@seasonkoh/webaz 0.1.30 → 0.1.31

package/dist/layer1-agent/L1-1-mcp-server/server.js

@@ -308,22 +308,21 @@ export async function handlePair(args) {
         };
     }
     if (action === 'verify') {
-        // Consume the stored grant against a SAFE grant-gated route (read_public). The SERVER is authoritative:
-        // it re-checks active/expiry/revoked/subject-suspension/scope + audits on EVERY call. We resolve the
-        // bearer from the secret store and attach it; the raw token is never printed. Safe scopes only — no
-        // business tool and no risk scope is wired to grants here.
+        // Ask the server for the FULL grant (all authorized scopes/bundle/expiry/status), not just one capability.
+        // The SERVER is authoritative: it re-checks active/expiry/revoked/subject-suspension + audits on EVERY call.
+        // We resolve the bearer from the secret store and attach it; the raw token is never printed.
         const cred = resolveGrantCredential();
         if (!cred)
             return { status: 'not_paired', error_code: 'NO_GRANT_CREDENTIAL', hint: 'No stored grant. Run webaz_pair action="start", have the human approve, then action="complete".' };
-        const resp = await apiCall('/api/agent-grants/whoami', { method: 'GET', apiKey: cred.token });
+        const resp = await apiCall('/api/agent-grants/verify', { method: 'GET', apiKey: cred.token });
         if (resp.error) {
             return { status: 'grant_invalid', grant_id: cred.grant_id, error: resp.error, error_code: resp.error_code, hint: 'Grant is no longer valid (revoked / expired / suspended). Re-pair with webaz_pair action="start".' };
         }
         return {
             status: 'active',
-            grant: resp.grant, // SERVER-AUTHORITATIVE principal (grant_id/human_id/agent_label/capability)
+            grant: resp.grant, // SERVER-AUTHORITATIVE principal: grant_id/human_id/agent_label + ALL scopes[]/permission_bundle/expiry/status
             local_cache: { capabilities: cred.capabilities, expires_at: cred.expires_at }, // advisory only, may be stale — NOT authoritative
-            note: 'Grant verified LIVE by the server (per-call: active/expiry/revoked/subject-suspension/scope + audited). `grant` is authoritative; `local_cache` is advisory. Safe scopes only; no business tool or risk scope consumes this grant.',
+            note: 'Grant verified LIVE by the server (per-call: active/expiry/revoked/subject-suspension + audited). `grant.scopes` is the authoritative full scope list; `local_cache` is advisory. Safe scopes only.',
         };
     }
     if (action === 'request') {
@@ -654,7 +653,7 @@ Skipping is allowed but agent then carries price/stock-race risk itself.`,
         // was ~1336 chars, now ~650 chars
         description: `⚠️ **"list" = PUBLISH** (verb), NOT "list out". Seller-only catalog publish + manage.
 
-USE THIS when seller wants to publish / update / delist / relist / trash / delete own product, OR view own listings (action=mine). NOT for browsing marketplace — use webaz_search (anyone, no auth). Requires seller api_key. On create: system auto-suggests stake ~15% of price (buyer protection).
+USE THIS when seller wants to publish / update / delist / relist / trash / delete own product, OR view own listings (action=mine). NOT for browsing marketplace — use webaz_search (anyone, no auth). A paired delegation grant (webaz_pair — Catalog Agent) can **read** (action=mine, seller_products_read) and **create DRAFTS** (action=create, seller_product_draft → the product lands in your warehouse as status=warehouse, NOT public); **publishing (going active), updating, delisting and deleting stay human/api_key only** — a grant can never publish. A grant that lacks the scope gets a structured PERMISSION_REQUIRED (request it via webaz_pair action="request", then retry). On create: system auto-suggests stake ~15% of price (buyer protection).
 
 Fill agent_summary fields completely (brand/return/handling/warranty) — helps buyer agents compare. For "exclusive-price vs external-link" listing → PWA Web only (link claim needs crowd-verify).
 
@@ -671,7 +670,7 @@ Actions: create (title/description/price) | mine | update (product_id + changed
                 product_id: { type: 'string', description: 'Product ID (required for update/delist/relist/trash/delete)' },
                 title: { type: 'string', description: 'Product name (required for create; optional for update)' },
                 description: { type: 'string', description: 'Product description (required for create; optional for update)' },
-                price: { type: 'number', description: 'Price in WAZ (required for create; optional for update)' },
+                price: { type: 'number', description: 'Listing amount = the protocol/base amount (waz_usdc_rate 1.0). No currency is set at listing time. On the direct_p2p rail the actual payable DISPLAY follows the seller\'s declared receiving-account currency/instruction — USDC only when that account is USDC/USD, otherwise the seller\'s currency ("以收款说明为准"); WebAZ does not custody, route, validate, or restrict the payment method/currency. USDC is only the base/reference amount when applicable. Legacy escrow uses WAZ. Required for create; optional for update.' },
                 stock: { type: 'number', description: 'Stock, default 1' },
                 category: { type: 'string', description: 'Category (optional)' },
                 specs: {
@@ -724,9 +723,14 @@ Actions: create (title/description/price) | mine | update (product_id + changed
     {
         name: 'webaz_place_order',
         // was ~1117 chars, now ~580 chars
-        description: `Buyer places order. Buyer api_key required. Funds auto-enter protocol escrow.
+        description: `Buyer places order. Buyer api_key required.
 
-Order deadlines (absolute ISO timestamps in response):
+Payment rail (chosen here, at purchase — default: escrow):
+- **escrow** (default, legacy): funds auto-enter protocol escrow; the amount is the WAZ/protocol-unit price. The deadlines/auto-judge below apply.
+- **direct_p2p** (live, non-custodial direct pay): buyer pays the seller directly OFF-platform via the seller's chosen receiving account. The order amount is the protocol/base amount; the actual payable DISPLAY follows that account's declared currency/instruction (USDC only when the account is USDC/USD — otherwise the seller's currency, "以收款说明为准"). WebAZ does NOT custody, route, validate, or restrict the method/currency. Pass \`direct_receive_account_id\` (seller's receiving account). Eligibility — product/store verification, per-tx caps, valid account — is enforced by the SERVER; you do not decide it. Ineligible → the route's own gate error (e.g. DIRECT_PAY_PRODUCT_NOT_VERIFIED → use escrow).
+- onchain_full_stake / psp: PLANNED, not enabled → passing them returns PAYMENT_RAIL_DISABLED.
+
+Order deadlines (escrow rail; absolute ISO timestamps in response):
 - accept    T+48h  | ship  T+120h (72h after accept)
 - pickup    T+168h (48h after ship) | delivery T+336h (7d after pickup)
 - confirm   T+408h (72h after delivery)
@@ -743,6 +747,8 @@ Options:
                 api_key: { type: 'string', description: "Buyer's api_key (or omit and set the WEBAZ_API_KEY env var)" },
                 product_id: { type: 'string', description: 'Product ID to buy (from webaz_search)' },
                 quantity: { type: 'number', description: 'Quantity, default 1' },
+                payment_rail: { type: 'string', enum: ['escrow', 'direct_p2p'], description: 'Payment rail (default: escrow). "direct_p2p" = live non-custodial direct pay, off-platform; the payable display follows the seller\'s receiving-account currency/instruction (USDC only as the base/reference amount, WebAZ doesn\'t custody/route/validate/restrict currency) — requires direct_receive_account_id; the server runs the direct-pay eligibility gates (you do not). Other rails (onchain_full_stake / psp) are planned but disabled → PAYMENT_RAIL_DISABLED.' },
+                direct_receive_account_id: { type: 'string', description: 'For payment_rail="direct_p2p": the seller\'s direct-receive account id to pay. Ignored on escrow.' },
                 shipping_address: { type: 'string', description: 'Shipping address' },
                 notes: { type: 'string', description: 'Note to seller (optional)' },
                 session_token: {
@@ -1584,7 +1590,7 @@ Enums: **category** phone/computer/appliance/furniture/clothing/book/toy/sports/
                 description: { type: 'string', description: 'Description (≤1000 chars, optional)' },
                 category: { type: 'string', enum: ['phone', 'computer', 'appliance', 'furniture', 'clothing', 'book', 'toy', 'sports', 'other'], description: 'Category (required for publish)' },
                 condition_grade: { type: 'string', enum: ['brand_new', 'like_new', 'lightly_used', 'well_used', 'heavily_used'], description: 'Condition grade (required for publish)' },
-                price: { type: 'number', description: 'Price in WAZ 0-100000 (required for publish)' },
+                price: { type: 'number', description: 'Listing amount 0-100000 = protocol/base amount (waz_usdc_rate 1.0). On direct_p2p the payable display follows the seller\'s receiving-account currency/instruction (USDC only as the base/reference; WebAZ doesn\'t custody/route/validate/restrict currency); WAZ on legacy escrow. Rail chosen at purchase. Required for publish.' },
                 negotiable: { type: 'boolean', description: 'Negotiable flag (optional)' },
                 images: { type: 'array', items: { type: 'string' }, description: 'Images dataURL/URL array, ≥1 ≤9 (required for publish)' },
                 region: { type: 'string', description: 'Region (≤40 chars, optional)' },
@@ -2442,12 +2448,43 @@ async function handleVerifyPrice(args) {
         next: `调用 webaz_place_order 时传入 session_token="${token}" 确保以此价格成交`,
     };
 }
-async function handleListProduct(args) {
+export async function handleListProduct(args) {
     // Wave 3 audit P0: 加 action 分发 — agent 卖家能完整管理目录（不止 create）
     const action = args.action || 'create';
     const apiKey = resolveMcpApiKey(args);
-    if (!apiKey)
-        return { error: 'api_key required' };
+    if (!apiKey) {
+        // No human api_key — fall back to a delegation grant (Catalog Agent). A grant can READ the catalog
+        //   (action="mine", seller_products_read) and create DRAFTS (action="create"|"draft", seller_product_draft
+        //   → status=warehouse, NOT public). Publishing (active) + all other writes stay human/api_key only.
+        //   Missing scope → structured PERMISSION_REQUIRED (agent can request it, then retry).
+        if (!isNetworkMode())
+            return { error: 'a delegation grant requires NETWORK mode (grants live on webaz.xyz)', error_code: 'GRANT_REQUIRES_NETWORK' };
+        const cred = resolveGrantCredential();
+        if (!cred)
+            return { error: 'api_key required — or pair a delegation grant: webaz_pair action="start", have the human approve the catalog_agent bundle, then retry.', error_code: 'AUTH_REQUIRED' };
+        if (action === 'mine') {
+            const r = await apiCall('/api/agent/seller/products', { method: 'GET', apiKey: cred.token });
+            if (r.error_code === 'PERMISSION_REQUIRED')
+                return { ...r, retry_after_approval: true, hint: 'Your grant lacks seller_products_read. Run webaz_pair action="request" bundle="catalog_agent", have the human approve, then retry.' };
+            if (r.error)
+                return r;
+            return { found: r.count, products: r.products, seller_id: r.seller_id, via: 'delegation_grant', note: 'Read via your delegation grant (safe scope seller_products_read). Creating a DRAFT: action="create" (goes to your warehouse for you to review + publish).' };
+        }
+        if (action === 'create' || action === 'draft') {
+            const createFields = ['title', 'description', 'price', 'stock', 'category', 'specs', 'brand', 'model', 'source_url', 'source_price', 'external_title', 'weight_kg', 'ship_regions', 'handling_hours', 'estimated_days', 'fragile', 'return_days', 'return_condition', 'warranty_days', 'commission_rate', 'product_type', 'aliases', 'image_hashes', 'additional_links'];
+            const body = {};
+            for (const k of createFields)
+                if (args[k] !== undefined)
+                    body[k] = args[k];
+            const r = await apiCall('/api/agent/seller/products', { method: 'POST', apiKey: cred.token, body });
+            if (r.error_code === 'PERMISSION_REQUIRED')
+                return { ...r, retry_after_approval: true, hint: 'Your grant lacks seller_product_draft. Run webaz_pair action="request" bundle="catalog_agent", have the human approve, then retry.' };
+            if (r.error)
+                return r;
+            return { ...r, via: 'delegation_grant', note: 'Created as a DRAFT (status=warehouse — NOT public/sellable). Publishing stays with the human: they review it in 我的商品 → 仓库 and publish (a notification was sent). A grant can never publish.' };
+        }
+        return { error_code: 'GRANT_WRITE_NOT_ENABLED', note: `action="${action}" is not available via a delegation grant — a grant can READ (action="mine") and create DRAFTS (action="create" → warehouse). Publishing, updating, delisting, and deleting stay human/api_key only. Provide a seller api_key for those.` };
+    }
     // RFC-003 P2b: NETWORK 模式 — 卖家目录管理全部转发生产端点（单一真相源）
     if (toolBackend('webaz_list_product') === 'network') {
         const pid = args.product_id;
@@ -2610,9 +2647,20 @@ async function handleListProduct(args) {
         ...(extraResult ? { extra_fields_applied: !('error' in extraResult), extra_result: extraResult } : {}),
     };
 }
-async function handlePlaceOrder(args) {
+export async function handlePlaceOrder(args) {
+    // Payment rail (PWA-aligned). Only escrow (legacy) + direct_p2p (live, non-custodial) are enabled; the
+    //   other declared rails (onchain_full_stake / psp) are PLANNED placeholders — refuse them here, never
+    //   silently downgrade. The MCP does NOT judge direct-pay eligibility: it forwards payment_rail +
+    //   direct_receive_account_id to the SAME /api/orders route, which runs all the PWA gates.
+    const rail = args.payment_rail;
+    if (rail != null && rail !== 'escrow' && rail !== 'direct_p2p') {
+        return { error: `payment rail "${String(rail)}" is planned but not enabled — only "direct_p2p" (live, non-custodial direct pay) and "escrow" (legacy) are available.`, error_code: 'PAYMENT_RAIL_DISABLED' };
+    }
+    if (rail === 'direct_p2p' && !isNetworkMode()) {
+        return { error: 'direct_p2p (direct pay) requires NETWORK mode — it settles against a real seller receiving account on webaz.xyz.', error_code: 'DIRECT_PAY_REQUIRES_NETWORK' };
+    }
     // RFC-003 P2: network 模式转发到生产 POST /api/orders(前置,绕过本地 db)。
-    // 生产端做完整鉴权/库存/session/spend-cap/结算。
+    // 生产端做完整鉴权/库存/session/spend-cap/结算 + direct-pay gate(createDirectPayResponse)。
     if (toolBackend('webaz_place_order') === 'network') {
         const body = { product_id: args.product_id, quantity: Number(args.quantity ?? 1) };
         if (args.session_token != null)
@@ -2623,6 +2671,10 @@ async function handlePlaceOrder(args) {
             body.shipping_address = args.shipping_address;
         if (args.donation_pct != null)
             body.donation_pct = args.donation_pct;
+        if (args.payment_rail != null)
+            body.payment_rail = args.payment_rail; // escrow | direct_p2p (route forks + gates)
+        if (args.direct_receive_account_id != null)
+            body.direct_receive_account_id = args.direct_receive_account_id; // seller receiving acct (direct_p2p)
         return apiCall('/api/orders', { method: 'POST', apiKey: resolveMcpApiKey(args), body });
     }
     const auth = requireAuth(db, resolveMcpApiKey(args));

package/dist/pwa/public/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "WebAZ Protocol API",
     "version": "0.4.14",
-    "description": "Auto-generated endpoint inventory (776 endpoints, 17 with full schema). See docs/ for design context."
+    "description": "Auto-generated endpoint inventory (777 endpoints, 17 with full schema). See docs/ for design context."
   },
   "servers": [
     {
@@ -2774,6 +2774,16 @@
           }
         ],
         "x-webaz-grant-scope": "seller_products_read"
+      },
+      "post": {
+        "summary": "POST /api/agent/seller/products",
+        "tags": [],
+        "security": [
+          {
+            "grantBearer": []
+          }
+        ],
+        "x-webaz-grant-scope": "seller_product_draft"
       }
     },
     "/api/agent/verifiability": {

package/dist/pwa/routes/agent-grants.js

@@ -32,7 +32,7 @@ function consentView(p) {
     };
 }
 export function registerAgentGrantsRoutes(app, deps) {
-    const { db, auth, generateId, rateLimitOk, requireHumanPresence } = deps;
+    const { db, auth, generateId, rateLimitOk, requireHumanPresence, createProductDraftHandler } = deps;
     // PWA runtime self-init (MCP gets the tables via applyWebazRuntimeSchema). Idempotent.
     initAgentDelegationGrantsSchema(db);
     initAgentPairingSchema(db);
@@ -86,7 +86,9 @@ export function registerAgentGrantsRoutes(app, deps) {
                     error: `this action needs the "${scope}" permission, which your grant does not carry`,
                     error_code: 'PERMISSION_REQUIRED',
                     required_scope: scope,
+                    missing_scopes: [scope],
                     approval_url: '/#agent-approvals',
+                    retry_after_approval: true,
                     request_permission: { method: 'POST', endpoint: '/api/agent-grants/permission-requests', body: { scopes: [scope] } },
                     note: 'Ask the human to approve at approval_url; on approval your existing grant is expanded — then retry this request.',
                 });
@@ -115,6 +117,32 @@ export function registerAgentGrantsRoutes(app, deps) {
         const rows = await dbAll("SELECT id, title, status, price, currency, stock, category, created_at, updated_at FROM products WHERE seller_id = ? AND status != 'deleted' ORDER BY created_at DESC LIMIT 200", [p.human_id]);
         res.json({ seller_id: p.human_id, agent_label: p.agent_label, count: rows.length, products: rows, note: 'Seller-owned catalog read via delegation grant (safe scope seller_products_read). Read-only; no money/commission fields.' });
     });
+    // POST create a DRAFT product via a delegation grant (Catalog Agent, safe scope seller_product_draft). The
+    //   draft is FORCED to status='warehouse' (not public/sellable). PUBLISHING STAYS HUMAN-ONLY — the human
+    //   flips warehouse→active in the existing 我的商品→仓库 UI (publish is never delegated to a grant, matching
+    //   the taxonomy). Reuses the SAME product-create validation as the human POST /api/products
+    //   (createProductDraftHandler) so the agent path can't drift. Audited by the middleware. Lightweight signal:
+    //   a notification tells the human a draft is waiting to review + publish.
+    if (createProductDraftHandler) {
+        app.post('/api/agent/seller/products', requireAgentGrantScope('seller_product_draft'), async (req, res) => {
+            const p = req.agentGrant;
+            const human = await dbOne('SELECT id, role FROM users WHERE id = ?', [p.human_id]);
+            if (!human || human.role !== 'seller')
+                return void res.status(403).json({ error: 'the grant owner is not a seller — product drafts need a seller account', error_code: 'NOT_A_SELLER' });
+            await createProductDraftHandler(req, res, human, {
+                forceStatus: 'warehouse',
+                skipExternalLinkEffects: true, // a SAFE draft grant must never trigger wallet debit / verify_tasks / auto-verified links (source_url stays inert metadata)
+                onCreated: async (productId) => {
+                    try {
+                        await dbRun("INSERT INTO notifications (id, user_id, type, title, body) VALUES (?,?,?,?,?)", [generateId('ntf'), p.human_id, 'agent_product_draft', 'AI 助手起草了商品草稿', `${p.agent_label || 'An agent'} 起草了商品草稿 ${productId}，请到「我的商品 → 仓库」审核并发布。`]);
+                    }
+                    catch (e) {
+                        console.error('[agent-grant draft notify]', e.message);
+                    }
+                },
+            });
+        });
+    }
     // helpers for the permission-request flow ----------------------------------------------------------------
     const parseCapList = (json) => { try {
         const a = JSON.parse(json);
@@ -149,7 +177,7 @@ export function registerAgentGrantsRoutes(app, deps) {
         // Fail closed: a grant-authorized read is audited or it does not proceed (parity with requireAgentGrantScope).
         if (!(await auditGrant(g.grant_id, g.human_id, 'grant:verify', 'allow')))
             return void res.status(503).json({ error: 'authorization audit unavailable; refusing to proceed unaudited', error_code: 'GRANT_AUDIT_FAILED' });
-        res.json({ grant: { grant_id: full.grant_id, agent_label: full.agent_label, scopes: scopeNames(full.capabilities), permission_bundle: full.permission_bundle, expires_at: full.expires_at, status: full.status }, note: 'Full grant principal — scopes/bundle/expiry/status. Not a human session; never authorizes risk/never-delegable actions.' });
+        res.json({ grant: { grant_id: full.grant_id, human_id: full.human_id, agent_label: full.agent_label, scopes: scopeNames(full.capabilities), permission_bundle: full.permission_bundle, expires_at: full.expires_at, status: full.status }, note: 'Full grant principal — all authorized scopes/bundle/expiry/status. Not a human session; never authorizes risk/never-delegable actions.' });
     });
     // POST create a permission request — the AGENT (holding its current grant) asks for MORE scope / a bundle.
     //   Bound to (human_id, grant_id) from the grant bearer. Rate-limited. Safe-only: risk/never-delegable are

package/dist/pwa/routes/products-create.js

@@ -1,12 +1,12 @@
 import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
-export function registerProductsCreateRoutes(app, deps) {
-    const { db, auth, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash } = deps;
-    app.post('/api/products', async (req, res) => {
-        const user = auth(req, res);
-        if (!user)
-            return;
-        if (user.role !== 'seller')
-            return void res.json({ error: '仅卖家可上架商品' });
+/**
+ * The SINGLE source of product-create validation + insert. res-coupled but auth-agnostic: the caller resolves
+ * `user` (the human api_key route, OR the delegation-grant draft route) and may force `warehouse` status. Both
+ * the human `POST /api/products` and the grant-gated draft route MUST go through this — no parallel copy.
+ */
+export function makeCreateProductHandler(deps) {
+    const { db, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash } = deps;
+    return async function createProductHandler(req, res, user, opts = {}) {
         // 里程碑 3-D：1h 上架限速（防 spam 批量上架）
         const LISTING_RATE_LIMIT = 5;
         const recentListings = (await dbOne(`
@@ -55,7 +55,7 @@ export function registerProductsCreateRoutes(app, deps) {
             return void res.json({ error: 'commission_rate 必须在 1% - 50% 之间（小数 0.01-0.50）' });
         }
         // 上架前检查：同一卖家不能重复关联相同外部链接
-        if (source_url) {
+        if (source_url && !opts.skipExternalLinkEffects) {
             const sameSellerDupe = (await dbOne(`
         SELECT COUNT(*) as n FROM product_external_links pel
         JOIN products p ON pel.product_id = p.id
@@ -94,14 +94,14 @@ export function registerProductsCreateRoutes(app, deps) {
     ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'WAZ',?,?,?,?,?,?)`, [
             id, user.id, title, description, priceNum, Number(stock), category, stakeAmount,
             specsJson, brand ?? null, model ?? null,
-            source_url ?? null, source_price ? Number(source_price) : null, source_price ? now : null,
+            opts.skipExternalLinkEffects ? null : (source_url ?? null), opts.skipExternalLinkEffects ? null : (source_price ? Number(source_price) : null), opts.skipExternalLinkEffects ? null : (source_price ? now : null),
             weight_kg ? Number(weight_kg) : null, ship_regions, Number(handling_hours), estJson, fragile ? 1 : 0,
             Number(return_days), return_condition, Number(warranty_days),
             Math.max(0, Math.floor(Number(low_stock_threshold) || 0)), auto_delist_on_zero ? 1 : 0,
             makeCommitmentHash(pFields), makeDescriptionHash({ title, description, specs: specsJson }),
             makePriceHash(priceNum, now), now,
             commissionRateNum, product_type, imagesJsonForInsert,
-            _tx(package_size, 40), _cc(origin_country), _cc(country_of_origin), _tx(customs_description, 120), _hs, create_status === 'warehouse' ? 'warehouse' : 'active'
+            _tx(package_size, 40), _cc(origin_country), _cc(country_of_origin), _tx(customs_description, 120), _hs, (opts.forceStatus === 'warehouse' || create_status === 'warehouse') ? 'warehouse' : 'active'
         ]);
         // M7.2.6：免质押上架 — 不再扣 stake；首单成交时 settleOrder 自动从订单 escrow 锁定
         // M7.2-6: 上架时同步入 aliases（卖家已勾选的 candidates）
@@ -128,7 +128,7 @@ export function registerProductsCreateRoutes(app, deps) {
         }
         // 来源链接：冲突检测
         let linkConflict = null;
-        if (source_url) {
+        if (source_url && !opts.skipExternalLinkEffects) {
             // 另一家卖家已认领此链接（verified=1）
             const otherClaim = await dbOne(`
         SELECT pel.product_id FROM product_external_links pel
@@ -183,7 +183,7 @@ export function registerProductsCreateRoutes(app, deps) {
         // 额外链接：同步冲突检查（最多 5 个）
         const additionalLinks = req.body.additional_links;
         const blockedLinks = [];
-        if (Array.isArray(additionalLinks) && additionalLinks.length > 0) {
+        if (!opts.skipExternalLinkEffects && Array.isArray(additionalLinks) && additionalLinks.length > 0) {
             for (const extraUrl of additionalLinks.slice(0, 5)) {
                 if (typeof extraUrl !== 'string' || !extraUrl.startsWith('http'))
                     continue;
@@ -220,13 +220,33 @@ export function registerProductsCreateRoutes(app, deps) {
                 catch { }
             }
         }
+        if (opts.onCreated) {
+            try {
+                await opts.onCreated(id);
+            }
+            catch (e) {
+                console.error('[products-create onCreated]', e.message);
+            }
+        }
         res.json({
             success: true,
             product_id: id,
+            status: (opts.forceStatus === 'warehouse' || create_status === 'warehouse') ? 'warehouse' : 'active',
             stake_locked: 0, // 免质押上架（M7.2.6 方案 3）
             stake_deferred: stakeAmount, // 首单成交时自动锁定（trusted+ 跳过）
             ...(linkConflict ? { link_conflict: linkConflict } : {}),
             ...(blockedLinks.length > 0 ? { blocked_links: blockedLinks } : {}),
         });
+    };
+}
+export function registerProductsCreateRoutes(app, deps) {
+    const createProductHandler = makeCreateProductHandler(deps);
+    app.post('/api/products', async (req, res) => {
+        const user = deps.auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void res.json({ error: '仅卖家可上架商品' });
+        await createProductHandler(req, res, user);
     });
 }

package/dist/pwa/routes/webauthn.js

@@ -196,5 +196,5 @@ export function registerWebauthnRoutes(app, deps) {
     // RFC-020 PR-B — agent delegation grants (issue/read/revoke). Co-registered with the
     // Passkey security routes so the money-dense server.ts stays untouched. Safe scopes
     // only; risk scopes default-hard-reject. Reuses db/auth/generateId from WebauthnDeps.
-    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk, requireHumanPresence });
+    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk, requireHumanPresence, createProductDraftHandler: deps.createProductDraftHandler });
 }

package/dist/pwa/server.js

@@ -283,7 +283,7 @@ import { registerProductsCrudRoutes } from './routes/products-crud.js';
 // Products PUT update (#1013 Phase 93) — 1 endpoint (123 行)
 import { registerProductsUpdateRoutes } from './routes/products-update.js';
 // Products POST create (#1013 Phase 94) — 1 endpoint (232 行)
-import { registerProductsCreateRoutes } from './routes/products-create.js';
+import { registerProductsCreateRoutes, makeCreateProductHandler } from './routes/products-create.js';
 // Products GET list (#1013 Phase 95) — 1 endpoint (399 行)
 import { registerProductsListRoutes } from './routes/products-list.js';
 // P2P 商品 (#1013 Phase 96) — 5 endpoints
@@ -4091,8 +4091,8 @@ app.use((req, res, next) => {
     if (req.method === 'GET' && /^\/api\/(info|leaderboard|payment-methods|governance|openapi)/.test(req.path))
         return next();
     const apiKey = req.headers.authorization?.replace('Bearer ', '');
-    if (!apiKey)
-        return next(); // 无 key 走原 IP 速率
+    if (!apiKey || apiKey.startsWith('gtk_'))
+        return next(); // 无 key→IP 速率;gtk_* 委托凭证(RFC-020)是独立自守 auth 通道(requireAgentGrantScope/resolveActiveGrantByBearer 管 safe-scope+active/expiry/revoked+audit),非 api_key,不进下面 agent 声明/风控/strike;否则合法 safe-scope grant 写(如 POST /api/agent-grants/permission-requests)被误判 AGENT_SCOPE_UNDECLARED。gtk_* 只命中 grant-aware 路由,别处 auth() 自然 401。
     // 2026-05-23 P1 fix：被封禁用户仍可走以下路径（看自己 agent 状态 + 申诉）
     // - GET /api/me/agents 系列（看强 / 申诉前必查）
     // - POST /api/me/agents/strikes/:id/appeal（申诉权不能被封禁阻断）
@@ -7870,7 +7870,7 @@ registerWebauthnRoutes(app, {
     origin: WEBAUTHN_ORIGIN,
     challengeTtlMs: WEBAUTHN_CHALLENGE_TTL_MS,
     gateTtlMs: WEBAUTHN_GATE_TTL_MS,
-    invalidateAgentRiskCacheForUser,
+    invalidateAgentRiskCacheForUser, createProductDraftHandler: makeCreateProductHandler({ db, auth, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash }), // RFC-020 PR-4: grant-gated warehouse draft reuses the human create logic
     requireHumanPresence, // #1044 — DELETE passkey 自身需 token
 });
 // consumeGateToken / requireHumanPresence 已抽出到 ./human-presence.ts(PR-F0,behavior-zero,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "description": "[PRE-LAUNCH] Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools. ⚠️ Repository currently private until W8 public launch — GitHub links may return 404. See https://webaz.xyz for status.",
   "main": "dist/mcp.js",
   "bin": {
@@ -88,6 +88,8 @@
     "test:agent-permission-requests": "tsx scripts/test-agent-permission-requests.ts",
     "test:agent-permission-consume": "tsx scripts/test-agent-permission-consume.ts",
     "test:agent-approvals-ui": "tsx scripts/test-agent-approvals-ui.ts",
+    "test:mcp-place-order-rail": "tsx scripts/test-mcp-place-order-rail.ts",
+    "test:agent-product-draft": "tsx scripts/test-agent-product-draft.ts",
     "test:agent-grant-verify": "tsx scripts/test-agent-grant-verify.ts",
     "test:agent-grant-mcp-consume": "tsx scripts/test-agent-grant-mcp-consume.ts",
     "test:connected-agents-read": "tsx scripts/test-connected-agents-read.ts",