@seasonkoh/webaz 0.1.3 → 0.1.5

package/dist/layer0-foundation/L0-1-database/schema.js

@@ -22,7 +22,8 @@ export function initDatabase() {
     CREATE TABLE IF NOT EXISTS users (
       id          TEXT PRIMARY KEY,          -- 唯一ID，格式：usr_xxxx
       name        TEXT NOT NULL,
-      role        TEXT NOT NULL,             -- seller / buyer / logistics / reviewer / arbitrator / promoter
+      role        TEXT NOT NULL,             -- 当前激活角色
+      roles       TEXT DEFAULT '[]',         -- 拥有的所有角色（JSON数组）
       api_key     TEXT UNIQUE NOT NULL,      -- Agent 调用时用这个验证身份
       stake       REAL DEFAULT 0,            -- 当前质押金额（模拟货币）
       reputation  REAL DEFAULT 100,          -- 声誉分（满分100）
@@ -171,7 +172,13 @@ export function initDatabase() {
     );
 
   `);
-    console.log('✅ L0-1 数据库初始化完成：', DB_PATH);
+    // 迁移：为已有数据库添加 roles 列
+    try {
+        db.exec(`ALTER TABLE users ADD COLUMN roles TEXT DEFAULT '[]'`);
+    }
+    catch { /* 列已存在 */ }
+    db.exec(`UPDATE users SET roles = json_array(role) WHERE roles = '[]' OR roles IS NULL`);
+    console.error('✅ L0-1 数据库初始化完成：', DB_PATH);
     return db;
 }
 // 生成唯一 ID 的工具函数

package/dist/layer1-agent/L1-1-mcp-server/auth.js

@@ -7,7 +7,7 @@ export function authenticate(db, apiKey) {
     if (!apiKey || apiKey === '')
         return null;
     return db
-        .prepare('SELECT id, name, role, api_key FROM users WHERE api_key = ?')
+        .prepare('SELECT id, name, role, roles, api_key FROM users WHERE api_key = ?')
         .get(apiKey);
 }
 export function requireAuth(db, apiKey) {

package/dist/layer1-agent/L1-1-mcp-server/server.js

@@ -303,6 +303,38 @@ action 说明：
             required: ['action'],
         },
     },
+    {
+        name: 'webaz_mykey',
+        description: 'Recover your api_key by name, or view your profile and roles. Use this if you forgot your api_key.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                name: { type: 'string', description: 'The name you registered with' },
+            },
+            required: ['name'],
+        },
+    },
+    {
+        name: 'webaz_profile',
+        description: 'View your profile, manage roles (add a new role or switch active role). One account can hold multiple roles.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                api_key: { type: 'string', description: 'Your api_key' },
+                action: {
+                    type: 'string',
+                    enum: ['view', 'add_role', 'switch_role'],
+                    description: 'view: show profile & api_key | add_role: add a new role | switch_role: switch active role',
+                },
+                role: {
+                    type: 'string',
+                    enum: ['buyer', 'seller', 'logistics', 'arbitrator'],
+                    description: 'Role to add or switch to (required for add_role / switch_role)',
+                },
+            },
+            required: ['api_key', 'action'],
+        },
+    },
 ];
 // ─── 工具处理函数 ─────────────────────────────────────────────
 function handleInfo() {
@@ -347,7 +379,7 @@ function handleRegister(args) {
     }
     const id = generateId('usr');
     const apiKey = generateId('key');
-    db.prepare('INSERT INTO users (id, name, role, api_key) VALUES (?, ?, ?, ?)').run(id, name, role, apiKey);
+    db.prepare('INSERT INTO users (id, name, role, roles, api_key) VALUES (?, ?, ?, ?, ?)').run(id, name, role, JSON.stringify([role]), apiKey);
     db.prepare('INSERT INTO wallets (user_id, balance) VALUES (?, ?)').run(id, initialBalance);
     return {
         success: true,
@@ -938,6 +970,64 @@ function handleSkill(args) {
     }
     return { error: `未知 action：${action}。可选：list, publish, subscribe, unsubscribe, my_skills, my_subs` };
 }
+function handleMyKey(args) {
+    const name = args.name?.trim();
+    if (!name)
+        return { error: 'name is required' };
+    const users = db.prepare(`SELECT name, role, roles, api_key FROM users WHERE name = ? AND id != 'sys_protocol'`).all(name);
+    if (users.length === 0)
+        return { error: `No account found with name "${name}"` };
+    return {
+        found: users.length,
+        accounts: users.map(u => ({
+            name: u.name,
+            role: u.role,
+            roles: JSON.parse(u.roles || JSON.stringify([u.role])),
+            api_key: u.api_key,
+        })),
+        tip: 'Keep your api_key safe — it is your identity on the protocol.',
+    };
+}
+function handleProfile(args) {
+    const auth = requireAuth(db, args.api_key);
+    if ('error' in auth)
+        return auth;
+    const { user } = auth;
+    const action = args.action;
+    const roles = JSON.parse(user.roles || JSON.stringify([user.role]));
+    if (action === 'view') {
+        const wallet = db.prepare('SELECT balance, staked, escrowed, earned FROM wallets WHERE user_id = ?').get(user.id);
+        return {
+            id: user.id,
+            name: user.name,
+            active_role: user.role,
+            roles,
+            api_key: user.api_key,
+            wallet,
+            tip: 'Use add_role to add a new role, switch_role to change your active role.',
+        };
+    }
+    const validRoles = ['buyer', 'seller', 'logistics', 'arbitrator'];
+    const role = args.role;
+    if (action === 'add_role') {
+        if (!validRoles.includes(role))
+            return { error: `Invalid role. Options: ${validRoles.join(', ')}` };
+        if (roles.includes(role))
+            return { error: `You already have the "${role}" role` };
+        roles.push(role);
+        db.prepare("UPDATE users SET roles = ?, updated_at = datetime('now') WHERE id = ?").run(JSON.stringify(roles), user.id);
+        return { success: true, active_role: user.role, roles, message: `Role "${role}" added. Use switch_role to activate it.` };
+    }
+    if (action === 'switch_role') {
+        if (!validRoles.includes(role))
+            return { error: `Invalid role. Options: ${validRoles.join(', ')}` };
+        if (!roles.includes(role))
+            return { error: `You don't have the "${role}" role yet. Use add_role first.` };
+        db.prepare("UPDATE users SET role = ?, updated_at = datetime('now') WHERE id = ?").run(role, user.id);
+        return { success: true, active_role: role, roles, message: `Switched to "${role}" mode.` };
+    }
+    return { error: `Unknown action: ${action}. Options: view, add_role, switch_role` };
+}
 // ─── 结算逻辑（买家确认后自动执行）──────────────────────────────
 function settleOrder(db, orderId) {
     const order = db.prepare('SELECT * FROM orders WHERE id = ?').get(orderId);
@@ -1042,6 +1132,12 @@ export async function startMCPServer() {
                 case 'webaz_skill':
                     result = handleSkill(args);
                     break;
+                case 'webaz_mykey':
+                    result = handleMyKey(args);
+                    break;
+                case 'webaz_profile':
+                    result = handleProfile(args);
+                    break;
                 default: result = { error: `未知工具：${name}` };
             }
         }

package/dist/pwa/server.js

@@ -64,9 +64,9 @@ app.post('/api/register', (req, res) => {
         return void res.json({ error: '角色无效' });
     const id = generateId('usr');
     const apiKey = generateId('key');
-    db.prepare('INSERT INTO users (id, name, role, api_key) VALUES (?,?,?,?)').run(id, name.trim(), role, apiKey);
+    db.prepare('INSERT INTO users (id, name, role, roles, api_key) VALUES (?,?,?,?,?)').run(id, name.trim(), role, JSON.stringify([role]), apiKey);
     db.prepare('INSERT INTO wallets (user_id, balance) VALUES (?,1000)').run(id);
-    res.json({ success: true, api_key: apiKey, user_id: id, name: name.trim(), role });
+    res.json({ success: true, api_key: apiKey, user_id: id, name: name.trim(), role, roles: [role] });
 });
 // 当前用户信息
 app.get('/api/me', (req, res) => {
@@ -74,7 +74,55 @@ app.get('/api/me', (req, res) => {
     if (!user)
         return;
     const wallet = db.prepare('SELECT * FROM wallets WHERE user_id = ?').get(user.id);
-    res.json({ ...user, api_key: undefined, wallet });
+    const roles = JSON.parse(user.roles || JSON.stringify([user.role]));
+    res.json({ ...user, api_key: undefined, roles, wallet });
+});
+// 个人资料：查看 API Key
+app.get('/api/profile', (req, res) => {
+    const user = auth(req, res);
+    if (!user)
+        return;
+    const wallet = db.prepare('SELECT balance, staked, escrowed, earned FROM wallets WHERE user_id = ?').get(user.id);
+    const roles = JSON.parse(user.roles || JSON.stringify([user.role]));
+    res.json({ id: user.id, name: user.name, role: user.role, roles, api_key: user.api_key, wallet });
+});
+// 添加角色
+app.post('/api/profile/add-role', (req, res) => {
+    const user = auth(req, res);
+    if (!user)
+        return;
+    const { role } = req.body;
+    const validRoles = ['buyer', 'seller', 'logistics', 'arbitrator'];
+    if (!validRoles.includes(role))
+        return void res.json({ error: '角色无效' });
+    const roles = JSON.parse(user.roles || JSON.stringify([user.role]));
+    if (roles.includes(role))
+        return void res.json({ error: '已拥有该角色' });
+    roles.push(role);
+    db.prepare("UPDATE users SET roles = ?, updated_at = datetime('now') WHERE id = ?").run(JSON.stringify(roles), user.id);
+    res.json({ success: true, roles });
+});
+// 切换激活角色
+app.post('/api/profile/switch-role', (req, res) => {
+    const user = auth(req, res);
+    if (!user)
+        return;
+    const { role } = req.body;
+    const roles = JSON.parse(user.roles || JSON.stringify([user.role]));
+    if (!roles.includes(role))
+        return void res.json({ error: '你还没有该角色，请先添加' });
+    db.prepare("UPDATE users SET role = ?, updated_at = datetime('now') WHERE id = ?").run(role, user.id);
+    res.json({ success: true, role, roles });
+});
+// 通过名字找回 API Key（Phase 0 无需验证，Phase 1 需邮箱/短信）
+app.post('/api/recover-key', (req, res) => {
+    const { name } = req.body;
+    if (!name?.trim())
+        return void res.json({ error: '请填写注册时使用的名称' });
+    const users = db.prepare("SELECT name, role, roles, api_key FROM users WHERE name = ? AND id != 'sys_protocol'").all(name.trim());
+    if (users.length === 0)
+        return void res.json({ error: '未找到该名称的账号' });
+    res.json({ found: users.length, accounts: users });
 });
 // 搜索商品（声誉权重排序）
 app.get('/api/products', (req, res) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools.",
   "main": "dist/mcp.js",
   "bin": {