@seasonkoh/webaz 0.1.23 → 0.1.25

package/dist/pwa/public/app.js

@@ -549,7 +549,7 @@ async function render(page, params) {
   try { await initShareCtx() } catch (e) { console.warn('[ShareCtx]', e) }
 
   // 未登录时只允许看登录页、找回密钥页、商品、welcome 预发布页、governance-onboarding 公开页
-  if (!state.apiKey && page !== 'login' && page !== 'shop' && page !== 'recover' && page !== 'welcome' && page !== 'governance-onboarding' && page !== '') {
+  if (!state.apiKey && page !== 'login' && page !== 'shop' && page !== 'recover' && page !== 'welcome' && page !== 'governance-onboarding' && page !== 'contribute' && page !== '') {
     // 保存目标 hash 以便登录/注册后跳回
     if (location.hash && !['#login', '#recover'].includes(location.hash)) {
       sessionStorage.setItem('webaz_intended_hash', location.hash)
@@ -562,7 +562,7 @@ async function render(page, params) {
     const { status, body } = await apiWithStatus('GET', '/me')
     if (status === 200 && body && !body.error) {
       state.user = body
-      connectSSE(); maybePromptPlacementBind(); refreshCartBadge(); maybeShowInstallBanner(); maybeClaimPendingProductShare(); setTimeout(refreshCompareBadge, 0); refreshChatsBadge(); refreshFeedbackBadge(); refreshSnfBadge(); setTimeout(ensureSnfPull, 800)
+      connectSSE(); maybePromptPlacementBind(); refreshCartBadge(); maybeShowInstallBanner(); maybeClaimPendingProductShare(); maybeClaimPendingShopReferral(); setTimeout(refreshCompareBadge, 0); refreshChatsBadge(); refreshFeedbackBadge(); refreshSnfBadge(); setTimeout(ensureSnfPull, 800)
       try { p2pStart() } catch (e) { console.warn('[P2P] start err', e) }
     } else if (status === 401 || status === 403) {
       // 真·鉴权失败：清掉两层存储
@@ -632,6 +632,12 @@ async function render(page, params) {
     case 'welcome':       return renderWelcome(app)
     // 2026-06-02 W3.5-B:#governance-onboarding 治理岗位申请页(公开页)
     case 'governance-onboarding': return renderGovernanceOnboarding(app)
+    // PR9E-1 公开共建页(无需登录):任务板 / 详情 + agent 提示 / 建议任务
+    case 'contribute':
+      if (params[0] === 'tasks' && params[1] === 'suggest') return renderContributeSuggest(app)
+      if (params[0] === 'tasks' && params[1])                return renderContributeTaskDetail(app, params[1])
+      if (params[0] === 'suggest')                           return renderContributeSuggest(app)
+      return renderContributeTasks(app)
     case 'seller':
       if (state.user?.role === 'logistics')  return renderLogistics(app)
       if (state.user?.role === 'arbitrator') return renderDisputeList(app)
@@ -705,6 +711,7 @@ async function render(page, params) {
       if (params[0] === 'kpi')                     return renderAdminKPI(app)
       // 2026-05-24 #welcome 公开 ideas/邮箱订阅查看
       if (params[0] === 'public-ideas')            return renderAdminPublicIdeas(app)
+      if (params[0] === 'task-proposals')          return renderAdminTaskProposals(app)
       if (params[0] === 'params')                  return renderAdminParams(app)
       if (params[0] === 'timeline' && params[1])   return renderAdminUserTimeline(app, params[1])
       if (params[0] === 'timeline')                return renderAdminUserTimelinePicker(app)
@@ -1304,7 +1311,7 @@ async function renderMyAdvanced(app) {
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:10px">
       ${card('🏛', t('协议治理'), t('参数公开 · 变更可追溯'), '#governance')}
       ${card('⚖', t('判例库'), t('争议判决公开'), '#judgments')}
-      ${card('🎁', t('共建身份'), t('申请制 · 含锁仓金'), '#rewards-me')}
+      ${card('🎁', t('分享分润身份'), t('申请制 · 含锁仓金'), '#rewards-me')}
     </div>
 
     <div style="font-size:12px;color:#6b7280;font-weight:600;margin:14px 0 6px">📧 ${t('联系我们')}</div>
@@ -3096,6 +3103,83 @@ window.setAdminIdeaStatus = async (id, status) => {
   setTimeout(() => renderAdminPublicIdeas(document.getElementById('app')), 300)
 }
 
+// PR9I — Task Proposal Inbox admin review (maintainer-only). Calls the #331 admin endpoints. A proposal is
+// a SUGGESTION, never a contribution fact / reward / participation; "Convert" only records the review
+// decision + the proposer→reviewer→ref evidence chain — it does NOT auto-create a build_task.
+async function renderAdminTaskProposals(app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  app.innerHTML = shell(loading$(), 'admin')
+  const sf = state._proposalStatus || ''   // '' | new | needs_info | rejected | converted
+  const r = await GET('/admin/task-proposals' + (sf ? '?status=' + encodeURIComponent(sf) : ''))
+  if (r.error) { app.innerHTML = shell(alert$('error', r.error), 'admin'); return }
+  const proposals = r.proposals || []
+  const notice = en ? (r.value_boundary?.notice_en || '') : (r.value_boundary?.notice_zh || '')
+  const STATUS = {
+    new:        { bg: '#fef3c7', fg: '#92400e', label: T('待审', 'New') },
+    needs_info: { bg: '#dbeafe', fg: '#1e40af', label: T('待补充', 'Needs info') },
+    rejected:   { bg: '#fee2e2', fg: '#991b1b', label: T('已拒绝', 'Rejected') },
+    converted:  { bg: '#dcfce7', fg: '#166534', label: T('已转任务', 'Converted') },
+  }
+  const badge = (s) => { const c = STATUS[s] || { bg: '#f3f4f6', fg: '#6b7280', label: s }; return `<span style="font-size:10px;background:${c.bg};color:${c.fg};padding:2px 8px;border-radius:99px;font-weight:600">${c.label}</span>` }
+  const chip = (val, label) => `<button onclick="setProposalStatusFilter('${val}')" style="padding:5px 12px;border-radius:99px;font-size:11px;cursor:pointer;border:1px solid ${sf === val ? '#6366f1' : '#e5e7eb'};background:${sf === val ? '#eef2ff' : '#fff'};color:${sf === val ? '#4338ca' : '#6b7280'};font-weight:600">${label}</button>`
+  const field = (label, val) => val ? `<div style="font-size:12px;color:#374151;margin-top:4px"><b>${label}:</b> ${escHtml(String(val))}</div>` : ''
+  const row = (p) => {
+    const terminal = p.status === 'rejected' || p.status === 'converted'
+    return `<div class="card" style="padding:14px;margin-bottom:10px">
+      <div style="display:flex;justify-content:space-between;gap:8px;align-items:flex-start">
+        <div style="font-weight:600;font-size:14px">${escHtml(p.title)}</div>${badge(p.status)}
+      </div>
+      <div style="font-size:13px;color:#52525B;line-height:1.5;margin-top:6px;white-space:pre-wrap">${escHtml(p.summary)}</div>
+      ${field(T('建议领域', 'Area'), p.suggested_area)}
+      ${field(T('预期结果', 'Outcome'), p.expected_outcome)}
+      ${field(T('参考', 'Source ref'), p.source_ref)}
+      ${field('GitHub', p.proposer_github_login)}
+      ${field(T('提交时间', 'Created'), p.created_at)}
+      ${field(T('审阅备注', 'Review note'), p.review_note)}
+      ${field(T('已关联', 'Converted ref'), p.converted_ref)}
+      ${terminal
+        ? `<div style="font-size:11px;color:#9ca3af;margin-top:8px">${T('终态,不可再审', 'Terminal — locked')}${p.reviewer_id ? ' · ' + escHtml(String(p.reviewer_id)) : ''}</div>`
+        : `<div style="margin-top:10px;border-top:1px solid #f1f1f4;padding-top:10px">
+            <textarea id="pr-note-${escHtml(p.id)}" placeholder="${T('审阅备注(可选)', 'Review note (optional)')}" style="width:100%;box-sizing:border-box;min-height:44px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px"></textarea>
+            <input id="pr-ref-${escHtml(p.id)}" placeholder="${T('转任务时:关联正式 task / PR / release(可选)', 'On convert: link the real task / PR / release (optional)')}" style="width:100%;box-sizing:border-box;margin-top:6px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px">
+            <div style="display:flex;gap:6px;margin-top:8px;flex-wrap:wrap">
+              <button onclick="reviewProposal('${escHtml(p.id)}','needs_info')" style="padding:6px 12px;border:1px solid #3b82f6;background:#fff;color:#1e40af;border-radius:6px;font-size:12px;cursor:pointer">${T('需补充', 'Needs info')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','rejected')" style="padding:6px 12px;border:1px solid #ef4444;background:#fff;color:#991b1b;border-radius:6px;font-size:12px;cursor:pointer">${T('拒绝', 'Reject')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','converted')" style="padding:6px 12px;border:none;background:#16a34a;color:#fff;border-radius:6px;font-size:12px;cursor:pointer">${T('转为正式任务', 'Convert')}</button>
+            </div>
+          </div>`}
+    </div>`
+  }
+  app.innerHTML = shell(`
+    <div style="padding:14px;max-width:920px;margin:0 auto">
+      <h1 class="page-title">🛠️ ${T('任务建议收件箱', 'Task Proposal Inbox')}</h1>
+      <div style="background:#f4f4f5;border:1px solid #e4e4e7;border-radius:8px;padding:10px;font-size:11px;color:#52525B;line-height:1.6;margin-bottom:12px">
+        ${T('建议是陌生人 / agent 提交的想法,不是贡献事实 / 奖励 / 正式参与。「转为正式任务」只记录评审决定与证据链(proposer → reviewer → 关联引用),不会自动创建 build_task。', 'A proposal is a stranger / agent suggestion — NOT a contribution fact / reward / participation. “Convert” only records the review decision + the proposer → reviewer → ref evidence chain; it does NOT auto-create a build_task.')}
+        ${notice ? `<br>${escHtml(notice)}` : ''}
+      </div>
+      <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:12px">
+        ${chip('', T('全部', 'All'))}${chip('new', STATUS.new.label)}${chip('needs_info', STATUS.needs_info.label)}${chip('rejected', STATUS.rejected.label)}${chip('converted', STATUS.converted.label)}
+      </div>
+      ${proposals.length === 0 ? `<div style="color:#a1a1aa;text-align:center;padding:30px;font-size:14px">${T('收件箱为空', 'Inbox is empty')}</div>` : proposals.map(row).join('')}
+    </div>
+  `, 'admin')
+}
+window.setProposalStatusFilter = (s) => { state._proposalStatus = s; renderAdminTaskProposals(document.getElementById('app')) }
+window.reviewProposal = async (id, status) => {
+  const note = (document.getElementById('pr-note-' + id)?.value || '').trim()
+  const ref = (document.getElementById('pr-ref-' + id)?.value || '').trim()
+  const body = { status }
+  if (note) body.note = note
+  if (status === 'converted' && ref) body.converted_ref = ref
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/review', body)
+  if (r.error) { toast$(r.error || r.error_code || (window._lang === 'en' ? 'failed' : '操作失败')); return }
+  toast$(window._lang === 'en' ? 'Updated' : '已更新')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
+
 async function renderAdminKPI(app) {
   if (!state.user) { renderLogin(); return }
   if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
@@ -4315,10 +4399,10 @@ async function renderApplyRewards(app) {
 
   if (status.opted_in) {
     app.innerHTML = shell(`
-      <h1 class="page-title">${t('已是共建身份')}</h1>
+      <h1 class="page-title">${t('已开通分享分润')}</h1>
       <div class="card" style="background:#ecfdf5;border-color:#86efac;padding:12px;font-size:13px;color:#064e3b">
         ${t('你已 opted-in。如需查看状态或退出,前往 ')}
-        <a href="#rewards-me" style="color:#16a34a;font-weight:600">${t('共建身份管理')}</a>
+        <a href="#rewards-me" style="color:#16a34a;font-weight:600">${t('分享分润管理')}</a>
       </div>
     `, returnNav)
     return
@@ -4347,7 +4431,7 @@ async function renderApplyRewards(app) {
     </div>`
 
   app.innerHTML = shell(`
-    <h1 class="page-title">🎁 ${t('申请共建身份')}</h1>
+    <h1 class="page-title">🎁 ${t('申请分享分润')}</h1>
 
     <div class="card" style="margin-bottom:16px;background:#fef2f2;border-color:#fca5a5">
       <div style="font-weight:600;color:#991b1b;margin-bottom:6px;font-size:14px">⚠️ ${t('本流程与购物无关')}</div>
@@ -4355,6 +4439,10 @@ async function renderApplyRewards(app) {
         ${t('你可以随时退出,不影响任何已下单或未来订单。本流程涉及经济关系登记(三级佣金 + 积分配对),请仔细阅读全部条款。')}<br>
         <span style="opacity:0.85">This flow is not part of shopping. You can leave anytime without affecting any orders. This is an economic-relationship registration — please read all terms.</span>
       </div>
+      <div style="font-size:11px;color:#7f1d1d;line-height:1.6;margin-top:8px;padding-top:8px;border-top:1px solid #fca5a5;opacity:0.9">
+        ${t('注:本「分享分润 / rewards opt-in」仅为 commission / PV / escrow 经济关系登记,不是贡献资格,与贡献任务(#contribute/tasks)/ 我的共建 无关。RFC-002 同意书可能沿用更早措辞,以本 UI 含义为准。')}<br>
+        <span style="opacity:0.85">Note: this “share-commission / rewards opt-in” is only a commission / PV / escrow economic-relationship registration — NOT contribution eligibility, and unrelated to the contribution funnel (#contribute/tasks) / My contributions. RFC-002’s consent text may retain older wording; this note governs the UI meaning.</span>
+      </div>
     </div>
 
     <div class="card" style="margin-bottom:16px">
@@ -4463,7 +4551,7 @@ window.doSubmitRewardsApply = async (consentVersion, pageLoadedAt) => {
   const drainNote = drained.count > 0
     ? '<br>' + t('已从 escrow 拨回:') + ' ' + drained.total + ' WAZ (' + drained.count + ' ' + t('笔') + ')'
     : ''
-  msg.innerHTML = alert$('success', t('✅ 共建身份激活成功') + drainNote)
+  msg.innerHTML = alert$('success', t('✅ 分享分润开通成功') + drainNote)
   setTimeout(() => { location.hash = '#rewards-me' }, 2000)
 }
 
@@ -4474,7 +4562,7 @@ async function renderRewardsMe(app) {
   if (status.error) { app.innerHTML = shell(alert$('error', status.error), 'me'); return }
 
   const stateLabel = {
-    opted_in:        { icon: '✅', color: '#16a34a', label: t('共建身份激活中') },
+    opted_in:        { icon: '✅', color: '#16a34a', label: t('分享分润已开通') },
     never_activated: { icon: '⚪', color: '#6b7280', label: t('未激活') },
     auto_downgraded: { icon: '⚠️', color: '#f59e0b', label: t('已自动降级(consent 未确认)') },
     deactivated:     { icon: '🔒', color: '#9ca3af', label: t('已退出') },
@@ -4484,7 +4572,7 @@ async function renderRewardsMe(app) {
   const expired = status.expired_to_charity || { count: 0, total_amount: 0 }
 
   app.innerHTML = shell(`
-    <h1 class="page-title">🎁 ${t('共建身份管理')}</h1>
+    <h1 class="page-title">🎁 ${t('分享分润管理')}</h1>
 
     <div class="card" style="margin-bottom:16px;border-left:4px solid ${stateLabel.color};padding:14px">
       <div style="display:flex;align-items:center;gap:10px;margin-bottom:6px">
@@ -4498,27 +4586,27 @@ async function renderRewardsMe(app) {
       <div class="card" style="margin-bottom:16px;background:#fef3c7;border-color:#fde68a;padding:12px">
         <div style="font-weight:600;color:#92400e;font-size:13px;margin-bottom:4px">💰 ${t('待领 escrow')}</div>
         <div style="font-size:13px;color:#7c2d12">${escrow.count} ${t('笔')} · ${escrow.total_amount} WAZ</div>
-        <div style="font-size:11px;color:#a16207;margin-top:6px">${t('opt-in 后这笔钱会拨回钱包。30 天未领过期入公益。')}</div>
+        <div style="font-size:11px;color:#a16207;margin-top:6px">${t('opt-in 后这笔钱会拨回钱包。30 天未领过期入协议公池。')}</div>
       </div>
     ` : ''}
 
     ${expired.count > 0 ? `
       <div class="card" style="margin-bottom:16px;background:#f3f4f6;padding:10px;font-size:12px;color:#6b7280">
-        ${t('历史过期入公益')}: ${expired.count} ${t('笔')} · ${expired.total_amount} WAZ
+        ${t('历史过期入协议公池')}: ${expired.count} ${t('笔')} · ${expired.total_amount} WAZ
       </div>
     ` : ''}
 
     ${status.state === 'opted_in' ? `
       <div class="card" style="margin-bottom:16px;padding:14px">
-        <div style="font-size:13px;color:#374151;margin-bottom:10px">${t('退出共建身份后,未来 commission 直接入公益(无 escrow)。可随时再申请。')}</div>
+        <div style="font-size:13px;color:#374151;margin-bottom:10px">${t('退出分享分润后,未来 commission 进入协议公池(commission_reserve),不是慈善基金。可随时重新开通。')}</div>
         <button class="btn" style="background:#fee2e2;color:#991b1b;border:1px solid #fca5a5" onclick="doDeactivateRewards()">
-          🔒 ${t('退出共建身份')}
+          🔒 ${t('退出分享分润')}
         </button>
         <div id="rwd-deact-msg" style="margin-top:10px"></div>
       </div>
     ` : `
       <button class="btn btn-primary" onclick="location.hash='#apply-rewards'">
-        🎁 ${status.state === 'never_activated' ? t('申请共建身份') : t('重新申请')}
+        🎁 ${status.state === 'never_activated' ? t('申请分享分润') : t('重新申请')}
       </button>
     `}
 
@@ -4531,7 +4619,7 @@ async function renderRewardsMe(app) {
 window.doDeactivateRewards = async () => {
   const msg = document.getElementById('rwd-deact-msg')
   if (!msg) return
-  if (!confirm(t('确认退出共建身份?未来 commission 将直接入公益,可随时再申请。'))) return
+  if (!confirm(t('确认退出分享分润?未来 commission 将进入协议公池(commission_reserve,非慈善基金),可随时重新开通。'))) return
 
   msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('请通过 Passkey / 生物识别确认...')}</div>`
   let passkeyToken
@@ -4548,7 +4636,7 @@ window.doDeactivateRewards = async () => {
     msg.innerHTML = alert$('error', res.error)
     return
   }
-  msg.innerHTML = alert$('success', t('✅ 已退出共建身份'))
+  msg.innerHTML = alert$('success', t('✅ 已退出分享分润'))
   setTimeout(() => renderRewardsMe(document.getElementById('app')), 1200)
 }
 
@@ -5815,7 +5903,7 @@ function renderLogin() {
       <!-- ② 主 CTA：参与共建 -->
       <div style="text-align:center;margin-top:clamp(20px,3.6vh,34px)">
         <button onclick="openParticipateSheet('${defaultTab}')" style="padding:13px 48px;font-size:16px;font-weight:600;width:auto;min-width:220px;border-radius:99px;border:none;cursor:pointer;background:linear-gradient(135deg,#6366f1 0%,#8b5cf6 100%);color:#fff;box-shadow:0 12px 28px rgba(99,102,241,0.32),0 4px 8px rgba(99,102,241,0.18);letter-spacing:0.2px;transition:all 0.2s ease;font-family:inherit" onmouseover="this.style.transform='translateY(-1px)';this.style.boxShadow='0 16px 36px rgba(99,102,241,0.38),0 6px 12px rgba(99,102,241,0.22)'" onmouseout="this.style.transform='';this.style.boxShadow='0 12px 28px rgba(99,102,241,0.32),0 4px 8px rgba(99,102,241,0.18)'">
-          ${window._lang === 'en' ? 'Participate' : '参与共建'}
+          ${window._lang === 'en' ? 'Get started' : '开始使用'}
         </button>
       </div>
 
@@ -6046,15 +6134,15 @@ function renderWelcome(app) {
       <!-- 区块 1: Buyers -->
       <section class="w-section">
         <h2 style="${H2_STYLE}">${T('作为买家<br>你不只是买家', "As a buyer<br>you're more than a buyer")}</h2>
-        <p style="${SUB_STYLE}">${T('消费也是贡献，贡献就有回报', 'To spend is to build. To build is to own.')}</p>
+        <p style="${SUB_STYLE}">${T('真实使用，留下可验证的记录', 'Use for real — leave a verifiable record.')}</p>
         <div class="w-cards">
           <div class="w-card">
-            <div class="w-card-title">🎁 ${T('你的购物体验可以赚回来', 'Your shopping experience pays back')}</div>
+            <div class="w-card-title">🛍 ${T('真实使用，真实记录', 'Real use, real record')}</div>
             <ul class="w-card-list">
               <li>${T('真实购买，真实体验', 'Buy real. Use real. Review real.')}</li>
-              <li>${T('写测评 / 推荐朋友 / 发视频', 'Write a review / post a video')}</li>
-              <li>${T('达标返现，购物费回到你口袋', 'Hit the bar, get your money back')}</li>
-              <li>${T('你是买家、创作者、贡献者——一体', 'Buyer, creator, contributor — one')}</li>
+              <li>${T('你的体验可以帮助后来者判断', 'Your experience helps others decide')}</li>
+              <li>${T('购物、评价、分享是使用记录', 'Shopping, reviews, sharing are usage records')}</li>
+              <li>${T('想正式贡献?走公开任务板 #contribute/tasks', 'Want to contribute? Use the public task board #contribute/tasks')}</li>
             </ul>
           </div>
           <div class="w-card">
@@ -6105,18 +6193,18 @@ function renderWelcome(app) {
           <div class="w-card">
             <div class="w-card-title">🎯 ${T('跨平台引流，数据归你', 'Cross-platform traffic, your data')}</div>
             <ul class="w-card-list">
-              <li>${T('在小红书、抖音、B 站、IG、TikTok 发内容', 'Post on Xiaohongshu, Douyin, Bilibili, IG, TikTok')}</li>
+              <li>${T('在小红书、抖音、B 站、视频号发内容', 'Post on TikTok, Instagram, YouTube, Reddit, or Pinterest')}</li>
               <li>${T('用 webaz 口令引流', 'Drive traffic with webaz codes')}</li>
               <li>${T('真实访问、真实转化都看得见', 'See real visits and conversions')}</li>
               <li>${T("数据是你的，不是平台的", "Data is yours, not the platform's")}</li>
             </ul>
           </div>
           <div class="w-card">
-            <div class="w-card-title">💰 ${T('真实带货，实在回报', 'Real sales, real rewards')}</div>
+            <div class="w-card-title">🔗 ${T('分享与归因', 'Sharing & attribution')}</div>
             <ul class="w-card-list">
-              <li>${T('真实购买 → 真实测评 → 真实免单', 'Real purchase → Real review → Real refund')}</li>
-              <li>${T('你带回的客户、你产生的成交，都能转化为你的收益', 'Customers you bring, sales you drive — all turn into earnings')}</li>
-              <li>${T('不靠广告分成，不靠平台施舍', 'No ad shares. No platform alms')}</li>
+              <li>${T('分享商品 / 内容，留下可追溯的归因记录', 'Share products / content — leave a traceable attribution record')}</li>
+              <li>${T('符合条件并完成「分享分润」opt-in 后，协议按规则处理分润', 'If eligible and after you opt in to share-commission, the protocol settles commission per the rules')}</li>
+              <li>${T('不承诺收益;内容发布不等同于正式贡献', 'No promised earnings; publishing content is not formal contribution')}</li>
             </ul>
           </div>
         </div>
@@ -6177,10 +6265,10 @@ function renderWelcome(app) {
           )}
           ${renderTL(
             '19:00',
-            T('你作为创作者', 'You as a creator'),
-            T('小红书发护手霜测评 · 带 webaz 口令', 'Post the review on Xiaohongshu · with a webaz code'),
-            T('使用 + 建设 + 贡献', 'Use + Build + Contribute'),
-            T('别人凭口令购买 → 你拿推广分成 · 真实推广，真实回报', 'Others buy via your code → you earn share · real promotion, real return')
+            T('你作为分享者', 'You as a sharer'),
+            T('小红书发护手霜测评 · 带 webaz 口令', 'Post the review on TikTok · with a webaz code'),
+            T('使用 + 分享', 'Use + Share'),
+            T('别人凭口令购买 → 留下归因记录(分润需单独 opt-in)', 'Others buy via your code → an attribution record (commission needs a separate opt-in)')
           )}
           ${renderTL(
             '22:00',
@@ -6214,7 +6302,7 @@ function renderWelcome(app) {
                 <option value="">${T('我想以什么身份开始？（可选）', 'How would you like to start? (optional)')}</option>
                 <option value="buyer">${T('买家 · Agent 帮我找货', 'Buyer · let agents find me deals')}</option>
                 <option value="seller">${T('卖家 · 上架商品并获取 Earn-Back', 'Seller · list products and earn back')}</option>
-                <option value="creator">${T('创作者 · 测评、笔记、推广分成', 'Creator · reviews, notes, promotion share')}</option>
+                <option value="creator">${T('分享者 · 测评、笔记、内容归因', 'Sharer · reviews, notes, content attribution')}</option>
                 <option value="verifier">${T('审核员 · 链接 / 内容验证', 'Verifier · link & content verification')}</option>
                 <option value="arbitrator">${T('仲裁员 · 争议裁决', 'Arbitrator · dispute resolution')}</option>
                 <option value="other">${T('其他 / 都看看', 'Other / just curious')}</option>
@@ -6224,6 +6312,16 @@ function renderWelcome(app) {
               <div id="w-email-msg" style="font-size:12px;text-align:center;min-height:1.5em"></div>
             </div>
           </div>
+          <div class="w-card w-join-card">
+            <div class="w-join-card-left">
+              <div class="w-card-title">🛠 ${T('想直接改进 WebAZ?', 'Want to improve WebAZ directly?')}</div>
+              <div class="w-card-desc">${T('公开任务板:浏览 / 认领可做的任务,或提个新任务。建议无需登录;认领与提交需登录。只有 canonical 仓库被合并的 PR(或维护者认可的 issue / task / RFC)才进入贡献记录 —— sandbox、本地草稿、普通购物 / 分享都不是正式贡献。', 'Public task board: browse / claim tasks, or propose a new one. Suggesting needs no login; claiming & submitting need login. Only a merged PR on the canonical repo (or a maintainer-recognized issue / task / RFC) enters the contribution record — a sandbox run, a local draft, or ordinary shopping / sharing is not formal contribution.')}</div>
+            </div>
+            <div class="w-join-card-right">
+              <a class="w-btn-full w-btn-outline" href="#contribute/tasks" style="display:flex;align-items:center;justify-content:center;text-decoration:none">${T('公开任务板', 'Public task board')}</a>
+              <a class="w-btn-full w-btn-outline" href="#contribute/tasks/suggest" style="display:flex;align-items:center;justify-content:center;text-decoration:none">${T('建议新任务', 'Suggest a task')}</a>
+            </div>
+          </div>
           <div class="w-card w-join-card">
             <div class="w-join-card-left">
               <div class="w-card-title">💡 ${T('随便逛逛？提个建议', 'Just browsing? Drop an idea')}</div>
@@ -6389,7 +6487,7 @@ async function renderGovernanceOnboarding(app) {
         <ul style="margin:0;padding-left:20px;color:#1e3a8a;line-height:1.8;font-size:14px">
           <li><strong>arbitrator</strong> — ${T('仲裁纠纷 dispute(Iron-Rule 真人 Passkey 必备)', 'Arbitrate disputes (Iron-Rule requires real human Passkey)')}</li>
           <li><strong>verifier</strong> — ${T('验证 claim(同 Iron-Rule)', 'Verify claims (same Iron-Rule)')}</li>
-          <li>${T('卸任 30 天冷却 / outlier 自动 deactivate / 申诉路径', 'Resignation 30d cooldown / outlier auto-deactivate / appeal path')}</li>
+          <li>${T('卸任 30 天冷却 · outlier 是风险信号,经复核确认错误(confirmed-wrong)才触发 auto-deactivate · 有申诉路径', 'Resignation 30d cooldown · an outlier is a risk signal — auto-deactivate only triggers when review confirms it wrong (confirmed-wrong) · with an appeal path')}</li>
         </ul>
       </section>
 
@@ -6460,6 +6558,8 @@ async function renderGovernanceOnboarding(app) {
           <div style="font-size:13px;line-height:1.9;color:#3f3f46">
             📅 ${T('注册', 'Registered')} ≥ <strong>${esc(ver.registration_days ?? '?')}</strong> ${T('天', 'd')}<br>
             📦 ${T('完成订单', 'Completed orders')} ≥ <strong>${esc(ver.completed_orders ?? '?')}</strong><br>
+            ⭐ ${T('信誉', 'Reputation')} ≥ <strong>${esc(ver.reputation ?? '?')}</strong><br>
+            💰 ${T('钱包余额', 'Balance')} ≥ <strong>${esc(ver.balance_waz ?? '?')}</strong> WAZ<br>
             ✉️ ${T('邮箱验证', 'Email verified')} · 🚫 ${T('零仲裁判输', 'Zero disputes lost')} · ✅ ${T('未曾暂停', 'Never suspended')}
           </div>
         </div>
@@ -6471,6 +6571,329 @@ async function renderGovernanceOnboarding(app) {
   }
 }
 
+// ─── PR9E-1 Public Contribution Pages (#contribute/tasks · /:id · /tasks/suggest) ────────────────────
+// Public, no-auth PWA surface over the #329/#330/#331 APIs so a stranger + their agent can participate at
+// low friction. READ + SUGGEST only. Hard boundaries (mirror the server contract):
+//   · Restricted/internal tasks NEVER reach these pages — the list/detail call ONLY the public-scope
+//     endpoints (/api/public/build-tasks[/:id]); the server hides everything but audience=public+open.
+//   · The agent prompt instructs PRs to the CANONICAL repo only (from the response, trusted config); a
+//     sandbox run / local draft is explicitly NOT participation; the agent is only an executor (DCO).
+//   · No economic field is ever rendered (no reward/payout/amount/score) — value stays uncommitted
+//     (RFC-017 I-12). No auto GitHub op, no merge, no PR submission from the browser. Claim needs login.
+const CONTRIBUTE_PROMPT_STATE = { text: '' }   // last-built copy-ready prompt, for the copy button
+function _cEsc(s) { return escHtml(String(s ?? '')) }
+function _cArrList(arr, empty) {
+  if (!Array.isArray(arr) || arr.length === 0) return `<div style="color:#a1a1aa;font-size:13px">${_cEsc(empty)}</div>`
+  return '<ul style="margin:6px 0 0;padding-left:18px;line-height:1.8">' + arr.map(x => `<li><code style="font-size:12px;word-break:break-all">${_cEsc(x)}</code></li>`).join('') + '</ul>'
+}
+function _cBoundaryHTML(vb, T) {
+  if (!vb) return ''
+  const notice = window._lang === 'en' ? (vb.notice_en || '') : (vb.notice_zh || '')
+  return `<div style="background:#f4f4f5;border:1px solid #e4e4e7;border-radius:8px;padding:12px;font-size:12px;color:#52525B;line-height:1.6;margin:12px 0">
+    🔒 ${T('价值边界', 'Value boundary')}: <strong>${_cEsc(vb.value_state || 'uncommitted')}</strong> · ${_cEsc(vb.boundary_ref || 'RFC-017 I-12')}<br>${_cEsc(notice)}</div>`
+}
+function _cRiskBadge(level, T) {
+  if (!level) return ''
+  const c = { low: '#16a34a', medium: '#d97706', high: '#dc2626', critical: '#7f1d1d' }[level] || '#6b7280'
+  return `<span style="background:${c}1a;color:${c};padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600">${T('风险', 'risk')}:${_cEsc(level)}</span>`
+}
+function _cDuration(d, T) {
+  if (!d || (d.min_minutes == null && d.max_minutes == null)) return ''
+  const lo = d.min_minutes, hi = d.max_minutes
+  const span = lo != null && hi != null ? `${lo}–${hi}` : (lo ?? hi)
+  return `<span style="font-size:11px;color:#6b7280">⏱ ${T('预计', 'est.')} ${_cEsc(span)} ${T('分钟', 'min')}</span>`
+}
+
+// Build a copy-ready agent prompt from the (trusted) public detail payload. Names the boundary, forbidden
+// paths, prohibited actions, verification commands, the canonical-repo PR requirement, and that a
+// sandbox/local draft is NOT participation. It states the contribution confers no economic right (it does
+// NOT restate any reward/payout/amount/score — value stays uncommitted).
+function buildContributeAgentPrompt(task, cct, T) {
+  const m = task.agent_metadata || {}
+  const join = (a, sep) => (Array.isArray(a) && a.length ? a.join(sep) : null)
+  const L = []
+  L.push(`# WebAZ contribution task: ${task.title || task.task_id || ''}`)
+  L.push(`Task id: ${task.task_id || ''}`)
+  if (task.area) L.push(`Area: ${task.area}`)
+  if (m.task_type) L.push(`Type: ${m.task_type}`)
+  L.push('')
+  L.push('## Boundary — stay strictly inside this')
+  L.push('Allowed paths: ' + (join(m.allowed_paths, ', ') || '(none specified — ask the maintainer before editing)'))
+  L.push('Forbidden paths (NEVER touch): ' + (join(m.forbidden_paths, ', ') || '(none listed)'))
+  L.push('Prohibited actions (NEVER do): ' + (join(m.prohibited_actions, '; ') || '(none listed)'))
+  if (join(m.required_capabilities, ', ')) L.push('Required capabilities: ' + join(m.required_capabilities, ', '))
+  L.push('')
+  L.push('## Acceptance & verification')
+  L.push('Acceptance criteria: ' + (join(m.acceptance_criteria, '; ') || '(see task)'))
+  L.push('Verification commands (must pass): ' + (join(m.verification_commands, ' && ') || '(see task)'))
+  if (m.expected_results) L.push('Expected results: ' + m.expected_results)
+  L.push('Deliverables: ' + (join(m.deliverables, '; ') || '(see task)'))
+  if (m.definition_of_done) L.push('Definition of done: ' + m.definition_of_done)
+  L.push('')
+  L.push('## Submitting — canonical repository only')
+  L.push(`Open a Pull Request whose BASE repository is the canonical WebAZ repo: ${cct.expected_pr_base_repo || ''} (${cct.canonical_github_url || ''}), base branch ${cct.base_branch || 'main'}.`)
+  L.push('If any target repo differs from this canonical repo, STOP and ask the human to confirm — never contribute to a non-canonical repository.')
+  L.push('Sign every commit (DCO): `git commit -s`. A real human/org is the accountable party; the agent is only an executor.')
+  L.push('')
+  L.push('## Not participation')
+  L.push('A sandbox run or a local-only draft is NOT participation and is NOT a contribution. Only a merged PR (or recognized issue/task/RFC) on the canonical repo enters the contribution record.')
+  L.push('This task confers no economic or redemption right; contribution value is uncommitted (RFC-017 I-12).')
+  return L.join('\n')
+}
+
+window.contributeApplyFilters = () => {
+  const area = (document.getElementById('ct-f-area')?.value || '').trim()
+  const risk = document.getElementById('ct-f-risk')?.value || ''
+  const ac = document.getElementById('ct-f-ac')?.value || ''
+  const agentcaps = (document.getElementById('ct-f-agentcaps')?.value || '').trim()
+  const maxdur = (document.getElementById('ct-f-maxdur')?.value || '').trim()
+  const ctx = document.getElementById('ct-f-ctx')?.value || ''
+  const budget = document.getElementById('ct-f-budget')?.value || ''
+  const p = new URLSearchParams()
+  if (area) p.set('area', area)
+  if (risk) p.set('risk_level', risk)
+  if (ac) p.set('auto_claimable', ac)
+  if (agentcaps) p.set('agent_capabilities', agentcaps)
+  if (maxdur) p.set('max_duration_minutes', maxdur)
+  if (ctx) p.set('estimated_context_size', ctx)
+  if (budget) p.set('estimated_agent_budget', budget)
+  const qs = p.toString()
+  location.hash = '#contribute/tasks' + (qs ? '?' + qs : '')
+}
+
+window.contributeCopyPrompt = async () => {
+  const msg = document.getElementById('ct-prompt-msg')
+  try {
+    await navigator.clipboard.writeText(CONTRIBUTE_PROMPT_STATE.text || '')
+    if (msg) msg.textContent = window._lang === 'en' ? '✓ Copied' : '✓ 已复制'
+  } catch {
+    // clipboard unavailable (insecure context / permission) — select the textarea so the user can copy
+    const ta = document.getElementById('ct-prompt'); if (ta) { ta.focus(); ta.select() }
+    if (msg) msg.textContent = window._lang === 'en' ? 'Select the text above and copy manually' : '请选中上方文本手动复制'
+  }
+}
+
+window.contributeClaim = async (id) => {
+  const T = (zh, e) => window._lang === 'en' && e ? e : zh
+  if (!state.apiKey) {   // not logged in → save intended task and go to login
+    try { sessionStorage.setItem('webaz_intended_hash', '#contribute/tasks/' + id) } catch {}
+    navigate('#login'); return
+  }
+  const { status, body } = await apiWithStatus('POST', '/build-tasks/' + id + '/claim', { provenance: 'unspecified' })
+  if (status === 200 && body && !body.error) { toast$(T('已认领 — 去「我的共建」查看', 'Claimed — see “My contributions”')); route(true); return }
+  toast$((body && (body.error || body.error_code)) || T('认领失败', 'Claim failed'))
+}
+
+window.submitContributeProposal = async () => {
+  const T = (zh, e) => window._lang === 'en' && e ? e : zh
+  const val = (id) => (document.getElementById(id)?.value || '').trim()
+  const out = document.getElementById('ct-suggest-result')
+  const body = {
+    title: val('cs-title'), summary: val('cs-summary'),
+    suggested_area: val('cs-area') || undefined, expected_outcome: val('cs-outcome') || undefined,
+    source_ref: val('cs-source') || undefined, proposer_github_login: val('cs-login') || undefined,
+  }
+  if (out) out.innerHTML = `<div style="color:#a1a1aa;font-size:13px">${T('提交中…', 'Submitting…')}</div>`
+  const { status, body: r } = await apiWithStatus('POST', '/public/task-proposals', body)
+  if (status === 200 && r && r.proposal) {
+    const notice = window._lang === 'en' ? (r.value_boundary?.notice_en || '') : (r.value_boundary?.notice_zh || '')
+    if (out) out.innerHTML = `<div style="background:#dcfce7;border:1px solid #16a34a;border-radius:8px;padding:14px">
+      <div style="font-weight:600;color:#166534">✓ ${T('已收到你的建议', 'Your suggestion was received')}</div>
+      <div style="font-size:13px;color:#15803d;margin-top:6px">${T('建议编号', 'Proposal id')}: <code>${_cEsc(r.proposal.id)}</code></div>
+      <div style="font-size:12px;color:#15803d;margin-top:8px">${T('这是一条建议,不是贡献事实 / 奖励 / 正式参与。它进入维护者收件箱待审,绝不会自动变成正式任务或出现在公开任务板。', 'This is a SUGGESTION — not a contribution fact, not a reward, not formal participation. It enters the maintainer review inbox and never auto-becomes a task or appears on the public board.')}</div>
+      <div style="font-size:11px;color:#52525B;margin-top:8px">${_cEsc(notice)}</div></div>`
+    return
+  }
+  // typed errors — make RATE_LIMITED / DUPLICATE_PROPOSAL / validation legible
+  const code = (r && r.error_code) || ''
+  let human
+  if (status === 429 || code === 'RATE_LIMITED') human = T('提交太频繁,请稍后再试(每小时有上限)。', 'Too many submissions — please try again later (there is an hourly limit).')
+  else if (status === 409 || code === 'DUPLICATE_PROPOSAL') human = T('相同建议已在收件箱中,请勿重复提交。', 'An identical suggestion is already in the inbox — no need to submit it again.') + (r && r.existing_id ? ` (#${_cEsc(r.existing_id)})` : '')
+  else human = ((r && r.error) || T('提交失败,请检查输入。', 'Submission failed — please check your input.')) + (code ? ` [${_cEsc(code)}]` : '')
+  if (out) out.innerHTML = `<div style="background:#fee2e2;border:1px solid #ef4444;border-radius:8px;padding:14px;color:#991b1b;font-size:13px">⚠️ ${human}</div>`
+}
+
+const CONTRIBUTE_PAGE_STYLE = `max-width:880px;margin:0 auto;padding:24px 16px 80px;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','PingFang SC','Microsoft YaHei UI',sans-serif`
+
+async function renderContributeTasks(app) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  const q = state._urlQuery || {}
+  app.innerHTML = `
+    ${preLaunchBannerHTML()}
+    <div style="${CONTRIBUTE_PAGE_STYLE}">
+      <header style="margin-bottom:20px">
+        <h1 style="font-size:clamp(24px,5vw,32px);margin:0 0 8px;color:#18181B">🛠️ ${T('公开任务板', 'Open Task Board')}</h1>
+        <p style="color:#52525B;font-size:15px;margin:0;line-height:1.6">${T('面向任何人和他们的 agent 的公开共建任务。只读取公开任务;认领需登录。', 'Open contribution tasks for anyone and their agents. Read-only here; claiming requires login.')}</p>
+      </header>
+      ${_cBoundaryHTML(UNCOMMITTED_VALUE_BOUNDARY_HINT(), T)}
+      <div style="display:flex;gap:8px;flex-wrap:wrap;margin-bottom:14px">
+        <input id="ct-f-area" placeholder="${T('领域 area', 'area')}" value="${_cEsc(q.area || '')}" style="flex:1;min-width:120px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <select id="ct-f-risk" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('风险(全部)', 'risk (all)')}</option>
+          ${['low','medium','high','critical'].map(r => `<option value="${r}" ${q.risk_level === r ? 'selected' : ''}>${r}</option>`).join('')}
+        </select>
+        <select id="ct-f-ac" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('可自动认领(全部)', 'auto-claimable (all)')}</option>
+          <option value="true" ${q.auto_claimable === 'true' ? 'selected' : ''}>${T('仅可自动认领', 'auto-claimable only')}</option>
+          <option value="false" ${q.auto_claimable === 'false' ? 'selected' : ''}>${T('仅需人工认领', 'manual-claim only')}</option>
+        </select>
+        <input id="ct-f-agentcaps" placeholder="${T('你的能力(逗号分隔)→ 你能做的任务', 'your capabilities (comma-sep) → tasks you can do')}" value="${_cEsc(q.agent_capabilities || '')}" title="${T('只显示所需能力都在你能力集内的任务', 'shows only tasks whose required capabilities are all within yours')}" style="flex:1;min-width:160px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <input id="ct-f-maxdur" type="number" min="1" placeholder="${T('≤ 分钟', '≤ min')}" value="${_cEsc(q.max_duration_minutes || '')}" title="${T('只显示预计耗时不超过该分钟数的任务', 'tasks whose estimated max duration fits within this many minutes')}" style="width:96px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <select id="ct-f-ctx" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('上下文(全部)', 'context (all)')}</option>
+          ${['small','medium','large'].map(c => `<option value="${c}" ${q.estimated_context_size === c ? 'selected' : ''}>${c}</option>`).join('')}
+        </select>
+        <select id="ct-f-budget" title="${T('按 agent 预计工作量筛选(不是费用 / 报酬)', 'filter by estimated agent effort (not a cost / payment)')}" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('agent 工作量(全部)', 'agent effort (all)')}</option>
+          ${['minimal','small','moderate','large','xlarge'].map(b => `<option value="${b}" ${q.estimated_agent_budget === b ? 'selected' : ''}>${b}</option>`).join('')}
+        </select>
+        <button onclick="contributeApplyFilters()" style="padding:8px 16px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:13px;cursor:pointer">${T('筛选', 'Filter')}</button>
+        <button onclick="location.hash='#contribute/tasks/suggest'" style="padding:8px 16px;background:#fff;color:#18181B;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;cursor:pointer">💡 ${T('建议新任务', 'Suggest a task')}</button>
+      </div>
+      <div id="ct-list"><div style="color:#a1a1aa;text-align:center;padding:30px">${T('加载中…', 'Loading…')}</div></div>
+    </div>`
+
+  const params = new URLSearchParams()
+  for (const k of ['area', 'risk_level', 'auto_claimable', 'agent_capabilities', 'max_duration_minutes', 'estimated_context_size', 'estimated_agent_budget']) if (q[k]) params.set(k, q[k])
+  const list = document.getElementById('ct-list')
+  try {
+    const res = await fetch('/api/public/build-tasks' + (params.toString() ? '?' + params : ''), { signal: AbortSignal.timeout(10000) })
+    const j = await res.json().catch(() => ({}))
+    if (!res.ok) { list.innerHTML = `<div style="background:#fee2e2;border:1px solid #ef4444;border-radius:8px;padding:14px;color:#991b1b;font-size:13px">⚠️ ${_cEsc(j.error || T('筛选无效', 'Invalid filter'))}${j.error_code ? ` [${_cEsc(j.error_code)}]` : ''}</div>`; return }
+    const tasks = j.tasks || []
+    if (tasks.length === 0) { list.innerHTML = `<div style="color:#a1a1aa;text-align:center;padding:30px;font-size:14px">${T('暂无符合条件的公开任务。', 'No open tasks match the filters.')}</div>`; return }
+    list.innerHTML = tasks.map(task => {
+      const m = task.agent_metadata || {}
+      const caps = Array.isArray(m.required_capabilities) && m.required_capabilities.length
+        ? `<div style="font-size:11px;color:#6b7280;margin-top:6px">${T('所需能力', 'capabilities')}: ${m.required_capabilities.map(c => `<code style="font-size:11px">${_cEsc(c)}</code>`).join(' ')}</div>` : ''
+      return `<div onclick="location.hash='#contribute/tasks/${_cEsc(task.task_id)}'" style="background:#fff;border:1px solid #e4e4e7;border-radius:10px;padding:14px;margin-bottom:10px;cursor:pointer">
+        <div style="display:flex;justify-content:space-between;gap:10px;align-items:flex-start">
+          <div style="font-weight:600;color:#18181B;font-size:15px">${_cEsc(task.title)}</div>
+          ${m.auto_claimable ? `<span style="background:#dbeafe;color:#1e40af;padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600;white-space:nowrap">${T('可自动认领', 'auto-claimable')}</span>` : ''}
+        </div>
+        <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-top:8px">
+          ${task.area ? `<span style="font-size:11px;color:#6b7280">📂 ${_cEsc(task.area)}</span>` : ''}
+          ${_cRiskBadge(m.risk_level, T)}
+          ${_cDuration(m.estimated_duration, T)}
+        </div>
+        ${caps}
+        <div style="font-size:12px;color:#6366f1;margin-top:8px">${T('查看详情 + 复制 agent 提示', 'View detail + copy agent prompt')} →</div>
+      </div>`
+    }).join('')
+  } catch (e) {
+    list.innerHTML = `<div style="color:#dc2626;text-align:center;padding:20px;font-size:14px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div>`
+  }
+}
+
+async function renderContributeTaskDetail(app, id) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}"><div style="color:#a1a1aa;text-align:center;padding:40px">${T('加载中…', 'Loading…')}</div></div>`
+  let j, res
+  try {
+    res = await fetch('/api/public/build-tasks/' + encodeURIComponent(id), { signal: AbortSignal.timeout(10000) })
+    j = await res.json().catch(() => ({}))
+  } catch (e) {
+    app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}"><div style="color:#dc2626;text-align:center;padding:30px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div></div>`; return
+  }
+  if (!res.ok || !j.task) {
+    app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+      <div style="color:#52525B;text-align:center;padding:30px">${T('任务不存在或非公开。', 'Task not found or not public.')}</div>
+      <div style="text-align:center"><button onclick="location.hash='#contribute/tasks'" style="padding:8px 16px;background:#fff;border:1px solid #d4d4d8;border-radius:8px;cursor:pointer">← ${T('返回任务板', 'Back to board')}</button></div></div>`; return
+  }
+  const task = j.task
+  const cct = j.canonical_contribution_target || {}
+  const m = task.agent_metadata || {}
+  CONTRIBUTE_PROMPT_STATE.text = buildContributeAgentPrompt(task, cct, T)
+  const section = (icon, title, inner) => `<section style="background:#fff;border:1px solid #e4e4e7;border-radius:12px;padding:18px;margin-bottom:14px">
+    <h3 style="margin:0 0 10px;color:#18181B;font-size:16px">${icon} ${title}</h3>${inner}</section>`
+  const claimBtn = m.auto_claimable
+    ? (state.apiKey
+        ? `<button onclick="contributeClaim('${_cEsc(task.task_id)}')" style="padding:10px 20px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:14px;cursor:pointer">✋ ${T('认领此任务', 'Claim this task')}</button>`
+        : `<button onclick="contributeClaim('${_cEsc(task.task_id)}')" style="padding:10px 20px;background:#fff;color:#18181B;border:1px solid #6366f1;border-radius:8px;font-size:14px;cursor:pointer">🔑 ${T('登录后认领', 'Log in to claim')}</button><div style="font-size:11px;color:#6b7280;margin-top:6px">${T('认领需要登录(真人 Passkey 账户);浏览器不会自动执行 GitHub 操作。', 'Claiming requires login (a real Passkey account); the browser performs no automatic GitHub action.')}</div>`)
+    : `<div style="font-size:12px;color:#6b7280">${T('此任务需人工认领流程,不可自动认领。', 'This task uses a manual claim flow; it is not auto-claimable.')}</div>`
+
+  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+    <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
+    <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">${_cEsc(task.title)}</h1>
+    <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-bottom:6px">
+      ${task.area ? `<span style="font-size:12px;color:#6b7280">📂 ${_cEsc(task.area)}</span>` : ''}
+      ${m.task_type ? `<span style="font-size:12px;color:#6b7280">🔖 ${_cEsc(m.task_type)}</span>` : ''}
+      ${_cRiskBadge(m.risk_level, T)} ${_cDuration(m.estimated_duration, T)}
+      ${m.auto_claimable ? `<span style="background:#dbeafe;color:#1e40af;padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600">${T('可自动认领', 'auto-claimable')}</span>` : ''}
+    </div>
+    ${_cBoundaryHTML(task.value_boundary || j.value_boundary, T)}
+
+    ${section('🧭', T('执行边界', 'Execution boundary'), `
+      <div style="font-size:13px;color:#374151;font-weight:600">${T('允许修改的路径', 'Allowed paths')}</div>${_cArrList(m.allowed_paths, T('未指定 — 请先向维护者确认', 'Not specified — confirm with the maintainer'))}
+      <div style="font-size:13px;color:#991b1b;font-weight:600;margin-top:10px">${T('禁止触碰的路径', 'Forbidden paths')}</div>${_cArrList(m.forbidden_paths, T('无', 'none'))}
+      <div style="font-size:13px;color:#991b1b;font-weight:600;margin-top:10px">${T('禁止的动作', 'Prohibited actions')}</div>${_cArrList(m.prohibited_actions, T('无', 'none'))}
+      ${Array.isArray(m.required_capabilities) && m.required_capabilities.length ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('所需能力', 'Required capabilities')}</div>${_cArrList(m.required_capabilities, '')}` : ''}`)}
+
+    ${section('✅', T('验收与验证', 'Acceptance & verification'), `
+      <div style="font-size:13px;color:#374151;font-weight:600">${T('验收标准', 'Acceptance criteria')}</div>${_cArrList(m.acceptance_criteria, T('见任务描述', 'see task'))}
+      <div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('验证命令(须通过)', 'Verification commands (must pass)')}</div>${_cArrList(m.verification_commands, T('见任务描述', 'see task'))}
+      ${m.expected_results ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('预期结果', 'Expected results')}</div><div style="font-size:13px;color:#52525B;line-height:1.6;white-space:pre-wrap">${_cEsc(m.expected_results)}</div>` : ''}
+      <div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('交付物', 'Deliverables')}</div>${_cArrList(m.deliverables, T('见任务描述', 'see task'))}
+      ${m.definition_of_done ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('完成定义', 'Definition of done')}</div><div style="font-size:13px;color:#52525B;line-height:1.6;white-space:pre-wrap">${_cEsc(m.definition_of_done)}</div>` : ''}`)}
+
+    ${section('🎯', T('提交目标(必须是 canonical 仓库)', 'Submit to the canonical repository'), `
+      <div style="font-size:13px;color:#52525B;line-height:1.7">
+        ${T('PR 的 base 仓库必须是', 'A PR\'s base repository MUST be')} <code>${_cEsc(cct.expected_pr_base_repo || cct.canonical_repository_full_name || '')}</code>
+        ${cct.canonical_github_url ? ` · <a href="${_cEsc(cct.canonical_github_url)}" target="_blank" rel="noopener" style="color:#1d4ed8">${_cEsc(cct.canonical_github_url)}</a>` : ''}
+        ${cct.base_branch ? ` · base <code>${_cEsc(cct.base_branch)}</code>` : ''}
+      </div>
+      <div style="font-size:12px;color:#92400e;background:#fef3c7;border-radius:8px;padding:10px;margin-top:10px;line-height:1.6">⚠️ ${T('若目标仓库与上述 canonical 仓库不一致,请停止并向真人确认 —— 不要向非 canonical 仓库提交。提交需 DCO 签名(git commit -s),问责主体是真人/组织,agent 只是执行者。', 'If a target repo differs from this canonical repo, STOP and ask a human to confirm — never contribute to a non-canonical repository. Commits need DCO sign-off (git commit -s); the accountable party is a real human/org, the agent is only an executor.')}</div>`)}
+
+    ${section('📋', T('复制给你的 agent', 'Copy-ready agent prompt'), `
+      <div style="font-size:12px;color:#6b7280;margin-bottom:8px">${T('包含边界 / 禁止动作 / 验证命令 / 提交到 canonical 仓库的要求,并明确 sandbox / 本地草稿不算正式参与。', 'Includes the boundary / prohibited actions / verification commands / the canonical-repo PR requirement, and states that a sandbox / local draft is not participation.')}</div>
+      <textarea id="ct-prompt" readonly style="width:100%;box-sizing:border-box;height:200px;font-family:ui-monospace,'SF Mono',Menlo,monospace;font-size:11px;line-height:1.5;border:1px solid #d4d4d8;border-radius:8px;padding:10px;color:#374151">${_cEsc(CONTRIBUTE_PROMPT_STATE.text)}</textarea>
+      <div style="display:flex;gap:10px;align-items:center;margin-top:8px">
+        <button onclick="contributeCopyPrompt()" style="padding:8px 16px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:13px;cursor:pointer">📋 ${T('复制提示', 'Copy prompt')}</button>
+        <span id="ct-prompt-msg" style="font-size:12px;color:#16a34a"></span>
+      </div>`)}
+
+    ${section('✋', T('认领', 'Claim'), claimBtn)}
+
+    <div style="font-size:11px;color:#9ca3af;margin-top:8px;line-height:1.6">${T('提示:sandbox 运行或本地草稿不是正式参与,也不是贡献。只有在 canonical 仓库被合并的 PR(或被认可的 issue / task / RFC)才进入贡献记录。', 'Note: a sandbox run or local draft is not participation and is not a contribution. Only a merged PR (or recognized issue / task / RFC) on the canonical repo enters the contribution record.')}</div>
+  </div>`
+}
+
+async function renderContributeSuggest(app) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  const field = (id, label, ph, ta) => `
+    <label style="display:block;font-size:13px;color:#374151;font-weight:600;margin:12px 0 4px">${label}</label>
+    ${ta
+      ? `<textarea id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;min-height:90px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;font-family:inherit"></textarea>`
+      : `<input id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">`}`
+  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+    <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
+    <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">💡 ${T('建议一个任务', 'Suggest a task')}</h1>
+    <p style="color:#52525B;font-size:14px;margin:0 0 8px;line-height:1.6">${T('任何人都可以提建议(无需登录)。建议进入维护者收件箱待审,绝不会自动变成正式任务或出现在公开任务板。', 'Anyone can suggest (no login needed). Suggestions enter the maintainer review inbox and never auto-become tasks or appear on the public board.')}</p>
+    ${_cBoundaryHTML(UNCOMMITTED_VALUE_BOUNDARY_HINT(), T)}
+    ${field('cs-title', T('标题', 'Title') + ' *', T('简短描述这个任务', 'Short description of the task'))}
+    ${field('cs-summary', T('原因 / 说明', 'Reason / summary') + ' *', T('为什么值得做?要解决什么?', 'Why is it worth doing? What does it solve?'), true)}
+    ${field('cs-area', T('建议领域(可选)', 'Suggested area (optional)'), 'docs / api / pwa …')}
+    ${field('cs-outcome', T('预期结果(可选)', 'Expected outcome (optional)'), T('完成后应达成什么', 'What should be true when done'), true)}
+    ${field('cs-source', T('参考链接(可选)', 'Source reference (optional)'), 'https://… ' + T('(仅作参考,不决定提交目标仓库)', '(reference only; does not set the target repo)'))}
+    ${field('cs-login', T('你的 GitHub 用户名(可选)', 'Your GitHub login (optional)'), 'octocat')}
+    <button onclick="submitContributeProposal()" style="margin-top:16px;padding:10px 22px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:14px;cursor:pointer">${T('提交建议', 'Submit suggestion')}</button>
+    <div id="ct-suggest-result" style="margin-top:14px"></div>
+  </div>`
+}
+
+// The boundary constant is server-authoritative; the client mirrors the SAME frozen stance for pages that
+// render before any task payload arrives (list/suggest). It restates NO economic value (RFC-017 I-12).
+function UNCOMMITTED_VALUE_BOUNDARY_HINT() {
+  return {
+    value_state: 'uncommitted', boundary_ref: 'RFC-017 I-12',
+    notice_zh: '仅为贡献事实与归属的信息性记录,不是金融工具,不授予任何经济或兑现权利,此处不作任何承诺或保证(RFC-017 I-12 / §7)。',
+    notice_en: 'Informational record of contribution facts and attribution only. It is not a financial instrument and confers no economic or redemption right; nothing here is promised or guaranteed (RFC-017 I-12 / §7).',
+  }
+}
+
 function renderRule(num, text) {
   const [zh, en] = text.includes(' / ') ? text.split(' / ') : [text, '']
   return `<div class="w-rule w-rule-item">
@@ -6534,16 +6957,19 @@ window.openParticipateSheet = (defaultTab) => {
     <div style="padding:18px 16px 28px">
       <div style="text-align:center;margin-bottom:18px">
         <div style="font-size:22px;margin-bottom:4px">🚀</div>
-        <div style="font-size:15px;font-weight:700;color:#1f2937">${t('参与共建')}</div>
+        <div style="font-size:15px;font-weight:700;color:#1f2937">${t('开始使用 WebAZ')}</div>
         <div style="font-size:11px;color:#9ca3af;margin-top:2px">${t('选一个开始的方式')}</div>
       </div>
-      <button onclick="(document.querySelector('.js-modal')?.remove(),openAuthSheet('${defaultTab||'login'}'))" class="btn btn-primary" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between">
-        <span>🔑 ${t('注册登陆')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      <button onclick="(closeSheet(),openAuthSheet('${defaultTab||'login'}'))" class="btn btn-primary" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between">
+        <span>🔑 ${t('注册 / 登录')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      </button>
+      <button onclick="(closeSheet(),navigate('#contribute/tasks'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
+        <span>🛠 ${t('浏览公开任务板')}</span><span style="font-size:13px;opacity:0.6">›</span>
       </button>
-      <button onclick="(document.querySelector('.js-modal')?.remove(),navigate('#welcome'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
-        <span>💬 ${t('了解更多')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      <button onclick="(closeSheet(),navigate('#contribute/tasks/suggest'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
+        <span>💡 ${t('提建议(无需登录)')}</span><span style="font-size:13px;opacity:0.6">›</span>
       </button>
-      <div style="font-size:10px;color:#9ca3af;text-align:center;margin-top:14px;line-height:1.5">${t('了解协议设计 · 多种角色 · 元规则')}</div>
+      <div style="font-size:10px;color:#9ca3af;text-align:center;margin-top:14px;line-height:1.5"><a href="#welcome" onclick="closeSheet()" style="color:#9ca3af;text-decoration:none">${t('了解协议设计 · 多种角色 · 元规则')}</a></div>
     </div>
   `, { maxWidth: 460 })
 }
@@ -6629,7 +7055,7 @@ window.openAuthSheet = (defaultTab) => {
             <input class="form-control" id="inp-sponsor" placeholder="${t('陆续开放中，请期待')}" style="font-family:monospace;font-size:13px;flex:1">
             <button id="btn-fetch-ref" type="button" disabled title="${t('该功能默认关闭，由管理员开启后可用')}" onclick="doFetchInviteCode()" style="white-space:nowrap;padding:0 12px;background:#e5e7eb;color:#9ca3af;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:not-allowed">${t('获取邀请码')}</button>
           </div>
-          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('没有邀请码？联系老用户拿邀请链接')}</div>
+          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('邀请码为 6-7 位永久码，可带 -L/-R；没有就联系老用户拿邀请链接')}</div>
         </div>
         <div class="form-group">
           <label class="form-label">${t('名称 / 店铺名')}</label>
@@ -6778,16 +7204,18 @@ async function renderPromoter(app) {
   // ─── ③ 我要分享 ───
   const myId = state.user?.id || ''
   const origin = location.origin
-  // 优先用 permanent_code 短链；旧用户兜底用 usr_xxx
-  const code = data.permanent_code || myId
-  const refLinkShort  = `${origin}/i/${code}`
-  const leftLink  = `${origin}/i/${code}-L`
-  const rightLink = `${origin}/i/${code}-R`
+  // 邀请短链只用 permanent_code，绝不兜底 usr_xxx；缺失时显示"暂不可用"。
+  const code = data.permanent_code || null
+  const refLinkShort  = code ? `${origin}/i/${code}`   : ''
+  const leftLink  = code ? `${origin}/i/${code}-L` : ''
+  const rightLink = code ? `${origin}/i/${code}-R` : ''
+  const inviteUnavailableHtml = `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:12px;margin-bottom:12px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
   const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
 
   const toolboxInner = `
       <h2 style="font-size:16px;font-weight:600;margin-bottom:12px">🔗 ${t('我要分享')}</h2>
 
+      ${!code ? inviteUnavailableHtml : `
       <div style="background:linear-gradient(135deg,#eef2ff 0%,#e0e7ff 100%);border:1px solid #c7d2fe;border-radius:10px;padding:12px;margin-bottom:12px">
         <div style="display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:8px">
           <div style="font-size:13px;font-weight:600;color:#3730a3">📎 ${t('我的邀请链接')}</div>
@@ -6795,14 +7223,14 @@ async function renderPromoter(app) {
         </div>
         <div style="font-family:ui-monospace,Consolas,monospace;font-size:11px;color:#3730a3;background:#fff;padding:7px 10px;border-radius:6px;margin-bottom:10px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;border:1px solid #e0e7ff">${escHtml(refLinkShort)}</div>
         <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px">
-          <button onclick="copyRefLink('${esc(data.referral_link)}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#4f46e5;color:#fff;border:none;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;box-shadow:0 1px 2px rgba(79,70,229,0.2)">
+          <button onclick="copyRefLink('${esc(refLinkShort)}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#4f46e5;color:#fff;border:none;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;box-shadow:0 1px 2px rgba(79,70,229,0.2)">
             <span style="font-size:15px">📋</span><span>${t('复制链接')}</span>
           </button>
-          <button onclick="showQRModal('${esc(data.referral_link)}','${t('我的邀请链接')}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#fff;color:#4f46e5;border:2px solid #4f46e5;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer">
+          <button onclick="showQRModal('${esc(refLinkShort)}','${t('我的邀请链接')}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#fff;color:#4f46e5;border:2px solid #4f46e5;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer">
             <span style="font-size:15px">📱</span><span>${t('二维码')}</span>
           </button>
         </div>
-      </div>
+      </div>`}
 
       <div style="font-size:11px;line-height:1.6;color:#6b7280;margin-bottom:8px">
         ${data.permissions?.can_l1_share
@@ -7439,7 +7867,13 @@ function renderGrowthTasksSection(tasks, summary) {
         <details ${claimed.length ? '' : 'open'} style="margin-top:${claimed.length?'10px':'0'}">
           <summary style="font-size:11px;color:#374151;font-weight:600;cursor:pointer;padding:4px 0;list-style:none">▸ ${t('推荐领取')} (${available.length}) ▾</summary>
           <div style="padding-top:4px">
-            ${available.map(taskRow).join('')}
+            ${available.slice(0, 3).map(taskRow).join('')}
+            ${available.length > 3 ? `
+              <details style="margin-top:2px">
+                <summary style="font-size:11px;color:#6b7280;cursor:pointer;padding:4px 0;list-style:none">▸ ${t('查看更多推荐')} (${available.length - 3}) ▾</summary>
+                <div style="padding-top:4px">${available.slice(3).map(taskRow).join('')}</div>
+              </details>
+            ` : ''}
           </div>
         </details>
       ` : ''}
@@ -7519,10 +7953,12 @@ function renderAtomicSection(a) {
       <div style="font-size:13px;color:#6b7280;margin-bottom:6px">🔗 ${t('左右码（完全对称 / 末端垂直挂靠）')}</div>
       <div style="font-size:11px;color:#6b7280;margin-bottom:10px">${t('点击下方任一卡片复制整条推荐链接。新人通过左/右链接注册会挂到对应区。')}</div>
       ${(() => {
-        const myId = state.user?.id || ''
+        // placement 短链只用 permanent_code(/i/CODE-L / -R),绝不用 usr_xxx;缺失则提示不可用
+        const myCode = state.user?.permanent_code || null
         const origin = location.origin
-        const leftLink  = `${origin}/?placement=${myId}&side=left`
-        const rightLink = `${origin}/?placement=${myId}&side=right`
+        if (!myCode) return `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:10px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
+        const leftLink  = `${origin}/i/${myCode}-L`
+        const rightLink = `${origin}/i/${myCode}-R`
         const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
         return `
           <div style="display:grid;grid-template-columns:1fr 1fr;gap:10px">
@@ -8704,6 +9140,10 @@ async function renderShopPage(app, identifier) {
   const followBtn = state.user && !isOwnShop && state.user.role === 'buyer'
     ? `<button class="btn btn-${is_following ? 'gray' : 'primary'} btn-sm" style="width:auto" id="shop-follow-btn" data-following="${is_following ? '1' : '0'}" onclick="toggleShopFollow('${seller.id}', this)">${is_following ? '✓ ' + t('已关注') : '+ ' + t('关注')}</button>`
     : ''
+  // 推荐店铺:只锚定推荐关系/二叉树位置/店铺来源 —— 不是全店佣金权;商品分润仍要求推荐人真实成交过同款
+  const shopReferralBtn = state.user?.permanent_code
+    ? `<button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" title="${t('店铺推荐只锚定推荐关系;只有你真实成交过的同款商品,后续成交才可能形成商品推荐关系')}" onclick="copyShopReferralLink('${seller.id}')">🔗 ${t('推荐店铺')}</button>`
+    : ''
   const productCards = products.length === 0
     ? `<div style="text-align:center;padding:30px;color:#9ca3af;font-size:13px">${t('该卖家暂无商品')}</div>`
     : products.map(p => {
@@ -8749,6 +9189,7 @@ async function renderShopPage(app, identifier) {
         </div>
         <div style="display:flex;flex-direction:column;gap:6px;align-items:flex-end">
           ${followBtn}
+          ${shopReferralBtn}
           ${isOwnShop ? `<a href="#shop-edit" style="font-size:11px;color:#6366f1">${t('编辑店铺')} →</a>` : ''}
         </div>
       </div>
@@ -8765,6 +9206,17 @@ async function renderShopPage(app, identifier) {
   `, 'discover')
 }
 
+// 复制店铺推荐链接 — /?ref=CODE#shop/<seller>(target URL 形态:ref 在 query,目标页在 hash,服务端可见 ref)。
+// 只用 permanent_code,绝不用 usr_xxx;诚实文案:不暗示"分享店铺即可获得全店佣金"。
+window.copyShopReferralLink = (sellerId) => {
+  const code = state.user?.permanent_code
+  if (!code) return alert(t('邀请码暂不可用，请刷新或联系支持'))
+  const link = `${location.origin}/?ref=${code}#shop/${sellerId}`
+  copyText(link).then(ok => toast$(ok
+    ? t('店铺推荐链接已复制 — 商品分润仍需你真实成交过同款并 opt-in')
+    : t('复制失败，请手动复制'), ok ? 'success' : 'error'))
+}
+
 window.toggleShopFollow = async (sellerId, btn) => {
   const following = btn.dataset.following === '1'
   btn.disabled = true
@@ -9688,7 +10140,7 @@ window.openBuildFeedback = () => {
   if (!state.user) { toast$(t('请先登录')); navigate('#login'); return }
   const page = (location.hash || '#/').split('?')[0]   // 非 PII:只取当前页面路由作上下文
   const html = `
-    <div class="js-modal" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
+    <div class="js-modal" data-page="${escHtml(page)}" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
       <div style="background:#fff;width:100%;max-width:560px;border-radius:16px 16px 0 0;padding:20px;max-height:82vh;overflow-y:auto" onclick="event.stopPropagation()">
         <h2 style="font-size:16px;font-weight:700;margin-bottom:4px">💬 ${t('反馈 / 建议')}</h2>
         <div style="font-size:11px;color:#9ca3af;margin-bottom:12px">${t('帮我们改进 WebAZ。会自动附上当前页面')} <code style="background:#f3f4f6;padding:1px 5px;border-radius:4px">${escHtml(page)}</code> ${t('作为上下文(不含个人信息)')}</div>
@@ -9707,7 +10159,7 @@ window.openBuildFeedback = () => {
         <div id="bfb-msg" style="margin:8px 0"></div>
         <div style="display:flex;gap:8px">
           <button class="btn btn-gray" style="flex:1" onclick="this.closest('.js-modal').remove()">${t('取消')}</button>
-          <button class="btn btn-primary" style="flex:1" onclick="submitBuildFeedback('${escHtml(page)}')">${t('提交')}</button>
+          <button class="btn btn-primary" style="flex:1" onclick="submitBuildFeedbackFromModal(this)">${t('提交')}</button>
         </div>
         <div style="text-align:center;margin-top:12px">
           <a onclick="this.closest('.js-modal').remove();navigate('#build-feedback')" style="font-size:12px;color:#4f46e5;cursor:pointer">${t('查看我的反馈进度 →')}</a>
@@ -9717,7 +10169,10 @@ window.openBuildFeedback = () => {
   const div = document.createElement('div'); div.innerHTML = html; document.body.appendChild(div.firstElementChild)
 }
 
-window.submitBuildFeedback = async (page) => {
+window.submitBuildFeedbackFromModal = async (btn) => {
+  // Codex #93:page 从 modal dataset 读,绝不把 location.hash 拼进内联 onclick 的 JS 字符串
+  //   (escHtml 是 HTML escape,放进 JS 字符串上下文会被 HTML attribute 解码 → hash 注入/XSS)。
+  const page = btn.closest('.js-modal')?.dataset.page || '#/'
   const type = document.getElementById('bfb-type').value
   const text = document.getElementById('bfb-text').value.trim()
   const msg = document.getElementById('bfb-msg')
@@ -9750,8 +10205,8 @@ async function renderMyBuildFeedback(app) {
           ${Number(f.credited_points) > 0 ? `<div style="font-size:11px;color:#16a34a;margin-top:4px">🏅 +${f.credited_points} ${t('共建信誉')}</div>` : ''}
           ${(f.credit_pending_anchor && !(Number(f.credited_points) > 0)) ? `
             <div style="font-size:11px;color:#854d0e;background:#fef3c7;border-radius:6px;padding:8px;margin-top:6px">
-              🔐 ${t('这条贡献已被采纳 —— 绑定 Passkey 即可领取建设信誉(奖励需锚定可问责真人)')}
-              <button class="btn btn-sm" style="margin-top:6px;font-size:11px;padding:4px 10px;background:#7c3aed;color:#fff;border-color:transparent" onclick="(async()=>{ if(await doRegisterPasskey('')){ alert(t('已绑定，建设信誉已补发')); navigate('#build-feedback') } })()">${t('绑定 Passkey 领取')}</button>
+              🔐 ${t('这条贡献已被采纳 —— 绑定 Passkey 即可记入建设信誉(建设信誉需锚定可问责真人)')}
+              <button class="btn btn-sm" style="margin-top:6px;font-size:11px;padding:4px 10px;background:#7c3aed;color:#fff;border-color:transparent" onclick="(async()=>{ if(await doRegisterPasskey('')){ alert(t('已绑定，建设信誉已记入')); navigate('#build-feedback') } })()">${t('绑定 Passkey 记入建设信誉')}</button>
             </div>` : ''}
         </div>`).join('')
   app.innerHTML = shell(`
@@ -9803,7 +10258,7 @@ async function renderMyContributions(app) {
       ${stat(t('提任务'), k.tasks_created)}
     </div>
     ${provRows ? `<div class="card" style="padding:10px;margin-bottom:12px"><div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('署名构成(自报)')}</div>${provRows}</div>` : ''}
-    ${!p.reward_anchored ? `<div class="card" style="padding:10px;margin-bottom:12px;border-left:3px solid #d97706"><div style="font-size:12px;color:#92400e">${t('未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。')}</div></div>` : ''}
+    ${!p.passkey_anchor_present ? `<div class="card" style="padding:10px;margin-bottom:12px;border-left:3px solid #d97706"><div style="font-size:12px;color:#92400e">${t('未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。')}</div></div>` : ''}
     <div style="font-size:13px;font-weight:600;margin:14px 0 6px">${t('限制与申诉')}</div>
     ${restrHtml}
     <div style="font-size:11px;color:#9ca3af;margin-top:14px">${t('看板仅自己可见,不做公开排行。')}</div>
@@ -10867,7 +11322,7 @@ window.sharePromoLink = async (productId, title) => {
     if (res.error === 'rewards_opt_in_required') {
       const msg = (window._lang === 'en' ? res.message_en : res.message_zh) || res.message_zh || res.error
       const missing = Array.isArray(res.missing_requirements) ? `\n\n${t('待补')}: ${res.missing_requirements.join(', ')}` : ''
-      return alert(`⚠ ${msg}${missing}\n\n${t('前往 #me 申请共建身份')}`)
+      return alert(`⚠ ${msg}${missing}\n\n${t('前往 #me 申请分享分润')}`)
     }
     return alert(`⚠ ${res.error}${res.completed_orders === 0 ? '\n' + t('完成该商品的购买后再分享') : ''}`)
   }
@@ -11507,7 +11962,10 @@ window.copyPlacementLink = async (link, side, el) => {
 window.sharePlatformLink = (side) => {
   if (!state.user?.id) return alert(t('请先登录'))
   if (side !== 'left' && side !== 'right') return
-  const link = `${location.origin}/?placement=${state.user.id}&side=${side}`
+  // 用 permanent_code 短链(/i/CODE-L|R),绝不用 usr_xxx;缺码时拒绝
+  const code = state.user?.permanent_code
+  if (!code) return alert(t('邀请码暂不可用，请刷新或联系支持'))
+  const link = `${location.origin}/i/${code}-${side === 'left' ? 'L' : 'R'}`
   copyPlacementLink(link, side, null)
 }
 
@@ -11590,6 +12048,7 @@ window.doRecoverConfirm = async () => {
         <button class="btn btn-outline btn-sm" onclick="copyApiKey('${res.api_key}')">${t('复制')}</button>
         <button class="btn btn-primary btn-sm" onclick="useKey('${res.api_key}')">${t('立即登录')}</button>
       </div>
+      <div style="font-size:11px;color:#b91c1c;margin-top:10px;line-height:1.5">⚠️ ${t('仅在私密设备打开;不要截图、转发或发送给任何人。')}</div>
     </div>`
 }
 
@@ -11655,6 +12114,7 @@ window.doLogin = async () => {
   await persistApiKey(key)
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-28 修：登录 sheet 是 .js-sheet（openSheet 建），之前只删 .js-modal → 登录成功后窗口不消失
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
   navigateIntended(roleHome(user.role))
@@ -11681,6 +12141,7 @@ window.doLoginByPassword = async () => {
   else state.user = { id: res.user_id, name: res.name, role: res.role }
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-28 修：同 doLogin — 关 .js-sheet 登录窗口
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
   navigateIntended(roleHome(res.role))
@@ -11707,8 +12168,9 @@ function readShareHint() {
   ;[urlRef,   extraSide] = stripSide(urlRef)
   if (!extraSide) [urlPlace, extraSide] = stripSide(urlPlace)
   if (!urlSide && extraSide) urlSide = extraSide
-  // ref / placement 接受三态：usr_xxx / VKSF9P (permanent_code 6-7 大写字母数字) / @handle 或 handle
-  const refPattern   = /^(usr_[A-Za-z0-9_]+|[A-Z0-9]{6,7}|@?[a-z0-9._]{3,20})$/
+  // ref / placement 仅接受邀请码(6-7 位永久码,可带 -L/-R)。usr_xxx / @handle / 裸 handle 不再作为邀请引用 —
+  // 收窄公开邀请面,消除歧义(权威由服务端 resolveInviteCodeRef 二次校验)。
+  const refPattern   = /^[A-Za-z0-9]{6,7}$/
   const validRef  = urlRef   && refPattern.test(urlRef)
   const validPlace= urlPlace && refPattern.test(urlPlace)
   if (validRef || validPlace) {
@@ -11722,12 +12184,24 @@ function readShareHint() {
     localStorage.setItem('webaz_share_hint', JSON.stringify(obj))
     return obj
   }
+  // 旧 localStorage hint 里的 sponsor_id / placement_inviter_id 若是 usr_xxx / @handle / 裸 handle(非邀请码),
+  // 注册时不再使用 —— 清掉非码引用,只保留合法邀请码。
+  const okCode = (v) => typeof v === 'string' && /^[A-Za-z0-9]{6,7}$/.test(v)
+  const sanitizeHint = (o) => {
+    if (!o || typeof o !== 'object') return null
+    if (o.sponsor_id && !okCode(o.sponsor_id)) o.sponsor_id = null
+    if (o.placement_inviter_id && !okCode(o.placement_inviter_id)) o.placement_inviter_id = null
+    return (o.sponsor_id || o.placement_inviter_id) ? o : null
+  }
   try {
     const raw = localStorage.getItem('webaz_share_hint')
     if (raw) {
       const obj = JSON.parse(raw)
-      if (obj.expiry > Date.now()) return obj
-      localStorage.removeItem('webaz_share_hint')
+      if (obj.expiry > Date.now()) {
+        const clean = sanitizeHint(obj)
+        if (clean) return clean
+      }
+      localStorage.removeItem('webaz_share_hint')   // expired or non-code → drop
     }
   } catch {}
   // 向后兼容：旧 'webaz_ref' 格式
@@ -11735,13 +12209,13 @@ function readShareHint() {
     const old = localStorage.getItem('webaz_ref')
     if (old) {
       const o = JSON.parse(old)
-      if (o.expiry > Date.now()) return {
+      if (o.expiry > Date.now() && okCode(o.ref)) return {
         sponsor_id: o.ref || null,
         placement_inviter_id: o.side ? o.ref : null,
         placement_side: o.side || null,
         expiry: o.expiry,
       }
-      localStorage.removeItem('webaz_ref')
+      localStorage.removeItem('webaz_ref')   // expired or non-code → drop
     }
   } catch {}
   return null
@@ -11787,6 +12261,24 @@ async function maybeClaimPendingProductShare() {
   writeShareCtx({ pending_share_id: null })
 }
 
+// 店铺推荐锚定:从 ?ref=CODE + #shop/<seller> 进来时 ShareCtx 暂存 pending_shop_referral,
+// 登录/注册后调一次 touch 落库(first-touch 30 天锁)。只锚定推荐关系,不是全店佣金权。
+async function maybeClaimPendingShopReferral() {
+  if (!state.user?.id) return
+  const ctx = readShareCtx()
+  const p = ctx?.pending_shop_referral
+  if (!p) return
+  // 只接受邀请码形态;旧 localStorage 里的 usr_xxx / @handle 残留 → 直接清理不发送
+  if (!p.ref_code || !/^[A-Za-z0-9]{6,7}$/.test(p.ref_code) || !p.seller_identifier) {
+    writeShareCtx({ pending_shop_referral: null }); return
+  }
+  try {
+    await POST('/shop-referral/touch', { seller_identifier: p.seller_identifier, ref_code: p.ref_code, ...(p.side === 'left' || p.side === 'right' ? { side: p.side } : {}) })
+    // 任何已送达的响应(成功 / self-skip / already_locked / typed 错误)都清;仅网络异常保留待重试
+    writeShareCtx({ pending_shop_referral: null })
+  } catch {}
+}
+
 // 还原意图 hash（注册/登录后调用，没意图就走 fallback）
 function navigateIntended(fallback) {
   const intended = sessionStorage.getItem('webaz_intended_hash')
@@ -11825,7 +12317,7 @@ function renderShareBanner(variant) {
       <div id="share-banner-hero" style="background:linear-gradient(135deg,#eef2ff,#fce7f3);border:1px solid #c7d2fe;border-radius:12px;padding:14px 16px;margin-bottom:14px">
         <div style="font-size:13px;color:#3730a3;font-weight:600;margin-bottom:4px">👋 ${t('你被')} <strong>${escHtml(name)}</strong> ${t('邀请来 WebAZ')}</div>
         ${tgtLine ? `<div style="font-size:12px;color:#374151;line-height:1.6;margin-top:6px">${tgtLine}</div>` : ''}
-        <div style="font-size:11px;color:#6366f1;margin-top:8px">${t('注册即拿邀请奖励，TA 也得分润 — 双方共赢')}</div>
+        <div style="font-size:11px;color:#6366f1;margin-top:8px">${t('通过邀请进入会记录归因;分享分润需登录后单独申请。')}</div>
       </div>`
   }
   // compact
@@ -11920,6 +12412,15 @@ async function initShareCtx() {
     patch.pending_share_id = urlShareId
   }
 
+  // 店铺推荐:?ref=CODE + #shop/<seller> → 暂存待登录后 touch(只锚定推荐关系,非全店佣金权)。
+  // hint.sponsor_id 已由 readShareHint 收窄为邀请码(-L/-R 已剥进 placement_side),usr_xxx/@handle 进不来。
+  if (hint?.sponsor_id && fromHash && fromHash.startsWith('#shop/') && !ctx?.pending_shop_referral) {
+    const sellerIdent = fromHash.slice('#shop/'.length).split('?')[0].trim()
+    if (sellerIdent && sellerIdent !== 'agent') {
+      patch.pending_shop_referral = { seller_identifier: sellerIdent, ref_code: hint.sponsor_id, side: hint.placement_side || null }
+    }
+  }
+
   if (Object.keys(patch).length > 0 || !ctx) {
     ctx = writeShareCtx(patch)
   }
@@ -11933,6 +12434,10 @@ async function initShareCtx() {
     // 不论成功失败都清掉 pending（避免重复尝试）
     writeShareCtx({ pending_share_id: null })
   }
+  // 已登录 + 有待锚定店铺推荐 → 立即 touch(网络失败保留待下次)
+  if (state.user?.id && ctx.pending_shop_referral) {
+    await maybeClaimPendingShopReferral()
+  }
 
   // Enrich：并发 fetch sponsor 公开卡 + target 预览（阻塞返回，确保 banner 渲染时数据齐）
   // 2026-05-31 修:每个 fetch 加 AbortSignal.timeout(5000),防 boot 阶段任一 fetch hang
@@ -12045,6 +12550,7 @@ window.doRegister = async () => {
   await persistApiKey(res.api_key)
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-24 修：关闭 auth sheet，再开成功 modal（避免堆叠）
   // 2026-05-28 修：auth sheet 是 .js-sheet（openSheet 建），需一并删除
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
@@ -12082,7 +12588,7 @@ function showRegisterSuccessModal(res) {
     <div style="background:#f9fafb;border-radius:8px;padding:6px 10px;margin-bottom:12px;font-size:12px;line-height:1.8">
       ☐ ${t('设置默认配送地址（智能下单需要）')}<br>
       ☐ ${t('设置登录密码（备用凭证，可选）')}<br>
-      ☐ ${t('完成首笔购买，解锁分享奖励')}<br>
+      ☐ ${t('完成首笔购买后,可申请分享分润。')}<br>
       ☐ ${t('🔐 绑定 Passkey — 强烈推荐，大额提现自动启用，防账号被盗')}
     </div>
 
@@ -30605,6 +31111,7 @@ async function renderAdminProtocol(app) {
       ${adminLinkCard('📜', t('审计日志'), t('全部 admin 写操作'), '#admin/audit')}
       ${adminLinkCard('🛑', t('错误监控'), t('24h 趋势 + burst 告警'), '#admin/errors')}
       ${adminLinkCard('📨', t('Welcome 提交'), t('#welcome 留下的邮箱订阅 + 建议'), '#admin/public-ideas')}
+      ${adminLinkCard('🛠️', t('任务建议收件箱'), t('陌生人 / agent 提交的共建任务建议;审阅 → 转正式任务'), '#admin/task-proposals')}
     </div>
   `, 'admin-protocol')
 }