@seasonkoh/webaz 0.1.28 → 0.1.29

package/dist/pwa/public/index.html

@@ -51,8 +51,25 @@
   <script src="/app-account.js"></script>
   <script src="/app-shop.js"></script>
   <script src="/app-listings.js"></script>
+  <script src="/app-external-links.js"></script>
+  <script src="/app-product-media.js"></script>
+  <script src="/app-create-kinds.js"></script>
+  <script src="/app-price.js"></script>
   <script src="/app-seller.js"></script>
   <script src="/app-agents.js"></script>
+  <script src="/app-direct-pay.js"></script>
+  <script src="/app-direct-pay-readiness.js"></script>
+  <script src="/app-direct-pay-deferral.js"></script>
+  <script src="/app-direct-pay-deferral-admin.js"></script>
+  <script src="/app-direct-pay-product-verify.js"></script>
+  <script src="/app-direct-pay-store-verify.js"></script>
+  <script src="/app-direct-pay-compliance.js"></script>
+  <script src="/app-direct-pay-fee-ops.js"></script>
+  <script src="/app-direct-pay-fee-center.js"></script>
+  <script src="/app-direct-pay-accounts.js"></script>
+  <script src="/app-direct-pay-buyer.js"></script>
+  <script src="/app-prelaunch-waz.js"></script>
+  <script src="/app-chat-poll.js"></script>
   <script src="/app.js"></script>
 </body>
 </html>

package/dist/pwa/public/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "WebAZ Protocol API",
     "version": "0.4.14",
-    "description": "Auto-generated endpoint inventory (673 endpoints, 17 with full schema). See docs/ for design context."
+    "description": "Auto-generated endpoint inventory (717 endpoints, 17 with full schema). See docs/ for design context."
   },
   "servers": [
     {
@@ -605,6 +605,227 @@
         ]
       }
     },
+    "/api/admin/direct-receive/aml-flags": {
+      "post": {
+        "summary": "POST /api/admin/direct-receive/aml-flags",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/aml-flags/:id/review": {
+      "post": {
+        "summary": "route 只做 auth + gate + 参数校验 + 调 reviewAmlFlag(唯一 review writer,原子改 flag + 写 audit)。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/deferrals": {
+      "get": {
+        "summary": "GET /api/admin/direct-receive/deferrals?status=pending — ROOT 审批队列(默认全部;可按 status 过滤)。纯读。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/deferrals/:id/approve": {
+      "post": {
+        "summary": "Passkey purpose_data 绑定【完整审批条款】(deferral_id + reduced_quota_factor + grace_days):签 A 批 B / 改条款一律拒。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/deferrals/:id/reject": {
+      "post": {
+        "summary": "POST /api/admin/direct-receive/deferrals/:id/reject — ROOT + 真人 Passkey 拒绝缓交。purpose_data 绑 deferral_id。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/deposits/:id/confirm-production": {
+      "post": {
+        "summary": "当前恒 fail-closed(无 legal-cleared rail → assert 抛 → PRODUCTION_RAIL_NOT_CLEARED)。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/fee-account/:seller_id": {
+      "get": {
+        "summary": "只读诊断,不写、无 Passkey(读不授权能力);卖家私密财务,买家/卖家拿不到此 admin 视图。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/fee-adjust": {
+      "post": {
+        "summary": "≠ 退款(不动真钱,只调记账)。purpose_data 绑 seller_id+delta_units+reason。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/fee-prepay": {
+      "post": {
+        "summary": "不碰 buyer wallet/escrow/order/settlement/refund;非买家 escrow/保证金/penalty。本轮无\"余额退款\"(仅正向预付款登记)。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/fee-refund": {
+      "post": {
+        "summary": "amount ≤ 当前 available(helper 同事务校验)。append-only + audit。purpose_data 绑 seller_id+amount_units+method+evidence_ref。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/kyb-reviews": {
+      "post": {
+        "summary": "Passkey purpose_data 绑定【完整写入内容】(user_id+status+provider_ref+expires_at):签 A 写 B 一律拒。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/product-verifications": {
+      "get": {
+        "summary": "GET /api/admin/direct-receive/product-verifications?status=submitted — ROOT 审核队列(默认全部)。纯读。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/product-verifications/:id/review": {
+      "post": {
+        "summary": "Passkey purpose_data 绑 verification_id + decision:签 A 用 B / 改结论一律拒。verify = 放行该产品直付(逐品,绝不放行全部)。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/readiness": {
+      "post": {
+        "summary": "含 KYB/sanctions/AML/base-bond/rail clearance 全细节)。只读诊断(不写库、不 flip launch);ROOT 专用,买家/卖家拿不到。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/sanctions-screenings": {
+      "post": {
+        "summary": "purpose_data 绑定 user_id+status+provider_ref+expires_at。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/store-verifications": {
+      "get": {
+        "summary": "GET /api/admin/direct-receive/store-verifications?status=submitted — ROOT 审核队列(默认全部)。纯读。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/admin/direct-receive/store-verifications/:id/review": {
+      "post": {
+        "summary": "POST /api/admin/direct-receive/store-verifications/:id/review — ROOT + 真人 Passkey 核店铺 + 勾选逐品豁免。",
+        "tags": [
+          "admin"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
     "/api/admin/disputes": {
       "get": {
         "summary": "GET /api/admin/disputes",
@@ -3242,6 +3463,241 @@
         ]
       }
     },
+    "/api/direct-pay/availability": {
+      "get": {
+        "summary": "GET /api/direct-pay/availability?product_id=... — 该商品(以 qty=1 计)当前是否可直付 + 不可用原因(脱敏)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-pay/disclosure-acks": {
+      "post": {
+        "summary": "POST — 记录一次 ack(D1 pre_select / D2 pre_confirm)。需现场真人(Passkey + gate token)。幂等(INSERT OR IGNORE)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-pay/disclosure-acks/:orderId": {
+      "get": {
+        "summary": "GET — 查询某单两次 ack 状态 + 买家视角披露文案(无卖家机制)。只读(本人),不需 gate token。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/accounts": {
+      "get": {
+        "summary": "── list（本人;不返回 raw QR,只含 qr_image_ref)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "post": {
+        "summary": "── add(Passkey)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/accounts/:id": {
+      "delete": {
+        "summary": "── deactivate(Passkey + owner)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "put": {
+        "summary": "── update(Passkey + owner)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/accounts/:id/qr": {
+      "get": {
+        "summary": "── QR preview(owner-only read;硬化转发;不存在/非本人 → 404)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "put": {
+        "summary": "── upload / replace QR(Passkey + owner;immutable content-addressed store)──",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/deferral": {
+      "get": {
+        "summary": "GET /api/direct-receive/deferral — 卖家本人缓交状态:最新一条申请(脱敏:不含 admin 身份)+ 是否当前生效(active)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "post": {
+        "summary": "POST /api/direct-receive/deferral — 卖家申请缓交。helper 强制:单一活跃、periodDays 正整数、id 唯一。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/my-fee-account": {
+      "get": {
+        "summary": "仅本人(requireSeller),买家拿不到;只读、不碰任何资金动作。供 seller fee center 展示。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/payment-instruction": {
+      "delete": {
+        "summary": "DELETE — 停用卖家当前 active 收款说明(软停用,留历史为 inactive)。停用后 create route fail-closed。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "get": {
+        "summary": "GET — 卖家本人当前 active 收款说明;无则 instruction:null(200,显式空状态,便于 UI 渲染“尚未设置”)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "put": {
+        "summary": "PUT — 设置/替换卖家当前 active 收款说明。instruction 必填、trim、长度上限;label 可选、trim、长度上限。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/product-verification": {
+      "post": {
+        "summary": "POST /api/direct-receive/product-verification — 卖家为某产品申领验证码(单一活跃 per product)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "put": {
+        "summary": "PUT /api/direct-receive/product-verification — 卖家为某产品提交外部商品链接(链接仅存储,WebAZ 不抓取)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/product-verifications": {
+      "get": {
+        "summary": "GET /api/direct-receive/product-verifications — 卖家本人所有产品的认证状态(逐产品)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/readiness": {
+      "get": {
+        "summary": "绝不下发 raw blocker / KYB·制裁·AML 分项(见 sellerDirectPayReadinessView)。只读 self(auth 用户自身 id)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/selectable-accounts": {
+      "get": {
+        "summary": "⚠️ 只下发元数据 method/currency/label —— instruction 原文与 QR 受披露门保护,D1/D2 ack 后才随订单快照给买家。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
+    "/api/direct-receive/store-verification": {
+      "get": {
+        "summary": "GET /api/direct-receive/store-verification — 卖家本人店铺认证状态(脱敏 DTO,含豁免位)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "post": {
+        "summary": "POST /api/direct-receive/store-verification — 卖家申领店铺验证码(单一活跃 per seller)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      },
+      "put": {
+        "summary": "PUT /api/direct-receive/store-verification — 卖家提交店铺外链(仅存储,不抓取)。",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
     "/api/disputes": {
       "get": {
         "summary": "仲裁员：查看所有开放争议",
@@ -3815,6 +4271,13 @@
         ]
       }
     },
+    "/api/fx/rates": {
+      "get": {
+        "summary": "GET /api/fx/rates",
+        "tags": [],
+        "security": []
+      }
+    },
     "/api/governance/onboarding-stats": {
       "get": {
         "summary": "无 auth — agent / 用户 / 第三方都可读;不暴露 PII",
@@ -4271,6 +4734,13 @@
         ]
       }
     },
+    "/api/manifests/:hash/thumb": {
+      "get": {
+        "summary": "Only the low-res thumbnail is exposed (never full-res / metadata / other columns).",
+        "tags": [],
+        "security": []
+      }
+    },
     "/api/manifests/by-anchor/:anchor": {
       "get": {
         "summary": "GET /api/manifests/by-anchor/:anchor",
@@ -4862,6 +5332,19 @@
         ]
       }
     },
+    "/api/orders/:id/direct-pay-qr": {
+      "get": {
+        "summary": "取【当时那一版】图字节。未 ack / 非买家 / 无 QR / 非 direct_p2p → 统一 404(不枚举,不泄露)。图字节不入 order JSON。",
+        "tags": [
+          "order"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
     "/api/orders/:id/force-timeout-check": {
       "post": {
         "summary": "手动触发超时判责（当事人）",
@@ -5364,6 +5847,17 @@
         "security": []
       }
     },
+    "/api/products/:id/external-links": {
+      "get": {
+        "summary": "array the seller workbench consumes; that stays untouched). Only public-safe columns are returned.",
+        "tags": [],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ]
+      }
+    },
     "/api/products/:id/get-or-create-share": {
       "post": {
         "summary": "获取或创建商品 shareable（被 sharePromoLink 用，走 /s/<id> 短链）",

package/dist/pwa/routes/admin-analytics.js

@@ -259,10 +259,12 @@ export function registerAdminAnalyticsRoutes(app, deps) {
         const nowSec = Math.floor(Date.now() / 1000);
         const escrowByStatus = await dbAll(`SELECT status, COUNT(*) AS n, COALESCE(SUM(amount),0) AS total
       FROM pending_commission_escrow GROUP BY status`);
+        // RFC-018: these "pending escrow" stats mean opt-out escrow (matures_at IS NULL); clearing rows
+        // (matures_at NOT NULL) don't expire-to-reserve and would mislabel "expiring soon".
         const escrowPendingByPath = await dbAll(`SELECT attribution_path, COUNT(*) AS n, COALESCE(SUM(amount),0) AS total
-      FROM pending_commission_escrow WHERE status='pending' GROUP BY attribution_path`);
+      FROM pending_commission_escrow WHERE status='pending' AND matures_at IS NULL GROUP BY attribution_path`);
         const expiringSoon = (await dbOne(`SELECT COUNT(*) AS n, COALESCE(SUM(amount),0) AS total
-      FROM pending_commission_escrow WHERE status='pending' AND expires_at <= ?`, [nowSec + 86400]));
+      FROM pending_commission_escrow WHERE status='pending' AND matures_at IS NULL AND expires_at <= ?`, [nowSec + 86400]));
         // 3. consent 版本:当前 major + 仍停留在旧 major 上的 opted-in 用户数(= auto_downgrade 候选)
         const currentMajor = await dbOne(`SELECT version, effective_at FROM rewards_consent_texts WHERE change_class='major' ORDER BY effective_at DESC LIMIT 1`);
         let staleConsentOptedIn = 0;