@seasonkoh/webaz 0.1.28 → 0.1.29

package/dist/runtime/webaz-schema-helpers.js

@@ -1846,3 +1846,107 @@ export function initAgentGrantAuthLogSchema(db) {
     db.exec(`CREATE INDEX IF NOT EXISTS idx_agal_grant ON agent_grant_auth_log(grant_id, ts)`);
     db.exec(`CREATE INDEX IF NOT EXISTS idx_agal_ts ON agent_grant_auth_log(ts)`);
 }
+/**
+ * pending_commission_escrow — opt-out promoter activation queue (§3.5b) + RFC-018 clearing ledger.
+ *
+ * Relocated VERBATIM from src/pwa/server.ts (RFC-018 PR1) so the table's whole schema is built once,
+ * in the early helper batch — never half-here / half-inline (the fresh-DB silent-fail铁律 bites a
+ * half-migration the hardest). RFC-018 adds two things, SCHEMA-ONLY (no settle / escrow read-write
+ * logic touched):
+ *   - `matures_at` column — the accrue-then-mature clock (= completed_at + return_days +
+ *     settlement.clearing_buffer_days); NULL until the PR2 clearing model writes it.
+ *   - `reversed` status value — a return inside the clearing window flips pending→reversed; it is a
+ *     TEXT value, so it needs no schema change (documented in the column comment).
+ * order_id stays NULLable for pv_pair rows (PR-1c-b).
+ *
+ * Migration, two independent cases (both idempotent, both skip when already current):
+ *   (a) order_id NOT NULL (pre-1c-b) → full rebuild — SQLite ADD COLUMN cannot relax a NOT NULL
+ *       constraint. Explicit-column INSERT maps the old rows; FK OFF/ON restores L0's global ON. The
+ *       rebuilt table already carries matures_at, so (b) then no-ops.
+ *   (b) missing matures_at (pre-RFC-018) → a cheap, NON-destructive `ALTER TABLE ADD COLUMN`. No
+ *       DROP, rows + indexes preserved. This is the common existing-DB path (every pre-RFC-018 DB,
+ *       incl. prod). We deliberately do NOT rebuild for an additive column — a money-path table on a
+ *       persistent prod volume should take the smallest safe migration. (Allowed here because the
+ *       complexity ratchet counts DDL in server.ts only, not this helper.)
+ */
+export function initPendingCommissionEscrowSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS pending_commission_escrow (
+      id                       INTEGER PRIMARY KEY AUTOINCREMENT,
+      recipient_user_id        TEXT NOT NULL,
+      order_id                 TEXT,                                 -- NULL for pv_pair (PR-1c-b)
+      amount                   REAL NOT NULL,    -- WAZ amount
+      attribution_path         TEXT NOT NULL,    -- 'L1' | 'L2' | 'L3' | 'pv_pair' | etc.
+      status                   TEXT NOT NULL DEFAULT 'pending',  -- 'pending' | 'settled' | 'expired' | 'reversed' (RFC-018)
+      created_at               INTEGER NOT NULL,
+      expires_at               INTEGER NOT NULL,
+      settled_at               INTEGER,
+      expired_to_charity_at    INTEGER,
+      matures_at               INTEGER,          -- RFC-018: completed_at + return_days + clearing_buffer_days; NULL until the clearing model writes it
+      FOREIGN KEY (recipient_user_id) REFERENCES users(id),
+      FOREIGN KEY (order_id) REFERENCES orders(id)
+    )
+  `);
+    (function migrateEscrowSchema() {
+        const cols = db.prepare("PRAGMA table_info(pending_commission_escrow)").all();
+        if (cols.length === 0)
+            return; // table absent (shouldn't happen — CREATE above just ran)
+        const orderIdCol = cols.find(c => c.name === 'order_id');
+        const orderIdNotNull = !!orderIdCol && orderIdCol.notnull === 1;
+        // (a) STRUCTURAL (pre-1c-b): order_id NOT NULL → nullable. Unavoidable full rebuild (ADD COLUMN
+        // cannot relax NOT NULL). The rebuilt table already includes matures_at, so (b) below no-ops.
+        if (orderIdNotNull) {
+            console.log('[pc-escrow-migrate] order_id NOT NULL — rebuilding table to allow NULL for pv_pair');
+            db.exec('PRAGMA foreign_keys = OFF');
+            db.transaction(() => {
+                db.exec(`
+          CREATE TABLE pending_commission_escrow_new (
+            id                       INTEGER PRIMARY KEY AUTOINCREMENT,
+            recipient_user_id        TEXT NOT NULL,
+            order_id                 TEXT,
+            amount                   REAL NOT NULL,
+            attribution_path         TEXT NOT NULL,
+            status                   TEXT NOT NULL DEFAULT 'pending',
+            created_at               INTEGER NOT NULL,
+            expires_at               INTEGER NOT NULL,
+            settled_at               INTEGER,
+            expired_to_charity_at    INTEGER,
+            matures_at               INTEGER,
+            FOREIGN KEY (recipient_user_id) REFERENCES users(id),
+            FOREIGN KEY (order_id) REFERENCES orders(id)
+          )
+        `);
+                // explicit columns: an older DB lacks matures_at → it defaults to NULL in _new (never SELECT *)
+                db.exec(`INSERT INTO pending_commission_escrow_new
+          (id, recipient_user_id, order_id, amount, attribution_path, status, created_at, expires_at, settled_at, expired_to_charity_at)
+          SELECT id, recipient_user_id, order_id, amount, attribution_path, status, created_at, expires_at, settled_at, expired_to_charity_at
+          FROM pending_commission_escrow`);
+                db.exec('DROP TABLE pending_commission_escrow');
+                db.exec('ALTER TABLE pending_commission_escrow_new RENAME TO pending_commission_escrow');
+            })();
+            db.exec('PRAGMA foreign_keys = ON');
+        }
+        // (b) ADDITIVE (pre-RFC-018): matures_at missing → cheap, non-destructive column add (no DROP;
+        // rows + indexes preserved). Idempotent: throws "duplicate column" once present (fresh DB, or
+        // just-rebuilt in (a)) → swallowed. This is the path every existing prod DB takes.
+        try {
+            db.exec('ALTER TABLE pending_commission_escrow ADD COLUMN matures_at INTEGER');
+        }
+        catch { /* column already exists */ }
+    })();
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_escrow_recipient ON pending_commission_escrow(recipient_user_id, status, expires_at)');
+    }
+    catch { }
+    try {
+        db.exec('CREATE INDEX IF NOT EXISTS idx_escrow_expiry ON pending_commission_escrow(status, expires_at)');
+    }
+    catch { }
+    // PR-1c-a: UNIQUE (recipient, order, path) defends against double-insert if settleCommission ever retries
+    // Note: NULL order_id (PR-1c-b pv_pair) is distinct in SQLite UNIQUE — idempotency for pv_pair relies
+    // on binary_score_records.settled_at instead (source-side dedup).
+    try {
+        db.exec('CREATE UNIQUE INDEX IF NOT EXISTS uniq_escrow_recipient_order_path ON pending_commission_escrow(recipient_user_id, order_id, attribution_path)');
+    }
+    catch { }
+}

package/dist/store-verification.js

@@ -0,0 +1,77 @@
+export const MAX_URL_LEN = 2048;
+export const MAX_PLATFORM_LEN = 60;
+export const MAX_NOTES_LEN = 500;
+const ACTIVE = "('issued','submitted','verified')";
+const getActive = (db, userId) => db.prepare(`SELECT * FROM store_verifications WHERE user_id = ? AND status IN ${ACTIVE} ORDER BY created_at DESC, rowid DESC LIMIT 1`).get(userId);
+function isStorableHttpUrl(url) {
+    if (typeof url !== 'string' || url.length === 0 || url.length > MAX_URL_LEN)
+        return false;
+    return /^https?:\/\/[^\s]+$/i.test(url.trim());
+}
+/** 卖家申请店铺认证 → issued(签发 code)。单一活跃 per seller。 */
+export function requestStoreVerification(db, args) {
+    const { id, userId, code } = args;
+    if (!id || !userId || !code)
+        return { ok: false, reason: 'missing id/userId/code' };
+    const platform = args.platform ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : null;
+    if (getActive(db, userId))
+        return { ok: false, reason: '已有进行中的店铺认证' };
+    db.prepare(`INSERT INTO store_verifications (id, user_id, code, platform, status, created_at, updated_at)
+    VALUES (?,?,?,?, 'issued', datetime('now'), datetime('now'))`).run(id, userId, code, platform);
+    return { ok: true, status: 'issued', code };
+}
+/** 卖家提交店铺外链 → submitted。要求有 issued 记录;链接仅存储(不抓取)。 */
+export function submitStoreVerificationLink(db, args) {
+    const url = String(args.externalUrl || '').trim();
+    if (!isStorableHttpUrl(url))
+        return { ok: false, reason: '请提交有效的 http(s) 店铺链接' };
+    const active = getActive(db, args.userId);
+    if (!active)
+        return { ok: false, reason: '请先申请店铺认证获取验证码' };
+    if (active.status === 'verified')
+        return { ok: false, reason: '店铺认证已通过,无需重复提交' };
+    const platform = args.platform != null ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : active.platform;
+    db.prepare(`UPDATE store_verifications SET external_url = ?, platform = ?, status = 'submitted', updated_at = datetime('now') WHERE id = ?`).run(url, platform, active.id);
+    return { ok: true, status: 'submitted' };
+}
+/** 真人 admin 核对结论 → verified | rejected。verified 时按 perProductExempt 置豁免位(默认 false)。仅从 submitted 流转。 */
+export function reviewStoreVerification(db, args) {
+    const { id, reviewerId, decision } = args;
+    if (!reviewerId)
+        return { ok: false, reason: 'reviewStoreVerification requires a human reviewerId' };
+    if (decision !== 'verified' && decision !== 'rejected')
+        return { ok: false, reason: 'decision must be verified|rejected' };
+    const row = db.prepare('SELECT * FROM store_verifications WHERE id = ?').get(id);
+    if (!row)
+        return { ok: false, reason: 'store verification not found' };
+    if (row.status === decision)
+        return { ok: true, status: decision, perProductExempt: row.per_product_exempt === 1, already: true };
+    if (row.status !== 'submitted')
+        return { ok: false, reason: `cannot review from status '${row.status}' (need submitted)` };
+    const exempt = decision === 'verified' && args.perProductExempt === true ? 1 : 0; // 仅 verified 才可置豁免;reject 一律 0
+    const notes = args.notes != null ? String(args.notes).slice(0, MAX_NOTES_LEN) : null;
+    db.prepare(`UPDATE store_verifications SET status = ?, per_product_exempt = ?, reviewed_by = ?, reviewed_at = datetime('now'), notes = ?, updated_at = datetime('now') WHERE id = ?`)
+        .run(decision, exempt, reviewerId, notes, id);
+    return { ok: true, status: decision, perProductExempt: exempt === 1 };
+}
+/** 卖家本人最新一条店铺认证(任意状态)。无 → null。 */
+export function getStoreVerification(db, userId) {
+    return db.prepare('SELECT * FROM store_verifications WHERE user_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1').get(userId) ?? null;
+}
+/** admin 队列:按 status 过滤(默认全部),最新在前。纯读。 */
+export function listStoreVerifications(db, opts = {}) {
+    if (opts.status)
+        return db.prepare(`SELECT * FROM store_verifications WHERE status = ? ORDER BY created_at DESC, rowid DESC`).all(opts.status);
+    return db.prepare(`SELECT * FROM store_verifications ORDER BY created_at DESC, rowid DESC`).all();
+}
+/** 硬门豁免读取:该卖家是否【已被豁免逐品验证】(店铺 verified 且 per_product_exempt=1)。供 direct-pay gate combiner。 */
+export function sellerExemptFromPerProduct(db, userId) {
+    return !!db.prepare("SELECT 1 FROM store_verifications WHERE user_id = ? AND status = 'verified' AND per_product_exempt = 1 LIMIT 1").get(userId);
+}
+export function toSellerStoreVerificationView(row) {
+    return {
+        id: row.id, code: row.code, platform: row.platform, external_url: row.external_url,
+        status: row.status, per_product_exempt: row.per_product_exempt === 1,
+        reviewed_at: row.reviewed_at, created_at: row.created_at, updated_at: row.updated_at,
+    }; // 故意省略 reviewed_by + notes
+}

package/dist/version.js

@@ -31,4 +31,4 @@ export const SOFTWARE_VERSION = pkg.version;
  *  safe for agents to ignore. Guarded by tests/test-contract-fingerprint.ts + docs/CONTRACT-LOCK.json.
  *  NB: the fingerprint hashes only §②/§① content; a change to the §④ entry document (e.g. agent_quickstart)
  *  is integrator-observable but NOT fingerprinted, so it must be registered here by hand. */
-export const CONTRACT_VERSION = 5;
+export const CONTRACT_VERSION = 8;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "[PRE-LAUNCH] Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools. ⚠️ Repository currently private until W8 public launch — GitHub links may return 404. See https://webaz.xyz for status.",
   "main": "dist/mcp.js",
   "bin": {
@@ -27,6 +27,7 @@
     "routes:seam-check": "tsx scripts/routes-seam-guard.ts",
     "guard:complexity": "tsx scripts/complexity-ratchet-guard.ts",
     "guard:pr-constraints": "tsx scripts/pr-constraints-guard.ts",
+    "guard:direct-pay-deposit": "tsx scripts/direct-pay-deposit-guard.ts",
     "pg:schema": "tsx scripts/gen-pg-schema.ts",
     "pg:verify": "tsx scripts/pg-schema-verify.ts",
     "test:pg-placeholders": "tsx scripts/test-pg-placeholders.ts",
@@ -49,6 +50,7 @@
     "test:admin-claim-marking-correction": "tsx scripts/test-admin-claim-marking-correction.ts",
     "test:contribution-facts-read": "tsx scripts/test-contribution-facts-read.ts",
     "ingest:admin-coordination": "tsx scripts/ingest-admin-coordination.ts",
+    "direct-pay:readiness": "tsx scripts/direct-pay-launch-readiness-report.ts",
     "correct:operator-claim-marking": "tsx scripts/correct-operator-claim-marking.ts",
     "test:admin-operator-claim-workflow": "tsx scripts/test-admin-operator-claim-workflow.ts",
     "test:admin-operator-claim-lifecycle": "tsx scripts/test-admin-operator-claim-lifecycle.ts",
@@ -84,13 +86,80 @@
     "test:agent-grant-mcp-consume": "tsx scripts/test-agent-grant-mcp-consume.ts",
     "test:connected-agents-read": "tsx scripts/test-connected-agents-read.ts",
     "test:connected-agents-ui": "tsx scripts/test-connected-agents-ui.ts",
+    "test:leaderboard-anon-projection": "tsx scripts/test-leaderboard-anon-projection.ts",
+    "test:i18n-default-language": "tsx scripts/test-i18n-default-language.ts",
+    "test:reputation-handle-resolution": "tsx scripts/test-reputation-handle-resolution.ts",
+    "test:clearing-escrow-schema": "tsx scripts/test-clearing-escrow-schema.ts",
+    "test:clearing-commission": "tsx scripts/test-clearing-commission.ts",
+    "test:clearing-surfaces": "tsx scripts/test-clearing-surfaces.ts",
+    "test:returns-aware-counts": "tsx scripts/test-returns-aware-counts.ts",
     "test:mcp-auth-firebreak": "tsx scripts/test-mcp-auth-firebreak.ts",
+    "test:mcp-mode-honesty": "tsx scripts/test-mcp-mode-honesty.ts",
+    "test:mcp-cli": "tsx scripts/test-mcp-cli.ts",
+    "test:currency-display": "tsx scripts/test-currency-display.ts",
+    "test:currency-schema-flip": "tsx scripts/test-currency-schema-flip.ts",
     "test:proposal-admin-ui": "tsx scripts/test-proposal-admin-ui.ts",
-    "check:pwa-syntax": "node --check src/pwa/public/app.js && node --check src/pwa/public/app-admin.js && node --check src/pwa/public/app-contribution.js && node --check src/pwa/public/app-ai.js && node --check src/pwa/public/app-discover.js && node --check src/pwa/public/app-profile.js && node --check src/pwa/public/app-account.js && node --check src/pwa/public/app-shop.js && node --check src/pwa/public/app-listings.js && node --check src/pwa/public/app-seller.js && node --check src/pwa/public/app-agents.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
+    "check:pwa-syntax": "node --check src/pwa/public/app.js && node --check src/pwa/public/app-admin.js && node --check src/pwa/public/app-contribution.js && node --check src/pwa/public/app-ai.js && node --check src/pwa/public/app-discover.js && node --check src/pwa/public/app-profile.js && node --check src/pwa/public/app-account.js && node --check src/pwa/public/app-shop.js && node --check src/pwa/public/app-listings.js && node --check src/pwa/public/app-external-links.js && node --check src/pwa/public/app-product-media.js && node --check src/pwa/public/app-create-kinds.js && node --check src/pwa/public/app-price.js && node --check src/pwa/public/app-seller.js && node --check src/pwa/public/app-agents.js && node --check src/pwa/public/app-direct-pay.js && node --check src/pwa/public/app-direct-pay-readiness.js && node --check src/pwa/public/app-direct-pay-deferral.js && node --check src/pwa/public/app-direct-pay-deferral-admin.js && node --check src/pwa/public/app-direct-pay-product-verify.js && node --check src/pwa/public/app-direct-pay-store-verify.js && node --check src/pwa/public/app-direct-pay-compliance.js && node --check src/pwa/public/app-direct-pay-fee-ops.js && node --check src/pwa/public/app-direct-pay-fee-center.js && node --check src/pwa/public/app-direct-pay-accounts.js && node --check src/pwa/public/app-direct-pay-buyer.js && node --check src/pwa/public/app-prelaunch-waz.js && node --check src/pwa/public/app-chat-poll.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
+    "test:create-kinds": "tsx scripts/test-create-kinds.ts",
+    "test:secondhand-photo-authenticity": "tsx scripts/test-secondhand-photo-authenticity.ts",
+    "test:secondhand-detail-alignment": "tsx scripts/test-secondhand-detail-alignment.ts",
+    "test:order-status-timeline-i18n": "tsx scripts/test-order-status-timeline-i18n.ts",
+    "test:leaderboard-nav-handle": "tsx scripts/test-leaderboard-nav-handle.ts",
+    "test:fx-rates": "tsx scripts/test-fx-rates.ts",
+    "test:fx-price-display": "tsx scripts/test-fx-price-display.ts",
+    "test:fx-price-buypage": "tsx scripts/test-fx-price-buypage.ts",
+    "test:fx-price-listings": "tsx scripts/test-fx-price-listings.ts",
+    "test:fx-price-seller-ui": "tsx scripts/test-fx-price-seller-ui.ts",
+    "test:prelaunch-banner-nav": "tsx scripts/test-prelaunch-banner-nav.ts",
     "test:rewards-vs-contribution-copy": "tsx scripts/test-rewards-vs-contribution-copy.ts",
     "test:invite-code-narrowing": "tsx scripts/test-invite-code-narrowing.ts",
     "test:shop-referral-attribution": "tsx scripts/test-shop-referral-attribution.ts",
     "test:money-units": "tsx scripts/test-money-units.ts",
+    "test:direct-pay-ledger": "tsx scripts/test-direct-pay-ledger.ts",
+    "test:deposit-rails": "tsx scripts/test-deposit-rails.ts",
+    "test:direct-pay-timeouts": "tsx scripts/test-direct-pay-timeouts.ts",
+    "test:direct-pay-actions": "tsx scripts/test-direct-pay-actions.ts",
+    "test:direct-pay-eligibility": "tsx scripts/test-direct-pay-eligibility.ts",
+    "test:direct-receive-deposits": "tsx scripts/test-direct-receive-deposits.ts",
+    "test:direct-receive-accounts": "tsx scripts/test-direct-receive-accounts.ts",
+    "test:direct-receive-account-endpoints": "tsx scripts/test-direct-receive-account-endpoints.ts",
+    "test:direct-pay-order-qr": "tsx scripts/test-direct-pay-order-qr.ts",
+    "test:direct-pay-order-redaction": "tsx scripts/test-direct-pay-order-redaction.ts",
+    "guard:direct-pay-order-reader": "tsx scripts/direct-pay-order-reader-guard.ts",
+    "test:direct-receive-instruction": "tsx scripts/test-direct-receive-instruction.ts",
+    "test:direct-receive-production-confirm": "tsx scripts/test-direct-receive-production-confirm.ts",
+    "test:direct-receive-deferral": "tsx scripts/test-direct-receive-deferral.ts",
+    "test:direct-pay-base-bond-entry": "tsx scripts/test-direct-pay-base-bond-entry.ts",
+    "test:direct-pay-order-snapshot-schema": "tsx scripts/test-direct-pay-order-snapshot-schema.ts",
+    "test:direct-pay-ui": "tsx scripts/test-direct-pay-ui.ts",
+    "test:i18n-labels": "tsx scripts/test-i18n-discover-dispute-labels.ts",
+    "test:listing-product-type": "tsx scripts/test-listing-product-type.ts",
+    "test:external-links": "tsx scripts/test-product-external-links.ts",
+    "test:thumb-endpoint": "tsx scripts/test-product-thumb-endpoint.ts",
+    "test:list-thumbnails": "tsx scripts/test-list-thumbnails.ts",
+    "check:i18n-dup": "tsx scripts/check-i18n-no-dup-keys.ts",
+    "test:i18n-dup-gate": "tsx scripts/test-i18n-dup-gate.ts",
+    "test:merchant-bond": "tsx scripts/test-merchant-bond-domain.ts",
+    "test:merchant-bond-exposure": "tsx scripts/test-merchant-bond-exposure.ts",
+    "test:direct-pay-fee-ar": "tsx scripts/test-direct-pay-fee-ar.ts",
+    "test:direct-pay-disclosure-acks": "tsx scripts/test-direct-pay-disclosure-acks.ts",
+    "test:direct-pay-create": "tsx scripts/test-direct-pay-create.ts",
+    "test:direct-pay-deferral-quota": "tsx scripts/test-direct-pay-deferral-quota.ts",
+    "test:product-verification": "tsx scripts/test-product-verification.ts",
+    "test:product-verification-routes": "tsx scripts/test-product-verification-routes.ts",
+    "test:store-verification": "tsx scripts/test-store-verification.ts",
+    "test:store-verification-routes": "tsx scripts/test-store-verification-routes.ts",
+    "test:direct-pay-launch-summary": "tsx scripts/test-direct-pay-launch-summary.ts",
+    "test:product-verification-reverify": "tsx scripts/test-product-verification-reverify.ts",
+    "test:direct-pay-controls": "tsx scripts/test-direct-pay-controls.ts",
+    "test:direct-pay-aml-monitor": "tsx scripts/test-direct-pay-aml-monitor.ts",
+    "test:direct-pay-aml-review": "tsx scripts/test-direct-pay-aml-review.ts",
+    "test:direct-pay-compliance-ingress": "tsx scripts/test-direct-pay-compliance-ingress.ts",
+    "test:direct-pay-bond-rail-clearance": "tsx scripts/test-direct-pay-bond-rail-clearance.ts",
+    "test:direct-pay-launch-readiness": "tsx scripts/test-direct-pay-launch-readiness.ts",
+    "test:direct-pay-readiness-routes": "tsx scripts/test-direct-pay-readiness-routes.ts",
+    "test:direct-pay-deferral-routes": "tsx scripts/test-direct-pay-deferral-routes.ts",
+    "test:direct-pay-disclosures": "tsx scripts/test-direct-pay-disclosures.ts",
     "test:identity-claim-ui": "tsx scripts/test-identity-claim-ui.ts",
     "test:identity-claim-discovery": "tsx scripts/test-identity-claim-discovery.ts",
     "test:operator-ingest-guards": "tsx scripts/test-operator-ingest-guards.ts",