Markets

server/testnet/http.ts

@@ -14,12 +14,18 @@ import { PeerNetwork } from './peers.ts';
 import { wikipediaEnrichment } from '../enrichment.ts';
 import { snapshotStats } from '../../shared/enrichment.ts';
 import { wikipediaArticles } from '../wiki.ts';
+import { Market, marketConfig } from '../market/store.ts';
+import { marketCommandSchema } from '../../shared/market.ts';
+import { IS_MAINNET, PROFILE } from '../../shared/network.ts';
+import { assertLaunchAllowed, launchManifest } from '../launch.ts';
 
 const root = fileURLToPath(new URL('../../', import.meta.url));
+assertLaunchAllowed();
+const paymentConfig = marketConfig(); // Fail before opening node resources if live payments are requested.
 const dataDir = process.env.WIKIDECK_DATA_DIR ?? resolve(root,'data');
 await mkdir(dataDir,{recursive:true});
 // Never permit two processes to rewrite the same ledger. A stale lock requires operator review.
-const lockPath = resolve(dataDir,'testnet-node.lock');
+const lockPath = resolve(dataDir,`${PROFILE}-node.lock`);
 const lock = await open(lockPath,'wx',0o600).catch(()=>{throw new Error('Data directory locked. Stop its other node; remove stale testnet-node.lock only after verifying no node is running.');});
 await lock.writeFile(String(process.pid));
 let engine: RandomX;
@@ -32,6 +38,9 @@ let peers: PeerNetwork;
 try { peers = new PeerNetwork({ ledger, urls:(process.env.WIKIDECK_PEERS ?? '').split(',').map(s=>s.trim()).filter(Boolean),
   allowPrivate:process.env.WIKIDECK_ALLOW_PRIVATE_PEERS === '1' }); }
 catch(e) {ledger.close();engine.close();await lock.close();await unlink(lockPath);throw e;}
+let market: Market;
+try { market = await Market.open(dataDir, ledger, paymentConfig); }
+catch(e) {peers.close();ledger.close();engine.close();await lock.close();await unlink(lockPath);throw e;}
 const app = express();
 app.disable('x-powered-by');
 app.use(helmet({contentSecurityPolicy:{directives:{defaultSrc:["'self'"],scriptSrc:["'self'"],
@@ -52,8 +61,22 @@ app.use(['/api','/p2p'],(req,res,next)=>{
   next();
 });
 app.get('/api/state',(_req,res)=>res.json(ledger.snapshot()));
+app.get('/api/network',(_req,res)=>res.json(launchManifest()));
 app.get('/api/chain',(_req,res)=>res.json(ledger.snapshot()));
 app.get('/api/peers',(_req,res)=>res.json({peers:peers.status()}));
+app.get('/api/market', (req,res)=>res.json(market.browse(Number(req.query.offset ?? 0))));
+app.post('/api/market/command',rateLimit({windowMs:60000,limit:60,standardHeaders:'draft-8',legacyHeaders:false}),async(req,res)=>{
+  const command = marketCommandSchema.parse(req.body);
+  try {
+    const result = await market.execute(command);
+    res.json(result);
+    if(command.action.type==='deliver')void peers.broadcastTransfer(command.action.transfer).catch(()=>{});
+  } catch(error) {
+    // Marketplace storage/payment internals must never leak through the generic node error handler.
+    if(error instanceof Error && !/SQLITE|constraint|database/i.test(error.message))res.status(400).json({error:error.message.slice(0,200)});
+    else res.status(409).json({error:'Marketplace state conflict. Refresh and retry.'});
+  }
+});
 app.get('/api/decks/:address', rateLimit({windowMs:60000,limit:60,standardHeaders:'draft-8',legacyHeaders:false}), (req,res)=>{
   if(typeof req.params.address!=='string'||!/^[a-f0-9]{64}$/.test(req.params.address)){
     res.status(400).json({error:'Invalid wallet address'});return;
@@ -135,13 +158,16 @@ app.use((err:Error & {status?:number},_req:express.Request,res:express.Response,
 });
 const port=Number(process.env.PORT??3001),host=process.env.HOST??'127.0.0.1';
 const server=app.listen(port,host,()=>{
-  const a=server.address();console.log(`Wikideck RandomX testnet: http://${host}:${typeof a==='object'&&a?a.port:port} · chain ${CHAIN_ID} · ${ledger.snapshot().blocks.length} blocks`);
+  const a=server.address();console.log(`Wikideck RandomX ${IS_MAINNET?'mainnet candidate':'testnet'}: http://${host}:${typeof a==='object'&&a?a.port:port} · chain ${CHAIN_ID} · ${ledger.snapshot().blocks.length} blocks`);
   peers.start();
 });
+// Advance simulated payout/expiry state even when no browser is open. No real funds are sent.
+const marketTimer=setInterval(()=>{try {market.browse();}catch{console.error('Marketplace reconciliation failed; operator review required.');}},15000);
+marketTimer.unref();
 let stopping=false;
 for(const signal of ['SIGTERM','SIGINT']as const)process.once(signal,()=>{
-  if(stopping)return;stopping=true;peers.close();
+  if(stopping)return;stopping=true;peers.close();clearInterval(marketTimer);
   const timeout=setTimeout(()=>process.exit(1),25000);timeout.unref();
-  server.close(async()=>{ledger.close();engine.close();await lock.close();await unlink(lockPath).catch(()=>{});clearTimeout(timeout);process.exit(0);});
+  server.close(async()=>{market.close();ledger.close();engine.close();await lock.close();await unlink(lockPath).catch(()=>{});clearTimeout(timeout);process.exit(0);});
 });
-server.on('error',async()=>{peers.close();ledger.close();engine.close();await lock.close();await unlink(lockPath).catch(()=>{});process.exit(1);});
+server.on('error',async()=>{clearInterval(marketTimer);peers.close();market.close();ledger.close();engine.close();await lock.close();await unlink(lockPath).catch(()=>{});process.exit(1);});