@seasonkoh/webaz 0.1.24 → 0.1.26

package/dist/pwa/public/app.js

@@ -549,7 +549,7 @@ async function render(page, params) {
   try { await initShareCtx() } catch (e) { console.warn('[ShareCtx]', e) }
 
   // 未登录时只允许看登录页、找回密钥页、商品、welcome 预发布页、governance-onboarding 公开页
-  if (!state.apiKey && page !== 'login' && page !== 'shop' && page !== 'recover' && page !== 'welcome' && page !== 'governance-onboarding' && page !== '') {
+  if (!state.apiKey && page !== 'login' && page !== 'shop' && page !== 'recover' && page !== 'welcome' && page !== 'governance-onboarding' && page !== 'contribute' && page !== '') {
     // 保存目标 hash 以便登录/注册后跳回
     if (location.hash && !['#login', '#recover'].includes(location.hash)) {
       sessionStorage.setItem('webaz_intended_hash', location.hash)
@@ -562,7 +562,7 @@ async function render(page, params) {
     const { status, body } = await apiWithStatus('GET', '/me')
     if (status === 200 && body && !body.error) {
       state.user = body
-      connectSSE(); maybePromptPlacementBind(); refreshCartBadge(); maybeShowInstallBanner(); maybeClaimPendingProductShare(); setTimeout(refreshCompareBadge, 0); refreshChatsBadge(); refreshFeedbackBadge(); refreshSnfBadge(); setTimeout(ensureSnfPull, 800)
+      connectSSE(); maybePromptPlacementBind(); refreshCartBadge(); maybeShowInstallBanner(); maybeClaimPendingProductShare(); maybeClaimPendingShopReferral(); setTimeout(refreshCompareBadge, 0); refreshChatsBadge(); refreshFeedbackBadge(); refreshSnfBadge(); setTimeout(ensureSnfPull, 800)
       try { p2pStart() } catch (e) { console.warn('[P2P] start err', e) }
     } else if (status === 401 || status === 403) {
       // 真·鉴权失败：清掉两层存储
@@ -632,6 +632,12 @@ async function render(page, params) {
     case 'welcome':       return renderWelcome(app)
     // 2026-06-02 W3.5-B:#governance-onboarding 治理岗位申请页(公开页)
     case 'governance-onboarding': return renderGovernanceOnboarding(app)
+    // PR9E-1 公开共建页(无需登录):任务板 / 详情 + agent 提示 / 建议任务
+    case 'contribute':
+      if (params[0] === 'tasks' && params[1] === 'suggest') return renderContributeSuggest(app)
+      if (params[0] === 'tasks' && params[1])                return renderContributeTaskDetail(app, params[1])
+      if (params[0] === 'suggest')                           return renderContributeSuggest(app)
+      return renderContributeTasks(app)
     case 'seller':
       if (state.user?.role === 'logistics')  return renderLogistics(app)
       if (state.user?.role === 'arbitrator') return renderDisputeList(app)
@@ -687,6 +693,7 @@ async function render(page, params) {
       if (params[0] === 'users' && params[1])     return renderAdminUserDetail(app, params[1])
       if (params[0] === 'users')                  return renderAdminUsers(app)
       if (params[0] === 'audit')                  return renderAdminAudit(app)
+      if (params[0] === 'security')               return renderAdminSecurity(app)
       if (params[0] === 'products')               return renderAdminProducts(app)
       if (params[0] === 'orders')                 return renderAdminOrders(app)
       if (params[0] === 'disputes')               return renderAdminDisputes(app)
@@ -705,6 +712,7 @@ async function render(page, params) {
       if (params[0] === 'kpi')                     return renderAdminKPI(app)
       // 2026-05-24 #welcome 公开 ideas/邮箱订阅查看
       if (params[0] === 'public-ideas')            return renderAdminPublicIdeas(app)
+      if (params[0] === 'task-proposals')          return renderAdminTaskProposals(app)
       if (params[0] === 'params')                  return renderAdminParams(app)
       if (params[0] === 'timeline' && params[1])   return renderAdminUserTimeline(app, params[1])
       if (params[0] === 'timeline')                return renderAdminUserTimelinePicker(app)
@@ -1005,6 +1013,40 @@ function preLaunchBannerHTML() {
   </div>`
 }
 
+// 账户无任何恢复方式 → 首页顶部持续红色风险横幅。
+// 恢复方式 = 密码 OR 已验证邮箱。Passkey【不算】恢复方式:它是敏感操作的"真人在场"门,
+// 没有 Passkey 登录 / 找回路径,丢 key 换设备后 Passkey 救不回账号(与弹窗"增强不替代恢复邮箱"一致)。
+function recoveryBannerHTML() {
+  const u = state.user
+  if (!u || u.role === 'admin') return ''
+  const hasRecovery = u.has_password || u.email_verified
+  if (hasRecovery) return ''
+  return `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:8px;padding:10px 14px;font-size:12px;color:#991b1b;line-height:1.6;margin:8px 12px 12px">
+    🚨 <strong>${t('账户还没有恢复方式')}</strong> — ${t('闪退或换设备清缓存后可能永久无法登录。')}
+    <div style="margin-top:8px;display:flex;gap:8px;flex-wrap:wrap">
+      <button class="btn btn-sm" style="font-size:11px;padding:4px 10px;background:#dc2626;color:#fff;border:none;border-radius:6px;cursor:pointer" onclick="navigate('#me/settings')">${t('立即设置密码 / 绑定邮箱')} →</button>
+    </div>
+  </div>`
+}
+
+// 卖家后台安全提醒(P1):卖家涉及商品/履约/钱包,恢复方式不齐尤其危险。
+// 全局红横幅(零恢复)已在 shell 顶部覆盖;此处补"有邮箱但还缺密码"等部分缺口的黄色软提醒,避免与红横幅叠加。
+function sellerRecoveryReminderHTML() {
+  const u = state.user
+  if (!u) return ''
+  // 全局红横幅判定一致:无密码且无邮箱 → 红横幅已覆盖,这里不再叠加(Passkey 不算恢复方式)
+  const globalRedShowing = !u.has_password && !u.email_verified
+  if (globalRedShowing) return ''
+  const gaps = []
+  if (!u.has_password)  gaps.push(t('未设置登录密码'))
+  if (!u.email_verified) gaps.push(t('未绑定找回邮箱'))
+  if (gaps.length === 0) return ''
+  return `<div class="alert" style="background:#fffbeb;border:1px solid #fde68a;color:#92400e;font-size:12px;line-height:1.6;margin-bottom:12px">
+    🛡 <strong>${t('建议补全账户恢复方式')}</strong>:${gaps.join(' · ')}。${t('卖家涉及商品/履约/钱包，闪退或换设备清缓存后可能无法登录。')}
+    <button class="btn btn-sm" style="font-size:11px;padding:3px 10px;margin-left:6px;background:#d97706;color:#fff;border:none;border-radius:6px;cursor:pointer" onclick="navigate('#me/settings')">${t('去设置')} →</button>
+  </div>`
+}
+
 function shell(content, activeTab, opts) {
   // opts = { hideTabbar?: bool, bottomBar?: html }（第三参数可选，向后兼容）
   const _opts = opts || {}
@@ -1109,7 +1151,7 @@ function shell(content, activeTab, opts) {
           : `<button class="btn btn-primary btn-sm" onclick="navigate('#login')">${t('登录')}</button>`}
       </div>
     </nav>
-    <main class="main">${content}</main>
+    <main class="main">${recoveryBannerHTML()}${content}</main>
     ${state.user?.role === 'buyer' ? `
       <button id="compare-fab" onclick="openCompare()" title="${t('对比商品')}"
         style="position:fixed;bottom:136px;right:14px;background:#4f46e5;color:#fff;border:none;cursor:pointer;font-size:12px;font-weight:600;padding:8px 14px;border-radius:99px;box-shadow:0 4px 12px rgba(79,70,229,0.3);z-index:98;display:none;align-items:center;gap:4px">
@@ -1304,7 +1346,9 @@ async function renderMyAdvanced(app) {
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:10px">
       ${card('🏛', t('协议治理'), t('参数公开 · 变更可追溯'), '#governance')}
       ${card('⚖', t('判例库'), t('争议判决公开'), '#judgments')}
-      ${card('🎁', t('共建身份'), t('申请制 · 含锁仓金'), '#rewards-me')}
+      ${card('🛠', t('我的共建'), t('贡献 / GitHub 认领 / 建设信誉 — 无购买门槛'), '#my-contributions')}
+      ${card('📋', t('公开共建任务'), t('浏览可认领任务、提交建议、参与共建'), '#contribute/tasks')}
+      ${card('🎁', t('分享分润管理'), t('分享佣金 / PV / escrow · 经济关系登记'), '#rewards-me')}
     </div>
 
     <div style="font-size:12px;color:#6b7280;font-weight:600;margin:14px 0 6px">📧 ${t('联系我们')}</div>
@@ -3096,6 +3140,178 @@ window.setAdminIdeaStatus = async (id, status) => {
   setTimeout(() => renderAdminPublicIdeas(document.getElementById('app')), 300)
 }
 
+// PR9I — Task Proposal Inbox admin review (maintainer-only). Calls the #331 admin endpoints. A proposal is
+// a SUGGESTION, never a contribution fact / reward / participation; "Convert" only records the review
+// decision + the proposer→reviewer→ref evidence chain — it does NOT auto-create a build_task.
+async function renderAdminTaskProposals(app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  app.innerHTML = shell(loading$(), 'admin')
+  const sf = state._proposalStatus || ''   // '' | new | needs_info | rejected | converted
+  const [r, dr] = await Promise.all([
+    GET('/admin/task-proposals' + (sf ? '?status=' + encodeURIComponent(sf) : '')),
+    GET('/admin/build-task-drafts'),
+  ])
+  if (r.error) { app.innerHTML = shell(alert$('error', r.error), 'admin'); return }
+  const proposals = r.proposals || []
+  const drafts = (dr && dr.drafts) || []
+  const draftedIds = new Set(drafts.map((d) => d.source_proposal_id).filter(Boolean))   // proposals that already have an unpublished draft
+  const notice = en ? (r.value_boundary?.notice_en || '') : (r.value_boundary?.notice_zh || '')
+  const STATUS = {
+    new:        { bg: '#fef3c7', fg: '#92400e', label: T('待审', 'New') },
+    needs_info: { bg: '#dbeafe', fg: '#1e40af', label: T('待补充', 'Needs info') },
+    rejected:   { bg: '#fee2e2', fg: '#991b1b', label: T('已拒绝', 'Rejected') },
+    converted:  { bg: '#dcfce7', fg: '#166534', label: T('已转任务', 'Converted') },
+  }
+  const badge = (s) => { const c = STATUS[s] || { bg: '#f3f4f6', fg: '#6b7280', label: s }; return `<span style="font-size:10px;background:${c.bg};color:${c.fg};padding:2px 8px;border-radius:99px;font-weight:600">${c.label}</span>` }
+  const chip = (val, label) => `<button onclick="setProposalStatusFilter('${val}')" style="padding:5px 12px;border-radius:99px;font-size:11px;cursor:pointer;border:1px solid ${sf === val ? '#6366f1' : '#e5e7eb'};background:${sf === val ? '#eef2ff' : '#fff'};color:${sf === val ? '#4338ca' : '#6b7280'};font-weight:600">${label}</button>`
+  const field = (label, val) => val ? `<div style="font-size:12px;color:#374151;margin-top:4px"><b>${label}:</b> ${escHtml(String(val))}</div>` : ''
+  // inline "create formal task draft" form (prefilled from the proposal; AI can also prefill it). All list
+  // fields are newline-separated. These are the agent-handoff fields the formal task model requires.
+  const ta = (id, ph, val, h) => `<textarea id="${id}" placeholder="${ph}" style="width:100%;box-sizing:border-box;min-height:${h || 38}px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px;margin-top:6px">${val ? escHtml(String(val)) : ''}</textarea>`
+  const draftForm = (p) => `<div id="df-${escHtml(p.id)}" style="display:none;margin-top:10px;border:1px dashed #c7d2fe;background:#f5f7ff;border-radius:8px;padding:10px">
+      <div style="font-size:11px;color:#4338ca;font-weight:600;margin-bottom:2px">${T('建正式任务草稿(未发布)', 'Create formal task draft (unpublished)')}</div>
+      <div style="font-size:10px;color:#6b7280;margin-bottom:4px">${T('草稿默认隐藏不可认领;填齐 agent 交接字段后由人工显式「发布」才进任务板。', 'A draft is hidden + unclaimable; only an explicit human “Publish” (after the agent-handoff fields are filled) puts it on the board.')}</div>
+      ${ta('df-title-' + escHtml(p.id), T('标题', 'Title'), p.title)}
+      ${ta('df-area-' + escHtml(p.id), T('领域(可选)', 'Area (optional)'), p.suggested_area, 30)}
+      ${ta('df-source-' + escHtml(p.id), T('来源引用(文件 / RFC / issue,可选)', 'Source ref (file / RFC / issue, optional)'), p.source_ref, 30)}
+      ${ta('df-desc-' + escHtml(p.id), T('说明 / 原因', 'Summary / reason'), p.summary, 48)}
+      ${ta('df-allowed-' + escHtml(p.id), T('允许路径(每行一条)', 'Allowed paths (one per line)'), '')}
+      ${ta('df-fpaths-' + escHtml(p.id), T('禁止路径(每行一条)', 'Forbidden paths (one per line)'), '')}
+      ${ta('df-forbidden-' + escHtml(p.id), T('禁止动作(每行一条)', 'Forbidden actions (one per line)'), '')}
+      ${ta('df-accept-' + escHtml(p.id), T('验收标准(每行一条)', 'Acceptance criteria (one per line)'), p.expected_outcome)}
+      ${ta('df-verify-' + escHtml(p.id), T('验证命令(每行一条)', 'Verification commands (one per line)'), '')}
+      ${ta('df-deliver-' + escHtml(p.id), T('交付物(每行一条)', 'Deliverables (one per line)'), '')}
+      ${ta('df-dod-' + escHtml(p.id), T('完成定义', 'Definition of done'), '')}
+      ${ta('df-expect-' + escHtml(p.id), T('预期结果(留空则用说明)', 'Expected results (blank = use summary)'), '')}
+      <button onclick="createTaskDraft('${escHtml(p.id)}')" style="margin-top:8px;padding:7px 14px;border:none;background:#4338ca;color:#fff;border-radius:6px;font-size:12px;cursor:pointer;font-weight:600">${T('保存草稿', 'Save draft')}</button>
+    </div>`
+  const row = (p) => {
+    const terminal = p.status === 'rejected' || p.status === 'converted'
+    return `<div class="card" style="padding:14px;margin-bottom:10px">
+      <div style="display:flex;justify-content:space-between;gap:8px;align-items:flex-start">
+        <div style="font-weight:600;font-size:14px">${escHtml(p.title)}</div>${badge(p.status)}
+      </div>
+      <div style="font-size:13px;color:#52525B;line-height:1.5;margin-top:6px;white-space:pre-wrap">${escHtml(p.summary)}</div>
+      ${field(T('建议领域', 'Area'), p.suggested_area)}
+      ${field(T('预期结果', 'Outcome'), p.expected_outcome)}
+      ${field(T('参考', 'Source ref'), p.source_ref)}
+      ${field('GitHub', p.proposer_github_login)}
+      ${field(T('提交时间', 'Created'), p.created_at)}
+      ${field(T('审阅备注', 'Review note'), p.review_note)}
+      ${field(T('已关联', 'Converted ref'), p.converted_ref)}
+      ${terminal
+        ? `<div style="font-size:11px;color:#9ca3af;margin-top:8px">${T('终态,不可再审', 'Terminal — locked')}${p.reviewer_id ? ' · ' + escHtml(String(p.reviewer_id)) : ''}</div>`
+        : `<div style="margin-top:10px;border-top:1px solid #f1f1f4;padding-top:10px">
+            <textarea id="pr-note-${escHtml(p.id)}" placeholder="${T('审阅备注(可选)', 'Review note (optional)')}" style="width:100%;box-sizing:border-box;min-height:44px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px"></textarea>
+            <input id="pr-ref-${escHtml(p.id)}" placeholder="${T('转任务时:关联正式 task / PR / release(可选)', 'On convert: link the real task / PR / release (optional)')}" style="width:100%;box-sizing:border-box;margin-top:6px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px">
+            <div style="display:flex;gap:6px;margin-top:8px;flex-wrap:wrap">
+              <button onclick="aiAssistProposal('${escHtml(p.id)}')" style="padding:6px 12px;border:1px solid #8b5cf6;background:#fff;color:#6d28d9;border-radius:6px;font-size:12px;cursor:pointer">🤖 ${T('AI 建议', 'AI suggest')}</button>
+              ${draftedIds.has(p.id)
+                ? `<span style="padding:6px 10px;font-size:11px;color:#4338ca;background:#eef2ff;border-radius:6px">📝 ${T('已建草稿(在上方草稿区发布;发布即接受)', 'Draft created — publish it in the drafts panel above (publish = accept)')}</span>`
+                : `<button onclick="toggleDraftForm('${escHtml(p.id)}')" style="padding:6px 12px;border:1px solid #6366f1;background:#fff;color:#4338ca;border-radius:6px;font-size:12px;cursor:pointer">${T('建任务草稿', 'Create task draft')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','needs_info')" style="padding:6px 12px;border:1px solid #3b82f6;background:#fff;color:#1e40af;border-radius:6px;font-size:12px;cursor:pointer">${T('需补充', 'Needs info')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','rejected')" style="padding:6px 12px;border:1px solid #ef4444;background:#fff;color:#991b1b;border-radius:6px;font-size:12px;cursor:pointer">${T('拒绝', 'Reject')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','converted')" style="padding:6px 12px;border:1px solid #16a34a;background:#fff;color:#166534;border-radius:6px;font-size:12px;cursor:pointer">${T('仅记审阅决定', 'Mark reviewed')}</button>`}
+            </div>
+            <div id="ai-${escHtml(p.id)}"></div>
+            ${draftedIds.has(p.id) ? '' : draftForm(p)}
+          </div>`}
+    </div>`
+  }
+  const draftRow = (d) => `<div class="card" style="padding:12px;margin-bottom:8px;border-left:3px solid #6366f1">
+      <div style="display:flex;justify-content:space-between;gap:8px;align-items:flex-start">
+        <div style="font-weight:600;font-size:13px">${escHtml(d.title)}</div>
+        <span style="font-size:10px;background:#eef2ff;color:#4338ca;padding:2px 8px;border-radius:99px;font-weight:600">${T('未发布草稿', 'Unpublished draft')}</span>
+      </div>
+      ${field(T('风险', 'Risk'), d.risk_level)}${field(T('可自助认领', 'Auto-claimable'), d.auto_claimable === 1 || d.auto_claimable === true ? T('是', 'yes') : T('否(需真人)', 'no (human)'))}
+      ${field(T('来源建议', 'Source proposal'), d.source_proposal_id)}${field(T('创建人', 'Created by'), d.created_by)}
+      <div style="font-size:10px;color:#9ca3af;margin-top:6px">${T('发布前会校验交接字段;发布后进入正常任务板,可被参与者 agent 发现 / 认领 / 提交 PR。', 'Publish validates the handoff fields; once published it enters the normal task board — discoverable / claimable / PR-submittable by participant agents.')}</div>
+      <button onclick="publishDraft('${escHtml(d.id)}')" style="margin-top:8px;padding:6px 14px;border:none;background:#16a34a;color:#fff;border-radius:6px;font-size:12px;cursor:pointer;font-weight:600">${T('发布到任务板', 'Publish to board')}</button>
+    </div>`
+  app.innerHTML = shell(`
+    <div style="padding:14px;max-width:920px;margin:0 auto">
+      <h1 class="page-title">🛠️ ${T('任务建议收件箱', 'Task Proposal Inbox')}</h1>
+      <div style="background:#f4f4f5;border:1px solid #e4e4e7;border-radius:8px;padding:10px;font-size:11px;color:#52525B;line-height:1.6;margin-bottom:12px">
+        ${T('建议是陌生人 / agent 提交的想法,不是贡献事实 / 奖励 / 正式参与。「转为正式任务」只记录评审决定与证据链(proposer → reviewer → 关联引用),不会自动创建 build_task。', 'A proposal is a stranger / agent suggestion — NOT a contribution fact / reward / participation. “Convert” only records the review decision + the proposer → reviewer → ref evidence chain; it does NOT auto-create a build_task.')}
+        ${notice ? `<br>${escHtml(notice)}` : ''}
+      </div>
+      ${drafts.length ? `<div style="margin-bottom:14px">
+        <div style="font-size:12px;font-weight:700;color:#4338ca;margin-bottom:6px">📝 ${T('未发布任务草稿', 'Unpublished task drafts')} (${drafts.length})</div>
+        ${drafts.map(draftRow).join('')}
+      </div>` : ''}
+      <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:12px">
+        ${chip('', T('全部', 'All'))}${chip('new', STATUS.new.label)}${chip('needs_info', STATUS.needs_info.label)}${chip('rejected', STATUS.rejected.label)}${chip('converted', STATUS.converted.label)}
+      </div>
+      ${proposals.length === 0 ? `<div style="color:#a1a1aa;text-align:center;padding:30px;font-size:14px">${T('收件箱为空', 'Inbox is empty')}</div>` : proposals.map(row).join('')}
+    </div>
+  `, 'admin')
+}
+window.setProposalStatusFilter = (s) => { state._proposalStatus = s; renderAdminTaskProposals(document.getElementById('app')) }
+window.reviewProposal = async (id, status) => {
+  const note = (document.getElementById('pr-note-' + id)?.value || '').trim()
+  const ref = (document.getElementById('pr-ref-' + id)?.value || '').trim()
+  const body = { status }
+  if (note) body.note = note
+  if (status === 'converted' && ref) body.converted_ref = ref
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/review', body)
+  if (r.error) { toast$(r.error || r.error_code || (window._lang === 'en' ? 'failed' : '操作失败')); return }
+  toast$(window._lang === 'en' ? 'Updated' : '已更新')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
+window.toggleDraftForm = (id) => { const el = document.getElementById('df-' + id); if (el) el.style.display = el.style.display === 'none' ? 'block' : 'none' }
+// AI-assist is ASSISTANT-ONLY: it renders a suggestion + prefills the draft form; it never publishes/decides.
+window.aiAssistProposal = async (id) => {
+  const en = window._lang === 'en'
+  const box = document.getElementById('ai-' + id); if (box) box.innerHTML = `<div style="font-size:11px;color:#8b5cf6;margin-top:8px">🤖 ${en ? 'thinking…' : '分析中…'}</div>`
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/ai-assist', {})
+  if (r.error) { if (box) box.innerHTML = ''; toast$(r.error || 'failed'); return }
+  const s = r.ai_suggestion || {}
+  window._aiSuggest = window._aiSuggest || {}; window._aiSuggest[id] = s.suggested || {}
+  const list = (arr) => (arr || []).map(x => '• ' + escHtml(String(x))).join('<br>')
+  if (box) box.innerHTML = `<div style="margin-top:8px;border:1px solid #ddd6fe;background:#faf5ff;border-radius:8px;padding:10px">
+    <div style="font-size:11px;font-weight:700;color:#6d28d9">🤖 ${en ? 'AI suggestion' : 'AI 建议'} <span style="font-weight:400;color:#9ca3af">(${escHtml(String(r.model || ''))})</span></div>
+    <div style="font-size:10px;color:#b45309;margin:2px 0 6px">${escHtml(String(r.ai_notice || ''))}</div>
+    <div style="font-size:12px;color:#374151;line-height:1.6">
+      <b>${en ? 'Category' : '分类'}:</b> ${escHtml(String(s.category || ''))} · <b>${en ? 'Risk' : '风险'}:</b> ${escHtml(String(s.risk || ''))} · <b>${en ? 'Effort' : '工作量'}:</b> ${escHtml(String(s.effort || ''))} · <b>${en ? 'Duplicate' : '疑似重复'}:</b> ${escHtml(String(s.duplicate_likelihood || ''))}
+      ${(s.missing_info && s.missing_info.length) ? `<div style="margin-top:4px"><b>${en ? 'Missing info' : '缺失信息'}:</b><br>${list(s.missing_info)}</div>` : ''}
+    </div>
+    <button onclick="applyAiToDraft('${id}')" style="margin-top:8px;padding:5px 12px;border:1px solid #8b5cf6;background:#fff;color:#6d28d9;border-radius:6px;font-size:11px;cursor:pointer">${en ? 'Fill draft form with this' : '用此填充草稿表单'}</button>
+  </div>`
+}
+window.applyAiToDraft = (id) => {
+  const suggested = (window._aiSuggest && window._aiSuggest[id]) || {}
+  document.getElementById('df-' + id).style.display = 'block'
+  const set = (sfx, v) => { const el = document.getElementById('df-' + sfx + '-' + id); if (el && v != null && v !== '') el.value = v }
+  set('title', suggested.title); set('area', suggested.area); set('desc', suggested.description)
+  set('accept', (suggested.acceptance_criteria || []).join('\n')); set('verify', (suggested.verification_commands || []).join('\n'))
+  toast$(window._lang === 'en' ? 'Draft prefilled (review before saving)' : '已填充草稿(保存前请人工核对)')
+}
+window.createTaskDraft = async (id) => {
+  const en = window._lang === 'en'
+  const v = (sfx) => (document.getElementById('df-' + sfx + '-' + id)?.value || '').trim()
+  const lines = (sfx) => v(sfx).split('\n').map(x => x.trim()).filter(Boolean)
+  const body = {
+    title: v('title'), area: v('area') || null, source_ref: v('source') || null, description: v('desc'),
+    allowed_paths: lines('allowed'), forbidden_paths: lines('fpaths'), forbidden_actions: lines('forbidden'),
+    acceptance_criteria: lines('accept'), verification_commands: lines('verify'), deliverables: lines('deliver'),
+    definition_of_done: v('dod'), expected_results: v('expect'),
+  }
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/create-task-draft', body)
+  if (r.error) { toast$((r.missing && r.missing.length) ? ((en ? 'Missing: ' : '缺少:') + r.missing.join(', ')) : (r.error || 'failed')); return }
+  toast$(en ? 'Draft saved (unpublished)' : '草稿已保存(未发布)')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
+window.publishDraft = async (taskId) => {
+  const en = window._lang === 'en'
+  const r = await POST('/admin/build-task-drafts/' + encodeURIComponent(taskId) + '/publish', {})
+  if (r.error) { toast$((r.missing && r.missing.length) ? ((en ? 'Fill before publish: ' : '发布前请填齐:') + r.missing.join(', ')) : (r.error || 'failed')); return }
+  toast$(en ? 'Published to task board' : '已发布到任务板')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
+
 async function renderAdminKPI(app) {
   if (!state.user) { renderLogin(); return }
   if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
@@ -3299,6 +3515,11 @@ async function renderAdminDashboard(app) {
     <div style="font-size:13px;color:#6b7280;margin:16px 0 8px">⚛ ${t('Tokenomics')}</div>
     <div style="display:grid;grid-template-columns:repeat(2,1fr);gap:10px;margin-bottom:16px">
       ${quickAction('#admin/tokenomics', '⚛', t('积分基金 / Tier 配置 / 高额榜'))}
+    </div>
+    <div style="font-size:13px;color:#6b7280;margin:16px 0 8px">🔐 ${t('安全与审计')}</div>
+    <div style="display:grid;grid-template-columns:repeat(2,1fr);gap:10px;margin-bottom:16px">
+      ${quickAction('#admin/security', '🪪', t('我的管理身份与权限'))}
+      ${quickAction('#admin/audit',    '📜', t('审计日志'))}
     </div>`
 
   // A5 重设：渐变标题 + 分区标题 + 颜色块分组
@@ -3353,6 +3574,90 @@ function renderTagBadges(tags, max = 3) {
   }).join('') + (more > 0 ? `<span style="font-size:11px;color:#6b7280">+${more}</span>` : '')
 }
 
+// 管理身份与权限自查面板(只读)。回答"我正在以什么身份/级别/权限操作?",
+// Passkey 责任绑定状态 + GitHub 关联 + 普通 admin vs root/破玻璃 + 经济操作审计须知。
+// 纯前端:数据来自 /me(state.user)+ 只读 /contribution-identity/github/me;无新后端、无经济动作。
+async function renderAdminSecurity(app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const u = state.user
+  const gid = await GET('/contribution-identity/github/me').catch(() => null)
+  const bindings = (gid && !gid.error && Array.isArray(gid.bindings)) ? gid.bindings : []
+
+  const adminType = u.admin_type || 'root'
+  const isRoot = adminType === 'root'
+  const scope = u.admin_scope || 'global'
+  let perms = []
+  try { perms = isRoot ? ['all'] : JSON.parse(u.admin_permissions || '[]') } catch { perms = [] }
+  const hasPasskey = !!u.has_passkey
+
+  const PERM_LABEL = () => ({ all: t('全部'), users: t('用户'), content: t('内容'), arbitration: t('仲裁'), protocol: t('协议 / 经济'), verifier_mgmt: t('审核员管理'), support: t('支持') })
+  const permChips = (perms.length === 0)
+    ? `<span style="font-size:12px;color:#dc2626">${t('无任何权限（请联系 root 配置）')}</span>`
+    : perms.map(p => `<span style="display:inline-block;background:#eef2ff;color:#3730a3;font-size:11px;padding:2px 8px;border-radius:99px;margin:0 4px 4px 0">${PERM_LABEL()[p] || p}</span>`).join('')
+
+  const row = (label, value) => `<div style="display:flex;justify-content:space-between;gap:10px;padding:7px 0;border-bottom:1px solid #f3f4f6"><span style="font-size:12px;color:#6b7280">${label}</span><span style="font-size:12px;color:#111827;text-align:right;word-break:break-all">${value}</span></div>`
+
+  const passkeyRow = hasPasskey
+    ? `<span style="color:#16a34a;font-weight:600">✓ ${t('已绑定')}</span>`
+    : `<span style="color:#dc2626;font-weight:600">⚠ ${t('未绑定')}</span> <a href="#me/settings" style="color:#6366f1;font-size:11px">${t('去绑定')} →</a>`
+  const githubRow = bindings.length > 0
+    ? bindings.map(b => `<code style="font-size:11px">github:${escHtml(String(b.github_actor_id))}</code>`).join(' ')
+    : `<span style="color:#9ca3af">${t('未关联')}</span> <a href="#my-contributions" style="color:#6366f1;font-size:11px">${t('去认领')} →</a>`
+
+  app.innerHTML = shell(`
+    ${adminPageHeader('🪪', t('我的管理身份与权限'), t('你正在以此身份操作 · 只读自查'))}
+
+    ${isRoot ? `
+    <div class="card" style="padding:12px;background:#fffbeb;border:1px solid #fcd34d;margin-bottom:10px">
+      <div style="font-size:13px;font-weight:700;color:#92400e">🚧 ${t('创始人 / 引导管理员（Founder Admin · Bootstrap Operator）')}</div>
+      <div style="font-size:12px;color:#78350f;margin-top:4px;line-height:1.6">${t('这是 pre-launch 引导期的【临时治理模式】:更广的只读可见性 + 有限的应急写权限 —— 不是日常全能账号。')}</div>
+      <div style="font-size:11px;color:#78350f;margin-top:6px;line-height:1.6">${t('设计目标:launch 后把创始人权力拆成更窄的角色 —— maintainer / support operator / arbitrator / finance reviewer / security admin(用 regional admin + 权限位逐步收窄)。')}</div>
+    </div>` : ''}
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">👤 ${t('账户')}</div>
+      ${row(t('名称'), escHtml(u.name || ''))}
+      ${row(t('用户名'), '@' + escHtml(u.handle || ''))}
+      ${row(t('账户 ID'), `<code style="font-size:11px">${escHtml(u.id || '')}</code>`)}
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🛡 ${t('角色与级别')}</div>
+      ${row(t('角色'), t('管理员'))}
+      ${row(t('级别'), isRoot
+        ? `<span style="color:#b91c1c;font-weight:700">ROOT</span> · <span style="font-size:11px;color:#6b7280">${t('破玻璃 / 系统操作员')}</span>`
+        : `<span style="color:#0369a1;font-weight:700">REGIONAL</span>`)}
+      ${row(t('范围'), `<code style="font-size:11px">${escHtml(scope)}</code>`)}
+      <div style="font-size:12px;color:#6b7280;margin-top:8px;margin-bottom:4px">${t('有效权限')}</div>
+      <div>${permChips}</div>
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🔐 ${t('问责绑定')}</div>
+      ${row('Passkey', passkeyRow)}
+      ${row(t('GitHub 关联'), githubRow)}
+      <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:8px 10px;margin-top:8px;line-height:1.6">
+        ${t('管理身份应绑定 Passkey（真人问责）。个人 GitHub 账号用于提交 PR;仓库所有权 / 设置由组织/管理身份治理 —— 独立审阅不应由同一人用另一账号假冒。')}
+      </div>
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">⚠️ ${t('操作安全须知')}</div>
+      <div style="font-size:12px;color:#374151;line-height:1.8">
+        • ${t('普通 admin 与 root / 破玻璃 不同:经济 / 协议级操作需 protocol 权限;按治理铁律须记入审计日志 —— 部分手动结算 / 评估入口的审计仍在补齐中。')}<br>
+        • ${t('危险操作（封禁 / 角色 / 资金 / 协议参数）须带原因,且不可绕过争议 / 仲裁规则。')}<br>
+        • ${t('不要在公共设备暴露 API Key;管理操作均可追溯到你的账户。')}
+      </div>
+      <div style="display:flex;gap:8px;margin-top:10px">
+        <a href="#admin/audit" style="text-decoration:none"><button class="btn btn-outline btn-sm" style="font-size:12px">📜 ${t('查看审计日志')}</button></a>
+        ${isRoot ? `<a href="#admin/manage-admins" style="text-decoration:none"><button class="btn btn-outline btn-sm" style="font-size:12px">👥 ${t('管理管理员')}</button></a>` : ''}
+      </div>
+    </div>
+  `, 'admin')
+}
+
 async function renderAdminUsers(app, opts = {}) {
   if (!state.user) { renderLogin(); return }
   if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin-users'); return }
@@ -4315,10 +4620,10 @@ async function renderApplyRewards(app) {
 
   if (status.opted_in) {
     app.innerHTML = shell(`
-      <h1 class="page-title">${t('已是共建身份')}</h1>
+      <h1 class="page-title">${t('已开通分享分润')}</h1>
       <div class="card" style="background:#ecfdf5;border-color:#86efac;padding:12px;font-size:13px;color:#064e3b">
         ${t('你已 opted-in。如需查看状态或退出,前往 ')}
-        <a href="#rewards-me" style="color:#16a34a;font-weight:600">${t('共建身份管理')}</a>
+        <a href="#rewards-me" style="color:#16a34a;font-weight:600">${t('分享分润管理')}</a>
       </div>
     `, returnNav)
     return
@@ -4347,19 +4652,28 @@ async function renderApplyRewards(app) {
     </div>`
 
   app.innerHTML = shell(`
-    <h1 class="page-title">🎁 ${t('申请共建身份')}</h1>
+    <h1 class="page-title">🎁 ${t('申请分享分润')}</h1>
 
     <div class="card" style="margin-bottom:16px;background:#fef2f2;border-color:#fca5a5">
-      <div style="font-weight:600;color:#991b1b;margin-bottom:6px;font-size:14px">⚠️ ${t('本流程与购物无关')}</div>
+      <div style="font-weight:600;color:#991b1b;margin-bottom:6px;font-size:14px">⚠️ ${t('本流程不是购物流程;下方"已完成订单"门槛只是分享分润的反女巫要求')}</div>
       <div style="font-size:12px;color:#7f1d1d;line-height:1.6">
-        ${t('你可以随时退出,不影响任何已下单或未来订单。本流程涉及经济关系登记(三级佣金 + 积分配对),请仔细阅读全部条款。')}<br>
-        <span style="opacity:0.85">This flow is not part of shopping. You can leave anytime without affecting any orders. This is an economic-relationship registration — please read all terms.</span>
+        ${t('你可以随时退出,不影响任何已下单或未来订单。本流程是分享分润的经济关系登记(佣金 / PV / escrow 结算规则;层级按地区配置),请仔细阅读全部条款。')}<br>
+        <span style="opacity:0.85">This is not a shopping flow; the completed-order threshold below is only the anti-sybil requirement for share-commission. You can leave anytime without affecting any orders. This registers the share-commission economic relationship (commission / PV / escrow settlement rules; levels per region config) — please read all terms.</span>
+      </div>
+      <div style="font-size:11px;color:#7f1d1d;line-height:1.6;margin-top:8px;padding-top:8px;border-top:1px solid #fca5a5;opacity:0.9">
+        ${t('注:本「分享分润 / rewards opt-in」仅为 commission / PV / escrow 经济关系登记,不是贡献资格,与贡献任务(#contribute/tasks)/ 我的共建 无关。RFC-002 同意书可能沿用更早措辞,以本 UI 含义为准。')}<br>
+        <span style="opacity:0.85">Note: this “share-commission / rewards opt-in” is only a commission / PV / escrow economic-relationship registration — NOT contribution eligibility, and unrelated to the contribution funnel (#contribute/tasks) / My contributions. RFC-002’s consent text may retain older wording; this note governs the UI meaning.</span>
+      </div>
+      <div style="font-size:11px;color:#7f1d1d;line-height:1.6;margin-top:8px;padding-top:8px;border-top:1px solid #fca5a5;opacity:0.9">
+        ${t('现实性说明:佣金层级按地区合规配置生效;当前预发布期全局上限为 1 级(仅 L1)。"三级(7:2:1)"是协议最大设计,不构成对未来层级的承诺。')}<br>
+        <span style="opacity:0.85">Reality note: commission levels follow per-region compliance config; during pre-launch a global cap of 1 level (L1 only) applies. “Three tiers (7:2:1)” is the protocol’s maximum design — not a promise of future levels.</span>
       </div>
     </div>
 
     <div class="card" style="margin-bottom:16px">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:10px">${t('门槛(全部通过才能申请)')}:</div>
+      <div style="font-size:13px;color:#6b7280;margin-bottom:10px">${t('分享分润开通门槛(只适用于分润,不适用于贡献)')}:</div>
       ${checklist}
+      <div style="font-size:11px;color:#6b7280;margin-top:8px;padding-top:8px;border-top:1px solid #f3f4f6">${t('此购买门槛只适用于分享分润(经济关系登记),不适用于贡献任务或 GitHub 贡献认领 — 贡献无需购买。')}</div>
     </div>
 
     <div class="card" style="margin-bottom:16px;background:#fafafa">
@@ -4463,7 +4777,7 @@ window.doSubmitRewardsApply = async (consentVersion, pageLoadedAt) => {
   const drainNote = drained.count > 0
     ? '<br>' + t('已从 escrow 拨回:') + ' ' + drained.total + ' WAZ (' + drained.count + ' ' + t('笔') + ')'
     : ''
-  msg.innerHTML = alert$('success', t('✅ 共建身份激活成功') + drainNote)
+  msg.innerHTML = alert$('success', t('✅ 分享分润开通成功') + drainNote)
   setTimeout(() => { location.hash = '#rewards-me' }, 2000)
 }
 
@@ -4474,7 +4788,7 @@ async function renderRewardsMe(app) {
   if (status.error) { app.innerHTML = shell(alert$('error', status.error), 'me'); return }
 
   const stateLabel = {
-    opted_in:        { icon: '✅', color: '#16a34a', label: t('共建身份激活中') },
+    opted_in:        { icon: '✅', color: '#16a34a', label: t('分享分润已开通') },
     never_activated: { icon: '⚪', color: '#6b7280', label: t('未激活') },
     auto_downgraded: { icon: '⚠️', color: '#f59e0b', label: t('已自动降级(consent 未确认)') },
     deactivated:     { icon: '🔒', color: '#9ca3af', label: t('已退出') },
@@ -4484,7 +4798,7 @@ async function renderRewardsMe(app) {
   const expired = status.expired_to_charity || { count: 0, total_amount: 0 }
 
   app.innerHTML = shell(`
-    <h1 class="page-title">🎁 ${t('共建身份管理')}</h1>
+    <h1 class="page-title">🎁 ${t('分享分润管理')}</h1>
 
     <div class="card" style="margin-bottom:16px;border-left:4px solid ${stateLabel.color};padding:14px">
       <div style="display:flex;align-items:center;gap:10px;margin-bottom:6px">
@@ -4498,27 +4812,27 @@ async function renderRewardsMe(app) {
       <div class="card" style="margin-bottom:16px;background:#fef3c7;border-color:#fde68a;padding:12px">
         <div style="font-weight:600;color:#92400e;font-size:13px;margin-bottom:4px">💰 ${t('待领 escrow')}</div>
         <div style="font-size:13px;color:#7c2d12">${escrow.count} ${t('笔')} · ${escrow.total_amount} WAZ</div>
-        <div style="font-size:11px;color:#a16207;margin-top:6px">${t('opt-in 后这笔钱会拨回钱包。30 天未领过期入公益。')}</div>
+        <div style="font-size:11px;color:#a16207;margin-top:6px">${t('opt-in 后这笔钱会拨回钱包。30 天未领过期入协议公池。')}</div>
       </div>
     ` : ''}
 
     ${expired.count > 0 ? `
       <div class="card" style="margin-bottom:16px;background:#f3f4f6;padding:10px;font-size:12px;color:#6b7280">
-        ${t('历史过期入公益')}: ${expired.count} ${t('笔')} · ${expired.total_amount} WAZ
+        ${t('历史过期入协议公池')}: ${expired.count} ${t('笔')} · ${expired.total_amount} WAZ
       </div>
     ` : ''}
 
     ${status.state === 'opted_in' ? `
       <div class="card" style="margin-bottom:16px;padding:14px">
-        <div style="font-size:13px;color:#374151;margin-bottom:10px">${t('退出共建身份后,未来 commission 直接入公益(无 escrow)。可随时再申请。')}</div>
+        <div style="font-size:13px;color:#374151;margin-bottom:10px">${t('退出分享分润后,未来 commission 进入协议公池(commission_reserve),不是慈善基金。可随时重新开通。')}</div>
         <button class="btn" style="background:#fee2e2;color:#991b1b;border:1px solid #fca5a5" onclick="doDeactivateRewards()">
-          🔒 ${t('退出共建身份')}
+          🔒 ${t('退出分享分润')}
         </button>
         <div id="rwd-deact-msg" style="margin-top:10px"></div>
       </div>
     ` : `
       <button class="btn btn-primary" onclick="location.hash='#apply-rewards'">
-        🎁 ${status.state === 'never_activated' ? t('申请共建身份') : t('重新申请')}
+        🎁 ${status.state === 'never_activated' ? t('申请分享分润') : t('重新申请')}
       </button>
     `}
 
@@ -4531,7 +4845,7 @@ async function renderRewardsMe(app) {
 window.doDeactivateRewards = async () => {
   const msg = document.getElementById('rwd-deact-msg')
   if (!msg) return
-  if (!confirm(t('确认退出共建身份?未来 commission 将直接入公益,可随时再申请。'))) return
+  if (!confirm(t('确认退出分享分润?未来 commission 将进入协议公池(commission_reserve,非慈善基金),可随时重新开通。'))) return
 
   msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('请通过 Passkey / 生物识别确认...')}</div>`
   let passkeyToken
@@ -4548,7 +4862,7 @@ window.doDeactivateRewards = async () => {
     msg.innerHTML = alert$('error', res.error)
     return
   }
-  msg.innerHTML = alert$('success', t('✅ 已退出共建身份'))
+  msg.innerHTML = alert$('success', t('✅ 已退出分享分润'))
   setTimeout(() => renderRewardsMe(document.getElementById('app')), 1200)
 }
 
@@ -5580,7 +5894,7 @@ async function renderAdminTokenomics(app) {
       <div style="padding:8px 12px;font-size:11px;color:#6b7280">${t('调整：POST /api/admin/tokenomics/tier with body {tier, pv_threshold, score_per_hit, active}')}</div>
     </div>
 
-    <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 三级佣金')} (Top 10)</h2>
+    <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 分享佣金')} (Top 10)</h2>
     <div class="card" style="padding:0;margin-bottom:12px">${commRows}</div>
 
     <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 匹配收益')} (Top 10)</h2>
@@ -5815,7 +6129,7 @@ function renderLogin() {
       <!-- ② 主 CTA：参与共建 -->
       <div style="text-align:center;margin-top:clamp(20px,3.6vh,34px)">
         <button onclick="openParticipateSheet('${defaultTab}')" style="padding:13px 48px;font-size:16px;font-weight:600;width:auto;min-width:220px;border-radius:99px;border:none;cursor:pointer;background:linear-gradient(135deg,#6366f1 0%,#8b5cf6 100%);color:#fff;box-shadow:0 12px 28px rgba(99,102,241,0.32),0 4px 8px rgba(99,102,241,0.18);letter-spacing:0.2px;transition:all 0.2s ease;font-family:inherit" onmouseover="this.style.transform='translateY(-1px)';this.style.boxShadow='0 16px 36px rgba(99,102,241,0.38),0 6px 12px rgba(99,102,241,0.22)'" onmouseout="this.style.transform='';this.style.boxShadow='0 12px 28px rgba(99,102,241,0.32),0 4px 8px rgba(99,102,241,0.18)'">
-          ${window._lang === 'en' ? 'Participate' : '参与共建'}
+          ${window._lang === 'en' ? 'Get started' : '开始使用'}
         </button>
       </div>
 
@@ -5873,6 +6187,9 @@ function renderLogin() {
 function renderWelcome(app) {
   const en = window._lang === 'en'
   const T = (zh, e) => en ? e : zh
+  // 创始白皮书(canonical founding doc)— 跟随界面语言指向 webaz.xyz 公开静态页(匿名可达,不走私有 GitHub)
+  // 这两个路径由 scripts/build-whitepaper-html.ts 从 docs/WHITEPAPER*.md 生成,经 express.static 公开服务
+  const WP_URL = en ? '/whitepaper/en' : '/whitepaper/zh-CN'
   // 2026-05-26 排版品控 — 区块标题 / 副标题 改为 inline style，避免 CSS 级联 / @media 覆写
   // 最低线：h2 ≥ 24px(手机) / 32px(桌面)；sub ≥ 16px
   // ⚠️ 不用 calc()，避免 +/- 两侧空格被压掉导致整条 font-size 失效
@@ -6041,20 +6358,21 @@ function renderWelcome(app) {
         <p style="font-size:clamp(17px,2.6vh,20px);color:#71717A;line-height:${en ? '1.6' : '1.75'};margin:0;max-width:65ch;margin-left:auto;margin-right:auto">
           ${T('买家、卖家、创作者三位一体的去中心化商业协议', 'A decentralized commerce protocol where buyers, sellers, and creators are one.')}
         </p>
+        <div style="margin-top:28px"><a href="${WP_URL}" target="_blank" rel="noopener" style="font-size:15px;color:#6366f1;text-decoration:none;font-weight:500">${T('📖 阅读创始白皮书：我参与，故我被看见 →', '📖 Read the founding whitepaper: I participate, therefore I am seen →')}</a></div>
       </section>
 
       <!-- 区块 1: Buyers -->
       <section class="w-section">
         <h2 style="${H2_STYLE}">${T('作为买家<br>你不只是买家', "As a buyer<br>you're more than a buyer")}</h2>
-        <p style="${SUB_STYLE}">${T('消费也是贡献，贡献就有回报', 'To spend is to build. To build is to own.')}</p>
+        <p style="${SUB_STYLE}">${T('真实使用，留下可验证的记录', 'Use for real — leave a verifiable record.')}</p>
         <div class="w-cards">
           <div class="w-card">
-            <div class="w-card-title">🎁 ${T('你的购物体验可以赚回来', 'Your shopping experience pays back')}</div>
+            <div class="w-card-title">🛍 ${T('真实使用，真实记录', 'Real use, real record')}</div>
             <ul class="w-card-list">
               <li>${T('真实购买，真实体验', 'Buy real. Use real. Review real.')}</li>
-              <li>${T('写测评 / 推荐朋友 / 发视频', 'Write a review / post a video')}</li>
-              <li>${T('达标返现，购物费回到你口袋', 'Hit the bar, get your money back')}</li>
-              <li>${T('你是买家、创作者、贡献者——一体', 'Buyer, creator, contributor — one')}</li>
+              <li>${T('你的体验可以帮助后来者判断', 'Your experience helps others decide')}</li>
+              <li>${T('购物、评价、分享是使用记录', 'Shopping, reviews, sharing are usage records')}</li>
+              <li>${T('想正式贡献?走公开任务板 #contribute/tasks', 'Want to contribute? Use the public task board #contribute/tasks')}</li>
             </ul>
           </div>
           <div class="w-card">
@@ -6105,18 +6423,18 @@ function renderWelcome(app) {
           <div class="w-card">
             <div class="w-card-title">🎯 ${T('跨平台引流，数据归你', 'Cross-platform traffic, your data')}</div>
             <ul class="w-card-list">
-              <li>${T('在小红书、抖音、B 站、IG、TikTok 发内容', 'Post on Xiaohongshu, Douyin, Bilibili, IG, TikTok')}</li>
+              <li>${T('在小红书、抖音、B 站、视频号发内容', 'Post on TikTok, Instagram, YouTube, Reddit, or Pinterest')}</li>
               <li>${T('用 webaz 口令引流', 'Drive traffic with webaz codes')}</li>
               <li>${T('真实访问、真实转化都看得见', 'See real visits and conversions')}</li>
               <li>${T("数据是你的，不是平台的", "Data is yours, not the platform's")}</li>
             </ul>
           </div>
           <div class="w-card">
-            <div class="w-card-title">💰 ${T('真实带货，实在回报', 'Real sales, real rewards')}</div>
+            <div class="w-card-title">🔗 ${T('分享与归因', 'Sharing & attribution')}</div>
             <ul class="w-card-list">
-              <li>${T('真实购买 → 真实测评 → 真实免单', 'Real purchase → Real review → Real refund')}</li>
-              <li>${T('你带回的客户、你产生的成交，都能转化为你的收益', 'Customers you bring, sales you drive — all turn into earnings')}</li>
-              <li>${T('不靠广告分成，不靠平台施舍', 'No ad shares. No platform alms')}</li>
+              <li>${T('分享商品 / 内容，留下可追溯的归因记录', 'Share products / content — leave a traceable attribution record')}</li>
+              <li>${T('符合条件并完成「分享分润」opt-in 后，协议按规则处理分润', 'If eligible and after you opt in to share-commission, the protocol settles commission per the rules')}</li>
+              <li>${T('不承诺收益;内容发布不等同于正式贡献', 'No promised earnings; publishing content is not formal contribution')}</li>
             </ul>
           </div>
         </div>
@@ -6177,10 +6495,10 @@ function renderWelcome(app) {
           )}
           ${renderTL(
             '19:00',
-            T('你作为创作者', 'You as a creator'),
-            T('小红书发护手霜测评 · 带 webaz 口令', 'Post the review on Xiaohongshu · with a webaz code'),
-            T('使用 + 建设 + 贡献', 'Use + Build + Contribute'),
-            T('别人凭口令购买 → 你拿推广分成 · 真实推广，真实回报', 'Others buy via your code → you earn share · real promotion, real return')
+            T('你作为分享者', 'You as a sharer'),
+            T('小红书发护手霜测评 · 带 webaz 口令', 'Post the review on TikTok · with a webaz code'),
+            T('使用 + 分享', 'Use + Share'),
+            T('别人凭口令购买 → 留下归因记录(分润需单独 opt-in)', 'Others buy via your code → an attribution record (commission needs a separate opt-in)')
           )}
           ${renderTL(
             '22:00',
@@ -6214,7 +6532,7 @@ function renderWelcome(app) {
                 <option value="">${T('我想以什么身份开始？（可选）', 'How would you like to start? (optional)')}</option>
                 <option value="buyer">${T('买家 · Agent 帮我找货', 'Buyer · let agents find me deals')}</option>
                 <option value="seller">${T('卖家 · 上架商品并获取 Earn-Back', 'Seller · list products and earn back')}</option>
-                <option value="creator">${T('创作者 · 测评、笔记、推广分成', 'Creator · reviews, notes, promotion share')}</option>
+                <option value="creator">${T('分享者 · 测评、笔记、内容归因', 'Sharer · reviews, notes, content attribution')}</option>
                 <option value="verifier">${T('审核员 · 链接 / 内容验证', 'Verifier · link & content verification')}</option>
                 <option value="arbitrator">${T('仲裁员 · 争议裁决', 'Arbitrator · dispute resolution')}</option>
                 <option value="other">${T('其他 / 都看看', 'Other / just curious')}</option>
@@ -6224,6 +6542,16 @@ function renderWelcome(app) {
               <div id="w-email-msg" style="font-size:12px;text-align:center;min-height:1.5em"></div>
             </div>
           </div>
+          <div class="w-card w-join-card">
+            <div class="w-join-card-left">
+              <div class="w-card-title">🛠 ${T('想直接改进 WebAZ?', 'Want to improve WebAZ directly?')}</div>
+              <div class="w-card-desc">${T('公开任务板:浏览 / 认领可做的任务,或提个新任务。建议无需登录;认领与提交需登录。只有 canonical 仓库被合并的 PR(或维护者认可的 issue / task / RFC)才进入贡献记录 —— sandbox、本地草稿、普通购物 / 分享都不是正式贡献。', 'Public task board: browse / claim tasks, or propose a new one. Suggesting needs no login; claiming & submitting need login. Only a merged PR on the canonical repo (or a maintainer-recognized issue / task / RFC) enters the contribution record — a sandbox run, a local draft, or ordinary shopping / sharing is not formal contribution.')}</div>
+            </div>
+            <div class="w-join-card-right">
+              <a class="w-btn-full w-btn-outline" href="#contribute/tasks" style="display:flex;align-items:center;justify-content:center;text-decoration:none">${T('公开任务板', 'Public task board')}</a>
+              <a class="w-btn-full w-btn-outline" href="#contribute/tasks/suggest" style="display:flex;align-items:center;justify-content:center;text-decoration:none">${T('建议新任务', 'Suggest a task')}</a>
+            </div>
+          </div>
           <div class="w-card w-join-card">
             <div class="w-join-card-left">
               <div class="w-card-title">💡 ${T('随便逛逛？提个建议', 'Just browsing? Drop an idea')}</div>
@@ -6258,7 +6586,7 @@ function renderWelcome(app) {
               <div class="w-card-desc">${T('已经准备好了？直接进入协议。', 'Ready already? Step into the protocol.')}</div>
             </div>
             <div class="w-join-card-right">
-              <button class="w-btn-full w-btn-primary" onclick="scrollToJoinWithRole('')">${T('立即注册', 'Sign Up Now')}</button>
+              <button class="w-btn-full w-btn-primary" onclick="openAuthSheet('reg')">${T('立即注册', 'Sign Up Now')}</button>
             </div>
           </div>
         </div>
@@ -6271,7 +6599,7 @@ function renderWelcome(app) {
         <div style="margin-top:10px">
           <a href="https://github.com/seasonsagents-art/webaz/blob/main/docs/META-RULES-FULL.md" target="_blank" rel="noopener">${T('完整元规则', 'Full Meta-Rules')}</a>
           <a href="https://github.com/seasonsagents-art/webaz" target="_blank" rel="noopener">GitHub</a>
-          <a href="#">${T('协议白皮书', 'Whitepaper')}</a>
+          <a href="${WP_URL}" target="_blank" rel="noopener">${T('协议白皮书', 'Whitepaper')}</a>
           <a href="mailto:contact@webaz.xyz">📧 contact@webaz.xyz</a>
         </div>
       </footer>
@@ -6389,7 +6717,7 @@ async function renderGovernanceOnboarding(app) {
         <ul style="margin:0;padding-left:20px;color:#1e3a8a;line-height:1.8;font-size:14px">
           <li><strong>arbitrator</strong> — ${T('仲裁纠纷 dispute(Iron-Rule 真人 Passkey 必备)', 'Arbitrate disputes (Iron-Rule requires real human Passkey)')}</li>
           <li><strong>verifier</strong> — ${T('验证 claim(同 Iron-Rule)', 'Verify claims (same Iron-Rule)')}</li>
-          <li>${T('卸任 30 天冷却 / outlier 自动 deactivate / 申诉路径', 'Resignation 30d cooldown / outlier auto-deactivate / appeal path')}</li>
+          <li>${T('卸任 30 天冷却 · outlier 是风险信号,经复核确认错误(confirmed-wrong)才触发 auto-deactivate · 有申诉路径', 'Resignation 30d cooldown · an outlier is a risk signal — auto-deactivate only triggers when review confirms it wrong (confirmed-wrong) · with an appeal path')}</li>
         </ul>
       </section>
 
@@ -6460,6 +6788,8 @@ async function renderGovernanceOnboarding(app) {
           <div style="font-size:13px;line-height:1.9;color:#3f3f46">
             📅 ${T('注册', 'Registered')} ≥ <strong>${esc(ver.registration_days ?? '?')}</strong> ${T('天', 'd')}<br>
             📦 ${T('完成订单', 'Completed orders')} ≥ <strong>${esc(ver.completed_orders ?? '?')}</strong><br>
+            ⭐ ${T('信誉', 'Reputation')} ≥ <strong>${esc(ver.reputation ?? '?')}</strong><br>
+            💰 ${T('钱包余额', 'Balance')} ≥ <strong>${esc(ver.balance_waz ?? '?')}</strong> WAZ<br>
             ✉️ ${T('邮箱验证', 'Email verified')} · 🚫 ${T('零仲裁判输', 'Zero disputes lost')} · ✅ ${T('未曾暂停', 'Never suspended')}
           </div>
         </div>
@@ -6471,6 +6801,349 @@ async function renderGovernanceOnboarding(app) {
   }
 }
 
+// ─── PR9E-1 Public Contribution Pages (#contribute/tasks · /:id · /tasks/suggest) ────────────────────
+// Public, no-auth PWA surface over the #329/#330/#331 APIs so a stranger + their agent can participate at
+// low friction. READ + SUGGEST only. Hard boundaries (mirror the server contract):
+//   · Restricted/internal tasks NEVER reach these pages — the list/detail call ONLY the public-scope
+//     endpoints (/api/public/build-tasks[/:id]); the server hides everything but audience=public+open.
+//   · The agent prompt instructs PRs to the CANONICAL repo only (from the response, trusted config); a
+//     sandbox run / local draft is explicitly NOT participation; the agent is only an executor (DCO).
+//   · No economic field is ever rendered (no reward/payout/amount/score) — value stays uncommitted
+//     (RFC-017 I-12). No auto GitHub op, no merge, no PR submission from the browser. Claim needs login.
+const CONTRIBUTE_PROMPT_STATE = { text: '' }   // last-built copy-ready prompt, for the copy button
+function _cEsc(s) { return escHtml(String(s ?? '')) }
+function _cArrList(arr, empty) {
+  if (!Array.isArray(arr) || arr.length === 0) return `<div style="color:#a1a1aa;font-size:13px">${_cEsc(empty)}</div>`
+  return '<ul style="margin:6px 0 0;padding-left:18px;line-height:1.8">' + arr.map(x => `<li><code style="font-size:12px;word-break:break-all">${_cEsc(x)}</code></li>`).join('') + '</ul>'
+}
+function _cBoundaryHTML(vb, T) {
+  if (!vb) return ''
+  const notice = window._lang === 'en' ? (vb.notice_en || '') : (vb.notice_zh || '')
+  return `<div style="background:#f4f4f5;border:1px solid #e4e4e7;border-radius:8px;padding:12px;font-size:12px;color:#52525B;line-height:1.6;margin:12px 0">
+    🔒 ${T('价值边界', 'Value boundary')}: <strong>${_cEsc(vb.value_state || 'uncommitted')}</strong> · ${_cEsc(vb.boundary_ref || 'RFC-017 I-12')}<br>${_cEsc(notice)}</div>`
+}
+function _cRiskBadge(level, T) {
+  if (!level) return ''
+  const c = { low: '#16a34a', medium: '#d97706', high: '#dc2626', critical: '#7f1d1d' }[level] || '#6b7280'
+  return `<span style="background:${c}1a;color:${c};padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600">${T('风险', 'risk')}:${_cEsc(level)}</span>`
+}
+function _cDuration(d, T) {
+  if (!d || (d.min_minutes == null && d.max_minutes == null)) return ''
+  const lo = d.min_minutes, hi = d.max_minutes
+  const span = lo != null && hi != null ? `${lo}–${hi}` : (lo ?? hi)
+  return `<span style="font-size:11px;color:#6b7280">⏱ ${T('预计', 'est.')} ${_cEsc(span)} ${T('分钟', 'min')}</span>`
+}
+
+// Build a copy-ready agent prompt from the (trusted) public detail payload. Names the boundary, forbidden
+// paths, prohibited actions, verification commands, the canonical-repo PR requirement, and that a
+// sandbox/local draft is NOT participation. It states the contribution confers no economic right (it does
+// NOT restate any reward/payout/amount/score — value stays uncommitted).
+function buildContributeAgentPrompt(task, cct, T) {
+  const m = task.agent_metadata || {}
+  const join = (a, sep) => (Array.isArray(a) && a.length ? a.join(sep) : null)
+  const L = []
+  L.push(`# WebAZ contribution task: ${task.title || task.task_id || ''}`)
+  L.push(`Task id: ${task.task_id || ''}`)
+  if (task.area) L.push(`Area: ${task.area}`)
+  if (m.task_type) L.push(`Type: ${m.task_type}`)
+  L.push('')
+  L.push('## Boundary — stay strictly inside this')
+  L.push('Allowed paths: ' + (join(m.allowed_paths, ', ') || '(none specified — ask the maintainer before editing)'))
+  L.push('Forbidden paths (NEVER touch): ' + (join(m.forbidden_paths, ', ') || '(none listed)'))
+  L.push('Prohibited actions (NEVER do): ' + (join(m.prohibited_actions, '; ') || '(none listed)'))
+  if (join(m.required_capabilities, ', ')) L.push('Required capabilities: ' + join(m.required_capabilities, ', '))
+  L.push('')
+  L.push('## Acceptance & verification')
+  L.push('Acceptance criteria: ' + (join(m.acceptance_criteria, '; ') || '(see task)'))
+  L.push('Verification commands (must pass): ' + (join(m.verification_commands, ' && ') || '(see task)'))
+  if (m.expected_results) L.push('Expected results: ' + m.expected_results)
+  L.push('Deliverables: ' + (join(m.deliverables, '; ') || '(see task)'))
+  if (m.definition_of_done) L.push('Definition of done: ' + m.definition_of_done)
+  L.push('')
+  L.push('## Submitting — canonical repository only')
+  L.push(`Open a Pull Request whose BASE repository is the canonical WebAZ repo: ${cct.expected_pr_base_repo || ''} (${cct.canonical_github_url || ''}), base branch ${cct.base_branch || 'main'}.`)
+  L.push('If any target repo differs from this canonical repo, STOP and ask the human to confirm — never contribute to a non-canonical repository.')
+  L.push('Sign every commit (DCO): `git commit -s`. A real human/org is the accountable party; the agent is only an executor.')
+  L.push('')
+  L.push('## Not participation')
+  L.push('A sandbox run or a local-only draft is NOT participation and is NOT a contribution. Only a merged PR (or recognized issue/task/RFC) on the canonical repo enters the contribution record.')
+  L.push('This task confers no economic or redemption right; contribution value is uncommitted (RFC-017 I-12).')
+  return L.join('\n')
+}
+
+window.contributeApplyFilters = () => {
+  const area = (document.getElementById('ct-f-area')?.value || '').trim()
+  const risk = document.getElementById('ct-f-risk')?.value || ''
+  const ac = document.getElementById('ct-f-ac')?.value || ''
+  const agentcaps = (document.getElementById('ct-f-agentcaps')?.value || '').trim()
+  const maxdur = (document.getElementById('ct-f-maxdur')?.value || '').trim()
+  const ctx = document.getElementById('ct-f-ctx')?.value || ''
+  const budget = document.getElementById('ct-f-budget')?.value || ''
+  const p = new URLSearchParams()
+  if (area) p.set('area', area)
+  if (risk) p.set('risk_level', risk)
+  if (ac) p.set('auto_claimable', ac)
+  if (agentcaps) p.set('agent_capabilities', agentcaps)
+  if (maxdur) p.set('max_duration_minutes', maxdur)
+  if (ctx) p.set('estimated_context_size', ctx)
+  if (budget) p.set('estimated_agent_budget', budget)
+  const qs = p.toString()
+  location.hash = '#contribute/tasks' + (qs ? '?' + qs : '')
+}
+
+window.contributeCopyPrompt = async () => {
+  const msg = document.getElementById('ct-prompt-msg')
+  try {
+    await navigator.clipboard.writeText(CONTRIBUTE_PROMPT_STATE.text || '')
+    if (msg) msg.textContent = window._lang === 'en' ? '✓ Copied' : '✓ 已复制'
+  } catch {
+    // clipboard unavailable (insecure context / permission) — select the textarea so the user can copy
+    const ta = document.getElementById('ct-prompt'); if (ta) { ta.focus(); ta.select() }
+    if (msg) msg.textContent = window._lang === 'en' ? 'Select the text above and copy manually' : '请选中上方文本手动复制'
+  }
+}
+
+window.contributeClaim = async (id) => {
+  const T = (zh, e) => window._lang === 'en' && e ? e : zh
+  if (!state.apiKey) {   // not logged in → save intended task and go to login
+    try { sessionStorage.setItem('webaz_intended_hash', '#contribute/tasks/' + id) } catch {}
+    navigate('#login'); return
+  }
+  const { status, body } = await apiWithStatus('POST', '/build-tasks/' + id + '/claim', { provenance: 'unspecified' })
+  if (status === 200 && body && !body.error) { toast$(T('已认领 — 去「我的共建」查看', 'Claimed — see “My contributions”')); route(true); return }
+  toast$((body && (body.error || body.error_code)) || T('认领失败', 'Claim failed'))
+}
+
+window.submitContributeProposal = async () => {
+  const T = (zh, e) => window._lang === 'en' && e ? e : zh
+  const val = (id) => (document.getElementById(id)?.value || '').trim()
+  const out = document.getElementById('ct-suggest-result')
+  const body = {
+    title: val('cs-title'), summary: val('cs-summary'),
+    suggested_area: val('cs-area') || undefined, expected_outcome: val('cs-outcome') || undefined,
+    source_ref: val('cs-source') || undefined, proposer_github_login: val('cs-login') || undefined,
+  }
+  if (out) out.innerHTML = `<div style="color:#a1a1aa;font-size:13px">${T('提交中…', 'Submitting…')}</div>`
+  const { status, body: r } = await apiWithStatus('POST', '/public/task-proposals', body)
+  if (status === 200 && r && r.proposal) {
+    const notice = window._lang === 'en' ? (r.value_boundary?.notice_en || '') : (r.value_boundary?.notice_zh || '')
+    if (out) out.innerHTML = `<div style="background:#dcfce7;border:1px solid #16a34a;border-radius:8px;padding:14px">
+      <div style="font-weight:600;color:#166534">✓ ${T('已收到你的建议', 'Your suggestion was received')}</div>
+      <div style="font-size:13px;color:#15803d;margin-top:6px">${T('建议编号', 'Proposal id')}: <code>${_cEsc(r.proposal.id)}</code></div>
+      <div style="font-size:12px;color:#15803d;margin-top:8px">${T('这是一条建议,不是贡献事实 / 奖励 / 正式参与。它进入维护者收件箱待审,绝不会自动变成正式任务或出现在公开任务板。', 'This is a SUGGESTION — not a contribution fact, not a reward, not formal participation. It enters the maintainer review inbox and never auto-becomes a task or appears on the public board.')}</div>
+      <div style="font-size:11px;color:#52525B;margin-top:8px">${_cEsc(notice)}</div></div>`
+    return
+  }
+  // typed errors — make RATE_LIMITED / DUPLICATE_PROPOSAL / validation legible
+  const code = (r && r.error_code) || ''
+  let human
+  if (status === 429 || code === 'RATE_LIMITED') human = T('提交太频繁,请稍后再试(每小时有上限)。', 'Too many submissions — please try again later (there is an hourly limit).')
+  else if (status === 409 || code === 'DUPLICATE_PROPOSAL') human = T('相同建议已在收件箱中,请勿重复提交。', 'An identical suggestion is already in the inbox — no need to submit it again.') + (r && r.existing_id ? ` (#${_cEsc(r.existing_id)})` : '')
+  else human = ((r && r.error) || T('提交失败,请检查输入。', 'Submission failed — please check your input.')) + (code ? ` [${_cEsc(code)}]` : '')
+  if (out) out.innerHTML = `<div style="background:#fee2e2;border:1px solid #ef4444;border-radius:8px;padding:14px;color:#991b1b;font-size:13px">⚠️ ${human}</div>`
+}
+
+const CONTRIBUTE_PAGE_STYLE = `max-width:880px;margin:0 auto;padding:24px 16px 80px;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','PingFang SC','Microsoft YaHei UI',sans-serif`
+
+window.contributeSetLang = (lang) => {
+  if (lang !== 'zh' && lang !== 'en') return
+  setLang(lang)
+  document.getElementById('html-root')?.setAttribute('lang', lang === 'en' ? 'en' : 'zh-CN')
+  route(true)
+}
+
+function contributeLangSwitchHTML(T) {
+  const en = window._lang === 'en'
+  const btn = (lang, label, active) => `<button type="button" ${active ? 'disabled' : `onclick="contributeSetLang('${lang}')"`} style="border:0;background:${active ? '#18181B' : 'transparent'};color:${active ? '#fff' : '#71717A'};padding:5px 10px;border-radius:7px;font-size:12px;font-weight:600;cursor:${active ? 'default' : 'pointer'}">${label}</button>`
+  return `<div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin:0 0 18px;padding-bottom:10px;border-bottom:1px solid #e4e4e7">
+    <a href="#welcome" style="color:#52525B;text-decoration:none;font-size:13px;font-weight:700">← ${T('WebAZ 欢迎页', 'WebAZ Welcome')}</a>
+    <div role="group" aria-label="${T('语言切换', 'Language switch')}" style="display:flex;align-items:center;gap:2px;border:1px solid #e4e4e7;border-radius:9px;padding:2px;background:#fff">
+      ${btn('zh', '中文', !en)}${btn('en', 'EN', en)}
+    </div>
+  </div>`
+}
+
+function contributePageShell(T, inner) {
+  return `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">${contributeLangSwitchHTML(T)}${inner}</div>`
+}
+
+async function renderContributeTasks(app) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  const q = state._urlQuery || {}
+  app.innerHTML = contributePageShell(T, `
+      <header style="margin-bottom:20px">
+        <h1 style="font-size:clamp(24px,5vw,32px);margin:0 0 8px;color:#18181B">🛠️ ${T('公开任务板', 'Open Task Board')}</h1>
+        <p style="color:#52525B;font-size:15px;margin:0;line-height:1.6">${T('面向任何人和他们的 agent 的公开共建任务。只读取公开任务;认领需登录。', 'Open contribution tasks for anyone and their agents. Read-only here; claiming requires login.')}</p>
+      </header>
+      ${_cBoundaryHTML(UNCOMMITTED_VALUE_BOUNDARY_HINT(), T)}
+      <div style="display:flex;gap:8px;flex-wrap:wrap;margin-bottom:14px">
+        <input id="ct-f-area" placeholder="${T('领域 area', 'area')}" value="${_cEsc(q.area || '')}" style="flex:1;min-width:120px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <select id="ct-f-risk" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('风险(全部)', 'risk (all)')}</option>
+          ${['low','medium','high','critical'].map(r => `<option value="${r}" ${q.risk_level === r ? 'selected' : ''}>${r}</option>`).join('')}
+        </select>
+        <select id="ct-f-ac" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('可自动认领(全部)', 'auto-claimable (all)')}</option>
+          <option value="true" ${q.auto_claimable === 'true' ? 'selected' : ''}>${T('仅可自动认领', 'auto-claimable only')}</option>
+          <option value="false" ${q.auto_claimable === 'false' ? 'selected' : ''}>${T('仅需人工认领', 'manual-claim only')}</option>
+        </select>
+        <input id="ct-f-agentcaps" placeholder="${T('你的能力(逗号分隔)→ 你能做的任务', 'your capabilities (comma-sep) → tasks you can do')}" value="${_cEsc(q.agent_capabilities || '')}" title="${T('只显示所需能力都在你能力集内的任务', 'shows only tasks whose required capabilities are all within yours')}" style="flex:1;min-width:160px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <input id="ct-f-maxdur" type="number" min="1" placeholder="${T('≤ 分钟', '≤ min')}" value="${_cEsc(q.max_duration_minutes || '')}" title="${T('只显示预计耗时不超过该分钟数的任务', 'tasks whose estimated max duration fits within this many minutes')}" style="width:96px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+        <select id="ct-f-ctx" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('上下文(全部)', 'context (all)')}</option>
+          ${['small','medium','large'].map(c => `<option value="${c}" ${q.estimated_context_size === c ? 'selected' : ''}>${c}</option>`).join('')}
+        </select>
+        <select id="ct-f-budget" title="${T('按 agent 预计工作量筛选(不是费用 / 报酬)', 'filter by estimated agent effort (not a cost / payment)')}" style="padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">
+          <option value="">${T('agent 工作量(全部)', 'agent effort (all)')}</option>
+          ${['minimal','small','moderate','large','xlarge'].map(b => `<option value="${b}" ${q.estimated_agent_budget === b ? 'selected' : ''}>${b}</option>`).join('')}
+        </select>
+        <button onclick="contributeApplyFilters()" style="padding:8px 16px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:13px;cursor:pointer">${T('筛选', 'Filter')}</button>
+        <button onclick="location.hash='#contribute/tasks/suggest'" style="padding:8px 16px;background:#fff;color:#18181B;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;cursor:pointer">💡 ${T('建议新任务', 'Suggest a task')}</button>
+      </div>
+      <div id="ct-list"><div style="color:#a1a1aa;text-align:center;padding:30px">${T('加载中…', 'Loading…')}</div></div>
+    `)
+
+  const params = new URLSearchParams()
+  for (const k of ['area', 'risk_level', 'auto_claimable', 'agent_capabilities', 'max_duration_minutes', 'estimated_context_size', 'estimated_agent_budget']) if (q[k]) params.set(k, q[k])
+  const list = document.getElementById('ct-list')
+  try {
+    const res = await fetch('/api/public/build-tasks' + (params.toString() ? '?' + params : ''), { signal: AbortSignal.timeout(10000) })
+    const j = await res.json().catch(() => ({}))
+    if (!res.ok) { list.innerHTML = `<div style="background:#fee2e2;border:1px solid #ef4444;border-radius:8px;padding:14px;color:#991b1b;font-size:13px">⚠️ ${_cEsc(j.error || T('筛选无效', 'Invalid filter'))}${j.error_code ? ` [${_cEsc(j.error_code)}]` : ''}</div>`; return }
+    const tasks = j.tasks || []
+    if (tasks.length === 0) { list.innerHTML = `<div style="color:#a1a1aa;text-align:center;padding:30px;font-size:14px">${T('暂无符合条件的公开任务。', 'No open tasks match the filters.')}</div>`; return }
+    list.innerHTML = tasks.map(task => {
+      const m = task.agent_metadata || {}
+      const caps = Array.isArray(m.required_capabilities) && m.required_capabilities.length
+        ? `<div style="font-size:11px;color:#6b7280;margin-top:6px">${T('所需能力', 'capabilities')}: ${m.required_capabilities.map(c => `<code style="font-size:11px">${_cEsc(c)}</code>`).join(' ')}</div>` : ''
+      return `<div onclick="location.hash='#contribute/tasks/${_cEsc(task.task_id)}'" style="background:#fff;border:1px solid #e4e4e7;border-radius:10px;padding:14px;margin-bottom:10px;cursor:pointer">
+        <div style="display:flex;justify-content:space-between;gap:10px;align-items:flex-start">
+          <div style="font-weight:600;color:#18181B;font-size:15px">${_cEsc(task.title)}</div>
+          ${m.auto_claimable ? `<span style="background:#dbeafe;color:#1e40af;padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600;white-space:nowrap">${T('可自动认领', 'auto-claimable')}</span>` : ''}
+        </div>
+        <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-top:8px">
+          ${task.area ? `<span style="font-size:11px;color:#6b7280">📂 ${_cEsc(task.area)}</span>` : ''}
+          ${_cRiskBadge(m.risk_level, T)}
+          ${_cDuration(m.estimated_duration, T)}
+        </div>
+        ${caps}
+        <div style="font-size:12px;color:#6366f1;margin-top:8px">${T('查看详情 + 复制 agent 提示', 'View detail + copy agent prompt')} →</div>
+      </div>`
+    }).join('')
+  } catch (e) {
+    list.innerHTML = `<div style="color:#dc2626;text-align:center;padding:20px;font-size:14px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div>`
+  }
+}
+
+async function renderContributeTaskDetail(app, id) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  app.innerHTML = contributePageShell(T, `<div style="color:#a1a1aa;text-align:center;padding:40px">${T('加载中…', 'Loading…')}</div>`)
+  let j, res
+  try {
+    res = await fetch('/api/public/build-tasks/' + encodeURIComponent(id), { signal: AbortSignal.timeout(10000) })
+    j = await res.json().catch(() => ({}))
+  } catch (e) {
+    app.innerHTML = contributePageShell(T, `<div style="color:#dc2626;text-align:center;padding:30px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div>`); return
+  }
+  if (!res.ok || !j.task) {
+    app.innerHTML = contributePageShell(T, `
+      <div style="color:#52525B;text-align:center;padding:30px">${T('任务不存在或非公开。', 'Task not found or not public.')}</div>
+      <div style="text-align:center"><button onclick="location.hash='#contribute/tasks'" style="padding:8px 16px;background:#fff;border:1px solid #d4d4d8;border-radius:8px;cursor:pointer">← ${T('返回任务板', 'Back to board')}</button></div>`); return
+  }
+  const task = j.task
+  const cct = j.canonical_contribution_target || {}
+  const m = task.agent_metadata || {}
+  CONTRIBUTE_PROMPT_STATE.text = buildContributeAgentPrompt(task, cct, T)
+  const section = (icon, title, inner) => `<section style="background:#fff;border:1px solid #e4e4e7;border-radius:12px;padding:18px;margin-bottom:14px">
+    <h3 style="margin:0 0 10px;color:#18181B;font-size:16px">${icon} ${title}</h3>${inner}</section>`
+  const claimBtn = m.auto_claimable
+    ? (state.apiKey
+        ? `<button onclick="contributeClaim('${_cEsc(task.task_id)}')" style="padding:10px 20px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:14px;cursor:pointer">✋ ${T('认领此任务', 'Claim this task')}</button>`
+        : `<button onclick="contributeClaim('${_cEsc(task.task_id)}')" style="padding:10px 20px;background:#fff;color:#18181B;border:1px solid #6366f1;border-radius:8px;font-size:14px;cursor:pointer">🔑 ${T('登录后认领', 'Log in to claim')}</button><div style="font-size:11px;color:#6b7280;margin-top:6px">${T('认领需要登录(真人 Passkey 账户);浏览器不会自动执行 GitHub 操作。', 'Claiming requires login (a real Passkey account); the browser performs no automatic GitHub action.')}</div>`)
+    : `<div style="font-size:12px;color:#6b7280">${T('此任务需人工认领流程,不可自动认领。', 'This task uses a manual claim flow; it is not auto-claimable.')}</div>`
+
+  app.innerHTML = contributePageShell(T, `
+    <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
+    <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">${_cEsc(task.title)}</h1>
+    <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-bottom:6px">
+      ${task.area ? `<span style="font-size:12px;color:#6b7280">📂 ${_cEsc(task.area)}</span>` : ''}
+      ${m.task_type ? `<span style="font-size:12px;color:#6b7280">🔖 ${_cEsc(m.task_type)}</span>` : ''}
+      ${_cRiskBadge(m.risk_level, T)} ${_cDuration(m.estimated_duration, T)}
+      ${m.auto_claimable ? `<span style="background:#dbeafe;color:#1e40af;padding:1px 8px;border-radius:99px;font-size:11px;font-weight:600">${T('可自动认领', 'auto-claimable')}</span>` : ''}
+    </div>
+    ${_cBoundaryHTML(task.value_boundary || j.value_boundary, T)}
+
+    ${section('🧭', T('执行边界', 'Execution boundary'), `
+      <div style="font-size:13px;color:#374151;font-weight:600">${T('允许修改的路径', 'Allowed paths')}</div>${_cArrList(m.allowed_paths, T('未指定 — 请先向维护者确认', 'Not specified — confirm with the maintainer'))}
+      <div style="font-size:13px;color:#991b1b;font-weight:600;margin-top:10px">${T('禁止触碰的路径', 'Forbidden paths')}</div>${_cArrList(m.forbidden_paths, T('无', 'none'))}
+      <div style="font-size:13px;color:#991b1b;font-weight:600;margin-top:10px">${T('禁止的动作', 'Prohibited actions')}</div>${_cArrList(m.prohibited_actions, T('无', 'none'))}
+      ${Array.isArray(m.required_capabilities) && m.required_capabilities.length ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('所需能力', 'Required capabilities')}</div>${_cArrList(m.required_capabilities, '')}` : ''}`)}
+
+    ${section('✅', T('验收与验证', 'Acceptance & verification'), `
+      <div style="font-size:13px;color:#374151;font-weight:600">${T('验收标准', 'Acceptance criteria')}</div>${_cArrList(m.acceptance_criteria, T('见任务描述', 'see task'))}
+      <div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('验证命令(须通过)', 'Verification commands (must pass)')}</div>${_cArrList(m.verification_commands, T('见任务描述', 'see task'))}
+      ${m.expected_results ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('预期结果', 'Expected results')}</div><div style="font-size:13px;color:#52525B;line-height:1.6;white-space:pre-wrap">${_cEsc(m.expected_results)}</div>` : ''}
+      <div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('交付物', 'Deliverables')}</div>${_cArrList(m.deliverables, T('见任务描述', 'see task'))}
+      ${m.definition_of_done ? `<div style="font-size:13px;color:#374151;font-weight:600;margin-top:10px">${T('完成定义', 'Definition of done')}</div><div style="font-size:13px;color:#52525B;line-height:1.6;white-space:pre-wrap">${_cEsc(m.definition_of_done)}</div>` : ''}`)}
+
+    ${section('🎯', T('提交目标(必须是 canonical 仓库)', 'Submit to the canonical repository'), `
+      <div style="font-size:13px;color:#52525B;line-height:1.7">
+        ${T('PR 的 base 仓库必须是', 'A PR\'s base repository MUST be')} <code>${_cEsc(cct.expected_pr_base_repo || cct.canonical_repository_full_name || '')}</code>
+        ${cct.canonical_github_url ? ` · <a href="${_cEsc(cct.canonical_github_url)}" target="_blank" rel="noopener" style="color:#1d4ed8">${_cEsc(cct.canonical_github_url)}</a>` : ''}
+        ${cct.base_branch ? ` · base <code>${_cEsc(cct.base_branch)}</code>` : ''}
+      </div>
+      <div style="font-size:12px;color:#92400e;background:#fef3c7;border-radius:8px;padding:10px;margin-top:10px;line-height:1.6">⚠️ ${T('若目标仓库与上述 canonical 仓库不一致,请停止并向真人确认 —— 不要向非 canonical 仓库提交。提交需 DCO 签名(git commit -s),问责主体是真人/组织,agent 只是执行者。', 'If a target repo differs from this canonical repo, STOP and ask a human to confirm — never contribute to a non-canonical repository. Commits need DCO sign-off (git commit -s); the accountable party is a real human/org, the agent is only an executor.')}</div>`)}
+
+    ${section('📋', T('复制给你的 agent', 'Copy-ready agent prompt'), `
+      <div style="font-size:12px;color:#6b7280;margin-bottom:8px">${T('包含边界 / 禁止动作 / 验证命令 / 提交到 canonical 仓库的要求,并明确 sandbox / 本地草稿不算正式参与。', 'Includes the boundary / prohibited actions / verification commands / the canonical-repo PR requirement, and states that a sandbox / local draft is not participation.')}</div>
+      <textarea id="ct-prompt" readonly style="width:100%;box-sizing:border-box;height:200px;font-family:ui-monospace,'SF Mono',Menlo,monospace;font-size:11px;line-height:1.5;border:1px solid #d4d4d8;border-radius:8px;padding:10px;color:#374151">${_cEsc(CONTRIBUTE_PROMPT_STATE.text)}</textarea>
+      <div style="display:flex;gap:10px;align-items:center;margin-top:8px">
+        <button onclick="contributeCopyPrompt()" style="padding:8px 16px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:13px;cursor:pointer">📋 ${T('复制提示', 'Copy prompt')}</button>
+        <span id="ct-prompt-msg" style="font-size:12px;color:#16a34a"></span>
+      </div>`)}
+
+    ${section('✋', T('认领', 'Claim'), claimBtn)}
+
+    <div style="font-size:11px;color:#9ca3af;margin-top:8px;line-height:1.6">${T('提示:sandbox 运行或本地草稿不是正式参与,也不是贡献。只有在 canonical 仓库被合并的 PR(或被认可的 issue / task / RFC)才进入贡献记录。', 'Note: a sandbox run or local draft is not participation and is not a contribution. Only a merged PR (or recognized issue / task / RFC) on the canonical repo enters the contribution record.')}</div>
+  `)
+}
+
+async function renderContributeSuggest(app) {
+  const en = window._lang === 'en'
+  const T = (zh, e) => en && e ? e : zh
+  const field = (id, label, ph, ta) => `
+    <label style="display:block;font-size:13px;color:#374151;font-weight:600;margin:12px 0 4px">${label}</label>
+    ${ta
+      ? `<textarea id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;min-height:90px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;font-family:inherit"></textarea>`
+      : `<input id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">`}`
+  app.innerHTML = contributePageShell(T, `
+    <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
+    <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">💡 ${T('建议一个任务', 'Suggest a task')}</h1>
+    <p style="color:#52525B;font-size:14px;margin:0 0 8px;line-height:1.6">${T('任何人都可以提建议(无需登录)。建议进入维护者收件箱待审,绝不会自动变成正式任务或出现在公开任务板。', 'Anyone can suggest (no login needed). Suggestions enter the maintainer review inbox and never auto-become tasks or appear on the public board.')}</p>
+    ${_cBoundaryHTML(UNCOMMITTED_VALUE_BOUNDARY_HINT(), T)}
+    ${field('cs-title', T('标题', 'Title') + ' *', T('简短描述这个任务', 'Short description of the task'))}
+    ${field('cs-summary', T('原因 / 说明', 'Reason / summary') + ' *', T('为什么值得做?要解决什么?', 'Why is it worth doing? What does it solve?'), true)}
+    ${field('cs-area', T('建议领域(可选)', 'Suggested area (optional)'), 'docs / api / pwa …')}
+    ${field('cs-outcome', T('预期结果(可选)', 'Expected outcome (optional)'), T('完成后应达成什么', 'What should be true when done'), true)}
+    ${field('cs-source', T('参考链接(可选)', 'Source reference (optional)'), 'https://… ' + T('(仅作参考,不决定提交目标仓库)', '(reference only; does not set the target repo)'))}
+    ${field('cs-login', T('你的 GitHub 用户名(可选)', 'Your GitHub login (optional)'), 'octocat')}
+    <button onclick="submitContributeProposal()" style="margin-top:16px;padding:10px 22px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:14px;cursor:pointer">${T('提交建议', 'Submit suggestion')}</button>
+    <div id="ct-suggest-result" style="margin-top:14px"></div>
+  `)
+}
+
+// The boundary constant is server-authoritative; the client mirrors the SAME frozen stance for pages that
+// render before any task payload arrives (list/suggest). It restates NO economic value (RFC-017 I-12).
+function UNCOMMITTED_VALUE_BOUNDARY_HINT() {
+  return {
+    value_state: 'uncommitted', boundary_ref: 'RFC-017 I-12',
+    notice_zh: '仅为贡献事实与归属的信息性记录,不是金融工具,不授予任何经济或兑现权利,此处不作任何承诺或保证(RFC-017 I-12 / §7)。',
+    notice_en: 'Informational record of contribution facts and attribution only. It is not a financial instrument and confers no economic or redemption right; nothing here is promised or guaranteed (RFC-017 I-12 / §7).',
+  }
+}
+
 function renderRule(num, text) {
   const [zh, en] = text.includes(' / ') ? text.split(' / ') : [text, '']
   return `<div class="w-rule w-rule-item">
@@ -6534,16 +7207,19 @@ window.openParticipateSheet = (defaultTab) => {
     <div style="padding:18px 16px 28px">
       <div style="text-align:center;margin-bottom:18px">
         <div style="font-size:22px;margin-bottom:4px">🚀</div>
-        <div style="font-size:15px;font-weight:700;color:#1f2937">${t('参与共建')}</div>
+        <div style="font-size:15px;font-weight:700;color:#1f2937">${t('开始使用 WebAZ')}</div>
         <div style="font-size:11px;color:#9ca3af;margin-top:2px">${t('选一个开始的方式')}</div>
       </div>
-      <button onclick="(document.querySelector('.js-modal')?.remove(),openAuthSheet('${defaultTab||'login'}'))" class="btn btn-primary" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between">
-        <span>🔑 ${t('注册登陆')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      <button onclick="(closeSheet(),openAuthSheet('${defaultTab||'login'}'))" class="btn btn-primary" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between">
+        <span>🔑 ${t('注册 / 登录')}</span><span style="font-size:13px;opacity:0.6">›</span>
       </button>
-      <button onclick="(document.querySelector('.js-modal')?.remove(),navigate('#welcome'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
-        <span>💬 ${t('了解更多')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      <button onclick="(closeSheet(),navigate('#contribute/tasks'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;margin-bottom:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
+        <span>🛠 ${t('浏览公开任务板')}</span><span style="font-size:13px;opacity:0.6">›</span>
       </button>
-      <div style="font-size:10px;color:#9ca3af;text-align:center;margin-top:14px;line-height:1.5">${t('了解协议设计 · 多种角色 · 元规则')}</div>
+      <button onclick="(closeSheet(),navigate('#contribute/tasks/suggest'))" class="btn btn-outline" style="width:100%;padding:14px;font-size:15px;font-weight:600;border-radius:10px;display:flex;align-items:center;justify-content:space-between;border:1.5px solid #6366f1;color:#4338ca">
+        <span>💡 ${t('提建议(无需登录)')}</span><span style="font-size:13px;opacity:0.6">›</span>
+      </button>
+      <div style="font-size:10px;color:#9ca3af;text-align:center;margin-top:14px;line-height:1.5"><a href="#welcome" onclick="closeSheet()" style="color:#9ca3af;text-decoration:none">${t('了解协议设计 · 多种角色 · 元规则')}</a></div>
     </div>
   `, { maxWidth: 460 })
 }
@@ -6617,19 +7293,30 @@ window.openAuthSheet = (defaultTab) => {
         </div>
 
         <div style="margin-top:14px;text-align:center">
-          <a href="#recover" onclick="closeSheet()" style="font-size:13px;color:#6366f1;text-decoration:none">🔑 ${t('忘了密钥？点此找回 →')}</a>
+          <a href="#recover" onclick="closeSheet()" style="font-size:13px;color:#6366f1;text-decoration:none">🔑 ${t('忘记 API Key / 密码？邮箱找回并重置 →')}</a>
         </div>
       </div>
 
       <div id="panel-reg" style="${defaultTab==='reg'?'':'display:none'}">
         <div id="reg-gate-hint" style="display:none;background:#fef3c7;border:1px solid #fde68a;padding:10px 12px;border-radius:8px;margin-bottom:12px;font-size:13px;color:#92400e"></div>
+        <div class="form-group">
+          <label class="form-label">${t('找回邮箱')} <span style="color:#dc2626">*</span> <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('（先验证邮箱，丢号才能找回）')}</span></label>
+          <div style="display:flex;gap:6px;align-items:stretch">
+            <input class="form-control" id="inp-reg-email" type="email" placeholder="your@example.com" style="flex:1" oninput="window._onRegEmailInput && window._onRegEmailInput()">
+            <button id="btn-reg-sendcode" type="button" onclick="doRegSendCode()" style="white-space:nowrap;padding:0 12px;background:#6366f1;color:#fff;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:pointer">${t('发送验证码')}</button>
+          </div>
+          <div id="reg-code-row" class="form-group" style="display:none;margin-top:8px;margin-bottom:0">
+            <input class="form-control" id="inp-reg-code" inputmode="numeric" maxlength="6" placeholder="${t('输入 6 位邮箱验证码')}">
+            <div style="font-size:11px;color:#16a34a;margin-top:4px">${t('验证码已发送，请查收（含垃圾箱），10 分钟内有效')}</div>
+          </div>
+        </div>
         <div class="form-group">
           <label class="form-label">${t('邀请码')} <span style="color:#dc2626">*</span></label>
           <div style="display:flex;gap:6px;align-items:stretch">
             <input class="form-control" id="inp-sponsor" placeholder="${t('陆续开放中，请期待')}" style="font-family:monospace;font-size:13px;flex:1">
             <button id="btn-fetch-ref" type="button" disabled title="${t('该功能默认关闭，由管理员开启后可用')}" onclick="doFetchInviteCode()" style="white-space:nowrap;padding:0 12px;background:#e5e7eb;color:#9ca3af;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:not-allowed">${t('获取邀请码')}</button>
           </div>
-          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('没有邀请码？联系老用户拿邀请链接')}</div>
+          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('邀请码为 6-7 位永久码；没有就联系老用户拿邀请链接')}</div>
         </div>
         <div class="form-group">
           <label class="form-label">${t('名称 / 店铺名')}</label>
@@ -6778,16 +7465,17 @@ async function renderPromoter(app) {
   // ─── ③ 我要分享 ───
   const myId = state.user?.id || ''
   const origin = location.origin
-  // 优先用 permanent_code 短链；旧用户兜底用 usr_xxx
-  const code = data.permanent_code || myId
-  const refLinkShort  = `${origin}/i/${code}`
-  const leftLink  = `${origin}/i/${code}-L`
-  const rightLink = `${origin}/i/${code}-R`
+  // 邀请短链只用 permanent_code，绝不兜底 usr_xxx；缺失时显示"暂不可用"。
+  const code = data.permanent_code || null
+  const refLinkShort  = code ? `${origin}/i/${code}`   : ''
+  // pre-public 去左右码:不再生成 -L/-R 侧链,只用唯一推荐码 refLinkShort
+  const inviteUnavailableHtml = `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:12px;margin-bottom:12px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
   const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
 
   const toolboxInner = `
       <h2 style="font-size:16px;font-weight:600;margin-bottom:12px">🔗 ${t('我要分享')}</h2>
 
+      ${!code ? inviteUnavailableHtml : `
       <div style="background:linear-gradient(135deg,#eef2ff 0%,#e0e7ff 100%);border:1px solid #c7d2fe;border-radius:10px;padding:12px;margin-bottom:12px">
         <div style="display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:8px">
           <div style="font-size:13px;font-weight:600;color:#3730a3">📎 ${t('我的邀请链接')}</div>
@@ -6795,19 +7483,19 @@ async function renderPromoter(app) {
         </div>
         <div style="font-family:ui-monospace,Consolas,monospace;font-size:11px;color:#3730a3;background:#fff;padding:7px 10px;border-radius:6px;margin-bottom:10px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;border:1px solid #e0e7ff">${escHtml(refLinkShort)}</div>
         <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px">
-          <button onclick="copyRefLink('${esc(data.referral_link)}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#4f46e5;color:#fff;border:none;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;box-shadow:0 1px 2px rgba(79,70,229,0.2)">
+          <button onclick="copyRefLink('${esc(refLinkShort)}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#4f46e5;color:#fff;border:none;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer;box-shadow:0 1px 2px rgba(79,70,229,0.2)">
             <span style="font-size:15px">📋</span><span>${t('复制链接')}</span>
           </button>
-          <button onclick="showQRModal('${esc(data.referral_link)}','${t('我的邀请链接')}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#fff;color:#4f46e5;border:2px solid #4f46e5;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer">
+          <button onclick="showQRModal('${esc(refLinkShort)}','${t('我的邀请链接')}')" style="display:flex;align-items:center;justify-content:center;gap:6px;padding:10px 8px;background:#fff;color:#4f46e5;border:2px solid #4f46e5;border-radius:8px;font-size:13px;font-weight:600;cursor:pointer">
             <span style="font-size:15px">📱</span><span>${t('二维码')}</span>
           </button>
         </div>
-      </div>
+      </div>`}
 
       <div style="font-size:11px;line-height:1.6;color:#6b7280;margin-bottom:8px">
         ${data.permissions?.can_l1_share
-          ? `<span style="color:#16a34a">✅ ${t('已获得分享奖励资格')}</span>` + (data.permissions.l1_share_override === 1 ? ` · <span style="color:#7c3aed">${t('Admin 强制授予')}</span>` : '')
-          : `<span style="color:#d97706">⏳ ${t('分享奖励待解锁')}</span> · <span>${t('完成首笔购买即可')}</span>`}
+          ? `<span style="color:#16a34a">✅ ${t('已开通分享分润资格')}</span>` + (data.permissions.l1_share_override === 1 ? ` · <span style="color:#7c3aed">${t('Admin 强制授予')}</span>` : '')
+          : `<span style="color:#d97706">⏳ ${t('分享分润待开通')}</span> · <span>${t('完成首笔购买即可')}</span>`}
         ${data.my_sponsor ? `<br>${t('邀请人')}: <strong>${escHtml(t(data.my_sponsor.name))}</strong>` : ''}
         ${_pvAllowed && atomic.my_placement ? ` · ${t('挂靠')}: <strong>${escHtml(t(atomic.my_placement.name))}</strong> ${atomic.my_placement.side === 'left' ? '🔵' : '🟢'}` : ''}
         · ${t('所在地区')}: ${regionLabel(data.region || 'global')}
@@ -6815,32 +7503,14 @@ async function renderPromoter(app) {
 
       ${!_pvAllowed ? '' : `
       <details style="margin-top:4px">
-        <summary style="font-size:11px;color:#6366f1;cursor:pointer;padding:6px 0">⚙ ${t('左右区设置')}</summary>
+        <summary style="font-size:11px;color:#6366f1;cursor:pointer;padding:6px 0">⚙ ${t('自动放置设置')}</summary>
         <div style="padding:8px 0">
-          <div style="font-size:11px;color:#6b7280;margin-bottom:6px">${t('指定左/右轨')}</div>
-          <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:14px">
-            <div style="background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;padding:10px">
-              <div style="font-size:12px;font-weight:600;color:#1e40af;text-align:center;margin-bottom:8px">🔵 ${t('左区码')}</div>
-              <div style="display:grid;grid-template-columns:1fr 1fr;gap:6px">
-                <button onclick="copyPlacementLink('${esc(leftLink)}', 'left', this)" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#3b82f6;color:#fff;border:none;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📋 ${t('复制')}</button>
-                <button onclick="showQRModal('${esc(leftLink)}','🔵 ${t('左区码')}')" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#fff;color:#3b82f6;border:1.5px solid #3b82f6;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📱 ${t('二维码')}</button>
-              </div>
-            </div>
-            <div style="background:#f0fdf4;border:1px solid #bbf7d0;border-radius:8px;padding:10px">
-              <div style="font-size:12px;font-weight:600;color:#166534;text-align:center;margin-bottom:8px">🟢 ${t('右区码')}</div>
-              <div style="display:grid;grid-template-columns:1fr 1fr;gap:6px">
-                <button onclick="copyPlacementLink('${esc(rightLink)}', 'right', this)" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#16a34a;color:#fff;border:none;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📋 ${t('复制')}</button>
-                <button onclick="showQRModal('${esc(rightLink)}','🟢 ${t('右区码')}')" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#fff;color:#16a34a;border:1.5px solid #16a34a;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📱 ${t('二维码')}</button>
-              </div>
-            </div>
-          </div>
-
-          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('自动选边偏好')}</div>
+          <div style="font-size:11px;color:#9ca3af;margin-bottom:8px">${t('新人通过你的推荐码注册后,系统自动安排积分树位置(无需选择左右)。')}</div>
+          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('自动放置依据')}</div>
           <select id="placement-pref-select" class="form-control" style="font-size:12px" onchange="doSetPlacementPref()">
             <option value="team_count">${t('推荐少的一边（默认）')}</option>
             <option value="pv_count">${t('近 90 天积分少的一边')}</option>
           </select>
-          <p style="font-size:11px;color:#9ca3af;margin-top:6px;line-height:1.5">${t('💡 想为这一次分享强制走左/右轨？复制上方「🔵 左区推荐码 / 🟢 右区推荐码」直接发，仅当次有效，不会改长期偏好。')}</p>
           <div id="placement-pref-msg" style="font-size:11px;color:#6b7280;margin-top:4px"></div>
         </div>
       </details>`}
@@ -7337,24 +8007,12 @@ function renderAtomicInner(a, leftPv, rightPv, weak, nextTier, nextProgress) {
 
     ${renderBinaryTree(a.binary_tree)}
 
-    <div style="font-size:12px;color:#6b7280;margin-bottom:6px">${t('弱侧匹配量')}: <strong>${weak.toLocaleString()}</strong> PV</div>
-    ${nextTier ? `
-      <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('距离 tier')} ${nextTier.tier} ${t('门槛')} ${Number(nextTier.pv_threshold).toLocaleString()} PV (+${nextTier.score_per_hit} Score)</div>
-      <div style="background:#f3f4f6;height:6px;border-radius:3px;overflow:hidden;margin-bottom:10px">
-        <div style="background:#6366f1;height:6px;width:${nextProgress.toFixed(1)}%"></div>
-      </div>` : ''}
-
-    <details style="margin-bottom:10px">
-      <summary style="font-size:12px;color:#6366f1;cursor:pointer">${t('匹配档位表')}</summary>
-      <table style="width:100%;margin-top:6px;border-collapse:collapse">
-        <tr style="background:#f9fafb;font-size:11px;color:#6b7280">
-          <th style="padding:5px 8px;text-align:left">Tier</th>
-          <th style="padding:5px 8px;text-align:right">${t('门槛 PV')}</th>
-          <th style="padding:5px 8px;text-align:right">${t('Score / 次')}</th>
-        </tr>
-        ${tierTable}
-      </table>
-    </details>
+    <!-- pre-public de-MLM: 弱腿/对碰 tier 进度 + Score/次 档位表已下线;PV/位置仅为参与记录,非收益路径 -->
+    <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#9ca3af;line-height:1.6;margin-bottom:10px">
+      ${window._lang === 'en'
+        ? 'PV tiers / pairing are pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+        : 'PV 档位 / 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
+    </div>
     <h4 style="font-size:12px;font-weight:600;margin:6px 0">📊 ${t('最近匹配')}</h4>
     ${recentRows}`
 }
@@ -7439,7 +8097,13 @@ function renderGrowthTasksSection(tasks, summary) {
         <details ${claimed.length ? '' : 'open'} style="margin-top:${claimed.length?'10px':'0'}">
           <summary style="font-size:11px;color:#374151;font-weight:600;cursor:pointer;padding:4px 0;list-style:none">▸ ${t('推荐领取')} (${available.length}) ▾</summary>
           <div style="padding-top:4px">
-            ${available.map(taskRow).join('')}
+            ${available.slice(0, 3).map(taskRow).join('')}
+            ${available.length > 3 ? `
+              <details style="margin-top:2px">
+                <summary style="font-size:11px;color:#6b7280;cursor:pointer;padding:4px 0;list-style:none">▸ ${t('查看更多推荐')} (${available.length - 3}) ▾</summary>
+                <div style="padding-top:4px">${available.slice(3).map(taskRow).join('')}</div>
+              </details>
+            ` : ''}
           </div>
         </details>
       ` : ''}
@@ -7516,36 +8180,29 @@ function renderAtomicSection(a) {
     <h2 style="font-size:15px;font-weight:600;margin:24px 0 8px">⚛ ${t('积分 — 积分匹配')}</h2>
 
     <div class="card" style="margin-bottom:12px;background:linear-gradient(135deg,#dbeafe,#f0fdf4)">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">🔗 ${t('左右码（完全对称 / 末端垂直挂靠）')}</div>
-      <div style="font-size:11px;color:#6b7280;margin-bottom:10px">${t('点击下方任一卡片复制整条推荐链接。新人通过左/右链接注册会挂到对应区。')}</div>
+      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">🔗 ${t('我的推荐码')}</div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:10px">${t('复制你的推荐链接分享给新人;新人注册后由系统自动安排积分树位置(无需选择左右)。')}</div>
       ${(() => {
-        const myId = state.user?.id || ''
+        // pre-public 去左右码:只用唯一的推荐码(/i/CODE,不带 -L/-R);缺失则提示不可用
+        const myCode = state.user?.permanent_code || null
         const origin = location.origin
-        const leftLink  = `${origin}/?placement=${myId}&side=left`
-        const rightLink = `${origin}/?placement=${myId}&side=right`
-        const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
+        if (!myCode) return `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:10px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
+        const link = `${origin}/i/${myCode}`
+        const esc = (s) => s.replace(/'/g, "\\'")
         return `
-          <div style="display:grid;grid-template-columns:1fr 1fr;gap:10px">
-            <div onclick="copyPlacementLink('${esc(leftLink)}', 'left', this)" style="cursor:pointer;background:#eff6ff;border:2px solid #3b82f6;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#dbeafe'" onmouseout="this.style.background='#eff6ff'">
-              <div style="font-size:13px;font-weight:700;color:#1e40af;margin-bottom:6px">🔵 ${t('左区推荐码')}</div>
-              <div style="font-size:10px;color:#1e40af;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(leftLink)}</div>
-              <div style="font-size:11px;color:#3b82f6;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
-            </div>
-            <div onclick="copyPlacementLink('${esc(rightLink)}', 'right', this)" style="cursor:pointer;background:#f0fdf4;border:2px solid #16a34a;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#dcfce7'" onmouseout="this.style.background='#f0fdf4'">
-              <div style="font-size:13px;font-weight:700;color:#166534;margin-bottom:6px">🟢 ${t('右区推荐码')}</div>
-              <div style="font-size:10px;color:#166534;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(rightLink)}</div>
-              <div style="font-size:11px;color:#16a34a;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
-            </div>
+          <div onclick="copyRefLink('${esc(link)}')" style="cursor:pointer;background:#eef2ff;border:2px solid #6366f1;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#e0e7ff'" onmouseout="this.style.background='#eef2ff'">
+            <div style="font-size:13px;font-weight:700;color:#4338ca;margin-bottom:6px">${t('推荐链接')}</div>
+            <div style="font-size:10px;color:#4338ca;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(link)}</div>
+            <div style="font-size:11px;color:#6366f1;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
           </div>`
       })()}
       <details style="margin-top:10px">
-        <summary style="font-size:11px;color:#6366f1;cursor:pointer">⚙ ${t('自动选边偏好（无 side 的链接 / 商品分享适用）')}</summary>
+        <summary style="font-size:11px;color:#6366f1;cursor:pointer">⚙ ${t('自动放置依据')}</summary>
         <div style="padding:8px 0">
           <select id="placement-pref-select" class="form-control" style="font-size:12px" onchange="doSetPlacementPref()">
             <option value="team_count">${t('推荐少的一边（默认）')}</option>
             <option value="pv_count">${t('近 90 天积分少的一边')}</option>
           </select>
-          <p style="font-size:11px;color:#9ca3af;margin-top:6px;line-height:1.5">${t('💡 想为这一次分享强制走左/右轨？复制上方「🔵 左区推荐码 / 🟢 右区推荐码」直接发，仅当次有效，不会改长期偏好。')}</p>
           <div id="placement-pref-msg" style="font-size:11px;color:#6b7280;margin-top:4px"></div>
         </div>
       </details>
@@ -7567,13 +8224,13 @@ function renderAtomicSection(a) {
 
     ${renderBinaryTree(a.binary_tree)}
 
+    <!-- pre-public de-MLM: 弱腿/对碰 tier 进度已下线;PV/位置仅为参与记录,非收益路径 -->
     <div class="card" style="margin-bottom:12px">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">${t('弱侧匹配量')}: <strong>${pair.toLocaleString()}</strong> PV</div>
-      ${nextTier ? `
-        <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('距离 tier')} ${nextTier.tier} ${t('门槛')} ${Number(nextTier.pv_threshold).toLocaleString()} PV (${nextTier.score_per_hit} Score)</div>
-        <div style="background:#f3f4f6;height:6px;border-radius:3px;overflow:hidden">
-          <div style="background:#6366f1;height:6px;width:${nextProgress.toFixed(1)}%"></div>
-        </div>` : ''}
+      <div style="font-size:11px;color:#9ca3af;line-height:1.6">
+        ${window._lang === 'en'
+          ? 'PV tiers / pairing are pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+          : 'PV 档位 / 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
+      </div>
     </div>
 
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:12px">
@@ -7587,18 +8244,6 @@ function renderAtomicSection(a) {
       </div>
     </div>
 
-    <details style="margin-bottom:12px">
-      <summary style="font-size:12px;color:#6366f1;cursor:pointer">${t('匹配档位表')}</summary>
-      <table style="width:100%;margin-top:8px;border-collapse:collapse">
-        <tr style="background:#f9fafb;font-size:11px;color:#6b7280">
-          <th style="padding:6px 8px;text-align:left">Tier</th>
-          <th style="padding:6px 8px;text-align:right">${t('门槛 PV')}</th>
-          <th style="padding:6px 8px;text-align:right">${t('Score / 次')}</th>
-        </tr>
-        ${tierTable}
-      </table>
-    </details>
-
     <h3 style="font-size:13px;font-weight:600;margin:8px 0">📊 ${t('最近匹配')}</h3>
     <div class="card" style="padding:0">
       ${recentRows}
@@ -7661,10 +8306,7 @@ window.showNodePvModal = async (userId) => {
     body.innerHTML = alert$('error', data.error)
     return
   }
-  const weak = data.weak_leg_pv || 0
-  const ratio = (data.total_left_pv + data.total_right_pv) > 0
-    ? (weak / Math.max(data.total_left_pv, data.total_right_pv) * 100).toFixed(0)
-    : '0'
+  // pre-public de-MLM: 不再展示弱腿/对碰收益(weak-leg / pairing earnings)。PV / 位置仅为参与记录。
   body.innerHTML = `
     <div style="text-align:left">
       <div style="display:flex;align-items:center;gap:10px;margin-bottom:14px;padding-bottom:10px;border-bottom:1px solid #f3f4f6">
@@ -7692,10 +8334,10 @@ window.showNodePvModal = async (userId) => {
         </div>
       </div>
 
-      <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#6b7280;line-height:1.7;margin-bottom:10px">
-        ${t('弱侧匹配量')}: <strong style="color:#374151">${weak.toLocaleString()}</strong> PV · ${t('双腿均衡')} ${ratio}%<br>
-        ${t('累计匹配')}: <strong style="color:#374151">${data.total_hits || 0}</strong> ${t('次')} · ${t('累计获 WAZ')}: <strong style="color:#16a34a">${Number(data.settled_waz || 0).toFixed(2)}</strong><br>
-        ${t('待结 Score')}: <strong style="color:#d97706">${Number(data.pending_score || 0).toFixed(1)}</strong>
+      <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#9ca3af;line-height:1.6;margin-bottom:10px">
+        ${window._lang === 'en'
+          ? 'PV pairing is pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+          : 'PV 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
       </div>
 
       <a href="#u/${data.id}" onclick="closeModal()" style="display:block;text-align:center;font-size:12px;color:#4f46e5;text-decoration:none;padding:8px">→ ${t('查看 TA 的主页')}</a>
@@ -7751,7 +8393,7 @@ async function webShareOrCopy(opts) {
 
 window.copyRefLink = async (link) => {
   const meName = state.user?.name || t('一位老用户')
-  const text = t('我在 WebAZ 用 AI 比价下单，省钱还能拿分享佣金 + PV 双激励。通过我的链接注册有奖励，TA 也得佣金 — 双方共赢') + '\n— ' + meName
+  const text = t('我在 WebAZ 用 AI 比价下单，体验不错，推荐你也试试。分享链接仅作参与 / 归因记录，不构成收益承诺。') + '\n— ' + meName
   const r = await webShareOrCopy({ title: 'WebAZ', text, url: link })
   if (r === 'shared') toast$(t('已分享'))
   else if (r === 'copied') toast$(t('已复制（含邀请文案）'))
@@ -7829,9 +8471,9 @@ async function maybePromptPlacementBind() {
     const st = await GET('/profile/placement-status')
     if (!st.can_bind) return  // 已有 placement 或 有下线 → 不弹
     setTimeout(() => {
-      const ok = confirm(`📍 ${t('系统检测到邀请链接')}\n\n${t('inviter')}: ${inviter}\n\n${t('是否加入对方的积分配对？')}\n${t('系统将按推荐人偏好自动选择左/右区。一旦加入永久不变。')}`)
+      const ok = confirm(`📍 ${t('系统检测到邀请链接')}\n\n${t('inviter')}: ${inviter}\n\n${t('是否加入对方的积分配对？')}\n${t('系统将自动安排积分树位置。一旦加入永久不变。')}`)
       if (ok) {
-        POST('/profile/bind-placement', { inviter_id: inviter, side: hint.placement_side || undefined }).then(res => {
+        POST('/profile/bind-placement', { inviter_id: inviter }).then(res => {
           if (res.error) alert(`✗ ${res.error}`)
           else alert(`✓ ${t('已加入积分树')}\n${t('侧')}: ${res.side}\n${t('深度')}: ${res.depth}`)
         })
@@ -8704,6 +9346,10 @@ async function renderShopPage(app, identifier) {
   const followBtn = state.user && !isOwnShop && state.user.role === 'buyer'
     ? `<button class="btn btn-${is_following ? 'gray' : 'primary'} btn-sm" style="width:auto" id="shop-follow-btn" data-following="${is_following ? '1' : '0'}" onclick="toggleShopFollow('${seller.id}', this)">${is_following ? '✓ ' + t('已关注') : '+ ' + t('关注')}</button>`
     : ''
+  // 推荐店铺:只锚定推荐关系/二叉树位置/店铺来源 —— 不是全店佣金权;商品分润仍要求推荐人真实成交过同款
+  const shopReferralBtn = state.user?.permanent_code
+    ? `<button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" title="${t('店铺推荐只锚定推荐关系;只有你真实成交过的同款商品,后续成交才可能形成商品推荐关系')}" onclick="copyShopReferralLink('${seller.id}')">🔗 ${t('推荐店铺')}</button>`
+    : ''
   const productCards = products.length === 0
     ? `<div style="text-align:center;padding:30px;color:#9ca3af;font-size:13px">${t('该卖家暂无商品')}</div>`
     : products.map(p => {
@@ -8749,6 +9395,7 @@ async function renderShopPage(app, identifier) {
         </div>
         <div style="display:flex;flex-direction:column;gap:6px;align-items:flex-end">
           ${followBtn}
+          ${shopReferralBtn}
           ${isOwnShop ? `<a href="#shop-edit" style="font-size:11px;color:#6366f1">${t('编辑店铺')} →</a>` : ''}
         </div>
       </div>
@@ -8765,6 +9412,17 @@ async function renderShopPage(app, identifier) {
   `, 'discover')
 }
 
+// 复制店铺推荐链接 — /?ref=CODE#shop/<seller>(target URL 形态:ref 在 query,目标页在 hash,服务端可见 ref)。
+// 只用 permanent_code,绝不用 usr_xxx;诚实文案:不暗示"分享店铺即可获得全店佣金"。
+window.copyShopReferralLink = (sellerId) => {
+  const code = state.user?.permanent_code
+  if (!code) return alert(t('邀请码暂不可用，请刷新或联系支持'))
+  const link = `${location.origin}/?ref=${code}#shop/${sellerId}`
+  copyText(link).then(ok => toast$(ok
+    ? t('店铺推荐链接已复制 — 商品分润仍需你真实成交过同款并 opt-in')
+    : t('复制失败，请手动复制'), ok ? 'success' : 'error'))
+}
+
 window.toggleShopFollow = async (sellerId, btn) => {
   const following = btn.dataset.following === '1'
   btn.disabled = true
@@ -9688,7 +10346,7 @@ window.openBuildFeedback = () => {
   if (!state.user) { toast$(t('请先登录')); navigate('#login'); return }
   const page = (location.hash || '#/').split('?')[0]   // 非 PII:只取当前页面路由作上下文
   const html = `
-    <div class="js-modal" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
+    <div class="js-modal" data-page="${escHtml(page)}" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
       <div style="background:#fff;width:100%;max-width:560px;border-radius:16px 16px 0 0;padding:20px;max-height:82vh;overflow-y:auto" onclick="event.stopPropagation()">
         <h2 style="font-size:16px;font-weight:700;margin-bottom:4px">💬 ${t('反馈 / 建议')}</h2>
         <div style="font-size:11px;color:#9ca3af;margin-bottom:12px">${t('帮我们改进 WebAZ。会自动附上当前页面')} <code style="background:#f3f4f6;padding:1px 5px;border-radius:4px">${escHtml(page)}</code> ${t('作为上下文(不含个人信息)')}</div>
@@ -9707,7 +10365,7 @@ window.openBuildFeedback = () => {
         <div id="bfb-msg" style="margin:8px 0"></div>
         <div style="display:flex;gap:8px">
           <button class="btn btn-gray" style="flex:1" onclick="this.closest('.js-modal').remove()">${t('取消')}</button>
-          <button class="btn btn-primary" style="flex:1" onclick="submitBuildFeedback('${escHtml(page)}')">${t('提交')}</button>
+          <button class="btn btn-primary" style="flex:1" onclick="submitBuildFeedbackFromModal(this)">${t('提交')}</button>
         </div>
         <div style="text-align:center;margin-top:12px">
           <a onclick="this.closest('.js-modal').remove();navigate('#build-feedback')" style="font-size:12px;color:#4f46e5;cursor:pointer">${t('查看我的反馈进度 →')}</a>
@@ -9717,7 +10375,10 @@ window.openBuildFeedback = () => {
   const div = document.createElement('div'); div.innerHTML = html; document.body.appendChild(div.firstElementChild)
 }
 
-window.submitBuildFeedback = async (page) => {
+window.submitBuildFeedbackFromModal = async (btn) => {
+  // Codex #93:page 从 modal dataset 读,绝不把 location.hash 拼进内联 onclick 的 JS 字符串
+  //   (escHtml 是 HTML escape,放进 JS 字符串上下文会被 HTML attribute 解码 → hash 注入/XSS)。
+  const page = btn.closest('.js-modal')?.dataset.page || '#/'
   const type = document.getElementById('bfb-type').value
   const text = document.getElementById('bfb-text').value.trim()
   const msg = document.getElementById('bfb-msg')
@@ -9750,8 +10411,8 @@ async function renderMyBuildFeedback(app) {
           ${Number(f.credited_points) > 0 ? `<div style="font-size:11px;color:#16a34a;margin-top:4px">🏅 +${f.credited_points} ${t('共建信誉')}</div>` : ''}
           ${(f.credit_pending_anchor && !(Number(f.credited_points) > 0)) ? `
             <div style="font-size:11px;color:#854d0e;background:#fef3c7;border-radius:6px;padding:8px;margin-top:6px">
-              🔐 ${t('这条贡献已被采纳 —— 绑定 Passkey 即可领取建设信誉(奖励需锚定可问责真人)')}
-              <button class="btn btn-sm" style="margin-top:6px;font-size:11px;padding:4px 10px;background:#7c3aed;color:#fff;border-color:transparent" onclick="(async()=>{ if(await doRegisterPasskey('')){ alert(t('已绑定，建设信誉已补发')); navigate('#build-feedback') } })()">${t('绑定 Passkey 领取')}</button>
+              🔐 ${t('这条贡献已被采纳 —— 绑定 Passkey 即可记入建设信誉(建设信誉需锚定可问责真人)')}
+              <button class="btn btn-sm" style="margin-top:6px;font-size:11px;padding:4px 10px;background:#7c3aed;color:#fff;border-color:transparent" onclick="(async()=>{ if(await doRegisterPasskey('')){ alert(t('已绑定，建设信誉已记入')); navigate('#build-feedback') } })()">${t('绑定 Passkey 记入建设信誉')}</button>
             </div>` : ''}
         </div>`).join('')
   app.innerHTML = shell(`
@@ -9768,6 +10429,10 @@ async function renderMyContributions(app) {
   app.innerHTML = shell(loading$(), 'me')
   const p = await GET('/build-reputation/me')
   if (!p || p.error) { app.innerHTML = shell(`<div class="card" style="padding:16px;color:#b91c1c">${escHtml(p?.error || t('加载失败'))}</div>`, 'me'); return }
+  // F9 — GitHub 身份归属面(只读自己的 bindings + attributable facts;失败时优雅降级,不挡整页)
+  const gid = await GET('/contribution-identity/github/me').catch(() => null)
+  // F10 — 自动发现可认领的 GitHub 贡献(只读;失败优雅降级)
+  const claimable = await GET('/contribution-identity/github/claimable').catch(() => null)
   const lang = window._lang === 'zh' ? 'zh' : 'en'
   const tier = p.tier || {}
   const k = p.kpi || {}
@@ -9803,13 +10468,176 @@ async function renderMyContributions(app) {
       ${stat(t('提任务'), k.tasks_created)}
     </div>
     ${provRows ? `<div class="card" style="padding:10px;margin-bottom:12px"><div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('署名构成(自报)')}</div>${provRows}</div>` : ''}
-    ${!p.reward_anchored ? `<div class="card" style="padding:10px;margin-bottom:12px;border-left:3px solid #d97706"><div style="font-size:12px;color:#92400e">${t('未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。')}</div></div>` : ''}
+    ${!p.passkey_anchor_present ? `<div class="card" style="padding:10px;margin-bottom:12px;border-left:3px solid #d97706"><div style="font-size:12px;color:#92400e">${t('未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。')}</div></div>` : ''}
+    ${ghClaimSectionHtml(gid, claimable, lang)}
+    <div class="card" onclick="location.hash='#contribute/tasks'" style="padding:12px 14px;margin-bottom:12px;cursor:pointer;display:flex;align-items:center;gap:10px">
+      <div style="font-size:20px;flex-shrink:0">📋</div>
+      <div style="flex:1;min-width:0">
+        <div style="font-weight:600;font-size:13px">${t('查看公开共建任务')}</div>
+        <div style="font-size:11px;color:#9ca3af;margin-top:2px">${t('可浏览 / 可认领的公共任务板(独立于我的贡献记录)')}</div>
+      </div>
+      <div style="color:#9ca3af">›</div>
+    </div>
     <div style="font-size:13px;font-weight:600;margin:14px 0 6px">${t('限制与申诉')}</div>
     ${restrHtml}
     <div style="font-size:11px;color:#9ca3af;margin-top:14px">${t('看板仅自己可见,不做公开排行。')}</div>
   `, 'me')
 }
 
+// ─── F9 — GitHub 贡献认领 UI(身份/归属认领;不是奖励、付款或提现)──────────────────────
+// 服务端三步契约:claim-challenge(签发挑战+proof_marker)→ 用户把 marker 发到自己 GitHub 账号的
+// public gist → requestPasskeyGate('identity_claim', {github_actor_id, source_event_key, challenge_id})
+// 拿一次性 webauthn_token → claim-complete。accountId 恒为 session 用户(前端绝不传 account_id);
+// GitHub read token 只在服务端(前端不收不传)。F10 discovery 已接入(GET .../github/claimable →
+// 「可认领的 GitHub 贡献」列表,点「认领此贡献」预填并发起);手动输入仅作找不到时的 fallback。
+let _ghClaimCtx = null   // { challenge_id, expires_at, proof_marker, actor, sek }
+
+// typed error code → 可读提示(认领失败绝不伪装成功)
+function ghClaimErrText(code, fallback) {
+  const m = {
+    GITHUB_READ_NOT_CONFIGURED: t('身份认领暂不可用(服务端未配置 GitHub 读取凭证),请稍后再试或联系 maintainer'),
+    FACT_NOT_CLAIMABLE: t('没有可认领的、经凭证背书的 GitHub 贡献记录 — 请检查 source_event_key 是否正确'),
+    ACTOR_MISMATCH: t('该贡献记录的执行者与所填 GitHub 身份不符'),
+    ALREADY_BOUND: t('该 GitHub 身份已被其他账号认领'),
+    CHALLENGE_EXPIRED: t('认领挑战已过期,请重新生成'),
+    CHALLENGE_ALREADY_USED: t('认领挑战已被使用,请重新生成'),
+    CHALLENGE_NOT_FOUND: t('认领挑战不存在或不属于当前账号'),
+    PROOF_REJECTED: t('gist 证明未通过 — 请确认 gist 公开、归属于该 GitHub 账号、且内容为完整 proof_marker'),
+    HUMAN_PRESENCE_REQUIRED: t('此操作需要真人 Passkey 验证'),
+    AGENT_SCOPE_UNDECLARED: t('写操作需问责锚点 — 请先在「安全」页绑定 Passkey'),
+    INVALID_REQUEST: t('请求参数无效 — 请检查两个输入框'),
+  }
+  return m[code] || fallback || t('操作失败')
+}
+
+function ghClaimSectionHtml(gid, claimable, lang) {
+  const ok = gid && !gid.error
+  const bindings = ok ? (gid.bindings || []) : []
+  const facts = ok ? (gid.attributable_facts || []) : []
+  const notice = ok && gid.value_boundary ? (lang === 'zh' ? gid.value_boundary.notice_zh : gid.value_boundary.notice_en) : ''
+  const bindRows = bindings.length === 0
+    ? `<div style="font-size:12px;color:#9ca3af">${t('尚未绑定 GitHub 身份')}</div>`
+    : bindings.map(b => `<div style="font-size:12px;color:#374151">🔗 <code>github:${escHtml(String(b.github_actor_id))}</code> · ${escHtml(String(b.visibility))} · ${t('绑定于')} ${escHtml(String(b.bound_at || ''))}</div>`).join('')
+  const factRows = facts.length === 0
+    ? `<div style="font-size:12px;color:#9ca3af">${t('暂无可归属的贡献事实')}</div>`
+    : facts.map(f => `<div style="font-size:11px;color:#374151;padding:6px 8px;background:#f9fafb;border-radius:6px;margin-bottom:4px">
+        <div><b>${escHtml(String(f.type || f.source))}</b> · ${escHtml(String(f.status))} · <code style="font-size:10px">${escHtml(String(f.fact_id).slice(0, 18))}…</code></div>
+        <div style="color:#6b7280;word-break:break-all">${escHtml(String(f.source_event_key))}</div>
+      </div>`).join('')
+  // F10 — 自动发现的可认领贡献(actor 未被任何账号绑定的 credential-backed facts)
+  const cl = (claimable && !claimable.error) ? (claimable.claimable_facts || []) : null
+  const claimRows = cl === null
+    ? `<div style="font-size:12px;color:#9ca3af">${t('可认领列表暂不可用,稍后再试')}</div>`
+    : cl.length === 0
+      ? `<div style="font-size:12px;color:#9ca3af">${t('暂无自动发现的可认领贡献')}</div>`
+      : cl.map(r => `<div style="font-size:11px;color:#374151;padding:6px 8px;background:#eff6ff;border-radius:6px;margin-bottom:4px">
+          <div><b>PR #${escHtml(String(r.pr_number))}</b> · <code>github:${escHtml(String(r.github_actor_id))}</code> · ${escHtml(String(r.merged_at || r.created_at || ''))}</div>
+          <div style="color:#6b7280;word-break:break-all">${escHtml(String(r.source_event_key))}</div>
+          <div style="color:#9ca3af;font-size:10px">fact <code>${escHtml(String(r.fact_id).slice(0, 18))}…</code> · ${escHtml(String(r.merge_commit_sha || '').slice(0, 10))}</div>
+          <button class="btn btn-outline btn-sm" style="width:auto;margin-top:4px;font-size:11px" onclick="ghClaimFromRow('${escHtml(String(r.github_actor_id))}','${escHtml(String(r.source_event_key))}')">${t('认领此贡献')}</button>
+        </div>`).join('')
+  const ctx = _ghClaimCtx
+  return `
+    <div class="card" style="padding:14px;margin-bottom:12px" id="gh-claim-card">
+      <div style="font-size:13px;font-weight:600;margin-bottom:4px">🔗 ${t('GitHub 贡献认领(身份归属)')}</div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('把"以 GitHub 身份完成、已被凭证背书"的贡献事实归属到本账号。这只是身份与归属的认领 — 不是奖励、不是付款。')}</div>
+      <div style="font-size:11px;color:#166534;background:#f0fdf4;border-radius:6px;padding:6px 8px;margin-bottom:8px">✓ ${t('GitHub 贡献认领不需要先购买,也不需要开通分享分润。')}</div>
+      ${notice ? `<div style="font-size:10px;color:#9ca3af;background:#f4f4f5;border-radius:6px;padding:6px 8px;margin-bottom:8px">🔒 ${escHtml(notice)}</div>` : ''}
+      ${ok ? `
+      <div style="font-size:12px;font-weight:600;margin:8px 0 4px">${t('已绑定身份')}</div>${bindRows}
+      <div style="font-size:12px;font-weight:600;margin:10px 0 4px">${t('可归属的贡献事实')}</div>${factRows}
+      <div style="font-size:12px;font-weight:600;margin:10px 0 4px">${t('可认领的 GitHub 贡献(自动发现)')}</div>${claimRows}
+      <details style="margin-top:10px" ${ctx ? 'open' : ''} id="gh-claim-details">
+        <summary style="font-size:12px;font-weight:600;cursor:pointer">${t('手动认领一条贡献(找不到时的备用入口)')}</summary>
+        <div style="font-size:11px;color:#92400e;background:#fef3c7;border-radius:6px;padding:6px 8px;margin:8px 0">${t('上方列表找不到时,可手动输入 source_event_key 与 github_actor_id。')}</div>
+        <input id="gh-claim-actor" placeholder="github_actor_id (${t('如')} 262558625)" value="${escHtml(ctx?.actor || '')}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-bottom:6px">
+        <input id="gh-claim-sek" placeholder="source_event_key (github:<repo>:<pr>:merged)" value="${escHtml(ctx?.sek || '')}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-bottom:6px">
+        <button class="btn btn-outline btn-sm" style="width:auto" onclick="ghClaimIssue()">1️⃣ ${t('生成认领挑战')}</button>
+        <div id="gh-claim-step2" style="margin-top:8px">${ctx ? ghClaimStep2Html(ctx) : ''}</div>
+        <div id="gh-claim-msg" style="font-size:12px;margin-top:6px"></div>
+      </details>` : `<div style="font-size:12px;color:#9ca3af">${t('身份归属面暂不可用,稍后再试')}</div>`}
+    </div>`
+}
+
+function ghClaimStep2Html(ctx) {
+  return `
+    <div style="background:#eef2ff;border-radius:8px;padding:10px;margin-top:4px">
+      <div style="font-size:11px;color:#3730a3;margin-bottom:2px">🔒 ${t('本挑战锁定于')}: <code>github:${escHtml(ctx.actor)}</code> · <code style="word-break:break-all">${escHtml(ctx.sek)}</code></div>
+      <div style="font-size:11px;color:#3730a3;margin-bottom:4px">challenge_id: <code>${escHtml(ctx.challenge_id)}</code> · ${t('过期于')} ${escHtml(ctx.expires_at || '')}</div>
+      <div style="font-size:11px;color:#374151;margin-bottom:4px">2️⃣ ${t('把下方 proof_marker 原样发布到【该 GitHub 账号拥有的 public gist】,然后回来填 gist_id:')}</div>
+      <div style="font-family:ui-monospace,Menlo,monospace;font-size:10px;background:#fff;border:1px solid #e0e7ff;border-radius:6px;padding:6px 8px;word-break:break-all" id="gh-claim-marker">${escHtml(ctx.proof_marker)}</div>
+      <button class="btn btn-outline btn-sm" style="width:auto;margin-top:6px" onclick="copyText(document.getElementById('gh-claim-marker').textContent).then(ok=>toast$(ok?t('已复制'):t('复制失败，请手动复制'),ok?'success':'error'))">📋 ${t('复制 proof_marker')}</button>
+      <input id="gh-claim-gist" placeholder="gist_id" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-top:8px">
+      <button class="btn btn-primary btn-sm" style="width:auto;margin-top:6px" onclick="ghClaimComplete()">3️⃣ 🔑 ${t('用 Passkey 完成认领')}</button>
+    </div>`
+}
+
+// F10:点「认领此贡献」→ 预填 actor + source_event_key,展开手动区,直接走 F9 既有三步流程(签发挑战)
+window.ghClaimFromRow = (actor, sek) => {
+  const d = document.getElementById('gh-claim-details'); if (d) d.open = true
+  const ia = document.getElementById('gh-claim-actor'); if (ia) ia.value = actor
+  const is = document.getElementById('gh-claim-sek'); if (is) is.value = sek
+  ghClaimIssue()
+}
+
+window.ghClaimIssue = async () => {
+  const msg = document.getElementById('gh-claim-msg')
+  const actor = (document.getElementById('gh-claim-actor')?.value || '').trim()
+  const sek = (document.getElementById('gh-claim-sek')?.value || '').trim()
+  if (!actor || !sek) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请先填写 github_actor_id 与 source_event_key')}</span>`; return }
+  if (msg) msg.innerHTML = `<span style="color:#6366f1">${t('签发中…')}</span>`
+  const r = await POST('/contribution-identity/github/claim-challenge', { source_event_key: sek, github_actor_id: actor })
+  if (r?.status === 'issued') {
+    _ghClaimCtx = { challenge_id: r.challenge_id, expires_at: r.expires_at, proof_marker: r.proof_marker, actor, sek }
+    const s2 = document.getElementById('gh-claim-step2'); if (s2) s2.innerHTML = ghClaimStep2Html(_ghClaimCtx)
+    if (msg) msg.innerHTML = `<span style="color:#16a34a">✓ ${t('挑战已签发 — 按第 2 步发布 gist')}</span>`
+    return
+  }
+  if (r?.status === 'already_bound_self') { if (msg) msg.innerHTML = `<span style="color:#16a34a">✓ ${t('该 GitHub 身份已绑定到本账号,无需重复认领')}</span>`; return }
+  // 签发失败 → 清空旧挑战上下文(防止旧 challenge 被误用于新输入)
+  _ghClaimCtx = null
+  const s2f = document.getElementById('gh-claim-step2'); if (s2f) s2f.innerHTML = ''
+  if (msg) msg.innerHTML = `<span style="color:#dc2626">${escHtml(ghClaimErrText(r?.error_code, r?.error))}${r?.error_code ? ` <code style="font-size:10px">[${escHtml(r.error_code)}]</code>` : ''}</span>`
+}
+
+window.ghClaimComplete = async () => {
+  const msg = document.getElementById('gh-claim-msg')
+  const ctx = _ghClaimCtx
+  if (!ctx) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请先生成认领挑战')}</span>`; return }
+  // 输入漂移守卫:签发后若用户改了 actor/source 输入框,旧挑战不再适用 — 清空并要求重新生成,
+  // 防止"以为在认领当前输入的那条"的错觉(服务端本就只认 challenge 绑定的三元组)。
+  const curActor = (document.getElementById('gh-claim-actor')?.value || '').trim()
+  const curSek = (document.getElementById('gh-claim-sek')?.value || '').trim()
+  if (curActor !== ctx.actor || curSek !== ctx.sek) {
+    _ghClaimCtx = null
+    const s2 = document.getElementById('gh-claim-step2'); if (s2) s2.innerHTML = ''
+    if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('输入已更改,与已签发的挑战不一致 — 请重新生成认领挑战')}</span>`
+    return
+  }
+  const gistId = (document.getElementById('gh-claim-gist')?.value || '').trim()
+  if (!gistId) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请填写 gist_id')}</span>`; return }
+  let token
+  try {
+    // purpose_data 必须与服务端校验完全一致:{github_actor_id, source_event_key, challenge_id}
+    token = await requestPasskeyGate('identity_claim', { github_actor_id: ctx.actor, source_event_key: ctx.sek, challenge_id: ctx.challenge_id })
+  } catch (e) {
+    if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('Passkey 验证未完成')}: ${escHtml(e?.message || '')}</span>`
+    return
+  }
+  if (msg) msg.innerHTML = `<span style="color:#6366f1">${t('提交认领…')}</span>`
+  const r = await POST('/contribution-identity/github/claim-complete', {
+    source_event_key: ctx.sek, github_actor_id: ctx.actor,
+    challenge_id: ctx.challenge_id, gist_id: gistId, webauthn_token: token,
+  })
+  if (r?.status === 'claimed' || r?.status === 'already_bound_self') {
+    _ghClaimCtx = null
+    toast$(t('✓ 认领成功 — 贡献事实已归属到本账号'), 'success')
+    renderMyContributions(document.getElementById('app'))   // 刷新归属面 + 建设信誉面板
+    return
+  }
+  if (msg) msg.innerHTML = `<span style="color:#dc2626">${escHtml(ghClaimErrText(r?.error_code, r?.error))}${r?.error_code ? ` <code style="font-size:10px">[${escHtml(r.error_code)}]</code>` : ''}</span>`
+}
+
 // W7 客服 ticket-thread 视图
 const TICKET_TYPE_META = {
   created:       { icon: '🛟', title: '新建工单',   border: '#d97706' },
@@ -10732,7 +11560,63 @@ async function renderSellerAnalytics(app) {
         <div style="font-size:10px;color:#9ca3af">${t('退款')}</div>
       </div>
     </div>
+
+    <div class="card" style="padding:14px;margin-bottom:10px">
+      <div style="font-size:13px;font-weight:600;margin-bottom:8px">⭐ ${t('店铺评价')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('（买家评价 · 每条可回应一次）')}</span></div>
+      <div id="seller-reviews-area" style="font-size:12px;color:#6b7280">${loading$()}</div>
+    </div>
   `, 'me')
+  hydrateSellerReviews()
+}
+
+// 店铺评价汇总 + 逐条回应(P2)。复用既有 POST /orders/:order_id/rating/reply(卖家一回一限);
+// 读 /sellers/me/ratings(authed,含 order_id)。不改评价 / 资金逻辑。
+async function hydrateSellerReviews() {
+  const area = document.getElementById('seller-reviews-area')
+  if (!area) return
+  const r = await GET('/sellers/me/ratings?limit=50').catch(() => null)
+  const items = Array.isArray(r?.items) ? r.items : []
+  if (items.length === 0) { area.innerHTML = `<div style="color:#9ca3af;text-align:center;padding:12px">${t('暂无评价')}</div>`; return }
+  const unreplied = Number(r?.agg?.unreplied || 0)
+  const starStr = (n) => '★'.repeat(Math.max(0, Math.min(5, Number(n) || 0))) + '☆'.repeat(5 - Math.max(0, Math.min(5, Number(n) || 0)))
+  area.innerHTML = `
+    ${unreplied > 0 ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-bottom:8px">📝 ${unreplied} ${t('条评价待回应')}</div>` : ''}
+    ${items.map(it => it.masked ? `
+      <div style="border:1px solid #f3f4f6;border-radius:8px;padding:10px;margin-bottom:8px;background:#fafafa">
+        <div style="display:flex;justify-content:space-between;align-items:center;gap:6px;margin-bottom:4px">
+          <span style="font-size:12px;color:#6b7280">🔒 ${t('评价双盲遮蔽中')}</span>
+          <span style="font-size:10px;color:#9ca3af">${fmtTime(it.created_at)}</span>
+        </div>
+        <div style="font-size:11px;color:#9ca3af;margin-bottom:4px">📦 ${escHtml(it.product_title || '')}</div>
+        <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px">${t('买家已评价，但需你先评价买家，或盲评期结束后才能查看与回应（防互相影响打分）。')}</div>
+      </div>` : `
+      <div style="border:1px solid #f3f4f6;border-radius:8px;padding:10px;margin-bottom:8px">
+        <div style="display:flex;justify-content:space-between;align-items:center;gap:6px;margin-bottom:4px">
+          <span style="color:#f59e0b;font-size:13px">${starStr(it.stars)}</span>
+          <span style="font-size:10px;color:#9ca3af">${fmtTime(it.created_at)}</span>
+        </div>
+        <div style="font-size:11px;color:#6b7280;margin-bottom:4px">@${escHtml(it.buyer_handle || it.buyer_name || '')} · 📦 ${escHtml(it.product_title || '')}</div>
+        ${it.comment ? `<div style="font-size:12px;color:#374151;margin-bottom:6px">${escHtml(it.comment)}</div>` : `<div style="font-size:12px;color:#9ca3af;margin-bottom:6px">${t('买家未留言')}</div>`}
+        ${it.reply ? `<div style="background:#f0f9ff;border-radius:6px;padding:6px 8px;font-size:12px;color:#0369a1"><strong>${t('你的回应')}：</strong>${escHtml(it.reply)}</div>${it.buyer_followup ? `<div style="background:#fafafa;border-radius:6px;padding:6px 8px;font-size:12px;color:#374151;margin-top:4px"><strong>${t('买家追问')}：</strong>${escHtml(it.buyer_followup)}</div>` : ''}` : `
+          <div style="display:flex;gap:6px;align-items:flex-end">
+            <textarea id="rev-reply-${it.order_id}" rows="1" maxlength="500" placeholder="${t('回应这条评价（最多 500 字 · 仅一次）')}" style="flex:1;padding:6px 8px;border:1px solid #d1d5db;border-radius:6px;font-size:12px;resize:none"></textarea>
+            <button class="btn btn-primary btn-sm" style="padding:6px 12px;font-size:11px" onclick="submitSellerReviewReply('${it.order_id}')">${t('回应')}</button>
+          </div>
+          <div id="rev-reply-err-${it.order_id}" style="font-size:11px;color:#dc2626;margin-top:4px"></div>`}
+      </div>`).join('')}
+  `
+}
+
+window.submitSellerReviewReply = async (orderId) => {
+  const ta = document.getElementById('rev-reply-' + orderId)
+  const errEl = document.getElementById('rev-reply-err-' + orderId)
+  const reply = (ta?.value || '').trim()
+  if (errEl) errEl.textContent = ''
+  if (!reply) { if (errEl) errEl.textContent = t('回应不能为空'); return }
+  const res = await POST(`/orders/${orderId}/rating/reply`, { reply })
+  if (res.error) { if (errEl) errEl.textContent = res.error; return }
+  toast$(t('已回应'))
+  hydrateSellerReviews()
 }
 
 window.switchAnalyticsWindow = (days) => {
@@ -10808,15 +11692,17 @@ async function renderReturnsCenter(app) {
 }
 
 // L3 Phase 2：卖家确认收到退货 → 触发退款
-window.confirmReturnReceived = async (id) => {
+// orderId 可选:从订单详情内联调用时传入 → 处理完回到订单详情(否则回退货中心)
+window.confirmReturnReceived = async (id, orderId) => {
   if (!confirm(t('确认已收到退货商品？此操作将触发退款（不可撤销）'))) return
   const r = await POST(`/return-requests/${id}/received`, {})
   if (r.error) { toast$(r.error, 'error'); return }
   toast$(t('已退款 · 退货完成'))
-  renderReturnsCenter(document.getElementById('app'))
+  if (orderId) renderOrderDetail(document.getElementById('app'), orderId)
+  else renderReturnsCenter(document.getElementById('app'))
 }
 
-window.decideReturn = (id, decision) => {
+window.decideReturn = (id, decision, orderId) => {
   const isAccept = decision === 'accept'
   const title = isAccept ? `✓ ${t('确认接受退款')}` : `✗ ${t('拒绝退货')}`
   const hint = isAccept
@@ -10835,7 +11721,7 @@ window.decideReturn = (id, decision) => {
         <div id="ret-decide-msg" style="margin:8px 0"></div>
         <div style="display:flex;gap:8px;margin-top:12px">
           <button class="btn btn-gray" style="flex:1" onclick="this.closest('[style*=position]').remove()">${t('取消')}</button>
-          <button class="btn ${isAccept ? 'btn-success' : 'btn-primary'}" style="flex:1" onclick="confirmDecideReturn('${id}','${decision}')">${isAccept ? t('接受退款') : t('拒绝')}</button>
+          <button class="btn ${isAccept ? 'btn-success' : 'btn-primary'}" style="flex:1" onclick="confirmDecideReturn('${id}','${decision}','${orderId || ''}')">${isAccept ? t('接受退款') : t('拒绝')}</button>
         </div>
       </div>
     </div>
@@ -10845,7 +11731,7 @@ window.decideReturn = (id, decision) => {
   document.body.appendChild(div.firstElementChild)
 }
 
-window.confirmDecideReturn = async (id, decision) => {
+window.confirmDecideReturn = async (id, decision, orderId) => {
   const response = document.getElementById('ret-decide-text').value.trim()
   const msg = document.getElementById('ret-decide-msg')
   if (decision === 'reject' && !response) {
@@ -10856,7 +11742,8 @@ window.confirmDecideReturn = async (id, decision) => {
   if (res.error) { msg.innerHTML = alert$('error', res.error); return }
   document.querySelector('.js-modal')?.remove()
   toast$(t('已处理'))
-  renderReturnsCenter(document.getElementById('app'))
+  if (orderId) renderOrderDetail(document.getElementById('app'), orderId)
+  else renderReturnsCenter(document.getElementById('app'))
 }
 
 window.sharePromoLink = async (productId, title) => {
@@ -10867,13 +11754,13 @@ window.sharePromoLink = async (productId, title) => {
     if (res.error === 'rewards_opt_in_required') {
       const msg = (window._lang === 'en' ? res.message_en : res.message_zh) || res.message_zh || res.error
       const missing = Array.isArray(res.missing_requirements) ? `\n\n${t('待补')}: ${res.missing_requirements.join(', ')}` : ''
-      return alert(`⚠ ${msg}${missing}\n\n${t('前往 #me 申请共建身份')}`)
+      return alert(`⚠ ${msg}${missing}\n\n${t('前往 #me 申请分享分润')}`)
     }
     return alert(`⚠ ${res.error}${res.completed_orders === 0 ? '\n' + t('完成该商品的购买后再分享') : ''}`)
   }
   const link = `${location.origin}${res.short_url}`
   const meName = state.user.name || ''
-  const text = `${t('我在 WebAZ 看上「')}${title}${t('」，AI 比价 + 双激励分享')}\n— ${meName}`
+  const text = `${t('我在 WebAZ 看上「')}${title}${t('」，用 AI 比价，体验不错')}\n— ${meName}`
   const r = await webShareOrCopy({ title: 'WebAZ — ' + title, text, url: link })
   if (r === 'shared') toast$(t('已分享'))
   else if (r === 'copied') toast$(t('已复制（含商品文案 + 链接）') + (res.reused ? '' : ' · ' + t('已自动加入「我的分享」')))
@@ -11487,29 +12374,8 @@ async function syncPlacementPref() {
   } catch {}
 }
 
-// 仅平台分享（不绑 sponsor，只建 PV 条线）
-// P-Polish 3：点击左/右区推荐码卡片复制（替代旧 alert 体验）
-window.copyPlacementLink = async (link, side, el) => {
-  const ok = await copyText(link)
-  if (ok) {
-    toast$((side === 'left' ? '🔵 ' : '🟢 ') + t('推荐码已复制'))
-    if (el) {
-      const orig = el.style.background
-      el.style.background = side === 'left' ? '#bfdbfe' : '#bbf7d0'
-      setTimeout(() => { el.style.background = orig }, 600)
-    }
-  } else {
-    prompt(t('请手动复制'), link)
-  }
-}
-
-// 兼容：旧调用点保留
-window.sharePlatformLink = (side) => {
-  if (!state.user?.id) return alert(t('请先登录'))
-  if (side !== 'left' && side !== 'right') return
-  const link = `${location.origin}/?placement=${state.user.id}&side=${side}`
-  copyPlacementLink(link, side, null)
-}
+// pre-public 去左右码:copyPlacementLink / sharePlatformLink(生成 /i/CODE-L|R 侧链)已移除 —
+// 统一用唯一推荐码 copyRefLink('/i/CODE'),放置侧别由系统自动决定。
 
 function renderRecover(app) {
   app.innerHTML = `
@@ -11521,8 +12387,8 @@ function renderRecover(app) {
 
       <div id="rec-step1">
         <div class="form-group">
-          <label class="form-label">${t('注册时使用的名称')}</label>
-          <input class="form-control" id="rec-name" placeholder="${t('例：陈小明')}">
+          <label class="form-label">${t('名称或 @用户名')}</label>
+          <input class="form-control" id="rec-name" placeholder="${t('例：陈小明 或 @chenxiaoming')}">
         </div>
         <div class="form-group">
           <label class="form-label">${t('绑定的邮箱')}</label>
@@ -11536,7 +12402,11 @@ function renderRecover(app) {
         <div class="form-group">
           <input class="form-control" id="rec-code" placeholder="${t('6 位验证码')}" maxlength="6">
         </div>
-        <button class="btn btn-primary" onclick="doRecoverConfirm()">${t('验证并找回密钥')}</button>
+        <div class="form-group">
+          <label class="form-label">${t('设置新登录密码')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('(可选 · 至少 8 位 · 留空则只找回 API Key)')}</span></label>
+          <input class="form-control" id="rec-newpw" type="password" placeholder="${t('新密码（至少 8 位）')}" autocomplete="new-password" maxlength="200">
+        </div>
+        <button class="btn btn-primary" onclick="doRecoverConfirm()">${t('验证并找回')}</button>
         <button class="btn btn-outline" onclick="recoverBackToStep1()" style="margin-left:8px">${t('重新开始')}</button>
       </div>
 
@@ -11576,13 +12446,15 @@ window.doRecoverConfirm = async () => {
   const name    = codeInp?.dataset?.name
   const email   = codeInp?.dataset?.email
   const code    = codeInp?.value?.trim()
+  const newpw   = document.getElementById('rec-newpw')?.value || ''
   const result  = document.getElementById('rec-result')
   if (!code) { result.innerHTML = alert$('error', t('请填写验证码')); return }
+  if (newpw && newpw.length < 8) { result.innerHTML = alert$('error', t('新密码至少 8 字符')); return }
   result.innerHTML = loading$()
-  const res = await api('POST', '/recover-key/confirm', { name, email, code })
+  const res = await api('POST', '/recover-key/confirm', { name, email, code, ...(newpw ? { new_password: newpw } : {}) })
   if (res.error) { result.innerHTML = alert$('error', res.error); return }
   result.innerHTML = `
-    <div class="alert alert-success" style="font-size:13px">${t('✓ 找回成功')}</div>
+    <div class="alert alert-success" style="font-size:13px">${res.password_reset ? t('✓ 找回成功 · 新密码已设置') : t('✓ 找回成功')}</div>
     <div style="background:#f3f4f6;border-radius:8px;padding:12px;margin-top:10px">
       <div style="font-size:12px;color:#6b7280;margin-bottom:6px">${t('你的 API Key')}</div>
       <code style="font-size:13px;word-break:break-all">${res.api_key}</code>
@@ -11590,6 +12462,7 @@ window.doRecoverConfirm = async () => {
         <button class="btn btn-outline btn-sm" onclick="copyApiKey('${res.api_key}')">${t('复制')}</button>
         <button class="btn btn-primary btn-sm" onclick="useKey('${res.api_key}')">${t('立即登录')}</button>
       </div>
+      <div style="font-size:11px;color:#b91c1c;margin-top:10px;line-height:1.5">⚠️ ${t('仅在私密设备打开;不要截图、转发或发送给任何人。')}</div>
     </div>`
 }
 
@@ -11655,6 +12528,7 @@ window.doLogin = async () => {
   await persistApiKey(key)
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-28 修：登录 sheet 是 .js-sheet（openSheet 建），之前只删 .js-modal → 登录成功后窗口不消失
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
   navigateIntended(roleHome(user.role))
@@ -11681,6 +12555,7 @@ window.doLoginByPassword = async () => {
   else state.user = { id: res.user_id, name: res.name, role: res.role }
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-28 修：同 doLogin — 关 .js-sheet 登录窗口
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
   navigateIntended(roleHome(res.role))
@@ -11688,46 +12563,50 @@ window.doLoginByPassword = async () => {
 
 
 // 从 URL 解析分享 hint（30 天 cookie 持久化）
-//   ?ref=usr_xxx                          → 仅三级佣金 sponsor
-//   ?placement=usr_xxx&side=left|right    → 仅积分挂靠
-//   ?ref=xxx&side=left|right              → 两轨道（ref 同时作 placement）
-//   ?ref=xxx&placement=xxx&side=...       → 显式两轨道
+//   ?ref=CODE                  → 三级佣金 sponsor(同时作 placement inviter)
+//   ?placement=CODE            → 仅积分挂靠
+//   pre-public 去左右码:不再解析 side / -L/-R 侧别,放置侧别由注册时系统自动决定。
 function readShareHint() {
   const params = new URLSearchParams(location.search)
   let urlRef    = params.get('ref')
   let urlPlace  = params.get('placement')
-  let urlSide   = params.get('side')
-  // 兼容 ref/placement 带 -L/-R 后缀：自动剥离并填入 side（用户手工粘 VKSF9P-L 时也工作）
-  const stripSide = (v) => {
-    if (!v) return [v, null]
-    const m = v.match(/^(.+?)-([lLrR])$/)
-    return m ? [m[1], m[2].toLowerCase() === 'l' ? 'left' : 'right'] : [v, null]
-  }
-  let extraSide = null
-  ;[urlRef,   extraSide] = stripSide(urlRef)
-  if (!extraSide) [urlPlace, extraSide] = stripSide(urlPlace)
-  if (!urlSide && extraSide) urlSide = extraSide
-  // ref / placement 接受三态：usr_xxx / VKSF9P (permanent_code 6-7 大写字母数字) / @handle 或 handle
-  const refPattern   = /^(usr_[A-Za-z0-9_]+|[A-Z0-9]{6,7}|@?[a-z0-9._]{3,20})$/
+  // pre-public 去左右码:兼容旧的 -L/-R 后缀但只做归一化(剥离回基础码),不再提取/存储 side。
+  // 放置侧别由注册时系统自动决定。
+  const stripSide = (v) => (v ? v.replace(/-[lLrR]$/, '') : v)
+  urlRef   = stripSide(urlRef)
+  urlPlace = stripSide(urlPlace)
+  // ref / placement 仅接受邀请码(6-7 位永久码)。usr_xxx / @handle / 裸 handle 不再作为邀请引用 —
+  // 收窄公开邀请面,消除歧义(权威由服务端 resolveInviteCodeRef 二次校验)。
+  const refPattern   = /^[A-Za-z0-9]{6,7}$/
   const validRef  = urlRef   && refPattern.test(urlRef)
   const validPlace= urlPlace && refPattern.test(urlPlace)
   if (validRef || validPlace) {
-    const side = (urlSide === 'left' || urlSide === 'right') ? urlSide : null
     const obj = {
       sponsor_id:           validRef ? urlRef : null,
-      placement_inviter_id: validPlace ? urlPlace : (side && validRef ? urlRef : null),
-      placement_side:       side,
+      placement_inviter_id: validPlace ? urlPlace : null,
       expiry: Date.now() + 30 * 86400_000,
     }
     localStorage.setItem('webaz_share_hint', JSON.stringify(obj))
     return obj
   }
+  // 旧 localStorage hint 里的 sponsor_id / placement_inviter_id 若是 usr_xxx / @handle / 裸 handle(非邀请码),
+  // 注册时不再使用 —— 清掉非码引用,只保留合法邀请码。
+  const okCode = (v) => typeof v === 'string' && /^[A-Za-z0-9]{6,7}$/.test(v)
+  const sanitizeHint = (o) => {
+    if (!o || typeof o !== 'object') return null
+    if (o.sponsor_id && !okCode(o.sponsor_id)) o.sponsor_id = null
+    if (o.placement_inviter_id && !okCode(o.placement_inviter_id)) o.placement_inviter_id = null
+    return (o.sponsor_id || o.placement_inviter_id) ? o : null
+  }
   try {
     const raw = localStorage.getItem('webaz_share_hint')
     if (raw) {
       const obj = JSON.parse(raw)
-      if (obj.expiry > Date.now()) return obj
-      localStorage.removeItem('webaz_share_hint')
+      if (obj.expiry > Date.now()) {
+        const clean = sanitizeHint(obj)
+        if (clean) return clean
+      }
+      localStorage.removeItem('webaz_share_hint')   // expired or non-code → drop
     }
   } catch {}
   // 向后兼容：旧 'webaz_ref' 格式
@@ -11735,13 +12614,12 @@ function readShareHint() {
     const old = localStorage.getItem('webaz_ref')
     if (old) {
       const o = JSON.parse(old)
-      if (o.expiry > Date.now()) return {
+      if (o.expiry > Date.now() && okCode(o.ref)) return {
         sponsor_id: o.ref || null,
-        placement_inviter_id: o.side ? o.ref : null,
-        placement_side: o.side || null,
+        placement_inviter_id: null,
         expiry: o.expiry,
       }
-      localStorage.removeItem('webaz_ref')
+      localStorage.removeItem('webaz_ref')   // expired or non-code → drop
     }
   } catch {}
   return null
@@ -11787,6 +12665,24 @@ async function maybeClaimPendingProductShare() {
   writeShareCtx({ pending_share_id: null })
 }
 
+// 店铺推荐锚定:从 ?ref=CODE + #shop/<seller> 进来时 ShareCtx 暂存 pending_shop_referral,
+// 登录/注册后调一次 touch 落库(first-touch 30 天锁)。只锚定推荐关系,不是全店佣金权。
+async function maybeClaimPendingShopReferral() {
+  if (!state.user?.id) return
+  const ctx = readShareCtx()
+  const p = ctx?.pending_shop_referral
+  if (!p) return
+  // 只接受邀请码形态;旧 localStorage 里的 usr_xxx / @handle 残留 → 直接清理不发送
+  if (!p.ref_code || !/^[A-Za-z0-9]{6,7}$/.test(p.ref_code) || !p.seller_identifier) {
+    writeShareCtx({ pending_shop_referral: null }); return
+  }
+  try {
+    await POST('/shop-referral/touch', { seller_identifier: p.seller_identifier, ref_code: p.ref_code })
+    // 任何已送达的响应(成功 / self-skip / already_locked / typed 错误)都清;仅网络异常保留待重试
+    writeShareCtx({ pending_shop_referral: null })
+  } catch {}
+}
+
 // 还原意图 hash（注册/登录后调用，没意图就走 fallback）
 function navigateIntended(fallback) {
   const intended = sessionStorage.getItem('webaz_intended_hash')
@@ -11825,7 +12721,7 @@ function renderShareBanner(variant) {
       <div id="share-banner-hero" style="background:linear-gradient(135deg,#eef2ff,#fce7f3);border:1px solid #c7d2fe;border-radius:12px;padding:14px 16px;margin-bottom:14px">
         <div style="font-size:13px;color:#3730a3;font-weight:600;margin-bottom:4px">👋 ${t('你被')} <strong>${escHtml(name)}</strong> ${t('邀请来 WebAZ')}</div>
         ${tgtLine ? `<div style="font-size:12px;color:#374151;line-height:1.6;margin-top:6px">${tgtLine}</div>` : ''}
-        <div style="font-size:11px;color:#6366f1;margin-top:8px">${t('注册即拿邀请奖励，TA 也得分润 — 双方共赢')}</div>
+        <div style="font-size:11px;color:#6366f1;margin-top:8px">${t('通过邀请进入会记录归因;分享分润需登录后单独申请。')}</div>
       </div>`
   }
   // compact
@@ -11910,7 +12806,6 @@ async function initShareCtx() {
   if (hint?.sponsor_id && !ctx?.sponsor_id) patch.sponsor_id = hint.sponsor_id
   if (hint?.placement_inviter_id && !ctx?.placement_inviter_id) {
     patch.placement_inviter_id = hint.placement_inviter_id
-    patch.placement_side = hint.placement_side
   }
   if (fromHash && !ctx?.target_hash) patch.target_hash = fromHash
 
@@ -11920,6 +12815,15 @@ async function initShareCtx() {
     patch.pending_share_id = urlShareId
   }
 
+  // 店铺推荐:?ref=CODE + #shop/<seller> → 暂存待登录后 touch(只锚定推荐关系,非全店佣金权)。
+  // hint.sponsor_id 已由 readShareHint 收窄为邀请码(-L/-R 已归一化为基础码),usr_xxx/@handle 进不来。
+  if (hint?.sponsor_id && fromHash && fromHash.startsWith('#shop/') && !ctx?.pending_shop_referral) {
+    const sellerIdent = fromHash.slice('#shop/'.length).split('?')[0].trim()
+    if (sellerIdent && sellerIdent !== 'agent') {
+      patch.pending_shop_referral = { seller_identifier: sellerIdent, ref_code: hint.sponsor_id }
+    }
+  }
+
   if (Object.keys(patch).length > 0 || !ctx) {
     ctx = writeShareCtx(patch)
   }
@@ -11933,6 +12837,10 @@ async function initShareCtx() {
     // 不论成功失败都清掉 pending（避免重复尝试）
     writeShareCtx({ pending_share_id: null })
   }
+  // 已登录 + 有待锚定店铺推荐 → 立即 touch(网络失败保留待下次)
+  if (state.user?.id && ctx.pending_shop_referral) {
+    await maybeClaimPendingShopReferral()
+  }
 
   // Enrich：并发 fetch sponsor 公开卡 + target 预览（阻塞返回，确保 banner 渲染时数据齐）
   // 2026-05-31 修:每个 fetch 加 AbortSignal.timeout(5000),防 boot 阶段任一 fetch hang
@@ -12002,11 +12910,47 @@ window._mountTurnstileIfEnabled = async () => {
   } catch { /* 加载失败不阻塞 dev */ }
 }
 
+// 注册邮箱验证:发码。成功后展开验证码输入框。
+window._regCodeSent = false
+window._onRegEmailInput = () => {
+  // 邮箱改了就要求重新发码(旧码对不上新邮箱)
+  window._regCodeSent = false
+  const row = document.getElementById('reg-code-row')
+  if (row) row.style.display = 'none'
+}
+window.doRegSendCode = async () => {
+  const email = document.getElementById('inp-reg-email')?.value?.trim()
+  const btn = document.getElementById('btn-reg-sendcode')
+  if (!email || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) return showMsg('error', t('请填写有效邮箱'))
+  if (btn) { btn.disabled = true; btn.textContent = t('发送中...') }
+  const res = await POST('/register/send-code', { email })
+  if (res.error) {
+    if (btn) { btn.disabled = false; btn.textContent = t('发送验证码') }
+    return showMsg('error', res.error)
+  }
+  window._regCodeSent = true
+  const row = document.getElementById('reg-code-row')
+  if (row) row.style.display = ''
+  // 60s 冷却
+  let left = 60
+  if (btn) {
+    btn.disabled = true
+    const tick = () => { if (left <= 0) { btn.disabled = false; btn.textContent = t('重新发送'); return } btn.textContent = left + 's'; left--; setTimeout(tick, 1000) }
+    tick()
+  }
+  showMsg('success', t('验证码已发送至邮箱，请查收'))
+}
+
 window.doRegister = async () => {
   const name = document.getElementById('inp-name').value.trim()
   const role = document.getElementById('inp-role').value
   const region = document.getElementById('inp-region')?.value || ''
   const sponsorInput = document.getElementById('inp-sponsor')?.value?.trim() || ''
+  const email = document.getElementById('inp-reg-email')?.value?.trim() || ''
+  const code = document.getElementById('inp-reg-code')?.value?.trim() || ''
+  if (!email) return showMsg('error', t('请填写找回邮箱'))
+  if (!window._regCodeSent) return showMsg('error', t('请先点"发送验证码"并验证邮箱'))
+  if (!code) return showMsg('error', t('请输入邮箱验证码'))
   if (!name) return showMsg('error', t('请填写名称'))
   if (!region) return showMsg('error', t('请选择国家 / 地区'))
   // A3 软 gate：sponsor_id 视觉必填但允许空（后端按 require_ref_to_register 系统设置裁决）
@@ -12014,13 +12958,12 @@ window.doRegister = async () => {
     if (!confirm(t('没有填写邀请码 — 你将绑定到平台公库（推荐找老用户拿邀请链接）\n\n确认继续？'))) return
   }
   const hint = readShareHint()
-  const body = { name, role, region }
+  const body = { name, role, region, email, code }
   // 优先 input 值，回退 URL hint
   const sponsorFinal = sponsorInput || hint?.sponsor_id
   if (sponsorFinal) body.sponsor_id = sponsorFinal
-  if (hint?.placement_inviter_id && hint?.placement_side) {
+  if (hint?.placement_inviter_id) {
     body.placement_inviter_id = hint.placement_inviter_id
-    body.placement_side       = hint.placement_side
   }
   // #1049 Turnstile token(若启用)
   if (window._turnstileToken) body.turnstile_token = window._turnstileToken
@@ -12045,6 +12988,7 @@ window.doRegister = async () => {
   await persistApiKey(res.api_key)
   connectSSE()
   maybeClaimPendingProductShare()
+  maybeClaimPendingShopReferral()
   // 2026-05-24 修：关闭 auth sheet，再开成功 modal（避免堆叠）
   // 2026-05-28 修：auth sheet 是 .js-sheet（openSheet 建），需一并删除
   try { document.querySelectorAll('.js-modal, .js-sheet').forEach(m => m.remove()) } catch {}
@@ -12062,41 +13006,91 @@ function showRegisterSuccessModal(res) {
   // P1 (QA 轮 14.a): 区分"邀请人"(referral sponsor) 与"积分树挂靠"(binary placement)
   // 旧版挤一行 "已绑定邀请人 X · 左区 depth N" → 用户误以为 depth 是相对邀请人
   const placementLine = res.placement
-    ? `<div style="font-size:11px;color:#9ca3af;margin-bottom:14px">${t('积分树挂靠')}: ${res.placement.side === 'left' ? '🔵 ' + t('左区') : '🟢 ' + t('右区')} · ${t('深度')} ${res.placement.depth}<br><span style="font-size:10px">${t('（挂靠位置由系统按弱区自动决定，与邀请人不一定相邻）')}</span></div>`
+    ? `<div style="font-size:11px;color:#9ca3af;margin-bottom:14px">${t('积分树挂靠')}: ${res.placement.side === 'left' ? '🔵 ' + t('左区') : '🟢 ' + t('右区')} · ${t('深度')} ${res.placement.depth}<br><span style="font-size:10px">${t('积分树挂靠为系统内部记录，不代表收益权或兑付承诺。')}</span></div>`
     : ''
   _openModal(`
     <h2 style="font-size:18px;font-weight:600;margin-bottom:8px;color:#16a34a">🎉 ${t('注册成功！')}</h2>
     ${res.sponsor_id && ctx?.sponsor_name ? `<div style="font-size:12px;color:#6366f1;margin-bottom:6px">${t('邀请人')}: <strong>${escHtml(ctx.sponsor_name)}</strong></div>` : ''}
     ${placementLine}
 
-    <div style="background:#fef3c7;border:1px solid #fde68a;border-radius:8px;padding:10px 12px;margin-bottom:14px">
-      <div style="font-size:12px;color:#92400e;font-weight:600;margin-bottom:6px">⚠️ ${t('立即保存你的 API Key')}</div>
-      <div style="font-size:11px;color:#78350f;margin-bottom:6px">${t('这是你的唯一登录凭证。丢了只能通过绑定邮箱找回。')}</div>
+    <div style="background:#fef3c7;border:1px solid #fde68a;border-radius:8px;padding:10px 12px;margin-bottom:12px">
+      <div style="font-size:12px;color:#92400e;font-weight:600;margin-bottom:6px">⚠️ ${t('立即保存你的 API Key（登录凭证）')}</div>
       <div style="display:flex;gap:6px;align-items:center">
         <code id="reg-apikey-display" style="font-size:12px;background:#fff;padding:6px 10px;border-radius:6px;flex:1;word-break:break-all;border:1px solid #fde68a">${res.api_key}</code>
-        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;white-space:nowrap" onclick="copyText('${res.api_key}').then(ok=>toast$(ok?'${t('已复制')}':'${t('复制失败，请手动复制')}',ok?'success':'error'))">${t('复制')}</button>
+      </div>
+      <div style="display:flex;gap:6px;margin-top:8px">
+        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;flex:1" onclick="window._regMarkSaved();copyText('${res.api_key}').then(ok=>toast$(ok?'${t('已复制')}':'${t('复制失败，请手动复制')}',ok?'success':'error'))">📋 ${t('复制 Key')}</button>
+        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;flex:1" onclick="window._downloadCredBackup()">⬇️ ${t('下载备份 .txt')}</button>
       </div>
     </div>
 
-    <div style="font-size:13px;color:#374151;font-weight:600;margin-bottom:6px">${t('完成 4 步开始使用')}</div>
-    <div style="background:#f9fafb;border-radius:8px;padding:6px 10px;margin-bottom:12px;font-size:12px;line-height:1.8">
-      ☐ ${t('设置默认配送地址（智能下单需要）')}<br>
-      ☐ ${t('设置登录密码（备用凭证，可选）')}<br>
-      ☐ ${t('完成首笔购买，解锁分享奖励')}<br>
-      ☐ ${t('🔐 绑定 Passkey — 强烈推荐，大额提现自动启用，防账号被盗')}
+    <div style="font-size:13px;color:#374151;font-weight:600;margin-bottom:6px">${t('保存凭证检查清单')}</div>
+    <div style="background:#f9fafb;border-radius:8px;padding:8px 10px;margin-bottom:8px;font-size:12px;line-height:1.9">
+      <div id="reg-chk-save">☐ ${t('复制 API Key 或下载备份文件')}</div>
+      <div>✅ ${t('已验证找回邮箱')}：${escHtml(res.email || '')}</div>
+      <div>☐ ${t('设置登录密码（备用凭证）')}</div>
+      <div>☐ ${t('🔐 绑定 Passkey — 大额提现自动启用，防账号被盗')}</div>
+    </div>
+    <div style="font-size:11px;color:#6b7280;line-height:1.6;margin-bottom:12px">
+      ${t('邮箱已验证：可用于找回账号或重置登录密码。API Key 仍是主要身份凭证，强烈建议保存；Passkey 是增强保护，不替代恢复邮箱。')}
     </div>
 
     ${targetBtn}
     <button class="btn btn-primary" style="width:100%;margin-bottom:8px;background:linear-gradient(135deg,#7c3aed,#6d28d9);border-color:transparent" onclick="window._closeRegModal('passkey')">🔐 ${t('立即绑定 Passkey（强烈推荐）')}</button>
-    <button class="btn btn-outline" style="width:100%;margin-bottom:8px" onclick="window._closeRegModal('profile')">⚙️ ${t('先去填资料')}</button>
-    <button class="btn btn-outline" style="width:100%" onclick="window._closeRegModal(false)">${t('稍后再说，先逛逛')}</button>
+    <button class="btn btn-outline" style="width:100%;margin-bottom:8px" onclick="window._closeRegModal('password')">🔑 ${t('设置登录密码')}</button>
+    <button id="reg-skip-btn" class="btn btn-outline btn-sm" style="width:100%;color:#9ca3af;font-size:12px" onclick="window._closeRegModal(false)">${t('稍后再说，先逛逛')}</button>
   `)
+  // 凭证保存状态:复制或下载前,"稍后"按钮弱化 + 强提示。
+  window._regSaved = false
+  window._regMarkSaved = () => {
+    window._regSaved = true
+    const chk = document.getElementById('reg-chk-save')
+    if (chk) { chk.innerHTML = '✅ ' + t('复制 API Key 或下载备份文件'); chk.style.color = '#16a34a' }
+    const skip = document.getElementById('reg-skip-btn')
+    if (skip) skip.style.color = ''
+  }
+  window._downloadCredBackup = () => {
+    try {
+      const lines = [
+        'WebAZ 账户备份 / Account Backup',
+        '================================',
+        `${t('名称')} / Name: ${res.name || ''}`,
+        `Handle: @${res.handle || ''}`,
+        `${t('角色')} / Role: ${res.role || ''}`,
+        `${t('找回邮箱')} / Recovery email: ${res.email || ''}`,
+        `${t('注册时间')} / Registered: ${new Date().toISOString()}`,
+        '--------------------------------',
+        'API Key (登录凭证 / login credential):',
+        res.api_key || '',
+        '--------------------------------',
+        '⚠️ 这是你的登录凭证，等同密码。妥善保管，不要截图分享或发给任何人。',
+        '⚠️ This is your login credential (equivalent to a password). Keep it private — do not screenshot, forward, or share it.',
+        '丢失 API Key 可用上面的找回邮箱在 https://webaz.xyz/#recover 重置（也可重置登录密码）。',
+        'Lost your API Key? Reset it (and your password) with the recovery email above at https://webaz.xyz/#recover',
+      ]
+      const blob = new Blob([lines.join('\n')], { type: 'text/plain;charset=utf-8' })
+      const url = URL.createObjectURL(blob)
+      const a = document.createElement('a')
+      a.href = url
+      a.download = `webaz-backup-${(res.handle || res.user_id || 'account')}.txt`
+      document.body.appendChild(a); a.click(); a.remove()
+      setTimeout(() => URL.revokeObjectURL(url), 2000)
+      window._regMarkSaved()
+      toast$(t('备份已下载'), 'success')
+    } catch (e) {
+      toast$(t('下载失败，请改用复制'), 'error')
+    }
+  }
   window._closeRegModal = (action) => {
+    // 复制/下载前点"稍后" → 强提示(已绑邮箱可找回,但仍建议先存 key)
+    if (action === false && !window._regSaved) {
+      if (!confirm(t('你还没复制 API Key 或下载备份。\n虽然已绑定找回邮箱（丢号可重置），仍强烈建议先保存 Key。\n\n确定先逛逛？'))) return
+    }
     closeModal()
     if (action === true) {
       // 跳 intended_hash
       navigateIntended(roleHome(res.role))
-    } else if (action === 'profile') {
+    } else if (action === 'password' || action === 'profile') {
       sessionStorage.removeItem('webaz_intended_hash')
       location.hash = '#me/settings'
     } else if (action === 'passkey') {
@@ -13226,8 +14220,8 @@ async function renderFeedView() {
       const amount = Number(extra.amount || 0).toFixed(2)
       body = `${actor} ${t('因推广')} <a href="#order-product/${e.product_id}" style="color:#111">${escHtml(e.product_title)}</a> ${t('获得 L')}${extra.level} ${t('佣金')} <strong style="color:#059669">+${amount} WAZ</strong>`
     } else if (e.kind === 'join_binary') {
-      const side = extra.placement_side === 'left' ? '🔵 左区' : '🟢 右区'
-      body = `${actor} ${t('加入了')} ${escHtml(extra.placement_name || '—')} ${t('的')} ${side}`
+      // pre-public 去左右码:活动流不再广播左/右区,只显示加入了某人的积分树
+      body = `${actor} ${t('加入了')} ${escHtml(extra.placement_name || '—')} ${t('的积分树')}`
     }
     const icon = e.kind === 'purchase' ? '🛒' : e.kind === 'commission' ? '💰' : '⚛'
     return `<div class="card" style="margin-bottom:8px;padding:10px 12px;display:flex;gap:10px;align-items:flex-start">
@@ -18325,20 +19319,21 @@ window.setSellerSubTab = (k) => {
 // C-4: 批量发货 modal
 window.openBatchShipModal = async (ids) => {
   if (!Array.isArray(ids) || ids.length === 0) return
-  // 拉物流公司
+  // 拉物流公司(可空:自发货不需要物流方)
   const lc = await GET('/logistics/companies').catch(() => [])
   const companies = Array.isArray(lc) ? lc : []
-  if (companies.length === 0) { alert(t('暂无可用物流公司')); return }
   const html = `
     <div class="js-modal" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
       <div style="background:#fff;width:100%;max-width:560px;border-radius:16px 16px 0 0;padding:20px;max-height:80vh;overflow-y:auto" onclick="event.stopPropagation()">
         <h2 style="font-size:16px;font-weight:700;margin-bottom:8px">📦 ${t('批量发货')}</h2>
         <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('将')} <strong>${ids.length}</strong> ${t('个订单一次性标记为已发货')}</div>
         <div class="form-group">
-          <label class="form-label">${t('物流公司')} *</label>
+          <label class="form-label">${t('发货方式')}</label>
           <select class="form-control" id="bs-logistics">
+            <option value="self">${t('📦 我自己发货（自提自送）')}</option>
             ${companies.map(c => `<option value="${escHtml(c.id)}">${escHtml(c.name)}</option>`).join('')}
           </select>
+          <div style="font-size:11px;color:#92400e;margin-top:6px;line-height:1.5">${t('自己发货：你负责揽收 / 运输 / 送达,超时或虚假发货仍按卖家责任处理。选物流公司则由物流方流转。')}</div>
         </div>
         <div style="font-size:11px;color:#9ca3af;margin-bottom:8px">${t('快递单号可发货后单独补填，或先填部分')}</div>
         <div id="bs-msg" style="margin:8px 0"></div>
@@ -18355,10 +19350,12 @@ window.openBatchShipModal = async (ids) => {
 }
 
 window.submitBatchShip = async (ids) => {
-  const logistics_company_id = document.getElementById('bs-logistics').value
+  const choice = document.getElementById('bs-logistics').value
   const msg = document.getElementById('bs-msg')
   msg.innerHTML = loading$()
-  const res = await POST('/orders/batch-ship', { order_ids: ids, logistics_company_id })
+  // 自发货:不传 logistics_company_id(后端保持 logistics_id 空 → seller self-fulfill)
+  const body = (choice && choice !== 'self') ? { order_ids: ids, logistics_company_id: choice } : { order_ids: ids }
+  const res = await POST('/orders/batch-ship', body)
   if (res.error) { msg.innerHTML = alert$('error', res.error); return }
   document.querySelector('.js-modal')?.remove()
   toast$(`${t('已发货')} ${res.shipped} / ${ids.length}`)
@@ -19288,6 +20285,7 @@ async function renderOrderDetail(app, orderId) {
 
     <div id="action-area">
       ${actions ? renderActions(orderId, actions, order, logisticsCompanies) : ''}
+      ${sellerDeclineContestPanel(order, orderId, isSeller)}
     </div>
 
     ${(isBuyer && order.status === 'completed' && product?.id) ? `
@@ -19309,6 +20307,12 @@ async function renderOrderDetail(app, orderId) {
       <div id="ret-area-${order.id}" style="font-size:12px;color:#6b7280">${loading$()}</div>
     </div>` : ''}
 
+    ${(isSeller && order.status === 'completed') ? `
+    <div class="card" id="ret-card-${order.id}">
+      <div style="font-size:14px;font-weight:600;margin-bottom:6px">↩ ${t('退货处理')}</div>
+      <div id="ret-area-${order.id}" style="font-size:12px;color:#6b7280">${loading$()}</div>
+    </div>` : ''}
+
     ${((isBuyer || isSeller) && order.status === 'completed') ? `
     <div class="card" id="rate-card-${order.id}">
       <div style="font-size:14px;font-weight:600;margin-bottom:6px">⭐ ${t('交易评价')}</div>
@@ -19333,7 +20337,8 @@ async function renderOrderDetail(app, orderId) {
   `, 'orders')
 
   // Wave B-3: 退货 widget — 异步加载（仅 completed 订单可退）
-  if (isBuyer && order.status === 'completed' && Number(product?.return_days || 0) > 0) {
+  // 买家:有退货窗口可申请/查看;卖家:有退货申请时内联查看+处理(accept/reject/received),无申请则隐藏卡
+  if (((isBuyer && Number(product?.return_days || 0) > 0) || isSeller) && order.status === 'completed') {
     try { await renderReturnWidgetForOrder(order, product) } catch (e) { console.error(e) }
   }
   // Wave C-3: 评价 widget
@@ -19779,7 +20784,13 @@ async function renderReturnWidgetForOrder(order, product) {
   // P1-5: 订单级直查（取代拉全量列表过滤）
   const r = await GET(`/orders/${order.id}/return-request`).catch(() => ({ item: null }))
   const mine = r?.item || null
-  const returnDays = Number(product.return_days || 0)
+  const isSellerView = state.user && state.user.id === order.seller_id
+  // 卖家视角:无退货申请则隐藏整张卡(卖家不申请退货,只在有申请时处理)
+  if (isSellerView && !mine) {
+    const card = area.closest('.card'); if (card) card.style.display = 'none'
+    return
+  }
+  const returnDays = Number(product?.return_days || 0)
   const baseTime = order.updated_at || order.created_at
   const deadline = new Date(baseTime).getTime() + returnDays * 86400 * 1000
   const remainMs = deadline - Date.now()
@@ -19809,6 +20820,14 @@ async function renderReturnWidgetForOrder(order, product) {
         ${item.status === 'pending' && isBuyer ? `<button class="btn btn-outline btn-sm" style="font-size:11px;padding:4px 10px" onclick="cancelReturnRequest('${item.id}', '${order.id}')">${t('取消申请')}</button>` : ''}
       </div>
 
+      ${isSellerView && item.status === 'pending' ? `
+        <div style="display:flex;gap:8px;margin-bottom:8px">
+          <button class="btn btn-success btn-sm" style="flex:1;font-size:12px" onclick="decideReturn('${item.id}','accept','${order.id}')">${t('接受退款')}</button>
+          <button class="btn btn-outline btn-sm" style="flex:1;font-size:12px;color:#dc2626;border-color:#fecaca" onclick="decideReturn('${item.id}','reject','${order.id}')">${t('拒绝退货')}</button>
+        </div>` : ''}
+      ${isSellerView && item.status === 'picked_up' ? `
+        <button class="btn btn-success btn-sm" style="width:100%;font-size:12px;margin-bottom:8px" onclick="confirmReturnReceived('${item.id}','${order.id}')">${t('✓ 已收到退货 · 触发退款')}</button>` : ''}
+
       <div style="padding:10px;background:#fafafa;border-radius:8px;margin-bottom:8px">
         <div style="font-size:11px;font-weight:600;color:#6b7280;margin-bottom:8px">🧾 ${t('协商时间线')} · ${events.length} ${t('条')}</div>
         ${events.map(ev => buildReturnTimelineEvent(ev, isBuyer)).join('')}
@@ -20145,26 +21164,32 @@ window.cancelReturnRequest = async (id, orderId) => {
 function getActions(order, isBuyer, isSeller, isLogistic) {
   const s = order.status
   const isInPerson = order.fulfillment_mode === 'in_person'
+  const isSelfFulfillSeller = isSeller && !order.logistics_id
   // M8 面交订单：买家在 paid / accepted 都可"面交完成"直接结算
   if (isInPerson && isBuyer && (s === 'paid' || s === 'accepted')) {
     return [{ action: 'confirm_in_person', label: '🤝 面交完成 / 确认收货', style: 'success' }]
   }
   if (isSeller && s === 'paid')
-    return [{ action: 'accept', label: '接单', style: 'success' }]
+    return [
+      { action: 'accept', label: '接单', style: 'success' },
+      { action: 'decline', label: '拒绝接单', style: 'danger', custom: 'decline' },
+    ]
   if (isSeller && s === 'accepted' && !isInPerson)
     return [{ action: 'ship', label: '确认发货', style: 'success', logisticsSelector: true,
               trackingInput: true,
               evidencePlaceholder: '包装状态描述 / 货物说明（可选）' }]
   if (isSeller && s === 'accepted' && isInPerson)
     return [{ action: 'noop_in_person', label: '🤝 面交中（等待买家确认）', style: 'secondary', disabled: true }]
-  if (isLogistic && s === 'shipped')
+  if ((isLogistic || isSelfFulfillSeller) && s === 'shipped')
     return [{ action: 'pickup', label: '✅ 确认揽收', style: 'success', needsEvidence: true,
-              noteLabel: '快递单号 *', evidencePlaceholder: '如：SF1234567890' }]
-  if (isLogistic && s === 'picked_up')
+              noteLabel: '快递单号 *', evidencePlaceholder: '如：SF1234567890',
+              helperText: isSelfFulfillSeller ? '自履约订单：你负责回传揽收/单号，超时仍按卖家责任处理。' : '' }]
+  if ((isLogistic || isSelfFulfillSeller) && s === 'picked_up')
     return [{ action: 'transit', label: '🚛 开始运输', style: 'primary' }]
-  if (isLogistic && s === 'in_transit')
+  if ((isLogistic || isSelfFulfillSeller) && s === 'in_transit')
     return [{ action: 'deliver', label: '📬 确认投递', style: 'success', needsEvidence: true,
-              noteLabel: '投递凭证', evidencePlaceholder: '门牌照片描述 / 收件人姓名 / 签收时间' }]
+              noteLabel: '投递凭证', evidencePlaceholder: '门牌照片描述 / 收件人姓名 / 签收时间',
+              helperText: isSelfFulfillSeller ? '自履约投递需留存签收/门牌/交付说明，买家确认后才结算。' : '' }]
   if (isBuyer && s === 'delivered')
     return [
       { action: 'confirm', label: '确认收货', style: 'success' },
@@ -20177,19 +21202,22 @@ function getActions(order, isBuyer, isSeller, isLogistic) {
 function renderActions(orderId, actions, order, logisticsCompanies = []) {
   return `
     <div class="action-area">
-      <div class="action-title">我的操作</div>
+      <div class="action-title">${t('我的操作')}</div>
       <div id="action-msg"></div>
       ${actions.map((a, i) => `
-        ${a.logisticsSelector ? `
+        ${a.custom === 'decline' ? `
+          <button class="btn btn-${a.style}" style="margin-bottom:8px;background:#fff;color:#dc2626;border:1px solid #dc2626"
+            onclick="openDeclineModal('${orderId}')">
+            ${t(a.label)}
+          </button>` :
+        a.logisticsSelector ? `
           <div class="form-group">
-            <label class="form-label">${t('选择物流公司')} <span style="color:#dc2626">*</span></label>
+            <label class="form-label">${t('发货方式')}</label>
             <select class="form-control" id="logi-select-${i}">
-              <option value="">${t('— 请选择物流公司 —')}</option>
+              <option value="self">${t('📦 我自己发货（自提自送）')}</option>
               ${logisticsCompanies.map(c => `<option value="${escHtml(c.id)}">${escHtml(c.name)}</option>`).join('')}
             </select>
-            ${logisticsCompanies.length === 0
-              ? `<div class="alert alert-warning" style="margin-top:6px;font-size:13px">${t('暂无已注册的物流公司，请先让物流方注册账号')}</div>`
-              : ''}
+            <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:6px;line-height:1.5">${t('自己发货：你负责揽收 / 运输 / 送达,超时或虚假发货仍按卖家责任处理。选物流公司则由物流方流转。')}</div>
           </div>
           ${a.trackingInput ? `
           <div class="form-group">
@@ -20198,22 +21226,23 @@ function renderActions(orderId, actions, order, logisticsCompanies = []) {
           </div>` : ''}
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},false,true)">
-            ${a.label}
+            ${t(a.label)}
           </button>` :
         a.needsEvidence ? `
           <div class="form-group">
-            <label class="form-label">${a.noteLabel || '证据说明'}</label>
+            <label class="form-label">${t(a.noteLabel || '证据说明')}</label>
             ${a.action === 'pickup'
-              ? `<input type="text" class="form-control" id="evid-${i}" placeholder="${a.evidencePlaceholder || '快递单号'}">`
-              : `<textarea class="form-control" id="evid-${i}" placeholder="${a.evidencePlaceholder || ''}"></textarea>`}
+              ? `<input type="text" class="form-control" id="evid-${i}" placeholder="${t(a.evidencePlaceholder || '快递单号')}">`
+              : `<textarea class="form-control" id="evid-${i}" placeholder="${t(a.evidencePlaceholder || '')}"></textarea>`}
+            ${a.helperText ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:6px">${t(a.helperText)}</div>` : ''}
           </div>
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},true,false)">
-            ${a.label}
+            ${t(a.label)}
           </button>` : `
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},false,false)">
-            ${a.label}
+            ${t(a.label)}
           </button>`}
       `).join('')}
     </div>`
@@ -20234,6 +21263,13 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
     return
   }
   if (action === 'noop_in_person') return
+  const confirmText = {
+    ship: t('确认已经发货？发货后买家将看到物流信息，超时/虚假发货可能进入争议或判责。'),
+    pickup: t('确认已揽收并回传凭证？请确保单号或揽收说明真实可追踪。'),
+    deliver: t('确认已投递？请确保投递凭证真实，买家仍需确认收货后才结算。'),
+    confirm: t('确认收货？escrow 将进入结算流程，无法撤销。'),
+  }[action]
+  if (confirmText && !confirm(confirmText)) return
 
   let evidDesc = (needsEvidence || hasLogisticsSelector)
     ? (document.getElementById(`evid-${idx}`)?.value?.trim() || '') : ''
@@ -20252,15 +21288,21 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
   let logisticsCompanyId = ''
   if (hasLogisticsSelector) {
     const sel = document.getElementById(`logi-select-${idx}`)
-    logisticsCompanyId = sel?.value || ''
-    if (!logisticsCompanyId) { msgEl.innerHTML = alert$('error', t('请选择物流公司')); return }
-    const companyName = sel.options[sel.selectedIndex]?.text || logisticsCompanyId
+    const choice = sel?.value || 'self'
     const trackingInp = document.getElementById(`tracking-${idx}`)
     const trackingNo = trackingInp?.value?.trim() || ''
-    if (trackingNo) {
-      evidDesc = `${t('快递单号：')}${trackingNo} · ${companyName}`
+    if (choice === 'self') {
+      // 自发货:不绑定物流公司(logistics_id 留空 → seller self-fulfill 流转)
+      logisticsCompanyId = ''
+      evidDesc = trackingNo
+        ? `${t('快递单号：')}${trackingNo}${t('（自己发货）')}`
+        : t('卖家自己发货（自提自送）—— 后续由你揽收 / 运输 / 送达')
     } else {
-      evidDesc = `${t('已交付物流公司：')}${companyName}${t('，快递单号待物流揽收后回传')}`
+      logisticsCompanyId = choice
+      const companyName = sel.options[sel.selectedIndex]?.text || logisticsCompanyId
+      evidDesc = trackingNo
+        ? `${t('快递单号：')}${trackingNo} · ${companyName}`
+        : `${t('已交付物流公司：')}${companyName}${t('，快递单号待物流揽收后回传')}`
     }
   }
 
@@ -20282,6 +21324,107 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
   }
 }
 
+// ─── 卖家拒单(decline) + 临时判责举证(contest_decline)─── RFC-007 stage 2/3/5 ───────────────
+// reason code 元数据(与后端 orders-action.ts DECLINE_REASON_CODES / OBJECTIVE_DECLINE_REASONS 对齐)。
+// objective(客观声称)→ 临时判责,需在举证窗口内发起仲裁,不是自动免责;subjective(主观)→ 立即按卖家违约、买家退款。
+const DECLINE_REASONS = [
+  { code: 'stock_consumed_concurrent', objective: true,  zh: '并发售罄(库存被同时下单耗尽)', en: 'Stock consumed by a concurrent order' },
+  { code: 'stale_price_snapshot',      objective: true,  zh: '价格快照过期(下单价已失效)',     en: 'Stale price snapshot' },
+  { code: 'force_majeure',             objective: true,  zh: '不可抗力',                          en: 'Force majeure' },
+  { code: 'price_regret',              objective: false, zh: '价格反悔(不想按此价卖)',           en: 'Price regret' },
+  { code: 'cherry_pick',               objective: false, zh: '挑单(选择性拒单)',                 en: 'Cherry-picking' },
+  { code: 'other',                     objective: false, zh: '其他(主观)',                        en: 'Other (subjective)' },
+]
+function declineReasonOptions() {
+  const en = window._lang === 'en'
+  return DECLINE_REASONS.map(r => `<option value="${r.code}" data-objective="${r.objective ? '1' : '0'}">${en ? r.en : r.zh}${r.objective ? ` · ${t('客观')}` : ` · ${t('主观')}`}</option>`).join('')
+}
+// 选中 reason 后的诚实后果提示(主观 vs 客观,绝不把客观拒单说成自动免责)
+window.onDeclineReasonChange = () => {
+  const sel = document.getElementById('decline-reason')
+  const note = document.getElementById('decline-consequence')
+  if (!sel || !note) return
+  const objective = sel.selectedOptions[0]?.dataset?.objective === '1'
+  if (!sel.value) { note.innerHTML = ''; return }
+  note.innerHTML = objective
+    ? `<div style="background:#fffbeb;border:1px solid #fcd34d;color:#92400e;border-radius:8px;padding:10px;font-size:12px;line-height:1.6">⚠️ ${t('客观理由:订单将先转入【临时判责·卖家违约】并冻结结算。你需在举证窗口内发起仲裁举证翻案 —— 这不是自动免责;窗口过期未举证将按违约终结、买家退款。')}</div>`
+    : `<div style="background:#fef2f2;border:1px solid #fca5a5;color:#991b1b;border-radius:8px;padding:10px;font-size:12px;line-height:1.6">⚠️ ${t('主观理由:将立即按【卖家违约】处理,买家全额退款。此操作不可撤销。')}</div>`
+}
+window.openDeclineModal = (orderId) => {
+  const en = window._lang === 'en'
+  _openModal(`
+    <div style="max-width:440px">
+      <h3 style="font-size:16px;font-weight:700;margin-bottom:6px">${t('拒绝接单')}</h3>
+      <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('拒单会影响买家。请如实选择理由 —— 系统按理由区分【主观违约】与【客观临时判责】,后者需举证。')}</div>
+      <div class="form-group">
+        <label class="form-label">${t('拒单理由')} <span style="color:#dc2626">*</span></label>
+        <select class="form-control" id="decline-reason" onchange="onDeclineReasonChange()">
+          <option value="">${en ? '— select a reason —' : '— 请选择理由 —'}</option>
+          ${declineReasonOptions()}
+        </select>
+      </div>
+      <div id="decline-consequence" style="margin-bottom:10px"></div>
+      <div class="form-group">
+        <label class="form-label">${t('说明')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('(可选)')}</span></label>
+        <textarea class="form-control" id="decline-notes" rows="2" placeholder="${t('补充说明(客观理由建议写清,便于后续举证)')}"></textarea>
+      </div>
+      <div id="decline-msg"></div>
+      <div style="display:flex;gap:8px;margin-top:8px">
+        <button class="btn btn-outline" style="flex:1" onclick="closeModal()">${t('取消')}</button>
+        <button class="btn btn-danger" style="flex:1;background:#dc2626;border-color:#dc2626;color:#fff" onclick="submitDecline('${orderId}')">${t('确认拒单')}</button>
+      </div>
+    </div>`)
+}
+window.submitDecline = async (orderId) => {
+  const code = document.getElementById('decline-reason')?.value || ''
+  const notes = document.getElementById('decline-notes')?.value?.trim() || ''
+  const msg = document.getElementById('decline-msg')
+  if (!code) { if (msg) msg.innerHTML = alert$('error', t('请选择拒单理由')); return }
+  if (msg) msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('处理中...')}</div>`
+  const res = await POST(`/orders/${orderId}/action`, { action: 'decline', decline_reason_code: code, notes })
+  if (res.error) { if (msg) msg.innerHTML = alert$('error', res.error); return }
+  closeModal()
+  toast$(res.outcome === 'fault_seller_provisional'
+    ? t('已拒单 — 临时判责,请在举证窗口内发起仲裁')
+    : t('已拒单 — 已按卖家违约处理,买家将获退款'), 'success')
+  setTimeout(() => renderOrderDetail(document.getElementById('app'), orderId), 1000)
+}
+// 临时判责举证面板:仅卖家、订单 fault_seller + decline_objective_pending=1 + 未结算时显示
+function sellerDeclineContestPanel(order, orderId, isSeller) {
+  if (!isSeller || order.status !== 'fault_seller' || Number(order.decline_objective_pending) !== 1 || order.settled_fault_at) return ''
+  const contested = Number(order.decline_contested) === 1
+  const deadline = order.decline_contest_deadline ? fmtTime(order.decline_contest_deadline) : ''
+  if (contested) {
+    return `<div class="card" style="padding:14px;margin-top:10px;border-left:3px solid #4f46e5;background:#eef2ff">
+      <div style="font-size:13px;font-weight:600;color:#3730a3;margin-bottom:4px">⚖️ ${t('已发起仲裁举证')}</div>
+      <div style="font-size:12px;color:#374151;line-height:1.6">${t('自动终结已暂停,等待仲裁员裁决:维持→免责全退+退质押;驳回→按违约结算。')}</div>
+    </div>`
+  }
+  return `<div class="card" style="padding:14px;margin-top:10px;border-left:3px solid #d97706;background:#fffbeb">
+    <div style="font-size:13px;font-weight:600;color:#92400e;margin-bottom:4px">⏳ ${t('临时判责 — 举证窗口开放')}</div>
+    <div style="font-size:12px;color:#7f1d1d;line-height:1.6;margin-bottom:8px">
+      ${t('你以客观理由拒单,订单暂判【卖家违约】但尚未结算。你可在窗口内发起人工仲裁举证翻案 —— 这不是自动免责。')}
+      ${deadline ? `<br><strong>${t('举证截止')}:</strong> ${escHtml(deadline)} · ${t('过期未举证将按违约终结、买家退款。')}` : ''}
+    </div>
+    <div class="form-group">
+      <label class="form-label">${t('举证说明')} <span style="color:#dc2626">*</span></label>
+      <textarea class="form-control" id="contest-evidence" rows="3" placeholder="${t('客观说明拒单理由的证据(如并发订单号、价格变更时间、不可抗力凭证)')}"></textarea>
+    </div>
+    <div id="contest-msg"></div>
+    <button class="btn btn-primary" style="width:100%" onclick="submitContestDecline('${orderId}')">${t('提交举证 / 发起仲裁')}</button>
+  </div>`
+}
+window.submitContestDecline = async (orderId) => {
+  const evid = document.getElementById('contest-evidence')?.value?.trim() || ''
+  const msg = document.getElementById('contest-msg')
+  if (!evid) { if (msg) msg.innerHTML = alert$('error', t('请填写举证说明')); return }
+  if (msg) msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('提交中...')}</div>`
+  const res = await POST(`/orders/${orderId}/action`, { action: 'contest_decline', evidence_description: evid })
+  if (res.error) { if (msg) msg.innerHTML = alert$('error', res.error); return }
+  toast$(t('已发起仲裁举证 — 等待仲裁员裁决'), 'success')
+  setTimeout(() => renderOrderDetail(document.getElementById('app'), orderId), 1000)
+}
+
 // S8: 检查买家是否完成首单，若是 + ShareCtx 还有 sponsor → 一次性致谢 toast + 清 ctx
 async function maybeThankSponsorAndClear() {
   const ctx = readShareCtx()
@@ -21765,48 +22908,61 @@ async function renderSeller(app) {
   }
 
   app.innerHTML = shell(loading$(), 'seller')
-  const [productsRaw, ordersRaw, mySkillsRaw, quotaRaw, insightsRaw] = await Promise.all([
+  const [productsRaw, ordersRaw, mySkillsRaw, quotaRaw, insightsRaw, returnsRaw] = await Promise.all([
     GET('/my-products'),
     GET('/orders'),
     GET('/skills/mine'),
     GET('/seller/quota-status'),
     GET('/seller/insights').catch(() => null),
+    GET('/return-requests?role=seller').catch(() => ({ items: [] })),
   ])
   const mySkills   = Array.isArray(mySkillsRaw) ? mySkillsRaw : []
   const orders     = Array.isArray(ordersRaw)   ? ordersRaw   : []
   const products   = Array.isArray(productsRaw) ? productsRaw : []
   const quota      = (quotaRaw && !quotaRaw.error) ? quotaRaw : null
   const insights   = (insightsRaw && !insightsRaw.error) ? insightsRaw : null
+  const returns    = Array.isArray(returnsRaw?.items) ? returnsRaw.items : []
 
   const pendingOrders = orders.filter(o => ['paid', 'accepted'].includes(o.status) && o.seller_id === state.user.id)
+  const paidOrders = orders.filter(o => o.status === 'paid' && o.seller_id === state.user.id)
+  const acceptedOrders = orders.filter(o => o.status === 'accepted' && o.seller_id === state.user.id)
   const myProducts = products
 
   // KPI（基于最近 50 单的派生统计）+ 今日维度
   const mySoldOrders = orders.filter(o => o.seller_id === state.user.id)
   const today = new Date().toISOString().slice(0, 10)
   const todayOrders = mySoldOrders.filter(o => (o.created_at || '').startsWith(today))
-  const kpiPending   = mySoldOrders.filter(o => ['paid','accepted'].includes(o.status)).length
+  const kpiPaid      = paidOrders.length
+  const kpiAccepted  = acceptedOrders.length
   const kpiInTransit = mySoldOrders.filter(o => ['shipped','picked_up','in_transit','delivered'].includes(o.status)).length
+  const kpiDisputes  = mySoldOrders.filter(o => o.status === 'disputed').length
+  const kpiProvisionalDeclines = mySoldOrders.filter(o => o.status === 'fault_seller' && Number(o.decline_objective_pending) === 1 && !o.settled_fault_at).length
+  const kpiReturnExceptions = returns.filter(r => ['pending','picked_up','rejected','accepted_pickup_pending'].includes(r.status)).length
+  const kpiExceptions = kpiDisputes + kpiProvisionalDeclines + kpiReturnExceptions
   const kpiSales     = mySoldOrders.filter(o => o.status === 'completed').reduce((s,o) => s + Number(o.total_amount || 0), 0)
   const kpiTodayCount = todayOrders.length
   const kpiTodaySales = todayOrders.filter(o => o.status === 'completed').reduce((s,o) => s + Number(o.total_amount || 0), 0)
   const sellerKpis = `
-    <div style="display:grid;grid-template-columns:repeat(4,1fr);gap:6px;margin-bottom:14px">
+    <div style="display:grid;grid-template-columns:repeat(5,1fr);gap:6px;margin-bottom:14px">
       <div class="card" style="padding:10px;text-align:center;background:linear-gradient(135deg,#eff6ff,#dbeafe);border-color:#bfdbfe">
         <div style="font-size:18px;font-weight:800;color:#1d4ed8">${kpiTodayCount}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('今日订单')}</div>
       </div>
-      <div class="card" style="padding:10px;text-align:center;background:${kpiPending > 0 ? 'linear-gradient(135deg,#fef3c7,#fde68a)' : '#f9fafb'};border-color:${kpiPending > 0 ? '#fcd34d' : '#e5e7eb'}">
-        <div style="font-size:18px;font-weight:800;color:${kpiPending > 0 ? '#b45309' : '#9ca3af'}">${kpiPending}</div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiPaid > 0 ? 'linear-gradient(135deg,#fef3c7,#fde68a)' : '#f9fafb'};border-color:${kpiPaid > 0 ? '#fcd34d' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiPaid > 0 ? '#b45309' : '#9ca3af'}">${kpiPaid}</div>
+        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('待接单')}</div>
+      </div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiAccepted > 0 ? 'linear-gradient(135deg,#fff7ed,#fed7aa)' : '#f9fafb'};border-color:${kpiAccepted > 0 ? '#fdba74' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiAccepted > 0 ? '#c2410c' : '#9ca3af'}">${kpiAccepted}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('待发货')}</div>
       </div>
       <div class="card" style="padding:10px;text-align:center">
         <div style="font-size:18px;font-weight:800;color:#374151">${kpiInTransit}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('在途')}</div>
       </div>
-      <div class="card" style="padding:10px;text-align:center;background:linear-gradient(135deg,#f0fdf4,#dcfce7);border-color:#86efac">
-        <div style="font-size:16px;font-weight:800;color:#15803d">${kpiSales.toFixed(0)}</div>
-        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('累计 WAZ')}</div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiExceptions > 0 ? 'linear-gradient(135deg,#fef2f2,#fee2e2)' : '#f9fafb'};border-color:${kpiExceptions > 0 ? '#fca5a5' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiExceptions > 0 ? '#dc2626' : '#9ca3af'}">${kpiExceptions}</div>
+        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('异常')}</div>
       </div>
     </div>
   `
@@ -21888,9 +23044,7 @@ async function renderSeller(app) {
     </div>
   ` : ''
 
-  const pendingHtml = pendingOrders.length === 0
-    ? `<div class="empty" style="padding:24px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无待处理订单')}</div></div>`
-    : batchAcceptBar + batchShipBar + pendingOrders.map(o => `
+  const pendingOrderRows = (list) => list.map(o => `
       <div class="card" onclick="navigate('#order/${o.id}')" style="cursor:pointer">
         <div class="order-item">
           <div class="order-icon">📦</div>
@@ -21902,6 +23056,39 @@ async function renderSeller(app) {
           <div class="order-amount">${o.total_amount} WAZ</div>
         </div>
       </div>`).join('')
+  const acceptHtml = paidOrders.length === 0
+    ? `<div class="empty" style="padding:24px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无待处理订单')}</div></div>`
+    : batchAcceptBar + pendingOrderRows(paidOrders)
+  const shipHtml = acceptedOrders.length === 0
+    ? `<div class="empty" style="padding:18px"><div class="empty-icon">📦</div><div class="empty-text">${t('暂无待发货订单')}</div></div>`
+    : batchShipBar + pendingOrderRows(acceptedOrders)
+  const exceptionOrders = mySoldOrders.filter(o => o.status === 'disputed' || (o.status === 'fault_seller' && Number(o.decline_objective_pending) === 1 && !o.settled_fault_at))
+  const exceptionReturns = returns.filter(r => ['pending','picked_up','rejected','accepted_pickup_pending'].includes(r.status))
+  const exceptionsHtml = (exceptionOrders.length + exceptionReturns.length) === 0
+    ? `<div class="empty" style="padding:18px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无异常待处理')}</div></div>`
+    : `
+      ${exceptionOrders.map(o => `
+        <div class="card" onclick="navigate('#order/${o.id}')" style="cursor:pointer;border-left:3px solid ${o.status === 'disputed' ? '#dc2626' : '#f59e0b'};padding:10px 12px;margin-bottom:8px">
+          <div style="display:flex;justify-content:space-between;gap:10px;align-items:center">
+            <div style="min-width:0">
+              <div style="font-size:13px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${escHtml(o.product_title)}</div>
+              <div style="font-size:11px;color:#6b7280;margin-top:2px">${o.status === 'disputed' ? t('争议订单') : t('临时判责拒单')} · ${fmtTime(o.updated_at || o.created_at)}</div>
+            </div>
+            <span style="font-size:11px;color:#dc2626;font-weight:600;white-space:nowrap">${t('查看处理')} →</span>
+          </div>
+        </div>`).join('')}
+      ${exceptionReturns.map(r => `
+        <div class="card" onclick="navigate('#order/${r.order_id}')" style="cursor:pointer;border-left:3px solid #0891b2;padding:10px 12px;margin-bottom:8px">
+          <div style="display:flex;justify-content:space-between;gap:10px;align-items:center">
+            <div style="min-width:0">
+              <div style="font-size:13px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${escHtml(r.product_title)}</div>
+              <div style="font-size:11px;color:#6b7280;margin-top:2px">${t('退货处理')} · ${r.refund_amount} WAZ · ${fmtTime(r.created_at)}</div>
+            </div>
+            <span style="font-size:11px;color:#0891b2;font-weight:600;white-space:nowrap">${t('查看订单')} →</span>
+          </div>
+        </div>`).join('')}
+      <button class="btn btn-outline btn-sm" style="width:auto;font-size:12px" onclick="navigate('#returns')">↩ ${t('退货管理')}</button>
+    `
 
   const activeProducts    = products.filter(p => p.status === 'active')
   const warehouseProducts = products.filter(p => p.status !== 'active' && p.status !== 'deleted')
@@ -22081,11 +23268,24 @@ async function renderSeller(app) {
   // 各 sub-tab 内容
   const dashboardSection = sellerSubTab === 'dashboard' ? `
     ${sellerKpis}
+    ${sellerRecoveryReminderHTML()}
     ${stockAlertBanner}
     ${quotaBanner}
     ${pendingOrders.length > 0 ? `<div class="alert alert-warning">📬 ${t('你有')} ${pendingOrders.length} ${t('个订单需要处理')}</div>` : ''}
-    <div style="font-weight:700;margin-bottom:12px">${t('待处理订单')}</div>
-    ${pendingHtml}
+    <div style="display:grid;grid-template-columns:1fr;gap:10px;margin-bottom:12px">
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">📬 ${t('待接单')}</div>
+        ${acceptHtml}
+      </section>
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">📦 ${t('待发货')}</div>
+        ${shipHtml}
+      </section>
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">⚠ ${t('退货 · 争议 · 异常')}</div>
+        ${exceptionsHtml}
+      </section>
+    </div>
     ${insightsBlock}
   ` : ''
 
@@ -23058,6 +24258,7 @@ function skillCard(s, context) {
           <span class="badge badge-green">${t('运行中')}</span>
         </div>
         <div style="font-size:13px;color:#6b7280;margin-top:8px">${s.description}</div>
+        ${s.skill_type === 'auto_accept' ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:8px;line-height:1.5">⚠️ ${t('自动接单仍受约束：接单后须按时发货，超时按卖家违约判责；跳过「拒绝接单」窗口；不校验库存。')}</div>` : ''}
       </div>`
   }
   // buyer context
@@ -23078,7 +24279,7 @@ function skillCard(s, context) {
 
 const SKILL_CONFIG_HINTS = {
   catalog_sync:      '目录同步：订阅此 Skill 的买家在搜索时会优先看到你的商品。成交后协议自动给你 0.5% 推荐佣金。',
-  auto_accept:       '自动接单：买家下单后无需手动操作，系统自动接受。可设置每日上限、金额范围。',
+  auto_accept:       '⚠️ 自动接单：买家下单后系统自动接受（省去手动「接单」）。注意责任不变：①接单后你仍须按时发货，超时/不发货仍按卖家违约判责；②会跳过「拒绝接单」窗口，订单自动进入已接单后无法再拒单；③不校验库存，售罄商品也会被自动接单，你仍要履约或担责。建议用金额范围/每日上限控制风险。',
   price_negotiation: '价格协商：允许买家 Agent 在你设定的折扣范围内自动议价，减少沟通成本。',
   quality_guarantee: '质量承诺：额外质押 WAZ 作为品质担保，增强买家信任，适合高客单价商品。',
   instant_ship:      '极速发货：承诺接单后 24h 内发货，违约自动赔付。适合有充足现货的卖家。',
@@ -30605,6 +31806,7 @@ async function renderAdminProtocol(app) {
       ${adminLinkCard('📜', t('审计日志'), t('全部 admin 写操作'), '#admin/audit')}
       ${adminLinkCard('🛑', t('错误监控'), t('24h 趋势 + burst 告警'), '#admin/errors')}
       ${adminLinkCard('📨', t('Welcome 提交'), t('#welcome 留下的邮箱订阅 + 建议'), '#admin/public-ideas')}
+      ${adminLinkCard('🛠️', t('任务建议收件箱'), t('陌生人 / agent 提交的共建任务建议;审阅 → 转正式任务'), '#admin/task-proposals')}
     </div>
   `, 'admin-protocol')
 }
@@ -33021,7 +34223,7 @@ async function renderMyNotes(app) {
       <h2 style="font-size:18px;font-weight:700">📝 ${t('我的笔记')}</h2>
       ${draftCount > 0 ? `<button class="btn btn-outline btn-sm" style="font-size:11px;padding:5px 10px" onclick="openDraftsModal()">📋 ${t('草稿')} ${draftCount}</button>` : ''}
     </div>
-    <div style="font-size:11px;color:#6b7280;margin-bottom:14px">${state.user?.mlm_ui_visible !== false ? t('协议自动按 70/20/10 把分享返佣给你和上下游') : t('你所在地区不分多级返佣 — 产生的佣金已自动捐入公益基金')}</div>
+    <div style="font-size:11px;color:#6b7280;margin-bottom:14px">${state.user?.mlm_ui_visible !== false ? t('协议按地区层级自动拆分分享返佣(当前预发布期仅 L1)') : t('你所在地区不分多级返佣 — 产生的佣金已自动捐入公益基金')}</div>
     <div class="card" style="padding:14px;margin-bottom:14px;background:linear-gradient(135deg,#fef3c7,#fff7ed)">
       <div style="display:grid;grid-template-columns:repeat(3,1fr);gap:8px;text-align:center">
         <div><div style="font-size:18px;font-weight:800;color:#92400e">${notes.length}</div><div style="font-size:10px;color:#9ca3af">${t('笔记数')}</div></div>