Upload 11 files

open_transaction.py

@@ -1,47 +1,45 @@
-"""开放资金接口的实时插件授权与钱包写锁；事务由调用方提交/回滚。"""
-import hmac
-import json
-from decimal import Decimal
-
-from fastapi import HTTPException
-from models_sql import RegisteredPlugin
-from tip_transaction import lock_wallet_accounts
-
-
-def validate_live_plugin(row, key, permission):
-    if row is None or not row.enabled:
-        raise HTTPException(status_code=403, detail="插件已停用或不存在")
-    if not isinstance(row.plugin_key, str) or not isinstance(key, str) or not hmac.compare_digest(row.plugin_key.encode('utf-8'), key.encode('utf-8')):
-        raise HTTPException(status_code=403, detail="Plugin Key 已失效")
-    try:
-        permissions = json.loads(row.permissions)
-        if not isinstance(permissions, list) or any(not isinstance(value, str) for value in permissions):
-            raise ValueError("invalid permissions")
-    except Exception:
-        raise HTTPException(status_code=503, detail="插件权限配置暂不可用")
-    if permission not in permissions:
-        raise HTTPException(status_code=403, detail="插件无权限调用该接口")
-    return row
-
-
-def lock_open_wallet(session, account, plugin_id, key, permission):
-    # 首项资金SQL取得SQLite写事务；其它方言先锁钱包再锁插件，所有开放资金路径同序。
-    wallet = lock_wallet_accounts(session, (account,))[account]
-    row = session.query(RegisteredPlugin).filter(RegisteredPlugin.plugin_id == plugin_id).populate_existing().with_for_update().first()
-    validate_live_plugin(row, key, permission)
-    return wallet, row
-
-
-def positive_integer(value):
-    if isinstance(value, bool) or not isinstance(value, int) or value <= 0:
-        raise HTTPException(status_code=503, detail="插件额度配置暂不可用")
-    return value
-
-
-def quota_total(value):
-    """SQL聚合可返回整数或精确Decimal；拒绝浮点/字符串/非整数与坏统计。"""
-    if isinstance(value, Decimal) and value.is_finite() and value >= 0 and value == value.to_integral_value():
-        return int(value)
-    if isinstance(value, bool) or not isinstance(value, int) or value < 0:
-        raise ValueError("invalid quota history")
-    return value
+"""开放资金接口的实时插件授权与钱包写锁；事务由调用方提交/回滚。"""
+import hmac
+from decimal import Decimal
+
+from fastapi import HTTPException
+from models_sql import RegisteredPlugin
+from plugin_permissions import parse_permissions
+from tip_transaction import lock_wallet_accounts
+
+
+def validate_live_plugin(row, key, permission):
+    if row is None or not row.enabled:
+        raise HTTPException(status_code=403, detail="插件已停用或不存在")
+    if not isinstance(row.plugin_key, str) or not isinstance(key, str) or not hmac.compare_digest(row.plugin_key.encode('utf-8'), key.encode('utf-8')):
+        raise HTTPException(status_code=403, detail="Plugin Key 已失效")
+    try:
+        permissions = parse_permissions(row.permissions)
+    except Exception:
+        raise HTTPException(status_code=503, detail="插件权限配置暂不可用")
+    if permission not in permissions:
+        raise HTTPException(status_code=403, detail="插件无权限调用该接口")
+    return row
+
+
+def lock_open_wallet(session, account, plugin_id, key, permission):
+    # 首项资金SQL取得SQLite写事务；其它方言先锁钱包再锁插件，所有开放资金路径同序。
+    wallet = lock_wallet_accounts(session, (account,))[account]
+    row = session.query(RegisteredPlugin).filter(RegisteredPlugin.plugin_id == plugin_id).populate_existing().with_for_update().first()
+    validate_live_plugin(row, key, permission)
+    return wallet, row
+
+
+def positive_integer(value):
+    if isinstance(value, bool) or not isinstance(value, int) or value <= 0:
+        raise HTTPException(status_code=503, detail="插件额度配置暂不可用")
+    return value
+
+
+def quota_total(value):
+    """SQL聚合可返回整数或精确Decimal；拒绝浮点/字符串/非整数与坏统计。"""
+    if isinstance(value, Decimal) and value.is_finite() and value >= 0 and value == value.to_integral_value():
+        return int(value)
+    if isinstance(value, bool) or not isinstance(value, int) or value < 0:
+        raise ValueError("invalid quota history")
+    return value

plugin_permissions.py

@@ -0,0 +1,16 @@
+"""插件权限存储的共用解析。"""
+import json
+
+DEFAULT_PERMISSIONS = ("verify", "balance", "deduct", "refund")
+
+
+def parse_permissions(value):
+    try:
+        if not isinstance(value, str):
+            raise ValueError("invalid plugin permissions")
+        permissions = json.loads(value)
+        if not isinstance(permissions, list) or any(not isinstance(item, str) for item in permissions):
+            raise ValueError("invalid plugin permissions")
+    except (ValueError, TypeError):
+        raise ValueError("invalid plugin permissions") from None
+    return permissions

purchase_transaction.py

@@ -12,6 +12,8 @@ def effective_resource_price(item):
         now = datetime.datetime.now(when.tzinfo) if when.tzinfo else datetime.datetime.now()
         if now >= when:
             price = pending
+    if type(price) is float and price.is_integer() and 0 <= price <= 2147483647:
+        price = int(price)
     if isinstance(price, bool) or not isinstance(price, int) or price < 0:
         raise ValueError("invalid resource price")
     return price

router_admin_plugins.py

@@ -28,6 +28,7 @@ from pydantic import BaseModel, Field, field_validator  # 🧹 P2修复：pydant
 
 from database_sql import get_db
 from models_sql import RegisteredPlugin
+from plugin_permissions import DEFAULT_PERMISSIONS, parse_permissions
 from 安全认证 import require_auth, is_admin, JWT_SECRET
 
 logger = logging.getLogger("ComfyUI-Ranking.AdminPlugins")
@@ -41,10 +42,6 @@ router = APIRouter()
 # plugin_id 合法性正则：3-50字符，仅允许小写字母、数字、下划线
 _PLUGIN_ID_PATTERN = re.compile(r"^[a-z0-9_]{3,50}$")
 
-# 默认权限列表
-_DEFAULT_PERMISSIONS = ["verify", "balance", "deduct", "refund"]
-
-
 def _audit_actor_id(account: str) -> str:
     """稳定关联管理员审计事件，但不把可识别账号写入运行日志。"""
     return hmac.new(
@@ -90,9 +87,11 @@ def _serialize_plugin(p: RegisteredPlugin, include_key: bool = False, raw_key: O
         raw_key: 完整明文 key（仅在创建/轮换时传入；其他场景使用脱敏）
     """
     try:
-        permissions = json.loads(p.permissions) if p.permissions else _DEFAULT_PERMISSIONS
-    except Exception:
-        permissions = _DEFAULT_PERMISSIONS
+        permissions = parse_permissions(p.permissions)
+        permissions_valid = True
+    except ValueError:
+        permissions = []
+        permissions_valid = False
 
     data = {
         "plugin_id": p.plugin_id,
@@ -103,6 +102,7 @@ def _serialize_plugin(p: RegisteredPlugin, include_key: bool = False, raw_key: O
         "max_deduct_per_tx": p.max_deduct_per_tx,
         "max_deduct_per_day": p.max_deduct_per_day,
         "permissions": permissions,
+        "permissions_valid": permissions_valid,
         "created_at": p.created_at.isoformat() if p.created_at else None,
         "created_by": p.created_by,
         "updated_at": p.updated_at.isoformat() if p.updated_at else None,
@@ -128,7 +128,7 @@ class PluginCreateRequest(BaseModel):
     rate_limit: Optional[int] = Field(100, ge=1, le=10000)
     max_deduct_per_tx: Optional[int] = Field(100, ge=1, le=10000)
     max_deduct_per_day: Optional[int] = Field(1000, ge=1, le=100000)
-    permissions: Optional[List[str]] = Field(default=None)
+    permissions: Optional[List[str]] = Field(default_factory=lambda: list(DEFAULT_PERMISSIONS))
 
     @field_validator("plugin_id")
     @classmethod
@@ -137,12 +137,11 @@ class PluginCreateRequest(BaseModel):
             raise ValueError("plugin_id 仅允许 [a-z0-9_]，长度 3-50")
         return v
 
-    # 🔧 pydantic v2：field_validator 默认对默认值也生效，无需 v1 的 always=True
     @field_validator("permissions")
     @classmethod
     def _validate_permissions(cls, v):
         if v is None:
-            return _DEFAULT_PERMISSIONS
+            return list(DEFAULT_PERMISSIONS)
         if not isinstance(v, list) or any(not isinstance(x, str) for x in v):
             raise ValueError("permissions 必须为字符串数组")
         return v

router_items.py

@@ -42,7 +42,7 @@ def _apply_effective_price(item: dict) -> None:
         price = effective_resource_price(item)
         pending = item.get('pending_price')
         effective = item.get('pending_price_effective_at')
-        if type(pending) is int and pending == price and effective:
+        if type(pending) in (int, float) and pending == price and effective:
             when = datetime.datetime.fromisoformat(effective)
             now = datetime.datetime.now(when.tzinfo) if when.tzinfo else datetime.datetime.now()
             if now >= when:

router_open_api.py

@@ -34,6 +34,7 @@ from pydantic import BaseModel, Field
 from database_sql import get_db, SessionLocal
 from models_sql import Wallet, Transaction, RegisteredPlugin, OpenApiRateLimitBucket
 from open_transaction import lock_open_wallet, positive_integer, validate_live_plugin, quota_total
+from plugin_permissions import parse_permissions
 from tip_store import run_tip_effect
 from 安全认证 import verify_token_with_fallback
 import 数据库连接 as json_db
@@ -87,9 +88,10 @@ def load_plugins_from_db():
                 logger.critical(f"拒绝加载已泄露的默认 Plugin Key: plugin_id={p.plugin_id}")
                 continue
             try:
-                perms = json.loads(p.permissions) if p.permissions else ["verify", "balance", "deduct", "refund"]
-            except Exception:
-                perms = ["verify", "balance", "deduct", "refund"]
+                perms = parse_permissions(p.permissions)
+            except ValueError:
+                logger.warning("OPEN_API_PLUGIN_PERMISSIONS_INVALID")
+                continue
             new_index[p.plugin_key] = {
                 "id": p.plugin_id,
                 "key": p.plugin_key,

task_read.py

@@ -1,214 +1,216 @@
-"""任务页面只读快照：合并持久状态，不改钱包、JSON或投影确认。"""
-import copy
-import json
-from collections import defaultdict
-from sqlalchemy import func
-from models_sql import (TaskPublication, TaskRevision, TaskAssignment, TaskDelivery,
-                        TaskDisputeRecord, TaskDisputeResponseRecord, TaskSettlement,
-                        TaskResolution, Transaction)
-from task_terms import validate_patch, funded_amount
-from task_delivery import delivery_patch
-from task_dispute import dispute_payload
-from task_resolution import distribution
-
-
-MODELS = (TaskPublication, TaskRevision, TaskAssignment, TaskDelivery,
-          TaskDisputeRecord, TaskDisputeResponseRecord, TaskSettlement, TaskResolution)
-CLOSING = {'TASK_PAYMENT', 'TASK_INCOME', 'TASK_REFUND', 'TASK_CANCEL_REFUND'}
-
-
-def ledger(rows, identifier, kind, account, related, amount):
-    matches = [r for r in rows if r.tx_id == identifier]
-    if (len(matches) != 1 or matches[0].tx_type != kind or matches[0].account != account
-            or matches[0].related_account != related or type(matches[0].amount) is not int
-            or matches[0].amount != amount):
-        raise ValueError('task closing ledger mismatch')
-
-
-def merged_task(current, records, funds):
-    publication, revision, assignment, delivery, dispute, response, settlement, resolution = records
-    if current is None and publication is None:
-        raise ValueError('original task missing')
-    original = json.loads(publication.payload) if publication is not None else None
-    if publication is not None:
-        if (not isinstance(original, dict) or original.get('id') != publication.task_id
-                or original.get('publisher') != publication.publisher):
-            raise ValueError('invalid task publication')
-        freezes = [r for r in funds if r.tx_type == 'TASK_FREEZE']
-        if (len(freezes) != 1 or freezes[0].account != publication.publisher
-                or type(original.get('total_price')) is not int or original['total_price'] < 0
-                or type(freezes[0].amount) is not int or freezes[0].amount != -original['total_price']):
-            raise ValueError('invalid original task funding')
-    result = copy.deepcopy(current if current is not None else original)
-    publisher = publication.publisher if publication is not None else result.get('publisher')
-    if not isinstance(publisher, str) or not publisher.strip() or result.get('publisher') != publisher:
-        raise ValueError('task publisher mismatch')
-    identifier = result.get('id')
-    for row in records:
-        if row is not None and (row.task_id != identifier or row.publisher != publisher):
-            raise ValueError('durable task identity mismatch')
-    if original is not None:
-        for key in ('title', 'description', 'reference_images', 'reference_link', 'total_price',
-                    'frozen_amount', 'deposit_ratio', 'deposit_amount', 'deadline', 'created_at'):
-            if key in original:
-                result[key] = copy.deepcopy(original[key])
-    if revision is not None:
-        if type(revision.revision) is not int or revision.revision < 1:
-            raise ValueError('invalid task revision')
-        patch = json.loads(revision.payload)
-        validate_patch(patch)
-        result.update(copy.deepcopy(patch))
-    durable = any(r is not None for r in records)
-    amount = funded_amount(funds, publisher) if durable or funds else None
-    if amount is not None and (type(result.get('total_price')) is not int or result['total_price'] != amount):
-        raise ValueError('task price differs from funding')
-    # 持久指派优先于尚未同步的空承接人；已有不同承接人不能被悄悄覆盖。
-    participants = [r.assignee for r in (assignment, delivery, dispute, response, settlement, resolution) if r is not None]
-    assignee = participants[0] if participants else result.get('assignee')
-    if participants and (any(v != assignee for v in participants) or not isinstance(assignee, str)
-            or not assignee.strip() or assignee == publisher or result.get('assignee') not in (None, assignee)):
-        raise ValueError('task assignee mismatch')
-    deposits = [r for r in funds if r.tx_type == 'TASK_DEPOSIT']
-    if participants or deposits:
-        deposit = result.get('deposit_amount')
-        if (len(deposits) != 1 or type(deposit) is not int or amount is None or not 0 <= deposit <= amount
-                or deposits[0].account != publisher or deposits[0].related_account != assignee
-                or type(deposits[0].amount) is not int or deposits[0].amount != -deposit):
-            raise ValueError('task deposit mismatch')
-        result.update(assignee=assignee, deposit_paid=deposit)
-    if assignment is not None:
-        if type(assignment.deposit) is not int or assignment.deposit != deposit or type(assignment.assigned_at) is not int:
-            raise ValueError('invalid assignment')
-        result['assigned_at'] = assignment.assigned_at
-        if result.get('status') == 'open':
-            result['status'] = 'in_progress'
-    if delivery is not None:
-        patch = copy.deepcopy(delivery_patch(delivery, result))
-        if result.get('status') in {'completed', 'disputed', 'cancelled', 'expired'}:
-            patch.pop('status')
-            patch.pop('feedback')
-        result.update(patch)
-    dispute_id = None
-    if dispute is not None:
-        dispute_payload(dispute)  # 核实私有原始记录，不将理由/证据输出至公开任务。
-        dispute_id = dispute.dispute_id
-    if response is not None:
-        payload = json.loads(response.payload)
-        from task_dispute_response import response_payload, ORIGINAL_FIELDS
-        if not isinstance(payload, dict):
-            raise ValueError('invalid dispute response')
-        private = dispute_payload(dispute) if dispute is not None else dict(
-            id=response.dispute_id, task_id=identifier, publisher=publisher, assignee=assignee,
-            **{k: payload.get(k) for k in ORIGINAL_FIELDS})
-        response_payload(response, private, result)
-        if dispute_id is not None and dispute_id != response.dispute_id:
-            raise ValueError('dispute linkage mismatch')
-        dispute_id = response.dispute_id
-    if dispute_id is not None:
-        if result.get('dispute_id') not in (None, dispute_id):
-            raise ValueError('task dispute differs from sql')
-        result.update(status='disputed', dispute_id=dispute_id)
-    closed = [r for r in funds if r.tx_type in CLOSING]
-    if settlement is not None:
-        if resolution is not None or dispute_id is not None:
-            raise ValueError('conflicting task closures')
-        if (type(settlement.amount) is not int or settlement.amount != amount
-                or type(settlement.deposit) is not int or settlement.deposit != deposit or len(closed) != 2):
-            raise ValueError('invalid task settlement')
-        ledger(closed, settlement.payment_tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
-        ledger(closed, settlement.income_tx_id, 'TASK_INCOME', assignee, publisher, amount)
-        result.update(status='completed', completed_at=settlement.completed_at, feedback=settlement.feedback)
-    elif resolution is not None:
-        if (dispute_id is not None and resolution.dispute_id != dispute_id
-                or result.get('dispute_id') not in (None, resolution.dispute_id)
-                or type(resolution.amount) is not int or resolution.amount != amount
-                or type(resolution.deposit) is not int or resolution.deposit != deposit or len(closed) != 3
-                or distribution(amount, resolution.initiator_role, resolution.resolution, resolution.ratio)
-                    != (resolution.publisher_refund, resolution.assignee_income)):
-            raise ValueError('invalid task resolution')
-        original_role = dispute_payload(dispute)['initiator_role'] if dispute is not None else (
-            json.loads(response.payload)['initiator_role'] if response is not None else resolution.initiator_role)
-        if original_role != resolution.initiator_role:
-            raise ValueError('resolution role mismatch')
-        ledger(closed, resolution.payment_tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
-        ledger(closed, resolution.refund_tx_id, 'TASK_REFUND', publisher, assignee, resolution.publisher_refund)
-        ledger(closed, resolution.income_tx_id, 'TASK_INCOME', assignee, publisher, resolution.assignee_income)
-        result.update(status='completed', completed_at=resolution.resolved_at, dispute_id=resolution.dispute_id,
-                      feedback=f"申诉裁决：{resolution.note or '无'}（结果：{resolution.resolution}）")
-    elif closed:
-        # 开放任务退款无独立状态表，以唯一完整退款流水为事实。
-        if len(closed) == 1 and not deposits and not participants and closed[0].tx_type in {'TASK_REFUND', 'TASK_CANCEL_REFUND'}:
-            row = closed[0]
-            ledger(closed, row.tx_id, row.tx_type, publisher, None, amount)
-            status = 'cancelled' if row.tx_type == 'TASK_CANCEL_REFUND' else 'expired'
-            result.update(status=status, refunded=True, refund_amount=amount)
-        elif (not durable and result.get('status') == 'completed' and len(closed) == 2
-              and len([r for r in closed if r.tx_type == 'TASK_PAYMENT']) == 1
-              and len([r for r in closed if r.tx_type == 'TASK_INCOME']) == 1):
-            # 旧已完成任务可以按有效双流水读取，不生成猜测的完成时间或反馈。
-            payment = next(r for r in closed if r.tx_type == 'TASK_PAYMENT')
-            income = next(r for r in closed if r.tx_type == 'TASK_INCOME')
-            ledger(closed, payment.tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
-            ledger(closed, income.tx_id, 'TASK_INCOME', assignee, publisher, amount)
-        else:
-            raise ValueError('closing task lacks matching durable state')
-    elif durable and result.get('status') in {'completed', 'cancelled', 'expired'}:
-        raise ValueError('closed task lacks closing funds')
-    applicants = result.get('applicants', [])
-    if result.get('status') not in {'open', 'in_progress', 'submitted', 'disputed', 'completed', 'cancelled', 'expired'}:
-        raise ValueError('invalid task status')
-    if (not isinstance(applicants, list) or any(not isinstance(a, dict) or not isinstance(a.get('account'), str)
-            or not a['account'].strip() for a in applicants)
-            or len({a['account'] for a in applicants}) != len(applicants)):
-        raise ValueError('invalid task applicants')
-    return result
-
-
-def merge_task_source(session, source, task_id=None):
-    """合并调用方已经严格读取的快照；不保存或复用跨轮次缓存。"""
-    if not isinstance(source, list):
-        raise ValueError('invalid task source')
-    current = {}
-    for task in source:
-        if not isinstance(task, dict) or not isinstance(task.get('id'), str) or not task['id'] or task['id'] in current:
-            raise ValueError('invalid or duplicate task')
-        current[task['id']] = task
-    identifiers = set(current) if task_id is None else ({task_id} if task_id in current else set())
-    maps = []
-    for model in MODELS:
-        query = session.query(model)
-        if model is TaskRevision:
-            latest = session.query(TaskRevision.task_id, func.max(TaskRevision.revision).label('version'))
-            if task_id is not None:
-                latest = latest.filter(TaskRevision.task_id == task_id)
-            latest = latest.group_by(TaskRevision.task_id).subquery()
-            query = query.join(latest, (TaskRevision.task_id == latest.c.task_id)
-                               & (TaskRevision.revision == latest.c.version))
-        if task_id is not None:
-            query = query.filter(model.task_id == task_id)
-        rows = query.populate_existing().all()
-        records = {}
-        for row in rows:
-            if model is TaskRevision:
-                prior = records.get(row.task_id)
-                if prior is not None and prior.revision > row.revision:
-                    continue
-            elif row.task_id in records:
-                raise ValueError('duplicate durable task state')
-            records[row.task_id] = row
-            identifiers.add(row.task_id)
-        maps.append(records)
-    query = session.query(Transaction).filter(Transaction.tx_type.in_(
-        ['TASK_FREEZE', 'TASK_PRICE_ADJUST', 'TASK_DEPOSIT', *CLOSING]))
-    if task_id is not None:
-        query = query.filter(Transaction.item_id == task_id)
-    funds = defaultdict(list)
-    for row in query.populate_existing().all():
-        funds[row.item_id].append(row)
-    return [merged_task(current.get(identifier), tuple(m.get(identifier) for m in maps), funds[identifier])
-            for identifier in sorted(identifiers)]
-
-
-def read_tasks(session, store, task_id=None):
-    source = store.load_data('tasks.json', default_data=[], strict=True, skip_cache=True)
-    return merge_task_source(session, source, task_id)
+"""任务页面只读快照：合并持久状态，不改钱包、JSON或投影确认。"""
+import copy
+import json
+from collections import defaultdict
+from sqlalchemy import func
+from models_sql import (TaskPublication, TaskRevision, TaskAssignment, TaskDelivery,
+                        TaskDisputeRecord, TaskDisputeResponseRecord, TaskSettlement,
+                        TaskResolution, Transaction)
+from task_terms import validate_patch, funded_amount
+from task_delivery import delivery_patch
+from task_dispute import dispute_payload
+from task_resolution import distribution
+
+
+MODELS = (TaskPublication, TaskRevision, TaskAssignment, TaskDelivery,
+          TaskDisputeRecord, TaskDisputeResponseRecord, TaskSettlement, TaskResolution)
+CLOSING = {'TASK_PAYMENT', 'TASK_INCOME', 'TASK_REFUND', 'TASK_CANCEL_REFUND'}
+
+
+def ledger(rows, identifier, kind, account, related, amount):
+    matches = [r for r in rows if r.tx_id == identifier]
+    if (len(matches) != 1 or matches[0].tx_type != kind or matches[0].account != account
+            or matches[0].related_account != related or type(matches[0].amount) is not int
+            or matches[0].amount != amount):
+        raise ValueError('task closing ledger mismatch')
+
+
+def merged_task(current, records, funds):
+    publication, revision, assignment, delivery, dispute, response, settlement, resolution = records
+    if current is None and publication is None:
+        raise ValueError('original task missing')
+    original = json.loads(publication.payload) if publication is not None else None
+    if publication is not None:
+        if (not isinstance(original, dict) or original.get('id') != publication.task_id
+                or original.get('publisher') != publication.publisher):
+            raise ValueError('invalid task publication')
+        freezes = [r for r in funds if r.tx_type == 'TASK_FREEZE']
+        if (len(freezes) != 1 or freezes[0].account != publication.publisher
+                or type(original.get('total_price')) is not int or original['total_price'] < 0
+                or type(freezes[0].amount) is not int or freezes[0].amount != -original['total_price']):
+            raise ValueError('invalid original task funding')
+    result = copy.deepcopy(current if current is not None else original)
+    publisher = publication.publisher if publication is not None else result.get('publisher')
+    if not isinstance(publisher, str) or not publisher.strip() or result.get('publisher') != publisher:
+        raise ValueError('task publisher mismatch')
+    identifier = result.get('id')
+    for row in records:
+        if row is not None and (row.task_id != identifier or row.publisher != publisher):
+            raise ValueError('durable task identity mismatch')
+    if original is not None:
+        for key in ('title', 'description', 'reference_images', 'reference_link', 'total_price',
+                    'frozen_amount', 'deposit_ratio', 'deposit_amount', 'deadline', 'created_at'):
+            if key in original:
+                result[key] = copy.deepcopy(original[key])
+    if revision is not None:
+        if type(revision.revision) is not int or revision.revision < 1:
+            raise ValueError('invalid task revision')
+        patch = json.loads(revision.payload)
+        validate_patch(patch)
+        result.update(copy.deepcopy(patch))
+    durable = any(r is not None for r in records)
+    amount = funded_amount(funds, publisher) if durable or funds else None
+    if amount is not None and (type(result.get('total_price')) is not int or result['total_price'] != amount):
+        raise ValueError('task price differs from funding')
+    # 持久指派优先于尚未同步的空承接人；已有不同承接人不能被悄悄覆盖。
+    participants = [r.assignee for r in (assignment, delivery, dispute, response, settlement, resolution) if r is not None]
+    assignee = participants[0] if participants else result.get('assignee')
+    if participants and (any(v != assignee for v in participants) or not isinstance(assignee, str)
+            or not assignee.strip() or assignee == publisher or result.get('assignee') not in (None, assignee)):
+        raise ValueError('task assignee mismatch')
+    deposits = [r for r in funds if r.tx_type == 'TASK_DEPOSIT']
+    if participants or deposits:
+        deposit = result.get('deposit_amount')
+        if type(deposit) is float and deposit.is_integer() and 0 <= deposit <= 2147483647:
+            deposit = int(deposit)
+        if (len(deposits) != 1 or type(deposit) is not int or amount is None or not 0 <= deposit <= amount
+                or deposits[0].account != publisher or deposits[0].related_account != assignee
+                or type(deposits[0].amount) is not int or deposits[0].amount != -deposit):
+            raise ValueError('task deposit mismatch')
+        result.update(assignee=assignee, deposit_amount=deposit, deposit_paid=deposit)
+    if assignment is not None:
+        if type(assignment.deposit) is not int or assignment.deposit != deposit or type(assignment.assigned_at) is not int:
+            raise ValueError('invalid assignment')
+        result['assigned_at'] = assignment.assigned_at
+        if result.get('status') == 'open':
+            result['status'] = 'in_progress'
+    if delivery is not None:
+        patch = copy.deepcopy(delivery_patch(delivery, result))
+        if result.get('status') in {'completed', 'disputed', 'cancelled', 'expired'}:
+            patch.pop('status')
+            patch.pop('feedback')
+        result.update(patch)
+    dispute_id = None
+    if dispute is not None:
+        dispute_payload(dispute)  # 核实私有原始记录，不将理由/证据输出至公开任务。
+        dispute_id = dispute.dispute_id
+    if response is not None:
+        payload = json.loads(response.payload)
+        from task_dispute_response import response_payload, ORIGINAL_FIELDS
+        if not isinstance(payload, dict):
+            raise ValueError('invalid dispute response')
+        private = dispute_payload(dispute) if dispute is not None else dict(
+            id=response.dispute_id, task_id=identifier, publisher=publisher, assignee=assignee,
+            **{k: payload.get(k) for k in ORIGINAL_FIELDS})
+        response_payload(response, private, result)
+        if dispute_id is not None and dispute_id != response.dispute_id:
+            raise ValueError('dispute linkage mismatch')
+        dispute_id = response.dispute_id
+    if dispute_id is not None:
+        if result.get('dispute_id') not in (None, dispute_id):
+            raise ValueError('task dispute differs from sql')
+        result.update(status='disputed', dispute_id=dispute_id)
+    closed = [r for r in funds if r.tx_type in CLOSING]
+    if settlement is not None:
+        if resolution is not None or dispute_id is not None:
+            raise ValueError('conflicting task closures')
+        if (type(settlement.amount) is not int or settlement.amount != amount
+                or type(settlement.deposit) is not int or settlement.deposit != deposit or len(closed) != 2):
+            raise ValueError('invalid task settlement')
+        ledger(closed, settlement.payment_tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
+        ledger(closed, settlement.income_tx_id, 'TASK_INCOME', assignee, publisher, amount)
+        result.update(status='completed', completed_at=settlement.completed_at, feedback=settlement.feedback)
+    elif resolution is not None:
+        if (dispute_id is not None and resolution.dispute_id != dispute_id
+                or result.get('dispute_id') not in (None, resolution.dispute_id)
+                or type(resolution.amount) is not int or resolution.amount != amount
+                or type(resolution.deposit) is not int or resolution.deposit != deposit or len(closed) != 3
+                or distribution(amount, resolution.initiator_role, resolution.resolution, resolution.ratio)
+                    != (resolution.publisher_refund, resolution.assignee_income)):
+            raise ValueError('invalid task resolution')
+        original_role = dispute_payload(dispute)['initiator_role'] if dispute is not None else (
+            json.loads(response.payload)['initiator_role'] if response is not None else resolution.initiator_role)
+        if original_role != resolution.initiator_role:
+            raise ValueError('resolution role mismatch')
+        ledger(closed, resolution.payment_tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
+        ledger(closed, resolution.refund_tx_id, 'TASK_REFUND', publisher, assignee, resolution.publisher_refund)
+        ledger(closed, resolution.income_tx_id, 'TASK_INCOME', assignee, publisher, resolution.assignee_income)
+        result.update(status='completed', completed_at=resolution.resolved_at, dispute_id=resolution.dispute_id,
+                      feedback=f"申诉裁决：{resolution.note or '无'}（结果：{resolution.resolution}）")
+    elif closed:
+        # 开放任务退款无独立状态表，以唯一完整退款流水为事实。
+        if len(closed) == 1 and not deposits and not participants and closed[0].tx_type in {'TASK_REFUND', 'TASK_CANCEL_REFUND'}:
+            row = closed[0]
+            ledger(closed, row.tx_id, row.tx_type, publisher, None, amount)
+            status = 'cancelled' if row.tx_type == 'TASK_CANCEL_REFUND' else 'expired'
+            result.update(status=status, refunded=True, refund_amount=amount)
+        elif (not durable and result.get('status') == 'completed' and len(closed) == 2
+              and len([r for r in closed if r.tx_type == 'TASK_PAYMENT']) == 1
+              and len([r for r in closed if r.tx_type == 'TASK_INCOME']) == 1):
+            # 旧已完成任务可以按有效双流水读取，不生成猜测的完成时间或反馈。
+            payment = next(r for r in closed if r.tx_type == 'TASK_PAYMENT')
+            income = next(r for r in closed if r.tx_type == 'TASK_INCOME')
+            ledger(closed, payment.tx_id, 'TASK_PAYMENT', publisher, assignee, -(amount-deposit))
+            ledger(closed, income.tx_id, 'TASK_INCOME', assignee, publisher, amount)
+        else:
+            raise ValueError('closing task lacks matching durable state')
+    elif durable and result.get('status') in {'completed', 'cancelled', 'expired'}:
+        raise ValueError('closed task lacks closing funds')
+    applicants = result.get('applicants', [])
+    if result.get('status') not in {'open', 'in_progress', 'submitted', 'disputed', 'completed', 'cancelled', 'expired'}:
+        raise ValueError('invalid task status')
+    if (not isinstance(applicants, list) or any(not isinstance(a, dict) or not isinstance(a.get('account'), str)
+            or not a['account'].strip() for a in applicants)
+            or len({a['account'] for a in applicants}) != len(applicants)):
+        raise ValueError('invalid task applicants')
+    return result
+
+
+def merge_task_source(session, source, task_id=None):
+    """合并调用方已经严格读取的快照；不保存或复用跨轮次缓存。"""
+    if not isinstance(source, list):
+        raise ValueError('invalid task source')
+    current = {}
+    for task in source:
+        if not isinstance(task, dict) or not isinstance(task.get('id'), str) or not task['id'] or task['id'] in current:
+            raise ValueError('invalid or duplicate task')
+        current[task['id']] = task
+    identifiers = set(current) if task_id is None else ({task_id} if task_id in current else set())
+    maps = []
+    for model in MODELS:
+        query = session.query(model)
+        if model is TaskRevision:
+            latest = session.query(TaskRevision.task_id, func.max(TaskRevision.revision).label('version'))
+            if task_id is not None:
+                latest = latest.filter(TaskRevision.task_id == task_id)
+            latest = latest.group_by(TaskRevision.task_id).subquery()
+            query = query.join(latest, (TaskRevision.task_id == latest.c.task_id)
+                               & (TaskRevision.revision == latest.c.version))
+        if task_id is not None:
+            query = query.filter(model.task_id == task_id)
+        rows = query.populate_existing().all()
+        records = {}
+        for row in rows:
+            if model is TaskRevision:
+                prior = records.get(row.task_id)
+                if prior is not None and prior.revision > row.revision:
+                    continue
+            elif row.task_id in records:
+                raise ValueError('duplicate durable task state')
+            records[row.task_id] = row
+            identifiers.add(row.task_id)
+        maps.append(records)
+    query = session.query(Transaction).filter(Transaction.tx_type.in_(
+        ['TASK_FREEZE', 'TASK_PRICE_ADJUST', 'TASK_DEPOSIT', *CLOSING]))
+    if task_id is not None:
+        query = query.filter(Transaction.item_id == task_id)
+    funds = defaultdict(list)
+    for row in query.populate_existing().all():
+        funds[row.item_id].append(row)
+    return [merged_task(current.get(identifier), tuple(m.get(identifier) for m in maps), funds[identifier])
+            for identifier in sorted(identifiers)]
+
+
+def read_tasks(session, store, task_id=None):
+    source = store.load_data('tasks.json', default_data=[], strict=True, skip_cache=True)
+    return merge_task_source(session, source, task_id)

管理界面/app.js

@@ -9,6 +9,84 @@
     // 新增反馈集中在双语词典；管理页语言遵循文档lang。
     const ADMIN_MESSAGES = {
         zh: {
+            plugin_edit_title: "编辑插件",
+            plugin_id_hint: "用于标识插件，创建后不可修改。",
+            plugin_id_placeholder: "小写英文/数字/下划线，3-50 字符",
+            plugin_name: "名称",
+            plugin_name_placeholder: "例如：示例插件",
+            plugin_description: "描述",
+            plugin_description_placeholder: "对该插件的简要说明（可选）",
+            plugin_rate_label: "每分钟限流",
+            plugin_tx_label: "单笔扣款上限",
+            plugin_day_label: "日扣款上限",
+            plugin_cancel: "取消",
+            plugin_create_submit: "创建插件",
+            plugin_edit_submit: "保存修改",
+            plugin_id_fixed: "不可修改。",
+            plugin_key_hidden_hint: "完整 Key 已隐藏。如需更换请使用「轮换 Key」。",
+            plugin_key_title: "插件 Key 已生成",
+            plugin_key_save_title: "请妥善保存此 Key",
+            plugin_key_save_hint: "关闭此对话框后将无法再次查看。如不慎遗失请使用「轮换 Key」生成新凭证。",
+            plugin_key_rotated_hint: "新 Key 已生成，请妥善保存。旧 Key 已失效。",
+            plugin_key_done: "我已保存",
+            plugin_id_invalid: "plugin_id 仅允许小写英文、数字和下划线，长度 3-50。",
+            plugin_name_required: "请填写插件名称。",
+            plugin_id_missing: "插件标识缺失",
+            plugin_name_long: "插件名称不能超过100个字符。",
+            plugin_description_long: "插件描述不能超过500个字符。",
+            plugin_create_failed: "创建失败",
+            plugin_edit_failed: "保存失败",
+            plugin_saved: "修改已保存",
+            plugin_limit_invalid: "{field}必须是1至{max}之间的整数。",
+            plugin_rotate_message: "轮换后旧 Key 立即失效，确定继续？\n插件：{plugin}",
+            plugin_rotate_confirm: "确认轮换",
+            plugin_deleted: "插件已删除",
+            plugin_delete_message: "确定删除插件「{plugin}」？此操作不可逆。",
+            plugin_delete_confirm: "确认删除",
+            plugin_now_enabled: "插件已启用",
+            plugin_now_disabled: "插件已禁用",
+            plugin_toggle_failed: "切换状态失败",
+            plugin_description_empty: "暂无描述",
+            plugin_title: "第三方插件",
+            plugin_subtitle: "管理 plugin_key、限流配额、权限与启用状态。",
+            plugin_console: "控制台",
+            plugin_location: "位置",
+            plugin_search: "搜索插件",
+            plugin_search_placeholder: "搜索 plugin_id 或名称…",
+            plugin_refresh: "刷新",
+            plugin_create: "创建新插件",
+            plugin_total: "插件总数",
+            plugin_enabled: "已启用",
+            plugin_disabled: "已禁用",
+            plugin_loading: "正在加载插件列表…",
+            plugin_empty: "暂无插件",
+            plugin_empty_hint: "点击「创建新插件」开始接入第三方应用。",
+            plugin_load_failed: "加载失败",
+            plugin_retry_hint: "请稍后重试。",
+            plugin_retry: "重新加载",
+            plugin_no_match: "未匹配到插件",
+            plugin_no_match_hint: "尝试调整搜索关键字。",
+            plugin_rate: "限流",
+            plugin_rate_unit: "次/分钟",
+            plugin_tx_limit: "单笔限额",
+            plugin_day_limit: "日限额",
+            plugin_permissions: "权限",
+            plugin_permissions_unavailable: "权限配置不可用",
+            plugin_permissions_none: "未授予权限",
+            plugin_permissions_review: "权限配置无法读取，请重新确认权限后保存。",
+            plugin_created: "创建时间",
+            plugin_edit: "编辑",
+            plugin_rotate: "轮换 Key",
+            plugin_enable: "启用",
+            plugin_disable: "禁用",
+            plugin_delete: "删除",
+            plugin_active: "启用中",
+            plugin_refreshed: "已刷新",
+            plugin_perm_verify: "验证 Key",
+            plugin_perm_balance: "查询余额",
+            plugin_perm_deduct: "扣除积分",
+            plugin_perm_refund: "退款回滚",
+            plugin_action_name: "{action}：{plugin}",
             broadcast_subtitle: '发布全站系统公告，管理顶部广告横幅展示。',
             announcement_title: '📢 全站系统公告', announcement_content: '公告内容',
             announcement_placeholder: '输入要向全体用户推送的公告内容…', announcement_publish: '🚀 确认发布',
@@ -165,6 +243,8 @@
             config_read_unavailable: '无法确认当前配置，请稍后重新读取。',
             session_changed: '登录状态已变化，请在当前会话重新操作。',
             network_unavailable: '网络异常，请检查连接后重试。',
+            request_timed_out: '请求超时，结果暂未确认。请先检查当前状态，再决定是否重试。',
+            response_unavailable: '无法确认服务器响应。请先核实当前状态，再决定是否重试。',
             auth_expired: '登录已失效，请重新登录。',
             admin_verification_unavailable: '无法确认管理员权限，请稍后重新登录。',
             admin_data_unavailable: '无法确认返回的数据，请稍后重新读取。',
@@ -172,6 +252,84 @@
             banner_active: '广告展示中', banner_inactive: '无活跃广告', banner_unknown: '状态未知',
         },
         en: {
+            plugin_edit_title: "Edit plugin",
+            plugin_id_hint: "Identifies the plugin and cannot be changed after creation.",
+            plugin_id_placeholder: "Lowercase letters, digits or _, 3–50 chars",
+            plugin_name: "Name",
+            plugin_name_placeholder: "For example: Sample plugin",
+            plugin_description: "Description",
+            plugin_description_placeholder: "Brief plugin description (optional)",
+            plugin_rate_label: "Requests per minute",
+            plugin_tx_label: "Maximum credits per transaction",
+            plugin_day_label: "Maximum credits per day",
+            plugin_cancel: "Cancel",
+            plugin_create_submit: "Create plugin",
+            plugin_edit_submit: "Save changes",
+            plugin_id_fixed: "Cannot be changed.",
+            plugin_key_hidden_hint: "The full key is hidden. Use “Rotate key” to replace it.",
+            plugin_key_title: "Plugin key generated",
+            plugin_key_save_title: "Keep this key safe",
+            plugin_key_save_hint: "You cannot view the full key again after closing this dialog. If lost, use “Rotate key” to generate a new credential.",
+            plugin_key_rotated_hint: "A new key has been generated. Keep it safe. The previous key is no longer valid.",
+            plugin_key_done: "I have saved it",
+            plugin_id_invalid: "Plugin ID must contain 3–50 lowercase letters, digits or underscores.",
+            plugin_name_required: "Enter a plugin name.",
+            plugin_id_missing: "Plugin ID is missing.",
+            plugin_name_long: "Plugin name must not exceed 100 characters.",
+            plugin_description_long: "Plugin description must not exceed 500 characters.",
+            plugin_create_failed: "Unable to create plugin.",
+            plugin_edit_failed: "Unable to save plugin.",
+            plugin_saved: "Changes saved.",
+            plugin_limit_invalid: "{field} must be a whole number from 1 to {max}.",
+            plugin_rotate_message: "The previous key will stop working immediately. Continue?\nPlugin: {plugin}",
+            plugin_rotate_confirm: "Rotate key",
+            plugin_deleted: "Plugin deleted.",
+            plugin_delete_message: "Delete plugin “{plugin}”? This cannot be undone.",
+            plugin_delete_confirm: "Delete plugin",
+            plugin_now_enabled: "Plugin enabled.",
+            plugin_now_disabled: "Plugin disabled.",
+            plugin_toggle_failed: "Unable to change plugin status.",
+            plugin_description_empty: "No description",
+            plugin_title: "Third-party plugins",
+            plugin_subtitle: "Manage plugin keys, quotas, permissions and availability.",
+            plugin_console: "Console",
+            plugin_location: "Location",
+            plugin_search: "Search plugins",
+            plugin_search_placeholder: "Search plugin ID or name…",
+            plugin_refresh: "Refresh",
+            plugin_create: "Create plugin",
+            plugin_total: "Total plugins",
+            plugin_enabled: "Enabled",
+            plugin_disabled: "Disabled",
+            plugin_loading: "Loading plugins…",
+            plugin_empty: "No plugins yet",
+            plugin_empty_hint: "Select “Create plugin” to connect a third-party app.",
+            plugin_load_failed: "Unable to load plugins",
+            plugin_retry_hint: "Please try again later.",
+            plugin_retry: "Try again",
+            plugin_no_match: "No matching plugins",
+            plugin_no_match_hint: "Try a different search.",
+            plugin_rate: "Rate limit",
+            plugin_rate_unit: "requests/min",
+            plugin_tx_limit: "Per-transaction limit",
+            plugin_day_limit: "Daily limit",
+            plugin_permissions: "Permissions",
+            plugin_permissions_unavailable: "Permission configuration unavailable",
+            plugin_permissions_none: "No permissions granted",
+            plugin_permissions_review: "Permissions could not be read. Review the permissions before saving.",
+            plugin_created: "Created",
+            plugin_edit: "Edit",
+            plugin_rotate: "Rotate key",
+            plugin_enable: "Enable",
+            plugin_disable: "Disable",
+            plugin_delete: "Delete",
+            plugin_active: "Active",
+            plugin_refreshed: "Refreshed",
+            plugin_perm_verify: "Verify key",
+            plugin_perm_balance: "Read balance",
+            plugin_perm_deduct: "Deduct credits",
+            plugin_perm_refund: "Refund credits",
+            plugin_action_name: "{action}: {plugin}",
             broadcast_subtitle: 'Publish announcements for all users and manage the top advertisement banner.',
             announcement_title: '📢 Site announcements', announcement_content: 'Announcement content',
             announcement_placeholder: 'Enter an announcement for all users…', announcement_publish: '🚀 Publish announcement',
@@ -328,6 +486,8 @@
             config_read_unavailable: 'The current configuration could not be confirmed. Reload it later.',
             session_changed: 'The session has changed. Continue in the current session.',
             network_unavailable: 'Network unavailable. Check your connection before retrying.',
+            request_timed_out: 'Request timed out. The result is unconfirmed. Check the current state before deciding whether to retry.',
+            response_unavailable: 'The server response could not be confirmed. Check the current state before deciding whether to retry.',
             auth_expired: 'Your session has expired. Sign in again.',
             admin_verification_unavailable: 'Administrator access could not be confirmed. Sign in again later.',
             admin_data_unavailable: 'The returned data could not be confirmed. Reload it later.',
@@ -347,10 +507,10 @@
     const USER_KEY = 'ranking_admin_user';
     const ALL_PERMS = ['verify', 'balance', 'deduct', 'refund'];
     const PERM_LABELS = {
-        verify: '验证 Key',
-        balance: '查询余额',
-        deduct: '扣除积分',
-        refund: '退款回滚'
+        verify: 'plugin_perm_verify',
+        balance: 'plugin_perm_balance',
+        deduct: 'plugin_perm_deduct',
+        refund: 'plugin_perm_refund'
     };
 
     // -------------------- 状态 --------------------
@@ -769,6 +929,10 @@
 
     // -------------------- API 客户端 --------------------
     let adminSessionGeneration = 0;
+    const ADMIN_REQUEST_TIMEOUT = 45000;
+    const ADMIN_UPLOAD_TIMEOUT = 420000;
+    const ADMIN_RESPONSE_MAX_BYTES = 8 * 1024 * 1024;
+    const ADMIN_RESPONSE_MAX_CHUNKS = 16384;
     const adminRequests = new Set();
     function revokeAdminRequests() {
         for (const controller of Array.from(adminRequests)) {
@@ -786,18 +950,72 @@
             throw error;
         }
     }
-    async function performAdminRequest(path, options) {
+    async function readAdminResponse(response, deadline, session) {
+        if (response.body === null) return "";
+        if (!response.body || typeof response.body.getReader !== 'function') {
+            throw new ApiError(adminMessage('response_unavailable'), 0);
+        }
+        const reader = response.body.getReader();
+        let complete = false;
+        try {
+            const length = response.headers?.get?.('Content-Length');
+            if (length !== null && length !== undefined &&
+                    (!/^\d+$/.test(length) || !Number.isSafeInteger(Number(length)) || Number(length) > ADMIN_RESPONSE_MAX_BYTES)) {
+                throw new ApiError(adminMessage('response_unavailable'), 0);
+            }
+            const decoder = new TextDecoder('utf-8', { fatal: true });
+            const parts = [];
+            let bytes = 0, chunks = 0, text = "";
+            while (true) {
+                assertAdminSession(session);
+                const chunk = await Promise.race([reader.read(), deadline]);
+                assertAdminSession(session);
+                if (!chunk || typeof chunk.done !== 'boolean') throw new Error('Invalid response stream');
+                if (chunk.done) break;
+                if (!(chunk.value instanceof Uint8Array) || ++chunks > ADMIN_RESPONSE_MAX_CHUNKS ||
+                        chunk.value.byteLength > ADMIN_RESPONSE_MAX_BYTES - bytes) {
+                    throw new ApiError(adminMessage('response_unavailable'), 0);
+                }
+                bytes += chunk.value.byteLength;
+                text += decoder.decode(chunk.value, { stream: true });
+                if (text.length >= 65536) { parts.push(text); text = ""; }
+            }
+            text += decoder.decode();
+            parts.push(text);
+            complete = true;
+            return parts.join("");
+        } catch (error) {
+            assertAdminSession(session);
+            if (error instanceof ApiError) throw error;
+            throw new ApiError(adminMessage('response_unavailable'), 0);
+        } finally {
+            if (!complete) {
+                try { Promise.resolve(reader.cancel()).catch(() => {}); } catch (_) { /* 继续释放读锁。 */ }
+            }
+            try { reader.releaseLock(); } catch (_) { /* 异常流不阻止界面收尾。 */ }
+        }
+    }
+
+    async function performAdminRequest(path, options, upload = false) {
         const session = captureAdminSession();
         const controller = new AbortController();
         const headers = { Accept: 'application/json', ...options.headers };
         if (session.token) headers.Authorization = 'Bearer ' + session.token;
         adminRequests.add(controller);
+        let timer;
+        const deadline = new Promise((resolve, reject) => {
+            timer = setTimeout(() => {
+                reject(new ApiError(adminMessage('request_timed_out'), 0));
+                try { controller.abort(); } catch (_) { /* 撤销异常不阻止等待结束。 */ }
+            }, upload ? ADMIN_UPLOAD_TIMEOUT : ADMIN_REQUEST_TIMEOUT);
+        });
         try {
             let response;
             try {
-                response = await fetch(API_BASE + path, { ...options, headers, signal: controller.signal });
+                response = await Promise.race([fetch(API_BASE + path, { ...options, headers, signal: controller.signal }), deadline]);
             } catch (err) {
                 assertAdminSession(session);
+                if (err instanceof ApiError) throw err;
                 throw new ApiError(adminMessage('network_unavailable'), 0);
             }
             assertAdminSession(session);
@@ -807,9 +1025,11 @@
             }
             let text;
             try {
-                text = await response.text();
+                text = await readAdminResponse(response, deadline, session);
             } catch (err) {
+                try { controller.abort(); } catch (_) { /* 保留原读取错误。 */ }
                 assertAdminSession(session);
+                if (err instanceof ApiError) throw err;
                 throw new ApiError(adminMessage('network_unavailable'), 0);
             }
             assertAdminSession(session);
@@ -828,6 +1048,7 @@
             }
             return payload;
         } finally {
+            clearTimeout(timer);
             adminRequests.delete(controller);
         }
     }
@@ -852,7 +1073,7 @@
 
     // 🆕 multipart 上传（广告图片）：FormData 不序列化，复用同一会话和取消边界。
     async function apiUpload(path, formData) {
-        return performAdminRequest(path, { method: 'POST', body: formData });
+        return performAdminRequest(path, { method: 'POST', body: formData }, true);
     }
 
     // -------------------- 视图切换 --------------------
@@ -1008,11 +1229,16 @@
     }
 
     // -------------------- 插件列表 --------------------
+    let pluginListGeneration = 0;
+    let editPluginCurrent = () => true;
+
     function setListState(stateName, message) {
+        if (stateName === 'loading') pluginListGeneration++;
         $('#list-loading').hidden = stateName !== 'loading';
         $('#list-empty').hidden = stateName !== 'empty';
         $('#list-error').hidden = stateName !== 'error';
         $('#plugin-grid').hidden = stateName !== 'data';
+        $('#plugin-grid').setAttribute('aria-busy', String(stateName === 'loading'));
         if (stateName === 'error' && message) {
             $('#list-error-msg').textContent = message;
         }
@@ -1071,6 +1297,8 @@
     }
 
     function renderList() {
+        const generation = ++pluginListGeneration;
+        const session = captureAdminSession();
         const grid = $('#plugin-grid');
         const tpl = $('#tpl-plugin-card');
         if (!grid || !tpl) return;
@@ -1083,14 +1311,16 @@
         grid.innerHTML = '';
 
         if (!state.filtered.length) {
-            grid.innerHTML = '<div class="state-block" style="grid-column: 1/-1;">' +
-                '<div class="empty-mark">∅</div><h3>未匹配到插件</h3><p>尝试调整搜索关键字。</p></div>';
+            grid.innerHTML = '<div class="state-block" role="status" aria-atomic="true" style="grid-column: 1/-1;">' +
+                '<div class="empty-mark" aria-hidden="true">∅</div><h3>' + escapeHtml(adminMessage('plugin_no_match')) +
+                '</h3><p>' + escapeHtml(adminMessage('plugin_no_match_hint')) + '</p></div>';
             return;
         }
 
         const frag = document.createDocumentFragment();
         state.filtered.forEach((plugin) => {
             const node = tpl.content.firstElementChild.cloneNode(true);
+            localizeAdminPluginUI(node);
             const id = plugin.plugin_id || plugin.id || '';
             const name = plugin.name || id;
 
@@ -1101,10 +1331,10 @@
 
             const badge = $('.js-status', node);
             if (plugin.enabled) {
-                badge.textContent = '启用中';
+                badge.textContent = adminMessage('plugin_active');
                 badge.classList.add('is-on');
             } else {
-                badge.textContent = '已禁用';
+                badge.textContent = adminMessage('plugin_disabled');
                 badge.classList.add('is-off');
             }
 
@@ -1114,19 +1344,25 @@
             $('.js-created', node).textContent = formatDate(plugin.created_at || plugin.create_time || plugin.createdAt);
 
             const permsEl = $('.js-perms', node);
-            const perms = Array.isArray(plugin.permissions) ? plugin.permissions : [];
-            if (perms.length) {
-                permsEl.innerHTML = perms.map((p) => `<span class="perm-chip" title="${escapeHtml(p)}">${escapeHtml(PERM_LABELS[p] || p)}</span>`).join('');
+            const perms = plugin.permissions_valid !== false && Array.isArray(plugin.permissions) ? plugin.permissions : [];
+            if (plugin.permissions_valid === false) {
+                permsEl.textContent = adminMessage('plugin_permissions_unavailable');
+            } else if (perms.length) {
+                permsEl.innerHTML = perms.map((p) => `<span class="perm-chip" title="${escapeHtml(p)}">${escapeHtml(ALL_PERMS.includes(p) ? adminMessage(PERM_LABELS[p]) : p)}</span>`).join('');
             } else {
-                permsEl.textContent = '—';
+                permsEl.textContent = adminMessage('plugin_permissions_none');
             }
 
             const toggleBtn = $('.js-toggle', node);
-            toggleBtn.textContent = plugin.enabled ? '禁用' : '启用';
+            toggleBtn.textContent = adminMessage(plugin.enabled ? 'plugin_disable' : 'plugin_enable');
+
+            const isCurrent = () => generation === pluginListGeneration && node.isConnected && session.isCurrent();
 
             // 操作绑定
             $$('button[data-act]', node).forEach((btn) => {
-                btn.addEventListener('click', () => onCardAction(btn.dataset.act, plugin, btn));
+                btn.setAttribute('aria-label', adminMessage('plugin_action_name')
+                    .replace('{action}', () => btn.textContent).replace('{plugin}', () => name));
+                btn.addEventListener('click', () => onCardAction(btn.dataset.act, plugin, btn, isCurrent));
             });
 
             frag.appendChild(node);
@@ -1134,12 +1370,12 @@
         grid.appendChild(frag);
     }
 
-    function onCardAction(act, plugin, btn) {
-        const id = plugin.plugin_id || plugin.id;
-        if (act === 'edit') return openEditModal(plugin);
-        if (act === 'rotate') return rotateKey(plugin, btn);
-        if (act === 'toggle') return togglePlugin(plugin, btn);
-        if (act === 'delete') return deletePlugin(plugin, btn);
+    function onCardAction(act, plugin, btn, parentCurrent = () => true) {
+        if (!parentCurrent()) return;
+        if (act === 'edit') return openEditModal(plugin, parentCurrent);
+        if (act === 'rotate') return rotateKey(plugin, btn, parentCurrent);
+        if (act === 'toggle') return togglePlugin(plugin, btn, parentCurrent);
+        if (act === 'delete') return deletePlugin(plugin, btn, parentCurrent);
     }
 
     // -------------------- 模态框 --------------------
@@ -1151,7 +1387,11 @@
         adminModalFocus().open(el);
     }
     function closeModal(id) {
-        if (id === 'modal-key') resetAdminKeyCopy();
+        if (id === 'modal-key') {
+            resetAdminKeyCopy();
+            const key = $('#key-display');
+            if (key) key.textContent = '';
+        }
         if (id === 'modal-confirm') state.confirmHandler = null;
         if (id === 'modal-dispute') adminReadOperations.delete('dispute-detail');
         const el = document.getElementById(id) || adminModalFocusController?.findMask(id);
@@ -1209,22 +1449,29 @@
             const fd = new FormData(form);
             const pluginId = String(fd.get('plugin_id') || '').trim();
             const name = String(fd.get('name') || '').trim();
-            if (!/^[A-Za-z0-9_]{3,50}$/.test(pluginId)) {
-                showError(errBox, 'plugin_id 仅允许英文/数字/下划线，长度 3-50。');
+            if (!/^[a-z0-9_]{3,50}$/.test(pluginId)) {
+                showError(errBox, adminMessage('plugin_id_invalid'));
+                form.querySelector('[name="plugin_id"]').focus();
                 return;
             }
             if (!name) {
-                showError(errBox, '请填写插件名称。');
+                showError(errBox, adminMessage('plugin_name_required'));
+                form.querySelector('[name="name"]').focus();
+                return;
+            }
+
+            let fields;
+            try { fields = readPluginFields(fd, name); }
+            catch (error) {
+                showError(errBox, error.message);
+                form.querySelector('[name="' + error.field + '"]').focus();
                 return;
             }
 
             const payload = {
                 plugin_id: pluginId,
                 name: name,
-                description: String(fd.get('description') || '').trim(),
-                rate_limit: toIntOr(fd.get('rate_limit'), 100),
-                max_deduct_per_tx: toIntOr(fd.get('max_deduct_per_tx'), 100),
-                max_deduct_per_day: toIntOr(fd.get('max_deduct_per_day'), 1000),
+                ...fields,
                 permissions: fd.getAll('permissions'),
             };
 
@@ -1238,24 +1485,56 @@
                 modal.assertCurrent();
                 const result = confirmAdminPluginWrite(data, pluginId, 'create');
                 closeModal('modal-create');
-                showKeyModal(result.plugin_key, '请妥善保存此 Key，关闭后将无法再次查看。');
+                showKeyModal(result.plugin_key, adminMessage('plugin_key_save_hint'));
                 await loadPlugins();
             } catch (err) {
                 if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent()) return;
-                showError(errBox, err.message || '创建失败');
+                showError(errBox, err.message || adminMessage('plugin_create_failed'));
             } finally {
                 finishBusy();
             }
         });
     }
 
+    const PLUGIN_LIMITS = {
+        rate_limit: { initial: 100, max: 10000, labelKey: 'plugin_rate_label' },
+        max_deduct_per_tx: { initial: 100, max: 10000, labelKey: 'plugin_tx_label' },
+        max_deduct_per_day: { initial: 1000, max: 100000, labelKey: 'plugin_day_label' }
+    };
+
+    function readPluginFields(fd, name) {
+        const reject = (field, message) => {
+            const error = new ApiError(message, 0);
+            error.field = field;
+            throw error;
+        };
+        if (Array.from(name).length > 100) reject('name', adminMessage('plugin_name_long'));
+        const description = String(fd.get('description') || '').trim();
+        if (Array.from(description).length > 500) reject('description', adminMessage('plugin_description_long'));
+        const fields = { description };
+        for (const [field, rule] of Object.entries(PLUGIN_LIMITS)) {
+            const raw = fd.get(field);
+            const value = raw === null || raw === '' ? rule.initial : typeof raw === 'string' ? Number(raw) : NaN;
+            if (!Number.isSafeInteger(value) || value < 1 || value > rule.max) {
+                const message = adminMessage('plugin_limit_invalid')
+                    .replace('{field}', () => adminMessage(rule.labelKey)).replace('{max}', () => rule.max);
+                reject(field, message);
+            }
+            fields[field] = value;
+        }
+        return fields;
+    }
+
     function toIntOr(value, fallback) {
         const num = parseInt(value, 10);
         return isNaN(num) ? fallback : num;
     }
 
     // -------------------- 编辑插件 --------------------
-    function openEditModal(plugin) {
+    function openEditModal(plugin, parentCurrent = () => true) {
+        if (!parentCurrent()) return;
+        const session = captureAdminSession();
+        editPluginCurrent = () => session.isCurrent() && parentCurrent();
         const form = $('#form-edit');
         form.reset();
         showError($('#form-edit-error'), '');
@@ -1270,11 +1549,14 @@
         form.querySelector('[name="max_deduct_per_tx"]').value = plugin.max_deduct_per_tx ?? 100;
         form.querySelector('[name="max_deduct_per_day"]').value = plugin.max_deduct_per_day ?? 1000;
 
-        const perms = Array.isArray(plugin.permissions) ? plugin.permissions : [];
+        const perms = plugin.permissions_valid !== false && Array.isArray(plugin.permissions) ? plugin.permissions : [];
         $$('#form-edit input[name="permissions"]').forEach((cb) => {
             cb.checked = perms.includes(cb.value);
         });
 
+        if (plugin.permissions_valid === false) {
+            showError($('#form-edit-error'), adminMessage('plugin_permissions_review'));
+        }
         $('#edit-key-display').textContent = plugin.plugin_key || maskKey(id);
 
         openModal('modal-edit');
@@ -1284,22 +1566,29 @@
         const form = $('#form-edit');
         form.addEventListener('submit', async (event) => {
             event.preventDefault();
+            const isCurrent = editPluginCurrent;
+            if (!isCurrent()) return;
             const errBox = $('#form-edit-error');
             showError(errBox, '');
 
             const id = form.dataset.pluginId;
-            if (!id) { showError(errBox, '插件标识缺失'); return; }
+            if (!id) { showError(errBox, adminMessage('plugin_id_missing')); return; }
 
             const fd = new FormData(form);
             const name = String(fd.get('name') || '').trim();
-            if (!name) { showError(errBox, '请填写插件名称。'); return; }
+            if (!name) { showError(errBox, adminMessage('plugin_name_required')); form.querySelector('[name="name"]').focus(); return; }
+
+            let fields;
+            try { fields = readPluginFields(fd, name); }
+            catch (error) {
+                showError(errBox, error.message);
+                form.querySelector('[name="' + error.field + '"]').focus();
+                return;
+            }
 
             const payload = {
                 name: name,
-                description: String(fd.get('description') || '').trim(),
-                rate_limit: toIntOr(fd.get('rate_limit'), 100),
-                max_deduct_per_tx: toIntOr(fd.get('max_deduct_per_tx'), 100),
-                max_deduct_per_day: toIntOr(fd.get('max_deduct_per_day'), 1000),
+                ...fields,
                 permissions: fd.getAll('permissions'),
             };
 
@@ -1311,13 +1600,14 @@
                 const response = await apiRequest('PUT', '/api/admin/plugins/' + encodeURIComponent(id), payload);
                 finishBusy.assertCurrent();
                 modal.assertCurrent();
+                if (!isCurrent()) return;
                 confirmAdminPluginWrite(response, id, 'edit');
                 closeModal('modal-edit');
-                toast('修改已保存', 'success');
+                toast(adminMessage('plugin_saved'), 'success');
                 await loadPlugins();
             } catch (err) {
-                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent()) return;
-                showError(errBox, err.message || '保存失败');
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !modal.isCurrent() || !isCurrent()) return;
+                showError(errBox, err.message || adminMessage('plugin_edit_failed'));
             } finally {
                 finishBusy();
             }
@@ -1325,53 +1615,67 @@
     }
 
     // -------------------- 轮换 / 切换 / 删除 --------------------
-    function rotateKey(plugin, btn) {
+    function rotateKey(plugin, btn, parentCurrent = () => true) {
+        if (!parentCurrent()) return;
+        const session = captureAdminSession();
+        const isCurrent = () => session.isCurrent() && parentCurrent();
         const id = plugin.plugin_id || plugin.id;
         confirmAction({
-            title: '轮换 Key',
-            message: `轮换后旧 Key 立即失效，确定继续？\n插件：${plugin.name || id}`,
-            okText: '确认轮换',
+            title: adminMessage('plugin_rotate'),
+            message: adminMessage('plugin_rotate_message').replace('{plugin}', () => plugin.name || id),
+            okText: adminMessage('plugin_rotate_confirm'),
             danger: false,
             onConfirm: async (assertCurrent) => {
+                assertAdminSession({ isCurrent });
+                assertCurrent();
                 const data = await apiRequest('POST', '/api/admin/plugins/' + encodeURIComponent(id) + '/rotate-key');
                 assertCurrent();
+                assertAdminSession({ isCurrent });
                 const result = confirmAdminPluginWrite(data, id, 'rotate');
-                showKeyModal(result.plugin_key, '新 Key 已生成，请妥善保存。旧 Key 已失效。');
+                showKeyModal(result.plugin_key, adminMessage('plugin_key_rotated_hint'));
                 await loadPlugins();
             },
         });
     }
 
-    function togglePlugin(plugin, btn) {
+    function togglePlugin(plugin, btn, parentCurrent = () => true) {
+        if (!parentCurrent()) return;
         const id = plugin.plugin_id || plugin.id;
         const finishBusy = startAdminBusy(btn);
         if (!finishBusy) return;
         apiRequest('POST', '/api/admin/plugins/' + encodeURIComponent(id) + '/toggle')
             .then(async (response) => {
                 finishBusy.assertCurrent();
+                if (!parentCurrent()) return;
                 const result = confirmAdminPluginWrite(response, id, 'toggle');
-                toast(result.enabled ? '插件已启用' : '插件已禁用', 'success');
+                toast(adminMessage(result.enabled ? 'plugin_now_enabled' : 'plugin_now_disabled'), 'success');
                 await loadPlugins();
             })
             .catch((err) => {
-                if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
-                toast(err.message || '切换状态失败', 'error');
+                if (isStaleSessionError(err) || !finishBusy.isCurrent() || !parentCurrent()) return;
+                toast(err.message || adminMessage('plugin_toggle_failed'), 'error');
             })
             .finally(() => finishBusy());
     }
 
-    function deletePlugin(plugin, btn) {
+    function deletePlugin(plugin, btn, parentCurrent = () => true) {
+        if (!parentCurrent()) return;
+        const session = captureAdminSession();
+        const isCurrent = () => session.isCurrent() && parentCurrent();
         const id = plugin.plugin_id || plugin.id;
         confirmAction({
-            title: '删除插件',
-            message: `确定删除插件「${plugin.name || id}」？此操作不可逆。`,
-            okText: '确认删除',
+            title: adminMessage('plugin_delete'),
+            message: adminMessage('plugin_delete_message').replace('{plugin}', () => plugin.name || id),
+            okText: adminMessage('plugin_delete_confirm'),
             danger: true,
             onConfirm: async (assertCurrent) => {
+                assertAdminSession({ isCurrent });
+                assertCurrent();
                 const response = await apiRequest('DELETE', '/api/admin/plugins/' + encodeURIComponent(id));
                 assertCurrent();
+                assertAdminSession({ isCurrent });
                 confirmAdminPluginWrite(response, id, 'delete');
-                toast('插件已删除', 'success');
+                toast(adminMessage('plugin_deleted'), 'success');
                 await loadPlugins();
             },
         });
@@ -2462,7 +2766,18 @@
     }
 
     // -------------------- 主视图绑定 --------------------
+    function localizeAdminPluginUI(root = document) {
+        $$('[data-admin-plugin-text]', root).forEach(node => { node.textContent = adminMessage(node.dataset.adminPluginText); });
+        for (const [kind, attribute] of [['placeholder', 'placeholder'], ['label', 'aria-label'], ['title', 'title'], ['empty', 'data-empty-description']]) {
+            $$('[data-admin-plugin-' + kind + ']', root).forEach(node => {
+                const key = node.dataset['adminPlugin' + kind[0].toUpperCase() + kind.slice(1)];
+                node.setAttribute(attribute, adminMessage(key));
+            });
+        }
+    }
+
     function bindMain() {
+        localizeAdminPluginUI();
         $('#btn-logout').addEventListener('click', () => {
             confirmAction({
                 title: adminMessage('logout_title'),
@@ -2484,12 +2799,12 @@
             try {
                 await loadPlugins();
                 finishBusy.assertCurrent();
-                toast('已刷新', 'success');
+                toast(adminMessage('plugin_refreshed'), 'success');
             } catch (err) {
                 if (isStaleSessionError(err) || !finishBusy.isCurrent()) return;
                 if (!(err instanceof ApiError && err.status === 401)) {
-                    setListState('error', err.message || '加载失败');
-                    toast(err.message || '加载失败', 'error');
+                    setListState('error', err.message || adminMessage('plugin_load_failed'));
+                    toast(err.message || adminMessage('plugin_load_failed'), 'error');
                 }
             } finally {
                 finishBusy();
@@ -2501,7 +2816,7 @@
             catch (err) {
                 if (isStaleSessionError(err)) return;
                 if (!(err instanceof ApiError && err.status === 401)) {
-                    setListState('error', err.message || '加载失败');
+                    setListState('error', err.message || adminMessage('plugin_load_failed'));
                 }
             }
         });

管理界面/index.html

@@ -81,8 +81,8 @@
                         <div class="brand-sub">Plugin Admin</div>
                     </div>
                 </div>
-                <nav class="crumbs" aria-label="位置">
-                    <span>控制台</span>
+                <nav class="crumbs" aria-label="位置" data-admin-plugin-label="plugin_location">
+                    <span data-admin-plugin-text="plugin_console">控制台</span>
                     <span class="crumbs-sep">/</span>
                     <span class="crumbs-current">第三方插件</span>
                 </nav>
@@ -112,53 +112,53 @@
             <div class="tab-panel" id="panel-plugins" role="tabpanel" aria-labelledby="tab-plugins" tabindex="0">
             <section class="page-head">
                 <div class="page-head-text">
-                    <h1>第三方插件</h1>
-                    <p class="page-sub">管理 plugin_key、限流配额、权限与启用状态。</p>
+                    <h1 data-admin-plugin-text="plugin_title">第三方插件</h1>
+                    <p class="page-sub" data-admin-plugin-text="plugin_subtitle">管理 plugin_key、限流配额、权限与启用状态。</p>
                 </div>
                 <div class="page-head-actions">
                     <div class="search-wrap">
-                        <input type="search" id="search-input" placeholder="搜索 plugin_id 或 名称…">
+                        <input type="search" id="search-input" data-admin-plugin-label="plugin_search" data-admin-plugin-placeholder="plugin_search_placeholder" placeholder="搜索 plugin_id 或 名称…">
                     </div>
-                    <button type="button" id="btn-refresh" class="btn btn-secondary" title="刷新">
-                        <span class="btn-label">刷新</span>
+                    <button type="button" id="btn-refresh" data-admin-plugin-title="plugin_refresh" class="btn btn-secondary" title="刷新">
+                        <span class="btn-label" data-admin-plugin-text="plugin_refresh">刷新</span>
                     </button>
                     <button type="button" id="btn-create" class="btn btn-primary">
                         <span class="btn-icon" aria-hidden="true">+</span>
-                        <span class="btn-label">创建新插件</span>
+                        <span class="btn-label" data-admin-plugin-text="plugin_create">创建新插件</span>
                     </button>
                 </div>
             </section>
 
             <section class="stat-row" id="stat-row">
                 <div class="stat-card">
-                    <div class="stat-label">插件总数</div>
+                    <div class="stat-label" data-admin-plugin-text="plugin_total">插件总数</div>
                     <div class="stat-value" id="stat-total">—</div>
                 </div>
                 <div class="stat-card">
-                    <div class="stat-label">已启用</div>
+                    <div class="stat-label" data-admin-plugin-text="plugin_enabled">已启用</div>
                     <div class="stat-value text-success" id="stat-enabled">—</div>
                 </div>
                 <div class="stat-card">
-                    <div class="stat-label">已禁用</div>
+                    <div class="stat-label" data-admin-plugin-text="plugin_disabled">已禁用</div>
                     <div class="stat-value text-warning" id="stat-disabled">—</div>
                 </div>
             </section>
 
             <section class="list-shell">
-                <div id="list-loading" class="state-block" hidden>
+                <div id="list-loading" role="status" aria-atomic="true" class="state-block" hidden>
                     <div class="spinner-lg" aria-hidden="true"></div>
-                    <p>正在加载插件列表…</p>
+                    <p data-admin-plugin-text="plugin_loading">正在加载插件列表…</p>
                 </div>
-                <div id="list-empty" class="state-block" hidden>
+                <div id="list-empty" role="status" aria-atomic="true" class="state-block" hidden>
                     <div class="empty-mark">∅</div>
-                    <h3>暂无插件</h3>
-                    <p>点击右上角「创建新插件」开始接入第三方应用。</p>
+                    <h3 data-admin-plugin-text="plugin_empty">暂无插件</h3>
+                    <p data-admin-plugin-text="plugin_empty_hint">点击右上角「创建新插件」开始接入第三方应用。</p>
                 </div>
-                <div id="list-error" class="state-block state-error" hidden>
+                <div id="list-error" role="alert" aria-atomic="true" class="state-block state-error" hidden>
                     <div class="empty-mark">!</div>
-                    <h3>加载失败</h3>
-                    <p id="list-error-msg">请稍后重试。</p>
-                    <button type="button" class="btn btn-secondary" id="btn-retry">重新加载</button>
+                    <h3 data-admin-plugin-text="plugin_load_failed">加载失败</h3>
+                    <p id="list-error-msg" data-admin-plugin-text="plugin_retry_hint">请稍后重试。</p>
+                    <button type="button" class="btn btn-secondary" id="btn-retry" data-admin-plugin-text="plugin_retry">重新加载</button>
                 </div>
                 <div id="plugin-grid" class="plugin-grid"></div>
             </section>
@@ -482,59 +482,59 @@
     <div id="modal-create" class="modal-mask" hidden>
         <div class="modal modal-lg" role="dialog" aria-modal="true" aria-labelledby="modal-create-title">
             <header class="modal-header">
-                <h3 id="modal-create-title">创建新插件</h3>
-                <button type="button" class="modal-close" data-close="modal-create" aria-label="关闭">×</button>
+                <h3 id="modal-create-title" data-admin-plugin-text="plugin_create">创建新插件</h3>
+                <button type="button" class="modal-close" data-close="modal-create" aria-label="关闭" data-admin-plugin-label="close_dialog">×</button>
             </header>
             <form id="form-create" class="modal-body" novalidate>
+                <div class="form-error" id="form-create-error" role="alert" aria-atomic="true" hidden></div>
                 <div class="grid-2">
                     <label class="field">
                         <span class="field-label">plugin_id <span class="required">*</span></span>
-                        <input type="text" name="plugin_id" required pattern="^[A-Za-z0-9_]{3,50}$"
-                               placeholder="英文/数字/下划线，3-50 字符">
-                        <span class="field-hint">用于标识插件，创建后不可修改。</span>
+                        <input type="text" name="plugin_id" required pattern="^[a-z0-9_]{3,50}$" maxlength="50"
+                               placeholder="小写英文/数字/下划线，3-50 字符" data-admin-plugin-placeholder="plugin_id_placeholder">
+                        <span class="field-hint" data-admin-plugin-text="plugin_id_hint">用于标识插件，创建后不可修改。</span>
                     </label>
                     <label class="field">
-                        <span class="field-label">名称 <span class="required">*</span></span>
-                        <input type="text" name="name" required placeholder="例如：示例插件">
+                        <span class="field-label"><span data-admin-plugin-text="plugin_name">名称</span> <span class="required">*</span></span>
+                        <input type="text" name="name" required placeholder="例如：示例插件" data-admin-plugin-placeholder="plugin_name_placeholder">
                     </label>
                 </div>
 
                 <label class="field">
-                    <span class="field-label">描述</span>
-                    <textarea name="description" rows="2" placeholder="对该插件的简要说明（可选）"></textarea>
+                    <span class="field-label" data-admin-plugin-text="plugin_description">描述</span>
+                    <textarea name="description" rows="2" placeholder="对该插件的简要说明（可选）" data-admin-plugin-placeholder="plugin_description_placeholder"></textarea>
                 </label>
 
                 <div class="grid-3">
                     <label class="field">
-                        <span class="field-label">每分钟限流</span>
-                        <input type="number" name="rate_limit" min="1" value="100">
+                        <span class="field-label" data-admin-plugin-text="plugin_rate_label">每分钟限流</span>
+                        <input type="number" name="rate_limit" min="1" max="10000" step="1" value="100">
                     </label>
                     <label class="field">
-                        <span class="field-label">单笔扣款上限</span>
-                        <input type="number" name="max_deduct_per_tx" min="0" value="100">
+                        <span class="field-label" data-admin-plugin-text="plugin_tx_label">单笔扣款上限</span>
+                        <input type="number" name="max_deduct_per_tx" min="1" max="10000" step="1" value="100">
                     </label>
                     <label class="field">
-                        <span class="field-label">日扣款上限</span>
-                        <input type="number" name="max_deduct_per_day" min="0" value="1000">
+                        <span class="field-label" data-admin-plugin-text="plugin_day_label">日扣款上限</span>
+                        <input type="number" name="max_deduct_per_day" min="1" max="100000" step="1" value="1000">
                     </label>
                 </div>
 
                 <fieldset class="field perm-field">
-                    <legend class="field-label">权限</legend>
+                    <legend class="field-label" data-admin-plugin-text="plugin_permissions">权限</legend>
                     <div class="perm-grid">
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="verify" checked><span>验证 Key</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="balance" checked><span>查询余额</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="deduct" checked><span>扣除积分</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="refund"><span>退款回滚</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="verify" checked><span data-admin-plugin-text="plugin_perm_verify">验证 Key</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="balance" checked><span data-admin-plugin-text="plugin_perm_balance">查询余额</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="deduct" checked><span data-admin-plugin-text="plugin_perm_deduct">扣除积分</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="refund"><span data-admin-plugin-text="plugin_perm_refund">退款回滚</span></label>
                     </div>
                 </fieldset>
 
-                <div class="form-error" id="form-create-error" hidden></div>
             </form>
             <footer class="modal-footer">
-                <button type="button" class="btn btn-ghost" data-close="modal-create">取消</button>
+                <button type="button" class="btn btn-ghost" data-close="modal-create" data-admin-plugin-text="plugin_cancel">取消</button>
                 <button type="submit" form="form-create" id="btn-create-submit" class="btn btn-primary">
-                    <span class="btn-label">创建插件</span>
+                    <span class="btn-label" data-admin-plugin-text="plugin_create_submit">创建插件</span>
                     <span class="btn-spinner" aria-hidden="true"></span>
                 </button>
             </footer>
@@ -545,64 +545,64 @@
     <div id="modal-edit" class="modal-mask" hidden>
         <div class="modal modal-lg" role="dialog" aria-modal="true" aria-labelledby="modal-edit-title">
             <header class="modal-header">
-                <h3 id="modal-edit-title">编辑插件</h3>
-                <button type="button" class="modal-close" data-close="modal-edit" aria-label="关闭">×</button>
+                <h3 id="modal-edit-title" data-admin-plugin-text="plugin_edit_title">编辑插件</h3>
+                <button type="button" class="modal-close" data-close="modal-edit" aria-label="关闭" data-admin-plugin-label="close_dialog">×</button>
             </header>
             <form id="form-edit" class="modal-body" novalidate>
+                <div class="form-error" id="form-edit-error" role="alert" aria-atomic="true" hidden></div>
                 <div class="grid-2">
                     <label class="field">
                         <span class="field-label">plugin_id</span>
                         <input type="text" name="plugin_id" disabled>
-                        <span class="field-hint">不可修改。</span>
+                        <span class="field-hint" data-admin-plugin-text="plugin_id_fixed">不可修改。</span>
                     </label>
                     <label class="field">
-                        <span class="field-label">名称 <span class="required">*</span></span>
+                        <span class="field-label"><span data-admin-plugin-text="plugin_name">名称</span> <span class="required">*</span></span>
                         <input type="text" name="name" required>
                     </label>
                 </div>
 
                 <label class="field">
-                    <span class="field-label">描述</span>
+                    <span class="field-label" data-admin-plugin-text="plugin_description">描述</span>
                     <textarea name="description" rows="2"></textarea>
                 </label>
 
                 <div class="grid-3">
                     <label class="field">
-                        <span class="field-label">每分钟限流</span>
-                        <input type="number" name="rate_limit" min="1">
+                        <span class="field-label" data-admin-plugin-text="plugin_rate_label">每分钟限流</span>
+                        <input type="number" name="rate_limit" min="1" max="10000" step="1">
                     </label>
                     <label class="field">
-                        <span class="field-label">单笔扣款上限</span>
-                        <input type="number" name="max_deduct_per_tx" min="0">
+                        <span class="field-label" data-admin-plugin-text="plugin_tx_label">单笔扣款上限</span>
+                        <input type="number" name="max_deduct_per_tx" min="1" max="10000" step="1">
                     </label>
                     <label class="field">
-                        <span class="field-label">日扣款上限</span>
-                        <input type="number" name="max_deduct_per_day" min="0">
+                        <span class="field-label" data-admin-plugin-text="plugin_day_label">日扣款上限</span>
+                        <input type="number" name="max_deduct_per_day" min="1" max="100000" step="1">
                     </label>
                 </div>
 
                 <fieldset class="field perm-field">
-                    <legend class="field-label">权限</legend>
+                    <legend class="field-label" data-admin-plugin-text="plugin_permissions">权限</legend>
                     <div class="perm-grid">
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="verify"><span>验证 Key</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="balance"><span>查询余额</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="deduct"><span>扣除积分</span></label>
-                        <label class="perm-item"><input type="checkbox" name="permissions" value="refund"><span>退款回滚</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="verify"><span data-admin-plugin-text="plugin_perm_verify">验证 Key</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="balance"><span data-admin-plugin-text="plugin_perm_balance">查询余额</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="deduct"><span data-admin-plugin-text="plugin_perm_deduct">扣除积分</span></label>
+                        <label class="perm-item"><input type="checkbox" name="permissions" value="refund"><span data-admin-plugin-text="plugin_perm_refund">退款回滚</span></label>
                     </div>
                 </fieldset>
 
                 <div class="field">
                     <span class="field-label">plugin_key</span>
                     <div class="static-key" id="edit-key-display">—</div>
-                    <span class="field-hint">出于安全考虑，完整 Key 已隐藏。如需更换请使用「轮换 Key」。</span>
+                    <span class="field-hint" data-admin-plugin-text="plugin_key_hidden_hint">出于安全考虑，完整 Key 已隐藏。如需更换请使用「轮换 Key」。</span>
                 </div>
 
-                <div class="form-error" id="form-edit-error" hidden></div>
             </form>
             <footer class="modal-footer">
-                <button type="button" class="btn btn-ghost" data-close="modal-edit">取消</button>
+                <button type="button" class="btn btn-ghost" data-close="modal-edit" data-admin-plugin-text="plugin_cancel">取消</button>
                 <button type="submit" form="form-edit" id="btn-edit-submit" class="btn btn-primary">
-                    <span class="btn-label">保存修改</span>
+                    <span class="btn-label" data-admin-plugin-text="plugin_edit_submit">保存修改</span>
                     <span class="btn-spinner" aria-hidden="true"></span>
                 </button>
             </footer>
@@ -613,24 +613,24 @@
     <div id="modal-key" class="modal-mask" hidden>
         <div class="modal modal-md" role="dialog" aria-modal="true" aria-labelledby="modal-key-title">
             <header class="modal-header">
-                <h3 id="modal-key-title">插件 Key 已生成</h3>
-                <button type="button" class="modal-close" data-close="modal-key" aria-label="关闭">×</button>
+                <h3 id="modal-key-title" data-admin-plugin-text="plugin_key_title">插件 Key 已生成</h3>
+                <button type="button" class="modal-close" data-close="modal-key" aria-label="关闭" data-admin-plugin-label="close_dialog">×</button>
             </header>
             <div class="modal-body">
                 <div class="key-callout">
                     <div class="key-callout-label">PLUGIN KEY</div>
                     <div class="key-callout-value" id="key-display">—</div>
                     <button type="button" id="btn-copy-key" class="btn btn-secondary btn-copy">
-                        <span class="btn-label">复制 Key</span>
+                        <span class="btn-label" data-admin-plugin-text="copy_key">复制 Key</span>
                     </button>
                 </div>
                 <div class="key-warn">
-                    <strong>请妥善保存此 Key</strong>
-                    <span>关闭此对话框后将无法再次查看。如不慎遗失请使用「轮换 Key」生成新凭证。</span>
+                    <strong data-admin-plugin-text="plugin_key_save_title">请妥善保存此 Key</strong>
+                    <span data-admin-plugin-text="plugin_key_save_hint">关闭此对话框后将无法再次查看。如不慎遗失请使用「轮换 Key」生成新凭证。</span>
                 </div>
             </div>
             <footer class="modal-footer">
-                <button type="button" class="btn btn-primary" data-close="modal-key">我已保存</button>
+                <button type="button" class="btn btn-primary" data-close="modal-key" data-admin-plugin-text="plugin_key_done">我已保存</button>
             </footer>
         </div>
     </div>
@@ -687,23 +687,23 @@
                 </div>
                 <span class="badge js-status">—</span>
             </header>
-            <p class="plugin-desc js-desc"></p>
+            <p class="plugin-desc js-desc" data-admin-plugin-empty="plugin_description_empty" data-empty-description="暂无描述"></p>
             <div class="plugin-key-row">
                 <span class="key-label">KEY</span>
                 <code class="js-key">—</code>
             </div>
             <dl class="plugin-meta">
-                <div><dt>限流</dt><dd><span class="js-rate">—</span> <em>次/分钟</em></dd></div>
-                <div><dt>单笔限额</dt><dd class="js-tx">—</dd></div>
-                <div><dt>日限额</dt><dd class="js-day">—</dd></div>
-                <div><dt>权限</dt><dd class="js-perms">—</dd></div>
-                <div class="plugin-meta-full"><dt>创建时间</dt><dd class="js-created">—</dd></div>
+                <div><dt data-admin-plugin-text="plugin_rate">限流</dt><dd><span class="js-rate">—</span> <em data-admin-plugin-text="plugin_rate_unit">次/分钟</em></dd></div>
+                <div><dt data-admin-plugin-text="plugin_tx_limit">单笔限额</dt><dd class="js-tx">—</dd></div>
+                <div><dt data-admin-plugin-text="plugin_day_limit">日限额</dt><dd class="js-day">—</dd></div>
+                <div><dt data-admin-plugin-text="plugin_permissions">权限</dt><dd class="js-perms">—</dd></div>
+                <div class="plugin-meta-full"><dt data-admin-plugin-text="plugin_created">创建时间</dt><dd class="js-created">—</dd></div>
             </dl>
             <footer class="plugin-card-foot">
-                <button type="button" class="btn btn-ghost btn-sm" data-act="edit">编辑</button>
-                <button type="button" class="btn btn-ghost btn-sm" data-act="rotate">轮换 Key</button>
-                <button type="button" class="btn btn-ghost btn-sm js-toggle" data-act="toggle">启用</button>
-                <button type="button" class="btn btn-ghost btn-sm btn-danger-text" data-act="delete">删除</button>
+                <button type="button" class="btn btn-ghost btn-sm" data-act="edit" data-admin-plugin-text="plugin_edit">编辑</button>
+                <button type="button" class="btn btn-ghost btn-sm" data-act="rotate" data-admin-plugin-text="plugin_rotate">轮换 Key</button>
+                <button type="button" class="btn btn-ghost btn-sm js-toggle" data-act="toggle" data-admin-plugin-text="plugin_enable">启用</button>
+                <button type="button" class="btn btn-ghost btn-sm btn-danger-text" data-act="delete" data-admin-plugin-text="plugin_delete">删除</button>
             </footer>
         </article>
     </template>

管理界面/style.css

@@ -647,7 +647,7 @@ code, pre { font-family: var(--font-mono); }
     min-height: 1.55em;
 }
 .plugin-desc:empty::before {
-    content: "暂无描述";
+    content: attr(data-empty-description);
     color: var(--text-dim);
     font-style: italic;
 }
@@ -800,6 +800,8 @@ code, pre { font-family: var(--font-mono); }
     font-size: 14px;
     color: var(--text-soft);
     line-height: 1.6;
+    white-space: pre-wrap;
+    overflow-wrap: anywhere;
 }
 
 /* ---------- Key 高亮展示 ---------- */