trustbase-seller-backend 0.1.5

package/oracle/oracle-sync.js

@@ -0,0 +1,445 @@
+"use strict";
+/**
+ * oracle-sync.ts — B-2 W4 oracle 同步层 (insurance-hub-1 → 主链侧快照 + indexer insurance_status)
+ *
+ * 架构 (per plans/insurance-chain-template-design-2026-09-14 §3):
+ *
+ *   insurance chain (内网)                .123 (本服务, trustbase-oracle-sync.service)
+ *   ┌──────────────────┐  LCD REST 轮询   ┌─────────────────────────────┐
+ *   │ 黑名单/等级/承保   │ ──────────────→ │ oracle-sync                  │
+ *   │ (1397, 经 .115    │  (默认 60s)      │  → 写 index.db products.     │
+ *   │  nginx 转发)      │                 │     insurance_status         │
+ *   └──────────────────┘                 │  → riskcache-snapshot.json   │
+ *                                        │  → :3312 /healthz +          │
+ *                                        │    /api/riskcache/*          │
+ *                                        └─────────────────────────────┘
+ *
+ * 状态映射 (products.insurance_status 4 态, per #NEW67):
+ *   insurance application ACTIVE    → INSURED      (按 sku_id 对齐 products)
+ *   insurance application PENDING   → PENDING
+ *   application CANCELLED/EXPIRED   → NOT_INSURED
+ *   riskcontrol approval rejected   → REJECTED     (按 seller|slot_index 对齐)
+ *   (approval approved 本身不改 insurance_status — 审核≠承保)
+ *
+ * 幂等: 状态没变不写库; 快照原子写 (tmp+rename); last synced height 记录在
+ * 快照和 /healthz 里。重启从快照恢复上次状态, 不重复写。
+ *
+ * 端口/路径全部 env 可配 (见下)。不碰 buyer-backend (:3005) 与主链 trustchaind。
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const http = __importStar(require("http"));
+const path = __importStar(require("path"));
+const registry_1 = require("./registry");
+const LCD_BASE = process.env.INS_LCD_BASE || 'http://192.168.1.115/insurance-lcd';
+const INDEX_DB = process.env.ORACLE_INDEX_DB || '/opt/trustchain-seller-backend/indexer/data/index.db';
+const SNAPSHOT_PATH = process.env.ORACLE_SNAPSHOT_PATH ||
+    path.join(path.dirname(INDEX_DB), 'riskcache-snapshot.json');
+const POLL_INTERVAL_MS = parseInt(process.env.ORACLE_POLL_INTERVAL_MS || '60000', 10);
+const LISTEN_PORT = parseInt(process.env.ORACLE_PORT || '3312', 10);
+// cell 接入治理白名单 (2026-09-15 拍板): 每轮先查主链 chainregistry
+const MAINCHAIN_LCD = process.env.MAINCHAIN_LCD_BASE || 'http://localhost:1317';
+const REGISTRY_CHAIN_NAME = process.env.ORACLE_REGISTRY_NAME || 'insurance-hub';
+const LISTEN_HOST = process.env.ORACLE_HOST || '0.0.0.0'; // LAN (gate 未来从别台读)
+// ---- LCD 拉取 ----
+async function lcdGet(p) {
+    const resp = await fetch(LCD_BASE + p, { signal: AbortSignal.timeout(15000) });
+    if (!resp.ok)
+        throw new Error(`LCD ${p} → HTTP ${resp.status}`);
+    return (await resp.json());
+}
+async function pullChainState() {
+    const [block, bl, lv, ap, apps, decls] = await Promise.all([
+        lcdGet('/cosmos/base/tendermint/v1beta1/blocks/latest'),
+        lcdGet('/oxiaom/trustchain/riskcontrol/v1/blacklist'),
+        lcdGet('/oxiaom/trustchain/riskcontrol/v1/levels'),
+        lcdGet('/oxiaom/trustchain/riskcontrol/v1/approvals'),
+        lcdGet('/trustchain/insurance/v1/applications'),
+        lcdGet('/trustchain/insurance/v1/declarations'),
+    ]);
+    return {
+        chain: 'insurance-hub-1',
+        synced_at: new Date().toISOString(),
+        height: parseInt(block.block.header.height, 10),
+        blacklist: bl.entries || [],
+        levels: lv.levels || [],
+        approvals: ap.records || [],
+        applications: apps.applications || [],
+        declarations: decls.declarations || [],
+    };
+}
+function mapApplication(app) {
+    switch (app.status) {
+        case 'INSURANCE_STATUS_ACTIVE': return { key: { skuId: app.sku_id }, status: 'INSURED' };
+        case 'INSURANCE_STATUS_PENDING': return { key: { skuId: app.sku_id }, status: 'PENDING' };
+        default: return { key: { skuId: app.sku_id }, status: 'NOT_INSURED' }; // EXPIRED/CANCELLED
+    }
+}
+// ---- sqlite 写 (WAL, 与 indexer 进程并发安全) ----
+let db = null;
+async function openDb() {
+    if (db)
+        return db;
+    const Database = (await Promise.resolve().then(() => __importStar(require('better-sqlite3')))).default;
+    db = new Database(INDEX_DB);
+    db.pragma('busy_timeout = 5000');
+    return db;
+}
+/** 返回更新的行数 (状态没变不写)。 */
+async function applyToProducts(snap) {
+    const d = await openDb();
+    const getBySku = d.prepare('SELECT sku_id, insurance_status FROM products WHERE sku_id = ?');
+    // seller+slot_index 在 indexer 不唯一 (wp 导入商品会共享 slot) → 全量匹配
+    const getBySlot = d.prepare('SELECT sku_id, insurance_status FROM products WHERE seller = ? AND slot_index = ?');
+    const setStatus = d.prepare('UPDATE products SET insurance_status = ?, updated_at = ? WHERE sku_id = ? AND insurance_status != ?');
+    let updated = 0;
+    const details = [];
+    const now = Math.floor(Date.now() / 1000);
+    // 保险申请: 按 sku_id 对齐 (wp-* 商品 slot_index=-1, 只能靠 sku_id)。
+    // 一个 sku 可能有多个申请 (取消后重新投保) → 按优先级取最优:
+    // INSURED (ACTIVE) > PENDING > NOT_INSURED (CANCELLED/EXPIRED)
+    const prio = { INSURED: 3, PENDING: 2, REJECTED: 1, NOT_INSURED: 0 };
+    const bestBySku = new Map();
+    for (const app of snap.applications) {
+        if (!app.sku_id)
+            continue;
+        const m = mapApplication(app);
+        const cur = bestBySku.get(m.key.skuId);
+        if (!cur || prio[m.status] > prio[cur.status]) {
+            bestBySku.set(m.key.skuId, { status: m.status, appId: app.application_id });
+        }
+    }
+    // 申报记录 (B-2 W5): DECLARED → PENDING (申报待承保)。有申请时申请优先,
+    // 但申请最佳态已是 NOT_INSURED (撤销/取消/到期 = 历史保单) 而申报仍
+    // DECLARED 时, 申报代表"新的承保意向" → PENDING。
+    for (const decl of snap.declarations || []) {
+        if (!decl.sku_id || decl.status !== 'DECLARED')
+            continue;
+        const cur = bestBySku.get(decl.sku_id);
+        if (cur && cur.status !== 'NOT_INSURED')
+            continue; // ACTIVE/PENDING 申请优先
+        bestBySku.set(decl.sku_id, { status: 'PENDING', appId: 'decl:' + decl.declaration_key });
+    }
+    for (const [skuId, best] of bestBySku) {
+        const row = getBySku.get(skuId);
+        if (!row)
+            continue; // indexer 没有该商品 (非本 cell / 未上架) — 跳过
+        if (row.insurance_status !== best.status) {
+            setStatus.run(best.status, now, row.sku_id, best.status);
+            updated++;
+            details.push(`${row.sku_id}: ${row.insurance_status} → ${best.status} (app ${best.appId})`);
+        }
+    }
+    // riskcontrol 审核: approved=false → REJECTED; approved=true → REJECTED 回
+    // NOT_INSURED (重新审核通过应恢复; INSURED/PENDING 不动, 保险状态优先)
+    for (const rec of snap.approvals) {
+        const sep = rec.sku_key.lastIndexOf('|');
+        if (sep < 0)
+            continue;
+        const seller = rec.sku_key.slice(0, sep);
+        const slot = parseInt(rec.sku_key.slice(sep + 1), 10);
+        if (Number.isNaN(slot))
+            continue;
+        const rows = getBySlot.all(seller, slot);
+        for (const row of rows) {
+            if (!rec.approved) {
+                if (row.insurance_status === 'REJECTED')
+                    continue;
+                setStatus.run('REJECTED', now, row.sku_id, 'REJECTED');
+                updated++;
+                details.push(`${row.sku_id}: → REJECTED (riskcontrol ${rec.sku_key})`);
+            }
+            else if (row.insurance_status === 'REJECTED') {
+                setStatus.run('NOT_INSURED', now, row.sku_id, 'NOT_INSURED');
+                updated++;
+                details.push(`${row.sku_id}: REJECTED → NOT_INSURED (re-approved ${rec.sku_key})`);
+            }
+        }
+    }
+    return { updated, details };
+}
+// ---- 快照 (原子写) ----
+function writeSnapshot(snap) {
+    const tmp = SNAPSHOT_PATH + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(snap, null, 2));
+    fs.renameSync(tmp, SNAPSHOT_PATH);
+}
+function readSnapshot() {
+    try {
+        return JSON.parse(fs.readFileSync(SNAPSHOT_PATH, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+// ---- C5 胶水 (C2 引导金 + E6 积分, v3.9.3 联调批; 私钥只在服务端) ----
+const c5_glue_1 = require("./c5-glue");
+const ops_console_1 = require("./ops-console");
+const crypto_1 = require("crypto");
+let glue = null; // main() 里初始化 (需要 db handle)
+let opsConsole = null; // 运营台 (会话登录 + 资料审核), main() 里初始化
+// ---- C5 admin 端点鉴权 (资金安全: bootstrap-grant 触发真实发钱, 绝不能裸奔) ----
+// 密钥从 oracle 进程 env 读; 未配置 → C5 端点一律 503 (不静默放行)
+const C5_API_KEY = process.env.ORACLE_ADMIN_API_KEY || '';
+const C5_API_PASSWORD = process.env.ORACLE_ADMIN_API_PASSWORD || '';
+// 可选 IP 白名单: 精确 IP 或 IPv4 CIDR (如 192.168.1.0/24), 逗号分隔
+const C5_ALLOW_IPS = (process.env.ORACLE_ADMIN_ALLOW_IPS || '').split(',').map(s => s.trim()).filter(Boolean);
+function ipAllowed(ip) {
+    if (C5_ALLOW_IPS.length === 0)
+        return true;
+    for (const rule of C5_ALLOW_IPS) {
+        if (rule === ip)
+            return true;
+        const m = rule.match(/^(\d+\.\d+\.\d+\.\d+)\/(\d{1,2})$/);
+        if (m && /^\d+\.\d+\.\d+\.\d+$/.test(ip)) {
+            const bits = parseInt(m[2], 10);
+            const toInt = (s) => s.split('.').reduce((a, o) => (a << 8) + Number(o), 0) >>> 0;
+            const mask = bits === 0 ? 0 : (0xffffffff << (32 - bits)) >>> 0;
+            if ((toInt(ip) & mask) === (toInt(m[1]) & mask))
+                return true;
+        }
+    }
+    return false;
+}
+function timingEq(a, b) {
+    if (!a || !b || a.length !== b.length)
+        return false;
+    return crypto_1.timingSafeEqual(Buffer.from(a), Buffer.from(b));
+}
+/** 返回 null = 放行; 否则 {code, body} */
+function c5AdminAuth(req) {
+    const ip = String((req.headers['x-forwarded-for'] || '').split(',')[0] || req.socket.remoteAddress || '').replace('::ffff:', '').trim();
+    if (!ipAllowed(ip))
+        return { code: 403, body: { error: 'forbidden', message: '来源 IP 不在 ORACLE_ADMIN_ALLOW_IPS 白名单' } };
+    if (!C5_API_KEY || !C5_API_PASSWORD)
+        return { code: 503, body: { error: 'c5_disabled', message: 'C5 管理端点未启用: 未配置 ORACLE_ADMIN_API_KEY/ORACLE_ADMIN_API_PASSWORD' } };
+    if (!timingEq(String(req.headers['x-api-key'] || ''), C5_API_KEY) ||
+        !timingEq(String(req.headers['x-api-password'] || ''), C5_API_PASSWORD))
+        return { code: 401, body: { error: 'unauthorized', message: 'X-API-Key / X-API-Password 缺失或错误' } };
+    return null;
+}
+// ---- HTTP: /healthz + /api/riskcache/* (只读公开) + /api/oracle/* (C5, 强制鉴权) ----
+let lastSync = {
+    at: '', height: 0, ok: false, updated: 0,
+};
+function serve() {
+    const srv = http.createServer((req, res) => {
+        void (async () => {
+            const url = new URL(req.url || '/', 'http://x');
+            const json = (code, body) => {
+                res.writeHead(code, { 'content-type': 'application/json' });
+                res.end(JSON.stringify(body));
+            };
+            // 运营台 (账号+会话): /console, /api/console/*, /api/sp/materials (独立密钥)
+            if (opsConsole && opsConsole.handle(req, res, url))
+                return;
+            // C5 胶水 admin 端点 (强制鉴权, 见 c5AdminAuth)
+            if (url.pathname.startsWith('/api/oracle/')) {
+                if (!glue)
+                    return json(503, { error: 'c5_not_ready' });
+                const denied = c5AdminAuth(req);
+                if (denied)
+                    return json(denied.code, denied.body);
+            }
+            if (glue && url.pathname === '/api/oracle/bootstrap-grant' && req.method === 'POST') {
+                const body = await new Promise((resolve) => {
+                    let buf = '';
+                    req.on('data', (d) => { buf += d; });
+                    req.on('end', () => { try { resolve(JSON.parse(buf || '{}')); } catch { resolve({}); } });
+                });
+                const recipient = String(body.recipient || '').trim();
+                if (!/^tct1[a-z0-9]{20,60}$/.test(recipient)) {
+                    return json(400, { error: 'invalid_param', message: 'recipient 必填且为 tct1 地址' });
+                }
+                const r = glue.enqueueBootstrapGrant({
+                    recipient,
+                    credentialHash: String(body.credential_hash || '').trim() || undefined,
+                });
+                return json(200, { ok: true, ...r, note: '已入队, oracle tick 消费 (链上模块 v3.9.3 上线前会停在 waiting_module)' });
+            }
+            if (glue && url.pathname === '/api/oracle/grants' && req.method === 'GET') {
+                const d = await openDb();
+                return json(200, {
+                    bootstrap: d.prepare('SELECT credential_hash, recipient, status, approve_txhash, disburse_txhash, last_error, updated_at FROM oracle_bootstrap_grants ORDER BY updated_at DESC LIMIT 50').all(),
+                    credits: d.prepare('SELECT reason_kind, ref_id, recipient, amount, status, txhash, note, updated_at FROM oracle_credit_grants ORDER BY updated_at DESC LIMIT 50').all(),
+                });
+            }
+            if (url.pathname === '/healthz') {
+                const staleSec = lastSync.at ? (Date.now() - Date.parse(lastSync.at)) / 1000 : -1;
+                const healthy = (0, registry_1.isSyncAllowed)(registryState) && lastSync.ok && staleSec >= 0 && staleSec < 3 * (POLL_INTERVAL_MS / 1000);
+                return json(healthy ? 200 : 503, {
+                    status: healthy ? 'ok' : 'stale_or_failing',
+                    registry: registryState, registry_detail: registryDetail,
+                    last_sync: lastSync, poll_interval_ms: POLL_INTERVAL_MS, lcd: LCD_BASE,
+                });
+            }
+            if (url.pathname === '/api/riskcache/blacklist') {
+                const snap = readSnapshot();
+                if (!snap)
+                    return json(503, { error: 'no snapshot yet' });
+                return json(200, {
+                    synced_at: snap.synced_at, height: snap.height,
+                    blacklist: snap.blacklist.map(b => ({
+                        address: b.address, reason: b.reason,
+                        expires_at: parseInt(b.expires_at, 10), permanent: b.permanent,
+                    })),
+                });
+            }
+            const m = url.pathname.match(/^\/api\/riskcache\/seller-level\/(.+)$/);
+            if (m) {
+                const snap = readSnapshot();
+                if (!snap)
+                    return json(503, { error: 'no snapshot yet' });
+                const lvl = snap.levels.find(l => l.seller === m[1]);
+                const black = snap.blacklist.find(b => b.address === m[1]);
+                return json(200, {
+                    synced_at: snap.synced_at, height: snap.height, address: m[1],
+                    level: lvl ? lvl.level : 0,
+                    blacklisted: !!black,
+                });
+            }
+            // WP 插件徽章批量读: 某 seller 全部商品的 insurance_status (直读 products 表)
+            if (url.pathname === '/api/riskcache/products-status') {
+                const seller = url.searchParams.get('seller') || '';
+                const d = await openDb();
+                const rows = (seller
+                    ? d.prepare('SELECT sku_id, insurance_status FROM products WHERE seller = ?').all(seller)
+                    : d.prepare('SELECT sku_id, insurance_status FROM products').all());
+                return json(200, { synced_at: lastSync.at, height: lastSync.height, products: rows });
+            }
+            if (url.pathname === '/api/riskcache/status') {
+                const snap = readSnapshot();
+                return json(200, { last_sync: lastSync, registry: registryState, registry_detail: registryDetail, snapshot: snap ? {
+                        synced_at: snap.synced_at, height: snap.height,
+                        blacklist: snap.blacklist.length, levels: snap.levels.length,
+                        approvals: snap.approvals.length, applications: snap.applications.length,
+                    } : null });
+            }
+            json(404, { error: 'not found' });
+        })().catch(e => {
+            res.writeHead(500, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: e.message }));
+        });
+    });
+    srv.listen(LISTEN_PORT, LISTEN_HOST, () => {
+        console.log(`[oracle-sync] riskcache API on http://${LISTEN_HOST}:${LISTEN_PORT} (healthz, /api/riskcache/{blacklist,seller-level/:addr,status})`);
+    });
+}
+// ---- 主循环 ----
+// 治理白名单状态 (fail-open 初值 unknown → 首次成功查询前不降级)
+let registryState = 'unknown';
+let registryDetail = 'not checked yet';
+// 停同步降级: 已同步商品 INSURED/PENDING → NOT_INSURED (幂等), 记 audit log
+async function downgradeCellProducts(reason) {
+    const d = await openDb();
+    const now = Math.floor(Date.now() / 1000);
+    const r = d.prepare("UPDATE products SET insurance_status = 'NOT_INSURED', updated_at = ? WHERE insurance_status IN ('INSURED','PENDING')").run(now);
+    if (r.changes > 0) {
+        const line = JSON.stringify({ ts: new Date().toISOString(), event: 'registry_downgrade', reason, rows: r.changes });
+        fs.appendFileSync(path.join(path.dirname(INDEX_DB), 'oracle-audit.jsonl'), line + '\n');
+        console.log(`[oracle-sync] registry downgrade: ${r.changes} products → NOT_INSURED (${reason})`);
+    }
+    return r.changes;
+}
+async function tick() {
+    // ① cell 接入治理白名单: 非 active → 停同步 + 降级, fail-open 主链不可达保持上次
+    const rc = await (0, registry_1.checkRegistryWith)(fetch, MAINCHAIN_LCD, REGISTRY_CHAIN_NAME, registryState);
+    const prev = registryState;
+    registryState = rc.state;
+    registryDetail = rc.detail;
+    if (rc.state !== prev) {
+        console.log(`[oracle-sync] registry state: ${prev} → ${rc.state} (${rc.detail})`);
+    }
+    else if (!(0, registry_1.isSyncAllowed)(rc.state) && rc.detail.includes('keep last')) {
+        console.warn(`[oracle-sync] registry warn: ${rc.detail}`);
+    }
+    if (!(0, registry_1.isSyncAllowed)(registryState)) {
+        await downgradeCellProducts(`registry=${registryState} (${registryDetail})`);
+        lastSync = { ...lastSync, ok: false, error: `registry=${registryState}: sync halted` };
+        return;
+    }
+    try {
+        const snap = await pullChainState();
+        const { updated, details } = await applyToProducts(snap);
+        writeSnapshot(snap);
+        lastSync = { at: snap.synced_at, height: snap.height, ok: true, updated };
+        if (updated > 0) {
+            console.log(`[oracle-sync] h=${snap.height} updated=${updated}: ${details.join('; ')}`);
+        }
+        else {
+            console.log(`[oracle-sync] h=${snap.height} no change (bl=${snap.blacklist.length} lv=${snap.levels.length} ap=${snap.approvals.length} app=${snap.applications.length})`);
+        }
+    }
+    catch (e) {
+        lastSync = { ...lastSync, ok: false, error: e.message };
+        console.error(`[oracle-sync] tick failed: ${e.message}`);
+    }
+}
+async function main() {
+    console.log(`[oracle-sync] start: lcd=${LCD_BASE} db=${INDEX_DB} interval=${POLL_INTERVAL_MS}ms snapshot=${SNAPSHOT_PATH}`);
+    await openDb();
+    // C5 胶水: 共用 index.db 台账, 每 tick 顺带推进 (引导金队列 + E6 结算)
+    glue = (0, c5_glue_1.createOracleGlue)({ db });
+    if (!C5_API_KEY || !C5_API_PASSWORD) {
+        console.warn('[oracle-sync] ⚠️ 未配置 ORACLE_ADMIN_API_KEY/ORACLE_ADMIN_API_PASSWORD — C5 管理端点 (/api/oracle/*) 将全部 503 拒绝服务, 不会静默放行');
+    }
+    if (C5_ALLOW_IPS.length === 0) {
+        console.warn('[oracle-sync] ⚠️ 未配置 ORACLE_ADMIN_ALLOW_IPS — C5 管理端点只靠 API key 保护, 建议设置 IP 白名单 (如 192.168.1.0/24)');
+    }
+    // 运营台: 资料审核 + 引导金触发 (approve 走 C5 胶水队列)
+    opsConsole = ops_console_1.createOpsConsole({
+        db,
+        materialsDir: process.env.ORACLE_MATERIALS_DIR || path.join(path.dirname(INDEX_DB), 'sp-materials'),
+        onApprove: async (addr, credentialHash) => {
+            // 幂等锚点 = 运营台传入的执照哈希 (sha256("license:" + 统一社会信用代码)), 一个法律主体一次
+            const ch = credentialHash || crypto_1.createHash('sha256').update('identity:' + addr).digest('hex');
+            const r = glue.enqueueBootstrapGrant({ recipient: addr, credentialHash: ch });
+            return { ok: true, note: r && r.enqueued ? '已入队' : `已存在(${r && r.status})` };
+        },
+    });
+    if (!process.env.ORACLE_MATERIALS_KEY) {
+        console.warn('[oracle-sync] ⚠️ 未配置 ORACLE_MATERIALS_KEY — 商家资料接收端点 (/api/sp/materials) 将 503 拒绝');
+    }
+    if (opsConsole.adminCount() === 0) {
+        console.log('[oracle-sync] 运营台首次使用: 打开 http://<host>:3312/console 创建管理员账号');
+    }
+    serve();
+    await tick();
+    setInterval(tick, POLL_INTERVAL_MS);
+    setInterval(() => { glue.tick().catch(e => console.error(`[oracle-glue] tick failed: ${e.message}`)); }, POLL_INTERVAL_MS);
+}
+main().catch(e => { console.error(e); process.exit(1); });
+//# sourceMappingURL=oracle-sync.js.map

package/oracle/oracle-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-sync.js","sourceRoot":"","sources":["../../src/oracle/oracle-sync.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAC7B,yCAA6E;AAE7E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,oCAAoC,CAAC;AAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,sDAAsD,CAAC;AACvG,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB;IACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AACtF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AACpE,qDAAqD;AACrD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;AAChF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,eAAe,CAAC;AAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC,oBAAoB;AAiC9E,mBAAmB;AAEnB,KAAK,UAAU,MAAM,CAAI,CAAS;IAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAM,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,MAAM,CAA4C,+CAA+C,CAAC;QAClG,MAAM,CAAgC,6CAA6C,CAAC;QACpF,MAAM,CAA4B,0CAA0C,CAAC;QAC7E,MAAM,CAAgC,6CAA6C,CAAC;QACpF,MAAM,CAA2C,uCAAuC,CAAC;QACzF,MAAM,CAAqC,uCAAuC,CAAC;KACpF,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,SAAS,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;QAC3B,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE;QACvB,SAAS,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC;AAMD,SAAS,cAAc,CAAC,GAAyB;IAC/C,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,yBAAyB,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzF,KAAK,0BAA0B,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1F,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,oBAAoB;IAC7F,CAAC;AACH,CAAC;AAED,6CAA6C;AAE7C,IAAI,EAAE,GAA6C,IAAI,CAAC;AACxD,KAAK,UAAU,MAAM;IACnB,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,CAAC,wDAAa,gBAAgB,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,EAAE,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,wBAAwB;AACxB,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC;IAC7F,2DAA2D;IAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,qGAAqG,CAAC,CAAC;IAEnI,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,yDAAyD;IACzD,sCAAsC;IACtC,+DAA+D;IAC/D,MAAM,IAAI,GAA8B,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgD,CAAC;IAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,sDAAsD;IACtD,8CAA8C;IAC9C,sCAAsC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QACzD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa;YAAE,SAAS,CAAC,sBAAsB;QACzE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAA6D,CAAC;QAC5F,IAAI,CAAC,GAAG;YAAE,SAAS,CAAC,qCAAqC;QACzD,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,gBAAgB,MAAM,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,sDAAsD;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAmD,CAAC;QAC3F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,GAAG,CAAC,gBAAgB,KAAK,UAAU;oBAAE,SAAS;gBAClD,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACvD,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,6BAA6B,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,GAAG,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBAC/C,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC7D,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,yCAAyC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,qBAAqB;AAErB,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,GAAG,GAAG,aAAa,GAAG,MAAM,CAAC;IACnC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC3F,CAAC;AAED,8CAA8C;AAE9C,IAAI,QAAQ,GAAiF;IAC3F,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;CACzC,CAAC;AAEF,SAAS,KAAK;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAAG,KAAK,CAAC,KAAK,IAAI,EAAE;YAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;gBAC3C,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC;YAEF,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClF,MAAM,OAAO,GAAG,IAAA,wBAAa,EAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;gBACzH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;oBAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB;oBAC3C,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc;oBACxD,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ;iBACvE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,0BAA0B,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC,GAAG,EAAE;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;oBAC9C,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;wBACpC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;qBAC/D,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC,GAAG,EAAE;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7D,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC1B,WAAW,EAAE,CAAC,CAAC,KAAK;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,8DAA8D;YAC9D,IAAI,GAAG,CAAC,QAAQ,KAAK,gCAAgC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpD,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,CAAC,MAAM;oBAClB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;oBACzF,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,EAAE,CACjB,CAAC;gBACpD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;wBACjH,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;wBAC9C,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;wBAC5D,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;qBACzE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,yCAAyC,WAAW,IAAI,WAAW,kEAAkE,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gBAAgB;AAEhB,8CAA8C;AAC9C,IAAI,aAAa,GAAkB,SAAS,CAAC;AAC7C,IAAI,cAAc,GAAG,iBAAiB,CAAC;AAEvC,+DAA+D;AAC/D,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACjD,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CACjB,sHAAsH,CACvH,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACX,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,OAAO,4BAA4B,MAAM,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,CAAC,CAAC,OAAO,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,2DAA2D;IAC3D,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAiB,EAAC,KAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,aAAa,CAAC;IAC3B,aAAa,GAAG,EAAE,CAAC,KAAK,CAAC;IACzB,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,MAAM,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;SAAM,IAAI,CAAC,IAAA,wBAAa,EAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,IAAA,wBAAa,EAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,qBAAqB,CAAC,YAAY,aAAa,KAAK,cAAc,GAAG,CAAC,CAAC;QAC7E,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,aAAa,eAAe,EAAE,CAAC;QACvF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;QACpC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,MAAM,YAAY,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,MAAM,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7K,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;QACnE,OAAO,CAAC,KAAK,CAAC,8BAA+B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,OAAO,QAAQ,aAAa,gBAAgB,eAAe,aAAa,EAAE,CAAC,CAAC;IAC5H,MAAM,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,CAAC;IACR,MAAM,IAAI,EAAE,CAAC;IACb,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AACtC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/oracle/registry.d.ts

@@ -0,0 +1,30 @@
+/**
+ * registry.ts — cell 接入治理白名单 (xiaomu 2026-09-15 拍板 "补上缺口")
+ *
+ * 规则 (per chainregistry 治理闭环):
+ *   - chain_id 对应 entry 存在且 status=active → 允许同步
+ *   - status=deprecated / frozen / entry 不存在 → 停同步 + 商品降级
+ *   - 主链 LCD 不可达 → fail-open (保持上次状态, 记 warn, 不误伤)
+ */
+export type RegistryState = 'active' | 'deprecated' | 'frozen' | 'unregistered' | 'unknown';
+export interface RegistryCheckResult {
+    state: RegistryState;
+    detail: string;
+}
+type FetchLike = (url: string, opts?: unknown) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/** 纯函数: 给定 fetch 实现, 查询 chainregistry 并归一化状态。 */
+export declare function checkRegistryWith(fetchFn: FetchLike, lcdBase: string, chainName: string, lastState: RegistryState): Promise<RegistryCheckResult>;
+/** 该状态是否允许同步。 */
+/**
+ * 2026-09-15 kimi 宽限期修正 (拍板: 明天 xiaomu 验收演示不能断):
+ * unregistered (治理提案 7 天期, 注册流程走完前的窗口) → 允许同步 + 记 warn 降级提示,
+ * 被踢 (deprecated/frozen) 才硬停 + 商品降级。治理的本意是"踢出", 不是"卡住首次接入"。
+ * 注册完成 (9/22 tally 后) unregistered 状态自然消失。
+ */
+export declare function isSyncAllowed(state: RegistryState): boolean;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/oracle/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/oracle/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;AAE5F,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAErH,iDAAiD;AACjD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,aAAa,GACvB,OAAO,CAAC,mBAAmB,CAAC,CAqC9B;AAED,iBAAiB;AACjB;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAE3D"}

package/oracle/registry.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * registry.ts — cell 接入治理白名单 (xiaomu 2026-09-15 拍板 "补上缺口")
+ *
+ * 规则 (per chainregistry 治理闭环):
+ *   - chain_id 对应 entry 存在且 status=active → 允许同步
+ *   - status=deprecated / frozen / entry 不存在 → 停同步 + 商品降级
+ *   - 主链 LCD 不可达 → fail-open (保持上次状态, 记 warn, 不误伤)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkRegistryWith = checkRegistryWith;
+exports.isSyncAllowed = isSyncAllowed;
+/** 纯函数: 给定 fetch 实现, 查询 chainregistry 并归一化状态。 */
+async function checkRegistryWith(fetchFn, lcdBase, chainName, lastState) {
+    const url = `${lcdBase.replace(/\/$/, '')}/oxiaom/trustchain/chainregistry/v1/chains/${encodeURIComponent(chainName)}`;
+    let resp;
+    try {
+        resp = await fetchFn(url, { signal: AbortSignal.timeout(10000) });
+    }
+    catch (e) {
+        // fail-open: 主链 LCD 不可达保持上次状态, 不误伤
+        return { state: lastState, detail: `mainchain LCD unreachable (${e.message}), keep last state=${lastState}` };
+    }
+    if (resp.status === 404) {
+        return { state: 'unregistered', detail: `entry ${chainName} not found in chainregistry` };
+    }
+    if (!resp.ok) {
+        // grpc-gateway 把 keeper 的 "chain not found" (code 31) 映射成 HTTP 500,
+        // 靠 body 里的 message 区分真 5xx
+        try {
+            const j = (await resp.json());
+            if ((j.message || '').includes('chain not found')) {
+                return { state: 'unregistered', detail: `entry ${chainName} not found in chainregistry (HTTP ${resp.status})` };
+            }
+        }
+        catch (e) { /* fall through */ }
+        return { state: lastState, detail: `mainchain LCD HTTP ${resp.status}, keep last state=${lastState}` };
+    }
+    let status = '';
+    try {
+        const j = (await resp.json());
+        status = (j.entry?.status || '').toLowerCase();
+    }
+    catch (e) {
+        return { state: lastState, detail: `bad registry response, keep last state=${lastState}` };
+    }
+    if (status === 'active' || status === 'deprecated' || status === 'frozen') {
+        return { state: status, detail: `entry ${chainName} status=${status}` };
+    }
+    return { state: 'unknown', detail: `entry ${chainName} has unrecognized status=${status || '(empty)'}` };
+}
+/** 该状态是否允许同步。 */
+/**
+ * 2026-09-15 kimi 宽限期修正 (拍板: 明天 xiaomu 验收演示不能断):
+ * unregistered (治理提案 7 天期, 注册流程走完前的窗口) → 允许同步 + 记 warn 降级提示,
+ * 被踢 (deprecated/frozen) 才硬停 + 商品降级。治理的本意是"踢出", 不是"卡住首次接入"。
+ * 注册完成 (9/22 tally 后) unregistered 状态自然消失。
+ */
+function isSyncAllowed(state) {
+    return state === 'active' || state === 'unregistered';
+}
+//# sourceMappingURL=registry.js.map

package/oracle/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/oracle/registry.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAYH,8CA0CC;AASD,sCAEC;AAtDD,iDAAiD;AAC1C,KAAK,UAAU,iBAAiB,CACrC,OAAkB,EAClB,OAAe,EACf,SAAiB,EACjB,SAAwB;IAExB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,8CAA8C,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IACvH,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mCAAmC;QACnC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA+B,CAAW,CAAC,OAAO,sBAAsB,SAAS,EAAE,EAAE,CAAC;IAC3H,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,SAAS,6BAA6B,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,oEAAoE;QACpE,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAyB,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,SAAS,qCAAqC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YAClH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,IAAI,CAAC,MAAM,qBAAqB,SAAS,EAAE,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoC,CAAC;QACjE,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,0CAA0C,SAAS,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,WAAW,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,SAAS,4BAA4B,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED,iBAAiB;AACjB;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,KAAoB;IAChD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,cAAc,CAAC;AACxD,CAAC"}