@seasonkoh/webaz 0.1.27 → 0.1.29

package/dist/layer0-foundation/L0-2-state-machine/transitions.js

@@ -20,6 +20,43 @@ export const VALID_TRANSITIONS = {
         requiresEvidence: false,
         description: '下单后付款前取消订单'
     },
+    // ── Direct Pay (Rail 1) 直付:只"支付"这一步变,之后汇入既有流程 ──────────────
+    //   设计稿 docs/modules/DIRECT-PAYMENT-MODULE-DESIGN.INTERNAL.md §4。
+    //   本金(货款)不经协议;协议不验证付款;买家声明已付款 → 汇入 accepted(卖家发货)。
+    'created→direct_pay_window': {
+        allowedRoles: ['system'], // 直付下单路由锁定卖家费用质押后,以 system 显式推进(非超时驱动)
+        requiresEvidence: false,
+        description: 'Rail1 直付:卖家已质押平台费、展示收款方式,进入付款窗口'
+    },
+    'direct_pay_window→accepted': {
+        allowedRoles: ['buyer'],
+        requiresEvidence: false,
+        description: 'Rail1 直付:买家声明"我已付款" → 汇入既有流程(卖家发货);协议不验证付款,谎报则卖家不发货(零损失自纠正)'
+    },
+    'direct_pay_window→cancelled': {
+        allowedRoles: ['buyer', 'system'],
+        requiresEvidence: false,
+        description: 'Rail1 直付:付款前买家取消(或卖家请求取消经买家确认)→ 释放费用质押'
+    },
+    'direct_pay_window→direct_expired_unconfirmed': {
+        // deadlineField 供【专属 cron(direct-pay-timeouts.ts)】读取;故意【不设 autoFaultState】→
+        // 通用 engine.checkTimeouts(需 deadlineField+autoFaultState 两者)绝不触发本转移,避免漏掉释放质押等副作用。
+        allowedRoles: ['system'],
+        deadlineField: 'direct_pay_window_deadline',
+        requiresEvidence: false,
+        description: 'Rail1 直付:付款窗口超时未标记 → 不静默关单,转可争议态(专属 cron 释放费用质押 + 停用收款指令)'
+    },
+    'direct_expired_unconfirmed→disputed': {
+        allowedRoles: ['buyer'],
+        requiresEvidence: true,
+        evidenceHint: '上传付款凭证(证据分级:链上 tx / 银行回执 / 截图)',
+        description: 'Rail1 直付:买家"我确实付了" → 升级争议(证据级信誉裁决,本档无资金赔付)'
+    },
+    'direct_expired_unconfirmed→cancelled': {
+        allowedRoles: ['buyer', 'system'],
+        requiresEvidence: false,
+        description: 'Rail1 直付:买家确认未付 / 宽限期后系统关单(终态)'
+    },
     // ── 卖家接单 ──────────────────────────────────────────────
     'paid→accepted': {
         allowedRoles: ['seller'],
@@ -243,6 +280,8 @@ export const CURRENT_RESPONSIBLE = {
     in_transit: 'logistics', // 等物流投递
     delivered: 'buyer', // 等买家确认
     disputed: 'arbitrator', // 等仲裁处理
+    direct_pay_window: 'buyer', // Rail1: 等买家付款并标记
+    direct_expired_unconfirmed: 'buyer', // Rail1: 等买家确认未付 或 升级争议
 };
 /** Phase 1 self-fulfill 覆盖表：seller 一人承担 shipped/picked_up/in_transit 全程 */
 export const CURRENT_RESPONSIBLE_SELF_FULFILL = {
@@ -275,6 +314,8 @@ export const ORDER_STATE_MEANINGS = {
     refunded_full: { zh: '仲裁裁全额退款,订单作废(终态)', en: 'arbitration full refund, order voided (terminal)' },
     dispute_dismissed: { zh: '争议被驳回(无效,终态)', en: 'dispute dismissed (terminal)' },
     expired: { zh: '订单超时自动失败(通用兜底,终态)', en: 'order expired (generic timeout, terminal)' },
+    direct_pay_window: { zh: 'Rail1 直付:已质押平台费,等买家付款(协议不持货款)', en: 'Rail1 direct-pay: fee-staked, awaiting buyer off-protocol payment (protocol holds no funds)' },
+    direct_expired_unconfirmed: { zh: 'Rail1 直付:付款窗口超时未标记(不静默关单,留争议/确认窗口)', en: 'Rail1 direct-pay: payment window expired unmarked (not silently closed; dispute/confirm window open)' },
 };
 /** 订单/争议生命周期契约 —— 集成方 agent 读它即懂"订单怎么流转 + 每步谁驱动 + 何时 + 含义"。 */
 export function orderLifecycleContract() {

package/dist/layer0-foundation/L0-5-manifest/manifest.js

@@ -303,7 +303,7 @@ async function getLiveStats() {
         const disputes = await n('SELECT COUNT(*) as n FROM disputes');
         const skills = await n("SELECT COUNT(*) as n FROM skills WHERE active = 1");
         const totalVolume = ((await dbOne("SELECT COALESCE(SUM(total_amount),0) as v FROM orders WHERE status = 'completed'"))?.v ?? 0);
-        return { users, active_products: products, total_orders: orders, completed_orders: completed, total_disputes: disputes, active_skills: skills, total_volume_dcp: totalVolume };
+        return { users, active_products: products, total_orders: orders, completed_orders: completed, total_disputes: disputes, active_skills: skills, total_volume_waz: totalVolume };
     }
     catch {
         return null;

package/dist/layer1-agent/L1-1-mcp-server/cli.js

@@ -0,0 +1,64 @@
+/**
+ * MCP 命令行标志(--version / --help / --mode / --doctor)。
+ *
+ * 目的:让人 / 陌生 agent 在【不启动 stdio server】的前提下验证安装、看清运行模式与真网络可达性。
+ * 无标志 → cliQuickResponse 返回 null,mcp.ts 照常启动 server(既有 MCP 客户端从不传 argv → 零破坏)。
+ * 模式判定复用 resolveMode(network-mode.ts)—— 与 server.ts 同一真相源,--mode/--doctor 报的就是 server 实际用的。
+ */
+import { SOFTWARE_VERSION } from '../../version.js';
+import { resolveMode } from './network-mode.js';
+const HELP = `webaz — WebAZ MCP server (@seasonkoh/webaz)
+
+Usage:
+  npx @seasonkoh/webaz            start the MCP stdio server (what MCP clients invoke)
+  npx @seasonkoh/webaz --version  print version and exit
+  npx @seasonkoh/webaz --mode     print the resolved run mode and exit
+  npx @seasonkoh/webaz --doctor   print mode + config + live-network reachability, then exit
+  npx @seasonkoh/webaz --help     show this help
+
+Modes (RFC-003):
+  network            WEBAZ_API_KEY set — can transact on the live webaz.xyz network
+  network_readonly   no key (DEFAULT) — public reads hit live webaz.xyz; transactions need a key
+  sandbox            explicit WEBAZ_MODE=sandbox — local SQLite, isolated from the live network
+
+Env:
+  WEBAZ_API_KEY   your api_key (get one at https://webaz.xyz/#welcome). Set → network mode.
+  WEBAZ_MODE      force a mode: network | network_readonly | sandbox (sandbox is opt-in only)
+  WEBAZ_API_URL   network endpoint (default https://webaz.xyz)`;
+/** 同步、纯:处理 --version/-v · --help/-h · --mode。命中 → 返回要打印的字符串;无这些标志 → null(mcp.ts 照常启动 server)。 */
+export function cliQuickResponse(argv, env) {
+    const has = (...names) => names.some(n => argv.includes(n));
+    if (has('--version', '-v'))
+        return SOFTWARE_VERSION;
+    if (has('--help', '-h'))
+        return HELP;
+    if (has('--mode'))
+        return resolveMode(env);
+    return null;
+}
+/** --doctor:模式 + 配置 + 真网络可达性。fetch 可注入便于测试;5s 超时保护,绝不 hang。sandbox 不探网络。 */
+export async function runDoctor(env, fetchImpl = fetch) {
+    const mode = resolveMode(env);
+    const url = (env.WEBAZ_API_URL ?? 'https://webaz.xyz').replace(/\/+$/, '');
+    const hasKey = !!(env.WEBAZ_API_KEY ?? '');
+    const lines = [
+        `webaz doctor — @seasonkoh/webaz v${SOFTWARE_VERSION}`,
+        `  mode:          ${mode}`,
+        `  api_key:       ${hasKey ? 'set (network transactions enabled)' : 'not set (network read-only; set WEBAZ_API_KEY to transact)'}`,
+        `  api_url:       ${url}`,
+    ];
+    if (mode === 'sandbox') {
+        lines.push('  reachability:  skipped (sandbox = local SQLite, isolated from the live network)');
+        return lines.join('\n');
+    }
+    let reach;
+    try {
+        const r = await fetchImpl(`${url}/api/protocol-status`, { signal: AbortSignal.timeout(5000) });
+        reach = r.ok ? `ok (${url} reachable, HTTP ${r.status})` : `degraded (HTTP ${r.status})`;
+    }
+    catch (e) {
+        reach = `unreachable (${e.message})`;
+    }
+    lines.push(`  reachability:  ${reach}`);
+    return lines.join('\n');
+}

package/dist/layer1-agent/L1-1-mcp-server/network-mode.js

@@ -0,0 +1,80 @@
+/**
+ * RFC-003 — MCP NETWORK-mode tool gating (pure, testable; no I/O).
+ *
+ * In `network` / `network_readonly` mode the dispatcher hard-fails any tool that is
+ * NOT allowed through, so an un-migrated tool can't silently fall back to the local
+ * sandbox (a write would become a phantom op). This module holds the allow-sets +
+ * the predicate so the gate decision is unit-testable without booting the stdio
+ * server. (Extracted from server.ts; behavior unchanged except adding webaz_pair.)
+ */
+/**
+ * 解析运行模式(纯函数,单一真相源 —— server.ts 的 MODE + CLI 的 --mode/--doctor 都用它,杜绝漂移)。
+ * 显式 WEBAZ_MODE(network|network_readonly|sandbox)优先;否则有 api_key → network,无 key → network_readonly。
+ * sandbox 只能显式设置(无 key 【不】回落 sandbox)。key 的真伪判定与 server.ts 一致(WEBAZ_API_KEY ?? '' 的真值性)。
+ */
+export function resolveMode(env) {
+    const m = (env.WEBAZ_MODE ?? '').toLowerCase();
+    if (m === 'network' || m === 'sandbox' || m === 'network_readonly')
+        return m;
+    return (env.WEBAZ_API_KEY ?? '') ? 'network' : 'network_readonly';
+}
+// Tools that talk to the live webaz.xyz network (Bearer api_key where needed).
+// Un-listed tools run sandbox (local). `_mode` annotation = network for these.
+export const NETWORK_TOOLS = new Set([
+    // RFC-020 onboarding/auth: pairing is the no-key credential bootstrap — it MUST be
+    // reachable in the default network_readonly install (you pair to GET a credential).
+    'webaz_pair',
+    'webaz_price_history',
+    'webaz_leaderboard',
+    'webaz_verify_price',
+    'webaz_place_order',
+    'webaz_list_product',
+    'webaz_update_order',
+    'webaz_search',
+    'webaz_get_status',
+    'webaz_feedback',
+    'webaz_contribute',
+    // Batch 1(只读 + 低危自身写):走 webaz.xyz Bearer api_key。
+    'webaz_notifications',
+    'webaz_nearby',
+    'webaz_profile',
+    'webaz_shareables',
+    'webaz_mykey',
+    // Batch 2(低危写,无钱无 escrow):走 webaz.xyz Bearer api_key。
+    'webaz_follows',
+    'webaz_like',
+    'webaz_blocklist',
+    'webaz_default_address',
+    'webaz_chat',
+    'webaz_rfq',
+    'webaz_referral',
+    // Batch 3(商务):
+    'webaz_secondhand',
+    'webaz_skill',
+    'webaz_skill_market',
+    'webaz_auction',
+    // Batch 4(资金/质押,守恒由服务端 RFC-014 保证;wallet 只读,写=Passkey 仅 PWA):
+    'webaz_wallet',
+    'webaz_trial',
+    'webaz_charity',
+    'webaz_bid',
+    'webaz_auto_bid',
+    // Batch 5(铁律/敏感):
+    'webaz_dispute',
+    'webaz_claim_verify',
+    'webaz_rotate_key',
+    'webaz_revoke_key',
+    // #1122:share_link 现有服务端端点 /api/share-link,可走网络。
+    'webaz_share_link',
+]);
+// Not in NETWORK_TOOLS but still allowed to run in NETWORK mode as self-aware /
+// onboarding tools (non-data ops): info = local introspection; register = redirect
+// the human to webaz.xyz. Everything else un-migrated hard-fails.
+export const NETWORK_SELF_AWARE = new Set(['webaz_info', 'webaz_register']);
+/**
+ * In NETWORK / network_readonly mode, may this tool proceed (vs migration-pending
+ * hard-fail)? True for migrated network tools and the self-aware onboarding tools.
+ */
+export function toolAllowedInNetworkMode(tool) {
+    return NETWORK_TOOLS.has(tool) || NETWORK_SELF_AWARE.has(tool);
+}