@seasonkoh/webaz 0.1.8 → 0.1.10

package/dist/pwa/routes/agent-governance.js

@@ -0,0 +1,386 @@
+import { computeAgentPassport } from '../../layer1-agent/L1-2-identity/agent-passport.js';
+export function registerAgentGovernanceRoutes(app, deps) {
+    const { db, generateId, auth, requireRootAdmin, invalidateAgentBlockedCache, requireHumanPresence, issueAgentStrike, custodianFingerprint, signPassport, issuerAddress } = deps;
+    // /api/me/agents — 列出本账号所有 agent + declaration / strikes
+    app.get('/api/me/agents', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const keys = db.prepare(`SELECT api_key FROM users WHERE id = ? UNION SELECT api_key FROM agent_reputation WHERE user_id = ?`).all(user.id, user.id);
+        const items = keys.map(k => {
+            const decl = db.prepare(`SELECT operator_name, operator_contact, purpose, declared_scope, attestations, repo_url, revoked_at FROM agent_declarations WHERE api_key = ?`).get(k.api_key);
+            // P1 fix 4.4：附 signals JSON
+            const rep = db.prepare(`SELECT trust_score, level, signals, last_calculated_at FROM agent_reputation WHERE api_key = ?`).get(k.api_key);
+            if (rep && rep.signals) {
+                try {
+                    rep.signals = JSON.parse(rep.signals);
+                }
+                catch {
+                    rep.signals = null;
+                }
+            }
+            const calls30d = db.prepare(`SELECT COUNT(*) as n FROM agent_call_log WHERE api_key = ? AND created_at > datetime('now', '-30 days')`).get(k.api_key).n;
+            const last = db.prepare(`SELECT endpoint, method, status_code, created_at FROM agent_call_log WHERE api_key = ? ORDER BY created_at DESC LIMIT 1`).get(k.api_key);
+            const strikes = db.prepare(`SELECT severity, reason_code, issued_at, expires_at, appeal_status FROM agent_strikes WHERE api_key = ? ORDER BY issued_at DESC LIMIT 5`).all(k.api_key);
+            let passport = null;
+            try {
+                passport = computeAgentPassport(db, k.api_key, user.id, custodianFingerprint);
+            }
+            catch { /* read-only, never break the list */ }
+            return {
+                api_key_prefix: k.api_key.slice(0, 12) + '...',
+                api_key_full: k.api_key === user.api_key ? k.api_key : null,
+                declaration: decl || null,
+                reputation: rep || null,
+                calls_30d: calls30d,
+                last_call: last || null,
+                recent_strikes: strikes,
+                passport,
+            };
+        });
+        // Phase 2 监护人总览(只读/软绑定):真人态 + 旗下 agent 聚合 + 连带
+        const hasPasskey = (db.prepare('SELECT COUNT(*) AS n FROM webauthn_credentials WHERE user_id = ?').get(user.id)?.n || 0) > 0;
+        const pps = items.map(i => i.passport).filter(Boolean);
+        const depthRank = { shallow: 0, medium: 1, deep: 2, profound: 3 };
+        const deepest = pps.reduce((d, p) => (depthRank[p.engagement_depth] ?? 0) > (depthRank[d] ?? 0) ? p.engagement_depth : d, 'shallow');
+        const custodian = {
+            fingerprint: custodianFingerprint(user.id),
+            has_passkey: hasPasskey,
+            agent_count: items.length,
+            max_risk: pps.reduce((m, p) => Math.max(m, p.risk_score), 0),
+            high_risk_count: pps.filter(p => p.risk_score >= 50).length,
+            deepest_engagement: pps.length ? deepest : null,
+        };
+        res.json({ items, custodian });
+    });
+    // Phase 4 + DID/VC 短期 mapping(B.6 b,2026-05-30):
+    //   webaz_format = 原 WebAZAgentPassport (向后兼容,任何 existing consumer 还用这个)
+    //   vc_format    = W3C Verifiable Credential v1 标准(任何标准 DID/VC resolver 可用)
+    //   两者签名是同一个(eip191 over canonical 串),两者可互推。
+    //   issuer 同时给 did:web:webaz.xyz(标准 DID method)+ 原 did:webaz:0x... 地址(向后兼容)。
+    app.get('/api/me/agents/:apiKeyPrefix/passport', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const prefix = String(req.params.apiKeyPrefix || '').replace('...', '');
+        if (prefix.length < 6)
+            return void res.status(400).json({ error: 'apiKeyPrefix 太短' });
+        const keys = db.prepare(`SELECT api_key FROM users WHERE id = ? UNION SELECT api_key FROM agent_reputation WHERE user_id = ?`).all(user.id, user.id);
+        const match = keys.find(k => k.api_key.startsWith(prefix));
+        if (!match)
+            return void res.status(404).json({ error: '未找到该 agent(或不属于你)' });
+        const pp = computeAgentPassport(db, match.api_key, user.id, custodianFingerprint);
+        const issued_at = new Date().toISOString();
+        const expires_at = new Date(Date.now() + 7 * 86400_000).toISOString();
+        const issuerAddr = issuerAddress();
+        const issuerDidWeb = 'did:web:webaz.xyz'; // W3C did:web 形态
+        const issuerDidLegacy = 'did:webaz:' + issuerAddr; // 原自定义形态(保留)
+        const keyPrefix = match.api_key.slice(0, 12) + '...';
+        const bp = pp.behavior_profile;
+        // 规范化签名串(verifier 用相同格式重建 → verifyMessage(issuerAddr, canonical, signature))
+        // 两套 wrapper 共享同一 canonical + signature,所以一签两用。
+        const canonical = `webaz-agent-passport|v1|${issuerAddr}|${issued_at}|${expires_at}|${pp.custodian_fingerprint}|${keyPrefix}|risk=${pp.risk_score}|depth=${pp.engagement_depth}|bp=${bp.query},${bp.transact},${bp.govern}`;
+        let signature = '';
+        try {
+            signature = await signPassport(canonical);
+        }
+        catch (e) {
+            return void res.status(503).json({ error: '签名服务暂不可用', detail: e.message });
+        }
+        // 原格式(向后兼容)— 任何已写过 webaz 集成的 consumer 不需要改
+        const webaz_format = {
+            type: 'WebAZAgentPassport', version: 1,
+            issuer: issuerDidLegacy, issuer_address: issuerAddr,
+            issued_at, expires_at,
+            subject: { custodian_fingerprint: pp.custodian_fingerprint, agent_key_prefix: keyPrefix },
+            claims: { risk_score: pp.risk_score, engagement_depth: pp.engagement_depth, behavior_profile: bp },
+            canonical, signature,
+            verify: { scheme: 'eip191', how: 'verifyMessage(issuer_address, canonical, signature)' },
+        };
+        // W3C Verifiable Credential v1 标准格式 — 任何 DID/VC 生态工具(KILT/Polygon ID/Veramo/SpruceID/...)可直接消费
+        // proof.type 用 EcdsaSecp256k1RecoverySignature2020(eip191 在 W3C 安全套件里的标准名)
+        // proofValue 是同一 signature 字符串(0x..),verifier 用 viem.verifyMessage 验真
+        const vc_format = {
+            '@context': [
+                'https://www.w3.org/2018/credentials/v1',
+                'https://webaz.xyz/credentials/v1', // webaz 自定义 schema 命名空间
+            ],
+            type: ['VerifiableCredential', 'WebAZAgentPassport'],
+            issuer: issuerDidWeb, // did:web — 通过 /.well-known/did.json 解析
+            issuanceDate: issued_at,
+            expirationDate: expires_at,
+            credentialSubject: {
+                id: `${issuerDidWeb}:agents:${keyPrefix.replace('...', '')}`, // 在 issuer 命名空间下的 agent 标识
+                custodianFingerprint: pp.custodian_fingerprint,
+                agentKeyPrefix: keyPrefix,
+                riskScore: pp.risk_score,
+                engagementDepth: pp.engagement_depth,
+                behaviorProfile: { query: bp.query, transact: bp.transact, govern: bp.govern },
+            },
+            proof: {
+                type: 'EcdsaSecp256k1RecoverySignature2020', // eip191 在 W3C 套件里的标准名
+                created: issued_at,
+                verificationMethod: `${issuerDidWeb}#key-1`, // 指向 did.json 里的 verificationMethod
+                proofPurpose: 'assertionMethod',
+                proofValue: signature,
+                // canonical 不在 W3C VC 标准里,但 webaz consumer 仍需要它来重建签名:
+                webazCanonical: canonical,
+            },
+        };
+        res.json({
+            // 两个格式并存返回 — backward-compat consumer 用 webaz_format,标准 DID/VC consumer 用 vc_format
+            // 顶层保留 webaz_format 的关键字段方便不解嵌的 consumer(类似 ?format=webaz 默认行为)
+            ...webaz_format,
+            vc_format,
+            webaz_format, // 显式重复让消费者明确选哪个
+        });
+    });
+    app.get('/api/me/agents/:apiKeyPrefix/log', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const prefix = String(req.params.apiKeyPrefix || '').replace(/[^A-Za-z0-9_]/g, '').slice(0, 32);
+        if (prefix.length < 8)
+            return void res.status(400).json({ error: 'apiKeyPrefix 至少 8 字符' });
+        const targetKey = db.prepare(`SELECT api_key FROM users WHERE id = ? AND api_key LIKE ? || '%'
+      UNION SELECT api_key FROM agent_reputation WHERE user_id = ? AND api_key LIKE ? || '%'`)
+            .get(user.id, prefix, user.id, prefix);
+        if (!targetKey)
+            return void res.status(404).json({ error: '未找到匹配的 agent api_key（仅可查本人的）' });
+        const limit = Math.min(500, Math.max(10, Number(req.query.limit) || 100));
+        const rows = db.prepare(`SELECT endpoint, method, status_code, created_at FROM agent_call_log
+      WHERE api_key = ? AND created_at > datetime('now', '-30 days') ORDER BY id DESC LIMIT ?`).all(targetKey.api_key, limit);
+        res.json({ items: rows });
+    });
+    app.post('/api/me/agents/declarations', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const b = req.body;
+        const targetApiKey = b.api_key ? String(b.api_key) : user.api_key;
+        const ownership = db.prepare(`SELECT id FROM users WHERE id = ? AND api_key = ?
+      UNION SELECT user_id as id FROM agent_reputation WHERE user_id = ? AND api_key = ?`)
+            .get(user.id, targetApiKey, user.id, targetApiKey);
+        if (!ownership)
+            return void res.status(403).json({ error: 'api_key 不属于本账号' });
+        const operator_name = String(b.operator_name || '').trim().slice(0, 60);
+        if (operator_name.length < 2)
+            return void res.status(400).json({ error: 'operator_name 2-60 字' });
+        const operator_contact = String(b.operator_contact || '').trim().slice(0, 120);
+        if (operator_contact.length < 3)
+            return void res.status(400).json({ error: 'operator_contact 必填' });
+        const purpose = String(b.purpose || '').trim().slice(0, 200);
+        if (purpose.length < 5)
+            return void res.status(400).json({ error: 'purpose 5-200 字' });
+        let scopeJson;
+        try {
+            const s = b.declared_scope;
+            if (!s || typeof s !== 'object')
+                return void res.status(400).json({ error: 'declared_scope 必须是对象' });
+            scopeJson = JSON.stringify(s).slice(0, 2000);
+        }
+        catch {
+            return void res.status(400).json({ error: 'declared_scope 无法序列化' });
+        }
+        const attestationsJson = b.attestations && typeof b.attestations === 'object' ? JSON.stringify(b.attestations).slice(0, 2000) : null;
+        const repo_url = b.repo_url ? String(b.repo_url).slice(0, 200) : null;
+        const homepage = b.homepage ? String(b.homepage).slice(0, 200) : null;
+        db.prepare(`INSERT INTO agent_declarations (
+      api_key, user_id, operator_name, operator_contact, purpose, declared_scope, attestations, repo_url, homepage
+    ) VALUES (?,?,?,?,?,?,?,?,?)
+    ON CONFLICT(api_key) DO UPDATE SET
+      operator_name = excluded.operator_name,
+      operator_contact = excluded.operator_contact,
+      purpose = excluded.purpose,
+      declared_scope = excluded.declared_scope,
+      attestations = excluded.attestations,
+      repo_url = excluded.repo_url,
+      homepage = excluded.homepage,
+      revoked_at = NULL,
+      updated_at = datetime('now')`).run(targetApiKey, user.id, operator_name, operator_contact, purpose, scopeJson, attestationsJson, repo_url, homepage);
+        invalidateAgentBlockedCache(targetApiKey);
+        res.json({ ok: true });
+    });
+    // 用户撤销 agent（铁律 §4 human presence）
+    app.post('/api/me/agents/:apiKeyPrefix/revoke', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const prefix = String(req.params.apiKeyPrefix || '').replace(/[^A-Za-z0-9_]/g, '').slice(0, 32);
+        if (prefix.length < 8)
+            return void res.status(400).json({ error: 'apiKeyPrefix 至少 8 字符' });
+        const targetKey = db.prepare(`SELECT api_key FROM users WHERE id = ? AND api_key LIKE ? || '%'
+      UNION SELECT api_key FROM agent_reputation WHERE user_id = ? AND api_key LIKE ? || '%'`)
+            .get(user.id, prefix, user.id, prefix);
+        if (!targetKey)
+            return void res.status(404).json({ error: '未找到匹配的 agent api_key' });
+        const hpCheck = requireHumanPresence(user.id, 'agent_revoke', (req.body || {}).webauthn_token, 'require_human_presence_for_agent_revoke', () => true);
+        if (!hpCheck.ok)
+            return void res.status(412).json({ error: hpCheck.reason, error_code: hpCheck.error_code });
+        const reason = String((req.body || {}).reason || '').slice(0, 300);
+        db.prepare(`INSERT INTO agent_revocations (target_kind, target_value, revoked_by, revoked_by_role, reason)
+      VALUES ('api_key', ?, ?, 'self', ?)
+      ON CONFLICT(target_kind, target_value, revoked_by) DO NOTHING`).run(targetKey.api_key, user.id, reason);
+        db.prepare(`UPDATE agent_declarations SET revoked_at = datetime('now'), revoked_reason = ? WHERE api_key = ?`).run(reason, targetKey.api_key);
+        invalidateAgentBlockedCache(targetKey.api_key);
+        res.json({ ok: true });
+    });
+    // 撤销同 operator 名下所有 agent（仅撤销本用户给 operator 旗下 agent 的 attestation）
+    app.post('/api/me/agents/operators/:operator_name/revoke', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const opName = String(req.params.operator_name || '').trim().slice(0, 60);
+        if (opName.length < 2)
+            return void res.status(400).json({ error: 'operator_name 至少 2 字' });
+        const hpCheck = requireHumanPresence(user.id, 'agent_revoke', (req.body || {}).webauthn_token, 'require_human_presence_for_agent_revoke', () => true);
+        if (!hpCheck.ok)
+            return void res.status(412).json({ error: hpCheck.reason, error_code: hpCheck.error_code });
+        const reason = String((req.body || {}).reason || '').slice(0, 300);
+        const affected = db.prepare(`UPDATE agent_attestations SET revoked_at = datetime('now')
+      WHERE user_id = ? AND revoked_at IS NULL
+        AND api_key IN (SELECT api_key FROM agent_declarations WHERE operator_name = ?)`)
+            .run(user.id, opName);
+        db.prepare(`INSERT INTO agent_revocations (target_kind, target_value, revoked_by, revoked_by_role, reason)
+      VALUES ('operator_name', ?, ?, 'self', ?)
+      ON CONFLICT(target_kind, target_value, revoked_by) DO NOTHING`).run(opName, user.id, reason);
+        const keys = db.prepare(`SELECT api_key FROM agent_declarations WHERE operator_name = ?`).all(opName);
+        for (const k of keys)
+            invalidateAgentBlockedCache(k.api_key);
+        res.json({ ok: true, attestations_revoked: affected.changes });
+    });
+    // P0 audit fix 4.2: 申诉 strike
+    app.post('/api/me/agents/strikes/:strikeId/appeal', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const strikeId = Number(req.params.strikeId);
+        if (!Number.isInteger(strikeId) || strikeId <= 0)
+            return void res.status(400).json({ error: 'strikeId 必须是正整数' });
+        const strike = db.prepare(`SELECT id, api_key, user_id, severity, issued_at, appeal_status FROM agent_strikes WHERE id = ?`).get(strikeId);
+        if (!strike)
+            return void res.status(404).json({ error: 'strike 不存在' });
+        if (strike.user_id !== user.id)
+            return void res.status(403).json({ error: '只能申诉自己 agent 的 strike' });
+        if (strike.appeal_status !== 'none')
+            return void res.status(409).json({ error: `已申诉过（状态：${strike.appeal_status}）` });
+        const issuedAt = new Date(String(strike.issued_at).replace(' ', 'T') + 'Z').getTime();
+        if (Date.now() - issuedAt > 30 * 86400_000)
+            return void res.status(410).json({ error: '已过 30 天申诉窗口' });
+        const reason = String((req.body || {}).reason || '').trim().slice(0, 500);
+        if (reason.length < 10)
+            return void res.status(400).json({ error: '申诉理由 ≥10 字' });
+        db.prepare(`UPDATE agent_strikes SET appeal_status = 'pending', appeal_reason = ? WHERE id = ?`).run(reason, strikeId);
+        res.json({ ok: true, message: '申诉已提交，等待 root admin 审核' });
+    });
+    // Admin: 审核 strike 申诉
+    app.post('/api/admin/agent-strikes/:strikeId/decide', (req, res) => {
+        const user = requireRootAdmin(req, res);
+        if (!user)
+            return;
+        const strikeId = Number(req.params.strikeId);
+        if (!Number.isInteger(strikeId) || strikeId <= 0)
+            return void res.status(400).json({ error: 'strikeId 必须是正整数' });
+        const decision = String((req.body || {}).decision || '');
+        if (!['approved', 'denied'].includes(decision))
+            return void res.status(400).json({ error: 'decision 必须是 approved / denied' });
+        const strike = db.prepare(`SELECT id, api_key, appeal_status FROM agent_strikes WHERE id = ?`).get(strikeId);
+        if (!strike)
+            return void res.status(404).json({ error: 'strike 不存在' });
+        if (strike.appeal_status !== 'pending')
+            return void res.status(409).json({ error: `当前状态 ${strike.appeal_status} 不可裁决` });
+        db.prepare(`UPDATE agent_strikes SET appeal_status = ?, appeal_decided_by = ?, appeal_decided_at = datetime('now') WHERE id = ?`)
+            .run(decision, user.id, strikeId);
+        invalidateAgentBlockedCache(strike.api_key);
+        // P1 fix 5.3: appeal approved → 恢复因 strike 自动停用的 skills
+        if (decision === 'approved') {
+            try {
+                const uRow = db.prepare(`SELECT id FROM users WHERE api_key = ?`).get(strike.api_key);
+                if (uRow) {
+                    const r = db.prepare(`UPDATE skills SET active = 1, disabled_by_strike_at = NULL
+            WHERE seller_id = ? AND disabled_by_strike_at IS NOT NULL AND active = 0`).run(uRow.id);
+                    if (r.changes > 0)
+                        console.log(`[appeal approved→skill] restored ${r.changes} skills for ${uRow.id}`);
+                }
+            }
+            catch (e) {
+                console.error('[appeal skills restore]', e);
+            }
+        }
+        res.json({ ok: true, decision });
+    });
+    // Admin: 列出待审 strike 申诉
+    app.get('/api/admin/agent-strikes/pending', (req, res) => {
+        const user = requireRootAdmin(req, res);
+        if (!user)
+            return;
+        const rows = db.prepare(`SELECT s.id, s.api_key, s.user_id, u.handle, s.severity, s.reason_code, s.reason_detail, s.issued_at, s.appeal_reason
+      FROM agent_strikes s JOIN users u ON u.id = s.user_id
+      WHERE s.appeal_status = 'pending' ORDER BY s.id DESC LIMIT 100`).all();
+        res.json({ items: rows });
+    });
+    // P1 fix 4.3: admin 主动 issue strike
+    app.post('/api/admin/agent-strikes/issue', (req, res) => {
+        const adminUser = requireRootAdmin(req, res);
+        if (!adminUser)
+            return;
+        const b = req.body;
+        const apiKey = String(b.api_key || '').trim();
+        if (apiKey.length < 8)
+            return void res.status(400).json({ error: 'api_key 必填' });
+        const targetUser = db.prepare(`SELECT id, handle FROM users WHERE api_key = ?`).get(apiKey);
+        if (!targetUser)
+            return void res.status(404).json({ error: '未找到该 api_key' });
+        const reasonCode = String(b.reason_code || '').trim().slice(0, 40);
+        if (!/^[a-z_]{3,40}$/.test(reasonCode))
+            return void res.status(400).json({ error: 'reason_code 必须是 3-40 位 [a-z_]（如 fake_shipment / spam）' });
+        const reasonDetail = b.reason_detail ? String(b.reason_detail).slice(0, 500) : null;
+        const initialSeverity = (b.severity ? String(b.severity) : 'warning');
+        if (!['warning', 'suspend_7d', 'permanent'].includes(initialSeverity)) {
+            return void res.status(400).json({ error: 'severity 必须是 warning / suspend_7d / permanent' });
+        }
+        const result = issueAgentStrike({
+            apiKey, userId: targetUser.id,
+            reasonCode, reasonDetail: reasonDetail || undefined,
+            reportedBy: adminUser.id,
+            relatedRef: b.related_ref ? String(b.related_ref) : undefined,
+            initialSeverity,
+        });
+        res.json({ ok: true, target_handle: targetUser.handle, ...result });
+    });
+    // bilateral attestation（用户批准某 agent 的 scope）
+    app.post('/api/me/agents/attestations', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const b = req.body;
+        const apiKey = String(b.api_key || '');
+        if (!apiKey)
+            return void res.status(400).json({ error: 'api_key 必填' });
+        const decl = db.prepare(`SELECT declared_scope, operator_name, purpose FROM agent_declarations WHERE api_key = ? AND revoked_at IS NULL`).get(apiKey);
+        if (!decl)
+            return void res.status(404).json({ error: '该 agent 未声明 / 已撤销，无法授权' });
+        let approvedScopeJson;
+        try {
+            const s = b.approved_scope;
+            if (!s || typeof s !== 'object')
+                return void res.status(400).json({ error: 'approved_scope 必须是对象' });
+            approvedScopeJson = JSON.stringify(s).slice(0, 2000);
+        }
+        catch {
+            return void res.status(400).json({ error: 'approved_scope 无法序列化' });
+        }
+        const spendCapPerOrder = b.spend_cap_per_order != null ? Math.max(0, Number(b.spend_cap_per_order)) : null;
+        const spendCapDaily = b.spend_cap_daily != null ? Math.max(0, Number(b.spend_cap_daily)) : null;
+        const id = generateId('aat');
+        db.prepare(`INSERT INTO agent_attestations (id, api_key, user_id, approved_scope, spend_cap_per_order, spend_cap_daily)
+      VALUES (?,?,?,?,?,?)
+      ON CONFLICT(api_key, user_id) DO UPDATE SET
+        approved_scope = excluded.approved_scope,
+        spend_cap_per_order = excluded.spend_cap_per_order,
+        spend_cap_daily = excluded.spend_cap_daily,
+        revoked_at = NULL,
+        granted_at = datetime('now')`).run(id, apiKey, user.id, approvedScopeJson, spendCapPerOrder, spendCapDaily);
+        res.json({ ok: true });
+    });
+}

package/dist/pwa/routes/agent-reputation.js

@@ -0,0 +1,34 @@
+export function registerAgentReputationRoutes(app, deps) {
+    const { auth, getAgentTrustCached, getRawModeMinTrust } = deps;
+    app.get('/api/agents/me/reputation', (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const key = req.headers.authorization?.replace('Bearer ', '') ?? '';
+        const t = getAgentTrustCached(key);
+        if (!t)
+            return void res.status(404).json({ error: 'agent_not_found' });
+        const min = getRawModeMinTrust();
+        res.json({
+            api_key_prefix: key.slice(0, 12) + '…',
+            user_id: t.user_id,
+            trust_score: t.trust_score,
+            level: t.level,
+            signals: t.signals,
+            raw_mode_enabled: t.trust_score >= min,
+            raw_mode_min_trust: min,
+        });
+    });
+    app.get('/api/admin/agents/:api_key/reputation', (req, res) => {
+        const admin = auth(req, res);
+        if (!admin)
+            return;
+        if (admin.role !== 'admin')
+            return void res.status(403).json({ error: '仅管理员可查询其他 agent' });
+        const target = req.params.api_key;
+        const t = getAgentTrustCached(target);
+        if (!t)
+            return void res.status(404).json({ error: 'agent_not_found' });
+        res.json(t);
+    });
+}

package/dist/pwa/routes/ai.js

@@ -0,0 +1,101 @@
+export function registerAiRoutes(app, deps) {
+    const { db, auth, anthropic } = deps;
+    // G-2: AI 价格建议
+    app.post('/api/ai/price-suggestion', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void res.status(403).json({ error: '仅卖家可用' });
+        const { title, category, description } = req.body || {};
+        if (!title)
+            return void res.status(400).json({ error: '请提供 title' });
+        // 类目历史价位
+        const stats = db.prepare(`
+      SELECT COUNT(*) as cnt, COALESCE(AVG(price), 0) as avg, COALESCE(MIN(price), 0) as min, COALESCE(MAX(price), 0) as max,
+        COALESCE((SELECT price FROM products WHERE status='active' AND category = ? ORDER BY price LIMIT 1 OFFSET CAST((SELECT COUNT(*) FROM products WHERE status='active' AND category = ?) / 2 AS INTEGER)), 0) as median
+      FROM products WHERE status = 'active' AND category = ?
+    `).get(category || '', category || '', category || '');
+        // 近 30 天成交均价（更可信）
+        const recentAvg = db.prepare(`
+      SELECT COALESCE(AVG(total_amount), 0) as avg FROM orders o
+      JOIN products p ON p.id = o.product_id
+      WHERE p.category = ? AND o.status = 'completed' AND o.created_at > datetime('now', '-30 days')
+    `).get(category || '').avg;
+        try {
+            const message = await anthropic.messages.create({
+                model: 'claude-haiku-4-5-20251001',
+                max_tokens: 400,
+                messages: [{
+                        role: 'user',
+                        content: `你是 WebAZ 定价顾问。给以下商品建议合理定价（WAZ ≈ CNY，1 USDC ≈ 1 WAZ）：
+商品标题: ${String(title).slice(0, 100)}
+类目: ${category || '未填'}
+描述: ${String(description || '').slice(0, 300)}
+
+同类目市场数据（active 商品）：
+- 商品数: ${stats.cnt}
+- 价位区间: ${stats.min} - ${stats.max} WAZ
+- 均价: ${stats.avg.toFixed(0)} WAZ
+- 中位价: ${stats.median} WAZ
+- 近 30 天成交均价: ${recentAvg.toFixed(0)} WAZ
+
+只返回 JSON（无前后缀）：
+{
+  "suggested_price": 推荐价数字,
+  "low_price": 价格区间下限,
+  "high_price": 价格区间上限,
+  "reasoning": "1-2 句简短解释"
+}`,
+                    }],
+            });
+            const text = message.content[0]?.text || '';
+            const m = text.match(/\{[\s\S]*\}/);
+            if (!m)
+                return void res.status(500).json({ error: 'AI 返回格式错误' });
+            const parsed = JSON.parse(m[0]);
+            res.json({ ...parsed, market_data: stats, recent_avg: recentAvg });
+        }
+        catch (e) {
+            res.status(503).json({ error: 'AI 失败: ' + e.message });
+        }
+    });
+    // G-1: AI 文案生成（卖家发品辅助）
+    app.post('/api/ai/generate-description', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void res.status(403).json({ error: '仅卖家可用' });
+        const { title, category, keywords, language } = req.body || {};
+        if (!title)
+            return void res.status(400).json({ error: '请提供 title' });
+        const lang = language === 'en' ? 'English' : '中文';
+        try {
+            const message = await anthropic.messages.create({
+                model: 'claude-haiku-4-5-20251001',
+                max_tokens: 600,
+                messages: [{
+                        role: 'user',
+                        content: `你是 WebAZ 电商文案助手。根据以下信息生成商品描述（${lang}）：
+- 标题: ${String(title).slice(0, 100)}
+- 类目: ${category || '未填'}
+- 关键词: ${(keywords || []).slice(0, 10).join('、') || '无'}
+
+要求：
+1. 100-200 字
+2. 强调 1-2 个差异化卖点
+3. 无虚假宣传 / 无绝对化用语（最、第一）
+4. ${lang}
+5. 不加 emoji
+6. 直接输出文案正文，无多余前后缀`,
+                    }],
+            });
+            const text = message.content[0]?.text || '';
+            res.json({ description: text.trim(), model: 'claude-haiku-4-5' });
+        }
+        catch (e) {
+            res.status(503).json({ error: 'AI 生成失败: ' + e.message });
+        }
+    });
+}