提示词改价24小时延迟，消除并发重复购买竞态

router_prompts.py

@@ -111,6 +111,21 @@ def _load_categories() -> dict:
     return categories
 
 
+def _apply_effective_price(prompt: dict) -> None:
+    """检查 pending_price 是否已过生效时间，若是则更新 price 字段供前端显示（与 router_items.py 同构）"""
+    pending_price = prompt.get("pending_price")
+    pending_effective = prompt.get("pending_price_effective_at")
+    if pending_price is not None and pending_effective:
+        try:
+            effective_time = datetime.datetime.fromisoformat(pending_effective)
+            if datetime.datetime.now() >= effective_time:
+                prompt["price"] = pending_price
+                prompt["pending_price"] = None
+                prompt["pending_price_effective_at"] = None
+        except (ValueError, TypeError):
+            pass
+
+
 def _user_owns_prompt(db_session: Session, account: str, prompt_id: str) -> bool:
     """检查用户是否已购买（未退款）该提示词"""
     if not account:
@@ -263,7 +278,13 @@ async def get_prompts(prompt_type: str = None, category: str = None,
 
     # 附加作者信息，并过滤敏感字段
     result = []
+    price_updated = False
     for prompt in paged_prompts:
+        # 💰 检查延迟价格是否已生效（与资源列表同构）
+        old_price = prompt.get("price", 0)
+        _apply_effective_price(prompt)
+        if prompt.get("price", 0) != old_price:
+            price_updated = True
         author_info = user_map.get(prompt.get("author"), {})
         prompt_data = {
             **prompt,
@@ -275,6 +296,9 @@ async def get_prompts(prompt_type: str = None, category: str = None,
         prompt_data.pop("viewed_by", None)
         result.append(prompt_data)
 
+    if price_updated:
+        db.save_data("prompts.json", prompts_db)
+
     return {
         "status": "success",
         "data": result,
@@ -296,11 +320,20 @@ async def get_my_prompts(current_user: str = Depends(require_auth)):
     my_prompts = sorted(my_prompts, key=lambda x: x.get("created_at", 0), reverse=True)
 
     result = []
+    price_updated = False
     for prompt in my_prompts:
+        # 💰 检查延迟价格是否已生效
+        old_price = prompt.get("price", 0)
+        _apply_effective_price(prompt)
+        if prompt.get("price", 0) != old_price:
+            price_updated = True
         prompt_data = dict(prompt)
         prompt_data.pop("viewed_by", None)
         result.append(prompt_data)
 
+    if price_updated:
+        db.save_data("prompts.json", prompts_db)
+
     return {"status": "success", "data": result}
 
 
@@ -317,6 +350,12 @@ async def get_prompt_detail(prompt_id: str, current_user: str = Depends(optional
 
     for prompt in prompts_db:
         if prompt["id"] == prompt_id:
+            # 💰 检查延迟价格是否已生效
+            old_price = prompt.get("price", 0)
+            _apply_effective_price(prompt)
+            if prompt.get("price", 0) != old_price:
+                db.save_data("prompts.json", prompts_db)
+
             author_info = user_map.get(prompt.get("author"), {})
             prompt_data = {
                 **prompt,
@@ -461,7 +500,17 @@ async def update_prompt(prompt_id: str, update_data: PromptUpdate, current_user:
                     if price < 0 or price > MAX_PRICE:
                         result_holder["error"] = "invalid_price"
                         return False
-                    prompt["price"] = price
+                    current_price = int(prompt.get("price", 0) or 0)
+                    if current_price != price:
+                        # 设置待生效价格，24小时后生效（与资源改价机制同构；提示词不支持退款，无需禁购配套）
+                        effective_time = datetime.datetime.now() + datetime.timedelta(hours=24)
+                        prompt["pending_price"] = price
+                        prompt["pending_price_effective_at"] = effective_time.isoformat()
+                        # 不立即修改 price，等待24小时后生效
+                    else:
+                        # 价格未变，清除待生效价格
+                        prompt["pending_price"] = None
+                        prompt["pending_price_effective_at"] = None
                 if update_data.media_type is not None:
                     if update_data.media_type not in ("image", "video"):
                         result_holder["error"] = "invalid_media_type"
@@ -813,6 +862,12 @@ async def purchase_prompt(request: Request, prompt_id: str,
     if not prompt:
         raise HTTPException(status_code=404, detail="提示词不存在")
 
+    # 💰 应用延迟生效价格（与 /api/wallet/purchase 同构），确保扣费价与前端显示价一致
+    old_price = prompt.get("price", 0)
+    _apply_effective_price(prompt)
+    if prompt.get("price", 0) != old_price:
+        db.save_data("prompts.json", prompts_db)
+
     price = int(prompt.get("price", 0) or 0)
     seller_account = prompt.get("author")
 
@@ -853,6 +908,21 @@ async def purchase_prompt(request: Request, prompt_id: str,
     # 🔒 P1并发安全：使用悲观锁+异常处理+事务回滚防止双花问题
     try:
         buyer_wallet = db_session.query(Wallet).filter(Wallet.account == current_user).with_for_update().first()
+
+        # 🔒 锁内二次检查：串行化后重查 Ownership，彻底消除并发重复购买竞态
+        owned_locked = db_session.query(Ownership).filter(
+            Ownership.account == current_user,
+            Ownership.item_id == prompt_id,
+            Ownership.is_refunded == False
+        ).first()
+        if owned_locked:
+            db_session.rollback()
+            return {
+                "status": "success",
+                "already_owned": True,
+                "prompt_text": prompt.get("prompt_text", "")
+            }
+
         if not buyer_wallet or buyer_wallet.balance < price:
             raise HTTPException(status_code=402, detail="余额不足，请先充值")
 

router_wallet.py

@@ -402,6 +402,22 @@ async def purchase_item(request: Request, req: PurchaseRequest, current_user: st
     # 🔒 P1并发安全：使用悲观锁+异常处理+事务回滚防止双花问题
     try:
         buyer_wallet = db.query(Wallet).filter(Wallet.account == req.account).with_for_update().first()
+
+        # 🔒 锁内二次检查：串行化后重查 Ownership，彻底消除并发重复购买竞态
+        owned_locked = db.query(Ownership).filter(
+            Ownership.account == req.account,
+            Ownership.item_id == req.item_id,
+            Ownership.is_refunded == False
+        ).first()
+        if owned_locked:
+            db.rollback()
+            return {
+                "status": "success",
+                "already_owned": True,
+                "netdisk_password": item.get("netdisk_password"),  # ☁️
+                "is_netdisk": item.get("is_netdisk", False)        # ☁️
+            }
+
         if not buyer_wallet or buyer_wallet.balance < price:
             raise HTTPException(status_code=402, detail="余额不足，请先充值")