fix(agent): 验证采购规格点击并锁定面板滚动 (#214)

Allow up to two consecutive evidence-free PayActivity transition samples after the single safe Back; fail on the third post-Back sample (200ms cadence) to preserve a finite no-click payment boundary.

android/app/build.gradle.kts

@@ -11,8 +11,8 @@ android {
         applicationId = "cn.ilapage.goauto.agent"
         minSdk = 23
         targetSdk = 34
-        versionCode = 51
-        versionName = "0.9.38"
+        versionCode = 52
+        versionName = "0.9.39"
 
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
 

android/app/src/main/java/cn/ilapage/goauto/agent/automation/GoAutoAccessibilityService.kt

@@ -333,31 +333,32 @@ class GoAutoAccessibilityService : AccessibilityService(), UiDriver, PddCollecto
         if (bounds.width() < 2 || bounds.height() < 2 || Build.VERSION.SDK_INT < Build.VERSION_CODES.N) {
             return FreshActionResult.FAILED
         }
-        val path = Path().apply {
-            moveTo(bounds.centerX().toFloat(), bounds.centerY().toFloat())
-        }
-        val completed = AtomicBoolean(false)
-        val latch = CountDownLatch(1)
-        val queued = dispatchGesture(
-            GestureDescription.Builder().addStroke(GestureDescription.StrokeDescription(path, 0, 80)).build(),
-            object : GestureResultCallback() {
-                override fun onCompleted(gestureDescription: GestureDescription?) {
-                    completed.set(true)
-                    latch.countDown()
-                }
+        return if (dispatchCenterTap(bounds)) FreshActionResult.SUCCESS else FreshActionResult.FAILED
+    }
 
-                override fun onCancelled(gestureDescription: GestureDescription?) {
-                    latch.countDown()
-                }
-            },
-            null,
-        )
-        if (!queued) return FreshActionResult.FAILED
-        return if (latch.await(1_500, TimeUnit.MILLISECONDS) && completed.get()) {
-            FreshActionResult.SUCCESS
-        } else {
-            FreshActionResult.FAILED
+    override fun tapSpecFresh(target: SnapshotNode): FreshActionResult {
+        val width = resources.displayMetrics.widthPixels
+        val height = resources.displayMetrics.heightPixels
+        if (!PurchaseSpecGesturePolicy.isAllowed(target, width, height)) return FreshActionResult.FAILED
+        val root = rootInActiveWindow ?: return FreshActionResult.NOT_FOUND
+        val candidates = mutableListOf<AccessibilityNodeInfo>()
+        walk(root) { node ->
+            val bounds = Rect().also(node::getBoundsInScreen)
+            if (node.isVisibleToUser && node.isEnabled &&
+                node.preferredOrDescendantLabel() == target.label &&
+                node.className?.toString() == target.className &&
+                kotlin.math.abs(bounds.centerX() - target.bounds.centerX) <= 32 &&
+                kotlin.math.abs(bounds.centerY() - target.bounds.centerY) <= 32
+            ) candidates += node
         }
+        if (candidates.isEmpty()) return FreshActionResult.NOT_FOUND
+        if (candidates.size != 1) return FreshActionResult.AMBIGUOUS
+        val bounds = Rect().also(candidates.single()::getBoundsInScreen)
+        val freshTarget = target.copy(bounds = NodeBounds(bounds.left, bounds.top, bounds.right, bounds.bottom))
+        if (!PurchaseSpecGesturePolicy.isAllowed(freshTarget, width, height)) {
+            return FreshActionResult.FAILED
+        }
+        return if (dispatchCenterTap(bounds)) FreshActionResult.SUCCESS else FreshActionResult.FAILED
     }
 
     override fun inputFresh(target: SnapshotNode, value: String): FreshActionResult {
@@ -407,7 +408,7 @@ class GoAutoAccessibilityService : AccessibilityService(), UiDriver, PddCollecto
             ) matches += node
         }
         if (matches.size != 1) return false
-        return swipeNode(matches.single(), direction, durationMs, preferScrollAction = false)
+        return swipeNode(matches.single(), direction, durationMs, preferScrollAction = true)
     }
 
     override fun backPurchase(): Boolean = performGlobalAction(GLOBAL_ACTION_BACK)
@@ -617,6 +618,28 @@ class GoAutoAccessibilityService : AccessibilityService(), UiDriver, PddCollecto
         return latch.await(1500, TimeUnit.MILLISECONDS) && completed.get()
     }
 
+    private fun dispatchCenterTap(bounds: Rect): Boolean {
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.N || bounds.width() < 2 || bounds.height() < 2) return false
+        val path = Path().apply { moveTo(bounds.centerX().toFloat(), bounds.centerY().toFloat()) }
+        val completed = AtomicBoolean(false)
+        val latch = CountDownLatch(1)
+        val queued = dispatchGesture(
+            GestureDescription.Builder().addStroke(GestureDescription.StrokeDescription(path, 0, 80)).build(),
+            object : GestureResultCallback() {
+                override fun onCompleted(gestureDescription: GestureDescription?) {
+                    completed.set(true)
+                    latch.countDown()
+                }
+
+                override fun onCancelled(gestureDescription: GestureDescription?) {
+                    latch.countDown()
+                }
+            },
+            null,
+        )
+        return queued && latch.await(1_500, TimeUnit.MILLISECONDS) && completed.get()
+    }
+
     private fun walk(node: AccessibilityNodeInfo, visit: (AccessibilityNodeInfo) -> Unit) {
         visit(node)
         for (index in 0 until node.childCount) node.getChild(index)?.let { walk(it, visit) }

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PddProductDetailCollector.kt

@@ -123,6 +123,9 @@ data class ParsedPddScreen(
     val hasSelectionSummary: Boolean,
     val hasQuantityControls: Boolean,
     val hasOrderSubmitAction: Boolean,
+    val explicitSpecEntryCount: Int,
+    val nestedSpecEntryCount: Int,
+    val bottomPurchaseEntryCount: Int,
     val problem: PageProblem?,
     val sourceNodes: List<SnapshotNode>,
 ) {
@@ -306,6 +309,14 @@ object PddScreenParser {
             orderConfirmationEvidence -> SpecPanelType.ORDER_CONFIRMATION
             panelScrollable != null && (hasSelectionSummary || hasSubmitHint || (hasPanelTitle && hasPanelAction)) -> SpecPanelType.NORMAL_SCROLLABLE
             hasSelectionSummary && hasPanelTitle && hasPanelAction -> SpecPanelType.NON_SCROLLABLE_CONFIRMATION
+            // Some PDD builds expose the complete selector as non-scrollable
+            // before a value is selected, so an "已选" summary is absent. Two
+            // parsed dimensions with selectable values plus the unique quantity
+            // controls and lower-page order action remain required; generic
+            // product/review pages cannot satisfy this combined evidence.
+            panelScrollable == null && headings.size >= 2 && dimensions.size >= 2 &&
+                dimensions.sumOf { it.values.size } >= 2 &&
+                hasQuantityControls && hasOrderSubmitAction -> SpecPanelType.NON_SCROLLABLE_CONFIRMATION
             else -> SpecPanelType.UNKNOWN
         }
         val panelOpen = specPanelType != SpecPanelType.UNKNOWN
@@ -314,19 +325,30 @@ object PddScreenParser {
             .filter { it.bounds.top < firstHeadingTop }
             .mapNotNull { node -> pricePattern.find(node.label)?.groupValues?.get(1)?.let(::priceCent) }
             .firstOrNull()
-        val explicitSpecEntry = if (panelOpen) null else visible
+        val explicitSpecEntries = if (panelOpen) emptyList() else visible
             .filter { it.clickable && isSpecEntry(it.label, config) && !hasReviewContext(it, visibleNodes, config) }
-            .maxByOrNull { it.bounds.top }
-        val bottomSpecEntry = if (panelOpen || explicitSpecEntry != null) null else safeBottomSpecEntry(visibleNodes, visible, config)
-        val candidateSpecEntry = explicitSpecEntry ?: bottomSpecEntry?.anchor
-        val candidateClickTarget = explicitSpecEntry ?: bottomSpecEntry?.clickTarget
+        val explicitSpecEntry = explicitSpecEntries.maxByOrNull { it.bounds.top }
+        val nestedSpecEntries = if (panelOpen || explicitSpecEntry != null) emptyList() else
+            safeNestedSpecEntries(visibleNodes, visible, config)
+        // A nested selection row is accepted only when it is the single safe
+        // candidate. This covers PDD layouts that split “请选择” and the
+        // dimension name across child nodes of one clickable parent, without
+        // turning arbitrary page text into a click target.
+        val nestedSpecEntry = nestedSpecEntries.singleOrNull()
+        val bottomSpecEntries = if (panelOpen || explicitSpecEntry != null || nestedSpecEntry != null) emptyList() else
+            safeBottomSpecEntries(visibleNodes, visible, config)
+        val bottomSpecEntry = bottomSpecEntries.firstOrNull()
+        val candidateSpecEntry = explicitSpecEntry ?: nestedSpecEntry?.anchor ?: bottomSpecEntry?.anchor
+        val candidateClickTarget = explicitSpecEntry ?: nestedSpecEntry?.clickTarget ?: bottomSpecEntry?.clickTarget
         val reviewPageOpen = isReviewPage(visibleNodes, visible, screenHeight, candidateSpecEntry, config)
         val specEntry = candidateSpecEntry.takeUnless { reviewPageOpen }
         val specEntryClickTarget = candidateClickTarget.takeUnless { reviewPageOpen }
         val specEntrySource = when {
             reviewPageOpen -> null
             explicitSpecEntry != null -> "explicit_selection"
-            bottomSpecEntry != null -> "bottom_purchase"
+            nestedSpecEntry != null -> "nested_selection"
+            bottomSpecEntries.size == 1 -> "bottom_purchase"
+            bottomSpecEntry != null -> "bottom_purchase_rightmost"
             else -> null
         }
         val quickConfirmationEntry = if (quickConfirmationEvidence) quickConfirmationSpecEntry(visibleNodes, visible, config) else null
@@ -370,6 +392,9 @@ object PddScreenParser {
             hasSelectionSummary = hasSelectionSummary,
             hasQuantityControls = hasQuantityControls,
             hasOrderSubmitAction = hasOrderSubmitAction,
+            explicitSpecEntryCount = explicitSpecEntries.size,
+            nestedSpecEntryCount = nestedSpecEntries.size,
+            bottomPurchaseEntryCount = bottomSpecEntries.size,
             problem = problem,
             sourceNodes = visibleNodes,
         )
@@ -458,10 +483,40 @@ object PddScreenParser {
         return hasSpecWord && config.textAliases.selection.specEntryPrefixes.any(compact::startsWith)
     }
 
-    private fun safeBottomSpecEntry(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): SafeSpecEntry? {
-        val screenWidth = source.maxOfOrNull { it.bounds.right } ?: return null
-        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return null
-        if (screenWidth <= 0 || screenHeight <= 0) return null
+    private fun safeNestedSpecEntries(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): List<SafeSpecEntry> {
+        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return emptyList()
+        if (screenHeight <= 0) return emptyList()
+        return source.asSequence()
+            .filter { it.visible && it.enabled && it.clickable && it.bounds.width > 0 && it.bounds.height > 0 }
+            // The fixed purchase bar begins at the lower fifth of the screen.
+            // A specs row has no reason to be inside that action-only zone.
+            .filter { it.bounds.centerY.toDouble() < screenHeight * 0.8 }
+            .mapNotNull { candidate ->
+                val context = (listOf(candidate.label) + descendants(candidate, source).map(SnapshotNode::label))
+                    .joinToString("") { it.replace(Regex("\\s+"), "") }
+                if (!isSpecEntryContext(context, config) ||
+                    nonConfigurableClickDenylist.any(context::contains) ||
+                    hasReviewContext(candidate, source, config)
+                ) return@mapNotNull null
+                val anchor = visible.firstOrNull { it.path == candidate.path } ?: candidate
+                SafeSpecEntry(anchor, candidate)
+            }
+            .distinctBy { it.clickTarget.path }
+            .toList()
+    }
+
+    private fun isSpecEntryContext(compact: String, config: PddCollectorConfig): Boolean {
+        if (config.textAliases.review.entryAliases.any(compact::contains)) return false
+        val hasSpecWord = (config.colorAliases + config.sizeAliases +
+            config.textAliases.dimension.exactNames + config.textAliases.dimension.adaptiveAliases)
+            .any(compact::contains)
+        return hasSpecWord && config.textAliases.selection.specEntryPrefixes.any(compact::contains)
+    }
+
+    private fun safeBottomSpecEntries(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): List<SafeSpecEntry> {
+        val screenWidth = source.maxOfOrNull { it.bounds.right } ?: return emptyList()
+        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return emptyList()
+        if (screenWidth <= 0 || screenHeight <= 0) return emptyList()
         val byPath = source.associateBy(SnapshotNode::path)
         val normalizedByPath = visible.associateBy(SnapshotNode::path)
         val buyWords = config.textAliases.purchase.buyWords
@@ -485,8 +540,10 @@ object PddScreenParser {
                 val normalizedTarget = normalizedByPath[clickTarget.path] ?: return@mapNotNull null
                 SafeSpecEntry(normalizedAnchor, normalizedTarget) to clickTarget.bounds.width.toLong() * clickTarget.bounds.height
             }
-            .minWithOrNull(compareBy<Pair<SafeSpecEntry, Long>> { it.second }.thenByDescending { it.first.clickTarget.bounds.centerX })
-            ?.first
+            .sortedWith(compareByDescending<Pair<SafeSpecEntry, Long>> { it.first.clickTarget.bounds.centerX }.thenBy { it.second })
+            .map { it.first }
+            .distinctBy { it.clickTarget.path }
+            .toList()
     }
 
     private fun hasReviewContext(node: SnapshotNode, source: List<SnapshotNode>, config: PddCollectorConfig): Boolean {

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PurchaseLiveAutomation.kt

@@ -117,10 +117,12 @@ class PurchaseLiveAutomation(
             return null
         }
         val labels = linkedSetOf<String>()
-        var backedOutOfPayment = false
+        var paymentBackAttempts = 0
+        var consecutivePaymentSamplesAfterBack = 0
         var backedOutOfChooser = false
         var restoredFromWechat = false
         var pddObservedAfterWechatRestore = false
+        var orderDetailEntryOpened = false
         var wechatRestorePendingSamples = 0
         var consecutiveEmptySnapshots = 0
         repeat(ORDER_RESULT_MAX_SAMPLES) { index ->
@@ -162,24 +164,58 @@ class PurchaseLiveAutomation(
                 return unknown("PURCHASE_ORDER_UNEXPECTED_APP", "核单期间出现未授权应用")
             }
             if (restoredFromWechat) pddObservedAfterWechatRestore = true
-            val paymentVisible = isKnownPddPaymentActivity(snapshot) ||
-                currentLabels.any { label -> PAYMENT_MARKERS.any(label::contains) }
             val orderContextVisible = currentLabels.any { label -> ORDER_CONTEXT_MARKERS.any(label::contains) }
-            if (!paymentVisible && !orderContextVisible) {
+            val unpaidContextVisible = currentLabels.any { label -> UNPAID_MARKERS.any(label::contains) }
+            // PDD can reuse its payment Activity for a read-only unpaid order page.
+            // Visible order-result evidence takes precedence over the Activity name:
+            // it permits only bounded reading gestures below, never a payment click.
+            val paymentVisible = isKnownPddPaymentActivity(snapshot) && !orderContextVisible && !unpaidContextVisible
+            if (paymentVisible) {
+                if (paymentBackAttempts == 0) {
+                    paymentBackAttempts++
+                    if (!driver.backPurchase()) {
+                        return unknown("PURCHASE_ORDER_PAYMENT_BACK_FAILED", "支付页无法安全返回订单详情")
+                    }
+                    pause(500)
+                } else {
+                    consecutivePaymentSamplesAfterBack++
+                    if (consecutivePaymentSamplesAfterBack >= ORDER_RESULT_PAYMENT_POST_BACK_MAX_SAMPLES) {
+                        return unknown(
+                            "PURCHASE_ORDER_PAYMENT_REPEATED",
+                            "支付页安全返回后持续无订单证据，已停止自动核单" +
+                                "[paymentBackAttempts=$paymentBackAttempts;" +
+                                "consecutivePaymentSamplesAfterBack=$consecutivePaymentSamplesAfterBack]",
+                        )
+                    }
+                    pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
+                }
+                return@repeat
+            }
+            consecutivePaymentSamplesAfterBack = 0
+            if (!orderContextVisible && !unpaidContextVisible) {
+                val entries = orderDetailEntryTargets(snapshot)
+                if (entries.size > 1) {
+                    return unknown("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", "订单详情入口不唯一，已停止只读核单")
+                }
+                if (entries.size == 1) {
+                    if (orderDetailEntryOpened) {
+                        return unknown("PURCHASE_ORDER_DETAIL_ENTRY_TIMEOUT", "进入订单详情后页面未出现可验证证据")
+                    }
+                    when (driver.clickFresh(entries.single())) {
+                        FreshActionResult.SUCCESS -> Unit
+                        FreshActionResult.AMBIGUOUS -> return unknown("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", "订单详情入口不唯一，已停止只读核单")
+                        else -> return unknown("PURCHASE_ORDER_DETAIL_ENTRY_FAILED", "订单详情入口点击失败，已停止只读核单")
+                    }
+                    orderDetailEntryOpened = true
+                    pause(500)
+                    return@repeat
+                }
                 pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
                 return@repeat
             }
             currentLabels.forEach(labels::add)
             parseOrderEvidence(labels)?.let { return it }
-            if (paymentVisible && !backedOutOfPayment) {
-                backedOutOfPayment = true
-                if (!driver.backPurchase()) {
-                    return unknown("PURCHASE_ORDER_PAYMENT_BACK_FAILED", "支付页无法安全返回订单详情")
-                }
-                pause(500)
-            } else if (paymentVisible) {
-                return unknown("PURCHASE_ORDER_PAYMENT_REPEATED", "支付页重复出现，已停止自动核单")
-            } else if (index > 0 && index % 15 == 0) {
+            if (index > 0 && index % ORDER_RESULT_SCROLL_SAMPLE_INTERVAL == 0) {
                 driver.swipePurchase(SwipeDirection.UP, 400)
             }
             pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
@@ -371,6 +407,14 @@ class PurchaseLiveAutomation(
         snapshot.nodes.filter { node -> node.visible && node.enabled && FINAL_SUBMIT_MARKERS.any { node.label == it || node.label.startsWith(it) } },
     )
 
+    /** A post-submit navigation target is allowed only when it is one exact, non-payment PDD order-detail entry. */
+    private fun orderDetailEntryTargets(snapshot: UiSnapshot): List<SnapshotNode> = uniqueClickable(
+        snapshot,
+        snapshot.nodes.filter { node ->
+            node.visible && node.enabled && node.label in ORDER_DETAIL_ENTRY_MARKERS
+        },
+    )
+
     private fun pageProblem(snapshot: UiSnapshot) {
         val labels = snapshot.nodes.filter { it.visible }.map { it.label }
         PddPageClassifier.classify(snapshot.packageName, snapshot.activityName, labels)?.let { fail(it.code, it.message) }
@@ -421,6 +465,7 @@ class PurchaseLiveAutomation(
         val FINAL_SUBMIT_MARKERS = listOf("提交订单", "现在买，仅", "确认购买")
         val PAYMENT_MARKERS = listOf("立即支付", "确认支付", "输入支付密码")
         val UNPAID_MARKERS = listOf("待付款", "待支付", "去支付")
+        val ORDER_DETAIL_ENTRY_MARKERS = setOf("查看订单", "订单详情")
         val ORDER_CONTEXT_MARKERS = listOf("订单编号", "订单号", "下单时间", "创建时间")
         val ORDER_NO = Regex("(?:订单编号|订单号)\\s*[:：]?\\s*([A-Za-z0-9-]{6,64})")
         val ORDER_TIME = Regex("(?:下单时间|创建时间)\\s*[:：]?\\s*(20[0-9]{2}[-/.年][0-9]{1,2}[-/.月][0-9]{1,2}日?\\s+[0-9]{1,2}:[0-9]{2}(?::[0-9]{2})?)")
@@ -435,6 +480,8 @@ class PurchaseLiveAutomation(
         const val ORDER_RESULT_MAX_SAMPLES = 60
         const val ORDER_RESULT_MAX_EMPTY_SAMPLES = 15
         const val ORDER_RESULT_WECHAT_RESTORE_MAX_SAMPLES = 15
+        const val ORDER_RESULT_PAYMENT_POST_BACK_MAX_SAMPLES = 3
+        const val ORDER_RESULT_SCROLL_SAMPLE_INTERVAL = 15
         const val ORDER_RESULT_SAMPLE_INTERVAL_MS = 200L
     }
 }

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PurchaseRehearsalExecutor.kt

@@ -11,6 +11,12 @@ interface PurchaseUiDriver {
         reason = FreshClickReason.UNKNOWN,
     )
     fun tapPurchaseFresh(target: SnapshotNode): FreshActionResult
+    /**
+     * Reacquires and center-taps a target that the purchase parser has already
+     * accepted as either a safe spec entry or one exact spec value. Callers
+     * must still verify the semantic postcondition from a fresh snapshot.
+     */
+    fun tapSpecFresh(target: SnapshotNode): FreshActionResult = FreshActionResult.FAILED
     fun inputFresh(target: SnapshotNode, value: String): FreshActionResult
     fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean
     fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean
@@ -20,6 +26,21 @@ interface PurchaseUiDriver {
     fun bringPddToForeground(): Boolean = false
 }
 
+internal object PurchaseSpecGesturePolicy {
+    private val forbiddenLabels = listOf(
+        "提交订单", "创建订单", "确认订单", "确认购买", "支付", "付款",
+        "收货地址", "修改地址", "保存地址",
+    )
+
+    fun isAllowed(target: SnapshotNode, screenWidth: Int, screenHeight: Int): Boolean {
+        val label = target.label.replace(" ", "")
+        return target.visible && target.enabled && label.isNotBlank() &&
+            forbiddenLabels.none(label::contains) &&
+            target.bounds.width >= 2 && target.bounds.height >= 2 &&
+            target.bounds.centerX in 0 until screenWidth && target.bounds.centerY in 0 until screenHeight
+    }
+}
+
 data class PurchaseExecutionInput(
     val taskId: Long,
     val executionMode: String,
@@ -51,6 +72,7 @@ class PurchaseRehearsalExecutor(
     private val probeSpecs: () -> String?,
     private val pause: (Long) -> Unit = Thread::sleep,
     private val stepChanged: (String) -> Unit = {},
+    private val panelDiagnostic: (String) -> Unit = {},
     private val beforeOrderSubmit: (FinalConfirmationEvidence) -> Unit = { throw PurchaseLiveException("PURCHASE_MODE_NOT_ALLOWED", "当前执行器没有正式采购授权") },
 ) {
     fun execute(input: PurchaseExecutionInput, rule: PurchaseRule, supportedCapabilities: Set<String>): PurchaseExecutionOutcome {
@@ -123,7 +145,7 @@ class PurchaseRehearsalExecutor(
                 }
                 return failure
             }
-            applyPostAction(action)?.let { return it }
+            applyPostAction(input, action)?.let { return it }
         }
         if (input.phase == "spec_probe") return failure("PURCHASE_RULE_INVALID", "规格探测任务缺少 probeSpecs 动作")
         return if (input.executionMode == "rehearsal") PurchaseExecutionOutcome("rehearsal_completed", message = "商品、规格、数量和价格复核完成，已在下单前安全停止", actualUnitPriceCent = observedPrice)
@@ -223,8 +245,9 @@ class PurchaseRehearsalExecutor(
         repeat(50) {
             val snapshot = driver.capture()
             pageProblem(snapshot)?.let { return it }
-            if (snapshot.packageName == PDD_PACKAGE && snapshot.nodes.any { it.visible }) {
-                return recoverSoldOut(input, PddScreenParser.parse(snapshot, DEFAULT_COLLECTOR, input.goodsId, null))
+            val screen = PddScreenParser.parse(snapshot, DEFAULT_COLLECTOR, input.goodsId, null)
+            if (screen.hasPurchaseProductEvidence()) {
+                return recoverSoldOut(input, screen)
             }
             pause(100)
         }
@@ -265,37 +288,145 @@ class PurchaseRehearsalExecutor(
 
     private fun openSpecPanel(input: PurchaseExecutionInput, action: PurchaseAction): PurchaseExecutionOutcome? {
         var screen = currentScreen(input)
-        if (screen.reviewPageOpen) return leaveUnexpectedReviewPage(input)
-        screen.problem?.let { return failure(it.code, it.message) }
-        if (screen.specPanelOpen) return null
-        val safeCandidates = listOfNotNull(
-            screen.specEntry?.let { anchor -> anchor to (screen.specEntryClickTarget ?: anchor) },
-            screen.quickConfirmationEntry?.let { it to it },
-        ).distinctBy { it.second.path }
-        // A rule alias may only narrow the semantic candidates already accepted
-        // by PddScreenParser. It must never turn into a raw-page text lookup:
-        // review cards and unrelated controls can share arbitrary labels.
-        val candidates = action.textAliases?.let { aliases ->
-            safeCandidates.filter { (anchor, _) -> specEntryMatchesAliases(screen, anchor, aliases) }
-        } ?: safeCandidates
-        if (candidates.size > 1) return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一")
-        val target = candidates.singleOrNull()?.second ?: return failure(SPEC_ENTRY_NOT_FOUND, "没有找到安全的商品规格入口")
-        val click = driver.clickFreshDetailed(target)
-        when (click.result) {
-            FreshActionResult.AMBIGUOUS -> return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一")
-            FreshActionResult.SUCCESS -> Unit
-            else -> return failure(SPEC_ENTRY_CLICK_FAILED, click.reason.specEntrySubreason())
-        }
-        repeat(30) {
-            screen = currentScreen(input)
+        var entryReadyWaitPolls = 0
+        var target: SnapshotNode? = null
+        while (target == null) {
             if (screen.reviewPageOpen) return leaveUnexpectedReviewPage(input)
             screen.problem?.let { return failure(it.code, it.message) }
             if (screen.specPanelOpen) return null
-            pause(100)
+            val safeCandidates = listOfNotNull(
+                screen.specEntry?.let { anchor -> anchor to (screen.specEntryClickTarget ?: anchor) },
+                screen.quickConfirmationEntry?.let { it to it },
+            ).distinctBy { it.second.path }
+            // A rule alias may only narrow the semantic candidates already accepted
+            // by PddScreenParser. It must never turn into a raw-page text lookup:
+            // review cards and unrelated controls can share arbitrary labels.
+            val candidates = action.textAliases?.let { aliases ->
+                safeCandidates.filter { (anchor, _) -> specEntryMatchesAliases(screen, anchor, aliases) }
+            } ?: safeCandidates
+            if (candidates.size > 1) {
+                panelDiagnostic(specEntryEvidence(screen, candidates.size, entryReadyWaitPolls))
+                return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一 [${specEntryEvidence(screen, candidates.size, entryReadyWaitPolls)}]")
+            }
+            target = candidates.singleOrNull()?.second
+            if (target != null) continue
+            if (entryReadyWaitPolls >= SPEC_ENTRY_READY_WAIT_POLLS) {
+                panelDiagnostic(specEntryEvidence(screen, 0, entryReadyWaitPolls))
+                return failure(SPEC_ENTRY_NOT_FOUND, "没有找到安全的商品规格入口 [${specEntryEvidence(screen, 0, entryReadyWaitPolls)}]")
+            }
+            pause(SPEC_ENTRY_READY_POLL_MILLIS)
+            entryReadyWaitPolls++
+            screen = currentScreen(input)
         }
-        return failure(SPEC_PANEL_NOT_OPENED, "点击后未识别到商品规格面板")
+        val beforeSignature = specActionSignature(screen)
+        val click = driver.clickFreshDetailed(requireNotNull(target))
+        when (click.result) {
+            // The parser already narrowed to a single semantic candidate; the
+            // ambiguity here comes from the live tree matching that target more
+            // than once at click time, so the wording must not claim otherwise.
+            FreshActionResult.AMBIGUOUS -> return failure(
+                SPEC_ENTRY_TARGET_AMBIGUOUS,
+                "规格入口点击目标不唯一 [${specEntryEvidence(screen, 1, entryReadyWaitPolls)}]",
+            )
+            else -> Unit
+        }
+
+        var wait = waitForSpecPanel(input, beforeSignature)
+        wait.failure?.let { return it }
+        if (wait.opened) return null
+        if (wait.changed) {
+            return failure(
+                SPEC_PANEL_EVIDENCE_NOT_MATCHED,
+                "规格入口点击后页面已变化，但规格面板强证据不足 [${panelEvidence(wait.screen)}]",
+            )
+        }
+
+        when (driver.tapSpecFresh(requireNotNull(target))) {
+            FreshActionResult.AMBIGUOUS -> return failure(
+                SPEC_ENTRY_TARGET_AMBIGUOUS,
+                "规格入口手势目标不唯一 [${specEntryEvidence(screen, 1, entryReadyWaitPolls)}]",
+            )
+            FreshActionResult.SUCCESS -> Unit
+            else -> return failure(SPEC_ENTRY_CLICK_FAILED, click.reason.specEntrySubreason())
+        }
+        wait = waitForSpecPanel(input, specActionSignature(wait.screen))
+        wait.failure?.let { return it }
+        if (wait.opened) return null
+        if (wait.changed) {
+            return failure(
+                SPEC_PANEL_EVIDENCE_NOT_MATCHED,
+                "规格入口手势后页面已变化，但规格面板强证据不足 [${panelEvidence(wait.screen)}]",
+            )
+        }
+        return failure(
+            SPEC_ENTRY_CLICK_NO_EFFECT,
+            "规格入口无障碍点击和受控手势后页面均无变化 [${panelEvidence(wait.screen)}]",
+        )
     }
 
+    private data class SpecPanelWait(
+        val screen: ParsedPddScreen,
+        val opened: Boolean,
+        val changed: Boolean,
+        val failure: PurchaseExecutionOutcome? = null,
+    )
+
+    private data class SpecActionNodeSignature(
+        val path: String,
+        val className: String?,
+        val bounds: NodeBounds,
+        val clickable: Boolean,
+        val scrollable: Boolean,
+        val selected: Boolean,
+        val checked: Boolean,
+        val enabled: Boolean,
+        val visible: Boolean,
+    )
+
+    private fun waitForSpecPanel(input: PurchaseExecutionInput, beforeSignature: List<SpecActionNodeSignature>): SpecPanelWait {
+        var last = currentScreen(input)
+        var changed = false
+        repeat(SPEC_POST_CLICK_VERIFY_POLLS) {
+            last = currentScreen(input)
+            panelDiagnostic(panelEvidence(last))
+            if (last.reviewPageOpen) {
+                return SpecPanelWait(last, false, true, leaveUnexpectedReviewPage(input))
+            }
+            last.problem?.let { return SpecPanelWait(last, false, true, failure(it.code, it.message)) }
+            if (last.specPanelOpen) return SpecPanelWait(last, true, true)
+            changed = changed || specActionSignature(last) != beforeSignature
+            pause(SPEC_SELECTION_POLL_MILLIS)
+        }
+        return SpecPanelWait(last, false, changed)
+    }
+
+    /** In-memory only; the signature is never logged, persisted, or uploaded. */
+    private fun specActionSignature(screen: ParsedPddScreen): List<SpecActionNodeSignature> = screen.sourceNodes.map { node ->
+        SpecActionNodeSignature(
+            node.path,
+            node.className,
+            node.bounds,
+            node.clickable,
+            node.scrollable,
+            node.selected,
+            node.checked,
+            node.enabled,
+            node.visible,
+        )
+    }
+
+    private fun panelEvidence(screen: ParsedPddScreen): String =
+        "type=${screen.specPanelType};scrollables=${screen.panelScrollableCount};headings=${screen.panelHeadingCount};" +
+            "options=${screen.panelOptionCount};summary=${screen.hasSelectionSummary};quantity=${screen.hasQuantityControls};" +
+            "orderAction=${screen.hasOrderSubmitAction};pageEvidence=${screen.pageEvidenceMatched}"
+
+    private fun specEntryEvidence(screen: ParsedPddScreen, candidateCount: Int, entryReadyWaitPolls: Int = 0): String =
+        "specEntryCandidates=$candidateCount;explicit=${screen.explicitSpecEntryCount};" +
+            "nested=${screen.nestedSpecEntryCount};bottomPurchase=${screen.bottomPurchaseEntryCount};" +
+            "panelAlreadyOpen=${screen.specPanelOpen};reviewPage=${screen.reviewPageOpen};" +
+            "pageEvidence=${screen.pageEvidenceMatched};entryReadyWaitPolls=$entryReadyWaitPolls;" +
+            "entryReadyWaitMillis=${entryReadyWaitPolls * SPEC_ENTRY_READY_POLL_MILLIS}"
+
     private fun specEntryMatchesAliases(screen: ParsedPddScreen, candidate: SnapshotNode, aliases: List<String>): Boolean {
         val prefix = "${candidate.path}/"
         return (sequenceOf(candidate) + screen.sourceNodes.asSequence().filter { it.path.startsWith(prefix) })
@@ -350,44 +481,39 @@ class PurchaseRehearsalExecutor(
         target: String,
         selectionProofs: MutableMap<String, ExactSpecSelectionProof>,
     ): PurchaseExecutionOutcome? {
-        var lastClickReason = FreshClickReason.UNKNOWN
-        var clickSucceeded = false
-        repeat(SPEC_SELECTION_CLICK_ATTEMPTS) {
-            val lookup = locateExactSpec(input, dimension, target)
-            lookup.failure?.let { return it }
-            val outcome = driver.clickFreshDetailed(requireNotNull(lookup.node))
-            lastClickReason = outcome.reason
-            if (outcome.result == FreshActionResult.AMBIGUOUS) {
-                return failure(SPEC_TARGET_AMBIGUOUS, "精确规格匹配到多个控件")
-            }
-            clickSucceeded = clickSucceeded || outcome.result == FreshActionResult.SUCCESS
+        val initial = currentScreen(input)
+        initial.problem?.let { return failure(it.code, it.message) }
+        if (rememberExactSelection(initial, dimension, target, selectionProofs)) return null
 
-            // PDD rerenders the remaining options after a color selection. A
-            // stale node can report NOT_FOUND/FAILED even when the exact option
-            // was selected. Always verify the observable selected state before
-            // deciding whether to refind and retry the same exact target.
-            val verifyPolls = if (outcome.result == FreshActionResult.SUCCESS) {
-                SPEC_SELECTION_SUCCESS_VERIFY_POLLS
-            } else {
-                SPEC_SELECTION_FAILED_VERIFY_POLLS
-            }
-            repeat(verifyPolls) {
-                val refreshed = currentScreen(input)
-                refreshed.problem?.let { return failure(it.code, it.message) }
-                if (isExactSpecSelected(refreshed, dimension, target)) {
-                    exactSpecSelectionProof(refreshed, dimension, target)?.let { proof ->
-                        selectionProofs[dimension] = proof
-                    }
-                    return null
-                }
-                pause(SPEC_SELECTION_POLL_MILLIS)
-            }
+        val lookup = locateExactSpec(input, dimension, target)
+        lookup.failure?.let { return it }
+        val outcome = driver.clickFreshDetailed(requireNotNull(lookup.node))
+        if (outcome.result == FreshActionResult.AMBIGUOUS) {
+            return failure(SPEC_TARGET_AMBIGUOUS, "精确规格匹配到多个控件")
         }
+        var verification = waitForExactSelection(input, dimension, target, selectionProofs, SPEC_SELECTION_SUCCESS_VERIFY_POLLS)
+        verification.failure?.let { return it }
+        if (verification.confirmed) return null
 
-        if (clickSucceeded) {
+        // Reacquire the exact option after PDD has had a chance to rerender.
+        // The fallback is still bounded to one center gesture and the same
+        // unique, server-provided exact value.
+        val refreshedLookup = locateExactSpec(input, dimension, target)
+        refreshedLookup.failure?.let { return it }
+        val gesture = driver.tapSpecFresh(requireNotNull(refreshedLookup.node))
+        if (gesture == FreshActionResult.AMBIGUOUS) {
+            return failure(SPEC_TARGET_AMBIGUOUS, "精确规格手势目标不唯一")
+        }
+        if (gesture == FreshActionResult.SUCCESS) {
+            verification = waitForExactSelection(input, dimension, target, selectionProofs, SPEC_SELECTION_SUCCESS_VERIFY_POLLS)
+            verification.failure?.let { return it }
+            if (verification.confirmed) return null
+            return failure(SPEC_SELECTION_UNCONFIRMED, "无障碍点击和受控手势后未能确认精确选中状态")
+        }
+        if (outcome.result == FreshActionResult.SUCCESS) {
             return failure(SPEC_SELECTION_UNCONFIRMED, "点击规格后未能确认精确选中状态")
         }
-        val subreason = when (lastClickReason) {
+        val subreason = when (outcome.reason) {
             FreshClickReason.ROOT_UNAVAILABLE -> SPEC_CLICK_ROOT_UNAVAILABLE
             FreshClickReason.TARGET_NOT_FOUND -> SPEC_CLICK_TARGET_STALE
             FreshClickReason.NO_CLICKABLE_ANCESTOR -> SPEC_CLICK_NO_CLICKABLE_ANCESTOR
@@ -397,6 +523,38 @@ class PurchaseRehearsalExecutor(
         return failure(SPEC_CLICK_FAILED, subreason)
     }
 
+    private data class ExactSelectionWait(
+        val confirmed: Boolean,
+        val failure: PurchaseExecutionOutcome? = null,
+    )
+
+    private fun waitForExactSelection(
+        input: PurchaseExecutionInput,
+        dimension: String,
+        target: String,
+        selectionProofs: MutableMap<String, ExactSpecSelectionProof>,
+        polls: Int,
+    ): ExactSelectionWait {
+        repeat(polls) {
+            val refreshed = currentScreen(input)
+            refreshed.problem?.let { return ExactSelectionWait(false, failure(it.code, it.message)) }
+            if (rememberExactSelection(refreshed, dimension, target, selectionProofs)) return ExactSelectionWait(true)
+            pause(SPEC_SELECTION_POLL_MILLIS)
+        }
+        return ExactSelectionWait(false)
+    }
+
+    private fun rememberExactSelection(
+        screen: ParsedPddScreen,
+        dimension: String,
+        target: String,
+        selectionProofs: MutableMap<String, ExactSpecSelectionProof>,
+    ): Boolean {
+        if (!isExactSpecSelected(screen, dimension, target)) return false
+        exactSpecSelectionProof(screen, dimension, target)?.let { proof -> selectionProofs[dimension] = proof }
+        return true
+    }
+
     private fun isExactSpecSelected(screen: ParsedPddScreen, dimension: String, target: String): Boolean {
         val candidates = screen.dimensions.filter { it.key == dimension }.flatMap { it.values }
         if (candidates.any { it.text == target && (it.node.selected || it.node.checked) }) return true
@@ -491,38 +649,40 @@ class PurchaseRehearsalExecutor(
      * that direction early.
      */
     private fun locateExactSpec(input: PurchaseExecutionInput, dimension: String, target: String): SpecLookup {
-        fun inspect(): Pair<SpecLookup?, String> {
+        data class Inspection(val lookup: SpecLookup?, val signature: String, val container: SnapshotNode?)
+        fun inspect(): Inspection {
             val screen = currentScreen(input)
-            screen.problem?.let { return SpecLookup(failure = failure(it.code, it.message)) to "" }
+            screen.problem?.let { return Inspection(SpecLookup(failure = failure(it.code, it.message)), "", null) }
             if (!screen.specPanelOpen) {
-                return SpecLookup(failure = failure("RULE_NOT_MATCHED", "商品规格面板已经关闭")) to ""
+                return Inspection(SpecLookup(failure = failure("RULE_NOT_MATCHED", "商品规格面板已经关闭")), "", null)
             }
             val dimensionValues = screen.dimensions.filter { it.key == dimension }.flatMap { it.values }
             val exact = dimensionValues.filter { it.text == target }
             if (exact.size > 1) {
-                return SpecLookup(failure = failure(SPEC_TARGET_AMBIGUOUS, "精确规格匹配到多个控件")) to ""
+                return Inspection(SpecLookup(failure = failure(SPEC_TARGET_AMBIGUOUS, "精确规格匹配到多个控件")), "", screen.specPanelContainer)
             }
-            if (exact.size == 1 && exact.single().available) return SpecLookup(node = exact.single().node) to ""
+            if (exact.size == 1 && exact.single().available) return Inspection(SpecLookup(node = exact.single().node), "", screen.specPanelContainer)
             if (exact.size == 1) {
-                return SpecLookup(failure = failure(SPEC_SAFE_TARGET_MISSING, "精确规格当前不可安全点击")) to ""
+                return Inspection(SpecLookup(failure = failure(SPEC_SAFE_TARGET_MISSING, "精确规格当前不可安全点击")), "", screen.specPanelContainer)
             }
             val signature = screen.dimensions.joinToString("|") { item ->
                 "${item.key}:${item.values.joinToString(",") { value -> "${value.text}:${value.available}" }}"
             }
-            return null to signature
+            return Inspection(null, signature, screen.specPanelContainer)
         }
 
         var inspected = inspect()
-        inspected.first?.let { return it }
-        var currentSignature = inspected.second
+        inspected.lookup?.let { return it }
+        var currentSignature = inspected.signature
         for ((direction, limit) in listOf(SwipeDirection.DOWN to 3, SwipeDirection.UP to 6)) {
             for (attempt in 0 until limit) {
-                if (!driver.swipePurchase(direction, 350)) break
+                val container = inspected.container ?: break
+                if (!driver.swipePurchaseIn(container, direction, 350)) break
                 pause(300)
                 inspected = inspect()
-                inspected.first?.let { return it }
-                if (inspected.second == currentSignature) break
-                currentSignature = inspected.second
+                inspected.lookup?.let { return it }
+                if (inspected.signature == currentSignature) break
+                currentSignature = inspected.signature
             }
         }
         return SpecLookup(failure = failure(SPEC_TARGET_NOT_VISIBLE, "有界搜索后未找到精确规格"))
@@ -590,9 +750,17 @@ class PurchaseRehearsalExecutor(
         return null
     }
 
-    private fun applyPostAction(action: PurchaseAction): PurchaseExecutionOutcome? {
+    private fun applyPostAction(input: PurchaseExecutionInput, action: PurchaseAction): PurchaseExecutionOutcome? {
         if (action.waitAfterMs > 0) pause(action.waitAfterMs)
         action.swipeAfter?.let { swipe ->
+            // The stock purchase rule asks to reveal additional selector rows after
+            // opening the sheet.  A fully-evidenced non-scrollable selector has no
+            // scroll target, and treating that absence as an action failure blocks
+            // an otherwise safe exact-spec flow.  Keep all other configured swipes
+            // mandatory; this exception is limited to that confirmed panel state.
+            if (action.type == PurchaseActionType.OPEN_SPEC_PANEL &&
+                currentScreen(input).specPanelType == SpecPanelType.NON_SCROLLABLE_CONFIRMATION
+            ) return null
             repeat(swipe.count) { index ->
                 if (!driver.swipePurchase(swipe.direction, swipe.durationMs)) {
                     return failure("RULE_ACTION_FAILED", "规则要求的有限滑动失败")
@@ -644,7 +812,9 @@ class PurchaseRehearsalExecutor(
         private const val OPEN_PRODUCT_POLL_LIMIT = 50
         private const val OPEN_PRODUCT_RETRY_POLLS = 10
         private const val OPEN_PRODUCT_POLL_MILLIS = 100L
-        private const val SPEC_SELECTION_CLICK_ATTEMPTS = 3
+        private const val SPEC_ENTRY_READY_WAIT_POLLS = 20
+        private const val SPEC_ENTRY_READY_POLL_MILLIS = 100L
+        private const val SPEC_POST_CLICK_VERIFY_POLLS = 30
         private const val SPEC_SELECTION_SUCCESS_VERIFY_POLLS = 20
         private const val SPEC_SELECTION_FAILED_VERIFY_POLLS = 5
         private const val SPEC_SELECTION_POLL_MILLIS = 100L
@@ -653,7 +823,8 @@ class PurchaseRehearsalExecutor(
         private const val SPEC_ENTRY_TARGET_AMBIGUOUS = "PURCHASE_SPEC_ENTRY_TARGET_AMBIGUOUS"
         private const val SPEC_ENTRY_CLICK_FAILED = "PURCHASE_SPEC_ENTRY_CLICK_FAILED"
         private const val SPEC_ENTRY_OPENED_REVIEW = "PURCHASE_SPEC_ENTRY_OPENED_REVIEW"
-        private const val SPEC_PANEL_NOT_OPENED = "PURCHASE_SPEC_PANEL_NOT_OPENED"
+        private const val SPEC_ENTRY_CLICK_NO_EFFECT = "PURCHASE_SPEC_ENTRY_CLICK_NO_EFFECT"
+        private const val SPEC_PANEL_EVIDENCE_NOT_MATCHED = "PURCHASE_SPEC_PANEL_EVIDENCE_NOT_MATCHED"
         private const val SPEC_TARGET_NOT_VISIBLE = "PURCHASE_SPEC_TARGET_NOT_VISIBLE"
         private const val SPEC_TARGET_AMBIGUOUS = "PURCHASE_SPEC_TARGET_AMBIGUOUS"
         private const val SPEC_SAFE_TARGET_MISSING = "PURCHASE_SPEC_SAFE_TARGET_MISSING"

android/app/src/main/java/cn/ilapage/goauto/agent/network/AgentApiClient.kt

@@ -226,6 +226,26 @@ class AgentApiClient(private val serverUrl: String) {
         )
     }
 
+    fun recoverRegistration(info: DeviceInfo, token: String?, recoveryCode: String): RegistrationResult {
+        require(recoveryCode.isNotBlank()) { "请输入管理员恢复码" }
+        val payload = JSONObject()
+            .put("requestId", UUID.randomUUID().toString())
+            .put("installId", info.installId)
+            .put("name", info.name)
+            .put("manufacturer", info.manufacturer)
+            .put("model", info.model)
+            .put("androidVersion", info.androidVersion)
+            .put("agentVersion", info.agentVersion)
+            .put("pddVersion", info.pddVersion)
+            .put("capabilities", JSONArray(info.capabilities))
+        val data = post("/api/agent/v1/register", payload, token, recoveryCode).getJSONObject("data")
+        return RegistrationResult(
+            deviceId = data.getLong("deviceId"),
+            deviceToken = data.optString("deviceToken").takeIf { it.isNotBlank() },
+            heartbeatIntervalSeconds = data.optInt("heartbeatIntervalSeconds", 15),
+        )
+    }
+
     fun heartbeat(token: String, currentTaskId: Long?, capabilities: List<String> = emptyList()): HeartbeatResult {
         val payload = JSONObject()
             .put("requestId", UUID.randomUUID().toString())
@@ -590,11 +610,11 @@ class AgentApiClient(private val serverUrl: String) {
         leaseVersion = data.getLong("leaseVersion"),
     )
 
-    private fun post(path: String, payload: JSONObject, token: String?): JSONObject {
-        return requireNotNull(request("POST", path, payload, token))
+    private fun post(path: String, payload: JSONObject, token: String?, recoveryCode: String? = null): JSONObject {
+        return requireNotNull(request("POST", path, payload, token, recoveryCode))
     }
 
-    private fun request(method: String, path: String, payload: JSONObject?, token: String?): JSONObject? {
+    private fun request(method: String, path: String, payload: JSONObject?, token: String?, recoveryCode: String? = null): JSONObject? {
         val connection = (URL(serverUrl + path).openConnection() as HttpURLConnection).apply {
             requestMethod = method
             connectTimeout = 10_000
@@ -605,6 +625,7 @@ class AgentApiClient(private val serverUrl: String) {
             setRequestProperty("Accept", "application/json")
             setRequestProperty("Cache-Control", "no-store")
             if (!token.isNullOrBlank()) setRequestProperty("Authorization", "Bearer $token")
+            if (!recoveryCode.isNullOrBlank()) setRequestProperty("X-GoAuto-Device-Recovery-Code", recoveryCode)
         }
         try {
             if (payload != null) {

android/app/src/main/java/cn/ilapage/goauto/agent/service/AgentForegroundService.kt

@@ -187,11 +187,12 @@ class AgentForegroundService : Service() {
 
             if (!registeredThisProcess.get()) {
                 val registration = api.register(deviceInfo(), credentials?.token)
-                if (credentials == null) {
+                if (registration.deviceToken != null) {
                     val issuedToken = registration.deviceToken
-                        ?: error("注册请求已处理，但未返回新 Token；请联系管理员重新签发")
                     identityStore.saveCredentials(registration.deviceId, issuedToken)
                     credentials = identityStore.credentials() ?: error("设备凭据保存失败")
+                } else if (credentials == null) {
+                    error("注册请求已处理，但未返回新 Token；请联系管理员重新签发")
                 } else {
                     check(registration.deviceId == credentials.deviceId) { "服务端设备身份与本地不一致" }
                 }
@@ -472,6 +473,7 @@ class AgentForegroundService : Service() {
                             openLink = { PddLinkLauncher(this).open(it) },
                             probeSpecs = { collectPurchaseProbe(accessibility, task, parsedRule) },
                             stepChanged = { step -> purchaseStore.updateStep(task.taskId, task.taskAttemptId, step) },
+                            panelDiagnostic = { evidence -> Log.i("GoAutoPurchasePanel", "task=${task.taskId};$evidence") },
                             beforeOrderSubmit = { evidence ->
                                 val boundaryRequestId = UUID.randomUUID().toString()
                                 val finalEvidence = JSONObject()

android/app/src/test/java/cn/ilapage/goauto/agent/PddProductDetailCollectorTest.kt

@@ -367,6 +367,64 @@ class PddProductDetailCollectorTest {
         assertEquals("bottom_purchase", parsed.specEntrySource)
     }
 
+    @Test
+    fun bottomPurchaseEntriesPreferRightmostCandidate() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("buy-left", "单独购买", 446, 2000, 685, 2160, clickable = true),
+                node("buy-right", "发起拼单", 685, 2000, 1080, 2160, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("buy-right", parsed.specEntry?.path)
+        assertEquals("buy-right", parsed.specEntryClickTarget?.path)
+        assertEquals("bottom_purchase_rightmost", parsed.specEntrySource)
+        assertEquals(2, parsed.bottomPurchaseEntryCount)
+    }
+
+    @Test
+    fun equallyRightmostBottomPurchaseEntriesPreferSmallerArea() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("buy-large", "发起拼单", 685, 2000, 1080, 2160, clickable = true),
+                node("buy-small", "立即购买", 785, 2000, 980, 2140, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("buy-small", parsed.specEntry?.path)
+        assertEquals("bottom_purchase_rightmost", parsed.specEntrySource)
+    }
+
+    @Test
+    fun bottomPurchaseCandidatesStillExcludeReviewOrderAndPaymentContexts() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("reviews", "商品评价", 446, 1900, 685, 2160, clickable = true),
+                node("reviews/buy", "购买", 480, 2000, 650, 2100, parentPath = "reviews"),
+                node("order", "购买并提交订单", 685, 2000, 880, 2160, clickable = true),
+                node("payment", "购买后立即支付", 880, 2000, 1080, 2160, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals(null, parsed.specEntry)
+        assertEquals(0, parsed.bottomPurchaseEntryCount)
+    }
+
     @Test
     fun bottomPurchaseInsideReviewCardIsNeverSpecEntry() {
         val snapshot = UiSnapshot(
@@ -571,6 +629,74 @@ class PddProductDetailCollectorTest {
         assertTrue(parsed.dimensions.isEmpty())
     }
 
+    @Test
+    fun nonScrollableSelectorWithTwoDimensionsDoesNotRequireInitialSelectedSummary() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("color-heading", "颜色", 20, 420, 300, 470),
+                node("color", "豹纹", 20, 490, 300, 550, clickable = true),
+                node("size-heading", "尺码", 20, 650, 300, 700),
+                node("size", "均码", 20, 720, 300, 780, clickable = true),
+                node("quantity", "1", 480, 1400, 600, 1480, className = "android.widget.EditText"),
+                node("decrease", "减少数量", 360, 1400, 470, 1480, clickable = true),
+                node("increase", "增加数量", 610, 1400, 720, 1480, clickable = true),
+                node("order", "提交订单", 20, 1900, 1060, 2100, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertTrue(parsed.specPanelOpen)
+        assertEquals(SpecPanelType.NON_SCROLLABLE_CONFIRMATION, parsed.specPanelType)
+        assertFalse(parsed.hasSelectionSummary)
+        assertEquals(2, parsed.dimensions.size)
+        assertEquals(2, parsed.panelOptionCount)
+    }
+
+    @Test
+    fun nestedSelectionRowCombinesPrefixAndDimensionBeforeChoosingClickableParent() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("selection-row", "", 20, 720, 1060, 860, clickable = true),
+                node("selection-row/prefix", "请选择", 48, 750, 220, 810, parentPath = "selection-row"),
+                node("selection-row/dimension", "颜色分类", 240, 750, 480, 810, parentPath = "selection-row"),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("selection-row", parsed.specEntry?.path)
+        assertEquals("selection-row", parsed.specEntryClickTarget?.path)
+        assertEquals("nested_selection", parsed.specEntrySource)
+        assertEquals(1, parsed.nestedSpecEntryCount)
+    }
+
+    @Test
+    fun nestedSelectionSemanticsNeverAcceptsOrderOrPaymentContainer() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("unsafe", "", 20, 720, 1060, 860, clickable = true),
+                node("unsafe/prefix", "请选择", 48, 750, 220, 810, parentPath = "unsafe"),
+                node("unsafe/dimension", "颜色", 240, 750, 480, 810, parentPath = "unsafe"),
+                node("unsafe/order", "提交订单", 700, 750, 1020, 810, parentPath = "unsafe"),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals(null, parsed.specEntry)
+        assertEquals(0, parsed.nestedSpecEntryCount)
+    }
+
     @Test
     fun genericQuantityAndBuyControlsDoNotProveQuickConfirmation() {
         val snapshot = UiSnapshot(

android/app/src/test/java/cn/ilapage/goauto/agent/PurchaseLiveAutomationTest.kt

@@ -120,6 +120,122 @@ class PurchaseLiveAutomationTest {
         assertFalse(driver.clicked.any { it.startsWith("微信") || it.contains("支付") })
     }
 
+    @Test
+    fun `payment page returns to folded unpaid order detail and scrolls to read evidence`() {
+        val driver = LiveDriver(chooserAfterSubmit = true, orderEvidenceBelowFold = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg54")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg54"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(2, driver.postSubmitBackCount)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `successful order page enters the unique order detail before reading the result`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg56")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg56"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(1, driver.orderDetailEntryClicks)
+        assertEquals("order", driver.currentPage)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `order detail entered from success page scrolls only to reveal folded result evidence`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true, orderDetailEvidenceBelowFold = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg58")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg58"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(1, driver.orderDetailEntryClicks)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `unpaid order evidence on reused payment activity scrolls read only instead of backing out`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = listOf("order-folded-payment-activity"))
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg59")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg59"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(0, driver.postSubmitBackCount)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `ambiguous order detail entries stop without navigating`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true, duplicateOrderDetailEntry = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg57")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg57"), address)
+        automation.submitOrderOnce()
+
+        assertEquals(null, automation.readOrderResult())
+        assertEquals("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", automation.lastOrderReadFailure?.code)
+        assertEquals(0, driver.orderDetailEntryClicks)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `payment transition frame after safe back reaches unpaid order evidence without payment clicks`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = listOf("payment", "payment", "order"))
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg55")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg55"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals("2026-08-21T02:30:00Z", order?.submittedAt)
+        assertEquals(1, driver.postSubmitBackCount)
+        assertEquals(0, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `continuous payment activity still stops at bounded post back samples without payment clicks`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = List(4) { "payment" })
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg55")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg55"), address)
+        automation.submitOrderOnce()
+
+        assertEquals(null, automation.readOrderResult())
+        assertEquals("PURCHASE_ORDER_PAYMENT_REPEATED", automation.lastOrderReadFailure?.code)
+        assertEquals(
+            "支付页安全返回后持续无订单证据，已停止自动核单" +
+                "[paymentBackAttempts=1;consecutivePaymentSamplesAfterBack=3]",
+            automation.lastOrderReadFailure?.message,
+        )
+        assertEquals(4, driver.postSubmitCaptureCount)
+        assertEquals(1, driver.postSubmitBackCount)
+        assertEquals(0, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
     @Test
     fun `WeChat login is not touched and PDD is restored once before reading order detail`() {
         val driver = LiveDriver(wechatLoginAfterSubmit = true)
@@ -310,6 +426,10 @@ class PurchaseLiveAutomationTest {
         private val savedTransitionHidesSuffix: Boolean = false,
         private val wechatLoginAfterSubmit: Boolean = false,
         private val wechatRestoreStuck: Boolean = false,
+        private val orderEvidenceBelowFold: Boolean = false,
+        private val orderDetailEntryAfterSubmit: Boolean = false,
+        private val orderDetailEvidenceBelowFold: Boolean = false,
+        private val duplicateOrderDetailEntry: Boolean = false,
         postSubmitCaptureSequence: List<String> = emptyList(),
     ) : PurchaseUiDriver {
         private var page = "confirmation"
@@ -326,6 +446,7 @@ class PurchaseLiveAutomationTest {
         var backCount = 0
         var postSubmitBackCount = 0
         var pddRestoreCount = 0
+        var orderDetailEntryClicks = 0
         var postSubmitCaptureCount = 0
         val currentPage: String get() = page
 
@@ -359,7 +480,20 @@ class PurchaseLiveAutomationTest {
                 node("address-summary", if (savedTransitionHidesSuffix) "已保存的收货信息" else address.substring(address.lastIndexOf("_cg"))),
             ))
             "order" -> snapshot(listOf(node("status", "待付款"), node("order", "订单号：PDD-202608210001"), node("time", "下单时间：2026-08-21 10:30:00"), node("pay", "立即支付", clickable = true)))
+            "order-folded" -> snapshot(listOf(node("status", "待付款"), node("pay", "立即支付", clickable = true)))
+            "order-folded-payment-activity" -> UiSnapshot(PDD, "com.xunmeng.pinduoduo.app_pay.core.PayActivity", listOf(
+                node("status", "待付款"), node("pay", "立即支付", clickable = true),
+            ))
             "order-no-time" -> snapshot(listOf(node("status", "待付款"), node("order", "订单号：PDD-202608210001"), node("pay", "去支付", clickable = true)))
+            "success" -> snapshot(buildList {
+                add(node("success-title", "购买成功"))
+                add(node("detail-parent", "", clickable = true))
+                add(node("detail", "查看订单", parentPath = "detail-parent"))
+                if (duplicateOrderDetailEntry) {
+                    add(node("detail-parent-2", "", clickable = true))
+                    add(node("detail-2", "订单详情", parentPath = "detail-parent-2"))
+                }
+            })
             "chooser" -> UiSnapshot(if (trustedChooser) "android" else "example.untrusted", "com.android.internal.app.ChooserActivity", listOf(
                 node("chooser-title", "选择要使用的应用"), node("wechat-1", "微信"), node("wechat-2", "微信分身"),
             ))
@@ -409,9 +543,14 @@ class PurchaseLiveAutomationTest {
                     page = when {
                         chooserAfterSubmit -> "chooser"
                         wechatLoginAfterSubmit -> "wechat-login"
+                        orderDetailEntryAfterSubmit -> "success"
                         else -> "order"
                     }
                 }
+                "查看订单", "订单详情" -> {
+                    orderDetailEntryClicks++
+                    page = if (orderDetailEvidenceBelowFold) "order-folded" else "order"
+                }
             }
             return FreshActionResult.SUCCESS
         }
@@ -428,7 +567,11 @@ class PurchaseLiveAutomationTest {
             address = value
             return FreshActionResult.SUCCESS
         }
-        override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean { genericSwipes++; return true }
+        override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean {
+            genericSwipes++
+            if (page in setOf("order-folded", "order-folded-payment-activity") && direction == SwipeDirection.UP) page = "order"
+            return true
+        }
         override fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean {
             scopedSwipes++
             if (target.path == "panel" && direction == SwipeDirection.DOWN) addressVisible = true
@@ -439,7 +582,7 @@ class PurchaseLiveAutomationTest {
             if (page == "chooser" || page == "payment") postSubmitBackCount++
             page = when (page) {
                 "chooser" -> "payment"
-                "payment" -> "order"
+                "payment" -> if (orderEvidenceBelowFold) "order-folded" else "order"
                 else -> "confirmation"
             }
             return true

android/app/src/test/java/cn/ilapage/goauto/agent/PurchaseRehearsalExecutorTest.kt

@@ -8,6 +8,7 @@ import cn.ilapage.goauto.agent.automation.PurchaseAgentCapabilities
 import cn.ilapage.goauto.agent.automation.PurchaseExecutionInput
 import cn.ilapage.goauto.agent.automation.PurchaseRehearsalExecutor
 import cn.ilapage.goauto.agent.automation.PurchaseRuleParser
+import cn.ilapage.goauto.agent.automation.PurchaseSpecGesturePolicy
 import cn.ilapage.goauto.agent.automation.PurchaseUiDriver
 import cn.ilapage.goauto.agent.automation.RuleValidationException
 import cn.ilapage.goauto.agent.automation.SnapshotNode
@@ -21,6 +22,22 @@ import org.junit.Assert.assertTrue
 import org.junit.Test
 
 class PurchaseRehearsalExecutorTest {
+    @Test
+    fun `spec gesture policy excludes irreversible and out of bounds targets`() {
+        fun target(label: String, bounds: NodeBounds = NodeBounds(20, 100, 300, 180)) = SnapshotNode(
+            "target", null, label, null, null, "android.widget.TextView", bounds,
+            clickable = true, scrollable = false, selected = false, checked = false, enabled = true, visible = true,
+        )
+
+        assertTrue(PurchaseSpecGesturePolicy.isAllowed(target("选择规格"), 1080, 2200))
+        assertTrue(PurchaseSpecGesturePolicy.isAllowed(target("XL"), 1080, 2200))
+        assertFalse(PurchaseSpecGesturePolicy.isAllowed(target("提交订单"), 1080, 2200))
+        assertFalse(PurchaseSpecGesturePolicy.isAllowed(target("确认购买"), 1080, 2200))
+        assertFalse(PurchaseSpecGesturePolicy.isAllowed(target("立即支付"), 1080, 2200))
+        assertFalse(PurchaseSpecGesturePolicy.isAllowed(target("修改地址"), 1080, 2200))
+        assertFalse(PurchaseSpecGesturePolicy.isAllowed(target("XL", NodeBounds(-20, 100, -2, 180)), 1080, 2200))
+    }
+
     @Test
     fun `shared current live rule matches Android contract`() {
         val raw = requireNotNull(javaClass.classLoader?.getResource("purchase-rule-live-v1.json")) {
@@ -130,6 +147,8 @@ class PurchaseRehearsalExecutorTest {
         assertEquals("rehearsal_completed", outcome.resultType)
         assertTrue(driver.clicked.contains("XL"))
         assertEquals(3, driver.upSwipeCount)
+        assertTrue(driver.swipeInPaths.isNotEmpty())
+        assertTrue(driver.swipeInPaths.all { it == "scroll" })
     }
 
     @Test
@@ -147,18 +166,31 @@ class PurchaseRehearsalExecutorTest {
     }
 
     @Test
-    fun `rerendered exact size is refound and selected on the second attempt`() {
+    fun `rerendered exact size falls back to one verified center gesture`() {
         val driver = FakePurchaseDriver(
-            sizeClickResults = mutableListOf(FreshActionResult.NOT_FOUND, FreshActionResult.SUCCESS),
+            sizeClickResults = mutableListOf(FreshActionResult.NOT_FOUND),
+            specTapResult = FreshActionResult.SUCCESS,
         )
         val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
             .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
 
         assertEquals("rehearsal_completed", outcome.resultType)
-        assertEquals(2, driver.sizeClickCount)
+        assertEquals(1, driver.sizeClickCount)
+        assertEquals(1, driver.specTapCount)
         assertEquals("XL", driver.size)
     }
 
+    @Test
+    fun `already selected exact size is not clicked again`() {
+        val driver = FakePurchaseDriver(initialSize = "XL")
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("rehearsal_completed", outcome.resultType)
+        assertEquals(0, driver.sizeClickCount)
+        assertEquals(0, driver.specTapCount)
+    }
+
     @Test
     fun `long exact size can be verified by one unambiguous short summary token`() {
         val target = "XL【建议121-140斤】"
@@ -280,16 +312,17 @@ class PurchaseRehearsalExecutorTest {
     }
 
     @Test
-    fun `persistent exact size click failure stops after three attempts`() {
+    fun `persistent exact size click failure stops after one action and one bounded gesture`() {
         val driver = FakePurchaseDriver(
-            sizeClickResults = MutableList(3) { FreshActionResult.FAILED },
+            sizeClickResults = mutableListOf(FreshActionResult.FAILED),
         )
         val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
             .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
 
         assertEquals("PURCHASE_SPEC_CLICK_FAILED", outcome.errorCode)
         assertEquals("action_click_false", outcome.message)
-        assertEquals(3, driver.sizeClickCount)
+        assertEquals(1, driver.sizeClickCount)
+        assertEquals(1, driver.specTapCount)
         assertEquals(null, driver.size)
     }
 
@@ -418,6 +451,109 @@ class PurchaseRehearsalExecutorTest {
         assertEquals(50, pauses.size)
     }
 
+    @Test
+    fun `open spec panel skips required follow-up swipe only for confirmed non-scrollable panel`() {
+        val driver = FakePurchaseDriver(nonScrollablePanel = true, purchaseSwipeSucceeds = false)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("rehearsal_completed", outcome.resultType)
+        assertEquals(0, driver.swipeCount)
+    }
+
+    @Test
+    fun `unrecognized opened panel returns only scalar panel evidence`() {
+        val driver = FakePurchaseDriver(unrecognizedPanel = true)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_PANEL_EVIDENCE_NOT_MATCHED", outcome.errorCode)
+        assertEquals(
+            "规格入口点击后页面已变化，但规格面板强证据不足 [type=UNKNOWN;scrollables=0;headings=0;options=0;summary=false;quantity=false;orderAction=false;pageEvidence=true]",
+            outcome.message,
+        )
+        assertEquals(0, driver.specTapCount)
+        assertFalse(outcome.message.orEmpty().contains("确认款式"))
+    }
+
+    @Test
+    fun `unchanged spec entry action uses one verified center gesture`() {
+        val driver = FakePurchaseDriver(
+            entryActionHasEffect = false,
+            specTapResult = FreshActionResult.SUCCESS,
+        )
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("rehearsal_completed", outcome.resultType)
+        assertEquals(1, driver.specTapCount)
+        assertTrue(driver.panel)
+    }
+
+    @Test
+    fun `unchanged spec entry after action and gesture returns no effect`() {
+        val driver = FakePurchaseDriver(
+            entryActionHasEffect = false,
+            specTapResult = FreshActionResult.SUCCESS,
+            specTapHasEffect = false,
+        )
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_CLICK_NO_EFFECT", outcome.errorCode)
+        assertEquals(1, driver.specTapCount)
+        assertFalse(driver.panel)
+    }
+
+    @Test
+    fun `missing spec entry emits scalar source counts without node text`() {
+        val diagnostics = mutableListOf<String>()
+        val pauses = mutableListOf<Long>()
+        val driver = FakePurchaseDriver(missingSpecEntry = true)
+        val outcome = PurchaseRehearsalExecutor(
+            driver,
+            { driver.browser = true; true },
+            { null },
+            pause = pauses::add,
+            panelDiagnostic = diagnostics::add,
+        ).execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_NOT_FOUND", outcome.errorCode)
+        assertEquals(
+            "specEntryCandidates=0;explicit=0;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true;entryReadyWaitPolls=20;entryReadyWaitMillis=2000",
+            diagnostics.single(),
+        )
+        // One 100ms pause belongs to the existing open-product foreground poll;
+        // the diagnostic proves the entry-ready loop itself used exactly 20.
+        assertEquals(21, pauses.count { it == 100L })
+        assertFalse(diagnostics.single().contains("选择规格"))
+    }
+
+    @Test
+    fun `open spec panel waits for a late safe bottom purchase entry`() {
+        val pauses = mutableListOf<Long>()
+        val driver = FakePurchaseDriver(bottomPurchaseEntry = true, specEntryVisibleAfterPddCaptures = 4)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { "{\"dimensions\":[]}" }, pause = pauses::add)
+            .execute(input().copy(executionMode = "live", phase = "spec_probe"), PurchaseRuleParser.parse(liveRule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("spec_probe_completed", outcome.resultType)
+        assertTrue(driver.clickedPaths.contains("buy"))
+        // One 100ms pause belongs to the existing open-product foreground poll;
+        // two belong to the entry-ready wait before the bottom bar appears.
+        assertEquals(3, pauses.count { it == 100L })
+    }
+
+    @Test
+    fun `verify product waits for product evidence instead of a visible loading frame`() {
+        val pauses = mutableListOf<Long>()
+        val driver = FakePurchaseDriver(loadingPddCaptures = 1)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = pauses::add)
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("rehearsal_completed", outcome.resultType)
+        assertEquals(1, pauses.count { it == 100L })
+    }
+
     @Test
     fun `transient sold out page recovers before opening specs`() {
         val driver = FakePurchaseDriver(soldOut = true, recoverSoldOutAfterPull = true)
@@ -561,6 +697,29 @@ class PurchaseRehearsalExecutorTest {
         assertFalse(driver.clicked.contains("商品评价"))
     }
 
+    @Test
+    fun `spec entry failures include scalar diagnostics only`() {
+        val driver = FakePurchaseDriver(missingSpecEntry = true)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_NOT_FOUND", outcome.errorCode)
+        assertEquals(
+            "没有找到安全的商品规格入口 [specEntryCandidates=0;explicit=0;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true;entryReadyWaitPolls=20;entryReadyWaitMillis=2000]",
+            outcome.message,
+        )
+
+        val ambiguousDriver = FakePurchaseDriver(forcedEntryClickReason = FreshClickReason.TARGET_AMBIGUOUS)
+        val ambiguous = PurchaseRehearsalExecutor(ambiguousDriver, { ambiguousDriver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_TARGET_AMBIGUOUS", ambiguous.errorCode)
+        assertEquals(
+            "规格入口点击目标不唯一 [specEntryCandidates=1;explicit=1;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true;entryReadyWaitPolls=0;entryReadyWaitMillis=0]",
+            ambiguous.message,
+        )
+    }
+
     @Test
     fun `parser keeps type only compatibility and rejects dangerous or unknown fields`() {
         val legacy = """{"schemaVersion":1,"ruleType":"pddPurchase","requiredCapabilities":["purchase.rehearsal.v1"],"actions":[{"type":"openProduct"}]}"""
@@ -709,6 +868,9 @@ class PurchaseRehearsalExecutorTest {
         private val priceCent: Long = 2_000,
         private val duplicateOpen: Boolean = false,
         private val bottomPurchaseEntry: Boolean = false,
+        private val missingSpecEntry: Boolean = false,
+        private val specEntryVisibleAfterPddCaptures: Int = 0,
+        private val loadingPddCaptures: Int = 0,
         private val includeReviewEntry: Boolean = false,
         private val openReviewOnBottomClick: Boolean = false,
         private val reviewBackSucceeds: Boolean = true,
@@ -718,6 +880,10 @@ class PurchaseRehearsalExecutorTest {
         private val sizeClickResults: MutableList<FreshActionResult> = mutableListOf(),
         private val forcedSizeClickReason: FreshClickReason? = null,
         private val forcedEntryClickReason: FreshClickReason? = null,
+        private val initialSize: String? = null,
+        private val entryActionHasEffect: Boolean = true,
+        private val specTapResult: FreshActionResult = FreshActionResult.FAILED,
+        private val specTapHasEffect: Boolean = true,
         private val sizeSelectsOnFailedClick: Boolean = false,
         private val selectedSizeSummaryOverride: String? = null,
         private val hideSizeSelectedState: Boolean = false,
@@ -732,11 +898,14 @@ class PurchaseRehearsalExecutorTest {
         private val loseEvidenceAfterPull: Boolean = false,
         private val unavailableSizes: Set<String> = emptySet(),
         allSpecsUnavailable: Boolean = false,
+        private val nonScrollablePanel: Boolean = false,
+        private val unrecognizedPanel: Boolean = false,
+        private val purchaseSwipeSucceeds: Boolean = true,
     ) : PurchaseUiDriver {
         var browser = false
         var panel = false
         var color: String? = null
-        var size: String? = null
+        var size: String? = initialSize
         var quantity = 1L
         var swipeCount = 0
         var upSwipeCount = 0
@@ -744,10 +913,13 @@ class PurchaseRehearsalExecutorTest {
         var sizeClickCount = 0
         var pullDownCount = 0
         var backCount = 0
+        var specTapCount = 0
+        val swipeInPaths = mutableListOf<String>()
         private var soldOut = soldOut
         private var allSpecsUnavailable = allSpecsUnavailable
         private var productEvidenceLost = false
         private var reviewPage = false
+        private var pddCaptureCount = 0
         val clicked = mutableListOf<String>()
         val clickedPaths = mutableListOf<String>()
 
@@ -758,6 +930,10 @@ class PurchaseRehearsalExecutorTest {
                 openNodes += node("content", "", 0, 0, 1080, 2200)
                 return UiSnapshot("com.heytap.browser", "BrowserActivity", openNodes)
             }
+            pddCaptureCount++
+            if (pddCaptureCount <= loadingPddCaptures) {
+                return UiSnapshot(PDD, ACTIVITY, listOf(node("content", "", 0, 0, 1080, 2200)))
+            }
             if (!panel) {
                 if (reviewPage) {
                     return UiSnapshot(PDD, ACTIVITY, listOf(
@@ -773,23 +949,32 @@ class PurchaseRehearsalExecutorTest {
                 if (soldOut) {
                     return UiSnapshot(PDD, ACTIVITY, listOf(
                         node("content", "", 0, 0, 1080, 2200),
+                        node("title", "测试商品标题文本", 20, 200, 900, 280, className = "android.widget.ViewPager"),
                         node("sold-out", "商品已售罄", 100, 300, 900, 380),
                         node("similar", "相似商品", 100, 500, 900, 580),
                     ))
                 }
                 val nodes = mutableListOf(
                     node("content", "", 0, 0, 1080, 2200),
+                    node("title", "测试商品标题文本", 20, 200, 900, 280, className = "android.widget.ViewPager"),
                 )
-                if (bottomPurchaseEntry) {
+                val specEntryReady = pddCaptureCount > specEntryVisibleAfterPddCaptures
+                if (bottomPurchaseEntry && specEntryReady) {
                     nodes += node("buy", "", 500, 1800, 1080, 2180, clickable = true)
                     nodes += node("buy/price", "¥20.00", 560, 1840, 760, 1910, parentPath = "buy")
                     nodes += node("buy/label", "免拼购买", 780, 1840, 1040, 1910, parentPath = "buy")
-                } else {
+                } else if (!missingSpecEntry && specEntryReady) {
                     nodes += node("spec", "选择规格", 20, 1000, 900, 1100, clickable = true)
                 }
                 if (includeReviewEntry) nodes += node("review", "商品评价", 20, 1200, 900, 1300, clickable = true)
                 return UiSnapshot(PDD, ACTIVITY, nodes)
             }
+            if (unrecognizedPanel) {
+                return UiSnapshot(PDD, ACTIVITY, listOf(
+                    node("content", "", 0, 0, 1080, 2200),
+                    node("panel-title", "确认款式", 20, 396, 300, 430),
+                ))
+            }
             val hideColor = hideColorAfterQuantitySet && quantity == 2L
             val hideSize = hideSizeAfterQuantitySet && quantity == 2L
             val hideSummary = hideSelectedSummaryAfterQuantitySet && quantity == 2L
@@ -802,8 +987,8 @@ class PurchaseRehearsalExecutorTest {
                 node("content", "", 0, 0, 1080, 2200),
                 node("price", "¥${priceCent / 100}.${(priceCent % 100).toString().padStart(2, '0')}", 20, 300, 300, 360),
                 node("title", "确认款式", 20, 396, 300, 430),
-                node("scroll", "", 0, 400, 1080, 950, scrollable = true),
             )
+            if (!nonScrollablePanel) nodes += node("scroll", "", 0, 400, 1080, 950, scrollable = true)
             if (!hideSummary) {
                 nodes += node("selected", "已选 $displayedSummary", 20, 365, 700, 395)
             }
@@ -848,7 +1033,9 @@ class PurchaseRehearsalExecutorTest {
             clicked += target.label
             clickedPaths += target.path
             if (target.path == "buy") {
-                if (openReviewOnBottomClick) reviewPage = true else panel = true
+                if (entryActionHasEffect) {
+                    if (openReviewOnBottomClick) reviewPage = true else panel = true
+                }
                 return FreshActionResult.SUCCESS
             }
             when (target.label) {
@@ -858,7 +1045,7 @@ class PurchaseRehearsalExecutorTest {
                     if (result == FreshActionResult.SUCCESS || openPddOnFailedClick) browser = false
                     return result
                 }
-                "选择规格", "免拼购买" -> panel = true
+                "选择规格", "免拼购买" -> if (entryActionHasEffect) panel = true
                 in sizes -> {
                     sizeClickCount++
                     val result = sizeClickResults.removeFirstOrNull() ?: FreshActionResult.SUCCESS
@@ -904,6 +1091,17 @@ class PurchaseRehearsalExecutorTest {
 
         override fun tapPurchaseFresh(target: SnapshotNode): FreshActionResult = clickFresh(target)
 
+        override fun tapSpecFresh(target: SnapshotNode): FreshActionResult {
+            specTapCount++
+            if (specTapResult != FreshActionResult.SUCCESS || !specTapHasEffect) return specTapResult
+            when {
+                target.path in setOf("spec", "buy") -> panel = true
+                target.label in sizes -> size = target.label
+                target.label in colors -> color = target.label
+            }
+            return FreshActionResult.SUCCESS
+        }
+
         override fun inputFresh(target: SnapshotNode, value: String): FreshActionResult {
             quantity = value.toLong()
             return FreshActionResult.SUCCESS
@@ -912,11 +1110,13 @@ class PurchaseRehearsalExecutorTest {
         override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean {
             swipeCount++
             if (direction == SwipeDirection.UP) upSwipeCount++
-            return true
+            return purchaseSwipeSucceeds
         }
 
-        override fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean =
-            swipePurchase(direction, durationMs)
+        override fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean {
+            swipeInPaths += target.path
+            return swipePurchase(direction, durationMs)
+        }
 
         override fun pullDownGoodsPage(): Boolean {
             pullDownCount++

docs/03-business-rules-and-glossary.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Business-Rules-and-Glossary
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Business-Rules-and-Glossary.-
-wiki_revision: a6f63cc745cf0e0df7ca94521a70fb6af3adea26
-synchronized_at: 2026-09-01T09:55:26Z
+wiki_revision: c7f56f233263b3c83df7e31cf75c89c48ff24111
+synchronized_at: 2026-09-04T10:22:02Z
 <!-- gitea-wiki-mirror:end -->
 
 # 业务规则与术语
@@ -31,9 +31,9 @@ synchronized_at: 2026-09-01T09:55:26Z
 - 关联 PDD 商品时校验目标存在且非 `disabled`；不提供手工输入商品 ID 的入口，只能通过搜索选择。
 - 参考售价 `sale_price_cent` 为整数分，`currency` 为 ISO 4217 代码；币种取系统配置默认值，不逐商品选择，缺省回退为 `TWD`。
 - 规格值来源分 `import`（SYB 导入，不可人工删除，只能清除映射）与 `manual`（人工添加，可删除）；导入与人工值按「维度 + 名称」合并，不重复创建。
-- 映射来源分 `manual`（人工，允许创建时即为已确认）、`exact_match`（名称标准化后唯一一致）、`ai_match`（AI 建议）。通用 `SetMapping` 入口仍将 `exact_match` 与 `ai_match` 一律写为 `pending`，必须人工确认后才生效；#188 的 SYB 商品页批量 AI 匹配是独立例外，其进入条件已由 #190 放开：只要蝦皮与 PDD 关联完整、PDD 当前为 `active` 且能给出可选颜色/尺码候选、并且已解析出至少一个目标颜色或尺码，即可进入批量匹配。解析状态（含 `parse_status=uncertain` 与 `failed`）、PDD 含颜色尺码之外的可选规格、蝦皮档案中未找到目标颜色或尺码、缺少完整可售 SKU 组合证据，自 #190 起都不再阻断匹配；本项目为内部系统，由此产生的“以错误目标规格进行匹配并保存映射”的风险由人工承担。唯一确定性 `exact_match` 不调用外部 AI，可直接保存为 `confirmed`；其余结果只有在 `ai_match` 置信度存在且达到服务端阈值、理由非空、返回值属于当前可选候选并命中同一个可售颜色+尺码组合时，才可直接持久化为 `confirmed`。低置信度、无组合证据、无效组合或 Provider 异常不得改写现有映射。
+- 映射来源分 `manual`（人工，允许创建时即为已确认）、`exact_match`（名称标准化后唯一一致）、`ai_match`（AI 建议）。通用 `SetMapping` 入口仍将 `exact_match` 与 `ai_match` 一律写为 `pending`，必须人工确认后才生效；#188 的 SYB 商品页批量 AI 匹配与 #194 的 Admin 蝦皮商品详情一键匹配是两个独立例外。#188 的进入条件已由 #190 放开：只要蝦皮与 PDD 关联完整、PDD 当前为 `active` 且能给出可选颜色/尺码候选、并且已解析出至少一个目标颜色或尺码，即可进入批量匹配。解析状态（含 `parse_status=uncertain` 与 `failed`）、PDD 含颜色尺码之外的可选规格、蝦皮档案中未找到目标颜色或尺码、缺少完整可售 SKU 组合证据，自 #190 起都不再阻断匹配；本项目为内部系统，由此产生的“以错误目标规格进行匹配并保存映射”的风险由人工承担。唯一确定性 `exact_match` 不调用外部 AI，可直接保存为 `confirmed`；SYB 商品页批量 `ai_match` 只要 Provider 成功返回规格结果且理由非空、返回值属于当前可选候选即可直接持久化为 `confirmed`，置信度仅记录供审计、不作为放行门槛。若当前 PDD 档案存在完整可售颜色+尺码 SKU 组合证据，结果还必须命中其中同一个组合；人工录入或外部导入导致组合证据缺失时不阻断保存或创建采购。无结果、已有组合证据中的无效组合或 Provider 异常不得改写现有映射。
 - 颜色映射只能从关联 PDD 商品当前可选颜色中选择，不允许自由输入；未使用颜色优先显示，已被其他蝦皮颜色使用的颜色仍可选择并显示占用者，因此支持多对一。
-- 尺码“一键自动匹配”只生成可审阅草稿：繁简体、首尾/重复空格、大小写和全半角统一后只有唯一结果才预填；没有唯一结果时保持待人工选择。保存只改映射，不改蝦皮或 PDD 原始规格。
+- Admin 蝦皮商品详情只保留一个“一键匹配颜色和尺码”入口。已确认且目标仍存在的映射保留；名称标准化后的唯一确定结果直接写为 `exact_match + confirmed`；其余只有在 AI 置信度达到服务端当前阈值、理由非空、返回值仍属于当前可选候选时才写为 `ai_match + confirmed`。低置信度或无结果保持未匹配；Provider 失败、AI 未启用、关联或规格上下文变化时本次不写入。操作前有未保存的人工修改时禁用一键匹配；保存只改映射，不改蝦皮或 PDD 原始规格。
 - PDD 重新采集或更换关联后，目标规格仍存在则映射继续有效；目标规格消失时详情标记“已失效”，服务端拒绝保存不存在的目标，采购预检和创建也拒绝使用失效映射并提示重新选择。
 - 批量软删除逐条校验引用（虾皮商品被 SYB 明细或采购任务引用时不可删除）并逐条返回结果；已删除商品默认不出现在列表，可筛选查看并恢复。
 
@@ -41,6 +41,8 @@ synchronized_at: 2026-09-01T09:55:26Z
 
 - 一行对应 SYB 一条明确的商品/颜色/尺码/数量明细；唯一键为「蝦皮订单号 `code` + 来源明细 `id`」组合，不是全局唯一 ID（未在多货运单样本中验证过全局唯一性）。
 - `productSpec` 自由文本解析：按最后一个逗号切分为颜色/尺码 → 剥离【】备注 → 判断残留分隔符；解析状态分 `success`/`uncertain`/`failed`，永不猜测原文中不存在的颜色或尺码。
+
+- 采购放行不以 uncertain 单独阻断：success 与已提取出至少一个非空颜色或尺码的 uncertain 明细，都可继续进入规格匹配和采购预检；只有 failed 或颜色、尺码均为空的异常明细才要求人工处理。uncertain 状态与解析说明继续保留供审计，不会自动猜测规格。
 - 只有 `success` 状态的解析结果会合并进虾皮商品档案的规格值（来源标记 `import`）；`uncertain`/`failed` 只停留在明细行上供人工复核，不污染共享档案。
 - 金额单位按接口分别定义：`/am/stock/detail/listByStock` 的 `productPrice` 是十进制金额，与 `/am/stock/list` 的 `amtOrder`（×100 整数）不是同一套换算，不可共用。
 - 关联虾皮商品档案：命中存活记录直接关联；命中软删除记录则复活并保留原有人工映射；均不存在时创建最小档案。命中既有档案时只补写为空的参考图与售价，不覆盖人工修改过的标题、店铺和映射。
@@ -62,6 +64,7 @@ synchronized_at: 2026-09-01T09:55:26Z
 ## SYB 店铺过滤
 
 - `syb_shop` 保存允许导入的 SYB 店铺；店铺名比较前统一去除首尾空白、转换全角/半角字符并忽略大小写。规范化后同名的店铺只能保留一条有效记录。
+- 版本迁移会对历史存活店铺回填 `normalized_name = Normalize(display_name)`；回填只改匹配键且可重复执行。若两个存活店铺回填后会得到同一键，迁移必须整体失败并保留原数据，管理员先人工消除歧义后再执行，不能静默合并、删除或改变店铺启用状态。
 - 店铺可以从 SYB 真实货运单列表发现，也允许管理员手工补充。只有管理员可以新增、改名、启停和软删除，采购员等其他角色只读。
 - 没有任何启用店铺时，导入必须在读取凭据、建立会话、验证码 OCR 和任意 SYB 网络请求之前失败，并给出“请先启用店铺”的可读提示。
 - 同步必须先拉取并校验当天原始全量列表的总数、分页和唯一 ID，再按本次同步开始时固定的启用店铺快照过滤；过滤不能降低完整性校验的请求范围或容量上限。
@@ -73,7 +76,7 @@ synchronized_at: 2026-09-01T09:55:26Z
 - 导入由管理员创建，创建成功后立即转入后台执行；页面关闭不取消任务。采购员等其他已登录角色可以查看同步记录，不能开始导入。
 - 系统同一时刻只运行一个 SYB 导入任务。`syb_sync_run` 的唯一执行槽负责跨进程互斥，内存锁减少同一进程内的竞争；服务重启后遗留的执行中记录标记为“已中断”。
 - 导入失败或中断时保留已写入商品，记录明确的失败原因和已处理进度；重新导入相同范围按「订单号 + 明细 ID」覆盖，不产生重复商品。
-- 每条同步记录保存本次启用店铺集合的 SHA-256 哈希以及各店铺“已导入/已跳过”数量，不保存账号、密码、Cookie、验证码图片或 SYB 原始响应。
+- 创建同步记录时冻结本次启用店铺的规范化匹配集合、展示名称快照及 SHA-256 哈希；后台执行必须只使用这一份快照，不得在开始后重新读取 `syb_shop`。同步详情保存并返回快照可用标记、快照店铺名称、哈希及各店铺“已导入/已跳过”数量。#212 之前的历史记录只有哈希和统计，明确标记为无完整快照。上述记录不保存账号、密码、Cookie、Token、验证码图片或 SYB 原始响应。
 - 后台任务创建前的内部失败仍向普通用户显示“服务端处理失败”，但使用稳定错误码区分阶段：店铺预检为 `SYNC_SHOP_PREFLIGHT_FAILED`，同步记录创建为 `SYNC_RUN_CREATE_FAILED`。服务端只记录阶段和经过脱敏、截断的底层原因，不记录请求体、凭据、Cookie、Token、验证码或原始响应。
 
 ## 采集规则
@@ -84,12 +87,14 @@ synchronized_at: 2026-09-01T09:55:26Z
 - 删除采用软删除；删除后不能创建新任务，但已有任务继续执行自身快照。
 - 商品详情步骤应声明精确 `activityName`，并与包名和唯一控件共同作为页面证据；进入 PDD 登录 Activity 必须返回 `PDD_LOGIN_REQUIRED`，不能提交采集成功。
 - 唯一文字节点不可点击时，Agent 只可点击其最近的可点击父容器；不得改点兄弟节点或相似文字。
-- 商品页规格入口只接受带明确选择语义的规格摘要，或底部真实“购买/拼单”文字按钮；评价、评论、晒单、问答区域及其父容器一律排除。商品评价页与详情页共用 Activity 时，首次误触只允许安全返回并重新定位一次，重复误触明确失败；点击无变化、误入评价页和面板结构无法确认使用不同错误码。
+- 商品页规格入口只接受带明确选择语义的规格摘要，或底部真实“购买/拼单”文字按钮。若“请选择”和颜色/尺码语义分散在同一可点击父容器的子节点中，也只能在该容器唯一、位于非底部动作区且同时具备两类语义时作为规格入口；规则别名只能收窄已识别的安全候选，不能按页面原始文字扩张。底部购买入口在通过全部安全过滤后仍存在多个候选时，按最右优先（`centerX` 降序，并列时可点击面积升序）确定性选出唯一入口，不再因候选不唯一直接失败；该情形记为 `bottom_purchase_rightmost`，唯一候选仍记为 `bottom_purchase`。“单独购买”与“发起拼单”打开同一规格面板，但对应不同成交形态与价格，最右优先是经人工确认的取舍。评价、评论、晒单、问答、订单、提交订单、支付和付款区域及其父容器一律排除。商品评价页与详情页共用 Activity 时，首次误触只允许安全返回并重新定位一次，重复误触明确失败；点击无变化、误入评价页和面板结构无法确认使用不同错误码。
 - v2 规则使用类型化动作和固定阶段钩子。已由 Agent 支持的选择器、别名、超时、滑动方向和有限次数可以只更新规则；新增动作类型或页面算法才需要升级 Agent。
 - v2 任务首次未进入精确商品详情页时，可以按规则显式重开同一浏览器 URL 一次；登录、验证码、风控、无效链接和详情页内采集失败不触发该恢复。
 - 假售罄恢复只使用主商品规格/购买强证据判断页面是否正常；顶部“相似商品”可以作为受控兜底证据，推荐卡片的标题、价格和销量不得冒充主商品证据。
 - 商品规格遍历必须用已识别规格节点锁定横向颜色容器和纵向面板容器；颜色按视觉行蛇形遍历，滑动完成后重新读取节点，尺码只读并允许在标题滚出后沿已锁定容器续页。
 - PDD 已选规格的订单确认形态只可由详情页、选择摘要、唯一数量控件、支付区、唯一底部提交动作和唯一主要滚动容器的组合证据确认；底部提交动作只读且永久禁止点击。Agent 只在该已确认容器内最多三次向下拖动回顶，每次重新读取节点；“参考分类”作为尺码的精确标题别名处理。
+
+- PDD 完整规格选择器若无主滚动容器且尚未选择规格而没有已选摘要，仍可识别为非滚动规格面板，但必须同时出现至少两个已解析维度、至少两个可选项、唯一数量控件和唯一底部订单动作；缺少其中任一强证据时保持未识别。该订单动作仍仅作页面证据，永久禁止点击。
 - Agent 可扩展，但规则必须按任务类型授权：采集规则不能创建订单，采购规则只能使用独立审核的创建订单能力。当前项目不实现支付动作、入口或测试；支付、下单和订单相关文字可以作为只读页面证据配置，但不得成为点击目标。后续支付能力必须单独评估并至少具备显式能力位、服务端开关、单笔金额上限和人工授权。
 
 ## 采集任务
@@ -143,7 +148,7 @@ synchronized_at: 2026-09-01T09:55:26Z
 - 地址编辑页可以同时存在收货人、手机号和详细地址等多个输入框；Agent 只选择与“详细地址”标签纵向重叠且位于其右侧的唯一输入框，不能用页面输入框总数或顺序猜测。
 - 点击创建订单前，Agent 必须先在本地事务保存 `order_submit_started`、不可逆时间、稳定请求 ID 和不含地址全文的最终确认快照，再用同一请求 ID通知服务端；两侧成功后才允许精确点击唯一创建订单按钮一次。
 - 进入不可逆边界后，进程重启、断网、点击结果不明或无法取得唯一订单号/下单时间时只允许只读核单并进入 `order_result_unknown`，禁止再次点击；任务与订单正式关联仍以完整 PDD 订单号为准。
-- 创建订单后出现 Android 多微信应用选择器时，Agent 只有在系统包和 `ChooserActivity` / `ResolverActivity` 白名单、已知选择器标题、微信候选三类证据同时成立时，才允许按一次返回，绝不点击微信候选。若已进入真实微信包 `com.tencent.mm`，Agent 不点击、不输入、不登录、不支付、不强制停止微信，只允许用一次无参数 PDD 启动 Intent 把既有 PDD 任务栈拉回前台；第二次仍见微信或拉起失败即保持结果未知。回到 PDD 已知支付 Activity 或明确支付动作页面后最多再返回一次，再只读读取唯一订单号和下单时间；任一页面不在白名单、恢复动作重复、无法到达订单详情或结果不唯一时保持 `order_result_unknown`，禁止重下单或支付。
+- 创建订单后出现 Android 多微信应用选择器时，Agent 只有在系统包和 `ChooserActivity` / `ResolverActivity` 白名单、已知选择器标题、微信候选三类证据同时成立时，才允许按一次返回，绝不点击微信候选。若已进入真实微信包 `com.tencent.mm`，Agent 不点击、不输入、不登录、不支付、不强制停止微信，只允许用一次无参数 PDD 启动 Intent 把既有 PDD 任务栈拉回前台；第二次仍见微信或拉起失败即保持结果未知。回到 PDD 已知支付 Activity 或明确支付动作页面后最多再返回一次，再只读读取唯一订单号和下单时间；下单成功页仅可点击唯一、精确的“查看订单”或“订单详情”入口一次，进入 PDD 订单详情后才允许有限向上手势下翻读取折叠内容。PDD 页面出现“待付款”“待支付”“订单编号”或“下单时间”等订单结果信号时，该只读信号优先于复用的支付 Activity 名称：允许在唯一主要纵向容器内有限下翻并重新读取，仍不得点击支付；没有任何订单结果信号的支付页或未知页面不得盲目滑动。入口缺失或不唯一、点击后未出现详情证据、任一页面不在白名单、恢复动作重复或结果不唯一时保持 `order_result_unknown`，禁止重下单或支付。
 - Agent 本地 SQLite/Outbox 负责断网和重启恢复，服务端以 `task_id + task_attempt_id` 幂等接收并保存最终事实。
 - 人工支付复核只记录 `paid` / `unpaid`；系统不执行或识别支付。快递单号与回填状态属于采购任务，后续物流工单实现。
 - 采购任务领取时同时占用设备租约和可选 PDD 账号租约；租约过期后才可释放并重新领取。设备还存在采集任务时不能领取采购任务。
@@ -386,6 +391,13 @@ synchronized_at: 2026-09-01T09:55:26Z
 - Agent APK 版本由管理员在设备页抽屉中上传、核对并显式设为当前。服务端从 APK Manifest 读取整数 `versionCode` 和 `versionName`，保存 SHA-256、大小、说明和创建人；APK 位于非公开目录，Admin 与设备下载均需认证。
 - Agent 只以整数 `versionCode` 判断更新。启动时静默检查一次，设置页可手动检查、显示下载进度并取消；下载完成必须校验大小和 SHA-256。设备有活动任务时禁止检查、下载和安装；安装始终交给 Android 系统确认，项目不绕过未知来源权限。
 
+## Android 采购规格动作安全执行（#214）
+
+- 规格入口与精确规格选择统一按“重新定位唯一目标 → 执行一次无障碍点击 → 读取新页面验证”执行；不得复用旧无障碍节点，不选择相近规格，也不在多候选时默认点击第一个。
+- 无障碍点击后页面完全无变化时，只允许对解析器已确认的安全规格入口或服务端下发且唯一命中的精确规格执行一次中心手势兜底。目标必须可见、启用、边界有效，手势后仍须以规格面板强证据或精确选中证据确认结果。
+- 页面发生变化但规格面板强证据不足时，不再继续手势或猜测页面，明确失败并只记录面板类型、候选数量和证据布尔值等无敏感标量。原始控件树、节点文字集合和整屏截图仍不得保存或上传。
+- 规格已处于精确选中状态时不得重复点击。规格查找只在解析器唯一识别的规格面板容器内有限滚动，每次滚动后重新定位容器与目标；容器缺失、歧义、到边或验证失败均 fail-closed。
+- 中心手势兜底不得用于修改/保存地址、创建或提交订单、订单详情入口以及任何支付/付款目标；正式创建订单的一次性不可逆门禁与永久禁止支付规则不变。
 ## PDD 商品反向关联与继续订单采购（#161）
 
 - 一个 PDD 商品可被多个虾皮商品共用。PDD 详情返回全部关联虾皮商品摘要；订单行由独立统一分页接口读取，不按虾皮商品伪造嵌套分页。
@@ -393,3 +405,25 @@ synchronized_at: 2026-09-01T09:55:26Z
 - 规格映射摘要使用 `specMappingStatus=complete|incomplete|not_required`、确认数和总数。`not_required` 只表示虾皮商品没有颜色或尺码维度；商品摘要不替代订单行采购资格。
 - “关联订单继续采购”只处理已有 SYB 订单；“创建备货采购”不关联 SYB 订单。两者入口和文案必须明确区分。继续采购复用既有批量预检和批量创建，价格、映射、并发、订单和不可逆门禁不变。
 - SYB 订单号、目标颜色/尺码、数量和当前采购任务状态只允许管理员与采购员读取；其他角色由服务端拒绝。查询路径不调用 AI Provider。
+
+## 定时与手动蝦皮规格自动匹配（#195）
+
+- 系统只扫描存活且已关联 `active` PDD 商品、两边至少共享颜色或尺码角色、并且至少存在一个未确认或已失效映射的蝦皮商品。
+- 每个商品复用详情页“一键匹配颜色和尺码”的规则：保留当前仍有效的 `confirmed` 映射；唯一确定匹配和达到服务端阈值、理由非空、候选仍有效的 AI 结果直接保存为 `confirmed`；低置信度、无结果、Provider 异常或上下文漂移不猜测、不写入错误映射。
+- 定时与管理员手动执行共用全局活动槽和逐商品工作状态。单批默认最多 20 个商品；同一规格上下文与 AI 设置更新时间未变化时，已完成、低置信度或无结果商品不重复调用 AI。
+- Provider 临时失败最多尝试 3 次，间隔至少 60 分钟；输入变化后重新计算指纹并允许重新处理。运行记录只保存结构化计数和脱敏限长错误，不保存 API Key、Provider 原始响应、商品原始 JSON 或个人数据。
+- 系统定时任务迁移后默认关闭，须由管理员明确启用。该能力仅维护蝦皮与 PDD 颜色/尺码映射，不创建采购任务、PDD 订单，不触发 Agent，也不执行付款。
+
+## SYB 异常采购规格 AI 解析（#198）
+
+- SYB 采购规格采用两阶段流程：先把货运单明细 `productSpec` 解析为目标颜色/尺码，再由 #195 把蝦皮规格匹配到 PDD 规格；两阶段不得混为同一匹配事实。
+- 定时任务只处理未人工确认且确定性解析为 `uncertain` / `failed` 的明细。每条先重跑确定性解析；空 `productSpec`、无关联蝦皮商品、无颜色/尺码候选或同一角色存在多个候选维度时不调用 AI，继续人工处理。
+- AI 只在关联蝦皮商品的封闭候选集合中返回原始颜色/尺码，并必须提供达到当前自动确认阈值的置信度和非空理由；集合外值、缺失角色、低置信度、歧义、无结果和输入漂移都不得确认。
+- `parse_status` 保留确定性解析器结论；AI 与人工确认分别记录，人工优先级最高。重复同步不得覆盖人工值；完全相同输入保留 AI 值，来源或关联变化会清除旧 AI 确认。
+- 同一输入的低置信度或无结果不重复调用 Provider；临时故障至少 60 分钟后重试，最多 3 次。任务不创建采集/采购任务、订单，不执行 Android 动作或付款。
+
+## 设备身份恢复
+
+- 管理员可在设备管理对未停用设备发起“重置设备身份”。此动作不删除设备记录、不改变设备 ID、能力或已绑定的待领取任务；它立即使旧 Token 无效，并只生成一次、有效期 10 分钟的恢复码。
+- 恢复码仅显示给发起操作的管理员一次，服务端只保存摘要；不得进入列表、日志、任务记录、Android 持久化或普通接口。手机操作员必须在同一安装实例的 Agent 设置中手动输入。
+- 服务端只接受同一 `installId`、未过期且尚未使用的恢复码完成重新注册，成功后签发新 Token 并使恢复码失效。过期、重复使用、installId 不符或停用均明确失败；不能通过清空数据、直接改库或“吊销 Token”恢复原任务归属。

docs/08-agent-api-contract.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Android-Agent-API-Contract
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Android-Agent-API-Contract.-
-wiki_revision: c214791a0b055e5b56c0ad05e73829a1f141dd46
-synchronized_at: 2026-09-01T08:03:51Z
+wiki_revision: a48b6a104c9b96834bbe122a226ba50baf8e4f93
+synchronized_at: 2026-09-04T10:22:06Z
 <!-- gitea-wiki-mirror:end -->
 
 # MVP 共享 API 契约
@@ -493,6 +493,16 @@ POST /api/agent/v1/tasks/{taskId}/fail
 
 演练规则必须包含 `purchase.rehearsal.v1`，并且不能包含 `updateShippingAddress`、`createOrder`、`readOrderResult`。正式规则必须包含 `purchase.live.v1`；改地址和创建订单还分别要求 `purchase.address-update.v1`、`purchase.order-create.v1`。`probeSpecs` 要求 `purchase.spec-probe.v1`。任意模式下，尚未实现的 `pay`、名称包含 `payment` 的动作以及未知动作一律拒绝；服务端不下发任意脚本。
 
+### Android 规格动作执行边界（#214）
+
+本工单不改变采购规则 schema、Agent HTTP 字段或能力标识，只收紧 Android 对 `openSpecPanel` 与 `selectSpec` 的执行语义：
+
+- 每次操作从最新 `rootInActiveWindow` 重新定位；规格入口必须是解析器已接受的唯一安全候选，规格值必须逐字等于任务固化的服务端映射值且在当前维度唯一、可用。
+- 动作前先检查后置条件；规格已精确选中时直接成功，不重复点击。否则最多分发一次 `ACTION_CLICK`，再从新快照验证规格面板强证据或精确选中证据。
+- `ACTION_CLICK` 后页面结构完全无变化时，Android 可以重新定位同一唯一目标，并在目标可见、启用、中心点位于屏幕内且边界有效时执行一次中心手势。手势后仍未取得后置证据时明确失败，不继续点击。
+- 点击后页面已变化但面板分类仍为未知时返回 `PURCHASE_SPEC_PANEL_EVIDENCE_NOT_MATCHED`；两种点击后页面均无变化时返回 `PURCHASE_SPEC_ENTRY_CLICK_NO_EFFECT`。诊断只携带面板类型、滚动容器数、标题数、选项数及证据布尔值，不携带节点文字或完整控件树。
+- 有界查找规格时只使用当前解析结果中的唯一 `specPanelContainer`；每次滚动前重新定位该容器，优先使用节点滚动动作，失败后才在容器边界内使用手势。缺少唯一容器时停止，不回退到全页面最大滚动区域。
+- 受控中心手势接口固定拒绝地址、保存地址、创建/提交/确认订单、确认购买和支付/付款语义；`updateShippingAddress`、`createOrder`、`readOrderResult` 不使用该兜底。创建订单的一次性不可逆状态机与禁止支付契约不变。
 ### 管理端接口
 
 | 方法 | 路径 | 幂等键 / 说明 |
@@ -845,3 +855,15 @@ file=<JPEG 二进制>
 | `GET` | `/api/agent/v1/app/releases/{releaseId}/download` | Device Token；私有 APK 下载 |
 
 Agent 只比较整数 `versionCode`。设备有活动任务时禁止检查、下载和安装；下载到应用私有缓存并校验响应大小与 SHA-256，失败立即删除。安装使用 FileProvider 和 Android 系统安装确认页；未知来源权限必须由用户在系统设置授权，不静默安装。
+
+## 设备身份恢复（#201）
+
+```http
+POST /api/admin/v1/devices/{deviceId}/identity-reset
+POST /api/agent/v1/register
+X-GoAuto-Device-Recovery-Code: <one-time-code>
+```
+
+仅管理员可以对未停用的既有设备发起身份重置。服务端立即使旧 Device Token 无效，并生成 10 分钟内仅能使用一次的恢复码；恢复码只在该管理员操作的响应中返回一次，服务端仅保存不可逆摘要，管理端设备列表、日志、任务接口和 Android 本地持久化均不得保存或返回原文。管理员将恢复码经受控人工渠道输入同一安装实例的 Agent 设置页。
+
+Agent 携带既有 Token（可已失效）及恢复码重新调用注册接口。服务端必须同时校验同一 `installId`、未停用状态、恢复码摘要、未过期和未使用；成功后使用原 `deviceId` 写入新 Token 摘要并返回一次新 Token，清除恢复码摘要和有效期。旧 Token 与恢复码都立即失效，已分配的 pending 采集或采购任务保持原 `deviceId`，不创建替代设备记录。缺少或错误恢复码仍为 `DEVICE_INSTALL_ID_CONFLICT`；过期码为 `DEVICE_RECOVERY_EXPIRED`；停用设备为 `DEVICE_DISABLED`。

server/app/goauto/access/purchaser.go

@@ -47,6 +47,7 @@ var AdminAPIs = []APIPermission{
 	{"预览尺码匹配", "/api/admin/v1/shopee-products/:productId/specs/mapping/preview-auto-size", "POST", true},
 	{"AI 建议颜色映射", "/api/admin/v1/shopee-products/:productId/specs/mapping/suggest-colors", "POST", true},
 	{"AI 建议尺码映射", "/api/admin/v1/shopee-products/:productId/specs/mapping/suggest-sizes", "POST", true},
+	{"一键匹配并确认颜色尺码", "/api/admin/v1/shopee-products/:productId/specs/mapping/auto-match", "POST", true},
 
 	{"查看 SYB 商品", "/api/admin/v1/syb-products", "GET", true},
 	{"查看 SYB 商品详情", "/api/admin/v1/syb-products/:productId", "GET", true},

server/app/goauto/access/purchaser_test.go

@@ -62,3 +62,12 @@ func TestPurchaserMayRunBatchSpecMatch(t *testing.T) {
 	}
 	t.Fatal("missing purchaser batch spec match permission")
 }
+
+func TestPurchaserMayAutoMatchShopeeProductSpecs(t *testing.T) {
+	for _, permission := range PurchaserAPIs() {
+		if permission.Method == "POST" && permission.Path == "/api/admin/v1/shopee-products/:productId/specs/mapping/auto-match" {
+			return
+		}
+	}
+	t.Fatal("missing purchaser shopee auto-match permission")
+}

server/app/goauto/device/handler.go

@@ -48,7 +48,7 @@ func (handler Handler) Register(context *gin.Context) {
 		writeError(context, internalError(err))
 		return
 	}
-	response, err := NewService(db).Register(context.Request.Context(), request, bearerToken(context.GetHeader("Authorization")))
+	response, err := NewService(db).Register(context.Request.Context(), request, bearerToken(context.GetHeader("Authorization")), strings.TrimSpace(context.GetHeader("X-GoAuto-Device-Recovery-Code")))
 	if err != nil {
 		writeError(context, err)
 		return
@@ -84,6 +84,26 @@ func (handler Handler) RevokeToken(context *gin.Context) {
 	handler.adminAction(context, (*Service).RevokeToken)
 }
 
+func (handler Handler) ResetIdentity(context *gin.Context) {
+	deviceID, err := strconv.ParseUint(context.Param("deviceId"), 10, 64)
+	if err != nil || deviceID == 0 {
+		writeError(context, invalidRequest("deviceId 无效"))
+		return
+	}
+	db, err := handler.database(context)
+	if err != nil {
+		writeError(context, internalError(err))
+		return
+	}
+	response, err := NewService(db).ResetIdentity(context.Request.Context(), deviceID)
+	if err != nil {
+		writeError(context, err)
+		return
+	}
+	context.Header("Cache-Control", "no-store")
+	context.JSON(http.StatusOK, gin.H{"code": http.StatusOK, "data": response})
+}
+
 func (handler Handler) adminAction(context *gin.Context, action func(*Service, stdcontext.Context, uint64) error) {
 	deviceID, err := strconv.ParseUint(context.Param("deviceId"), 10, 64)
 	if err != nil || deviceID == 0 {

server/app/goauto/device/router.go

@@ -22,5 +22,6 @@ func InitRouter(engine *gin.Engine, authMiddleware *jwt.GinJWTMiddleware) {
 	admin := engine.Group("/api/admin/v1/devices").Use(authMiddleware.MiddlewareFunc()).Use(middleware.AuthCheckRole())
 	admin.GET("", handler.List)
 	admin.POST("/:deviceId/disable", middleware.RequireRoleKey("admin"), handler.Disable)
+	admin.POST("/:deviceId/identity-reset", middleware.RequireRoleKey("admin"), handler.ResetIdentity)
 	admin.POST("/:deviceId/token/revoke", middleware.RequireRoleKey("admin"), handler.RevokeToken)
 }

server/app/goauto/device/service.go

@@ -28,8 +28,12 @@ const (
 	CodeDeviceTaskMismatch = "DEVICE_TASK_MISMATCH"
 	CodeDeviceNotFound     = "DEVICE_NOT_FOUND"
 	CodeInternal           = "INTERNAL_ERROR"
+	CodeRecoveryInvalid    = "DEVICE_RECOVERY_INVALID"
+	CodeRecoveryExpired    = "DEVICE_RECOVERY_EXPIRED"
 )
 
+const deviceRecoveryLifetime = 10 * time.Minute
+
 type ServiceError struct {
 	Code      string
 	Message   string
@@ -67,6 +71,11 @@ type RegisterResponse struct {
 	Replayed                 bool   `json:"replayed,omitempty"`
 }
 
+type ResetIdentityResponse struct {
+	DeviceID  uint64    `json:"deviceId"`
+	ExpiresAt time.Time `json:"expiresAt"`
+}
+
 type Service struct {
 	DB                *gorm.DB
 	Now               func() time.Time
@@ -108,6 +117,10 @@ func tokenMatches(token, digest string) bool {
 	return subtle.ConstantTimeCompare(got[:], want) == 1
 }
 
+func digestMatches(value string, digest *string) bool {
+	return digest != nil && tokenMatches(value, *digest)
+}
+
 // Authenticate returns the active device represented by a bearer token.
 // Agent feature packages use this method so token verification stays in one
 // place and raw tokens never leave request memory.
@@ -131,7 +144,11 @@ func (service *Service) Authenticate(ctx context.Context, token string) (models.
 	return result, nil
 }
 
-func (service *Service) Register(ctx context.Context, request RegisterRequest, presentedToken string) (RegisterResponse, error) {
+func (service *Service) Register(ctx context.Context, request RegisterRequest, presentedToken string, recoveryCodes ...string) (RegisterResponse, error) {
+	recoveryCode := ""
+	if len(recoveryCodes) > 0 {
+		recoveryCode = recoveryCodes[0]
+	}
 	request = normalizeRegisterRequest(request)
 	if err := validateRegisterRequest(request); err != nil {
 		return RegisterResponse{}, err
@@ -162,9 +179,15 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 		if existing.Status == models.DeviceStatusDisabled {
 			return RegisterResponse{}, &ServiceError{Code: CodeDeviceDisabled, Message: "设备已停用", Retryable: false}
 		}
-		if !tokenMatches(presentedToken, existing.TokenDigest) {
-			return RegisterResponse{}, &ServiceError{
-				Code: CodeInstallIDConflict, Message: "installId 已注册，需要该设备的有效 Token", Retryable: false,
+		usingRecovery := !tokenMatches(presentedToken, existing.TokenDigest)
+		if usingRecovery {
+			validCode := recoveryCode != "" && digestMatches(recoveryCode, existing.RecoveryCodeDigest)
+			autoRecovery := recoveryCode == "" && existing.RecoveryCodeDigest == nil && existing.RecoveryExpiresAt != nil && existing.RecoveryUsedAt == nil
+			if !validCode && !autoRecovery {
+				return RegisterResponse{}, &ServiceError{Code: CodeInstallIDConflict, Message: "installId 已注册，需要该设备的有效 Token", Retryable: false}
+			}
+			if existing.RecoveryExpiresAt == nil || !service.Now().Before(*existing.RecoveryExpiresAt) {
+				return RegisterResponse{}, &ServiceError{Code: CodeRecoveryExpired, Message: "设备身份重置窗口已过期，请在后台重新操作", Retryable: false}
 			}
 		}
 		updates := map[string]any{
@@ -175,6 +198,20 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 		if request.Capabilities != nil {
 			updates["capabilities_json"] = encodeCapabilities(request.Capabilities)
 		}
+		if usingRecovery {
+			newToken, generateErr := service.GenerateToken()
+			if generateErr != nil {
+				return RegisterResponse{}, internalError(generateErr)
+			}
+			now := service.Now()
+			updates["token_digest"] = tokenDigest(newToken)
+			updates["token_issued_at"] = now
+			updates["recovery_code_digest"] = nil
+			updates["recovery_expires_at"] = nil
+			updates["recovery_used_at"] = now
+			updates["status"] = models.DeviceStatusOnline
+			response.DeviceToken = newToken
+		}
 		result := db.Model(&models.AgentDevice{}).
 			Where("id = ? AND token_digest = ? AND token_revoked_at IS NULL", existing.ID, existing.TokenDigest).
 			Updates(updates)
@@ -222,6 +259,42 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 	return response, nil
 }
 
+// ResetIdentity invalidates the current token and opens a short-lived automatic
+// re-registration window for the same installId. It retains the device row and
+// task bindings, so no recovery code needs to leave the Admin workflow.
+func (service *Service) ResetIdentity(ctx context.Context, deviceID uint64) (ResetIdentityResponse, error) {
+	if service.DB == nil {
+		return ResetIdentityResponse{}, internalError(errors.New("database is nil"))
+	}
+	now := service.Now()
+	expiresAt := now.Add(deviceRecoveryLifetime)
+	response := ResetIdentityResponse{DeviceID: deviceID, ExpiresAt: expiresAt}
+	err := service.DB.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
+		var device models.AgentDevice
+		if err := tx.First(&device, deviceID).Error; errors.Is(err, gorm.ErrRecordNotFound) {
+			return &ServiceError{Code: CodeDeviceNotFound, Message: "设备不存在", Retryable: false}
+		} else if err != nil {
+			return internalError(err)
+		}
+		if device.Status == models.DeviceStatusDisabled {
+			return &ServiceError{Code: CodeDeviceDisabled, Message: "设备已停用", Retryable: false}
+		}
+		invalidatedToken, generateErr := service.GenerateToken()
+		if generateErr != nil {
+			return internalError(generateErr)
+		}
+		return tx.Model(&models.AgentDevice{}).Where("id = ?", deviceID).Updates(map[string]any{
+			"token_digest": tokenDigest(invalidatedToken), "token_issued_at": now,
+			"recovery_code_digest": nil, "recovery_expires_at": expiresAt,
+			"recovery_used_at": nil, "status": models.DeviceStatusOffline,
+		}).Error
+	})
+	if err != nil {
+		return ResetIdentityResponse{}, err
+	}
+	return response, nil
+}
+
 func (service *Service) Disable(ctx context.Context, deviceID uint64) error {
 	return service.deactivate(ctx, deviceID, false)
 }

server/app/goauto/device/service_test.go

@@ -185,6 +185,72 @@ func TestDisableAndRevokePreventFurtherAuthentication(t *testing.T) {
 	}
 }
 
+func TestResetIdentityRecoversSameDeviceAndRotatesToken(t *testing.T) {
+	db := openTestDatabase(t)
+	service := newTestService(t, db)
+	tokens := []string{"original-token", "invalidated-token", "replacement-token"}
+	service.GenerateToken = func() (string, error) {
+		if len(tokens) == 0 {
+			t.Fatal("unexpected token generation")
+		}
+		value := tokens[0]
+		tokens = tokens[1:]
+		return value, nil
+	}
+	request := validRegisterRequest()
+	registered, err := service.Register(context.Background(), request, "")
+	if err != nil {
+		t.Fatalf("first registration: %v", err)
+	}
+	recovery, err := service.ResetIdentity(context.Background(), registered.DeviceID)
+	if err != nil {
+		t.Fatalf("reset identity: %v", err)
+	}
+	if !recovery.ExpiresAt.After(service.Now()) {
+		t.Fatalf("unexpected recovery response: %+v", recovery)
+	}
+	request.RequestID = uuid.NewString()
+	recovered, err := service.Register(context.Background(), request, "original-token")
+	if err != nil {
+		t.Fatalf("recover registration: %v", err)
+	}
+	if recovered.DeviceID != registered.DeviceID || recovered.DeviceToken != "replacement-token" {
+		t.Fatalf("unexpected recovery result: %+v", recovered)
+	}
+	var stored models.AgentDevice
+	if err := db.First(&stored, registered.DeviceID).Error; err != nil {
+		t.Fatalf("load recovered device: %v", err)
+	}
+	if stored.InstallID != strings.ToLower(request.InstallID) || stored.Status != models.DeviceStatusOnline || stored.RecoveryCodeDigest != nil || stored.RecoveryUsedAt == nil {
+		t.Fatalf("recovery did not retain device safely: %+v", stored)
+	}
+	request.RequestID = uuid.NewString()
+	if _, err := service.Register(context.Background(), request, "original-token"); serviceErrorCode(t, err) != CodeInstallIDConflict {
+		t.Fatal("automatic recovery window was reusable")
+	}
+}
+
+func TestResetIdentityRejectsExpiredRecoveryCode(t *testing.T) {
+	db := openTestDatabase(t)
+	service := newTestService(t, db)
+	tokens := []string{"original-token", "invalidated-token"}
+	service.GenerateToken = func() (string, error) { value := tokens[0]; tokens = tokens[1:]; return value, nil }
+	request := validRegisterRequest()
+	registered, err := service.Register(context.Background(), request, "")
+	if err != nil {
+		t.Fatal(err)
+	}
+	recovery, err := service.ResetIdentity(context.Background(), registered.DeviceID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	service.Now = func() time.Time { return recovery.ExpiresAt.Add(time.Second) }
+	request.RequestID = uuid.NewString()
+	if _, err := service.Register(context.Background(), request, ""); serviceErrorCode(t, err) != CodeRecoveryExpired {
+		t.Fatalf("expected expired recovery code, got %v", err)
+	}
+}
+
 func TestRegistrationValidationRejectsInvalidUUIDs(t *testing.T) {
 	service := newTestService(t, openTestDatabase(t))
 	request := validRegisterRequest()

server/app/goauto/models/schema.go

@@ -39,6 +39,9 @@ type AgentDevice struct {
 	TokenDigest            string     `json:"-" gorm:"size:64;not null;uniqueIndex:ux_agent_device_token_digest"`
 	TokenIssuedAt          time.Time  `json:"tokenIssuedAt" gorm:"not null"`
 	TokenRevokedAt         *time.Time `json:"tokenRevokedAt" gorm:"index"`
+	RecoveryCodeDigest     *string    `json:"-" gorm:"size:64;index"`
+	RecoveryExpiresAt      *time.Time `json:"-" gorm:"index"`
+	RecoveryUsedAt         *time.Time `json:"-"`
 	LastRegisterRequestID  *string    `json:"-" gorm:"size:36;uniqueIndex:ux_agent_device_last_register_request_id"`
 	LastHeartbeatRequestID *string    `json:"-" gorm:"size:36;uniqueIndex:ux_agent_device_last_heartbeat_request_id"`
 	LastHeartbeatAt        *time.Time `json:"lastHeartbeatAt" gorm:"index"`

server/app/goauto/purchase/ai_match_eligibility.go

@@ -32,7 +32,10 @@ type skuCombinationRow struct {
 }
 
 func sybSpecsTrusted(syb models.SYBProduct) bool {
-	return syb.ParseStatus == models.SYBParseStatusSuccess || syb.ManuallyConfirmed
+	if syb.ParseStatus == models.SYBParseStatusFailed {
+		return false
+	}
+	return strings.TrimSpace(syb.TargetColor) != "" || strings.TrimSpace(syb.TargetSize) != ""
 }
 
 func (s *Service) loadLatestSKUCombinations(ctx context.Context, pddIDs []uint64, dataset *batchPreviewDataset) error {
@@ -140,7 +143,10 @@ func aiMatchQualificationForDataset(id uint64, dataset batchPreviewDataset) aiMa
 		if request.TargetSize != "" {
 			size = matched.MappedSize
 		}
-		if validSKUCombination(dataset.skuCombinationsByPDD[pdd.ID], syb.TargetColor, syb.TargetSize, color, size) {
+		// 人工录入或外部导入的 PDD 档案可以没有采集任务 SKU 证据。没有
+		// 证据时只确认候选值；一旦有证据，仍必须命中同一个可售组合。
+		combinations := dataset.skuCombinationsByPDD[pdd.ID]
+		if len(combinations) == 0 || validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, color, size) {
 			return aiMatchQualification{Eligible: true, Request: request, MappedColor: mappedColor, MappedSize: mappedSize, Deterministic: &matched}
 		}
 	}

server/app/goauto/purchase/batch.go

@@ -479,8 +479,9 @@ func (s *Service) previewFromDataset(ctx context.Context, id uint64, dataset bat
 // enforcePersistedMatch is the #188 gate for the SYB list and batch-create
 // workflow. A transient deterministic result is not purchase readiness: the
 // color/size mapping must already be confirmed on the Shopee product and must
-// still identify one complete, available SKU combination from the latest
-// successful collection.
+// still identify one complete, available SKU combination when collection
+// evidence exists. Manually entered or externally imported PDD products may
+// legitimately have no such collection record.
 func (item *BatchPreviewItem) enforcePersistedMatch(id uint64, dataset batchPreviewDataset) {
 	if item.ReasonCode != "" && item.ReasonCode != CodeMappingRequired {
 		return
@@ -505,12 +506,7 @@ func (item *BatchPreviewItem) enforcePersistedMatch(id uint64, dataset batchPrev
 		return
 	}
 	combinations := dataset.skuCombinationsByPDD[pdd.ID]
-	if len(combinations) == 0 {
-		item.Eligible = false
-		item.ReasonCode, item.Reason, item.NextAction = CodeMappingRequired, "缺少当前 PDD 商品的完整可售 SKU 组合，请先重新采集", "open_pdd"
-		return
-	}
-	if !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
+	if len(combinations) > 0 && !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
 		item.Eligible = false
 		item.ReasonCode, item.Reason, item.NextAction = CodeMappingRequired, "已保存规格映射不属于当前可售的 PDD 规格组合，请重新匹配", "open_mapping"
 	}

server/app/goauto/purchase/batch_spec_match.go

@@ -50,11 +50,6 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 	if err != nil {
 		return BatchSpecMatchResponse{}, internal(err)
 	}
-	settings, err := aimatching.NewService(s.DB).Settings(ctx)
-	if err != nil {
-		return BatchSpecMatchResponse{}, internal(err)
-	}
-
 	response := BatchSpecMatchResponse{Items: make([]BatchSpecMatchItem, 0, len(ids))}
 	for _, id := range ids {
 		item := BatchSpecMatchItem{SYBProductID: id, Status: BatchSpecMatchFailed}
@@ -87,9 +82,11 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 			}
 		}
 		item.Source, item.Confidence = matched.Source, matched.Decision.Confidence
-		autoConfirm := qualification.Deterministic != nil || (matched.Source == aimatching.SourceAI && matched.Decision.Confidence != nil && *matched.Decision.Confidence >= settings.AutoConfirmMinConfidence && strings.TrimSpace(matched.Decision.Reason) != "")
+		// #200：在 SYB 批量入口，AI 只要返回了可保存的规格结果，就由后续的
+		// 候选与可售 SKU 组合校验决定是否放行；置信度仅保留为审计信息。
+		autoConfirm := qualification.Deterministic != nil || (matched.Source == aimatching.SourceAI && strings.TrimSpace(matched.Decision.Reason) != "")
 		if !autoConfirm {
-			item.Status, item.Reason = BatchSpecMatchPending, "匹配结果未达到自动确认阈值，请人工确认"
+			item.Status, item.Reason = BatchSpecMatchPending, "AI 未返回可用规格结果，请人工确认"
 			if strings.TrimSpace(matched.Decision.Reason) != "" {
 				item.Reason += "：" + strings.TrimSpace(matched.Decision.Reason)
 			}
@@ -104,7 +101,8 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 		if request.TargetSize != "" {
 			mappedSize = matched.MappedSize
 		}
-		if !mappingTargetsValid(specCandidates{Colors: request.Colors, Sizes: request.Sizes}, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) || !validSKUCombination(dataset.skuCombinationsByPDD[pdd.ID], syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
+		combinations := dataset.skuCombinationsByPDD[pdd.ID]
+		if !mappingTargetsValid(specCandidates{Colors: request.Colors, Sizes: request.Sizes}, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) || (len(combinations) > 0 && !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize)) {
 			item.Status, item.Reason = BatchSpecMatchPending, "AI 结果不是当前可售的 PDD 规格组合，请人工确认"
 			response.PendingCount++
 			response.Items = append(response.Items, item)
@@ -117,7 +115,7 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 			response.Items = append(response.Items, item)
 			continue
 		}
-		if _, err := shopeeproduct.NewService(s.DB).ApplyResolvedMappings(ctx, shopee.ID, uuid.NewString(), settings.AutoConfirmMinConfidence, writes); err != nil {
+		if _, err := shopeeproduct.NewService(s.DB).ApplyResolvedMappings(ctx, shopee.ID, uuid.NewString(), writes); err != nil {
 			item.Reason = "规格映射保存失败，请刷新后重试"
 			response.FailedCount++
 			response.Items = append(response.Items, item)

server/app/goauto/purchase/batch_spec_match_test.go

@@ -175,10 +175,10 @@ func TestBatchSpecMatchPersistsExactMatchBeforePurchaseCreation(t *testing.T) {
 	}
 }
 
-func TestManuallyConfirmedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T) {
+func TestExtractedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T) {
 	service, f := exactBatchSpecFixture(t)
 	if err := service.DB.Model(&models.SYBProduct{}).Where("id = ?", f.syb.ID).Updates(map[string]any{
-		"parse_status": models.SYBParseStatusUncertain, "manually_confirmed": true,
+		"parse_status": models.SYBParseStatusUncertain, "manually_confirmed": false,
 	}).Error; err != nil {
 		t.Fatal(err)
 	}
@@ -187,15 +187,15 @@ func TestManuallyConfirmedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T)
 
 	before, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || len(before.Items) != 1 || before.Items[0].Eligible || !before.Items[0].AIMatchEligible || before.Items[0].ProcessStage != ProcessStageColorMapping {
-		t.Fatalf("manually confirmed specs did not enter matching: %+v err=%v", before, err)
+		t.Fatalf("extracted uncertain specs did not enter matching: %+v err=%v", before, err)
 	}
 	matched, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || matched.AutoConfirmedCount != 1 || matcher.calls != 0 {
-		t.Fatalf("manual correction did not allow exact match: %+v calls=%d err=%v", matched, matcher.calls, err)
+		t.Fatalf("extracted uncertain specs did not allow exact match: %+v calls=%d err=%v", matched, matcher.calls, err)
 	}
 	after, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || !after.Items[0].Eligible || after.Items[0].ProcessStage != ProcessStagePurchaseReady {
-		t.Fatalf("saved mapping did not unlock manual correction: %+v err=%v", after, err)
+		t.Fatalf("saved mapping did not unlock extracted uncertain specs: %+v err=%v", after, err)
 	}
 }
 
@@ -265,21 +265,38 @@ func TestBatchPreviewAllowsUncertainParseAndMissingSKUCombination(t *testing.T)
 	}
 }
 
-func TestBatchSpecMatchLeavesLowConfidenceForManualHandling(t *testing.T) {
+func TestBatchSpecMatchAndPreviewAllowMissingSKUCombinationEvidence(t *testing.T) {
+	service, f := unresolvedBatchSpecFixture(t)
+	if err := service.DB.Where("pdd_product_id = ?", f.pdd.ID).Delete(&models.CollectionTask{}).Error; err != nil {
+		t.Fatal(err)
+	}
+	service.Matcher = &batchSpecMatcher{results: []aimatching.MatchResult{aiBatchResult(0.6)}}
+
+	matched, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
+	if err != nil || matched.AutoConfirmedCount != 1 || matched.PendingCount != 0 {
+		t.Fatalf("AI result without SKU evidence was not confirmed: %+v err=%v", matched, err)
+	}
+	preview, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
+	if err != nil || len(preview.Items) != 1 || !preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStagePurchaseReady {
+		t.Fatalf("missing SKU evidence unexpectedly blocked purchase: %+v err=%v", preview, err)
+	}
+}
+
+func TestBatchSpecMatchAutoConfirmsReturnedAIMatchRegardlessOfConfidence(t *testing.T) {
 	service, f := unresolvedBatchSpecFixture(t)
 	service.Matcher = &batchSpecMatcher{results: []aimatching.MatchResult{aiBatchResult(0.6)}}
 
 	response, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
-	if err != nil || response.PendingCount != 1 || response.AutoConfirmedCount != 0 {
-		t.Fatalf("unexpected low-confidence result: %+v err=%v", response, err)
+	if err != nil || response.PendingCount != 0 || response.AutoConfirmedCount != 1 {
+		t.Fatalf("low-confidence AI result was not auto-confirmed: %+v err=%v", response, err)
 	}
 	mapping := savedColorMapping(t, service, f.shopee.ID)
-	if mapping == nil || mapping.PDDValue != "旧白色" || mapping.Status != shopeeproduct.MappingStatusConfirmed {
-		t.Fatalf("low-confidence result changed the saved mapping: %+v", mapping)
+	if mapping == nil || mapping.PDDValue != "米白色" || mapping.Status != shopeeproduct.MappingStatusConfirmed || mapping.Confidence == nil || *mapping.Confidence != 0.6 {
+		t.Fatalf("AI result was not saved as confirmed: %+v", mapping)
 	}
 	preview, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
-	if err != nil || preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStageColorMapping {
-		t.Fatalf("pending mapping unexpectedly became purchase-ready: %+v err=%v", preview, err)
+	if err != nil || !preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStagePurchaseReady {
+		t.Fatalf("saved AI result did not become purchase-ready: %+v err=%v", preview, err)
 	}
 }
 

server/app/goauto/purchase/batch_test.go

@@ -44,6 +44,27 @@ func TestBatchPreviewUsesPDDPriceAndExplainsIneligibleRows(t *testing.T) {
 	}
 }
 
+func TestSybSpecsTrustedOnlyBlocksFailedOrEmptyExtraction(t *testing.T) {
+	tests := []struct {
+		name  string
+		syb   models.SYBProduct
+		trust bool
+	}{
+		{"success", models.SYBProduct{ParseStatus: models.SYBParseStatusSuccess, TargetColor: "黑色", TargetSize: "XL"}, true},
+		{"uncertain with color", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain, TargetColor: "套装"}, true},
+		{"uncertain with size", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain, TargetSize: "均码"}, true},
+		{"failed with values", models.SYBProduct{ParseStatus: models.SYBParseStatusFailed, TargetColor: "黑色"}, false},
+		{"uncertain without values", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain}, false},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := sybSpecsTrusted(tt.syb); got != tt.trust {
+				t.Fatalf("sybSpecsTrusted=%v, want %v", got, tt.trust)
+			}
+		})
+	}
+}
+
 func TestBatchPreviewExposesIndependentCollectionEligibility(t *testing.T) {
 	db := testDB(t)
 	fixture := seed(t, db, liveCaps(), true)

server/app/goauto/shopeeproduct/auto_match.go

@@ -0,0 +1,303 @@
+package shopeeproduct
+
+import (
+	"context"
+	"errors"
+	"strings"
+
+	"go-admin/app/goauto/aimatching"
+	"go-admin/app/goauto/models"
+
+	"github.com/google/uuid"
+	"gorm.io/gorm"
+	"gorm.io/gorm/clause"
+)
+
+type AutoMatchRequest struct {
+	RequestID          string `json:"requestId"`
+	SpecContextVersion string `json:"specContextVersion"`
+}
+
+type AutoMatchItem struct {
+	Dimension  string   `json:"dimension"`
+	Role       string   `json:"role"`
+	ValueName  string   `json:"valueName"`
+	PDDValue   string   `json:"pddValue,omitempty"`
+	Status     string   `json:"status"` // confirmed | preserved | unmatched
+	Source     string   `json:"source,omitempty"`
+	Confidence *float64 `json:"confidence,omitempty"`
+	Reason     string   `json:"reason,omitempty"`
+}
+
+type AutoMatchResponse struct {
+	Product        ProductView     `json:"product"`
+	Items          []AutoMatchItem `json:"items"`
+	ConfirmedCount int             `json:"confirmedCount"`
+	PreservedCount int             `json:"preservedCount"`
+	UnmatchedCount int             `json:"unmatchedCount"`
+	Replayed       bool            `json:"replayed"`
+}
+
+type autoMatchRef struct {
+	dimension string
+	valueName string
+}
+
+// AutoMatchMappings resolves both color and size values, then persists every
+// accepted result as confirmed in one transaction. Provider calls happen
+// before the transaction; the transaction rechecks the complete spec context
+// and PDD candidate set so a stale decision can never be written.
+func (service *Service) AutoMatchMappings(ctx context.Context, id uint64, request AutoMatchRequest) (AutoMatchResponse, error) {
+	requestID := strings.TrimSpace(request.RequestID)
+	if _, err := uuid.Parse(requestID); err != nil {
+		return AutoMatchResponse{}, invalidRequest("requestId 必须是 UUID")
+	}
+	requestVersion := strings.TrimSpace(request.SpecContextVersion)
+	if requestVersion == "" {
+		return AutoMatchResponse{}, contextVersionStale()
+	}
+
+	db := service.DB.WithContext(ctx)
+	var replay models.ShopeeProduct
+	if err := db.Where("id = ? AND last_update_request_id = ?", id, requestID).First(&replay).Error; err == nil {
+		return service.autoMatchReplay(ctx, id)
+	} else if !errors.Is(err, gorm.ErrRecordNotFound) {
+		return AutoMatchResponse{}, internalError(err)
+	}
+
+	var shopee models.ShopeeProduct
+	if err := db.First(&shopee, id).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return AutoMatchResponse{}, productNotFound()
+		}
+		return AutoMatchResponse{}, internalError(err)
+	}
+	if shopee.PDDProductID == nil {
+		return AutoMatchResponse{}, &ServiceError{Code: CodePDDProductNotFound, Message: "请先关联 PDD 商品"}
+	}
+	var pdd models.PDDProduct
+	if err := db.First(&pdd, *shopee.PDDProductID).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return AutoMatchResponse{}, &ServiceError{Code: CodePDDProductNotFound, Message: "关联的 PDD 商品不存在"}
+		}
+		return AutoMatchResponse{}, internalError(err)
+	}
+	if computeSpecContextVersion(shopee.PDDProductID, shopee.SpecsJSON, pdd.SpecsJSON) != requestVersion {
+		return AutoMatchResponse{}, contextVersionStale()
+	}
+	initialSpecs, err := Unmarshal(shopee.SpecsJSON)
+	if err != nil {
+		return AutoMatchResponse{}, internalError(err)
+	}
+
+	items := make([]AutoMatchItem, 0)
+	for _, role := range []string{RoleColor, RoleSize} {
+		refs := autoMatchRefs(initialSpecs, role)
+		if len(refs) == 0 {
+			continue
+		}
+		preview, err := service.suggestMappings(ctx, id, requestVersion, role)
+		if err != nil {
+			return AutoMatchResponse{}, err
+		}
+		if len(preview.Items) != len(refs) {
+			return AutoMatchResponse{}, internalError(errors.New("AI 匹配结果与规格输入数量不一致"))
+		}
+		for index, suggestion := range preview.Items {
+			item := AutoMatchItem{
+				Dimension:  refs[index].dimension,
+				Role:       role,
+				ValueName:  refs[index].valueName,
+				PDDValue:   suggestion.PDDValue,
+				Confidence: suggestion.Confidence,
+				Reason:     strings.TrimSpace(suggestion.Reason),
+				Status:     "unmatched",
+			}
+			switch suggestion.Status {
+			case "preserved":
+				item.Status = "preserved"
+			case "matched":
+				item.Status = "confirmed"
+				item.Source = MappingSourceExactMatch
+			case "ai_matched":
+				if suggestion.Confidence != nil && item.Reason != "" {
+					item.Status = "confirmed"
+					item.Source = MappingSourceAIMatch
+				}
+			}
+			items = append(items, item)
+		}
+	}
+
+	replayed := false
+	err = db.Transaction(func(tx *gorm.DB) error {
+		var current models.ShopeeProduct
+		if err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).First(&current, id).Error; err != nil {
+			if errors.Is(err, gorm.ErrRecordNotFound) {
+				return productNotFound()
+			}
+			return internalError(err)
+		}
+		if current.LastUpdateRequestID != nil && *current.LastUpdateRequestID == requestID {
+			replayed = true
+			return nil
+		}
+		if current.PDDProductID == nil || *current.PDDProductID != pdd.ID {
+			return contextVersionStale()
+		}
+		var currentPDD models.PDDProduct
+		if err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).First(&currentPDD, pdd.ID).Error; err != nil {
+			if errors.Is(err, gorm.ErrRecordNotFound) {
+				return contextVersionStale()
+			}
+			return internalError(err)
+		}
+		if computeSpecContextVersion(current.PDDProductID, current.SpecsJSON, currentPDD.SpecsJSON) != requestVersion {
+			return contextVersionStale()
+		}
+
+		currentSpecs, err := Unmarshal(current.SpecsJSON)
+		if err != nil {
+			return internalError(err)
+		}
+		candidates := map[string]map[string]bool{}
+		for _, role := range []string{RoleColor, RoleSize} {
+			values, err := selectablePDDValues(currentPDD.SpecsJSON, role)
+			if err != nil {
+				return internalError(err)
+			}
+			candidates[role] = values
+		}
+
+		needsAISettings := false
+		for _, item := range items {
+			if item.Status == "confirmed" && item.Source == MappingSourceAIMatch {
+				needsAISettings = true
+				break
+			}
+		}
+		if needsAISettings {
+			settings, err := aimatching.NewService(tx).Settings(ctx)
+			if err != nil {
+				return internalError(err)
+			}
+			if !settings.Enabled {
+				return aiUnavailable("AI 匹配未启用，请先在设置中配置并启用")
+			}
+			for index := range items {
+				item := &items[index]
+				if item.Status == "confirmed" && item.Source == MappingSourceAIMatch &&
+					(item.Confidence == nil || *item.Confidence < settings.AutoConfirmMinConfidence || strings.TrimSpace(item.Reason) == "") {
+					item.Status, item.Source = "unmatched", ""
+				}
+			}
+		}
+
+		plans := make(map[string]AutoMatchItem, len(items))
+		for _, item := range items {
+			plans[item.Dimension+"\x00"+item.ValueName] = item
+		}
+		for dimensionIndex, dimension := range currentSpecs {
+			if dimension.Role != RoleColor && dimension.Role != RoleSize {
+				continue
+			}
+			for valueIndex, value := range dimension.Values {
+				item, ok := plans[dimension.Name+"\x00"+value.Name]
+				if !ok || item.Status != "confirmed" {
+					continue
+				}
+				if !candidates[dimension.Role][item.PDDValue] {
+					return contextVersionStale()
+				}
+				currentSpecs[dimensionIndex].Values[valueIndex].Mapping = &Mapping{
+					PDDValue: item.PDDValue, Source: item.Source, Status: MappingStatusConfirmed,
+					Confidence: item.Confidence, Reason: item.Reason,
+				}
+			}
+		}
+		if err := Validate(currentSpecs); err != nil {
+			return invalidRequest(err.Error())
+		}
+		specsJSON, err := Marshal(currentSpecs)
+		if err != nil {
+			return internalError(err)
+		}
+		if err := tx.Model(&models.ShopeeProduct{}).Where("id = ?", id).Updates(map[string]any{
+			"specs_json": specsJSON, "last_update_request_id": requestID,
+		}).Error; err != nil {
+			return internalError(err)
+		}
+		if err := syncReplacementItemAfterManualEdit(tx, id, currentSpecs); err != nil {
+			return internalError(err)
+		}
+		return nil
+	})
+	if err != nil {
+		return AutoMatchResponse{}, err
+	}
+	if replayed {
+		return service.autoMatchReplay(ctx, id)
+	}
+	response, err := service.autoMatchResponse(ctx, id, items)
+	if err != nil {
+		return AutoMatchResponse{}, err
+	}
+	return response, nil
+}
+
+func autoMatchRefs(specs []SpecDimension, role string) []autoMatchRef {
+	refs := make([]autoMatchRef, 0)
+	for _, dimension := range specs {
+		if dimension.Role != role {
+			continue
+		}
+		for _, value := range dimension.Values {
+			refs = append(refs, autoMatchRef{dimension: dimension.Name, valueName: value.Name})
+		}
+	}
+	return refs
+}
+
+func (service *Service) autoMatchResponse(ctx context.Context, id uint64, items []AutoMatchItem) (AutoMatchResponse, error) {
+	detail, err := service.Detail(ctx, id)
+	if err != nil {
+		return AutoMatchResponse{}, err
+	}
+	response := AutoMatchResponse{Product: detail.Product, Items: items}
+	for _, item := range items {
+		switch item.Status {
+		case "confirmed":
+			response.ConfirmedCount++
+		case "preserved":
+			response.PreservedCount++
+		default:
+			response.UnmatchedCount++
+		}
+	}
+	return response, nil
+}
+
+func (service *Service) autoMatchReplay(ctx context.Context, id uint64) (AutoMatchResponse, error) {
+	detail, err := service.Detail(ctx, id)
+	if err != nil {
+		return AutoMatchResponse{}, err
+	}
+	response := AutoMatchResponse{Product: detail.Product, Items: []AutoMatchItem{}, Replayed: true}
+	for _, dimension := range detail.Product.Specs {
+		if dimension.Role != RoleColor && dimension.Role != RoleSize {
+			continue
+		}
+		for _, value := range dimension.Values {
+			item := AutoMatchItem{Dimension: dimension.Name, Role: dimension.Role, ValueName: value.Name, Status: "unmatched"}
+			if value.Mapping != nil && value.Mapping.Status == MappingStatusConfirmed {
+				item.PDDValue, item.Status, item.Source = value.Mapping.PDDValue, "preserved", value.Mapping.Source
+				item.Confidence, item.Reason = value.Mapping.Confidence, value.Mapping.Reason
+				response.PreservedCount++
+			} else {
+				response.UnmatchedCount++
+			}
+			response.Items = append(response.Items, item)
+		}
+	}
+	return response, nil
+}

server/app/goauto/shopeeproduct/auto_match_test.go

@@ -0,0 +1,163 @@
+package shopeeproduct
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"sync/atomic"
+	"testing"
+
+	"go-admin/app/goauto/models"
+
+	"github.com/google/uuid"
+)
+
+func TestAutoMatchMappingsConfirmsColorAndSizeInOneRequest(t *testing.T) {
+	provider := httptest.NewServer(chatCompletionResponder(`{"suggestions":[{"sourceId":"s1","candidateId":"c1","confidence":0.96,"reason":"颜色含义唯一一致"}]}`))
+	defer provider.Close()
+
+	db := openTestDB(t)
+	pdd := seedPDDProduct(t, db, "active")
+	setting := seedEnabledAISetting(t, provider.URL, 0.9)
+	if err := db.Create(&setting).Error; err != nil {
+		t.Fatal(err)
+	}
+	service := NewService(db)
+	created, err := service.Create(context.Background(), CreateRequest{
+		RequestID: uuid.NewString(), ShopeeItemID: "SP-AUTO-BOTH", PDDProductID: &pdd.ID,
+		Specs: []SpecDimension{
+			{Name: "颜色", Role: RoleColor, Values: []SpecValue{{Name: "深黑", Source: ValueSourceImport}}},
+			{Name: "尺码", Role: RoleSize, Values: []SpecValue{{Name: " xl ", Source: ValueSourceImport}}},
+		},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	requestID := uuid.NewString()
+	response, err := service.AutoMatchMappings(context.Background(), created.Product.ID, AutoMatchRequest{RequestID: requestID, SpecContextVersion: created.Product.SpecContextVersion})
+	if err != nil {
+		t.Fatalf("auto match: %v", err)
+	}
+	if response.ConfirmedCount != 2 || response.PreservedCount != 0 || response.UnmatchedCount != 0 {
+		t.Fatalf("unexpected counts: %+v", response)
+	}
+	color := response.Product.Specs[0].Values[0].Mapping
+	size := response.Product.Specs[1].Values[0].Mapping
+	if color == nil || color.Status != MappingStatusConfirmed || color.Source != MappingSourceAIMatch || color.PDDValue != "黑色" {
+		t.Fatalf("color not auto-confirmed: %+v", color)
+	}
+	if size == nil || size.Status != MappingStatusConfirmed || size.Source != MappingSourceExactMatch || size.PDDValue != "XL" {
+		t.Fatalf("size not auto-confirmed: %+v", size)
+	}
+
+	replayed, err := service.AutoMatchMappings(context.Background(), created.Product.ID, AutoMatchRequest{RequestID: requestID, SpecContextVersion: created.Product.SpecContextVersion})
+	if err != nil || !replayed.Replayed || replayed.PreservedCount != 2 {
+		t.Fatalf("idempotent replay failed: response=%+v err=%v", replayed, err)
+	}
+}
+
+func TestAutoMatchMappingsLeavesLowConfidenceUnmatched(t *testing.T) {
+	provider := httptest.NewServer(chatCompletionResponder(`{"suggestions":[{"sourceId":"s1","candidateId":"c1","confidence":0.4,"reason":"只能判断为相近颜色"}]}`))
+	defer provider.Close()
+
+	db := openTestDB(t)
+	pdd := seedPDDProduct(t, db, "active")
+	setting := seedEnabledAISetting(t, provider.URL, 0.9)
+	if err := db.Create(&setting).Error; err != nil {
+		t.Fatal(err)
+	}
+	service := NewService(db)
+	created, err := service.Create(context.Background(), CreateRequest{
+		RequestID: uuid.NewString(), ShopeeItemID: "SP-AUTO-LOW", PDDProductID: &pdd.ID,
+		Specs: []SpecDimension{
+			{Name: "颜色", Role: RoleColor, Values: []SpecValue{{Name: "浅黑", Source: ValueSourceImport}}},
+			{Name: "尺码", Role: RoleSize, Values: []SpecValue{{Name: "XL", Source: ValueSourceImport}}},
+		},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	response, err := service.AutoMatchMappings(context.Background(), created.Product.ID, AutoMatchRequest{RequestID: uuid.NewString(), SpecContextVersion: created.Product.SpecContextVersion})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if response.ConfirmedCount != 1 || response.UnmatchedCount != 1 || response.Product.Specs[0].Values[0].Mapping != nil {
+		t.Fatalf("low confidence color was persisted: %+v", response)
+	}
+	if response.Product.Specs[1].Values[0].Mapping == nil || response.Product.Specs[1].Values[0].Mapping.Status != MappingStatusConfirmed {
+		t.Fatalf("deterministic size was not confirmed: %+v", response.Product.Specs[1])
+	}
+}
+
+func TestAutoMatchMappingsProviderFailureDoesNotWrite(t *testing.T) {
+	provider := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		http.Error(w, "unavailable", http.StatusBadGateway)
+	}))
+	defer provider.Close()
+
+	db := openTestDB(t)
+	pdd := seedPDDProduct(t, db, "active")
+	setting := seedEnabledAISetting(t, provider.URL, 0.9)
+	if err := db.Create(&setting).Error; err != nil {
+		t.Fatal(err)
+	}
+	service := NewService(db)
+	created, err := service.Create(context.Background(), CreateRequest{RequestID: uuid.NewString(), ShopeeItemID: "SP-AUTO-FAIL", PDDProductID: &pdd.ID, Specs: []SpecDimension{{Name: "颜色", Role: RoleColor, Values: []SpecValue{{Name: "深黑", Source: ValueSourceImport}}}}})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if _, err := service.AutoMatchMappings(context.Background(), created.Product.ID, AutoMatchRequest{RequestID: uuid.NewString(), SpecContextVersion: created.Product.SpecContextVersion}); err == nil || errCode(t, err) != CodeAIUnavailable {
+		t.Fatalf("expected AI unavailable, got %v", err)
+	}
+	detail, err := service.Detail(context.Background(), created.Product.ID)
+	if err != nil || detail.Product.Specs[0].Values[0].Mapping != nil {
+		t.Fatalf("provider failure changed mappings: detail=%+v err=%v", detail, err)
+	}
+}
+
+func TestAutoMatchMappingsRejectsContextDriftBeforeAtomicWrite(t *testing.T) {
+	db := openTestDB(t)
+	pdd := seedPDDProduct(t, db, "active")
+	var calls atomic.Int32
+	provider := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		call := calls.Add(1)
+		if call == 2 {
+			if err := db.Model(&models.PDDProduct{}).Where("id = ?", pdd.ID).Update("specs_json", `[{"name":"颜色","role":"color","values":[{"name":"黑色","selectable":true},{"name":"灰色","selectable":true}]},{"name":"尺码","role":"size","values":[{"name":"M","selectable":true}]}]`).Error; err != nil {
+				t.Fatal(err)
+			}
+		}
+		w.Header().Set("Content-Type", "application/json")
+		_ = json.NewEncoder(w).Encode(map[string]any{"choices": []map[string]any{{"message": map[string]any{"content": `{"suggestions":[{"sourceId":"s1","candidateId":"c1","confidence":0.98,"reason":"唯一可靠候选"}]}`}}}})
+	}))
+	defer provider.Close()
+	setting := seedEnabledAISetting(t, provider.URL, 0.9)
+	if err := db.Create(&setting).Error; err != nil {
+		t.Fatal(err)
+	}
+	service := NewService(db)
+	created, err := service.Create(context.Background(), CreateRequest{
+		RequestID: uuid.NewString(), ShopeeItemID: "SP-AUTO-STALE", PDDProductID: &pdd.ID,
+		Specs: []SpecDimension{
+			{Name: "颜色", Role: RoleColor, Values: []SpecValue{{Name: "深黑", Source: ValueSourceImport}}},
+			{Name: "尺码", Role: RoleSize, Values: []SpecValue{{Name: "小号", Source: ValueSourceImport}}},
+		},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if _, err := service.AutoMatchMappings(context.Background(), created.Product.ID, AutoMatchRequest{RequestID: uuid.NewString(), SpecContextVersion: created.Product.SpecContextVersion}); err == nil || errCode(t, err) != CodeSpecContextStale {
+		t.Fatalf("expected stale context, got %v", err)
+	}
+	detail, err := service.Detail(context.Background(), created.Product.ID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, dimension := range detail.Product.Specs {
+		for _, value := range dimension.Values {
+			if value.Mapping != nil {
+				t.Fatalf("context drift caused partial write: %+v", detail.Product.Specs)
+			}
+		}
+	}
+}

server/app/goauto/shopeeproduct/batch_resolved_mapping.go

@@ -7,7 +7,8 @@ import (
 
 // ResolvedMappingItem is one mapping produced by the narrowly scoped SYB
 // batch-match entry point. Confirmed writes are restricted to auditable exact
-// matches and high-confidence AI decisions; SetMapping remains pending-first.
+// matches and AI decisions with a returned match reason; SetMapping remains
+// pending-first.
 type ResolvedMappingItem struct {
 	Dimension  string
 	ValueName  string
@@ -20,14 +21,11 @@ type ResolvedMappingItem struct {
 
 // ApplyResolvedMappings atomically applies the color/size mappings needed by
 // one SYB detail row. It is independent from SetMapping so #188's explicit
-// high-confidence exception cannot change existing callers' pending semantics.
-func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, requestID string, minimumConfidence float64, items []ResolvedMappingItem) (SaveResponse, error) {
+// confirmed-match exception cannot change existing callers' pending semantics.
+func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, requestID string, items []ResolvedMappingItem) (SaveResponse, error) {
 	if len(items) == 0 || len(items) > 2 {
 		return SaveResponse{}, invalidRequest("必须包含 1 至 2 个待写入规格映射")
 	}
-	if minimumConfidence < 0 || minimumConfidence > 1 {
-		return SaveResponse{}, invalidRequest("自动确认阈值无效")
-	}
 	seen := make(map[string]bool, len(items))
 	for _, item := range items {
 		key := strings.TrimSpace(item.Dimension) + "\x00" + strings.TrimSpace(item.ValueName)
@@ -41,9 +39,6 @@ func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, re
 		if item.Status != MappingStatusConfirmed || strings.TrimSpace(item.Reason) == "" {
 			return SaveResponse{}, invalidRequest("自动确认映射必须包含确认状态和匹配理由")
 		}
-		if item.Source == MappingSourceAIMatch && (item.Confidence == nil || *item.Confidence < minimumConfidence) {
-			return SaveResponse{}, invalidRequest("AI 自动确认必须达到置信度阈值")
-		}
 		if err := service.validatePDDMappingTarget(ctx, id, item.Dimension, item.ValueName, strings.TrimSpace(item.PDDValue)); err != nil {
 			return SaveResponse{}, err
 		}

server/app/goauto/shopeeproduct/handler.go

@@ -278,6 +278,28 @@ func (handler Handler) SuggestSizeMappings(c *gin.Context) {
 	c.JSON(http.StatusOK, gin.H{"code": 200, "data": response})
 }
 
+func (handler Handler) AutoMatchMappings(c *gin.Context) {
+	id, ok := handler.pathID(c)
+	if !ok {
+		return
+	}
+	var request AutoMatchRequest
+	if err := decodeJSON(c, &request); err != nil {
+		writeError(c, invalidRequest("请求 JSON 无效"))
+		return
+	}
+	service, ok := handler.service(c)
+	if !ok {
+		return
+	}
+	response, err := service.AutoMatchMappings(c.Request.Context(), id, request)
+	if err != nil {
+		writeError(c, err)
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"code": 200, "data": response})
+}
+
 func (handler Handler) BatchDelete(c *gin.Context) {
 	var request BatchDeleteRequest
 	if err := decodeJSON(c, &request); err != nil {

server/app/goauto/shopeeproduct/router.go

@@ -26,4 +26,5 @@ func InitRouter(engine *gin.Engine, auth *jwt.GinJWTMiddleware) {
 	admin.POST("/:productId/specs/mapping/preview-auto-size", handler.PreviewAutoSizeMatches)
 	admin.POST("/:productId/specs/mapping/suggest-colors", handler.SuggestColorMappings)
 	admin.POST("/:productId/specs/mapping/suggest-sizes", handler.SuggestSizeMappings)
+	admin.POST("/:productId/specs/mapping/auto-match", handler.AutoMatchMappings)
 }

server/app/goauto/sybimport/import_handler.go

@@ -85,7 +85,8 @@ func StartImport(ctx context.Context, db *gorm.DB, request ImportRequest, actor
 	}
 	run, err := NewSyncRunService(db).Create(ctx, CreateSyncRunInput{
 		DateFrom: request.DateFrom, DateTo: request.DateTo, ShopFilterHash: enabledShopHash(enabled),
-		OperatorID: actor.ID, OperatorName: strings.TrimSpace(actor.Name),
+		ShopFilterSnapshot: cloneShopSnapshot(enabled),
+		OperatorID:         actor.ID, OperatorName: strings.TrimSpace(actor.Name),
 	})
 	if err != nil {
 		importGate.Unlock()
@@ -97,7 +98,7 @@ func StartImport(ctx context.Context, db *gorm.DB, request ImportRequest, actor
 	importGate.running = true
 	importGate.Unlock()
 
-	go runImport(db, run.ID, request, settings)
+	go runImport(db, run.ID, request, settings, cloneShopSnapshot(enabled))
 	return StartImportResult{RunID: run.ID, Status: run.Status}, nil
 }
 
@@ -145,7 +146,7 @@ func (handler Handler) Import(c *gin.Context) {
 	c.JSON(http.StatusAccepted, gin.H{"code": 200, "data": gin.H{"runId": result.RunID, "status": result.Status}})
 }
 
-func runImport(db *gorm.DB, runID uint64, request ImportRequest, settings config.SYB) {
+func runImport(db *gorm.DB, runID uint64, request ImportRequest, settings config.SYB, allowed map[string]string) {
 	defer func() { importGate.Lock(); importGate.running = false; importGate.Unlock() }()
 	ctx, cancel := context.WithTimeout(context.Background(), importTimeout)
 	defer cancel()
@@ -156,7 +157,7 @@ func runImport(db *gorm.DB, runID uint64, request ImportRequest, settings config
 		OcrURL: settings.OcrURL, OcrMaxAttempts: settings.OcrMaxAttempts,
 	})
 	if err == nil {
-		report, err = SyncWithProgress(ctx, db, client, SyncConfig{PageSize: settings.PageSize, MaxMatches: settings.MaxMatches}, request.DateFrom, request.DateTo,
+		report, err = SyncWithShopSnapshot(ctx, db, client, SyncConfig{PageSize: settings.PageSize, MaxMatches: settings.MaxMatches}, request.DateFrom, request.DateTo, allowed,
 			func(progress SyncProgress) error { return runs.UpdateProgress(ctx, runID, progress) })
 	}
 	status := SyncRunSucceeded
@@ -168,6 +169,14 @@ func runImport(db *gorm.DB, runID uint64, request ImportRequest, settings config
 	_ = runs.Finish(finishCtx, runID, status, report, err)
 }
 
+func cloneShopSnapshot(source map[string]string) map[string]string {
+	cloned := make(map[string]string, len(source))
+	for normalized, display := range source {
+		cloned[normalized] = display
+	}
+	return cloned
+}
+
 func claimUint64(value any) uint64 {
 	switch typed := value.(type) {
 	case float64:

server/app/goauto/sybimport/sync.go

@@ -59,12 +59,16 @@ type SyncReport struct {
 	// it a renamed or newly opened shop is never noticed (#50).
 	ShopBreakdown  map[string]ShopBreakdown `json:"shopBreakdown"`
 	ShopFilterHash string                   `json:"shopFilterHash"`
-	OrderCount     int                      `json:"orderCount"`
-	DetailCount    int                      `json:"detailCount"`
-	Created        int                      `json:"created"`
-	Updated        int                      `json:"updated"`
-	StartedAt      time.Time                `json:"startedAt"`
-	FinishedAt     time.Time                `json:"finishedAt"`
+	// ShopFilterSnapshot is the immutable enabled-shop snapshot supplied when
+	// the run was created. It is intentionally a display-name list for audit;
+	// matching continues to use the normalized map passed to the sync.
+	ShopFilterSnapshot []string  `json:"shopFilterSnapshot"`
+	OrderCount         int       `json:"orderCount"`
+	DetailCount        int       `json:"detailCount"`
+	Created            int       `json:"created"`
+	Updated            int       `json:"updated"`
+	StartedAt          time.Time `json:"startedAt"`
+	FinishedAt         time.Time `json:"finishedAt"`
 }
 
 type ShopBreakdown struct {
@@ -120,19 +124,24 @@ func Sync(ctx context.Context, db *gorm.DB, client *sybclient.Client, cfg SyncCo
 }
 
 func SyncWithProgress(ctx context.Context, db *gorm.DB, client *sybclient.Client, cfg SyncConfig, dateFrom, dateTo string, progress ProgressFunc) (SyncReport, error) {
+	allowed, err := sybshop.EnabledNames(ctx, db)
+	if err != nil {
+		return SyncReport{From: dateFrom, To: dateTo, StartedAt: time.Now().UTC(), ShopBreakdown: map[string]ShopBreakdown{}}, err
+	}
+	return SyncWithShopSnapshot(ctx, db, client, cfg, dateFrom, dateTo, allowed, progress)
+}
+
+// SyncWithShopSnapshot runs against the immutable enabled-shop snapshot taken
+// by StartImport. It must not query syb_shop again: doing so would make the
+// run's effective allow-list differ from the snapshot recorded on its row.
+func SyncWithShopSnapshot(ctx context.Context, db *gorm.DB, client *sybclient.Client, cfg SyncConfig, dateFrom, dateTo string, allowed map[string]string, progress ProgressFunc) (SyncReport, error) {
 	report := SyncReport{From: dateFrom, To: dateTo, StartedAt: time.Now().UTC(),
-		ShopBreakdown: map[string]ShopBreakdown{}}
+		ShopBreakdown: map[string]ShopBreakdown{}, ShopFilterSnapshot: shopSnapshotNames(allowed)}
 
 	dates, err := splitDateRange(dateFrom, dateTo)
 	if err != nil {
 		return report, err
 	}
-	// `[必须]` The allow-list is read once and used for the whole run, so a shop
-	// enabled midway cannot make one day behave differently from the next.
-	allowed, err := sybshop.EnabledNames(ctx, db)
-	if err != nil {
-		return report, err
-	}
 	if len(allowed) == 0 {
 		return report, ErrNoEnabledShop
 	}
@@ -283,6 +292,15 @@ func SyncWithProgress(ctx context.Context, db *gorm.DB, client *sybclient.Client
 	return report, nil
 }
 
+func shopSnapshotNames(allowed map[string]string) []string {
+	names := make([]string, 0, len(allowed))
+	for _, display := range allowed {
+		names = append(names, display)
+	}
+	sort.Strings(names)
+	return names
+}
+
 func enabledShopHash(allowed map[string]string) string {
 	names := make([]string, 0, len(allowed))
 	for normalized := range allowed {

server/app/goauto/sybimport/sync_run.go

@@ -28,6 +28,7 @@ func NewSyncRunService(db *gorm.DB) *SyncRunService { return &SyncRunService{db:
 
 type CreateSyncRunInput struct {
 	DateFrom, DateTo, ShopFilterHash string
+	ShopFilterSnapshot               map[string]string
 	OperatorID                       uint64
 	OperatorName                     string
 }
@@ -38,10 +39,14 @@ func (s *SyncRunService) Create(ctx context.Context, input CreateSyncRunInput) (
 		return nil, invalidRequest(err.Error())
 	}
 	slot := uint8(1)
+	payload, err := marshalSyncRunPayload(nil, shopSnapshotNames(input.ShopFilterSnapshot))
+	if err != nil {
+		return nil, &ServiceError{Code: CodeSyncRunCreateFailed, Message: "服务端处理失败", Cause: err}
+	}
 	run := &models.SYBSyncRun{
 		DateFrom: input.DateFrom, DateTo: input.DateTo, Status: SyncRunRunning,
 		ActiveSlot: &slot, DaysTotal: len(dates), ShopFilterHash: input.ShopFilterHash,
-		ShopBreakdownJSON: "{}", OperatorID: input.OperatorID,
+		ShopBreakdownJSON: payload, OperatorID: input.OperatorID,
 		OperatorName: strings.TrimSpace(input.OperatorName), StartedAt: time.Now().UTC(),
 	}
 	if err := s.db.WithContext(ctx).Create(run).Error; err != nil {
@@ -55,7 +60,7 @@ func (s *SyncRunService) Create(ctx context.Context, input CreateSyncRunInput) (
 }
 
 func (s *SyncRunService) UpdateProgress(ctx context.Context, id uint64, progress SyncProgress) error {
-	breakdown, err := json.Marshal(progress.Report.ShopBreakdown)
+	payload, err := marshalSyncRunPayload(progress.Report.ShopBreakdown, progress.Report.ShopFilterSnapshot)
 	if err != nil {
 		return err
 	}
@@ -65,7 +70,7 @@ func (s *SyncRunService) UpdateProgress(ctx context.Context, id uint64, progress
 		"order_count": progress.Report.OrderCount, "detail_count": progress.Report.DetailCount,
 		"accepted_count": progress.Report.AcceptedCount, "shop_skipped": progress.Report.ShopSkipped,
 		"created_count": progress.Report.Created, "updated_count": progress.Report.Updated,
-		"shop_filter_hash": progress.Report.ShopFilterHash, "shop_breakdown_json": string(breakdown),
+		"shop_filter_hash": progress.Report.ShopFilterHash, "shop_breakdown_json": payload,
 	}).Error
 }
 
@@ -73,7 +78,7 @@ func (s *SyncRunService) Finish(ctx context.Context, id uint64, status string, r
 	if status != SyncRunSucceeded && status != SyncRunFailed {
 		return fmt.Errorf("invalid terminal sync status %q", status)
 	}
-	breakdown, err := json.Marshal(report.ShopBreakdown)
+	payload, err := marshalSyncRunPayload(report.ShopBreakdown, report.ShopFilterSnapshot)
 	if err != nil {
 		return err
 	}
@@ -87,7 +92,7 @@ func (s *SyncRunService) Finish(ctx context.Context, id uint64, status string, r
 		"order_count": report.OrderCount, "detail_count": report.DetailCount,
 		"accepted_count": report.AcceptedCount, "shop_skipped": report.ShopSkipped,
 		"created_count": report.Created, "updated_count": report.Updated,
-		"shop_breakdown_json": string(breakdown),
+		"shop_breakdown_json": payload,
 	}
 	if report.ShopFilterHash != "" {
 		updates["shop_filter_hash"] = report.ShopFilterHash
@@ -146,8 +151,10 @@ type ShopBreakdownItem struct {
 }
 type SyncRunDTO struct {
 	models.SYBSyncRun
-	ShopBreakdown   []ShopBreakdownItem `json:"shopBreakdown"`
-	ProgressPercent int                 `json:"progressPercent"`
+	ShopBreakdown             []ShopBreakdownItem `json:"shopBreakdown"`
+	ShopFilterSnapshot        []string            `json:"shopFilterSnapshot"`
+	ShopFilterSnapshotPresent bool                `json:"shopFilterSnapshotPresent"`
+	ProgressPercent           int                 `json:"progressPercent"`
 }
 
 func (s *SyncRunService) List(ctx context.Context, request SyncRunListRequest) (SyncRunListResponse, error) {
@@ -188,8 +195,7 @@ func (s *SyncRunService) Detail(ctx context.Context, id uint64) (SyncRunDTO, err
 }
 
 func syncRunDTO(row models.SYBSyncRun) SyncRunDTO {
-	var values map[string]ShopBreakdown
-	_ = json.Unmarshal([]byte(row.ShopBreakdownJSON), &values)
+	values, snapshot, snapshotPresent := parseSyncRunPayload(row.ShopBreakdownJSON)
 	names := make([]string, 0, len(values))
 	for name := range values {
 		names = append(names, name)
@@ -210,7 +216,48 @@ func syncRunDTO(row models.SYBSyncRun) SyncRunDTO {
 	if row.Status == SyncRunSucceeded {
 		percent = 100
 	}
-	return SyncRunDTO{SYBSyncRun: row, ShopBreakdown: items, ProgressPercent: percent}
+	return SyncRunDTO{SYBSyncRun: row, ShopBreakdown: items, ShopFilterSnapshot: snapshot,
+		ShopFilterSnapshotPresent: snapshotPresent, ProgressPercent: percent}
+}
+
+const syncRunPayloadVersion = 1
+
+type syncRunPayload struct {
+	Version            int                      `json:"version"`
+	ShopBreakdown      map[string]ShopBreakdown `json:"shopBreakdown"`
+	ShopFilterSnapshot []string                 `json:"shopFilterSnapshot"`
+}
+
+func marshalSyncRunPayload(breakdown map[string]ShopBreakdown, snapshot []string) (string, error) {
+	if breakdown == nil {
+		breakdown = map[string]ShopBreakdown{}
+	}
+	if snapshot == nil {
+		snapshot = []string{}
+	}
+	encoded, err := json.Marshal(syncRunPayload{
+		Version: syncRunPayloadVersion, ShopBreakdown: breakdown, ShopFilterSnapshot: snapshot,
+	})
+	if err != nil {
+		return "", err
+	}
+	return string(encoded), nil
+}
+
+func parseSyncRunPayload(raw string) (map[string]ShopBreakdown, []string, bool) {
+	var envelope syncRunPayload
+	if err := json.Unmarshal([]byte(raw), &envelope); err == nil && envelope.Version == syncRunPayloadVersion {
+		if envelope.ShopBreakdown == nil {
+			envelope.ShopBreakdown = map[string]ShopBreakdown{}
+		}
+		sort.Strings(envelope.ShopFilterSnapshot)
+		return envelope.ShopBreakdown, envelope.ShopFilterSnapshot, true
+	}
+	// Records written before #212 are a bare breakdown map. Preserve their
+	// existing statistics and state explicitly that no immutable snapshot exists.
+	values := map[string]ShopBreakdown{}
+	_ = json.Unmarshal([]byte(raw), &values)
+	return values, nil, false
 }
 
 func truncateRunError(value string, limit int) string {

server/app/goauto/sybimport/sync_run_test.go

@@ -4,6 +4,8 @@ import (
 	"context"
 	"strings"
 	"testing"
+
+	"go-admin/app/goauto/models"
 )
 
 func TestSyncRunSingleFlightAndTerminalRelease(t *testing.T) {
@@ -57,3 +59,32 @@ func TestSyncRunProgressDetailAndRecovery(t *testing.T) {
 		t.Fatalf("启动恢复状态不正确: %+v", detail)
 	}
 }
+
+func TestSyncRunPersistsImmutableShopSnapshotAndReadsLegacyBreakdown(t *testing.T) {
+	db := newSyncTestDB(t)
+	service := NewSyncRunService(db)
+	run, err := service.Create(context.Background(), CreateSyncRunInput{
+		DateFrom: "2026-08-01", DateTo: "2026-08-01", ShopFilterHash: "snapshot-hash",
+		ShopFilterSnapshot: map[string]string{"alpha": "Alpha 店", "beta": "Beta 店"},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	detail, err := service.Detail(context.Background(), run.ID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !detail.ShopFilterSnapshotPresent || strings.Join(detail.ShopFilterSnapshot, ",") != "Alpha 店,Beta 店" {
+		t.Fatalf("新任务必须返回冻结快照: %+v", detail)
+	}
+	if err := db.Model(&models.SYBSyncRun{}).Where("id = ?", run.ID).Update("shop_breakdown_json", `{"旧店":{"accepted":2,"skipped":1}}`).Error; err != nil {
+		t.Fatal(err)
+	}
+	legacy, err := service.Detail(context.Background(), run.ID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if legacy.ShopFilterSnapshotPresent || len(legacy.ShopFilterSnapshot) != 0 || len(legacy.ShopBreakdown) != 1 || legacy.ShopBreakdown[0].Accepted != 2 {
+		t.Fatalf("旧记录必须保留统计且明确没有快照: %+v", legacy)
+	}
+}

server/app/goauto/sybimport/sync_test.go

@@ -429,6 +429,26 @@ func TestSyncMatchesShopNamesThroughNormalization(t *testing.T) {
 	}
 }
 
+func TestSyncWithShopSnapshotDoesNotRereadChangedShopState(t *testing.T) {
+	db := newSyncTestDB(t)
+	allowed, err := sybshop.EnabledNames(context.Background(), db)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := db.Model(&models.SYBShop{}).Where("normalized_name = ?", "测试店铺").Update("enabled", false).Error; err != nil {
+		t.Fatal(err)
+	}
+	f := &fakeSYB{perDay: map[string]int{"2026-08-01": 2}, shopNames: []string{"测试店铺"}}
+	report, err := SyncWithShopSnapshot(context.Background(), db, newSyncClient(t, f),
+		SyncConfig{PageSize: 10, MaxMatches: 1000}, "2026-08-01", "2026-08-01", allowed, nil)
+	if err != nil {
+		t.Fatalf("冻结快照同步失败: %v", err)
+	}
+	if report.AcceptedCount != 2 || len(report.ShopFilterSnapshot) != 1 || report.ShopFilterSnapshot[0] != "测试店铺" {
+		t.Fatalf("后台不得重读已变化的店铺状态: %+v", report)
+	}
+}
+
 // 列表说属于启用店铺、明细却是另一家店时必须拦住。
 func TestSyncRechecksShopOnDetailResponse(t *testing.T) {
 	db := newSyncTestDB(t)

server/app/goauto/sybshop/reconcile.go

@@ -0,0 +1,91 @@
+package sybshop
+
+import (
+	"context"
+	"fmt"
+
+	"go-admin/app/goauto/models"
+
+	"gorm.io/gorm"
+)
+
+// ReconcileNormalizedNames repairs the matching keys of live SYB shops created
+// before Normalize became the single write-path rule. It changes neither the
+// display name nor the enabled state. The operation is safe to repeat.
+//
+// A normalised-name collision is a data ambiguity. It must be resolved by an
+// operator, rather than silently merging shops or choosing one arbitrarily.
+func ReconcileNormalizedNames(ctx context.Context, db *gorm.DB) (int, error) {
+	if db == nil {
+		return 0, fmt.Errorf("syb shop normalized-name repair: database is nil")
+	}
+
+	updated := 0
+	err := db.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
+		var shops []models.SYBShop
+		if err := tx.Order("id ASC").Find(&shops).Error; err != nil {
+			return err
+		}
+
+		desiredOwners := make(map[string]uint64, len(shops))
+		currentKeys := make(map[string]struct{}, len(shops))
+		type repair struct {
+			id      uint64
+			desired string
+			temp    string
+		}
+		repairs := make([]repair, 0)
+		for _, shop := range shops {
+			desired := Normalize(shop.DisplayName)
+			if desired == "" {
+				return fmt.Errorf("syb shop normalized-name repair: shop %d has blank display name", shop.ID)
+			}
+			if owner, exists := desiredOwners[desired]; exists && owner != shop.ID {
+				return fmt.Errorf("syb shop normalized-name repair: normalized key conflict between shops %d and %d", owner, shop.ID)
+			}
+			desiredOwners[desired] = shop.ID
+			currentKeys[shop.NormalizedName] = struct{}{}
+			if shop.NormalizedName != desired {
+				repairs = append(repairs, repair{id: shop.ID, desired: desired})
+			}
+		}
+
+		// Keys can be swapped (for example stale "a"/"b" values). Stage every
+		// repair through a unique temporary key so the unique index is preserved
+		// throughout the transaction.
+		reserved := make(map[string]struct{}, len(currentKeys)+len(desiredOwners))
+		for key := range currentKeys {
+			reserved[key] = struct{}{}
+		}
+		for key := range desiredOwners {
+			reserved[key] = struct{}{}
+		}
+		for index := range repairs {
+			base := fmt.Sprintf("__goauto_syb_shop_normalize_repair_%d__", repairs[index].id)
+			temp := base
+			for suffix := 1; ; suffix++ {
+				if _, exists := reserved[temp]; !exists {
+					break
+				}
+				temp = fmt.Sprintf("%s%d", base, suffix)
+			}
+			repairs[index].temp = temp
+			reserved[temp] = struct{}{}
+		}
+		for _, repair := range repairs {
+			if err := tx.Model(&models.SYBShop{}).Where("id = ?", repair.id).
+				UpdateColumn("normalized_name", repair.temp).Error; err != nil {
+				return err
+			}
+		}
+		for _, repair := range repairs {
+			if err := tx.Model(&models.SYBShop{}).Where("id = ?", repair.id).
+				UpdateColumn("normalized_name", repair.desired).Error; err != nil {
+				return err
+			}
+		}
+		updated = len(repairs)
+		return nil
+	})
+	return updated, err
+}

server/app/goauto/sybshop/reconcile_test.go

@@ -0,0 +1,93 @@
+package sybshop_test
+
+import (
+	"context"
+	"strings"
+	"testing"
+
+	"go-admin/app/goauto/models"
+	"go-admin/app/goauto/sybshop"
+)
+
+func TestReconcileNormalizedNamesRepairsLegacyKey(t *testing.T) {
+	db := openDB(t)
+	shop := models.SYBShop{DisplayName: "樂齡樂活美學館｜銀髮居家熟齡悅己壯世代優雅生活", NormalizedName: "legacy-key", Enabled: true}
+	if err := db.Create(&shop).Error; err != nil {
+		t.Fatalf("创建历史店铺失败: %v", err)
+	}
+
+	updated, err := sybshop.ReconcileNormalizedNames(context.Background(), db)
+	if err != nil {
+		t.Fatalf("回填失败: %v", err)
+	}
+	if updated != 1 {
+		t.Fatalf("应修复 1 条，实际 %d", updated)
+	}
+	var reloaded models.SYBShop
+	if err := db.First(&reloaded, shop.ID).Error; err != nil {
+		t.Fatalf("读取修复结果失败: %v", err)
+	}
+	if reloaded.NormalizedName != sybshop.Normalize(shop.DisplayName) {
+		t.Fatalf("规范化键不正确: %q", reloaded.NormalizedName)
+	}
+	if reloaded.DisplayName != shop.DisplayName || !reloaded.Enabled {
+		t.Fatalf("回填不应修改展示名或启用状态: %+v", reloaded)
+	}
+	names, err := sybshop.EnabledNames(context.Background(), db)
+	if err != nil || names[sybshop.Normalize(shop.DisplayName)] != shop.DisplayName {
+		t.Fatalf("修复后启用快照未命中: names=%v err=%v", names, err)
+	}
+
+	updated, err = sybshop.ReconcileNormalizedNames(context.Background(), db)
+	if err != nil || updated != 0 {
+		t.Fatalf("重复回填应无变化: updated=%d err=%v", updated, err)
+	}
+}
+
+func TestReconcileNormalizedNamesRejectsCollisionWithoutWriting(t *testing.T) {
+	db := openDB(t)
+	first := models.SYBShop{DisplayName: "Ａ店", NormalizedName: "legacy-one", Enabled: true}
+	second := models.SYBShop{DisplayName: "A店", NormalizedName: "legacy-two", Enabled: true}
+	if err := db.Create(&first).Error; err != nil {
+		t.Fatalf("创建第一条历史店铺失败: %v", err)
+	}
+	if err := db.Create(&second).Error; err != nil {
+		t.Fatalf("创建第二条历史店铺失败: %v", err)
+	}
+
+	updated, err := sybshop.ReconcileNormalizedNames(context.Background(), db)
+	if updated != 0 || err == nil || !strings.Contains(err.Error(), "normalized key conflict") {
+		t.Fatalf("冲突应失败且不报告更新: updated=%d err=%v", updated, err)
+	}
+	var rows []models.SYBShop
+	if err := db.Order("id ASC").Find(&rows).Error; err != nil {
+		t.Fatalf("读取冲突结果失败: %v", err)
+	}
+	if len(rows) != 2 || rows[0].NormalizedName != "legacy-one" || rows[1].NormalizedName != "legacy-two" {
+		t.Fatalf("冲突时不应修改任何键: %+v", rows)
+	}
+}
+
+func TestReconcileNormalizedNamesHandlesSwappedLegacyKeys(t *testing.T) {
+	db := openDB(t)
+	first := models.SYBShop{DisplayName: "Ａ", NormalizedName: "b", Enabled: true}
+	second := models.SYBShop{DisplayName: "Ｂ", NormalizedName: "a", Enabled: true}
+	if err := db.Create(&first).Error; err != nil {
+		t.Fatalf("创建第一条历史店铺失败: %v", err)
+	}
+	if err := db.Create(&second).Error; err != nil {
+		t.Fatalf("创建第二条历史店铺失败: %v", err)
+	}
+
+	updated, err := sybshop.ReconcileNormalizedNames(context.Background(), db)
+	if err != nil || updated != 2 {
+		t.Fatalf("交换键回填失败: updated=%d err=%v", updated, err)
+	}
+	var rows []models.SYBShop
+	if err := db.Order("id ASC").Find(&rows).Error; err != nil {
+		t.Fatalf("读取回填结果失败: %v", err)
+	}
+	if rows[0].NormalizedName != "a" || rows[1].NormalizedName != "b" {
+		t.Fatalf("交换键未正确回填: %+v", rows)
+	}
+}

server/cmd/migrate/migration/version-local/1787983800000_device_identity_recovery.go

@@ -0,0 +1,25 @@
+package version_local
+
+import (
+	"runtime"
+
+	goautomigrations "go-admin/app/goauto/migrations"
+	"go-admin/cmd/migrate/migration"
+	common "go-admin/common/models"
+
+	"gorm.io/gorm"
+)
+
+func init() {
+	_, fileName, _, _ := runtime.Caller(0)
+	migration.Migrate.SetVersion(migration.GetFilename(fileName), migrateDeviceIdentityRecovery)
+}
+
+func migrateDeviceIdentityRecovery(db *gorm.DB, version string) error {
+	return db.Transaction(func(tx *gorm.DB) error {
+		if err := goautomigrations.Migrate(tx); err != nil {
+			return err
+		}
+		return tx.Create(&common.Migration{Version: version}).Error
+	})
+}

server/cmd/migrate/migration/version-local/1787983900000_syb_shop_normalized_name_backfill.go

@@ -0,0 +1,32 @@
+package version_local
+
+import (
+	"context"
+	"runtime"
+
+	goautomigrations "go-admin/app/goauto/migrations"
+	"go-admin/app/goauto/sybshop"
+	"go-admin/cmd/migrate/migration"
+	common "go-admin/common/models"
+
+	"gorm.io/gorm"
+)
+
+// This migration repairs historical syb_shop.normalized_name values written
+// before all shop-name write paths used sybshop.Normalize (#213).
+func init() {
+	_, fileName, _, _ := runtime.Caller(0)
+	migration.Migrate.SetVersion(migration.GetFilename(fileName), migrateSYBShopNormalizedNameBackfill)
+}
+
+func migrateSYBShopNormalizedNameBackfill(db *gorm.DB, version string) error {
+	return db.Transaction(func(tx *gorm.DB) error {
+		if err := goautomigrations.Migrate(tx); err != nil {
+			return err
+		}
+		if _, err := sybshop.ReconcileNormalizedNames(context.Background(), tx); err != nil {
+			return err
+		}
+		return tx.Create(&common.Migration{Version: version}).Error
+	})
+}

server/cmd/migrate/migration/version-local/1787983900000_syb_shop_normalized_name_backfill_test.go

@@ -0,0 +1,51 @@
+package version_local
+
+import (
+	"testing"
+
+	goautomigrations "go-admin/app/goauto/migrations"
+	"go-admin/app/goauto/models"
+	common "go-admin/common/models"
+
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+	"gorm.io/gorm/logger"
+)
+
+func TestMigrateSYBShopNormalizedNameBackfillRepairsLegacyRows(t *testing.T) {
+	db, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=shared"), &gorm.Config{
+		Logger: logger.Default.LogMode(logger.Silent),
+	})
+	if err != nil {
+		t.Fatalf("打开测试数据库失败: %v", err)
+	}
+	if err := db.AutoMigrate(&common.Migration{}); err != nil {
+		t.Fatalf("创建迁移记录表失败: %v", err)
+	}
+	if err := goautomigrations.Migrate(db); err != nil {
+		t.Fatalf("创建 GoAuto 表失败: %v", err)
+	}
+	shop := models.SYBShop{DisplayName: "ＡＢＣ店", NormalizedName: "ＡＢＣ店", Enabled: true}
+	if err := db.Create(&shop).Error; err != nil {
+		t.Fatalf("创建历史店铺失败: %v", err)
+	}
+
+	const version = "1787983900000"
+	if err := migrateSYBShopNormalizedNameBackfill(db, version); err != nil {
+		t.Fatalf("执行回填迁移失败: %v", err)
+	}
+	var reloaded models.SYBShop
+	if err := db.First(&reloaded, shop.ID).Error; err != nil {
+		t.Fatalf("读取回填结果失败: %v", err)
+	}
+	if reloaded.NormalizedName != "abc店" {
+		t.Fatalf("迁移未回填规范化键: %q", reloaded.NormalizedName)
+	}
+	var records int64
+	if err := db.Model(&common.Migration{}).Where("version = ?", version).Count(&records).Error; err != nil {
+		t.Fatalf("读取迁移记录失败: %v", err)
+	}
+	if records != 1 {
+		t.Fatalf("迁移应留下一个版本记录，实际 %d", records)
+	}
+}

web/src/api/goauto/devices.js

@@ -21,3 +21,10 @@ export function revokeDeviceToken(deviceId) {
     method: 'post'
   })
 }
+
+export function resetDeviceIdentity(deviceId) {
+  return request({
+    url: `/api/admin/v1/devices/${deviceId}/identity-reset`,
+    method: 'post'
+  })
+}

web/src/api/goauto/shopee-products.js

@@ -66,6 +66,10 @@ export function suggestShopeeSizeMappings(productId, data) {
   return request({ url: `/api/admin/v1/shopee-products/${productId}/specs/mapping/suggest-sizes`, method: 'post', data, timeout: aiSuggestTimeoutMs })
 }
 
+export function autoMatchShopeeSpecMappings(productId, data) {
+  return request({ url: `/api/admin/v1/shopee-products/${productId}/specs/mapping/auto-match`, method: 'post', data, timeout: aiSuggestTimeoutMs })
+}
+
 export function batchDeleteShopeeProducts(data) {
   return request({ url: '/api/admin/v1/shopee-products/batch-delete', method: 'post', data })
 }

web/src/views/goauto/devices/index.vue

@@ -68,8 +68,14 @@
               </span>
             </template>
           </el-table-column>
-          <el-table-column v-if="isAdmin" label="操作" width="190" fixed="right">
+          <el-table-column v-if="isAdmin" label="操作" width="270" fixed="right">
             <template #default="{ row }">
+              <el-button
+                type="warning"
+                link
+                :disabled="row.status === 'disabled'"
+                @click="confirmIdentityReset(row)"
+              >重置设备身份</el-button>
               <el-button
                 type="danger"
                 link
@@ -116,7 +122,7 @@
 <script>
 import { ElMessage, ElMessageBox } from 'element-plus'
 import { Refresh, RefreshLeft, Search } from '@element-plus/icons-vue'
-import { disableDevice, listDevices, revokeDeviceToken } from '@/api/goauto/devices'
+import { disableDevice, listDevices, resetDeviceIdentity, revokeDeviceToken } from '@/api/goauto/devices'
 import { downloadAgentAppRelease, listAgentAppReleases, setCurrentAgentAppRelease, uploadAgentAppRelease } from '@/api/goauto/agent-app-releases'
 import { createRequestId } from '@/utils/request-id'
 
@@ -191,6 +197,16 @@ export default {
       await revokeDeviceToken(row.id)
       ElMessage.success('设备 Token 已吊销')
       await this.getList()
+    },
+    async confirmIdentityReset(row) {
+      await ElMessageBox.confirm(
+        `将立即使“${row.name}”当前 Token 失效，并开启 10 分钟自动重新注册窗口。手机 Agent 保持运行时会自动恢复原设备 #${row.id}，已分配的待领取任务保持不变。`,
+        '确认重置设备身份',
+        { type: 'warning', confirmButtonText: '确认重置', cancelButtonText: '取消', distinguishCancelAndClose: true }
+      )
+      const response = await resetDeviceIdentity(row.id)
+      ElMessage.success(`已开启自动重新注册窗口，有效至 ${new Date(response.data.expiresAt).toLocaleString()}`)
+      await this.getList()
     }
   }
 }

web/src/views/goauto/shopee-products/ShopeeProductDetailDrawer.vue

@@ -23,13 +23,12 @@
         </el-descriptions>
         <p v-if="detail.product.pddProductId && detail.product.sharedByPddCount > 1" class="muted shared-note">该 PDD 商品当前被 {{ detail.product.sharedByPddCount }} 个虾皮商品共用，允许共用。</p>
 
-        <div class="section-heading"><h3>规格匹配</h3><span class="mapping-progress">{{ mappingProgressText }}</span></div>
-        <el-alert title="只保存虾皮规格与 PDD 规格的对应关系，不会修改两端的原始颜色和尺码。" type="info" :closable="false" show-icon class="notice" />
+        <div class="section-heading"><h3>规格匹配</h3><div class="mapping-heading-actions"><span class="mapping-progress">{{ mappingProgressText }}</span><el-button type="primary" :loading="detail.aiMatching" :disabled="!canAutoMatch" :title="hasMappingChanges ? '请先保存或撤销当前人工修改' : ''" @click="autoMatchMappings">一键匹配颜色和尺码</el-button></div></div>
+        <el-alert title="成功匹配会直接保存并可用于采购；未通过置信度或候选校验的项目保持未匹配。不会修改蝦皮或 PDD 的原始颜色和尺码。" type="info" :closable="false" show-icon class="notice" />
         <el-alert v-if="!detail.product.pddProductId" title="请先关联 PDD 商品，再进行规格匹配。" type="warning" :closable="false" show-icon class="notice" />
         <el-alert v-else-if="detail.pddLoaded && !pddSpecValues('color').length && !pddSpecValues('size').length" title="关联的 PDD 商品暂无可用规格，请先完成商品采集。" type="warning" :closable="false" show-icon class="notice" />
         <el-tabs v-model="detail.activeSpecTab" class="mapping-tabs">
           <el-tab-pane label="颜色匹配" name="color">
-            <div class="tab-actions"><span class="muted">AI 只生成未保存的建议，置信度不足不会预填，均需人工确认后保存。</span><el-button type="primary" plain :loading="detail.aiSuggesting.color" :disabled="!canAIMatchColor" @click="previewAISuggestions('color')">AI 匹配</el-button></div>
             <el-empty v-if="!specRows('color').length" description="虾皮商品暂无颜色规格" />
             <el-table v-else :data="specRows('color')" :row-class-name="mappingRowClass" border size="small">
               <el-table-column label="虾皮颜色" min-width="180"><template #default="{ row }"><div class="primary">{{ row.name }}</div><div class="muted">{{ row.source === 'manual' ? '人工添加' : 'SYB 导入' }}</div></template></el-table-column>
@@ -39,7 +38,6 @@
             </el-table>
           </el-tab-pane>
           <el-tab-pane label="尺码匹配" name="size">
-            <div class="tab-actions"><span class="muted">先按格式统一自动匹配；未匹配的项再用 AI 生成建议，置信度不足不会预填。</span><el-button type="primary" plain :loading="detail.aiSuggesting.size" :disabled="!canAIMatchSize" @click="previewAISuggestions('size')">AI 匹配</el-button></div>
             <el-empty v-if="!specRows('size').length" description="虾皮商品暂无尺码规格" />
             <el-table v-else :data="specRows('size')" border size="small">
               <el-table-column label="虾皮尺码" min-width="180"><template #default="{ row }"><div class="primary">{{ row.name }}</div><div class="muted">{{ row.source === 'manual' ? '人工添加' : 'SYB 导入' }}</div></template></el-table-column>
@@ -79,7 +77,7 @@ import { ElMessage } from 'element-plus'
 import {
   getShopeeProduct, updateShopeeProduct, linkShopeeProductPdd, addShopeeSpecValue,
   setShopeeSpecMapping, clearShopeeSpecMapping, confirmShopeeSpecMapping,
-  suggestShopeeColorMappings, suggestShopeeSizeMappings
+  autoMatchShopeeSpecMappings
 } from '@/api/goauto/shopee-products'
 import { getPddProduct, listPddProducts } from '@/api/goauto/pdd-products'
 import { createRequestId } from '@/utils/request-id'
@@ -107,8 +105,7 @@ export default {
     allSpecRows() { return this.detail.product ? this.detail.product.specs.flatMap(d => d.values) : [] },
     hasMappingChanges() { return this.allSpecRows.some(row => (row.pddValueDraft || '') !== (row.originalPddValue || '')) },
     mappingProgressText() { const rows = this.allSpecRows.filter(row => row.role === 'color' || row.role === 'size'); const valid = rows.filter(row => row.pddValueDraft && this.pddValueExists(row.role, row.pddValueDraft)).length; return rows.length ? `${valid}/${rows.length} 已匹配` : '暂无可匹配规格' },
-    canAIMatchColor() { return this.detail.pddLoaded && this.specRows('color').length > 0 && this.pddSpecValues('color').length > 0 },
-    canAIMatchSize() { return this.detail.pddLoaded && this.specRows('size').length > 0 && this.pddSpecValues('size').length > 0 }
+    canAutoMatch() { return this.detail.pddLoaded && !this.hasMappingChanges && ['color', 'size'].some(role => this.specRows(role).length > 0 && this.pddSpecValues(role).length > 0) }
   },
   watch: {
     modelValue: { immediate: true, handler(open) { if (open) this.requestSwitch(this.productId); else this.closeInternals() } },
@@ -117,7 +114,7 @@ export default {
     action(value) { if (value === 'link_pdd' && this.detail.product && !this.pddPicker.open) this.openPddPicker() }
   },
   methods: {
-    emptyDetail() { return { loading: false, saving: false, aiSuggesting: { color: false, size: false }, product: null, pddProduct: null, pddLoaded: false, activeSpecTab: 'color', highlightColor: '' } },
+    emptyDetail() { return { loading: false, saving: false, aiMatching: false, product: null, pddProduct: null, pddLoaded: false, activeSpecTab: 'color', highlightColor: '' } },
     validProductId(id) { return Number.isInteger(Number(id)) && Number(id) > 0 },
     isCurrent(generation, id) { return this.modelValue && generation === this.requestGeneration && Number(this.productId) === Number(id) },
     async confirmDiscard() { if (!this.hasMappingChanges) return true; return this.$confirm('当前有未保存的规格匹配，确定放弃吗？', '放弃修改？', { type: 'warning', confirmButtonText: '放弃修改', cancelButtonText: '继续编辑' }).then(() => true).catch(() => false) },
@@ -164,7 +161,7 @@ export default {
     markManual(row) { row.draftSource = 'manual'; row.previewReason = ''; row.draftConfidence = null },
     clearDraft(row) { row.pddValueDraft = ''; row.draftSource = 'manual'; row.previewReason = ''; row.draftConfidence = null },
     mappingRowClass({ row }) { return this.detail.highlightColor && row.role === 'color' && row.name === this.detail.highlightColor ? 'mapping-row-highlight' : '' },
-    async previewAISuggestions(role) { const id = this.loadedProductId; const generation = this.requestGeneration; this.detail.aiSuggesting[role] = true; try { const suggest = role === 'color' ? suggestShopeeColorMappings : suggestShopeeSizeMappings; const r = await suggest(id, { specContextVersion: this.detail.product.specContextVersion }); if (!this.isCurrent(generation, id)) return; const byName = new Map(r.data.items.map(item => [item.valueName, item])); this.specRows(role).forEach(row => { const item = byName.get(row.name); if (!item) return; row.previewReason = item.reason || ''; row.draftConfidence = item.confidence ?? null; if (item.apply && item.status !== 'preserved') { row.pddValueDraft = item.pddValue || ''; row.draftSource = item.status === 'matched' ? 'exact_match' : 'ai_match' } }); const suggestedCount = r.data.items.filter(item => item.status === 'ai_suggested').length; ElMessage.success(`匹配 ${r.data.matchedCount} 项，AI 建议但置信度不足 ${suggestedCount} 项，待人工选择 ${r.data.pendingCount} 项`) } finally { if (this.isCurrent(generation, id)) this.detail.aiSuggesting[role] = false } },
+    async autoMatchMappings() { const id = this.loadedProductId; const generation = this.requestGeneration; this.detail.aiMatching = true; try { const r = await autoMatchShopeeSpecMappings(id, { requestId: createRequestId(), specContextVersion: this.detail.product.specContextVersion }); if (!this.isCurrent(generation, id)) return; const confirmed = Number(r.data.confirmedCount || 0); const preserved = Number(r.data.preservedCount || 0); const unmatched = Number(r.data.unmatchedCount || 0); await this.refreshDetail(); const message = `新匹配并确认 ${confirmed} 项，保留已确认 ${preserved} 项，未匹配 ${unmatched} 项`; if (unmatched > 0) ElMessage.warning(message); else ElMessage.success(message) } finally { if (this.isCurrent(generation, id)) this.detail.aiMatching = false } },
     async confirmPendingMapping(row) { await confirmShopeeSpecMapping(this.loadedProductId, { requestId: createRequestId(), dimension: row.dimensionName, valueName: row.name }); await this.refreshDetail() },
     async saveAllMappings() { const changes = this.allSpecRows.filter(row => (row.pddValueDraft || '') !== (row.originalPddValue || '')); if (!changes.length) return; const invalid = changes.find(row => row.pddValueDraft && !this.pddValueExists(row.role, row.pddValueDraft)); if (invalid) { ElMessage.warning(`PDD 规格“${invalid.pddValueDraft}”已不存在，请重新选择`); return } this.detail.saving = true; try { for (const row of changes) { if (!row.pddValueDraft) { if (row.originalPddValue) await clearShopeeSpecMapping(this.loadedProductId, { requestId: createRequestId(), dimension: row.dimensionName, valueName: row.name }); continue } const source = ['exact_match', 'ai_match'].includes(row.draftSource) ? row.draftSource : 'manual'; const payload = { requestId: createRequestId(), dimension: row.dimensionName, valueName: row.name, pddValue: row.pddValueDraft, source }; if (source === 'ai_match') { if (row.draftConfidence !== null && row.draftConfidence !== undefined) payload.confidence = row.draftConfidence; if (row.previewReason) payload.reason = row.previewReason } await setShopeeSpecMapping(this.loadedProductId, payload); if (source === 'exact_match') await confirmShopeeSpecMapping(this.loadedProductId, { requestId: createRequestId(), dimension: row.dimensionName, valueName: row.name }) } ElMessage.success('规格匹配已保存'); await this.refreshDetail() } finally { this.detail.saving = false } },
     async submitAddValue() { const dimension = this.addValueForm.dimension.trim(); const name = this.addValueForm.name.trim(); if (!dimension || !name) { ElMessage.warning('请填写维度名称和规格值'); return } await addShopeeSpecValue(this.loadedProductId, { requestId: createRequestId(), dimension, role: this.addValueForm.role, name }); this.addValueForm = { dimension: '', role: 'other', name: '' }; await this.refreshDetail() },
@@ -175,5 +172,5 @@ export default {
 </script>
 
 <style lang="scss" scoped>
-.drawer-body{padding:0 4px 24px}.drawer-actions{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:16px}.primary{font-weight:600;color:#1f2937}.muted{font-size:12px;color:#909399}.link{color:#1677ff;cursor:pointer}.notice{margin-bottom:16px}.shared-note{margin:8px 0 0}.section-heading{display:flex;align-items:center;justify-content:space-between;margin:24px 0 12px}.section-heading h3{margin:0}.mapping-progress{font-size:13px;color:#606266}.mapping-tabs{margin-top:4px}.mapping-select{width:100%}.tab-actions{display:flex;align-items:center;justify-content:space-between;gap:16px;margin:4px 0 12px}.preview-reason{margin-top:4px}:deep(.mapping-row-highlight td){background:#fff7d6!important}.quick-row{display:flex;align-items:center;gap:8px;margin:6px 0}.quick-label{font-size:12px;color:#606266;width:32px}.picker-help{margin:8px 0 0}.picker-thumb,.picker-image-placeholder{display:flex;width:56px;height:56px;margin:auto;border-radius:4px}.picker-image-placeholder{align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.edit-help{margin-left:8px}@media(max-width:768px){.tab-actions{align-items:flex-start;flex-direction:column}}
+.drawer-body{padding:0 4px 24px}.drawer-actions{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:16px}.primary{font-weight:600;color:#1f2937}.muted{font-size:12px;color:#909399}.link{color:#1677ff;cursor:pointer}.notice{margin-bottom:16px}.shared-note{margin:8px 0 0}.section-heading{display:flex;align-items:center;justify-content:space-between;margin:24px 0 12px}.section-heading h3{margin:0}.mapping-heading-actions{display:flex;align-items:center;gap:12px}.mapping-progress{font-size:13px;color:#606266}.mapping-tabs{margin-top:4px}.mapping-select{width:100%}.preview-reason{margin-top:4px}:deep(.mapping-row-highlight td){background:#fff7d6!important}.quick-row{display:flex;align-items:center;gap:8px;margin:6px 0}.quick-label{font-size:12px;color:#606266;width:32px}.picker-help{margin:8px 0 0}.picker-thumb,.picker-image-placeholder{display:flex;width:56px;height:56px;margin:auto;border-radius:4px}.picker-image-placeholder{align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.edit-help{margin-left:8px}@media(max-width:768px){.section-heading,.mapping-heading-actions{align-items:flex-start;flex-direction:column}}
 </style>

web/tests/e2e/shopee-pdd-picker.spec.ts

@@ -51,22 +51,26 @@ test('PDD 选择器默认最近五条并支持搜索与清空回退', async({ pa
   expect(listURLs.at(-1)?.searchParams.get('status')).toBe('active')
 })
 
-test('虾皮详情原地叠加 PDD 抽屉且低置信度 AI 建议不预填', async({ page, context }) => {
+test('虾皮详情一键匹配颜色尺码后直接使用并可原地叠加 PDD 抽屉', async({ page, context }) => {
   await context.addCookies([{ name: 'Admin-Token', value: 'prototype-test-token', domain: 'localhost', path: '/' }])
+  let autoMatched = false
+  let autoMatchBody: Record<string, unknown> | null = null
   await page.route('**/api/**', async route => {
     const url = new URL(route.request().url())
     if (url.pathname.startsWith('/src/api/')) return route.continue()
     if (url.pathname.endsWith('/api/v1/getinfo')) return route.fulfill({ json: { code: 200, data: { roles: ['purchaser'], name: '采购员', avatar: '', introduction: '', permissions: [] }}})
     if (url.pathname.endsWith('/api/v1/menurole')) return route.fulfill({ json: { code: 200, data: routes }})
     if (url.pathname.endsWith('/api/admin/v1/shopee-products')) return route.fulfill({ json: { code: 200, data: { items: [{ id: 9, shopeeItemId: 'S9', title: '叠加抽屉商品', shopName: '测试店', pddProductId: 17, specs: [{ name: '颜色', role: 'color', values: [{ name: '藏青色', source: 'syb', mapping: null }] }] }], total: 1, page: 1, pageSize: 20 }}})
-    if (url.pathname.endsWith('/api/admin/v1/shopee-products/9/specs/mapping/suggest-colors')) {
-      return route.fulfill({ json: { code: 200, data: { items: [{ valueName: '藏青色', pddValue: '黑色', status: 'ai_suggested', apply: false, confidence: 0.45, reason: '置信度不足，请人工选择' }], matchedCount: 0, pendingCount: 1 }}})
+    if (url.pathname.endsWith('/api/admin/v1/shopee-products/9/specs/mapping/auto-match')) {
+      autoMatchBody = route.request().postDataJSON()
+      autoMatched = true
+      return route.fulfill({ json: { code: 200, data: { confirmedCount: 2, preservedCount: 0, unmatchedCount: 0, items: [] }}})
     }
     if (url.pathname.endsWith('/api/admin/v1/shopee-products/9')) {
-      return route.fulfill({ json: { code: 200, data: { product: { id: 9, shopeeItemId: 'S9', title: '叠加抽屉商品', shopName: '测试店', pddProductId: 17, specContextVersion: 3, specs: [{ name: '颜色', role: 'color', values: [{ name: '藏青色', source: 'syb', mapping: null }] }] }}}})
+      return route.fulfill({ json: { code: 200, data: { product: { id: 9, shopeeItemId: 'S9', title: '叠加抽屉商品', shopName: '测试店', pddProductId: 17, specContextVersion: 'context-3', specs: [{ name: '颜色', role: 'color', values: [{ name: '藏青色', source: 'import', mapping: autoMatched ? { pddValue: '黑色', source: 'ai_match', status: 'confirmed', confidence: 0.96, reason: '颜色含义唯一一致' } : null }] }, { name: '尺码', role: 'size', values: [{ name: 'XL', source: 'import', mapping: autoMatched ? { pddValue: 'XL', source: 'exact_match', status: 'confirmed', reason: '格式统一后唯一匹配' } : null }] }] }}}})
     }
     if (url.pathname.endsWith('/api/admin/v1/pdd-products/17/related-syb-products')) return route.fulfill({ json: { code: 200, data: { items: [], total: 0 }}})
-    if (url.pathname.endsWith('/api/admin/v1/pdd-products/17')) return route.fulfill({ json: { code: 200, data: { product: { id: 17, goodsId: 'P17', title: 'PDD 叠加详情', shopName: 'PDD 店', status: 'active', url: 'https://mobile.yangkeduo.com/goods.html?goods_id=17', specs: [{ name: '颜色分类', role: 'color', values: [{ name: '黑色', selectable: true, priceCent: 1299 }] }], colorImages: [] }, relatedShopeeProducts: [] }}})
+    if (url.pathname.endsWith('/api/admin/v1/pdd-products/17')) return route.fulfill({ json: { code: 200, data: { product: { id: 17, goodsId: 'P17', title: 'PDD 叠加详情', shopName: 'PDD 店', status: 'active', url: 'https://mobile.yangkeduo.com/goods.html?goods_id=17', specs: [{ name: '颜色分类', role: 'color', values: [{ name: '黑色', selectable: true, priceCent: 1299 }] }, { name: '尺码', role: 'size', values: [{ name: 'XL', selectable: true }] }], colorImages: [] }, relatedShopeeProducts: [] }}})
     return route.fulfill({ json: { code: 200, data: [] }})
   })
 
@@ -75,15 +79,19 @@ test('虾皮详情原地叠加 PDD 抽屉且低置信度 AI 建议不预填', as
   page.on('popup', () => { popupCount += 1 })
   await page.getByRole('button', { name: '详情', exact: true }).click()
   await expect(page.getByText('虾皮商品详情', { exact: true })).toBeVisible()
-  await page.getByRole('button', { name: 'AI 匹配', exact: true }).click()
-  await expect(page.getByText('置信度不足，请人工选择', { exact: true })).toBeVisible()
-  await expect(page.locator('.el-drawer:visible .mapping-select input').first()).toHaveValue('')
+  await expect(page.getByRole('button', { name: '一键匹配颜色和尺码', exact: true })).toHaveCount(1)
+  await expect(page.getByRole('button', { name: 'AI 匹配', exact: true })).toHaveCount(0)
+  await page.getByRole('button', { name: '一键匹配颜色和尺码', exact: true }).click()
+  await expect(page.locator('.el-drawer:visible').getByText('黑色 · ¥12.99', { exact: true })).toBeVisible()
+  await expect(page.getByText('可采购', { exact: true })).toBeVisible()
+  expect(autoMatchBody?.specContextVersion).toBe('context-3')
+  expect(String(autoMatchBody?.requestId || '')).toMatch(/^[0-9a-f-]{36}$/)
   await page.getByLabel('虾皮商品详情').getByText('PDD-17 ↗', { exact: true }).click()
   await expect(page.locator('.el-drawer:visible').getByText('PDD 商品详情', { exact: true })).toBeVisible()
   await expect(page.getByText('PDD 叠加详情', { exact: true })).toBeVisible()
   await page.keyboard.press('Escape')
   await expect(page.getByText('PDD 叠加详情', { exact: true })).toBeHidden()
   await expect(page.getByText('虾皮商品详情', { exact: true })).toBeVisible()
-  await expect(page.getByText('置信度不足，请人工选择', { exact: true })).toBeVisible()
+  await expect(page.locator('.el-drawer:visible').getByText('黑色 · ¥12.99', { exact: true })).toBeVisible()
   expect(popupCount).toBe(0)
 })