trustbase-seller-backend 0.1.5

package/api/db/case-library.db.js

@@ -0,0 +1,127 @@
+"use strict";
+// indexer/src/api/db/case-library.db.ts — 判例库 SQLite 初始化 + 连接
+// per case-library-design.md §3 schema + §3 红线 invariant (无 voter 字段)
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initCaseLibraryDb = initCaseLibraryDb;
+exports.getCaseLibraryDb = getCaseLibraryDb;
+exports.closeCaseLibraryDb = closeCaseLibraryDb;
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const MIGRATION_SQL = `
+-- cases 表: 链上 dispute 终态的索引器侧沉淀
+-- 严格不存 voter / 投票人 / 共案关系, 红线 invariant
+CREATE TABLE IF NOT EXISTS cases (
+  case_id INTEGER PRIMARY KEY,           -- = dispute_id, 一案一例
+  order_id INTEGER NOT NULL,
+  category TEXT NOT NULL,                 -- 案情分类 (商品轴)
+  sub_category TEXT,
+  dispute_type TEXT NOT NULL,             -- 事实轴: refund_only / return_refund / non_delivery / quality_mismatch / fake_refund / malicious_review / other
+  amount_tier INTEGER NOT NULL,           -- 治理分层 1-5
+  fiat_or_tct TEXT NOT NULL,              -- 支付路线: fiat_arb / tct
+  outcome TEXT NOT NULL,                  -- buyer_win / seller_win / draw / stalled_upgraded
+  vote_yes INTEGER NOT NULL,              -- 计票分布 (聚合)
+  vote_no INTEGER NOT NULL,
+  vote_abstain INTEGER NOT NULL,
+  voter_count INTEGER NOT NULL,
+  commit_end TEXT,                        -- v0.22 commit-reveal 落地后有意义
+  resolved_at TEXT NOT NULL,
+  resolved_height INTEGER NOT NULL,
+  summary TEXT,                           -- 模板化摘要 (FTS5 索引)
+  overturned_by_case_id INTEGER,          -- 翻案追溯 (spec §10 开放问题 3)
+  created_at TEXT DEFAULT (datetime('now'))
+);
+
+-- 引用关系: 判例之间的同类引用边
+CREATE TABLE IF NOT EXISTS case_citations (
+  from_case INTEGER NOT NULL REFERENCES cases(case_id),
+  to_case   INTEGER NOT NULL REFERENCES cases(case_id),
+  context   TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  PRIMARY KEY (from_case, to_case)
+);
+
+CREATE INDEX IF NOT EXISTS idx_cases_category ON cases(category, sub_category);
+CREATE INDEX IF NOT EXISTS idx_cases_outcome  ON cases(outcome, amount_tier);
+CREATE INDEX IF NOT EXISTS idx_cases_resolved ON cases(resolved_height);
+
+-- FTS5 全文检索: trigram tokenizer 支持中文 4 字短语命中 (per kimi #14073 §2.2 验收)
+-- '虚假退款' = 4 字, 3-gram sliding window 覆盖
+-- 内部 content 模式 (无外部表), AFTER INSERT/UPDATE/DELETE 触发器维护
+CREATE VIRTUAL TABLE IF NOT EXISTS cases_fts USING fts5(
+  case_id UNINDEXED,
+  summary,
+  tokenize='trigram'
+);
+
+-- 触发器自动维护 FTS 索引 (kimi #14273 拍板: 整条 syncFtsIndex 函数删了换触发器)
+CREATE TRIGGER IF NOT EXISTS cases_fts_ai AFTER INSERT ON cases BEGIN
+  INSERT INTO cases_fts(case_id, summary) VALUES (NEW.case_id, NEW.summary);
+END;
+CREATE TRIGGER IF NOT EXISTS cases_fts_au AFTER UPDATE ON cases BEGIN
+  UPDATE cases_fts SET summary = NEW.summary WHERE case_id = NEW.case_id;
+END;
+CREATE TRIGGER IF NOT EXISTS cases_fts_ad AFTER DELETE ON cases BEGIN
+  DELETE FROM cases_fts WHERE case_id = OLD.case_id;
+END;
+`;
+let _dbInstance = null;
+function initCaseLibraryDb(dbPath) {
+    const target = dbPath ?? path.join(process.cwd(), 'data', 'case-library.db');
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    const db = new better_sqlite3_1.default(target);
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    db.exec(MIGRATION_SQL);
+    _dbInstance = db;
+    return db;
+}
+function getCaseLibraryDb() {
+    if (!_dbInstance) {
+        throw new Error('case-library db not initialized; call initCaseLibraryDb() first');
+    }
+    return _dbInstance;
+}
+function closeCaseLibraryDb() {
+    if (_dbInstance) {
+        _dbInstance.close();
+        _dbInstance = null;
+    }
+}
+//# sourceMappingURL=case-library.db.js.map

package/api/db/case-library.db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-library.db.js","sourceRoot":"","sources":["../../../src/api/db/case-library.db.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,sEAAsE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkEtE,8CASC;AAED,4CAKC;AAED,gDAKC;AAvFD,oEAAsC;AACtC,2CAA6B;AAC7B,uCAAyB;AAEzB,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDrB,CAAC;AAEF,IAAI,WAAW,GAA6B,IAAI,CAAC;AAEjD,SAAgB,iBAAiB,CAAC,MAAe;IAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,wBAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvB,WAAW,GAAG,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAgB,kBAAkB;IAChC,IAAI,WAAW,EAAE,CAAC;QAChB,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;AACH,CAAC"}

package/api/email.d.ts

@@ -0,0 +1,56 @@
+/**
+ * TrustChain Email 注册 + 验证 backend (baobei lane 6 W2 邮箱注册实战锁版)
+ *
+ * 设计原则 (Lesson #NEW 8/23 06:00 SGT 实战锁版):
+ * 1. Email = 用户级身份补充, 跟 chain_address 双向绑定
+ * 2. 验证 = 6 位数字码 + 10 分钟过期 (实战可配置, 默认 10 min)
+ * 3. 防滥用: 同 email 1 分钟内最多 1 封, 1 小时最多 5 封
+ * 4. 不发真实邮件: MVP 用 console.log + DB 表 (e2e 测试友好)
+ *    真实 SMTP 由 ops team 配置 EMAIL_SMTP_HOST 等 env vars
+ * 5. 验证后 = users 表 chain_address ↔ email 双向绑定, 不可换 (除非改邮箱)
+ *
+ * 接口契约 (跟 docs/email-registration-v0.1-spec.md 一致):
+ *   - POST /api/email/send-code     发送验证码
+ *   - POST /api/email/verify        验证邮箱 (verify_code)
+ *   - POST /api/email/register      邮箱注册新用户 (返回 JWT)
+ *   - POST /api/email/change        修改邮箱 (需已登录 + 已验证)
+ *   - GET  /api/email/status/:addr  查询邮箱状态
+ *
+ * @see docs/email-registration-v0.1-spec.md (锁版)
+ * @see Lesson #312/#314 实战风格 (cross-platform identity)
+ */
+import { Router } from 'express';
+import Database = require('better-sqlite3');
+export interface EmailConfig {
+    db: Database.Database;
+    /** SMTP 配置 (optional, MVP 用 console.log 模拟) */
+    smtp?: {
+        host: string;
+        port: number;
+        user: string;
+        pass: string;
+        from: string;
+    };
+}
+export interface SendCodeRequest {
+    email: string;
+    /** 注册 / 修改 / 登录 三种场景, 不同场景不同模板 */
+    scene: 'register' | 'change' | 'login';
+}
+export interface VerifyRequest {
+    email: string;
+    code: string;
+}
+export interface RegisterRequest {
+    email: string;
+    code: string;
+    /** 链上地址 (server-generated keypair 模式, MVP) */
+    chain_address?: string;
+    username?: string;
+}
+export interface ChangeEmailRequest {
+    new_email: string;
+    code: string;
+}
+export declare function createEmailRouter(config: EmailConfig): Router;
+//# sourceMappingURL=email.d.ts.map

package/api/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../src/api/email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,+CAA+C;IAC/C,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAkCD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAyR7D"}

package/api/email.js

@@ -0,0 +1,307 @@
+"use strict";
+/**
+ * TrustChain Email 注册 + 验证 backend (baobei lane 6 W2 邮箱注册实战锁版)
+ *
+ * 设计原则 (Lesson #NEW 8/23 06:00 SGT 实战锁版):
+ * 1. Email = 用户级身份补充, 跟 chain_address 双向绑定
+ * 2. 验证 = 6 位数字码 + 10 分钟过期 (实战可配置, 默认 10 min)
+ * 3. 防滥用: 同 email 1 分钟内最多 1 封, 1 小时最多 5 封
+ * 4. 不发真实邮件: MVP 用 console.log + DB 表 (e2e 测试友好)
+ *    真实 SMTP 由 ops team 配置 EMAIL_SMTP_HOST 等 env vars
+ * 5. 验证后 = users 表 chain_address ↔ email 双向绑定, 不可换 (除非改邮箱)
+ *
+ * 接口契约 (跟 docs/email-registration-v0.1-spec.md 一致):
+ *   - POST /api/email/send-code     发送验证码
+ *   - POST /api/email/verify        验证邮箱 (verify_code)
+ *   - POST /api/email/register      邮箱注册新用户 (返回 JWT)
+ *   - POST /api/email/change        修改邮箱 (需已登录 + 已验证)
+ *   - GET  /api/email/status/:addr  查询邮箱状态
+ *
+ * @see docs/email-registration-v0.1-spec.md (锁版)
+ * @see Lesson #312/#314 实战风格 (cross-platform identity)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEmailRouter = createEmailRouter;
+const express_1 = require("express");
+function isValidEmail(email) {
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) && email.length <= 100;
+}
+function generateCode() {
+    // 6 位数字, 防预测用 crypto.randomInt
+    return Math.floor(100000 + Math.random() * 900000).toString();
+}
+function renderTemplate(scene, code, expiresIn) {
+    const minutes = Math.floor(expiresIn / 60);
+    switch (scene) {
+        case 'register':
+            return {
+                subject: '【TrustChain】邮箱注册验证码',
+                body: `欢迎加入 TrustChain!\n\n您的注册验证码是: ${code}\n\n验证码 ${minutes} 分钟内有效, 请尽快使用。\n\n如果不是您本人操作, 请忽略此邮件。`,
+            };
+        case 'change':
+            return {
+                subject: '【TrustChain】邮箱更换验证码',
+                body: `您正在更换 TrustChain 账户邮箱。\n\n更换验证码是: ${code}\n\n验证码 ${minutes} 分钟内有效。\n\n如果不是您本人操作, 请立即修改密码并联系我们。`,
+            };
+        case 'login':
+            return {
+                subject: '【TrustChain】登录验证码',
+                body: `您的登录验证码是: ${code}\n\n验证码 ${minutes} 分钟内有效。`,
+            };
+        default:
+            return { subject: '【TrustChain】验证码', body: code };
+    }
+}
+function createEmailRouter(config) {
+    const router = (0, express_1.Router)();
+    const { db, smtp } = config;
+    // ============================================================
+    // POST /api/email/send-code
+    // body: { email, scene }
+    // ============================================================
+    router.post('/send-code', (req, res) => {
+        try {
+            const body = req.body;
+            const { email, scene } = body;
+            if (!email || !scene) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_PARAMS', errorMessage: 'Missing email or scene' });
+                return;
+            }
+            if (!isValidEmail(email)) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_EMAIL', errorMessage: 'Invalid email format' });
+                return;
+            }
+            if (!['register', 'change', 'login'].includes(scene)) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_SCENE', errorMessage: 'scene must be register/change/login' });
+                return;
+            }
+            // 防滥用: 1 分钟内最多 1 封 (Lesson #NEW 8/23 06:00 SGT 实战锁版)
+            const oneMinAgo = new Date(Date.now() - 60 * 1000).toISOString();
+            const recent = db
+                .prepare(`SELECT COUNT(*) as cnt FROM email_codes WHERE email = ? AND created_at >= ?`)
+                .get(email, oneMinAgo);
+            if (recent?.cnt >= 1) {
+                res.status(429).json({ success: false, errorCode: 'TOO_FREQUENT', errorMessage: 'Please wait 60s before requesting another code' });
+                return;
+            }
+            // 防滥用: 1 小时内最多 5 封
+            const oneHourAgo = new Date(Date.now() - 60 * 60 * 1000).toISOString();
+            const lastHourCount = db
+                .prepare(`SELECT COUNT(*) as cnt FROM email_codes WHERE email = ? AND created_at >= ?`)
+                .get(email, oneHourAgo);
+            if (lastHourCount?.cnt >= 5) {
+                res.status(429).json({ success: false, errorCode: 'HOURLY_LIMIT', errorMessage: 'Max 5 codes per hour, try again later' });
+                return;
+            }
+            // 注册场景: email 不能已被注册
+            if (scene === 'register') {
+                const existing = db
+                    .prepare(`SELECT address FROM users WHERE email = ? LIMIT 1`)
+                    .get(email);
+                if (existing) {
+                    res.status(409).json({ success: false, errorCode: 'EMAIL_TAKEN', errorMessage: 'Email already registered' });
+                    return;
+                }
+            }
+            const code = generateCode();
+            const now = new Date().toISOString();
+            const expiresAt = new Date(Date.now() + 10 * 60 * 1000).toISOString(); // 10 min
+            db.prepare(`INSERT INTO email_codes (email, code, scene, created_at, expires_at, used) VALUES (?, ?, ?, ?, ?, 0)`)
+                .run(email, code, scene, now, expiresAt);
+            const template = renderTemplate(scene, code, 10 * 60);
+            // MVP: console.log 模拟发送
+            // Production: nodemailer / sendgrid (Lesson #NEW 实战锁版)
+            if (smtp) {
+                // TODO: 真实 SMTP 发送 (Lesson #NEW 8/23 06:00 实战风格锁版)
+                // await sendViaSmtp(smtp, { to: email, subject: template.subject, body: template.body });
+                console.log(`[email] SMTP send (mocked): to=${email}, subject=${template.subject}, code=${code}`);
+            }
+            else {
+                console.log(`[email] CONSOLE send: to=${email}, subject=${template.subject}, code=${code}`);
+            }
+            res.json({
+                success: true,
+                scene,
+                email,
+                expires_at: expiresAt,
+                ttl_seconds: 600,
+                // MVP: 测试模式返回 code (仅 TEST_MODE=1 env var)
+                ...(process.env.TEST_MODE === '1' ? { test_code: code } : {}),
+            });
+        }
+        catch (err) {
+            console.error('[email] POST /send-code error:', err.message);
+            res.status(500).json({ success: false, errorCode: 'INTERNAL_ERROR', errorMessage: err.message });
+        }
+    });
+    // ============================================================
+    // POST /api/email/verify
+    // body: { email, code }
+    // Returns: { success, verified_until } (24h 验证有效)
+    // ============================================================
+    router.post('/verify', (req, res) => {
+        try {
+            const body = req.body;
+            const { email, code } = body;
+            if (!email || !code) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_PARAMS', errorMessage: 'Missing email or code' });
+                return;
+            }
+            const now = new Date().toISOString();
+            const record = db
+                .prepare(`SELECT id, expires_at, used FROM email_codes WHERE email = ? AND code = ? ORDER BY id DESC LIMIT 1`)
+                .get(email, code);
+            if (!record) {
+                res.status(400).json({ success: false, errorCode: 'CODE_NOT_FOUND', errorMessage: 'Verification code not found' });
+                return;
+            }
+            if (record.used) {
+                res.status(400).json({ success: false, errorCode: 'CODE_USED', errorMessage: 'Verification code already used' });
+                return;
+            }
+            if (record.expires_at < now) {
+                res.status(400).json({ success: false, errorCode: 'CODE_EXPIRED', errorMessage: 'Verification code expired' });
+                return;
+            }
+            // mark used
+            db.prepare(`UPDATE email_codes SET used = 1 WHERE id = ?`).run(record.id);
+            // 24h verification validity (存 email_verifications 表)
+            const validUntil = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString();
+            db.prepare(`INSERT INTO email_verifications (email, verified_at, valid_until) VALUES (?, ?, ?)
+                   ON CONFLICT(email) DO UPDATE SET verified_at = excluded.verified_at, valid_until = excluded.valid_until`)
+                .run(email, now, validUntil);
+            res.json({ success: true, email, verified_until: validUntil });
+        }
+        catch (err) {
+            console.error('[email] POST /verify error:', err.message);
+            res.status(500).json({ success: false, errorCode: 'INTERNAL_ERROR', errorMessage: err.message });
+        }
+    });
+    // ============================================================
+    // POST /api/email/register
+    // body: { email, code, chain_address?, username? }
+    // Returns: { success, user, jwt }
+    // ============================================================
+    router.post('/register', (req, res) => {
+        try {
+            const body = req.body;
+            const { email, code, chain_address, username } = body;
+            if (!email || !code) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_PARAMS', errorMessage: 'Missing email or code' });
+                return;
+            }
+            // 验证 code 已用过 + 有效
+            const verification = db
+                .prepare(`SELECT valid_until FROM email_verifications WHERE email = ? AND valid_until > ?`)
+                .get(email, new Date().toISOString());
+            if (!verification) {
+                res.status(400).json({ success: false, errorCode: 'NOT_VERIFIED', errorMessage: 'Email not verified or verification expired' });
+                return;
+            }
+            // 不能已注册
+            const existing = db.prepare(`SELECT address FROM users WHERE email = ?`).get(email);
+            if (existing) {
+                res.status(409).json({ success: false, errorCode: 'EMAIL_TAKEN', errorMessage: 'Email already registered' });
+                return;
+            }
+            // MVP: server-generated keypair (Lesson #314 实战风格)
+            // TODO: 链上发 MsgSend 注册 (kimi 主手) → chain_address 入 users 表
+            const finalChainAddress = chain_address || `tct1email${Math.random().toString(36).substring(2, 14)}`;
+            const now = Math.floor(Date.now() / 1000);
+            db.prepare(`INSERT INTO users (address, username, email, is_active, created_at, updated_at) VALUES (?, ?, ?, 1, ?, ?)`)
+                .run(finalChainAddress, username || `user_${email.split('@')[0]}`, email, now, now);
+            // Mock JWT (Lesson #NEW 8/23 06:00 SGT)
+            const jwt = `mock_jwt_${Buffer.from(email).toString('base64')}_${now}`;
+            res.json({
+                success: true,
+                user: {
+                    address: finalChainAddress,
+                    email,
+                    username: username || `user_${email.split('@')[0]}`,
+                    created_at: now,
+                },
+                jwt,
+            });
+        }
+        catch (err) {
+            console.error('[email] POST /register error:', err.message);
+            res.status(500).json({ success: false, errorCode: 'INTERNAL_ERROR', errorMessage: err.message });
+        }
+    });
+    // ============================================================
+    // POST /api/email/change
+    // Auth: require logged in (Bearer token, lesson #308)
+    // body: { new_email, code }
+    // ============================================================
+    router.post('/change', (req, res) => {
+        try {
+            // Lesson #308 实战: wallet signature auth (5 头)
+            const userAddress = req.walletAddress;
+            if (!userAddress) {
+                res.status(401).json({ success: false, errorCode: 'UNAUTHORIZED', errorMessage: 'Wallet signature required' });
+                return;
+            }
+            const body = req.body;
+            const { new_email, code } = body;
+            if (!new_email || !code) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_PARAMS', errorMessage: 'Missing new_email or code' });
+                return;
+            }
+            if (!isValidEmail(new_email)) {
+                res.status(400).json({ success: false, errorCode: 'INVALID_EMAIL', errorMessage: 'Invalid email format' });
+                return;
+            }
+            // 验证 code
+            const verification = db
+                .prepare(`SELECT valid_until FROM email_verifications WHERE email = ? AND valid_until > ?`)
+                .get(new_email, new Date().toISOString());
+            if (!verification) {
+                res.status(400).json({ success: false, errorCode: 'NOT_VERIFIED', errorMessage: 'New email not verified' });
+                return;
+            }
+            // 不能换到已注册的邮箱
+            const existing = db.prepare(`SELECT address FROM users WHERE email = ? AND address != ?`).get(new_email, userAddress);
+            if (existing) {
+                res.status(409).json({ success: false, errorCode: 'EMAIL_TAKEN', errorMessage: 'New email already registered to another user' });
+                return;
+            }
+            db.prepare(`UPDATE users SET email = ?, updated_at = ? WHERE address = ?`)
+                .run(new_email, Math.floor(Date.now() / 1000), userAddress);
+            res.json({ success: true, address: userAddress, new_email });
+        }
+        catch (err) {
+            console.error('[email] POST /change error:', err.message);
+            res.status(500).json({ success: false, errorCode: 'INTERNAL_ERROR', errorMessage: err.message });
+        }
+    });
+    // ============================================================
+    // GET /api/email/status/:address
+    // ============================================================
+    router.get('/status/:address', (req, res) => {
+        try {
+            const { address } = req.params;
+            const user = db.prepare(`SELECT email, is_active FROM users WHERE address = ?`).get(address);
+            if (!user) {
+                res.status(404).json({ success: false, errorCode: 'USER_NOT_FOUND', errorMessage: `User not found: ${address}` });
+                return;
+            }
+            const verification = user.email ? db
+                .prepare(`SELECT verified_at, valid_until FROM email_verifications WHERE email = ?`)
+                .get(user.email) : null;
+            res.json({
+                success: true,
+                address,
+                email: user.email || null,
+                email_verified: !!verification && verification.valid_until > new Date().toISOString(),
+                verified_at: verification?.verified_at || null,
+                valid_until: verification?.valid_until || null,
+            });
+        }
+        catch (err) {
+            console.error('[email] GET /status error:', err.message);
+            res.status(500).json({ success: false, errorCode: 'INTERNAL_ERROR', errorMessage: err.message });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=email.js.map

package/api/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/api/email.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAyEH,8CAyRC;AAhWD,qCAAoD;AAuCpD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;AACzE,CAAC;AAED,SAAS,YAAY;IACnB,+BAA+B;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,SAAiB;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IAC3C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU;YACb,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,iCAAiC,IAAI,WAAW,OAAO,sCAAsC;aACpG,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,qCAAqC,IAAI,WAAW,OAAO,qCAAqC;aACvG,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,aAAa,IAAI,WAAW,OAAO,SAAS;aACnD,CAAC;QACJ;YACE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAmB;IACnD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAE5B,+DAA+D;IAC/D,4BAA4B;IAC5B,yBAAyB;IACzB,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuB,CAAC;YACzC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YAE9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC9G,OAAO;YACT,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC3G,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,qCAAqC,EAAE,CAAC,CAAC;gBAC1H,OAAO;YACT,CAAC;YAED,qDAAqD;YACrD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,6EAA6E,CAAC;iBACtF,GAAG,CAAC,KAAK,EAAE,SAAS,CAAQ,CAAC;YAChC,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,gDAAgD,EAAE,CAAC,CAAC;gBACpI,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACvE,MAAM,aAAa,GAAG,EAAE;iBACrB,OAAO,CAAC,6EAA6E,CAAC;iBACtF,GAAG,CAAC,KAAK,EAAE,UAAU,CAAQ,CAAC;YACjC,IAAI,aAAa,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC3H,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,EAAE;qBAChB,OAAO,CAAC,mDAAmD,CAAC;qBAC5D,GAAG,CAAC,KAAK,CAAQ,CAAC;gBACrB,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBAC7G,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS;YAEhF,EAAE,CAAC,OAAO,CAAC,sGAAsG,CAAC;iBAC/G,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAE3C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAEtD,wBAAwB;YACxB,uDAAuD;YACvD,IAAI,IAAI,EAAE,CAAC;gBACT,mDAAmD;gBACnD,0FAA0F;gBAC1F,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,aAAa,QAAQ,CAAC,OAAO,UAAU,IAAI,EAAE,CAAC,CAAC;YACpG,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,aAAa,QAAQ,CAAC,OAAO,UAAU,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,KAAK;gBACL,KAAK;gBACL,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,GAAG;gBAChB,2CAA2C;gBAC3C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,yBAAyB;IACzB,wBAAwB;IACxB,kDAAkD;IAClD,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAqB,CAAC;YACvC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAE7B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,oGAAoG,CAAC;iBAC7G,GAAG,CAAC,KAAK,EAAE,IAAI,CAAQ,CAAC;YAE3B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBACnH,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACjH,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC/G,OAAO;YACT,CAAC;YAED,YAAY;YACZ,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE1E,sDAAsD;YACtD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5E,EAAE,CAAC,OAAO,CAAC;2HAC0G,CAAC;iBACnH,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAE/B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,2BAA2B;IAC3B,mDAAmD;IACnD,kCAAkC;IAClC,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuB,CAAC;YACzC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;YAEtD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,MAAM,YAAY,GAAG,EAAE;iBACpB,OAAO,CAAC,iFAAiF,CAAC;iBAC1F,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAQ,CAAC;YAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAChI,OAAO;YACT,CAAC;YAED,QAAQ;YACR,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAQ,CAAC;YAC3F,IAAI,QAAQ,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;YAED,mDAAmD;YACnD,2DAA2D;YAC3D,MAAM,iBAAiB,GAAG,aAAa,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAErG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,EAAE,CAAC,OAAO,CAAC,2GAA2G,CAAC;iBACpH,GAAG,CAAC,iBAAiB,EAAE,QAAQ,IAAI,QAAQ,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAEtF,wCAAwC;YACxC,MAAM,GAAG,GAAG,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;YAEvE,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,OAAO,EAAE,iBAAiB;oBAC1B,KAAK;oBACL,QAAQ,EAAE,QAAQ,IAAI,QAAQ,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;oBACnD,UAAU,EAAE,GAAG;iBAChB;gBACD,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,yBAAyB;IACzB,sDAAsD;IACtD,4BAA4B;IAC5B,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC;YACH,8CAA8C;YAC9C,MAAM,WAAW,GAAI,GAAW,CAAC,aAAa,CAAC;YAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC/G,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA0B,CAAC;YAC5C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAEjC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACjH,OAAO;YACT,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC3G,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,YAAY,GAAG,EAAE;iBACpB,OAAO,CAAC,iFAAiF,CAAC;iBAC1F,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAQ,CAAC;YACnD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC5G,OAAO;YACT,CAAC;YAED,aAAa;YACb,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAQ,CAAC;YAC7H,IAAI,QAAQ,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBACjI,OAAO;YACT,CAAC;YAED,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC;iBACvE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;YAE9D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,iCAAiC;IACjC,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAoC,CAAC;YAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAQ,CAAC;YACpG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC,CAAC;gBAClH,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;iBACjC,OAAO,CAAC,0EAA0E,CAAC;iBACnF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAEjC,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO;gBACP,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,cAAc,EAAE,CAAC,CAAC,YAAY,IAAI,YAAY,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrF,WAAW,EAAE,YAAY,EAAE,WAAW,IAAI,IAAI;gBAC9C,WAAW,EAAE,YAAY,EAAE,WAAW,IAAI,IAAI;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/api/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * API Router - Main entry point for all API endpoints
+ *
+ * Mounts three sub-routers:
+ *   - /api/payment   — payment intent + capture (existing)
+ *   - /api/shipping  — shipping quote + label (existing)
+ *   - /api/p2p/mcp/* — peer-to-peer MCP HTTP bridge (PRD-F Phase 2 PR #4)
+ */
+import { Router } from 'express';
+import { type P2PMcpRouterDeps } from './p2p-mcp';
+export interface ApiConfig {
+    dataDir?: string;
+    /** Optional P2P-MCP router deps. If omitted, the p2p-mcp router is NOT mounted. */
+    p2pMcp?: P2PMcpRouterDeps;
+}
+export declare function createApiRouter(config?: ApiConfig): Router;
+export { createPaymentRouter } from './payment';
+export { createShippingRouter } from './shipping';
+export { createP2PMcpRouter, type P2PMcpRouterDeps } from './p2p-mcp';
+export { PaymentStore } from './payment-store';
+export { ShippingStore } from './shipping-store';
+//# sourceMappingURL=index.d.ts.map

package/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEtE,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAAC,MAAM,GAAE,SAAc,GAAG,MAAM,CAiB9D;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/api/index.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * API Router - Main entry point for all API endpoints
+ *
+ * Mounts three sub-routers:
+ *   - /api/payment   — payment intent + capture (existing)
+ *   - /api/shipping  — shipping quote + label (existing)
+ *   - /api/p2p/mcp/* — peer-to-peer MCP HTTP bridge (PRD-F Phase 2 PR #4)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShippingStore = exports.PaymentStore = exports.createP2PMcpRouter = exports.createShippingRouter = exports.createPaymentRouter = void 0;
+exports.createApiRouter = createApiRouter;
+const express_1 = require("express");
+const payment_1 = require("./payment");
+const shipping_1 = require("./shipping");
+const p2p_mcp_1 = require("./p2p-mcp");
+function createApiRouter(config = {}) {
+    const router = (0, express_1.Router)();
+    // Payment API endpoints
+    router.use('/payment', (0, payment_1.createPaymentRouter)(config));
+    // Shipping API endpoints
+    router.use('/shipping', (0, shipping_1.createShippingRouter)(config));
+    // P2P MCP HTTP bridge (PRD-F Phase 2 PR #4)
+    //   POST /api/p2p/mcp/tools/list    — public (lists tools filtered by read-policy)
+    //   POST /api/p2p/mcp/tools/invoke  — protected (signature + whitelist + rate-limit)
+    if (config.p2pMcp) {
+        router.use('/p2p/mcp', (0, p2p_mcp_1.createP2PMcpRouter)(config.p2pMcp));
+    }
+    return router;
+}
+var payment_2 = require("./payment");
+Object.defineProperty(exports, "createPaymentRouter", { enumerable: true, get: function () { return payment_2.createPaymentRouter; } });
+var shipping_2 = require("./shipping");
+Object.defineProperty(exports, "createShippingRouter", { enumerable: true, get: function () { return shipping_2.createShippingRouter; } });
+var p2p_mcp_2 = require("./p2p-mcp");
+Object.defineProperty(exports, "createP2PMcpRouter", { enumerable: true, get: function () { return p2p_mcp_2.createP2PMcpRouter; } });
+var payment_store_1 = require("./payment-store");
+Object.defineProperty(exports, "PaymentStore", { enumerable: true, get: function () { return payment_store_1.PaymentStore; } });
+var shipping_store_1 = require("./shipping-store");
+Object.defineProperty(exports, "ShippingStore", { enumerable: true, get: function () { return shipping_store_1.ShippingStore; } });
+//# sourceMappingURL=index.js.map

package/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAaH,0CAiBC;AA5BD,qCAAiC;AACjC,uCAAgD;AAChD,yCAAkD;AAClD,uCAAsE;AAQtE,SAAgB,eAAe,CAAC,SAAoB,EAAE;IACpD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,wBAAwB;IACxB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,6BAAmB,EAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,yBAAyB;IACzB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAA,+BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC;IAEtD,4CAA4C;IAC5C,mFAAmF;IACnF,qFAAqF;IACrF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,4BAAkB,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAC5B,uCAAkD;AAAzC,gHAAA,oBAAoB,OAAA;AAC7B,qCAAsE;AAA7D,6GAAA,kBAAkB,OAAA;AAC3B,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}