@seasonkoh/webaz 0.1.28 → 0.1.29

package/dist/product-verification.js

@@ -0,0 +1,93 @@
+export const MAX_URL_LEN = 2048;
+export const MAX_PLATFORM_LEN = 60;
+export const MAX_NOTES_LEN = 500;
+const ACTIVE = "('issued','submitted','verified')";
+const getActiveForProduct = (db, productId) => db.prepare(`SELECT * FROM product_verifications WHERE product_id = ? AND status IN ${ACTIVE} ORDER BY created_at DESC, rowid DESC LIMIT 1`).get(productId);
+/** http(s) 链接最弱校验(仅存储,不抓取):必须 http/https、长度受限。拒 javascript:/data: 等危险 scheme。 */
+function isStorableHttpUrl(url) {
+    if (typeof url !== 'string' || url.length === 0 || url.length > MAX_URL_LEN)
+        return false;
+    return /^https?:\/\/[^\s]+$/i.test(url.trim());
+}
+/** 卖家为【某产品】申请认证 → issued(签发 code)。绝不自动 verify。单一活跃(per product)。调用方须先校验 seller 拥有该产品。 */
+export function requestProductVerification(db, args) {
+    const { id, productId, sellerId, code } = args;
+    if (!id || !productId || !sellerId || !code)
+        return { ok: false, reason: 'missing id/productId/sellerId/code' };
+    const platform = args.platform ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : null;
+    const active = getActiveForProduct(db, productId);
+    if (active)
+        return { ok: false, reason: `该产品已有进行中的认证(${active.status})` };
+    db.prepare(`INSERT INTO product_verifications (id, product_id, seller_id, code, platform, status, created_at, updated_at)
+    VALUES (?,?,?,?,?, 'issued', datetime('now'), datetime('now'))`).run(id, productId, sellerId, code, platform);
+    return { ok: true, status: 'issued', code };
+}
+/** 卖家为【某产品】提交外部链接 → submitted。要求该产品有 issued 记录;链接仅存储(不抓取)。调用方须校验 seller 拥有该产品。 */
+export function submitProductVerificationLink(db, args) {
+    const url = String(args.externalUrl || '').trim();
+    if (!isStorableHttpUrl(url))
+        return { ok: false, reason: '请提交有效的 http(s) 商品链接' };
+    const active = getActiveForProduct(db, args.productId);
+    if (!active)
+        return { ok: false, reason: '请先为该产品申请认证获取验证码' };
+    if (active.status === 'verified')
+        return { ok: false, reason: '该产品认证已通过,无需重复提交' };
+    const platform = args.platform != null ? String(args.platform).trim().slice(0, MAX_PLATFORM_LEN) : active.platform;
+    db.prepare(`UPDATE product_verifications SET external_url = ?, platform = ?, status = 'submitted', updated_at = datetime('now') WHERE id = ?`)
+        .run(url, platform, active.id);
+    return { ok: true, status: 'submitted' };
+}
+/** 真人 admin 手动核对结论 → verified | rejected。仅从 submitted 流转。reviewerId 必填(责任分层;ROOT/Passkey 由调用方强制)。 */
+export function reviewProductVerification(db, args) {
+    const { id, reviewerId, decision } = args;
+    if (!reviewerId)
+        return { ok: false, reason: 'reviewProductVerification requires a human reviewerId' };
+    if (decision !== 'verified' && decision !== 'rejected')
+        return { ok: false, reason: 'decision must be verified|rejected' };
+    const row = db.prepare('SELECT * FROM product_verifications WHERE id = ?').get(id);
+    if (!row)
+        return { ok: false, reason: 'product verification not found' };
+    if (row.status === decision)
+        return { ok: true, status: decision, already: true };
+    if (row.status !== 'submitted')
+        return { ok: false, reason: `cannot review from status '${row.status}' (need submitted)` };
+    const notes = args.notes != null ? String(args.notes).slice(0, MAX_NOTES_LEN) : null;
+    db.prepare(`UPDATE product_verifications SET status = ?, reviewed_by = ?, reviewed_at = datetime('now'), notes = ?, updated_at = datetime('now') WHERE id = ?`)
+        .run(decision, reviewerId, notes, id);
+    return { ok: true, status: decision };
+}
+/** 某产品最新一条认证记录(任意状态)。无 → null。 */
+export function getProductVerification(db, productId) {
+    return db.prepare('SELECT * FROM product_verifications WHERE product_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1').get(productId) ?? null;
+}
+/** 某卖家所有产品认证记录(供卖家自助面板逐产品展示状态)。最新在前。 */
+export function listSellerProductVerifications(db, sellerId) {
+    return db.prepare('SELECT * FROM product_verifications WHERE seller_id = ? ORDER BY created_at DESC, rowid DESC').all(sellerId);
+}
+export function toSellerProductVerificationView(row) {
+    return {
+        id: row.id, product_id: row.product_id, code: row.code, platform: row.platform, external_url: row.external_url,
+        status: row.status, reviewed_at: row.reviewed_at, created_at: row.created_at, updated_at: row.updated_at,
+    }; // 故意省略 reviewed_by + notes(admin 身份 / 内部备注)
+}
+/** admin 队列:按 status 过滤(默认全部),最新在前。纯读。 */
+export function listProductVerifications(db, opts = {}) {
+    if (opts.status)
+        return db.prepare(`SELECT * FROM product_verifications WHERE status = ? ORDER BY created_at DESC, rowid DESC`).all(opts.status);
+    return db.prepare(`SELECT * FROM product_verifications ORDER BY created_at DESC, rowid DESC`).all();
+}
+/** 硬门读取:该产品是否【已验证】(有 verified 记录)。供 direct-pay create/availability 强制(未验证 → 不可直付)。 */
+export function productStoreVerified(db, productId) {
+    return !!db.prepare("SELECT 1 FROM product_verifications WHERE product_id = ? AND status = 'verified' LIMIT 1").get(productId);
+}
+/**
+ * 反作弊生命周期:商品发生【重大编辑】(标题/价格/详情/外部链接)时作废其验证 → status='stale'。
+ *   之后 productStoreVerified=false(硬门重新拦截),且 active 记录被清(卖家可重新申领→提交→admin 重核)。
+ *   防"先把商品 A 验证通过,再改标题/价格/详情/链接变成商品 B"绕过逐品门。返回作废条数。纯写,只改本表。
+ *   注:store-level 豁免卖家不依赖逐品验证,本作废对其直付资格无影响。
+ */
+export function invalidateProductVerification(db, productId) {
+    const r = db.prepare(`UPDATE product_verifications SET status = 'stale', updated_at = datetime('now')
+    WHERE product_id = ? AND status IN ('issued','submitted','verified')`).run(productId);
+    return { invalidated: r.changes };
+}

package/dist/pwa/acp-feed.js

@@ -1,3 +1,4 @@
+import { displayCurrency } from '../currency.js'; // agent-facing 币种统一 WAZ,遗留 'DCP' 读时归一化(绝不外泄 DCP)
 const BASE = 'https://webaz.xyz';
 // ACP availability 枚举(spec):in_stock | out_of_stock | pre_order | backorder | unknown
 function availability(stock) {
@@ -55,7 +56,7 @@ export function buildAcpProductFeed(db, opts = {}) {
             description: plainText(p.description, 5000), // spec: plain text, max 5000
             url: `${BASE}/#order-product/${p.id}`, // 商品详情页(SPA hash,200)
             // price: spec = Number + ISO 4217 code。WAZ 非 ISO 4217 → 见 feed 级 _disclosures.currency
-            price: { amount: Number(p.price), currency: p.currency || 'WAZ' },
+            price: { amount: Number(p.price), currency: displayCurrency(p.currency) },
             availability: availability(p.stock),
             is_digital: p.product_type === 'digital',
             seller_name: (p.seller_name || p.seller_id).slice(0, 70),
@@ -106,7 +107,7 @@ export function buildAcpProductFeed(db, opts = {}) {
         },
         _disclosures: {
             phase: 'pre-launch',
-            currency: "Each item's price.currency is the protocol's SIMULATED pre-launch internal unit (WAZ, or legacy 'DCP'), NOT an ISO 4217 fiat currency. No real money is involved.",
+            currency: "Each item's price.currency is the protocol's SIMULATED pre-launch internal unit, always emitted as WAZ (legacy internal-code rows are normalized to WAZ on read), NOT an ISO 4217 fiat currency. No real money is involved.",
             checkout: 'is_eligible_checkout is false for every item: ACP checkout is not yet wired. Products are DISCOVERABLE via ACP, not yet PURCHASABLE via ACP. Native WebAZ checkout + escrow + state machine govern real purchases (see RFC-015).',
         },
         product_count: products.length,

package/dist/pwa/contract-fingerprint.js

@@ -36,6 +36,9 @@ export const CONTRACT_CHANGES = [
     { contract_version: 3, date: '2026-06-09', surface: 'entity', kind: 'changed', summary: '§① order lifecycle: corrected declined_nofault state meaning text — it is NOT terminal (transitions declined_nofault→completed on settlement). Dropped the contradictory "(terminal)" label that conflicted with the auto-derived terminal:false. Semantics/state-machine unchanged; text-only clarification for agents reading the entity dictionary.' },
     { contract_version: 4, date: '2026-06-09', surface: 'capability', kind: 'changed', summary: '§② capability matrix: POST /api/reviews/:type/:id/claim now requires the new "review_claim" action scope instead of being SAFE (unscoped). The review-claim path locks a 5 WAZ stake (escrow), so it belongs under default-deny accountability like other value writes. GET reviews endpoints stay open.', migration: 'A declared agent that calls review claim must add the "review_claim" scope to its api_key (or hold a Passkey, or declare "*"). Passkey-bound humans and "*" agents are unaffected; GET reviews unchanged.' },
     { contract_version: 5, date: '2026-06-24', surface: 'integration', kind: 'added', summary: '§④ integration-contract entry (/.well-known/webaz-integration.json) gains an agent_quickstart block: a 60-second stranger-agent cold-start with discrete, machine-parseable fields (canonical_start_url, public_readonly_entrypoints, anonymous_allowed_actions, authenticated_required_actions, safe_next_actions, proposal_flow, contribution_boundary). Additive — no existing field changed; agents may ignore. NB: this surface is NOT covered by the §②/§① fingerprint, so it is registered here by hand.' },
+    { contract_version: 6, date: '2026-06-27', surface: 'entity', kind: 'added', summary: '§① order lifecycle gains two Direct Pay Rail 1 (non-custodial off-protocol payment) states: direct_pay_window (seller fee-stake locked, payment method shown, awaiting buyer off-protocol payment) and direct_expired_unconfirmed (payment window timed out without buyer confirmation — order is NOT silently closed; buyer retains a dispute/confirm window). Additive — existing order states/transitions unchanged; escrow orders never enter these states; agents may ignore unless they place direct_p2p orders.' },
+    { contract_version: 7, date: '2026-06-27', surface: 'capability', kind: 'added', summary: '§② capability matrix RESERVES a new "direct_pay" action scope for the future /api/direct-pay/* surface (Direct Pay Rail 1). SCAFFOLD ONLY: this revision ships the D1/D2 disclosure helper + append-only ack model and a Passkey RISK-guard helper for later wiring — NO production route is gated yet, and the current order-action paths (mark_paid / cancel / confirm / confirm-in-person) do NOT yet enforce the Passkey or the two-disclosure-ack gate. The classifier maps /api/direct-pay/* → direct_pay so that surface is RISK-scoped the moment routes are added. Additive — no existing action changed.', migration: 'No behavioural change yet — do NOT assume Direct Pay order actions are Passkey-gated or disclosure-gated at this revision, and do NOT assume agents are blocked from them. Real enforcement (Passkey + two-disclosure-ack on mark_paid/confirm/confirm-in-person) is wired in a later PR together with the create route, ack endpoints, and UI.' },
+    { contract_version: 8, date: '2026-07-02', surface: 'capability', kind: 'added', summary: 'Direct Pay Rail 1 (non-custodial) buyer account selection: POST /api/orders now accepts an OPTIONAL direct_receive_account_id — when a seller offers multiple receive accounts (GET /api/direct-receive/selectable-accounts, metadata-only), the buyer picks one and the create route snapshots THAT account. Omitted → unchanged dual-read fallback to the seller\'s single legacy payment instruction (no behaviour change for sellers with only that). The direct_p2p order gains a direct_pay_account_snapshot (non-sensitive metadata {account_id,method,currency,label,qr_ref} frozen at create); the raw instruction text stays in the existing disclosure-gated snapshot. New buyer read GET /api/orders/:id/direct-pay-qr serves the snapshotted receive-QR image bytes, gated to the order buyer AND both D1/D2 disclosure acks (non-enumerating 404 otherwise). Additive — this create-body field + order-metadata snapshot are NOT part of the §②/§① fingerprint projection, so registered here by hand; no existing action or order state changed.', migration: 'Agents placing direct_p2p orders MAY pass direct_receive_account_id (from selectable-accounts) to choose how they pay; omitting it preserves the prior single-instruction behaviour. The raw payment instruction and the QR image remain revealed only after both disclosure acks.' },
 ];
 export function buildChangeFeed() {
     return {

package/dist/pwa/direct-pay-guards.js

@@ -0,0 +1,20 @@
+/**
+ * 直付 / 直接收款 RISK 门:
+ *   ① 无 Passkey credential → 硬拒(agent 路径:agent 不可能持有 Passkey assertion → 永远过不了)。
+ *   ② 需一次性真人 WebAuthn gate token(purpose-bound, 60s)。
+ * 两步都过才返回 ok。无自助批准路径。
+ */
+export function requireDirectPayHumanPasskey(deps, args) {
+    const { db, consumeGateToken } = deps;
+    const { userId, webauthnToken, purpose, validate } = args;
+    // ① agent 硬拒:没有 Passkey 凭证的身份(agent)绝不能发起/批准直付
+    const hasPk = db.prepare('SELECT COUNT(*) AS n FROM webauthn_credentials WHERE user_id = ?').get(userId).n > 0;
+    if (!hasPk) {
+        return { ok: false, error_code: 'PASSKEY_REQUIRED_FOR_DIRECT_PAY', reason: '直付/直接收款是 RISK 操作:需绑定 Passkey 并真人二次确认,agent 不可代操作' };
+    }
+    // ② 一次性 purpose-bound 真人 WebAuthn gate token
+    const gate = consumeGateToken(userId, webauthnToken, purpose, validate ?? (() => true));
+    if (!gate.ok)
+        return { ok: false, error_code: 'HUMAN_PRESENCE_REQUIRED', reason: gate.reason || '需真实人工 WebAuthn 验证' };
+    return { ok: true };
+}

package/dist/pwa/direct-pay-order-redaction.js

@@ -0,0 +1,24 @@
+import { requireBothDisclosuresAcked } from '../direct-pay-disclosures.js';
+/** 买家自视角:未 both-acked 的 direct_p2p 订单,删收款目标(instruction 原文 + 账号快照 qr_ref)。就地改 o。 */
+export function redactUnackedDirectPayTarget(db, o, userId) {
+    if (o.payment_rail !== 'direct_p2p' || o.buyer_id !== userId)
+        return;
+    if (requireBothDisclosuresAcked(db, o.id).ok)
+        return;
+    delete o.direct_pay_instruction_snapshot;
+    if (o.direct_pay_account_snapshot != null) {
+        try {
+            const s = JSON.parse(o.direct_pay_account_snapshot);
+            delete s.qr_ref;
+            o.direct_pay_account_snapshot = JSON.stringify(s);
+        }
+        catch {
+            delete o.direct_pay_account_snapshot;
+        }
+    }
+}
+/** 无条件删除收款目标(instruction 快照 + 整个账号快照)。用于非买家第三方 reader,他们绝不该看到收款目标。就地改 o。 */
+export function stripDirectPayPaymentTarget(o) {
+    delete o.direct_pay_instruction_snapshot;
+    delete o.direct_pay_account_snapshot;
+}

package/dist/pwa/endpoint-actions.js

@@ -31,6 +31,9 @@ export const WRITE_RULES = [
     { method: 'POST', re: /^\/api\/skill-market\/[^/]+\/purchase/, action: 'purchase' },
     { method: 'POST', re: /^\/api\/secondhand\/[^/]+\/order/, action: 'buy_secondhand' },
     { method: 'POST', re: /^\/api\/group-buys\/[^/]+\/join/, action: 'group_buy_join' },
+    // Direct Pay (Rail 1) = RISK scope:为【未来】/api/direct-pay/* 写面【保留】'direct_pay' 分类(该面尚无路由)。
+    //   ⚠️ SCAFFOLD:Passkey/两次披露门当前是 helper,【尚未】接到任何 handler;真实 enforcement 随 create-route/UI/ack 端点在后续 PR 落地。
+    { method: 'WRITE', re: /^\/api\/direct-pay\//, action: 'direct_pay' },
     // Codex #98 P1:review claim 锁 5 WAZ stake(扣 balance + escrowed)—— 资金写,绝不能落 SAFE,纳入 default-deny 问责门。
     //   只命中 .../:type/:id/claim;其余 reviews 写无规则 → 落通用 'write'(仍 default-deny),GET reviews 由 endpointToAction(GET) 返回 null。
     { method: 'POST', re: /^\/api\/reviews\/[^/]+\/[^/]+\/claim$/, action: 'review_claim' },

package/dist/pwa/public/app-ai.js

@@ -912,7 +912,7 @@ async function aiChatTurn(conversation, userText, attachments, onProgress) {
     conversation.messages.push({ role: 'user', content: toolResults })
   }
   await aiSaveConversation(conversation)
-  return { content: [{ type: 'text', text: '⚠️ 达到工具调用上限，请重新提问或细化问题。' }] }
+  return { content: [{ type: 'text', text: t('⚠️ 达到工具调用上限，请重新提问或细化问题。') }] }
 }
 
 function aiCreateConversation() {
@@ -1096,7 +1096,7 @@ function renderAIStatusBar() {
       ${visionChip}
       <span style="font-weight:600;font-size:13px;color:#111827;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(provider.name)}</span>
       <span style="color:#d1d5db;font-size:11px;flex-shrink:0">·</span>
-      <span style="color:#6b7280;font-size:11px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(curModel?.label || modelId)}</span>
+      <span style="color:#6b7280;font-size:11px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(t(curModel?.label || modelId))}</span>
     </div>
     ${aiTTS.supported() ? `
     <button onclick="aiToggleTTS()" title="${aiTTS.isEnabled() ? t('点击关闭朗读') : t('点击开启朗读 AI 回话')}"
@@ -1326,16 +1326,16 @@ async function renderAIDemo(app) {
           ${d.expectedSteps.map((s, j) => `
             <div style="display:flex;gap:8px;padding:4px 0;font-size:11px;color:#374151">
               <span style="color:#9ca3af;flex-shrink:0">${j+1}.</span>
-              <code style="background:#eef2ff;color:#3730a3;padding:1px 6px;border-radius:4px;font-size:10px;font-family:ui-monospace,Consolas,monospace;flex-shrink:0">${escHtml(s.tool)}</code>
+              <code style="background:#eef2ff;color:#3730a3;padding:1px 6px;border-radius:4px;font-size:10px;font-family:ui-monospace,Consolas,monospace;flex-shrink:0">${escHtml(t(s.tool))}</code>
               <span style="color:#6b7280">${t(s.desc)}</span>
             </div>`).join('')}
         </div>
       </details>
       <div style="display:flex;gap:8px">
-        <button data-prompt="${escAttr(d.prompt)}" onclick="runAIDemo(this.dataset.prompt)" style="flex:1;padding:11px;background:#007aff;color:#fff;border:none;border-radius:10px;font-size:14px;font-weight:600;cursor:pointer">${t('一键运行')} →</button>
+        <button data-prompt="${escAttr(t(d.prompt))}" onclick="runAIDemo(this.dataset.prompt)" style="flex:1;padding:11px;background:#007aff;color:#fff;border:none;border-radius:10px;font-size:14px;font-weight:600;cursor:pointer">${t('一键运行')} →</button>
       </div>
       <div style="margin-top:8px;font-size:10px;color:#9ca3af;padding:6px 8px;background:#f9fafb;border-radius:6px;line-height:1.5">
-        💬 ${t('提示原文')}：${escHtml(d.prompt.slice(0, 80))}${d.prompt.length > 80 ? '…' : ''}
+        💬 ${t('提示原文')}：${escHtml(t(d.prompt).slice(0, 80))}${t(d.prompt).length > 80 ? '…' : ''}
       </div>
     </div>
   `).join('')
@@ -1488,7 +1488,7 @@ async function renderAIRecommend(app) {
       <!-- 快速模板（intent 空对话才显示）-->
       <div style="margin-top:8px;display:flex;gap:6px;overflow-x:auto;padding-bottom:2px;scrollbar-width:none">
         ${AI_QUICK_TEMPLATES.map(t2 => `
-          <button onclick="aiFillTemplate('${t2.prompt.replace(/'/g, "\\'")}')"
+          <button onclick="aiFillTemplate('${t(t2.prompt).replace(/'/g, "\\'")}')"
             style="background:#fff;border:1px dashed #c7d2fe;border-radius:8px;padding:6px 10px;font-size:11px;color:#4338ca;cursor:pointer;white-space:nowrap;flex-shrink:0;font-weight:500">
             ${t2.icon} ${t(t2.label)}
           </button>`).join('')}
@@ -1959,8 +1959,8 @@ window.aiOpenProviderConfig = (pid) => {
       <div class="form-group">
         <label class="form-label">${t('协议格式')}</label>
         <select id="ai-pcfg-cformat" class="form-control" style="font-size:13px">
-          <option value="openai" ${cFormat==='openai'?'selected':''}>OpenAI 兼容 (chat/completions)</option>
-          <option value="anthropic" ${cFormat==='anthropic'?'selected':''}>Anthropic 兼容 (messages)</option>
+          <option value="openai" ${cFormat==='openai'?'selected':''}>${t('OpenAI 兼容 (chat/completions)')}</option>
+          <option value="anthropic" ${cFormat==='anthropic'?'selected':''}>${t('Anthropic 兼容 (messages)')}</option>
         </select>
         <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('多数自建 agent / 代理用 OpenAI 协议')}</div>
       </div>
@@ -1968,7 +1968,7 @@ window.aiOpenProviderConfig = (pid) => {
       <div class="form-group">
         <label class="form-label">${t('默认模型')}</label>
         <select id="ai-pcfg-model" class="form-control" style="font-size:13px">
-          ${p.models.map(m => `<option value="${m.id}" ${m.id === (localStorage.getItem('webaz_ai_model_' + p.id) || p.defaultModel) ? 'selected' : ''}>${escHtml(m.label)}</option>`).join('')}
+          ${p.models.map(m => `<option value="${m.id}" ${m.id === (localStorage.getItem('webaz_ai_model_' + p.id) || p.defaultModel) ? 'selected' : ''}>${escHtml(t(m.label))}</option>`).join('')}
         </select>
       </div>
     `}
@@ -1991,7 +1991,7 @@ window.aiSaveProviderConfig = (pid, mode) => {
 
   if (isCustom) {
     // custom: name + model + format 都来自用户填的字段
-    const cname  = document.getElementById('ai-pcfg-cname')?.value?.trim() || '我的 Agent'
+    const cname  = document.getElementById('ai-pcfg-cname')?.value?.trim() || t('我的 Agent')
     const cmodel = document.getElementById('ai-pcfg-cmodel')?.value?.trim()
     const clabel = document.getElementById('ai-pcfg-clabel')?.value?.trim()
     const cformat = document.getElementById('ai-pcfg-cformat')?.value || 'openai'

package/dist/pwa/public/app-chat-poll.js

@@ -0,0 +1,29 @@
+// 聊天详情实时轮询。renderChatDetail 只在进入/发消息时拉取消息(无实时推送),对方发来的消息原先停留会话时
+//   看不到(只有通知那条独立轮询能提示)。这里每几秒拉一次会话,就地刷新 #chat-msgs:保持"已在底部则贴底"、
+//   不碰输入框/快捷面板、查看时把新到消息标记已读。自清理:#chat-msgs 离开 DOM 或路由已不是本会话时立即停;
+//   单计时器(window._chatPollTimer),重新进入任一会话先清旧的(不堆叠)。逻辑放独立文件因 app.js 已到 LOC 上限。
+//   ⚠️ 用【最后一条消息 id】判变化,不能用消息条数——后端默认只返回最近 50 条(滑动窗口),长会话里新消息进来后
+//      条数仍是 50,用 length 比较会永远判"无变化"而不刷新/不标已读(长会话恰是最需要 live update 的场景)。
+window.startChatPoll = (id, initialMsgs) => {
+  if (window._chatPollTimer) { clearInterval(window._chatPollTimer); window._chatPollTimer = null }
+  const lastOf = (arr) => (arr && arr.length) ? String(arr[arr.length - 1].id || arr[arr.length - 1].created_at || '') : ''
+  let last = lastOf(initialMsgs)
+  const stop = () => { if (window._chatPollTimer) { clearInterval(window._chatPollTimer); window._chatPollTimer = null } }
+  window._chatPollTimer = setInterval(async () => {
+    const box = document.getElementById('chat-msgs')
+    if (!box || !location.hash.includes('chat/' + id)) return stop()             // 已离开本会话 → 自清理
+    let rr = null
+    try { rr = await GET('/conversations/' + encodeURIComponent(id)) } catch { return }
+    if (!rr || rr.error) return
+    const msgs = rr.messages || []
+    const newLast = lastOf(msgs)
+    if (newLast === last) return                                                 // 最后一条没变 → 无新消息
+    last = newLast
+    const atBottom = box.scrollHeight - box.scrollTop - box.clientHeight < 40
+    box.innerHTML = msgs.length === 0
+      ? `<div style="text-align:center;color:#9ca3af;padding:30px 0;font-size:12px">${t('开始第一句问候')}</div>`
+      : msgs.map(m => window.renderChatBubble(m, state.user.id)).join('')
+    if (atBottom) box.scrollTop = box.scrollHeight                               // 原本贴底就继续贴底,否则不打扰阅读位置
+    POST('/conversations/' + encodeURIComponent(id) + '/read').catch(() => {})   // fire-and-forget:用 .catch 而非 try/catch(POST 返回 Promise,异步 reject 包不住)
+  }, 4000)
+}

package/dist/pwa/public/app-create-kinds.js

@@ -0,0 +1,17 @@
+// Unified create entry — a small "全新商品 ⇄ 二手闲置" kind chooser shown at the top of BOTH create surfaces
+// (the seller new-goods form and the secondhand publish page), so each create flow surfaces the other kind
+// instead of being a dead-end. Mirrors UOMA's single Goods-incl.-secondhand create entry, WITHOUT merging the
+// two backends: /api/products and /api/secondhand keep their own flows, fee rates and role rules.
+//   createKindChooserHtml(current): current ∈ {'new','secondhand'}. The active pill is inert; the other pill
+//     navigates — 'new' → goCreateListingFromBuy() (the smart seller entry: handles anon / buyer→seller
+//     upgrade / role switch), 'secondhand' → #secondhand/publish (open to any logged-in user).
+window.createKindChooserHtml = (current) => {
+  const t = window.t || ((s) => s)
+  const pill = (active, label, onclick) => active
+    ? `<span style="flex:1;text-align:center;padding:7px 0;border-radius:8px;font-size:13px;font-weight:600;background:#111827;color:#fff">${label}</span>`
+    : `<button type="button" onclick="${onclick}" style="flex:1;text-align:center;padding:7px 0;border-radius:8px;font-size:13px;font-weight:500;background:#f3f4f6;color:#374151;border:1px solid #e5e7eb;cursor:pointer">${label}</button>`
+  return `<div style="display:flex;gap:8px;margin-bottom:16px">`
+    + pill(current === 'new', '🆕 ' + t('全新商品'), 'goCreateListingFromBuy()')
+    + pill(current === 'secondhand', '♻️ ' + t('二手闲置'), "location.hash='#secondhand/publish'")
+    + `</div>`
+}

package/dist/pwa/public/app-direct-pay-accounts.js

@@ -0,0 +1,141 @@
+// Direct Pay (Rail 1) — 卖家多收款账号 + 收款二维码 管理 UI (Phase C2)。UI ONLY。
+//   接 Phase C1 后端 /api/direct-receive/accounts(list / add / update / deactivate + /:id/qr upload·preview)。
+//   写操作(add/update/deactivate/qr)均需现场真人 Passkey(purpose direct_receive_account_manage,
+//   action[+account_id] 绑 purpose_data);QR 预览走 Authorization header fetch→blob(<img src> 带不了 header)。
+//   WebAZ 只存储/展示卖家自填内容与二维码字节,绝不验证/路由/托管资金,也不解析二维码。双语 parity 由 test-direct-pay-ui.ts 守。
+
+// 账号相关 error_code → 双语文案;未命中回落到 dpErrorText(直付通用码)。
+window.draAccountErrorText = (code, fallback) => {
+  const M = {
+    SELLER_ONLY: t('仅卖家可管理收款账号'),
+    ACCOUNT_NOT_FOUND: t('账号不存在'),
+    ACCOUNT_INPUT_INVALID: t('账号信息不合法'),
+    QR_INVALID: t('二维码图片不合法(仅支持 PNG/WebP,解码后 ≤ 64KB)'),
+    HUMAN_PRESENCE_REQUIRED: t('需现场真人 Passkey 确认'),
+    PASSKEY_REQUIRED: t('需先注册 Passkey'),
+  }
+  return M[code] || (window.dpErrorText ? window.dpErrorText(code, fallback) : (fallback || t('操作失败,请重试')))
+}
+
+// ── 卖家设置:多收款账号面板(section + hydrate)──────────────────────────────────────────────
+window.draAccountsSection = () => `
+  <div class="card" style="margin-bottom:12px">
+    <div style="font-size:14px;font-weight:700;margin-bottom:6px">🧾 ${t('直付收款账号')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('你可维护多个收款账号(各自币种、可选二维码),买家直付时自选其一。WebAZ 只存储与展示,不验证付款方式或币种,不路由/托管资金,也不解析二维码。')}</div>
+    <div id="dra-accounts-box">${loading$()}</div>
+  </div>`
+
+window.draHydrateAccounts = async () => {
+  const box = document.getElementById('dra-accounts-box')
+  if (!box) return
+  const r = await GET('/direct-receive/accounts')
+  if (r.error) { box.innerHTML = alert$('error', window.draAccountErrorText(r.error_code, r.error)); return }
+  const accounts = r.accounts || []
+  box.innerHTML = `
+    <div id="dra-msg"></div>
+    ${accounts.length ? accounts.map(a => window.draAccountCard(a)).join('') : `<div style="font-size:12px;color:#9ca3af;margin-bottom:10px">${t('尚未添加收款账号')}</div>`}
+    <details style="margin-top:8px"><summary style="font-size:13px;font-weight:600;color:#2563eb;cursor:pointer">＋ ${t('新增收款账号')}</summary>
+      <div style="padding:8px 2px 2px">${window.draAccountForm('new')}</div></details>`
+  window.draLoadQrThumbs(accounts)
+}
+
+window.draAccountCard = (a) => {
+  const inactive = a.status !== 'active'
+  return `<div style="border:1px solid ${inactive ? '#e5e7eb' : '#d1fae5'};background:${inactive ? '#f9fafb' : '#f0fdf4'};border-radius:10px;padding:10px 12px;margin-bottom:8px;opacity:${inactive ? '0.6' : '1'}">
+    <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:8px">
+      <div style="min-width:0">
+        <div style="font-size:13px;font-weight:700;color:#111827">${a.label ? escHtml(a.label) : (a.method ? escHtml(a.method) : t('收款账号'))}${inactive ? ` · <span style="color:#9ca3af;font-weight:400">${t('已停用')}</span>` : ''}</div>
+        <div style="font-size:11px;color:#6b7280;margin:2px 0 4px">${a.method ? escHtml(a.method) : ''}${a.method && a.currency ? ' · ' : ''}${a.currency ? escHtml(a.currency) : ''}</div>
+        <div style="font-size:12px;color:#374151;white-space:pre-wrap;word-break:break-word">${escHtml(a.instruction)}</div>
+      </div>
+      <div id="dra-qr-${a.id}" style="flex:0 0 auto;width:72px;height:72px;display:flex;align-items:center;justify-content:center;border:1px dashed #d1d5db;border-radius:8px;font-size:10px;color:#9ca3af;text-align:center">${a.qr_image_ref ? loading$() : t('无二维码')}</div>
+    </div>
+    ${inactive ? '' : `<div style="display:flex;gap:8px;flex-wrap:wrap;margin-top:8px;align-items:center">
+      <details style="flex:0 0 auto"><summary style="font-size:12px;color:#2563eb;cursor:pointer">${t('编辑')}</summary><div style="padding:8px 2px 2px">${window.draAccountForm(a.id, a)}</div></details>
+      <label class="btn btn-outline btn-sm" style="cursor:pointer;margin:0">${a.qr_image_ref ? t('更换二维码') : t('上传二维码')}<input type="file" accept="image/png,image/webp" style="display:none" onchange="draUploadQr('${a.id}', this)"></label>
+      <button class="btn btn-outline btn-sm" style="color:#dc2626;border-color:#dc2626" onclick="draDeactivateAccount('${a.id}')">${t('停用')}</button>
+    </div>`}
+  </div>`
+}
+
+// 文本字段表单(id='new' 为新增;否则为该账号编辑)。QR 不在此处改 —— 由文件上传单独走 /:id/qr。
+window.draAccountForm = (id, a) => {
+  const p = id === 'new' ? 'new' : id
+  return `
+    <div class="form-group"><label class="form-label">${t('收款说明')} <span style="font-size:11px;color:#9ca3af">${t('(展示给买家,如 PayNow / 银行转账 等)')}</span></label>
+      <textarea class="form-control" id="dra-instr-${p}" rows="3" maxlength="500" placeholder="${t('例:PayNow +65 9xxx(场外结算)')}">${a ? escHtml(a.instruction) : ''}</textarea></div>
+    <div style="display:flex;gap:8px">
+      <div class="form-group" style="flex:1"><label class="form-label">${t('收款方式')}</label><input class="form-control" id="dra-method-${p}" maxlength="40" value="${a && a.method ? escHtml(a.method) : ''}" placeholder="${t('如 PayNow')}"></div>
+      <div class="form-group" style="flex:1"><label class="form-label">${t('币种')}</label><input class="form-control" id="dra-currency-${p}" maxlength="8" value="${a && a.currency ? escHtml(a.currency) : ''}" placeholder="${t('如 SGD / USDC')}"></div>
+    </div>
+    <div class="form-group"><label class="form-label">${t('标签(可选)')}</label><input class="form-control" id="dra-label-${p}" maxlength="40" value="${a && a.label ? escHtml(a.label) : ''}" placeholder="${t('如 PayNow')}"></div>
+    <button class="btn btn-primary btn-sm" onclick="${id === 'new' ? 'draAddAccount()' : `draUpdateAccount('${id}')`}">${t('保存')}</button>`
+}
+
+window.draReadForm = (p) => ({
+  instruction: document.getElementById(`dra-instr-${p}`)?.value?.trim() || '',
+  method: document.getElementById(`dra-method-${p}`)?.value?.trim() || '',
+  currency: document.getElementById(`dra-currency-${p}`)?.value?.trim() || '',
+  label: document.getElementById(`dra-label-${p}`)?.value?.trim() || '',
+})
+
+// 现场真人 Passkey token;失败(无 Passkey / 取消 / 不支持)→ 提示注册入口并返回 null。
+window.draGate = async (action, accountId) => {
+  try { return await requestPasskeyGate('direct_receive_account_manage', accountId ? { action, account_id: accountId } : { action }) }
+  catch (e) { if (window.dpPromptRegisterPasskey) await window.dpPromptRegisterPasskey(e && e.message); return null }
+}
+
+window.draAddAccount = async () => {
+  const f = window.draReadForm('new')
+  if (!f.instruction) { if (typeof toast$ === 'function') toast$(t('收款说明不能为空'), 'error'); return }
+  const token = await window.draGate('add'); if (!token) return
+  const r = await POST('/direct-receive/accounts', { ...f, webauthn_token: token })
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.draAccountErrorText(r.error_code, r.error), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已保存'), 'success'); window.draHydrateAccounts()
+}
+
+window.draUpdateAccount = async (id) => {
+  const f = window.draReadForm(id)
+  if (!f.instruction) { if (typeof toast$ === 'function') toast$(t('收款说明不能为空'), 'error'); return }
+  const token = await window.draGate('update', id); if (!token) return
+  const r = await PUT('/direct-receive/accounts/' + id, { ...f, webauthn_token: token })
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.draAccountErrorText(r.error_code, r.error), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已保存'), 'success'); window.draHydrateAccounts()
+}
+
+window.draDeactivateAccount = async (id) => {
+  const go = await confirmModal(t('停用后买家将无法选择该收款账号,确定停用?'), t('停用'), { danger: true })
+  if (!go) return
+  const token = await window.draGate('deactivate', id); if (!token) return
+  const r = await api('DELETE', '/direct-receive/accounts/' + id, { webauthn_token: token })
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.draAccountErrorText(r.error_code, r.error), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已停用'), 'success'); window.draHydrateAccounts()
+}
+
+// 上传/更换二维码:客户端先卡类型(png|webp)+大小(≤64KB)→ 读为 data URI → Passkey → PUT。后端仍严格复核。
+window.draUploadQr = async (id, input) => {
+  const file = input && input.files && input.files[0]; if (input) input.value = ''
+  if (!file) return
+  if (file.type !== 'image/png' && file.type !== 'image/webp') { if (typeof toast$ === 'function') toast$(t('二维码仅支持 PNG 或 WebP 图片'), 'error'); return }
+  if (file.size > 64 * 1024) { if (typeof toast$ === 'function') toast$(t('二维码图片过大(需 ≤ 64KB)'), 'error'); return }
+  let dataUri
+  try { dataUri = await new Promise((res, rej) => { const fr = new FileReader(); fr.onload = () => res(fr.result); fr.onerror = rej; fr.readAsDataURL(file) }) }
+  catch { if (typeof toast$ === 'function') toast$(t('二维码读取失败'), 'error'); return }
+  const token = await window.draGate('qr', id); if (!token) return
+  const r = await PUT('/direct-receive/accounts/' + id + '/qr', { qr_data_uri: dataUri, webauthn_token: token })
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.draAccountErrorText(r.error_code, r.error), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('二维码已上传'), 'success'); window.draHydrateAccounts()
+}
+
+// 二维码缩略图:owner-only 端点需 Authorization header,<img src> 带不了 → fetch→blob→objectURL。
+window.draLoadQrThumbs = (accounts) => {
+  (accounts || []).filter(a => a.qr_image_ref).forEach(a => setTimeout(async () => {
+    const el = document.getElementById('dra-qr-' + a.id); if (!el) return
+    try {
+      const resp = await fetch('/api/direct-receive/accounts/' + a.id + '/qr', { headers: { Authorization: 'Bearer ' + state.apiKey } })
+      if (!resp.ok) { el.textContent = '❌'; return }
+      const url = URL.createObjectURL(await resp.blob())
+      el.innerHTML = `<img src="${url}" alt="${t('收款二维码')}" style="width:72px;height:72px;object-fit:contain;border-radius:6px">`
+    } catch { el.textContent = '❌' }
+  }, 0))
+}

package/dist/pwa/public/app-direct-pay-buyer.js

@@ -0,0 +1,72 @@
+// Direct Pay (Rail 1) — 买家侧收款账号选择 + 分账号 FX + ack 门后收款码展示 (Phase D3)。UI ONLY。
+//   接 D1(GET /api/direct-receive/selectable-accounts 只读元数据)+ D2(建单带 direct_receive_account_id、
+//   GET /api/orders/:id/direct-pay-qr ack 门后取图)。选账号在【下单前】(与建单契约一致);收款目标(instruction 原文 +
+//   QR 图)仍只在 D1/D2 both-acked 后经订单快照 / QR 端点展示。WebAZ 不验证/路由/托管,FX 纯展示。双语 parity 由 test-direct-pay-ui.ts 守。
+
+// USDC 金额 → 任意币种展示串(用于"卖家按 <币种> 收款 ≈ X");无 rate/币种不支持 → 仅币种码。
+window.dpFxInCurrency = (usdc, currency) => {
+  const cur = String(currency || '').toUpperCase()
+  const r = window._fxRates
+  const n = Number(usdc)
+  const sym = { CNY: '¥', EUR: '€', INR: '₹', SGD: 'S$', USD: '$', IDR: 'Rp', MYR: 'RM', PHP: '₱', VND: '₫', THB: '฿' }
+  if (!cur) return ''
+  if (cur === 'USDC' || cur === 'USD') return Number.isFinite(n) ? `${sym.USD}${n >= 100 ? Math.round(n) : n.toFixed(2)}` : ''
+  const rate = r && r.rates ? Number(r.rates[cur]) : NaN
+  if (!(rate > 0) || !Number.isFinite(n)) return cur   // 币种不在 FX 表:只显示币种码,不臆造换算
+  const local = n * rate
+  return `${sym[cur] || (cur + ' ')}${local >= 100 ? Math.round(local) : local.toFixed(2)}`
+}
+
+// 选直付且可用时加载卖家可选收款账号(元数据 only)。0 个 → 清空(legacy 单条说明,无需选);≥1 → 单选列表(默认首个)。
+window.dpLoadBuyerAccounts = async (productId) => {
+  const box = document.getElementById('dp-account-picker')
+  if (!box) return
+  let r
+  try { r = await GET('/direct-receive/selectable-accounts?product_id=' + encodeURIComponent(productId || '')) } catch { r = null }
+  const opts = (r && r.options) || []
+  if (!opts.length) { box.innerHTML = ''; return }   // legacy-only 卖家:无多账号,走单条说明,不显示选择器
+  box.innerHTML = `
+    <div style="font-size:12px;font-weight:600;color:#374151;margin:8px 0 4px">${t('选择卖家收款方式')}</div>
+    ${opts.map((o, i) => {
+      const title = o.label ? escHtml(o.label) : (o.method ? escHtml(o.method) : t('收款账号'))
+      const sub = [o.method ? escHtml(o.method) : '', o.currency ? escHtml(o.currency) : ''].filter(Boolean).join(' · ')
+      return `<label style="display:flex;gap:8px;align-items:flex-start;font-size:13px;padding:6px 2px;cursor:pointer">
+        <input type="radio" name="dp-account" value="${escHtml(o.account_id)}" ${i === 0 ? 'checked' : ''}>
+        <span><b>${title}</b>${sub ? ` <span style="color:#6b7280;font-size:11px">${sub}</span>` : ''}<span data-dp-fx-cur="${o.currency ? escHtml(o.currency) : ''}" style="display:block;color:#6b7280;font-size:11px"></span></span>
+      </label>`
+    }).join('')}
+    <div style="font-size:11px;color:#9ca3af;margin-top:2px">${t('收款明细与二维码将在完成风险确认后显示')}</div>`
+  window.dpRenderAccountFx()   // 按【当前订单总额 = 单价 × 数量】渲染分账号 FX(数量后续变化由 qtyStep/qtyClamp 再刷新)
+}
+
+// 当前直付订单总额(USDC)= 单价(data-amt)×【当前数量】(#inp-qty);直付买家场外付这个数,绝不能只按单价显示。
+window.dpAccountTotalUsdc = () => {
+  const unit = Number(document.getElementById('dp-rail-block')?.getAttribute('data-amt') || '')
+  const q = document.getElementById('inp-qty')
+  const qty = q ? Math.max(1, Math.floor(Number(q.value) || 1)) : 1
+  return Number.isFinite(unit) ? unit * qty : NaN
+}
+// 用【当前订单总额】渲染/刷新分账号 FX 金额(数量改变后由 qtyStep/qtyClamp 调用)。无该币种汇率 → dpFxInCurrency 回落币种码。
+window.dpRenderAccountFx = () => {
+  const total = window.dpAccountTotalUsdc()
+  document.querySelectorAll('#dp-account-picker [data-dp-fx-cur]').forEach((el) => {
+    const cur = el.getAttribute('data-dp-fx-cur')
+    const fx = (cur && Number.isFinite(total)) ? window.dpFxInCurrency(total, cur) : ''
+    el.innerHTML = fx ? `${t('卖家按此收款')} ≈ ${fx}` : ''
+  })
+}
+
+// 当前选中的收款账号 id(供建单带上);无选择器(legacy)/未选 → '' → 建单省略该字段,后端回落单条说明。
+window.dpSelectedAccountId = () => document.querySelector('input[name="dp-account"]:checked')?.value || ''
+
+// ack 门后:取订单收款二维码(owner+both-acked 才 200;Authorization header 走 fetch→blob,<img src> 带不了头)。
+window.dpLoadOrderQr = async (orderId) => {
+  const box = document.getElementById('dp-order-qr')
+  if (!box) return
+  try {
+    const resp = await fetch('/api/orders/' + encodeURIComponent(orderId) + '/direct-pay-qr', { headers: { Authorization: 'Bearer ' + (window.state && window.state.apiKey) } })
+    if (!resp.ok) { box.innerHTML = ''; return }   // 无 QR / 未 ack:静默不显(instruction 文本已单独展示)
+    const url = URL.createObjectURL(await resp.blob())
+    box.innerHTML = `<div style="font-size:11px;color:#9ca3af;margin:6px 0 2px">${t('收款二维码')}</div><img src="${url}" alt="${t('收款二维码')}" style="width:150px;height:150px;object-fit:contain;border:1px solid #e5e7eb;border-radius:8px">`
+  } catch { box.innerHTML = '' }
+}

package/dist/pwa/public/app-direct-pay-compliance.js

@@ -0,0 +1,67 @@
+// Direct Pay (Rail 1) — ADMIN 商户合规录入 (PR-⑧)。UI ONLY。
+//   录入【每个卖家】的 KYB 复核结论 + 制裁筛查结论(直付入场硬门:必须 KYB approved + sanctions clear)。
+//   后端已有受门控端点(admin-direct-receive-deposits):POST /api/admin/direct-receive/kyb-reviews · /sanctions-screenings,
+//   均 ROOT + 真人 Passkey(purpose direct_pay_kyb_ingress / direct_pay_sanctions_ingress;purpose_data 绑
+//   user_id+status+provider_ref+expires_at,签 A 写 B 拒)。本屏只接线,不碰资金/状态机。
+//   ⚠️ 仅【记录你已实际完成的尽调结论】——不代替真实 KYB/制裁筛查。
+
+window.renderAdminDirectReceiveCompliance = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  const sel = (id, opts) => `<select id="${id}" style="width:100%;padding:7px;border:1px solid #d1d5db;border-radius:6px;font-size:13px">${opts.map(o => `<option value="${o[0]}">${o[1]}</option>`).join('')}</select>`
+  const inp = (id, ph) => `<input id="${id}" placeholder="${ph}" style="width:100%;padding:7px;border:1px solid #d1d5db;border-radius:6px;font-size:13px">`
+  app.innerHTML = shell(`
+    <h1 class="page-title">🧾 ${t('商户合规录入')}</h1>
+    <div style="margin-bottom:12px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('返回概览')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:6px">${t('录入卖家的 KYB / 制裁筛查结论(直付入场硬门)。仅记录你【已实际完成】的尽调结论,不代替真实筛查;均需真人 Passkey。')}</div>
+    <div style="font-size:12px;color:#b45309;line-height:1.6;margin-bottom:10px">${t('⚠️ 外部审核编号只填外部审核系统的 case id;切勿填写身份证/护照/住址/证件文件链接 —— 该字段会【明文入库】。')}</div>
+    <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">${t('卖家用户 ID')}</div>
+      ${inp('cmp-user', t('卖家用户 ID(seller user id)'))}
+    </div>
+    <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🪪 ${t('KYB 复核结论')}</div>
+      <div style="display:flex;flex-direction:column;gap:6px">
+        ${sel('cmp-kyb-status', [['approved', t('通过 approved')], ['pending', t('待定 pending')], ['rejected', t('拒绝 rejected')], ['revoked', t('撤销 revoked')]])}
+        ${inp('cmp-kyb-ref', t('外部审核编号 / vendor case id(选填)'))}
+        ${inp('cmp-kyb-exp', t('有效期 expires_at(选填,如 2027-01-01)'))}
+        <button class="btn btn-primary btn-sm" style="align-self:flex-start;font-size:12px" onclick="window.doIngestKyb()">${t('记录 KYB(真人 Passkey)')}</button>
+      </div>
+    </div>
+    <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+      <div style="font-size:13px;font-weight:700;margin-bottom:8px">🛡️ ${t('制裁筛查结论')}</div>
+      <div style="display:flex;flex-direction:column;gap:6px">
+        ${sel('cmp-sanc-status', [['clear', t('通过 clear')], ['flagged', t('命中 flagged')], ['blocked', t('阻断 blocked')]])}
+        ${inp('cmp-sanc-ref', t('外部审核编号 / vendor case id(选填)'))}
+        ${inp('cmp-sanc-exp', t('有效期 expires_at(选填)'))}
+        <button class="btn btn-primary btn-sm" style="align-self:flex-start;font-size:12px" onclick="window.doIngestSanctions()">${t('记录制裁筛查(真人 Passkey)')}</button>
+      </div>
+    </div>
+    <div style="font-size:12px;color:#6b7280">${t('录入后用就绪报告核对:')} <code>npm run direct-pay:readiness</code></div>
+  `, 'admin')
+}
+
+// 通用:取卖家 id + 组装 body(provider_ref/expires_at 仅在非空时带);purpose_data 必须与请求体逐字一致。
+function _dpComplianceBody(statusId, refId, expId) {
+  const get = (id) => { const e = document.getElementById(id); return e ? e.value.trim() : '' }
+  const user_id = get('cmp-user')
+  if (!user_id) return null
+  const body = { user_id, status: get(statusId) }
+  const ref = get(refId), exp = get(expId)
+  if (ref) body.provider_ref = ref
+  if (exp) body.expires_at = exp
+  return body
+}
+
+async function _dpComplianceIngest(purpose, path, statusId, refId, expId, okMsg) {
+  const body = _dpComplianceBody(statusId, refId, expId)
+  if (!body) { if (typeof toast$ === 'function') toast$(t('请填写卖家用户 ID'), 'error'); return }
+  const token = await requestPasskeyGate(purpose, body)   // purpose_data = body(逐字绑定)
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(path, { ...body, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(okMsg)
+}
+
+window.doIngestKyb = () => _dpComplianceIngest('direct_pay_kyb_ingress', '/admin/direct-receive/kyb-reviews', 'cmp-kyb-status', 'cmp-kyb-ref', 'cmp-kyb-exp', t('KYB 结论已记录'))
+window.doIngestSanctions = () => _dpComplianceIngest('direct_pay_sanctions_ingress', '/admin/direct-receive/sanctions-screenings', 'cmp-sanc-status', 'cmp-sanc-ref', 'cmp-sanc-exp', t('制裁筛查结论已记录'))