@seasonkoh/webaz 0.1.22 → 0.1.24

package/dist/layer1-agent/L1-1-mcp-server/server.js

@@ -43,10 +43,16 @@ const TELEMETRY_ENABLED = (process.env.WEBAZ_TELEMETRY ?? 'off').toLowerCase() =
 const WEBAZ_API_URL = (process.env.WEBAZ_API_URL ?? 'https://webaz.xyz').replace(/\/+$/, '');
 const WEBAZ_API_KEY = process.env.WEBAZ_API_KEY ?? '';
 const WEBAZ_MODE_ENV = (process.env.WEBAZ_MODE ?? '').toLowerCase();
-// 模式:显式 WEBAZ_MODE 优先;否则有 api_key → network,无 → sandbox
+// 模式:显式 WEBAZ_MODE 优先;否则有 api_key → network,无 key → network_readonly(装完即见真网络)。
+// network_readonly(L1 onboarding,2026-06-08):无 key 默认。公共读匿名打 webaz.xyz(真 catalog/协议),
+//   需身份的写/读返回"设 WEBAZ_API_KEY(到 #welcome 申请邀请)"。离线本地 playground 改为【显式】 WEBAZ_MODE=sandbox。
+//   —— 治"装完=空沙盒劝退"的死首体验;route/guard 与 network 同路(见 isNetworkMode),只是无 Bearer + 文案不同。
 const MODE = WEBAZ_MODE_ENV === 'network' ? 'network'
     : WEBAZ_MODE_ENV === 'sandbox' ? 'sandbox'
-        : (WEBAZ_API_KEY ? 'network' : 'sandbox');
+        : WEBAZ_MODE_ENV === 'network_readonly' ? 'network_readonly'
+            : (WEBAZ_API_KEY ? 'network' : 'network_readonly');
+// network 或 network_readonly 都"走真网络"(后者无 Bearer)。sandbox 才是本地。
+const isNetworkMode = () => MODE === 'network' || MODE === 'network_readonly';
 // 已迁移到 NETWORK 的工具名。P1/P2 逐个加入;未在集合里的工具仍走 sandbox(本地)。
 // P1(读工具): 纯公开读,无写无 Passkey,作"MCP 连得上生产网络"的首验证。
 const NETWORK_TOOLS = new Set([
@@ -60,6 +66,42 @@ const NETWORK_TOOLS = new Set([
     'webaz_get_status',
     'webaz_feedback',
     'webaz_contribute',
+    // Batch 1(只读 + 低危自身写):走 webaz.xyz Bearer api_key。
+    'webaz_notifications',
+    'webaz_nearby',
+    'webaz_profile',
+    'webaz_shareables',
+    'webaz_mykey',
+    // Batch 2(低危写,无钱无 escrow):走 webaz.xyz Bearer api_key。
+    // 注:share_link 暂不迁(无对应服务端端点,需新建,留待后续)。
+    'webaz_follows',
+    'webaz_like',
+    'webaz_blocklist',
+    'webaz_default_address',
+    'webaz_chat',
+    'webaz_rfq',
+    'webaz_referral',
+    // Batch 3(商务):secondhand/skill_market/auction 纯 pwaApi(mode-aware 自动走网络);
+    // skill 直连本地引擎,加了显式 apiCall network 分支。
+    'webaz_secondhand',
+    'webaz_skill',
+    'webaz_skill_market',
+    'webaz_auction',
+    // Batch 4(资金/质押,守恒由服务端 RFC-014 保证;wallet 只读,写=Passkey 仅 PWA):
+    'webaz_wallet',
+    'webaz_trial',
+    'webaz_charity',
+    'webaz_bid',
+    'webaz_auto_bid',
+    // Batch 5(铁律/敏感):claim_verify 纯 pwaApi(真人门由服务端 require_human_presence 强制);
+    // dispute view/list_open/respond/add_evidence 走网络,arbitrate 仅返回 Passkey 指引;
+    // rotate_key/revoke_key 仅返回 Passkey 指引(不本地校验)。
+    'webaz_dispute',
+    'webaz_claim_verify',
+    'webaz_rotate_key',
+    'webaz_revoke_key',
+    // #1122:share_link 现有服务端端点 /api/share-link,可走网络。
+    'webaz_share_link',
 ]);
 const recentCalls = [];
 function pushRecentCall(c) {
@@ -67,9 +109,28 @@ function pushRecentCall(c) {
     if (recentCalls.length > 8)
         recentCalls.shift(); // 只留最近 8 条
 }
-// 单个工具实际后端:仅当全局 network 且该工具已迁移,才走网络;否则 sandbox。
+// 单个工具实际后端:network 或 network_readonly 下、且该工具已迁移,才走网络;否则 sandbox。
+// readonly 无 Bearer:公共读拿真数据,需身份的端点服务端返 401(诚实)→ 不会静默落本地。
 function toolBackend(tool) {
-    return (MODE === 'network' && NETWORK_TOOLS.has(tool)) ? 'network' : 'sandbox';
+    return (isNetworkMode() && NETWORK_TOOLS.has(tool)) ? 'network' : 'sandbox';
+}
+// 未在 NETWORK_TOOLS 名单、但 NETWORK 模式下仍可本地运行的"自省/引导"工具(非数据操作)。
+// info = 本地自省(并拉 live 网络状态);register = 引导真人去 webaz.xyz。其余未迁工具一律硬失败。
+const NETWORK_SELF_AWARE = new Set(['webaz_info', 'webaz_register']);
+// RFC-003 Batch 0 安全网:NETWORK 模式下调用【未迁移】工具时的诚实拒绝(而非静默落本地沙盒)。
+// 否则带 key 的用户调未迁工具会被悄悄喂本地结果——写操作=幻影操作(根本没到 webaz.xyz)。
+function networkMigrationPending(tool) {
+    const short = tool.replace(/^webaz_/, '');
+    return {
+        _mode: 'network',
+        not_on_network_yet: true,
+        error: `${tool} 尚未接入 webaz.xyz 共享网络(迁移进行中)。NETWORK 模式下拒绝把它落到本机沙盒——本地结果不会到达 webaz.xyz,写操作会变成"幻影操作"。 / ${tool} is not on the live network yet (migration in progress); refusing to run it against your local sandbox while in NETWORK mode — a local result would NOT reach webaz.xyz.`,
+        what_to_do: [
+            `现在就用网页完成此动作:${WEBAZ_API_URL}(PWA) / Use the web app for this action now.`,
+            `只想本地试玩/测试?设环境变量 WEBAZ_MODE=sandbox 显式进沙盒。 / Set WEBAZ_MODE=sandbox to use the local sandbox explicitly.`,
+        ],
+        migration: `RFC-003 渐进迁移:webaz_${short} 将在后续批次获得网络支持。 / incremental migration; network support for this tool lands in an upcoming batch.`,
+    };
 }
 // 统一 API helper(P1/P2 迁移工具时使用)。Bearer api_key + 15s 超时 + 错误映射。
 async function apiCall(path, opts = {}) {
@@ -112,11 +173,14 @@ async function apiCall(path, opts = {}) {
 // 启动 banner(stderr)+ status 声明用 —— 让用户/agent 一眼知道现在是真网络还是沙盒
 function modeBanner() {
     if (MODE === 'network') {
-        return `🟢 NETWORK mode — webaz.xyz (${WEBAZ_API_URL}). Migrated tools: ${NETWORK_TOOLS.size}/${TOOLS.length}`
-            + (NETWORK_TOOLS.size === 0 ? ' ⚠️ network client not active yet (P0 scaffold) — all tools still SANDBOX/local.' : '');
+        return `🟢 NETWORK mode — webaz.xyz (${WEBAZ_API_URL}), authenticated. Migrated tools: ${NETWORK_TOOLS.size}/${TOOLS.length}`;
+    }
+    if (MODE === 'network_readonly') {
+        return `🟢 NETWORK (read-only) — no api_key: public reads (search / leaderboard / price history / browse) hit the LIVE webaz.xyz network. `
+            + `To transact (register/order/list/etc.), set WEBAZ_API_KEY — request an invite at ${WEBAZ_API_URL}/#welcome.`;
     }
-    return `🟡 SANDBOX mode — local-only (~/.webaz/webaz.db), NOT the live network. Data is private to this machine.`
-        + (WEBAZ_API_KEY ? '' : ' Set WEBAZ_API_KEY (register at webaz.xyz) to join the network.');
+    return `🟡 SANDBOX mode — local-only (~/.webaz/webaz.db), NOT the live network. Data is private to this machine. `
+        + `(Explicit dev/demo mode; unset WEBAZ_MODE to use the live network read-only by default.)`;
 }
 // ─── 初始化 ──────────────────────────────────────────────────
 const db = initDatabase();
@@ -1475,8 +1539,24 @@ async function handleContribute(args) {
     const q = args.area ? '?status=open&area=' + encodeURIComponent(String(args.area)) : '?status=open';
     return apiCall('/api/build-tasks' + q, { apiKey });
 }
-function handleInfo() {
+async function handleInfo() {
     const summary = getManifestSummary();
+    // RFC-003 Batch 0:NETWORK 模式下,best-effort 拉 webaz.xyz 的 live 协议状态,
+    // 让带 key 的 agent 拿到【真网络】数字,而非只看本机本地 live_stats(下方仍保留并标注为本地)。
+    let network_live = null;
+    if (isNetworkMode()) {
+        try {
+            const ps = await apiCall('/api/protocol-status');
+            network_live = { source: `${WEBAZ_API_URL}/api/protocol-status (live, fetched this call)`, ...ps };
+        }
+        catch (e) {
+            network_live = {
+                source: `${WEBAZ_API_URL}/api/protocol-status`,
+                error: `couldn't reach live network this call: ${e.message}`,
+                note: 'live_stats below is LOCAL-only (this MCP server\'s SQLite), not protocol-wide.',
+            };
+        }
+    }
     // QA 轮 3 抓到：live_stats 不是 hardcoded、不是 remote — 就是本地 SQLite count。这里加 source 字段澄清。
     const stats = (() => {
         try {
@@ -1517,11 +1597,13 @@ function handleInfo() {
         // 佣金按【功能】中性描述(commission_model),不做"自证不是X"的辩护——正常机制无需自证。
         network_state: {
             // RFC-003 P3：显式声明当前客户端模式，让 agent 一眼分清"真网络 vs 本机沙盒"
-            mode: MODE, // 'network' | 'sandbox'
+            mode: MODE, // 'network' | 'network_readonly' | 'sandbox'
             mode_banner: modeBanner(),
             mode_meaning: MODE === 'network'
-                ? '🟢 NETWORK：核心交易工具（下单/上架/履约/比价等）走 webaz.xyz 共享生产网络。注意：本 webaz_info 工具尚未联网，下方 live_stats 仍读本机本地缓存，不代表全网规模。'
-                : '🟡 SANDBOX：所有工具都在本机本地 SQLite 运行，与 webaz.xyz 全网隔离。任何计数 / 账号 / 订单仅本机有效，不是真实网络状态。设 WEBAZ_API_KEY 可切到 NETWORK。',
+                ? '🟢 NETWORK：核心交易工具（下单/上架/履约/比价等）走 webaz.xyz 共享生产网络。真网络规模见下方 network_live（本次实时拉取）；live_stats 仍是本机本地缓存，仅供参考。'
+                : MODE === 'network_readonly'
+                    ? '🟢 NETWORK（只读）：无 api_key。公共读（搜索/榜单/价格史/浏览）打 webaz.xyz 真网络（见 network_live）。要交易（注册/下单/上架等）请设 WEBAZ_API_KEY —— 到 ' + WEBAZ_API_URL + '/#welcome 申请邀请。'
+                    : '🟡 SANDBOX：所有工具都在本机本地 SQLite 运行，与 webaz.xyz 全网隔离（显式 dev/demo 模式）。任何计数 / 账号 / 订单仅本机有效。不设 WEBAZ_MODE 则默认走真网络只读。',
             phase: 'pre_launch',
             real_users_on_canonical: 0,
             canonical_endpoint: 'https://webaz.xyz',
@@ -1541,6 +1623,7 @@ function handleInfo() {
             ],
             honesty: 'Pre-launch: WAZ is a simulated test currency, no real money settles yet. Don\'t treat balances as real value. / 尚未上线:WAZ 是模拟测试币,暂无真实资金结算,余额勿当真实价值。',
             try_it: 'Browse without an account at https://webaz.xyz/#discover ; the protocol state is public at https://webaz.xyz/.well-known/webaz-protocol.json',
+            get_access: 'Pre-launch is invite-gated — request an invite at https://webaz.xyz/#welcome (browsing/reading needs no invite). / 上线前邀请制:到 #welcome 申请邀请,浏览/查看无需邀请。',
         },
         // 连接两个场景:用协议(本工具) ↔ 改协议(开发协作)。想改 WebAZ 本身的 agent 从这里进。
         for_contributors: {
@@ -1549,6 +1632,8 @@ function handleInfo() {
             start_here: 'AGENTS.md (project map + before-you-code + PR flow) → CONTRIBUTING.md (full guide)',
             ai_accountability: 'AI-authored PRs: add 🤖🤖🤖 to the PR title; the agent must be triggered by a Passkey-bound human (webazer) who is accountable. / AI 提 PR:标题加 🤖🤖🤖,且须由已绑 Passkey 的真人(webazer)触发并担责。',
         },
+        // NETWORK 模式:真网络 live 状态(best-effort 拉自 webaz.xyz);SANDBOX 模式为 null。
+        network_live,
         live_stats: stats,
         economics,
         // 佣金机制 —— 纯功能性描述(怎么运作),不做"自证清白"式辩护。
@@ -1601,10 +1686,10 @@ function handleInfo() {
 function handleRegister(args) {
     // ─── RFC-003 P3：NETWORK 模式不自助建号 ────────────────────────
     // 自助注册会绕过邀请码 / captcha / 责任制；且 CHARTER §4 I-5 要求账号必须由已绑 Passkey
-    // 的真人创建（"每个 agent 背后有可问责的真人"）。NETWORK 模式下改为引导真人去 webaz.xyz 拿 key。
-    if (MODE === 'network') {
+    // 的真人创建（"每个 agent 背后有可问责的真人"）。NETWORK / 无 key 只读模式下都引导真人去 webaz.xyz 拿 key。
+    if (isNetworkMode()) {
         return {
-            _mode: 'network',
+            _mode: MODE,
             registration: 'must_be_done_by_human_at_webaz_xyz',
             message: '🟢 NETWORK 模式下不支持 agent 自助注册。开放协议的信任来自"每个 agent 背后有可问责的真人"，所以注册这一步刻意留给真人在 webaz.xyz 完成。请按三步加入共享网络：',
             steps: [
@@ -2532,6 +2617,19 @@ async function handleWallet(args) {
     const apiKey = args.api_key;
     if (!apiKey)
         return { error: 'api_key required' };
+    // RFC-003 Batch 4:NETWORK 模式 → webaz.xyz 真网络【只读】(Bearer api_key)。
+    // 写动作(withdraw/topup/whitelist/connect)是 Passkey+OTP 多步流,MCP 不暴露,仅 PWA。
+    if (toolBackend('webaz_wallet') === 'network') {
+        if (action === 'view')
+            return await apiCall('/api/wallet', { apiKey });
+        if (action === 'deposits')
+            return await apiCall('/api/wallet/deposits', { apiKey });
+        if (action === 'withdrawals')
+            return await apiCall('/api/wallet/withdrawals', { apiKey });
+        if (action === 'income')
+            return await apiCall('/api/wallet/income', { apiKey });
+        return { error: `unknown action: ${action}. Valid: view | deposits | withdrawals | income. 提现/充值/白名单需 Passkey+OTP,仅 PWA Web 端。` };
+    }
     if (action === 'deposits')
         return await pwaApi('GET', '/wallet/deposits', apiKey);
     if (action === 'withdrawals')
@@ -2581,7 +2679,16 @@ async function handleWallet(args) {
     };
 }
 // ─── 通知处理 ─────────────────────────────────────────────────
-function handleNotifications(args) {
+async function handleNotifications(args) {
+    // RFC-003 Batch 1:NETWORK 模式 → 调 webaz.xyz 真网络通知端点(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_notifications') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        if (args.mark_read)
+            await apiCall('/api/notifications/read', { method: 'POST', apiKey });
+        return await apiCall('/api/notifications' + (args.unread === true ? '?unread=1' : ''), { apiKey });
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -2609,11 +2716,69 @@ async function handleDispute(args) {
     const apiKey = args.api_key;
     if (!apiKey)
         return { error: 'api_key required' };
+    const action = args.action;
+    // ── 仲裁裁定（Iron-Rule）──────────────────────────────────────
+    // 两种模式都只登记意图 + 返回 PWA+Passkey 指引;不执行、不碰 db。放在 auth 之前。
+    if (action === 'arbitrate') {
+        if (!args.dispute_id)
+            return { error: '请提供 dispute_id' };
+        if (!args.ruling)
+            return { error: '请提供 ruling（refund_buyer / release_seller / partial_refund / liability_split）' };
+        if (!args.ruling_reason)
+            return { error: '请提供 ruling_reason（裁定理由将永久记录）' };
+        if (args.ruling === 'partial_refund' && !args.refund_amount && !args.liable_party) {
+            return { error: 'partial_refund 需要提供 refund_amount，或 liable_party（第三方责任方）' };
+        }
+        if (args.ruling === 'liability_split' && (!Array.isArray(args.liability_parties) || args.liability_parties.length === 0)) {
+            return { error: 'liability_split 需要提供 liability_parties 数组，每项 { user_id, amount }' };
+        }
+        return {
+            success: false,
+            requires_human_action: true,
+            iron_rule: 'Arbitration ruling is irreversible, affects multiple parties, and locks fund distribution permanently. Agent cannot execute unilaterally. Same Iron-Rule gating as webaz_revoke_key / claim_verify vote.',
+            action: 'arbitrate_dispute',
+            dispute_id: args.dispute_id,
+            proposed_ruling: {
+                ruling: args.ruling,
+                reason: args.ruling_reason,
+                ...(args.refund_amount !== undefined ? { refund_amount: args.refund_amount } : {}),
+                ...(args.liable_party ? { liable_party: args.liable_party } : {}),
+                ...(args.liability_parties ? { liability_parties: args.liability_parties } : {}),
+            },
+            next_step: {
+                via: 'PWA + Passkey (arbitrator role)',
+                url: `https://webaz.xyz/arbitrate?dispute=${encodeURIComponent(args.dispute_id)}`,
+                instructions: '1) Open URL in browser  2) Sign in as arbitrator  3) Review evidence  4) Confirm with Passkey  5) Submit final ruling. Action is irreversible after confirmation.',
+            },
+        };
+    }
+    // RFC-003 Batch 5:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_dispute') === 'network') {
+        if (action === 'view') {
+            if (!args.dispute_id)
+                return { error: '网络模式请提供 dispute_id（order_id 查询仅 PWA 支持）。 / provide dispute_id on the live network.' };
+            return await apiCall('/api/disputes/' + encodeURIComponent(String(args.dispute_id)), { apiKey });
+        }
+        if (action === 'list_open')
+            return await apiCall('/api/disputes', { apiKey });
+        if (action === 'respond') {
+            if (!args.dispute_id)
+                return { error: '请提供 dispute_id' };
+            return await apiCall('/api/disputes/' + encodeURIComponent(String(args.dispute_id)) + '/respond', { method: 'POST', apiKey, body: { notes: args.notes ?? '', evidence_description: args.evidence_description ?? '' } });
+        }
+        if (action === 'add_evidence') {
+            if (!args.dispute_id)
+                return { error: '请提供 dispute_id' };
+            if (!args.evidence_description)
+                return { error: '请提供 evidence_description（证据描述）' };
+            return await apiCall('/api/disputes/' + encodeURIComponent(String(args.dispute_id)) + '/add-evidence', { method: 'POST', apiKey, body: { description: args.evidence_description, evidence_type: 'text' } });
+        }
+        return { error: `未知 action：${action}。Valid: view | list_open | respond | add_evidence | arbitrate` };
+    }
     const auth = requireAuth(db, apiKey);
     if ('error' in auth)
         return auth;
     const { user } = auth;
-    const action = args.action;
     // ── 查看争议详情 ────────────────────────────────────────────
     if (action === 'view') {
         let dispute = args.dispute_id
@@ -2707,43 +2872,6 @@ async function handleDispute(args) {
             evidence_type: 'text',
         });
     }
-    // ── 仲裁员裁定（Iron-Rule：MCP 仅登记意图，真正裁定需 PWA + Passkey 二次确认）─
-    // QA 轮 7 P1 修复：旧版直接调 PWA HTTP /api/disputes/:id/arbitrate，
-    //   1) 违反 Iron-Rule 模型（应该跟 revoke_key/rotate_key 同模式 — agent 不能单方面执行不可逆操作）
-    //   2) 本地 dev 没起 PWA 就挂
-    if (action === 'arbitrate') {
-        if (!args.dispute_id)
-            return { error: '请提供 dispute_id' };
-        if (!args.ruling)
-            return { error: '请提供 ruling（refund_buyer / release_seller / partial_refund / liability_split）' };
-        if (!args.ruling_reason)
-            return { error: '请提供 ruling_reason（裁定理由将永久记录）' };
-        if (args.ruling === 'partial_refund' && !args.refund_amount && !args.liable_party) {
-            return { error: 'partial_refund 需要提供 refund_amount，或 liable_party（第三方责任方）' };
-        }
-        if (args.ruling === 'liability_split' && (!Array.isArray(args.liability_parties) || args.liability_parties.length === 0)) {
-            return { error: 'liability_split 需要提供 liability_parties 数组，每项 { user_id, amount }' };
-        }
-        return {
-            success: false,
-            requires_human_action: true,
-            iron_rule: 'Arbitration ruling is irreversible, affects multiple parties, and locks fund distribution permanently. Agent cannot execute unilaterally. Same Iron-Rule gating as webaz_revoke_key / claim_verify vote.',
-            action: 'arbitrate_dispute',
-            dispute_id: args.dispute_id,
-            proposed_ruling: {
-                ruling: args.ruling,
-                reason: args.ruling_reason,
-                ...(args.refund_amount !== undefined ? { refund_amount: args.refund_amount } : {}),
-                ...(args.liable_party ? { liable_party: args.liable_party } : {}),
-                ...(args.liability_parties ? { liability_parties: args.liability_parties } : {}),
-            },
-            next_step: {
-                via: 'PWA + Passkey (arbitrator role)',
-                url: `https://webaz.xyz/arbitrate?dispute=${encodeURIComponent(args.dispute_id)}`,
-                instructions: '1) Open URL in browser  2) Sign in as arbitrator  3) Review evidence  4) Confirm with Passkey  5) Submit final ruling. Action is irreversible after confirmation.',
-            },
-        };
-    }
     return { error: `未知 action：${action}。Valid: view | list_open | respond | add_evidence | arbitrate` };
 }
 // ─── 索赔验证（claim-verification）处理 — Wave 6 新增 ────────────
@@ -2832,8 +2960,44 @@ async function handleClaimVerify(args) {
     return { error: `未知 action：${action}。Valid: create | view | mine | submit_seller_evidence | available | vote | eligibility | verifier_status | apply | withdraw_application | appeal` };
 }
 // ─── Skill 市场处理 ────────────────────────────────────────────
-function handleSkill(args) {
+async function handleSkill(args) {
     const action = args.action;
+    // RFC-003 Batch 3:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地引擎。
+    if (toolBackend('webaz_skill') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (action === 'list') {
+            const qs = new URLSearchParams();
+            if (args.skill_type)
+                qs.set('skill_type', String(args.skill_type));
+            if (args.query)
+                qs.set('q', String(args.query));
+            const q = qs.toString();
+            return await apiCall('/api/skills' + (q ? '?' + q : ''), { apiKey });
+        }
+        if (!apiKey)
+            return { error: 'api_key required' };
+        if (action === 'publish') {
+            return await apiCall('/api/skills', { method: 'POST', apiKey, body: {
+                    name: args.name, description: args.description, category: args.category,
+                    skill_type: args.skill_type, config: args.config,
+                } });
+        }
+        if (action === 'subscribe') {
+            if (!args.skill_id)
+                return { error: '请提供 skill_id' };
+            return await apiCall('/api/skills/' + encodeURIComponent(String(args.skill_id)) + '/subscribe', { method: 'POST', apiKey, body: { config: args.config } });
+        }
+        if (action === 'unsubscribe') {
+            if (!args.skill_id)
+                return { error: '请提供 skill_id' };
+            return await apiCall('/api/skills/' + encodeURIComponent(String(args.skill_id)) + '/subscribe', { method: 'DELETE', apiKey });
+        }
+        if (action === 'my_skills')
+            return await apiCall('/api/skills/mine', { apiKey });
+        if (action === 'my_subs')
+            return await apiCall('/api/skills/subscriptions', { apiKey });
+        return { error: `未知 action：${action}。可选：list, publish, subscribe, unsubscribe, my_skills, my_subs` };
+    }
     // ── 浏览 Skill 市场 ────────────────────────────────────────
     if (action === 'list') {
         let userId;
@@ -2929,6 +3093,21 @@ function redactKey(key) {
     return `${key.slice(0, 8)}***${key.slice(-4)}`;
 }
 function handleMyKey(args) {
+    // RFC-003 Batch 1:NETWORK 模式下,账号找回是 Passkey 门控(Iron-Rule)——handle+permanent_code
+    // 查询不作为网络端点暴露(防枚举)。诚实引导到 PWA 的 Passkey 找回流,不在本地假装查到。
+    if (toolBackend('webaz_mykey') === 'network') {
+        return {
+            _mode: 'network',
+            found: null,
+            message: 'On the live network, account recovery is Passkey-gated for security (Iron-Rule). handle + permanent_code lookup is not exposed as a network endpoint (anti-enumeration).',
+            recover: {
+                via: 'PWA + Passkey',
+                start_url: `${WEBAZ_API_URL}/recover`,
+                note: 'Open in a browser and verify with your Passkey to recover or rotate your api_key.',
+            },
+            rotate_hint: 'Already have your api_key but want to replace it? Use webaz_rotate_key.',
+        };
+    }
     const handle = args.handle?.trim();
     const permaCode = args.permanent_code?.trim()?.toUpperCase();
     if (!handle || !permaCode) {
@@ -2982,6 +3161,33 @@ function handleMyKey(args) {
 async function handleProfile(args) {
     const action = args.action;
     const apiKey = String(args.api_key || '');
+    // RFC-003 Batch 1:NETWORK 模式 → 全部 action 调 webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_profile') === 'network') {
+        if (action === 'view_user') {
+            if (!args.user_id)
+                return { error: 'user_id required' };
+            return await apiCall('/api/users/' + encodeURIComponent(String(args.user_id)), { apiKey });
+        }
+        if (action === 'feed') {
+            if (!args.user_id || !args.feed)
+                return { error: 'user_id + feed required' };
+            const FEED_PATH = {
+                secondhand: 'secondhand', auctions: 'auctions', reviews: 'reviews', products: 'products',
+                shares: 'shareables', reputation: 'reputation', pv: 'pv-summary', liked: 'liked-shareables',
+            };
+            const seg = FEED_PATH[String(args.feed)];
+            if (!seg)
+                return { error: `unknown feed: ${args.feed}. options: ${Object.keys(FEED_PATH).join(', ')}` };
+            return await apiCall('/api/users/' + encodeURIComponent(String(args.user_id)) + '/' + seg, { apiKey });
+        }
+        if (action === 'view')
+            return await apiCall('/api/me', { apiKey });
+        if (action === 'add_role')
+            return await apiCall('/api/profile/add-role', { method: 'POST', apiKey, body: { role: args.role } });
+        if (action === 'switch_role')
+            return await apiCall('/api/profile/switch-role', { method: 'POST', apiKey, body: { role: args.role } });
+        return { error: `Unknown action: ${action}. Options: view, add_role, switch_role, view_user, feed` };
+    }
     // 看他人公开主页 / 内容流
     if (action === 'view_user') {
         if (!args.user_id)
@@ -3049,6 +3255,26 @@ async function handleProfile(args) {
 // 这里给 agent 两个"声明意图"工具：MCP 验 api_key 合法 → 返回 PWA URL 让用户 Passkey 二次确认。
 // 真正改 DB 的动作放 PWA endpoint，跟 claim_verify / arbitrate 同模型。
 function handleRevokeKey(args) {
+    // RFC-003 Batch 5:NETWORK 模式 → 不本地校验 key(PWA 会鉴权),直接返回 Passkey 撤销指引。
+    if (toolBackend('webaz_revoke_key') === 'network') {
+        const apiKey = String(args.api_key || '');
+        const reason = (args.reason || 'unspecified').trim().slice(0, 100);
+        return {
+            _mode: 'network',
+            success: false,
+            requires_human_action: true,
+            iron_rule: 'API key revocation is a destructive, irreversible operation. Agent cannot execute unilaterally. Same gating as claim_verify and arbitrate.',
+            action: 'revoke_api_key',
+            api_key_hint: redactKey(apiKey),
+            reason_logged: reason,
+            next_step: {
+                via: 'PWA + Passkey',
+                url: 'https://webaz.xyz/revoke',
+                instructions: '1) Open URL in browser  2) Sign in  3) Confirm with Passkey  4) Click "Revoke". After confirm the old api_key returns 401 on all tools.',
+                warning: 'After revoke you cannot call any auth\'d tool until you have a new api_key. Use webaz_rotate_key instead for atomic invalidate + re-issue.',
+            },
+        };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3071,6 +3297,25 @@ function handleRevokeKey(args) {
     };
 }
 function handleRotateKey(args) {
+    // RFC-003 Batch 5:NETWORK 模式 → 不本地校验 key(PWA 会鉴权),直接返回 Passkey 轮换指引。
+    if (toolBackend('webaz_rotate_key') === 'network') {
+        const apiKey = String(args.api_key || '');
+        const reason = (args.reason || 'rotation').trim().slice(0, 100);
+        return {
+            _mode: 'network',
+            success: false,
+            requires_human_action: true,
+            iron_rule: 'API key rotation requires Passkey verification (Iron-Rule). MCP registers intent only.',
+            action: 'rotate_api_key',
+            old_api_key_hint: redactKey(apiKey),
+            reason_logged: reason,
+            next_step: {
+                via: 'PWA + Passkey',
+                url: 'https://webaz.xyz/rotate',
+                instructions: '1) Open URL  2) Sign in  3) Confirm with Passkey  4) PWA returns new api_key — copy immediately, shown once. Old key invalidated atomically with new key issuance.',
+            },
+        };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3092,7 +3337,14 @@ function handleRotateKey(args) {
     };
 }
 // ─── 推广 / 双轨 (Tokenomics) ───────────────────────────────────
-function handleReferral(args) {
+async function handleReferral(args) {
+    // RFC-003 Batch 2:NETWORK 模式 → webaz.xyz 真网络聚合(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_referral') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        return await apiCall('/api/referral/me', { apiKey });
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3188,7 +3440,19 @@ function handleReferral(args) {
             : 'Complete 1 purchase first, then your share link will earn 3-tier commission. Until then, your share builds points-matching only.',
     };
 }
-function handleShareLink(args) {
+async function handleShareLink(args) {
+    // RFC-003 #1122:NETWORK 模式 → 调 webaz.xyz 的 /api/share-link(服务端同款计算);SANDBOX 走本地。
+    if (toolBackend('webaz_share_link') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        if (!args.product_id)
+            return { error: 'product_id required' };
+        const qs = new URLSearchParams({ product_id: String(args.product_id) });
+        if (args.side)
+            qs.set('side', String(args.side));
+        return await apiCall('/api/share-link?' + qs.toString(), { apiKey });
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3272,7 +3536,24 @@ function handleShareLink(args) {
     };
 }
 // ─── 黑名单 / 关注 / 雷达 / 默认地址 / shareables ─────────
-function handleBlocklist(args) {
+async function handleBlocklist(args) {
+    // RFC-003 Batch 2:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_blocklist') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        const act = String(args.action || '');
+        if (act === 'list')
+            return await apiCall('/api/blocklist', { apiKey });
+        const uid = args.user_id ? encodeURIComponent(String(args.user_id)) : '';
+        if (!uid)
+            return { error: 'user_id required for block/unblock' };
+        if (act === 'block')
+            return await apiCall('/api/blocklist/' + uid, { method: 'POST', apiKey, body: { reason: args.reason } });
+        if (act === 'unblock')
+            return await apiCall('/api/blocklist/' + uid, { method: 'DELETE', apiKey });
+        return { error: `unknown action: ${act}` };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3309,7 +3590,26 @@ function handleBlocklist(args) {
     }
     return { error: `unknown action: ${action}` };
 }
-function handleFollows(args) {
+async function handleFollows(args) {
+    // RFC-003 Batch 2:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_follows') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        const act = String(args.action || '');
+        if (act === 'list')
+            return await apiCall('/api/follows/me', { apiKey });
+        const uid = args.user_id ? encodeURIComponent(String(args.user_id)) : '';
+        if (!uid)
+            return { error: 'user_id required' };
+        if (act === 'follow')
+            return await apiCall('/api/follows/' + uid, { method: 'POST', apiKey });
+        if (act === 'unfollow')
+            return await apiCall('/api/follows/' + uid, { method: 'DELETE', apiKey });
+        if (act === 'status')
+            return await apiCall('/api/follows/' + uid + '/status', { apiKey });
+        return { error: `unknown action: ${act}` };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3355,12 +3655,32 @@ function handleFollows(args) {
     }
     return { error: `unknown action: ${action}` };
 }
-function handleNearby(args) {
+async function handleNearby(args) {
+    const action = String(args.action || '');
+    // RFC-003 Batch 1:NETWORK 模式 → 调 webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_nearby') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        if (action === 'set_location')
+            return await apiCall('/api/profile/set-location', { method: 'POST', apiKey, body: { lat: args.lat, lng: args.lng } });
+        if (action === 'clear_location')
+            return await apiCall('/api/profile/clear-location', { method: 'POST', apiKey });
+        if (action === 'query') {
+            const qs = new URLSearchParams();
+            if (args.scope)
+                qs.set('scope', String(args.scope));
+            if (args.window)
+                qs.set('window', String(args.window));
+            const q = qs.toString();
+            return await apiCall('/api/nearby' + (q ? '?' + q : ''), { apiKey });
+        }
+        return { error: `unknown action: ${action}` };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
     const { user } = auth;
-    const action = String(args.action || '');
     if (action === 'set_location') {
         const lat = Number(args.lat), lng = Number(args.lng);
         if (!Number.isFinite(lat) || !Number.isFinite(lng))
@@ -3405,7 +3725,28 @@ function handleNearby(args) {
     }
     return { error: `unknown action: ${action}` };
 }
-function handleDefaultAddress(args) {
+async function handleDefaultAddress(args) {
+    // RFC-003 Batch 2:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_default_address') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        const act = String(args.action || '');
+        if (act === 'read') {
+            const me = await apiCall('/api/me', { apiKey });
+            if (me.error)
+                return me;
+            return { address_text: me.default_address_text ?? null, address_region: me.default_address_region ?? null };
+        }
+        if (act === 'set') {
+            const text = (args.text || '').trim().slice(0, 200);
+            const region = (args.region || '').trim().slice(0, 40);
+            if (!text)
+                return { error: 'missing_text', error_code: 'TEXT_REQUIRED', message: 'action=set 需要 "text" 字段(自由格式地址,≤200);可选 "region"。' };
+            return await apiCall('/api/profile/default-address', { method: 'POST', apiKey, body: { text, region: region || null } });
+        }
+        return { error: `unknown action: ${act}` };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
@@ -3443,12 +3784,42 @@ function handleDefaultAddress(args) {
     }
     return { error: `unknown action: ${action}` };
 }
-function handleShareables(args) {
+async function handleShareables(args) {
+    const action = String(args.action || '');
+    // RFC-003 Batch 1:NETWORK 模式 → 调 webaz.xyz 真网络(Bearer api_key);SANDBOX 走本地。
+    if (toolBackend('webaz_shareables') === 'network') {
+        const apiKey = String(args.api_key || '');
+        if (!apiKey)
+            return { error: 'api_key required' };
+        if (action === 'list_mine')
+            return await apiCall('/api/shareables/me', { apiKey });
+        if (action === 'by_product') {
+            if (!args.related_product_id)
+                return { error: 'related_product_id required' };
+            return await apiCall('/api/shareables/by-product/' + encodeURIComponent(String(args.related_product_id)), { apiKey });
+        }
+        if (action === 'by_anchor') {
+            if (!args.related_anchor)
+                return { error: 'related_anchor required' };
+            return await apiCall('/api/shareables/by-anchor/' + encodeURIComponent(String(args.related_anchor)), { apiKey });
+        }
+        if (action === 'add') {
+            return await apiCall('/api/shareables', { method: 'POST', apiKey, body: {
+                    external_url: args.external_url, related_product_id: args.related_product_id,
+                    related_anchor: args.related_anchor, title: args.title, description: args.description,
+                } });
+        }
+        if (action === 'delete') {
+            if (!args.shareable_id)
+                return { error: 'shareable_id required' };
+            return await apiCall('/api/shareables/' + encodeURIComponent(String(args.shareable_id)), { method: 'DELETE', apiKey });
+        }
+        return { error: `unknown action: ${action}` };
+    }
     const auth = requireAuth(db, args.api_key);
     if ('error' in auth)
         return auth;
     const { user } = auth;
-    const action = String(args.action || '');
     if (action === 'list_mine') {
         const rows = db.prepare(`
       SELECT s.*, p.title as product_title FROM shareables s
@@ -3560,6 +3931,11 @@ async function readEndpoint(tool, subpath) {
     }
 }
 async function pwaApi(method, path, apiKey, body) {
+    // RFC-003:NETWORK / network_readonly → 走 webaz.xyz(Bearer 可空)。仅 NETWORK_TOOLS 里的工具会到这里
+    // (其余未迁工具在 dispatch 被 Batch 0 守卫拦下);SANDBOX 才转发本地 PWA(localhost)。
+    if (isNetworkMode()) {
+        return apiCall(path.startsWith('/api') ? path : '/api' + path, { method, apiKey, body });
+    }
     const opts = {
         method,
         headers: {
@@ -3602,9 +3978,12 @@ async function handleSecondhand(args) {
     if (!isPublic) {
         if (!apiKey)
             return { error: 'api_key required' };
-        const auth = requireAuth(db, apiKey);
-        if ('error' in auth)
-            return auth;
+        // NETWORK 模式由 webaz.xyz 端点鉴权;只有 SANDBOX 才查本地库(否则真网络用户的 key 不在本地会误拒)。
+        if (toolBackend('webaz_secondhand') !== 'network') {
+            const auth = requireAuth(db, apiKey);
+            if ('error' in auth)
+                return auth;
+        }
     }
     const iid = () => encodeURIComponent(String(args.item_id || ''));
     switch (action) {
@@ -3670,9 +4049,11 @@ async function handleTrial(args) {
     if (!isPublic) {
         if (!apiKey)
             return { error: 'api_key required' };
-        const auth = requireAuth(db, apiKey);
-        if ('error' in auth)
-            return auth;
+        if (toolBackend('webaz_trial') !== 'network') {
+            const auth = requireAuth(db, apiKey);
+            if ('error' in auth)
+                return auth;
+        }
     }
     const pid = () => encodeURIComponent(String(args.product_id || ''));
     switch (action) {
@@ -3721,9 +4102,11 @@ async function handleSkillMarket(args) {
     if (!isPublic) {
         if (!apiKey)
             return { error: 'api_key required' };
-        const auth = requireAuth(db, apiKey);
-        if ('error' in auth)
-            return auth;
+        if (toolBackend('webaz_skill_market') !== 'network') {
+            const auth = requireAuth(db, apiKey);
+            if ('error' in auth)
+                return auth;
+        }
     }
     const sid = () => encodeURIComponent(String(args.skill_id || ''));
     switch (action) {
@@ -3790,9 +4173,11 @@ async function handleRfq(args) {
     const action = String(args.action || '');
     if (!apiKey)
         return { error: 'api_key required' };
-    const auth = requireAuth(db, apiKey);
-    if ('error' in auth)
-        return auth;
+    if (toolBackend('webaz_rfq') !== 'network') {
+        const auth = requireAuth(db, apiKey);
+        if ('error' in auth)
+            return auth;
+    }
     switch (action) {
         case 'create': return await pwaApi('POST', '/rfqs', apiKey, {
             title: args.title, qty: args.qty, max_price: args.max_price,
@@ -3837,6 +4222,36 @@ async function handleBid(args) {
     const action = String(args.action || '');
     if (!apiKey)
         return { error: 'api_key required' };
+    // RFC-003 Batch 4:NETWORK 模式 → webaz.xyz 真网络(Bearer api_key);质押由服务端结算。
+    if (toolBackend('webaz_bid') === 'network') {
+        if (action === 'submit') {
+            if (!args.rfq_id || !args.price)
+                return { error: 'rfq_id + price required' };
+            return await apiCall('/api/rfqs/' + encodeURIComponent(String(args.rfq_id)) + '/bids', { method: 'POST', apiKey, body: {
+                    price: args.price, qty_offered: args.qty_offered, eta_hours: args.eta_hours,
+                    fulfillment_type: args.fulfillment_type ?? 'standard', note: args.note, offer_id: args.offer_id,
+                } });
+        }
+        if (action === 'patch') {
+            if (!args.bid_id)
+                return { error: 'bid_id required' };
+            const body = {};
+            for (const k of ['price', 'qty_offered', 'eta_hours', 'fulfillment_type', 'note'])
+                if (args[k] !== undefined)
+                    body[k] = args[k];
+            return await apiCall('/api/bids/' + encodeURIComponent(String(args.bid_id)), { method: 'PATCH', apiKey, body });
+        }
+        if (action === 'cancel') {
+            if (!args.bid_id)
+                return { error: 'bid_id required' };
+            return await apiCall('/api/bids/' + encodeURIComponent(String(args.bid_id)), { method: 'DELETE', apiKey });
+        }
+        if (action === 'list_mine') {
+            return { _mode: 'network', not_available_on_network: true,
+                error: 'webaz_bid list_mine 暂无网络端点(webaz.xyz 未提供 my-bids GET)。请用 webaz_rfq action=detail 查看具体 RFQ 的出价,或到 PWA 查看。 / no my-bids GET on the network yet; use webaz_rfq detail or the PWA.' };
+        }
+        return { error: `unknown action: ${action}` };
+    }
     const auth = requireAuth(db, apiKey);
     if ('error' in auth)
         return auth;
@@ -3881,9 +4296,11 @@ async function handleChat(args) {
     const action = String(args.action || '');
     if (!apiKey)
         return { error: 'api_key required' };
-    const auth = requireAuth(db, apiKey);
-    if ('error' in auth)
-        return auth;
+    if (toolBackend('webaz_chat') !== 'network') {
+        const auth = requireAuth(db, apiKey);
+        if ('error' in auth)
+            return auth;
+    }
     switch (action) {
         case 'start': {
             if (!args.kind || !args.context_id)
@@ -3921,6 +4338,52 @@ async function handleAutoBidSkill(args) {
     const action = String(args.action || '');
     if (!apiKey)
         return { error: 'api_key required' };
+    const buildAutoBidConfig = () => ({
+        enabled: args.enabled !== false,
+        categories: Array.isArray(args.categories) ? args.categories : ['standard'],
+        regions: Array.isArray(args.regions) ? args.regions : [],
+        max_eta_h: Number(args.max_eta_h ?? 24),
+        fulfillment_type: String(args.fulfillment_type ?? 'standard'),
+        bid_strategy: String(args.bid_strategy ?? 'cheapest_undercut'),
+        undercut_pct: Math.max(0, Math.min(0.5, Number(args.undercut_pct ?? 0.05))),
+        max_price_cap: args.max_price_cap ?? null,
+        daily_cap: Number(args.daily_cap ?? 20),
+        cooldown_min: Number(args.cooldown_min ?? 60),
+    });
+    // RFC-003 Batch 4:NETWORK 模式 → 先从 webaz.xyz 取既有 auto_bid skill,再 PATCH/POST/disable。
+    if (toolBackend('webaz_auto_bid') === 'network') {
+        const mine = await apiCall('/api/skills/mine', { apiKey });
+        if (mine.error)
+            return mine;
+        const list = (Array.isArray(mine) ? mine : (Array.isArray(mine.skills) ? mine.skills : []));
+        const existingNet = list.find(s => s.skill_type === 'auto_bid');
+        if (action === 'get') {
+            if (!existingNet)
+                return { exists: false };
+            let cfg = existingNet.config;
+            if (typeof cfg === 'string') {
+                try {
+                    cfg = JSON.parse(cfg || '{}');
+                }
+                catch {
+                    cfg = {};
+                }
+            }
+            return { exists: true, id: existingNet.id, active: existingNet.active, config: cfg };
+        }
+        if (action === 'set') {
+            const config = buildAutoBidConfig();
+            if (existingNet)
+                return await apiCall('/api/skills/' + encodeURIComponent(String(existingNet.id)), { method: 'PATCH', apiKey, body: { config, active: config.enabled ? 1 : 0 } });
+            return await apiCall('/api/skills', { method: 'POST', apiKey, body: { name: '我的自动报价 (MCP)', description: 'auto_bid via MCP', category: 'rfq', skill_type: 'auto_bid', config } });
+        }
+        if (action === 'disable') {
+            if (!existingNet)
+                return { error: '尚未创建 auto_bid Skill' };
+            return await apiCall('/api/skills/' + encodeURIComponent(String(existingNet.id)) + '/disable', { method: 'POST', apiKey });
+        }
+        return { error: `unknown action: ${action}` };
+    }
     const auth = requireAuth(db, apiKey);
     if ('error' in auth)
         return auth;
@@ -3972,6 +4435,7 @@ async function handlePriceHistory(args) {
 }
 async function handleCharity(args) {
     const action = String(args.action || '');
+    // RFC-003 Batch 4:公开读走 readEndpoint(network → webaz.xyz / sandbox → 本地);写走 pwaApi(mode-aware)。
     if (action === 'list') {
         const qs = new URLSearchParams();
         if (args.category)
@@ -3980,58 +4444,27 @@ async function handleCharity(args) {
             qs.set('target_kind', String(args.target_kind));
         if (args.limit)
             qs.set('limit', String(args.limit));
-        try {
-            const r = await fetch(PWA_API_BASE + '/wishes' + (qs.toString() ? '?' + qs : ''));
-            return await r.json();
-        }
-        catch (e) {
-            return { error: String(e.message) };
-        }
+        return readEndpoint('webaz_charity', '/wishes' + (qs.toString() ? '?' + qs : ''));
     }
     if (action === 'detail') {
         if (!args.wish_id)
             return { error: 'wish_id required' };
-        try {
-            const r = await fetch(PWA_API_BASE + '/wishes/' + encodeURIComponent(String(args.wish_id)));
-            return await r.json();
-        }
-        catch (e) {
-            return { error: String(e.message) };
-        }
-    }
-    if (action === 'stories') {
-        try {
-            const r = await fetch(PWA_API_BASE + '/charity/stories');
-            return await r.json();
-        }
-        catch (e) {
-            return { error: String(e.message) };
-        }
-    }
-    if (action === 'leaderboard') {
-        try {
-            const r = await fetch(PWA_API_BASE + '/charity/leaderboard');
-            return await r.json();
-        }
-        catch (e) {
-            return { error: String(e.message) };
-        }
-    }
-    if (action === 'fund') {
-        try {
-            const r = await fetch(PWA_API_BASE + '/charity/fund');
-            return await r.json();
-        }
-        catch (e) {
-            return { error: String(e.message) };
-        }
-    }
+        return readEndpoint('webaz_charity', '/wishes/' + encodeURIComponent(String(args.wish_id)));
+    }
+    if (action === 'stories')
+        return readEndpoint('webaz_charity', '/charity/stories');
+    if (action === 'leaderboard')
+        return readEndpoint('webaz_charity', '/charity/leaderboard');
+    if (action === 'fund')
+        return readEndpoint('webaz_charity', '/charity/fund');
     const apiKey = String(args.api_key || '');
     if (!apiKey)
         return { error: 'api_key required for this action' };
-    const auth = requireAuth(db, apiKey);
-    if ('error' in auth)
-        return auth;
+    if (toolBackend('webaz_charity') !== 'network') {
+        const auth = requireAuth(db, apiKey);
+        if ('error' in auth)
+            return auth;
+    }
     if (action === 'create') {
         return await pwaApi('POST', '/wishes', apiKey, {
             title: args.title, content: args.content, category: args.category,
@@ -4119,9 +4552,11 @@ async function handleLike(args) {
     const sid = String(args.shareable_id || '');
     if (!apiKey || !sid)
         return { error: 'api_key + shareable_id required' };
-    const auth = requireAuth(db, apiKey);
-    if ('error' in auth)
-        return auth;
+    if (toolBackend('webaz_like') !== 'network') {
+        const auth = requireAuth(db, apiKey);
+        if ('error' in auth)
+            return auth;
+    }
     if (action === 'toggle')
         return await pwaApi('POST', '/shareables/' + encodeURIComponent(sid) + '/like', apiKey);
     if (action === 'status')
@@ -4142,9 +4577,11 @@ async function handleAuction(args) {
     const action = String(args.action || '');
     if (!apiKey)
         return { error: 'api_key required' };
-    const auth = requireAuth(db, apiKey);
-    if ('error' in auth)
-        return auth;
+    if (toolBackend('webaz_auction') !== 'network') {
+        const auth = requireAuth(db, apiKey);
+        if ('error' in auth)
+            return auth;
+    }
     switch (action) {
         case 'create': return await pwaApi('POST', '/auctions', apiKey, {
             title: args.title, qty: args.qty, category: args.category,
@@ -4420,126 +4857,134 @@ export async function startMCPServer() {
         const t0 = Date.now();
         let result;
         try {
-            switch (name) {
-                case 'webaz_info':
-                    result = handleInfo();
-                    break;
-                case 'webaz_register':
-                    result = handleRegister(args);
-                    break;
-                case 'webaz_search':
-                    result = await handleSearch(args);
-                    break;
-                case 'webaz_verify_price':
-                    result = await handleVerifyPrice(args);
-                    break;
-                case 'webaz_list_product':
-                    result = await handleListProduct(args);
-                    break;
-                case 'webaz_place_order':
-                    result = await handlePlaceOrder(args);
-                    break;
-                case 'webaz_update_order':
-                    result = await handleUpdateOrder(args);
-                    break;
-                case 'webaz_get_status':
-                    result = await handleGetStatus(args);
-                    break;
-                case 'webaz_feedback':
-                    result = await handleFeedback(args);
-                    break;
-                case 'webaz_contribute':
-                    result = await handleContribute(args);
-                    break;
-                case 'webaz_wallet':
-                    result = await handleWallet(args);
-                    break;
-                case 'webaz_dispute':
-                    result = await handleDispute(args);
-                    break;
-                case 'webaz_claim_verify':
-                    result = await handleClaimVerify(args);
-                    break;
-                case 'webaz_notifications':
-                    result = handleNotifications(args);
-                    break;
-                case 'webaz_skill':
-                    result = handleSkill(args);
-                    break;
-                case 'webaz_skill_market':
-                    result = await handleSkillMarket(args);
-                    break;
-                case 'webaz_secondhand':
-                    result = await handleSecondhand(args);
-                    break;
-                case 'webaz_trial':
-                    result = await handleTrial(args);
-                    break;
-                case 'webaz_mykey':
-                    result = handleMyKey(args);
-                    break;
-                case 'webaz_profile':
-                    result = await handleProfile(args);
-                    break;
-                case 'webaz_revoke_key':
-                    result = handleRevokeKey(args);
-                    break;
-                case 'webaz_rotate_key':
-                    result = handleRotateKey(args);
-                    break;
-                case 'webaz_referral':
-                    result = handleReferral(args);
-                    break;
-                case 'webaz_share_link':
-                    result = handleShareLink(args);
-                    break;
-                case 'webaz_blocklist':
-                    result = handleBlocklist(args);
-                    break;
-                case 'webaz_follows':
-                    result = handleFollows(args);
-                    break;
-                case 'webaz_nearby':
-                    result = handleNearby(args);
-                    break;
-                case 'webaz_default_address':
-                    result = handleDefaultAddress(args);
-                    break;
-                case 'webaz_shareables':
-                    result = handleShareables(args);
-                    break;
-                case 'webaz_rfq':
-                    result = await handleRfq(args);
-                    break;
-                case 'webaz_bid':
-                    result = await handleBid(args);
-                    break;
-                case 'webaz_chat':
-                    result = await handleChat(args);
-                    break;
-                case 'webaz_auto_bid':
-                    result = await handleAutoBidSkill(args);
-                    break;
-                case 'webaz_auction':
-                    result = await handleAuction(args);
-                    break;
-                case 'webaz_like':
-                    result = await handleLike(args);
-                    break;
-                case 'webaz_p2p_product':
-                    result = await handleP2pProduct(args);
-                    break;
-                case 'webaz_charity':
-                    result = await handleCharity(args);
-                    break;
-                case 'webaz_price_history':
-                    result = await handlePriceHistory(args);
-                    break;
-                case 'webaz_leaderboard':
-                    result = await handleLeaderboard(args);
-                    break;
-                default: result = { error: `未知工具：${name}` };
+            // ─── RFC-003 Batch 0 安全网:NETWORK 模式下未迁移的工具【硬失败】,不静默落本地沙盒 ───
+            // 例外:info / register(NETWORK_SELF_AWARE)有专门 network-aware 处理,照常放行。
+            let handled = false;
+            if (isNetworkMode() && !NETWORK_TOOLS.has(name) && !NETWORK_SELF_AWARE.has(name)) {
+                result = networkMigrationPending(name);
+                handled = true;
             }
+            if (!handled)
+                switch (name) {
+                    case 'webaz_info':
+                        result = await handleInfo();
+                        break;
+                    case 'webaz_register':
+                        result = handleRegister(args);
+                        break;
+                    case 'webaz_search':
+                        result = await handleSearch(args);
+                        break;
+                    case 'webaz_verify_price':
+                        result = await handleVerifyPrice(args);
+                        break;
+                    case 'webaz_list_product':
+                        result = await handleListProduct(args);
+                        break;
+                    case 'webaz_place_order':
+                        result = await handlePlaceOrder(args);
+                        break;
+                    case 'webaz_update_order':
+                        result = await handleUpdateOrder(args);
+                        break;
+                    case 'webaz_get_status':
+                        result = await handleGetStatus(args);
+                        break;
+                    case 'webaz_feedback':
+                        result = await handleFeedback(args);
+                        break;
+                    case 'webaz_contribute':
+                        result = await handleContribute(args);
+                        break;
+                    case 'webaz_wallet':
+                        result = await handleWallet(args);
+                        break;
+                    case 'webaz_dispute':
+                        result = await handleDispute(args);
+                        break;
+                    case 'webaz_claim_verify':
+                        result = await handleClaimVerify(args);
+                        break;
+                    case 'webaz_notifications':
+                        result = await handleNotifications(args);
+                        break;
+                    case 'webaz_skill':
+                        result = await handleSkill(args);
+                        break;
+                    case 'webaz_skill_market':
+                        result = await handleSkillMarket(args);
+                        break;
+                    case 'webaz_secondhand':
+                        result = await handleSecondhand(args);
+                        break;
+                    case 'webaz_trial':
+                        result = await handleTrial(args);
+                        break;
+                    case 'webaz_mykey':
+                        result = handleMyKey(args);
+                        break;
+                    case 'webaz_profile':
+                        result = await handleProfile(args);
+                        break;
+                    case 'webaz_revoke_key':
+                        result = handleRevokeKey(args);
+                        break;
+                    case 'webaz_rotate_key':
+                        result = handleRotateKey(args);
+                        break;
+                    case 'webaz_referral':
+                        result = await handleReferral(args);
+                        break;
+                    case 'webaz_share_link':
+                        result = await handleShareLink(args);
+                        break;
+                    case 'webaz_blocklist':
+                        result = await handleBlocklist(args);
+                        break;
+                    case 'webaz_follows':
+                        result = await handleFollows(args);
+                        break;
+                    case 'webaz_nearby':
+                        result = await handleNearby(args);
+                        break;
+                    case 'webaz_default_address':
+                        result = await handleDefaultAddress(args);
+                        break;
+                    case 'webaz_shareables':
+                        result = await handleShareables(args);
+                        break;
+                    case 'webaz_rfq':
+                        result = await handleRfq(args);
+                        break;
+                    case 'webaz_bid':
+                        result = await handleBid(args);
+                        break;
+                    case 'webaz_chat':
+                        result = await handleChat(args);
+                        break;
+                    case 'webaz_auto_bid':
+                        result = await handleAutoBidSkill(args);
+                        break;
+                    case 'webaz_auction':
+                        result = await handleAuction(args);
+                        break;
+                    case 'webaz_like':
+                        result = await handleLike(args);
+                        break;
+                    case 'webaz_p2p_product':
+                        result = await handleP2pProduct(args);
+                        break;
+                    case 'webaz_charity':
+                        result = await handleCharity(args);
+                        break;
+                    case 'webaz_price_history':
+                        result = await handlePriceHistory(args);
+                        break;
+                    case 'webaz_leaderboard':
+                        result = await handleLeaderboard(args);
+                        break;
+                    default: result = { error: `未知工具：${name}` };
+                }
         }
         catch (err) {
             result = { error: `执行出错：${err.message}` };
@@ -4558,7 +5003,9 @@ export async function startMCPServer() {
         }
         // RFC-003 P0: 给每个工具结果盖模式戳(诚实可见,防把 sandbox 当 live 网络)
         // P3: handler 可自行预设 _mode(如 register 在 network 模式返回引导,不是 sandbox 结果)→ 不覆盖。
-        const backend = toolBackend(name);
+        // self-aware 工具(info/register)按全局 MODE 盖戳,不按 toolBackend(它们不在 NETWORK_TOOLS 但本就网络感知),
+        // 否则 network_readonly/network 下 info 会被误盖 sandbox 戳,与其自身 network_state 矛盾。
+        const backend = NETWORK_SELF_AWARE.has(name) ? (isNetworkMode() ? 'network' : 'sandbox') : toolBackend(name);
         if (result && typeof result === 'object' && !Array.isArray(result)) {
             const r = result;
             if (!('_mode' in r))