@seasonkoh/webaz 0.1.16 → 0.1.18

package/dist/pwa/public/i18n.js

@@ -1625,7 +1625,7 @@ const _EN = {
   'UI 显示语言': 'UI language',
   '关于': 'About',
   '版本': 'Version',
-  '开源仓库': 'Source repo',
+  '源码仓库': 'Source repo',
   '帮助': 'Help',
   '成长任务指引': 'Growth task guide',
 
@@ -4569,6 +4569,48 @@ const _EN = {
   '自动选边偏好':                      'Auto side preference',
   '已自动加入「我的分享」':            'Auto added to "My Shares"',
   '完成该商品的购买后再分享':          'Share after completing the purchase of this item',
+  '待补':                              'Missing',
+  '前往 #me 申请共建身份':             'Go to #me to apply for builder identity',
+  '联系我们':                          'Contact us',
+  '合作 / 反馈 / 合规咨询':            'Partnerships / feedback / compliance',
+  '申请共建身份':                      'Apply for builder identity',
+  '共建身份':                          'Builder identity',
+  '共建身份管理':                      'Manage builder identity',
+  '已是共建身份':                      'Already opted in',
+  '你已 opted-in。如需查看状态或退出,前往 ': 'You are opted in. To view status or opt out, go to ',
+  '本流程与购物无关':                  'This flow is not part of shopping',
+  '你可以随时退出,不影响任何已下单或未来订单。本流程涉及经济关系登记(三级佣金 + 双轨配对),请仔细阅读全部条款。': 'You can leave anytime without affecting any past or future orders. This is an economic-relationship registration (3-tier commission + binary PV matching) — please read all terms carefully.',
+  '门槛(全部通过才能申请)':           'Eligibility (all must pass to apply)',
+  '已完成订单':                        'Completed orders',
+  'Passkey 已注册':                    'Passkey registered',
+  '必需':                              'required',
+  '可选':                              'optional',
+  '同意文本':                          'Consent text',
+  '请先完成上述未达标指标,完成后再来申请': 'Please complete the missing items above first, then come back to apply',
+  '我已阅读全部条款,理解 commission 与 PV 树结构的合规边界': 'I have read all terms and understand the compliance boundaries of commission + PV tree structure',
+  '我自愿申请,无人收买 / 诱导':        'I apply voluntarily — no one is bribing or inducing me',
+  '用 Passkey 签发提交申请':           'Submit application with Passkey signature',
+  '请通过 Passkey / 生物识别确认...':  'Please confirm via Passkey / biometric...',
+  'Passkey 签发失败:':                 'Passkey signature failed:',
+  '提交中...':                         'Submitting...',
+  '✅ 共建身份激活成功':               '✅ Builder identity activated',
+  '已从 escrow 拨回:':                 'Restored from escrow:',
+  '笔':                                'entries',
+  '共建身份激活中':                    'Active',
+  '未激活':                            'Never activated',
+  '已自动降级(consent 未确认)':       'Auto-downgraded (consent not re-confirmed)',
+  '已退出':                            'Deactivated',
+  'Consent version':                   'Consent version',
+  '待领 escrow':                       'Pending escrow',
+  'opt-in 后这笔钱会拨回钱包。30 天未领过期入公益。': 'These will be restored to your wallet on opt-in. Unclaimed escrow expires to charity after 30 days.',
+  '历史过期入公益':                    'Historical (expired to charity)',
+  '退出共建身份后,未来 commission 直接入公益(无 escrow)。可随时再申请。': 'After deactivation, future commission goes directly to charity (no escrow). You can re-apply anytime.',
+  '退出共建身份':                      'Deactivate',
+  '重新申请':                          'Re-apply',
+  '协议依据:':                         'Protocol spec:',
+  '确认退出共建身份?未来 commission 将直接入公益,可随时再申请。': 'Confirm opt-out? Future commission goes directly to charity. You can re-apply anytime.',
+  '✅ 已退出共建身份':                 '✅ Deactivated',
+  '申请制 · 含锁仓金':                 'opt-in · with escrow',
   '点击复制 →':                        'Click to copy →',
   '已申请公开':                        'Public application submitted',
   '· 协议费仅 2%':                     '· Protocol fee only 2%',
@@ -5008,7 +5050,7 @@ const _EN = {
   '购买体验分享 · 公益贡献':           'Share purchase notes · contribute to charity',
   '你所在地区不分多级返佣 — 产生的佣金已自动捐入公益基金': 'Your region prohibits multi-level commission — commissions are auto-donated to the charity fund',
   '分享体验给其他买家（你所在地区返佣将捐入公益基金）': 'Share your experience (commissions from your region go to the charity fund)',
-  '区域禁 MLM 入池':                   'MLM-prohibited region → charity',
+  '区域佣金回流公益':                  'Region commission cap → charity',
 
   // ── 笔记选订单 modal ─────────────────────────────────────────
   '选择要发笔记的订单':                'Pick an order to post a note for',
@@ -5769,6 +5811,265 @@ const _EN = {
   '已邀请':                            'Invited',
   '处理状态':                          'Status',
   '处理':                              'Handle',
+
+  // ── #1093 阶段 1b 治理岗位申请页(governance onboarding apply UI) ──
+  '本流程是治理岗位申请,不是赚钱机会':
+    'This is a governance application, not an income opportunity',
+  'phase A 不发放任何现金 / WAZ 报酬。治理是公共贡献。详 docs/GOVERNANCE-ONBOARDING.md。':
+    'Phase A pays NO cash / WAZ. Governance is a public contribution. See docs/GOVERNANCE-ONBOARDING.md.',
+  '门槛(全部通过才能申请)':            'Requirements (all must pass to apply)',
+  '请先完成上述未达标指标,完成后再来申请':
+    'Please meet the unmet requirements above first, then come back to apply',
+  '知情同意(双勾选)':                   'Informed consent (two checkboxes)',
+  '我已阅读 GOVERNANCE-ONBOARDING / ARBITRATION-PLAYBOOK / META-RULES / CHARTER,理解角色责任':
+    'I have read GOVERNANCE-ONBOARDING / ARBITRATION-PLAYBOOK / META-RULES / CHARTER and understand the role responsibilities',
+  '我自愿申请,无人收买 / 诱导':
+    'I voluntarily apply, no coercion or induction',
+  '等':                                'wait',
+  '用 Passkey 签发提交申请':             'Sign with Passkey to submit application',
+  '请通过 Passkey / 生物识别确认...':   'Please confirm via Passkey / biometric...',
+  'Passkey 签发失败:':                  'Passkey signing failed:',
+  '门槛未达标':                        'Requirements not met',
+  '申请已提交,等待 maintainer review':  'Application submitted, waiting for maintainer review',
+
+  // ── #1093 阶段 2a onboarding 学习包 + 题目 ────────────────────
+  '仲裁员上岗 onboarding':              'Arbitrator onboarding',
+  '审核员上岗 onboarding':              'Verifier onboarding',
+  '§4.1 学习包':                       '§4.1 Study pack',
+  '§4.3 题目':                         '§4.3 Quiz',
+  '阅读以下文档,勾选已读。本步骤不写入 DB(仅本地标记),实际理解由题目和案例考察。':
+    'Read the documents below and check off as read. This step is local-only (not persisted to DB); actual understanding is assessed via quiz and case studies.',
+  '10 多选 + 5 短答,合格线 12/15 (80%)':
+    '10 multiple-choice + 5 short-answer, pass threshold 12/15 (80%)',
+  '至少 50 字符':                      'At least 50 chars',
+  '至少 100 字符':                     'At least 100 chars',
+  '提交题目并评分':                    'Submit answers for grading',
+  '评分中...':                         'Grading...',
+  '合格':                              'Passed',
+  '未合格':                            'Not passed',
+  '得分':                              'Score',
+  '下一步:等待 maintainer 激活,本阶段未上线 admin UI':
+    'Next: wait for maintainer activation. Admin UI not yet available in this phase.',
+  '可重试提交':                        'You may retry submission',
+  '上次得分':                          'Last score',
+  '已合格,等待 maintainer 激活':       'Passed, waiting for maintainer activation',
+  '未合格,可重试':                     'Not passed, you may retry',
+  '必读':                              'required',
+  '权力边界:多签 + 修改流程':           'Power boundary: multisig + modification process',
+  '真人 Passkey 7 条路径':              'Real-human Passkey 7 paths',
+  '经济博弈原则 + 关系层估值层':         'Economic game theory + relationship/valuation layers',
+  '案例决策树 + 4 种结算路径':           'Case decision tree + 4 verdict paths',
+  '合规边界':                          'Compliance boundary',
+
+  // ── #1093 阶段 2b 案例研读(i18n fix:静态 t() + placeholder pattern) ─
+  '§4.2 案例研读':                     '§4.2 Case studies',
+  '个案例,每个需选 verdict + 写理由 ≥ 200 字。本步骤':
+    'cases, each requires a verdict choice + reasoning ≥ 200 chars. This step',
+  '不自动评分':                        'is NOT auto-graded',
+  ',maintainer 上岗签字前对比 expected verdict 评估你的 reasoning 方向。':
+    '; maintainer will compare your reasoning with expected verdict before activation.',
+  '已知事实':                          'Known facts',
+  '选择你的 verdict':                  'Choose your verdict',
+  'reasoning(≥ N 字符)':              'Reasoning (≥ N chars)',
+  '解释你为什么选这个 verdict,引用具体事实和 spec 原则...':
+    'Explain why you chose this verdict; cite specific facts and spec principles...',
+  '提交案例 review':                   'Submit case reviews',
+  '案例 review 已提交':                'Case reviews submitted',
+  '案例 review 不完整':                'Case reviews incomplete',
+  '个案例':                            'cases',
+  'maintainer 上岗签字前会对比 expected verdict 评估你的 reasoning 方向':
+    'Maintainer will compare with expected verdict and evaluate your reasoning before activation',
+
+  // ── #1093 阶段 2 i18n fix(动态 t() 拼接修复,补缺失翻译)─────
+  '请先提交申请':                      'Please submit application first',
+  '完成申请':                          'to complete application',
+  '仲裁员':                            'arbitrator',
+  '审核员':                            'verifier',
+  '至少 N 字符':                       'At least N chars',
+  '题(多选 + 短答),合格线 80%':       'questions (multi-choice + short-answer), pass threshold 80%',
+  '10 元规则,特别是 #5 不偏袒 / #6 不滥用':
+    '10 meta-rules, especially #5 no-favoritism / #6 no-abuse',
+
+  // ── #1093 阶段 3 maintainer activation (/admin/governance) ─────
+  '治理岗位激活':                      'Governance role activation',
+  '当前无待激活申请':                  'No pending applications to activate',
+  '所有 governance application 均已 active 或未达 onboarding 完成':
+    'All governance applications are either active or onboarding not complete',
+  '返回 admin':                        'Back to admin',
+  '申请':                              'Application',
+  'Region':                            'Region',
+  'Email':                             'Email',
+  '题目':                              'Quiz',
+  '案例 review':                       'Case review',
+  '查看详情':                          'View detail',
+  '激活':                              'Activate',
+  'onboarding 未完成':                 'onboarding not complete',
+  '待激活申请':                        'Pending applications',
+  '激活前:代码自动 re-gate(eligibility 二次校验)+ Iron-Rule Passkey ceremony,防 maintainer 漏检':
+    'Before activation: code auto re-gate (eligibility re-check) + Iron-Rule Passkey ceremony, prevents maintainer oversight',
+  '加载中...':                         'Loading...',
+  '申请者选':                          'Applicant chose',
+  'expected':                          'Expected',
+  'reasoning':                         'Reasoning',
+  'key principles':                    'Key principles',
+  '案例 review 对比':                  'Case review comparison',
+  '无 review 数据':                    'No review data',
+  '确认激活该申请?将自动 re-gate eligibility + Passkey 签发':
+    'Confirm activate this application? Will auto re-gate eligibility + Passkey sign',
+  '代码自动 re-gate 失败':              'Code auto re-gate failed',
+  '✅ 激活成功':                       '✅ Activation succeeded',
+
+  // ── #1093 阶段 4 resign + appeal (governance-me + admin appeals) ──
+  '我的治理岗位':                      'My governance roles',
+  '在岗 / 申诉 / 卸任':                'Active / Appeal / Resign',
+  'spec docs/GOVERNANCE-ONBOARDING.md §6 §7':
+    'spec docs/GOVERNANCE-ONBOARDING.md §6 §7',
+  'phase A 治理 = 关系层数据采集 + 公共贡献意愿表达,不预设估值层':
+    'Phase A governance = relationship-layer data collection + public contribution intent. No valuation layer presumed.',
+  '当前在岗':                          'Currently active',
+  '待申诉(14 天内)':                  'Appeal window (within 14 days)',
+  '申诉审核中':                        'Appeal under review',
+  '待审申请':                          'Pending applications',
+  '暂无治理岗位记录':                  'No governance role records yet',
+  '在岗':                              'Active',
+  '上岗时间':                          'Activated at',
+  '卸任':                              'Resign',
+  '被自动卸任':                        'Auto-deactivated',
+  '生效时间':                          'Effective at',
+  '申诉窗口剩余':                      'Appeal window remaining',
+  '天':                                'days',
+  '已提交申诉,等待 maintainer 裁决':   'Appeal submitted, awaiting maintainer ruling',
+  '提交申诉':                          'Submit appeal',
+  '申请审核中':                        'Application under review',
+  '继续 onboarding':                   'Continue onboarding',
+  '提交时间':                          'Submitted at',
+  '返回 #me':                          'Back to #me',
+
+  // ── resign modal ──
+  '卸任治理岗位':                      'Resign governance role',
+  '卸任后历史履职记录保留(关系层,不可逆)':
+    'Resignation preserves historical performance records (relationship layer, irreversible)',
+  '卸任不影响 reputation / dev_contribution':
+    'Resignation does not affect reputation / dev_contribution',
+  '30 天内不能重新申请同一角色(冷却期)':
+    'Cannot re-apply for same role within 30 days (cooldown)',
+  '已 assigned 但未完成的 case 必须先完成 / 转交,否则无法卸任':
+    'Assigned but unresolved cases must be completed / transferred before resigning',
+  '输入':                              'Type',
+  '确认':                              'to confirm',
+  '取消':                              'Cancel',
+  'Passkey 签发卸任':                  'Sign resignation with Passkey',
+  '请求 Passkey...':                   'Requesting Passkey...',
+  'Passkey 签发失败:':                 'Passkey signing failed:',
+  '提交中...':                         'Submitting...',
+  '尚有 {n} 个未结案 dispute,请先完成裁决后再卸任':
+    'You still have {n} unresolved dispute(s). Complete pending verdicts before resigning.',
+
+  // ── #1080 audit: governance leaderboard observation-only banner + thresholds ──
+  '本榜单仅展示履职数据,不构成 token / 经济利益分配':
+    'This leaderboard shows performance data only — NOT a token / economic distribution',
+  'Reward distribution 机制由 phase D first DAO 决定。详 docs/GOVERNANCE-LEADERBOARD-SPEC.md。':
+    'Reward distribution is decided by phase D first DAO. See docs/GOVERNANCE-LEADERBOARD-SPEC.md.',
+  'insufficient data':                 'insufficient data',
+  '仲裁员公平评价(< 10 案显 insufficient data,spec §4)':
+    'Arbitrator fairness rating (< 10 cases shows "insufficient data" per spec §4)',
+  '正确数 / 总任务数 · 命中率(< 5 任务显 insufficient data,spec §4)':
+    'Correct / total · accuracy (< 5 tasks shows "insufficient data" per spec §4)',
+  '卸任成功。冷却期至':                'Resignation succeeded. Cooldown until',
+
+  // ── appeal modal ──
+  '对自动卸任提出申诉':                'Appeal auto-deactivation',
+  '请详细说明:为何 outlier 计数 / COI 警告 / inactive 不应导致卸任。理由至少 100 字符,maintainer 群多签审议,通过后恢复 active 状态。':
+    'Explain in detail: why outlier count / COI warning / inactivity should not lead to deactivation. ≥100 chars. Maintainer group reviews, accepted appeals restore active status.',
+  '详细说明你的申诉理由(≥100 字符)': 'Detailed appeal reason (≥100 chars)',
+  '字符数':                            'Characters',
+  '申诉已提交,等待 maintainer 裁决':   'Appeal submitted, awaiting maintainer ruling',
+
+  // ── admin appeals resolve ──
+  '待裁决申诉':                        'Appeals awaiting ruling',
+  'spec §7.2:申诉通过 → 恢复 active + 抹除 outlier;驳回 → 公开理由(对应元规则 #1 当一切可见)':
+    'spec §7.2: accepted → restore active + clear outlier; rejected → public reason (meta-rule #1 transparency)',
+  '驳回':                              'Reject',
+  '接受恢复':                          'Accept (restore)',
+  '提交于':                            'Submitted',
+  '自动卸任于':                        'Auto-deactivated',
+  '接受申诉(恢复 active)':            'Accept appeal (restore active)',
+  '驳回申诉':                          'Reject appeal',
+  'user.roles 将恢复角色,可立即继续履职(抹除 outlier 计数,审计留痕)':
+    'user.roles will be restored, can immediately resume duty (outlier counts cleared, audit logged)',
+  'user 维持 inactive 状态。处置理由会公开(元规则 #1 当一切可见)':
+    'user stays inactive. Resolution reason is public (meta-rule #1 transparency)',
+  '处置理由(≥30 字符,公开)':         'Resolution reason (≥30 chars, public)',
+  'Passkey 签发裁决':                  'Sign ruling with Passkey',
+  '裁决已记录,user 已通知':            'Ruling recorded, user notified',
+
+  // ── #1093 stage 6 arbitrator pause/resume auto-judge ─────
+  '自动判定时钟已冻结':                'Auto-judge clock frozen',
+  '到期':                              'Expires',
+  '理由':                              'Reason',
+  '立即解冻(直接进入裁决/补证后)':   'Resume now (after evidence collected / before ruling)',
+  '暂停自动判定时钟':                  'Pause auto-judge clock',
+  'playbook §2.1:补证据期 > 48h 时显式调用,冻结协议自动判定时钟。最大窗口 7 天。':
+    'Playbook §2.1: when evidence collection > 48h, explicit call freezes the protocol auto-judge clock. Max 7-day window.',
+  '暂停理由(≥10 字符,公开 audit_log)':
+    'Pause reason (≥10 chars, public audit_log)',
+  '例:已通知 buyer 补开箱视频,等 72h':
+    'e.g., Asked buyer for unboxing video, waiting 72h',
+  '冻结到期':                          'Freeze expires',
+  '(最大)':                            '(max)',
+  '暂停时钟':                          'Pause clock',
+  '暂停理由至少 10 字符':              'Pause reason needs ≥10 characters',
+  '确认立即解冻自动判定时钟? 协议层 48h 沉默判定将重新生效。':
+    'Resume auto-judge clock now? The 48h silence-default ruling will become active again.',
+
+  // ── RFC-004 build feedback(用→建反馈)──────────────────────────
+  '反馈 / 建议': 'Feedback / Suggestion',
+  '帮我们改进 WebAZ。会自动附上当前页面': 'Help us improve WebAZ. Auto-attaches your current page',
+  '作为上下文(不含个人信息)': 'as context (no personal info)',
+  '体验问题(用着别扭)': 'UX issue (awkward to use)',
+  'Bug(报错 / 坏了)': 'Bug (error / broken)',
+  '改进提案(建设 · 需绑 Passkey,被采纳记共建信誉)': 'Proposal (building · needs Passkey; if accepted → co-build reputation)',
+  '发生了什么 / 你的想法（≥5 字）': 'What happened / your idea (≥5 chars)',
+  '请至少写 5 个字': 'Please write at least 5 characters',
+  '已有类似建议,已合并 🙌': 'Similar suggestion exists — merged 🙌',
+  '反馈已提交,谢谢! 🙏': 'Feedback submitted — thank you! 🙏',
+  '查看我的反馈进度 →': 'View my feedback status →',
+  '我的反馈': 'My feedback',
+  '你提的问题 / 建议进展 — 被采纳的提案会记入共建信誉': 'Your reported issues / suggestions — accepted proposals earn co-build reputation',
+  '新反馈 / 建议': 'New feedback / suggestion',
+  '新反馈': 'New feedback',
+  '还没有反馈 — 用着有问题随时点左下角 💬': 'No feedback yet — tap 💬 (bottom-left) anytime',
+  '已收到': 'Received',
+  '已分类': 'Triaged',
+  '已采纳 ✅': 'Accepted ✅',
+  '未采纳': 'Declined',
+  '已合并': 'Merged',
+  '体验问题': 'UX issue',
+  '提案': 'Proposal',
+  '共建信誉': 'Co-build reputation',
+  // RFC-006 Gap 2:贡献者看板
+  '我的共建': 'My contributions',
+  '你的建设贡献(独立于交易信誉 — 不影响 verifier/仲裁准入)': 'Your building contributions (separate from trade reputation — does NOT gate verifier/arbitrator)',
+  '建设等级': 'Build tier',
+  '建设积分': 'Build points',
+  '当前可参与': 'Can currently do',
+  '下一级': 'Next tier',
+  '认领中': 'Claimed',
+  '审核中': 'In review',
+  '已验收': 'Accepted (done)',
+  '提反馈': 'Feedback sent',
+  '被采纳': 'Accepted',
+  '提任务': 'Tasks created',
+  '署名构成(自报)': 'Authorship (self-declared)',
+  '真人': 'Human',
+  'AI 辅助': 'AI-assisted',
+  'AI 主笔': 'AI-authored',
+  '未声明': 'Unspecified',
+  '未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。': 'No Passkey: contributions are acknowledged, but earning build reputation requires a real-person Passkey anchor.',
+  '限制与申诉': 'Restrictions & appeal',
+  '无限制': 'No restrictions',
+  '如有异议可申诉': 'Appeal if you disagree',
+  '看板仅自己可见,不做公开排行。': 'This dashboard is private to you — no public leaderboard.',
 }
 
 window.t = (zh) => window._lang === 'en' ? (_EN[zh] || zh) : zh

package/dist/pwa/public/manifest.json

@@ -1,4 +1,5 @@
 {
+  "id": "/",
   "name": "WebAZ — Agent-native 去中心化商业协议",
   "short_name": "WebAZ",
   "description": "买家 Agent 找货、卖家 Agent 上架，链上稳定币结算，2% 纯净协议。",
@@ -12,8 +13,10 @@
   "lang": "zh-CN",
   "categories": ["shopping", "business", "productivity"],
   "icons": [
-    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any" },
-    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "maskable" }
+    { "src": "/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" },
+    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any" }
   ],
   "shortcuts": [
     {

package/dist/pwa/public/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "WebAZ Protocol API",
     "version": "0.4.14",
-    "description": "Auto-generated endpoint inventory (515 endpoints, 17 with full schema). See PROJECT_BRAIN.md for design context."
+    "description": "Auto-generated endpoint inventory (515 endpoints, 17 with full schema). See docs/ for design context."
   },
   "servers": [
     {

package/dist/pwa/public/sw.js

@@ -1,5 +1,5 @@
 // Service Worker — 网络优先，离线降级缓存；API 请求不缓存
-const CACHE = 'webaz-v481'
+const CACHE = 'webaz-v482'
 
 self.addEventListener('install', e => {
   self.skipWaiting()

package/dist/pwa/routes/admin-protocol-params.js

@@ -9,11 +9,12 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
         res.json({ items: rows });
     });
     // H-2 P1-2: 协议参数是全局配置，需 protocol 权限（区域 admin 不能改）
+    // 2026-06-03 #1095: + constitutional only-increase 守护
     app.patch('/api/admin/protocol-params/:key', (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const param = db.prepare('SELECT type, min_value, max_value FROM protocol_params WHERE key = ?').get(req.params.key);
+        const param = db.prepare('SELECT type, min_value, max_value, category, value, requires_meta_rule_change FROM protocol_params WHERE key = ?').get(req.params.key);
         if (!param)
             return void res.status(404).json({ error: '参数不存在' });
         const { value } = req.body || {};
@@ -32,6 +33,45 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
             if (param.max_value != null && n > param.max_value) {
                 return void res.status(400).json({ error: `value 高于上限 ${param.max_value}` });
             }
+            // #1095 CHARTER §4 I-4: constitutional only-increase 锁
+            // 假设 increase = more protection;详头部注释块
+            if (param.category === 'constitutional') {
+                const oldNum = Number(param.value);
+                if (Number.isFinite(oldNum) && n < oldNum) {
+                    // #1096 audit:拒绝时也写 protocol_params_log(meta-rule #1 "当一切可见")
+                    // 谁尝试降低宪法保护要留痕,即便 attempt 失败
+                    try {
+                        db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_patch')`)
+                            .run(generateId('ppl'), req.params.key, param.value, strVal, admin.id);
+                    }
+                    catch (_e) { /* log 失败不阻塞 reject 决定 */ }
+                    return void res.status(403).json({
+                        error: `宪法级 param 只能调高,不能调低(${param.value} → ${n})— CHARTER §4 I-4 防绕过`,
+                        code: 'CONSTITUTIONAL_ONLY_INCREASE',
+                        current: oldNum,
+                        attempted: n,
+                    });
+                }
+            }
+            // #1090 RFC-002 P1#6 runtime enforcement:meta-rule-locked params 走同款 only-increase
+            // (CI lint PR-3.1 守 source seed;此处守 runtime DB)
+            // PATCH-1c PR-3.1 描述行注明哪个方向是 more protection;协议侧约定 higher = stricter
+            if (param.requires_meta_rule_change === 1) {
+                const oldNum = Number(param.value);
+                if (Number.isFinite(oldNum) && n < oldNum) {
+                    try {
+                        db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_patch')`)
+                            .run(generateId('ppl'), req.params.key, param.value, strVal, admin.id);
+                    }
+                    catch (_e) { /* log 失败不阻塞 */ }
+                    return void res.status(403).json({
+                        error: `meta-rule-locked param 只能调高(${param.value} → ${n})— 降低需 60d amendment(CHARTER §4 I-1)`,
+                        code: 'META_RULE_LOCKED_ONLY_INCREASE',
+                        current: oldNum,
+                        attempted: n,
+                    });
+                }
+            }
         }
         if (param.type === 'boolean' && !['true', 'false', '1', '0'].includes(strVal)) {
             return void res.status(400).json({ error: '类型不匹配（需 boolean）' });
@@ -50,9 +90,47 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const param = db.prepare('SELECT default_value, value FROM protocol_params WHERE key = ?').get(req.params.key);
+        const param = db.prepare('SELECT default_value, value, category, type, requires_meta_rule_change FROM protocol_params WHERE key = ?').get(req.params.key);
         if (!param || param.default_value == null)
             return void res.status(404).json({ error: '参数不存在或无默认值' });
+        // #1095 CHARTER §4 I-4: constitutional reset 走 same only-increase
+        // 若 default 低于 current,reset 会构成降低保护 → 拒绝
+        if (param.category === 'constitutional' && param.type === 'number') {
+            const cur = Number(param.value);
+            const def = Number(param.default_value);
+            if (Number.isFinite(cur) && Number.isFinite(def) && def < cur) {
+                // #1096 audit:reset 拒绝同样留痕
+                try {
+                    db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_reset')`)
+                        .run(generateId('ppl'), req.params.key, param.value, param.default_value, admin.id);
+                }
+                catch (_e) { /* log 失败不阻塞 */ }
+                return void res.status(403).json({
+                    error: `宪法级 param 不能 reset 至更低值(${param.value} → ${param.default_value})— CHARTER §4 I-4 防绕过`,
+                    code: 'CONSTITUTIONAL_ONLY_INCREASE',
+                    current: cur,
+                    default: def,
+                });
+            }
+        }
+        // #1090 RFC-002 P1#6:meta-rule-locked param reset 也走 only-increase
+        if (param.requires_meta_rule_change === 1 && param.type === 'number') {
+            const cur = Number(param.value);
+            const def = Number(param.default_value);
+            if (Number.isFinite(cur) && Number.isFinite(def) && def < cur) {
+                try {
+                    db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_reset')`)
+                        .run(generateId('ppl'), req.params.key, param.value, param.default_value, admin.id);
+                }
+                catch (_e) { /* log 失败不阻塞 */ }
+                return void res.status(403).json({
+                    error: `meta-rule-locked param 不能 reset 至更低值(${param.value} → ${param.default_value})— 降低需 60d amendment(CHARTER §4 I-1)`,
+                    code: 'META_RULE_LOCKED_ONLY_INCREASE',
+                    current: cur,
+                    default: def,
+                });
+            }
+        }
         db.transaction(() => {
             db.prepare(`UPDATE protocol_params SET value = ?, updated_at = datetime('now'), updated_by = ? WHERE key = ?`)
                 .run(param.default_value, admin.id, req.params.key);

package/dist/pwa/routes/admin-reports.js

@@ -81,23 +81,27 @@ export function registerAdminReportsRoutes(app, deps) {
             }
         }
         engineA.distributed_total = r2(engineA.distributed_total);
-        // 引擎 A 的 redirect 去向（chain_gap → charity；region_cap → global_fund）
-        const charity = db.prepare(`SELECT balance, total_chain_gap, total_orphan_sponsor, total_region_cap, total_donated, total_disbursed FROM charity_fund WHERE id='main'`).get();
+        // 2026-06-04 三科目解耦：引擎 A 所有 redirect 去向统一 → commission_pool（三级公池，只进不出）。
+        // charity_fund 自此纯净（仅捐款/还愿/拨款），不再承接佣金兜底。
+        const charity = db.prepare(`SELECT balance, total_donated, total_disbursed, total_redirected FROM charity_fund WHERE id='main'`).get();
+        const cpool = db.prepare(`SELECT balance, total_chain_gap, total_orphan_sponsor, total_region_cap FROM commission_reserve WHERE id='main'`).get();
         // 引擎 B：PV 对碰（binary_score_records 现金拨付 + 待拨 Score）
         const binarySettled = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(waz_amount),0) AS waz FROM binary_score_records WHERE settled_at IS NOT NULL`).get();
         const binaryPending = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(score),0) AS score FROM binary_score_records WHERE settled_at IS NULL`).get();
         const periods = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(cash_distributed),0) AS dist, COALESCE(SUM(cash_retained),0) AS retained FROM settlement_periods WHERE status='completed'`).get();
-        const gfund = db.prepare(`SELECT pool_balance, total_scores_pending, current_n FROM global_fund WHERE id=1`).get();
+        const gfund = db.prepare(`SELECT pool_balance, total_scores_pending, current_n, pv_escrow_reserve FROM global_fund WHERE id=1`).get();
         // 资金管道：global_fund 蓄水来源（fund_base 1% + commission region_cap redirect）
         const pipe = db.prepare(`SELECT COALESCE(SUM(amount_base),0) AS base, COALESCE(SUM(amount_l3),0) AS redirect FROM fund_deposits`).get();
         res.json({
             engine_a_commission: {
                 ...engineA,
-                // redirect 三去向（互斥，全部源自 commission_pool 未发出的份额）：
-                redirected_to_charity_chain_gap: r2(Number(charity?.total_chain_gap || 0) + Number(charity?.total_orphan_sponsor || 0)), // 无 L / sponsor 无效
-                redirected_to_charity_region_full_ban: r2(Number(charity?.total_region_cap || 0)), // max_levels=0 区域整池入公益
-                redirected_to_global_fund_region_cap: r2(pipe.redirect), // level > max_levels（部分截断）→ global_fund (fund_deposits.amount_l3)
-                note: '即时分账，bounded by commission_pool（订单内）。redirect 三去向见上字段。',
+                // 2026-06-04 起所有兜底 → commission_reserve（三级公池，只进不出）。三个分项互斥：
+                commission_reserve_chain_gap: r2(Number(cpool?.total_chain_gap || 0)), // 无 L / 上家断链
+                commission_reserve_orphan_sponsor: r2(Number(cpool?.total_orphan_sponsor || 0)), // sponsor 无效 + opt-out 放弃 + escrow 到期
+                commission_reserve_region_cap: r2(Number(cpool?.total_region_cap || 0)), // level>maxLevels 截断 + max=0 整池
+                commission_reserve_balance: r2(Number(cpool?.balance || 0)),
+                legacy_global_fund_redirect: r2(pipe.redirect), // 历史：解耦前曾入 global_fund（fund_deposits.amount_l3），新订单恒 0
+                note: '即时分账；兜底全部入 commission_reserve（独立科目，只进不出，治理决定用途），不再污染 charity / global_fund。',
             },
             engine_b_pv_matching: {
                 cash_distributed_total: r2(binarySettled.waz),
@@ -111,6 +115,7 @@ export function registerAdminReportsRoutes(app, deps) {
             },
             global_fund: {
                 pool_balance: r2(Number(gfund?.pool_balance || 0)),
+                pv_escrow_reserve: r2(Number(gfund?.pv_escrow_reserve || 0)), // #1106 已承诺未兑付的 PV 负债（隔离于可分配池）
                 total_scores_pending: r2(Number(gfund?.total_scores_pending || 0)),
                 current_n: r2(Number(gfund?.current_n || 0)),
             },
@@ -124,7 +129,7 @@ export function registerAdminReportsRoutes(app, deps) {
                 total_donated: r2(Number(charity?.total_donated || 0)),
                 total_disbursed: r2(Number(charity?.total_disbursed || 0)),
             },
-            governance_hint: '引擎A=消费即时奖励(commission_pool)；引擎B=团队对碰(global_fund 安全阀)。两者解耦，调参互不影响。详见 docs/REWARD-ENGINES-DECOUPLING.md',
+            governance_hint: '引擎A=消费即时奖励(分账→钱包，兜底→commission_reserve)；引擎B=团队对碰(global_fund 安全阀)。两者解耦，调参互不影响。详见 docs/REWARD-ENGINES-DECOUPLING.md',
             generated_at: new Date().toISOString(),
         });
     });

package/dist/pwa/routes/auth-read.js

@@ -14,7 +14,8 @@ export function registerAuthReadRoutes(app, deps) {
         }
         const region = user.region || 'global';
         const maxLevels = getRegionMaxLevels(region);
-        res.json({ ...user, api_key: undefined, roles, wallet: wallet || null, region_max_levels: maxLevels });
+        const pvEnabled = db.prepare("SELECT pv_enabled FROM region_config WHERE region = ?").get(region)?.pv_enabled ?? 0;
+        res.json({ ...user, api_key: undefined, roles, wallet: wallet || null, region_max_levels: maxLevels, region_pv_enabled: Number(pvEnabled) === 1 ? 1 : 0 });
     });
     app.get('/api/profile', (req, res) => {
         const user = auth(req, res);
@@ -42,6 +43,7 @@ export function registerAuthReadRoutes(app, deps) {
             has_password: !!user.password_hash,
             region: user.region ?? 'global',
             region_max_levels: getRegionMaxLevels(user.region || 'global'),
+            region_pv_enabled: (db.prepare("SELECT pv_enabled FROM region_config WHERE region = ?").get(user.region || 'global')?.pv_enabled ?? 0) === 1 ? 1 : 0,
             ...(() => { const g = userMlmGate(user.region || 'global'); return { mlm_ui_visible: g.mlmUiVisible, mlm_payout_levels: g.payoutLevels }; })(),
             bio: user.bio ?? null,
             search_anchor: user.search_anchor ?? null,