@seasonkoh/webaz 0.1.28 → 0.1.30

package/dist/pwa/public/app-agent-approvals.js

@@ -0,0 +1,93 @@
+// RFC-020 — Agent 授权请求审批页(#agent-approvals)。一个已连接的 agent 请求【更多 SAFE 作用域 / 一个能力包】,
+//   真人在这里审核并用 Passkey 批准或拒绝。批准 = 扩展该 agent 已有的委托凭证(仍只 SAFE、可撤销、按时长)。
+//   经典脚本,全局函数;globals(GET/POST/state/shell/t/escHtml/fmtTime/navigate/loading$/toast$/requestPasskeyGate)调用时解析。
+//   商家视角:不需要懂 scope/complete/verify —— 只看【哪个 agent · 要做什么 · 风险 · 多久】。批准需 Passkey(扩权=提权)。
+;(function () {
+  const DURATION_LABEL = { once: '一次性', '1h': '1 小时', '24h': '24 小时', '7d': '7 天', '30d': '30 天' }
+  const RISK = {
+    low:    { label: '低风险', color: '#16a34a', bg: '#dcfce7' },
+    medium: { label: '中风险', color: '#b45309', bg: '#fef3c7' },
+    high:   { label: '高风险', color: '#dc2626', bg: '#fee2e2' },
+  }
+
+  // Lightweight badge: fill #aa-pending-badge with a pending count (called from the account/settings page).
+  async function hydrateAgentApprovalsBadge() {
+    const el = document.getElementById('aa-pending-badge'); if (!el || !state.user) return
+    const r = await GET('/agent-grants/permission-requests').catch(() => null)
+    const n = (r && Array.isArray(r.requests)) ? r.requests.length : 0
+    el.innerHTML = n > 0 ? `<span style="display:inline-block;min-width:16px;height:16px;line-height:16px;text-align:center;font-size:10px;color:#fff;background:#dc2626;border-radius:999px;padding:0 5px;margin-left:4px">${n}</span>` : ''
+  }
+  window.hydrateAgentApprovalsBadge = hydrateAgentApprovalsBadge
+
+  function renderAgentApprovals(app) {
+    if (!state.user) { app.innerHTML = shell(`<div class="empty">${t('请先登录以审核 agent 授权请求')}</div>`, 'me'); return }
+    app.innerHTML = shell(`
+      <div class="page-header"><h2>${t('🔔 Agent 授权请求')}</h2></div>
+      <div style="font-size:12px;color:#6b7280;padding:0 4px 12px;line-height:1.6">${t('一个已连接的 AI agent 请求更多【安全只读/草稿】权限。批准只会扩展它已有的委托凭证 —— 仍然作用域受限、可随时撤销,永远动不了资金、投票、仲裁或改密钥。')}</div>
+      <div id="aa-body">${loading$()}</div>
+    `, 'me')
+    setTimeout(aaHydrate, 30)
+  }
+  window.renderAgentApprovals = renderAgentApprovals
+
+  async function aaHydrate() {
+    const box = document.getElementById('aa-body'); if (!box) return
+    const r = await GET('/agent-grants/permission-requests').catch(() => null)
+    if (!r || r.error) { box.innerHTML = `<div class="card" style="padding:16px;color:#991b1b">${escHtml((r && r.error) || t('无法读取授权请求,请重试。'))}</div>`; return }
+    const reqs = Array.isArray(r.requests) ? r.requests : []
+    if (reqs.length === 0) {
+      box.innerHTML = `<div class="empty" style="padding:40px 16px;text-align:center">
+        <div style="font-size:32px;margin-bottom:8px">✅</div>
+        <div style="font-weight:600;margin-bottom:4px">${t('暂无待处理的授权请求')}</div>
+        <div style="color:#9ca3af;font-size:12px">${t('当你的 agent 请求更多权限时,会出现在这里等你批准。')}</div>
+      </div>`
+      return
+    }
+    box.innerHTML = reqs.map(aaCard).join('')
+  }
+
+  function aaCard(r) {
+    const risk = RISK[r.risk_level] || RISK.low
+    const scopes = Array.isArray(r.requested_scopes) ? r.requested_scopes : []
+    // Prefer the human-readable bundle summary; otherwise show the individual safe-scope chips.
+    const what = r.human_summary
+      ? `<div style="font-size:13px;color:#374151;line-height:1.7">${escHtml(r.human_summary)}</div>`
+      : `<div style="margin-top:2px">${scopes.map(s => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px 4px 2px 0">${escHtml(String(s))}</span>`).join('') || `<span style="font-size:12px;color:#9ca3af">${t('(无 —— 仅基础只读)')}</span>`}</div>`
+    const dur = DURATION_LABEL[r.duration] || r.duration || '—'
+    return `<div class="card" style="margin-bottom:12px;padding:16px;border:1px solid #e5e7eb" data-aa-id="${escHtml(String(r.id))}">
+      <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px">
+        <div style="font-weight:600">${escHtml(r.agent_label || t('未命名 Agent'))} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>
+        <span style="font-size:11px;color:${risk.color};background:${risk.bg};padding:2px 8px;border-radius:999px">${t(risk.label)}</span>
+      </div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:2px">${t('它想做什么')}:</div>
+      ${what}
+      ${r.reason ? `<div style="font-size:12px;color:#6b7280;margin-top:8px">${t('用途(agent 自述)')}: ${escHtml(r.reason)} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>` : ''}
+      <div style="font-size:11px;color:#9ca3af;margin-top:8px">${t('授权时长')}: <strong style="color:#374151">${t(dur)}</strong> · ${t('请求于')} ${r.created_at ? fmtTime(r.created_at) : '—'}</div>
+      <div style="display:flex;gap:8px;margin-top:12px">
+        <button class="btn btn-outline" style="flex:1;color:#dc2626;border-color:#fecaca" onclick="aaReject('${escHtml(String(r.id))}')">${t('拒绝')}</button>
+        <button class="btn btn-primary" style="flex:2" onclick="aaApprove('${escHtml(String(r.id))}')">🔑 ${t('用 Passkey 批准')}</button>
+      </div>
+    </div>`
+  }
+
+  window.aaApprove = async (id) => {
+    const card = document.querySelector(`[data-aa-id="${(window.CSS && CSS.escape) ? CSS.escape(id) : id}"]`)
+    const btn = card ? card.querySelector('.btn-primary') : null; if (btn) btn.disabled = true
+    let token
+    // Passkey bound to THIS request (a token minted for request A can't approve B — server re-validates).
+    try { token = await requestPasskeyGate('agent_permission_approve', { request_id: id }) }
+    catch (e) { if (window.dpPromptRegisterPasskey && e && e.code === 'NO_PASSKEY_REGISTERED') { await window.dpPromptRegisterPasskey(e) } else { toast$((e && e.message) || t('Passkey 验证已取消'), 'error') } if (btn) btn.disabled = false; return }
+    const r = await POST('/agent-grants/permission-requests/' + encodeURIComponent(id) + '/approve', { webauthn_token: token }).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('批准失败,请重试'), 'error'); if (btn) btn.disabled = false; return }
+    toast$(t('已批准 —— 该 agent 的权限已扩展'))
+    aaHydrate(); hydrateAgentApprovalsBadge()
+  }
+
+  window.aaReject = async (id) => {
+    if (!confirm(t('确认拒绝这个授权请求?'))) return
+    const r = await POST('/agent-grants/permission-requests/' + encodeURIComponent(id) + '/reject', {}).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('操作失败'), 'error'); return }
+    toast$(t('已拒绝该授权请求'))
+    aaHydrate(); hydrateAgentApprovalsBadge()
+  }
+})()

package/dist/pwa/public/app-agent-pair.js

@@ -0,0 +1,127 @@
+// RFC-020 — Agent 配对授权页(#pair)。真人登录后审核 agent 的委托请求,Passkey 批准 / 拒绝。
+//   经典脚本,全局函数;globals(GET/POST/state/shell/t/escHtml/fmtTime/navigate/loading$/toast$/requestPasskeyGate)调用时解析。
+//   安全姿态:配对只授 SAFE scope(只读/草稿,可撤销,短期,永不碰钱/投票/仲裁/密钥)。
+//   反钓鱼:口令(user_code)是【必须核对】的安全值 —— 大号显示 + 强制"与 agent 屏幕一致"确认才解锁批准;label/reason 是 agent 自称,标注未验证。
+//   未登录由 app.js 路由守卫拦截并存 webaz_intended_hash(含 ?code=),登录后跳回本页 —— 不丢 code。
+;(function () {
+  let _code = null
+
+  function renderAgentPair(app) {
+    if (!state.user) { app.innerHTML = shell(`<div class="empty">${t('请先登录以审核 agent 授权请求')}</div>`, 'me'); return }
+    _code = (state._urlQuery && typeof state._urlQuery.code === 'string') ? state._urlQuery.code.trim().toUpperCase().slice(0, 32) : ''
+    app.innerHTML = shell(`
+      <div class="page-header"><h2>${t('🔗 授权 AI Agent')}</h2></div>
+      <div style="font-size:12px;color:#6b7280;padding:0 4px 12px;line-height:1.6">${t('一个 AI agent 请求代表你执行【安全只读/草稿】操作。它拿到的是作用域受限、短期、可随时撤销的委托凭证 —— 不是你的账号或密钥,永远动不了资金、投票、仲裁或改密钥。')}</div>
+      <div id="pair-body">${loading$()}</div>
+    `, 'me')
+    setTimeout(dpairHydrate, 30)
+  }
+  window.renderAgentPair = renderAgentPair
+
+  async function dpairHydrate() {
+    const box = document.getElementById('pair-body'); if (!box) return
+    if (!_code || _code.length < 4) {   // 无 code / 手动输入路径(抗钓鱼正路:人对着 agent 屏幕输口令)
+      box.innerHTML = `<div class="card" style="padding:16px">
+        <div style="font-size:13px;margin-bottom:8px">${t('请输入你的 agent 屏幕上显示的配对口令:')}</div>
+        <input id="pair-code-input" maxlength="32" placeholder="${t('配对口令')}" style="width:100%;font-size:16px;letter-spacing:2px;text-transform:uppercase;padding:10px;border:1px solid #d1d5db;border-radius:8px;text-align:center;font-family:monospace">
+        <button class="btn btn-primary" style="width:100%;margin-top:10px" onclick="dpairSubmitCode()">${t('查看授权请求')}</button>
+        <div style="font-size:11px;color:#9ca3af;margin-top:8px;line-height:1.6">${t('只输入你自己的 agent 显示给你的口令。不要输入别人发来的口令。')}</div>
+      </div>`
+      return
+    }
+    const r = await GET('/agent-grants/pair/' + encodeURIComponent(_code)).catch(() => null)
+    if (!r || r.error) return void dpairShowError(r && (r.error_code || r.error))
+    dpairRenderConsent(r.consent || {})
+  }
+
+  window.dpairSubmitCode = () => {
+    const v = (document.getElementById('pair-code-input')?.value || '').trim().toUpperCase()
+    if (v.length < 4) { toast$(t('请输入有效口令'), 'error'); return }
+    _code = v; dpairHydrate()
+  }
+
+  function dpairShowError(codeOrMsg) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    const map = {
+      pairing_not_found: t('配对口令无效或不存在。请核对你的 agent 显示的口令。'),
+      pairing_not_pending_or_expired: t('该配对请求已过期、已被处理或已失效。请让你的 agent 重新发起配对。'),
+      pairing_not_pending: t('该配对请求已被处理或已失效。'),
+    }
+    const msg = map[codeOrMsg] || t('无法读取该配对请求,请重试。')
+    box.innerHTML = `<div class="card" style="padding:16px;border:1px solid #fecaca;background:#fef2f2">
+      <div style="font-size:14px;font-weight:600;color:#991b1b;margin-bottom:6px">⚠️ ${t('无法授权')}</div>
+      <div style="font-size:13px;color:#7f1d1d;line-height:1.6">${escHtml(msg)}</div>
+      <button class="btn btn-sm" style="margin-top:10px" onclick="navigate('#pair')">${t('手动输入口令')}</button>
+    </div>`
+  }
+
+  function dpairRenderConsent(c) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    const caps = Array.isArray(c.capabilities) ? c.capabilities : []
+    const capHtml = caps.length
+      ? caps.map(cap => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px 4px 2px 0">${escHtml(String(cap.capability || cap))}</span>`).join('')
+      : `<span style="font-size:12px;color:#9ca3af">${t('(无 —— 仅基础只读)')}</span>`
+    box.innerHTML = `
+      <div class="card" style="padding:16px;border:2px solid #c7d2fe;margin-bottom:12px">
+        <div style="text-align:center;margin-bottom:12px">
+          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('配对口令 —— 请核对与你的 agent 屏幕一致')}</div>
+          <div style="font-size:28px;font-weight:800;letter-spacing:4px;font-family:monospace;color:#4338ca">${escHtml(String(_code))}</div>
+        </div>
+        <div style="font-size:12px;color:#991b1b;background:#fef2f2;border:1px solid #fecaca;border-radius:8px;padding:10px;line-height:1.6;margin-bottom:12px">
+          ⚠️ <strong>${t('只在这个口令与你的 agent 屏幕显示的一致、且是你主动发起时才批准。')}</strong> ${t('如果这是别人发给你的链接,或你并没有在配对 agent —— 请拒绝。')}
+        </div>
+        <div style="font-size:13px;line-height:1.9">
+          <div><span style="color:#6b7280">${t('Agent 自称')}:</span> <strong>${escHtml(c.agent_label || t('未命名'))}</strong> <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>
+          ${c.reason ? `<div><span style="color:#6b7280">${t('用途(agent 自述)')}:</span> ${escHtml(c.reason)} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>` : ''}
+          <div style="margin-top:6px"><span style="color:#6b7280">${t('请求的权限')}:</span><div style="margin-top:4px">${capHtml}</div></div>
+          <div style="font-size:11px;color:#9ca3af;margin-top:6px">${t('有效期至')} ${c.expires_at ? fmtTime(c.expires_at) : '—'}</div>
+        </div>
+        <label style="display:flex;align-items:flex-start;gap:8px;margin:14px 0 4px;font-size:12px;color:#374151;cursor:pointer">
+          <input type="checkbox" id="pair-confirm" onchange="document.getElementById('pair-approve-btn').disabled=!this.checked" style="margin-top:2px">
+          <span>${t('我确认这个口令与我的 agent 显示一致,且这是我本人主动发起的配对。')}</span>
+        </label>
+        <div style="display:flex;gap:8px;margin-top:12px">
+          <button class="btn btn-outline" style="flex:1;color:#dc2626;border-color:#fecaca" onclick="dpairReject()">${t('拒绝')}</button>
+          <button class="btn btn-primary" id="pair-approve-btn" disabled style="flex:2" onclick="dpairApprove()">🔑 ${t('用 Passkey 批准')}</button>
+        </div>
+      </div>`
+  }
+
+  window.dpairApprove = async () => {
+    const btn = document.getElementById('pair-approve-btn'); if (btn) btn.disabled = true
+    let token
+    try { token = await requestPasskeyGate('agent_pair_approve', { user_code: _code }) }
+    catch (e) { if (window.dpPromptRegisterPasskey && e && e.code === 'NO_PASSKEY_REGISTERED') { await window.dpPromptRegisterPasskey(e) } else { toast$((e && e.message) || t('Passkey 验证已取消'), 'error') } if (btn) btn.disabled = false; return }
+    const r = await POST('/agent-grants/pair/' + encodeURIComponent(_code) + '/approve', { webauthn_token: token }).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('批准失败,请重试'), 'error'); if (btn) btn.disabled = false; return }
+    dpairShowResult('approved', r)
+  }
+
+  window.dpairReject = async () => {
+    if (!confirm(t('确认拒绝这个 agent 配对请求?'))) return
+    const r = await POST('/agent-grants/pair/' + encodeURIComponent(_code) + '/reject', {}).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('操作失败'), 'error'); return }
+    dpairShowResult('rejected', r)
+  }
+
+  function dpairShowResult(kind, r) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    if (kind === 'approved') {
+      const caps = Array.isArray(r.capabilities) ? r.capabilities : []
+      box.innerHTML = `<div class="card" style="padding:20px;text-align:center;border:1px solid #bbf7d0;background:#f0fdf4">
+        <div style="font-size:36px;margin-bottom:8px">✅</div>
+        <div style="font-size:16px;font-weight:700;color:#166534;margin-bottom:6px">${t('已授权')}</div>
+        <div style="font-size:12px;color:#374151;margin-bottom:10px">${t('该 agent 现在可用你批准的作用域了(短期、可随时撤销)。回到你的 agent 完成配对即可。')}</div>
+        <div style="margin-bottom:12px">${caps.map(cap => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px">${escHtml(String(cap.capability || cap))}</span>`).join('') || `<span style="font-size:11px;color:#9ca3af">${t('基础只读')}</span>`}</div>
+        <button class="btn btn-primary" onclick="navigate('#agents')">${t('查看 / 撤销已连接的 Agent')}</button>
+      </div>`
+    } else {
+      box.innerHTML = `<div class="card" style="padding:20px;text-align:center;border:1px solid #e5e7eb">
+        <div style="font-size:36px;margin-bottom:8px">🚫</div>
+        <div style="font-size:16px;font-weight:700;color:#374151;margin-bottom:6px">${t('已拒绝')}</div>
+        <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('该配对请求已被拒绝,不会签发任何凭证。')}</div>
+        <button class="btn btn-outline btn-sm" onclick="navigate('#agents')">${t('已连接的 Agent')}</button>
+      </div>`
+    }
+  }
+})()

package/dist/pwa/public/app-ai.js

@@ -912,7 +912,7 @@ async function aiChatTurn(conversation, userText, attachments, onProgress) {
     conversation.messages.push({ role: 'user', content: toolResults })
   }
   await aiSaveConversation(conversation)
-  return { content: [{ type: 'text', text: '⚠️ 达到工具调用上限，请重新提问或细化问题。' }] }
+  return { content: [{ type: 'text', text: t('⚠️ 达到工具调用上限，请重新提问或细化问题。') }] }
 }
 
 function aiCreateConversation() {
@@ -1096,7 +1096,7 @@ function renderAIStatusBar() {
       ${visionChip}
       <span style="font-weight:600;font-size:13px;color:#111827;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(provider.name)}</span>
       <span style="color:#d1d5db;font-size:11px;flex-shrink:0">·</span>
-      <span style="color:#6b7280;font-size:11px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(curModel?.label || modelId)}</span>
+      <span style="color:#6b7280;font-size:11px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(t(curModel?.label || modelId))}</span>
     </div>
     ${aiTTS.supported() ? `
     <button onclick="aiToggleTTS()" title="${aiTTS.isEnabled() ? t('点击关闭朗读') : t('点击开启朗读 AI 回话')}"
@@ -1326,16 +1326,16 @@ async function renderAIDemo(app) {
           ${d.expectedSteps.map((s, j) => `
             <div style="display:flex;gap:8px;padding:4px 0;font-size:11px;color:#374151">
               <span style="color:#9ca3af;flex-shrink:0">${j+1}.</span>
-              <code style="background:#eef2ff;color:#3730a3;padding:1px 6px;border-radius:4px;font-size:10px;font-family:ui-monospace,Consolas,monospace;flex-shrink:0">${escHtml(s.tool)}</code>
+              <code style="background:#eef2ff;color:#3730a3;padding:1px 6px;border-radius:4px;font-size:10px;font-family:ui-monospace,Consolas,monospace;flex-shrink:0">${escHtml(t(s.tool))}</code>
               <span style="color:#6b7280">${t(s.desc)}</span>
             </div>`).join('')}
         </div>
       </details>
       <div style="display:flex;gap:8px">
-        <button data-prompt="${escAttr(d.prompt)}" onclick="runAIDemo(this.dataset.prompt)" style="flex:1;padding:11px;background:#007aff;color:#fff;border:none;border-radius:10px;font-size:14px;font-weight:600;cursor:pointer">${t('一键运行')} →</button>
+        <button data-prompt="${escAttr(t(d.prompt))}" onclick="runAIDemo(this.dataset.prompt)" style="flex:1;padding:11px;background:#007aff;color:#fff;border:none;border-radius:10px;font-size:14px;font-weight:600;cursor:pointer">${t('一键运行')} →</button>
       </div>
       <div style="margin-top:8px;font-size:10px;color:#9ca3af;padding:6px 8px;background:#f9fafb;border-radius:6px;line-height:1.5">
-        💬 ${t('提示原文')}：${escHtml(d.prompt.slice(0, 80))}${d.prompt.length > 80 ? '…' : ''}
+        💬 ${t('提示原文')}：${escHtml(t(d.prompt).slice(0, 80))}${t(d.prompt).length > 80 ? '…' : ''}
       </div>
     </div>
   `).join('')
@@ -1488,7 +1488,7 @@ async function renderAIRecommend(app) {
       <!-- 快速模板（intent 空对话才显示）-->
       <div style="margin-top:8px;display:flex;gap:6px;overflow-x:auto;padding-bottom:2px;scrollbar-width:none">
         ${AI_QUICK_TEMPLATES.map(t2 => `
-          <button onclick="aiFillTemplate('${t2.prompt.replace(/'/g, "\\'")}')"
+          <button onclick="aiFillTemplate('${t(t2.prompt).replace(/'/g, "\\'")}')"
             style="background:#fff;border:1px dashed #c7d2fe;border-radius:8px;padding:6px 10px;font-size:11px;color:#4338ca;cursor:pointer;white-space:nowrap;flex-shrink:0;font-weight:500">
             ${t2.icon} ${t(t2.label)}
           </button>`).join('')}
@@ -1959,8 +1959,8 @@ window.aiOpenProviderConfig = (pid) => {
       <div class="form-group">
         <label class="form-label">${t('协议格式')}</label>
         <select id="ai-pcfg-cformat" class="form-control" style="font-size:13px">
-          <option value="openai" ${cFormat==='openai'?'selected':''}>OpenAI 兼容 (chat/completions)</option>
-          <option value="anthropic" ${cFormat==='anthropic'?'selected':''}>Anthropic 兼容 (messages)</option>
+          <option value="openai" ${cFormat==='openai'?'selected':''}>${t('OpenAI 兼容 (chat/completions)')}</option>
+          <option value="anthropic" ${cFormat==='anthropic'?'selected':''}>${t('Anthropic 兼容 (messages)')}</option>
         </select>
         <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('多数自建 agent / 代理用 OpenAI 协议')}</div>
       </div>
@@ -1968,7 +1968,7 @@ window.aiOpenProviderConfig = (pid) => {
       <div class="form-group">
         <label class="form-label">${t('默认模型')}</label>
         <select id="ai-pcfg-model" class="form-control" style="font-size:13px">
-          ${p.models.map(m => `<option value="${m.id}" ${m.id === (localStorage.getItem('webaz_ai_model_' + p.id) || p.defaultModel) ? 'selected' : ''}>${escHtml(m.label)}</option>`).join('')}
+          ${p.models.map(m => `<option value="${m.id}" ${m.id === (localStorage.getItem('webaz_ai_model_' + p.id) || p.defaultModel) ? 'selected' : ''}>${escHtml(t(m.label))}</option>`).join('')}
         </select>
       </div>
     `}
@@ -1991,7 +1991,7 @@ window.aiSaveProviderConfig = (pid, mode) => {
 
   if (isCustom) {
     // custom: name + model + format 都来自用户填的字段
-    const cname  = document.getElementById('ai-pcfg-cname')?.value?.trim() || '我的 Agent'
+    const cname  = document.getElementById('ai-pcfg-cname')?.value?.trim() || t('我的 Agent')
     const cmodel = document.getElementById('ai-pcfg-cmodel')?.value?.trim()
     const clabel = document.getElementById('ai-pcfg-clabel')?.value?.trim()
     const cformat = document.getElementById('ai-pcfg-cformat')?.value || 'openai'

package/dist/pwa/public/app-arbitrator-admin.js

@@ -0,0 +1,87 @@
+// PR-F:仲裁员管理 admin UI(最小)。唯一授权源 = active arbitrator_whitelist;所有变更 = ROOT + 现场真人 Passkey + 后端审计。
+//   grant:输入 user_id/@handle → /admin/users/lookup 解析 → requestPasskeyGate('arbitrator_grant',{user_id}) → POST。
+//   目标须真人 + 已注册 Passkey + 非当事人 + 非 agent/system(后端 grantArbitrator 校验,前端只带输入)。中文 t(),英文 i18n.js。
+window.renderAdminArbitrators = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if ((typeof isAdmin === 'function' && !isAdmin()) || (state.user.admin_type || 'root') !== 'root') { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限根管理员')}</div>`, 'admin'); return }  // PR-F:先短路判 isAdmin(),否则无 admin_type 用户被 `||'root'` 默认当 root 放行
+  app.innerHTML = shell(`
+    <h1 class="page-title">⚖ ${t('仲裁员管理')}</h1>
+    <div style="margin-bottom:8px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('← 返回')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('授权真人仲裁员(唯一授权源=active 白名单)。目标须已注册 Passkey、非本案当事人、非 agent/系统账号。授权/暂停/撤销均需你现场 Passkey,后端留痕。')}</div>
+    <div class="card" style="margin-bottom:12px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:6px">${t('授权新仲裁员')}</div>
+      <div style="display:flex;gap:8px;flex-wrap:wrap">
+        <input class="form-control" id="arb-grant-q" placeholder="${t('user_id 或 @handle')}" style="flex:1;min-width:200px">
+        <button class="btn btn-primary btn-sm" style="width:auto" onclick="arbAdminGrant()">${t('授权(真人 Passkey)')}</button>
+      </div>
+      <div id="arb-grant-msg" style="margin-top:8px"></div>
+    </div>
+    <div id="arb-roster">${loading$()}</div>
+  `, 'admin')
+  window.arbAdminHydrate()
+}
+
+window.arbAdminHydrate = async () => {
+  const box = document.getElementById('arb-roster'); if (!box) return
+  const r = await GET('/admin/arbitrators')
+  if (r.error) { box.innerHTML = alert$('error', r.error || t('加载失败')); return }
+  const rows = r.arbitrators || []
+  box.innerHTML = `<div style="font-size:13px;font-weight:700;margin-bottom:6px">${t('仲裁员名册')}（${rows.length}）</div>` +
+    (rows.length ? rows.map(x => window.arbAdminCard(x)).join('') : `<div style="font-size:12px;color:#9ca3af">${t('暂无仲裁员')}</div>`)
+}
+
+window.arbAdminCard = (r) => {
+  const badge = r.status === 'active' ? 'background:#dcfce7;color:#166534' : r.status === 'suspended' ? 'background:#fef9c3;color:#854d0e' : 'background:#fee2e2;color:#991b1b'
+  const label = r.status === 'active' ? t('在岗') : r.status === 'suspended' ? t('已暂停') : t('已撤销')
+  return `<div style="border:1px solid #e5e7eb;border-radius:10px;padding:10px 12px;margin-bottom:8px" data-arb="${escHtml(r.user_id)}">
+    <div style="display:flex;justify-content:space-between;align-items:baseline;gap:8px">
+      <code style="font-size:12px">${escHtml(r.user_id)}</code>
+      <span style="font-size:11px;font-weight:700;padding:2px 8px;border-radius:999px;white-space:nowrap;${badge}">${label}</span>
+    </div>
+    <div style="font-size:11px;color:#9ca3af;margin:2px 0 6px">${r.is_system ? t('内部账号(is_system)') + ' · ' : ''}${escHtml(r.note || '')}${r.suspended_at ? ' · ' + t('暂停于') + ' ' + escHtml(r.suspended_at) : ''}${r.revoked_at ? ' · ' + t('撤销于') + ' ' + escHtml(r.revoked_at) : ''}</div>
+    <div style="display:flex;gap:8px;flex-wrap:wrap">
+      ${r.status === 'active' ? `<button class="btn btn-outline btn-sm" style="width:auto" onclick="arbAdminMutate('${escHtml(r.user_id)}','suspend')">${t('暂停')}</button>` : ''}
+      ${r.status === 'suspended' ? `<button class="btn btn-primary btn-sm" style="width:auto" onclick="arbAdminMutate('${escHtml(r.user_id)}','reinstate')">${t('恢复')}</button>` : ''}
+      ${r.status !== 'revoked' ? `<button class="btn btn-outline btn-sm" style="width:auto;color:#dc2626;border-color:#dc2626" onclick="arbAdminMutate('${escHtml(r.user_id)}','revoke')">${t('撤销（终态）')}</button>` : `<span style="font-size:11px;color:#9ca3af">${t('已永久撤销,不可再授权')}</span>`}
+    </div>
+  </div>`
+}
+
+window.arbAdminGrant = async () => {
+  const q = (document.getElementById('arb-grant-q')?.value || '').trim()
+  const msg = document.getElementById('arb-grant-msg')
+  const show = (type, m) => { if (msg) msg.innerHTML = alert$(type, m) }
+  if (!q) return show('error', t('请输入 user_id 或 @handle'))
+  const look = await GET('/admin/users/lookup?q=' + encodeURIComponent(q))
+  if (look.error || !look.user) return show('error', look.error || t('用户不存在'))
+  const userId = look.user.id
+  let token
+  try { token = await requestPasskeyGate('arbitrator_grant', { user_id: userId }) }
+  catch (e) { return show('error', (e && e.message ? e.message + ' — ' : '') + t('需先注册 Passkey')) }
+  const res = await POST('/admin/arbitrators/grant', { user_id: userId, webauthn_token: token })
+  if (res.error) return show('error', res.error)   // 后端已给清晰中文(NOT_HUMAN / PASSKEY_REQUIRED / REVOKED_TERMINAL 等)
+  show('success', t('已授权') + '：' + escHtml(look.user.name || userId))
+  window.arbAdminHydrate()
+}
+
+// PR-F:whitelist-only 仲裁员(role≠arbitrator,如被授权的买家)在个人页看不到"仲裁台"入口 —— 补一张跟随
+//   can_arbitrate 的入口卡(纯 UI;#disputes 本就可达,后端 can_arbitrate/COI/assign 才是边界)。
+window.arbTaishCard = () => `
+  <div style="font-size:12px;color:#6b7280;font-weight:600;margin:14px 0 6px">⚖ ${t('仲裁工作')}</div>
+  <div style="margin-bottom:10px">
+    <div class="card" onclick="location.hash='#disputes'" style="padding:14px;cursor:pointer;display:flex;align-items:center;gap:10px;min-height:64px">
+      <div style="font-size:22px">⚖</div>
+      <div><div style="font-weight:600;font-size:14px">${t('仲裁台')}</div><div style="font-size:12px;color:#6b7280">${t('待响应 / 仲裁中 / 已结')}</div></div>
+    </div>
+  </div>`
+
+window.arbAdminMutate = async (userId, action) => {
+  if (action === 'revoke' && !(await confirmModal(t('撤销是终态,不可再授权该用户。确定撤销?'), t('撤销'), { danger: true }))) return
+  let token
+  try { token = await requestPasskeyGate('arbitrator_' + action, { user_id: userId }) }
+  catch (e) { if (typeof toast$ === 'function') toast$((e && e.message ? e.message + ' — ' : '') + t('需先注册 Passkey'), 'error'); return }
+  const res = await POST('/admin/arbitrators/' + userId + '/' + action, { webauthn_token: token })
+  if (res.error) { if (typeof toast$ === 'function') toast$(res.error, 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('操作成功'), 'success')
+  window.arbAdminHydrate()
+}

package/dist/pwa/public/app-arbitrator-entry.js

@@ -0,0 +1,9 @@
+// PR-E:仲裁能力入口/按钮跟随后端 can_arbitrate(= active arbitrator_whitelist),不再看 user.role。
+//   前端仅 UX 跟随;真正的安全边界在后端(isEligibleArbitrator + assigned/claim + COI)。boot 时拉一次,
+//   suspended/revoked/role-only → can_arbitrate=false → 不显示入口/按钮;whitelist-only(role=buyer)→ true。
+window.arbEntryHydrate = async () => {
+  const before = state.canArbitrate   // PR-F fix:入口不 await(不阻塞 boot),状态回来若首次变 true → 重渲染当前页,让首屏也出现入口
+  try { const s = await GET('/arbitrator/status'); state.canArbitrate = !!(s && s.can_arbitrate); state.arbitratorStatus = (s && s.arbitrator_status) || 'none' }
+  catch { state.canArbitrate = false; state.arbitratorStatus = 'none' }   // active / suspended / revoked / none
+  if (state.canArbitrate && !before && typeof route === 'function') route()   // 仅"变为可仲裁"时重渲染;非仲裁员(恒 false)不触发
+}

package/dist/pwa/public/app-bond-deferral-ui.js

@@ -0,0 +1,9 @@
+// 缓交收口通知模板(B4)。UI ONLY —— 提醒/到期/转正式全在后端 cron/路由。
+;(function () {
+  const S = window._notifSub
+  const P = (emoji, titleZh, bodyZh) => (p) => ({ title: emoji + ' ' + t(titleZh), body: S(t(bodyZh), p) })
+  Object.assign(window.NOTIF_TEMPLATES, {
+    deferral_expiring_soon: P('⏰', '保证金缓交即将到期', '你的缓交资格将于 {expires} 到期。请在到期前缴纳履约保证金转正式(设置页-直付履约保证金),否则宽限期后直付资格将关闭。'),
+    deferral_expired: P('🚫', '保证金缓交已到期', '缓交资格已到期。若未缴纳保证金,直付资格已关闭(缴纳并经运营确认后可重新开通);在途订单不受影响,请正常履约完成。'),
+  })
+})()

package/dist/pwa/public/app-bond-refund-ui.js

@@ -0,0 +1,66 @@
+// 保证金退出退还 UI(B2)。UI ONLY —— blockers/冷静期/凭据/复核全在后端。
+//   经 app-bond-ui.js 的两个 hook 注入:卖家卡尾 bondRefundBlock(s) / admin 行尾 bondAdmRefundActions(d)。
+;(function () {
+  const S = window._notifSub
+  const P = (emoji, titleZh, bodyZh) => (p) => ({ title: emoji + ' ' + t(titleZh), body: S(t(bodyZh), p) })
+  Object.assign(window.NOTIF_TEMPLATES, {
+    bond_refund_requested: P('↩️', '保证金退出申请待处理', '卖家 {seller} 申请退还履约保证金(冷静期 {days} 天,期间其直付资格已暂停)。冷静期满且复核无未了结责任后,场外退还并在 admin 后台记录执行。'),
+    bond_refund_executed: P('✅', '履约保证金已退还', '你的保证金已在协议外退还并记录(凭据:{evidence})。直付资格随保证金退出关闭;重新缴纳后可再次开通。'),
+  })
+  const BLOCKER_LABEL = () => ({
+    OPEN_DIRECT_PAY_ORDERS: t('有在途直付订单'), OPEN_CANCEL_REFUND_HANDSHAKE: t('取消退款握手进行中'),
+    OPEN_RETURN_FLOW: t('退货/售后流进行中'), UNPAID_PLATFORM_FEES: t('平台服务费欠费未结清'),
+  })
+
+  // 卖家卡尾:locked → 申请退出(或 blockers 列表);refunding → 冷静期说明 + 撤销
+  window.bondRefundBlock = (s) => {
+    const d = s.deposit
+    if (!d) return ''
+    if (d.status === 'locked' && s.refund) {
+      if (s.refund.can_request) {
+        return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px">
+          <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondRefundRequest()">↩️ ${t('申请退出并退还保证金')}</button>
+          <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('申请后进入')} ${s.refund.cooling_days} ${t('天冷静期,期间直付资格暂停;可随时撤销。')}</div></div>`
+      }
+      const L = BLOCKER_LABEL()
+      return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px;font-size:11px;color:#92400e">
+        ${t('暂不能申请退还 —— 有未了结的直付责任')}:${(s.refund.blockers || []).map(b => `${L[b.code] || b.code}${b.count ? `(${b.count})` : ''}`).join('、')}</div>`
+    }
+    if (d.status === 'refunding') {
+      return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px;font-size:12px;color:#92400e">
+        ⏳ ${t('退出申请处理中')}:${t('冷静期')} ${s.refund ? s.refund.cooling_days : 14} ${t('天')}(${t('自申请时起')});${t('期间直付资格暂停。冷静期满、复核无未了结责任后平台场外退还并记录。')}
+        <div style="margin-top:6px"><button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondRefundCancel()">${t('撤销退出申请(恢复资格)')}</button></div></div>`
+    }
+    if (d.status === 'refunded') {
+      return `<div style="margin-top:8px;font-size:12px;color:#16a34a">✅ ${t('保证金已退还')}${d.refund_evidence_ref ? `(${t('凭据')} ${escHtml(d.refund_evidence_ref)})` : ''};${t('直付资格已关闭,重新缴纳后可再次开通。')}</div>`
+    }
+    return ''
+  }
+  window.bondRefundRequest = async () => {
+    if (typeof confirmModal === 'function' && !(await confirmModal(t('确认申请退出并退还保证金?冷静期内你的直付资格将暂停(不可接新直付单),可随时撤销。'), t('申请退出'), { danger: true }))) return
+    const r = await POST('/direct-receive/bond-refund-request', {})
+    if (r.error) { toast$(r.error_code === 'REFUND_BLOCKED' ? t('有未了结的直付责任,暂不能申请退还') : r.error, 'error'); window.bondHydrateSeller(); return }
+    toast$(t('退出申请已提交,进入冷静期'), 'success'); window.bondHydrateSeller()
+  }
+  window.bondRefundCancel = async () => {
+    const r = await POST('/direct-receive/bond-refund-request/cancel', {})
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('已撤销,直付资格已恢复'), 'success'); window.bondHydrateSeller()
+  }
+
+  // admin 行尾:refunding 行给"记录场外退还"按钮(Passkey;冷静期未满/复核有责任会被后端拒,明示)
+  window.bondAdmRefundActions = (d) => {
+    if (d.status !== 'refunding') return ''
+    return `<div style="margin-top:8px"><button class="btn btn-primary btn-sm" style="width:auto;font-size:11px" onclick="bondAdmExecuteRefund('${d.id}')">↩️ ${t('已场外退还,记录执行(Passkey)')}</button>
+      <span style="font-size:11px;color:#9ca3af;margin-left:6px">${t('冷静期未满或复核有未了结责任会被拒,属预期')}</span></div>`
+  }
+  window.bondAdmExecuteRefund = async (id) => {
+    const evidence = prompt(t('场外退还凭据(转账单号/链上 tx,必填)'), ''); if (!evidence || !evidence.trim()) return
+    let token
+    try { token = await requestPasskeyGate('direct_receive_bond_refund', { deposit_id: id, evidence_ref: evidence.trim() }) }
+    catch (e) { if (window.dpPromptRegisterPasskey) await window.dpPromptRegisterPasskey(e); return }
+    const r = await POST(`/admin/direct-receive/deposits/${id}/execute-refund`, { evidence_ref: evidence.trim(), webauthn_token: token })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('退还已记录,卖家已通知'), 'success'); window.bondAdmHydrate()
+  }
+})()

package/dist/pwa/public/app-bond-slash-ui.js

@@ -0,0 +1,74 @@
+// 保证金罚没 UI(B3)。UI ONLY —— 口径校验/冷静期/幂等全在后端。人工铁律:提案→冷静期→ROOT+Passkey 执行。
+//   注入:卖家卡 bondSlashNotice(s)(app-bond-ui 净零 hook);admin 队列页追加提案区(包装 bondAdmHydrate)。
+;(function () {
+  const S = window._notifSub
+  const P = (emoji, titleZh, bodyZh) => (p) => ({ title: emoji + ' ' + t(titleZh), body: S(t(bodyZh), p) })
+  Object.assign(window.NOTIF_TEMPLATES, {
+    bond_slash_proposed: P('⚠️', '保证金罚没提案(待复核)', '因争议 {dispute} 裁定卖家责任,平台已发起保证金罚没提案。冷静期 {days} 天内如有异议请联系平台并提供依据;冷静期满后将复核执行(全额罚没,进入处罚金专户,平台不获益)。'),
+    bond_slash_cancelled: P('✅', '保证金罚没提案已撤销', '此前的罚没提案经复核已撤销,你的保证金不受影响。'),
+    bond_slash_executed: P('❌', '保证金已罚没', '依据争议 {dispute} 的卖家责任裁定,你的履约保证金已全额罚没(进入处罚金专户,平台不获益),直付资格已吊销。重新缴纳保证金并通过审核后可再次申请开通。'),
+  })
+
+  // 卖家卡:待复核提案警示(冷静期=申诉窗)
+  window.bondSlashNotice = (s) => {
+    const p = s.pending_slash
+    if (!p) return ''
+    return `<div style="margin-top:8px;padding:8px;background:#fef2f2;border:1px solid #fecaca;border-radius:8px;font-size:12px;color:#991b1b">
+      ⚠️ ${t('保证金罚没提案待复核')}:${t('依据争议')} ${escHtml(p.dispute_id)}${p.reason ? ` · ${escHtml(p.reason)}` : ''}<br>
+      ${t('冷静期至')} ${fmtTime(p.cooling_until)} —— ${t('如有异议请在此期间联系平台并提供依据。')}</div>`
+  }
+
+  // admin:队列页追加"罚没提案"区(包装既有 hydrate;容器自建,不动 capped 文件)
+  const _origHydrate = window.bondAdmHydrate
+  window.bondAdmHydrate = async (status) => {
+    await _origHydrate(status)
+    const box = document.getElementById('bond-adm-box'); if (!box) return
+    let sec = document.getElementById('bond-slash-sec')
+    if (!sec) { box.insertAdjacentHTML('afterend', `<div id="bond-slash-sec" style="margin-top:16px"></div>`); sec = document.getElementById('bond-slash-sec') }
+    const r = await GET('/admin/direct-receive/bond-slash').catch(() => null)
+    const items = (r && r.proposals) || []
+    sec.innerHTML = `<h2 style="font-size:15px;font-weight:700;margin-bottom:8px">⚖️ ${t('罚没提案')}(${t('人工铁律:提案→冷静期→Passkey 执行,绝不自动')})</h2>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:8px">${t('仅「仲裁裁定卖家责的直付争议」可提案(refund_buyer / partial_refund);v1 全额罚没,进处罚金专户(只进不出),平台不获益。对 locked 行用下方表单提案。')}</div>
+      <div style="display:flex;gap:6px;margin-bottom:10px;flex-wrap:wrap">
+        <input class="form-control" id="bslash-dep" placeholder="${t('deposit_id')}" style="flex:1;min-width:120px;font-size:12px">
+        <input class="form-control" id="bslash-dsp" placeholder="${t('依据 dispute_id')}" style="flex:1;min-width:120px;font-size:12px">
+        <input class="form-control" id="bslash-note" placeholder="${t('说明(卖家可见,可选)')}" style="flex:2;min-width:160px;font-size:12px">
+        <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondSlashPropose()">${t('发起提案')}</button>
+      </div>
+      ${items.length === 0 ? `<div class="alert alert-info">${t('暂无罚没提案')}</div>` : items.map(p => `
+      <div class="card" style="font-size:12px">
+        <div style="display:flex;justify-content:space-between;gap:8px;flex-wrap:wrap">
+          <div><strong>${escHtml(p.seller_name || p.seller_id)}</strong> · ${t('依据争议')} ${escHtml(p.dispute_id)} · ${t('存款')} ${escHtml(p.deposit_id)}</div>
+          <div><strong>${({ proposed: t('待执行(冷静期)'), executed: t('已执行'), cancelled: t('已撤销') })[p.status] || p.status}</strong></div>
+        </div>
+        <div style="color:#6b7280;margin-top:4px">${p.reason ? escHtml(p.reason) + ' · ' : ''}${t('冷静期至')} ${fmtTime(p.cooling_until)} · ${fmtTime(p.proposed_at)}</div>
+        ${p.status === 'proposed' ? `<div style="display:flex;gap:8px;margin-top:8px">
+          <button class="btn btn-primary btn-sm" style="width:auto;font-size:11px" onclick="bondSlashExecute('${p.id}')">${t('执行罚没(Passkey;冷静期未满会被拒)')}</button>
+          <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondSlashCancel('${p.id}')">${t('撤销提案')}</button>
+        </div>` : ''}
+      </div>`).join('')}`
+  }
+  window.bondSlashPropose = async () => {
+    const dep = (document.getElementById('bslash-dep')?.value || '').trim()
+    const dsp = (document.getElementById('bslash-dsp')?.value || '').trim()
+    if (!dep || !dsp) return void toast$(t('须提供 deposit_id 与依据 dispute_id'), 'error')
+    const r = await POST('/admin/direct-receive/bond-slash/propose', { deposit_id: dep, dispute_id: dsp, reason: (document.getElementById('bslash-note')?.value || '').trim() || undefined })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('提案已发起,卖家已通知(冷静期=申诉窗)'), 'success'); window.bondAdmHydrate()
+  }
+  window.bondSlashExecute = async (id) => {
+    if (typeof confirmModal === 'function' && !(await confirmModal(t('确认执行罚没?保证金将全额进入处罚金专户(不可逆),卖家直付资格吊销。'), t('执行罚没'), { danger: true }))) return
+    let token
+    try { token = await requestPasskeyGate('direct_pay_bond_slash', { proposal_id: id }) }
+    catch (e) { if (window.dpPromptRegisterPasskey) await window.dpPromptRegisterPasskey(e); return }
+    const r = await POST(`/admin/direct-receive/bond-slash/${id}/execute`, { webauthn_token: token })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('罚没已执行,卖家已通知'), 'success'); window.bondAdmHydrate()
+  }
+  window.bondSlashCancel = async (id) => {
+    const note = prompt(t('撤销说明(卖家可见,可空)'), '') ?? ''
+    const r = await POST(`/admin/direct-receive/bond-slash/${id}/cancel`, { note })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('提案已撤销'), 'success'); window.bondAdmHydrate()
+  }
+})()

package/dist/pwa/public/app-bond-terms-ui.js

@@ -0,0 +1,23 @@
+// 保证金条款 + 多币种账户选择 UI(Lock B 放行配套)。UI ONLY —— 条款版本/账户校验在后端(428 TERMS_NOT_AGREED)。
+;(function () {
+  // 账户单选(多币种;admin 在 #admin/platform-receive 维护)。选中项凭据/币种由后端按账户推导。
+  window.bondAccountSelector = (s) => {
+    const accs = s.payment_accounts || []
+    if (!accs.length) return t('暂无收款方式,请联系平台')
+    return accs.map((a, i) => `<label style="display:flex;align-items:flex-start;gap:8px;margin-bottom:6px;cursor:pointer">
+      <input type="radio" name="bond-acc" value="${escHtml(a.id)}" ${i === 0 ? 'checked' : ''} style="margin-top:3px">
+      <span style="font-size:12px"><strong>${escHtml(a.label || a.method || '')}</strong> · ${escHtml(a.currency || '')}<br><span style="color:#6b7280">${escHtml(a.instruction || '')}</span></span>
+    </label>`).join('')
+  }
+  // 条款(折叠展示全文)+ 强制勾选;版本存全局供提交带上(后端精确匹配)
+  window.bondTermsBlock = (s) => {
+    if (!s.terms) return ''
+    window._bondTermsVersion = s.terms.version
+    const text = (window._lang === 'en' ? s.terms.en : s.terms.zh) || s.terms.zh
+    return `<details style="margin-bottom:8px"><summary style="cursor:pointer;font-size:12px;font-weight:600">📜 ${t('保证金条款')}(${escHtml(s.terms.version)})</summary>
+      <div style="font-size:11px;color:#4b5563;white-space:pre-wrap;line-height:1.7;padding:8px;background:#f9fafb;border-radius:8px;margin-top:6px">${escHtml(text)}</div></details>
+    <label style="display:flex;align-items:center;gap:8px;font-size:12px;color:#374151;margin-bottom:8px;cursor:pointer">
+      <input type="checkbox" id="bond-terms-agree" style="width:16px;height:16px">${t('我已阅读并同意当前版本保证金条款(缴纳前必须同意)')}
+    </label>`
+  }
+})()