@seasonkoh/webaz 0.1.13 → 0.1.14

package/dist/layer0-foundation/L0-2-state-machine/engine.js

@@ -49,7 +49,10 @@ export function transition(db, orderId, toStatus, actorId, evidenceIds = [], not
     if (rule.requiresEvidence && evidenceIds.length === 0) {
         return {
             success: false,
-            error: `此操作需要上传证据。提示：${rule.evidenceHint ?? '请上传相关证明文件'}`
+            error: `此操作需要证据。可任选一种方式提供:\n` +
+                `(A) 传 evidence_description(文字描述,如 "物流单号: SF1234567 / 顺丰" / "已揽收 GPS:31.2,121.5") — agent 最方便\n` +
+                `(B) 上传文件作为证据 — 提示:${rule.evidenceHint ?? '相关证明文件'}\n` +
+                `两种都会写入 evidence 表,效力等同。`
         };
     }
     // 5. 执行转移（数据库事务，保证原子性）
@@ -351,7 +354,7 @@ function getActiveDeadline(order, db) {
     // QA 轮 7 P1：旧表 picked_up 状态没 deadline → agent 不知道下一步多久前要做完
     // 修：picked_up 状态视为"已揽收，等运输/投递"，下一个 deadline 是 delivery_deadline
     // QA 轮 7 P1（另一条）：disputed 状态下没读 dispute_cases 的 arbitrate_deadline → agent 不知道仲裁还有多久
-    const deadlineMap = {
+    const deadlineMapMarket = {
         created: 'pay_deadline',
         paid: 'accept_deadline',
         accepted: 'ship_deadline',
@@ -360,6 +363,18 @@ function getActiveDeadline(order, db) {
         in_transit: 'delivery_deadline',
         delivered: 'confirm_deadline',
     };
+    // 2026-05-31 修：self-fulfill(logistics_id 空)无三方揽收环节,shipped/picked_up/in_transit
+    // 全部直接走 delivery_deadline,跟 CURRENT_RESPONSIBLE_SELF_FULFILL 对齐(都归 seller)。
+    // 之前 deadlineMap 单表导致 self-fulfill shipped 显示 pickup_deadline + responsible=seller,
+    // agent 看到矛盾不知道下一步(pickup 是物流的事,seller 又没物流可揽收)。
+    const deadlineMapSelfFulfill = {
+        ...deadlineMapMarket,
+        shipped: 'delivery_deadline',
+        picked_up: 'delivery_deadline',
+        in_transit: 'delivery_deadline',
+    };
+    const isSelfFulfill = !order.logistics_id;
+    const deadlineMap = isSelfFulfill ? deadlineMapSelfFulfill : deadlineMapMarket;
     // disputed 状态：从 `disputes` 表（active dispute, not the `dispute_cases` archive）查 deadline
     // 优先返 arbitrate_deadline（仲裁总截止）；如果还在 respond 窗口（被诉方未回应）返 respond_deadline
     if (order.status === 'disputed' && db) {

package/dist/layer1-agent/L1-1-mcp-server/server.js

@@ -214,9 +214,15 @@ Roles:
         name: 'webaz_search',
         description: `Search WebAZ marketplace + cross-platform anchor lookup. No auth required.
 
-USE THIS when the user:
-- gives KEYWORDS / filters (typical product discovery), OR
-- pastes ANY external product URL/share-text from Taobao / Tmall / JD / PDD / 1688 / Douyin / Xiaohongshu
+⚠️ **STRICT MATCH ONLY** — query 永远是精准匹配(等于 title / 等于 external_title / 包含 ≥6 字符 alias)。
+不做 fuzzy LIKE 模糊降级。短查询(如 "钱包" "iphone")很大概率 0 命中,这是设计如此,不是 bug。
+0 命中时,**不要**自己拼短词 retry,也**不要**调别的工具假装搜索;应**引导用户访问 https://webaz.xyz/#discover**
+在搜索框输入关键词浏览(那里有 fuzzy LIKE)。模糊搜索是用户主动行为,不是 agent 代办。
+
+USE THIS when:
+- 用户给出 **完整商品标题 / SKU / 精准描述**(典型 strict match,如 "AirPods Pro 2 USB-C 港行"), OR
+- 用户给出 **筛选条件**(category / max_price / min_return_days / max_handling_hours / sort), OR
+- 用户粘贴 ANY external product URL/share-text from Taobao / Tmall / JD / PDD / 1688 / Douyin / Xiaohongshu
   → WebAZ exact-matches against its anchor registry (canonical product fingerprints across
     platforms). matched_by='none' means truly not indexed — do NOT silently fall back to keyword,
     and do NOT guess similar products.
@@ -225,7 +231,8 @@ USE THIS when the user:
 NOT a separate browser-fetch capability. Returns structured specs + logistics + after-sales +
 agent_summary (one-line decision hint).
 
-【Keyword search】Pass query / category / max_price / min_return_days / max_handling_hours.
+【Keyword search — STRICT】Pass query / category / max_price / min_return_days / max_handling_hours.
+query 命中 = (1) 完全等于 product.title OR (2) 完全等于任一 external_title OR (3) 用户文本包含任一卖家声明 alias_value (≥6 字符)。模糊关键词请引导用户去 PWA #discover。
 
 【External-link paste search】When user pastes share text from Taobao/Tmall/JD/Pinduoduo/1688/Douyin/Xiaohongshu
 (e.g. '【淘宝】「Product Name」 https://e.tb.cn/xxx ...'), do:
@@ -1789,7 +1796,12 @@ async function handleSearch(args) {
     params.push(Math.min(limit * 3, 500)); // 取更多候选，便于 trending 排序
     const products = db.prepare(sql).all(...params);
     if (products.length === 0) {
-        return { found: 0, message: '没有找到匹配的商品', products: [] };
+        // query 模式 0 命中 = strict 精准匹配未命中。**不做 fuzzy fallback**(协议精准承诺)。
+        // 引导用户去 PWA 发现页做模糊搜索;agent 不应自己 LIKE 降级,那会污染精准 trust。
+        const hint = query
+            ? `精准匹配 0 命中(query='${String(query).slice(0, 40)}')。webaz_search 是协议精准接口,不做模糊降级。要做模糊搜索请引导用户访问 https://webaz.xyz/#discover ,在搜索框输入关键词浏览 — 这是用户主动操作,不是 agent 代办。`
+            : '没有找到匹配的商品';
+        return { found: 0, message: hint, products: [], matched_by: 'strict_no_match' };
     }
     const enriched = products.map((p) => {
         const boost = getSearchBoost(db, p.seller_id);

package/dist/pwa/public/app.js

@@ -420,6 +420,10 @@ async function apiWithStatus(method, path, body) {
   const opts = {
     method,
     headers: { 'Content-Type': 'application/json', ...(state.apiKey ? { Authorization: `Bearer ${state.apiKey}` } : {}) },
+    // 2026-05-31 修:boot 阶段 fetch 必须有 timeout,否则服务挂时 render 永远 await,
+    // skeleton "正在恢复登录..." 永不替换 = PWA 刷新卡死。10s 后强制 abort → catch → status=0 →
+    // 命中已有的"无法连接+重试"兜底 UI(render 530-548)。
+    signal: AbortSignal.timeout(10000),
   }
   if (body) opts.body = JSON.stringify(body)
   try {
@@ -427,7 +431,7 @@ async function apiWithStatus(method, path, body) {
     const json = await res.json().catch(() => ({}))
     return { status: res.status, body: json }
   } catch {
-    return { status: 0, body: { error: 'network' } }  // 0 = 网络不可达，保留 key 等下次
+    return { status: 0, body: { error: 'network' } }  // 0 = 网络不可达或超时,保留 key 等下次
   }
 }
 
@@ -10600,22 +10604,25 @@ async function initShareCtx() {
   }
 
   // Enrich：并发 fetch sponsor 公开卡 + target 预览（阻塞返回，确保 banner 渲染时数据齐）
+  // 2026-05-31 修:每个 fetch 加 AbortSignal.timeout(5000),防 boot 阶段任一 fetch hang
+  // 把 render 卡死在"正在恢复登录..."
+  const sig = () => ({ signal: AbortSignal.timeout(5000) })
   const fetches = []
   if (ctx.sponsor_id && !ctx.sponsor_name) {
-    fetches.push(fetch(`/api/users/${ctx.sponsor_id}/public-card`).then(r => r.json()).then(card => {
+    fetches.push(fetch(`/api/users/${ctx.sponsor_id}/public-card`, sig()).then(r => r.json()).then(card => {
       if (card?.name) writeShareCtx({ sponsor_name: card.name, sponsor_bio: card.bio, sponsor_joined_days_ago: card.joined_days_ago })
     }).catch(() => {}))
   }
   if (ctx.target_hash && !ctx.target_preview) {
     const m = ctx.target_hash.match(/^#order-product\/(.+)$/)
     if (m) {
-      fetches.push(fetch(`/api/products/${m[1]}/preview`).then(r => r.json()).then(p => {
+      fetches.push(fetch(`/api/products/${m[1]}/preview`, sig()).then(r => r.json()).then(p => {
         if (p?.id) writeShareCtx({ target_kind: 'product', target_preview: p })
       }).catch(() => {}))
     } else if (ctx.target_hash.startsWith('#u/')) {
       const uid = ctx.target_hash.slice(3)
       if (/^usr_[A-Za-z0-9_]+$/.test(uid)) {
-        fetches.push(fetch(`/api/users/${uid}/public-card`).then(r => r.json()).then(p => {
+        fetches.push(fetch(`/api/users/${uid}/public-card`, sig()).then(r => r.json()).then(p => {
           if (p?.id) writeShareCtx({ target_kind: 'user', target_preview: p })
         }).catch(() => {}))
       }

package/dist/pwa/public/sw.js

@@ -1,5 +1,5 @@
 // Service Worker — 网络优先，离线降级缓存；API 请求不缓存
-const CACHE = 'webaz-v480'
+const CACHE = 'webaz-v481'
 
 self.addEventListener('install', e => {
   self.skipWaiting()

package/dist/pwa/server.js

@@ -126,6 +126,8 @@ import { registerExternalAnchorsRoutes } from './routes/external-anchors.js';
 import { registerAnchorsRoutes } from './routes/anchors.js';
 // 仲裁员申请 (#1013 Phase 44) — 4 user + 3 admin endpoints
 import { registerArbitratorRoutes } from './routes/arbitrator.js';
+// 卖家配额 + 数据中心 (#1013 Phase 45) — 4 user + 3 admin
+import { registerSellerQuotaRoutes } from './routes/seller-quota.js';
 // 验证员用户侧 (#1013 Phase 46) — 5 endpoints
 import { registerVerifierUserRoutes } from './routes/verifier-user.js';
 // 公开用户主页 (#1013 Phase 47) — 6 endpoints
@@ -7257,6 +7259,13 @@ registerOrdersCreateRoutes(app, {
     signPassport: (message) => privateKeyToAccount(derivePrivKey('platform-hot-wallet')).signMessage({ message }),
     issuerAddress: () => privateKeyToAddress(derivePrivKey('platform-hot-wallet')),
 });
+// #1013 Phase 45: 卖家配额 + 数据中心 7 endpoints — 2026-05-31 修补:之前 import 了但忘了 register,
+// 导致 /api/seller/quota-status + /api/seller/insights 落入 SPA fallback 返回 HTML,前端 JSON.parse 死循环
+registerSellerQuotaRoutes(app, {
+    db, generateId, auth,
+    requireUsersAdmin: (req, res) => requireAdminPermission(req, res, 'users'),
+    safeRoles, checkSellerCanList, adminCanOperateOn, logAdminAction, QUOTA_TIERS,
+});
 // #1013 Phase 86: 5 disputes 读端点已迁出
 registerDisputesReadRoutes(app, {
     db, auth, errorRes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools.",
   "main": "dist/mcp.js",
   "bin": {