAED,wCAKC;AAED,oCAIC;AAED,gCAIC;AAtHD,SAAgB,UAAU,CAAC,EAAY,EAAE,CAA8B;IACrE,8DAA8D;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;GAcvB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,WAAW,CAAC,EAAY,EAAE,MAAc;IACtD,OAAO,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwB,CAAC;AAChG,CAAC;AAED,SAAgB,WAAW,CACzB,EAAY,EACZ,OASI,EAAE;IAEN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAChC,YAAY;IACZ,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN;;;;0BAIkB,CACnB;aACA,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,GAAgB,CAAC;IAC1B,CAAC;IACD,yBAAyB;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,OAAO,EAAE;SACN,OAAO,CAAC,uBAAuB,KAAK,iDAAiD,CAAC;SACtF,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAc,CAAC;AAChD,CAAC;AAED,SAAgB,eAAe,CAC7B,EAAY,EACZ,MAAc,EACd,KAAK,GAAG,EAAE;IAEV,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,EAAE;SACN,OAAO,CACN;;;;;;eAMS,CACV;SACA,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,CAAc,CAAC;AAC/F,CAAC;AAED,SAAgB,cAAc,CAAC,EAAY,EAAE,CAAkB;IAC7D,EAAE,CAAC,OAAO,CACR;0DACsD,CACvD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,YAAY,CAAC,EAAY,EAAE,QAAgB;IACzD,OAAO,EAAE;SACN,OAAO,CAAC,kDAAkD,CAAC;SAC3D,GAAG,CAAC,QAAQ,CAAsB,CAAC;AACxC,CAAC;AAED,SAAgB,UAAU,CAAC,EAAY,EAAE,MAAc;IACrD,OAAO,EAAE;SACN,OAAO,CAAC,gDAAgD,CAAC;SACzD,GAAG,CAAC,MAAM,CAAsB,CAAC;AACtC,CAAC;AAED,kEAAkE;AAClE,sDAAsD"}

package/api/db/case-library.db.d.ts

@@ -0,0 +1,5 @@
+import Database from 'better-sqlite3';
+export declare function initCaseLibraryDb(dbPath?: string): Database.Database;
+export declare function getCaseLibraryDb(): Database.Database;
+export declare function closeCaseLibraryDb(): void;
+//# sourceMappingURL=case-library.db.d.ts.map

package/api/db/case-library.db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-library.db.d.ts","sourceRoot":"","sources":["../../../src/api/db/case-library.db.ts"],"names":[],"mappings":"AAGA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAgEtC,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CASpE;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,CAKpD;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAKzC"}