@seasonkoh/webaz 0.1.27 → 0.1.29

package/dist/store-verification.js

@@ -0,0 +1,77 @@
+export const MAX_URL_LEN = 2048;
+export const MAX_PLATFORM_LEN = 60;
+export const MAX_NOTES_LEN = 500;
+const ACTIVE = "('issued','submitted','verified')";
+const getActive = (db, userId) => db.prepare(`SELECT * FROM store_verifications WHERE user_id = ? AND status IN ${ACTIVE} ORDER BY created_at DESC, rowid DESC LIMIT 1`).get(userId);
+function isStorableHttpUrl(url) {
+    if (typeof url !== 'string' || url.length === 0 || url.length > MAX_URL_LEN)
+        return false;
+    return /^https?:\/\/[^\s]+$/i.test(url.trim());
+}
+/** 卖家申请店铺认证 → issued(签发 code)。单一活跃 per seller。 */
+export function requestStoreVerification(db, args) {
+    const { id, userId, code } = args;
+    if (!id || !userId || !code)
+        return { ok: false, reason: 'missing id/userId/code' };
+    const platform = args.platform ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : null;
+    if (getActive(db, userId))
+        return { ok: false, reason: '已有进行中的店铺认证' };
+    db.prepare(`INSERT INTO store_verifications (id, user_id, code, platform, status, created_at, updated_at)
+    VALUES (?,?,?,?, 'issued', datetime('now'), datetime('now'))`).run(id, userId, code, platform);
+    return { ok: true, status: 'issued', code };
+}
+/** 卖家提交店铺外链 → submitted。要求有 issued 记录;链接仅存储(不抓取)。 */
+export function submitStoreVerificationLink(db, args) {
+    const url = String(args.externalUrl || '').trim();
+    if (!isStorableHttpUrl(url))
+        return { ok: false, reason: '请提交有效的 http(s) 店铺链接' };
+    const active = getActive(db, args.userId);
+    if (!active)
+        return { ok: false, reason: '请先申请店铺认证获取验证码' };
+    if (active.status === 'verified')
+        return { ok: false, reason: '店铺认证已通过,无需重复提交' };
+    const platform = args.platform != null ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : active.platform;
+    db.prepare(`UPDATE store_verifications SET external_url = ?, platform = ?, status = 'submitted', updated_at = datetime('now') WHERE id = ?`).run(url, platform, active.id);
+    return { ok: true, status: 'submitted' };
+}
+/** 真人 admin 核对结论 → verified | rejected。verified 时按 perProductExempt 置豁免位(默认 false)。仅从 submitted 流转。 */
+export function reviewStoreVerification(db, args) {
+    const { id, reviewerId, decision } = args;
+    if (!reviewerId)
+        return { ok: false, reason: 'reviewStoreVerification requires a human reviewerId' };
+    if (decision !== 'verified' && decision !== 'rejected')
+        return { ok: false, reason: 'decision must be verified|rejected' };
+    const row = db.prepare('SELECT * FROM store_verifications WHERE id = ?').get(id);
+    if (!row)
+        return { ok: false, reason: 'store verification not found' };
+    if (row.status === decision)
+        return { ok: true, status: decision, perProductExempt: row.per_product_exempt === 1, already: true };
+    if (row.status !== 'submitted')
+        return { ok: false, reason: `cannot review from status '${row.status}' (need submitted)` };
+    const exempt = decision === 'verified' && args.perProductExempt === true ? 1 : 0; // 仅 verified 才可置豁免;reject 一律 0
+    const notes = args.notes != null ? String(args.notes).slice(0, MAX_NOTES_LEN) : null;
+    db.prepare(`UPDATE store_verifications SET status = ?, per_product_exempt = ?, reviewed_by = ?, reviewed_at = datetime('now'), notes = ?, updated_at = datetime('now') WHERE id = ?`)
+        .run(decision, exempt, reviewerId, notes, id);
+    return { ok: true, status: decision, perProductExempt: exempt === 1 };
+}
+/** 卖家本人最新一条店铺认证(任意状态)。无 → null。 */
+export function getStoreVerification(db, userId) {
+    return db.prepare('SELECT * FROM store_verifications WHERE user_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1').get(userId) ?? null;
+}
+/** admin 队列:按 status 过滤(默认全部),最新在前。纯读。 */
+export function listStoreVerifications(db, opts = {}) {
+    if (opts.status)
+        return db.prepare(`SELECT * FROM store_verifications WHERE status = ? ORDER BY created_at DESC, rowid DESC`).all(opts.status);
+    return db.prepare(`SELECT * FROM store_verifications ORDER BY created_at DESC, rowid DESC`).all();
+}
+/** 硬门豁免读取:该卖家是否【已被豁免逐品验证】(店铺 verified 且 per_product_exempt=1)。供 direct-pay gate combiner。 */
+export function sellerExemptFromPerProduct(db, userId) {
+    return !!db.prepare("SELECT 1 FROM store_verifications WHERE user_id = ? AND status = 'verified' AND per_product_exempt = 1 LIMIT 1").get(userId);
+}
+export function toSellerStoreVerificationView(row) {
+    return {
+        id: row.id, code: row.code, platform: row.platform, external_url: row.external_url,
+        status: row.status, per_product_exempt: row.per_product_exempt === 1,
+        reviewed_at: row.reviewed_at, created_at: row.created_at, updated_at: row.updated_at,
+    }; // 故意省略 reviewed_by + notes
+}

package/dist/version.js

@@ -31,4 +31,4 @@ export const SOFTWARE_VERSION = pkg.version;
  *  safe for agents to ignore. Guarded by tests/test-contract-fingerprint.ts + docs/CONTRACT-LOCK.json.
  *  NB: the fingerprint hashes only §②/§① content; a change to the §④ entry document (e.g. agent_quickstart)
  *  is integrator-observable but NOT fingerprinted, so it must be registered here by hand. */
-export const CONTRACT_VERSION = 5;
+export const CONTRACT_VERSION = 8;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "[PRE-LAUNCH] Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools. ⚠️ Repository currently private until W8 public launch — GitHub links may return 404. See https://webaz.xyz for status.",
   "main": "dist/mcp.js",
   "bin": {
@@ -25,6 +25,9 @@
     "pwa": "tsx src/pwa/server.ts",
     "schema:verify": "tsx scripts/schema-verify.ts",
     "routes:seam-check": "tsx scripts/routes-seam-guard.ts",
+    "guard:complexity": "tsx scripts/complexity-ratchet-guard.ts",
+    "guard:pr-constraints": "tsx scripts/pr-constraints-guard.ts",
+    "guard:direct-pay-deposit": "tsx scripts/direct-pay-deposit-guard.ts",
     "pg:schema": "tsx scripts/gen-pg-schema.ts",
     "pg:verify": "tsx scripts/pg-schema-verify.ts",
     "test:pg-placeholders": "tsx scripts/test-pg-placeholders.ts",
@@ -47,6 +50,7 @@
     "test:admin-claim-marking-correction": "tsx scripts/test-admin-claim-marking-correction.ts",
     "test:contribution-facts-read": "tsx scripts/test-contribution-facts-read.ts",
     "ingest:admin-coordination": "tsx scripts/ingest-admin-coordination.ts",
+    "direct-pay:readiness": "tsx scripts/direct-pay-launch-readiness-report.ts",
     "correct:operator-claim-marking": "tsx scripts/correct-operator-claim-marking.ts",
     "test:admin-operator-claim-workflow": "tsx scripts/test-admin-operator-claim-workflow.ts",
     "test:admin-operator-claim-lifecycle": "tsx scripts/test-admin-operator-claim-lifecycle.ts",
@@ -75,13 +79,87 @@
     "test:task-proposals": "tsx scripts/test-task-proposals.ts",
     "test:public-contribution-pages": "tsx scripts/test-public-contribution-pages.ts",
     "test:mcp-contribute": "tsx scripts/test-mcp-contribute.ts",
+    "test:mcp-fresh-db-schema": "tsx scripts/test-mcp-fresh-db-schema.ts",
+    "test:agent-delegation-grants": "tsx scripts/test-agent-delegation-grants.ts",
+    "test:agent-pairing": "tsx scripts/test-agent-pairing.ts",
+    "test:agent-grant-verify": "tsx scripts/test-agent-grant-verify.ts",
+    "test:agent-grant-mcp-consume": "tsx scripts/test-agent-grant-mcp-consume.ts",
+    "test:connected-agents-read": "tsx scripts/test-connected-agents-read.ts",
+    "test:connected-agents-ui": "tsx scripts/test-connected-agents-ui.ts",
+    "test:leaderboard-anon-projection": "tsx scripts/test-leaderboard-anon-projection.ts",
+    "test:i18n-default-language": "tsx scripts/test-i18n-default-language.ts",
+    "test:reputation-handle-resolution": "tsx scripts/test-reputation-handle-resolution.ts",
+    "test:clearing-escrow-schema": "tsx scripts/test-clearing-escrow-schema.ts",
+    "test:clearing-commission": "tsx scripts/test-clearing-commission.ts",
+    "test:clearing-surfaces": "tsx scripts/test-clearing-surfaces.ts",
+    "test:returns-aware-counts": "tsx scripts/test-returns-aware-counts.ts",
     "test:mcp-auth-firebreak": "tsx scripts/test-mcp-auth-firebreak.ts",
+    "test:mcp-mode-honesty": "tsx scripts/test-mcp-mode-honesty.ts",
+    "test:mcp-cli": "tsx scripts/test-mcp-cli.ts",
+    "test:currency-display": "tsx scripts/test-currency-display.ts",
+    "test:currency-schema-flip": "tsx scripts/test-currency-schema-flip.ts",
     "test:proposal-admin-ui": "tsx scripts/test-proposal-admin-ui.ts",
-    "check:pwa-syntax": "node --check src/pwa/public/app.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
+    "check:pwa-syntax": "node --check src/pwa/public/app.js && node --check src/pwa/public/app-admin.js && node --check src/pwa/public/app-contribution.js && node --check src/pwa/public/app-ai.js && node --check src/pwa/public/app-discover.js && node --check src/pwa/public/app-profile.js && node --check src/pwa/public/app-account.js && node --check src/pwa/public/app-shop.js && node --check src/pwa/public/app-listings.js && node --check src/pwa/public/app-external-links.js && node --check src/pwa/public/app-product-media.js && node --check src/pwa/public/app-create-kinds.js && node --check src/pwa/public/app-price.js && node --check src/pwa/public/app-seller.js && node --check src/pwa/public/app-agents.js && node --check src/pwa/public/app-direct-pay.js && node --check src/pwa/public/app-direct-pay-readiness.js && node --check src/pwa/public/app-direct-pay-deferral.js && node --check src/pwa/public/app-direct-pay-deferral-admin.js && node --check src/pwa/public/app-direct-pay-product-verify.js && node --check src/pwa/public/app-direct-pay-store-verify.js && node --check src/pwa/public/app-direct-pay-compliance.js && node --check src/pwa/public/app-direct-pay-fee-ops.js && node --check src/pwa/public/app-direct-pay-fee-center.js && node --check src/pwa/public/app-direct-pay-accounts.js && node --check src/pwa/public/app-direct-pay-buyer.js && node --check src/pwa/public/app-prelaunch-waz.js && node --check src/pwa/public/app-chat-poll.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
+    "test:create-kinds": "tsx scripts/test-create-kinds.ts",
+    "test:secondhand-photo-authenticity": "tsx scripts/test-secondhand-photo-authenticity.ts",
+    "test:secondhand-detail-alignment": "tsx scripts/test-secondhand-detail-alignment.ts",
+    "test:order-status-timeline-i18n": "tsx scripts/test-order-status-timeline-i18n.ts",
+    "test:leaderboard-nav-handle": "tsx scripts/test-leaderboard-nav-handle.ts",
+    "test:fx-rates": "tsx scripts/test-fx-rates.ts",
+    "test:fx-price-display": "tsx scripts/test-fx-price-display.ts",
+    "test:fx-price-buypage": "tsx scripts/test-fx-price-buypage.ts",
+    "test:fx-price-listings": "tsx scripts/test-fx-price-listings.ts",
+    "test:fx-price-seller-ui": "tsx scripts/test-fx-price-seller-ui.ts",
+    "test:prelaunch-banner-nav": "tsx scripts/test-prelaunch-banner-nav.ts",
     "test:rewards-vs-contribution-copy": "tsx scripts/test-rewards-vs-contribution-copy.ts",
     "test:invite-code-narrowing": "tsx scripts/test-invite-code-narrowing.ts",
     "test:shop-referral-attribution": "tsx scripts/test-shop-referral-attribution.ts",
     "test:money-units": "tsx scripts/test-money-units.ts",
+    "test:direct-pay-ledger": "tsx scripts/test-direct-pay-ledger.ts",
+    "test:deposit-rails": "tsx scripts/test-deposit-rails.ts",
+    "test:direct-pay-timeouts": "tsx scripts/test-direct-pay-timeouts.ts",
+    "test:direct-pay-actions": "tsx scripts/test-direct-pay-actions.ts",
+    "test:direct-pay-eligibility": "tsx scripts/test-direct-pay-eligibility.ts",
+    "test:direct-receive-deposits": "tsx scripts/test-direct-receive-deposits.ts",
+    "test:direct-receive-accounts": "tsx scripts/test-direct-receive-accounts.ts",
+    "test:direct-receive-account-endpoints": "tsx scripts/test-direct-receive-account-endpoints.ts",
+    "test:direct-pay-order-qr": "tsx scripts/test-direct-pay-order-qr.ts",
+    "test:direct-pay-order-redaction": "tsx scripts/test-direct-pay-order-redaction.ts",
+    "guard:direct-pay-order-reader": "tsx scripts/direct-pay-order-reader-guard.ts",
+    "test:direct-receive-instruction": "tsx scripts/test-direct-receive-instruction.ts",
+    "test:direct-receive-production-confirm": "tsx scripts/test-direct-receive-production-confirm.ts",
+    "test:direct-receive-deferral": "tsx scripts/test-direct-receive-deferral.ts",
+    "test:direct-pay-base-bond-entry": "tsx scripts/test-direct-pay-base-bond-entry.ts",
+    "test:direct-pay-order-snapshot-schema": "tsx scripts/test-direct-pay-order-snapshot-schema.ts",
+    "test:direct-pay-ui": "tsx scripts/test-direct-pay-ui.ts",
+    "test:i18n-labels": "tsx scripts/test-i18n-discover-dispute-labels.ts",
+    "test:listing-product-type": "tsx scripts/test-listing-product-type.ts",
+    "test:external-links": "tsx scripts/test-product-external-links.ts",
+    "test:thumb-endpoint": "tsx scripts/test-product-thumb-endpoint.ts",
+    "test:list-thumbnails": "tsx scripts/test-list-thumbnails.ts",
+    "check:i18n-dup": "tsx scripts/check-i18n-no-dup-keys.ts",
+    "test:i18n-dup-gate": "tsx scripts/test-i18n-dup-gate.ts",
+    "test:merchant-bond": "tsx scripts/test-merchant-bond-domain.ts",
+    "test:merchant-bond-exposure": "tsx scripts/test-merchant-bond-exposure.ts",
+    "test:direct-pay-fee-ar": "tsx scripts/test-direct-pay-fee-ar.ts",
+    "test:direct-pay-disclosure-acks": "tsx scripts/test-direct-pay-disclosure-acks.ts",
+    "test:direct-pay-create": "tsx scripts/test-direct-pay-create.ts",
+    "test:direct-pay-deferral-quota": "tsx scripts/test-direct-pay-deferral-quota.ts",
+    "test:product-verification": "tsx scripts/test-product-verification.ts",
+    "test:product-verification-routes": "tsx scripts/test-product-verification-routes.ts",
+    "test:store-verification": "tsx scripts/test-store-verification.ts",
+    "test:store-verification-routes": "tsx scripts/test-store-verification-routes.ts",
+    "test:direct-pay-launch-summary": "tsx scripts/test-direct-pay-launch-summary.ts",
+    "test:product-verification-reverify": "tsx scripts/test-product-verification-reverify.ts",
+    "test:direct-pay-controls": "tsx scripts/test-direct-pay-controls.ts",
+    "test:direct-pay-aml-monitor": "tsx scripts/test-direct-pay-aml-monitor.ts",
+    "test:direct-pay-aml-review": "tsx scripts/test-direct-pay-aml-review.ts",
+    "test:direct-pay-compliance-ingress": "tsx scripts/test-direct-pay-compliance-ingress.ts",
+    "test:direct-pay-bond-rail-clearance": "tsx scripts/test-direct-pay-bond-rail-clearance.ts",
+    "test:direct-pay-launch-readiness": "tsx scripts/test-direct-pay-launch-readiness.ts",
+    "test:direct-pay-readiness-routes": "tsx scripts/test-direct-pay-readiness-routes.ts",
+    "test:direct-pay-deferral-routes": "tsx scripts/test-direct-pay-deferral-routes.ts",
+    "test:direct-pay-disclosures": "tsx scripts/test-direct-pay-disclosures.ts",
     "test:identity-claim-ui": "tsx scripts/test-identity-claim-ui.ts",
     "test:identity-claim-discovery": "tsx scripts/test-identity-claim-discovery.ts",
     "test:operator-ingest-guards": "tsx scripts/test-operator-ingest-guards.ts",