@seasonkoh/webaz 0.1.25 → 0.1.26

package/dist/pwa/public/app.js

@@ -693,6 +693,7 @@ async function render(page, params) {
       if (params[0] === 'users' && params[1])     return renderAdminUserDetail(app, params[1])
       if (params[0] === 'users')                  return renderAdminUsers(app)
       if (params[0] === 'audit')                  return renderAdminAudit(app)
+      if (params[0] === 'security')               return renderAdminSecurity(app)
       if (params[0] === 'products')               return renderAdminProducts(app)
       if (params[0] === 'orders')                 return renderAdminOrders(app)
       if (params[0] === 'disputes')               return renderAdminDisputes(app)
@@ -1012,6 +1013,40 @@ function preLaunchBannerHTML() {
   </div>`
 }
 
+// 账户无任何恢复方式 → 首页顶部持续红色风险横幅。
+// 恢复方式 = 密码 OR 已验证邮箱。Passkey【不算】恢复方式:它是敏感操作的"真人在场"门,
+// 没有 Passkey 登录 / 找回路径,丢 key 换设备后 Passkey 救不回账号(与弹窗"增强不替代恢复邮箱"一致)。
+function recoveryBannerHTML() {
+  const u = state.user
+  if (!u || u.role === 'admin') return ''
+  const hasRecovery = u.has_password || u.email_verified
+  if (hasRecovery) return ''
+  return `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:8px;padding:10px 14px;font-size:12px;color:#991b1b;line-height:1.6;margin:8px 12px 12px">
+    🚨 <strong>${t('账户还没有恢复方式')}</strong> — ${t('闪退或换设备清缓存后可能永久无法登录。')}
+    <div style="margin-top:8px;display:flex;gap:8px;flex-wrap:wrap">
+      <button class="btn btn-sm" style="font-size:11px;padding:4px 10px;background:#dc2626;color:#fff;border:none;border-radius:6px;cursor:pointer" onclick="navigate('#me/settings')">${t('立即设置密码 / 绑定邮箱')} →</button>
+    </div>
+  </div>`
+}
+
+// 卖家后台安全提醒(P1):卖家涉及商品/履约/钱包,恢复方式不齐尤其危险。
+// 全局红横幅(零恢复)已在 shell 顶部覆盖;此处补"有邮箱但还缺密码"等部分缺口的黄色软提醒,避免与红横幅叠加。
+function sellerRecoveryReminderHTML() {
+  const u = state.user
+  if (!u) return ''
+  // 全局红横幅判定一致:无密码且无邮箱 → 红横幅已覆盖,这里不再叠加(Passkey 不算恢复方式)
+  const globalRedShowing = !u.has_password && !u.email_verified
+  if (globalRedShowing) return ''
+  const gaps = []
+  if (!u.has_password)  gaps.push(t('未设置登录密码'))
+  if (!u.email_verified) gaps.push(t('未绑定找回邮箱'))
+  if (gaps.length === 0) return ''
+  return `<div class="alert" style="background:#fffbeb;border:1px solid #fde68a;color:#92400e;font-size:12px;line-height:1.6;margin-bottom:12px">
+    🛡 <strong>${t('建议补全账户恢复方式')}</strong>:${gaps.join(' · ')}。${t('卖家涉及商品/履约/钱包，闪退或换设备清缓存后可能无法登录。')}
+    <button class="btn btn-sm" style="font-size:11px;padding:3px 10px;margin-left:6px;background:#d97706;color:#fff;border:none;border-radius:6px;cursor:pointer" onclick="navigate('#me/settings')">${t('去设置')} →</button>
+  </div>`
+}
+
 function shell(content, activeTab, opts) {
   // opts = { hideTabbar?: bool, bottomBar?: html }（第三参数可选，向后兼容）
   const _opts = opts || {}
@@ -1116,7 +1151,7 @@ function shell(content, activeTab, opts) {
           : `<button class="btn btn-primary btn-sm" onclick="navigate('#login')">${t('登录')}</button>`}
       </div>
     </nav>
-    <main class="main">${content}</main>
+    <main class="main">${recoveryBannerHTML()}${content}</main>
     ${state.user?.role === 'buyer' ? `
       <button id="compare-fab" onclick="openCompare()" title="${t('对比商品')}"
         style="position:fixed;bottom:136px;right:14px;background:#4f46e5;color:#fff;border:none;cursor:pointer;font-size:12px;font-weight:600;padding:8px 14px;border-radius:99px;box-shadow:0 4px 12px rgba(79,70,229,0.3);z-index:98;display:none;align-items:center;gap:4px">
@@ -1311,7 +1346,9 @@ async function renderMyAdvanced(app) {
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:10px">
       ${card('🏛', t('协议治理'), t('参数公开 · 变更可追溯'), '#governance')}
       ${card('⚖', t('判例库'), t('争议判决公开'), '#judgments')}
-      ${card('🎁', t('分享分润身份'), t('申请制 · 含锁仓金'), '#rewards-me')}
+      ${card('🛠', t('我的共建'), t('贡献 / GitHub 认领 / 建设信誉 — 无购买门槛'), '#my-contributions')}
+      ${card('📋', t('公开共建任务'), t('浏览可认领任务、提交建议、参与共建'), '#contribute/tasks')}
+      ${card('🎁', t('分享分润管理'), t('分享佣金 / PV / escrow · 经济关系登记'), '#rewards-me')}
     </div>
 
     <div style="font-size:12px;color:#6b7280;font-weight:600;margin:14px 0 6px">📧 ${t('联系我们')}</div>
@@ -3113,9 +3150,14 @@ async function renderAdminTaskProposals(app) {
   const T = (zh, e) => en && e ? e : zh
   app.innerHTML = shell(loading$(), 'admin')
   const sf = state._proposalStatus || ''   // '' | new | needs_info | rejected | converted
-  const r = await GET('/admin/task-proposals' + (sf ? '?status=' + encodeURIComponent(sf) : ''))
+  const [r, dr] = await Promise.all([
+    GET('/admin/task-proposals' + (sf ? '?status=' + encodeURIComponent(sf) : '')),
+    GET('/admin/build-task-drafts'),
+  ])
   if (r.error) { app.innerHTML = shell(alert$('error', r.error), 'admin'); return }
   const proposals = r.proposals || []
+  const drafts = (dr && dr.drafts) || []
+  const draftedIds = new Set(drafts.map((d) => d.source_proposal_id).filter(Boolean))   // proposals that already have an unpublished draft
   const notice = en ? (r.value_boundary?.notice_en || '') : (r.value_boundary?.notice_zh || '')
   const STATUS = {
     new:        { bg: '#fef3c7', fg: '#92400e', label: T('待审', 'New') },
@@ -3126,6 +3168,26 @@ async function renderAdminTaskProposals(app) {
   const badge = (s) => { const c = STATUS[s] || { bg: '#f3f4f6', fg: '#6b7280', label: s }; return `<span style="font-size:10px;background:${c.bg};color:${c.fg};padding:2px 8px;border-radius:99px;font-weight:600">${c.label}</span>` }
   const chip = (val, label) => `<button onclick="setProposalStatusFilter('${val}')" style="padding:5px 12px;border-radius:99px;font-size:11px;cursor:pointer;border:1px solid ${sf === val ? '#6366f1' : '#e5e7eb'};background:${sf === val ? '#eef2ff' : '#fff'};color:${sf === val ? '#4338ca' : '#6b7280'};font-weight:600">${label}</button>`
   const field = (label, val) => val ? `<div style="font-size:12px;color:#374151;margin-top:4px"><b>${label}:</b> ${escHtml(String(val))}</div>` : ''
+  // inline "create formal task draft" form (prefilled from the proposal; AI can also prefill it). All list
+  // fields are newline-separated. These are the agent-handoff fields the formal task model requires.
+  const ta = (id, ph, val, h) => `<textarea id="${id}" placeholder="${ph}" style="width:100%;box-sizing:border-box;min-height:${h || 38}px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px;margin-top:6px">${val ? escHtml(String(val)) : ''}</textarea>`
+  const draftForm = (p) => `<div id="df-${escHtml(p.id)}" style="display:none;margin-top:10px;border:1px dashed #c7d2fe;background:#f5f7ff;border-radius:8px;padding:10px">
+      <div style="font-size:11px;color:#4338ca;font-weight:600;margin-bottom:2px">${T('建正式任务草稿(未发布)', 'Create formal task draft (unpublished)')}</div>
+      <div style="font-size:10px;color:#6b7280;margin-bottom:4px">${T('草稿默认隐藏不可认领;填齐 agent 交接字段后由人工显式「发布」才进任务板。', 'A draft is hidden + unclaimable; only an explicit human “Publish” (after the agent-handoff fields are filled) puts it on the board.')}</div>
+      ${ta('df-title-' + escHtml(p.id), T('标题', 'Title'), p.title)}
+      ${ta('df-area-' + escHtml(p.id), T('领域(可选)', 'Area (optional)'), p.suggested_area, 30)}
+      ${ta('df-source-' + escHtml(p.id), T('来源引用(文件 / RFC / issue,可选)', 'Source ref (file / RFC / issue, optional)'), p.source_ref, 30)}
+      ${ta('df-desc-' + escHtml(p.id), T('说明 / 原因', 'Summary / reason'), p.summary, 48)}
+      ${ta('df-allowed-' + escHtml(p.id), T('允许路径(每行一条)', 'Allowed paths (one per line)'), '')}
+      ${ta('df-fpaths-' + escHtml(p.id), T('禁止路径(每行一条)', 'Forbidden paths (one per line)'), '')}
+      ${ta('df-forbidden-' + escHtml(p.id), T('禁止动作(每行一条)', 'Forbidden actions (one per line)'), '')}
+      ${ta('df-accept-' + escHtml(p.id), T('验收标准(每行一条)', 'Acceptance criteria (one per line)'), p.expected_outcome)}
+      ${ta('df-verify-' + escHtml(p.id), T('验证命令(每行一条)', 'Verification commands (one per line)'), '')}
+      ${ta('df-deliver-' + escHtml(p.id), T('交付物(每行一条)', 'Deliverables (one per line)'), '')}
+      ${ta('df-dod-' + escHtml(p.id), T('完成定义', 'Definition of done'), '')}
+      ${ta('df-expect-' + escHtml(p.id), T('预期结果(留空则用说明)', 'Expected results (blank = use summary)'), '')}
+      <button onclick="createTaskDraft('${escHtml(p.id)}')" style="margin-top:8px;padding:7px 14px;border:none;background:#4338ca;color:#fff;border-radius:6px;font-size:12px;cursor:pointer;font-weight:600">${T('保存草稿', 'Save draft')}</button>
+    </div>`
   const row = (p) => {
     const terminal = p.status === 'rejected' || p.status === 'converted'
     return `<div class="card" style="padding:14px;margin-bottom:10px">
@@ -3146,13 +3208,29 @@ async function renderAdminTaskProposals(app) {
             <textarea id="pr-note-${escHtml(p.id)}" placeholder="${T('审阅备注(可选)', 'Review note (optional)')}" style="width:100%;box-sizing:border-box;min-height:44px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px"></textarea>
             <input id="pr-ref-${escHtml(p.id)}" placeholder="${T('转任务时:关联正式 task / PR / release(可选)', 'On convert: link the real task / PR / release (optional)')}" style="width:100%;box-sizing:border-box;margin-top:6px;padding:6px 8px;border:1px solid #d4d4d8;border-radius:6px;font-size:12px">
             <div style="display:flex;gap:6px;margin-top:8px;flex-wrap:wrap">
+              <button onclick="aiAssistProposal('${escHtml(p.id)}')" style="padding:6px 12px;border:1px solid #8b5cf6;background:#fff;color:#6d28d9;border-radius:6px;font-size:12px;cursor:pointer">🤖 ${T('AI 建议', 'AI suggest')}</button>
+              ${draftedIds.has(p.id)
+                ? `<span style="padding:6px 10px;font-size:11px;color:#4338ca;background:#eef2ff;border-radius:6px">📝 ${T('已建草稿(在上方草稿区发布;发布即接受)', 'Draft created — publish it in the drafts panel above (publish = accept)')}</span>`
+                : `<button onclick="toggleDraftForm('${escHtml(p.id)}')" style="padding:6px 12px;border:1px solid #6366f1;background:#fff;color:#4338ca;border-radius:6px;font-size:12px;cursor:pointer">${T('建任务草稿', 'Create task draft')}</button>
               <button onclick="reviewProposal('${escHtml(p.id)}','needs_info')" style="padding:6px 12px;border:1px solid #3b82f6;background:#fff;color:#1e40af;border-radius:6px;font-size:12px;cursor:pointer">${T('需补充', 'Needs info')}</button>
               <button onclick="reviewProposal('${escHtml(p.id)}','rejected')" style="padding:6px 12px;border:1px solid #ef4444;background:#fff;color:#991b1b;border-radius:6px;font-size:12px;cursor:pointer">${T('拒绝', 'Reject')}</button>
-              <button onclick="reviewProposal('${escHtml(p.id)}','converted')" style="padding:6px 12px;border:none;background:#16a34a;color:#fff;border-radius:6px;font-size:12px;cursor:pointer">${T('转为正式任务', 'Convert')}</button>
+              <button onclick="reviewProposal('${escHtml(p.id)}','converted')" style="padding:6px 12px;border:1px solid #16a34a;background:#fff;color:#166534;border-radius:6px;font-size:12px;cursor:pointer">${T('仅记审阅决定', 'Mark reviewed')}</button>`}
             </div>
+            <div id="ai-${escHtml(p.id)}"></div>
+            ${draftedIds.has(p.id) ? '' : draftForm(p)}
           </div>`}
     </div>`
   }
+  const draftRow = (d) => `<div class="card" style="padding:12px;margin-bottom:8px;border-left:3px solid #6366f1">
+      <div style="display:flex;justify-content:space-between;gap:8px;align-items:flex-start">
+        <div style="font-weight:600;font-size:13px">${escHtml(d.title)}</div>
+        <span style="font-size:10px;background:#eef2ff;color:#4338ca;padding:2px 8px;border-radius:99px;font-weight:600">${T('未发布草稿', 'Unpublished draft')}</span>
+      </div>
+      ${field(T('风险', 'Risk'), d.risk_level)}${field(T('可自助认领', 'Auto-claimable'), d.auto_claimable === 1 || d.auto_claimable === true ? T('是', 'yes') : T('否(需真人)', 'no (human)'))}
+      ${field(T('来源建议', 'Source proposal'), d.source_proposal_id)}${field(T('创建人', 'Created by'), d.created_by)}
+      <div style="font-size:10px;color:#9ca3af;margin-top:6px">${T('发布前会校验交接字段;发布后进入正常任务板,可被参与者 agent 发现 / 认领 / 提交 PR。', 'Publish validates the handoff fields; once published it enters the normal task board — discoverable / claimable / PR-submittable by participant agents.')}</div>
+      <button onclick="publishDraft('${escHtml(d.id)}')" style="margin-top:8px;padding:6px 14px;border:none;background:#16a34a;color:#fff;border-radius:6px;font-size:12px;cursor:pointer;font-weight:600">${T('发布到任务板', 'Publish to board')}</button>
+    </div>`
   app.innerHTML = shell(`
     <div style="padding:14px;max-width:920px;margin:0 auto">
       <h1 class="page-title">🛠️ ${T('任务建议收件箱', 'Task Proposal Inbox')}</h1>
@@ -3160,6 +3238,10 @@ async function renderAdminTaskProposals(app) {
         ${T('建议是陌生人 / agent 提交的想法,不是贡献事实 / 奖励 / 正式参与。「转为正式任务」只记录评审决定与证据链(proposer → reviewer → 关联引用),不会自动创建 build_task。', 'A proposal is a stranger / agent suggestion — NOT a contribution fact / reward / participation. “Convert” only records the review decision + the proposer → reviewer → ref evidence chain; it does NOT auto-create a build_task.')}
         ${notice ? `<br>${escHtml(notice)}` : ''}
       </div>
+      ${drafts.length ? `<div style="margin-bottom:14px">
+        <div style="font-size:12px;font-weight:700;color:#4338ca;margin-bottom:6px">📝 ${T('未发布任务草稿', 'Unpublished task drafts')} (${drafts.length})</div>
+        ${drafts.map(draftRow).join('')}
+      </div>` : ''}
       <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:12px">
         ${chip('', T('全部', 'All'))}${chip('new', STATUS.new.label)}${chip('needs_info', STATUS.needs_info.label)}${chip('rejected', STATUS.rejected.label)}${chip('converted', STATUS.converted.label)}
       </div>
@@ -3179,6 +3261,56 @@ window.reviewProposal = async (id, status) => {
   toast$(window._lang === 'en' ? 'Updated' : '已更新')
   renderAdminTaskProposals(document.getElementById('app'))
 }
+window.toggleDraftForm = (id) => { const el = document.getElementById('df-' + id); if (el) el.style.display = el.style.display === 'none' ? 'block' : 'none' }
+// AI-assist is ASSISTANT-ONLY: it renders a suggestion + prefills the draft form; it never publishes/decides.
+window.aiAssistProposal = async (id) => {
+  const en = window._lang === 'en'
+  const box = document.getElementById('ai-' + id); if (box) box.innerHTML = `<div style="font-size:11px;color:#8b5cf6;margin-top:8px">🤖 ${en ? 'thinking…' : '分析中…'}</div>`
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/ai-assist', {})
+  if (r.error) { if (box) box.innerHTML = ''; toast$(r.error || 'failed'); return }
+  const s = r.ai_suggestion || {}
+  window._aiSuggest = window._aiSuggest || {}; window._aiSuggest[id] = s.suggested || {}
+  const list = (arr) => (arr || []).map(x => '• ' + escHtml(String(x))).join('<br>')
+  if (box) box.innerHTML = `<div style="margin-top:8px;border:1px solid #ddd6fe;background:#faf5ff;border-radius:8px;padding:10px">
+    <div style="font-size:11px;font-weight:700;color:#6d28d9">🤖 ${en ? 'AI suggestion' : 'AI 建议'} <span style="font-weight:400;color:#9ca3af">(${escHtml(String(r.model || ''))})</span></div>
+    <div style="font-size:10px;color:#b45309;margin:2px 0 6px">${escHtml(String(r.ai_notice || ''))}</div>
+    <div style="font-size:12px;color:#374151;line-height:1.6">
+      <b>${en ? 'Category' : '分类'}:</b> ${escHtml(String(s.category || ''))} · <b>${en ? 'Risk' : '风险'}:</b> ${escHtml(String(s.risk || ''))} · <b>${en ? 'Effort' : '工作量'}:</b> ${escHtml(String(s.effort || ''))} · <b>${en ? 'Duplicate' : '疑似重复'}:</b> ${escHtml(String(s.duplicate_likelihood || ''))}
+      ${(s.missing_info && s.missing_info.length) ? `<div style="margin-top:4px"><b>${en ? 'Missing info' : '缺失信息'}:</b><br>${list(s.missing_info)}</div>` : ''}
+    </div>
+    <button onclick="applyAiToDraft('${id}')" style="margin-top:8px;padding:5px 12px;border:1px solid #8b5cf6;background:#fff;color:#6d28d9;border-radius:6px;font-size:11px;cursor:pointer">${en ? 'Fill draft form with this' : '用此填充草稿表单'}</button>
+  </div>`
+}
+window.applyAiToDraft = (id) => {
+  const suggested = (window._aiSuggest && window._aiSuggest[id]) || {}
+  document.getElementById('df-' + id).style.display = 'block'
+  const set = (sfx, v) => { const el = document.getElementById('df-' + sfx + '-' + id); if (el && v != null && v !== '') el.value = v }
+  set('title', suggested.title); set('area', suggested.area); set('desc', suggested.description)
+  set('accept', (suggested.acceptance_criteria || []).join('\n')); set('verify', (suggested.verification_commands || []).join('\n'))
+  toast$(window._lang === 'en' ? 'Draft prefilled (review before saving)' : '已填充草稿(保存前请人工核对)')
+}
+window.createTaskDraft = async (id) => {
+  const en = window._lang === 'en'
+  const v = (sfx) => (document.getElementById('df-' + sfx + '-' + id)?.value || '').trim()
+  const lines = (sfx) => v(sfx).split('\n').map(x => x.trim()).filter(Boolean)
+  const body = {
+    title: v('title'), area: v('area') || null, source_ref: v('source') || null, description: v('desc'),
+    allowed_paths: lines('allowed'), forbidden_paths: lines('fpaths'), forbidden_actions: lines('forbidden'),
+    acceptance_criteria: lines('accept'), verification_commands: lines('verify'), deliverables: lines('deliver'),
+    definition_of_done: v('dod'), expected_results: v('expect'),
+  }
+  const r = await POST('/admin/task-proposals/' + encodeURIComponent(id) + '/create-task-draft', body)
+  if (r.error) { toast$((r.missing && r.missing.length) ? ((en ? 'Missing: ' : '缺少:') + r.missing.join(', ')) : (r.error || 'failed')); return }
+  toast$(en ? 'Draft saved (unpublished)' : '草稿已保存(未发布)')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
+window.publishDraft = async (taskId) => {
+  const en = window._lang === 'en'
+  const r = await POST('/admin/build-task-drafts/' + encodeURIComponent(taskId) + '/publish', {})
+  if (r.error) { toast$((r.missing && r.missing.length) ? ((en ? 'Fill before publish: ' : '发布前请填齐:') + r.missing.join(', ')) : (r.error || 'failed')); return }
+  toast$(en ? 'Published to task board' : '已发布到任务板')
+  renderAdminTaskProposals(document.getElementById('app'))
+}
 
 async function renderAdminKPI(app) {
   if (!state.user) { renderLogin(); return }
@@ -3383,6 +3515,11 @@ async function renderAdminDashboard(app) {
     <div style="font-size:13px;color:#6b7280;margin:16px 0 8px">⚛ ${t('Tokenomics')}</div>
     <div style="display:grid;grid-template-columns:repeat(2,1fr);gap:10px;margin-bottom:16px">
       ${quickAction('#admin/tokenomics', '⚛', t('积分基金 / Tier 配置 / 高额榜'))}
+    </div>
+    <div style="font-size:13px;color:#6b7280;margin:16px 0 8px">🔐 ${t('安全与审计')}</div>
+    <div style="display:grid;grid-template-columns:repeat(2,1fr);gap:10px;margin-bottom:16px">
+      ${quickAction('#admin/security', '🪪', t('我的管理身份与权限'))}
+      ${quickAction('#admin/audit',    '📜', t('审计日志'))}
     </div>`
 
   // A5 重设：渐变标题 + 分区标题 + 颜色块分组
@@ -3437,6 +3574,90 @@ function renderTagBadges(tags, max = 3) {
   }).join('') + (more > 0 ? `<span style="font-size:11px;color:#6b7280">+${more}</span>` : '')
 }
 
+// 管理身份与权限自查面板(只读)。回答"我正在以什么身份/级别/权限操作?",
+// Passkey 责任绑定状态 + GitHub 关联 + 普通 admin vs root/破玻璃 + 经济操作审计须知。
+// 纯前端:数据来自 /me(state.user)+ 只读 /contribution-identity/github/me;无新后端、无经济动作。
+async function renderAdminSecurity(app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const u = state.user
+  const gid = await GET('/contribution-identity/github/me').catch(() => null)
+  const bindings = (gid && !gid.error && Array.isArray(gid.bindings)) ? gid.bindings : []
+
+  const adminType = u.admin_type || 'root'
+  const isRoot = adminType === 'root'
+  const scope = u.admin_scope || 'global'
+  let perms = []
+  try { perms = isRoot ? ['all'] : JSON.parse(u.admin_permissions || '[]') } catch { perms = [] }
+  const hasPasskey = !!u.has_passkey
+
+  const PERM_LABEL = () => ({ all: t('全部'), users: t('用户'), content: t('内容'), arbitration: t('仲裁'), protocol: t('协议 / 经济'), verifier_mgmt: t('审核员管理'), support: t('支持') })
+  const permChips = (perms.length === 0)
+    ? `<span style="font-size:12px;color:#dc2626">${t('无任何权限（请联系 root 配置）')}</span>`
+    : perms.map(p => `<span style="display:inline-block;background:#eef2ff;color:#3730a3;font-size:11px;padding:2px 8px;border-radius:99px;margin:0 4px 4px 0">${PERM_LABEL()[p] || p}</span>`).join('')
+
+  const row = (label, value) => `<div style="display:flex;justify-content:space-between;gap:10px;padding:7px 0;border-bottom:1px solid #f3f4f6"><span style="font-size:12px;color:#6b7280">${label}</span><span style="font-size:12px;color:#111827;text-align:right;word-break:break-all">${value}</span></div>`
+
+  const passkeyRow = hasPasskey
+    ? `<span style="color:#16a34a;font-weight:600">✓ ${t('已绑定')}</span>`
+    : `<span style="color:#dc2626;font-weight:600">⚠ ${t('未绑定')}</span> <a href="#me/settings" style="color:#6366f1;font-size:11px">${t('去绑定')} →</a>`
+  const githubRow = bindings.length > 0
+    ? bindings.map(b => `<code style="font-size:11px">github:${escHtml(String(b.github_actor_id))}</code>`).join(' ')
+    : `<span style="color:#9ca3af">${t('未关联')}</span> <a href="#my-contributions" style="color:#6366f1;font-size:11px">${t('去认领')} →</a>`
+
+  app.innerHTML = shell(`
+    ${adminPageHeader('🪪', t('我的管理身份与权限'), t('你正在以此身份操作 · 只读自查'))}
+
+    ${isRoot ? `
+    <div class="card" style="padding:12px;background:#fffbeb;border:1px solid #fcd34d;margin-bottom:10px">
+      <div style="font-size:13px;font-weight:700;color:#92400e">🚧 ${t('创始人 / 引导管理员（Founder Admin · Bootstrap Operator）')}</div>
+      <div style="font-size:12px;color:#78350f;margin-top:4px;line-height:1.6">${t('这是 pre-launch 引导期的【临时治理模式】:更广的只读可见性 + 有限的应急写权限 —— 不是日常全能账号。')}</div>
+      <div style="font-size:11px;color:#78350f;margin-top:6px;line-height:1.6">${t('设计目标:launch 后把创始人权力拆成更窄的角色 —— maintainer / support operator / arbitrator / finance reviewer / security admin(用 regional admin + 权限位逐步收窄)。')}</div>
+    </div>` : ''}
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">👤 ${t('账户')}</div>
+      ${row(t('名称'), escHtml(u.name || ''))}
+      ${row(t('用户名'), '@' + escHtml(u.handle || ''))}
+      ${row(t('账户 ID'), `<code style="font-size:11px">${escHtml(u.id || '')}</code>`)}
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🛡 ${t('角色与级别')}</div>
+      ${row(t('角色'), t('管理员'))}
+      ${row(t('级别'), isRoot
+        ? `<span style="color:#b91c1c;font-weight:700">ROOT</span> · <span style="font-size:11px;color:#6b7280">${t('破玻璃 / 系统操作员')}</span>`
+        : `<span style="color:#0369a1;font-weight:700">REGIONAL</span>`)}
+      ${row(t('范围'), `<code style="font-size:11px">${escHtml(scope)}</code>`)}
+      <div style="font-size:12px;color:#6b7280;margin-top:8px;margin-bottom:4px">${t('有效权限')}</div>
+      <div>${permChips}</div>
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🔐 ${t('问责绑定')}</div>
+      ${row('Passkey', passkeyRow)}
+      ${row(t('GitHub 关联'), githubRow)}
+      <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:8px 10px;margin-top:8px;line-height:1.6">
+        ${t('管理身份应绑定 Passkey（真人问责）。个人 GitHub 账号用于提交 PR;仓库所有权 / 设置由组织/管理身份治理 —— 独立审阅不应由同一人用另一账号假冒。')}
+      </div>
+    </div>
+
+    <div class="card" style="padding:14px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">⚠️ ${t('操作安全须知')}</div>
+      <div style="font-size:12px;color:#374151;line-height:1.8">
+        • ${t('普通 admin 与 root / 破玻璃 不同:经济 / 协议级操作需 protocol 权限;按治理铁律须记入审计日志 —— 部分手动结算 / 评估入口的审计仍在补齐中。')}<br>
+        • ${t('危险操作（封禁 / 角色 / 资金 / 协议参数）须带原因,且不可绕过争议 / 仲裁规则。')}<br>
+        • ${t('不要在公共设备暴露 API Key;管理操作均可追溯到你的账户。')}
+      </div>
+      <div style="display:flex;gap:8px;margin-top:10px">
+        <a href="#admin/audit" style="text-decoration:none"><button class="btn btn-outline btn-sm" style="font-size:12px">📜 ${t('查看审计日志')}</button></a>
+        ${isRoot ? `<a href="#admin/manage-admins" style="text-decoration:none"><button class="btn btn-outline btn-sm" style="font-size:12px">👥 ${t('管理管理员')}</button></a>` : ''}
+      </div>
+    </div>
+  `, 'admin')
+}
+
 async function renderAdminUsers(app, opts = {}) {
   if (!state.user) { renderLogin(); return }
   if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin-users'); return }
@@ -4434,20 +4655,25 @@ async function renderApplyRewards(app) {
     <h1 class="page-title">🎁 ${t('申请分享分润')}</h1>
 
     <div class="card" style="margin-bottom:16px;background:#fef2f2;border-color:#fca5a5">
-      <div style="font-weight:600;color:#991b1b;margin-bottom:6px;font-size:14px">⚠️ ${t('本流程与购物无关')}</div>
+      <div style="font-weight:600;color:#991b1b;margin-bottom:6px;font-size:14px">⚠️ ${t('本流程不是购物流程;下方"已完成订单"门槛只是分享分润的反女巫要求')}</div>
       <div style="font-size:12px;color:#7f1d1d;line-height:1.6">
-        ${t('你可以随时退出,不影响任何已下单或未来订单。本流程涉及经济关系登记(三级佣金 + 积分配对),请仔细阅读全部条款。')}<br>
-        <span style="opacity:0.85">This flow is not part of shopping. You can leave anytime without affecting any orders. This is an economic-relationship registration — please read all terms.</span>
+        ${t('你可以随时退出,不影响任何已下单或未来订单。本流程是分享分润的经济关系登记(佣金 / PV / escrow 结算规则;层级按地区配置),请仔细阅读全部条款。')}<br>
+        <span style="opacity:0.85">This is not a shopping flow; the completed-order threshold below is only the anti-sybil requirement for share-commission. You can leave anytime without affecting any orders. This registers the share-commission economic relationship (commission / PV / escrow settlement rules; levels per region config) — please read all terms.</span>
       </div>
       <div style="font-size:11px;color:#7f1d1d;line-height:1.6;margin-top:8px;padding-top:8px;border-top:1px solid #fca5a5;opacity:0.9">
         ${t('注:本「分享分润 / rewards opt-in」仅为 commission / PV / escrow 经济关系登记,不是贡献资格,与贡献任务(#contribute/tasks)/ 我的共建 无关。RFC-002 同意书可能沿用更早措辞,以本 UI 含义为准。')}<br>
         <span style="opacity:0.85">Note: this “share-commission / rewards opt-in” is only a commission / PV / escrow economic-relationship registration — NOT contribution eligibility, and unrelated to the contribution funnel (#contribute/tasks) / My contributions. RFC-002’s consent text may retain older wording; this note governs the UI meaning.</span>
       </div>
+      <div style="font-size:11px;color:#7f1d1d;line-height:1.6;margin-top:8px;padding-top:8px;border-top:1px solid #fca5a5;opacity:0.9">
+        ${t('现实性说明:佣金层级按地区合规配置生效;当前预发布期全局上限为 1 级(仅 L1)。"三级(7:2:1)"是协议最大设计,不构成对未来层级的承诺。')}<br>
+        <span style="opacity:0.85">Reality note: commission levels follow per-region compliance config; during pre-launch a global cap of 1 level (L1 only) applies. “Three tiers (7:2:1)” is the protocol’s maximum design — not a promise of future levels.</span>
+      </div>
     </div>
 
     <div class="card" style="margin-bottom:16px">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:10px">${t('门槛(全部通过才能申请)')}:</div>
+      <div style="font-size:13px;color:#6b7280;margin-bottom:10px">${t('分享分润开通门槛(只适用于分润,不适用于贡献)')}:</div>
       ${checklist}
+      <div style="font-size:11px;color:#6b7280;margin-top:8px;padding-top:8px;border-top:1px solid #f3f4f6">${t('此购买门槛只适用于分享分润(经济关系登记),不适用于贡献任务或 GitHub 贡献认领 — 贡献无需购买。')}</div>
     </div>
 
     <div class="card" style="margin-bottom:16px;background:#fafafa">
@@ -5668,7 +5894,7 @@ async function renderAdminTokenomics(app) {
       <div style="padding:8px 12px;font-size:11px;color:#6b7280">${t('调整：POST /api/admin/tokenomics/tier with body {tier, pv_threshold, score_per_hit, active}')}</div>
     </div>
 
-    <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 三级佣金')} (Top 10)</h2>
+    <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 分享佣金')} (Top 10)</h2>
     <div class="card" style="padding:0;margin-bottom:12px">${commRows}</div>
 
     <h2 style="font-size:15px;font-weight:600;margin:16px 0 8px">🏆 ${t('Top 匹配收益')} (Top 10)</h2>
@@ -5961,6 +6187,9 @@ function renderLogin() {
 function renderWelcome(app) {
   const en = window._lang === 'en'
   const T = (zh, e) => en ? e : zh
+  // 创始白皮书(canonical founding doc)— 跟随界面语言指向 webaz.xyz 公开静态页(匿名可达,不走私有 GitHub)
+  // 这两个路径由 scripts/build-whitepaper-html.ts 从 docs/WHITEPAPER*.md 生成,经 express.static 公开服务
+  const WP_URL = en ? '/whitepaper/en' : '/whitepaper/zh-CN'
   // 2026-05-26 排版品控 — 区块标题 / 副标题 改为 inline style，避免 CSS 级联 / @media 覆写
   // 最低线：h2 ≥ 24px(手机) / 32px(桌面)；sub ≥ 16px
   // ⚠️ 不用 calc()，避免 +/- 两侧空格被压掉导致整条 font-size 失效
@@ -6129,6 +6358,7 @@ function renderWelcome(app) {
         <p style="font-size:clamp(17px,2.6vh,20px);color:#71717A;line-height:${en ? '1.6' : '1.75'};margin:0;max-width:65ch;margin-left:auto;margin-right:auto">
           ${T('买家、卖家、创作者三位一体的去中心化商业协议', 'A decentralized commerce protocol where buyers, sellers, and creators are one.')}
         </p>
+        <div style="margin-top:28px"><a href="${WP_URL}" target="_blank" rel="noopener" style="font-size:15px;color:#6366f1;text-decoration:none;font-weight:500">${T('📖 阅读创始白皮书：我参与，故我被看见 →', '📖 Read the founding whitepaper: I participate, therefore I am seen →')}</a></div>
       </section>
 
       <!-- 区块 1: Buyers -->
@@ -6356,7 +6586,7 @@ function renderWelcome(app) {
               <div class="w-card-desc">${T('已经准备好了？直接进入协议。', 'Ready already? Step into the protocol.')}</div>
             </div>
             <div class="w-join-card-right">
-              <button class="w-btn-full w-btn-primary" onclick="scrollToJoinWithRole('')">${T('立即注册', 'Sign Up Now')}</button>
+              <button class="w-btn-full w-btn-primary" onclick="openAuthSheet('reg')">${T('立即注册', 'Sign Up Now')}</button>
             </div>
           </div>
         </div>
@@ -6369,7 +6599,7 @@ function renderWelcome(app) {
         <div style="margin-top:10px">
           <a href="https://github.com/seasonsagents-art/webaz/blob/main/docs/META-RULES-FULL.md" target="_blank" rel="noopener">${T('完整元规则', 'Full Meta-Rules')}</a>
           <a href="https://github.com/seasonsagents-art/webaz" target="_blank" rel="noopener">GitHub</a>
-          <a href="#">${T('协议白皮书', 'Whitepaper')}</a>
+          <a href="${WP_URL}" target="_blank" rel="noopener">${T('协议白皮书', 'Whitepaper')}</a>
           <a href="mailto:contact@webaz.xyz">📧 contact@webaz.xyz</a>
         </div>
       </footer>
@@ -6715,13 +6945,33 @@ window.submitContributeProposal = async () => {
 
 const CONTRIBUTE_PAGE_STYLE = `max-width:880px;margin:0 auto;padding:24px 16px 80px;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','PingFang SC','Microsoft YaHei UI',sans-serif`
 
+window.contributeSetLang = (lang) => {
+  if (lang !== 'zh' && lang !== 'en') return
+  setLang(lang)
+  document.getElementById('html-root')?.setAttribute('lang', lang === 'en' ? 'en' : 'zh-CN')
+  route(true)
+}
+
+function contributeLangSwitchHTML(T) {
+  const en = window._lang === 'en'
+  const btn = (lang, label, active) => `<button type="button" ${active ? 'disabled' : `onclick="contributeSetLang('${lang}')"`} style="border:0;background:${active ? '#18181B' : 'transparent'};color:${active ? '#fff' : '#71717A'};padding:5px 10px;border-radius:7px;font-size:12px;font-weight:600;cursor:${active ? 'default' : 'pointer'}">${label}</button>`
+  return `<div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin:0 0 18px;padding-bottom:10px;border-bottom:1px solid #e4e4e7">
+    <a href="#welcome" style="color:#52525B;text-decoration:none;font-size:13px;font-weight:700">← ${T('WebAZ 欢迎页', 'WebAZ Welcome')}</a>
+    <div role="group" aria-label="${T('语言切换', 'Language switch')}" style="display:flex;align-items:center;gap:2px;border:1px solid #e4e4e7;border-radius:9px;padding:2px;background:#fff">
+      ${btn('zh', '中文', !en)}${btn('en', 'EN', en)}
+    </div>
+  </div>`
+}
+
+function contributePageShell(T, inner) {
+  return `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">${contributeLangSwitchHTML(T)}${inner}</div>`
+}
+
 async function renderContributeTasks(app) {
   const en = window._lang === 'en'
   const T = (zh, e) => en && e ? e : zh
   const q = state._urlQuery || {}
-  app.innerHTML = `
-    ${preLaunchBannerHTML()}
-    <div style="${CONTRIBUTE_PAGE_STYLE}">
+  app.innerHTML = contributePageShell(T, `
       <header style="margin-bottom:20px">
         <h1 style="font-size:clamp(24px,5vw,32px);margin:0 0 8px;color:#18181B">🛠️ ${T('公开任务板', 'Open Task Board')}</h1>
         <p style="color:#52525B;font-size:15px;margin:0;line-height:1.6">${T('面向任何人和他们的 agent 的公开共建任务。只读取公开任务;认领需登录。', 'Open contribution tasks for anyone and their agents. Read-only here; claiming requires login.')}</p>
@@ -6752,7 +7002,7 @@ async function renderContributeTasks(app) {
         <button onclick="location.hash='#contribute/tasks/suggest'" style="padding:8px 16px;background:#fff;color:#18181B;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;cursor:pointer">💡 ${T('建议新任务', 'Suggest a task')}</button>
       </div>
       <div id="ct-list"><div style="color:#a1a1aa;text-align:center;padding:30px">${T('加载中…', 'Loading…')}</div></div>
-    </div>`
+    `)
 
   const params = new URLSearchParams()
   for (const k of ['area', 'risk_level', 'auto_claimable', 'agent_capabilities', 'max_duration_minutes', 'estimated_context_size', 'estimated_agent_budget']) if (q[k]) params.set(k, q[k])
@@ -6789,18 +7039,18 @@ async function renderContributeTasks(app) {
 async function renderContributeTaskDetail(app, id) {
   const en = window._lang === 'en'
   const T = (zh, e) => en && e ? e : zh
-  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}"><div style="color:#a1a1aa;text-align:center;padding:40px">${T('加载中…', 'Loading…')}</div></div>`
+  app.innerHTML = contributePageShell(T, `<div style="color:#a1a1aa;text-align:center;padding:40px">${T('加载中…', 'Loading…')}</div>`)
   let j, res
   try {
     res = await fetch('/api/public/build-tasks/' + encodeURIComponent(id), { signal: AbortSignal.timeout(10000) })
     j = await res.json().catch(() => ({}))
   } catch (e) {
-    app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}"><div style="color:#dc2626;text-align:center;padding:30px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div></div>`; return
+    app.innerHTML = contributePageShell(T, `<div style="color:#dc2626;text-align:center;padding:30px">${T('加载失败', 'Load failed')}: ${_cEsc(e.message || 'unknown')}</div>`); return
   }
   if (!res.ok || !j.task) {
-    app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+    app.innerHTML = contributePageShell(T, `
       <div style="color:#52525B;text-align:center;padding:30px">${T('任务不存在或非公开。', 'Task not found or not public.')}</div>
-      <div style="text-align:center"><button onclick="location.hash='#contribute/tasks'" style="padding:8px 16px;background:#fff;border:1px solid #d4d4d8;border-radius:8px;cursor:pointer">← ${T('返回任务板', 'Back to board')}</button></div></div>`; return
+      <div style="text-align:center"><button onclick="location.hash='#contribute/tasks'" style="padding:8px 16px;background:#fff;border:1px solid #d4d4d8;border-radius:8px;cursor:pointer">← ${T('返回任务板', 'Back to board')}</button></div>`); return
   }
   const task = j.task
   const cct = j.canonical_contribution_target || {}
@@ -6814,7 +7064,7 @@ async function renderContributeTaskDetail(app, id) {
         : `<button onclick="contributeClaim('${_cEsc(task.task_id)}')" style="padding:10px 20px;background:#fff;color:#18181B;border:1px solid #6366f1;border-radius:8px;font-size:14px;cursor:pointer">🔑 ${T('登录后认领', 'Log in to claim')}</button><div style="font-size:11px;color:#6b7280;margin-top:6px">${T('认领需要登录(真人 Passkey 账户);浏览器不会自动执行 GitHub 操作。', 'Claiming requires login (a real Passkey account); the browser performs no automatic GitHub action.')}</div>`)
     : `<div style="font-size:12px;color:#6b7280">${T('此任务需人工认领流程,不可自动认领。', 'This task uses a manual claim flow; it is not auto-claimable.')}</div>`
 
-  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+  app.innerHTML = contributePageShell(T, `
     <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
     <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">${_cEsc(task.title)}</h1>
     <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-bottom:6px">
@@ -6857,7 +7107,7 @@ async function renderContributeTaskDetail(app, id) {
     ${section('✋', T('认领', 'Claim'), claimBtn)}
 
     <div style="font-size:11px;color:#9ca3af;margin-top:8px;line-height:1.6">${T('提示:sandbox 运行或本地草稿不是正式参与,也不是贡献。只有在 canonical 仓库被合并的 PR(或被认可的 issue / task / RFC)才进入贡献记录。', 'Note: a sandbox run or local draft is not participation and is not a contribution. Only a merged PR (or recognized issue / task / RFC) on the canonical repo enters the contribution record.')}</div>
-  </div>`
+  `)
 }
 
 async function renderContributeSuggest(app) {
@@ -6868,7 +7118,7 @@ async function renderContributeSuggest(app) {
     ${ta
       ? `<textarea id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;min-height:90px;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px;font-family:inherit"></textarea>`
       : `<input id="${id}" placeholder="${_cEsc(ph)}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:13px">`}`
-  app.innerHTML = `${preLaunchBannerHTML()}<div style="${CONTRIBUTE_PAGE_STYLE}">
+  app.innerHTML = contributePageShell(T, `
     <button onclick="location.hash='#contribute/tasks'" style="background:none;border:none;color:#6366f1;cursor:pointer;font-size:13px;padding:0;margin-bottom:12px">← ${T('返回任务板', 'Back to board')}</button>
     <h1 style="font-size:clamp(22px,4.5vw,28px);margin:0 0 8px;color:#18181B">💡 ${T('建议一个任务', 'Suggest a task')}</h1>
     <p style="color:#52525B;font-size:14px;margin:0 0 8px;line-height:1.6">${T('任何人都可以提建议(无需登录)。建议进入维护者收件箱待审,绝不会自动变成正式任务或出现在公开任务板。', 'Anyone can suggest (no login needed). Suggestions enter the maintainer review inbox and never auto-become tasks or appear on the public board.')}</p>
@@ -6881,7 +7131,7 @@ async function renderContributeSuggest(app) {
     ${field('cs-login', T('你的 GitHub 用户名(可选)', 'Your GitHub login (optional)'), 'octocat')}
     <button onclick="submitContributeProposal()" style="margin-top:16px;padding:10px 22px;background:#6366f1;color:#fff;border:none;border-radius:8px;font-size:14px;cursor:pointer">${T('提交建议', 'Submit suggestion')}</button>
     <div id="ct-suggest-result" style="margin-top:14px"></div>
-  </div>`
+  `)
 }
 
 // The boundary constant is server-authoritative; the client mirrors the SAME frozen stance for pages that
@@ -7043,19 +7293,30 @@ window.openAuthSheet = (defaultTab) => {
         </div>
 
         <div style="margin-top:14px;text-align:center">
-          <a href="#recover" onclick="closeSheet()" style="font-size:13px;color:#6366f1;text-decoration:none">🔑 ${t('忘了密钥？点此找回 →')}</a>
+          <a href="#recover" onclick="closeSheet()" style="font-size:13px;color:#6366f1;text-decoration:none">🔑 ${t('忘记 API Key / 密码？邮箱找回并重置 →')}</a>
         </div>
       </div>
 
       <div id="panel-reg" style="${defaultTab==='reg'?'':'display:none'}">
         <div id="reg-gate-hint" style="display:none;background:#fef3c7;border:1px solid #fde68a;padding:10px 12px;border-radius:8px;margin-bottom:12px;font-size:13px;color:#92400e"></div>
+        <div class="form-group">
+          <label class="form-label">${t('找回邮箱')} <span style="color:#dc2626">*</span> <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('（先验证邮箱，丢号才能找回）')}</span></label>
+          <div style="display:flex;gap:6px;align-items:stretch">
+            <input class="form-control" id="inp-reg-email" type="email" placeholder="your@example.com" style="flex:1" oninput="window._onRegEmailInput && window._onRegEmailInput()">
+            <button id="btn-reg-sendcode" type="button" onclick="doRegSendCode()" style="white-space:nowrap;padding:0 12px;background:#6366f1;color:#fff;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:pointer">${t('发送验证码')}</button>
+          </div>
+          <div id="reg-code-row" class="form-group" style="display:none;margin-top:8px;margin-bottom:0">
+            <input class="form-control" id="inp-reg-code" inputmode="numeric" maxlength="6" placeholder="${t('输入 6 位邮箱验证码')}">
+            <div style="font-size:11px;color:#16a34a;margin-top:4px">${t('验证码已发送，请查收（含垃圾箱），10 分钟内有效')}</div>
+          </div>
+        </div>
         <div class="form-group">
           <label class="form-label">${t('邀请码')} <span style="color:#dc2626">*</span></label>
           <div style="display:flex;gap:6px;align-items:stretch">
             <input class="form-control" id="inp-sponsor" placeholder="${t('陆续开放中，请期待')}" style="font-family:monospace;font-size:13px;flex:1">
             <button id="btn-fetch-ref" type="button" disabled title="${t('该功能默认关闭，由管理员开启后可用')}" onclick="doFetchInviteCode()" style="white-space:nowrap;padding:0 12px;background:#e5e7eb;color:#9ca3af;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:not-allowed">${t('获取邀请码')}</button>
           </div>
-          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('邀请码为 6-7 位永久码，可带 -L/-R；没有就联系老用户拿邀请链接')}</div>
+          <div style="font-size:11px;color:#6b7280;margin-top:4px" id="sponsor-hint-msg">${t('邀请码为 6-7 位永久码；没有就联系老用户拿邀请链接')}</div>
         </div>
         <div class="form-group">
           <label class="form-label">${t('名称 / 店铺名')}</label>
@@ -7207,8 +7468,7 @@ async function renderPromoter(app) {
   // 邀请短链只用 permanent_code，绝不兜底 usr_xxx；缺失时显示"暂不可用"。
   const code = data.permanent_code || null
   const refLinkShort  = code ? `${origin}/i/${code}`   : ''
-  const leftLink  = code ? `${origin}/i/${code}-L` : ''
-  const rightLink = code ? `${origin}/i/${code}-R` : ''
+  // pre-public 去左右码:不再生成 -L/-R 侧链,只用唯一推荐码 refLinkShort
   const inviteUnavailableHtml = `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:12px;margin-bottom:12px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
   const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
 
@@ -7234,8 +7494,8 @@ async function renderPromoter(app) {
 
       <div style="font-size:11px;line-height:1.6;color:#6b7280;margin-bottom:8px">
         ${data.permissions?.can_l1_share
-          ? `<span style="color:#16a34a">✅ ${t('已获得分享奖励资格')}</span>` + (data.permissions.l1_share_override === 1 ? ` · <span style="color:#7c3aed">${t('Admin 强制授予')}</span>` : '')
-          : `<span style="color:#d97706">⏳ ${t('分享奖励待解锁')}</span> · <span>${t('完成首笔购买即可')}</span>`}
+          ? `<span style="color:#16a34a">✅ ${t('已开通分享分润资格')}</span>` + (data.permissions.l1_share_override === 1 ? ` · <span style="color:#7c3aed">${t('Admin 强制授予')}</span>` : '')
+          : `<span style="color:#d97706">⏳ ${t('分享分润待开通')}</span> · <span>${t('完成首笔购买即可')}</span>`}
         ${data.my_sponsor ? `<br>${t('邀请人')}: <strong>${escHtml(t(data.my_sponsor.name))}</strong>` : ''}
         ${_pvAllowed && atomic.my_placement ? ` · ${t('挂靠')}: <strong>${escHtml(t(atomic.my_placement.name))}</strong> ${atomic.my_placement.side === 'left' ? '🔵' : '🟢'}` : ''}
         · ${t('所在地区')}: ${regionLabel(data.region || 'global')}
@@ -7243,32 +7503,14 @@ async function renderPromoter(app) {
 
       ${!_pvAllowed ? '' : `
       <details style="margin-top:4px">
-        <summary style="font-size:11px;color:#6366f1;cursor:pointer;padding:6px 0">⚙ ${t('左右区设置')}</summary>
+        <summary style="font-size:11px;color:#6366f1;cursor:pointer;padding:6px 0">⚙ ${t('自动放置设置')}</summary>
         <div style="padding:8px 0">
-          <div style="font-size:11px;color:#6b7280;margin-bottom:6px">${t('指定左/右轨')}</div>
-          <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:14px">
-            <div style="background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;padding:10px">
-              <div style="font-size:12px;font-weight:600;color:#1e40af;text-align:center;margin-bottom:8px">🔵 ${t('左区码')}</div>
-              <div style="display:grid;grid-template-columns:1fr 1fr;gap:6px">
-                <button onclick="copyPlacementLink('${esc(leftLink)}', 'left', this)" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#3b82f6;color:#fff;border:none;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📋 ${t('复制')}</button>
-                <button onclick="showQRModal('${esc(leftLink)}','🔵 ${t('左区码')}')" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#fff;color:#3b82f6;border:1.5px solid #3b82f6;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📱 ${t('二维码')}</button>
-              </div>
-            </div>
-            <div style="background:#f0fdf4;border:1px solid #bbf7d0;border-radius:8px;padding:10px">
-              <div style="font-size:12px;font-weight:600;color:#166534;text-align:center;margin-bottom:8px">🟢 ${t('右区码')}</div>
-              <div style="display:grid;grid-template-columns:1fr 1fr;gap:6px">
-                <button onclick="copyPlacementLink('${esc(rightLink)}', 'right', this)" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#16a34a;color:#fff;border:none;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📋 ${t('复制')}</button>
-                <button onclick="showQRModal('${esc(rightLink)}','🟢 ${t('右区码')}')" style="display:flex;align-items:center;justify-content:center;gap:3px;padding:7px 4px;background:#fff;color:#16a34a;border:1.5px solid #16a34a;border-radius:6px;font-size:11px;font-weight:600;cursor:pointer">📱 ${t('二维码')}</button>
-              </div>
-            </div>
-          </div>
-
-          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('自动选边偏好')}</div>
+          <div style="font-size:11px;color:#9ca3af;margin-bottom:8px">${t('新人通过你的推荐码注册后,系统自动安排积分树位置(无需选择左右)。')}</div>
+          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('自动放置依据')}</div>
           <select id="placement-pref-select" class="form-control" style="font-size:12px" onchange="doSetPlacementPref()">
             <option value="team_count">${t('推荐少的一边（默认）')}</option>
             <option value="pv_count">${t('近 90 天积分少的一边')}</option>
           </select>
-          <p style="font-size:11px;color:#9ca3af;margin-top:6px;line-height:1.5">${t('💡 想为这一次分享强制走左/右轨？复制上方「🔵 左区推荐码 / 🟢 右区推荐码」直接发，仅当次有效，不会改长期偏好。')}</p>
           <div id="placement-pref-msg" style="font-size:11px;color:#6b7280;margin-top:4px"></div>
         </div>
       </details>`}
@@ -7765,24 +8007,12 @@ function renderAtomicInner(a, leftPv, rightPv, weak, nextTier, nextProgress) {
 
     ${renderBinaryTree(a.binary_tree)}
 
-    <div style="font-size:12px;color:#6b7280;margin-bottom:6px">${t('弱侧匹配量')}: <strong>${weak.toLocaleString()}</strong> PV</div>
-    ${nextTier ? `
-      <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('距离 tier')} ${nextTier.tier} ${t('门槛')} ${Number(nextTier.pv_threshold).toLocaleString()} PV (+${nextTier.score_per_hit} Score)</div>
-      <div style="background:#f3f4f6;height:6px;border-radius:3px;overflow:hidden;margin-bottom:10px">
-        <div style="background:#6366f1;height:6px;width:${nextProgress.toFixed(1)}%"></div>
-      </div>` : ''}
-
-    <details style="margin-bottom:10px">
-      <summary style="font-size:12px;color:#6366f1;cursor:pointer">${t('匹配档位表')}</summary>
-      <table style="width:100%;margin-top:6px;border-collapse:collapse">
-        <tr style="background:#f9fafb;font-size:11px;color:#6b7280">
-          <th style="padding:5px 8px;text-align:left">Tier</th>
-          <th style="padding:5px 8px;text-align:right">${t('门槛 PV')}</th>
-          <th style="padding:5px 8px;text-align:right">${t('Score / 次')}</th>
-        </tr>
-        ${tierTable}
-      </table>
-    </details>
+    <!-- pre-public de-MLM: 弱腿/对碰 tier 进度 + Score/次 档位表已下线;PV/位置仅为参与记录,非收益路径 -->
+    <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#9ca3af;line-height:1.6;margin-bottom:10px">
+      ${window._lang === 'en'
+        ? 'PV tiers / pairing are pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+        : 'PV 档位 / 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
+    </div>
     <h4 style="font-size:12px;font-weight:600;margin:6px 0">📊 ${t('最近匹配')}</h4>
     ${recentRows}`
 }
@@ -7950,38 +8180,29 @@ function renderAtomicSection(a) {
     <h2 style="font-size:15px;font-weight:600;margin:24px 0 8px">⚛ ${t('积分 — 积分匹配')}</h2>
 
     <div class="card" style="margin-bottom:12px;background:linear-gradient(135deg,#dbeafe,#f0fdf4)">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">🔗 ${t('左右码（完全对称 / 末端垂直挂靠）')}</div>
-      <div style="font-size:11px;color:#6b7280;margin-bottom:10px">${t('点击下方任一卡片复制整条推荐链接。新人通过左/右链接注册会挂到对应区。')}</div>
+      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">🔗 ${t('我的推荐码')}</div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:10px">${t('复制你的推荐链接分享给新人;新人注册后由系统自动安排积分树位置(无需选择左右)。')}</div>
       ${(() => {
-        // placement 短链只用 permanent_code(/i/CODE-L / -R),绝不用 usr_xxx;缺失则提示不可用
+        // pre-public 去左右码:只用唯一的推荐码(/i/CODE,不带 -L/-R);缺失则提示不可用
         const myCode = state.user?.permanent_code || null
         const origin = location.origin
         if (!myCode) return `<div style="background:#fef2f2;border:1px solid #fca5a5;border-radius:10px;padding:10px;font-size:12px;color:#991b1b">⚠️ ${t('邀请码暂不可用，请刷新或联系支持')}</div>`
-        const leftLink  = `${origin}/i/${myCode}-L`
-        const rightLink = `${origin}/i/${myCode}-R`
-        const esc = (s) => s.replace(/'/g, "\\'").replace(/"/g, '&quot;')
+        const link = `${origin}/i/${myCode}`
+        const esc = (s) => s.replace(/'/g, "\\'")
         return `
-          <div style="display:grid;grid-template-columns:1fr 1fr;gap:10px">
-            <div onclick="copyPlacementLink('${esc(leftLink)}', 'left', this)" style="cursor:pointer;background:#eff6ff;border:2px solid #3b82f6;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#dbeafe'" onmouseout="this.style.background='#eff6ff'">
-              <div style="font-size:13px;font-weight:700;color:#1e40af;margin-bottom:6px">🔵 ${t('左区推荐码')}</div>
-              <div style="font-size:10px;color:#1e40af;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(leftLink)}</div>
-              <div style="font-size:11px;color:#3b82f6;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
-            </div>
-            <div onclick="copyPlacementLink('${esc(rightLink)}', 'right', this)" style="cursor:pointer;background:#f0fdf4;border:2px solid #16a34a;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#dcfce7'" onmouseout="this.style.background='#f0fdf4'">
-              <div style="font-size:13px;font-weight:700;color:#166534;margin-bottom:6px">🟢 ${t('右区推荐码')}</div>
-              <div style="font-size:10px;color:#166534;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(rightLink)}</div>
-              <div style="font-size:11px;color:#16a34a;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
-            </div>
+          <div onclick="copyRefLink('${esc(link)}')" style="cursor:pointer;background:#eef2ff;border:2px solid #6366f1;border-radius:10px;padding:10px;transition:all 0.15s" onmouseover="this.style.background='#e0e7ff'" onmouseout="this.style.background='#eef2ff'">
+            <div style="font-size:13px;font-weight:700;color:#4338ca;margin-bottom:6px">${t('推荐链接')}</div>
+            <div style="font-size:10px;color:#4338ca;word-break:break-all;line-height:1.4;background:#fff;padding:6px 8px;border-radius:6px;font-family:monospace">${escHtml(link)}</div>
+            <div style="font-size:11px;color:#6366f1;margin-top:6px;text-align:center">${t('点击复制 →')}</div>
           </div>`
       })()}
       <details style="margin-top:10px">
-        <summary style="font-size:11px;color:#6366f1;cursor:pointer">⚙ ${t('自动选边偏好（无 side 的链接 / 商品分享适用）')}</summary>
+        <summary style="font-size:11px;color:#6366f1;cursor:pointer">⚙ ${t('自动放置依据')}</summary>
         <div style="padding:8px 0">
           <select id="placement-pref-select" class="form-control" style="font-size:12px" onchange="doSetPlacementPref()">
             <option value="team_count">${t('推荐少的一边（默认）')}</option>
             <option value="pv_count">${t('近 90 天积分少的一边')}</option>
           </select>
-          <p style="font-size:11px;color:#9ca3af;margin-top:6px;line-height:1.5">${t('💡 想为这一次分享强制走左/右轨？复制上方「🔵 左区推荐码 / 🟢 右区推荐码」直接发，仅当次有效，不会改长期偏好。')}</p>
           <div id="placement-pref-msg" style="font-size:11px;color:#6b7280;margin-top:4px"></div>
         </div>
       </details>
@@ -8003,13 +8224,13 @@ function renderAtomicSection(a) {
 
     ${renderBinaryTree(a.binary_tree)}
 
+    <!-- pre-public de-MLM: 弱腿/对碰 tier 进度已下线;PV/位置仅为参与记录,非收益路径 -->
     <div class="card" style="margin-bottom:12px">
-      <div style="font-size:13px;color:#6b7280;margin-bottom:6px">${t('弱侧匹配量')}: <strong>${pair.toLocaleString()}</strong> PV</div>
-      ${nextTier ? `
-        <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('距离 tier')} ${nextTier.tier} ${t('门槛')} ${Number(nextTier.pv_threshold).toLocaleString()} PV (${nextTier.score_per_hit} Score)</div>
-        <div style="background:#f3f4f6;height:6px;border-radius:3px;overflow:hidden">
-          <div style="background:#6366f1;height:6px;width:${nextProgress.toFixed(1)}%"></div>
-        </div>` : ''}
+      <div style="font-size:11px;color:#9ca3af;line-height:1.6">
+        ${window._lang === 'en'
+          ? 'PV tiers / pairing are pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+          : 'PV 档位 / 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
+      </div>
     </div>
 
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:12px">
@@ -8023,18 +8244,6 @@ function renderAtomicSection(a) {
       </div>
     </div>
 
-    <details style="margin-bottom:12px">
-      <summary style="font-size:12px;color:#6366f1;cursor:pointer">${t('匹配档位表')}</summary>
-      <table style="width:100%;margin-top:8px;border-collapse:collapse">
-        <tr style="background:#f9fafb;font-size:11px;color:#6b7280">
-          <th style="padding:6px 8px;text-align:left">Tier</th>
-          <th style="padding:6px 8px;text-align:right">${t('门槛 PV')}</th>
-          <th style="padding:6px 8px;text-align:right">${t('Score / 次')}</th>
-        </tr>
-        ${tierTable}
-      </table>
-    </details>
-
     <h3 style="font-size:13px;font-weight:600;margin:8px 0">📊 ${t('最近匹配')}</h3>
     <div class="card" style="padding:0">
       ${recentRows}
@@ -8097,10 +8306,7 @@ window.showNodePvModal = async (userId) => {
     body.innerHTML = alert$('error', data.error)
     return
   }
-  const weak = data.weak_leg_pv || 0
-  const ratio = (data.total_left_pv + data.total_right_pv) > 0
-    ? (weak / Math.max(data.total_left_pv, data.total_right_pv) * 100).toFixed(0)
-    : '0'
+  // pre-public de-MLM: 不再展示弱腿/对碰收益(weak-leg / pairing earnings)。PV / 位置仅为参与记录。
   body.innerHTML = `
     <div style="text-align:left">
       <div style="display:flex;align-items:center;gap:10px;margin-bottom:14px;padding-bottom:10px;border-bottom:1px solid #f3f4f6">
@@ -8128,10 +8334,10 @@ window.showNodePvModal = async (userId) => {
         </div>
       </div>
 
-      <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#6b7280;line-height:1.7;margin-bottom:10px">
-        ${t('弱侧匹配量')}: <strong style="color:#374151">${weak.toLocaleString()}</strong> PV · ${t('双腿均衡')} ${ratio}%<br>
-        ${t('累计匹配')}: <strong style="color:#374151">${data.total_hits || 0}</strong> ${t('次')} · ${t('累计获 WAZ')}: <strong style="color:#16a34a">${Number(data.settled_waz || 0).toFixed(2)}</strong><br>
-        ${t('待结 Score')}: <strong style="color:#d97706">${Number(data.pending_score || 0).toFixed(1)}</strong>
+      <div style="background:#f9fafb;border-radius:6px;padding:8px 10px;font-size:11px;color:#9ca3af;line-height:1.6;margin-bottom:10px">
+        ${window._lang === 'en'
+          ? 'PV pairing is pre-launch and currently disabled. PV / placement is a participation record only — not an earning path or payout promise.'
+          : 'PV 对碰为 pre-launch 阶段、当前未启用。PV / 位置仅为参与记录,非收益路径或兑付承诺。'}
       </div>
 
       <a href="#u/${data.id}" onclick="closeModal()" style="display:block;text-align:center;font-size:12px;color:#4f46e5;text-decoration:none;padding:8px">→ ${t('查看 TA 的主页')}</a>
@@ -8187,7 +8393,7 @@ async function webShareOrCopy(opts) {
 
 window.copyRefLink = async (link) => {
   const meName = state.user?.name || t('一位老用户')
-  const text = t('我在 WebAZ 用 AI 比价下单，省钱还能拿分享佣金 + PV 双激励。通过我的链接注册有奖励，TA 也得佣金 — 双方共赢') + '\n— ' + meName
+  const text = t('我在 WebAZ 用 AI 比价下单，体验不错，推荐你也试试。分享链接仅作参与 / 归因记录，不构成收益承诺。') + '\n— ' + meName
   const r = await webShareOrCopy({ title: 'WebAZ', text, url: link })
   if (r === 'shared') toast$(t('已分享'))
   else if (r === 'copied') toast$(t('已复制（含邀请文案）'))
@@ -8265,9 +8471,9 @@ async function maybePromptPlacementBind() {
     const st = await GET('/profile/placement-status')
     if (!st.can_bind) return  // 已有 placement 或 有下线 → 不弹
     setTimeout(() => {
-      const ok = confirm(`📍 ${t('系统检测到邀请链接')}\n\n${t('inviter')}: ${inviter}\n\n${t('是否加入对方的积分配对？')}\n${t('系统将按推荐人偏好自动选择左/右区。一旦加入永久不变。')}`)
+      const ok = confirm(`📍 ${t('系统检测到邀请链接')}\n\n${t('inviter')}: ${inviter}\n\n${t('是否加入对方的积分配对？')}\n${t('系统将自动安排积分树位置。一旦加入永久不变。')}`)
       if (ok) {
-        POST('/profile/bind-placement', { inviter_id: inviter, side: hint.placement_side || undefined }).then(res => {
+        POST('/profile/bind-placement', { inviter_id: inviter }).then(res => {
           if (res.error) alert(`✗ ${res.error}`)
           else alert(`✓ ${t('已加入积分树')}\n${t('侧')}: ${res.side}\n${t('深度')}: ${res.depth}`)
         })
@@ -10223,6 +10429,10 @@ async function renderMyContributions(app) {
   app.innerHTML = shell(loading$(), 'me')
   const p = await GET('/build-reputation/me')
   if (!p || p.error) { app.innerHTML = shell(`<div class="card" style="padding:16px;color:#b91c1c">${escHtml(p?.error || t('加载失败'))}</div>`, 'me'); return }
+  // F9 — GitHub 身份归属面(只读自己的 bindings + attributable facts;失败时优雅降级,不挡整页)
+  const gid = await GET('/contribution-identity/github/me').catch(() => null)
+  // F10 — 自动发现可认领的 GitHub 贡献(只读;失败优雅降级)
+  const claimable = await GET('/contribution-identity/github/claimable').catch(() => null)
   const lang = window._lang === 'zh' ? 'zh' : 'en'
   const tier = p.tier || {}
   const k = p.kpi || {}
@@ -10259,12 +10469,175 @@ async function renderMyContributions(app) {
     </div>
     ${provRows ? `<div class="card" style="padding:10px;margin-bottom:12px"><div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('署名构成(自报)')}</div>${provRows}</div>` : ''}
     ${!p.passkey_anchor_present ? `<div class="card" style="padding:10px;margin-bottom:12px;border-left:3px solid #d97706"><div style="font-size:12px;color:#92400e">${t('未绑 Passkey:贡献可受理致谢,但需绑定真人锚点才记入建设信誉。')}</div></div>` : ''}
+    ${ghClaimSectionHtml(gid, claimable, lang)}
+    <div class="card" onclick="location.hash='#contribute/tasks'" style="padding:12px 14px;margin-bottom:12px;cursor:pointer;display:flex;align-items:center;gap:10px">
+      <div style="font-size:20px;flex-shrink:0">📋</div>
+      <div style="flex:1;min-width:0">
+        <div style="font-weight:600;font-size:13px">${t('查看公开共建任务')}</div>
+        <div style="font-size:11px;color:#9ca3af;margin-top:2px">${t('可浏览 / 可认领的公共任务板(独立于我的贡献记录)')}</div>
+      </div>
+      <div style="color:#9ca3af">›</div>
+    </div>
     <div style="font-size:13px;font-weight:600;margin:14px 0 6px">${t('限制与申诉')}</div>
     ${restrHtml}
     <div style="font-size:11px;color:#9ca3af;margin-top:14px">${t('看板仅自己可见,不做公开排行。')}</div>
   `, 'me')
 }
 
+// ─── F9 — GitHub 贡献认领 UI(身份/归属认领;不是奖励、付款或提现)──────────────────────
+// 服务端三步契约:claim-challenge(签发挑战+proof_marker)→ 用户把 marker 发到自己 GitHub 账号的
+// public gist → requestPasskeyGate('identity_claim', {github_actor_id, source_event_key, challenge_id})
+// 拿一次性 webauthn_token → claim-complete。accountId 恒为 session 用户(前端绝不传 account_id);
+// GitHub read token 只在服务端(前端不收不传)。F10 discovery 已接入(GET .../github/claimable →
+// 「可认领的 GitHub 贡献」列表,点「认领此贡献」预填并发起);手动输入仅作找不到时的 fallback。
+let _ghClaimCtx = null   // { challenge_id, expires_at, proof_marker, actor, sek }
+
+// typed error code → 可读提示(认领失败绝不伪装成功)
+function ghClaimErrText(code, fallback) {
+  const m = {
+    GITHUB_READ_NOT_CONFIGURED: t('身份认领暂不可用(服务端未配置 GitHub 读取凭证),请稍后再试或联系 maintainer'),
+    FACT_NOT_CLAIMABLE: t('没有可认领的、经凭证背书的 GitHub 贡献记录 — 请检查 source_event_key 是否正确'),
+    ACTOR_MISMATCH: t('该贡献记录的执行者与所填 GitHub 身份不符'),
+    ALREADY_BOUND: t('该 GitHub 身份已被其他账号认领'),
+    CHALLENGE_EXPIRED: t('认领挑战已过期,请重新生成'),
+    CHALLENGE_ALREADY_USED: t('认领挑战已被使用,请重新生成'),
+    CHALLENGE_NOT_FOUND: t('认领挑战不存在或不属于当前账号'),
+    PROOF_REJECTED: t('gist 证明未通过 — 请确认 gist 公开、归属于该 GitHub 账号、且内容为完整 proof_marker'),
+    HUMAN_PRESENCE_REQUIRED: t('此操作需要真人 Passkey 验证'),
+    AGENT_SCOPE_UNDECLARED: t('写操作需问责锚点 — 请先在「安全」页绑定 Passkey'),
+    INVALID_REQUEST: t('请求参数无效 — 请检查两个输入框'),
+  }
+  return m[code] || fallback || t('操作失败')
+}
+
+function ghClaimSectionHtml(gid, claimable, lang) {
+  const ok = gid && !gid.error
+  const bindings = ok ? (gid.bindings || []) : []
+  const facts = ok ? (gid.attributable_facts || []) : []
+  const notice = ok && gid.value_boundary ? (lang === 'zh' ? gid.value_boundary.notice_zh : gid.value_boundary.notice_en) : ''
+  const bindRows = bindings.length === 0
+    ? `<div style="font-size:12px;color:#9ca3af">${t('尚未绑定 GitHub 身份')}</div>`
+    : bindings.map(b => `<div style="font-size:12px;color:#374151">🔗 <code>github:${escHtml(String(b.github_actor_id))}</code> · ${escHtml(String(b.visibility))} · ${t('绑定于')} ${escHtml(String(b.bound_at || ''))}</div>`).join('')
+  const factRows = facts.length === 0
+    ? `<div style="font-size:12px;color:#9ca3af">${t('暂无可归属的贡献事实')}</div>`
+    : facts.map(f => `<div style="font-size:11px;color:#374151;padding:6px 8px;background:#f9fafb;border-radius:6px;margin-bottom:4px">
+        <div><b>${escHtml(String(f.type || f.source))}</b> · ${escHtml(String(f.status))} · <code style="font-size:10px">${escHtml(String(f.fact_id).slice(0, 18))}…</code></div>
+        <div style="color:#6b7280;word-break:break-all">${escHtml(String(f.source_event_key))}</div>
+      </div>`).join('')
+  // F10 — 自动发现的可认领贡献(actor 未被任何账号绑定的 credential-backed facts)
+  const cl = (claimable && !claimable.error) ? (claimable.claimable_facts || []) : null
+  const claimRows = cl === null
+    ? `<div style="font-size:12px;color:#9ca3af">${t('可认领列表暂不可用,稍后再试')}</div>`
+    : cl.length === 0
+      ? `<div style="font-size:12px;color:#9ca3af">${t('暂无自动发现的可认领贡献')}</div>`
+      : cl.map(r => `<div style="font-size:11px;color:#374151;padding:6px 8px;background:#eff6ff;border-radius:6px;margin-bottom:4px">
+          <div><b>PR #${escHtml(String(r.pr_number))}</b> · <code>github:${escHtml(String(r.github_actor_id))}</code> · ${escHtml(String(r.merged_at || r.created_at || ''))}</div>
+          <div style="color:#6b7280;word-break:break-all">${escHtml(String(r.source_event_key))}</div>
+          <div style="color:#9ca3af;font-size:10px">fact <code>${escHtml(String(r.fact_id).slice(0, 18))}…</code> · ${escHtml(String(r.merge_commit_sha || '').slice(0, 10))}</div>
+          <button class="btn btn-outline btn-sm" style="width:auto;margin-top:4px;font-size:11px" onclick="ghClaimFromRow('${escHtml(String(r.github_actor_id))}','${escHtml(String(r.source_event_key))}')">${t('认领此贡献')}</button>
+        </div>`).join('')
+  const ctx = _ghClaimCtx
+  return `
+    <div class="card" style="padding:14px;margin-bottom:12px" id="gh-claim-card">
+      <div style="font-size:13px;font-weight:600;margin-bottom:4px">🔗 ${t('GitHub 贡献认领(身份归属)')}</div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('把"以 GitHub 身份完成、已被凭证背书"的贡献事实归属到本账号。这只是身份与归属的认领 — 不是奖励、不是付款。')}</div>
+      <div style="font-size:11px;color:#166534;background:#f0fdf4;border-radius:6px;padding:6px 8px;margin-bottom:8px">✓ ${t('GitHub 贡献认领不需要先购买,也不需要开通分享分润。')}</div>
+      ${notice ? `<div style="font-size:10px;color:#9ca3af;background:#f4f4f5;border-radius:6px;padding:6px 8px;margin-bottom:8px">🔒 ${escHtml(notice)}</div>` : ''}
+      ${ok ? `
+      <div style="font-size:12px;font-weight:600;margin:8px 0 4px">${t('已绑定身份')}</div>${bindRows}
+      <div style="font-size:12px;font-weight:600;margin:10px 0 4px">${t('可归属的贡献事实')}</div>${factRows}
+      <div style="font-size:12px;font-weight:600;margin:10px 0 4px">${t('可认领的 GitHub 贡献(自动发现)')}</div>${claimRows}
+      <details style="margin-top:10px" ${ctx ? 'open' : ''} id="gh-claim-details">
+        <summary style="font-size:12px;font-weight:600;cursor:pointer">${t('手动认领一条贡献(找不到时的备用入口)')}</summary>
+        <div style="font-size:11px;color:#92400e;background:#fef3c7;border-radius:6px;padding:6px 8px;margin:8px 0">${t('上方列表找不到时,可手动输入 source_event_key 与 github_actor_id。')}</div>
+        <input id="gh-claim-actor" placeholder="github_actor_id (${t('如')} 262558625)" value="${escHtml(ctx?.actor || '')}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-bottom:6px">
+        <input id="gh-claim-sek" placeholder="source_event_key (github:<repo>:<pr>:merged)" value="${escHtml(ctx?.sek || '')}" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-bottom:6px">
+        <button class="btn btn-outline btn-sm" style="width:auto" onclick="ghClaimIssue()">1️⃣ ${t('生成认领挑战')}</button>
+        <div id="gh-claim-step2" style="margin-top:8px">${ctx ? ghClaimStep2Html(ctx) : ''}</div>
+        <div id="gh-claim-msg" style="font-size:12px;margin-top:6px"></div>
+      </details>` : `<div style="font-size:12px;color:#9ca3af">${t('身份归属面暂不可用,稍后再试')}</div>`}
+    </div>`
+}
+
+function ghClaimStep2Html(ctx) {
+  return `
+    <div style="background:#eef2ff;border-radius:8px;padding:10px;margin-top:4px">
+      <div style="font-size:11px;color:#3730a3;margin-bottom:2px">🔒 ${t('本挑战锁定于')}: <code>github:${escHtml(ctx.actor)}</code> · <code style="word-break:break-all">${escHtml(ctx.sek)}</code></div>
+      <div style="font-size:11px;color:#3730a3;margin-bottom:4px">challenge_id: <code>${escHtml(ctx.challenge_id)}</code> · ${t('过期于')} ${escHtml(ctx.expires_at || '')}</div>
+      <div style="font-size:11px;color:#374151;margin-bottom:4px">2️⃣ ${t('把下方 proof_marker 原样发布到【该 GitHub 账号拥有的 public gist】,然后回来填 gist_id:')}</div>
+      <div style="font-family:ui-monospace,Menlo,monospace;font-size:10px;background:#fff;border:1px solid #e0e7ff;border-radius:6px;padding:6px 8px;word-break:break-all" id="gh-claim-marker">${escHtml(ctx.proof_marker)}</div>
+      <button class="btn btn-outline btn-sm" style="width:auto;margin-top:6px" onclick="copyText(document.getElementById('gh-claim-marker').textContent).then(ok=>toast$(ok?t('已复制'):t('复制失败，请手动复制'),ok?'success':'error'))">📋 ${t('复制 proof_marker')}</button>
+      <input id="gh-claim-gist" placeholder="gist_id" style="width:100%;box-sizing:border-box;padding:8px 10px;border:1px solid #d4d4d8;border-radius:8px;font-size:12px;margin-top:8px">
+      <button class="btn btn-primary btn-sm" style="width:auto;margin-top:6px" onclick="ghClaimComplete()">3️⃣ 🔑 ${t('用 Passkey 完成认领')}</button>
+    </div>`
+}
+
+// F10:点「认领此贡献」→ 预填 actor + source_event_key,展开手动区,直接走 F9 既有三步流程(签发挑战)
+window.ghClaimFromRow = (actor, sek) => {
+  const d = document.getElementById('gh-claim-details'); if (d) d.open = true
+  const ia = document.getElementById('gh-claim-actor'); if (ia) ia.value = actor
+  const is = document.getElementById('gh-claim-sek'); if (is) is.value = sek
+  ghClaimIssue()
+}
+
+window.ghClaimIssue = async () => {
+  const msg = document.getElementById('gh-claim-msg')
+  const actor = (document.getElementById('gh-claim-actor')?.value || '').trim()
+  const sek = (document.getElementById('gh-claim-sek')?.value || '').trim()
+  if (!actor || !sek) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请先填写 github_actor_id 与 source_event_key')}</span>`; return }
+  if (msg) msg.innerHTML = `<span style="color:#6366f1">${t('签发中…')}</span>`
+  const r = await POST('/contribution-identity/github/claim-challenge', { source_event_key: sek, github_actor_id: actor })
+  if (r?.status === 'issued') {
+    _ghClaimCtx = { challenge_id: r.challenge_id, expires_at: r.expires_at, proof_marker: r.proof_marker, actor, sek }
+    const s2 = document.getElementById('gh-claim-step2'); if (s2) s2.innerHTML = ghClaimStep2Html(_ghClaimCtx)
+    if (msg) msg.innerHTML = `<span style="color:#16a34a">✓ ${t('挑战已签发 — 按第 2 步发布 gist')}</span>`
+    return
+  }
+  if (r?.status === 'already_bound_self') { if (msg) msg.innerHTML = `<span style="color:#16a34a">✓ ${t('该 GitHub 身份已绑定到本账号,无需重复认领')}</span>`; return }
+  // 签发失败 → 清空旧挑战上下文(防止旧 challenge 被误用于新输入)
+  _ghClaimCtx = null
+  const s2f = document.getElementById('gh-claim-step2'); if (s2f) s2f.innerHTML = ''
+  if (msg) msg.innerHTML = `<span style="color:#dc2626">${escHtml(ghClaimErrText(r?.error_code, r?.error))}${r?.error_code ? ` <code style="font-size:10px">[${escHtml(r.error_code)}]</code>` : ''}</span>`
+}
+
+window.ghClaimComplete = async () => {
+  const msg = document.getElementById('gh-claim-msg')
+  const ctx = _ghClaimCtx
+  if (!ctx) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请先生成认领挑战')}</span>`; return }
+  // 输入漂移守卫:签发后若用户改了 actor/source 输入框,旧挑战不再适用 — 清空并要求重新生成,
+  // 防止"以为在认领当前输入的那条"的错觉(服务端本就只认 challenge 绑定的三元组)。
+  const curActor = (document.getElementById('gh-claim-actor')?.value || '').trim()
+  const curSek = (document.getElementById('gh-claim-sek')?.value || '').trim()
+  if (curActor !== ctx.actor || curSek !== ctx.sek) {
+    _ghClaimCtx = null
+    const s2 = document.getElementById('gh-claim-step2'); if (s2) s2.innerHTML = ''
+    if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('输入已更改,与已签发的挑战不一致 — 请重新生成认领挑战')}</span>`
+    return
+  }
+  const gistId = (document.getElementById('gh-claim-gist')?.value || '').trim()
+  if (!gistId) { if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('请填写 gist_id')}</span>`; return }
+  let token
+  try {
+    // purpose_data 必须与服务端校验完全一致:{github_actor_id, source_event_key, challenge_id}
+    token = await requestPasskeyGate('identity_claim', { github_actor_id: ctx.actor, source_event_key: ctx.sek, challenge_id: ctx.challenge_id })
+  } catch (e) {
+    if (msg) msg.innerHTML = `<span style="color:#dc2626">${t('Passkey 验证未完成')}: ${escHtml(e?.message || '')}</span>`
+    return
+  }
+  if (msg) msg.innerHTML = `<span style="color:#6366f1">${t('提交认领…')}</span>`
+  const r = await POST('/contribution-identity/github/claim-complete', {
+    source_event_key: ctx.sek, github_actor_id: ctx.actor,
+    challenge_id: ctx.challenge_id, gist_id: gistId, webauthn_token: token,
+  })
+  if (r?.status === 'claimed' || r?.status === 'already_bound_self') {
+    _ghClaimCtx = null
+    toast$(t('✓ 认领成功 — 贡献事实已归属到本账号'), 'success')
+    renderMyContributions(document.getElementById('app'))   // 刷新归属面 + 建设信誉面板
+    return
+  }
+  if (msg) msg.innerHTML = `<span style="color:#dc2626">${escHtml(ghClaimErrText(r?.error_code, r?.error))}${r?.error_code ? ` <code style="font-size:10px">[${escHtml(r.error_code)}]</code>` : ''}</span>`
+}
+
 // W7 客服 ticket-thread 视图
 const TICKET_TYPE_META = {
   created:       { icon: '🛟', title: '新建工单',   border: '#d97706' },
@@ -11187,7 +11560,63 @@ async function renderSellerAnalytics(app) {
         <div style="font-size:10px;color:#9ca3af">${t('退款')}</div>
       </div>
     </div>
+
+    <div class="card" style="padding:14px;margin-bottom:10px">
+      <div style="font-size:13px;font-weight:600;margin-bottom:8px">⭐ ${t('店铺评价')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('（买家评价 · 每条可回应一次）')}</span></div>
+      <div id="seller-reviews-area" style="font-size:12px;color:#6b7280">${loading$()}</div>
+    </div>
   `, 'me')
+  hydrateSellerReviews()
+}
+
+// 店铺评价汇总 + 逐条回应(P2)。复用既有 POST /orders/:order_id/rating/reply(卖家一回一限);
+// 读 /sellers/me/ratings(authed,含 order_id)。不改评价 / 资金逻辑。
+async function hydrateSellerReviews() {
+  const area = document.getElementById('seller-reviews-area')
+  if (!area) return
+  const r = await GET('/sellers/me/ratings?limit=50').catch(() => null)
+  const items = Array.isArray(r?.items) ? r.items : []
+  if (items.length === 0) { area.innerHTML = `<div style="color:#9ca3af;text-align:center;padding:12px">${t('暂无评价')}</div>`; return }
+  const unreplied = Number(r?.agg?.unreplied || 0)
+  const starStr = (n) => '★'.repeat(Math.max(0, Math.min(5, Number(n) || 0))) + '☆'.repeat(5 - Math.max(0, Math.min(5, Number(n) || 0)))
+  area.innerHTML = `
+    ${unreplied > 0 ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-bottom:8px">📝 ${unreplied} ${t('条评价待回应')}</div>` : ''}
+    ${items.map(it => it.masked ? `
+      <div style="border:1px solid #f3f4f6;border-radius:8px;padding:10px;margin-bottom:8px;background:#fafafa">
+        <div style="display:flex;justify-content:space-between;align-items:center;gap:6px;margin-bottom:4px">
+          <span style="font-size:12px;color:#6b7280">🔒 ${t('评价双盲遮蔽中')}</span>
+          <span style="font-size:10px;color:#9ca3af">${fmtTime(it.created_at)}</span>
+        </div>
+        <div style="font-size:11px;color:#9ca3af;margin-bottom:4px">📦 ${escHtml(it.product_title || '')}</div>
+        <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px">${t('买家已评价，但需你先评价买家，或盲评期结束后才能查看与回应（防互相影响打分）。')}</div>
+      </div>` : `
+      <div style="border:1px solid #f3f4f6;border-radius:8px;padding:10px;margin-bottom:8px">
+        <div style="display:flex;justify-content:space-between;align-items:center;gap:6px;margin-bottom:4px">
+          <span style="color:#f59e0b;font-size:13px">${starStr(it.stars)}</span>
+          <span style="font-size:10px;color:#9ca3af">${fmtTime(it.created_at)}</span>
+        </div>
+        <div style="font-size:11px;color:#6b7280;margin-bottom:4px">@${escHtml(it.buyer_handle || it.buyer_name || '')} · 📦 ${escHtml(it.product_title || '')}</div>
+        ${it.comment ? `<div style="font-size:12px;color:#374151;margin-bottom:6px">${escHtml(it.comment)}</div>` : `<div style="font-size:12px;color:#9ca3af;margin-bottom:6px">${t('买家未留言')}</div>`}
+        ${it.reply ? `<div style="background:#f0f9ff;border-radius:6px;padding:6px 8px;font-size:12px;color:#0369a1"><strong>${t('你的回应')}：</strong>${escHtml(it.reply)}</div>${it.buyer_followup ? `<div style="background:#fafafa;border-radius:6px;padding:6px 8px;font-size:12px;color:#374151;margin-top:4px"><strong>${t('买家追问')}：</strong>${escHtml(it.buyer_followup)}</div>` : ''}` : `
+          <div style="display:flex;gap:6px;align-items:flex-end">
+            <textarea id="rev-reply-${it.order_id}" rows="1" maxlength="500" placeholder="${t('回应这条评价（最多 500 字 · 仅一次）')}" style="flex:1;padding:6px 8px;border:1px solid #d1d5db;border-radius:6px;font-size:12px;resize:none"></textarea>
+            <button class="btn btn-primary btn-sm" style="padding:6px 12px;font-size:11px" onclick="submitSellerReviewReply('${it.order_id}')">${t('回应')}</button>
+          </div>
+          <div id="rev-reply-err-${it.order_id}" style="font-size:11px;color:#dc2626;margin-top:4px"></div>`}
+      </div>`).join('')}
+  `
+}
+
+window.submitSellerReviewReply = async (orderId) => {
+  const ta = document.getElementById('rev-reply-' + orderId)
+  const errEl = document.getElementById('rev-reply-err-' + orderId)
+  const reply = (ta?.value || '').trim()
+  if (errEl) errEl.textContent = ''
+  if (!reply) { if (errEl) errEl.textContent = t('回应不能为空'); return }
+  const res = await POST(`/orders/${orderId}/rating/reply`, { reply })
+  if (res.error) { if (errEl) errEl.textContent = res.error; return }
+  toast$(t('已回应'))
+  hydrateSellerReviews()
 }
 
 window.switchAnalyticsWindow = (days) => {
@@ -11263,15 +11692,17 @@ async function renderReturnsCenter(app) {
 }
 
 // L3 Phase 2：卖家确认收到退货 → 触发退款
-window.confirmReturnReceived = async (id) => {
+// orderId 可选:从订单详情内联调用时传入 → 处理完回到订单详情(否则回退货中心)
+window.confirmReturnReceived = async (id, orderId) => {
   if (!confirm(t('确认已收到退货商品？此操作将触发退款（不可撤销）'))) return
   const r = await POST(`/return-requests/${id}/received`, {})
   if (r.error) { toast$(r.error, 'error'); return }
   toast$(t('已退款 · 退货完成'))
-  renderReturnsCenter(document.getElementById('app'))
+  if (orderId) renderOrderDetail(document.getElementById('app'), orderId)
+  else renderReturnsCenter(document.getElementById('app'))
 }
 
-window.decideReturn = (id, decision) => {
+window.decideReturn = (id, decision, orderId) => {
   const isAccept = decision === 'accept'
   const title = isAccept ? `✓ ${t('确认接受退款')}` : `✗ ${t('拒绝退货')}`
   const hint = isAccept
@@ -11290,7 +11721,7 @@ window.decideReturn = (id, decision) => {
         <div id="ret-decide-msg" style="margin:8px 0"></div>
         <div style="display:flex;gap:8px;margin-top:12px">
           <button class="btn btn-gray" style="flex:1" onclick="this.closest('[style*=position]').remove()">${t('取消')}</button>
-          <button class="btn ${isAccept ? 'btn-success' : 'btn-primary'}" style="flex:1" onclick="confirmDecideReturn('${id}','${decision}')">${isAccept ? t('接受退款') : t('拒绝')}</button>
+          <button class="btn ${isAccept ? 'btn-success' : 'btn-primary'}" style="flex:1" onclick="confirmDecideReturn('${id}','${decision}','${orderId || ''}')">${isAccept ? t('接受退款') : t('拒绝')}</button>
         </div>
       </div>
     </div>
@@ -11300,7 +11731,7 @@ window.decideReturn = (id, decision) => {
   document.body.appendChild(div.firstElementChild)
 }
 
-window.confirmDecideReturn = async (id, decision) => {
+window.confirmDecideReturn = async (id, decision, orderId) => {
   const response = document.getElementById('ret-decide-text').value.trim()
   const msg = document.getElementById('ret-decide-msg')
   if (decision === 'reject' && !response) {
@@ -11311,7 +11742,8 @@ window.confirmDecideReturn = async (id, decision) => {
   if (res.error) { msg.innerHTML = alert$('error', res.error); return }
   document.querySelector('.js-modal')?.remove()
   toast$(t('已处理'))
-  renderReturnsCenter(document.getElementById('app'))
+  if (orderId) renderOrderDetail(document.getElementById('app'), orderId)
+  else renderReturnsCenter(document.getElementById('app'))
 }
 
 window.sharePromoLink = async (productId, title) => {
@@ -11328,7 +11760,7 @@ window.sharePromoLink = async (productId, title) => {
   }
   const link = `${location.origin}${res.short_url}`
   const meName = state.user.name || ''
-  const text = `${t('我在 WebAZ 看上「')}${title}${t('」，AI 比价 + 双激励分享')}\n— ${meName}`
+  const text = `${t('我在 WebAZ 看上「')}${title}${t('」，用 AI 比价，体验不错')}\n— ${meName}`
   const r = await webShareOrCopy({ title: 'WebAZ — ' + title, text, url: link })
   if (r === 'shared') toast$(t('已分享'))
   else if (r === 'copied') toast$(t('已复制（含商品文案 + 链接）') + (res.reused ? '' : ' · ' + t('已自动加入「我的分享」')))
@@ -11942,32 +12374,8 @@ async function syncPlacementPref() {
   } catch {}
 }
 
-// 仅平台分享（不绑 sponsor，只建 PV 条线）
-// P-Polish 3：点击左/右区推荐码卡片复制（替代旧 alert 体验）
-window.copyPlacementLink = async (link, side, el) => {
-  const ok = await copyText(link)
-  if (ok) {
-    toast$((side === 'left' ? '🔵 ' : '🟢 ') + t('推荐码已复制'))
-    if (el) {
-      const orig = el.style.background
-      el.style.background = side === 'left' ? '#bfdbfe' : '#bbf7d0'
-      setTimeout(() => { el.style.background = orig }, 600)
-    }
-  } else {
-    prompt(t('请手动复制'), link)
-  }
-}
-
-// 兼容：旧调用点保留
-window.sharePlatformLink = (side) => {
-  if (!state.user?.id) return alert(t('请先登录'))
-  if (side !== 'left' && side !== 'right') return
-  // 用 permanent_code 短链(/i/CODE-L|R),绝不用 usr_xxx;缺码时拒绝
-  const code = state.user?.permanent_code
-  if (!code) return alert(t('邀请码暂不可用，请刷新或联系支持'))
-  const link = `${location.origin}/i/${code}-${side === 'left' ? 'L' : 'R'}`
-  copyPlacementLink(link, side, null)
-}
+// pre-public 去左右码:copyPlacementLink / sharePlatformLink(生成 /i/CODE-L|R 侧链)已移除 —
+// 统一用唯一推荐码 copyRefLink('/i/CODE'),放置侧别由系统自动决定。
 
 function renderRecover(app) {
   app.innerHTML = `
@@ -11979,8 +12387,8 @@ function renderRecover(app) {
 
       <div id="rec-step1">
         <div class="form-group">
-          <label class="form-label">${t('注册时使用的名称')}</label>
-          <input class="form-control" id="rec-name" placeholder="${t('例：陈小明')}">
+          <label class="form-label">${t('名称或 @用户名')}</label>
+          <input class="form-control" id="rec-name" placeholder="${t('例：陈小明 或 @chenxiaoming')}">
         </div>
         <div class="form-group">
           <label class="form-label">${t('绑定的邮箱')}</label>
@@ -11994,7 +12402,11 @@ function renderRecover(app) {
         <div class="form-group">
           <input class="form-control" id="rec-code" placeholder="${t('6 位验证码')}" maxlength="6">
         </div>
-        <button class="btn btn-primary" onclick="doRecoverConfirm()">${t('验证并找回密钥')}</button>
+        <div class="form-group">
+          <label class="form-label">${t('设置新登录密码')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('(可选 · 至少 8 位 · 留空则只找回 API Key)')}</span></label>
+          <input class="form-control" id="rec-newpw" type="password" placeholder="${t('新密码（至少 8 位）')}" autocomplete="new-password" maxlength="200">
+        </div>
+        <button class="btn btn-primary" onclick="doRecoverConfirm()">${t('验证并找回')}</button>
         <button class="btn btn-outline" onclick="recoverBackToStep1()" style="margin-left:8px">${t('重新开始')}</button>
       </div>
 
@@ -12034,13 +12446,15 @@ window.doRecoverConfirm = async () => {
   const name    = codeInp?.dataset?.name
   const email   = codeInp?.dataset?.email
   const code    = codeInp?.value?.trim()
+  const newpw   = document.getElementById('rec-newpw')?.value || ''
   const result  = document.getElementById('rec-result')
   if (!code) { result.innerHTML = alert$('error', t('请填写验证码')); return }
+  if (newpw && newpw.length < 8) { result.innerHTML = alert$('error', t('新密码至少 8 字符')); return }
   result.innerHTML = loading$()
-  const res = await api('POST', '/recover-key/confirm', { name, email, code })
+  const res = await api('POST', '/recover-key/confirm', { name, email, code, ...(newpw ? { new_password: newpw } : {}) })
   if (res.error) { result.innerHTML = alert$('error', res.error); return }
   result.innerHTML = `
-    <div class="alert alert-success" style="font-size:13px">${t('✓ 找回成功')}</div>
+    <div class="alert alert-success" style="font-size:13px">${res.password_reset ? t('✓ 找回成功 · 新密码已设置') : t('✓ 找回成功')}</div>
     <div style="background:#f3f4f6;border-radius:8px;padding:12px;margin-top:10px">
       <div style="font-size:12px;color:#6b7280;margin-bottom:6px">${t('你的 API Key')}</div>
       <code style="font-size:13px;word-break:break-all">${res.api_key}</code>
@@ -12149,36 +12563,27 @@ window.doLoginByPassword = async () => {
 
 
 // 从 URL 解析分享 hint（30 天 cookie 持久化）
-//   ?ref=usr_xxx                          → 仅三级佣金 sponsor
-//   ?placement=usr_xxx&side=left|right    → 仅积分挂靠
-//   ?ref=xxx&side=left|right              → 两轨道（ref 同时作 placement）
-//   ?ref=xxx&placement=xxx&side=...       → 显式两轨道
+//   ?ref=CODE                  → 三级佣金 sponsor(同时作 placement inviter)
+//   ?placement=CODE            → 仅积分挂靠
+//   pre-public 去左右码:不再解析 side / -L/-R 侧别,放置侧别由注册时系统自动决定。
 function readShareHint() {
   const params = new URLSearchParams(location.search)
   let urlRef    = params.get('ref')
   let urlPlace  = params.get('placement')
-  let urlSide   = params.get('side')
-  // 兼容 ref/placement 带 -L/-R 后缀：自动剥离并填入 side（用户手工粘 VKSF9P-L 时也工作）
-  const stripSide = (v) => {
-    if (!v) return [v, null]
-    const m = v.match(/^(.+?)-([lLrR])$/)
-    return m ? [m[1], m[2].toLowerCase() === 'l' ? 'left' : 'right'] : [v, null]
-  }
-  let extraSide = null
-  ;[urlRef,   extraSide] = stripSide(urlRef)
-  if (!extraSide) [urlPlace, extraSide] = stripSide(urlPlace)
-  if (!urlSide && extraSide) urlSide = extraSide
-  // ref / placement 仅接受邀请码(6-7 位永久码,可带 -L/-R)。usr_xxx / @handle / 裸 handle 不再作为邀请引用 —
+  // pre-public 去左右码:兼容旧的 -L/-R 后缀但只做归一化(剥离回基础码),不再提取/存储 side。
+  // 放置侧别由注册时系统自动决定。
+  const stripSide = (v) => (v ? v.replace(/-[lLrR]$/, '') : v)
+  urlRef   = stripSide(urlRef)
+  urlPlace = stripSide(urlPlace)
+  // ref / placement 仅接受邀请码(6-7 位永久码)。usr_xxx / @handle / 裸 handle 不再作为邀请引用 —
   // 收窄公开邀请面,消除歧义(权威由服务端 resolveInviteCodeRef 二次校验)。
   const refPattern   = /^[A-Za-z0-9]{6,7}$/
   const validRef  = urlRef   && refPattern.test(urlRef)
   const validPlace= urlPlace && refPattern.test(urlPlace)
   if (validRef || validPlace) {
-    const side = (urlSide === 'left' || urlSide === 'right') ? urlSide : null
     const obj = {
       sponsor_id:           validRef ? urlRef : null,
-      placement_inviter_id: validPlace ? urlPlace : (side && validRef ? urlRef : null),
-      placement_side:       side,
+      placement_inviter_id: validPlace ? urlPlace : null,
       expiry: Date.now() + 30 * 86400_000,
     }
     localStorage.setItem('webaz_share_hint', JSON.stringify(obj))
@@ -12211,8 +12616,7 @@ function readShareHint() {
       const o = JSON.parse(old)
       if (o.expiry > Date.now() && okCode(o.ref)) return {
         sponsor_id: o.ref || null,
-        placement_inviter_id: o.side ? o.ref : null,
-        placement_side: o.side || null,
+        placement_inviter_id: null,
         expiry: o.expiry,
       }
       localStorage.removeItem('webaz_ref')   // expired or non-code → drop
@@ -12273,7 +12677,7 @@ async function maybeClaimPendingShopReferral() {
     writeShareCtx({ pending_shop_referral: null }); return
   }
   try {
-    await POST('/shop-referral/touch', { seller_identifier: p.seller_identifier, ref_code: p.ref_code, ...(p.side === 'left' || p.side === 'right' ? { side: p.side } : {}) })
+    await POST('/shop-referral/touch', { seller_identifier: p.seller_identifier, ref_code: p.ref_code })
     // 任何已送达的响应(成功 / self-skip / already_locked / typed 错误)都清;仅网络异常保留待重试
     writeShareCtx({ pending_shop_referral: null })
   } catch {}
@@ -12402,7 +12806,6 @@ async function initShareCtx() {
   if (hint?.sponsor_id && !ctx?.sponsor_id) patch.sponsor_id = hint.sponsor_id
   if (hint?.placement_inviter_id && !ctx?.placement_inviter_id) {
     patch.placement_inviter_id = hint.placement_inviter_id
-    patch.placement_side = hint.placement_side
   }
   if (fromHash && !ctx?.target_hash) patch.target_hash = fromHash
 
@@ -12413,11 +12816,11 @@ async function initShareCtx() {
   }
 
   // 店铺推荐:?ref=CODE + #shop/<seller> → 暂存待登录后 touch(只锚定推荐关系,非全店佣金权)。
-  // hint.sponsor_id 已由 readShareHint 收窄为邀请码(-L/-R 已剥进 placement_side),usr_xxx/@handle 进不来。
+  // hint.sponsor_id 已由 readShareHint 收窄为邀请码(-L/-R 已归一化为基础码),usr_xxx/@handle 进不来。
   if (hint?.sponsor_id && fromHash && fromHash.startsWith('#shop/') && !ctx?.pending_shop_referral) {
     const sellerIdent = fromHash.slice('#shop/'.length).split('?')[0].trim()
     if (sellerIdent && sellerIdent !== 'agent') {
-      patch.pending_shop_referral = { seller_identifier: sellerIdent, ref_code: hint.sponsor_id, side: hint.placement_side || null }
+      patch.pending_shop_referral = { seller_identifier: sellerIdent, ref_code: hint.sponsor_id }
     }
   }
 
@@ -12507,11 +12910,47 @@ window._mountTurnstileIfEnabled = async () => {
   } catch { /* 加载失败不阻塞 dev */ }
 }
 
+// 注册邮箱验证:发码。成功后展开验证码输入框。
+window._regCodeSent = false
+window._onRegEmailInput = () => {
+  // 邮箱改了就要求重新发码(旧码对不上新邮箱)
+  window._regCodeSent = false
+  const row = document.getElementById('reg-code-row')
+  if (row) row.style.display = 'none'
+}
+window.doRegSendCode = async () => {
+  const email = document.getElementById('inp-reg-email')?.value?.trim()
+  const btn = document.getElementById('btn-reg-sendcode')
+  if (!email || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) return showMsg('error', t('请填写有效邮箱'))
+  if (btn) { btn.disabled = true; btn.textContent = t('发送中...') }
+  const res = await POST('/register/send-code', { email })
+  if (res.error) {
+    if (btn) { btn.disabled = false; btn.textContent = t('发送验证码') }
+    return showMsg('error', res.error)
+  }
+  window._regCodeSent = true
+  const row = document.getElementById('reg-code-row')
+  if (row) row.style.display = ''
+  // 60s 冷却
+  let left = 60
+  if (btn) {
+    btn.disabled = true
+    const tick = () => { if (left <= 0) { btn.disabled = false; btn.textContent = t('重新发送'); return } btn.textContent = left + 's'; left--; setTimeout(tick, 1000) }
+    tick()
+  }
+  showMsg('success', t('验证码已发送至邮箱，请查收'))
+}
+
 window.doRegister = async () => {
   const name = document.getElementById('inp-name').value.trim()
   const role = document.getElementById('inp-role').value
   const region = document.getElementById('inp-region')?.value || ''
   const sponsorInput = document.getElementById('inp-sponsor')?.value?.trim() || ''
+  const email = document.getElementById('inp-reg-email')?.value?.trim() || ''
+  const code = document.getElementById('inp-reg-code')?.value?.trim() || ''
+  if (!email) return showMsg('error', t('请填写找回邮箱'))
+  if (!window._regCodeSent) return showMsg('error', t('请先点"发送验证码"并验证邮箱'))
+  if (!code) return showMsg('error', t('请输入邮箱验证码'))
   if (!name) return showMsg('error', t('请填写名称'))
   if (!region) return showMsg('error', t('请选择国家 / 地区'))
   // A3 软 gate：sponsor_id 视觉必填但允许空（后端按 require_ref_to_register 系统设置裁决）
@@ -12519,13 +12958,12 @@ window.doRegister = async () => {
     if (!confirm(t('没有填写邀请码 — 你将绑定到平台公库（推荐找老用户拿邀请链接）\n\n确认继续？'))) return
   }
   const hint = readShareHint()
-  const body = { name, role, region }
+  const body = { name, role, region, email, code }
   // 优先 input 值，回退 URL hint
   const sponsorFinal = sponsorInput || hint?.sponsor_id
   if (sponsorFinal) body.sponsor_id = sponsorFinal
-  if (hint?.placement_inviter_id && hint?.placement_side) {
+  if (hint?.placement_inviter_id) {
     body.placement_inviter_id = hint.placement_inviter_id
-    body.placement_side       = hint.placement_side
   }
   // #1049 Turnstile token(若启用)
   if (window._turnstileToken) body.turnstile_token = window._turnstileToken
@@ -12568,41 +13006,91 @@ function showRegisterSuccessModal(res) {
   // P1 (QA 轮 14.a): 区分"邀请人"(referral sponsor) 与"积分树挂靠"(binary placement)
   // 旧版挤一行 "已绑定邀请人 X · 左区 depth N" → 用户误以为 depth 是相对邀请人
   const placementLine = res.placement
-    ? `<div style="font-size:11px;color:#9ca3af;margin-bottom:14px">${t('积分树挂靠')}: ${res.placement.side === 'left' ? '🔵 ' + t('左区') : '🟢 ' + t('右区')} · ${t('深度')} ${res.placement.depth}<br><span style="font-size:10px">${t('（挂靠位置由系统按弱区自动决定，与邀请人不一定相邻）')}</span></div>`
+    ? `<div style="font-size:11px;color:#9ca3af;margin-bottom:14px">${t('积分树挂靠')}: ${res.placement.side === 'left' ? '🔵 ' + t('左区') : '🟢 ' + t('右区')} · ${t('深度')} ${res.placement.depth}<br><span style="font-size:10px">${t('积分树挂靠为系统内部记录，不代表收益权或兑付承诺。')}</span></div>`
     : ''
   _openModal(`
     <h2 style="font-size:18px;font-weight:600;margin-bottom:8px;color:#16a34a">🎉 ${t('注册成功！')}</h2>
     ${res.sponsor_id && ctx?.sponsor_name ? `<div style="font-size:12px;color:#6366f1;margin-bottom:6px">${t('邀请人')}: <strong>${escHtml(ctx.sponsor_name)}</strong></div>` : ''}
     ${placementLine}
 
-    <div style="background:#fef3c7;border:1px solid #fde68a;border-radius:8px;padding:10px 12px;margin-bottom:14px">
-      <div style="font-size:12px;color:#92400e;font-weight:600;margin-bottom:6px">⚠️ ${t('立即保存你的 API Key')}</div>
-      <div style="font-size:11px;color:#78350f;margin-bottom:6px">${t('这是你的唯一登录凭证。丢了只能通过绑定邮箱找回。')}</div>
+    <div style="background:#fef3c7;border:1px solid #fde68a;border-radius:8px;padding:10px 12px;margin-bottom:12px">
+      <div style="font-size:12px;color:#92400e;font-weight:600;margin-bottom:6px">⚠️ ${t('立即保存你的 API Key（登录凭证）')}</div>
       <div style="display:flex;gap:6px;align-items:center">
         <code id="reg-apikey-display" style="font-size:12px;background:#fff;padding:6px 10px;border-radius:6px;flex:1;word-break:break-all;border:1px solid #fde68a">${res.api_key}</code>
-        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;white-space:nowrap" onclick="copyText('${res.api_key}').then(ok=>toast$(ok?'${t('已复制')}':'${t('复制失败，请手动复制')}',ok?'success':'error'))">${t('复制')}</button>
+      </div>
+      <div style="display:flex;gap:6px;margin-top:8px">
+        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;flex:1" onclick="window._regMarkSaved();copyText('${res.api_key}').then(ok=>toast$(ok?'${t('已复制')}':'${t('复制失败，请手动复制')}',ok?'success':'error'))">📋 ${t('复制 Key')}</button>
+        <button class="btn btn-outline btn-sm" style="font-size:11px;padding:6px 10px;flex:1" onclick="window._downloadCredBackup()">⬇️ ${t('下载备份 .txt')}</button>
       </div>
     </div>
 
-    <div style="font-size:13px;color:#374151;font-weight:600;margin-bottom:6px">${t('完成 4 步开始使用')}</div>
-    <div style="background:#f9fafb;border-radius:8px;padding:6px 10px;margin-bottom:12px;font-size:12px;line-height:1.8">
-      ☐ ${t('设置默认配送地址（智能下单需要）')}<br>
-      ☐ ${t('设置登录密码（备用凭证，可选）')}<br>
-      ☐ ${t('完成首笔购买后,可申请分享分润。')}<br>
-      ☐ ${t('🔐 绑定 Passkey — 强烈推荐，大额提现自动启用，防账号被盗')}
+    <div style="font-size:13px;color:#374151;font-weight:600;margin-bottom:6px">${t('保存凭证检查清单')}</div>
+    <div style="background:#f9fafb;border-radius:8px;padding:8px 10px;margin-bottom:8px;font-size:12px;line-height:1.9">
+      <div id="reg-chk-save">☐ ${t('复制 API Key 或下载备份文件')}</div>
+      <div>✅ ${t('已验证找回邮箱')}：${escHtml(res.email || '')}</div>
+      <div>☐ ${t('设置登录密码（备用凭证）')}</div>
+      <div>☐ ${t('🔐 绑定 Passkey — 大额提现自动启用，防账号被盗')}</div>
+    </div>
+    <div style="font-size:11px;color:#6b7280;line-height:1.6;margin-bottom:12px">
+      ${t('邮箱已验证：可用于找回账号或重置登录密码。API Key 仍是主要身份凭证，强烈建议保存；Passkey 是增强保护，不替代恢复邮箱。')}
     </div>
 
     ${targetBtn}
     <button class="btn btn-primary" style="width:100%;margin-bottom:8px;background:linear-gradient(135deg,#7c3aed,#6d28d9);border-color:transparent" onclick="window._closeRegModal('passkey')">🔐 ${t('立即绑定 Passkey（强烈推荐）')}</button>
-    <button class="btn btn-outline" style="width:100%;margin-bottom:8px" onclick="window._closeRegModal('profile')">⚙️ ${t('先去填资料')}</button>
-    <button class="btn btn-outline" style="width:100%" onclick="window._closeRegModal(false)">${t('稍后再说，先逛逛')}</button>
+    <button class="btn btn-outline" style="width:100%;margin-bottom:8px" onclick="window._closeRegModal('password')">🔑 ${t('设置登录密码')}</button>
+    <button id="reg-skip-btn" class="btn btn-outline btn-sm" style="width:100%;color:#9ca3af;font-size:12px" onclick="window._closeRegModal(false)">${t('稍后再说，先逛逛')}</button>
   `)
+  // 凭证保存状态:复制或下载前,"稍后"按钮弱化 + 强提示。
+  window._regSaved = false
+  window._regMarkSaved = () => {
+    window._regSaved = true
+    const chk = document.getElementById('reg-chk-save')
+    if (chk) { chk.innerHTML = '✅ ' + t('复制 API Key 或下载备份文件'); chk.style.color = '#16a34a' }
+    const skip = document.getElementById('reg-skip-btn')
+    if (skip) skip.style.color = ''
+  }
+  window._downloadCredBackup = () => {
+    try {
+      const lines = [
+        'WebAZ 账户备份 / Account Backup',
+        '================================',
+        `${t('名称')} / Name: ${res.name || ''}`,
+        `Handle: @${res.handle || ''}`,
+        `${t('角色')} / Role: ${res.role || ''}`,
+        `${t('找回邮箱')} / Recovery email: ${res.email || ''}`,
+        `${t('注册时间')} / Registered: ${new Date().toISOString()}`,
+        '--------------------------------',
+        'API Key (登录凭证 / login credential):',
+        res.api_key || '',
+        '--------------------------------',
+        '⚠️ 这是你的登录凭证，等同密码。妥善保管，不要截图分享或发给任何人。',
+        '⚠️ This is your login credential (equivalent to a password). Keep it private — do not screenshot, forward, or share it.',
+        '丢失 API Key 可用上面的找回邮箱在 https://webaz.xyz/#recover 重置（也可重置登录密码）。',
+        'Lost your API Key? Reset it (and your password) with the recovery email above at https://webaz.xyz/#recover',
+      ]
+      const blob = new Blob([lines.join('\n')], { type: 'text/plain;charset=utf-8' })
+      const url = URL.createObjectURL(blob)
+      const a = document.createElement('a')
+      a.href = url
+      a.download = `webaz-backup-${(res.handle || res.user_id || 'account')}.txt`
+      document.body.appendChild(a); a.click(); a.remove()
+      setTimeout(() => URL.revokeObjectURL(url), 2000)
+      window._regMarkSaved()
+      toast$(t('备份已下载'), 'success')
+    } catch (e) {
+      toast$(t('下载失败，请改用复制'), 'error')
+    }
+  }
   window._closeRegModal = (action) => {
+    // 复制/下载前点"稍后" → 强提示(已绑邮箱可找回,但仍建议先存 key)
+    if (action === false && !window._regSaved) {
+      if (!confirm(t('你还没复制 API Key 或下载备份。\n虽然已绑定找回邮箱（丢号可重置），仍强烈建议先保存 Key。\n\n确定先逛逛？'))) return
+    }
     closeModal()
     if (action === true) {
       // 跳 intended_hash
       navigateIntended(roleHome(res.role))
-    } else if (action === 'profile') {
+    } else if (action === 'password' || action === 'profile') {
       sessionStorage.removeItem('webaz_intended_hash')
       location.hash = '#me/settings'
     } else if (action === 'passkey') {
@@ -13732,8 +14220,8 @@ async function renderFeedView() {
       const amount = Number(extra.amount || 0).toFixed(2)
       body = `${actor} ${t('因推广')} <a href="#order-product/${e.product_id}" style="color:#111">${escHtml(e.product_title)}</a> ${t('获得 L')}${extra.level} ${t('佣金')} <strong style="color:#059669">+${amount} WAZ</strong>`
     } else if (e.kind === 'join_binary') {
-      const side = extra.placement_side === 'left' ? '🔵 左区' : '🟢 右区'
-      body = `${actor} ${t('加入了')} ${escHtml(extra.placement_name || '—')} ${t('的')} ${side}`
+      // pre-public 去左右码:活动流不再广播左/右区,只显示加入了某人的积分树
+      body = `${actor} ${t('加入了')} ${escHtml(extra.placement_name || '—')} ${t('的积分树')}`
     }
     const icon = e.kind === 'purchase' ? '🛒' : e.kind === 'commission' ? '💰' : '⚛'
     return `<div class="card" style="margin-bottom:8px;padding:10px 12px;display:flex;gap:10px;align-items:flex-start">
@@ -18831,20 +19319,21 @@ window.setSellerSubTab = (k) => {
 // C-4: 批量发货 modal
 window.openBatchShipModal = async (ids) => {
   if (!Array.isArray(ids) || ids.length === 0) return
-  // 拉物流公司
+  // 拉物流公司(可空:自发货不需要物流方)
   const lc = await GET('/logistics/companies').catch(() => [])
   const companies = Array.isArray(lc) ? lc : []
-  if (companies.length === 0) { alert(t('暂无可用物流公司')); return }
   const html = `
     <div class="js-modal" style="background:rgba(0,0,0,0.6);position:fixed;inset:0;z-index:1000;display:flex;align-items:flex-end;justify-content:center" onclick="this.remove()">
       <div style="background:#fff;width:100%;max-width:560px;border-radius:16px 16px 0 0;padding:20px;max-height:80vh;overflow-y:auto" onclick="event.stopPropagation()">
         <h2 style="font-size:16px;font-weight:700;margin-bottom:8px">📦 ${t('批量发货')}</h2>
         <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('将')} <strong>${ids.length}</strong> ${t('个订单一次性标记为已发货')}</div>
         <div class="form-group">
-          <label class="form-label">${t('物流公司')} *</label>
+          <label class="form-label">${t('发货方式')}</label>
           <select class="form-control" id="bs-logistics">
+            <option value="self">${t('📦 我自己发货（自提自送）')}</option>
             ${companies.map(c => `<option value="${escHtml(c.id)}">${escHtml(c.name)}</option>`).join('')}
           </select>
+          <div style="font-size:11px;color:#92400e;margin-top:6px;line-height:1.5">${t('自己发货：你负责揽收 / 运输 / 送达,超时或虚假发货仍按卖家责任处理。选物流公司则由物流方流转。')}</div>
         </div>
         <div style="font-size:11px;color:#9ca3af;margin-bottom:8px">${t('快递单号可发货后单独补填，或先填部分')}</div>
         <div id="bs-msg" style="margin:8px 0"></div>
@@ -18861,10 +19350,12 @@ window.openBatchShipModal = async (ids) => {
 }
 
 window.submitBatchShip = async (ids) => {
-  const logistics_company_id = document.getElementById('bs-logistics').value
+  const choice = document.getElementById('bs-logistics').value
   const msg = document.getElementById('bs-msg')
   msg.innerHTML = loading$()
-  const res = await POST('/orders/batch-ship', { order_ids: ids, logistics_company_id })
+  // 自发货:不传 logistics_company_id(后端保持 logistics_id 空 → seller self-fulfill)
+  const body = (choice && choice !== 'self') ? { order_ids: ids, logistics_company_id: choice } : { order_ids: ids }
+  const res = await POST('/orders/batch-ship', body)
   if (res.error) { msg.innerHTML = alert$('error', res.error); return }
   document.querySelector('.js-modal')?.remove()
   toast$(`${t('已发货')} ${res.shipped} / ${ids.length}`)
@@ -19794,6 +20285,7 @@ async function renderOrderDetail(app, orderId) {
 
     <div id="action-area">
       ${actions ? renderActions(orderId, actions, order, logisticsCompanies) : ''}
+      ${sellerDeclineContestPanel(order, orderId, isSeller)}
     </div>
 
     ${(isBuyer && order.status === 'completed' && product?.id) ? `
@@ -19815,6 +20307,12 @@ async function renderOrderDetail(app, orderId) {
       <div id="ret-area-${order.id}" style="font-size:12px;color:#6b7280">${loading$()}</div>
     </div>` : ''}
 
+    ${(isSeller && order.status === 'completed') ? `
+    <div class="card" id="ret-card-${order.id}">
+      <div style="font-size:14px;font-weight:600;margin-bottom:6px">↩ ${t('退货处理')}</div>
+      <div id="ret-area-${order.id}" style="font-size:12px;color:#6b7280">${loading$()}</div>
+    </div>` : ''}
+
     ${((isBuyer || isSeller) && order.status === 'completed') ? `
     <div class="card" id="rate-card-${order.id}">
       <div style="font-size:14px;font-weight:600;margin-bottom:6px">⭐ ${t('交易评价')}</div>
@@ -19839,7 +20337,8 @@ async function renderOrderDetail(app, orderId) {
   `, 'orders')
 
   // Wave B-3: 退货 widget — 异步加载（仅 completed 订单可退）
-  if (isBuyer && order.status === 'completed' && Number(product?.return_days || 0) > 0) {
+  // 买家:有退货窗口可申请/查看;卖家:有退货申请时内联查看+处理(accept/reject/received),无申请则隐藏卡
+  if (((isBuyer && Number(product?.return_days || 0) > 0) || isSeller) && order.status === 'completed') {
     try { await renderReturnWidgetForOrder(order, product) } catch (e) { console.error(e) }
   }
   // Wave C-3: 评价 widget
@@ -20285,7 +20784,13 @@ async function renderReturnWidgetForOrder(order, product) {
   // P1-5: 订单级直查（取代拉全量列表过滤）
   const r = await GET(`/orders/${order.id}/return-request`).catch(() => ({ item: null }))
   const mine = r?.item || null
-  const returnDays = Number(product.return_days || 0)
+  const isSellerView = state.user && state.user.id === order.seller_id
+  // 卖家视角:无退货申请则隐藏整张卡(卖家不申请退货,只在有申请时处理)
+  if (isSellerView && !mine) {
+    const card = area.closest('.card'); if (card) card.style.display = 'none'
+    return
+  }
+  const returnDays = Number(product?.return_days || 0)
   const baseTime = order.updated_at || order.created_at
   const deadline = new Date(baseTime).getTime() + returnDays * 86400 * 1000
   const remainMs = deadline - Date.now()
@@ -20315,6 +20820,14 @@ async function renderReturnWidgetForOrder(order, product) {
         ${item.status === 'pending' && isBuyer ? `<button class="btn btn-outline btn-sm" style="font-size:11px;padding:4px 10px" onclick="cancelReturnRequest('${item.id}', '${order.id}')">${t('取消申请')}</button>` : ''}
       </div>
 
+      ${isSellerView && item.status === 'pending' ? `
+        <div style="display:flex;gap:8px;margin-bottom:8px">
+          <button class="btn btn-success btn-sm" style="flex:1;font-size:12px" onclick="decideReturn('${item.id}','accept','${order.id}')">${t('接受退款')}</button>
+          <button class="btn btn-outline btn-sm" style="flex:1;font-size:12px;color:#dc2626;border-color:#fecaca" onclick="decideReturn('${item.id}','reject','${order.id}')">${t('拒绝退货')}</button>
+        </div>` : ''}
+      ${isSellerView && item.status === 'picked_up' ? `
+        <button class="btn btn-success btn-sm" style="width:100%;font-size:12px;margin-bottom:8px" onclick="confirmReturnReceived('${item.id}','${order.id}')">${t('✓ 已收到退货 · 触发退款')}</button>` : ''}
+
       <div style="padding:10px;background:#fafafa;border-radius:8px;margin-bottom:8px">
         <div style="font-size:11px;font-weight:600;color:#6b7280;margin-bottom:8px">🧾 ${t('协商时间线')} · ${events.length} ${t('条')}</div>
         ${events.map(ev => buildReturnTimelineEvent(ev, isBuyer)).join('')}
@@ -20651,26 +21164,32 @@ window.cancelReturnRequest = async (id, orderId) => {
 function getActions(order, isBuyer, isSeller, isLogistic) {
   const s = order.status
   const isInPerson = order.fulfillment_mode === 'in_person'
+  const isSelfFulfillSeller = isSeller && !order.logistics_id
   // M8 面交订单：买家在 paid / accepted 都可"面交完成"直接结算
   if (isInPerson && isBuyer && (s === 'paid' || s === 'accepted')) {
     return [{ action: 'confirm_in_person', label: '🤝 面交完成 / 确认收货', style: 'success' }]
   }
   if (isSeller && s === 'paid')
-    return [{ action: 'accept', label: '接单', style: 'success' }]
+    return [
+      { action: 'accept', label: '接单', style: 'success' },
+      { action: 'decline', label: '拒绝接单', style: 'danger', custom: 'decline' },
+    ]
   if (isSeller && s === 'accepted' && !isInPerson)
     return [{ action: 'ship', label: '确认发货', style: 'success', logisticsSelector: true,
               trackingInput: true,
               evidencePlaceholder: '包装状态描述 / 货物说明（可选）' }]
   if (isSeller && s === 'accepted' && isInPerson)
     return [{ action: 'noop_in_person', label: '🤝 面交中（等待买家确认）', style: 'secondary', disabled: true }]
-  if (isLogistic && s === 'shipped')
+  if ((isLogistic || isSelfFulfillSeller) && s === 'shipped')
     return [{ action: 'pickup', label: '✅ 确认揽收', style: 'success', needsEvidence: true,
-              noteLabel: '快递单号 *', evidencePlaceholder: '如：SF1234567890' }]
-  if (isLogistic && s === 'picked_up')
+              noteLabel: '快递单号 *', evidencePlaceholder: '如：SF1234567890',
+              helperText: isSelfFulfillSeller ? '自履约订单：你负责回传揽收/单号，超时仍按卖家责任处理。' : '' }]
+  if ((isLogistic || isSelfFulfillSeller) && s === 'picked_up')
     return [{ action: 'transit', label: '🚛 开始运输', style: 'primary' }]
-  if (isLogistic && s === 'in_transit')
+  if ((isLogistic || isSelfFulfillSeller) && s === 'in_transit')
     return [{ action: 'deliver', label: '📬 确认投递', style: 'success', needsEvidence: true,
-              noteLabel: '投递凭证', evidencePlaceholder: '门牌照片描述 / 收件人姓名 / 签收时间' }]
+              noteLabel: '投递凭证', evidencePlaceholder: '门牌照片描述 / 收件人姓名 / 签收时间',
+              helperText: isSelfFulfillSeller ? '自履约投递需留存签收/门牌/交付说明，买家确认后才结算。' : '' }]
   if (isBuyer && s === 'delivered')
     return [
       { action: 'confirm', label: '确认收货', style: 'success' },
@@ -20683,19 +21202,22 @@ function getActions(order, isBuyer, isSeller, isLogistic) {
 function renderActions(orderId, actions, order, logisticsCompanies = []) {
   return `
     <div class="action-area">
-      <div class="action-title">我的操作</div>
+      <div class="action-title">${t('我的操作')}</div>
       <div id="action-msg"></div>
       ${actions.map((a, i) => `
-        ${a.logisticsSelector ? `
+        ${a.custom === 'decline' ? `
+          <button class="btn btn-${a.style}" style="margin-bottom:8px;background:#fff;color:#dc2626;border:1px solid #dc2626"
+            onclick="openDeclineModal('${orderId}')">
+            ${t(a.label)}
+          </button>` :
+        a.logisticsSelector ? `
           <div class="form-group">
-            <label class="form-label">${t('选择物流公司')} <span style="color:#dc2626">*</span></label>
+            <label class="form-label">${t('发货方式')}</label>
             <select class="form-control" id="logi-select-${i}">
-              <option value="">${t('— 请选择物流公司 —')}</option>
+              <option value="self">${t('📦 我自己发货（自提自送）')}</option>
               ${logisticsCompanies.map(c => `<option value="${escHtml(c.id)}">${escHtml(c.name)}</option>`).join('')}
             </select>
-            ${logisticsCompanies.length === 0
-              ? `<div class="alert alert-warning" style="margin-top:6px;font-size:13px">${t('暂无已注册的物流公司，请先让物流方注册账号')}</div>`
-              : ''}
+            <div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:6px;line-height:1.5">${t('自己发货：你负责揽收 / 运输 / 送达,超时或虚假发货仍按卖家责任处理。选物流公司则由物流方流转。')}</div>
           </div>
           ${a.trackingInput ? `
           <div class="form-group">
@@ -20704,22 +21226,23 @@ function renderActions(orderId, actions, order, logisticsCompanies = []) {
           </div>` : ''}
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},false,true)">
-            ${a.label}
+            ${t(a.label)}
           </button>` :
         a.needsEvidence ? `
           <div class="form-group">
-            <label class="form-label">${a.noteLabel || '证据说明'}</label>
+            <label class="form-label">${t(a.noteLabel || '证据说明')}</label>
             ${a.action === 'pickup'
-              ? `<input type="text" class="form-control" id="evid-${i}" placeholder="${a.evidencePlaceholder || '快递单号'}">`
-              : `<textarea class="form-control" id="evid-${i}" placeholder="${a.evidencePlaceholder || ''}"></textarea>`}
+              ? `<input type="text" class="form-control" id="evid-${i}" placeholder="${t(a.evidencePlaceholder || '快递单号')}">`
+              : `<textarea class="form-control" id="evid-${i}" placeholder="${t(a.evidencePlaceholder || '')}"></textarea>`}
+            ${a.helperText ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:6px">${t(a.helperText)}</div>` : ''}
           </div>
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},true,false)">
-            ${a.label}
+            ${t(a.label)}
           </button>` : `
           <button class="btn btn-${a.style}" style="margin-bottom:8px"
             onclick="handleAction('${orderId}','${a.action}',${i},false,false)">
-            ${a.label}
+            ${t(a.label)}
           </button>`}
       `).join('')}
     </div>`
@@ -20740,6 +21263,13 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
     return
   }
   if (action === 'noop_in_person') return
+  const confirmText = {
+    ship: t('确认已经发货？发货后买家将看到物流信息，超时/虚假发货可能进入争议或判责。'),
+    pickup: t('确认已揽收并回传凭证？请确保单号或揽收说明真实可追踪。'),
+    deliver: t('确认已投递？请确保投递凭证真实，买家仍需确认收货后才结算。'),
+    confirm: t('确认收货？escrow 将进入结算流程，无法撤销。'),
+  }[action]
+  if (confirmText && !confirm(confirmText)) return
 
   let evidDesc = (needsEvidence || hasLogisticsSelector)
     ? (document.getElementById(`evid-${idx}`)?.value?.trim() || '') : ''
@@ -20758,15 +21288,21 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
   let logisticsCompanyId = ''
   if (hasLogisticsSelector) {
     const sel = document.getElementById(`logi-select-${idx}`)
-    logisticsCompanyId = sel?.value || ''
-    if (!logisticsCompanyId) { msgEl.innerHTML = alert$('error', t('请选择物流公司')); return }
-    const companyName = sel.options[sel.selectedIndex]?.text || logisticsCompanyId
+    const choice = sel?.value || 'self'
     const trackingInp = document.getElementById(`tracking-${idx}`)
     const trackingNo = trackingInp?.value?.trim() || ''
-    if (trackingNo) {
-      evidDesc = `${t('快递单号：')}${trackingNo} · ${companyName}`
+    if (choice === 'self') {
+      // 自发货:不绑定物流公司(logistics_id 留空 → seller self-fulfill 流转)
+      logisticsCompanyId = ''
+      evidDesc = trackingNo
+        ? `${t('快递单号：')}${trackingNo}${t('（自己发货）')}`
+        : t('卖家自己发货（自提自送）—— 后续由你揽收 / 运输 / 送达')
     } else {
-      evidDesc = `${t('已交付物流公司：')}${companyName}${t('，快递单号待物流揽收后回传')}`
+      logisticsCompanyId = choice
+      const companyName = sel.options[sel.selectedIndex]?.text || logisticsCompanyId
+      evidDesc = trackingNo
+        ? `${t('快递单号：')}${trackingNo} · ${companyName}`
+        : `${t('已交付物流公司：')}${companyName}${t('，快递单号待物流揽收后回传')}`
     }
   }
 
@@ -20788,6 +21324,107 @@ window.handleAction = async (orderId, action, idx, needsEvidence, hasLogisticsSe
   }
 }
 
+// ─── 卖家拒单(decline) + 临时判责举证(contest_decline)─── RFC-007 stage 2/3/5 ───────────────
+// reason code 元数据(与后端 orders-action.ts DECLINE_REASON_CODES / OBJECTIVE_DECLINE_REASONS 对齐)。
+// objective(客观声称)→ 临时判责,需在举证窗口内发起仲裁,不是自动免责;subjective(主观)→ 立即按卖家违约、买家退款。
+const DECLINE_REASONS = [
+  { code: 'stock_consumed_concurrent', objective: true,  zh: '并发售罄(库存被同时下单耗尽)', en: 'Stock consumed by a concurrent order' },
+  { code: 'stale_price_snapshot',      objective: true,  zh: '价格快照过期(下单价已失效)',     en: 'Stale price snapshot' },
+  { code: 'force_majeure',             objective: true,  zh: '不可抗力',                          en: 'Force majeure' },
+  { code: 'price_regret',              objective: false, zh: '价格反悔(不想按此价卖)',           en: 'Price regret' },
+  { code: 'cherry_pick',               objective: false, zh: '挑单(选择性拒单)',                 en: 'Cherry-picking' },
+  { code: 'other',                     objective: false, zh: '其他(主观)',                        en: 'Other (subjective)' },
+]
+function declineReasonOptions() {
+  const en = window._lang === 'en'
+  return DECLINE_REASONS.map(r => `<option value="${r.code}" data-objective="${r.objective ? '1' : '0'}">${en ? r.en : r.zh}${r.objective ? ` · ${t('客观')}` : ` · ${t('主观')}`}</option>`).join('')
+}
+// 选中 reason 后的诚实后果提示(主观 vs 客观,绝不把客观拒单说成自动免责)
+window.onDeclineReasonChange = () => {
+  const sel = document.getElementById('decline-reason')
+  const note = document.getElementById('decline-consequence')
+  if (!sel || !note) return
+  const objective = sel.selectedOptions[0]?.dataset?.objective === '1'
+  if (!sel.value) { note.innerHTML = ''; return }
+  note.innerHTML = objective
+    ? `<div style="background:#fffbeb;border:1px solid #fcd34d;color:#92400e;border-radius:8px;padding:10px;font-size:12px;line-height:1.6">⚠️ ${t('客观理由:订单将先转入【临时判责·卖家违约】并冻结结算。你需在举证窗口内发起仲裁举证翻案 —— 这不是自动免责;窗口过期未举证将按违约终结、买家退款。')}</div>`
+    : `<div style="background:#fef2f2;border:1px solid #fca5a5;color:#991b1b;border-radius:8px;padding:10px;font-size:12px;line-height:1.6">⚠️ ${t('主观理由:将立即按【卖家违约】处理,买家全额退款。此操作不可撤销。')}</div>`
+}
+window.openDeclineModal = (orderId) => {
+  const en = window._lang === 'en'
+  _openModal(`
+    <div style="max-width:440px">
+      <h3 style="font-size:16px;font-weight:700;margin-bottom:6px">${t('拒绝接单')}</h3>
+      <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('拒单会影响买家。请如实选择理由 —— 系统按理由区分【主观违约】与【客观临时判责】,后者需举证。')}</div>
+      <div class="form-group">
+        <label class="form-label">${t('拒单理由')} <span style="color:#dc2626">*</span></label>
+        <select class="form-control" id="decline-reason" onchange="onDeclineReasonChange()">
+          <option value="">${en ? '— select a reason —' : '— 请选择理由 —'}</option>
+          ${declineReasonOptions()}
+        </select>
+      </div>
+      <div id="decline-consequence" style="margin-bottom:10px"></div>
+      <div class="form-group">
+        <label class="form-label">${t('说明')} <span style="font-size:11px;color:#9ca3af;font-weight:400">${t('(可选)')}</span></label>
+        <textarea class="form-control" id="decline-notes" rows="2" placeholder="${t('补充说明(客观理由建议写清,便于后续举证)')}"></textarea>
+      </div>
+      <div id="decline-msg"></div>
+      <div style="display:flex;gap:8px;margin-top:8px">
+        <button class="btn btn-outline" style="flex:1" onclick="closeModal()">${t('取消')}</button>
+        <button class="btn btn-danger" style="flex:1;background:#dc2626;border-color:#dc2626;color:#fff" onclick="submitDecline('${orderId}')">${t('确认拒单')}</button>
+      </div>
+    </div>`)
+}
+window.submitDecline = async (orderId) => {
+  const code = document.getElementById('decline-reason')?.value || ''
+  const notes = document.getElementById('decline-notes')?.value?.trim() || ''
+  const msg = document.getElementById('decline-msg')
+  if (!code) { if (msg) msg.innerHTML = alert$('error', t('请选择拒单理由')); return }
+  if (msg) msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('处理中...')}</div>`
+  const res = await POST(`/orders/${orderId}/action`, { action: 'decline', decline_reason_code: code, notes })
+  if (res.error) { if (msg) msg.innerHTML = alert$('error', res.error); return }
+  closeModal()
+  toast$(res.outcome === 'fault_seller_provisional'
+    ? t('已拒单 — 临时判责,请在举证窗口内发起仲裁')
+    : t('已拒单 — 已按卖家违约处理,买家将获退款'), 'success')
+  setTimeout(() => renderOrderDetail(document.getElementById('app'), orderId), 1000)
+}
+// 临时判责举证面板:仅卖家、订单 fault_seller + decline_objective_pending=1 + 未结算时显示
+function sellerDeclineContestPanel(order, orderId, isSeller) {
+  if (!isSeller || order.status !== 'fault_seller' || Number(order.decline_objective_pending) !== 1 || order.settled_fault_at) return ''
+  const contested = Number(order.decline_contested) === 1
+  const deadline = order.decline_contest_deadline ? fmtTime(order.decline_contest_deadline) : ''
+  if (contested) {
+    return `<div class="card" style="padding:14px;margin-top:10px;border-left:3px solid #4f46e5;background:#eef2ff">
+      <div style="font-size:13px;font-weight:600;color:#3730a3;margin-bottom:4px">⚖️ ${t('已发起仲裁举证')}</div>
+      <div style="font-size:12px;color:#374151;line-height:1.6">${t('自动终结已暂停,等待仲裁员裁决:维持→免责全退+退质押;驳回→按违约结算。')}</div>
+    </div>`
+  }
+  return `<div class="card" style="padding:14px;margin-top:10px;border-left:3px solid #d97706;background:#fffbeb">
+    <div style="font-size:13px;font-weight:600;color:#92400e;margin-bottom:4px">⏳ ${t('临时判责 — 举证窗口开放')}</div>
+    <div style="font-size:12px;color:#7f1d1d;line-height:1.6;margin-bottom:8px">
+      ${t('你以客观理由拒单,订单暂判【卖家违约】但尚未结算。你可在窗口内发起人工仲裁举证翻案 —— 这不是自动免责。')}
+      ${deadline ? `<br><strong>${t('举证截止')}:</strong> ${escHtml(deadline)} · ${t('过期未举证将按违约终结、买家退款。')}` : ''}
+    </div>
+    <div class="form-group">
+      <label class="form-label">${t('举证说明')} <span style="color:#dc2626">*</span></label>
+      <textarea class="form-control" id="contest-evidence" rows="3" placeholder="${t('客观说明拒单理由的证据(如并发订单号、价格变更时间、不可抗力凭证)')}"></textarea>
+    </div>
+    <div id="contest-msg"></div>
+    <button class="btn btn-primary" style="width:100%" onclick="submitContestDecline('${orderId}')">${t('提交举证 / 发起仲裁')}</button>
+  </div>`
+}
+window.submitContestDecline = async (orderId) => {
+  const evid = document.getElementById('contest-evidence')?.value?.trim() || ''
+  const msg = document.getElementById('contest-msg')
+  if (!evid) { if (msg) msg.innerHTML = alert$('error', t('请填写举证说明')); return }
+  if (msg) msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('提交中...')}</div>`
+  const res = await POST(`/orders/${orderId}/action`, { action: 'contest_decline', evidence_description: evid })
+  if (res.error) { if (msg) msg.innerHTML = alert$('error', res.error); return }
+  toast$(t('已发起仲裁举证 — 等待仲裁员裁决'), 'success')
+  setTimeout(() => renderOrderDetail(document.getElementById('app'), orderId), 1000)
+}
+
 // S8: 检查买家是否完成首单，若是 + ShareCtx 还有 sponsor → 一次性致谢 toast + 清 ctx
 async function maybeThankSponsorAndClear() {
   const ctx = readShareCtx()
@@ -22271,48 +22908,61 @@ async function renderSeller(app) {
   }
 
   app.innerHTML = shell(loading$(), 'seller')
-  const [productsRaw, ordersRaw, mySkillsRaw, quotaRaw, insightsRaw] = await Promise.all([
+  const [productsRaw, ordersRaw, mySkillsRaw, quotaRaw, insightsRaw, returnsRaw] = await Promise.all([
     GET('/my-products'),
     GET('/orders'),
     GET('/skills/mine'),
     GET('/seller/quota-status'),
     GET('/seller/insights').catch(() => null),
+    GET('/return-requests?role=seller').catch(() => ({ items: [] })),
   ])
   const mySkills   = Array.isArray(mySkillsRaw) ? mySkillsRaw : []
   const orders     = Array.isArray(ordersRaw)   ? ordersRaw   : []
   const products   = Array.isArray(productsRaw) ? productsRaw : []
   const quota      = (quotaRaw && !quotaRaw.error) ? quotaRaw : null
   const insights   = (insightsRaw && !insightsRaw.error) ? insightsRaw : null
+  const returns    = Array.isArray(returnsRaw?.items) ? returnsRaw.items : []
 
   const pendingOrders = orders.filter(o => ['paid', 'accepted'].includes(o.status) && o.seller_id === state.user.id)
+  const paidOrders = orders.filter(o => o.status === 'paid' && o.seller_id === state.user.id)
+  const acceptedOrders = orders.filter(o => o.status === 'accepted' && o.seller_id === state.user.id)
   const myProducts = products
 
   // KPI（基于最近 50 单的派生统计）+ 今日维度
   const mySoldOrders = orders.filter(o => o.seller_id === state.user.id)
   const today = new Date().toISOString().slice(0, 10)
   const todayOrders = mySoldOrders.filter(o => (o.created_at || '').startsWith(today))
-  const kpiPending   = mySoldOrders.filter(o => ['paid','accepted'].includes(o.status)).length
+  const kpiPaid      = paidOrders.length
+  const kpiAccepted  = acceptedOrders.length
   const kpiInTransit = mySoldOrders.filter(o => ['shipped','picked_up','in_transit','delivered'].includes(o.status)).length
+  const kpiDisputes  = mySoldOrders.filter(o => o.status === 'disputed').length
+  const kpiProvisionalDeclines = mySoldOrders.filter(o => o.status === 'fault_seller' && Number(o.decline_objective_pending) === 1 && !o.settled_fault_at).length
+  const kpiReturnExceptions = returns.filter(r => ['pending','picked_up','rejected','accepted_pickup_pending'].includes(r.status)).length
+  const kpiExceptions = kpiDisputes + kpiProvisionalDeclines + kpiReturnExceptions
   const kpiSales     = mySoldOrders.filter(o => o.status === 'completed').reduce((s,o) => s + Number(o.total_amount || 0), 0)
   const kpiTodayCount = todayOrders.length
   const kpiTodaySales = todayOrders.filter(o => o.status === 'completed').reduce((s,o) => s + Number(o.total_amount || 0), 0)
   const sellerKpis = `
-    <div style="display:grid;grid-template-columns:repeat(4,1fr);gap:6px;margin-bottom:14px">
+    <div style="display:grid;grid-template-columns:repeat(5,1fr);gap:6px;margin-bottom:14px">
       <div class="card" style="padding:10px;text-align:center;background:linear-gradient(135deg,#eff6ff,#dbeafe);border-color:#bfdbfe">
         <div style="font-size:18px;font-weight:800;color:#1d4ed8">${kpiTodayCount}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('今日订单')}</div>
       </div>
-      <div class="card" style="padding:10px;text-align:center;background:${kpiPending > 0 ? 'linear-gradient(135deg,#fef3c7,#fde68a)' : '#f9fafb'};border-color:${kpiPending > 0 ? '#fcd34d' : '#e5e7eb'}">
-        <div style="font-size:18px;font-weight:800;color:${kpiPending > 0 ? '#b45309' : '#9ca3af'}">${kpiPending}</div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiPaid > 0 ? 'linear-gradient(135deg,#fef3c7,#fde68a)' : '#f9fafb'};border-color:${kpiPaid > 0 ? '#fcd34d' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiPaid > 0 ? '#b45309' : '#9ca3af'}">${kpiPaid}</div>
+        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('待接单')}</div>
+      </div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiAccepted > 0 ? 'linear-gradient(135deg,#fff7ed,#fed7aa)' : '#f9fafb'};border-color:${kpiAccepted > 0 ? '#fdba74' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiAccepted > 0 ? '#c2410c' : '#9ca3af'}">${kpiAccepted}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('待发货')}</div>
       </div>
       <div class="card" style="padding:10px;text-align:center">
         <div style="font-size:18px;font-weight:800;color:#374151">${kpiInTransit}</div>
         <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('在途')}</div>
       </div>
-      <div class="card" style="padding:10px;text-align:center;background:linear-gradient(135deg,#f0fdf4,#dcfce7);border-color:#86efac">
-        <div style="font-size:16px;font-weight:800;color:#15803d">${kpiSales.toFixed(0)}</div>
-        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('累计 WAZ')}</div>
+      <div class="card" style="padding:10px;text-align:center;background:${kpiExceptions > 0 ? 'linear-gradient(135deg,#fef2f2,#fee2e2)' : '#f9fafb'};border-color:${kpiExceptions > 0 ? '#fca5a5' : '#e5e7eb'}">
+        <div style="font-size:18px;font-weight:800;color:${kpiExceptions > 0 ? '#dc2626' : '#9ca3af'}">${kpiExceptions}</div>
+        <div style="font-size:10px;color:#6b7280;margin-top:2px">${t('异常')}</div>
       </div>
     </div>
   `
@@ -22394,9 +23044,7 @@ async function renderSeller(app) {
     </div>
   ` : ''
 
-  const pendingHtml = pendingOrders.length === 0
-    ? `<div class="empty" style="padding:24px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无待处理订单')}</div></div>`
-    : batchAcceptBar + batchShipBar + pendingOrders.map(o => `
+  const pendingOrderRows = (list) => list.map(o => `
       <div class="card" onclick="navigate('#order/${o.id}')" style="cursor:pointer">
         <div class="order-item">
           <div class="order-icon">📦</div>
@@ -22408,6 +23056,39 @@ async function renderSeller(app) {
           <div class="order-amount">${o.total_amount} WAZ</div>
         </div>
       </div>`).join('')
+  const acceptHtml = paidOrders.length === 0
+    ? `<div class="empty" style="padding:24px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无待处理订单')}</div></div>`
+    : batchAcceptBar + pendingOrderRows(paidOrders)
+  const shipHtml = acceptedOrders.length === 0
+    ? `<div class="empty" style="padding:18px"><div class="empty-icon">📦</div><div class="empty-text">${t('暂无待发货订单')}</div></div>`
+    : batchShipBar + pendingOrderRows(acceptedOrders)
+  const exceptionOrders = mySoldOrders.filter(o => o.status === 'disputed' || (o.status === 'fault_seller' && Number(o.decline_objective_pending) === 1 && !o.settled_fault_at))
+  const exceptionReturns = returns.filter(r => ['pending','picked_up','rejected','accepted_pickup_pending'].includes(r.status))
+  const exceptionsHtml = (exceptionOrders.length + exceptionReturns.length) === 0
+    ? `<div class="empty" style="padding:18px"><div class="empty-icon">✅</div><div class="empty-text">${t('暂无异常待处理')}</div></div>`
+    : `
+      ${exceptionOrders.map(o => `
+        <div class="card" onclick="navigate('#order/${o.id}')" style="cursor:pointer;border-left:3px solid ${o.status === 'disputed' ? '#dc2626' : '#f59e0b'};padding:10px 12px;margin-bottom:8px">
+          <div style="display:flex;justify-content:space-between;gap:10px;align-items:center">
+            <div style="min-width:0">
+              <div style="font-size:13px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${escHtml(o.product_title)}</div>
+              <div style="font-size:11px;color:#6b7280;margin-top:2px">${o.status === 'disputed' ? t('争议订单') : t('临时判责拒单')} · ${fmtTime(o.updated_at || o.created_at)}</div>
+            </div>
+            <span style="font-size:11px;color:#dc2626;font-weight:600;white-space:nowrap">${t('查看处理')} →</span>
+          </div>
+        </div>`).join('')}
+      ${exceptionReturns.map(r => `
+        <div class="card" onclick="navigate('#order/${r.order_id}')" style="cursor:pointer;border-left:3px solid #0891b2;padding:10px 12px;margin-bottom:8px">
+          <div style="display:flex;justify-content:space-between;gap:10px;align-items:center">
+            <div style="min-width:0">
+              <div style="font-size:13px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${escHtml(r.product_title)}</div>
+              <div style="font-size:11px;color:#6b7280;margin-top:2px">${t('退货处理')} · ${r.refund_amount} WAZ · ${fmtTime(r.created_at)}</div>
+            </div>
+            <span style="font-size:11px;color:#0891b2;font-weight:600;white-space:nowrap">${t('查看订单')} →</span>
+          </div>
+        </div>`).join('')}
+      <button class="btn btn-outline btn-sm" style="width:auto;font-size:12px" onclick="navigate('#returns')">↩ ${t('退货管理')}</button>
+    `
 
   const activeProducts    = products.filter(p => p.status === 'active')
   const warehouseProducts = products.filter(p => p.status !== 'active' && p.status !== 'deleted')
@@ -22587,11 +23268,24 @@ async function renderSeller(app) {
   // 各 sub-tab 内容
   const dashboardSection = sellerSubTab === 'dashboard' ? `
     ${sellerKpis}
+    ${sellerRecoveryReminderHTML()}
     ${stockAlertBanner}
     ${quotaBanner}
     ${pendingOrders.length > 0 ? `<div class="alert alert-warning">📬 ${t('你有')} ${pendingOrders.length} ${t('个订单需要处理')}</div>` : ''}
-    <div style="font-weight:700;margin-bottom:12px">${t('待处理订单')}</div>
-    ${pendingHtml}
+    <div style="display:grid;grid-template-columns:1fr;gap:10px;margin-bottom:12px">
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">📬 ${t('待接单')}</div>
+        ${acceptHtml}
+      </section>
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">📦 ${t('待发货')}</div>
+        ${shipHtml}
+      </section>
+      <section>
+        <div style="font-weight:700;margin-bottom:8px">⚠ ${t('退货 · 争议 · 异常')}</div>
+        ${exceptionsHtml}
+      </section>
+    </div>
     ${insightsBlock}
   ` : ''
 
@@ -23564,6 +24258,7 @@ function skillCard(s, context) {
           <span class="badge badge-green">${t('运行中')}</span>
         </div>
         <div style="font-size:13px;color:#6b7280;margin-top:8px">${s.description}</div>
+        ${s.skill_type === 'auto_accept' ? `<div style="font-size:11px;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:6px;padding:6px 8px;margin-top:8px;line-height:1.5">⚠️ ${t('自动接单仍受约束：接单后须按时发货，超时按卖家违约判责；跳过「拒绝接单」窗口；不校验库存。')}</div>` : ''}
       </div>`
   }
   // buyer context
@@ -23584,7 +24279,7 @@ function skillCard(s, context) {
 
 const SKILL_CONFIG_HINTS = {
   catalog_sync:      '目录同步：订阅此 Skill 的买家在搜索时会优先看到你的商品。成交后协议自动给你 0.5% 推荐佣金。',
-  auto_accept:       '自动接单：买家下单后无需手动操作，系统自动接受。可设置每日上限、金额范围。',
+  auto_accept:       '⚠️ 自动接单：买家下单后系统自动接受（省去手动「接单」）。注意责任不变：①接单后你仍须按时发货，超时/不发货仍按卖家违约判责；②会跳过「拒绝接单」窗口，订单自动进入已接单后无法再拒单；③不校验库存，售罄商品也会被自动接单，你仍要履约或担责。建议用金额范围/每日上限控制风险。',
   price_negotiation: '价格协商：允许买家 Agent 在你设定的折扣范围内自动议价，减少沟通成本。',
   quality_guarantee: '质量承诺：额外质押 WAZ 作为品质担保，增强买家信任，适合高客单价商品。',
   instant_ship:      '极速发货：承诺接单后 24h 内发货，违约自动赔付。适合有充足现货的卖家。',
@@ -33528,7 +34223,7 @@ async function renderMyNotes(app) {
       <h2 style="font-size:18px;font-weight:700">📝 ${t('我的笔记')}</h2>
       ${draftCount > 0 ? `<button class="btn btn-outline btn-sm" style="font-size:11px;padding:5px 10px" onclick="openDraftsModal()">📋 ${t('草稿')} ${draftCount}</button>` : ''}
     </div>
-    <div style="font-size:11px;color:#6b7280;margin-bottom:14px">${state.user?.mlm_ui_visible !== false ? t('协议自动按 70/20/10 把分享返佣给你和上下游') : t('你所在地区不分多级返佣 — 产生的佣金已自动捐入公益基金')}</div>
+    <div style="font-size:11px;color:#6b7280;margin-bottom:14px">${state.user?.mlm_ui_visible !== false ? t('协议按地区层级自动拆分分享返佣(当前预发布期仅 L1)') : t('你所在地区不分多级返佣 — 产生的佣金已自动捐入公益基金')}</div>
     <div class="card" style="padding:14px;margin-bottom:14px;background:linear-gradient(135deg,#fef3c7,#fff7ed)">
       <div style="display:grid;grid-template-columns:repeat(3,1fr);gap:8px;text-align:center">
         <div><div style="font-size:18px;font-weight:800;color:#92400e">${notes.length}</div><div style="font-size:10px;color:#9ca3af">${t('笔记数')}</div></div>