@pisell/private-materials 6.12.180 → 6.12.182

package/es/components/HDLKiosk/app/operations.js

@@ -72,21 +72,18 @@ const checkoutPayEftposOperation = defineOperationContract({
 	id: "checkout.payEftpos",
 	tags: ["checkout-dispatch"],
 	conflictScope: "checkout",
-	timeoutMs: 12e4,
 	retry: "never"
 });
 const checkoutCompleteNoPaymentOperation = defineOperationContract({
 	id: "checkout.completeNoPayment",
 	tags: ["checkout-dispatch"],
 	conflictScope: "checkout",
-	timeoutMs: 12e4,
 	retry: "never"
 });
 const checkoutRequestStaffPaymentApprovalOperation = defineOperationContract({
 	id: "checkout.requestStaffPaymentApproval",
 	tags: ["checkout-authorization"],
 	conflictScope: "checkout",
-	timeoutMs: 2e4,
 	retry: "explicit-user"
 });
 //#endregion

package/es/components/HDLKiosk/components/common/BlockingNotice/index.js

@@ -5,12 +5,22 @@ import React from "react";
 * 运行机制：只呈现已归一化的安全文案和 trace reference；由外层决定何时挂载。
 * 边界：不恢复订单、不发起支付，也不推测 Workflow 下一节点。
 */
-function BlockingNotice({ title, description, reference }) {
+function BackIcon() {
+	return /* @__PURE__ */ React.createElement("svg", {
+		viewBox: "0 0 24 24",
+		"aria-hidden": "true"
+	}, /* @__PURE__ */ React.createElement("path", { d: "m10 7-5 5 5 5M5 12h14" }));
+}
+function BlockingNotice({ title, description, reference, actionLabel, actionBusy = false, onAction }) {
 	return /* @__PURE__ */ React.createElement("section", {
 		className: "hdl-content-screen hdl-blocked-screen",
 		role: "alert",
 		"aria-live": "assertive"
-	}, /* @__PURE__ */ React.createElement("span", { "aria-hidden": "true" }, "!"), /* @__PURE__ */ React.createElement("h1", null, title), /* @__PURE__ */ React.createElement("p", null, description), reference ? /* @__PURE__ */ React.createElement("small", null, "Reference: ", reference) : null);
+	}, /* @__PURE__ */ React.createElement("span", { "aria-hidden": "true" }, "!"), /* @__PURE__ */ React.createElement("h1", null, title), /* @__PURE__ */ React.createElement("p", null, description), reference ? /* @__PURE__ */ React.createElement("small", null, "Reference: ", reference) : null, actionLabel && onAction ? /* @__PURE__ */ React.createElement("button", {
+		type: "button",
+		disabled: actionBusy,
+		onClick: onAction
+	}, /* @__PURE__ */ React.createElement(BackIcon, null), /* @__PURE__ */ React.createElement("span", null, actionLabel)) : null);
 }
 //#endregion
 export { BlockingNotice };

package/es/components/HDLKiosk/components/common/BlockingNotice/index.less

@@ -1,6 +1,90 @@
 .pisell-hdl-kiosk {
+  .hdl-blocked-screen {
+    width: min(820px, 100%);
+    align-items: center;
+    text-align: center;
+  }
+
+  .hdl-blocked-screen > span {
+    width: 99px;
+    height: 99px;
+    margin-bottom: 28px;
+    border-radius: 30px;
+    background: #fff1f2;
+    color: var(--hdl-brand);
+    box-shadow: inset 0 0 0 1px rgba(178, 13, 18, 0.08),
+      0 12px 28px rgba(178, 13, 18, 0.1);
+  }
+
+  .hdl-blocked-screen h1 {
+    max-width: 650px;
+    margin: 0 auto;
+    color: #111827;
+    font-size: 46px;
+    font-weight: 950;
+    letter-spacing: -0.04em;
+    line-height: 1.08;
+  }
+
+  .hdl-blocked-screen p {
+    max-width: 610px;
+    margin: 18px auto 0;
+    color: var(--hdl-muted);
+    font-size: 22px;
+    font-weight: 680;
+    line-height: 1.5;
+  }
+
   .hdl-blocked-screen small {
     margin-top: 26px;
     color: var(--hdl-muted);
   }
+
+  .hdl-blocked-screen button {
+    display: flex;
+    width: min(610px, 100%);
+    min-height: 72px;
+    align-items: center;
+    justify-content: center;
+    gap: 14px;
+    margin-top: 42px;
+    border: 0;
+    border-radius: 1079px;
+    padding: 0 28px;
+    background: linear-gradient(180deg, #20b8aa, #119184);
+    color: #fff;
+    font-size: 20px;
+    font-weight: 900;
+    box-shadow: 0 15px 32px rgba(17, 145, 132, 0.28);
+    cursor: pointer;
+    transition: transform 160ms ease, box-shadow 160ms ease;
+  }
+
+  .hdl-blocked-screen button:hover:not(:disabled) {
+    transform: translateY(-2px);
+    box-shadow: 0 19px 39px rgba(17, 145, 132, 0.32);
+  }
+
+  .hdl-blocked-screen button:active:not(:disabled) {
+    transform: translateY(1px) scale(0.99);
+  }
+
+  .hdl-blocked-screen button:focus-visible {
+    outline: 4px solid rgba(37, 99, 235, 0.25);
+    outline-offset: 3px;
+  }
+
+  .hdl-blocked-screen button:disabled {
+    cursor: not-allowed;
+  }
+
+  .hdl-blocked-screen button > svg {
+    width: 27px;
+    height: 27px;
+    fill: none;
+    stroke: currentColor;
+    stroke-linecap: round;
+    stroke-linejoin: round;
+    stroke-width: 2;
+  }
 }

package/es/components/HDLKiosk/docs/01-/346/240/270/345/277/203/350/277/220/350/241/214/346/234/272/345/210/266.md

@@ -320,8 +320,9 @@ partialFailure/unknown 的 Screen Command 会通过 Actor 的 system block 入
 | `cart.update/remove`                 | cart     | 15s     | 数量修改/删除、summary 重算和目标行验证                                              |
 | `product.syncPrimaryWeightedProduct` | cart     | —       | 首次写入可能等待 OS 额外业务弹窗；更新或写入后验证重量/options 和写后证据            |
 | `product.removePrimaryProduct`       | cart     | 15s     | 将主商品置为不存在；本来不存在时直接成功，存在时验证删除结果                         |
-| `checkout.payEftpos`                 | checkout | 120s    | 内部校验 fulfillment、cart、summary 与 token，再派发 EFTPOS                          |
-| `checkout.requestStaffPaymentApproval` | checkout | 20s   | 请求主屏店员授权；终态结果由支付订阅单独返回                                         |
+| `checkout.payEftpos`                 | checkout | —       | 内部校验 fulfillment、cart、summary 与 token，再等待 EFTPOS 终态                     |
+| `checkout.completeNoPayment`         | checkout | —       | 提交零元订单并等待 Host 返回可验证的订单终态                                          |
+| `checkout.requestStaffPaymentApproval` | checkout | —     | 请求主屏店员授权；终态结果由支付订阅单独返回                                           |
 
 ### 7.2 冲突矩阵
 
@@ -434,7 +435,7 @@ Shell Login
 
 当前物料不维护 idle 计时器或警告弹窗。Payment 成功进入 Payment Completed 后立即执行 `session.finalizeCompletedOrder`，验证 Host 空订单和一致性，但保留成功页 Actor 与订单展示快照。10 秒倒计时或手动返回调用 `returnToEntry(reason?)`：它对并发请求去重；已完成清理时直接释放 Actor 和 Ingress，清理失败时补做 `session.reset`，成功后再返回 Entry。
 
-未来应用级生命周期策略可以决定何时调用该接口，但不能直接清 React 状态或只切换页面。支付 pending/unknown、reset 失败等情况仍由既有安全策略 fail closed。
+未来应用级生命周期策略可以决定何时调用该接口，但不能直接清 React 状态或只切换页面。支付 pending 继续等待外部终态；unknown 保持重付与订单写入冻结，但允许阻断页显式 reset。reset 失败保留错误证据并允许再次发起恢复，不形成无出口页面。
 
 ### 8.6 主动退出订单
 

package/es/components/HDLKiosk/docs/02-Host/351/200/202/351/205/215/344/270/216/344/270/232/345/212/241/346/225/260/346/215/256.md

@@ -182,7 +182,7 @@ Adapter 不从 Cart 行合计最终金额。
 | BigSale/OS 原始事实                       | HDLKiosk Payment                   |
 | ----------------------------------------- | ---------------------------------- |
 | `unpaid`、`pending`、`payment_processing` | `idle`，仍是可编辑草稿             |
-| `payment_pending`、通用 `processing`      | `pending`，冻结重付/reset          |
+| `payment_pending`、通用 `processing`      | `pending`，冻结重付与订单写入；显式 reset 仅作为恢复出口 |
 | `failed`、`declined`                      | `failed`                           |
 | `paid` + orderId                          | `succeeded`                        |
 | `paid` + 无 orderId + 空 cart             | `idle`，识别 OS reset 后的短暂空壳 |

package/es/components/HDLKiosk/docs/03-/344/270/232/345/212/241/346/265/201/347/250/213/344/270/216/344/272/244/344/272/222/350/247/204/345/210/231.md

@@ -35,8 +35,8 @@ Entry → Identity → Customization → Catalog → Fulfillment
 - Cart Overlay 中的卡券和中途登录可能改变金额，Checkout Prepare 必须在这些写入稳定后执行。
 - EFTPOS 或店员付款只有在 Host 确认 `payment.succeeded` 后才切换为 Checkout Screen 内的支付成功展示。
 - 成功展示复用 `PaymentResultToastV2`，优先显示 OS 本地订单的 `shop_full_order_number`；本地为空时异步查询只读订单详情，查询期间显示生成中，不得从 payment result 或内部 `orderId` 推断。
-- Host 明确确认支付成功并进入 Payment Completed 后立即清空购物车、客户和履约工作区，同时保留支付结果与已完成订单快照供成功页展示；成功页沿用旧 Kiosk 的 10 秒返回首页能力，本地缺少取餐码时，订单详情异步加载的时间不计入倒计时，请求结束后才从完整 10 秒开始。明确取消或失败留在支付页并给出可重试反馈，timeout/unknown 继续阻断重复支付和订单重置。
-- Payment Method 提供“重新开始订单”，仅在 payment idle/failed 时可用；二次确认后复用 `session.reset` 安全清空，pending/unknown/succeeded 时禁止执行。
+- Host 明确确认支付成功并进入 Payment Completed 后立即清空购物车、客户和履约工作区，同时保留支付结果与已完成订单快照供成功页展示；成功页沿用旧 Kiosk 的 10 秒返回首页能力，本地缺少取餐码时，订单详情异步加载的时间不计入倒计时，请求结束后才从完整 10 秒开始。明确取消或失败留在支付页并给出可重试反馈，unknown 继续阻断重复支付和订单写入，但阻断页允许显式 reset 返回入口。
+- Payment Method 提供“重新开始订单”，仅在 payment idle/failed 时可用；二次确认后复用 `session.reset` 安全清空。pending 时继续等待外部终态，unknown 则进入带恢复入口的安全阻断页。
 
 ## 4. Barcode
 

package/es/components/HDLKiosk/docs/05-/344/272/244/346/230/223/345/256/211/345/205/250.md

@@ -7,10 +7,10 @@
 1. Host/OS 是订单、金额和支付的最终权威。
 2. 写命令返回成功不等于业务事实已经可见。
 3. timeout/unknown 可能已经生效，不能自动重试危险操作。
-4. payment pending/unknown 时不能重付、reset 或开始下一单。
+4. payment pending/unknown 时不能重付或修改订单；明确的 `session.reset` 是唯一恢复出口。
 5. 当前不做跨刷新会话恢复；刷新后的订单与支付处置由 Host/OS 负责。
 
-Operation timeout 只保护不应无限等待的机器阶段，不能限制顾客完成选择的时间。会等待规格或 OS 业务弹窗的 Operation 不声明 `timeoutMs`，由 Host 的完成或取消结果结束；登录认证 UI 同样在 Operation 外独立等待。纯机器调用可以声明超时，例如认证完成后的 `identity.sync`。支付 dispatch 是例外：超时后可能已经扣款，必须保留有限等待并进入 `unknown`，禁止直接重试。未声明超时的 Operation 等待期间仍持有冲突域，因此 Host 必须保证正常完成、取消和页面销毁路径最终可终结调用。
+Operation timeout 只保护不应无限等待的机器阶段，不能限制顾客完成选择、设备支付或跨屏授权的时间。会等待规格、OS 业务弹窗、支付设备或外部事件的 Operation 不声明 `timeoutMs`，由 Host 的完成、取消或终态结果结束；登录认证 UI 同样在 Operation 外独立等待。纯机器调用可以声明超时，例如认证完成后的 `identity.sync`。未声明超时的 Operation 等待期间仍持有冲突域，因此 Host 必须保证正常完成、取消和页面销毁路径最终可终结调用。
 
 ## 2. Cart Mutation
 

package/es/components/HDLKiosk/docs//346/236/266/346/236/204/350/256/276/350/256/241.md

@@ -168,7 +168,7 @@ Screen：输入和展示状态
 10. Operation 只有在写后事实收敛后才成功。
 11. partialFailure、timeout、unknown 不得伪装成失败或成功。
 12. Checkout opening/pending/unknown 后冻结危险写。
-13. Payment pending/unknown 时不可重付、reset 或开始下一单。
+13. Payment pending/unknown 时不可重付或修改订单；阻断页只允许显式 `session.reset` 恢复并返回入口。
 14. Shell 登录不改变 Workflow 节点，完成后必须观察最新 customer/summary。
 15. OS 加购中的额外业务弹窗属于 OS，HDLKiosk 只消费加购结果。
 16. Scanner/Scale 在顶层单一接入；Entry Ingress 只负责启动会话，设备入口不是 Workflow Activity；会话内的 Screen 只消费自身所需的实时快照。

package/es/components/HDLKiosk/runtime/operations/checkoutSafety.js

@@ -101,7 +101,8 @@ function createCheckoutSafetyController({ tokenTtlMs = DEFAULT_TOKEN_TTL_MS, now
 		state: () => currentState,
 		blocks: (operationTags, scope) => {
 			if (scope === "none") return false;
-			if (currentState === "succeeded" && (operationTags.includes("session-reset") || operationTags.includes("completed-order-finalize"))) return false;
+			if (operationTags.includes("session-reset")) return false;
+			if (currentState === "succeeded" && operationTags.includes("completed-order-finalize")) return false;
 			return [
 				"opening",
 				"unknown",

package/es/components/HDLKiosk/slices/payment/view.js

@@ -52,14 +52,14 @@ function createPaymentFeedback(snapshot, sales) {
 	};
 }
 function createCheckoutScreenModel(snapshot, sales, payment, completed = false, resetting = false, sourceData, paymentResult) {
-	var _sourceSummary$amount;
+	var _ref, _sourceData$amountDue;
 	const tempOrder = completed ? void 0 : sourceData === null || sourceData === void 0 ? void 0 : sourceData.tempOrder;
 	const completedOrder = completed ? sourceData === null || sourceData === void 0 ? void 0 : sourceData.completedOrder : void 0;
 	const sourceSummary = completed ? void 0 : sourceData === null || sourceData === void 0 ? void 0 : sourceData.summary;
 	const paymentSafeToChange = sales.payment.status === "idle" || sales.payment.status === "failed";
 	const interactionAvailable = !completed && !resetting && snapshot.status === "idle" && paymentSafeToChange;
 	const noPaymentRequired = !completed && isZeroCheckoutDue(sales);
-	const sourceAmountDue = (_sourceSummary$amount = sourceSummary === null || sourceSummary === void 0 ? void 0 : sourceSummary.amount_gap) !== null && _sourceSummary$amount !== void 0 ? _sourceSummary$amount : sourceSummary === null || sourceSummary === void 0 ? void 0 : sourceSummary.expect_amount;
+	const sourceAmountDue = (_ref = (_sourceData$amountDue = sourceData === null || sourceData === void 0 ? void 0 : sourceData.amountDue) !== null && _sourceData$amountDue !== void 0 ? _sourceData$amountDue : sourceSummary === null || sourceSummary === void 0 ? void 0 : sourceSummary.amount_gap) !== null && _ref !== void 0 ? _ref : sourceSummary === null || sourceSummary === void 0 ? void 0 : sourceSummary.expect_amount;
 	const sourceCurrencySymbol = tempOrder === null || tempOrder === void 0 ? void 0 : tempOrder.currency_symbol;
 	const totalText = sales.summary.status === "ready" ? formatCurrencyAmount(sales.summary.due, sales.summary.currencySymbol) : sourceAmountDue !== void 0 && sourceAmountDue !== null ? formatCurrencyAmount(sourceAmountDue, sourceCurrencySymbol) : void 0;
 	return Object.freeze({

package/es/components/HDLKiosk/ui/HDLKioskWorkflowView.js

@@ -42,11 +42,14 @@ function HDLKioskWorkflowCartOverlay({ model, busy, memberAction, send, renderCa
 		} : void 0
 	});
 }
-function HDLKioskWorkflowBlockingSurface({ snapshot, title, description, reference, hideBottomBar = false }) {
+function HDLKioskWorkflowBlockingSurface({ snapshot, title, description, reference, hideBottomBar = false, actionLabel, actionBusy = false, onAction }) {
 	return /* @__PURE__ */ React.createElement(HDLKioskShell, { snapshot }, /* @__PURE__ */ React.createElement(HDLKioskBottomBarHost, { mode: hideBottomBar ? "hidden" : void 0 }, /* @__PURE__ */ React.createElement(HDLKioskHeader, null), /* @__PURE__ */ React.createElement("main", { className: "hdl-shell__main" }, /* @__PURE__ */ React.createElement(BlockingNotice, {
 		title,
 		description,
-		reference
+		reference,
+		actionLabel,
+		actionBusy,
+		onAction
 	}))));
 }
 /**
@@ -124,6 +127,9 @@ function HDLKioskWorkflowView({ session, host, sales, config, isActive, returnin
 	const returnFromPaymentConflict = useCallback(() => {
 		returnToEntry("payment-order-conflict");
 	}, [returnToEntry]);
+	const recoverToEntry = useCallback(() => {
+		returnToEntry(snapshot.status === "blocked" ? "blocked-recovery" : "reset-retry");
+	}, [returnToEntry, snapshot.status]);
 	const customer = useHDLKioskCustomerController({
 		session,
 		snapshot,
@@ -196,7 +202,10 @@ function HDLKioskWorkflowView({ session, host, sales, config, isActive, returnin
 		snapshot,
 		title: locales.getText("pisell2.hdl-kiosk.reset-failed-title"),
 		description: locales.getText("pisell2.hdl-kiosk.reset-failed-description"),
-		reference: returnError.traceId
+		reference: returnError.traceId,
+		actionLabel: locales.getText(returning ? "pisell2.hdl-kiosk.resetting-order" : "pisell2.hdl-kiosk.back-home"),
+		actionBusy: returning,
+		onAction: recoverToEntry
 	});
 	if (snapshot.status === "blocked") {
 		var _snapshot$lastError;
@@ -205,7 +214,10 @@ function HDLKioskWorkflowView({ session, host, sales, config, isActive, returnin
 			title: locales.getText("pisell2.hdl-kiosk.blocked-title"),
 			description: locales.getText("pisell2.hdl-kiosk.blocked-description"),
 			reference: (_snapshot$lastError = snapshot.lastError) === null || _snapshot$lastError === void 0 ? void 0 : _snapshot$lastError.traceId,
-			hideBottomBar: true
+			hideBottomBar: true,
+			actionLabel: locales.getText(returning ? "pisell2.hdl-kiosk.resetting-order" : "pisell2.hdl-kiosk.back-home"),
+			actionBusy: returning,
+			onAction: recoverToEntry
 		});
 	}
 	if (paymentOrderConflict) return /* @__PURE__ */ React.createElement(HDLKioskShell, { snapshot }, /* @__PURE__ */ React.createElement(HDLKioskBottomBarHost, { mode: "hidden" }, /* @__PURE__ */ React.createElement(HDLKioskHeader, null), /* @__PURE__ */ React.createElement("main", { className: "hdl-shell__main" }, /* @__PURE__ */ React.createElement(PaymentConflictNotice, {

package/es/components/HDLKiosk/utils.js

@@ -47,7 +47,7 @@ function isMergedSourceBookingLine(line, product) {
 }
 /** 直接从 sourceData 就近派生 UI 所需字段，不经过 Host 或 Template DTO。 */
 function createSourceDataSalesView(sourceData) {
-	var _sourceData$cartItems, _tempOrder$payment_st, _tempOrder$currency_c, _tempOrder$currency_s, _summary$total_amount, _ref9, _summary$amount_gap, _customer$id, _tempOrder$order_id, _sourceData$salesStat, _summary$product_quan;
+	var _sourceData$cartItems, _tempOrder$payment_st, _tempOrder$currency_c, _tempOrder$currency_s, _summary$total_amount, _ref9, _ref10, _sourceData$amountDue, _customer$id, _tempOrder$order_id, _sourceData$salesStat, _summary$product_quan;
 	const lines = Object.freeze(((_sourceData$cartItems = sourceData === null || sourceData === void 0 ? void 0 : sourceData.cartItems) !== null && _sourceData$cartItems !== void 0 ? _sourceData$cartItems : []).map((rawLine) => {
 		var _ref2, _ref3, _rawLine$_extend$disp, _rawLine$_extend, _product$_extend5, _product$product_sku$, _product$product_sku2, _product$product_sku$2, _product$product_sku3, _ref4, _product$product_sku$3, _product$product_sku4, _product$total, _ref5, _product$image_url, _product$image, _product$main_image, _ref6, _product$product_id2, _ref7, _ref8, _product$title, _rawLine$_extend2;
 		const product = readSourceProduct(rawLine);
@@ -83,7 +83,7 @@ function createSourceDataSalesView(sourceData) {
 		currency: String((_tempOrder$currency_c = tempOrder === null || tempOrder === void 0 ? void 0 : tempOrder.currency_code) !== null && _tempOrder$currency_c !== void 0 ? _tempOrder$currency_c : ""),
 		currencySymbol: String((_tempOrder$currency_s = tempOrder === null || tempOrder === void 0 ? void 0 : tempOrder.currency_symbol) !== null && _tempOrder$currency_s !== void 0 ? _tempOrder$currency_s : ""),
 		total: String((_summary$total_amount = summary.total_amount) !== null && _summary$total_amount !== void 0 ? _summary$total_amount : 0),
-		due: String((_ref9 = (_summary$amount_gap = summary.amount_gap) !== null && _summary$amount_gap !== void 0 ? _summary$amount_gap : summary.expect_amount) !== null && _ref9 !== void 0 ? _ref9 : 0)
+		due: String((_ref9 = (_ref10 = (_sourceData$amountDue = sourceData === null || sourceData === void 0 ? void 0 : sourceData.amountDue) !== null && _sourceData$amountDue !== void 0 ? _sourceData$amountDue : summary.amount_gap) !== null && _ref10 !== void 0 ? _ref10 : summary.expect_amount) !== null && _ref9 !== void 0 ? _ref9 : 0)
 	} : { status: "missing" };
 	const customerId = String((_customer$id = customer === null || customer === void 0 ? void 0 : customer.id) !== null && _customer$id !== void 0 ? _customer$id : "");
 	const fingerprint = [

package/es/components/bigSale/templates/HDLKiosk/index.js

@@ -4,6 +4,7 @@ import { getOrderDetail } from "../../../ticketBooking/serve.js";
 import localeTexts from "../../../HDLKiosk/locales.js";
 import HDLKiosk from "../../../HDLKiosk/index.js";
 import { resolveHDLKioskConfig } from "../../../HDLKiosk/app/contracts/config.js";
+import { resolveBigSaleCurrentAmountDue } from "./utils/transactionState.js";
 import { useBigSaleHDLKioskAdapter } from "./hooks/useBigSaleHDLKioskAdapter.js";
 import { useHDLKioskEntryPreparationToast } from "./hooks/useHDLKioskEntryPreparationToast.js";
 import { HDLKioskPaymentRuntime } from "./payment/HDLKioskPaymentRuntime.js";
@@ -136,6 +137,7 @@ function HDLKioskBigSaleTemplate({ isActive = true, context, businessCode, local
 			cartItems: (_context$cart$display = context.cart.displayLines) !== null && _context$cart$display !== void 0 ? _context$cart$display : context.cart.items,
 			customer: context.customer.selected,
 			summary: context.summary.summary,
+			amountDue: resolveBigSaleCurrentAmountDue(context),
 			salesStatus: context.sales.status,
 			cartConsistencyPending: context.cart.consistencyPending
 		},

package/es/components/bigSale/templates/HDLKiosk/payment/HDLKioskPaymentRuntime.js

@@ -3,7 +3,7 @@ import useEngineContext from "../../../../../hooks/useEngineContext.js";
 import { CHECKOUT_VISIBLE_PAYMENT_CODES } from "../../../../checkout/constants.js";
 import PaymentMethodRuntime_default from "../../../../checkout/paymentRuntime/PaymentMethodRuntime.js";
 import { reorderPaymentMethodList } from "../../../../checkout/utils.js";
-import { resolveBigSaleCheckoutAmountDue } from "../utils/transactionState.js";
+import { resolveBigSaleCurrentAmountDue } from "../utils/transactionState.js";
 import { failed } from "../utils/normalize.js";
 import { executeEftposPayment } from "./eftposPayment.js";
 import { createStaffPaymentAuthorizationStore, isStaffPaymentAuthorizationCancelled, resolveStaffPaymentResult } from "./staffPaymentAuthorization.js";
@@ -32,7 +32,7 @@ function asKioskMethod(method) {
 	});
 }
 function currentAmount(context) {
-	const amount = resolveBigSaleCheckoutAmountDue(context);
+	const amount = resolveBigSaleCurrentAmountDue(context);
 	return typeof amount === "number" && Number.isFinite(amount) && amount > 0 ? amount : 0;
 }
 function HDLKioskPaymentRuntime({ context, controllerRef, onPaymentResultChange }) {

package/es/components/bigSale/templates/HDLKiosk/payment/noPaymentOrder.js

@@ -1,6 +1,6 @@
 import { _asyncToGenerator } from "../../../../../_virtual/_@oxc-project_runtime@0.122.0/helpers/asyncToGenerator.js";
 import { isSalesOrderSubmitSuccess, resolveSaleDetailOrderIdFromSalesResult } from "../../../../../plus/saleDetail/components/DetailActions/utils.js";
-import { resolveBigSaleCheckoutAmountDue, resolveBigSaleLiveTempOrder } from "../utils/transactionState.js";
+import { resolveBigSaleCurrentAmountDue, resolveBigSaleLiveTempOrder } from "../utils/transactionState.js";
 import { failed, unknown } from "../utils/normalize.js";
 import { createHDLKioskPaymentResult } from "./paymentResult.js";
 //#region src/components/bigSale/templates/HDLKiosk/payment/noPaymentOrder.ts
@@ -23,7 +23,7 @@ function completeBigSaleNoPaymentOrder(_x) {
 function _completeBigSaleNoPaymentOrder() {
 	_completeBigSaleNoPaymentOrder = _asyncToGenerator(function* ({ context, signal, onCompleted }) {
 		var _data$payment_status;
-		if (resolveBigSaleCheckoutAmountDue(context) !== 0) return failed("noPaymentAmountInvalid", "back");
+		if (resolveBigSaleCurrentAmountDue(context) !== 0) return failed("noPaymentAmountInvalid", "back");
 		if (signal.aborted) return {
 			status: "cancelled",
 			reason: "noPaymentAbortedBeforeDispatch"

package/es/components/bigSale/templates/HDLKiosk/utils/transactionState.js

@@ -17,8 +17,12 @@ function finiteMoney(value) {
 	const amount = Number(value);
 	return Number.isFinite(amount) ? value : void 0;
 }
-/** 与 BigSale Checkout 共用 OS 金额语义，优先使用 BaseSales 当前支付阶段 amountGap。 */
-function resolveBigSaleCheckoutAmountDue(context) {
+/**
+* 解析 HDLKiosk 当前临时订单的实时应付金额。
+* 仅用于提交前 To Pay、Payment Amount Due、支付入口和零元门禁；正式提交返回的
+* order_wait_pay_amount 只负责结果一致性确认，不能反向成为 Kiosk 展示状态。
+*/
+function resolveBigSaleCurrentAmountDue(context) {
 	var _context$summary$summ, _context$sales$bookin, _context$sales$bookin2, _finiteMoney;
 	const liveOrder = resolveBigSaleLiveTempOrder(context);
 	const summary = (_context$summary$summ = context.summary.summary) !== null && _context$summary$summ !== void 0 ? _context$summary$summ : liveOrder === null || liveOrder === void 0 ? void 0 : liveOrder.summary;
@@ -106,7 +110,7 @@ function projectBigSaleTransactionState(context, observationId = 0) {
 	const rawLines = (_context$cart$display = context.cart.displayLines) !== null && _context$cart$display !== void 0 ? _context$cart$display : context.cart.items;
 	const lines = Object.freeze(rawLines.map(projectBigSaleCartLine).filter((line) => line !== null));
 	const summary = context.summary.summary;
-	const amountDue = resolveBigSaleCheckoutAmountDue(context);
+	const amountDue = resolveBigSaleCurrentAmountDue(context);
 	const liveOrder = resolveBigSaleLiveTempOrder(context);
 	const normalizedSummary = summary && amountDue !== void 0 ? Object.freeze({
 		status: "ready",
@@ -162,4 +166,4 @@ function createBigSaleTransactionStateReader(getContext) {
 	};
 }
 //#endregion
-export { createBigSaleTransactionStateReader, projectBigSaleCartLine, resolveBigSaleCheckoutAmountDue, resolveBigSaleLineId, resolveBigSaleLiveTempOrder };
+export { createBigSaleTransactionStateReader, projectBigSaleCartLine, resolveBigSaleCurrentAmountDue, resolveBigSaleLineId, resolveBigSaleLiveTempOrder };

package/lib/components/HDLKiosk/app/operations.js

@@ -72,21 +72,18 @@ const checkoutPayEftposOperation = defineOperationContract({
 	id: "checkout.payEftpos",
 	tags: ["checkout-dispatch"],
 	conflictScope: "checkout",
-	timeoutMs: 12e4,
 	retry: "never"
 });
 const checkoutCompleteNoPaymentOperation = defineOperationContract({
 	id: "checkout.completeNoPayment",
 	tags: ["checkout-dispatch"],
 	conflictScope: "checkout",
-	timeoutMs: 12e4,
 	retry: "never"
 });
 const checkoutRequestStaffPaymentApprovalOperation = defineOperationContract({
 	id: "checkout.requestStaffPaymentApproval",
 	tags: ["checkout-authorization"],
 	conflictScope: "checkout",
-	timeoutMs: 2e4,
 	retry: "explicit-user"
 });
 //#endregion

package/lib/components/HDLKiosk/components/common/BlockingNotice/index.js

@@ -7,12 +7,22 @@ react = require_runtime.__toESM(react);
 * 运行机制：只呈现已归一化的安全文案和 trace reference；由外层决定何时挂载。
 * 边界：不恢复订单、不发起支付，也不推测 Workflow 下一节点。
 */
-function BlockingNotice({ title, description, reference }) {
+function BackIcon() {
+	return /* @__PURE__ */ react.default.createElement("svg", {
+		viewBox: "0 0 24 24",
+		"aria-hidden": "true"
+	}, /* @__PURE__ */ react.default.createElement("path", { d: "m10 7-5 5 5 5M5 12h14" }));
+}
+function BlockingNotice({ title, description, reference, actionLabel, actionBusy = false, onAction }) {
 	return /* @__PURE__ */ react.default.createElement("section", {
 		className: "hdl-content-screen hdl-blocked-screen",
 		role: "alert",
 		"aria-live": "assertive"
-	}, /* @__PURE__ */ react.default.createElement("span", { "aria-hidden": "true" }, "!"), /* @__PURE__ */ react.default.createElement("h1", null, title), /* @__PURE__ */ react.default.createElement("p", null, description), reference ? /* @__PURE__ */ react.default.createElement("small", null, "Reference: ", reference) : null);
+	}, /* @__PURE__ */ react.default.createElement("span", { "aria-hidden": "true" }, "!"), /* @__PURE__ */ react.default.createElement("h1", null, title), /* @__PURE__ */ react.default.createElement("p", null, description), reference ? /* @__PURE__ */ react.default.createElement("small", null, "Reference: ", reference) : null, actionLabel && onAction ? /* @__PURE__ */ react.default.createElement("button", {
+		type: "button",
+		disabled: actionBusy,
+		onClick: onAction
+	}, /* @__PURE__ */ react.default.createElement(BackIcon, null), /* @__PURE__ */ react.default.createElement("span", null, actionLabel)) : null);
 }
 //#endregion
 exports.BlockingNotice = BlockingNotice;

package/lib/components/HDLKiosk/components/common/BlockingNotice/index.less

@@ -1,6 +1,90 @@
 .pisell-hdl-kiosk {
+  .hdl-blocked-screen {
+    width: min(820px, 100%);
+    align-items: center;
+    text-align: center;
+  }
+
+  .hdl-blocked-screen > span {
+    width: 99px;
+    height: 99px;
+    margin-bottom: 28px;
+    border-radius: 30px;
+    background: #fff1f2;
+    color: var(--hdl-brand);
+    box-shadow: inset 0 0 0 1px rgba(178, 13, 18, 0.08),
+      0 12px 28px rgba(178, 13, 18, 0.1);
+  }
+
+  .hdl-blocked-screen h1 {
+    max-width: 650px;
+    margin: 0 auto;
+    color: #111827;
+    font-size: 46px;
+    font-weight: 950;
+    letter-spacing: -0.04em;
+    line-height: 1.08;
+  }
+
+  .hdl-blocked-screen p {
+    max-width: 610px;
+    margin: 18px auto 0;
+    color: var(--hdl-muted);
+    font-size: 22px;
+    font-weight: 680;
+    line-height: 1.5;
+  }
+
   .hdl-blocked-screen small {
     margin-top: 26px;
     color: var(--hdl-muted);
   }
+
+  .hdl-blocked-screen button {
+    display: flex;
+    width: min(610px, 100%);
+    min-height: 72px;
+    align-items: center;
+    justify-content: center;
+    gap: 14px;
+    margin-top: 42px;
+    border: 0;
+    border-radius: 1079px;
+    padding: 0 28px;
+    background: linear-gradient(180deg, #20b8aa, #119184);
+    color: #fff;
+    font-size: 20px;
+    font-weight: 900;
+    box-shadow: 0 15px 32px rgba(17, 145, 132, 0.28);
+    cursor: pointer;
+    transition: transform 160ms ease, box-shadow 160ms ease;
+  }
+
+  .hdl-blocked-screen button:hover:not(:disabled) {
+    transform: translateY(-2px);
+    box-shadow: 0 19px 39px rgba(17, 145, 132, 0.32);
+  }
+
+  .hdl-blocked-screen button:active:not(:disabled) {
+    transform: translateY(1px) scale(0.99);
+  }
+
+  .hdl-blocked-screen button:focus-visible {
+    outline: 4px solid rgba(37, 99, 235, 0.25);
+    outline-offset: 3px;
+  }
+
+  .hdl-blocked-screen button:disabled {
+    cursor: not-allowed;
+  }
+
+  .hdl-blocked-screen button > svg {
+    width: 27px;
+    height: 27px;
+    fill: none;
+    stroke: currentColor;
+    stroke-linecap: round;
+    stroke-linejoin: round;
+    stroke-width: 2;
+  }
 }

package/lib/components/HDLKiosk/docs/01-/346/240/270/345/277/203/350/277/220/350/241/214/346/234/272/345/210/266.md

@@ -320,8 +320,9 @@ partialFailure/unknown 的 Screen Command 会通过 Actor 的 system block 入
 | `cart.update/remove`                 | cart     | 15s     | 数量修改/删除、summary 重算和目标行验证                                              |
 | `product.syncPrimaryWeightedProduct` | cart     | —       | 首次写入可能等待 OS 额外业务弹窗；更新或写入后验证重量/options 和写后证据            |
 | `product.removePrimaryProduct`       | cart     | 15s     | 将主商品置为不存在；本来不存在时直接成功，存在时验证删除结果                         |
-| `checkout.payEftpos`                 | checkout | 120s    | 内部校验 fulfillment、cart、summary 与 token，再派发 EFTPOS                          |
-| `checkout.requestStaffPaymentApproval` | checkout | 20s   | 请求主屏店员授权；终态结果由支付订阅单独返回                                         |
+| `checkout.payEftpos`                 | checkout | —       | 内部校验 fulfillment、cart、summary 与 token，再等待 EFTPOS 终态                     |
+| `checkout.completeNoPayment`         | checkout | —       | 提交零元订单并等待 Host 返回可验证的订单终态                                          |
+| `checkout.requestStaffPaymentApproval` | checkout | —     | 请求主屏店员授权；终态结果由支付订阅单独返回                                           |
 
 ### 7.2 冲突矩阵
 
@@ -434,7 +435,7 @@ Shell Login
 
 当前物料不维护 idle 计时器或警告弹窗。Payment 成功进入 Payment Completed 后立即执行 `session.finalizeCompletedOrder`，验证 Host 空订单和一致性，但保留成功页 Actor 与订单展示快照。10 秒倒计时或手动返回调用 `returnToEntry(reason?)`：它对并发请求去重；已完成清理时直接释放 Actor 和 Ingress，清理失败时补做 `session.reset`，成功后再返回 Entry。
 
-未来应用级生命周期策略可以决定何时调用该接口，但不能直接清 React 状态或只切换页面。支付 pending/unknown、reset 失败等情况仍由既有安全策略 fail closed。
+未来应用级生命周期策略可以决定何时调用该接口，但不能直接清 React 状态或只切换页面。支付 pending 继续等待外部终态；unknown 保持重付与订单写入冻结，但允许阻断页显式 reset。reset 失败保留错误证据并允许再次发起恢复，不形成无出口页面。
 
 ### 8.6 主动退出订单
 

package/lib/components/HDLKiosk/docs/02-Host/351/200/202/351/205/215/344/270/216/344/270/232/345/212/241/346/225/260/346/215/256.md

@@ -182,7 +182,7 @@ Adapter 不从 Cart 行合计最终金额。
 | BigSale/OS 原始事实                       | HDLKiosk Payment                   |
 | ----------------------------------------- | ---------------------------------- |
 | `unpaid`、`pending`、`payment_processing` | `idle`，仍是可编辑草稿             |
-| `payment_pending`、通用 `processing`      | `pending`，冻结重付/reset          |
+| `payment_pending`、通用 `processing`      | `pending`，冻结重付与订单写入；显式 reset 仅作为恢复出口 |
 | `failed`、`declined`                      | `failed`                           |
 | `paid` + orderId                          | `succeeded`                        |
 | `paid` + 无 orderId + 空 cart             | `idle`，识别 OS reset 后的短暂空壳 |

package/lib/components/HDLKiosk/docs/03-/344/270/232/345/212/241/346/265/201/347/250/213/344/270/216/344/272/244/344/272/222/350/247/204/345/210/231.md

@@ -35,8 +35,8 @@ Entry → Identity → Customization → Catalog → Fulfillment
 - Cart Overlay 中的卡券和中途登录可能改变金额，Checkout Prepare 必须在这些写入稳定后执行。
 - EFTPOS 或店员付款只有在 Host 确认 `payment.succeeded` 后才切换为 Checkout Screen 内的支付成功展示。
 - 成功展示复用 `PaymentResultToastV2`，优先显示 OS 本地订单的 `shop_full_order_number`；本地为空时异步查询只读订单详情，查询期间显示生成中，不得从 payment result 或内部 `orderId` 推断。
-- Host 明确确认支付成功并进入 Payment Completed 后立即清空购物车、客户和履约工作区，同时保留支付结果与已完成订单快照供成功页展示；成功页沿用旧 Kiosk 的 10 秒返回首页能力，本地缺少取餐码时，订单详情异步加载的时间不计入倒计时，请求结束后才从完整 10 秒开始。明确取消或失败留在支付页并给出可重试反馈，timeout/unknown 继续阻断重复支付和订单重置。
-- Payment Method 提供“重新开始订单”，仅在 payment idle/failed 时可用；二次确认后复用 `session.reset` 安全清空，pending/unknown/succeeded 时禁止执行。
+- Host 明确确认支付成功并进入 Payment Completed 后立即清空购物车、客户和履约工作区，同时保留支付结果与已完成订单快照供成功页展示；成功页沿用旧 Kiosk 的 10 秒返回首页能力，本地缺少取餐码时，订单详情异步加载的时间不计入倒计时，请求结束后才从完整 10 秒开始。明确取消或失败留在支付页并给出可重试反馈，unknown 继续阻断重复支付和订单写入，但阻断页允许显式 reset 返回入口。
+- Payment Method 提供“重新开始订单”，仅在 payment idle/failed 时可用；二次确认后复用 `session.reset` 安全清空。pending 时继续等待外部终态，unknown 则进入带恢复入口的安全阻断页。
 
 ## 4. Barcode
 

package/lib/components/HDLKiosk/docs/05-/344/272/244/346/230/223/345/256/211/345/205/250.md

@@ -7,10 +7,10 @@
 1. Host/OS 是订单、金额和支付的最终权威。
 2. 写命令返回成功不等于业务事实已经可见。
 3. timeout/unknown 可能已经生效，不能自动重试危险操作。
-4. payment pending/unknown 时不能重付、reset 或开始下一单。
+4. payment pending/unknown 时不能重付或修改订单；明确的 `session.reset` 是唯一恢复出口。
 5. 当前不做跨刷新会话恢复；刷新后的订单与支付处置由 Host/OS 负责。
 
-Operation timeout 只保护不应无限等待的机器阶段，不能限制顾客完成选择的时间。会等待规格或 OS 业务弹窗的 Operation 不声明 `timeoutMs`，由 Host 的完成或取消结果结束；登录认证 UI 同样在 Operation 外独立等待。纯机器调用可以声明超时，例如认证完成后的 `identity.sync`。支付 dispatch 是例外：超时后可能已经扣款，必须保留有限等待并进入 `unknown`，禁止直接重试。未声明超时的 Operation 等待期间仍持有冲突域，因此 Host 必须保证正常完成、取消和页面销毁路径最终可终结调用。
+Operation timeout 只保护不应无限等待的机器阶段，不能限制顾客完成选择、设备支付或跨屏授权的时间。会等待规格、OS 业务弹窗、支付设备或外部事件的 Operation 不声明 `timeoutMs`，由 Host 的完成、取消或终态结果结束；登录认证 UI 同样在 Operation 外独立等待。纯机器调用可以声明超时，例如认证完成后的 `identity.sync`。未声明超时的 Operation 等待期间仍持有冲突域，因此 Host 必须保证正常完成、取消和页面销毁路径最终可终结调用。
 
 ## 2. Cart Mutation
 

package/lib/components/HDLKiosk/docs//346/236/266/346/236/204/350/256/276/350/256/241.md

@@ -168,7 +168,7 @@ Screen：输入和展示状态
 10. Operation 只有在写后事实收敛后才成功。
 11. partialFailure、timeout、unknown 不得伪装成失败或成功。
 12. Checkout opening/pending/unknown 后冻结危险写。
-13. Payment pending/unknown 时不可重付、reset 或开始下一单。
+13. Payment pending/unknown 时不可重付或修改订单；阻断页只允许显式 `session.reset` 恢复并返回入口。
 14. Shell 登录不改变 Workflow 节点，完成后必须观察最新 customer/summary。
 15. OS 加购中的额外业务弹窗属于 OS，HDLKiosk 只消费加购结果。
 16. Scanner/Scale 在顶层单一接入；Entry Ingress 只负责启动会话，设备入口不是 Workflow Activity；会话内的 Screen 只消费自身所需的实时快照。

package/lib/components/HDLKiosk/runtime/operations/checkoutSafety.js

@@ -101,7 +101,8 @@ function createCheckoutSafetyController({ tokenTtlMs = DEFAULT_TOKEN_TTL_MS, now
 		state: () => currentState,
 		blocks: (operationTags, scope) => {
 			if (scope === "none") return false;
-			if (currentState === "succeeded" && (operationTags.includes("session-reset") || operationTags.includes("completed-order-finalize"))) return false;
+			if (operationTags.includes("session-reset")) return false;
+			if (currentState === "succeeded" && operationTags.includes("completed-order-finalize")) return false;
 			return [
 				"opening",
 				"unknown",