@seasonkoh/webaz 0.1.28 → 0.1.30

package/dist/pwa/routes/shipping-templates.js

@@ -0,0 +1,219 @@
+import { parseShippingTemplate, loadTemplateJson, resolveShipping } from '../../shipping-templates.js';
+import { validateSaleRegionsInput, parseSaleRegionsRule, regionAllowedByRule, parsePlatformBlocklist } from '../../sale-regions.js'; // S1 可售区域(店铺+单品写入;gate 在 orders-create;S5 只读披露复用判定 + 与建单门同一 blocklist parser)
+import { validateFreeShippingThreshold } from '../../free-shipping.js'; // 营销域满额免邮(S2 返工:写入口暂列本设置面,规则/判定在 free-shipping.ts)
+import { validateImportDutyTerms, validateTaxLines, effectiveImportDutyTerms, effectiveTaxLines, parseTaxLines, taxLinesForRegion } from '../../trade-tax.js'; // S3 跨境税费/进口责任声明层(seller-declared,平台不算不收)
+import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js';
+export function registerShippingTemplateRoutes(app, deps) {
+    const { auth, errorRes } = deps;
+    app.post('/api/seller/shipping-template', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void errorRes(res, 403, 'SELLER_ONLY', '仅卖家可设置运费模板');
+        const b = req.body || {};
+        const touched = {};
+        if ('store_template' in b) {
+            const p = parseShippingTemplate(b.store_template);
+            if (!p.ok)
+                return void errorRes(res, 400, 'BAD_SHIPPING_TEMPLATE', p.error);
+            await dbRun('UPDATE users SET store_shipping_template = ? WHERE id = ?', [p.entries ? JSON.stringify(p.entries) : null, user.id]);
+            touched.store_template = p.entries;
+        }
+        if ('store_quote_ok' in b) { // PR-3:模板外地区询价 opt-in(店铺默认;直付轨生效)
+            if (b.store_quote_ok !== null && typeof b.store_quote_ok !== 'boolean')
+                return void errorRes(res, 400, 'BAD_QUOTE_OK', 'store_quote_ok 只允许 true|false|null');
+            await dbRun('UPDATE users SET store_shipping_quote_ok = ? WHERE id = ?', [b.store_quote_ok === null ? null : (b.store_quote_ok ? 1 : 0), user.id]);
+            touched.store_quote_ok = b.store_quote_ok;
+        }
+        if ('store_sale_regions' in b) { // S1 可售区域(店铺默认):{mode:'all'|'list', include?, exclude?};null=清除(不限)
+            const v = validateSaleRegionsInput(b.store_sale_regions);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_SALE_REGIONS', v.error);
+            await dbRun('UPDATE users SET store_sale_regions = ? WHERE id = ?', [v.json, user.id]);
+            touched.store_sale_regions = v.json ? JSON.parse(v.json) : null;
+        }
+        if ('product_id' in b && 'sale_regions' in b) { // S1 单品覆盖(优先于店铺;null=回落店铺)
+            const v = validateSaleRegionsInput(b.sale_regions);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_SALE_REGIONS', v.error);
+            const prodS = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prodS)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prodS.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品');
+            await dbRun('UPDATE products SET sale_regions = ? WHERE id = ?', [v.json, b.product_id]);
+            touched.product_sale_regions = v.json ? JSON.parse(v.json) : null;
+        }
+        if ('store_free_shipping_threshold' in b) { // 营销:满额免邮(店铺默认;null=清除)。券后货款≥阈值→运费商家承担
+            const v = validateFreeShippingThreshold(b.store_free_shipping_threshold);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_FREE_SHIPPING_THRESHOLD', v.error);
+            await dbRun('UPDATE users SET store_free_shipping_threshold = ? WHERE id = ?', [v.value, user.id]);
+            touched.store_free_shipping_threshold = v.value;
+        }
+        if ('product_id' in b && 'free_shipping_threshold' in b) { // 营销:单品覆盖(null=回落店铺)
+            const v = validateFreeShippingThreshold(b.free_shipping_threshold);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_FREE_SHIPPING_THRESHOLD', v.error);
+            const prodF = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prodF)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prodF.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品');
+            await dbRun('UPDATE products SET free_shipping_threshold = ? WHERE id = ?', [v.value, b.product_id]);
+            touched.product_free_shipping_threshold = v.value;
+        }
+        if ('store_import_duty_terms' in b) { // S3:DDP/DDU 进口责任声明(店铺默认;null=清除)
+            const v = validateImportDutyTerms(b.store_import_duty_terms);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_IMPORT_DUTY_TERMS', v.error);
+            await dbRun('UPDATE users SET store_import_duty_terms = ? WHERE id = ?', [v.value, user.id]);
+            touched.store_import_duty_terms = v.value;
+        }
+        if ('product_id' in b && 'import_duty_terms' in b) { // S3:单品覆盖(null=回落店铺)
+            const v = validateImportDutyTerms(b.import_duty_terms);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_IMPORT_DUTY_TERMS', v.error);
+            const prodD = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prodD)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prodD.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品');
+            await dbRun('UPDATE products SET import_duty_terms = ? WHERE id = ?', [v.value, b.product_id]);
+            touched.product_import_duty_terms = v.value;
+        }
+        if ('store_tax_lines' in b) { // S3:价内已含税声明(店铺默认;仅 'included';null=清除)
+            const v = validateTaxLines(b.store_tax_lines);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_TAX_LINES', v.error);
+            await dbRun('UPDATE users SET store_tax_lines = ? WHERE id = ?', [v.value, user.id]);
+            touched.store_tax_lines = v.value ? JSON.parse(v.value) : null;
+        }
+        if ('product_id' in b && 'tax_lines' in b) { // S3:单品覆盖(null=回落店铺)
+            const v = validateTaxLines(b.tax_lines);
+            if ('error' in v)
+                return void errorRes(res, 400, 'BAD_TAX_LINES', v.error);
+            const prodT = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prodT)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prodT.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品');
+            await dbRun('UPDATE products SET tax_lines = ? WHERE id = ?', [v.value, b.product_id]);
+            touched.product_tax_lines = v.value ? JSON.parse(v.value) : null;
+        }
+        if ('product_id' in b && 'quote_ok' in b) {
+            if (b.quote_ok !== null && typeof b.quote_ok !== 'boolean')
+                return void errorRes(res, 400, 'BAD_QUOTE_OK', 'quote_ok 只允许 true|false|null');
+            const prodQ = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prodQ)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prodQ.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品');
+            await dbRun('UPDATE products SET shipping_quote_ok = ? WHERE id = ?', [b.quote_ok === null ? null : (b.quote_ok ? 1 : 0), b.product_id]);
+            touched.product_quote_ok = b.quote_ok;
+        }
+        if ('template' in b) { // 单品运费模板:仅在显式带 template 时进入 —— 关闭整类隐患(此前 'product_id' in b 会让 {product_id, store_*} 等组合尾随进来把模板静默清成 NULL;审计 P2)。清除走 {product_id, template:null}('template' in b 成立)
+            if (!b.product_id)
+                return void errorRes(res, 400, 'MISSING_PRODUCT_ID', '设置单品运费模板须带 product_id');
+            const p = parseShippingTemplate(b.template);
+            if (!p.ok)
+                return void errorRes(res, 400, 'BAD_SHIPPING_TEMPLATE', p.error);
+            const prod = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!prod)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (prod.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品的运费模板');
+            await dbRun('UPDATE products SET shipping_template = ? WHERE id = ?', [p.entries ? JSON.stringify(p.entries) : null, b.product_id]);
+            touched.product_template = p.entries;
+        }
+        if (Object.keys(touched).length === 0)
+            return void errorRes(res, 400, 'NOTHING_TO_SET', '未提供任何设置项');
+        return void res.json({ success: true, ...touched });
+    });
+    // 卖家读自己的店铺级设置(设置 UI 回显):接单模式 + 运费模板 + 询价开关。
+    app.get('/api/seller/shipping-settings', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void errorRes(res, 403, 'SELLER_ONLY', '仅卖家');
+        const row = await dbOne('SELECT store_accept_mode, store_shipping_template, store_shipping_quote_ok, store_sale_regions, store_free_shipping_threshold, store_import_duty_terms, store_tax_lines FROM users WHERE id = ?', [user.id]);
+        return void res.json({
+            store_accept_mode: row?.store_accept_mode ?? null,
+            store_sale_regions: parseSaleRegionsRule(row?.store_sale_regions ?? null),
+            store_free_shipping_threshold: row?.store_free_shipping_threshold ?? null,
+            store_import_duty_terms: (row?.store_import_duty_terms === 'ddu' || row?.store_import_duty_terms === 'ddp') ? row.store_import_duty_terms : null,
+            store_tax_lines: parseTaxLines(row?.store_tax_lines ?? null),
+            store_template: loadTemplateJson(row?.store_shipping_template),
+            store_quote_ok: row?.store_shipping_quote_ok == null ? null : Number(row.store_shipping_quote_ok) === 1,
+        });
+    });
+    // 公开读:买家下单前查配送范围。生效 = 单品覆盖 ?? 店铺默认;template=null → 不按地区计费(下单不要求选地区)。
+    app.get('/api/products/:id/shipping-options', async (req, res) => {
+        const prod = await dbOne('SELECT id, seller_id, shipping_template, shipping_quote_ok, import_duty_terms, tax_lines, sale_regions, free_shipping_threshold FROM products WHERE id = ?', [req.params.id]);
+        if (!prod)
+            return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+        let entries = loadTemplateJson(prod.shipping_template);
+        let source = entries ? 'product' : null;
+        const seller = await dbOne('SELECT store_shipping_template, store_shipping_quote_ok, store_import_duty_terms, store_tax_lines, store_sale_regions, store_free_shipping_threshold FROM users WHERE id = ?', [prod.seller_id]);
+        if (!entries) {
+            entries = loadTemplateJson(seller?.store_shipping_template);
+            if (entries)
+                source = 'store';
+        }
+        const quoteOk = prod.shipping_quote_ok != null ? Number(prod.shipping_quote_ok) === 1 : Number(seller?.store_shipping_quote_ok) === 1;
+        // S3 税费/进口责任披露(买家下单前可见;卖家 seller-declared,平台不算不收)。
+        //   价内含税【按收货地区过滤】(?ship_to_region):目的区匹配项 + '*' 通用项;无地区参数=仅 '*'(只披露必然适用的,
+        //   不把不属于该目的地的税误示给买家)。DDP/DDU 是整单单一声明,不按区分。
+        const importDuty = effectiveImportDutyTerms(prod.import_duty_terms, seller?.store_import_duty_terms);
+        const shipToRegion = typeof req.query.ship_to_region === 'string' && req.query.ship_to_region.trim() ? req.query.ship_to_region.trim().toUpperCase() : null;
+        const taxLines = taxLinesForRegion(effectiveTaxLines(prod.tax_lines, seller?.store_tax_lines), shipToRegion);
+        // S5 买家下单前聚合(只读,复用 S1-S4 判定;不动订单金额/不收税)。
+        const saleRule = parseSaleRegionsRule(prod.sale_regions) ?? parseSaleRegionsRule(seller?.store_sale_regions ?? null); // 可售规则(商品??店铺)
+        // 平台合规名单:与建单门 gateSaleRegionForCreate 共用 parsePlatformBlocklist,坏配置 fail-closed 一致(建单 503 ⇄ 预检 platform_policy_invalid),
+        //   不再把坏配置当空名单静默放行(否则预检显示"可买"、提交才 503,与 create gate 不一致)。缺省 '[]'/无行=空名单=可售。
+        const pr = await dbOne("SELECT value FROM protocol_params WHERE key = 'trade.platform_region_blocklist'").catch(() => null);
+        const parsedBlock = parsePlatformBlocklist(pr ? pr.value : '[]');
+        const policyInvalid = !parsedBlock.ok;
+        const platformBlock = parsedBlock.ok ? parsedBlock.list : [];
+        const freeThreshold = (prod.free_shipping_threshold != null && Number(prod.free_shipping_threshold) > 0) ? Number(prod.free_shipping_threshold)
+            : (seller?.store_free_shipping_threshold != null && Number(seller.store_free_shipping_threshold) > 0 ? Number(seller.store_free_shipping_threshold) : null);
+        // 可售裁定(镜像建单 gateSaleRegionForCreate 的判定,只读不抛):平台配置异常 > 平台合规 > 商家意愿。
+        const restricted = policyInvalid || !!saleRule || platformBlock.length > 0;
+        let sellable = { ok: true, reason: 'ok' };
+        if (policyInvalid)
+            sellable = { ok: false, reason: 'platform_policy_invalid' }; // 坏配置 fail-closed:显示不可下单,不诱导买家提交后才 503
+        else if (restricted) {
+            if (!shipToRegion)
+                sellable = { ok: false, reason: 'region_required' };
+            else if (platformBlock.includes(shipToRegion))
+                sellable = { ok: false, reason: 'product_restricted' }; // 平台合规,商家不可放宽
+            else if (saleRule && !regionAllowedByRule(saleRule, shipToRegion))
+                sellable = { ok: false, reason: 'region_not_for_sale' }; // 商家不销往
+        }
+        // 目的区运费裁定(有模板时;免邮阈值仅回传数值供 UI 提示"满 X 免邮",实际是否免取决于买家券后货款,建单时定)
+        let resolvedShipping = null;
+        if (entries && shipToRegion) {
+            const r = resolveShipping(entries, shipToRegion);
+            resolvedShipping = { covered: r.covered, fee: r.covered ? r.fee : null, est_days: r.est_days, quote_required: !r.covered && quoteOk };
+        }
+        return void res.json({
+            product_id: prod.id,
+            region_required: !!entries || restricted, // S5:可售/合规限制也需买家指定目的地(与建单 SHIP_REGION_REQUIRED 一致)
+            template: entries,
+            source,
+            sellable, // S5:{ ok, reason: ok|region_required|product_restricted|region_not_for_sale|platform_policy_invalid }
+            sale_regions: saleRule, // S5:生效可售规则(商品??店铺){mode:'list',include:[...]} | {mode:'all',exclude:[...]} | null —— UI 据此在无运费模板时也能生成地区入口
+            resolved_shipping: resolvedShipping, // S5:目的区运费裁定(covered/fee/est_days/quote_required)| null(无模板或未选区)
+            free_shipping_threshold: freeThreshold, // S5:生效满额免邮阈值(UI 提示"满 X 免邮";实际免取决于建单时券后货款)
+            import_duty_terms: importDuty, // 'ddu'(买家到境自付关税/税)| 'ddp'(卖家已含)| null(未声明)
+            tax_included_lines: taxLines, // 价内已含税声明(如 [{region:'SG',label:'GST',rate_pct:9,kind:'included'}])
+            tax_disclosure: 'seller_declared_platform_no_collect', // S5:税费/进口责任均为卖家声明,平台不代收代缴(直付非托管)
+            quote_outside_template: !!entries && quoteOk, // 直付轨:模板外地区可询价(卖家报运费/时效,确认后付款)
+            note: entries
+                ? (quoteOk ? '下单须选择收货地区;模板内地区运费自动计入,模板外地区(直付)可先询价再付款。' : '下单须选择收货地区;运费按模板计入总额(快照)。未覆盖地区暂不可下单。')
+                : (restricted ? '该商品设有可售地区限制,请选择收货地区确认。' : '该商品不按地区计运费。'),
+        });
+    });
+}

package/dist/pwa/routes/shops.js

@@ -1,4 +1,5 @@
 import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
+import { genuineSalePredicate } from '../../layer0-foundation/L0-2-state-machine/genuine-sale.js'; // RFC-018 PR4: 真实成交(排除全额退货)
 export function registerShopsRoutes(app, deps) {
     // db 已走 RFC-016 异步 seam(dbOne/dbAll/dbRun),不再直接用 deps.db
     const { auth } = deps;
@@ -20,7 +21,7 @@ export function registerShopsRoutes(app, deps) {
         const sellerId = String(seller.id);
         const products = await dbAll(`
       SELECT p.id, p.title, p.price, p.stock, p.category, p.images, p.has_variants, p.commission_rate,
-        (SELECT COUNT(1) FROM orders o WHERE o.product_id = p.id AND o.status = 'completed') as sales_count
+        (SELECT COUNT(1) FROM orders o WHERE o.product_id = p.id AND ${genuineSalePredicate('o')}) as sales_count
       FROM products p
       WHERE p.seller_id = ? AND p.status = 'active'
       ORDER BY sales_count DESC, p.created_at DESC

package/dist/pwa/routes/snf.js

@@ -1,5 +1,6 @@
 import { dbOne } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 import { snfSend, snfPullInbox, snfListInbox, snfAck, snfPendingCount, snfVerify, snfDesignate, snfGetDesignation, snfNack, snfListDeadLetter, snfRevive, } from '../../layer2-business/L2-7-snf/snf-engine.js';
+import { isEligibleArbitrator } from '../arbitrator-lifecycle.js'; // 仲裁能力唯一源=active 白名单(verify 是争议证据面,不认 legacy role)
 export function registerSnfRoutes(app, deps) {
     const { db, auth } = deps;
     app.post('/api/snf/send', (req, res) => {
@@ -105,7 +106,9 @@ export function registerSnfRoutes(app, deps) {
         if (!r)
             return void res.status(404).json({ error: '消息不存在' });
         const uid = user.id;
-        if (uid !== r.sender_id && uid !== r.recipient_id && user.role !== 'arbitrator' && user.role !== 'admin') {
+        // 仲裁员认 active 白名单(争议证据验签是仲裁工作面);legacy role 旁路移除 —— 否则 role-only/已吊销账号可按 id
+        //   探测任意用户间私信的存在性+签名有效性,而真·白名单仲裁员(role=buyer)反被 403。admin 保持原样。
+        if (uid !== r.sender_id && uid !== r.recipient_id && !isEligibleArbitrator(db, uid).ok && user.role !== 'admin') {
             return void res.status(403).json({ error: '无权验证' });
         }
         res.json(await snfVerify(db, req.params.id));

package/dist/pwa/routes/url-claim.js

@@ -119,8 +119,8 @@ export function registerUrlClaimRoutes(app, deps) {
                 db.prepare(`INSERT INTO products (
           id, seller_id, title, description, price, stock, category, stake_amount,
           specs, source_url, handling_hours, return_days, warranty_days,
-          commitment_hash, description_hash, price_hash, hashed_at, status, stake_locked_at
-        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'warehouse',datetime('now'))`)
+          commitment_hash, description_hash, price_hash, hashed_at, status, stake_locked_at, currency
+        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'warehouse',datetime('now'),'WAZ')`)
                     .run(productId, user.id, title, description, priceNum, Number(stock), category, stakeAmount, specsJson, url, Number(handling_hours), Number(return_days), Number(warranty_days), makeCommitmentHash(pFields), makeDescriptionHash({ title, description, specs: specsJson }), makePriceHash(priceNum, now), now);
                 db.prepare(`INSERT INTO product_external_links
           (id, product_id, url, source, verified, verify_note, platform, external_id, external_title)

package/dist/pwa/routes/users-public.js

@@ -25,6 +25,14 @@ export function registerUsersPublicRoutes(app, deps) {
                 return;
             userId = user.id;
         }
+        else {
+            // ref 三态(usr_xxx / permanent_code / @handle)必须解析为 canonical id;
+            // 漏掉解析会让 @handle/permanent_code 当字面 user_id 去查 → 永远落到默认 'new'。
+            const resolved = await resolveUserId(userId);
+            if (!resolved)
+                return void res.status(404).json({ error: 'user not found' });
+            userId = resolved;
+        }
         const row = await dbOne(`
       SELECT level, MAX(trust_score) as max_score
       FROM agent_reputation WHERE user_id = ?

package/dist/pwa/routes/wallet-read.js

@@ -181,8 +181,11 @@ export function registerWalletReadRoutes(app, deps) {
       FROM orders WHERE seller_id = ? AND status = 'completed'
     `, [user.id]));
         const totalIncome = commMap.l1.total + commMap.l2.total + commMap.l3.total + Number(sales.total);
+        // RFC-018: commission accrued but still in the clearing window (matures into commissions/total_income). Pure read.
+        const clearing = (await dbOne("SELECT COALESCE(SUM(amount),0) as s FROM pending_commission_escrow WHERE recipient_user_id = ? AND matures_at IS NOT NULL AND status = 'pending'", [user.id])).s;
         res.json({
             commissions: commMap,
+            commission_clearing: Number(clearing.toFixed(2)), // RFC-018: accrued, maturing after the return window (not yet paid)
             sales: { count: sales.cnt, total: Number(Number(sales.total).toFixed(2)) },
             total_income: Number(totalIncome.toFixed(2)),
         });

package/dist/pwa/routes/webauthn.js

@@ -74,13 +74,13 @@ export function registerWebauthnRoutes(app, deps) {
         if (!user)
             return;
         const purpose = String(req.body?.purpose || '').trim();
-        const allowed = new Set(['withdraw', 'change-password', 'reveal-key', 'region', 'delete_passkey', 'governance_apply', 'governance_activate', 'governance_resign', 'governance_appeal_resolve', 'rewards_apply', 'rewards_deactivate', 'identity_claim', 'operator_claim_unlink']);
+        const allowed = new Set(['withdraw', 'change-password', 'reveal-key', 'region', 'delete_passkey', 'governance_apply', 'governance_activate', 'governance_resign', 'governance_appeal_resolve', 'rewards_apply', 'rewards_deactivate', 'identity_claim', 'operator_claim_unlink', 'direct_pay_disclosure_ack', 'direct_pay_order_action', 'direct_receive_production_confirm', 'direct_receive_bond_refund', 'direct_pay_bond_slash', 'direct_pay_aml_review', 'direct_pay_kyb_ingress', 'direct_pay_sanctions_ingress', 'direct_pay_aml_ingress', 'direct_pay_admin_readiness', 'direct_pay_deferral_approve', 'direct_pay_deferral_reject', 'direct_pay_product_verify', 'direct_pay_store_verify', 'direct_pay_fee_prepay_record', 'direct_pay_fee_adjust', 'direct_pay_fee_refund', 'direct_receive_account_manage', 'platform_receive_account_manage', 'direct_pay_fee_prepay_reject', 'direct_pay_fee_prepay_request_approve', 'direct_pay_payment_info_reveal', 'arbitrator_grant', 'arbitrator_suspend', 'arbitrator_reinstate', 'arbitrator_revoke', 'arbitrate', 'agent_pair_approve', 'agent_permission_approve']);
         if (!allowed.has(purpose))
             return void res.status(400).json({ error: 'invalid purpose' });
         const purpose_data = req.body?.purpose_data ?? null;
         const creds = await dbAll('SELECT id, transports FROM webauthn_credentials WHERE user_id = ?', [user.id]);
         if (creds.length === 0)
-            return void res.status(403).json({ error: '尚未注册任何 Passkey' });
+            return void res.status(403).json({ error: '尚未注册任何 Passkey', error_code: 'NO_PASSKEY_REGISTERED' }); // 前端据此才提示注册;已注册者的取消/设备失败不误导去注册
         const opts = await generateAuthenticationOptions({
             rpID: rpId,
             // H-1: 闸门必须真正 UV，不接受 "硬件按一下" 兜底
@@ -196,5 +196,5 @@ export function registerWebauthnRoutes(app, deps) {
     // RFC-020 PR-B — agent delegation grants (issue/read/revoke). Co-registered with the
     // Passkey security routes so the money-dense server.ts stays untouched. Safe scopes
     // only; risk scopes default-hard-reject. Reuses db/auth/generateId from WebauthnDeps.
-    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk });
+    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk, requireHumanPresence });
 }