trustbase-seller-backend 0.1.5

package/db/oauth-migrate.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * TrustChain OAuth Bridge — Migration runner (baobei #314 实战锁版)
+ *
+ * 设计要点:
+ * - 读 src/db/oauth-migrations.sql (exec 整个文件, sqlite 多语句 OK)
+ * - users 表加列用 try/catch (SQLite ADD COLUMN 无 IF NOT EXISTS, 重复跑会抛)
+ * - 幂等 (可重跑): CREATE IF NOT EXISTS / UNIQUE INDEX IF NOT EXISTS
+ * - Lesson #266a fail loud: 启动失败抛错, 不静默
+ *
+ * 实战锁版 (跟 email-migrate 类似, 但处理 4 列 ADD COLUMN 的 idempotency):
+ *
+ * @see src/db/oauth-migrations.sql
+ * @see Lesson #314 实战风格
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runOAuthBridgeMigrations = runOAuthBridgeMigrations;
+exports.isOAuthBridgeSchemaReady = isOAuthBridgeSchemaReady;
+exports.getOAuthBridgeSchemaVersion = getOAuthBridgeSchemaVersion;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const MIGRATIONS_FILE = path.join(__dirname, 'oauth-migrations.sql');
+/**
+ * 跑 OAuth bridge migrations
+ *
+ * @param db better-sqlite3 Database 实例
+ * @returns MigrationResult
+ * @throws Error if migration 失败 (Lesson #266a fail loud)
+ */
+function runOAuthBridgeMigrations(db) {
+    if (!db) {
+        throw new Error('[OAuthMigrate] db required');
+    }
+    // 1. 检查 users 表是否存在 (没有的话尝试创建 — MVP fallback)
+    const usersExists = db
+        .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='users'`)
+        .get();
+    if (!usersExists) {
+        // MVP: 自动建 minimal users 表 (跟 AuthPlugin 对齐)
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS users (
+        id TEXT PRIMARY KEY,
+        username TEXT UNIQUE,
+        email TEXT,
+        password_hash TEXT,
+        address TEXT UNIQUE NOT NULL,
+        mnemonic_encrypted TEXT,
+        avatar TEXT,
+        bio TEXT,
+        website TEXT,
+        twitter TEXT,
+        github TEXT,
+        chain_address TEXT,
+        wechat_openid TEXT,
+        alipay_userid TEXT,
+        other_openids TEXT,
+        two_factor_enabled INTEGER DEFAULT 0,
+        two_factor_secret TEXT,
+        two_factor_backup_codes TEXT,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        last_login_at INTEGER,
+        is_active INTEGER DEFAULT 1
+      );
+    `);
+    }
+    // 2. 4 列 ADD COLUMN (idempotent)
+    const columnsToAdd = ['chain_address', 'wechat_openid', 'alipay_userid', 'other_openids'];
+    for (const col of columnsToAdd) {
+        try {
+            db.exec(`ALTER TABLE users ADD COLUMN ${col} TEXT;`);
+        }
+        catch (e) {
+            // 重复 ADD COLUMN → "duplicate column name" 错误, 忽略
+            if (!/duplicate column name/i.test(e?.message || '')) {
+                throw e;
+            }
+        }
+    }
+    // 2b. oauth_link_codes.openid (v2 schema: link 时存 openid, confirm 时直接读)
+    const linkCodesExists = db
+        .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='oauth_link_codes'`)
+        .get();
+    if (linkCodesExists) {
+        try {
+            db.exec(`ALTER TABLE oauth_link_codes ADD COLUMN openid TEXT;`);
+        }
+        catch (e) {
+            if (!/duplicate column name/i.test(e?.message || '')) {
+                throw e;
+            }
+        }
+    }
+    // 3. sync address → chain_address (已有数据)
+    db.exec(`
+    UPDATE users SET chain_address = address WHERE chain_address IS NULL AND address IS NOT NULL;
+  `);
+    // 4. UNIQUE INDEX (CREATE IF NOT EXISTS 已确保幂等)
+    db.exec(`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_users_chain_address_unique ON users(chain_address) WHERE chain_address IS NOT NULL;
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_users_wechat_openid_unique ON users(wechat_openid) WHERE wechat_openid IS NOT NULL;
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_users_alipay_userid_unique ON users(alipay_userid) WHERE alipay_userid IS NOT NULL;
+  `);
+    // 5. oauth_bridge_tokens + oauth_link_codes + schema_version (从 SQL 文件)
+    if (!fs.existsSync(MIGRATIONS_FILE)) {
+        throw new Error(`[OAuthMigrate] migrations file not found: ${MIGRATIONS_FILE}`);
+    }
+    const sql = fs.readFileSync(MIGRATIONS_FILE, 'utf8');
+    // 判断 fresh install (oauth_bridge_tokens 不存在 = fresh)
+    const tokenTableExists = db
+        .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='oauth_bridge_tokens'`)
+        .get();
+    const freshInstall = !tokenTableExists;
+    try {
+        db.exec(sql);
+    }
+    catch (e) {
+        const msg = e?.message || String(e);
+        throw new Error(`[OAuthMigrate] exec failed: ${msg}`);
+    }
+    // 6. 记录 applied_at
+    const now = Date.now();
+    const versionRow = db
+        .prepare(`SELECT applied_at FROM oauth_bridge_schema_version WHERE version = 1`)
+        .get();
+    if (!versionRow) {
+        db.prepare(`INSERT INTO oauth_bridge_schema_version (version, description, applied_at) VALUES (1, ?, ?)`).run(`Applied at ${new Date(now).toISOString()}`, now);
+    }
+    return {
+        appliedAt: now,
+        freshInstall,
+        error: null,
+    };
+}
+/**
+ * 检查 OAuth bridge schema 是否就绪 (用于健康检查)
+ */
+function isOAuthBridgeSchemaReady(db) {
+    try {
+        const tables = ['oauth_bridge_tokens', 'oauth_link_codes', 'oauth_bridge_schema_version'];
+        for (const t of tables) {
+            const row = db
+                .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name=?`)
+                .get(t);
+            if (!row)
+                return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * 获取当前 schema version
+ */
+function getOAuthBridgeSchemaVersion(db) {
+    try {
+        const row = db
+            .prepare(`SELECT MAX(version) AS v FROM oauth_bridge_schema_version`)
+            .get();
+        return row?.v ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=oauth-migrate.js.map

package/db/oauth-migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-migrate.js","sourceRoot":"","sources":["../../src/db/oauth-migrate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,4DAiHC;AAKD,4DAaC;AAKD,kEASC;AArKD,uCAAyB;AACzB,2CAA6B;AAE7B,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAUrE;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,EAAqB;IAC5D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,8CAA8C;IAC9C,MAAM,WAAW,GAAG,EAAE;SACnB,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,6CAA6C;QAC7C,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;KAyBP,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,gCAAgC,GAAG,QAAQ,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,iDAAiD;YACjD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,eAAe,GAAG,EAAE;SACvB,OAAO,CAAC,+EAA+E,CAAC;SACxF,GAAG,EAAE,CAAC;IACT,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,EAAE,CAAC,IAAI,CAAC;;GAEP,CAAC,CAAC;IAEH,+CAA+C;IAC/C,EAAE,CAAC,IAAI,CAAC;;;;GAIP,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,6CAA6C,eAAe,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAErD,qDAAqD;IACrD,MAAM,gBAAgB,GAAG,EAAE;SACxB,OAAO,CAAC,kFAAkF,CAAC;SAC3F,GAAG,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,CAAC,gBAAgB,CAAC;IAEvC,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,mBAAmB;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,sEAAsE,CAAC;SAC/E,GAAG,EAAwC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,EAAE,CAAC,OAAO,CACR,6FAA6F,CAC9F,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,SAAS,EAAE,GAAG;QACd,YAAY;QACZ,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,EAAqB;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CAAC,8DAA8D,CAAC;iBACvE,GAAG,CAAC,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,2BAA2B,CAAC,EAAqB;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,2DAA2D,CAAC;aACpE,GAAG,EAAsC,CAAC;QAC7C,OAAO,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/db/oauth-migrations.sql

@@ -0,0 +1,92 @@
+-- TrustChain OAuth Bridge (三方登录 + cross-platform user identity) migrations
+-- baobei #312/#313/#314 实战锁版 (2026-08-23)
+--
+-- 锁版要点 (Lesson #312/#314 实战风格):
+-- 1. users 表加 4 列: chain_address + wechat_openid + alipay_userid + other_openids
+--    - 由 oauth-migrate.ts (try-catch) 负责 idempotent ALTER, 这里不重复
+-- 2. UNIQUE INDEX on wechat_openid + alipay_userid (确保 openid 不重复)
+-- 3. oauth_bridge_tokens 表: 记录每次 social login 后下发的 access/refresh token
+-- 4. oauth_link_codes 表: cross-platform 绑定时的临时确认 code
+--
+-- 跟 Lesson #335 三处一致:
+-- - DB: users.chain_address
+-- - API: JWT sub claim
+-- - 链上: tct1... 地址
+--
+-- 实战风格 (Lesson #266a):
+-- - 可重跑 (CREATE IF NOT EXISTS / CREATE UNIQUE INDEX IF NOT EXISTS)
+
+-- ============================================================
+-- 1. UNIQUE INDEX (openid 不可重复) — CREATE IF NOT EXISTS 幂等
+-- ============================================================
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_chain_address_unique ON users(chain_address) WHERE chain_address IS NOT NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_wechat_openid_unique ON users(wechat_openid) WHERE wechat_openid IS NOT NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_alipay_userid_unique ON users(alipay_userid) WHERE alipay_userid IS NOT NULL;
+
+-- ============================================================
+-- 2. oauth_bridge_tokens 表 (三方登录后下发的 token)
+-- ============================================================
+-- 跟 oauth_apps/oauth_tokens (AuthPlugin 既有) 是不同概念:
+-- - AuthPlugin 的 oauth_tokens: OAuth 2.0 protocol 用的 access/refresh token
+-- - 本表: 微信/支付宝/抖音 social login 后下发的 JWT access_token + 自签 refresh_token
+
+CREATE TABLE IF NOT EXISTS oauth_bridge_tokens (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id TEXT NOT NULL,
+  platform TEXT NOT NULL CHECK (platform IN ('wechat','alipay','douyin')),
+  openid TEXT NOT NULL,
+  access_token TEXT NOT NULL,
+  refresh_token TEXT UNIQUE NOT NULL,
+  expires_at INTEGER NOT NULL,        -- ms timestamp
+  scope TEXT,                          -- 平台 scope, 空格分隔
+  created_at INTEGER NOT NULL,         -- ms timestamp
+  revoked INTEGER NOT NULL DEFAULT 0,  -- 0 active, 1 revoked
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_oauth_bridge_tokens_user ON oauth_bridge_tokens(user_id, revoked);
+CREATE INDEX IF NOT EXISTS idx_oauth_bridge_tokens_refresh ON oauth_bridge_tokens(refresh_token) WHERE revoked = 0;
+CREATE INDEX IF NOT EXISTS idx_oauth_bridge_tokens_expires ON oauth_bridge_tokens(expires_at) WHERE revoked = 0;
+
+-- ============================================================
+-- 3. oauth_link_codes 表 (cross-platform 绑定临时确认 code)
+-- ============================================================
+-- 场景: 已登录 chain address (A) 想把微信 (openid=W) 绑到同一 user
+-- 流程:
+--   POST /api/oauth/link { chain_address: A, platform: 'wechat', code: '<wx_jscode>' }
+--     → 调微信 API 拿 openid=W
+--     → 创建 oauth_link_codes 行 { user_id=A, platform=wechat, code='ABCD...', expires=+10min }
+--     → 返回 link_code
+--   POST /api/oauth/link/confirm { link_code, confirm: true }
+--     → 验证 link_code
+--     → 把 wechat_openid=W 写入 users 表 (同 user)
+
+CREATE TABLE IF NOT EXISTS oauth_link_codes (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id TEXT NOT NULL,
+  platform TEXT NOT NULL CHECK (platform IN ('wechat','alipay','douyin')),
+  code TEXT NOT NULL,                  -- 16 字符 alnum
+  openid TEXT NOT NULL,                -- 该平台 openid (link/confirm 时直接读, 不用重跑 adapter)
+  expires_at INTEGER NOT NULL,         -- ms timestamp
+  used INTEGER NOT NULL DEFAULT 0,     -- 0 active, 1 used
+  created_at INTEGER NOT NULL,         -- ms timestamp
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_oauth_link_codes_code ON oauth_link_codes(code, used) WHERE used = 0;
+CREATE INDEX IF NOT EXISTS idx_oauth_link_codes_expires ON oauth_link_codes(expires_at) WHERE used = 0;
+
+-- ============================================================
+-- 4. oauth_bridge_schema_version (migration 追踪)
+-- ============================================================
+-- Lesson #266a 实战风格: 记录已运行的 migration, 防止 schema 漂移
+
+CREATE TABLE IF NOT EXISTS oauth_bridge_schema_version (
+  version INTEGER PRIMARY KEY,
+  description TEXT NOT NULL,
+  applied_at INTEGER NOT NULL
+);
+
+INSERT OR IGNORE INTO oauth_bridge_schema_version (version, description, applied_at)
+VALUES (1, 'Initial OAuth bridge: chain_address + wechat_openid + alipay_userid + other_openids + oauth_bridge_tokens + oauth_link_codes', strftime('%s','now')*1000);

package/db/social-migrate.d.ts

@@ -0,0 +1,12 @@
+/**
+ * 私田 4 权限 v0.1 schema 迁移 (kimi 8/26, Lane B 解锁配套)
+ *
+ * 背景: src/db/social-migrations.sql 存在但从来没人执行过 — 路由挂载后
+ * GET /api/social/posts 报 "no such table: social_posts" (实测实证)。
+ * tsc 不把 .sql 拷进 dist, 所以 SQL 内嵌在这里, 跟代码同分发, 无文件依赖。
+ * 全部 CREATE TABLE/INDEX IF NOT EXISTS, 幂等, 重复执行安全。
+ */
+import Database = require('better-sqlite3');
+/** 幂等执行私田 4 表迁移。run-unified 挂载 social field router 前调用。 */
+export declare function runSocialMigrations(db: Database.Database): void;
+//# sourceMappingURL=social-migrate.d.ts.map

package/db/social-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-migrate.d.ts","sourceRoot":"","sources":["../../src/db/social-migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAiG5C,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAE/D"}

package/db/social-migrate.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSocialMigrations = runSocialMigrations;
+const SOCIAL_MIGRATIONS_SQL = `-- 私田 4 权限契约 v0.1 DB schema (baobei lane 7 sub-agent 实战锁版 2026-08-23)
+-- Lesson #335 三处一致: 链上 emit (无, 本期不上链) + indexer 白名单 (route scope=social:read|write) + sqlite handler (本文件 4 表)
+-- Lesson #317 立即生效: revoked flag + index revoke_at 触发级联失效
+-- Lesson #316 content_key 不入库, content_cipher + content_nonce + content_key_hash 三件套
+
+-- ============================================================
+-- 1. posts (私田内容主表)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_posts (
+  id                   TEXT PRIMARY KEY,                -- uuid v4
+  owner_wallet         TEXT NOT NULL,                   -- 链上地址 (token subject)
+  scope                TEXT NOT NULL,                   -- private | link | whitelist | public (Lesson #315)
+  content_ciphertext   BLOB NOT NULL,                   -- AES-GCM 256-bit 密文 (Lesson #316)
+  content_nonce        BLOB NOT NULL,                   -- GCM nonce 12 bytes
+  content_key_hash     TEXT NOT NULL,                   -- SHA-256(content_key) hex 64 chars, 用于审计 + 验证
+  parent_id            TEXT,                            -- 父帖 id (thread / reply 链, 可空)
+  created_at           INTEGER NOT NULL,                -- 毫秒时间戳
+  updated_at           INTEGER NOT NULL,                -- 毫秒时间戳 (PUT 时更新)
+  revoked              INTEGER NOT NULL DEFAULT 0,      -- 0 = active, 1 = revoked (Lesson #317 立即生效)
+  revoked_at           INTEGER                          -- 撤回时间戳 (revoked=1 时记录)
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_owner
+  ON social_posts (owner_wallet, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_scope
+  ON social_posts (scope, revoked, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_parent
+  ON social_posts (parent_id) WHERE parent_id IS NOT NULL;
+
+-- ============================================================
+-- 2. shares (短链分享, Lesson #317 实战)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_shares (
+  id                  TEXT PRIMARY KEY,                 -- uuid v4
+  post_id             TEXT NOT NULL,                    -- 外键 → social_posts.id
+  share_token         TEXT NOT NULL UNIQUE,             -- 16 chars hex (8 bytes random)
+  expires_at          INTEGER,                          -- null = 永久, 或 unix 毫秒
+  created_at          INTEGER NOT NULL,
+  revoked             INTEGER NOT NULL DEFAULT 0,       -- 短链独立撤回 (不影响 post)
+  revoked_at          INTEGER,
+  FOREIGN KEY (post_id) REFERENCES social_posts(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_shares_token
+  ON social_shares (share_token);
+
+CREATE INDEX IF NOT EXISTS idx_social_shares_post
+  ON social_shares (post_id, revoked);
+
+-- ============================================================
+-- 3. share_access_log (Lesson #335 三处一致: access log)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_share_access_log (
+  id                  INTEGER PRIMARY KEY AUTOINCREMENT,
+  post_id             TEXT,                             -- 外键, null = share_token 不存在 (探测攻击记录)
+  accessor_pubkey     TEXT,                             -- 访问者压缩公钥 (base64 33 bytes), null = 匿名 (短链 + public)
+  accessor_wallet     TEXT,                             -- 访问者 wallet (如已登录)
+  accessed_at         INTEGER NOT NULL,
+  ip_hash             TEXT,                             -- SHA-256(ip) hex 32 chars (隐私保护, 不存明文 ip)
+  user_agent          TEXT,
+  access_result       TEXT NOT NULL                     -- granted | denied_scope | denied_revoked | denied_whitelist
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_share_access_post
+  ON social_share_access_log (post_id, accessed_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_share_access_accessor
+  ON social_share_access_log (accessor_wallet, accessed_at DESC);
+
+-- ============================================================
+-- 4. whitelist (Lesson #316 ECDH 实战: encrypted_key_for_recipient)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_whitelist (
+  post_id                     TEXT NOT NULL,           -- 外键
+  accessor_pubkey             TEXT NOT NULL,           -- 接收者压缩公钥 (33 bytes base64)
+  encrypted_key_for_recipient BLOB NOT NULL,           -- ECIES(ECDH+AES-GCM) 加密的 content_key
+  encrypted_key_nonce         BLOB NOT NULL,           -- ECIES nonce 12 bytes
+  added_at                    INTEGER NOT NULL,
+  added_by                    TEXT NOT NULL,           -- owner_wallet (操作者)
+  revoked                     INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (post_id, accessor_pubkey),
+  FOREIGN KEY (post_id) REFERENCES social_posts(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_whitelist_accessor
+  ON social_whitelist (accessor_pubkey, revoked);
+
+-- ============================================================
+-- 视图: v_active_posts (Lesson #317 revoked 立即生效)
+-- ============================================================
+CREATE VIEW IF NOT EXISTS v_active_social_posts AS
+  SELECT * FROM social_posts WHERE revoked = 0;`;
+/** 幂等执行私田 4 表迁移。run-unified 挂载 social field router 前调用。 */
+function runSocialMigrations(db) {
+    db.exec(SOCIAL_MIGRATIONS_SQL);
+}
+//# sourceMappingURL=social-migrate.js.map

package/db/social-migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-migrate.js","sourceRoot":"","sources":["../../src/db/social-migrate.ts"],"names":[],"mappings":";;AA0GA,kDAEC;AAlGD,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gDA6FkB,CAAC;AAEjD,2DAA2D;AAC3D,SAAgB,mBAAmB,CAAC,EAAqB;IACvD,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC"}

package/db/social-migrations.sql

@@ -0,0 +1,94 @@
+-- 私田 4 权限契约 v0.1 DB schema (baobei lane 7 sub-agent 实战锁版 2026-08-23)
+-- Lesson #335 三处一致: 链上 emit (无, 本期不上链) + indexer 白名单 (route scope=social:read|write) + sqlite handler (本文件 4 表)
+-- Lesson #317 立即生效: revoked flag + index revoke_at 触发级联失效
+-- Lesson #316 content_key 不入库, content_cipher + content_nonce + content_key_hash 三件套
+
+-- ============================================================
+-- 1. posts (私田内容主表)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_posts (
+  id                   TEXT PRIMARY KEY,                -- uuid v4
+  owner_wallet         TEXT NOT NULL,                   -- 链上地址 (token subject)
+  scope                TEXT NOT NULL,                   -- private | link | whitelist | public (Lesson #315)
+  content_ciphertext   BLOB NOT NULL,                   -- AES-GCM 256-bit 密文 (Lesson #316)
+  content_nonce        BLOB NOT NULL,                   -- GCM nonce 12 bytes
+  content_key_hash     TEXT NOT NULL,                   -- SHA-256(content_key) hex 64 chars, 用于审计 + 验证
+  parent_id            TEXT,                            -- 父帖 id (thread / reply 链, 可空)
+  created_at           INTEGER NOT NULL,                -- 毫秒时间戳
+  updated_at           INTEGER NOT NULL,                -- 毫秒时间戳 (PUT 时更新)
+  revoked              INTEGER NOT NULL DEFAULT 0,      -- 0 = active, 1 = revoked (Lesson #317 立即生效)
+  revoked_at           INTEGER                          -- 撤回时间戳 (revoked=1 时记录)
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_owner
+  ON social_posts (owner_wallet, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_scope
+  ON social_posts (scope, revoked, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_posts_parent
+  ON social_posts (parent_id) WHERE parent_id IS NOT NULL;
+
+-- ============================================================
+-- 2. shares (短链分享, Lesson #317 实战)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_shares (
+  id                  TEXT PRIMARY KEY,                 -- uuid v4
+  post_id             TEXT NOT NULL,                    -- 外键 → social_posts.id
+  share_token         TEXT NOT NULL UNIQUE,             -- 16 chars hex (8 bytes random)
+  expires_at          INTEGER,                          -- null = 永久, 或 unix 毫秒
+  created_at          INTEGER NOT NULL,
+  revoked             INTEGER NOT NULL DEFAULT 0,       -- 短链独立撤回 (不影响 post)
+  revoked_at          INTEGER,
+  FOREIGN KEY (post_id) REFERENCES social_posts(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_shares_token
+  ON social_shares (share_token);
+
+CREATE INDEX IF NOT EXISTS idx_social_shares_post
+  ON social_shares (post_id, revoked);
+
+-- ============================================================
+-- 3. share_access_log (Lesson #335 三处一致: access log)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_share_access_log (
+  id                  INTEGER PRIMARY KEY AUTOINCREMENT,
+  post_id             TEXT,                             -- 外键, null = share_token 不存在 (探测攻击记录)
+  accessor_pubkey     TEXT,                             -- 访问者压缩公钥 (base64 33 bytes), null = 匿名 (短链 + public)
+  accessor_wallet     TEXT,                             -- 访问者 wallet (如已登录)
+  accessed_at         INTEGER NOT NULL,
+  ip_hash             TEXT,                             -- SHA-256(ip) hex 32 chars (隐私保护, 不存明文 ip)
+  user_agent          TEXT,
+  access_result       TEXT NOT NULL                     -- granted | denied_scope | denied_revoked | denied_whitelist
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_share_access_post
+  ON social_share_access_log (post_id, accessed_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_social_share_access_accessor
+  ON social_share_access_log (accessor_wallet, accessed_at DESC);
+
+-- ============================================================
+-- 4. whitelist (Lesson #316 ECDH 实战: encrypted_key_for_recipient)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS social_whitelist (
+  post_id                     TEXT NOT NULL,           -- 外键
+  accessor_pubkey             TEXT NOT NULL,           -- 接收者压缩公钥 (33 bytes base64)
+  encrypted_key_for_recipient BLOB NOT NULL,           -- ECIES(ECDH+AES-GCM) 加密的 content_key
+  encrypted_key_nonce         BLOB NOT NULL,           -- ECIES nonce 12 bytes
+  added_at                    INTEGER NOT NULL,
+  added_by                    TEXT NOT NULL,           -- owner_wallet (操作者)
+  revoked                     INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (post_id, accessor_pubkey),
+  FOREIGN KEY (post_id) REFERENCES social_posts(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_whitelist_accessor
+  ON social_whitelist (accessor_pubkey, revoked);
+
+-- ============================================================
+-- 视图: v_active_posts (Lesson #317 revoked 立即生效)
+-- ============================================================
+CREATE VIEW IF NOT EXISTS v_active_social_posts AS
+  SELECT * FROM social_posts WHERE revoked = 0;

package/db/store-migrate.d.ts

@@ -0,0 +1,33 @@
+/**
+ * TrustChain Store API — Migration runner (baobei 8/23 20:25 SGT lane 实战锁版)
+ *
+ * 设计要点:
+ * - 读 src/db/store-migrations.sql (exec 整个文件, sqlite 多语句 OK)
+ * - 幂等 (可重跑): CREATE IF NOT EXISTS / CREATE UNIQUE INDEX IF NOT EXISTS
+ * - Lesson #266a fail loud: 启动失败抛错, 不静默
+ *
+ * @see src/db/store-migrations.sql
+ */
+import Database = require('better-sqlite3');
+export interface StoreMigrationResult {
+    appliedAt: number;
+    freshInstall: boolean;
+    error: string | null;
+}
+/**
+ * 跑 store migrations (8 表 + schema_version)
+ *
+ * @param db better-sqlite3 Database 实例
+ * @returns StoreMigrationResult
+ * @throws Error if migration 失败 (Lesson #266a fail loud)
+ */
+export declare function runStoreMigrations(db: Database.Database): StoreMigrationResult;
+/**
+ * 检查 store schema 是否就绪 (用于健康检查)
+ */
+export declare function isStoreSchemaReady(db: Database.Database): boolean;
+/**
+ * 获取当前 store schema version
+ */
+export declare function getStoreSchemaVersion(db: Database.Database): number | null;
+//# sourceMappingURL=store-migrate.d.ts.map

package/db/store-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-migrate.d.ts","sourceRoot":"","sources":["../../src/db/store-migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAM5C,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,oBAAoB,CAgD9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAyBjE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,GAAG,IAAI,CAS1E"}