@seasonkoh/webaz 0.1.28 → 0.1.29

package/dist/pwa/public/app-direct-pay-deferral-admin.js

@@ -0,0 +1,72 @@
+// Direct Pay (Rail 1) — ADMIN 缓交(deferred base-bond)审批队列 (PR-②c)。UI ONLY。
+//   ROOT admin 审批商户的缓交申请:列出 pending,批准(设压低额度系数 + 宽限天数)或拒绝。
+//   铁律:批准/拒绝是 RISK 动作 → 必须真人 Passkey(requestPasskeyGate),purpose_data 绑定【完整条款】
+//   (deferral_id + reduced_quota_factor + grace_days),与请求体逐字一致;agent 无 Passkey 凭证会被后端硬拒。
+//   纯前端:只调既有受门控端点 GET/POST /api/admin/direct-receive/deferrals[/:id/approve|reject];
+//   不碰 wallet/escrow/settlement/refund;授予绝不自动(approveDeferral 是唯一 writer,后端 ROOT+Passkey 强制)。
+
+window.renderAdminDirectPayDeferrals = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const data = await GET('/admin/direct-receive/deferrals?status=pending')
+  if (!data || data.error) { app.innerHTML = shell(alert$('error', (data && data.error) || t('加载失败')), 'admin'); return }
+  const rows = (data.deferrals || [])
+  const list = rows.length ? rows.map(d => `
+    <div class="card" style="margin-bottom:10px">
+      <div style="font-size:11px;color:#9ca3af">${escHtml(d.user_id)} · ${fmtTime(d.created_at)}</div>
+      <div style="font-size:13px;margin-top:6px">${t('缓交期(天)')}: <strong>${d.period_days}</strong></div>
+      ${d.reason ? `<div style="font-size:12px;color:#6b7280;margin-top:6px;padding:6px;background:#f9fafb;border-radius:4px">${escHtml(d.reason)}</div>` : ''}
+      <div style="display:flex;gap:6px;margin-top:10px">
+        <button class="btn btn-primary btn-sm" style="font-size:12px" onclick="toggleInline('dfr-approve-${d.id}')">✓ ${t('批准')}</button>
+        <button class="btn btn-outline btn-sm" style="font-size:12px;color:#dc2626;border-color:#dc2626" onclick="toggleInline('dfr-reject-${d.id}')">✗ ${t('拒绝')}</button>
+      </div>
+      <div id="dfr-approve-${d.id}" style="display:none;margin-top:10px;padding:10px;background:#f0fdf4;border:1px solid #86efac;border-radius:6px">
+        <div style="font-size:12px;font-weight:600;color:#166534;margin-bottom:6px">✓ ${t('批准缓交(需真人 Passkey)')}</div>
+        <div style="font-size:11px;color:#6b7280;margin-bottom:6px">${t('缓交期额度系数(0–1,留空用默认;缓交期内必压低,有下限)')}</div>
+        <input id="dfr-approve-factor-${d.id}" type="number" min="0" max="1" step="0.05" placeholder="${t('额度系数(如 0.5)')}" style="width:100%;padding:6px;border:1px solid #d1d5db;border-radius:4px;font-size:12px;margin-bottom:6px">
+        <input id="dfr-approve-grace-${d.id}" type="number" min="0" placeholder="${t('宽限天数(留空用默认)')}" style="width:100%;padding:6px;border:1px solid #d1d5db;border-radius:4px;font-size:12px;margin-bottom:6px">
+        <div style="display:flex;gap:6px">
+          <button class="btn btn-outline btn-sm" style="font-size:11px" onclick="toggleInline('dfr-approve-${d.id}')">${t('取消')}</button>
+          <button class="btn btn-primary btn-sm" style="font-size:11px" onclick="doApproveDeferralInline('${d.id}')">${t('真人确认批准')}</button>
+        </div>
+      </div>
+      <div id="dfr-reject-${d.id}" style="display:none;margin-top:10px;padding:10px;background:#fef2f2;border:1px solid #fca5a5;border-radius:6px">
+        <div style="font-size:12px;font-weight:600;color:#991b1b;margin-bottom:6px">✗ ${t('拒绝缓交(需真人 Passkey)')}</div>
+        <div style="display:flex;gap:6px">
+          <button class="btn btn-outline btn-sm" style="font-size:11px" onclick="toggleInline('dfr-reject-${d.id}')">${t('取消')}</button>
+          <button class="btn btn-sm" style="font-size:11px;background:#dc2626;border-color:#dc2626;color:#fff" onclick="doRejectDeferralInline('${d.id}')">${t('真人确认拒绝')}</button>
+        </div>
+      </div>
+    </div>`).join('') : `<div class="empty"><div class="empty-icon">📥</div><div class="empty-text">${t('暂无待审缓交申请')}</div></div>`
+  app.innerHTML = shell(`
+    <h1 class="page-title">🪙 ${t('履约保证金缓交审批')}</h1>
+    <div style="margin-bottom:12px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('返回概览')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('批准后该卖家可先入场直付、保证金延后交;直付仍需满足全部合规条件,且缓交期内额度被压低。批准/拒绝均需真人 Passkey。')}</div>
+    ${list}
+  `, 'admin')
+}
+
+// 批准:purpose_data 必须与请求体逐字一致(后端绑定 deferral_id + reduced_quota_factor + grace_days)。
+window.doApproveDeferralInline = async function (id) {
+  const fEl = document.getElementById('dfr-approve-factor-' + id), gEl = document.getElementById('dfr-approve-grace-' + id)
+  const body = { deferral_id: id }
+  if (fEl && fEl.value !== '') body.reduced_quota_factor = Number(fEl.value)
+  if (gEl && gEl.value !== '') body.grace_days = Number(gEl.value)
+  const token = await requestPasskeyGate('direct_pay_deferral_approve', body)
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(`/admin/direct-receive/deferrals/${id}/approve`, { ...body, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('缓交已批准'))
+  window.renderAdminDirectPayDeferrals(document.getElementById('app'))
+}
+
+// 拒绝:purpose_data 绑 deferral_id。
+window.doRejectDeferralInline = async function (id) {
+  const token = await requestPasskeyGate('direct_pay_deferral_reject', { deferral_id: id })
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(`/admin/direct-receive/deferrals/${id}/reject`, { deferral_id: id, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('缓交申请已拒绝'))
+  window.renderAdminDirectPayDeferrals(document.getElementById('app'))
+}

package/dist/pwa/public/app-direct-pay-deferral.js

@@ -0,0 +1,61 @@
+// Direct Pay (Rail 1) — SELLER 缓交(deferred base-bond)apply + status panel (PR-②b)。UI ONLY。
+//   缓交 = 先入场、履约保证金延后交,由管理员【人工审批】(绝不自动批)。本面板让卖家:① 申请缓交;② 查看自己申请状态。
+//   数据/动作:GET + POST /api/direct-receive/deferral(后端脱敏:不含 admin 身份)。申请只创建 pending,【不授予任何资格】;
+//   真正放行 = 管理员 ROOT + 真人 Passkey 审批。即便批准,直付仍需满足全部合规门(实名/制裁/AML/Passkey/收款说明)。
+//   不碰 wallet/escrow/settlement/refund/钱路;不开真实 rail;不声称已上线。买家侧不展示本面板。
+
+window.dpDeferralCopy = () => ({
+  pending:  { icon: '⏳', text: t('缓交申请审核中,等待管理员人工审批') },
+  granted:  { icon: '✅', text: t('缓交已批准') },
+  rejected: { icon: '🚫', text: t('缓交申请未通过') },
+  expired:  { icon: '⌛', text: t('缓交已到期') },
+})
+
+window.dpSellerDeferralSection = () => `
+  <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:14px;font-weight:700;margin-bottom:4px">🪙 ${t('履约保证金缓交(仅你可见)')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('缓交 = 先入场、履约保证金延后交,由管理员人工审批。批准后直付仍需满足全部合规条件(身份与商户合规审核、Passkey、收款说明);缓交期内额度会被压低。')}</div>
+    <div id="dp-seller-deferral">${loading$()}</div>
+  </div>`
+
+// 申请表单(无活跃申请时显示)。period 选填(留空走后端默认 30);reason 选填。
+window.dpDeferralApplyForm = () => `
+  <div style="display:flex;flex-direction:column;gap:8px">
+    <textarea id="dp-dfr-reason" maxlength="500" placeholder="${t('申请原因(选填)')}" style="width:100%;min-height:56px;padding:8px;border:1px solid #d1d5db;border-radius:6px;font-size:13px"></textarea>
+    <input id="dp-dfr-days" type="number" min="1" placeholder="${t('缓交天数(选填,默认 30)')}" style="width:100%;padding:8px;border:1px solid #d1d5db;border-radius:6px;font-size:13px">
+    <button onclick="window.dpSubmitDeferral()" style="align-self:flex-start;padding:8px 16px;background:#2563eb;color:#fff;border:none;border-radius:6px;font-size:13px;font-weight:600;cursor:pointer">${t('提交缓交申请')}</button>
+  </div>`
+
+window.dpHydrateSellerDeferral = async () => {
+  const box = document.getElementById('dp-seller-deferral')
+  if (!box) return
+  const r = await GET('/direct-receive/deferral')
+  if (!r || r.error) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试')}</div>`; return }
+  const d = r.deferral, active = r.active
+  // 无申请,或上一条已拒绝/过期(且当前无生效缓交)→ 可(重新)申请。
+  if (!d || (!active && (d.status === 'rejected' || d.status === 'expired'))) {
+    const prior = d ? `<div style="font-size:12px;color:#6b7280;margin-bottom:8px">${window.dpDeferralCopy()[d.status].icon} ${escHtml(window.dpDeferralCopy()[d.status].text)} · ${t('可重新申请')}</div>` : ''
+    box.innerHTML = prior + window.dpDeferralApplyForm()
+    return
+  }
+  const meta = window.dpDeferralCopy()[d.status] || { icon: 'ℹ️', text: d.status }
+  const lines = [`<div style="font-size:13px;font-weight:600;color:#374151">${meta.icon} ${escHtml(meta.text)}</div>`]
+  if (active) {
+    lines.push(`<div style="font-size:12px;color:#6b7280;line-height:1.7">${t('缓交期额度系数')}: <b>${active.reduced_quota_factor}</b></div>`)
+    if (active.expires_at) lines.push(`<div style="font-size:12px;color:#6b7280">${t('保证金到期日')}: ${escHtml(active.expires_at)}</div>`)
+    if (active.grace_until) lines.push(`<div style="font-size:12px;color:#6b7280">${t('宽限至')}: ${escHtml(active.grace_until)}</div>`)
+    if (active.in_grace) lines.push(`<div style="font-size:12px;color:#dc2626;font-weight:600">⚠️ ${t('已进入宽限期,请尽快补交履约保证金,否则直付资格将被暂停')}</div>`)
+  }
+  box.innerHTML = `<div style="display:flex;flex-direction:column;gap:4px">${lines.join('')}</div>`
+}
+
+window.dpSubmitDeferral = async () => {
+  const reasonEl = document.getElementById('dp-dfr-reason'), daysEl = document.getElementById('dp-dfr-days')
+  const body = {}
+  if (reasonEl && reasonEl.value.trim()) body.reason = reasonEl.value.trim()
+  if (daysEl && daysEl.value) body.period_days = Number(daysEl.value)
+  const r = await POST('/direct-receive/deferral', body)
+  if (!r || r.error) { alert(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试')); return }
+  toast$(t('缓交申请已提交,等待管理员审批'))
+  window.dpHydrateSellerDeferral()
+}

package/dist/pwa/public/app-direct-pay-fee-center.js

@@ -0,0 +1,33 @@
+// Direct Pay (Rail 1) — SELLER 平台服务费账户 section(PR-C)。UI ONLY。
+//   卖家自查【本人】平台服务费预充值余额 / 已计提 / 退款 / 在途预估 / 首单宽限。
+//   数据来自 GET /api/direct-receive/my-fee-account(requireSeller,仅本人;买家侧不展示)。
+//   预充值 = 商家平台服务费预付款(非买家货款 / 非 escrow / 非保证金);充值由平台核实收款后由 admin 登记,卖家不自助。
+//   纯读;不碰 wallet/escrow/settlement/refund/钱路。section 形态,嵌入卖家「设置」子页(与 readiness/缓交/验证/收款说明并列)。
+
+function _dpFeeFmt2(u) { return (Number(u || 0) / 1e6).toFixed(6).replace(/\.?0+$/, '') + ' USDC' }
+
+window.dpSellerFeeSection = () => `
+  <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:14px;font-weight:700;margin-bottom:4px">💰 ${t('平台服务费账户(仅你可见)')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('直付平台服务费的预充值余额与已计提明细;预充值由平台核实收款后登记,如需充值请联系平台。')}</div>
+    <div id="dp-seller-fee">${typeof loading$ === 'function' ? loading$() : ''}</div>
+  </div>`
+
+window.dpHydrateSellerFee = async () => {
+  const box = document.getElementById('dp-seller-fee')
+  if (!box) return
+  const r = await GET('/direct-receive/my-fee-account')
+  if (!r || r.error || !r.account) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试')}</div>`; return }
+  const a = r.account
+  const owed = Number(a.availableUnits) < 0
+  const row = (k, v) => `<div style="display:flex;justify-content:space-between;font-size:13px;padding:3px 0"><span style="color:#6b7280">${k}</span><span style="font-weight:600">${v}</span></div>`
+  box.innerHTML = `
+    <div style="font-size:15px;font-weight:700;margin-bottom:6px">${owed ? t('待补平台服务费') : t('可用预充值余额')}: <span style="color:${owed ? '#dc2626' : '#059669'}">${_dpFeeFmt2(Math.abs(Number(a.availableUnits)))}</span></div>
+    ${owed ? `<div style="font-size:12px;color:#b45309;line-height:1.6;margin-bottom:6px">${t('余额不足时新直付订单会被暂停,请联系平台补充平台服务费预充值。')}</div>` : ''}
+    ${row(t('累计预充值'), _dpFeeFmt2(a.topupUnits))}
+    ${row(t('已计提平台费'), _dpFeeFmt2(a.accruedUnits))}
+    ${Number(a.adjustmentUnits) !== 0 ? row(t('账务更正合计'), _dpFeeFmt2(a.adjustmentUnits)) : ''}
+    ${row(t('已退款合计'), _dpFeeFmt2(a.refundUnits))}
+    ${row(t('在途单预估费'), _dpFeeFmt2(a.openEstFeeUnits))}
+    ${a.graceEligible ? `<div style="font-size:12px;color:#059669;margin-top:6px">${t('首单宽限可用:你的第一笔直付无需预充值。')}</div>` : ''}`
+}

package/dist/pwa/public/app-direct-pay-fee-ops.js

@@ -0,0 +1,112 @@
+// Direct Pay (Rail 1) — ADMIN 商户运营 hub + 平台服务费(预充值)账户。UI ONLY(PR-B)。
+//   hub 把散落的直付 admin 功能归类(资格合规 / 平台服务费 / 上线控制),只链接既有路由。
+//   fee 账户调既有 ROOT + 真人 Passkey 端点(admin-direct-receive-deposits):
+//     GET  /admin/direct-receive/fee-account/:seller_id        (ROOT 只读)
+//     POST /admin/direct-receive/fee-prepay  (purpose direct_pay_fee_prepay_record)
+//     POST /admin/direct-receive/fee-adjust  (purpose direct_pay_fee_adjust)
+//     POST /admin/direct-receive/fee-refund  (purpose direct_pay_fee_refund)
+//   钱相关写动作均 requestPasskeyGate(purpose, body) → POST(purpose_data 与 body 逐字绑定)。
+//   不碰 buyer wallet/escrow/order/状态机;预充值 = 商家平台服务费预付款,非买家货款/escrow/保证金。
+
+window.renderAdminDirectPayHub = function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  const root = (state.user.admin_type || 'root') === 'root'
+  const grp = (title, cards) => `<div style="font-size:13px;font-weight:700;color:#374151;margin:14px 0 6px">${title}</div>${cards}`
+  app.innerHTML = shell(`
+    <h1 class="page-title">💳 ${t('Direct Pay 商户运营')}</h1>
+    <div style="margin-bottom:8px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin/protocol')">${t('返回协议管理')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:6px">${t('直付(Rail 1)商户运营集中入口:资格合规、平台服务费预充值、上线控制。')}</div>
+    ${root ? grp(t('资格与合规'),
+      adminLinkCard('🧾', t('商户合规录入'), t('KYB / 制裁筛查结论'), '#admin/compliance') +
+      adminLinkCard('🪙', t('履约保证金缓交审批'), t('缓交申请 + 压低额度'), '#admin/deferrals') +
+      adminLinkCard('🔖', t('逐产品直付验证'), t('核验商品外链验证码'), '#admin/product-verifications') +
+      adminLinkCard('🏬', t('店铺认证审核'), t('核验店铺外链 + 免逐品'), '#admin/store-verifications')) : ''}
+    ${root ? grp(t('平台服务费(预充值)'),
+      adminLinkCard('💰', t('预充值与账户'), t('充值 / 调整 / 退款 / 余额 / 应收'), '#admin/dp-fee')) : ''}
+    ${grp(t('上线控制'),
+      adminLinkCard('⚙️', t('直付参数'), t('开关 / 地区 / 单笔上限'), '#admin/params'))}
+    <div style="font-size:12px;color:#6b7280;margin-top:12px">${t('就绪报告(CLI):')} <code>npm run direct-pay:readiness</code></div>
+  `, 'admin')
+}
+
+// USDC 显示(units → 去尾零)
+function _dpFeeFmt(u) { return (Number(u || 0) / 1e6).toFixed(6).replace(/\.?0+$/, '') + ' USDC' }
+// 金额输入(USDC,最多 6 位小数)→ 整数 base-units(纯整数运算,无浮点四舍五入);松散/超精度输入 → NaN。
+function _dpFeeUnits(id) {
+  const e = document.getElementById(id); const raw = e ? e.value.trim() : ''
+  if (!/^-?\d+(\.\d{1,6})?$/.test(raw)) return NaN   // 拒 '1abc' / 超 6 位小数 / 空
+  const neg = raw[0] === '-', s = neg ? raw.slice(1) : raw
+  const [intp, frac = ''] = s.split('.')
+  const units = Number(intp) * 1e6 + Number((frac + '000000').slice(0, 6))
+  return neg ? -units : units
+}
+function _dpFeeStr(id) { const e = document.getElementById(id); return e ? e.value.trim() : '' }
+
+window.renderAdminDirectPayFeeOps = function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  if ((state.user.admin_type || 'root') !== 'root') { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限根管理员')}</div>`, 'admin'); return }
+  const inp = (id, ph, num) => `<input id="${id}" ${num ? 'type="number" step="any"' : ''} placeholder="${ph}" style="width:100%;padding:7px;border:1px solid #d1d5db;border-radius:6px;font-size:13px">`
+  const meth = (id) => `<select id="${id}" style="width:100%;padding:7px;border:1px solid #d1d5db;border-radius:6px;font-size:13px"><option value="usdc">USDC</option><option value="fiat">${t('法币 fiat')}</option></select>`
+  const card = (inner) => `<div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">${inner}</div>`
+  app.innerHTML = shell(`
+    <h1 class="page-title">💰 ${t('平台服务费预充值与账户')}</h1>
+    <div style="margin-bottom:8px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin/dp-ops')">${t('返回 Direct Pay 商户运营')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:6px">${t('预充值 = 商家平台服务费预付款(非买家货款 / 非 escrow / 非保证金)。链下实际收款/退款由你核实后在此登记;均需真人 Passkey。')}</div>
+    ${card(`<div style="font-size:13px;font-weight:700;margin-bottom:8px">${t('卖家用户 ID')}</div>${inp('fee-seller', t('卖家用户 ID(seller user id)'))}<button class="btn btn-primary btn-sm" style="margin-top:8px;width:auto" onclick="window.dpFeeLoad()">${t('加载账户')}</button>`)}
+    <div id="fee-acct"></div>
+    ${card(`<div style="font-size:13px;font-weight:700;margin-bottom:8px">➕ ${t('记录预充值(收款)')}</div><div style="display:flex;flex-direction:column;gap:6px">${inp('fee-topup-amt', t('金额 USDC'), true)}${meth('fee-topup-method')}${inp('fee-topup-ev', t('收款凭证号 evidence_ref(选填)'))}${inp('fee-topup-note', t('备注(选填)'))}<button class="btn btn-primary btn-sm" style="align-self:flex-start;font-size:12px" onclick="window.dpFeeTopup()">${t('记录预充值(真人 Passkey)')}</button></div>`)}
+    ${card(`<div style="font-size:13px;font-weight:700;margin-bottom:8px">✏️ ${t('账务更正(可正可负,非退款)')}</div><div style="display:flex;flex-direction:column;gap:6px">${inp('fee-adj-amt', t('更正额 USDC(负数=调减)'), true)}${inp('fee-adj-reason', t('原因(必填)'))}<button class="btn btn-outline btn-sm" style="align-self:flex-start;font-size:12px" onclick="window.dpFeeAdjust()">${t('记录更正(真人 Passkey)')}</button></div>`)}
+    ${card(`<div style="font-size:13px;font-weight:700;margin-bottom:8px">↩️ ${t('退款(真实退还未消耗预付款)')}</div><div style="display:flex;flex-direction:column;gap:6px">${inp('fee-ref-amt', t('退款额 USDC'), true)}${meth('fee-ref-method')}${inp('fee-ref-ev', t('退款凭证号 evidence_ref(选填)'))}${inp('fee-ref-reason', t('原因(选填)'))}<button class="btn btn-outline btn-sm" style="align-self:flex-start;font-size:12px;color:#b45309;border-color:#fcd34d" onclick="window.dpFeeRefund()">${t('退款(真人 Passkey)')}</button></div>`)}
+  `, 'admin')
+}
+
+window.dpFeeLoad = async function () {
+  const sid = _dpFeeStr('fee-seller'); const box = document.getElementById('fee-acct'); if (!box) return
+  if (!sid) { box.innerHTML = ''; return }
+  const r = await GET('/admin/direct-receive/fee-account/' + encodeURIComponent(sid))
+  if (!r || !r.account) { box.innerHTML = `<div class="alert alert-error">${t('加载失败')}</div>`; return }
+  const a = r.account
+  const row = (k, v) => `<div style="display:flex;justify-content:space-between;font-size:13px;padding:3px 0"><span style="color:#6b7280">${k}</span><span style="font-weight:600">${v}</span></div>`
+  box.innerHTML = `<div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:15px;font-weight:700;margin-bottom:6px">${t('可用预充值余额')}: <span style="color:${a.availableUnits < 0 ? '#dc2626' : '#059669'}">${_dpFeeFmt(a.availableUnits)}</span></div>
+    ${row(t('累计预充值'), _dpFeeFmt(a.topupUnits))}
+    ${row(t('已计提平台费'), _dpFeeFmt(a.accruedUnits))}
+    ${row(t('账务更正合计'), _dpFeeFmt(a.adjustmentUnits))}
+    ${row(t('已退款合计'), _dpFeeFmt(a.refundUnits))}
+    ${row(t('在途单预估费'), _dpFeeFmt(a.openEstFeeUnits))}
+    ${row(t('可退款余额'), _dpFeeFmt(Math.max(0, Number(a.availableUnits) - Number(a.openEstFeeUnits))))}
+    ${row(t('首单宽限'), a.graceEligible ? t('是(尚未成交)') : t('否(已用/有在途)'))}
+  </div>`
+}
+
+async function _dpFeeAction(purpose, path, bind, extraBody, okMsg) {
+  const token = await requestPasskeyGate(purpose, bind)
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(path, { ...bind, ...extraBody, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(okMsg)
+  window.dpFeeLoad()
+}
+
+window.dpFeeTopup = function () {
+  const seller_id = _dpFeeStr('fee-seller'); const amount_units = _dpFeeUnits('fee-topup-amt')
+  if (!seller_id || !(amount_units > 0)) { if (typeof toast$ === 'function') toast$(t('请填写卖家 ID 和正数金额'), 'error'); return }
+  const bind = { seller_id, amount_units, method: _dpFeeStr('fee-topup-method') || 'usdc', evidence_ref: _dpFeeStr('fee-topup-ev') }
+  return _dpFeeAction('direct_pay_fee_prepay_record', '/admin/direct-receive/fee-prepay', bind, { note: _dpFeeStr('fee-topup-note') }, t('预充值已记录'))
+}
+
+window.dpFeeAdjust = function () {
+  const seller_id = _dpFeeStr('fee-seller'); const delta_units = _dpFeeUnits('fee-adj-amt'); const reason = _dpFeeStr('fee-adj-reason')
+  if (!seller_id || !Number.isFinite(delta_units) || delta_units === 0 || !reason) { if (typeof toast$ === 'function') toast$(t('请填写卖家 ID、非零更正额、原因'), 'error'); return }
+  const bind = { seller_id, delta_units, reason }
+  return _dpFeeAction('direct_pay_fee_adjust', '/admin/direct-receive/fee-adjust', bind, {}, t('账务更正已记录'))
+}
+
+window.dpFeeRefund = function () {
+  const seller_id = _dpFeeStr('fee-seller'); const amount_units = _dpFeeUnits('fee-ref-amt')
+  if (!seller_id || !(amount_units > 0)) { if (typeof toast$ === 'function') toast$(t('请填写卖家 ID 和正数退款额'), 'error'); return }
+  const bind = { seller_id, amount_units, method: _dpFeeStr('fee-ref-method') || 'usdc', evidence_ref: _dpFeeStr('fee-ref-ev') }
+  return _dpFeeAction('direct_pay_fee_refund', '/admin/direct-receive/fee-refund', bind, { reason: _dpFeeStr('fee-ref-reason') }, t('退款已记录'))
+}

package/dist/pwa/public/app-direct-pay-product-verify.js

@@ -0,0 +1,103 @@
+// Direct Pay (Rail 1) — 按产品认证 UI (PR-④b)。UI ONLY。两个面:
+//   ① SELLER 自助(seller workbench settings):逐产品申领验证码 → 贴到外部商品页 → 提交该产品外链 → 看逐产品状态。
+//   ② ADMIN 审核队列(#admin/product-verifications):打开卖家提交的外链手动核对验证码,verify/reject(ROOT + 真人 Passkey)。
+//   硬门:每个产品都须【单独】被 admin 核验才可直付;一次验证绝不放行所有产品。诚实:WebAZ 不抓取链接,admin 手动核。
+//   不碰 wallet/escrow/settlement/refund;只调既有受门控端点。
+
+// ── 状态 → 双语文案 ──
+window.dpPvCopy = () => ({
+  issued:    { icon: '①', text: t('已签发验证码,请贴到该商品的外部页面后提交链接') },
+  submitted: { icon: '⏳', text: t('已提交,等待管理员核验') },
+  verified:  { icon: '✅', text: t('已通过验证,可直付') },
+  rejected:  { icon: '🚫', text: t('未通过,请修正后重新申请') },
+})
+
+// ══════ SELLER 自助面板 ══════
+window.dpSellerProductVerifySection = () => `
+  <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:14px;font-weight:700;margin-bottom:4px">🔖 ${t('逐产品直付验证(仅你可见)')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('每个走直付收款的商品都需【单独】通过平台人工验证(防作弊):申领验证码 → 贴到该商品的外部平台页面 → 回来提交该商品链接 → 管理员手动核对。未验证的商品只能用托管交易。')}</div>
+    <div id="dp-seller-pv">${loading$()}</div>
+  </div>`
+
+window.dpHydrateSellerProductVerify = async () => {
+  const box = document.getElementById('dp-seller-pv')
+  if (!box) return
+  const [products, vres] = await Promise.all([GET('/my-products'), GET('/direct-receive/product-verifications')])
+  if (!Array.isArray(products) || !vres || vres.error) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText ? window.dpErrorText(vres && vres.error_code, vres && vres.error) : t('操作失败,请重试')}</div>`; return }
+  const byProduct = {}; for (const v of (vres.verifications || [])) { if (!byProduct[v.product_id]) byProduct[v.product_id] = v }  // 最新在前
+  const copy = window.dpPvCopy()
+  if (!products.length) { box.innerHTML = `<div style="font-size:12px;color:#9ca3af">${t('你还没有商品')}</div>`; return }
+  box.innerHTML = products.map(p => {
+    const v = byProduct[p.id]
+    const meta = v ? (copy[v.status] || { icon: 'ℹ️', text: v.status }) : null
+    let action = ''
+    if (!v || v.status === 'rejected') {
+      action = `<button onclick="window.dpRequestProductVerify('${p.id}')" style="padding:6px 12px;background:#2563eb;color:#fff;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:pointer">${t('申请验证')}</button>`
+    } else if (v.status === 'issued') {
+      action = `
+        <div style="font-size:12px;color:#374151;margin-bottom:6px">${t('验证码')}: <code style="background:#f3f4f6;padding:2px 6px;border-radius:4px;font-weight:700">${escHtml(v.code)}</code> · ${t('把它展示在该商品的外部页面')}</div>
+        <input id="dp-pv-url-${p.id}" type="url" placeholder="${t('该商品的外部链接(http/https)')}" style="width:100%;padding:6px;border:1px solid #d1d5db;border-radius:4px;font-size:12px;margin-bottom:6px">
+        <button onclick="window.dpSubmitProductVerify('${p.id}')" style="padding:6px 12px;background:#2563eb;color:#fff;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:pointer">${t('提交链接')}</button>`
+    }
+    return `<div style="padding:8px 0;border-top:1px solid #f3f4f6">
+      <div style="font-size:13px;font-weight:600;color:#374151">${escHtml(p.title || p.id)}</div>
+      ${meta ? `<div style="font-size:12px;color:#6b7280;margin:4px 0">${meta.icon} ${escHtml(meta.text)}</div>` : ''}
+      ${action}
+    </div>`
+  }).join('')
+}
+
+window.dpRequestProductVerify = async (productId) => {
+  const r = await POST('/direct-receive/product-verification', { product_id: productId })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('验证码已签发'))
+  window.dpHydrateSellerProductVerify()
+}
+
+window.dpSubmitProductVerify = async (productId) => {
+  const el = document.getElementById('dp-pv-url-' + productId)
+  const url = el && el.value ? el.value.trim() : ''
+  if (!url) { if (typeof toast$ === 'function') toast$(t('请填写该商品的外部链接'), 'error'); return }
+  const r = await PUT('/direct-receive/product-verification', { product_id: productId, external_url: url })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已提交,等待管理员核验'))
+  window.dpHydrateSellerProductVerify()
+}
+
+// ══════ ADMIN 审核队列 ══════
+window.renderAdminProductVerifications = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const data = await GET('/admin/direct-receive/product-verifications?status=submitted')
+  if (!data || data.error) { app.innerHTML = shell(alert$('error', (data && data.error) || t('加载失败')), 'admin'); return }
+  const rows = data.verifications || []
+  const list = rows.length ? rows.map(v => `
+    <div class="card" style="margin-bottom:10px">
+      <div style="font-size:11px;color:#9ca3af">${escHtml(v.seller_id)} · ${escHtml(v.product_id)} · ${fmtTime(v.created_at)}</div>
+      <div style="font-size:13px;margin-top:6px">${t('验证码')}: <code style="background:#f3f4f6;padding:2px 6px;border-radius:4px;font-weight:700">${escHtml(v.code)}</code>${v.platform ? ` · ${escHtml(v.platform)}` : ''}</div>
+      <div style="font-size:12px;margin-top:4px">${t('外部链接')}: ${v.external_url ? `<a href="${encodeURI(v.external_url)}" target="_blank" rel="noopener noreferrer nofollow" style="color:#2563eb;text-decoration:underline;word-break:break-all">${escHtml(v.external_url)}</a>` : '—'}</div>
+      <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('请手动打开链接,确认该商品页面上展示了上面的验证码,再决定通过/拒绝。')}</div>
+      <div style="display:flex;gap:6px;margin-top:10px">
+        <button class="btn btn-primary btn-sm" style="font-size:12px" onclick="window.doReviewProductVerify('${v.id}','verified')">✓ ${t('通过(真人 Passkey)')}</button>
+        <button class="btn btn-sm" style="font-size:12px;background:#dc2626;border-color:#dc2626;color:#fff" onclick="window.doReviewProductVerify('${v.id}','rejected')">✗ ${t('拒绝(真人 Passkey)')}</button>
+      </div>
+    </div>`).join('') : `<div class="empty"><div class="empty-icon">📥</div><div class="empty-text">${t('暂无待核验商品')}</div></div>`
+  app.innerHTML = shell(`
+    <h1 class="page-title">🔖 ${t('逐产品直付验证审核')}</h1>
+    <div style="margin-bottom:12px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('返回概览')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('每个商品需单独核验:打开卖家提交的外部链接,确认页面展示了验证码再通过。通过=该商品可直付(逐品,绝不放行全部)。通过/拒绝均需真人 Passkey。')}</div>
+    ${list}
+  `, 'admin')
+}
+
+// purpose_data 绑 verification_id + decision(签 A 用 B / 改结论一律拒)。
+window.doReviewProductVerify = async function (id, decision) {
+  const token = await requestPasskeyGate('direct_pay_product_verify', { verification_id: id, decision })
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(`/admin/direct-receive/product-verifications/${id}/review`, { decision, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(decision === 'verified' ? t('该商品已通过验证') : t('该商品已拒绝'))
+  window.renderAdminProductVerifications(document.getElementById('app'))
+}

package/dist/pwa/public/app-direct-pay-readiness.js

@@ -0,0 +1,38 @@
+// Direct Pay (Rail 1) — SELLER de-identified readiness panel (PR readiness-seller-ui)。UI ONLY。
+//   只渲染【卖家可行动 / 脱敏状态】项(收款说明 / Passkey / 履约保证金 / 商户审核 / 暂停 / 平台开放)。
+//   数据来自 GET /api/direct-receive/readiness(后端已脱敏:绝不下发 raw blocker、也绝不暴露 KYB/制裁/AML 分项)。
+//   前端只做 code→卖家可读双语文案 的映射,绝不展示原始内部判定码。Direct Pay 仍 non-launchable / fail-closed。
+//   不碰 wallet/escrow/settlement/refund/钱路;不开真实 rail;不声称已上线。买家侧不展示本面板。
+
+// 内部 code → 卖家安全双语文案(ok / 未达成 两态 + 可行动入口)。绝不出现 KYB/sanctions/AML 字样。
+window.dpSellerReadinessCopy = () => ({
+  PLATFORM_OPEN: { ok: t('平台侧直付已开放'), no: t('直付平台侧暂未开放(无需你操作)') },
+  PAYMENT_INSTRUCTION: { ok: t('已设置收款说明'), no: t('未设置收款说明'), action: t('去设置收款说明'), href: '#seller/settings' },
+  PASSKEY: { ok: t('已注册 Passkey'), no: t('未注册 Passkey'), action: t('去注册 Passkey'), href: '#me' },
+  BASE_BOND: { ok: t('履约保证金已完成'), no: t('履约保证金未完成') },
+  COMPLIANCE_REVIEW: { ok: t('商户审核已通过'), no: t('商户审核进行中或未通过') },
+  NOT_SUSPENDED: { ok: t('直付资格正常'), no: t('直付资格已被暂停') },
+})
+
+window.dpSellerReadinessSection = () => `
+  <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:14px;font-weight:700;margin-bottom:4px">🧭 ${t('直付开通进度(仅你可见)')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('以上为你的直付开通进度;直付按轨道分阶段开放,完成可行动项不代表立即可用。')}</div>
+    <div id="dp-seller-readiness">${loading$()}</div>
+  </div>`
+
+window.dpHydrateSellerReadiness = async () => {
+  const box = document.getElementById('dp-seller-readiness')
+  if (!box) return
+  const r = await GET('/direct-receive/readiness')
+  if (!r || r.error) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试')}</div>`; return }
+  const copy = window.dpSellerReadinessCopy()
+  const rows = (r.items || []).map(it => {
+    const c = copy[it.code]; if (!c) return ''
+    const icon = it.ok ? '✅' : (it.actionable ? '⚠️' : '⏳')
+    const text = it.ok ? c.ok : c.no
+    const act = (!it.ok && it.actionable && c.action) ? ` · <a href="${c.href}" style="color:#2563eb;font-weight:600;text-decoration:underline">${c.action}</a>` : ''
+    return `<li style="display:flex;gap:8px;align-items:flex-start;font-size:13px;line-height:1.7;color:#374151"><span>${icon}</span><span>${escHtml(text)}${act}</span></li>`
+  }).join('')
+  box.innerHTML = `<ul style="margin:0;padding-left:2px;list-style:none">${rows}</ul>`
+}

package/dist/pwa/public/app-direct-pay-store-verify.js

@@ -0,0 +1,100 @@
+// Direct Pay (Rail 1) — 店铺认证 UI (PR-⑤b) = 逐品验证的【豁免】路径。UI ONLY。两个面:
+//   ① SELLER 自助(seller workbench settings):申领店铺验证码 → 贴到外部店铺页 → 提交店铺链接 → 看状态(含是否已豁免)。
+//   ② ADMIN 审核队列(#admin/store-verifications):打开卖家提交的店铺链接手动核对验证码,verify/reject;verify 时可【勾选
+//      “免逐品验证”】(per_product_exempt)→ 该卖家所有商品免逐品、可直付。ROOT + 真人 Passkey。
+//   诚实:WebAZ 不抓取链接,admin 手动核。不碰 wallet/escrow/settlement/refund;只调既有受门控端点。
+
+window.dpSvCopy = () => ({
+  issued:    { icon: '①', text: t('已签发验证码,请贴到你的外部店铺页后提交店铺链接') },
+  submitted: { icon: '⏳', text: t('已提交,等待管理员核验') },
+  verified:  { icon: '✅', text: t('店铺已通过验证') },
+  rejected:  { icon: '🚫', text: t('未通过,请修正后重新申请') },
+})
+
+// ══════ SELLER 自助面板 ══════
+window.dpSellerStoreVerifySection = () => `
+  <div class="card" style="margin-bottom:12px;border:1px solid #e5e7eb">
+    <div style="font-size:14px;font-weight:700;margin-bottom:4px">🏬 ${t('店铺认证(可申请免逐品验证)')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('默认每个商品需单独验证才能直付。你也可以申请【店铺认证】:申领验证码 → 贴到你的外部店铺主页 → 提交店铺链接 → 管理员手动核对;通过且管理员勾选豁免后,你【所有商品】免逐品验证即可直付。')}</div>
+    <div id="dp-seller-sv">${loading$()}</div>
+  </div>`
+
+window.dpHydrateSellerStoreVerify = async () => {
+  const box = document.getElementById('dp-seller-sv')
+  if (!box) return
+  const r = await GET('/direct-receive/store-verification')
+  if (!r || r.error) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试')}</div>`; return }
+  const v = r.verification, copy = window.dpSvCopy()
+  if (!v || v.status === 'rejected') {
+    const prior = v ? `<div style="font-size:12px;color:#6b7280;margin-bottom:8px">${copy.rejected.icon} ${escHtml(copy.rejected.text)}</div>` : ''
+    box.innerHTML = prior + `<button onclick="window.dpRequestStoreVerify()" style="padding:8px 16px;background:#2563eb;color:#fff;border:none;border-radius:6px;font-size:13px;font-weight:600;cursor:pointer">${t('申请店铺认证')}</button>`
+    return
+  }
+  const meta = copy[v.status] || { icon: 'ℹ️', text: v.status }
+  const lines = [`<div style="font-size:13px;font-weight:600;color:#374151">${meta.icon} ${escHtml(meta.text)}</div>`]
+  if (v.status === 'issued') {
+    lines.push(`<div style="font-size:12px;color:#374151;margin:6px 0">${t('验证码')}: <code style="background:#f3f4f6;padding:2px 6px;border-radius:4px;font-weight:700">${escHtml(v.code)}</code> · ${t('把它展示在你的外部店铺主页')}</div>`)
+    lines.push(`<input id="dp-sv-url" type="url" placeholder="${t('你的外部店铺链接(http/https)')}" style="width:100%;padding:6px;border:1px solid #d1d5db;border-radius:4px;font-size:12px;margin-bottom:6px">`)
+    lines.push(`<button onclick="window.dpSubmitStoreVerify()" style="padding:6px 12px;background:#2563eb;color:#fff;border:none;border-radius:6px;font-size:12px;font-weight:600;cursor:pointer">${t('提交店铺链接')}</button>`)
+  } else if (v.status === 'verified') {
+    lines.push(`<div style="font-size:12px;color:${r.exempt ? '#166534' : '#6b7280'};margin-top:4px">${r.exempt ? '✅ ' + t('已豁免逐品验证:你的所有商品可直付') : t('已通过,但未获逐品豁免:商品仍需逐个验证')}</div>`)
+  }
+  box.innerHTML = `<div style="display:flex;flex-direction:column;gap:2px">${lines.join('')}</div>`
+}
+
+window.dpRequestStoreVerify = async () => {
+  const r = await POST('/direct-receive/store-verification', {})
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('验证码已签发'))
+  window.dpHydrateSellerStoreVerify()
+}
+
+window.dpSubmitStoreVerify = async () => {
+  const el = document.getElementById('dp-sv-url')
+  const url = el && el.value ? el.value.trim() : ''
+  if (!url) { if (typeof toast$ === 'function') toast$(t('请填写你的外部店铺链接'), 'error'); return }
+  const r = await PUT('/direct-receive/store-verification', { external_url: url })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已提交,等待管理员核验'))
+  window.dpHydrateSellerStoreVerify()
+}
+
+// ══════ ADMIN 审核队列 ══════
+window.renderAdminStoreVerifications = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const data = await GET('/admin/direct-receive/store-verifications?status=submitted')
+  if (!data || data.error) { app.innerHTML = shell(alert$('error', (data && data.error) || t('加载失败')), 'admin'); return }
+  const rows = data.verifications || []
+  const list = rows.length ? rows.map(v => `
+    <div class="card" style="margin-bottom:10px">
+      <div style="font-size:11px;color:#9ca3af">${escHtml(v.user_id)} · ${fmtTime(v.created_at)}</div>
+      <div style="font-size:13px;margin-top:6px">${t('验证码')}: <code style="background:#f3f4f6;padding:2px 6px;border-radius:4px;font-weight:700">${escHtml(v.code)}</code>${v.platform ? ` · ${escHtml(v.platform)}` : ''}</div>
+      <div style="font-size:12px;margin-top:4px">${t('店铺链接')}: ${v.external_url ? `<a href="${encodeURI(v.external_url)}" target="_blank" rel="noopener noreferrer nofollow" style="color:#2563eb;text-decoration:underline;word-break:break-all">${escHtml(v.external_url)}</a>` : '—'}</div>
+      <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('请手动打开链接,确认店铺主页展示了上面的验证码,再决定通过/拒绝。')}</div>
+      <label style="display:flex;align-items:center;gap:6px;font-size:12px;color:#374151;margin-top:8px"><input type="checkbox" id="sv-exempt-${v.id}"> ${t('免逐品验证(通过后该卖家所有商品可直付)')}</label>
+      <div style="display:flex;gap:6px;margin-top:8px">
+        <button class="btn btn-primary btn-sm" style="font-size:12px" onclick="window.doReviewStoreVerify('${v.id}','verified')">✓ ${t('通过(真人 Passkey)')}</button>
+        <button class="btn btn-sm" style="font-size:12px;background:#dc2626;border-color:#dc2626;color:#fff" onclick="window.doReviewStoreVerify('${v.id}','rejected')">✗ ${t('拒绝(真人 Passkey)')}</button>
+      </div>
+    </div>`).join('') : `<div class="empty"><div class="empty-icon">📥</div><div class="empty-text">${t('暂无待核验店铺')}</div></div>`
+  app.innerHTML = shell(`
+    <h1 class="page-title">🏬 ${t('店铺认证审核')}</h1>
+    <div style="margin-bottom:12px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('返回概览')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('打开卖家提交的店铺链接,确认店铺页展示了验证码再通过。勾选“免逐品验证”=该卖家所有商品免逐个验证即可直付(请仅对可信商户勾选)。通过/拒绝均需真人 Passkey。')}</div>
+    ${list}
+  `, 'admin')
+}
+
+// purpose_data 绑 verification_id + decision + per_product_exempt(改任一项一律拒)。
+window.doReviewStoreVerify = async function (id, decision) {
+  const exempt = decision === 'verified' && !!(document.getElementById('sv-exempt-' + id) || {}).checked
+  const body = { verification_id: id, decision, per_product_exempt: exempt }
+  const token = await requestPasskeyGate('direct_pay_store_verify', body)
+  if (!token) { if (typeof toast$ === 'function') toast$(t('需要真人 Passkey 确认'), 'error'); return }
+  const r = await POST(`/admin/direct-receive/store-verifications/${id}/review`, { decision, per_product_exempt: exempt, webauthn_token: token })
+  if (!r || r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText ? window.dpErrorText(r && r.error_code, r && r.error) : t('操作失败,请重试'), 'error'); return }
+  if (typeof toast$ === 'function') toast$(decision === 'verified' ? (r.per_product_exempt ? t('店铺已通过,已豁免逐品验证') : t('店铺已通过')) : t('店铺申请已拒绝'))
+  window.renderAdminStoreVerifications(document.getElementById('app'))
+}