@seasonkoh/webaz 0.1.30 → 0.1.32

package/dist/pwa/routes/products-create.js

@@ -1,12 +1,12 @@
 import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
-export function registerProductsCreateRoutes(app, deps) {
-    const { db, auth, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash } = deps;
-    app.post('/api/products', async (req, res) => {
-        const user = auth(req, res);
-        if (!user)
-            return;
-        if (user.role !== 'seller')
-            return void res.json({ error: '仅卖家可上架商品' });
+/**
+ * The SINGLE source of product-create validation + insert. res-coupled but auth-agnostic: the caller resolves
+ * `user` (the human api_key route, OR the delegation-grant draft route) and may force `warehouse` status. Both
+ * the human `POST /api/products` and the grant-gated draft route MUST go through this — no parallel copy.
+ */
+export function makeCreateProductHandler(deps) {
+    const { db, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash } = deps;
+    return async function createProductHandler(req, res, user, opts = {}) {
         // 里程碑 3-D：1h 上架限速（防 spam 批量上架）
         const LISTING_RATE_LIMIT = 5;
         const recentListings = (await dbOne(`
@@ -55,7 +55,7 @@ export function registerProductsCreateRoutes(app, deps) {
             return void res.json({ error: 'commission_rate 必须在 1% - 50% 之间（小数 0.01-0.50）' });
         }
         // 上架前检查：同一卖家不能重复关联相同外部链接
-        if (source_url) {
+        if (source_url && !opts.skipExternalLinkEffects) {
             const sameSellerDupe = (await dbOne(`
         SELECT COUNT(*) as n FROM product_external_links pel
         JOIN products p ON pel.product_id = p.id
@@ -94,14 +94,14 @@ export function registerProductsCreateRoutes(app, deps) {
     ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'WAZ',?,?,?,?,?,?)`, [
             id, user.id, title, description, priceNum, Number(stock), category, stakeAmount,
             specsJson, brand ?? null, model ?? null,
-            source_url ?? null, source_price ? Number(source_price) : null, source_price ? now : null,
+            opts.skipExternalLinkEffects ? null : (source_url ?? null), opts.skipExternalLinkEffects ? null : (source_price ? Number(source_price) : null), opts.skipExternalLinkEffects ? null : (source_price ? now : null),
             weight_kg ? Number(weight_kg) : null, ship_regions, Number(handling_hours), estJson, fragile ? 1 : 0,
             Number(return_days), return_condition, Number(warranty_days),
             Math.max(0, Math.floor(Number(low_stock_threshold) || 0)), auto_delist_on_zero ? 1 : 0,
             makeCommitmentHash(pFields), makeDescriptionHash({ title, description, specs: specsJson }),
             makePriceHash(priceNum, now), now,
             commissionRateNum, product_type, imagesJsonForInsert,
-            _tx(package_size, 40), _cc(origin_country), _cc(country_of_origin), _tx(customs_description, 120), _hs, create_status === 'warehouse' ? 'warehouse' : 'active'
+            _tx(package_size, 40), _cc(origin_country), _cc(country_of_origin), _tx(customs_description, 120), _hs, (opts.forceStatus === 'warehouse' || create_status === 'warehouse') ? 'warehouse' : 'active'
         ]);
         // M7.2.6：免质押上架 — 不再扣 stake；首单成交时 settleOrder 自动从订单 escrow 锁定
         // M7.2-6: 上架时同步入 aliases（卖家已勾选的 candidates）
@@ -128,7 +128,7 @@ export function registerProductsCreateRoutes(app, deps) {
         }
         // 来源链接：冲突检测
         let linkConflict = null;
-        if (source_url) {
+        if (source_url && !opts.skipExternalLinkEffects) {
             // 另一家卖家已认领此链接（verified=1）
             const otherClaim = await dbOne(`
         SELECT pel.product_id FROM product_external_links pel
@@ -183,7 +183,7 @@ export function registerProductsCreateRoutes(app, deps) {
         // 额外链接：同步冲突检查（最多 5 个）
         const additionalLinks = req.body.additional_links;
         const blockedLinks = [];
-        if (Array.isArray(additionalLinks) && additionalLinks.length > 0) {
+        if (!opts.skipExternalLinkEffects && Array.isArray(additionalLinks) && additionalLinks.length > 0) {
             for (const extraUrl of additionalLinks.slice(0, 5)) {
                 if (typeof extraUrl !== 'string' || !extraUrl.startsWith('http'))
                     continue;
@@ -220,13 +220,33 @@ export function registerProductsCreateRoutes(app, deps) {
                 catch { }
             }
         }
+        if (opts.onCreated) {
+            try {
+                await opts.onCreated(id);
+            }
+            catch (e) {
+                console.error('[products-create onCreated]', e.message);
+            }
+        }
         res.json({
             success: true,
             product_id: id,
+            status: (opts.forceStatus === 'warehouse' || create_status === 'warehouse') ? 'warehouse' : 'active',
             stake_locked: 0, // 免质押上架（M7.2.6 方案 3）
             stake_deferred: stakeAmount, // 首单成交时自动锁定（trusted+ 跳过）
             ...(linkConflict ? { link_conflict: linkConflict } : {}),
             ...(blockedLinks.length > 0 ? { blocked_links: blockedLinks } : {}),
         });
+    };
+}
+export function registerProductsCreateRoutes(app, deps) {
+    const createProductHandler = makeCreateProductHandler(deps);
+    app.post('/api/products', async (req, res) => {
+        const user = deps.auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void res.json({ error: '仅卖家可上架商品' });
+        await createProductHandler(req, res, user);
     });
 }

package/dist/pwa/routes/webauthn.js

@@ -196,5 +196,5 @@ export function registerWebauthnRoutes(app, deps) {
     // RFC-020 PR-B — agent delegation grants (issue/read/revoke). Co-registered with the
     // Passkey security routes so the money-dense server.ts stays untouched. Safe scopes
     // only; risk scopes default-hard-reject. Reuses db/auth/generateId from WebauthnDeps.
-    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk, requireHumanPresence });
+    registerAgentGrantsRoutes(app, { db, auth, generateId, rateLimitOk, requireHumanPresence, createProductDraftHandler: deps.createProductDraftHandler });
 }

package/dist/pwa/server.js

@@ -40,7 +40,7 @@ import { initExternalAnchorSchema } from '../layer1-agent/L1-2-external-anchor/a
 import { ensureEvidenceColumns, uploadEvidence, listEvidence as listEvidenceFiles, markEvidenceExpiry, cleanupExpiredEvidence, EVIDENCE_MAX_BYTES, EVIDENCE_ALLOWED_MIME, } from '../layer3-trust/L3-1-dispute-engine/evidence-storage.js';
 import { cleanupOrphanNotePhotos, } from '../layer2-business/L2-notes/note-photo-storage.js';
 import { initAnchorRegistrySchema, retireAnchorsByTarget, reclaimRetiredAnchors, retireIdleAnchors, userReferralVolume, computeTierLetter, } from '../layer2-business/L2-anchor-registry/anchor-registry.js';
-import { initDisputeSchema, createDispute, respondToDispute, arbitrateDispute, getOrderDispute, getDisputeDetails, getOpenDisputes, checkDisputeTimeouts, initEvidenceRequestSchema, requestEvidence, getEvidenceRequests, addPartyEvidence, } from '../layer3-trust/L3-1-dispute-engine/dispute-engine.js';
+import { initDisputeSchema, createDispute, createDeclineContestDispute, respondToDispute, arbitrateDispute, getOrderDispute, getDisputeDetails, getOpenDisputes, checkDisputeTimeouts, initEvidenceRequestSchema, requestEvidence, getEvidenceRequests, addPartyEvidence, } from '../layer3-trust/L3-1-dispute-engine/dispute-engine.js';
 import { initMutualCancelSchema } from '../layer3-trust/L3-1-dispute-engine/mutual-cancel.js';
 import { registerMutualCancelRoutes } from './routes/mutual-cancel.js';
 import { initDirectPayCancelRefundSchema } from '../direct-pay-cancel-refund.js';
@@ -283,7 +283,7 @@ import { registerProductsCrudRoutes } from './routes/products-crud.js';
 // Products PUT update (#1013 Phase 93) — 1 endpoint (123 行)
 import { registerProductsUpdateRoutes } from './routes/products-update.js';
 // Products POST create (#1013 Phase 94) — 1 endpoint (232 行)
-import { registerProductsCreateRoutes } from './routes/products-create.js';
+import { registerProductsCreateRoutes, makeCreateProductHandler } from './routes/products-create.js';
 // Products GET list (#1013 Phase 95) — 1 endpoint (399 行)
 import { registerProductsListRoutes } from './routes/products-list.js';
 // P2P 商品 (#1013 Phase 96) — 5 endpoints
@@ -4091,8 +4091,8 @@ app.use((req, res, next) => {
     if (req.method === 'GET' && /^\/api\/(info|leaderboard|payment-methods|governance|openapi)/.test(req.path))
         return next();
     const apiKey = req.headers.authorization?.replace('Bearer ', '');
-    if (!apiKey)
-        return next(); // 无 key 走原 IP 速率
+    if (!apiKey || apiKey.startsWith('gtk_'))
+        return next(); // 无 key→IP 速率;gtk_* 委托凭证(RFC-020)是独立自守 auth 通道(requireAgentGrantScope/resolveActiveGrantByBearer 管 safe-scope+active/expiry/revoked+audit),非 api_key,不进下面 agent 声明/风控/strike;否则合法 safe-scope grant 写(如 POST /api/agent-grants/permission-requests)被误判 AGENT_SCOPE_UNDECLARED。gtk_* 只命中 grant-aware 路由,别处 auth() 自然 401。
     // 2026-05-23 P1 fix：被封禁用户仍可走以下路径（看自己 agent 状态 + 申诉）
     // - GET /api/me/agents 系列（看强 / 申诉前必查）
     // - POST /api/me/agents/strikes/:id/appeal（申诉权不能被封禁阻断）
@@ -5401,7 +5401,7 @@ function computeLightTags(user, mod, vWhite, vAppPending) {
 }
 // #1013 Phase 101: admin/orders + admin/disputes + admin/verify-tasks + admin/audit-log 已迁出
 registerAdminReportsRoutes(app, {
-    db,
+    db, requireHumanPresence,
     requireContentAdmin: (req, res) => requireAdminPermission(req, res, 'content'),
     requireArbitrationAdmin: (req, res) => requireAdminPermission(req, res, 'arbitration'),
     requireProtocolAdmin: (req, res) => requireAdminPermission(req, res, 'protocol'),
@@ -6053,7 +6053,7 @@ registerOrdersReadRoutes(app, { db, auth, getOrderStatus, getOrderChain, verifyO
 // 注意：settleOrder 是函数声明（hoisted）但绑了 db 闭包，无需注入 db
 registerOrdersActionRoutes(app, {
     db, auth, isTrustedRole, generateId, transition, notifyTransition,
-    settleOrder, settleFault, detectFraud, createDispute, checkTimeouts, recordViolationReputation,
+    settleOrder, settleFault, detectFraud, createDispute, createDeclineContestDispute, checkTimeouts, recordViolationReputation,
     broadcastSystemEvent, consumeGateToken,
 });
 // #1013 Phase 85: POST /api/orders 巨型事务已迁出
@@ -7870,7 +7870,7 @@ registerWebauthnRoutes(app, {
     origin: WEBAUTHN_ORIGIN,
     challengeTtlMs: WEBAUTHN_CHALLENGE_TTL_MS,
     gateTtlMs: WEBAUTHN_GATE_TTL_MS,
-    invalidateAgentRiskCacheForUser,
+    invalidateAgentRiskCacheForUser, createProductDraftHandler: makeCreateProductHandler({ db, auth, generateId, checkSellerCanList, getStakeDiscount, VALID_PRODUCT_TYPES, parsePlatformUrl, makeCommitmentHash, makeDescriptionHash, makePriceHash }), // RFC-020 PR-4: grant-gated warehouse draft reuses the human create logic
     requireHumanPresence, // #1044 — DELETE passkey 自身需 token
 });
 // consumeGateToken / requireHumanPresence 已抽出到 ./human-presence.ts(PR-F0,behavior-zero,

package/dist/runtime/agent-grant-scopes.js

@@ -34,6 +34,12 @@ export const SAFE_SCOPES = [
     'seller_inventory_read',
     'seller_product_draft',
     'seller_pricing_suggestion',
+    // RFC-021 Fulfillment Agent (order 侧 申请→人工 Passkey 批准). BOTH safe:
+    //   seller_orders_read_minimal = 最小化订单读(无买家地址/联系);
+    //   order_action_request = SUBMIT-only —— 只能把 {accept|ship} 请求塞进人的审批队列,【绝不执行】;
+    //     执行始终由人 Passkey 逐笔批准后服务端跑(RFC-021 §5/§6b)。RISK 档 order_accept/order_ship 不动、仍硬拒。
+    'seller_orders_read_minimal',
+    'order_action_request',
 ];
 /**
  * Real actions that WILL require a live Passkey each time — but are NOT yet gated
@@ -141,6 +147,14 @@ export const PERMISSION_BUNDLES = {
         human_summary: '选品、商品草稿、库存字段检查、价格建议、上架请求。它不能发布商品、不能接单、不能发货、不能动用资金。',
         human_summary_en: 'Sourcing, product drafts, inventory-field checks, pricing suggestions, and publish REQUESTS. It cannot publish products, accept orders, ship, or move funds.',
     },
+    // RFC-021:独立于 catalog_agent 授予/撤销/TTL(§15.1)。仅含两个 SAFE scope,均不直接执行订单动作。
+    fulfillment_agent: {
+        key: 'fulfillment_agent',
+        label: 'Fulfillment Agent',
+        scopes: ['seller_orders_read_minimal', 'order_action_request'],
+        human_summary: '读你订单的最小信息(订单号/状态/下一步责任方/截止/金额/商品),再把"接单/发货"请求提交到你的审批队列等你逐笔 Passkey 批准。它【不能】直接接单或发货、看不到买家收货地址与联系方式(接单获批前)、不动任何资金。',
+        human_summary_en: 'Reads a minimal view of your orders (id / status / next actor / deadline / amount / item) and SUBMITS "accept / ship" requests into your approval queue for you to approve one-by-one with Passkey. It CANNOT accept or ship directly, cannot see the buyer\'s shipping address or contact (before an accept is approved), and moves no funds.',
+    },
 };
 /** Resolve a bundle key → its safe scopes + human summary, or null if unknown. */
 export function resolveBundle(key) {
@@ -159,27 +173,31 @@ for (const b of Object.values(PERMISSION_BUNDLES)) {
 export const DURATION_SECONDS = { '1h': 3600, '24h': 86400, '7d': 604800, '30d': 2592000 };
 /**
  * Which durations a set of scopes may be granted for, capped by the HIGHEST risk tier present:
- *   - never-delegable / unknown  → []            (cannot be granted at all)
- *   - risk (high)                → ['once']       (single Passkey each time; NEVER long-term)
- *   - safe (low/medium)          → once…30d       (long-term ok)
+ *   - never-delegable / unknown  → []                  (cannot be granted at all)
+ *   - risk (high)                → []                  (not delegable to a persistent grant)
+ *   - safe (low/medium)          → 1h / 24h / 7d / 30d  (long-term ok)
+ * NOTE: 'once' is intentionally NOT offered. It's a real single-use concept, but no single-use grant
+ *   CONSUMPTION mechanism exists yet — durationToSeconds('once') would fall back to a 1h *reusable* bearer,
+ *   which misleads. Until a true single-use grant is built, 'once' stays out of the allowed set / UI / i18n.
  */
 export function allowedDurationsForScopes(scopes) {
     const tiers = scopes.map(classifyScope);
     if (tiers.some(t => t === 'never_delegable' || t === 'unknown'))
         return [];
     if (tiers.some(t => t === 'risk'))
-        return ['once'];
-    return ['once', '1h', '24h', '7d', '30d'];
+        return [];
+    return ['1h', '24h', '7d', '30d'];
 }
 export function durationAllowedForScopes(scopes, duration) {
     return typeof duration === 'string' && allowedDurationsForScopes(scopes).includes(duration);
 }
-/** Suggested default: 7d for long-term-eligible safe scopes; else the safest available (once). */
+/** Suggested default: 7d for long-term-eligible safe scopes; else the safest available. */
 export function suggestedDurationForScopes(scopes) {
     const a = allowedDurationsForScopes(scopes);
-    return a.includes('7d') ? '7d' : (a[0] ?? 'once');
+    return a.includes('7d') ? '7d' : (a[0] ?? '7d');
 }
-/** Grant lifetime in seconds for an approved (non-'once') duration. 'once' handled separately (single-use). */
+/** Grant lifetime in seconds. 'once' is RESERVED for a future single-use grant (no consumption path yet) and
+ *  is never offered; if it somehow arrives it maps to 0 → callers fall back to a short window. */
 export function durationToSeconds(duration) {
     return duration === 'once' ? 0 : DURATION_SECONDS[duration];
 }

package/dist/runtime/webaz-schema-helpers.js

@@ -1844,6 +1844,28 @@ export function initAgentPermissionRequestsSchema(db) {
   `);
     db.exec(`CREATE INDEX IF NOT EXISTS idx_apr_human  ON agent_permission_requests(human_id, status)`);
     db.exec(`CREATE INDEX IF NOT EXISTS idx_apr_status ON agent_permission_requests(status, expires_at)`);
+    // RFC-021 PR2:order-action 请求复用本队列(I9)。新列均可空;kind 默认 'scope_grant' → 旧行行为不变,零迁移。
+    //   executed_at / execution_result 本 PR 只建列【永不写】(PR3 才写);ALTER-AFTER-CREATE 幂等。
+    for (const stmt of [
+        "ALTER TABLE agent_permission_requests ADD COLUMN kind TEXT DEFAULT 'scope_grant'", // scope_grant | order_action
+        "ALTER TABLE agent_permission_requests ADD COLUMN order_id TEXT",
+        "ALTER TABLE agent_permission_requests ADD COLUMN order_action TEXT", // accept | ship(v1)
+        "ALTER TABLE agent_permission_requests ADD COLUMN params_hash TEXT", // I2 绑定键 SHA-256(order_id,action,params)
+        "ALTER TABLE agent_permission_requests ADD COLUMN action_params TEXT", // JSON:ship 的 {tracking,evidence_ref};accept '{}'
+        "ALTER TABLE agent_permission_requests ADD COLUMN executed_at TEXT", // I5 幂等 CAS 键 —— PR3 写,PR2 恒 NULL
+        "ALTER TABLE agent_permission_requests ADD COLUMN execution_result TEXT", // I7 执行结果 —— PR3 写
+    ]) {
+        try {
+            db.exec(stmt);
+        }
+        catch { /* 列已存在 */ }
+    }
+    // 防双 pending + I5 幂等根基:同一 (order_id, order_action) 至多一条未终结(pending/approved)的 order_action 请求。
+    //   rejected/expired/executed 为终态,不占索引 → 允许事后重新提交。
+    try {
+        db.exec("CREATE UNIQUE INDEX IF NOT EXISTS ux_apr_order_action_active ON agent_permission_requests(order_id, order_action) WHERE kind='order_action' AND status IN ('pending','approved')");
+    }
+    catch { /* */ }
 }
 /**
  * RFC-020 PR-C1 — agent pairing sessions (OAuth device-flow + PKCE shape).
@@ -1877,6 +1899,12 @@ export function initAgentPairingSchema(db) {
   `);
     db.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_aps_user_code ON agent_pairing_sessions(user_code)`);
     db.exec(`CREATE INDEX IF NOT EXISTS idx_aps_status ON agent_pairing_sessions(status, expires_at)`);
+    // RFC-020 duration-choice: the agent's SUGGESTED grant lifetime (once/1h/24h/7d/30d) shown in consent so the
+    //   human can accept or override it at approve. Safe-scope only; the human's choice wins. ALTER after CREATE.
+    try {
+        db.exec("ALTER TABLE agent_pairing_sessions ADD COLUMN grant_duration TEXT");
+    }
+    catch { /* 已有 */ }
 }
 /**
  * RFC-020 PR-C2a — per-request audit of delegation-grant authorizations (RFC-020 §3.7).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seasonkoh/webaz",
-  "version": "0.1.30",
+  "version": "0.1.32",
   "description": "[PRE-LAUNCH] Agent-native decentralized commerce protocol. Humans and AI agents trade on the same protocol via MCP tools. ⚠️ Repository currently private until W8 public launch — GitHub links may return 404. See https://webaz.xyz for status.",
   "main": "dist/mcp.js",
   "bin": {
@@ -88,6 +88,19 @@
     "test:agent-permission-requests": "tsx scripts/test-agent-permission-requests.ts",
     "test:agent-permission-consume": "tsx scripts/test-agent-permission-consume.ts",
     "test:agent-approvals-ui": "tsx scripts/test-agent-approvals-ui.ts",
+    "test:mcp-place-order-rail": "tsx scripts/test-mcp-place-order-rail.ts",
+    "test:mcp-agent-order-tools": "tsx scripts/test-mcp-agent-order-tools.ts",
+    "test:agent-product-draft": "tsx scripts/test-agent-product-draft.ts",
+    "test:decline-contest-unify-p1": "tsx scripts/test-decline-contest-unify-pr1.ts",
+    "test:decline-contest-unify-p2": "tsx scripts/test-decline-contest-unify-pr2.ts",
+    "test:decline-contest-unify-p3": "tsx scripts/test-decline-contest-unify-pr3.ts",
+    "test:arb-resolved-history": "tsx scripts/test-arb-resolved-history.ts",
+    "test:order-action-request-p1": "tsx scripts/test-order-action-request-pr1.ts",
+    "test:order-action-request-p2": "tsx scripts/test-order-action-request-pr2.ts",
+    "test:order-action-request-p3": "tsx scripts/test-order-action-request-pr3.ts",
+    "backfill:decline-contest": "tsx scripts/backfill-decline-contest-disputes.ts",
+    "backfill:direct-pay-ship-deadline": "tsx scripts/backfill-direct-pay-ship-deadline.ts",
+    "test:mcp-version-nudge": "tsx scripts/test-mcp-version-nudge.ts",
     "test:agent-grant-verify": "tsx scripts/test-agent-grant-verify.ts",
     "test:agent-grant-mcp-consume": "tsx scripts/test-agent-grant-mcp-consume.ts",
     "test:connected-agents-read": "tsx scripts/test-connected-agents-read.ts",
@@ -105,7 +118,7 @@
     "test:currency-display": "tsx scripts/test-currency-display.ts",
     "test:currency-schema-flip": "tsx scripts/test-currency-schema-flip.ts",
     "test:proposal-admin-ui": "tsx scripts/test-proposal-admin-ui.ts",
-    "check:pwa-syntax": "node --check src/pwa/public/app-notif-templates.js && node --check src/pwa/public/app-notif-templates-orders.js && node --check src/pwa/public/app.js && node --check src/pwa/public/app-admin.js && node --check src/pwa/public/app-admin-disputes.js && node --check src/pwa/public/app-contribution.js && node --check src/pwa/public/app-ai.js && node --check src/pwa/public/app-discover.js && node --check src/pwa/public/app-profile.js && node --check src/pwa/public/app-account.js && node --check src/pwa/public/app-shop.js && node --check src/pwa/public/app-listings.js && node --check src/pwa/public/app-external-links.js && node --check src/pwa/public/app-product-media.js && node --check src/pwa/public/app-create-kinds.js && node --check src/pwa/public/app-price.js && node --check src/pwa/public/app-order-labels.js && node --check src/pwa/public/app-seller.js && node --check src/pwa/public/app-agents.js && node --check src/pwa/public/app-agent-pair.js && node --check src/pwa/public/app-agent-approvals.js && node --check src/pwa/public/app-agent-appeal.js && node --check src/pwa/public/app-direct-pay.js && node --check src/pwa/public/app-direct-pay-readiness.js && node --check src/pwa/public/app-direct-pay-deferral.js && node --check src/pwa/public/app-direct-pay-deferral-admin.js && node --check src/pwa/public/app-direct-pay-product-verify.js && node --check src/pwa/public/app-direct-pay-store-verify.js && node --check src/pwa/public/app-direct-pay-compliance.js && node --check src/pwa/public/app-direct-pay-fee-ops.js && node --check src/pwa/public/app-direct-pay-fee-center.js && node --check src/pwa/public/app-direct-pay-sales-report.js && node --check src/pwa/public/app-gmv-rail-split.js && node --check src/pwa/public/app-direct-pay-accounts.js && node --check src/pwa/public/app-direct-pay-buyer.js && node --check src/pwa/public/app-direct-pay-pay.js && node --check src/pwa/public/app-direct-pay-reveal.js && node --check src/pwa/public/app-direct-pay-copy.js && node --check src/pwa/public/app-direct-pay-paymodal.js && node --check src/pwa/public/app-direct-pay-memo.js && node --check src/pwa/public/app-direct-pay-negotiation.js && node --check src/pwa/public/app-direct-pay-cancel-refund.js && node --check src/pwa/public/app-direct-pay-returns.js && node --check src/pwa/public/app-order-accept-ui.js && node --check src/pwa/public/app-order-rail-filter.js && node --check src/pwa/public/app-sale-regions-ui.js && node --check src/pwa/public/app-free-shipping-ui.js && node --check src/pwa/public/app-trade-tax-ui.js && node --check src/pwa/public/app-purchase-terms-ui.js && node --check src/pwa/public/app-listing-commerce-ui.js && node --check src/pwa/public/app-bond-terms-ui.js && node --check src/pwa/public/app-bond-ui.js && node --check src/pwa/public/app-bond-refund-ui.js && node --check src/pwa/public/app-bond-slash-ui.js && node --check src/pwa/public/app-bond-deferral-ui.js && node --check src/pwa/public/app-direct-pay-reconcile.js && node --check src/pwa/public/app-mutual-cancel.js && node --check src/pwa/public/app-dispute-close-ui.js && node --check src/pwa/public/app-order-errors.js && node --check src/pwa/public/app-arbitrator-entry.js && node --check src/pwa/public/app-arbitrator-admin.js && node --check src/pwa/public/app-contribution-hub.js && node --check src/pwa/public/app-platform-receive-accounts.js && node --check src/pwa/public/app-direct-pay-fee-request.js && node --check src/pwa/public/app-direct-pay-fee-requests-admin.js && node --check src/pwa/public/app-direct-pay-fee-history.js && node --check src/pwa/public/app-prelaunch-waz.js && node --check src/pwa/public/app-chat-poll.js && node --check src/pwa/public/app-poll-governor.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
+    "check:pwa-syntax": "node --check src/pwa/public/app-notif-templates.js && node --check src/pwa/public/app-notif-templates-orders.js && node --check src/pwa/public/app.js && node --check src/pwa/public/app-admin.js && node --check src/pwa/public/app-admin-disputes.js && node --check src/pwa/public/app-contribution.js && node --check src/pwa/public/app-ai.js && node --check src/pwa/public/app-discover.js && node --check src/pwa/public/app-profile.js && node --check src/pwa/public/app-account.js && node --check src/pwa/public/app-shop.js && node --check src/pwa/public/app-listings.js && node --check src/pwa/public/app-external-links.js && node --check src/pwa/public/app-product-media.js && node --check src/pwa/public/app-create-kinds.js && node --check src/pwa/public/app-price.js && node --check src/pwa/public/app-order-labels.js && node --check src/pwa/public/app-seller.js && node --check src/pwa/public/app-grant-duration.js && node --check src/pwa/public/app-agents.js && node --check src/pwa/public/app-agent-pair.js && node --check src/pwa/public/app-agent-approvals.js && node --check src/pwa/public/app-agent-approvals-order.js && node --check src/pwa/public/app-agent-appeal.js && node --check src/pwa/public/app-direct-pay.js && node --check src/pwa/public/app-direct-pay-readiness.js && node --check src/pwa/public/app-direct-pay-deferral.js && node --check src/pwa/public/app-direct-pay-deferral-admin.js && node --check src/pwa/public/app-direct-pay-product-verify.js && node --check src/pwa/public/app-direct-pay-store-verify.js && node --check src/pwa/public/app-direct-pay-compliance.js && node --check src/pwa/public/app-direct-pay-fee-ops.js && node --check src/pwa/public/app-direct-pay-fee-center.js && node --check src/pwa/public/app-direct-pay-sales-report.js && node --check src/pwa/public/app-gmv-rail-split.js && node --check src/pwa/public/app-direct-pay-accounts.js && node --check src/pwa/public/app-direct-pay-buyer.js && node --check src/pwa/public/app-direct-pay-pay.js && node --check src/pwa/public/app-direct-pay-reveal.js && node --check src/pwa/public/app-direct-pay-copy.js && node --check src/pwa/public/app-direct-pay-paymodal.js && node --check src/pwa/public/app-direct-pay-memo.js && node --check src/pwa/public/app-direct-pay-negotiation.js && node --check src/pwa/public/app-direct-pay-cancel-refund.js && node --check src/pwa/public/app-direct-pay-returns.js && node --check src/pwa/public/app-order-accept-ui.js && node --check src/pwa/public/app-order-rail-filter.js && node --check src/pwa/public/app-sale-regions-ui.js && node --check src/pwa/public/app-free-shipping-ui.js && node --check src/pwa/public/app-trade-tax-ui.js && node --check src/pwa/public/app-purchase-terms-ui.js && node --check src/pwa/public/app-listing-commerce-ui.js && node --check src/pwa/public/app-bond-terms-ui.js && node --check src/pwa/public/app-bond-ui.js && node --check src/pwa/public/app-bond-refund-ui.js && node --check src/pwa/public/app-bond-slash-ui.js && node --check src/pwa/public/app-bond-deferral-ui.js && node --check src/pwa/public/app-direct-pay-reconcile.js && node --check src/pwa/public/app-mutual-cancel.js && node --check src/pwa/public/app-dispute-close-ui.js && node --check src/pwa/public/app-order-errors.js && node --check src/pwa/public/app-arbitrator-entry.js && node --check src/pwa/public/app-arbitrator-admin.js && node --check src/pwa/public/app-decline-contest-ui.js && node --check src/pwa/public/app-decline-contest-ruling.js && node --check src/pwa/public/app-contribution-hub.js && node --check src/pwa/public/app-platform-receive-accounts.js && node --check src/pwa/public/app-direct-pay-fee-request.js && node --check src/pwa/public/app-direct-pay-fee-requests-admin.js && node --check src/pwa/public/app-direct-pay-fee-history.js && node --check src/pwa/public/app-prelaunch-waz.js && node --check src/pwa/public/app-chat-poll.js && node --check src/pwa/public/app-poll-governor.js && node --check src/pwa/public/i18n.js && node --check src/pwa/public/sw.js",
     "test:create-kinds": "tsx scripts/test-create-kinds.ts",
     "test:secondhand-photo-authenticity": "tsx scripts/test-secondhand-photo-authenticity.ts",
     "test:secondhand-detail-alignment": "tsx scripts/test-secondhand-detail-alignment.ts",