@seasonkoh/webaz 0.1.29 → 0.1.31

package/dist/pwa/public/app-admin-disputes.js

@@ -0,0 +1,55 @@
+// admin 争议查看/管理 —— 可【区分】(状态 / 直付-托管 / 进度 / 是否已指派 / 如何结案 / 紧急度)+ 可【管理】(状态过滤 + 钻取查看)。
+//   admin 只读监督(后端 disputes-read 允许 admin 查详情);裁定/驳回等【动作】仍须 active 白名单仲裁员(COI+指派)。中文 t(),英文 i18n.js。
+window.renderAdminDisputes = async function (app, opts = {}) {
+  if (!state.user) { renderLogin(); return }
+  if (!isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+  app.innerHTML = shell(loading$(), 'admin')
+  const status = opts.status || ''
+  const data = await GET('/admin/disputes' + (status ? `?status=${encodeURIComponent(status)}` : ''))
+  if (data.error) { app.innerHTML = shell(alert$('error', data.error), 'admin'); return }
+  const c = data.counts || {}
+  const STATUS_META = { open: ['#fef3c7', '#92400e', t('待响应')], in_review: ['#fde68a', '#b45309', t('仲裁中')], resolved: ['#dcfce7', '#166534', t('已裁定')], dismissed: ['#e5e7eb', '#374151', t('已驳回')] }
+  const tabs = [['', t('全部'), data.total || 0], ['open', t('待响应'), c.open || 0], ['in_review', t('仲裁中'), c.in_review || 0], ['resolved', t('已裁定'), c.resolved || 0], ['dismissed', t('已驳回'), c.dismissed || 0]]
+  const tabHtml = tabs.map(([val, label, n]) => `<button class="btn btn-sm" style="width:auto;font-size:12px;background:${status === val ? '#4f46e5' : '#fff'};color:${status === val ? '#fff' : '#374151'};border:1px solid ${status === val ? '#4f46e5' : '#e5e7eb'}" onclick="renderAdminDisputes(document.getElementById('app'),{status:'${val}'})">${label} ${n}</button>`).join('')
+  const railBadge = (rail) => rail === 'direct_p2p'
+    ? `<span style="font-size:10px;background:#eff6ff;color:#1e40af;padding:1px 7px;border-radius:99px">${t('直付')}</span>`
+    : `<span style="font-size:10px;background:#f0fdf4;color:#166534;padding:1px 7px;border-radius:99px">${t('托管')}</span>`
+  const urgencyChip = (d) => {
+    if (d.status !== 'open' && d.status !== 'in_review') return ''
+    const dl = d.status === 'open' ? d.respond_deadline : d.arbitrate_deadline
+    if (!dl) return ''
+    const overdue = new Date(dl) < new Date()
+    return `<span style="font-size:10px;background:${overdue ? '#fee2e2' : '#fff7ed'};color:${overdue ? '#991b1b' : '#9a3412'};padding:1px 7px;border-radius:99px">${overdue ? '⏰ ' + t('已超时') : '⏳ ' + fmtTime(dl)}</span>`
+  }
+  const assignChip = (d) => {
+    let n = 0; try { n = (JSON.parse(d.assigned_arbitrators || '[]') || []).length } catch {}
+    return `<span style="font-size:10px;background:${n ? '#ede9fe' : '#f3f4f6'};color:${n ? '#5b21b6' : '#9ca3af'};padding:1px 7px;border-radius:99px">${n ? '⚖ ' + t('已指派') : t('未指派')}</span>`
+  }
+  const verdictChip = (d) => (d.status === 'resolved' || d.status === 'dismissed') && d.ruling_type
+    ? `<span style="font-size:10px;background:#f5f3ff;color:#6d28d9;padding:1px 7px;border-radius:99px">${(window.dpRulingLabel && window.dpRulingLabel(d.ruling_type)) || t(d.ruling_type)}</span>` : ''
+  const list = (data.disputes || []).map(d => {
+    const [bg, fg, lbl] = STATUS_META[d.status] || ['#e5e7eb', '#374151', d.status]
+    return `<div class="card" style="margin-bottom:10px;font-size:13px;cursor:pointer" onclick="navigate('#dispute/${escHtml(d.id)}')">
+      <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:8px">
+        <div style="flex:1;min-width:0">
+          <div style="font-weight:600;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(d.product_title || '—')}</div>
+          <div style="font-size:12px;color:#6b7280;margin-top:2px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml((d.reason || '').slice(0, 60))}</div>
+          <div style="font-size:11px;color:#6b7280;margin-top:6px">${t('原告')}: ${escHtml(d.initiator_name || '—')} → ${t('被告')}: ${escHtml(d.defendant_name || '—')}</div>
+          <div style="display:flex;gap:5px;flex-wrap:wrap;margin-top:6px">${railBadge(d.payment_rail)}${assignChip(d)}${urgencyChip(d)}${verdictChip(d)}</div>
+          <div style="font-size:11px;color:#9ca3af;margin-top:6px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(d.id)} · ${fmtTime(d.created_at)}</div>
+        </div>
+        <div style="display:flex;flex-direction:column;gap:6px;align-items:flex-end;flex-shrink:0">
+          <span style="background:${bg};color:${fg};padding:2px 8px;border-radius:8px;font-size:11px;white-space:nowrap">${lbl}</span>
+          ${d.total_amount ? `<div style="font-size:12px;color:#374151;white-space:nowrap">${d.total_amount} WAZ</div>` : ''}
+        </div>
+      </div>
+    </div>`
+  }).join('') || `<div class="empty"><div class="empty-icon">⚖️</div><div class="empty-text">${t('暂无争议')}</div></div>`
+  app.innerHTML = shell(`
+    <h1 class="page-title">⚖️ ${t('争议查看')}</h1>
+    <div style="margin-bottom:12px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('返回概览')}</button></div>
+    <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:12px">${tabHtml}</div>
+    <div style="font-size:11px;color:#9ca3af;margin-bottom:8px">${t('点卡片查看争议详情(只读监督;裁定须仲裁员)')}</div>
+    ${list}
+  `, 'admin')
+}

package/dist/pwa/public/app-agent-appeal.js

@@ -0,0 +1,90 @@
+// 被封用户申诉页 + admin strike 审批页(Tina 案补齐 UI)。UI ONLY —— 申诉/裁决边界全在后端;
+//   被封状态下只调两个封禁豁免端点(GET /api/me/agents、POST .../strikes/:id/appeal)。
+;(function () {
+  const SEV = () => ({ warning: t('警告'), suspend_7d: t('暂停 7 天'), permanent: t('永久封禁') })
+  const APL = () => ({ none: t('未申诉'), pending: t('申诉审核中'), approved: t('申诉通过(已解封)'), denied: t('申诉被驳回') })
+
+  // ── 被封用户:极简申诉页(登录检测到 AGENT_BLOCKED 时进入;key 已在 state.apiKey)──
+  window.renderAgentBlockedAppeal = async (blockMsg) => {
+    const app = document.getElementById('app')
+    app.innerHTML = `<div style="max-width:560px;margin:40px auto;padding:0 16px">
+      <h1 style="font-size:18px;font-weight:700;margin-bottom:8px">🚫 ${t('账号处于暂停期')}</h1>
+      <div class="alert alert-error" style="margin-bottom:12px">${escHtml(blockMsg || '')}</div>
+      <div id="appeal-box">${loading$()}</div></div>`
+    const r = await GET('/me/agents').catch(() => null)
+    const box = document.getElementById('appeal-box')
+    if (!r || !Array.isArray(r.items)) { box.innerHTML = `<div class="alert alert-error">${t('加载失败,请重试(确认 key 完整)')}</div>`; return }
+    const strikes = r.items.flatMap(a => (a.recent_strikes || []))
+    const active = strikes.find(s => ['suspend_7d', 'permanent'].includes(s.severity) && s.appeal_status !== 'approved')
+    if (!active) { box.innerHTML = `<div class="alert alert-info">${t('未发现生效中的封禁,请重新登录试试')}</div>`; return }
+    const S = SEV(); const A = APL()
+    box.innerHTML = `
+      <div class="card" style="font-size:13px">
+        <div><strong>${S[active.severity] || active.severity}</strong> · ${escHtml(active.reason_code)}${active.reason_detail ? `(${escHtml(active.reason_detail)})` : ''}</div>
+        <div style="color:#6b7280;margin-top:4px">${t('签发')}:${fmtTime(active.issued_at)}${active.expires_at ? ` · ${t('到期自动解除')}:${fmtTime(active.expires_at)}` : ''}</div>
+        <div style="margin-top:4px">${t('申诉状态')}:<strong>${A[active.appeal_status] || active.appeal_status}</strong></div>
+      </div>
+      ${active.appeal_status === 'none' ? `
+      <textarea class="form-control" id="appeal-reason" rows="3" maxlength="500" placeholder="${t('申诉理由(≥10 字;说明误触发原因,如页面挂机轮询/误操作)')}" style="margin:10px 0;font-size:13px"></textarea>
+      <button class="btn btn-primary" style="width:100%" onclick="agentAppealSubmit(${active.id})">${t('提交申诉(等待管理员审核)')}</button>`
+      : active.appeal_status === 'pending' ? `<div class="alert alert-info" style="margin-top:10px">${t('申诉已提交,等待管理员审核;审核通过后重新登录即可。')}</div>`
+      : active.appeal_status === 'denied' ? `<div class="alert alert-error" style="margin-top:10px">${t('申诉被驳回;封禁将按期自动解除。')}</div>` : ''}
+      <button class="btn btn-outline btn-sm" style="width:100%;margin-top:10px" onclick="state.apiKey=null;location.reload()">${t('退出(换个账号登录)')}</button>`
+  }
+  window.agentAppealSubmit = async (strikeId) => {
+    const reason = (document.getElementById('appeal-reason')?.value || '').trim()
+    if (reason.length < 10) return void toast$(t('申诉理由 ≥10 字'), 'error')
+    const r = await POST(`/me/agents/strikes/${strikeId}/appeal`, { reason })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('申诉已提交'), 'success'); window.renderAgentBlockedAppeal('')
+  }
+
+  // ── admin:#admin/agent-strikes 待审队列 + 裁决 + 主动 issue ──
+  window.renderAdminAgentStrikes = function (app) {
+    if (!state.user) { renderLogin(); return }
+    if (typeof isAdmin === 'function' && !isAdmin()) { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限管理员')}</div>`, 'admin'); return }
+    if ((state.user.admin_type || 'root') !== 'root') { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限根管理员')}</div>`, 'admin'); return }
+    app.innerHTML = shell(`
+      <h1 class="page-title">🚦 ${t('Agent 封禁与申诉')}</h1>
+      <div style="font-size:12px;color:#6b7280;margin-bottom:10px">${t('申诉批准=立即解封(60 秒缓存内生效);驳回=按期自动解除。真人(绑 Passkey)已豁免速率封禁,此页主要处理 agent 与历史误封。')}</div>
+      <div id="strike-adm-box">${loading$()}</div>
+      <h2 style="font-size:14px;font-weight:700;margin:16px 0 8px">${t('主动签发 strike(慎用)')}</h2>
+      <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:8px">
+        <input class="form-control" id="stk-key" placeholder="api_key" style="flex:2;min-width:160px;font-size:12px">
+        <input class="form-control" id="stk-reason" placeholder="${t('reason_code(如 spam / fake_shipment)')}" style="flex:1;min-width:120px;font-size:12px">
+        <select class="form-control" id="stk-sev" style="width:auto;font-size:12px"><option value="warning">warning</option><option value="suspend_7d">suspend_7d</option><option value="permanent">permanent</option></select>
+        <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="adminStrikeIssue()">${t('签发')}</button>
+      </div>`, 'admin')
+    window.adminStrikesHydrate()
+  }
+  window.adminStrikesHydrate = async () => {
+    const box = document.getElementById('strike-adm-box'); if (!box) return
+    const r = await GET('/admin/agent-strikes/pending').catch(() => null)
+    const items = (r && r.items) || []
+    const S = SEV()
+    box.innerHTML = items.length === 0 ? `<div class="alert alert-info">${t('暂无待审申诉')}</div>` : items.map(i => `
+      <div class="card" style="font-size:12px">
+        <div style="display:flex;justify-content:space-between;gap:8px;flex-wrap:wrap">
+          <div><strong>@${escHtml(i.handle || i.user_id)}</strong> · ${S[i.severity] || i.severity} · ${escHtml(i.reason_code)}</div>
+          <div style="color:#6b7280">${fmtTime(i.issued_at)}</div>
+        </div>
+        ${i.reason_detail ? `<div style="color:#6b7280;margin-top:4px">${t('签发详情')}:${escHtml(i.reason_detail)}</div>` : ''}
+        <div style="margin-top:6px;padding:8px;background:#f9fafb;border-radius:6px">💬 ${t('申诉理由')}:${escHtml(i.appeal_reason || '-')}</div>
+        <div style="display:flex;gap:8px;margin-top:8px">
+          <button class="btn btn-primary btn-sm" style="width:auto;font-size:11px" onclick="adminStrikeDecide(${i.id},'approved')">${t('批准(立即解封)')}</button>
+          <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px;color:#dc2626;border-color:#fecaca" onclick="adminStrikeDecide(${i.id},'denied')">${t('驳回')}</button>
+        </div>
+      </div>`).join('')
+  }
+  window.adminStrikeDecide = async (id, decision) => {
+    const r = await POST(`/admin/agent-strikes/${id}/decide`, { decision })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(decision === 'approved' ? t('已批准,60 秒内解封') : t('已驳回'), 'success'); window.adminStrikesHydrate()
+  }
+  window.adminStrikeIssue = async () => {
+    if (typeof confirmModal === 'function' && !(await confirmModal(t('确认签发 strike?suspend_7d/permanent 将立即阻断该 key 的所有访问。'), t('签发'), { danger: true }))) return
+    const r = await POST('/admin/agent-strikes/issue', { api_key: (document.getElementById('stk-key')?.value || '').trim(), reason_code: (document.getElementById('stk-reason')?.value || '').trim(), severity: document.getElementById('stk-sev')?.value })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('已签发'), 'success')
+  }
+})()

package/dist/pwa/public/app-agent-approvals.js

@@ -0,0 +1,93 @@
+// RFC-020 — Agent 授权请求审批页(#agent-approvals)。一个已连接的 agent 请求【更多 SAFE 作用域 / 一个能力包】,
+//   真人在这里审核并用 Passkey 批准或拒绝。批准 = 扩展该 agent 已有的委托凭证(仍只 SAFE、可撤销、按时长)。
+//   经典脚本,全局函数;globals(GET/POST/state/shell/t/escHtml/fmtTime/navigate/loading$/toast$/requestPasskeyGate)调用时解析。
+//   商家视角:不需要懂 scope/complete/verify —— 只看【哪个 agent · 要做什么 · 风险 · 多久】。批准需 Passkey(扩权=提权)。
+;(function () {
+  const DURATION_LABEL = { once: '一次性', '1h': '1 小时', '24h': '24 小时', '7d': '7 天', '30d': '30 天' }
+  const RISK = {
+    low:    { label: '低风险', color: '#16a34a', bg: '#dcfce7' },
+    medium: { label: '中风险', color: '#b45309', bg: '#fef3c7' },
+    high:   { label: '高风险', color: '#dc2626', bg: '#fee2e2' },
+  }
+
+  // Lightweight badge: fill #aa-pending-badge with a pending count (called from the account/settings page).
+  async function hydrateAgentApprovalsBadge() {
+    const el = document.getElementById('aa-pending-badge'); if (!el || !state.user) return
+    const r = await GET('/agent-grants/permission-requests').catch(() => null)
+    const n = (r && Array.isArray(r.requests)) ? r.requests.length : 0
+    el.innerHTML = n > 0 ? `<span style="display:inline-block;min-width:16px;height:16px;line-height:16px;text-align:center;font-size:10px;color:#fff;background:#dc2626;border-radius:999px;padding:0 5px;margin-left:4px">${n}</span>` : ''
+  }
+  window.hydrateAgentApprovalsBadge = hydrateAgentApprovalsBadge
+
+  function renderAgentApprovals(app) {
+    if (!state.user) { app.innerHTML = shell(`<div class="empty">${t('请先登录以审核 agent 授权请求')}</div>`, 'me'); return }
+    app.innerHTML = shell(`
+      <div class="page-header"><h2>${t('🔔 Agent 授权请求')}</h2></div>
+      <div style="font-size:12px;color:#6b7280;padding:0 4px 12px;line-height:1.6">${t('一个已连接的 AI agent 请求更多【安全只读/草稿】权限。批准只会扩展它已有的委托凭证 —— 仍然作用域受限、可随时撤销,永远动不了资金、投票、仲裁或改密钥。')}</div>
+      <div id="aa-body">${loading$()}</div>
+    `, 'me')
+    setTimeout(aaHydrate, 30)
+  }
+  window.renderAgentApprovals = renderAgentApprovals
+
+  async function aaHydrate() {
+    const box = document.getElementById('aa-body'); if (!box) return
+    const r = await GET('/agent-grants/permission-requests').catch(() => null)
+    if (!r || r.error) { box.innerHTML = `<div class="card" style="padding:16px;color:#991b1b">${escHtml((r && r.error) || t('无法读取授权请求,请重试。'))}</div>`; return }
+    const reqs = Array.isArray(r.requests) ? r.requests : []
+    if (reqs.length === 0) {
+      box.innerHTML = `<div class="empty" style="padding:40px 16px;text-align:center">
+        <div style="font-size:32px;margin-bottom:8px">✅</div>
+        <div style="font-weight:600;margin-bottom:4px">${t('暂无待处理的授权请求')}</div>
+        <div style="color:#9ca3af;font-size:12px">${t('当你的 agent 请求更多权限时,会出现在这里等你批准。')}</div>
+      </div>`
+      return
+    }
+    box.innerHTML = reqs.map(aaCard).join('')
+  }
+
+  function aaCard(r) {
+    const risk = RISK[r.risk_level] || RISK.low
+    const scopes = Array.isArray(r.requested_scopes) ? r.requested_scopes : []
+    // Prefer the human-readable bundle summary; otherwise show the individual safe-scope chips.
+    const what = r.human_summary
+      ? `<div style="font-size:13px;color:#374151;line-height:1.7">${escHtml(r.human_summary)}</div>`
+      : `<div style="margin-top:2px">${scopes.map(s => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px 4px 2px 0">${escHtml(String(s))}</span>`).join('') || `<span style="font-size:12px;color:#9ca3af">${t('(无 —— 仅基础只读)')}</span>`}</div>`
+    const dur = DURATION_LABEL[r.duration] || r.duration || '—'
+    return `<div class="card" style="margin-bottom:12px;padding:16px;border:1px solid #e5e7eb" data-aa-id="${escHtml(String(r.id))}">
+      <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px">
+        <div style="font-weight:600">${escHtml(r.agent_label || t('未命名 Agent'))} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>
+        <span style="font-size:11px;color:${risk.color};background:${risk.bg};padding:2px 8px;border-radius:999px">${t(risk.label)}</span>
+      </div>
+      <div style="font-size:11px;color:#6b7280;margin-bottom:2px">${t('它想做什么')}:</div>
+      ${what}
+      ${r.reason ? `<div style="font-size:12px;color:#6b7280;margin-top:8px">${t('用途(agent 自述)')}: ${escHtml(r.reason)} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>` : ''}
+      <div style="font-size:11px;color:#9ca3af;margin-top:8px">${t('授权时长')}: <strong style="color:#374151">${t(dur)}</strong> · ${t('请求于')} ${r.created_at ? fmtTime(r.created_at) : '—'}</div>
+      <div style="display:flex;gap:8px;margin-top:12px">
+        <button class="btn btn-outline" style="flex:1;color:#dc2626;border-color:#fecaca" onclick="aaReject('${escHtml(String(r.id))}')">${t('拒绝')}</button>
+        <button class="btn btn-primary" style="flex:2" onclick="aaApprove('${escHtml(String(r.id))}')">🔑 ${t('用 Passkey 批准')}</button>
+      </div>
+    </div>`
+  }
+
+  window.aaApprove = async (id) => {
+    const card = document.querySelector(`[data-aa-id="${(window.CSS && CSS.escape) ? CSS.escape(id) : id}"]`)
+    const btn = card ? card.querySelector('.btn-primary') : null; if (btn) btn.disabled = true
+    let token
+    // Passkey bound to THIS request (a token minted for request A can't approve B — server re-validates).
+    try { token = await requestPasskeyGate('agent_permission_approve', { request_id: id }) }
+    catch (e) { if (window.dpPromptRegisterPasskey && e && e.code === 'NO_PASSKEY_REGISTERED') { await window.dpPromptRegisterPasskey(e) } else { toast$((e && e.message) || t('Passkey 验证已取消'), 'error') } if (btn) btn.disabled = false; return }
+    const r = await POST('/agent-grants/permission-requests/' + encodeURIComponent(id) + '/approve', { webauthn_token: token }).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('批准失败,请重试'), 'error'); if (btn) btn.disabled = false; return }
+    toast$(t('已批准 —— 该 agent 的权限已扩展'))
+    aaHydrate(); hydrateAgentApprovalsBadge()
+  }
+
+  window.aaReject = async (id) => {
+    if (!confirm(t('确认拒绝这个授权请求?'))) return
+    const r = await POST('/agent-grants/permission-requests/' + encodeURIComponent(id) + '/reject', {}).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('操作失败'), 'error'); return }
+    toast$(t('已拒绝该授权请求'))
+    aaHydrate(); hydrateAgentApprovalsBadge()
+  }
+})()

package/dist/pwa/public/app-agent-pair.js

@@ -0,0 +1,127 @@
+// RFC-020 — Agent 配对授权页(#pair)。真人登录后审核 agent 的委托请求,Passkey 批准 / 拒绝。
+//   经典脚本,全局函数;globals(GET/POST/state/shell/t/escHtml/fmtTime/navigate/loading$/toast$/requestPasskeyGate)调用时解析。
+//   安全姿态:配对只授 SAFE scope(只读/草稿,可撤销,短期,永不碰钱/投票/仲裁/密钥)。
+//   反钓鱼:口令(user_code)是【必须核对】的安全值 —— 大号显示 + 强制"与 agent 屏幕一致"确认才解锁批准;label/reason 是 agent 自称,标注未验证。
+//   未登录由 app.js 路由守卫拦截并存 webaz_intended_hash(含 ?code=),登录后跳回本页 —— 不丢 code。
+;(function () {
+  let _code = null
+
+  function renderAgentPair(app) {
+    if (!state.user) { app.innerHTML = shell(`<div class="empty">${t('请先登录以审核 agent 授权请求')}</div>`, 'me'); return }
+    _code = (state._urlQuery && typeof state._urlQuery.code === 'string') ? state._urlQuery.code.trim().toUpperCase().slice(0, 32) : ''
+    app.innerHTML = shell(`
+      <div class="page-header"><h2>${t('🔗 授权 AI Agent')}</h2></div>
+      <div style="font-size:12px;color:#6b7280;padding:0 4px 12px;line-height:1.6">${t('一个 AI agent 请求代表你执行【安全只读/草稿】操作。它拿到的是作用域受限、短期、可随时撤销的委托凭证 —— 不是你的账号或密钥,永远动不了资金、投票、仲裁或改密钥。')}</div>
+      <div id="pair-body">${loading$()}</div>
+    `, 'me')
+    setTimeout(dpairHydrate, 30)
+  }
+  window.renderAgentPair = renderAgentPair
+
+  async function dpairHydrate() {
+    const box = document.getElementById('pair-body'); if (!box) return
+    if (!_code || _code.length < 4) {   // 无 code / 手动输入路径(抗钓鱼正路:人对着 agent 屏幕输口令)
+      box.innerHTML = `<div class="card" style="padding:16px">
+        <div style="font-size:13px;margin-bottom:8px">${t('请输入你的 agent 屏幕上显示的配对口令:')}</div>
+        <input id="pair-code-input" maxlength="32" placeholder="${t('配对口令')}" style="width:100%;font-size:16px;letter-spacing:2px;text-transform:uppercase;padding:10px;border:1px solid #d1d5db;border-radius:8px;text-align:center;font-family:monospace">
+        <button class="btn btn-primary" style="width:100%;margin-top:10px" onclick="dpairSubmitCode()">${t('查看授权请求')}</button>
+        <div style="font-size:11px;color:#9ca3af;margin-top:8px;line-height:1.6">${t('只输入你自己的 agent 显示给你的口令。不要输入别人发来的口令。')}</div>
+      </div>`
+      return
+    }
+    const r = await GET('/agent-grants/pair/' + encodeURIComponent(_code)).catch(() => null)
+    if (!r || r.error) return void dpairShowError(r && (r.error_code || r.error))
+    dpairRenderConsent(r.consent || {})
+  }
+
+  window.dpairSubmitCode = () => {
+    const v = (document.getElementById('pair-code-input')?.value || '').trim().toUpperCase()
+    if (v.length < 4) { toast$(t('请输入有效口令'), 'error'); return }
+    _code = v; dpairHydrate()
+  }
+
+  function dpairShowError(codeOrMsg) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    const map = {
+      pairing_not_found: t('配对口令无效或不存在。请核对你的 agent 显示的口令。'),
+      pairing_not_pending_or_expired: t('该配对请求已过期、已被处理或已失效。请让你的 agent 重新发起配对。'),
+      pairing_not_pending: t('该配对请求已被处理或已失效。'),
+    }
+    const msg = map[codeOrMsg] || t('无法读取该配对请求,请重试。')
+    box.innerHTML = `<div class="card" style="padding:16px;border:1px solid #fecaca;background:#fef2f2">
+      <div style="font-size:14px;font-weight:600;color:#991b1b;margin-bottom:6px">⚠️ ${t('无法授权')}</div>
+      <div style="font-size:13px;color:#7f1d1d;line-height:1.6">${escHtml(msg)}</div>
+      <button class="btn btn-sm" style="margin-top:10px" onclick="navigate('#pair')">${t('手动输入口令')}</button>
+    </div>`
+  }
+
+  function dpairRenderConsent(c) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    const caps = Array.isArray(c.capabilities) ? c.capabilities : []
+    const capHtml = caps.length
+      ? caps.map(cap => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px 4px 2px 0">${escHtml(String(cap.capability || cap))}</span>`).join('')
+      : `<span style="font-size:12px;color:#9ca3af">${t('(无 —— 仅基础只读)')}</span>`
+    box.innerHTML = `
+      <div class="card" style="padding:16px;border:2px solid #c7d2fe;margin-bottom:12px">
+        <div style="text-align:center;margin-bottom:12px">
+          <div style="font-size:11px;color:#6b7280;margin-bottom:4px">${t('配对口令 —— 请核对与你的 agent 屏幕一致')}</div>
+          <div style="font-size:28px;font-weight:800;letter-spacing:4px;font-family:monospace;color:#4338ca">${escHtml(String(_code))}</div>
+        </div>
+        <div style="font-size:12px;color:#991b1b;background:#fef2f2;border:1px solid #fecaca;border-radius:8px;padding:10px;line-height:1.6;margin-bottom:12px">
+          ⚠️ <strong>${t('只在这个口令与你的 agent 屏幕显示的一致、且是你主动发起时才批准。')}</strong> ${t('如果这是别人发给你的链接,或你并没有在配对 agent —— 请拒绝。')}
+        </div>
+        <div style="font-size:13px;line-height:1.9">
+          <div><span style="color:#6b7280">${t('Agent 自称')}:</span> <strong>${escHtml(c.agent_label || t('未命名'))}</strong> <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>
+          ${c.reason ? `<div><span style="color:#6b7280">${t('用途(agent 自述)')}:</span> ${escHtml(c.reason)} <span style="font-size:10px;color:#9ca3af">(${t('未验证')})</span></div>` : ''}
+          <div style="margin-top:6px"><span style="color:#6b7280">${t('请求的权限')}:</span><div style="margin-top:4px">${capHtml}</div></div>
+          <div style="font-size:11px;color:#9ca3af;margin-top:6px">${t('有效期至')} ${c.expires_at ? fmtTime(c.expires_at) : '—'}</div>
+        </div>
+        <label style="display:flex;align-items:flex-start;gap:8px;margin:14px 0 4px;font-size:12px;color:#374151;cursor:pointer">
+          <input type="checkbox" id="pair-confirm" onchange="document.getElementById('pair-approve-btn').disabled=!this.checked" style="margin-top:2px">
+          <span>${t('我确认这个口令与我的 agent 显示一致,且这是我本人主动发起的配对。')}</span>
+        </label>
+        <div style="display:flex;gap:8px;margin-top:12px">
+          <button class="btn btn-outline" style="flex:1;color:#dc2626;border-color:#fecaca" onclick="dpairReject()">${t('拒绝')}</button>
+          <button class="btn btn-primary" id="pair-approve-btn" disabled style="flex:2" onclick="dpairApprove()">🔑 ${t('用 Passkey 批准')}</button>
+        </div>
+      </div>`
+  }
+
+  window.dpairApprove = async () => {
+    const btn = document.getElementById('pair-approve-btn'); if (btn) btn.disabled = true
+    let token
+    try { token = await requestPasskeyGate('agent_pair_approve', { user_code: _code }) }
+    catch (e) { if (window.dpPromptRegisterPasskey && e && e.code === 'NO_PASSKEY_REGISTERED') { await window.dpPromptRegisterPasskey(e) } else { toast$((e && e.message) || t('Passkey 验证已取消'), 'error') } if (btn) btn.disabled = false; return }
+    const r = await POST('/agent-grants/pair/' + encodeURIComponent(_code) + '/approve', { webauthn_token: token }).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('批准失败,请重试'), 'error'); if (btn) btn.disabled = false; return }
+    dpairShowResult('approved', r)
+  }
+
+  window.dpairReject = async () => {
+    if (!confirm(t('确认拒绝这个 agent 配对请求?'))) return
+    const r = await POST('/agent-grants/pair/' + encodeURIComponent(_code) + '/reject', {}).catch(() => null)
+    if (!r || r.error) { toast$((r && r.error) || t('操作失败'), 'error'); return }
+    dpairShowResult('rejected', r)
+  }
+
+  function dpairShowResult(kind, r) {
+    const box = document.getElementById('pair-body'); if (!box) return
+    if (kind === 'approved') {
+      const caps = Array.isArray(r.capabilities) ? r.capabilities : []
+      box.innerHTML = `<div class="card" style="padding:20px;text-align:center;border:1px solid #bbf7d0;background:#f0fdf4">
+        <div style="font-size:36px;margin-bottom:8px">✅</div>
+        <div style="font-size:16px;font-weight:700;color:#166534;margin-bottom:6px">${t('已授权')}</div>
+        <div style="font-size:12px;color:#374151;margin-bottom:10px">${t('该 agent 现在可用你批准的作用域了(短期、可随时撤销)。回到你的 agent 完成配对即可。')}</div>
+        <div style="margin-bottom:12px">${caps.map(cap => `<span style="display:inline-block;font-size:11px;color:#4f46e5;background:#eef2ff;padding:2px 8px;border-radius:4px;margin:2px">${escHtml(String(cap.capability || cap))}</span>`).join('') || `<span style="font-size:11px;color:#9ca3af">${t('基础只读')}</span>`}</div>
+        <button class="btn btn-primary" onclick="navigate('#agents')">${t('查看 / 撤销已连接的 Agent')}</button>
+      </div>`
+    } else {
+      box.innerHTML = `<div class="card" style="padding:20px;text-align:center;border:1px solid #e5e7eb">
+        <div style="font-size:36px;margin-bottom:8px">🚫</div>
+        <div style="font-size:16px;font-weight:700;color:#374151;margin-bottom:6px">${t('已拒绝')}</div>
+        <div style="font-size:12px;color:#6b7280;margin-bottom:12px">${t('该配对请求已被拒绝,不会签发任何凭证。')}</div>
+        <button class="btn btn-outline btn-sm" onclick="navigate('#agents')">${t('已连接的 Agent')}</button>
+      </div>`
+    }
+  }
+})()

package/dist/pwa/public/app-arbitrator-admin.js

@@ -0,0 +1,87 @@
+// PR-F:仲裁员管理 admin UI(最小)。唯一授权源 = active arbitrator_whitelist;所有变更 = ROOT + 现场真人 Passkey + 后端审计。
+//   grant:输入 user_id/@handle → /admin/users/lookup 解析 → requestPasskeyGate('arbitrator_grant',{user_id}) → POST。
+//   目标须真人 + 已注册 Passkey + 非当事人 + 非 agent/system(后端 grantArbitrator 校验,前端只带输入)。中文 t(),英文 i18n.js。
+window.renderAdminArbitrators = async function (app) {
+  if (!state.user) { renderLogin(); return }
+  if ((typeof isAdmin === 'function' && !isAdmin()) || (state.user.admin_type || 'root') !== 'root') { app.innerHTML = shell(`<div class="alert alert-info">${t('仅限根管理员')}</div>`, 'admin'); return }  // PR-F:先短路判 isAdmin(),否则无 admin_type 用户被 `||'root'` 默认当 root 放行
+  app.innerHTML = shell(`
+    <h1 class="page-title">⚖ ${t('仲裁员管理')}</h1>
+    <div style="margin-bottom:8px"><button class="btn btn-outline btn-sm" style="width:auto" onclick="navigate('#admin')">${t('← 返回')}</button></div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('授权真人仲裁员(唯一授权源=active 白名单)。目标须已注册 Passkey、非本案当事人、非 agent/系统账号。授权/暂停/撤销均需你现场 Passkey,后端留痕。')}</div>
+    <div class="card" style="margin-bottom:12px">
+      <div style="font-size:13px;font-weight:700;margin-bottom:6px">${t('授权新仲裁员')}</div>
+      <div style="display:flex;gap:8px;flex-wrap:wrap">
+        <input class="form-control" id="arb-grant-q" placeholder="${t('user_id 或 @handle')}" style="flex:1;min-width:200px">
+        <button class="btn btn-primary btn-sm" style="width:auto" onclick="arbAdminGrant()">${t('授权(真人 Passkey)')}</button>
+      </div>
+      <div id="arb-grant-msg" style="margin-top:8px"></div>
+    </div>
+    <div id="arb-roster">${loading$()}</div>
+  `, 'admin')
+  window.arbAdminHydrate()
+}
+
+window.arbAdminHydrate = async () => {
+  const box = document.getElementById('arb-roster'); if (!box) return
+  const r = await GET('/admin/arbitrators')
+  if (r.error) { box.innerHTML = alert$('error', r.error || t('加载失败')); return }
+  const rows = r.arbitrators || []
+  box.innerHTML = `<div style="font-size:13px;font-weight:700;margin-bottom:6px">${t('仲裁员名册')}（${rows.length}）</div>` +
+    (rows.length ? rows.map(x => window.arbAdminCard(x)).join('') : `<div style="font-size:12px;color:#9ca3af">${t('暂无仲裁员')}</div>`)
+}
+
+window.arbAdminCard = (r) => {
+  const badge = r.status === 'active' ? 'background:#dcfce7;color:#166534' : r.status === 'suspended' ? 'background:#fef9c3;color:#854d0e' : 'background:#fee2e2;color:#991b1b'
+  const label = r.status === 'active' ? t('在岗') : r.status === 'suspended' ? t('已暂停') : t('已撤销')
+  return `<div style="border:1px solid #e5e7eb;border-radius:10px;padding:10px 12px;margin-bottom:8px" data-arb="${escHtml(r.user_id)}">
+    <div style="display:flex;justify-content:space-between;align-items:baseline;gap:8px">
+      <code style="font-size:12px">${escHtml(r.user_id)}</code>
+      <span style="font-size:11px;font-weight:700;padding:2px 8px;border-radius:999px;white-space:nowrap;${badge}">${label}</span>
+    </div>
+    <div style="font-size:11px;color:#9ca3af;margin:2px 0 6px">${r.is_system ? t('内部账号(is_system)') + ' · ' : ''}${escHtml(r.note || '')}${r.suspended_at ? ' · ' + t('暂停于') + ' ' + escHtml(r.suspended_at) : ''}${r.revoked_at ? ' · ' + t('撤销于') + ' ' + escHtml(r.revoked_at) : ''}</div>
+    <div style="display:flex;gap:8px;flex-wrap:wrap">
+      ${r.status === 'active' ? `<button class="btn btn-outline btn-sm" style="width:auto" onclick="arbAdminMutate('${escHtml(r.user_id)}','suspend')">${t('暂停')}</button>` : ''}
+      ${r.status === 'suspended' ? `<button class="btn btn-primary btn-sm" style="width:auto" onclick="arbAdminMutate('${escHtml(r.user_id)}','reinstate')">${t('恢复')}</button>` : ''}
+      ${r.status !== 'revoked' ? `<button class="btn btn-outline btn-sm" style="width:auto;color:#dc2626;border-color:#dc2626" onclick="arbAdminMutate('${escHtml(r.user_id)}','revoke')">${t('撤销（终态）')}</button>` : `<span style="font-size:11px;color:#9ca3af">${t('已永久撤销,不可再授权')}</span>`}
+    </div>
+  </div>`
+}
+
+window.arbAdminGrant = async () => {
+  const q = (document.getElementById('arb-grant-q')?.value || '').trim()
+  const msg = document.getElementById('arb-grant-msg')
+  const show = (type, m) => { if (msg) msg.innerHTML = alert$(type, m) }
+  if (!q) return show('error', t('请输入 user_id 或 @handle'))
+  const look = await GET('/admin/users/lookup?q=' + encodeURIComponent(q))
+  if (look.error || !look.user) return show('error', look.error || t('用户不存在'))
+  const userId = look.user.id
+  let token
+  try { token = await requestPasskeyGate('arbitrator_grant', { user_id: userId }) }
+  catch (e) { return show('error', (e && e.message ? e.message + ' — ' : '') + t('需先注册 Passkey')) }
+  const res = await POST('/admin/arbitrators/grant', { user_id: userId, webauthn_token: token })
+  if (res.error) return show('error', res.error)   // 后端已给清晰中文(NOT_HUMAN / PASSKEY_REQUIRED / REVOKED_TERMINAL 等)
+  show('success', t('已授权') + '：' + escHtml(look.user.name || userId))
+  window.arbAdminHydrate()
+}
+
+// PR-F:whitelist-only 仲裁员(role≠arbitrator,如被授权的买家)在个人页看不到"仲裁台"入口 —— 补一张跟随
+//   can_arbitrate 的入口卡(纯 UI;#disputes 本就可达,后端 can_arbitrate/COI/assign 才是边界)。
+window.arbTaishCard = () => `
+  <div style="font-size:12px;color:#6b7280;font-weight:600;margin:14px 0 6px">⚖ ${t('仲裁工作')}</div>
+  <div style="margin-bottom:10px">
+    <div class="card" onclick="location.hash='#disputes'" style="padding:14px;cursor:pointer;display:flex;align-items:center;gap:10px;min-height:64px">
+      <div style="font-size:22px">⚖</div>
+      <div><div style="font-weight:600;font-size:14px">${t('仲裁台')}</div><div style="font-size:12px;color:#6b7280">${t('待响应 / 仲裁中 / 已结')}</div></div>
+    </div>
+  </div>`
+
+window.arbAdminMutate = async (userId, action) => {
+  if (action === 'revoke' && !(await confirmModal(t('撤销是终态,不可再授权该用户。确定撤销?'), t('撤销'), { danger: true }))) return
+  let token
+  try { token = await requestPasskeyGate('arbitrator_' + action, { user_id: userId }) }
+  catch (e) { if (typeof toast$ === 'function') toast$((e && e.message ? e.message + ' — ' : '') + t('需先注册 Passkey'), 'error'); return }
+  const res = await POST('/admin/arbitrators/' + userId + '/' + action, { webauthn_token: token })
+  if (res.error) { if (typeof toast$ === 'function') toast$(res.error, 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('操作成功'), 'success')
+  window.arbAdminHydrate()
+}

package/dist/pwa/public/app-arbitrator-entry.js

@@ -0,0 +1,9 @@
+// PR-E:仲裁能力入口/按钮跟随后端 can_arbitrate(= active arbitrator_whitelist),不再看 user.role。
+//   前端仅 UX 跟随;真正的安全边界在后端(isEligibleArbitrator + assigned/claim + COI)。boot 时拉一次,
+//   suspended/revoked/role-only → can_arbitrate=false → 不显示入口/按钮;whitelist-only(role=buyer)→ true。
+window.arbEntryHydrate = async () => {
+  const before = state.canArbitrate   // PR-F fix:入口不 await(不阻塞 boot),状态回来若首次变 true → 重渲染当前页,让首屏也出现入口
+  try { const s = await GET('/arbitrator/status'); state.canArbitrate = !!(s && s.can_arbitrate); state.arbitratorStatus = (s && s.arbitrator_status) || 'none' }
+  catch { state.canArbitrate = false; state.arbitratorStatus = 'none' }   // active / suspended / revoked / none
+  if (state.canArbitrate && !before && typeof route === 'function') route()   // 仅"变为可仲裁"时重渲染;非仲裁员(恒 false)不触发
+}

package/dist/pwa/public/app-bond-deferral-ui.js

@@ -0,0 +1,9 @@
+// 缓交收口通知模板(B4)。UI ONLY —— 提醒/到期/转正式全在后端 cron/路由。
+;(function () {
+  const S = window._notifSub
+  const P = (emoji, titleZh, bodyZh) => (p) => ({ title: emoji + ' ' + t(titleZh), body: S(t(bodyZh), p) })
+  Object.assign(window.NOTIF_TEMPLATES, {
+    deferral_expiring_soon: P('⏰', '保证金缓交即将到期', '你的缓交资格将于 {expires} 到期。请在到期前缴纳履约保证金转正式(设置页-直付履约保证金),否则宽限期后直付资格将关闭。'),
+    deferral_expired: P('🚫', '保证金缓交已到期', '缓交资格已到期。若未缴纳保证金,直付资格已关闭(缴纳并经运营确认后可重新开通);在途订单不受影响,请正常履约完成。'),
+  })
+})()

package/dist/pwa/public/app-bond-refund-ui.js

@@ -0,0 +1,66 @@
+// 保证金退出退还 UI(B2)。UI ONLY —— blockers/冷静期/凭据/复核全在后端。
+//   经 app-bond-ui.js 的两个 hook 注入:卖家卡尾 bondRefundBlock(s) / admin 行尾 bondAdmRefundActions(d)。
+;(function () {
+  const S = window._notifSub
+  const P = (emoji, titleZh, bodyZh) => (p) => ({ title: emoji + ' ' + t(titleZh), body: S(t(bodyZh), p) })
+  Object.assign(window.NOTIF_TEMPLATES, {
+    bond_refund_requested: P('↩️', '保证金退出申请待处理', '卖家 {seller} 申请退还履约保证金(冷静期 {days} 天,期间其直付资格已暂停)。冷静期满且复核无未了结责任后,场外退还并在 admin 后台记录执行。'),
+    bond_refund_executed: P('✅', '履约保证金已退还', '你的保证金已在协议外退还并记录(凭据:{evidence})。直付资格随保证金退出关闭;重新缴纳后可再次开通。'),
+  })
+  const BLOCKER_LABEL = () => ({
+    OPEN_DIRECT_PAY_ORDERS: t('有在途直付订单'), OPEN_CANCEL_REFUND_HANDSHAKE: t('取消退款握手进行中'),
+    OPEN_RETURN_FLOW: t('退货/售后流进行中'), UNPAID_PLATFORM_FEES: t('平台服务费欠费未结清'),
+  })
+
+  // 卖家卡尾:locked → 申请退出(或 blockers 列表);refunding → 冷静期说明 + 撤销
+  window.bondRefundBlock = (s) => {
+    const d = s.deposit
+    if (!d) return ''
+    if (d.status === 'locked' && s.refund) {
+      if (s.refund.can_request) {
+        return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px">
+          <button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondRefundRequest()">↩️ ${t('申请退出并退还保证金')}</button>
+          <div style="font-size:11px;color:#9ca3af;margin-top:4px">${t('申请后进入')} ${s.refund.cooling_days} ${t('天冷静期,期间直付资格暂停;可随时撤销。')}</div></div>`
+      }
+      const L = BLOCKER_LABEL()
+      return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px;font-size:11px;color:#92400e">
+        ${t('暂不能申请退还 —— 有未了结的直付责任')}:${(s.refund.blockers || []).map(b => `${L[b.code] || b.code}${b.count ? `(${b.count})` : ''}`).join('、')}</div>`
+    }
+    if (d.status === 'refunding') {
+      return `<div style="margin-top:8px;border-top:1px dashed #e5e7eb;padding-top:8px;font-size:12px;color:#92400e">
+        ⏳ ${t('退出申请处理中')}:${t('冷静期')} ${s.refund ? s.refund.cooling_days : 14} ${t('天')}(${t('自申请时起')});${t('期间直付资格暂停。冷静期满、复核无未了结责任后平台场外退还并记录。')}
+        <div style="margin-top:6px"><button class="btn btn-outline btn-sm" style="width:auto;font-size:11px" onclick="bondRefundCancel()">${t('撤销退出申请(恢复资格)')}</button></div></div>`
+    }
+    if (d.status === 'refunded') {
+      return `<div style="margin-top:8px;font-size:12px;color:#16a34a">✅ ${t('保证金已退还')}${d.refund_evidence_ref ? `(${t('凭据')} ${escHtml(d.refund_evidence_ref)})` : ''};${t('直付资格已关闭,重新缴纳后可再次开通。')}</div>`
+    }
+    return ''
+  }
+  window.bondRefundRequest = async () => {
+    if (typeof confirmModal === 'function' && !(await confirmModal(t('确认申请退出并退还保证金?冷静期内你的直付资格将暂停(不可接新直付单),可随时撤销。'), t('申请退出'), { danger: true }))) return
+    const r = await POST('/direct-receive/bond-refund-request', {})
+    if (r.error) { toast$(r.error_code === 'REFUND_BLOCKED' ? t('有未了结的直付责任,暂不能申请退还') : r.error, 'error'); window.bondHydrateSeller(); return }
+    toast$(t('退出申请已提交,进入冷静期'), 'success'); window.bondHydrateSeller()
+  }
+  window.bondRefundCancel = async () => {
+    const r = await POST('/direct-receive/bond-refund-request/cancel', {})
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('已撤销,直付资格已恢复'), 'success'); window.bondHydrateSeller()
+  }
+
+  // admin 行尾:refunding 行给"记录场外退还"按钮(Passkey;冷静期未满/复核有责任会被后端拒,明示)
+  window.bondAdmRefundActions = (d) => {
+    if (d.status !== 'refunding') return ''
+    return `<div style="margin-top:8px"><button class="btn btn-primary btn-sm" style="width:auto;font-size:11px" onclick="bondAdmExecuteRefund('${d.id}')">↩️ ${t('已场外退还,记录执行(Passkey)')}</button>
+      <span style="font-size:11px;color:#9ca3af;margin-left:6px">${t('冷静期未满或复核有未了结责任会被拒,属预期')}</span></div>`
+  }
+  window.bondAdmExecuteRefund = async (id) => {
+    const evidence = prompt(t('场外退还凭据(转账单号/链上 tx,必填)'), ''); if (!evidence || !evidence.trim()) return
+    let token
+    try { token = await requestPasskeyGate('direct_receive_bond_refund', { deposit_id: id, evidence_ref: evidence.trim() }) }
+    catch (e) { if (window.dpPromptRegisterPasskey) await window.dpPromptRegisterPasskey(e); return }
+    const r = await POST(`/admin/direct-receive/deposits/${id}/execute-refund`, { evidence_ref: evidence.trim(), webauthn_token: token })
+    if (r.error) return void toast$(r.error, 'error')
+    toast$(t('退还已记录,卖家已通知'), 'success'); window.bondAdmHydrate()
+  }
+})()