Upload 5 files

管理界面/app.js

@@ -6,6 +6,82 @@
 (function () {
     'use strict';
 
+    // 新增反馈集中在双语词典；管理页语言遵循文档lang。
+    const ADMIN_MESSAGES = {
+        zh: {
+            tab_navigation: '功能导航', tab_plugins: '第三方插件', tab_withdrawals: '提现管理',
+            tab_disputes: '申诉仲裁', tab_config: '版本管理', tab_broadcast: '公告与广告', tab_promptcats: '提示词分类',
+            script_tab: '🖥️ 脚本执行', script_title: '脚本执行',
+            script_subtitle: '执行服务端预置的运维脚本（仅限管理员）。',
+            script_card_title: '🖥️ 运维脚本', script_badge: '开发工具',
+            script_name_label: '脚本名称', script_name_placeholder: '输入服务端预置的脚本名称…',
+            script_run: '▶️ 执行', script_waiting: '等待执行…', script_output_label: '脚本输出',
+            script_name_required: '请输入脚本名称。', script_running: '正在执行脚本…',
+            script_completed: '执行完成', script_failed: '执行失败',
+            write_result_unconfirmed: '操作结果未确认，请先重新查询当前状态再决定是否重试。',
+            image_uploading: '上传中…', image_upload_success: '图片上传成功', image_upload_failed: '图片上传失败',
+            upload_response_unavailable: '无法确认图片上传结果，请保留当前草稿并检查后再操作。',
+            banner_upload_pending: '图片仍在上传，请等待上传结束后再保存。',
+            copy_key: '复制 Key', copied: '已复制', key_copied: 'Key 已复制到剪贴板',
+            copy_failed: '复制失败，请手动选择文本复制',
+            request_invalid: '请求内容无效，请检查输入。',
+            access_forbidden: '无权执行此操作。',
+            resource_unavailable: '请求的功能或内容不可用。',
+            request_conflict: '当前状态已变化，请重新读取后再操作。',
+            request_too_large: '提交内容过大，请缩小后再提交。',
+            request_throttled: '操作过于频繁，请稍后再试。',
+            service_unavailable: '服务暂不可用，请先检查当前状态。',
+            request_failed: '请求未成功，请先检查当前状态。',
+            config_save_unconfirmed: '保存结果未确认，请先重新读取配置再决定是否重试。',
+            config_read_unavailable: '无法确认当前配置，请稍后重新读取。',
+            session_changed: '登录状态已变化，请在当前会话重新操作。',
+            network_unavailable: '网络异常，请检查连接后重试。',
+            auth_expired: '登录已失效，请重新登录。',
+            admin_verification_unavailable: '无法确认管理员权限，请稍后重新登录。',
+            admin_data_unavailable: '无法确认返回的数据，请稍后重新读取。',
+            login_response_unavailable: '无法确认登录结果，请重新登录。',
+            banner_active: '广告展示中', banner_inactive: '无活跃广告', banner_unknown: '状态未知',
+        },
+        en: {
+            tab_navigation: 'Administration sections', tab_plugins: 'Third-party plugins', tab_withdrawals: 'Withdrawals',
+            tab_disputes: 'Dispute arbitration', tab_config: 'Version management', tab_broadcast: 'Announcements and advertisements', tab_promptcats: 'Prompt categories',
+            script_tab: '🖥️ Scripts', script_title: 'Script execution',
+            script_subtitle: 'Run preinstalled server maintenance scripts (administrators only).',
+            script_card_title: '🖥️ Maintenance scripts', script_badge: 'Developer tools',
+            script_name_label: 'Script name', script_name_placeholder: 'Enter a preinstalled server script name…',
+            script_run: '▶️ Run', script_waiting: 'Waiting to run…', script_output_label: 'Script output',
+            script_name_required: 'Enter a script name.', script_running: 'Running script…',
+            script_completed: 'Execution completed', script_failed: 'Execution failed',
+            write_result_unconfirmed: 'The operation result is unconfirmed. Reload the current state before deciding whether to retry.',
+            image_uploading: 'Uploading…', image_upload_success: 'Image uploaded', image_upload_failed: 'Image upload failed',
+            upload_response_unavailable: 'The image upload result could not be confirmed. Keep the current draft and check before continuing.',
+            banner_upload_pending: 'Images are still uploading. Wait for the uploads to finish before saving.',
+            copy_key: 'Copy Key', copied: 'Copied', key_copied: 'Key copied to clipboard',
+            copy_failed: 'Copy failed. Select and copy the text manually.',
+            request_invalid: 'The request is invalid. Check your input.',
+            access_forbidden: 'You do not have permission to perform this action.',
+            resource_unavailable: 'The requested feature or content is unavailable.',
+            request_conflict: 'The current state has changed. Reload it before continuing.',
+            request_too_large: 'The submitted content is too large. Reduce its size.',
+            request_throttled: 'Too many requests. Try again later.',
+            service_unavailable: 'The service is unavailable. Check the current state first.',
+            request_failed: 'The request was not successful. Check the current state first.',
+            config_save_unconfirmed: 'Save result is unconfirmed. Reload the configuration before deciding whether to retry.',
+            config_read_unavailable: 'The current configuration could not be confirmed. Reload it later.',
+            session_changed: 'The session has changed. Continue in the current session.',
+            network_unavailable: 'Network unavailable. Check your connection before retrying.',
+            auth_expired: 'Your session has expired. Sign in again.',
+            admin_verification_unavailable: 'Administrator access could not be confirmed. Sign in again later.',
+            admin_data_unavailable: 'The returned data could not be confirmed. Reload it later.',
+            login_response_unavailable: 'The sign-in result could not be confirmed. Sign in again.',
+            banner_active: 'Advertisement active', banner_inactive: 'No active advertisement', banner_unknown: 'Status unknown',
+        },
+    };
+    function adminMessage(key) {
+        const language = document.documentElement.lang.toLowerCase().startsWith('en') ? 'en' : 'zh';
+        return ADMIN_MESSAGES[language][key];
+    }
+
     // -------------------- 配置 --------------------
     // 默认调用同源后端；如需指定接口域名可在 window.RANKING_API_BASE 设置
     const API_BASE = (typeof window !== 'undefined' && window.RANKING_API_BASE) || '';
@@ -20,9 +96,11 @@
     };
 
     // -------------------- 状态 --------------------
+    const storedSession = readAdminStoredSession();
     const state = {
-        token: sessionStorage.getItem(TOKEN_KEY) || '',
-        user: safeParse(sessionStorage.getItem(USER_KEY)),
+        token: storedSession.token,
+        adminVerified: false,
+        user: storedSession.user,
         plugins: [],
         filtered: [],
         searchKeyword: '',
@@ -89,6 +167,341 @@
         }
     }
 
+    const adminBusyOperations = new Map();
+    function startAdminBusy(btn, onRelease) {
+        if (!btn || adminBusyOperations.has(btn)) return null;
+        const session = captureAdminSession();
+        const disabled = btn.disabled;
+        const ariaBusy = btn.getAttribute('aria-busy');
+        const release = () => {
+            if (adminBusyOperations.get(btn) !== release) return false;
+            adminBusyOperations.delete(btn);
+            btn.disabled = disabled;
+            if (ariaBusy === null) btn.removeAttribute('aria-busy');
+            else btn.setAttribute('aria-busy', ariaBusy);
+            if (onRelease) onRelease();
+            return true;
+        };
+        release.initialDisabled = disabled;
+        release.isCurrent = () => session.isCurrent() && adminBusyOperations.get(btn) === release;
+        release.assertCurrent = () => {
+            assertAdminSession(session);
+            if (adminBusyOperations.get(btn) !== release) {
+                const error = new ApiError(adminMessage('session_changed'), 0);
+                error.stale = true;
+                throw error;
+            }
+        };
+        adminBusyOperations.set(btn, release);
+        setBusy(btn, true);
+        return release;
+    }
+    function releaseAdminBusy() {
+        for (const release of Array.from(adminBusyOperations.values())) release();
+        if (adminModalFocusController) adminModalFocusController.reset();
+    }
+
+    let adminKeyCopyGeneration = 0;
+    let adminKeyCopyTimer = null;
+    function resetAdminKeyCopy() {
+        adminKeyCopyGeneration++;
+        if (adminKeyCopyTimer !== null) clearTimeout(adminKeyCopyTimer);
+        adminKeyCopyTimer = null;
+        const btn = $('#btn-copy-key');
+        if (!btn) return;
+        const release = adminBusyOperations.get(btn);
+        if (release) release();
+        btn.classList.remove('is-copied');
+        const label = $('.btn-label', btn);
+        if (label) label.textContent = adminMessage('copy_key');
+    }
+
+    const adminModalGenerations = new WeakMap();
+    function captureAdminModal(id) {
+        const element = document.getElementById(id);
+        const generation = element && adminModalGenerations.get(element);
+        const isCurrent = () => !!element && !element.hidden && adminModalGenerations.get(element) === generation;
+        return { isCurrent, assertCurrent: () => assertAdminSession({ isCurrent }) };
+    }
+
+    let adminModalFocusController = null;
+    function adminModalFocus() {
+        if (adminModalFocusController) return adminModalFocusController;
+        const stack = [], inertState = new Map();
+        let overflow = null, observer = null;
+        const top = () => stack[stack.length - 1];
+        const controls = (mask) => $$('button, input:not([type="hidden"]), select, textarea, a[href], [tabindex]', mask)
+            .filter(el => !el.disabled && el.tabIndex >= 0 && el.getClientRects().length && !el.closest('[hidden], [inert]'));
+        const dialog = (entry) => $('[role="dialog"]', entry.mask) || entry.mask;
+        const focus = (entry) => {
+            if (!entry) return;
+            const target = controls(entry.mask)[0] || dialog(entry);
+            if (target === dialog(entry) && target.getAttribute('tabindex') === null) {
+                target.setAttribute('tabindex', '-1');
+                entry.temporaryTabIndex = target;
+            }
+            target.focus({ preventScroll: true });
+        };
+        const restoreEntry = (entry) => {
+            entry.mask.style.zIndex = entry.zIndex;
+            if (entry.temporaryTabIndex && entry.temporaryTabIndex.getAttribute('tabindex') === '-1') {
+                entry.temporaryTabIndex.removeAttribute('tabindex');
+            }
+        };
+        const sync = () => {
+            const active = top();
+            if (!active) {
+                if (observer) observer.disconnect();
+                for (const [node, value] of inertState) node.inert = value;
+                inertState.clear();
+                if (overflow !== null) document.body.style.overflow = overflow;
+                overflow = null;
+                return;
+            }
+            if (observer) observer.observe(document.body, { childList: true });
+            for (const node of $$('body > *')) {
+                if (!inertState.has(node)) inertState.set(node, node.inert);
+                node.inert = node !== active.mask;
+            }
+            stack.forEach((entry, index) => { entry.mask.style.zIndex = String(100 + index); });
+            document.body.style.overflow = 'hidden';
+        };
+        adminModalFocusController = {
+            watch() {
+                if (observer) return;
+                observer = new MutationObserver(() => {
+                    for (const entry of Array.from(stack)) {
+                        if (!entry.mask.isConnected) closeModal(entry.mask.id);
+                    }
+                    sync();
+                });
+                if (top()) sync();
+            },
+            findMask(id) { return stack.find(entry => entry.mask.id === id)?.mask || null; },
+            open(mask) {
+                const index = stack.findIndex(entry => entry.mask === mask);
+                let entry;
+                if (index >= 0) entry = stack.splice(index, 1)[0];
+                else entry = { mask, returnFocus: document.activeElement, zIndex: mask.style.zIndex };
+                if (overflow === null) overflow = document.body.style.overflow;
+                stack.push(entry); sync(); focus(entry);
+            },
+            close(mask) {
+                const index = stack.findIndex(entry => entry.mask === mask);
+                if (index < 0) return;
+                const wasTop = stack[index] === top(), entry = stack.splice(index, 1)[0];
+                for (const other of stack) {
+                    if (other.returnFocus && mask.contains(other.returnFocus)) other.returnFocus = entry.returnFocus;
+                }
+                restoreEntry(entry); sync();
+                if (!wasTop) return;
+                const target = entry.returnFocus;
+                if (target && target.isConnected && !target.disabled && target.getClientRects().length && !target.closest('[hidden], [inert]')) {
+                    target.focus({ preventScroll: true });
+                } else if (top()) focus(top());
+                else {
+                    const fallback = $('#tab-' + state.activeTab);
+                    if (fallback && fallback.isConnected && !fallback.disabled && fallback.getClientRects().length && !fallback.closest('[hidden], [inert]')) {
+                        fallback.focus({ preventScroll: true });
+                    }
+                }
+            },
+            reset() {
+                for (const entry of stack) {
+                    entry.mask.hidden = true;
+                    adminModalGenerations.set(entry.mask, {});
+                    restoreEntry(entry);
+                }
+                stack.length = 0; sync();
+            },
+            topMask() { return top()?.mask || null; },
+            focusInside(event) {
+                const entry = top();
+                if (entry && !entry.mask.contains(event.target)) focus(entry);
+            },
+            keydown(event) {
+                const entry = top();
+                if (!entry || event.isComposing || event.altKey || event.ctrlKey || event.metaKey) return;
+                if (event.key === 'Escape') {
+                    event.preventDefault(); event.stopPropagation(); closeModal(entry.mask.id);
+                } else if (event.key === 'Tab') {
+                    const items = controls(entry.mask), first = items[0], last = items[items.length - 1];
+                    const active = document.activeElement;
+                    if (!items.length || !entry.mask.contains(active) || (event.shiftKey ? active === first : active === last)) {
+                        event.preventDefault();
+                        if (items.length) (event.shiftKey ? last : first).focus({ preventScroll: true });
+                        else focus(entry);
+                    }
+                }
+            },
+        };
+        return adminModalFocusController;
+    }
+
+    const adminReadOperations = new Map();
+    function startAdminRead(key) {
+        const session = captureAdminSession();
+        const owner = {};
+        adminReadOperations.set(key, owner);
+        const isCurrent = () => session.isCurrent() && adminReadOperations.get(key) === owner;
+        return {
+            isCurrent,
+            assertCurrent() {
+                if (isCurrent()) return;
+                const error = new ApiError(adminMessage('session_changed'), 0);
+                error.stale = true;
+                throw error;
+            },
+            release() {
+                if (adminReadOperations.get(key) === owner) adminReadOperations.delete(key);
+            },
+        };
+    }
+
+    const adminToastOperations = new Map();
+
+    function clearAdminToasts() {
+        for (const release of adminToastOperations.values()) release();
+    }
+
+    function readAdminStoredSession() {
+        try {
+            const token = sessionStorage.getItem(TOKEN_KEY);
+            const user = sessionStorage.getItem(USER_KEY);
+            if (typeof token !== 'string' || !token || token.trim() !== token) return { token: '', user: null };
+            return { token, user: safeParse(user) };
+        } catch (_) { return { token: '', user: null }; }
+    }
+
+    function writeAdminStoredValue(key, value) {
+        try {
+            if (value === null) sessionStorage.removeItem(key);
+            else sessionStorage.setItem(key, value);
+            return true;
+        } catch (_) { return false; }
+    }
+
+    function clearAdminStoredSession() {
+        const tokenRemoved = writeAdminStoredValue(TOKEN_KEY, null);
+        const userRemoved = writeAdminStoredValue(USER_KEY, null);
+        return tokenRemoved && userRemoved;
+    }
+
+    function confirmAdminStatusWrite(response) {
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                !Object.prototype.hasOwnProperty.call(response, 'status') || response.status !== 'success' ||
+                (Object.prototype.hasOwnProperty.call(response, 'success') && response.success !== true)) {
+            throw new ApiError(adminMessage('write_result_unconfirmed'), 0);
+        }
+        return response;
+    }
+
+    function confirmAdminPluginWrite(response, expectedId, operation) {
+        const own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+        const fail = () => { throw new ApiError(adminMessage('write_result_unconfirmed'), 0); };
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                !own(response, 'success') || response.success !== true ||
+                (own(response, 'status') && response.status !== 'success')) fail();
+        if (operation === 'edit') {
+            const plugin = response.plugin;
+            if (!own(response, 'plugin') || !plugin || typeof plugin !== 'object' || Array.isArray(plugin) ||
+                    !own(plugin, 'plugin_id') || plugin.plugin_id !== expectedId) fail();
+        } else if (!own(response, 'plugin_id') || response.plugin_id !== expectedId) fail();
+        if (operation === 'create' || operation === 'rotate') {
+            if (!own(response, 'plugin_key') || typeof response.plugin_key !== 'string' ||
+                    !/^rk_plug_[a-f0-9]{32}$/.test(response.plugin_key)) fail();
+            if (operation === 'create') {
+                const plugin = response.plugin;
+                if (!own(response, 'plugin') || !plugin || typeof plugin !== 'object' || Array.isArray(plugin) ||
+                        !own(plugin, 'plugin_id') || plugin.plugin_id !== expectedId ||
+                        !own(plugin, 'plugin_key') || plugin.plugin_key !== response.plugin_key) fail();
+            }
+        }
+        if (operation === 'toggle' && (!own(response, 'enabled') || typeof response.enabled !== 'boolean')) fail();
+        return response;
+    }
+
+    const ADMIN_SCRIPT_OUTPUT_MAX = 2048;
+    function parseAdminScriptResult(response) {
+        const own = key => Object.prototype.hasOwnProperty.call(response, key);
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                !own('status') || !['success', 'error'].includes(response.status) ||
+                !own('return_code') || !Number.isSafeInteger(response.return_code) ||
+                (response.status === 'success') !== (response.return_code === 0) ||
+                (own('success') && response.success !== (response.status === 'success')) ||
+                !own('output') || typeof response.output !== 'string' || response.output.length > ADMIN_SCRIPT_OUTPUT_MAX) {
+            throw new ApiError(adminMessage('write_result_unconfirmed'), 0);
+        }
+        return { succeeded: response.status === 'success', output: response.output };
+    }
+
+    function parseAdminUpload(response) {
+        const fail = () => { throw new ApiError(adminMessage('upload_response_unavailable'), 0); };
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                !Object.prototype.hasOwnProperty.call(response, 'status') || response.status !== 'success' ||
+                !Object.prototype.hasOwnProperty.call(response, 'url') ||
+                (Object.prototype.hasOwnProperty.call(response, 'success') && response.success !== true) ||
+                typeof response.url !== 'string' || !response.url || /[\s\\]/.test(response.url) ||
+                !/^(?:https?:\/\/|\/(?!\/))/i.test(response.url)) fail();
+        try {
+            const url = new URL(response.url, window.location.href);
+            if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password) fail();
+        } catch (_) { fail(); }
+        return response.url;
+    }
+
+    function parseAdminLogin(response, expectedAccount) {
+        const fields = ['status', 'token', 'account', 'name', 'avatar'];
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                !fields.every(key => Object.prototype.hasOwnProperty.call(response, key)) ||
+                response.status !== 'success' ||
+                (Object.prototype.hasOwnProperty.call(response, 'success') && response.success !== true) ||
+                typeof response.token !== 'string' || !response.token || response.token.trim() !== response.token ||
+                typeof expectedAccount !== 'string' || !expectedAccount || response.account !== expectedAccount ||
+                typeof response.name !== 'string' || typeof response.avatar !== 'string') {
+            throw new ApiError(adminMessage('login_response_unavailable'), 0);
+        }
+        return { token: response.token, user: { account: response.account, name: response.name, avatar: response.avatar } };
+    }
+
+    function confirmedAdminData(response) {
+        if (!response || typeof response !== 'object' || Array.isArray(response) ||
+                response.status !== 'success' ||
+                (Object.prototype.hasOwnProperty.call(response, 'success') && response.success !== true) ||
+                !Object.prototype.hasOwnProperty.call(response, 'data')) {
+            throw new ApiError(adminMessage('admin_data_unavailable'), 0);
+        }
+        return response.data;
+    }
+    function validAdminDispute(record) {
+        return record && typeof record === 'object' && !Array.isArray(record) &&
+            typeof record.id === 'string' && !!record.id.trim() &&
+            ['pending', 'responded', 'resolved'].includes(record.status);
+    }
+    function parseAdminList(response, kind) {
+        const list = confirmedAdminData(response);
+        if (!['withdrawals', 'disputes', 'categories'].includes(kind)) {
+            throw new ApiError(adminMessage('admin_data_unavailable'), 0);
+        }
+        const text = value => typeof value === 'string' && !!value.trim();
+        const valid = record => kind === 'categories' ? text(record) : kind === 'disputes' ? validAdminDispute(record) :
+            kind === 'withdrawals' && record && typeof record === 'object' && !Array.isArray(record) &&
+            text(record.tx_id) && text(record.account) && Number.isSafeInteger(record.amount) &&
+            ['pending', 'completed'].includes(record.withdraw_status);
+        if (!Array.isArray(list) || !list.every(valid) ||
+                new Set(list.map(record => kind === 'categories' ? record : kind === 'disputes' ? record.id : record.tx_id)).size !== list.length) {
+            throw new ApiError(adminMessage('admin_data_unavailable'), 0);
+        }
+        return list;
+    }
+    function parseAdminDispute(response, expectedId) {
+        const dispute = confirmedAdminData(response);
+        if (!validAdminDispute(dispute) || dispute.id !== expectedId) {
+            throw new ApiError(adminMessage('admin_data_unavailable'), 0);
+        }
+        return dispute;
+    }
+
     function showError(node, msg) {
         if (!node) return;
         if (!msg) { node.hidden = true; node.textContent = ''; return; }
@@ -97,40 +510,77 @@
     }
 
     // -------------------- API 客户端 --------------------
-    async function apiRequest(method, path, body) {
-        const headers = { 'Accept': 'application/json' };
-        if (state.token) headers['Authorization'] = 'Bearer ' + state.token;
-        const init = { method, headers };
-        if (body !== undefined && body !== null) {
-            headers['Content-Type'] = 'application/json';
-            init.body = JSON.stringify(body);
+    let adminSessionGeneration = 0;
+    const adminRequests = new Set();
+    function revokeAdminRequests() {
+        for (const controller of Array.from(adminRequests)) {
+            try { controller.abort(); } catch (_) { /* 单项失败不阻断其余撤销。 */ }
         }
-        let response;
-        try {
-            response = await fetch(API_BASE + path, init);
-        } catch (err) {
-            throw new ApiError('网络异常，请检查连接后重试', 0, err);
-        }
-
-        // 401 处理：自动跳回登录
-        if (response.status === 401) {
-            handleUnauthorized();
-            throw new ApiError('登录已失效，请重新登录', 401);
+    }
+    function captureAdminSession() {
+        const generation = adminSessionGeneration, token = state.token;
+        return { token, isCurrent: () => generation === adminSessionGeneration && token === state.token };
+    }
+    function assertAdminSession(session) {
+        if (!session.isCurrent()) {
+            const error = new ApiError(adminMessage('session_changed'), 0);
+            error.stale = true;
+            throw error;
         }
-
-        let payload = null;
-        const text = await response.text();
-        if (text) {
-            try { payload = JSON.parse(text); } catch (e) { payload = { message: text }; }
+    }
+    async function performAdminRequest(path, options) {
+        const session = captureAdminSession();
+        const controller = new AbortController();
+        const headers = { Accept: 'application/json', ...options.headers };
+        if (session.token) headers.Authorization = 'Bearer ' + session.token;
+        adminRequests.add(controller);
+        try {
+            let response;
+            try {
+                response = await fetch(API_BASE + path, { ...options, headers, signal: controller.signal });
+            } catch (err) {
+                assertAdminSession(session);
+                throw new ApiError(adminMessage('network_unavailable'), 0);
+            }
+            assertAdminSession(session);
+            if (response.status === 401) {
+                handleUnauthorized();
+                throw new ApiError(adminMessage('auth_expired'), 401);
+            }
+            let text;
+            try {
+                text = await response.text();
+            } catch (err) {
+                assertAdminSession(session);
+                throw new ApiError(adminMessage('network_unavailable'), 0);
+            }
+            assertAdminSession(session);
+            let payload = null;
+            if (text) {
+                try { payload = JSON.parse(text); } catch (_) { payload = { message: text }; }
+            }
+            if (!response.ok) {
+                const key = { 400: 'request_invalid', 403: 'access_forbidden', 404: 'resource_unavailable',
+                    409: 'request_conflict', 413: 'request_too_large', 415: 'request_invalid',
+                    422: 'request_invalid', 429: 'request_throttled' }[response.status] ||
+                    (response.status >= 500 ? 'service_unavailable' : 'request_failed');
+                const msg = payload && ['config_save_unconfirmed', 'config_read_unavailable'].includes(payload.detail)
+                    ? adminMessage(payload.detail) : adminMessage(key);
+                throw new ApiError(msg, response.status);
+            }
+            return payload;
+        } finally {
+            adminRequests.delete(controller);
         }
-
-        if (!response.ok) {
-            const msg = (payload && (payload.message || payload.error || payload.detail)) || `请求失败（${response.status}）`;
-            throw new ApiError(msg, response.status, payload);
+    }
+    async function apiRequest(method, path, body) {
+        const options = { method };
+        if (body !== undefined && body !== null) {
+            options.headers = { 'Content-Type': 'application/json' };
+            options.body = JSON.stringify(body);
         }
-        return payload;
+        return performAdminRequest(path, options);
     }
-
     class ApiError extends Error {
         constructor(message, status, raw) {
             super(message);
@@ -138,35 +588,18 @@
             this.raw = raw;
         }
     }
+    function isStaleSessionError(error) {
+        return error instanceof ApiError && error.stale === true;
+    }
 
-    // 🆕 multipart 上传（广告图片）：FormData 不能 JSON 序列化，独立于 apiRequest
+    // 🆕 multipart 上传（广告图片）：FormData 不序列化，复用同一会话和取消边界。
     async function apiUpload(path, formData) {
-        const headers = { 'Accept': 'application/json' };
-        if (state.token) headers['Authorization'] = 'Bearer ' + state.token;
-        let response;
-        try {
-            response = await fetch(API_BASE + path, { method: 'POST', headers, body: formData });
-        } catch (err) {
-            throw new ApiError('网络异常，请检查连接后重试', 0, err);
-        }
-        if (response.status === 401) {
-            handleUnauthorized();
-            throw new ApiError('登录已失效，请重新登录', 401);
-        }
-        let payload = null;
-        const text = await response.text();
-        if (text) {
-            try { payload = JSON.parse(text); } catch (e) { payload = { message: text }; }
-        }
-        if (!response.ok) {
-            const msg = (payload && (payload.message || payload.error || payload.detail)) || `请求失败（${response.status}）`;
-            throw new ApiError(msg, response.status, payload);
-        }
-        return payload;
+        return performAdminRequest(path, { method: 'POST', body: formData });
     }
 
     // -------------------- 视图切换 --------------------
     function showView(name) {
+        if (name === 'view-main' && !state.adminVerified) name = 'view-login';
         ['view-login', 'view-main', 'view-forbidden'].forEach((id) => {
             const el = document.getElementById(id);
             if (el) el.hidden = (id !== name);
@@ -177,21 +610,78 @@
     function handleUnauthorized() {
         clearSession();
         showView('view-login');
-        toast('登录状态已过期，请重新登录', 'warning');
+        toast(adminMessage('auth_expired'), 'warning');
+    }
+
+    function resetAdminVerification() {
+        clearAdminToasts();
+        resetAdminKeyCopy();
+        releaseAdminBusy();
+        adminReadOperations.clear();
+        state.adminVerified = false;
+        state.plugins = [];
+        state.filtered = [];
+        state.searchKeyword = '';
+        state.confirmHandler = null;
+        state.bannerImageUrl = '';
+        state.bannerDetailImageUrl = '';
+        versionConfigGeneration++;
+        versionConfigConfirmed = false;
+        const versionSave = $('#btn-version-save');
+        if (versionSave) versionSave.disabled = true;
+        bannerStatusGeneration++;
+        const main = $('#view-main');
+        if (main) main.hidden = true;
+        for (const id of ['plugin-grid', 'withdraw-list', 'dispute-list', 'pcat-list', 'dispute-detail-body']) {
+            const node = $('#' + id);
+            if (node) node.replaceChildren();
+        }
+        for (const id of ['key-display', 'edit-key-display', 'user-name', 'user-avatar', 'script-result']) {
+            const node = $('#' + id);
+            if (node) node.textContent = '';
+        }
+        for (const id of ['banner-img-preview', 'banner-detail-img-preview']) {
+            const node = $('#' + id);
+            if (node) { node.hidden = true; node.removeAttribute('src'); }
+        }
+        for (const id of ['form-create', 'form-edit', 'form-version']) {
+            const form = $('#' + id);
+            if (form) form.reset();
+        }
+        for (const id of ['search-input', 'login-password', 'ann-content', 'script-name',
+                'banner-title', 'banner-desc', 'banner-detail-content', 'banner-img-file', 'banner-detail-img-file']) {
+            const input = $('#' + id);
+            if (input) input.value = '';
+        }
+        const bannerEnabled = $('#banner-enabled');
+        if (bannerEnabled) bannerEnabled.checked = false;
+        $$('.modal-mask').forEach(node => { node.hidden = true; });
+        if (!adminModalFocusController) document.body.style.overflow = '';
+        switchTab('plugins');
     }
 
     function clearSession() {
+        adminSessionGeneration++;
         state.token = '';
         state.user = null;
-        sessionStorage.removeItem(TOKEN_KEY);
-        sessionStorage.removeItem(USER_KEY);
+        resetAdminVerification();
+        revokeAdminRequests();
+        clearAdminStoredSession();
     }
 
     function persistSession(token, user) {
+        adminSessionGeneration++;
         state.token = token || '';
         state.user = user || null;
-        if (token) sessionStorage.setItem(TOKEN_KEY, token);
-        if (user) sessionStorage.setItem(USER_KEY, JSON.stringify(user));
+        resetAdminVerification();
+        revokeAdminRequests();
+        let serializedUser = null;
+        try { if (state.user) serializedUser = JSON.stringify(state.user); }
+        catch (_) { clearAdminStoredSession(); return false; }
+        const userStored = writeAdminStoredValue(USER_KEY, serializedUser);
+        const tokenStored = writeAdminStoredValue(TOKEN_KEY, state.token || null);
+        if (!userStored || !tokenStored) { clearAdminStoredSession(); return false; }
+        return true;
     }
 
     // -------------------- 登录 --------------------
@@ -212,36 +702,40 @@
             }
 
             const submit = $('#login-submit');
-            setBusy(submit, true);
+            const finishBusy = startAdminBusy(submit);
+            if (!finishBusy) return;
+            let loginSession = captureAdminSession();
             try {
                 const data = await apiRequest('POST', '/api/users/login', { account, password });
-                if (!data || !data.token) {
-                    throw new ApiError('登录响应缺少 token', 0, data);
-                }
-                // 登录响应顶层返回 account/name/avatar，组装为 user 对象（管理操作的 admin_account 取自这里）
-                persistSession(data.token, data.user || { account: data.account, name: data.name, avatar: data.avatar });
+                finishBusy.assertCurrent();
+                const login = parseAdminLogin(data, account);
+                persistSession(login.token, login.user);
+
+                loginSession = captureAdminSession();
 
                 // 校验是否为管理员：尝试访问插件列表（403 → 非管理员）
                 try {
                     await loadPlugins();
+                    assertAdminSession(loginSession);
                     syncUserChip();
                     showView('view-main');
                     toast('登录成功', 'success');
                 } catch (err) {
-                    if (err instanceof ApiError && (err.status === 403 || err.status === 401)) {
-                        clearSession();
+                    if (isStaleSessionError(err) || !loginSession.isCurrent()) return;
+                    if (err instanceof ApiError && err.status === 401) return; // 网络层已清会话并回登录。
+                    if (err instanceof ApiError && err.status === 403) {
                         showView('view-forbidden');
                     } else {
-                        // 其它错误：保留登录态但提示
-                        syncUserChip();
-                        showView('view-main');
-                        toast(err.message || '加载插件列表失败', 'error');
+                        // 尚未核实管理员权限，不能沿用旧管理界面。
+                        showView('view-login');
+                        showError(errBox, adminMessage('admin_verification_unavailable'));
                     }
                 }
             } catch (err) {
+                if (isStaleSessionError(err) || !loginSession.isCurrent()) return;
                 showError(errBox, err.message || '登录失败');
             } finally {
-                setBusy(submit, false);
+                finishBusy();
             }
         });
     }
@@ -266,16 +760,37 @@
         }
     }
 
+    function parseAdminPlugins(data) {
+        if (!data || typeof data !== 'object' || Array.isArray(data) || data.success !== true ||
+            !Array.isArray(data.plugins) || !Number.isSafeInteger(data.total) || data.total !== data.plugins.length ||
+            !data.plugins.every(plugin => plugin && typeof plugin === 'object' && !Array.isArray(plugin) &&
+                typeof plugin.plugin_id === 'string' && plugin.plugin_id.trim())) {
+            throw new ApiError(adminMessage('admin_verification_unavailable'), 0);
+        }
+        return data.plugins;
+    }
     async function loadPlugins() {
+        const session = captureAdminSession();
+        if (!session.token) throw new ApiError(adminMessage('admin_verification_unavailable'), 0);
+        const read = startAdminRead('plugins');
         setListState('loading');
-        const data = await apiRequest('GET', '/api/admin/plugins');
-        const list = Array.isArray(data) ? data
-            : Array.isArray(data && data.plugins) ? data.plugins
-            : Array.isArray(data && data.items) ? data.items
-            : Array.isArray(data && data.data) ? data.data
-            : [];
-        state.plugins = list;
-        applyFilter();
+        try {
+            const data = await apiRequest('GET', '/api/admin/plugins');
+            read.assertCurrent();
+            const list = parseAdminPlugins(data);
+            state.plugins = list;
+            applyFilter();
+            state.adminVerified = true;
+        } catch (err) {
+            read.assertCurrent();
+            if (session.isCurrent() && err instanceof ApiError && err.status === 403) {
+                clearSession();
+                showView('view-forbidden');
+            }
+            throw err;
+        } finally {
+            read.release();
+        }
     }
 
     function applyFilter() {
@@ -373,36 +888,36 @@
     function openModal(id) {
         const el = document.getElementById(id);
         if (!el) return;
+        adminModalGenerations.set(el, {});
         el.hidden = false;
-        document.body.style.overflow = 'hidden';
+        adminModalFocus().open(el);
     }
     function closeModal(id) {
-        const el = document.getElementById(id);
+        if (id === 'modal-key') resetAdminKeyCopy();
+        if (id === 'modal-confirm') state.confirmHandler = null;
+        if (id === 'modal-dispute') adminReadOperations.delete('dispute-detail');
+        const el = document.getElementById(id) || adminModalFocusController?.findMask(id);
         if (!el) return;
+        adminModalGenerations.set(el, {});
         el.hidden = true;
-        if (!$$('.modal-mask').some((m) => !m.hidden)) {
-            document.body.style.overflow = '';
-        }
+        if (adminModalFocusController) adminModalFocusController.close(el);
+        else if (!$$('.modal-mask').some((m) => !m.hidden)) document.body.style.overflow = '';
     }
 
     function bindModalCommon() {
-        // data-close 关闭、点击遮罩关闭、Esc 关闭
+        adminModalFocus().watch();
         document.addEventListener('click', (e) => {
+            const active = adminModalFocusController?.topMask();
+            if (!active) return;
             const closer = e.target.closest('[data-close]');
-            if (closer) {
+            if (closer && active.contains(closer)) {
                 closeModal(closer.dataset.close);
-                return;
-            }
-            if (e.target.classList && e.target.classList.contains('modal-mask')) {
-                closeModal(e.target.id);
-            }
-        });
-        document.addEventListener('keydown', (e) => {
-            if (e.key === 'Escape') {
-                const open = $$('.modal-mask').filter((m) => !m.hidden).pop();
-                if (open) closeModal(open.id);
+            } else if (e.target === active) {
+                closeModal(active.id);
             }
         });
+        document.addEventListener('keydown', (e) => adminModalFocusController?.keydown(e));
+        document.addEventListener('focusin', (e) => adminModalFocusController?.focusInside(e));
     }
 
     // -------------------- 创建插件 --------------------
@@ -415,7 +930,13 @@
         });
         showError($('#form-create-error'), '');
         openModal('modal-create');
-        setTimeout(() => { const el = form.querySelector('[name="plugin_id"]'); if (el) el.focus(); }, 50);
+        const modal = captureAdminModal('modal-create');
+        const session = captureAdminSession();
+        setTimeout(() => {
+            if (!modal.isCurrent() || !session.isCurrent()) return;
+            const el = form.querySelector('[name="plugin_id"]');
+            if (el) el.focus();
+        }, 50);
     }
 
     function bindCreate() {
@@ -450,21 +971,22 @@
             };
 
             const submit = $('#btn-create-submit');
-            setBusy(submit, true);
+            const modal = captureAdminModal('modal-create');
+            const finishBusy = startAdminBusy(submit);
+            if (!finishBusy) return;
             try {
                 const data = await apiRequest('POST', '/api/admin/plugins', payload);
+                finishBusy.assertCurrent();
+                modal.assertCurrent();
+                const result = confirmAdminPluginWrite(data, pluginId, 'create');
                 closeModal('modal-create');
-                const fullKey = data && (data.plugin_key || data.key);
-                if (fullKey) {
-                    showKeyModal(fullKey, '请妥善保存此 Key，关闭后将无法再次查看。');
-                } else {
-                    toast('插件已创建', 'success');
-                }
+                showKeyModal(result.plugin_key, '请妥善保存此 Key，关闭后将无法再次查看。');
                 await loadPlugins();
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent()) return;
                 showError(errBox, err.message || '创建失败');
             } finally {
-                setBusy(submit, false);
+                finishBusy();
             }
         });
     }
@@ -524,16 +1046,22 @@
             };
 
             const submit = $('#btn-edit-submit');
-            setBusy(submit, true);
+            const modal = captureAdminModal('modal-edit');
+            const finishBusy = startAdminBusy(submit);
+            if (!finishBusy) return;
             try {
-                await apiRequest('PUT', '/api/admin/plugins/' + encodeURIComponent(id), payload);
+                const response = await apiRequest('PUT', '/api/admin/plugins/' + encodeURIComponent(id), payload);
+                finishBusy.assertCurrent();
+                modal.assertCurrent();
+                confirmAdminPluginWrite(response, id, 'edit');
                 closeModal('modal-edit');
                 toast('修改已保存', 'success');
                 await loadPlugins();
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent()) return;
                 showError(errBox, err.message || '保存失败');
             } finally {
-                setBusy(submit, false);
+                finishBusy();
             }
         });
     }
@@ -546,14 +1074,11 @@
             message: `轮换后旧 Key 立即失效，确定继续？\n插件：${plugin.name || id}`,
             okText: '确认轮换',
             danger: false,
-            onConfirm: async () => {
+            onConfirm: async (assertCurrent) => {
                 const data = await apiRequest('POST', '/api/admin/plugins/' + encodeURIComponent(id) + '/rotate-key');
-                const fullKey = data && (data.plugin_key || data.key);
-                if (fullKey) {
-                    showKeyModal(fullKey, '新 Key 已生成，请妥善保存。旧 Key 已失效。');
-                } else {
-                    toast('Key 已轮换', 'success');
-                }
+                assertCurrent();
+                const result = confirmAdminPluginWrite(data, id, 'rotate');
+                showKeyModal(result.plugin_key, '新 Key 已生成，请妥善保存。旧 Key 已失效。');
                 await loadPlugins();
             },
         });
@@ -561,16 +1086,20 @@
 
     function togglePlugin(plugin, btn) {
         const id = plugin.plugin_id || plugin.id;
-        setBusy(btn, true);
+        const finishBusy = startAdminBusy(btn);
+        if (!finishBusy) return;
         apiRequest('POST', '/api/admin/plugins/' + encodeURIComponent(id) + '/toggle')
-            .then(async () => {
-                toast(plugin.enabled ? '插件已禁用' : '插件已启用', 'success');
+            .then(async (response) => {
+                finishBusy.assertCurrent();
+                const result = confirmAdminPluginWrite(response, id, 'toggle');
+                toast(result.enabled ? '插件已启用' : '插件已禁用', 'success');
                 await loadPlugins();
             })
             .catch((err) => {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 toast(err.message || '切换状态失败', 'error');
             })
-            .finally(() => setBusy(btn, false));
+            .finally(() => finishBusy());
     }
 
     function deletePlugin(plugin, btn) {
@@ -580,8 +1109,10 @@
             message: `确定删除插件「${plugin.name || id}」？此操作不可逆。`,
             okText: '确认删除',
             danger: true,
-            onConfirm: async () => {
-                await apiRequest('DELETE', '/api/admin/plugins/' + encodeURIComponent(id));
+            onConfirm: async (assertCurrent) => {
+                const response = await apiRequest('DELETE', '/api/admin/plugins/' + encodeURIComponent(id));
+                assertCurrent();
+                confirmAdminPluginWrite(response, id, 'delete');
                 toast('插件已删除', 'success');
                 await loadPlugins();
             },
@@ -593,6 +1124,8 @@
         $('#modal-confirm-title').textContent = title || '请确认';
         $('#modal-confirm-msg').textContent = message || '确认执行此操作？';
         const okBtn = $('#btn-confirm-ok');
+        const previous = adminBusyOperations.get(okBtn);
+        if (previous) previous();
         $('.btn-label', okBtn).textContent = okText || '确定';
         okBtn.classList.toggle('btn-danger', !!danger);
         okBtn.classList.toggle('btn-primary', !danger);
@@ -605,85 +1138,107 @@
         okBtn.addEventListener('click', async () => {
             const handler = state.confirmHandler;
             if (!handler) { closeModal('modal-confirm'); return; }
-            setBusy(okBtn, true);
+            const finishBusy = startAdminBusy(okBtn);
+            if (!finishBusy) return;
             try {
-                await handler();
+                await handler(() => {
+                    finishBusy.assertCurrent();
+                    assertAdminSession({ isCurrent: () => state.confirmHandler === handler });
+                });
+                finishBusy.assertCurrent();
+                if (state.confirmHandler !== handler) return;
                 closeModal('modal-confirm');
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || state.confirmHandler !== handler) return;
                 toast(err.message || '操作失败', 'error');
             } finally {
-                setBusy(okBtn, false);
-                state.confirmHandler = null;
+                if (finishBusy() && state.confirmHandler === handler) state.confirmHandler = null;
             }
         });
     }
 
     // -------------------- Key 展示模态框 --------------------
     function showKeyModal(key, hint) {
+        resetAdminKeyCopy();
         $('#key-display').textContent = key;
-        // 重置复制按钮状态
-        const copyBtn = $('#btn-copy-key');
-        copyBtn.classList.remove('is-copied');
-        $('.btn-label', copyBtn).textContent = '复制 Key';
-        // 自定义提示文案
         const warn = $('.key-warn span');
         if (warn && hint) warn.textContent = hint;
         openModal('modal-key');
     }
 
     function bindKeyModal() {
-        $('#btn-copy-key').addEventListener('click', async () => {
+        resetAdminKeyCopy();
+        const btn = $('#btn-copy-key');
+        btn.addEventListener('click', async () => {
+            const modal = captureAdminModal('modal-key');
+            if (!modal.isCurrent() || adminBusyOperations.has(btn)) return;
+            resetAdminKeyCopy();
+            const finishBusy = startAdminBusy(btn);
+            if (!finishBusy) return;
             const key = $('#key-display').textContent;
-            const ok = await copyToClipboard(key);
-            const btn = $('#btn-copy-key');
-            const label = $('.btn-label', btn);
-            if (ok) {
-                btn.classList.add('is-copied');
-                label.textContent = '已复制';
-                toast('Key 已复制到剪贴板', 'success');
-                setTimeout(() => {
-                    btn.classList.remove('is-copied');
-                    label.textContent = '复制 Key';
-                }, 2000);
-            } else {
-                toast('复制失败，请手动选择文本复制', 'error');
+            const generation = adminKeyCopyGeneration;
+            const session = captureAdminSession();
+            const isCurrent = () => session.isCurrent() && modal.isCurrent() &&
+                generation === adminKeyCopyGeneration && $('#key-display').textContent === key;
+            try {
+                const ok = await copyToClipboard(key, isCurrent);
+                if (!isCurrent() || !finishBusy.isCurrent()) return;
+                const label = $('.btn-label', btn);
+                if (ok) {
+                    btn.classList.add('is-copied');
+                    label.textContent = adminMessage('copied');
+                    toast(adminMessage('key_copied'), 'success');
+                    if (adminKeyCopyTimer !== null) clearTimeout(adminKeyCopyTimer);
+                    adminKeyCopyTimer = setTimeout(() => {
+                        if (!isCurrent()) return;
+                        adminKeyCopyTimer = null;
+                        btn.classList.remove('is-copied');
+                        label.textContent = adminMessage('copy_key');
+                    }, 2000);
+                } else {
+                    toast(adminMessage('copy_failed'), 'error');
+                }
+            } finally {
+                finishBusy();
             }
         });
     }
 
-    async function copyToClipboard(text) {
+    async function copyToClipboard(text, isCurrent = () => true) {
+        if (!isCurrent()) return false;
         try {
             if (navigator.clipboard && window.isSecureContext) {
                 await navigator.clipboard.writeText(text);
                 return true;
             }
-        } catch (e) { /* fallthrough */ }
-        // 兼容回退
+        } catch (_) { /* 尝试当前操作的兼容路径。 */ }
+        if (!isCurrent()) return false;
+        let textarea;
+        const active = document.activeElement;
         try {
-            const ta = document.createElement('textarea');
-            ta.value = text;
-            ta.style.position = 'fixed';
-            ta.style.opacity = '0';
-            document.body.appendChild(ta);
-            ta.select();
-            const ok = document.execCommand('copy');
-            document.body.removeChild(ta);
-            return ok;
-        } catch (e) {
+            textarea = document.createElement('textarea');
+            textarea.value = text;
+            textarea.style.position = 'fixed';
+            textarea.style.opacity = '0';
+            document.body.appendChild(textarea);
+            textarea.select();
+            return document.execCommand('copy');
+        } catch (_) {
             return false;
+        } finally {
+            if (textarea) textarea.remove();
+            if (isCurrent() && active && active.isConnected && typeof active.focus === 'function') {
+                try { active.focus(); } catch (_) { /* 不覆盖复制结果。 */ }
+            }
         }
     }
 
     // -------------------- 🧭 页签切换 --------------------
     const TAB_TITLES = {
-        plugins: '第三方插件',
-        withdrawals: '提现管理',
-        disputes: '申诉仲裁',
-        config: '版本管理',
-        broadcast: '公告与广告',
-        promptcats: '提示词分类',
-        scripts: '脚本执行'
+        plugins: 'tab_plugins', withdrawals: 'tab_withdrawals', disputes: 'tab_disputes',
+        config: 'tab_config', broadcast: 'tab_broadcast', promptcats: 'tab_promptcats', scripts: 'script_title'
     };
+    const TAB_ICONS = { plugins: '🔌', withdrawals: '💰', disputes: '⚖️', config: '🏷️', broadcast: '📢', promptcats: '🗂️' };
 
     // 管理操作所需的 admin_account（后端实际以 Token 鉴权，此字段仅为请求体必填���）
     function adminAccount() {
@@ -692,18 +1247,20 @@
     }
 
     function switchTab(name) {
+        if (!Object.hasOwn(TAB_TITLES, name)) return;
         state.activeTab = name;
         $$('.tab-item').forEach((btn) => {
             const active = btn.dataset.tab === name;
             btn.classList.toggle('is-active', active);
             btn.setAttribute('aria-selected', String(active));
+            btn.tabIndex = active ? 0 : -1;
         });
         Object.keys(TAB_TITLES).forEach((key) => {
             const panel = document.getElementById('panel-' + key);
             if (panel) panel.hidden = (key !== name);
         });
         const crumb = $('.crumbs-current');
-        if (crumb) crumb.textContent = TAB_TITLES[name];
+        if (crumb) crumb.textContent = adminMessage(TAB_TITLES[name]);
         // 管理操作低频，每次切换拉取最新数据保证时效
         if (name === 'withdrawals') refreshWithdrawals();
         if (name === 'disputes') refreshDisputes();
@@ -713,9 +1270,34 @@
     }
 
     function bindTabs() {
-        $$('.tab-item').forEach((btn) => {
-            btn.addEventListener('click', () => switchTab(btn.dataset.tab));
-        });
+        const tabs = $$('.tab-item');
+        const navigation = $('.tab-bar');
+        navigation.setAttribute('aria-label', adminMessage('tab_navigation'));
+        const restoreTabStop = () => tabs.forEach(tab => { tab.tabIndex = tab.dataset.tab === state.activeTab ? 0 : -1; });
+        for (const btn of tabs) {
+            const name = btn.dataset.tab;
+            btn.textContent = name === 'scripts' ? adminMessage('script_tab') : TAB_ICONS[name] + ' ' + adminMessage(TAB_TITLES[name]);
+            btn.addEventListener('click', () => switchTab(name));
+            btn.addEventListener('keydown', (event) => {
+                if (event.isComposing || event.altKey || event.ctrlKey || event.metaKey) return;
+                const index = tabs.indexOf(btn);
+                let next;
+                if (event.key === 'ArrowRight') next = (index + 1) % tabs.length;
+                else if (event.key === 'ArrowLeft') next = (index - 1 + tabs.length) % tabs.length;
+                else if (event.key === 'Home') next = 0;
+                else if (event.key === 'End') next = tabs.length - 1;
+                else return;
+                event.preventDefault();
+                tabs.forEach((tab, position) => { tab.tabIndex = position === next ? 0 : -1; });
+                tabs[next].focus();
+            });
+            btn.addEventListener('blur', (event) => {
+                if (!tabs.includes(event.relatedTarget)) restoreTabStop();
+            });
+        }
+        restoreTabStop();
+        const crumb = $('.crumbs-current');
+        if (crumb) crumb.textContent = adminMessage(TAB_TITLES[state.activeTab]);
     }
 
     // -------------------- 💰 提现管理 --------------------
@@ -733,13 +1315,18 @@
     }
 
     async function refreshWithdrawals() {
+        const read = startAdminRead('withdrawals');
         try {
             setWithdrawState('loading');
             const data = await apiRequest('GET', '/api/admin/withdrawals?status=' + state.withdrawStatus);
-            renderWithdrawList(Array.isArray(data && data.data) ? data.data : []);
+            if (!read.isCurrent()) return;
+            renderWithdrawList(parseAdminList(data, 'withdrawals'));
         } catch (err) {
+            if (isStaleSessionError(err) || !read.isCurrent()) return;
             if (err instanceof ApiError && err.status === 401) return; // 已自动跳回登录
             setWithdrawState('error', err.message || '加载失败');
+        } finally {
+            read.release();
         }
     }
 
@@ -798,14 +1385,17 @@
             message: `确认已向 ${w.account || '该用户'} 打款 ${Math.abs(w.amount || 0)} 积分对应的金额？\n订单号：${orderId}`,
             okText: '确认打款',
             danger: false,
-            onConfirm: async () => {
-                setBusy(btn, true);
+            onConfirm: async (assertCurrent) => {
+                const finishBusy = startAdminBusy(btn);
+                if (!finishBusy) return;
                 try {
-                    await apiRequest('POST', '/api/admin/withdrawals/' + encodeURIComponent(w.tx_id) + '/complete', { payment_order_id: orderId });
+                    const response = await apiRequest('POST', '/api/admin/withdrawals/' + encodeURIComponent(w.tx_id) + '/complete', { payment_order_id: orderId });
+                    assertCurrent();
+                    confirmAdminStatusWrite(response);
                     toast('打款已确认', 'success');
                     await refreshWithdrawals();
                 } finally {
-                    setBusy(btn, false);
+                    finishBusy();
                 }
             }
         });
@@ -844,16 +1434,21 @@
     }
 
     async function refreshDisputes() {
+        const read = startAdminRead('disputes');
         try {
             setDisputeState('loading');
             const url = state.disputeStatus
                 ? '/api/admin/disputes?status=' + state.disputeStatus
                 : '/api/admin/disputes';
             const data = await apiRequest('GET', url);
-            renderDisputeList(Array.isArray(data && data.data) ? data.data : []);
+            if (!read.isCurrent()) return;
+            renderDisputeList(parseAdminList(data, 'disputes'));
         } catch (err) {
+            if (isStaleSessionError(err) || !read.isCurrent()) return;
             if (err instanceof ApiError && err.status === 401) return;
             setDisputeState('error', err.message || '加载失败');
+        } finally {
+            read.release();
         }
     }
 
@@ -892,16 +1487,21 @@
     }
 
     async function openDisputeModal(disputeId) {
+        const read = startAdminRead('dispute-detail');
         openModal('modal-dispute');
         const body = $('#dispute-detail-body');
         body.innerHTML = '<div class="state-block"><div class="spinner-lg" aria-hidden="true"></div><p>正在加载申诉详情…</p></div>';
         try {
             const res = await apiRequest('GET', '/api/disputes/' + encodeURIComponent(disputeId));
-            const dispute = (res && res.data) || res || {};
+            if (!read.isCurrent()) return;
+            const dispute = parseAdminDispute(res, disputeId);
             renderDisputeDetail(body, dispute);
         } catch (err) {
+            if (isStaleSessionError(err) || !read.isCurrent()) return;
             body.innerHTML = '<div class="state-block state-error"><div class="empty-mark">!</div><h3>加载失败</h3><p>' +
                 escapeHtml(err.message || '请稍后重试。') + '</p></div>';
+        } finally {
+            read.release();
         }
     }
 
@@ -950,12 +1550,12 @@
     function renderResolveForm() {
         return `
             <div class="resolve-box">
-                <div class="resolve-box-title">🔨 裁决操作</div>
-                <div class="resolve-options">
+                <div class="resolve-box-title" id="resolve-title">🔨 裁决操作</div>
+                <div class="resolve-options" role="radiogroup" aria-labelledby="resolve-title">
                     ${RESOLUTION_OPTIONS.map((opt) => `
                         <label class="resolve-option" data-value="${opt.value}">
                             <input type="radio" name="resolution" value="${opt.value}">
-                            <span class="resolve-option-icon">${opt.icon}</span>
+                            <span class="resolve-option-icon" aria-hidden="true">${opt.icon}</span>
                             <span class="resolve-option-text">
                                 <strong>${opt.label}</strong>
                                 ${opt.desc ? `<em>${opt.desc}</em>` : ''}
@@ -963,7 +1563,7 @@
                         </label>`).join('')}
                 </div>
                 <div class="split-row" id="split-row" hidden>
-                    <span>申诉方分成</span>
+                    <label for="resolve-ratio">申诉方分成</label>
                     <input type="range" id="resolve-ratio" min="0" max="100" value="50">
                     <strong id="resolve-ratio-text">50% : 50%</strong>
                 </div>
@@ -992,6 +1592,8 @@
     }
 
     function bindResolveForm(body, dispute) {
+        const modal = captureAdminModal('modal-dispute');
+        const session = captureAdminSession();
         let selected = null;
         const options = $$('.resolve-option', body);
         const splitRow = $('#split-row', body);
@@ -1000,12 +1602,12 @@
         const submitBtn = $('#btn-resolve', body);
 
         options.forEach((opt) => {
-            opt.addEventListener('click', () => {
+            const radio = opt.querySelector('input');
+            radio.addEventListener('change', () => {
+                if (!radio.checked || !modal.isCurrent() || !session.isCurrent()) return;
                 options.forEach((o) => o.classList.remove('selected'));
                 opt.classList.add('selected');
-                const radio = opt.querySelector('input');
-                if (radio) radio.checked = true;
-                selected = opt.dataset.value;
+                selected = radio.value;
                 splitRow.hidden = selected !== 'split';
                 submitBtn.disabled = false;
             });
@@ -1015,21 +1617,30 @@
             ratioText.textContent = `${v}% : ${100 - v}%`;
         });
         submitBtn.addEventListener('click', async () => {
-            if (!selected) return;
+            if (!selected || !modal.isCurrent() || !session.isCurrent()) return;
             const note = $('#resolve-note', body).value.trim();
-            setBusy(submitBtn, true);
+            const finishBusy = startAdminBusy(submitBtn);
+            if (!finishBusy) return;
             try {
                 // ⚠️ 后端 resolve 端点为裸标量参数（FastAPI 按 query 解析），必须走 query 传参而非 JSON body
                 const params = new URLSearchParams({ resolution: selected });
-                if (selected === 'split') params.set('ratio', String(parseInt(ratioInput.value, 10) || 50));
+                if (selected === 'split') {
+                    const ratio = parseInt(ratioInput.value, 10);
+                    params.set('ratio', String(Number.isNaN(ratio) ? 50 : ratio));
+                }
                 if (note) params.set('note', note);
-                await apiRequest('POST', '/api/admin/disputes/' + encodeURIComponent(dispute.id) + '/resolve?' + params.toString());
+                const response = await apiRequest('POST', '/api/admin/disputes/' + encodeURIComponent(dispute.id) + '/resolve?' + params.toString());
+                finishBusy.assertCurrent();
+                confirmAdminStatusWrite(response);
+                modal.assertCurrent();
                 toast('裁决已生效', 'success');
                 closeModal('modal-dispute');
                 refreshDisputes();
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent()) return;
                 toast(err.message || '裁决失败', 'error');
-                setBusy(submitBtn, false);
+            } finally {
+                finishBusy();
             }
         });
     }
@@ -1057,14 +1668,19 @@
     }
 
     async function refreshPromptCats() {
+        const read = startAdminRead('promptcats');
         try {
             setPcatState('loading');
             const res = await apiRequest('GET', '/api/prompt-categories?prompt_type=' + state.pcatType);
-            const list = Array.isArray(res && res.data) ? res.data : [];
+            if (!read.isCurrent()) return;
+            const list = parseAdminList(res, 'categories');
             renderPromptCats(list);
         } catch (err) {
+            if (isStaleSessionError(err) || !read.isCurrent()) return;
             if (err instanceof ApiError && err.status === 401) return; // 已自动跳回登录
             setPcatState('error', err.message || '加载失败');
+        } finally {
+            read.release();
         }
     }
 
@@ -1095,13 +1711,16 @@
     }
 
     function confirmDeletePromptCat(cat) {
+        const promptType = state.pcatType;
         confirmAction({
             title: '删除分类',
-            message: `确定删除${PCAT_TYPE_LABELS[state.pcatType] || ''}分类「${cat}」？\n已使用该分类的提示词不受影响。`,
+            message: `确定删除${PCAT_TYPE_LABELS[promptType] || ''}分类「${cat}」？\n已使用该分类的提示词不受影响。`,
             okText: '确认删除',
             danger: true,
-            onConfirm: async () => {
-                await apiRequest('DELETE', '/api/prompt-categories?prompt_type=' + state.pcatType + '&name=' + encodeURIComponent(cat));
+            onConfirm: async (assertCurrent) => {
+                const response = await apiRequest('DELETE', '/api/prompt-categories?prompt_type=' + promptType + '&name=' + encodeURIComponent(cat));
+                assertCurrent();
+                confirmAdminStatusWrite(response);
                 toast('分类已删除', 'success');
                 await refreshPromptCats();
             }
@@ -1109,9 +1728,11 @@
     }
 
     function bindPromptCats() {
+        let categoryRevision = 0;
         $('#btn-pcat-refresh').addEventListener('click', () => refreshPromptCats());
         $$('#pcat-type-tabs .filter-tab').forEach((tab) => {
             tab.addEventListener('click', () => {
+                categoryRevision++;
                 state.pcatType = tab.dataset.type;
                 $$('#pcat-type-tabs .filter-tab').forEach((t) => t.classList.toggle('is-active', t === tab));
                 refreshPromptCats();
@@ -1119,20 +1740,29 @@
         });
         const addBtn = $('#btn-pcat-add');
         const nameInput = $('#pcat-name');
+        nameInput.addEventListener('input', () => { categoryRevision++; });
+        nameInput.addEventListener('change', () => { categoryRevision++; });
         const submitAdd = async () => {
-            const name = nameInput.value.trim();
+            const rawName = nameInput.value;
+            const name = rawName.trim();
+            const promptType = state.pcatType;
+            const revision = categoryRevision;
             if (!name) { toast('请输入分类名称', 'warning'); nameInput.focus(); return; }
             if (name.length > 8) { toast('分类名称不能超过 8 个字', 'warning'); return; }
-            setBusy(addBtn, true);
+            const finishBusy = startAdminBusy(addBtn);
+            if (!finishBusy) return;
             try {
-                await apiRequest('POST', '/api/prompt-categories', { prompt_type: state.pcatType, name });
-                nameInput.value = '';
+                const response = await apiRequest('POST', '/api/prompt-categories', { prompt_type: promptType, name });
+                finishBusy.assertCurrent();
+                confirmAdminStatusWrite(response);
+                if (categoryRevision === revision && state.pcatType === promptType && nameInput.value === rawName) nameInput.value = '';
                 toast('分类已添加', 'success');
                 await refreshPromptCats();
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 toast(err.message || '添加分类失败', 'error');
             } finally {
-                setBusy(addBtn, false);
+                finishBusy();
             }
         };
         addBtn.addEventListener('click', submitAdd);
@@ -1149,10 +1779,24 @@
         node.innerHTML = `<span class="toast-icon">${icon}</span><span class="toast-msg"></span>`;
         node.querySelector('.toast-msg').textContent = message;
         container.appendChild(node);
-        setTimeout(() => {
-            node.classList.add('is-leaving');
-            setTimeout(() => { if (node.parentNode) node.parentNode.removeChild(node); }, 220);
-        }, type === 'error' ? 4200 : 2800);
+        let displayTimer = null, leaveTimer = null;
+        const release = () => {
+            if (adminToastOperations.get(node) !== release) return;
+            adminToastOperations.delete(node);
+            if (displayTimer !== null) clearTimeout(displayTimer);
+            if (leaveTimer !== null) clearTimeout(leaveTimer);
+            if (node.parentNode) node.parentNode.removeChild(node);
+        };
+        adminToastOperations.set(node, release);
+        try {
+            displayTimer = setTimeout(() => {
+                if (adminToastOperations.get(node) !== release) return;
+                displayTimer = null;
+                node.classList.add('is-leaving');
+                try { leaveTimer = setTimeout(release, 220); }
+                catch (_) { release(); }
+            }, type === 'error' ? 4200 : 2800);
+        } catch (_) { release(); }
     }
 
     // -------------------- 🏷️ 版本管理 --------------------
@@ -1168,29 +1812,64 @@
         $('#ver-preview').textContent = `版本预览：V${major}.${minor}.${patch} · ${STAGE_LABELS[stage] || stage}`;
     }
 
+    let versionConfigGeneration = 0;
+    let versionConfigConfirmed = false;
+    let versionSavePending = false;
+    let versionEditRevision = 0;
+
+    function readVersionDraft(form) {
+        return Object.fromEntries(['stage', 'major', 'minor', 'patch'].map(key => [key, String(form.querySelector(`[name="${key}"]`).value)]));
+    }
     async function loadVersionConfig() {
+        const generation = ++versionConfigGeneration;
+        const btn = $('#btn-version-save');
+        versionConfigConfirmed = false;
+        btn.disabled = true;
+        if (versionSavePending) {
+            showError($('#form-version-error'), adminMessage('config_read_unavailable'));
+            return;
+        }
+        const form = $('#form-version');
+        const draft = readVersionDraft(form);
+        const revision = versionEditRevision;
         try {
             showError($('#form-version-error'), '');
             const res = await apiRequest('GET', '/api/admin/config/project_version');
-            const cfg = (res && res.data) || {};
-            const form = $('#form-version');
-            form.querySelector('[name="stage"]').value = cfg.stage || 'beta';
-            form.querySelector('[name="major"]').value = cfg.major ?? 2;
-            form.querySelector('[name="minor"]').value = cfg.minor ?? 0;
-            form.querySelector('[name="patch"]').value = cfg.patch ?? 0;
-            updateVerPreview();
+            if (generation !== versionConfigGeneration) return;
+            if (!res || res.status !== 'success' || !Object.prototype.hasOwnProperty.call(res, 'data')) {
+                throw new ApiError(adminMessage('config_read_unavailable'), 503);
+            }
+            const cfg = res.data === null ? {} : res.data;
+            if (!cfg || typeof cfg !== 'object' || Array.isArray(cfg)) {
+                throw new ApiError(adminMessage('config_read_unavailable'), 503);
+            }
+            const next = { stage: cfg.stage ?? 'beta', major: cfg.major ?? 2, minor: cfg.minor ?? 0, patch: cfg.patch ?? 0 };
+            if (typeof next.stage !== 'string' || !Object.prototype.hasOwnProperty.call(STAGE_LABELS, next.stage) ||
+                !['major', 'minor', 'patch'].every(key => Number.isSafeInteger(next[key]) && next[key] >= 0)) {
+                throw new ApiError(adminMessage('config_read_unavailable'), 503);
+            }
+            const current = readVersionDraft(form);
+            if (revision === versionEditRevision && Object.keys(draft).every(key => draft[key] === current[key])) {
+                for (const key of ['stage', 'major', 'minor', 'patch']) form.querySelector(`[name="${key}"]`).value = next[key];
+                updateVerPreview();
+            }
+            versionConfigConfirmed = true;
+            if (btn.getAttribute('aria-busy') !== 'true') btn.disabled = false;
         } catch (err) {
+            if (isStaleSessionError(err)) return;
+            if (generation !== versionConfigGeneration) return;
             if (!(err instanceof ApiError && err.status === 401)) {
-                showError($('#form-version-error'), err.message || '加载当前版本配置失败');
+                showError($('#form-version-error'), adminMessage('config_read_unavailable'));
             }
         }
     }
 
     function bindVersion() {
         const form = $('#form-version');
-        ['change', 'input'].forEach((evt) => form.addEventListener(evt, updateVerPreview));
+        ['change', 'input'].forEach((evt) => form.addEventListener(evt, () => { versionEditRevision++; updateVerPreview(); }));
         form.addEventListener('submit', async (event) => {
             event.preventDefault();
+            if (!versionConfigConfirmed || versionSavePending) return;
             showError($('#form-version-error'), '');
             const payload = {
                 stage: form.querySelector('[name="stage"]').value,
@@ -1199,33 +1878,48 @@
                 patch: toIntOr(form.querySelector('[name="patch"]').value, 0)
             };
             const btn = $('#btn-version-save');
-            setBusy(btn, true);
+            const finishBusy = startAdminBusy(btn);
+            if (!finishBusy) return;
+            versionSavePending = true;
             try {
-                await apiRequest('PUT', '/api/admin/config/project_version', payload);
+                const response = await apiRequest('PUT', '/api/admin/config/project_version', payload);
+                finishBusy.assertCurrent();
+                confirmAdminStatusWrite(response);
                 toast(`版本已更新为 V${payload.major}.${payload.minor}.${payload.patch}（${STAGE_LABELS[payload.stage] || payload.stage}）`, 'success');
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 showError($('#form-version-error'), err.message || '版本更新失败');
             } finally {
-                setBusy(btn, false);
+                versionSavePending = false;
+                finishBusy();
+                if (!versionConfigConfirmed) btn.disabled = true;
             }
         });
     }
 
     // -------------------- 📢 公告与广告 --------------------
+    let bannerStatusGeneration = 0;
     async function refreshBannerStatus() {
+        const generation = ++bannerStatusGeneration;
         const badge = $('#banner-status-badge');
         try {
-            const res = await apiRequest('GET', '/api/public/banner_config');
-            const data = res && res.data;
-            if (data && data.enabled && data.bannerImage) {
-                badge.textContent = '广告展示中';
+            const res = await apiRequest('GET', '/api/admin/config/banner_config');
+            if (generation !== bannerStatusGeneration) return;
+            if (!res || res.status !== 'success' || !Object.prototype.hasOwnProperty.call(res, 'data')) throw new Error('Invalid config response');
+            const data = res.data;
+            if (data !== null && (!data || typeof data !== 'object' || Array.isArray(data) || typeof data.enabled !== 'boolean')) throw new Error('Invalid banner state');
+            if (data && data.enabled) {
+                if (typeof data.bannerImage !== 'string' || !data.bannerImage.trim()) throw new Error('Invalid banner image');
+                badge.textContent = adminMessage('banner_active');
                 badge.className = 'badge is-on';
             } else {
-                badge.textContent = '无活跃广告';
+                badge.textContent = adminMessage('banner_inactive');
                 badge.className = 'badge is-off';
             }
         } catch (err) {
-            badge.textContent = '状态未知';
+            if (isStaleSessionError(err)) return;
+            if (generation !== bannerStatusGeneration) return;
+            badge.textContent = adminMessage('banner_unknown');
             badge.className = 'badge';
         }
     }
@@ -1236,7 +1930,7 @@
         img.hidden = false;
     }
 
-    function bindUploadButton(btnId, inputId, previewId, onDone) {
+    function bindUploadButton(btnId, inputId, previewId, onDone, onBusyChange) {
         const btn = document.getElementById(btnId);
         const input = document.getElementById(inputId);
         btn.addEventListener('click', () => input.click());
@@ -1245,116 +1939,172 @@
             if (!file) return;
             const label = $('.btn-label', btn);
             const oldText = label.textContent;
-            label.textContent = '上传中…';
-            setBusy(btn, true);
+            const finishBusy = startAdminBusy(btn, () => {
+                label.textContent = oldText;
+                if (onBusyChange) onBusyChange(finishBusy, false);
+            });
+            if (!finishBusy) return;
+            if (onBusyChange) onBusyChange(finishBusy, true);
+            label.textContent = adminMessage('image_uploading');
             try {
                 const fd = new FormData();
                 fd.append('file', file);
                 fd.append('file_type', 'banner');
                 const res = await apiUpload('/api/upload', fd);
-                if (res && res.url) {
-                    onDone(res.url);
-                    setPreviewImg(previewId, res.url);
-                    toast('图片上传成功', 'success');
-                } else {
-                    throw new ApiError('上传响应缺少图片地址', 0, res);
-                }
+                finishBusy.assertCurrent();
+                const url = parseAdminUpload(res);
+                onDone(url);
+                setPreviewImg(previewId, url);
+                toast(adminMessage('image_upload_success'), 'success');
             } catch (err) {
-                toast(err.message || '图片上传失败', 'error');
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
+                toast(err.message || adminMessage('image_upload_failed'), 'error');
             } finally {
-                label.textContent = oldText;
-                setBusy(btn, false);
-                input.value = '';
+                if (finishBusy()) input.value = '';
             }
         });
     }
 
     function bindBroadcast() {
+        const bannerSave = $('#btn-banner-save');
+        const bannerUploads = new Set();
+        let bannerSaveBeforeUpload = null;
+        const syncBannerSave = () => {
+            const saving = adminBusyOperations.get(bannerSave);
+            if (bannerUploads.size) {
+                if (bannerSaveBeforeUpload === null) bannerSaveBeforeUpload = saving ? saving.initialDisabled : bannerSave.disabled;
+                bannerSave.disabled = true;
+            } else if (bannerSaveBeforeUpload !== null) {
+                const disabled = bannerSaveBeforeUpload;
+                bannerSaveBeforeUpload = null;
+                if (!saving) bannerSave.disabled = disabled;
+            }
+        };
+        const onUploadBusy = (operation, active) => {
+            if (active) bannerUploads.add(operation);
+            else if (!bannerUploads.delete(operation)) return;
+            syncBannerSave();
+        };
+        const announcement = $('#ann-content');
+        let announcementRevision = 0;
+        announcement.addEventListener('input', () => { announcementRevision++; });
+        announcement.addEventListener('change', () => { announcementRevision++; });
+        let bannerRevision = 0;
+        for (const id of ['banner-enabled', 'banner-title', 'banner-desc', 'banner-detail-content', 'banner-img-file', 'banner-detail-img-file']) {
+            const element = $('#' + id);
+            element.addEventListener('input', () => { bannerRevision++; });
+            element.addEventListener('change', () => { bannerRevision++; });
+        }
+        const readBannerDraft = () => ({ enabled: $('#banner-enabled').checked,
+            bannerImage: state.bannerImageUrl, detailImage: state.bannerDetailImageUrl,
+            title: $('#banner-title').value, description: $('#banner-desc').value,
+            detailContent: $('#banner-detail-content').value });
         // 📢 公告发布（二次确认，防误发）
         $('#btn-ann-publish').addEventListener('click', () => {
-            const content = $('#ann-content').value.trim();
+            const rawContent = announcement.value;
+            const content = rawContent.trim();
+            const revision = announcementRevision;
             if (!content) { toast('请输入公告内容', 'warning'); return; }
             confirmAction({
                 title: '发布全站公告',
                 message: `公告将推送给全体用户，确认发布？\n\n${content.slice(0, 80)}${content.length > 80 ? '…' : ''}`,
                 okText: '确认发布',
                 danger: true,
-                onConfirm: async () => {
-                    await apiRequest('POST', '/api/system/announcement', { admin_account: adminAccount(), content });
-                    $('#ann-content').value = '';
+                onConfirm: async (assertCurrent) => {
+                    const response = await apiRequest('POST', '/api/system/announcement', { admin_account: adminAccount(), content });
+                    assertCurrent();
+                    confirmAdminStatusWrite(response);
+                    if (announcementRevision === revision && announcement.value === rawContent) announcement.value = '';
                     toast('公告已发布', 'success');
                 }
             });
         });
 
         // 📰 广告图片上传
-        bindUploadButton('btn-banner-img', 'banner-img-file', 'banner-img-preview', (url) => { state.bannerImageUrl = url; });
-        bindUploadButton('btn-detail-img', 'banner-detail-img-file', 'banner-detail-img-preview', (url) => { state.bannerDetailImageUrl = url; });
+        bindUploadButton('btn-banner-img', 'banner-img-file', 'banner-img-preview', (url) => { bannerRevision++; state.bannerImageUrl = url; }, onUploadBusy);
+        bindUploadButton('btn-detail-img', 'banner-detail-img-file', 'banner-detail-img-preview', (url) => { bannerRevision++; state.bannerDetailImageUrl = url; }, onUploadBusy);
 
         // 💾 保存广告配置
-        $('#btn-banner-save').addEventListener('click', async () => {
-            const enabled = $('#banner-enabled').checked;
-            if (enabled && !state.bannerImageUrl) {
+        bannerSave.addEventListener('click', async () => {
+            if (bannerUploads.size) {
+                toast(adminMessage('banner_upload_pending'), 'warning');
+                return;
+            }
+            const draft = readBannerDraft();
+            const revision = bannerRevision;
+            if (draft.enabled && !draft.bannerImage) {
                 toast('启用广告时必须上传横幅图片', 'warning');
                 return;
             }
-            const config = {
-                enabled: enabled,
-                bannerImage: state.bannerImageUrl,
-                detailImage: state.bannerDetailImageUrl,
-                title: $('#banner-title').value.trim(),
-                description: $('#banner-desc').value.trim(),
-                detailContent: $('#banner-detail-content').value.trim()
-            };
+            const config = { ...draft, title: draft.title.trim(), description: draft.description.trim(),
+                detailContent: draft.detailContent.trim() };
             const btn = $('#btn-banner-save');
-            setBusy(btn, true);
+            const finishBusy = startAdminBusy(btn, syncBannerSave);
+            if (!finishBusy) return;
             try {
-                await apiRequest('PUT', '/api/admin/config/banner_config', config);
+                const response = await apiRequest('PUT', '/api/admin/config/banner_config', config);
+                finishBusy.assertCurrent();
+                confirmAdminStatusWrite(response);
                 toast('广告配置已保存', 'success');
-                // 保存成功后清空表单并刷新状态（与本地端原行为一致）
-                $('#banner-enabled').checked = false;
-                state.bannerImageUrl = '';
-                state.bannerDetailImageUrl = '';
-                ['banner-img-preview', 'banner-detail-img-preview'].forEach((id) => {
-                    const img = document.getElementById(id);
-                    img.src = '';
-                    img.hidden = true;
-                });
-                $('#banner-title').value = '';
-                $('#banner-desc').value = '';
-                $('#banner-detail-content').value = '';
+                const current = readBannerDraft();
+                if (bannerRevision === revision && Object.keys(draft).every(key => current[key] === draft[key])) {
+                    $('#banner-enabled').checked = false;
+                    state.bannerImageUrl = '';
+                    state.bannerDetailImageUrl = '';
+                    ['banner-img-preview', 'banner-detail-img-preview'].forEach((id) => {
+                        const img = document.getElementById(id);
+                        img.src = '';
+                        img.hidden = true;
+                    });
+                    $('#banner-title').value = '';
+                    $('#banner-desc').value = '';
+                    $('#banner-detail-content').value = '';
+                }
                 refreshBannerStatus();
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 toast(err.message || '保存失败', 'error');
             } finally {
-                setBusy(btn, false);
+                finishBusy();
             }
         });
     }
 
     // -------------------- 🖥️ 脚本执行 --------------------
     function bindScripts() {
-        $('#btn-script-run').addEventListener('click', async () => {
+        for (const element of document.querySelectorAll('[data-admin-script-text]')) {
+            element.textContent = adminMessage(element.dataset.adminScriptText);
+        }
+        $('#script-name').setAttribute('placeholder', adminMessage('script_name_placeholder'));
+        const result = $('#script-result');
+        result.setAttribute('aria-label', adminMessage('script_output_label'));
+        result.textContent = adminMessage('script_waiting');
+        $('#form-script').addEventListener('submit', async (event) => {
+            event.preventDefault();
+            const btn = $('#btn-script-run');
+            if (adminBusyOperations.has(btn)) return;
             const name = $('#script-name').value.trim();
-            const result = $('#script-result');
             if (!name) {
-                result.textContent = '❌ 请输入脚本名称';
+                result.textContent = '❌ ' + adminMessage('script_name_required');
                 result.classList.add('is-error');
                 return;
             }
-            const btn = $('#btn-script-run');
-            setBusy(btn, true);
+            const finishBusy = startAdminBusy(btn);
+            if (!finishBusy) return;
             result.classList.remove('is-error');
-            result.textContent = `⚡ 正在执行 ${name} …`;
+            result.textContent = adminMessage('script_running');
             try {
                 const res = await apiRequest('POST', '/api/admin/run-script', { admin_account: adminAccount(), script_name: name });
-                const output = (res && (res.output || res.message)) || JSON.stringify(res, null, 2);
-                result.textContent = `✅ 执行完成：\n${output}`;
+                finishBusy.assertCurrent();
+                const outcome = parseAdminScriptResult(res);
+                result.textContent = `${outcome.succeeded ? '✅ ' + adminMessage('script_completed') : '❌ ' + adminMessage('script_failed')}:\n${outcome.output}`;
+                result.classList.toggle('is-error', !outcome.succeeded);
             } catch (err) {
-                result.textContent = `❌ 执行失败：\n${err.message}`;
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
+                result.textContent = `❌ ${adminMessage('script_failed')}:\n${err.message}`;
                 result.classList.add('is-error');
             } finally {
-                setBusy(btn, false);
+                finishBusy();
             }
         });
     }
@@ -1377,23 +2127,27 @@
 
         $('#btn-refresh').addEventListener('click', async () => {
             const btn = $('#btn-refresh');
-            setBusy(btn, true);
+            const finishBusy = startAdminBusy(btn);
+            if (!finishBusy) return;
             try {
                 await loadPlugins();
+                finishBusy.assertCurrent();
                 toast('已刷新', 'success');
             } catch (err) {
+                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 if (!(err instanceof ApiError && err.status === 401)) {
                     setListState('error', err.message || '加载失败');
                     toast(err.message || '加载失败', 'error');
                 }
             } finally {
-                setBusy(btn, false);
+                finishBusy();
             }
         });
 
         $('#btn-retry').addEventListener('click', async () => {
             try { await loadPlugins(); }
             catch (err) {
+                if (isStaleSessionError(err)) return;
                 if (!(err instanceof ApiError && err.status === 401)) {
                     setListState('error', err.message || '加载失败');
                 }
@@ -1433,17 +2187,22 @@
         bindScripts();
 
         if (state.token) {
-            // 已有 token，尝试直接进入主界面
-            syncUserChip();
-            showView('view-main');
-            loadPlugins().catch((err) => {
+            // 已有凭据也必须先由管理员列表接口确认，不能先显示管理内容。
+            showView('view-login');
+            const session = captureAdminSession();
+            loadPlugins().then(() => {
+                assertAdminSession(session);
+                syncUserChip();
+                showView('view-main');
+            }).catch((err) => {
+                if (isStaleSessionError(err) || !session.isCurrent()) return;
                 if (err instanceof ApiError && (err.status === 401)) return; // 已自动跳转
                 if (err instanceof ApiError && err.status === 403) {
-                    clearSession();
                     showView('view-forbidden');
                     return;
                 }
-                setListState('error', err.message || '加载失败');
+                showView('view-login');
+                showError($('#login-error'), adminMessage('admin_verification_unavailable'));
             });
         } else {
             showView('view-login');

管理界面/index.html

@@ -98,18 +98,18 @@
 
         <main class="main-shell">
             <!-- 🧭 功能页签导航：插件 / 提现 / 仲裁 / 版本 / 公告广告 / 提示词分类 / 脚本 -->
-            <nav class="tab-bar" role="tablist" aria-label="功能导航">
-                <button type="button" class="tab-item is-active" role="tab" aria-selected="true" data-tab="plugins">🔌 第三方插件</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="withdrawals">💰 提现管理</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="disputes">⚖️ 申诉仲裁</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="config">🏷️ 版本管理</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="broadcast">📢 公告与广告</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="promptcats">🗂️ 提示词分类</button>
-                <button type="button" class="tab-item" role="tab" aria-selected="false" data-tab="scripts">🖥️ 脚本执行</button>
+            <nav class="tab-bar" role="tablist" aria-orientation="horizontal">
+                <button type="button" class="tab-item is-active" role="tab" id="tab-plugins" aria-controls="panel-plugins" tabindex="0" aria-selected="true" data-tab="plugins"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-withdrawals" aria-controls="panel-withdrawals" tabindex="-1" aria-selected="false" data-tab="withdrawals"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-disputes" aria-controls="panel-disputes" tabindex="-1" aria-selected="false" data-tab="disputes"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-config" aria-controls="panel-config" tabindex="-1" aria-selected="false" data-tab="config"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-broadcast" aria-controls="panel-broadcast" tabindex="-1" aria-selected="false" data-tab="broadcast"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-promptcats" aria-controls="panel-promptcats" tabindex="-1" aria-selected="false" data-tab="promptcats"></button>
+                <button type="button" class="tab-item" role="tab" id="tab-scripts" aria-controls="panel-scripts" tabindex="-1" aria-selected="false" data-tab="scripts" data-admin-script-text="script_tab"></button>
             </nav>
 
             <!-- ============ 页签 1：第三方插件（原有功能） ============ -->
-            <div class="tab-panel" id="panel-plugins" role="tabpanel">
+            <div class="tab-panel" id="panel-plugins" role="tabpanel" aria-labelledby="tab-plugins" tabindex="0">
             <section class="page-head">
                 <div class="page-head-text">
                     <h1>第三方插件</h1>
@@ -165,7 +165,7 @@
             </div>
 
             <!-- ============ 页签 2：提现管理 ============ -->
-            <div class="tab-panel" id="panel-withdrawals" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-withdrawals" role="tabpanel" aria-labelledby="tab-withdrawals" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
                         <h1>提现管理</h1>
@@ -203,7 +203,7 @@
             </div>
 
             <!-- ============ 页签 3：申诉仲裁 ============ -->
-            <div class="tab-panel" id="panel-disputes" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-disputes" role="tabpanel" aria-labelledby="tab-disputes" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
                         <h1>申诉仲裁</h1>
@@ -243,7 +243,7 @@
             </div>
 
             <!-- ============ 页签 4：版本管理 ============ -->
-            <div class="tab-panel" id="panel-config" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-config" role="tabpanel" aria-labelledby="tab-config" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
                         <h1>版本管理</h1>
@@ -287,7 +287,7 @@
             </div>
 
             <!-- ============ 页签 5：公告与广告 ============ -->
-            <div class="tab-panel" id="panel-broadcast" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-broadcast" role="tabpanel" aria-labelledby="tab-broadcast" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
                         <h1>公告与广告</h1>
@@ -373,7 +373,7 @@
             </div>
 
             <!-- ============ 页签 6：提示词分类 ============ -->
-            <div class="tab-panel" id="panel-promptcats" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-promptcats" role="tabpanel" aria-labelledby="tab-promptcats" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
                         <h1>提示词分类</h1>
@@ -437,31 +437,31 @@
             </div>
 
             <!-- ============ 页签 7：脚本执行 ============ -->
-            <div class="tab-panel" id="panel-scripts" role="tabpanel" hidden>
+            <div class="tab-panel" id="panel-scripts" role="tabpanel" aria-labelledby="tab-scripts" tabindex="0" hidden>
                 <section class="page-head">
                     <div class="page-head-text">
-                        <h1>脚本执行</h1>
-                        <p class="page-sub">执行服务端预置的运维脚本（仅限管理员）。</p>
+                        <h1 id="script-title" data-admin-script-text="script_title"></h1>
+                        <p class="page-sub" data-admin-script-text="script_subtitle"></p>
                     </div>
                 </section>
 
                 <div class="admin-card">
                     <div class="admin-card-head">
-                        <h3>🖥️ 运维脚本</h3>
-                        <span class="badge badge-primary">开发工具</span>
+                        <h3 data-admin-script-text="script_card_title"></h3>
+                        <span class="badge badge-primary" data-admin-script-text="script_badge"></span>
                     </div>
                     <div class="admin-card-body">
-                        <div class="script-row">
+                        <form id="form-script" class="script-row" aria-labelledby="script-title" novalidate>
                             <label class="field script-field">
-                                <span class="field-label">脚本名称</span>
-                                <input type="text" id="script-name" placeholder="输入服务端预置的脚本名称…">
+                                <span class="field-label" data-admin-script-text="script_name_label"></span>
+                                <input type="text" id="script-name">
                             </label>
-                            <button type="button" id="btn-script-run" class="btn btn-primary btn-script-run">
-                                <span class="btn-label">▶️ 执行</span>
+                            <button type="submit" id="btn-script-run" class="btn btn-primary btn-script-run">
+                                <span class="btn-label" data-admin-script-text="script_run"></span>
                                 <span class="btn-spinner" aria-hidden="true"></span>
                             </button>
-                        </div>
-                        <pre id="script-result" class="script-result">等待执行…</pre>
+                        </form>
+                        <pre id="script-result" class="script-result" role="status" aria-live="polite" aria-atomic="true" tabindex="0"></pre>
                     </div>
                 </div>
             </div>

管理界面/style.css

@@ -977,9 +977,11 @@ code, pre { font-family: var(--font-mono); }
 
 @media (prefers-reduced-motion: reduce) {
     *, *::before, *::after {
-        animation-duration: 0.01ms !important;
-        transition-duration: 0.01ms !important;
+        animation: none !important;
+        transition: none !important;
+        scroll-behavior: auto !important;
     }
+    .btn:hover, .plugin-card:hover, .admin-row-card:hover { transform: none !important; }
 }
 
 /* ===================================================================
@@ -1018,7 +1020,7 @@ code, pre { font-family: var(--font-mono); }
     color: var(--primary);
     font-weight: 600;
 }
-.tab-item:focus-visible { outline: 2px solid var(--primary); outline-offset: 2px; }
+.tab-item:focus-visible, .tab-panel:focus-visible { outline: 2px solid var(--primary); outline-offset: 2px; }
 
 .tab-panel { display: flex; flex-direction: column; gap: 22px; animation: fade-in 220ms var(--ease) both; }
 
@@ -1238,6 +1240,7 @@ code, pre { font-family: var(--font-mono); }
     white-space: pre-wrap;
     word-break: break-all;
 }
+.script-result:focus-visible { outline: 2px solid var(--primary); outline-offset: 2px; }
 .script-result.is-error { color: var(--danger); border-color: color-mix(in srgb, var(--danger) 35%, transparent); background: var(--danger-soft); }
 
 /* ---------- 申诉详情弹窗 ---------- */
@@ -1290,7 +1293,9 @@ code, pre { font-family: var(--font-mono); }
     background: var(--primary-soft);
     box-shadow: 0 0 0 1px var(--primary);
 }
-.resolve-option input { display: none; }
+.resolve-option input { margin: 0; flex: 0 0 auto; accent-color: var(--primary); }
+.resolve-option:focus-within { outline: 2px solid var(--primary); outline-offset: 2px; }
+.modal:focus-visible { outline: 2px solid var(--primary); outline-offset: 2px; }
 .resolve-option-icon { font-size: 18px; }
 .resolve-option-text { display: flex; flex-direction: column; gap: 1px; min-width: 0; }
 .resolve-option-text strong { font-size: 13.5px; color: var(--text); }
@@ -1305,7 +1310,7 @@ code, pre { font-family: var(--font-mono); }
     border-radius: var(--radius);
     font-size: 13px;
 }
-.split-row input[type="range"] { flex: 1; accent-color: var(--primary); }
+.split-row input[type="range"] { flex: 1; min-width: 0; accent-color: var(--primary); }
 .split-row strong { min-width: 88px; text-align: center; color: var(--primary); font-variant-numeric: tabular-nums; }
 
 .resolve-result {
@@ -1324,5 +1329,32 @@ code, pre { font-family: var(--font-mono); }
     .row-card-meta { grid-template-columns: 1fr; }
     .row-card-action { flex-direction: column; align-items: stretch; }
     .script-row { flex-direction: column; align-items: stretch; }
+    .split-row { flex-wrap: wrap; }
+    .split-row label { flex-basis: 100%; }
     .row-card-parties .initiator { margin-left: 0; }
 }
+
+@media (forced-colors: active) {
+    .btn, .tab-item, .filter-tab {
+        border: 1px solid ButtonText;
+        box-shadow: none;
+    }
+    .tab-item.is-active, .filter-tab.is-active, .resolve-option.selected {
+        text-decoration: underline;
+        text-decoration-thickness: 2px;
+        text-underline-offset: 4px;
+    }
+    .btn:focus-visible, .tab-item:focus-visible, .tab-panel:focus-visible,
+    .script-result:focus-visible, .modal-close:focus-visible, .modal:focus-visible, .resolve-option:focus-within,
+    input:focus-visible, select:focus-visible, textarea:focus-visible {
+        outline: 2px solid Highlight;
+        outline-offset: 2px;
+        box-shadow: none;
+    }
+    .btn:disabled, .btn[aria-busy="true"] {
+        opacity: 1;
+        color: GrayText;
+        border-color: GrayText;
+    }
+    .btn[aria-busy="true"] .btn-label { opacity: 1; }
+}