trustbase-seller-backend 0.1.5

package/oracle/ops-console.js

@@ -0,0 +1,623 @@
+"use strict";
+/**
+ * ops-console.js — 服务商运营台 (oracle 进程内挂载)
+ *
+ * 能力:
+ *   - 账号体系: 首次访问创建管理员 (用户名+密码); scrypt 哈希; 会话 cookie (HMAC 签名, 12h)
+ *   - 商家进件资料接收: POST /api/sp/materials (独立低权密钥, 只允许这一个动作)
+ *   - 审核台: 列出待审商家 → 查看资料/证件 → 预审通过 (触发 C2 引导金: approve + disburse) / 退回 (带理由)
+ *
+ * 边界:
+ *   - 私钥永不进本模块; 通过 onApprove 回调交给 c5-glue (oracle 侧 CLI/JS 签名)
+ *   - 会话密钥与账号都在 oracle 本地 sqlite, 不落日志
+ *   - 与既有 /api/oracle/* (API Key 鉴权) 不冲突: 本模块只处理 /console 与 /api/console/*, /api/sp/*
+ */
+const crypto = require("crypto");
+const fs = require("fs");
+const path = require("path");
+
+const SESSION_COOKIE = "oc_sess";
+const SESSION_TTL_SEC = 12 * 3600;
+const MIN_PWD_LEN = 8;
+const MAX_LOGIN_FAILS = 8;      // 每 IP 15 分钟窗口内失败上限
+const LOGIN_WINDOW_MS = 15 * 60 * 1000;
+
+function scryptHash(pwd, saltHex) {
+    const salt = Buffer.from(saltHex, "hex");
+    return crypto.scryptSync(String(pwd), salt, 32).toString("hex");
+}
+
+function safeEq(a, b) {
+    const A = Buffer.from(String(a));
+    const B = Buffer.from(String(b));
+    if (A.length !== B.length) return false;
+    return crypto.timingSafeEqual(A, B);
+}
+
+function b64url(buf) {
+    return Buffer.from(buf).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function b64urlDecode(s) {
+    return Buffer.from(String(s).replace(/-/g, "+").replace(/_/g, "/"), "base64");
+}
+
+function createOpsConsole(deps) {
+    const { db, materialsDir, onApprove, log } = deps;
+    const say = log || ((...a) => console.log("[ops-console]", ...a));
+    const loginFails = new Map(); // ip -> {count, until}
+
+    db.exec(`
+CREATE TABLE IF NOT EXISTS oracle_admins (
+  username TEXT PRIMARY KEY,
+  pwd_hash TEXT NOT NULL,
+  salt TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_login_at INTEGER DEFAULT 0
+);
+CREATE TABLE IF NOT EXISTS console_meta (
+  k TEXT PRIMARY KEY,
+  v TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS sp_materials (
+  tb_address TEXT PRIMARY KEY,
+  shop_name TEXT DEFAULT '',
+  fields_json TEXT NOT NULL,
+  files_json TEXT NOT NULL,
+  bundle_hash TEXT NOT NULL,
+  received_at INTEGER NOT NULL,
+  review_status TEXT NOT NULL DEFAULT 'pending',   -- pending / approved / rejected
+  review_note TEXT DEFAULT '',
+  reviewer TEXT DEFAULT '',
+  reviewed_at INTEGER DEFAULT 0
+);
+`);
+
+    // 表就绪自检: index.db 是共用的库 (只读挂载/被换/被清都可能), 缺表要让日志立刻说出来,
+    // 而不是等商家列表第一次查询才炸 (2026-09-22 .215 运营台卡「加载中...」相关)。
+    try {
+        const row = db.prepare("SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name = 'sp_materials'").get();
+        if (row) say("表就绪: oracle_admins / console_meta / sp_materials");
+        else say("⚠️ sp_materials 表不存在 — 商家资料列表会返回 500: 检查 index.db 是否可写/路径是否正确");
+    }
+    catch (e) {
+        say("⚠️ 启动自检失败 (查 sp_materials 表):", (e && e.message) || e);
+    }
+
+    fs.mkdirSync(materialsDir, { recursive: true });
+
+    function metaGet(k) {
+        const r = db.prepare("SELECT v FROM console_meta WHERE k = ?").get(k);
+        return r ? r.v : null;
+    }
+    function metaSet(k, v) {
+        db.prepare("INSERT INTO console_meta (k, v) VALUES (?, ?) ON CONFLICT(k) DO UPDATE SET v = excluded.v").run(k, String(v));
+    }
+    function sessionSecret() {
+        let s = metaGet("session_secret");
+        if (!s) {
+            s = crypto.randomBytes(32).toString("hex");
+            metaSet("session_secret", s);
+        }
+        return s;
+    }
+    function adminCount() {
+        return db.prepare("SELECT COUNT(*) AS n FROM oracle_admins").get().n;
+    }
+    function signSession(username) {
+        const exp = Math.floor(Date.now() / 1000) + SESSION_TTL_SEC;
+        const payload = b64url(JSON.stringify({ u: username, exp }));
+        const sig = b64url(crypto.createHmac("sha256", sessionSecret()).update(payload).digest());
+        return payload + "." + sig;
+    }
+    function verifySession(token) {
+        if (!token || token.indexOf(".") < 0) return null;
+        const [payload, sig] = token.split(".");
+        const expect = b64url(crypto.createHmac("sha256", sessionSecret()).update(payload).digest());
+        if (!safeEq(sig, expect)) return null;
+        try {
+            const j = JSON.parse(b64urlDecode(payload).toString("utf8"));
+            if (!j.u || !j.exp || j.exp < Math.floor(Date.now() / 1000)) return null;
+            return { username: j.u };
+        } catch (_) { return null; }
+    }
+    function currentUser(req) {
+        const raw = String(req.headers.cookie || "");
+        const m = raw.split(";").map(s => s.trim()).find(s => s.startsWith(SESSION_COOKIE + "="));
+        if (!m) return null;
+        return verifySession(decodeURIComponent(m.slice(SESSION_COOKIE.length + 1)));
+    }
+    function clientIp(req) {
+        return String((req.headers["x-forwarded-for"] || "").split(",")[0] || req.socket.remoteAddress || "").replace("::ffff:", "").trim();
+    }
+    function loginBlocked(ip) {
+        const e = loginFails.get(ip);
+        if (!e) return false;
+        if (Date.now() > e.until) { loginFails.delete(ip); return false; }
+        return e.count >= MAX_LOGIN_FAILS;
+    }
+    function noteLoginFail(ip) {
+        const e = loginFails.get(ip);
+        if (!e || Date.now() > e.until) loginFails.set(ip, { count: 1, until: Date.now() + LOGIN_WINDOW_MS });
+        else e.count += 1;
+    }
+    function setCookie(res, token) {
+        res.setHeader("set-cookie", `${SESSION_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${SESSION_TTL_SEC}`);
+    }
+    function clearCookie(res) {
+        res.setHeader("set-cookie", `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`);
+    }
+
+    function readBody(req, limit = 24 * 1024 * 1024) {
+        return new Promise((resolve) => {
+            let buf = "";
+            let n = 0;
+            req.on("data", (d) => {
+                n += d.length;
+                if (n > limit) { resolve(null); req.destroy(); return; }
+                buf += d;
+            });
+            req.on("end", () => {
+                try { resolve(JSON.parse(buf || "{}")); } catch { resolve({}); }
+            });
+            req.on("error", () => resolve(null));
+        });
+    }
+
+    // ---------- 页面 ----------
+    function htmlPage(state, extra = {}) {
+        const common = `<!DOCTYPE html><html lang="zh-CN"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1.0"><title>TrustBase 服务商运营台</title>
+<style>
+*{margin:0;padding:0;box-sizing:border-box}
+body{background:#F7F3EB;color:#33302B;font-family:-apple-system,'PingFang SC','Microsoft YaHei',sans-serif;line-height:1.8}
+.wrap{max-width:1000px;margin:36px auto;padding:0 24px}
+h1{font-size:20px;margin-bottom:4px}.sub{font-size:13px;color:#8A857B;margin-bottom:22px}
+.box{background:#FCFAF4;border:1px solid #EAE3D6;border-radius:14px;padding:24px;margin-bottom:16px}
+.box h3{font-size:15px;color:#C4633C;margin-bottom:12px}
+label{display:block;font-size:13px;color:#6B655B;margin:10px 0 4px}
+input{width:100%;padding:8px 12px;border:1px solid #D4CDBF;border-radius:8px;font-size:14px;background:#fff}
+.btn{display:inline-block;background:#C4633C;color:#fff;border:none;border-radius:8px;padding:9px 22px;font-size:14px;cursor:pointer;margin-right:8px}
+.btn:hover{background:#A95230}.btn.gray{background:#9C9488}.btn:disabled{background:#ccc;cursor:not-allowed}
+table{width:100%;border-collapse:collapse;font-size:13.5px}
+th,td{text-align:left;padding:9px 10px;border-bottom:1px solid #EAE3D6;vertical-align:top}
+th{color:#33302B;background:#F2ECE0;font-weight:600}
+.tag{font-size:12px;padding:2px 10px;border-radius:999px;white-space:nowrap}
+.tag.pending{background:#F6EEDF;color:#A07A2E;border:1px solid #E8DCC0}
+.tag.approved{background:#E8F0E4;color:#4A7A3A;border:1px solid #CFDFC6}
+.tag.rejected{background:#FDECEC;color:#B3261E;border:1px solid #F5C2C0}
+.msg{font-size:13px;padding:10px 12px;border-radius:8px;background:#F2ECE0;margin-top:10px;display:none;white-space:pre-wrap}
+.mono{font-family:Consolas,monospace;font-size:12px;word-break:break-all}
+.files img{max-width:220px;max-height:160px;border:1px solid #EAE3D6;border-radius:8px;margin:4px 6px 0 0}
+</style></head><body><div class="wrap">`;
+
+        if (state === "setup") {
+            return common + `<h1>TrustBase 服务商运营台</h1><p class="sub">首次使用: 创建管理员账号</p>
+<div class="box"><h3>创建管理员</h3>
+<label>用户名</label><input id="u" placeholder="如 admin">
+<label>密码 (至少 ${MIN_PWD_LEN} 位)</label><input id="p" type="password">
+<label>再输一次</label><input id="p2" type="password">
+<button class="btn" onclick="doSetup()">创建并登录</button>
+<div class="msg" id="m"></div></div>
+<script>
+async function doSetup(){
+  var u=document.getElementById('u').value.trim(), p=document.getElementById('p').value, p2=document.getElementById('p2').value;
+  var m=document.getElementById('m'); m.style.display='block';
+  if(!u){m.textContent='请填用户名';return}
+  if(p.length<${MIN_PWD_LEN}){m.textContent='密码至少 ${MIN_PWD_LEN} 位';return}
+  if(p!==p2){m.textContent='两次输入不一致';return}
+  var r=await fetch('/api/console/setup',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:u,password:p})});
+  var j=await r.json();
+  if(!j.ok){m.textContent='创建失败: '+(j.message||j.error||'');return}
+  location.href='/console';
+}
+</script></div></body></html>`;
+        }
+
+        if (state === "login") {
+            return common + `<h1>TrustBase 服务商运营台</h1><p class="sub">请登录</p>
+<div class="box"><h3>登录</h3>
+<label>用户名</label><input id="u">
+<label>密码</label><input id="p" type="password">
+<button class="btn" onclick="doLogin()">登录</button>
+<div class="msg" id="m"></div></div>
+<script>
+async function doLogin(){
+  var m=document.getElementById('m'); m.style.display='block'; m.textContent='登录中...';
+  var r=await fetch('/api/console/login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:document.getElementById('u').value.trim(),password:document.getElementById('p').value})});
+  var j=await r.json();
+  if(!j.ok){m.textContent='登录失败: '+(j.message||j.error||'');return}
+  location.href='/console';
+}
+document.getElementById('p').addEventListener('keydown',function(e){if(e.key==='Enter')doLogin()});
+</script></div></body></html>`;
+        }
+
+        // console
+        return common + `<h1>TrustBase 服务商运营台</h1><p class="sub">登录身份: ${extra.username || ""} &nbsp;·&nbsp; <a href="#" onclick="doLogout();return false">退出登录</a> &nbsp;·&nbsp; <a href="#" onclick="togglePwd();return false">修改密码</a></p>
+<div class="box" id="pwdbox" style="display:none"><h3>修改密码</h3>
+<label>当前密码</label><input id="op" type="password">
+<label>新密码 (至少 ${MIN_PWD_LEN} 位)</label><input id="np" type="password">
+<button class="btn" onclick="doPwd()">保存</button><div class="msg" id="pm"></div></div>
+<div class="box"><h3>商家进件资料 (待审核 / 已处理) <span id="list-meta" style="font-size:12px;color:#8A857B;font-weight:400"></span></h3>
+<div id="list">加载中...</div></div>
+<div class="box" id="detail" style="display:none"><h3>资料详情</h3><div id="detail-body"></div></div>
+<script>
+function esc(s){return String(s==null?'':s).replace(/[&<>"]/g,function(c){return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]})}
+function setMeta(t){var e=document.getElementById('list-meta');if(e)e.textContent=t?'· '+t:''}
+// 统一取数: 显式 8s 超时 (AbortController) + 非 JSON 响应不当 JSON.parse 喂进去
+function fetchJson(path,opts){
+  var ctrl=new AbortController();
+  var timer=setTimeout(function(){ctrl.abort()},8000);
+  var o=opts||{};
+  o.signal=ctrl.signal;
+  return fetch(path,o).then(function(r){
+    return r.text().then(function(txt){
+      clearTimeout(timer);
+      var ct=(r.headers.get('content-type')||'');
+      if(ct.indexOf('json')<0) throw new Error('服务返回了非 JSON 响应 (HTTP '+r.status+')');
+      try{return JSON.parse(txt)}
+      catch(e){throw new Error('响应不是合法 JSON (HTTP '+r.status+')')}
+    });
+  }).catch(function(e){
+    clearTimeout(timer);
+    if(e && e.name==='AbortError') throw new Error('请求超时 (8 秒无响应)');
+    throw e;
+  });
+}
+function listFail(msg){
+  var el=document.getElementById('list');
+  el.innerHTML='<div class="msg" style="display:block">加载失败: '+esc(msg)+'</div>'
+    +'<button class="btn" id="retry-btn">重试</button><span style="font-size:12px;color:#8A857B;margin-left:8px">30 秒后也会自动重试</span>';
+  var b=document.getElementById('retry-btn');
+  if(b) b.addEventListener('click',function(){load()});
+  setMeta('加载失败 '+new Date().toLocaleTimeString());
+}
+function renderList(mats){
+  var el=document.getElementById('list');
+  if(!mats.length){el.textContent='暂无商家资料 (商家在入驻页提交后会出现在这里)';setMeta('最后更新 '+new Date().toLocaleTimeString());return}
+  var h='<table><tr><th>店铺</th><th>主体</th><th>TrustBase 地址</th><th>收到时间</th><th>状态</th><th>操作</th></tr>';
+  mats.forEach(function(m){
+    h+='<tr><td>'+esc(m.shop_name||m.fields.merchant_name)+'</td><td>'+esc(m.fields.subject_type||'')+'</td><td class="mono">'+esc(m.tb_address)+'</td><td>'+new Date(m.received_at*1000).toLocaleString()+'</td><td><span class="tag '+esc(m.review_status)+'">'+esc({pending:'待审核',approved:'已通过',rejected:'已退回'}[m.review_status]||m.review_status)+'</span>'+(m.review_note?'<div class="mono">'+esc(m.review_note)+'</div>':'')+'</td><td><button class="btn" data-addr="'+esc(m.tb_address)+'" onclick="showDetail(this.dataset.addr)">查看</button></td></tr>';
+  });
+  h+='</table>';
+  el.innerHTML=h;
+  window._mats=mats;
+  setMeta('最后更新 '+new Date().toLocaleTimeString()+' (每 30 秒自动刷新)');
+  // 正在看的那条被处理/消失 → 收起详情, 避免展示过期数据
+  if(_cur && !mats.some(function(x){return x.tb_address===_cur})){document.getElementById('detail').style.display='none'}
+}
+async function loadOnce(){
+  var j=await fetchJson('/api/console/materials');
+  if(!j || !j.ok) throw new Error((j&&(j.message||j.error))||'服务返回异常');
+  renderList(j.materials||[]);
+}
+async function load(){
+  try{ await loadOnce() }
+  catch(e1){
+    // 自动重试 1 次 (瞬时故障/DB busy 很常见), 仍失败才给出可点的「重试」
+    try{ await new Promise(function(r){setTimeout(r,600)}); await loadOnce() }
+    catch(e2){ listFail((e2&&e2.message)||(e1&&e1.message)||'网络错误') }
+  }
+}
+var _autoTimer=null;
+function scheduleRefresh(){
+  if(_autoTimer) clearInterval(_autoTimer);
+  _autoTimer=setInterval(function(){
+    if(_busy) return;                                            // 正在提交审核
+    var d=document.getElementById('detail');
+    if(d && d.style.display!=='none') return;                     // 详情面板打开
+    var n=document.getElementById('note');
+    if(n && document.activeElement===n) return;                   // 用户正在输入退回理由
+    load();
+  },30000);
+}
+var _cur=null;
+var _busy=false;
+function showDetail(addr){
+  _cur=addr;
+  var m=(window._mats||[]).find(function(x){return x.tb_address===addr}); if(!m)return;
+  var f=m.fields||{};
+  var rows=['subject_type','merchant_name','license_no','legal_name','legal_id_no','admin_name','admin_mobile','store_name','store_address','settle_type','bank_name','bank_account'];
+  var names={subject_type:'主体类型',merchant_name:'商户全称',license_no:'统一社会信用代码',legal_name:'法人姓名',legal_id_no:'法人身份证号',admin_name:'管理员姓名',admin_mobile:'管理员手机',store_name:'门店名称',store_address:'门店地址',settle_type:'结算类型',bank_name:'开户行',bank_account:'结算账号'};
+  var h='<table>';
+  rows.forEach(function(k){ if(f[k]) h+='<tr><th style="width:180px">'+esc(names[k])+'</th><td>'+esc(f[k])+'</td></tr>'; });
+  h+='<tr><th>资料凭据</th><td class="mono">'+esc(m.bundle_hash)+'</td></tr></table>';
+  h+='<div class="files"><h3 style="margin-top:14px">证件</h3>';
+  Object.keys(m.files||{}).forEach(function(k){
+    h+='<div><div class="mono">'+esc(k)+' ('+esc(m.files[k].bytes)+' B)</div><img src="/api/console/material-file?addr='+encodeURIComponent(m.tb_address)+'&name='+encodeURIComponent(m.files[k].file)+'"></div>';
+  });
+  h+='</div>';
+  h+='<div style="margin-top:14px"><label>退回理由 (退回时必填)</label><input id="note" placeholder="如: 执照照片模糊, 请重新上传">';
+  h+='<button class="btn" onclick="review(_cur,' + "'approve'" + ')">预审通过 (触发引导金)</button>';
+  h+='<button class="btn gray" onclick="review(_cur,' + "'reject'" + ')">退回</button>';
+  h+='<div class="msg" id="rm"></div></div>';
+  document.getElementById('detail-body').innerHTML=h;
+  document.getElementById('detail').style.display='block';
+  document.getElementById('detail').scrollIntoView({behavior:'smooth'});
+}
+async function review(addr,decision){
+  var m=document.getElementById('rm'); m.style.display='block'; m.textContent='提交中...';
+  _busy=true; // 提交期间暂停自动刷新, 不冲掉用户输入
+  try{
+    var j=await fetchJson('/api/console/review',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({tb_address:addr,decision:decision,note:(document.getElementById('note')||{}).value||''})});
+    m.textContent=(j&&j.ok)?('✅ '+(j.message||'已处理')):('失败: '+((j&&(j.message||j.error))||'未知错误'));
+    if(j&&j.ok){load();document.getElementById('detail').style.display='none'}
+  }catch(e){
+    m.textContent='失败: '+((e&&e.message)||'网络错误')+' (可重试)';
+  }finally{ _busy=false }
+}
+async function doLogout(){await fetch('/api/console/logout',{method:'POST'});location.href='/console'}
+function togglePwd(){var b=document.getElementById('pwdbox');b.style.display=b.style.display==='none'?'block':'none'}
+async function doPwd(){
+  var m=document.getElementById('pm'); m.style.display='block'; m.textContent='保存中...';
+  try{
+    var j=await fetchJson('/api/console/password',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({old_password:document.getElementById('op').value,new_password:document.getElementById('np').value})});
+    m.textContent=(j&&j.ok)?'✅ 密码已更新':('失败: '+((j&&(j.message||j.error))||'未知错误'));
+  }catch(e){
+    m.textContent='失败: '+((e&&e.message)||'网络错误');
+  }
+}
+load();
+scheduleRefresh();
+</script></div></body></html>`;
+    }
+
+    // ---------- 路由 ----------
+    /**
+     * 任何异常都必须写回响应, 否则浏览器 fetch 会永远挂着 (页面停留在「加载中...」)。
+     * res.headersSent 时只收尾, 不重复写头 (2026-09-22 .215 运营台事故的根因修复)。
+     */
+    function fail(req, res, e, tag) {
+        try {
+            say(`✗ ${tag} 内部错误 ${req && req.method} ${req && req.url}:`, (e && e.stack) || String(e));
+        }
+        catch (_) { /* 日志失败不影响响应 */ }
+        if (res.headersSent) {
+            try { res.end(); } catch (_) { /* ignore */ }
+            return true;
+        }
+        try {
+            res.writeHead(500, { "content-type": "application/json" });
+            res.end(JSON.stringify({
+                ok: false,
+                error: "internal",
+                message: String((e && e.message) || e).slice(0, 200),
+            }));
+        }
+        catch (_) {
+            try { res.end(); } catch (_) { /* ignore */ }
+        }
+        return true;
+    }
+
+    /** 异步 handler 的统一兜底: 内部 throw / reject 都收敛成 500 JSON */
+    function guard(req, res, tag, fn) {
+        return Promise.resolve().then(fn).catch((e) => fail(req, res, e, tag));
+    }
+
+    /** 返回 true = 已处理 */
+    function handle(req, res, url) {
+        try {
+            return handleInner(req, res, url);
+        }
+        catch (e) {
+            // 同步路径 (页面渲染 / 同步 sqlite 查询 / 鉴权) 的兜底
+            return fail(req, res, e, "handle");
+        }
+    }
+
+    /** 返回 true = 已处理 */
+    function handleInner(req, res, url) {
+        const p = url.pathname;
+        const json = (code, body) => {
+            res.writeHead(code, { "content-type": "application/json" });
+            res.end(JSON.stringify(body));
+        };
+        const html = (code, body) => {
+            res.writeHead(code, { "content-type": "text/html; charset=utf-8" });
+            res.end(body);
+        };
+
+        // 页面
+        if (p === "/console" || p === "/console/") {
+            if (adminCount() === 0) return html(200, htmlPage("setup")), true;
+            const u = currentUser(req);
+            if (!u) return html(200, htmlPage("login")), true;
+            return html(200, htmlPage("console", { username: u.username })), true;
+        }
+
+        // 首次创建管理员
+        if (p === "/api/console/setup" && req.method === "POST") {
+            void guard(req, res, "setup", async () => {
+                if (adminCount() > 0) return json(409, { ok: false, error: "already_setup", message: "管理员已存在" });
+                const b = (await readBody(req)) || {};
+                const u = String(b.username || "").trim();
+                const pw = String(b.password || "");
+                if (!/^[A-Za-z0-9_.-]{3,32}$/.test(u)) return json(400, { ok: false, error: "invalid_param", message: "用户名需 3-32 位字母数字._-" });
+                if (pw.length < MIN_PWD_LEN) return json(400, { ok: false, error: "invalid_param", message: `密码至少 ${MIN_PWD_LEN} 位` });
+                const salt = crypto.randomBytes(16).toString("hex");
+                db.prepare("INSERT INTO oracle_admins (username, pwd_hash, salt, created_at) VALUES (?,?,?,?)")
+                    .run(u, scryptHash(pw, salt), salt, Math.floor(Date.now() / 1000));
+                setCookie(res, signSession(u));
+                say("admin created:", u);
+                json(200, { ok: true });
+            });
+            return true;
+        }
+
+        // 登录
+        if (p === "/api/console/login" && req.method === "POST") {
+            void guard(req, res, "login", async () => {
+                const ip = clientIp(req);
+                if (loginBlocked(ip)) return json(429, { ok: false, error: "too_many", message: "失败次数过多, 请 15 分钟后再试" });
+                const b = (await readBody(req)) || {};
+                const u = String(b.username || "").trim();
+                const pw = String(b.password || "");
+                const row = db.prepare("SELECT username, pwd_hash, salt FROM oracle_admins WHERE username = ?").get(u);
+                if (!row || !safeEq(scryptHash(pw, row.salt), row.pwd_hash)) {
+                    noteLoginFail(ip);
+                    say("login failed for", u || "(empty)", "from", ip);
+                    return json(401, { ok: false, error: "unauthorized", message: "用户名或密码错误" });
+                }
+                db.prepare("UPDATE oracle_admins SET last_login_at = ? WHERE username = ?").run(Math.floor(Date.now() / 1000), u);
+                setCookie(res, signSession(u));
+                say("login ok:", u, "from", ip);
+                json(200, { ok: true });
+            });
+            return true;
+        }
+
+        if (p === "/api/console/logout" && req.method === "POST") {
+            clearCookie(res);
+            return json(200, { ok: true }), true;
+        }
+
+        // 以下需要登录
+        const needAuth = p.startsWith("/api/console/");
+        if (needAuth) {
+            const u = currentUser(req);
+            if (!u) return json(401, { ok: false, error: "unauthorized", message: "请先登录" }), true;
+
+            if (p === "/api/console/password" && req.method === "POST") {
+                void guard(req, res, "password", async () => {
+                    const b = (await readBody(req)) || {};
+                    const oldPw = String(b.old_password || "");
+                    const newPw = String(b.new_password || "");
+                    if (newPw.length < MIN_PWD_LEN) return json(400, { ok: false, error: "invalid_param", message: `新密码至少 ${MIN_PWD_LEN} 位` });
+                    const row = db.prepare("SELECT pwd_hash, salt FROM oracle_admins WHERE username = ?").get(u.username);
+                    if (!row || !safeEq(scryptHash(oldPw, row.salt), row.pwd_hash)) return json(401, { ok: false, error: "unauthorized", message: "当前密码错误" });
+                    const salt = crypto.randomBytes(16).toString("hex");
+                    db.prepare("UPDATE oracle_admins SET pwd_hash = ?, salt = ? WHERE username = ?").run(scryptHash(newPw, salt), salt, u.username);
+                    say("password changed:", u.username);
+                    json(200, { ok: true });
+                });
+                return true;
+            }
+
+            if (p === "/api/console/materials" && req.method === "GET") {
+                // 同步 better-sqlite3 查询: 表不存在/DB busy 都会 throw。
+                // 这里只负责"让异常有序退出", 出口统一由 handle() 的 try/catch 兜成 500 JSON
+                // (2026-09-22 .215 事故: 异常逃出 handle() → 响应永远不回 → 页面卡在「加载中...」)
+                const rows = db.prepare("SELECT tb_address, shop_name, fields_json, files_json, bundle_hash, received_at, review_status, review_note FROM sp_materials ORDER BY received_at DESC LIMIT 200").all();
+                return json(200, {
+                    ok: true,
+                    materials: rows.map(r => ({
+                        tb_address: r.tb_address, shop_name: r.shop_name,
+                        fields: safeJson(r.fields_json), files: safeJson(r.files_json),
+                        bundle_hash: r.bundle_hash, received_at: r.received_at,
+                        review_status: r.review_status, review_note: r.review_note,
+                    })),
+                }), true;
+            }
+
+            if (p === "/api/console/material-file" && req.method === "GET") {
+                const addr = String(url.searchParams.get("addr") || "");
+                const name = String(url.searchParams.get("name") || "");
+                if (!/^tct1[a-z0-9]{20,60}$/.test(addr) || !/^[A-Za-z0-9_.-]{1,60}$/.test(name)) {
+                    return json(400, { ok: false, error: "invalid_param" }), true;
+                }
+                const dir = path.join(materialsDir, addr);
+                const fp = path.join(dir, name);
+                if (!fp.startsWith(dir) || !fs.existsSync(fp)) return json(404, { ok: false, error: "not_found" }), true;
+                const buf = fs.readFileSync(fp);
+                const ext = path.extname(name).toLowerCase();
+                const ct = ext === ".png" ? "image/png" : ext === ".webp" ? "image/webp" : ext === ".jpg" || ext === ".jpeg" ? "image/jpeg" : "application/octet-stream";
+                res.writeHead(200, { "content-type": ct, "cache-control": "private, max-age=60" });
+                res.end(buf);
+                return true;
+            }
+
+            if (p === "/api/console/review" && req.method === "POST") {
+                void guard(req, res, "review", async () => {
+                    const b = (await readBody(req)) || {};
+                    const addr = String(b.tb_address || "").trim();
+                    const decision = String(b.decision || "").trim();
+                    const note = String(b.note || "").trim().slice(0, 200);
+                    if (!/^tct1[a-z0-9]{20,60}$/.test(addr)) return json(400, { ok: false, error: "invalid_param", message: "地址格式不对" });
+                    if (decision !== "approve" && decision !== "reject") return json(400, { ok: false, error: "invalid_param", message: "decision 必须是 approve/reject" });
+                    const row = db.prepare("SELECT tb_address, fields_json, bundle_hash, review_status FROM sp_materials WHERE tb_address = ?").get(addr);
+                    if (!row) return json(404, { ok: false, error: "not_found", message: "没有这个商家的资料" });
+                    if (decision === "reject" && !note) return json(400, { ok: false, error: "invalid_param", message: "退回必须填理由" });
+                    if (row.review_status !== "pending") {
+                        return json(409, { ok: false, error: "already_reviewed", message: "该资料已处理过 (重新提交后再审)" });
+                    }
+                    // 引导金幂等锚点 = 统一社会信用代码 (一个法律主体一次), 不用商家自选的地址
+                    let fields = {};
+                    try { fields = JSON.parse(row.fields_json || "{}"); } catch (_) {}
+                    const licenseKey = String(fields.license_no || "").toUpperCase().replace(/[\s-]/g, "");
+                    if (decision === "approve" && !licenseKey) {
+                        return json(400, { ok: false, error: "no_license", message: "资料缺少统一社会信用代码, 无法确定主体唯一性" });
+                    }
+                    const licHash = licenseKey ? require("crypto").createHash("sha256").update("license:" + licenseKey).digest("hex") : "";
+                    if (decision === "approve") {
+                        const dup = db.prepare("SELECT tb_address FROM oracle_bootstrap_grants WHERE credential_hash = ? AND recipient != ?").get(licHash, addr);
+                        if (dup) return json(409, { ok: false, error: "duplicate_license", message: `该统一社会信用代码已给 ${dup.tb_address} 发放过引导金 (一个主体一次)` });
+                    }
+                    if (decision === "approve") {
+                        let r = null;
+                        try {
+                            r = onApprove ? await onApprove(addr, licHash, u.username) : { ok: true, note: "no onApprove hook" };
+                        } catch (e) {
+                            return json(502, { ok: false, error: "approve_failed", message: String(e && e.message || e).slice(0, 200) });
+                        }
+                        if (r && r.ok === false) return json(502, { ok: false, error: "approve_failed", message: r.message || "引导金入队失败" });
+                    }
+                    db.prepare("UPDATE sp_materials SET review_status = ?, review_note = ?, reviewer = ?, reviewed_at = ? WHERE tb_address = ?")
+                        .run(decision === "approve" ? "approved" : "rejected", note, u.username, Math.floor(Date.now() / 1000), addr);
+                    say("review", decision, addr, "by", u.username);
+                    json(200, { ok: true, message: decision === "approve" ? "已通过, 引导金已入队 (链上模块就绪后自动发放)" : "已退回, 请通知商家修改后重新提交" });
+                });
+                return true;
+            }
+
+            return json(404, { ok: false, error: "not_found" }), true;
+        }
+
+        // 商家资料接收 (独立低权密钥: 只允许这一个动作)
+        if (p === "/api/sp/materials" && req.method === "POST") {
+            void guard(req, res, "sp-materials", async () => {
+                const key = process.env.ORACLE_MATERIALS_KEY || "";
+                if (!key) return json(503, { ok: false, error: "materials_disabled", message: "未配置 ORACLE_MATERIALS_KEY, 资料接收未启用" });
+                if (!safeEq(String(req.headers["x-api-key"] || ""), key)) return json(401, { ok: false, error: "unauthorized" });
+                const b = (await readBody(req)) || {};
+                const addr = String(b.tb_address || "").trim();
+                if (!/^tct1[a-z0-9]{20,60}$/.test(addr)) return json(400, { ok: false, error: "invalid_param", message: "tb_address 格式不对" });
+                const fields = b.fields || {};
+                const files = b.files || {};
+                const filesData = b.files_data || {};
+                const dir = path.join(materialsDir, addr);
+                fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+                // 存证: 逐文件 sha256 必须与商家侧一致 (防篡改)
+                for (const [name, info] of Object.entries(files)) {
+                    const data = filesData[name];
+                    if (!data) continue;
+                    const buf = Buffer.from(String(data), "base64");
+                    const sha = crypto.createHash("sha256").update(buf).digest("hex");
+                    if (info && info.sha256 && sha !== info.sha256) {
+                        return json(400, { ok: false, error: "hash_mismatch", message: `${name} 文件校验不一致` });
+                    }
+                    fs.writeFileSync(path.join(dir, String(info.file || name)), buf, { mode: 0o600 });
+                }
+                db.prepare(`INSERT INTO sp_materials (tb_address, shop_name, fields_json, files_json, bundle_hash, received_at, review_status, review_note, reviewer, reviewed_at)
+                            VALUES (?,?,?,?,?,?, 'pending', '', '', 0)
+                            ON CONFLICT(tb_address) DO UPDATE SET
+                              shop_name = excluded.shop_name, fields_json = excluded.fields_json, files_json = excluded.files_json,
+                              bundle_hash = excluded.bundle_hash, received_at = excluded.received_at,
+                              review_status = 'pending', review_note = '', reviewer = '', reviewed_at = 0`)
+                    .run(addr, String(fields.merchant_name || ""), JSON.stringify(fields), JSON.stringify(files), String(b.bundle_hash || ""), Math.floor(Date.now() / 1000));
+                say("materials received:", addr, "files:", Object.keys(files).join(","));
+                json(200, { ok: true, message: "资料已收到, 等待审核" });
+            });
+            return true;
+        }
+
+        return false;
+    }
+
+    function safeJson(s) {
+        try { return JSON.parse(s || "{}"); } catch (_) { return {}; }
+    }
+
+    return { handle, adminCount };
+}
+
+module.exports = { createOpsConsole };

package/oracle/oracle-sync.d.ts

@@ -0,0 +1,29 @@
+/**
+ * oracle-sync.ts — B-2 W4 oracle 同步层 (insurance-hub-1 → 主链侧快照 + indexer insurance_status)
+ *
+ * 架构 (per plans/insurance-chain-template-design-2026-09-14 §3):
+ *
+ *   insurance chain (内网)                .123 (本服务, trustbase-oracle-sync.service)
+ *   ┌──────────────────┐  LCD REST 轮询   ┌─────────────────────────────┐
+ *   │ 黑名单/等级/承保   │ ──────────────→ │ oracle-sync                  │
+ *   │ (1397, 经 .115    │  (默认 60s)      │  → 写 index.db products.     │
+ *   │  nginx 转发)      │                 │     insurance_status         │
+ *   └──────────────────┘                 │  → riskcache-snapshot.json   │
+ *                                        │  → :3312 /healthz +          │
+ *                                        │    /api/riskcache/*          │
+ *                                        └─────────────────────────────┘
+ *
+ * 状态映射 (products.insurance_status 4 态, per #NEW67):
+ *   insurance application ACTIVE    → INSURED      (按 sku_id 对齐 products)
+ *   insurance application PENDING   → PENDING
+ *   application CANCELLED/EXPIRED   → NOT_INSURED
+ *   riskcontrol approval rejected   → REJECTED     (按 seller|slot_index 对齐)
+ *   (approval approved 本身不改 insurance_status — 审核≠承保)
+ *
+ * 幂等: 状态没变不写库; 快照原子写 (tmp+rename); last synced height 记录在
+ * 快照和 /healthz 里。重启从快照恢复上次状态, 不重复写。
+ *
+ * 端口/路径全部 env 可配 (见下)。不碰 buyer-backend (:3005) 与主链 trustchaind。
+ */
+export {};
+//# sourceMappingURL=oracle-sync.d.ts.map

package/oracle/oracle-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-sync.d.ts","sourceRoot":"","sources":["../../src/oracle/oracle-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG"}