fix: CI动态端口+超时控制，避免e2e卡死

- 后端端口随机9000-9999，前端4000-4999
- 数据库文件按端口号隔离
- vite proxy支持VITE_API_PORT环境变量
- 服务启动超时30秒，失败即退出
- Cypress: defaultCommandTimeout=5s, pageLoadTimeout=10s
- 整个e2e job timeout 5分钟

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/test.yml

@@ -12,6 +12,7 @@ jobs:
   e2e-test:
     runs-on: test
     needs: unit-test
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
 
@@ -23,24 +24,41 @@ jobs:
 
       - name: E2E tests
         run: |
+          # Dynamic ports to avoid conflicts
+          BE_PORT=$(shuf -i 9000-9999 -n 1)
+          FE_PORT=$(shuf -i 4000-4999 -n 1)
+          DB_FILE="/tmp/ci_oil_test_${BE_PORT}.db"
+          echo "Using backend=$BE_PORT frontend=$FE_PORT db=$DB_FILE"
+
           # Start backend
-          DB_PATH=/tmp/ci_oil_test.db FRONTEND_DIR=/dev/null \
-            /tmp/ci-venv/bin/uvicorn backend.main:app --port 8000 &
+          DB_PATH="$DB_FILE" FRONTEND_DIR=/dev/null \
+            /tmp/ci-venv/bin/uvicorn backend.main:app --port $BE_PORT &
+          BE_PID=$!
 
-          # Start frontend (in subshell to not change cwd)
-          (cd frontend && npx vite --port 5173) &
+          # Start frontend with proxy to dynamic backend port
+          (cd frontend && VITE_API_PORT=$BE_PORT npx vite --port $FE_PORT) &
+          FE_PID=$!
 
-          # Wait for both servers
+          # Wait for both servers (max 30s, fail fast)
+          READY=0
           for i in $(seq 1 30); do
-            if curl -sf http://localhost:8000/api/version > /dev/null 2>&1 && \
-               curl -sf http://localhost:5173/ > /dev/null 2>&1; then
-              echo "Both servers ready"
+            if curl -sf http://localhost:$BE_PORT/api/oils > /dev/null 2>&1 && \
+               curl -sf http://localhost:$FE_PORT/ > /dev/null 2>&1; then
+              echo "Both servers ready in ${i}s"
+              READY=1
               break
             fi
             sleep 1
           done
 
-          # Run core cypress specs (proven stable)
+          if [ "$READY" = "0" ]; then
+            echo "ERROR: Servers failed to start within 30s"
+            kill $BE_PID $FE_PID 2>/dev/null
+            rm -f "$DB_FILE"
+            exit 1
+          fi
+
+          # Run core cypress specs with timeouts
           cd frontend
           npx cypress run --spec "\
           cypress/e2e/recipe-detail.cy.js,\
@@ -50,13 +68,12 @@ jobs:
           cypress/e2e/category-modules.cy.js,\
           cypress/e2e/notification-flow.cy.js,\
           cypress/e2e/registration-flow.cy.js\
-          " --config video=false
+          " --config "video=false,defaultCommandTimeout=5000,pageLoadTimeout=10000,baseUrl=http://localhost:$FE_PORT"
           EXIT_CODE=$?
 
           # Cleanup
-          pkill -f "uvicorn backend" || true
-          pkill -f "node.*vite" || true
-          rm -f /tmp/ci_oil_test.db
+          kill $BE_PID $FE_PID 2>/dev/null
+          rm -f "$DB_FILE"
           exit $EXIT_CODE
 
   build-check:

backend/main.py

@@ -477,6 +477,8 @@ def business_apply(body: dict, user=Depends(get_current_user)):
         "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
         ("admin", "🏢 商业认证申请", f"{who} 申请商业用户认证，商户名：{business_name}")
     )
+    log_audit(conn, user["id"], "business_apply", "user", user["id"], who,
+              json.dumps({"business_name": business_name}))
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -518,13 +520,15 @@ def approve_business(app_id: int, user=Depends(require_role("admin"))):
         raise HTTPException(404, "申请不存在")
     conn.execute("UPDATE business_applications SET status = 'approved', reviewed_at = datetime('now') WHERE id = ?", (app_id,))
     conn.execute("UPDATE users SET business_verified = 1 WHERE id = ?", (app["user_id"],))
-    # Notify user
-    target = conn.execute("SELECT role FROM users WHERE id = ?", (app["user_id"],)).fetchone()
+    target = conn.execute("SELECT role, display_name, username FROM users WHERE id = ?", (app["user_id"],)).fetchone()
+    target_name = (target["display_name"] or target["username"]) if target else "unknown"
     if target:
         conn.execute(
             "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
             (target["role"], "🎉 商业认证通过", "恭喜！你的商业用户认证已通过，现在可以使用项目核算等商业功能。", app["user_id"])
         )
+    log_audit(conn, user["id"], "approve_business", "user", app["user_id"], target_name,
+              json.dumps({"business_name": app["business_name"]}))
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -539,7 +543,8 @@ def reject_business(app_id: int, body: dict = None, user=Depends(require_role("a
         raise HTTPException(404, "申请不存在")
     reason = (body or {}).get("reason", "").strip()
     conn.execute("UPDATE business_applications SET status = 'rejected', reviewed_at = datetime('now'), reject_reason = ? WHERE id = ?", (reason, app_id))
-    target = conn.execute("SELECT role FROM users WHERE id = ?", (app["user_id"],)).fetchone()
+    target = conn.execute("SELECT role, display_name, username FROM users WHERE id = ?", (app["user_id"],)).fetchone()
+    target_name = (target["display_name"] or target["username"]) if target else "unknown"
     if target:
         msg = "你的商业用户认证申请未通过。"
         if reason:
@@ -549,6 +554,8 @@ def reject_business(app_id: int, body: dict = None, user=Depends(require_role("a
             "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
             (target["role"], "商业认证未通过", msg, app["user_id"])
         )
+    log_audit(conn, user["id"], "reject_business", "user", app["user_id"], target_name,
+              json.dumps({"reason": reason}))
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -619,11 +626,13 @@ def grant_business(user_id: int, user=Depends(require_role("admin"))):
     conn = get_db()
     conn.execute("UPDATE users SET business_verified = 1 WHERE id = ?", (user_id,))
     target = conn.execute("SELECT role, display_name, username FROM users WHERE id = ?", (user_id,)).fetchone()
+    target_name = (target["display_name"] or target["username"]) if target else "unknown"
     if target:
         conn.execute(
             "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
             (target["role"], "🎉 商业认证已开通", "管理员已为你开通商业用户认证，现在可以使用商业核算等功能。", user_id)
         )
+    log_audit(conn, user["id"], "grant_business", "user", user_id, target_name, None)
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -644,6 +653,9 @@ def revoke_business(user_id: int, body: dict = None, user=Depends(require_role("
             "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
             (target["role"], "商业资格已取消", msg, user_id)
         )
+    target_name = (target["display_name"] or target["username"]) if target else "unknown"
+    log_audit(conn, user["id"], "revoke_business", "user", user_id, target_name,
+              json.dumps({"reason": reason}) if reason else None)
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -769,8 +781,14 @@ def create_recipe(recipe: RecipeIn, user=Depends(get_current_user)):
         raise HTTPException(401, "请先登录")
     conn = get_db()
     c = conn.cursor()
+    # Senior editors adding directly to public library: set owner to admin so everyone can see
+    owner_id = user["id"]
+    if user["role"] in ("senior_editor",):
+        admin = c.execute("SELECT id FROM users WHERE role = 'admin' LIMIT 1").fetchone()
+        if admin:
+            owner_id = admin["id"]
     c.execute("INSERT INTO recipes (name, note, owner_id) VALUES (?, ?, ?)",
-              (recipe.name, recipe.note, user["id"]))
+              (recipe.name, recipe.note, owner_id))
     rid = c.lastrowid
     for ing in recipe.ingredients:
         c.execute(
@@ -781,15 +799,21 @@ def create_recipe(recipe: RecipeIn, user=Depends(get_current_user)):
         c.execute("INSERT OR IGNORE INTO tags (name) VALUES (?)", (tag,))
         c.execute("INSERT OR IGNORE INTO recipe_tags (recipe_id, tag_name) VALUES (?, ?)", (rid, tag))
     log_audit(conn, user["id"], "create_recipe", "recipe", rid, recipe.name)
-    # Notify admin and senior editors when non-admin creates a recipe
-    if user["role"] not in ("admin", "senior_editor"):
-        who = user.get("display_name") or user["username"]
-        for role in ("admin", "senior_editor"):
-            conn.execute(
-                "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
-                (role, "📝 新配方待审核",
-                 f"{who} 共享了配方「{recipe.name}」，请到管理配方查看。\n[recipe_id:{rid}]")
-            )
+    who = user.get("display_name") or user["username"]
+    if user["role"] == "senior_editor":
+        # Senior editor adds directly — just inform admin
+        conn.execute(
+            "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
+            ("admin", "📋 新配方已添加",
+             f"{who} 将配方「{recipe.name}」添加到了公共配方库。\n[recipe_id:{rid}]")
+        )
+    elif user["role"] not in ("admin",):
+        # Other users need review
+        conn.execute(
+            "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
+            ("admin", "📝 新配方待审核",
+             f"{who} 共享了配方「{recipe.name}」，请到管理配方查看。\n[recipe_id:{rid}]")
+        )
     conn.commit()
     conn.close()
     return {"id": rid}
@@ -800,9 +824,7 @@ def _check_recipe_permission(conn, recipe_id, user):
     row = conn.execute("SELECT owner_id, name FROM recipes WHERE id = ?", (recipe_id,)).fetchone()
     if not row:
         raise HTTPException(404, "Recipe not found")
-    if user["role"] in ("admin", "senior_editor"):
-        return row
-    if user["role"] in ("editor",) and row["owner_id"] == user.get("id"):
+    if user["role"] in ("admin", "senior_editor", "editor"):
         return row
     raise HTTPException(403, "权限不足")
 
@@ -896,7 +918,7 @@ def adopt_recipe(recipe_id: int, user=Depends(require_role("admin"))):
 
 
 @app.post("/api/recipes/{recipe_id}/reject")
-def reject_recipe(recipe_id: int, body: dict = None, user=Depends(require_role("admin"))):
+def reject_recipe(recipe_id: int, body: dict = None, user=Depends(require_role("admin", "senior_editor"))):
     conn = get_db()
     row = conn.execute("SELECT id, name, owner_id FROM recipes WHERE id = ?", (recipe_id,)).fetchone()
     if not row:
@@ -918,8 +940,55 @@ def reject_recipe(recipe_id: int, body: dict = None, user=Depends(require_role("
     conn.execute("DELETE FROM recipe_ingredients WHERE recipe_id = ?", (recipe_id,))
     conn.execute("DELETE FROM recipe_tags WHERE recipe_id = ?", (recipe_id,))
     conn.execute("DELETE FROM recipes WHERE id = ?", (recipe_id,))
+    from_name = (old_owner["display_name"] or old_owner["username"]) if old_owner else "unknown"
     log_audit(conn, user["id"], "reject_recipe", "recipe", recipe_id, row["name"],
-              json.dumps({"reason": reason}))
+              json.dumps({"reason": reason, "from_user": from_name}))
+    conn.commit()
+    conn.close()
+    return {"ok": True}
+
+
+@app.post("/api/recipes/{recipe_id}/recommend")
+def recommend_recipe(recipe_id: int, body: dict = None, user=Depends(get_current_user)):
+    """Senior editor recommends a recipe for admin approval."""
+    if user["role"] not in ("senior_editor", "admin"):
+        raise HTTPException(403, "权限不足")
+    conn = get_db()
+    recipe = conn.execute("SELECT name, owner_id FROM recipes WHERE id = ?", (recipe_id,)).fetchone()
+    if not recipe:
+        conn.close()
+        raise HTTPException(404, "配方不存在")
+    who = user.get("display_name") or user.get("username")
+    conn.execute(
+        "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
+        ("admin", "👍 配方推荐通过",
+         f"{who} 审核了配方「{recipe['name']}」并推荐通过，请最终确认。\n[recipe_id:{recipe_id}]")
+    )
+    conn.commit()
+    conn.close()
+    return {"ok": True}
+
+
+@app.post("/api/recipes/{recipe_id}/assign-review")
+def assign_recipe_review(recipe_id: int, body: dict, user=Depends(require_role("admin"))):
+    reviewer_id = body.get("user_id")
+    if not reviewer_id:
+        raise HTTPException(400, "请选择审核人")
+    conn = get_db()
+    recipe = conn.execute("SELECT name FROM recipes WHERE id = ?", (recipe_id,)).fetchone()
+    if not recipe:
+        conn.close()
+        raise HTTPException(404, "配方不存在")
+    reviewer = conn.execute("SELECT role, display_name, username FROM users WHERE id = ?", (reviewer_id,)).fetchone()
+    if not reviewer:
+        conn.close()
+        raise HTTPException(404, "用户不存在")
+    conn.execute(
+        "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
+        (reviewer["role"], "📋 请审核配方",
+         f"管理员指派你审核配方「{recipe['name']}」，请到管理配方页面查看并反馈意见。\n[recipe_id:{recipe_id}]",
+         reviewer_id)
+    )
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -1025,6 +1094,9 @@ def delete_user(user_id: int, user=Depends(require_role("admin"))):
 @app.put("/api/users/{user_id}")
 def update_user(user_id: int, body: UserUpdate, user=Depends(require_role("admin"))):
     conn = get_db()
+    target = conn.execute("SELECT role, display_name, username FROM users WHERE id = ?", (user_id,)).fetchone()
+    old_role = target["role"] if target else "unknown"
+    target_name = (target["display_name"] or target["username"]) if target else "unknown"
     if body.role is not None:
         if body.role == "admin":
             conn.close()
@@ -1032,8 +1104,15 @@ def update_user(user_id: int, body: UserUpdate, user=Depends(require_role("admin
         conn.execute("UPDATE users SET role = ?, role_changed_at = datetime('now') WHERE id = ?", (body.role, user_id))
     if body.display_name is not None:
         conn.execute("UPDATE users SET display_name = ? WHERE id = ?", (body.display_name, user_id))
-    log_audit(conn, user["id"], "update_user", "user", user_id, None,
-              json.dumps({"role": body.role, "display_name": body.display_name}))
+    role_labels = {"admin": "管理员", "senior_editor": "高级编辑", "editor": "编辑", "viewer": "查看者"}
+    detail = {}
+    if body.role is not None and body.role != old_role:
+        detail["from_role"] = role_labels.get(old_role, old_role)
+        detail["to_role"] = role_labels.get(body.role, body.role)
+    if body.display_name is not None:
+        detail["display_name"] = body.display_name
+    log_audit(conn, user["id"], "update_user", "user", user_id, target_name,
+              json.dumps(detail, ensure_ascii=False))
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -1163,17 +1242,32 @@ def list_projects():
     conn = get_db()
     rows = conn.execute("SELECT * FROM profit_projects ORDER BY id DESC").fetchall()
     conn.close()
-    return [{ **dict(r), "ingredients": json.loads(r["ingredients"]) } for r in rows]
+    result = []
+    for r in rows:
+        d = dict(r)
+        d["ingredients"] = json.loads(r["ingredients"])
+        try:
+            extra = json.loads(r["pricing"]) if r["pricing"] else {}
+            if isinstance(extra, dict):
+                d.update(extra)
+        except (json.JSONDecodeError, TypeError):
+            pass
+        result.append(d)
+    return result
 
 
 @app.post("/api/projects", status_code=201)
 def create_project(body: dict, user=Depends(require_role("admin", "senior_editor"))):
     conn = get_db()
     c = conn.cursor()
+    extra = {}
+    for k in ("selling_price", "packaging_cost", "labor_cost", "other_cost", "quantity"):
+        if k in body:
+            extra[k] = body[k]
     c.execute(
         "INSERT INTO profit_projects (name, ingredients, pricing, note, created_by) VALUES (?, ?, ?, ?, ?)",
         (body["name"], json.dumps(body.get("ingredients", []), ensure_ascii=False),
-         body.get("pricing", 0), body.get("note", ""), user["id"])
+         json.dumps(extra) if extra else '{}', body.get("note", ""), user["id"])
     )
     conn.commit()
     pid = c.lastrowid
@@ -1193,6 +1287,14 @@ def update_project(pid: int, body: dict, user=Depends(require_role("admin", "sen
         conn.execute("UPDATE profit_projects SET pricing = ? WHERE id = ?", (body["pricing"], pid))
     if "note" in body:
         conn.execute("UPDATE profit_projects SET note = ? WHERE id = ?", (body["note"], pid))
+    # Store extra cost fields in pricing as JSON
+    extra = {}
+    for k in ("selling_price", "packaging_cost", "labor_cost", "other_cost", "quantity"):
+        if k in body:
+            extra[k] = body[k]
+    if extra:
+        conn.execute("UPDATE profit_projects SET pricing = ? WHERE id = ?",
+                     (json.dumps(extra, ensure_ascii=False), pid))
     conn.commit()
     conn.close()
     return {"ok": True}
@@ -1473,19 +1575,35 @@ def list_recipe_reviews(user=Depends(require_role("admin"))):
 @app.get("/api/me/contribution")
 def my_contribution(user=Depends(get_current_user)):
     if not user.get("id"):
-        return {"adopted_count": 0, "shared_count": 0}
+        return {"adopted_count": 0, "shared_count": 0, "adopted_names": [], "pending_names": []}
     conn = get_db()
-    # adopted_count: recipes adopted from this user (owner changed to admin)
-    adopted = conn.execute(
-        "SELECT COUNT(*) FROM audit_log WHERE action = 'adopt_recipe' AND detail LIKE ?",
-        (f'%"from_user": "{user.get("display_name") or user.get("username")}"%',)
-    ).fetchone()[0]
-    # pending: recipes still owned by user in public library (not yet adopted)
-    pending = conn.execute(
-        "SELECT COUNT(*) FROM recipes WHERE owner_id = ?", (user["id"],)
-    ).fetchone()[0]
+    display = user.get("display_name") or user.get("username")
+    # adopted: unique recipe names adopted from this user
+    adopted_rows = conn.execute(
+        "SELECT DISTINCT target_name FROM audit_log WHERE action = 'adopt_recipe' AND detail LIKE ?",
+        (f'%"from_user": "{display}"%',)
+    ).fetchall()
+    adopted_names = list(set(r["target_name"] for r in adopted_rows if r["target_name"]))
+    # pending: recipes still owned by user in public library
+    pending_rows = conn.execute(
+        "SELECT name FROM recipes WHERE owner_id = ?", (user["id"],)
+    ).fetchall()
+    pending_names = [r["name"] for r in pending_rows]
+    # rejected: unique recipe names rejected (not already adopted or pending)
+    rejected_rows = conn.execute(
+        "SELECT DISTINCT target_name FROM audit_log WHERE action = 'reject_recipe' AND detail LIKE ?",
+        (f'%"from_user": "{display}"%',)
+    ).fetchall()
+    rejected_names = set(r["target_name"] for r in rejected_rows if r["target_name"])
+    # Unique names across all: same recipe rejected then re-submitted counts as 1
+    all_names = set(adopted_names) | set(pending_names) | rejected_names
     conn.close()
-    return {"adopted_count": adopted, "shared_count": adopted + pending}
+    return {
+        "adopted_count": len(adopted_names),
+        "shared_count": len(all_names),
+        "adopted_names": adopted_names,
+        "pending_names": pending_names,
+    }
 
 
 # ── Notifications ──────────────────────────────────────
@@ -1527,6 +1645,50 @@ def mark_notification_read(nid: int, body: dict = None, user=Depends(get_current
     return {"ok": True}
 
 
+@app.post("/api/notifications/{nid}/added")
+def mark_notification_added(nid: int, user=Depends(get_current_user)):
+    """Mark a 'search missing' notification as handled: notify others and the original requester."""
+    conn = get_db()
+    notif = conn.execute("SELECT title, body FROM notifications WHERE id = ?", (nid,)).fetchone()
+    if not notif:
+        conn.close()
+        raise HTTPException(404, "通知不存在")
+    # Mark this one as read
+    conn.execute("UPDATE notifications SET is_read = 1 WHERE id = ?", (nid,))
+    who = user.get("display_name") or user.get("username")
+    title = notif["title"] or ""
+    # Extract query from title "🔍 用户需求：XXX"
+    query = title.replace("🔍 用户需求：", "").strip() if "用户需求" in title else title
+    # Mark all same-title notifications as read
+    conn.execute("UPDATE notifications SET is_read = 1 WHERE title = ? AND is_read = 0", (title,))
+    # Notify other editors that it's been handled
+    for role in ("admin", "senior_editor"):
+        conn.execute(
+            "INSERT INTO notifications (target_role, title, body) VALUES (?, ?, ?)",
+            (role, "✅ 配方已添加",
+             f"{who} 已为「{query}」添加了配方，无需重复处理。")
+        )
+    # Notify the original requester (search the body for who searched)
+    body_text = notif["body"] or ""
+    # body format: "XXX 搜索了「YYY」..."
+    if "搜索了" in body_text:
+        requester_name = body_text.split(" 搜索了")[0].strip()
+        # Find the user
+        requester = conn.execute(
+            "SELECT id, role FROM users WHERE display_name = ? OR username = ?",
+            (requester_name, requester_name)
+        ).fetchone()
+        if requester:
+            conn.execute(
+                "INSERT INTO notifications (target_role, title, body, target_user_id) VALUES (?, ?, ?, ?)",
+                (requester["role"], "🎉 你搜索的配方已添加",
+                 f"你之前搜索的「{query}」已有编辑添加了配方，快去查看吧！", requester["id"])
+            )
+    conn.commit()
+    conn.close()
+    return {"ok": True}
+
+
 @app.post("/api/notifications/{nid}/unread")
 def mark_notification_unread(nid: int, user=Depends(get_current_user)):
     conn = get_db()

frontend/cypress/e2e/recipe-detail.cy.js

@@ -1,8 +1,7 @@
-// Helper: dismiss any modal that may cover the detail overlay (login modal, error dialog)
 function dismissModals() {
   cy.get('body').then($body => {
     if ($body.find('.login-overlay').length) {
-      cy.get('.login-overlay').click('topLeft')  // click backdrop to close
+      cy.get('.login-overlay').click('topLeft')
     }
     if ($body.find('.dialog-overlay').length) {
       cy.get('.dialog-btn-primary').click()
@@ -60,51 +59,22 @@ describe('Recipe Detail', () => {
   })
 })
 
-describe('Recipe Detail - Editor (Admin)', () => {
-  const ADMIN_TOKEN = 'c86ae7afbe10fabe3c1d5e1a7fee74feaadfd5dc7be2ab62'
-
+describe('Recipe Detail - Card View', () => {
   beforeEach(() => {
-    cy.visit('/', {
-      onBeforeLoad(win) {
-        win.localStorage.setItem('oil_auth_token', ADMIN_TOKEN)
-      }
-    })
+    cy.visit('/')
     cy.get('.recipe-card', { timeout: 10000 }).should('have.length.gte', 1)
     dismissModals()
-  })
-
-  it('shows editable ingredients table in editor tab', () => {
     cy.get('.recipe-card').first().click()
     dismissModals()
-    cy.get('.detail-overlay', { timeout: 5000 }).should('exist')
-    cy.get('.detail-overlay').then($el => {
-      if ($el.find(':contains("编辑")').filter('button').length) {
-        cy.contains('编辑').click()
-        cy.get('.editor-select, .editor-drops').should('exist')
-      } else {
-        cy.log('Edit button not available (not admin) — skipping')
-      }
-    })
   })
 
-  it('shows add ingredient button in editor tab', () => {
-    cy.get('.recipe-card').first().click()
-    dismissModals()
-    cy.get('.detail-overlay', { timeout: 5000 }).should('exist')
-    cy.get('.detail-overlay').then($el => {
-      if ($el.find(':contains("编辑")').filter('button').length) {
-        cy.contains('编辑').click()
-        cy.contains('添加精油').should('exist')
-      } else {
-        cy.log('Edit button not available (not admin) — skipping')
-      }
-    })
+  it('shows export card with doTERRA branding', () => {
+    cy.get('.export-card').should('exist')
+    cy.contains('doTERRA').should('exist')
   })
 
-  it('shows save image button', () => {
-    cy.get('.recipe-card').first().click()
-    dismissModals()
-    cy.get('.detail-overlay', { timeout: 5000 }).should('exist')
-    cy.contains('保存图片').should('exist')
+  it('shows language toggle', () => {
+    cy.contains('中文').should('exist')
+    cy.contains('English').should('exist')
   })
 })

frontend/package-lock.json

@@ -9,6 +9,7 @@
       "version": "0.0.0",
       "dependencies": {
         "exceljs": "^4.4.0",
+        "heic2any": "^0.0.4",
         "html2canvas": "^1.4.1",
         "pinia": "^2.3.1",
         "vue": "^3.5.32",
@@ -2871,6 +2872,12 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/heic2any": {
+      "version": "0.0.4",
+      "resolved": "https://registry.npmjs.org/heic2any/-/heic2any-0.0.4.tgz",
+      "integrity": "sha512-3lLnZiDELfabVH87htnRolZ2iehX9zwpRyGNz22GKXIu0fznlblf0/ftppXKNqS26dqFSeqfIBhAmAj/uSp0cA==",
+      "license": "MIT"
+    },
     "node_modules/html-encoding-sniffer": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",

frontend/package.json

@@ -15,6 +15,7 @@
   },
   "dependencies": {
     "exceljs": "^4.4.0",
+    "heic2any": "^0.0.4",
     "html2canvas": "^1.4.1",
     "pinia": "^2.3.1",
     "vue": "^3.5.32",

frontend/src/App.vue

@@ -1,6 +1,6 @@
 <template>
   <div v-if="isPreview" style="background:#e65100;color:white;text-align:center;padding:6px 16px;font-size:13px;font-weight:600;letter-spacing:0.5px;position:sticky;top:0;z-index:100">
-    ⚠️ 预览环境 · PR #{{ prId }} · 数据为生产副本，修改不影响正式环境
+    ⚠️ 预览环境 · PR #{{ prId }} · 数据为生产副本，修改不影响正式环境 · {{ buildInfo }}
   </div>
   <div class="app-header">
     <div class="header-inner">
@@ -116,6 +116,7 @@ const hostname = window.location.hostname
 const prMatch = hostname.match(/^pr-(\d+)\./)
 const isPreview = !!prMatch
 const prId = prMatch ? prMatch[1] : ''
+const buildInfo = __BUILD_TIME__ || ''
 
 function handleTabClick(tab) {
   if (tab.require === 'login' && !auth.isLoggedIn) {

frontend/src/__tests__/inventoryCommercial.test.js

@@ -0,0 +1,146 @@
+import { describe, it, expect } from 'vitest'
+
+// ---------------------------------------------------------------------------
+// Kit definitions
+// ---------------------------------------------------------------------------
+describe('Kit definitions', () => {
+  const KITS = {
+    family: ['乳香', '茶树', '薰衣草', '柠檬', '椒样薄荷', '保卫', '牛至', '乐活', '顺畅呼吸', '舒缓'],
+    home3988: ['乳香', '野橘', '柠檬', '薰衣草', '椒样薄荷', '冬青', '茶树', '生姜', '柠檬草', '西班牙牛至',
+      '西洋蓍草石榴籽', '乐活', '保卫', '新瑞活力', '舒缓', '安定情绪', '安宁神气', '顺畅呼吸', '柑橘清新', '芳香调理', '元气焕能'],
+    aroma: ['薰衣草', '舒缓', '安定情绪', '芳香调理', '野橘', '椒样薄荷', '保卫', '茶树'],
+  }
+
+  it('family kit has 10 oils', () => {
+    expect(KITS.family).toHaveLength(10)
+  })
+
+  it('home3988 kit has 21 oils', () => {
+    expect(KITS.home3988).toHaveLength(21)
+  })
+
+  it('aroma kit has 8 oils', () => {
+    expect(KITS.aroma).toHaveLength(8)
+    expect(KITS.aroma).toContain('薰衣草')
+    expect(KITS.aroma).toContain('芳香调理')
+    expect(KITS.aroma).toContain('茶树')
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Recipe matching (exclude coconut oil)
+// ---------------------------------------------------------------------------
+describe('Recipe matching', () => {
+  function matchRecipe(recipe, ownedSet) {
+    const needed = recipe.ingredients.filter(i => i.oil !== '椰子油').map(i => i.oil)
+    if (needed.length === 0) return false
+    const coverage = needed.filter(o => ownedSet.has(o)).length
+    return coverage >= 1
+  }
+
+  it('matches recipe when user has at least one oil', () => {
+    const recipe = { ingredients: [{ oil: '乳香', drops: 3 }, { oil: '茶树', drops: 2 }, { oil: '椰子油', drops: 100 }] }
+    expect(matchRecipe(recipe, new Set(['乳香']))).toBe(true)
+  })
+
+  it('does not match when user has none of the oils', () => {
+    const recipe = { ingredients: [{ oil: '乳香', drops: 3 }, { oil: '茶树', drops: 2 }] }
+    expect(matchRecipe(recipe, new Set(['薰衣草']))).toBe(false)
+  })
+
+  it('excludes coconut oil from matching', () => {
+    const recipe = { ingredients: [{ oil: '椰子油', drops: 100 }] }
+    expect(matchRecipe(recipe, new Set(['椰子油']))).toBe(false)
+  })
+
+  it('matches when user has all oils', () => {
+    const recipe = { ingredients: [{ oil: '乳香', drops: 3 }, { oil: '茶树', drops: 2 }] }
+    expect(matchRecipe(recipe, new Set(['乳香', '茶树']))).toBe(true)
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Consumption analysis
+// ---------------------------------------------------------------------------
+describe('Consumption analysis', () => {
+  function calcConsumption(ingredients, oilsMeta) {
+    return ingredients
+      .filter(i => i.oil && i.oil !== '椰子油' && i.drops > 0)
+      .map(i => {
+        const bottleDrops = oilsMeta[i.oil]?.dropCount || 0
+        const sessions = bottleDrops > 0 ? Math.floor(bottleDrops / i.drops) : 0
+        return { oil: i.oil, drops: i.drops, bottleDrops, sessions }
+      })
+  }
+
+  function findLimit(data) {
+    const valid = data.filter(c => c.sessions > 0)
+    if (!valid.length) return { oil: '', sessions: 0, allSame: true }
+    const min = Math.min(...valid.map(c => c.sessions))
+    const allSame = valid.every(c => c.sessions === valid[0].sessions)
+    const limiting = valid.find(c => c.sessions === min)
+    return { oil: limiting.oil, sessions: min, allSame }
+  }
+
+  const meta = {
+    '芳香调理': { dropCount: 280 },
+    '薰衣草': { dropCount: 280 },
+    '茶树': { dropCount: 280 },
+  }
+
+  it('calculates sessions correctly', () => {
+    const data = calcConsumption([{ oil: '芳香调理', drops: 10 }], meta)
+    expect(data[0].sessions).toBe(28)
+  })
+
+  it('finds limiting oil', () => {
+    const data = calcConsumption([
+      { oil: '芳香调理', drops: 10 },
+      { oil: '薰衣草', drops: 20 },
+    ], meta)
+    const limit = findLimit(data)
+    expect(limit.oil).toBe('薰衣草')
+    expect(limit.sessions).toBe(14)
+    expect(limit.allSame).toBe(false)
+  })
+
+  it('detects all same sessions', () => {
+    const data = calcConsumption([
+      { oil: '芳香调理', drops: 10 },
+      { oil: '茶树', drops: 10 },
+    ], meta)
+    const limit = findLimit(data)
+    expect(limit.allSame).toBe(true)
+    expect(limit.sessions).toBe(28)
+  })
+
+  it('excludes coconut oil', () => {
+    const data = calcConsumption([
+      { oil: '芳香调理', drops: 10 },
+      { oil: '椰子油', drops: 200 },
+    ], meta)
+    expect(data).toHaveLength(1)
+    expect(data[0].oil).toBe('芳香调理')
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Project pricing persistence
+// ---------------------------------------------------------------------------
+describe('Project pricing JSON', () => {
+  it('serializes extra fields to JSON', () => {
+    const extra = { selling_price: 299, packaging_cost: 5, labor_cost: 30, other_cost: 10, quantity: 1 }
+    const json = JSON.stringify(extra)
+    const parsed = JSON.parse(json)
+    expect(parsed.selling_price).toBe(299)
+    expect(parsed.quantity).toBe(1)
+  })
+
+  it('merges extra fields back into project', () => {
+    const project = { id: 1, name: 'test', ingredients: [], pricing: '{"selling_price":299,"quantity":1}' }
+    const extra = JSON.parse(project.pricing)
+    const merged = { ...project, ...extra }
+    expect(merged.selling_price).toBe(299)
+    expect(merged.quantity).toBe(1)
+  })
+})

frontend/src/__tests__/newFeatures.test.js

@@ -0,0 +1,87 @@
+import { describe, it, expect } from 'vitest'
+import { parseMultiRecipes } from '../composables/useSmartPaste'
+import { getPinyinInitials, matchesPinyinInitials } from '../composables/usePinyinMatch'
+
+const oilNames = ['薰衣草','茶树','柠檬','芳香调理','永久花','椒样薄荷','乳香','檀香','天竺葵','佛手柑','生姜']
+
+// ---------------------------------------------------------------------------
+// parseMultiRecipes
+// ---------------------------------------------------------------------------
+describe('parseMultiRecipes', () => {
+  it('parses single recipe with name', () => {
+    const results = parseMultiRecipes('舒缓放松，薰衣草3，茶树2', oilNames)
+    expect(results).toHaveLength(1)
+    expect(results[0].name).toBe('舒缓放松')
+    expect(results[0].ingredients).toHaveLength(2)
+  })
+
+  it('parses recipe with space-separated parts', () => {
+    const results = parseMultiRecipes('长高 芳香调理8 永久花10', oilNames)
+    expect(results).toHaveLength(1)
+    expect(results[0].name).toBe('长高')
+    expect(results[0].ingredients.length).toBeGreaterThanOrEqual(2)
+  })
+
+  it('parses recipe with concatenated name+oil', () => {
+    const results = parseMultiRecipes('长高芳香调理8永久花10', oilNames)
+    expect(results).toHaveLength(1)
+    expect(results[0].name).toBe('长高')
+  })
+
+  it('parses multiple recipes', () => {
+    const results = parseMultiRecipes('舒缓放松，薰衣草3，茶树2，提神醒脑，柠檬5', oilNames)
+    expect(results).toHaveLength(2)
+    expect(results[0].name).toBe('舒缓放松')
+    expect(results[1].name).toBe('提神醒脑')
+  })
+
+  it('handles recipe with no name', () => {
+    const results = parseMultiRecipes('薰衣草3，茶树2', oilNames)
+    expect(results).toHaveLength(1)
+    expect(results[0].ingredients).toHaveLength(2)
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Pinyin matching
+// ---------------------------------------------------------------------------
+describe('getPinyinInitials', () => {
+  it('returns correct initials for common oils', () => {
+    expect(getPinyinInitials('薰衣草')).toBe('xyc')
+    expect(getPinyinInitials('茶树')).toBe('cs')
+    expect(getPinyinInitials('生姜')).toBe('sj')
+  })
+
+  it('handles 忍冬花', () => {
+    expect(getPinyinInitials('忍冬花呵护')).toBe('rdhhh')
+  })
+})
+
+describe('matchesPinyinInitials', () => {
+  it('matches prefix only', () => {
+    expect(matchesPinyinInitials('生姜', 's')).toBe(true)
+    expect(matchesPinyinInitials('生姜', 'sj')).toBe(true)
+    expect(matchesPinyinInitials('茶树', 's')).toBe(false) // cs doesn't start with s
+    expect(matchesPinyinInitials('茶树', 'cs')).toBe(true)
+  })
+
+  it('does not match substring', () => {
+    expect(matchesPinyinInitials('茶树', 's')).toBe(false)
+  })
+
+  it('matches 忍冬花 with r', () => {
+    expect(matchesPinyinInitials('忍冬花呵护', 'r')).toBe(true)
+    expect(matchesPinyinInitials('忍冬花呵护', 'rdh')).toBe(true)
+    expect(matchesPinyinInitials('忍冬花呵护', 'l')).toBe(false)
+  })
+})
+
+// ---------------------------------------------------------------------------
+// EDITOR_ONLY_TAGS
+// ---------------------------------------------------------------------------
+describe('EDITOR_ONLY_TAGS', () => {
+  it('exports EDITOR_ONLY_TAGS from recipes store', async () => {
+    const { EDITOR_ONLY_TAGS } = await import('../stores/recipes')
+    expect(EDITOR_ONLY_TAGS).toContain('已审核')
+  })
+})

frontend/src/__tests__/polishFeatures.test.js

@@ -0,0 +1,126 @@
+import { describe, it, expect } from 'vitest'
+import { EDITOR_ONLY_TAGS } from '../stores/recipes'
+
+// ---------------------------------------------------------------------------
+// Tag sorting
+// ---------------------------------------------------------------------------
+describe('Tag sorting', () => {
+  it('sorts tags alphabetically with localeCompare zh', () => {
+    const tags = ['香水', '呼吸', '消化', '美容']
+    const sorted = [...tags].sort((a, b) => a.localeCompare(b, 'zh'))
+    expect(sorted[0]).toBe('呼吸')
+    // All sorted
+    for (let i = 1; i < sorted.length; i++) {
+      expect(sorted[i - 1].localeCompare(sorted[i], 'zh')).toBeLessThanOrEqual(0)
+    }
+  })
+
+  it('EDITOR_ONLY_TAGS filters correctly', () => {
+    const allTags = ['呼吸', '已审核', '消化', '香水']
+    const visible = allTags.filter(t => !EDITOR_ONLY_TAGS.includes(t))
+    expect(visible).not.toContain('已审核')
+    expect(visible).toContain('呼吸')
+    expect(visible).toHaveLength(3)
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Recipe save data format
+// ---------------------------------------------------------------------------
+describe('Recipe data format', () => {
+  it('oil_name format overwrites oil format when spread', () => {
+    // This test documents the bug that was fixed
+    const localRecipe = {
+      ingredients: [{ oil: '薰衣草', drops: 3 }],
+    }
+    const payload = {
+      ingredients: [{ oil_name: '薰衣草', drops: 3 }],
+    }
+    const merged = { ...localRecipe, ...payload }
+    // After merge, ingredients have oil_name not oil — this was the bug
+    expect(merged.ingredients[0]).toHaveProperty('oil_name')
+    expect(merged.ingredients[0]).not.toHaveProperty('oil')
+  })
+
+  it('loadRecipes mapping converts oil_name to oil', () => {
+    // Simulate what loadRecipes does
+    const apiData = [
+      { id: 1, name: 'test', ingredients: [{ oil_name: '薰衣草', drops: 3 }], tags: [] }
+    ]
+    const mapped = apiData.map(r => ({
+      ...r,
+      ingredients: r.ingredients.map(ing => ({
+        oil: ing.oil_name ?? ing.oil,
+        drops: ing.drops,
+      }))
+    }))
+    expect(mapped[0].ingredients[0].oil).toBe('薰衣草')
+    expect(mapped[0].ingredients[0]).not.toHaveProperty('oil_name')
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Volume detection from ingredients
+// ---------------------------------------------------------------------------
+describe('Volume detection', () => {
+  const DROPS_PER_ML = 18.6
+
+  function guessVolume(eoDrops, cocoDrops) {
+    const totalDrops = eoDrops + cocoDrops
+    const ml = totalDrops / DROPS_PER_ML
+    if (ml <= 2) return 'single'
+    if (Math.abs(ml - 5) < 1.5) return '5'
+    if (Math.abs(ml - 10) < 2.5) return '10'
+    if (Math.abs(ml - 15) < 2.5) return '15'
+    if (Math.abs(ml - 20) < 3) return '20'
+    if (Math.abs(ml - 30) < 6) return '30'
+    return 'custom'
+  }
+
+  it('detects single use (small amounts)', () => {
+    expect(guessVolume(5, 10)).toBe('single')
+  })
+
+  it('detects 5ml', () => {
+    expect(guessVolume(15, Math.round(5 * DROPS_PER_ML) - 15)).toBe('5')
+  })
+
+  it('detects 10ml', () => {
+    expect(guessVolume(20, Math.round(10 * DROPS_PER_ML) - 20)).toBe('10')
+  })
+
+  it('detects 30ml', () => {
+    expect(guessVolume(50, Math.round(30 * DROPS_PER_ML) - 50)).toBe('30')
+  })
+
+  it('no coconut returns no volume', () => {
+    // When cocoDrops is 0, function still returns based on total
+    // But in real code, no coconut → formVolume = ''
+    expect(guessVolume(10, 0)).toBe('single')
+  })
+
+  it('detects custom for large volumes', () => {
+    expect(guessVolume(100, 1000)).toBe('custom')
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Dilution ratio calculation
+// ---------------------------------------------------------------------------
+describe('Dilution ratio', () => {
+  it('calculates ratio correctly', () => {
+    expect(Math.round(60 / 10)).toBe(6) // 1:6
+    expect(Math.round(30 / 10)).toBe(3) // 1:3
+    expect(Math.round(100 / 10)).toBe(10) // 1:10
+  })
+
+  it('snaps to nearest option', () => {
+    const options = [3, 4, 5, 6, 7, 8, 9, 10, 12, 15, 20]
+    const snap = (ratio) => options.reduce((a, b) => Math.abs(b - ratio) < Math.abs(a - ratio) ? b : a)
+    expect(snap(6)).toBe(6)
+    expect([10, 12]).toContain(snap(11)) // equidistant
+    expect(snap(13)).toBe(12)
+    expect([12, 15]).toContain(snap(14))
+    expect(snap(18)).toBe(20)
+  })
+})

frontend/src/components/RecipeCard.vue

@@ -1,6 +1,6 @@
 <template>
   <div class="recipe-card" @click="$emit('click', index)">
-    <div class="recipe-card-name" :style="{ fontSize: recipe.name.length > 12 ? (recipe.name.length > 20 ? '12px' : '14px') : '16px' }">{{ recipe.name }}</div>
+    <div class="recipe-card-name">{{ recipe.name }}</div>
     <div v-if="visibleTags.length" class="recipe-card-tags">
       <span v-for="tag in visibleTags" :key="tag" class="tag" :class="{ 'tag-reviewed': tag === '已审核' }">{{ tag }}</span>
     </div>
@@ -20,11 +20,9 @@
 <script setup>
 import { computed } from 'vue'
 import { useOilsStore } from '../stores/oils'
-import { useRecipesStore } from '../stores/recipes'
+import { useRecipesStore, EDITOR_ONLY_TAGS } from '../stores/recipes'
 import { useAuthStore } from '../stores/auth'
 
-const EDITOR_ONLY_TAGS = ['已审核']
-
 const props = defineProps({
   recipe: { type: Object, required: true },
   index: { type: Number, required: true },
@@ -38,8 +36,8 @@ const auth = useAuthStore()
 
 const visibleTags = computed(() => {
   if (!props.recipe.tags) return []
-  if (auth.canEdit) return props.recipe.tags
-  return props.recipe.tags.filter(t => !EDITOR_ONLY_TAGS.includes(t))
+  const tags = auth.canEdit ? [...props.recipe.tags] : props.recipe.tags.filter(t => !EDITOR_ONLY_TAGS.includes(t))
+  return tags.sort((a, b) => a.localeCompare(b, 'zh'))
 })
 
 const oilNames = computed(() =>

frontend/src/components/RecipeDetailOverlay.vue

@@ -6,19 +6,16 @@
         <!-- Top bar with close + edit -->
         <div class="card-header">
           <div class="card-top-actions">
-            <button class="action-btn action-btn-fav action-btn-sm" @click="handleToggleFavorite">
-              {{ isFav ? '★ 已收藏' : '☆ 收藏' }}
-            </button>
-            <button v-if="!props.isDiary" class="action-btn action-btn-diary action-btn-sm" @click="saveToDiary">
-              📔 存为我的
-            </button>
+            <template v-if="!props.isDiary">
+              <button class="action-btn action-btn-fav action-btn-sm" @click="handleToggleFavorite">
+                {{ isFav ? '★ 已收藏' : '☆ 收藏' }}
+              </button>
+              <button class="action-btn action-btn-diary action-btn-sm" @click="saveToDiary">
+                📔 存为我的
+              </button>
+            </template>
           </div>
           <div style="flex:1"></div>
-          <button
-            v-if="canEditThisRecipe"
-            class="action-btn action-btn-sm"
-            @click="goEditInManager"
-          >编辑</button>
           <button class="detail-close-btn" @click="handleClose">✕</button>
         </div>
 
@@ -52,7 +49,7 @@
           <!-- Background image overlay -->
           <div v-if="brand.brand_bg" style="position:absolute;inset:0;width:100%;height:100%;background-size:cover;background-position:center;opacity:0.12;pointer-events:none;z-index:0" :style="{ backgroundImage: `url('${brand.brand_bg}')` }"></div>
           <!-- QR: top-right -->
-          <div v-if="brand.qr_code" style="position:absolute;top:20px;right:16px;display:flex;flex-direction:column;align-items:center;gap:3px;z-index:3">
+          <div v-if="brand.qr_code" style="position:absolute;top:36px;right:36px;display:flex;flex-direction:column;gap:3px;z-index:3" :style="{ alignItems: (brand.brand_align === 'left' ? 'flex-start' : brand.brand_align === 'right' ? 'flex-end' : 'center') }">
             <img :src="brand.qr_code" crossorigin="anonymous" style="width:54px;height:54px;object-fit:cover;border-radius:6px;box-shadow:0 2px 6px rgba(0,0,0,0.1)" />
             <div v-if="brand.brand_name" :style="{ textAlign: brand.brand_align || 'center' }" style="font-size:7px;color:var(--text-light);line-height:1.3;max-width:68px;white-space:pre-line">{{ brand.brand_name }}</div>
           </div>
@@ -61,7 +58,7 @@
             <div class="ec-subtitle">
               {{ cardLang === 'en' ? 'doTERRA · Gifts of the Earth' : 'doTERRA · 来自大地的礼物' }}
             </div>
-            <div class="ec-title">{{ getCardRecipeName() }}</div>
+            <div class="ec-title" :style="{ fontSize: cardTitleSize }">{{ getCardRecipeName() }}</div>
             <div style="width:80px;height:2px;background:linear-gradient(90deg,var(--sage),var(--gold));border-radius:2px;margin:14px 0"></div>
 
             <ul style="list-style:none;margin-bottom:20px;padding:0">
@@ -101,7 +98,7 @@
           <button class="action-btn" @click="saveImage">💾 保存图片</button>
           <button class="action-btn" @click="copyText">📋 复制文字</button>
           <button
-            v-if="cardLang === 'en' && authStore.canManage"
+            v-if="cardLang === 'en' && authStore.isAdmin"
             class="action-btn"
             @click="openTranslationEditor"
           >✏️ 修改翻译</button>
@@ -165,7 +162,7 @@
             <select v-model.number="dilutionRatio" class="editor-select" style="width:60px">
               <option v-for="n in [3,4,5,6,7,8,9,10,12,15,20]" :key="n" :value="n">{{ n }}</option>
             </select>
-            <span class="ratio-hint">纯精油总数约为 {{ editorSuggestedEo }} 滴</span>
+            <span class="ratio-hint">时，纯精油总数约为 {{ editorSuggestedEo }} 滴，现在为 {{ editorEoDrops }} 滴</span>
           </div>
         </div>
 
@@ -588,6 +585,15 @@ function getCardRecipeName() {
   return displayRecipe.value.name
 }
 
+const cardTitleSize = computed(() => {
+  const name = getCardRecipeName()
+  const len = name.length
+  if (len <= 6) return '26px'
+  if (len <= 10) return '22px'
+  if (len <= 15) return '18px'
+  return '16px'
+})
+
 // ---- Favorite ----
 async function handleToggleFavorite() {
   if (!authStore.isLoggedIn) {
@@ -621,15 +627,10 @@ async function saveToDiary() {
   }
   const trimmed = name.trim()
   const dupDiary = diaryStore.userDiary.some(d => d.name === trimmed)
-  const dupPublic = recipesStore.recipes.some(r => r.name === trimmed)
   if (dupDiary) {
     ui.showToast('我的配方中已有同名配方「' + trimmed + '」')
     return
   }
-  if (dupPublic) {
-    ui.showToast('公共配方库中已有同名配方「' + trimmed + '」')
-    return
-  }
   try {
     const payload = {
       name: name.trim(),
@@ -1141,19 +1142,18 @@ async function saveRecipe() {
   font-size: 11px;
   letter-spacing: 3px;
   color: var(--sage);
-  margin-bottom: 8px;
+  margin-bottom: 6px;
+  margin-top: -4px;
   white-space: nowrap;
 }
 .ec-title {
-  font-size: 26px;
   font-weight: 700;
   color: var(--text-dark);
   margin-bottom: 6px;
-  line-height: 1.3;
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  max-width: calc(100% - 80px); /* leave room for QR */
+  line-height: 1.35;
+  max-width: calc(100% - 70px);
+  overflow-wrap: break-word;
+  text-wrap: balance;
 }
 .ec-ing {
   display: flex;
@@ -1226,7 +1226,7 @@ async function saveRecipe() {
 @media (max-width: 420px) {
   .export-card { padding: 24px; }
   .ec-subtitle { font-size: 9px; letter-spacing: 2px; }
-  .ec-title { font-size: 20px; max-width: calc(100% - 65px); }
+  .ec-title { max-width: calc(100% - 60px); }
   .ec-ing { font-size: 12px; padding: 7px 0; }
   .ec-drops { width: 42px; font-size: 11px; }
   .ec-cost { width: 50px; font-size: 10px; }
@@ -1817,8 +1817,8 @@ async function saveRecipe() {
 }
 
 .dilution-label {
-  font-size: 13px;
-  color: var(--text-mid, #5a4a35);
+  font-size: 12px;
+  color: #4a9d7e;
   font-weight: 500;
 }
 

frontend/src/components/UserMenu.vue

@@ -131,17 +131,33 @@ function isSearchMissing(n) {
 
 function isReviewable(n) {
   if (!n.title) return false
-  return n.title.includes('待审核') || n.title.includes('商业认证') || n.title.includes('申请')
+  // Admin: review recipe/business/applications
+  if (auth.isAdmin) {
+    return n.title.includes('待审核') || n.title.includes('商业认证') || n.title.includes('申请') || n.title.includes('推荐通过')
+  }
+  // Senior editor: assigned reviews
+  if (auth.canManage && n.title.includes('请审核')) return true
+  return false
 }
 
 async function markAdded(n) {
-  await markOneRead(n)
+  const { showConfirm: confirm } = await import('../composables/useDialog')
+  const ok = await confirm('确认已添加该配方？将通知其他编辑者和搜索用户。')
+  if (!ok) return
+  try {
+    await api(`/api/notifications/${n.id}/added`, { method: 'POST' })
+    n.is_read = 1
+    ui.showToast('已标记，已通知相关人员')
+  } catch {
+    await markOneRead(n)
+  }
 }
 
 function goReview(n) {
   markOneRead(n)
   emit('close')
-  if (n.title.includes('配方')) {
+  if (n.title.includes('配方') || n.title.includes('审核') || n.title.includes('推荐')) {
+    localStorage.setItem('oil_open_pending', '1')
     router.push('/manage')
   } else if (n.title.includes('商业认证') || n.title.includes('申请')) {
     router.push('/users')

frontend/src/stores/auth.js

@@ -73,10 +73,8 @@ export const useAuthStore = defineStore('auth', () => {
     user.value = { ...DEFAULT_USER }
   }
 
-  function canEditRecipe(recipe) {
-    if (isAdmin.value || user.value.role === 'senior_editor') return true
-    if (canEdit.value && recipe._owner_id === user.value.id) return true
-    return false
+  function canEditRecipe() {
+    return canEdit.value
   }
 
   return {

frontend/src/stores/recipes.js

@@ -2,6 +2,8 @@ import { defineStore } from 'pinia'
 import { ref } from 'vue'
 import { api } from '../composables/useApi'
 
+export const EDITOR_ONLY_TAGS = ['已审核']
+
 export const useRecipesStore = defineStore('recipes', () => {
   const recipes = ref([])
   const allTags = ref([])
@@ -46,10 +48,8 @@ export const useRecipesStore = defineStore('recipes', () => {
   async function saveRecipe(recipe) {
     if (recipe._id) {
       const data = await api.put(`/api/recipes/${recipe._id}`, recipe)
-      const idx = recipes.value.findIndex((r) => r._id === recipe._id)
-      if (idx !== -1) {
-        recipes.value[idx] = { ...recipes.value[idx], ...recipe, _version: data._version ?? data.version ?? recipe._version }
-      }
+      // Reload from server to get properly formatted data (oil_name → oil mapping)
+      await loadRecipes()
       return data
     } else {
       const data = await api.post('/api/recipes', recipe)

frontend/src/views/AuditLog.vue

@@ -91,6 +91,11 @@ const ACTION_MAP = {
   update_user: '修改用户',
   delete_user: '删除用户',
   undo_delete_user: '恢复用户',
+  business_apply: '申请商业认证',
+  approve_business: '通过商业认证',
+  reject_business: '拒绝商业认证',
+  grant_business: '开通商业认证',
+  revoke_business: '撤销商业认证',
 }
 
 const actionTypes = [
@@ -99,6 +104,7 @@ const actionTypes = [
   { value: 'user', label: '用户' },
   { value: 'tag', label: '标签' },
   { value: 'adopt', label: '审核' },
+  { value: 'business', label: '商业认证' },
 ]
 
 const targetTypes = [
@@ -147,9 +153,10 @@ function parsedDetail(log) {
   try {
     const d = JSON.parse(log.detail)
     const parts = []
+    if (d.from_role && d.to_role) parts.push(`${d.from_role} → ${d.to_role}`)
     if (d.from_user) parts.push(`来自: ${d.from_user}`)
     if (d.reason) parts.push(`原因: ${d.reason}`)
-    if (d.role) parts.push(`角色: ${d.role}`)
+    if (d.business_name) parts.push(`商户: ${d.business_name}`)
     if (d.display_name) parts.push(`显示名: ${d.display_name}`)
     if (d.original_log_id) parts.push(`恢复自 #${d.original_log_id}`)
     if (parts.length) return parts.join(' · ')

frontend/src/views/Inventory.vue

@@ -1,29 +1,29 @@
 <template>
   <div class="inventory-page">
-    <!-- Search -->
+    <!-- Search + direct add -->
     <div class="search-box">
       <input
         class="search-input"
         v-model="searchQuery"
-        placeholder="搜索精油..."
+        placeholder="搜索精油名称，回车添加..."
+        @keydown.enter="addFromSearch"
       />
       <button v-if="searchQuery" class="search-clear-btn" @click="searchQuery = ''">✕</button>
     </div>
-
-    <!-- Oil Picker Grid -->
-    <div class="section-label">点击添加到库存</div>
-    <div class="oil-picker-grid">
-      <div
-        v-for="name in filteredOilNames"
-        :key="name"
-        class="oil-pick-chip"
-        :class="{ owned: ownedSet.has(name) }"
-        @click="toggleOil(name)"
-      >
+    <!-- Search results for direct add -->
+    <div v-if="searchQuery && searchResults.length" class="search-results">
+      <div v-for="name in searchResults" :key="name" class="search-result-item" @click="addOil(name)">
         <span class="pick-dot" :class="{ active: ownedSet.has(name) }">{{ ownedSet.has(name) ? '✓' : '+' }}</span>
-        <span class="pick-name">{{ name }}</span>
+        {{ name }}
       </div>
-      <div v-if="filteredOilNames.length === 0" class="empty-hint">未找到精油</div>
+    </div>
+
+    <!-- Quick add kits -->
+    <div class="kit-bar">
+      <button class="kit-btn" @click="addKit('family')">家庭医生</button>
+      <button class="kit-btn" @click="addKit('home3988')">居家呵护(3988)</button>
+      <button class="kit-btn" @click="addKit('aroma')">芳香调理</button>
+      <button class="kit-btn" @click="addKit('full')">全精油</button>
     </div>
 
     <!-- Owned Oils Section -->
@@ -36,7 +36,25 @@
         {{ name }} ✕
       </div>
     </div>
-    <div v-else class="empty-hint">暂未添加精油，点击上方精油添加到库存</div>
+    <div v-else class="empty-hint">搜索添加精油，或点击上方套装快捷添加</div>
+
+    <!-- Oil Picker Grid (collapsed by default) -->
+    <div class="section-header clickable" @click="showPicker = !showPicker">
+      <span>📦 全部精油</span>
+      <span class="toggle-icon">{{ showPicker ? '▾' : '▸' }}</span>
+    </div>
+    <div v-if="showPicker" class="oil-picker-grid">
+      <div
+        v-for="name in oils.oilNames"
+        :key="name"
+        class="oil-pick-chip"
+        :class="{ owned: ownedSet.has(name) }"
+        @click="toggleOil(name)"
+      >
+        <span class="pick-dot" :class="{ active: ownedSet.has(name) }">{{ ownedSet.has(name) ? '✓' : '+' }}</span>
+        <span class="pick-name">{{ name }}</span>
+      </div>
+    </div>
 
     <!-- Matching Recipes Section -->
     <div class="section-header" style="margin-top:20px">
@@ -85,32 +103,86 @@ const ui = useUiStore()
 const searchQuery = ref('')
 const ownedOils = ref([])
 const loading = ref(false)
+const showPicker = ref(false)
 
 const ownedSet = computed(() => new Set(ownedOils.value))
 
-const filteredOilNames = computed(() => {
-  if (!searchQuery.value.trim()) return oils.oilNames
+const searchResults = computed(() => {
+  if (!searchQuery.value.trim()) return []
   const q = searchQuery.value.trim().toLowerCase()
-  return oils.oilNames.filter(n => n.toLowerCase().includes(q))
+  return oils.oilNames.filter(n => n.toLowerCase().includes(q)).slice(0, 15)
 })
 
+// Kit definitions
+const KITS = {
+  family: ['乳香', '茶树', '薰衣草', '柠檬', '椒样薄荷', '保卫', '牛至', '乐活', '顺畅呼吸', '舒缓'],
+  home3988: ['乳香', '野橘', '柠檬', '薰衣草', '椒样薄荷', '冬青', '茶树', '生姜', '柠檬草', '西班牙牛至',
+    '西洋蓍草石榴籽', '乐活', '保卫', '新瑞活力', '舒缓', '安定情绪', '安宁神气', '顺畅呼吸', '柑橘清新', '芳香调理', '元气焕能'],
+  aroma: ['薰衣草', '舒缓', '安定情绪', '芳香调理', '野橘', '椒样薄荷', '保卫', '茶树'],
+  full: ['侧柏', '乳香', '雪松', '芫荽', '丝柏', '圆柚', '红橘', '冬青', '没药', '扁柏', '檀香', '姜黄', '玫瑰',
+    '绿薄荷', '薰衣草', '永久花', '香蜂草', '迷迭香', '麦卢卡', '天竺葵', '蓝艾菊', '小茴香',
+    '古巴香脂', '依兰依兰', '丁香花蕾', '柠檬尤加利', '藿香', '西班牙牛至尾草',
+    '罗勒', '莱姆', '生姜', '柠檬', '茶树', '野橘', '香茅', '枫香',
+    '芹菜籽', '岩兰草', '苦橙叶', '柠檬草', '山鸡椒', '黑云杉',
+    '马郁兰', '佛手柑', '黑胡椒', '小豆蔻', '尤加利', '百里香',
+    '椒样薄荷', '杜松浆果', '加州白鼠尾草',
+    '快乐鼠尾草', '西伯利亚冷杉',
+    '西班牙牛至', '斯里兰卡肉桂']
+}
+
+function addKit(kitName) {
+  const kit = KITS[kitName]
+  if (!kit) return
+  let added = 0
+  for (const name of kit) {
+    // Match existing oil names (fuzzy)
+    const match = oils.oilNames.find(n => n === name) || oils.oilNames.find(n => n.includes(name) || name.includes(n))
+    if (match && !ownedOils.value.includes(match)) {
+      ownedOils.value.push(match)
+      added++
+    }
+  }
+  ownedOils.value.sort((a, b) => a.localeCompare(b, 'zh'))
+  saveInventory()
+  ui.showToast(`已添加 ${added} 种精油`)
+}
+
+function addFromSearch() {
+  if (searchResults.value.length > 0) {
+    addOil(searchResults.value[0])
+  }
+}
+
+function addOil(name) {
+  if (!ownedOils.value.includes(name)) {
+    ownedOils.value.push(name)
+    ownedOils.value.sort((a, b) => a.localeCompare(b, 'zh'))
+    saveInventory()
+  }
+  searchQuery.value = ''
+}
+
 const matchingRecipes = computed(() => {
   if (ownedOils.value.length === 0) return []
   return recipeStore.recipes
     .filter(r => {
-      const needed = r.ingredients.map(i => i.oil)
+      // Exclude coconut oil from matching
+      const needed = r.ingredients.filter(i => i.oil !== '椰子油').map(i => i.oil)
+      if (needed.length === 0) return false
       const coverage = needed.filter(o => ownedSet.value.has(o)).length
-      return coverage >= Math.ceil(needed.length * 0.5)
+      // Show if at least 1 oil matches
+      return coverage >= 1
     })
     .sort((a, b) => {
       const aCov = coverageRatio(a)
       const bCov = coverageRatio(b)
-      return bCov - aCov
+      if (bCov !== aCov) return bCov - aCov
+      return a.name.localeCompare(b.name, 'zh')
     })
 })
 
 function coverageRatio(recipe) {
-  const needed = recipe.ingredients.map(i => i.oil)
+  const needed = recipe.ingredients.filter(i => i.oil !== '椰子油').map(i => i.oil)
   if (needed.length === 0) return 0
   return needed.filter(o => ownedSet.value.has(o)).length / needed.length
 }
@@ -205,6 +277,27 @@ onMounted(() => {
   padding: 4px;
 }
 
+.search-results {
+  margin-bottom: 10px; max-height: 200px; overflow-y: auto;
+  border: 1.5px solid #e5e4e7; border-radius: 10px; background: #fff;
+}
+.search-result-item {
+  padding: 8px 12px; cursor: pointer; font-size: 13px; display: flex; align-items: center; gap: 6px;
+  border-bottom: 1px solid #f5f5f5;
+}
+.search-result-item:hover { background: #f0faf5; }
+.search-result-item:last-child { border-bottom: none; }
+
+.kit-bar { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 12px; }
+.kit-btn {
+  padding: 5px 12px; border: 1.5px solid #e5e4e7; border-radius: 20px; background: #fff;
+  font-size: 12px; cursor: pointer; font-family: inherit; color: #6b6375;
+}
+.kit-btn:hover { border-color: #7ec6a4; color: #4a9d7e; }
+
+.clickable { cursor: pointer; }
+.toggle-icon { font-size: 12px; color: #999; margin-left: auto; }
+
 .section-label {
   font-size: 12px;
   color: #b0aab5;

frontend/src/views/MyDiary.vue

@@ -156,7 +156,8 @@
 
         <!-- Brand name -->
         <div class="form-group">
-          <label class="form-label">品牌名称或标语（显示在二维码下方）</label>
+          <label class="form-label">✍ 品牌名称或标语</label>
+          <p style="font-size:11px;color:var(--text-light);margin-bottom:6px">显示在二维码下方</p>
           <textarea v-model="brandName" class="form-control" rows="2" placeholder="扫码申请成为优惠顾客&#10;我的精油小屋" style="max-width:350px;font-size:13px" @blur="saveBrandSettings"></textarea>
           <div style="display:flex;gap:6px;margin-top:6px">
             <button class="btn-align" :class="{ active: brandAlign === 'left' }" @click="brandAlign='left'; saveBrandSettings()">靠左</button>
@@ -173,7 +174,7 @@
             <div v-if="brandBg" style="position:absolute;inset:0;background-size:cover;background-position:center;opacity:0.12;pointer-events:none" :style="{ backgroundImage: 'url(' + brandBg + ')' }"></div>
             <!-- Logo: shown in bottom row, not as watermark -->
             <!-- QR: top-right -->
-            <div v-if="brandQrImage" style="position:absolute;top:16px;right:12px;display:flex;flex-direction:column;align-items:center;gap:2px;z-index:2">
+            <div v-if="brandQrImage" style="position:absolute;top:16px;right:12px;display:flex;flex-direction:column;gap:2px;z-index:2" :style="{ alignItems: brandAlign === 'left' ? 'flex-start' : brandAlign === 'right' ? 'flex-end' : 'center' }">
               <img :src="brandQrImage" style="width:36px;height:36px;object-fit:cover;border-radius:4px;box-shadow:0 1px 4px rgba(0,0,0,0.1)" />
               <div v-if="brandName" :style="{ textAlign: brandAlign }" style="font-size:5px;color:var(--text-light);line-height:1.2;max-width:42px;white-space:pre-line">{{ brandName }}</div>
             </div>
@@ -199,7 +200,7 @@
         </div>
 
         <div style="display:flex;gap:8px;align-items:center">
-          <button class="btn btn-primary" @click="saveBrandSettings">💾 保存品牌设置</button>
+          <span class="auto-save-hint">所有修改自动保存</span>
           <button v-if="returnRecipeId" class="btn btn-outline" @click="goBackToRecipe">← 返回配方卡片</button>
         </div>
       </div>
@@ -244,56 +245,41 @@
       <div ref="bizCertRef" class="section-card biz-card">
         <h4>🏢 商业用户认证</h4>
 
-        <!-- 已认证 -->
+        <!-- Status bar -->
         <div v-if="auth.isBusiness" class="biz-status-bar biz-approved">
           <span>✅ 已认证商业用户</span>
         </div>
-
-        <!-- 审核中 -->
         <div v-else-if="bizApp.status === 'pending'" class="biz-status-bar biz-pending">
           <span>⏳ 认证申请审核中</span>
-          <div class="biz-status-detail">商户名：{{ bizApp.business_name }} · 提交时间：{{ formatDate(bizApp.created_at) }}</div>
+        </div>
+        <div v-else-if="bizApp.status === 'rejected'" class="biz-status-bar biz-rejected">
+          <span>❌ 认证申请未通过</span>
+          <div v-if="bizApp.reject_reason" class="biz-status-detail">原因：{{ bizApp.reject_reason }}</div>
+          <p style="font-size:12px;margin-top:4px">你可以修改后重新申请</p>
         </div>
 
-        <!-- 被拒绝 -->
-        <template v-else-if="bizApp.status === 'rejected'">
-          <div class="biz-status-bar biz-rejected">
-            <span>❌ 认证申请未通过</span>
-            <div v-if="bizApp.reject_reason" class="biz-status-detail">原因：{{ bizApp.reject_reason }}</div>
+        <!-- Always show filled info (like QR page) -->
+        <div class="biz-form">
+          <div class="form-group">
+            <label class="form-label">商户名称 *</label>
+            <input v-model="businessName" class="form-input" placeholder="你的商户或品牌名称" :disabled="bizApp.status === 'pending'" />
           </div>
-          <p class="hint-text">你可以修改信息后重新申请。</p>
-        </template>
-
-        <!-- 申请表单（首次或被拒后重新申请） -->
-        <template v-if="!auth.isBusiness && bizApp.status !== 'pending'">
-          <div class="biz-form">
-            <div class="form-group">
-              <label class="form-label">认证类型 *</label>
-              <select v-model="bizType" class="form-select">
-                <option value="">请选择</option>
-                <option value="individual">个体经营户</option>
-                <option value="company">公司</option>
-                <option value="studio">工作室/美容院</option>
-                <option value="distributor">代理商</option>
-              </select>
-            </div>
-            <div class="form-group">
-              <label class="form-label">企业/商户名称 *</label>
-              <input v-model="businessName" class="form-input" placeholder="你的企业或品牌名称" />
-            </div>
-            <div class="form-group">
-              <label class="form-label">联系电话 *</label>
-              <input v-model="bizPhone" class="form-input" type="tel" placeholder="联系电话" />
-            </div>
-            <div class="form-group">
-              <label class="form-label">业务描述</label>
-              <textarea v-model="businessReason" class="form-textarea" rows="3" placeholder="描述你的业务范围和计划..."></textarea>
-            </div>
-            <div style="display:flex;gap:10px;margin-top:12px">
-              <button class="btn-primary" @click="applyBusiness" :disabled="!businessName.trim() || !bizType">💾 提交申请</button>
+          <div class="form-group">
+            <label class="form-label">证明图片 *</label>
+            <p style="font-size:11px;color:var(--text-light);margin-bottom:6px">营业执照或相关证明材料</p>
+            <div class="upload-box" @click="$refs.bizDocInput?.click()">
+              <img v-if="bizDocImage" :src="bizDocImage" class="upload-box-img" />
+              <span v-else class="upload-box-hint">点击上传</span>
             </div>
+            <input ref="bizDocInput" type="file" accept="image/*" style="display:none" @change="handleBizDocUpload" />
+            <button v-if="bizDocImage" class="btn-clear" @click="bizDocImage = ''">清除</button>
           </div>
-        </template>
+          <template v-if="!auth.isBusiness && bizApp.status !== 'pending'">
+            <div style="margin-top:12px">
+              <button class="btn-primary" @click="applyBusiness" :disabled="!businessName.trim() || !bizDocImage">💾 提交申请</button>
+            </div>
+          </template>
+        </div>
       </div>
     </div>
   </div>
@@ -345,6 +331,7 @@ const businessName = ref('')
 const businessReason = ref('')
 const bizType = ref('')
 const bizPhone = ref('')
+const bizDocImage = ref('')
 const bizApp = ref({ status: null })
 
 onMounted(async () => {
@@ -355,7 +342,11 @@ onMounted(async () => {
   // Load business application status
   try {
     const bizRes = await api('/api/my-business-application')
-    if (bizRes.ok) bizApp.value = await bizRes.json()
+    if (bizRes.ok) {
+      bizApp.value = await bizRes.json()
+      if (bizApp.value.business_name) businessName.value = bizApp.value.business_name
+      if (bizApp.value.document) bizDocImage.value = bizApp.value.document
+    }
   } catch {}
   // 从商业核算跳转过来，滚到商业认证区域
   if (route.query.section === 'biz-cert') {
@@ -504,36 +495,38 @@ function readFileAsBase64(file) {
   })
 }
 
-// Compress image if too large (keeps PNG for small images, JPEG for large)
-function compressImage(base64, maxSize = 500000) {
+// Compress image if too large
+function compressImage(base64, maxSize = 500000, maxDim = 800) {
   return new Promise((resolve) => {
     if (base64.length <= maxSize) { resolve(base64); return }
     const img = new Image()
     img.onload = () => {
       const canvas = document.createElement('canvas')
       let w = img.width, h = img.height
-      const maxDim = 600
+      // Shrink progressively until it fits
+      let scale = 1
       if (w > maxDim || h > maxDim) {
-        const ratio = Math.min(maxDim / w, maxDim / h)
-        w = Math.round(w * ratio)
-        h = Math.round(h * ratio)
+        scale = Math.min(maxDim / w, maxDim / h)
       }
-      canvas.width = w
-      canvas.height = h
-      canvas.getContext('2d').drawImage(img, 0, 0, w, h)
-      // Try PNG first, then JPEG with decreasing quality
-      let result = canvas.toDataURL('image/png')
-      if (result.length > maxSize) {
-        let quality = 0.85
-        while (quality > 0.2) {
+      for (let attempt = 0; attempt < 5; attempt++) {
+        const cw = Math.round(w * scale)
+        const ch = Math.round(h * scale)
+        canvas.width = cw
+        canvas.height = ch
+        canvas.getContext('2d').drawImage(img, 0, 0, cw, ch)
+        let quality = 0.8
+        let result = canvas.toDataURL('image/jpeg', quality)
+        while (result.length > maxSize && quality > 0.2) {
+          quality -= 0.15
           result = canvas.toDataURL('image/jpeg', quality)
-          if (result.length <= maxSize) break
-          quality -= 0.1
         }
+        if (result.length <= maxSize) { resolve(result); return }
+        scale *= 0.7 // shrink more
       }
-      resolve(result)
+      // Last resort
+      resolve(canvas.toDataURL('image/jpeg', 0.3))
     }
-    img.onerror = () => resolve(base64) // fallback: return original
+    img.onerror = () => resolve(base64)
     img.src = base64
   })
 }
@@ -571,9 +564,35 @@ function checkSquare(base64) {
 }
 
 async function handleUpload(type, event) {
-  const file = event.target.files[0]
+  let file = event.target.files[0]
   if (!file) return
   try {
+    // Convert HEIC/HEIF to JPEG
+    const isHeic = file.name.toLowerCase().match(/\.hei[cf]$/) ||
+      file.type === 'image/heic' || file.type === 'image/heif'
+    if (isHeic) {
+      ui.showToast('正在转换格式...')
+      try {
+        const heic2any = (await import('heic2any')).default
+        let blob = await heic2any({ blob: file, toType: 'image/jpeg', quality: 0.8 })
+        if (Array.isArray(blob)) blob = blob[0]
+        file = new File([blob], 'photo.jpg', { type: 'image/jpeg' })
+      } catch {
+        // Fallback: try createImageBitmap (works on some browsers)
+        try {
+          const bmp = await createImageBitmap(file)
+          const canvas = document.createElement('canvas')
+          canvas.width = bmp.width
+          canvas.height = bmp.height
+          canvas.getContext('2d').drawImage(bmp, 0, 0)
+          const jpegBlob = await new Promise(r => canvas.toBlob(r, 'image/jpeg', 0.8))
+          file = new File([jpegBlob], 'photo.jpg', { type: 'image/jpeg' })
+        } catch {
+          ui.showToast('该格式暂不支持，请在相册中选择"自动"格式或转为JPG后上传')
+          return
+        }
+      }
+    }
     let base64 = await readFileAsBase64(file)
 
     // QR: check if square, offer to crop
@@ -581,15 +600,16 @@ async function handleUpload(type, event) {
       const isSquare = await checkSquare(base64)
       if (!isSquare) {
         const { showConfirm: confirm } = await import('../composables/useDialog')
-        const ok = await confirm('二维码图片不是正方形，是否自动裁剪为正方形？\n（取中心区域）')
+        const ok = await confirm('图片非正方形，自动裁剪？')
         if (ok) {
           base64 = await cropToSquare(base64)
         }
       }
     }
 
-    const maxSize = type === 'bg' ? 1000000 : 500000
-    base64 = await compressImage(base64, maxSize)
+    const maxSize = type === 'bg' ? 600000 : 300000
+    const maxDim = type === 'bg' ? 1000 : 600
+    base64 = await compressImage(base64, maxSize, maxDim)
     const fieldMap = { logo: 'brand_logo', bg: 'brand_bg', qr: 'qr_code' }
     const field = fieldMap[type]
     if (!field) return
@@ -672,33 +692,36 @@ async function changePassword() {
   }
 }
 
+async function handleBizDocUpload(event) {
+  const file = event.target.files[0]
+  if (!file) return
+  let base64 = await readFileAsBase64(file)
+  base64 = await compressImage(base64, 300000, 600)
+  bizDocImage.value = base64
+}
+
 async function applyBusiness() {
-  if (!businessName.value.trim() || !bizType.value) {
-    ui.showToast('请填写必填项')
+  if (!businessName.value.trim() || !bizDocImage.value) {
+    ui.showToast('请填写商户名称并上传证明图片')
     return
   }
-  const typeLabels = { individual: '个体经营户', company: '公司', studio: '工作室/美容院', distributor: '代理商' }
-  const info = [
-    `认证类型：${typeLabels[bizType.value] || bizType.value}`,
-    bizPhone.value ? `联系电话：${bizPhone.value}` : '',
-    businessReason.value ? `业务描述：${businessReason.value}` : '',
-  ].filter(Boolean).join('\n')
   try {
     const res = await api('/api/business-apply', {
       method: 'POST',
       body: JSON.stringify({
         business_name: businessName.value.trim(),
-        document: info,
+        document: bizDocImage.value,
       }),
     })
     if (res.ok) {
-      businessName.value = ''
-      businessReason.value = ''
-      bizType.value = ''
-      bizPhone.value = ''
+      // Don't clear — keep showing submitted data
       ui.showToast('申请已提交，请等待管理员审核')
       const bizRes = await api('/api/my-business-application')
-      if (bizRes.ok) bizApp.value = await bizRes.json()
+      if (bizRes.ok) {
+        bizApp.value = await bizRes.json()
+        // Restore document image from app data
+        if (bizApp.value.document) bizDocImage.value = bizApp.value.document
+      }
     } else {
       const err = await res.json().catch(() => ({}))
       ui.showToast(err.detail || '提交失败')
@@ -1148,6 +1171,8 @@ async function applyBusiness() {
   margin-bottom: 12px;
 }
 
+.auto-save-hint { font-size: 12px; color: #999; font-style: italic; }
+
 .verified-badge {
   padding: 12px;
   background: #e8f5e9;

frontend/src/views/OilReference.vue

@@ -98,15 +98,15 @@
         <button @click="viewMode = 'drop'" :style="viewMode === 'drop' ? 'background:var(--sage);color:white' : 'background:white;color:var(--text-mid)'" style="border:none;border-radius:0;font-size:12px;padding:6px 12px;cursor:pointer">每滴价</button>
       </div>
       <!-- Desktop: text buttons -->
-      <button v-if="auth.canEdit" class="toolbar-btn-text" @click="showAddForm = !showAddForm">{{ showAddForm ? '收起' : '＋ 新增' }}</button>
+      <button v-if="auth.canManage" class="toolbar-btn-text" @click="showAddForm = !showAddForm">{{ showAddForm ? '收起' : '＋ 新增' }}</button>
       <button v-if="auth.isAdmin" class="toolbar-btn-text" @click="exportPDF">📥 导出PDF</button>
       <!-- Mobile: emoji-only buttons -->
-      <button v-if="auth.canEdit" class="toolbar-btn-icon" @click="showAddForm = !showAddForm" title="新增精油">➕</button>
+      <button v-if="auth.canManage" class="toolbar-btn-icon" @click="showAddForm = !showAddForm" title="新增精油">➕</button>
       <button v-if="auth.isAdmin" class="toolbar-btn-icon" @click="exportPDF" title="导出PDF">📄</button>
     </div>
 
     <!-- Add Oil Form (toggleable) -->
-    <div v-if="showAddForm && auth.canEdit" class="add-oil-form">
+    <div v-if="showAddForm && auth.canManage" class="add-oil-form">
       <div class="form-row">
         <input v-model="newOilName" style="flex:1;min-width:120px" placeholder="精油名称" class="form-input-sm" />
         <input v-model="newOilEnName" style="flex:1;min-width:100px" placeholder="英文名" class="form-input-sm" />
@@ -152,7 +152,7 @@
             </div>
           </template>
         </div>
-        <div v-if="auth.canEdit" class="oil-chip-actions" @click.stop>
+        <div v-if="auth.canManage" class="oil-chip-actions" @click.stop>
           <button @click="editOil(name)" title="编辑">✏️</button>
           <button @click="removeOil(name)" title="删除">🗑</button>
         </div>

frontend/src/views/Projects.vue

@@ -1,14 +1,33 @@
 <template>
   <div class="projects-page">
+    <!-- Header -->
+    <div class="commercial-header">
+      <div class="commercial-icon">💼</div>
+      <div class="commercial-desc">商业用户专属功能，包含项目核算、成本分析等工具</div>
+    </div>
+
     <!-- Project List -->
-    <div class="toolbar">
-      <h3 class="page-title">💼 商业核算</h3>
-      <button v-if="auth.isBusiness" class="btn-primary" @click="createProject">+ 新建项目</button>
+    <div class="toolbar-sticky">
+      <div class="toolbar-inner">
+        <h3 class="page-title">📊 服务项目成本利润分析</h3>
+        <button class="btn-primary btn-sm" @click="handleCreateProject">+ 新增项目</button>
+      </div>
     </div>
 
     <div v-if="!selectedProject" class="project-list">
+      <!-- Demo project (first one, or fallback) -->
+      <div v-if="demoProject" class="project-card demo-card" @click="selectDemoProject">
+        <div class="proj-header">
+          <span class="proj-name">{{ demoProject.name }}</span>
+          <span class="proj-badge">体验</span>
+        </div>
+        <div class="proj-summary">
+          <span>点击体验成本利润分析</span>
+        </div>
+      </div>
+      <!-- Real projects (exclude demo) -->
       <div
-        v-for="p in projects"
+        v-for="p in userProjects"
         :key="p._id || p.id"
         class="project-card"
         @click="selectProject(p)"
@@ -23,11 +42,10 @@
             成本 {{ oils.fmtPrice(oils.calcCost(p.ingredients)) }}
           </span>
         </div>
-        <div v-if="auth.isAdmin" class="proj-actions" @click.stop>
+        <div class="proj-actions proj-actions-hover" @click.stop>
           <button class="btn-icon-sm" @click="deleteProject(p)" title="删除">🗑️</button>
         </div>
       </div>
-      <div v-if="projects.length === 0" class="empty-hint">暂无项目，点击上方创建</div>
     </div>
 
     <!-- Project Detail -->
@@ -39,7 +57,7 @@
           class="proj-name-input"
           @blur="saveProject"
         />
-        <button class="btn-outline btn-sm" @click="importFromRecipe">📋 从配方导入</button>
+        <button class="btn-outline btn-sm" :disabled="isDemoMode && !auth.isAdmin" @click="importFromRecipe">📋 从配方导入</button>
       </div>
 
       <!-- Ingredients Table -->
@@ -47,120 +65,130 @@
         <div class="section-header-row">
           <h4>🧴 配方成分</h4>
           <div class="section-actions">
-            <button class="btn-outline btn-sm" @click="addIngredient">＋ 添加精油</button>
+            <button v-if="!isDemoMode || auth.isAdmin" class="btn-outline btn-sm" @click="addIngredient">＋ 添加精油</button>
           </div>
         </div>
         <table class="ingredients-table">
           <thead>
             <tr>
               <th>精油</th>
-              <th>单次用量(滴)</th>
-              <th>单价/滴</th>
+              <th>用量</th>
+              <th>每滴</th>
               <th>小计</th>
               <th></th>
             </tr>
           </thead>
           <tbody>
-            <tr v-for="(ing, i) in selectedProject.ingredients" :key="i">
+            <tr v-for="(ing, i) in selectedProject.ingredients" :key="i" :class="{ 'readonly-row': isDemoMode && !auth.isAdmin }">
               <td>
-                <select v-model="ing.oil" class="form-select" @change="saveProject">
-                  <option value="">— 选择精油 —</option>
-                  <option v-for="name in oils.oilNames" :key="name" :value="name">{{ name }}</option>
-                </select>
+                <template v-if="isDemoMode && !auth.isAdmin">
+                  <span class="readonly-oil">{{ ing.oil || '—' }}</span>
+                </template>
+                <template v-else>
+                  <select v-model="ing.oil" class="form-select" @change="saveProject">
+                    <option value="">— 选择精油 —</option>
+                    <option v-for="name in oils.oilNames" :key="name" :value="name">{{ name }}</option>
+                  </select>
+                </template>
               </td>
               <td>
-                <input v-model.number="ing.drops" type="number" min="0" step="0.5" class="drops-input" @change="saveProject" />
+                <template v-if="isDemoMode && !auth.isAdmin">
+                  <span class="readonly-drops">{{ ing.drops }}</span>
+                </template>
+                <template v-else>
+                  <input v-model.number="ing.drops" type="number" min="0" step="0.5" class="drops-input" @change="saveProject" />
+                </template>
               </td>
               <td class="cell-ppd">{{ ing.oil ? oils.fmtPrice(oils.pricePerDrop(ing.oil)) : '—' }}</td>
               <td class="cell-subtotal">{{ ing.oil && ing.drops ? oils.fmtPrice(oils.pricePerDrop(ing.oil) * ing.drops) : '—' }}</td>
-              <td><button class="remove-btn" @click="removeIngredient(i)">×</button></td>
+              <td><button v-if="!isDemoMode || auth.isAdmin" class="remove-btn" @click="removeIngredient(i)">×</button></td>
             </tr>
           </tbody>
         </table>
-        <div class="total-row">
-          <span class="total-label">配方总成本</span>
-          <span class="total-price">{{ oils.fmtPrice(materialCost) }}</span>
-        </div>
+        <table class="ingredients-table total-table">
+          <tr>
+            <td class="total-label-cell">配方总成本</td>
+            <td></td>
+            <td></td>
+            <td class="total-price-cell">{{ oils.fmtPrice(materialCost) }}</td>
+            <td></td>
+          </tr>
+        </table>
 
-        <!-- Pricing -->
-        <div class="pricing-inline">
-          <div class="price-field">
-            <label>定价 ¥</label>
-            <input v-model.number="selectedProject.selling_price" type="number" class="price-input" placeholder="/次" @change="saveProject" />
+        <!-- Consumption Analysis -->
+        <div v-if="consumptionData.length" class="consumption-section" style="margin-top:12px">
+          <h4>🧪 消耗分析</h4>
+          <table class="ingredients-table">
+            <thead>
+              <tr><th>精油</th><th>单次用量</th><th>瓶装容量</th><th>可做次数</th><th></th></tr>
+            </thead>
+            <tbody>
+              <tr v-for="c in consumptionData" :key="c.oil" :class="{ 'limit-oil': c.isLimit }">
+                <td>{{ c.oil }}</td>
+                <td>{{ c.drops }}滴</td>
+                <td>{{ c.bottleDrops }}滴</td>
+                <td>{{ c.sessions }}次</td>
+                <td></td>
+              </tr>
+            </tbody>
+          </table>
+          <div class="consumption-summary">
+            <span v-if="allSameSession">可做 <strong>{{ maxSessions }}</strong> 次</span>
+            <span v-else>⚠️ <strong>{{ limitingOil }}</strong> 最先消耗完，可做 <strong>{{ maxSessions }}</strong> 次</span>
           </div>
         </div>
       </div>
 
-      <!-- Pricing Section -->
-      <div class="pricing-section">
-        <h4>💰 价格计算</h4>
-        <div class="price-row">
-          <span class="price-label">原料成本</span>
-          <span class="price-value cost">{{ oils.fmtPrice(materialCost) }}</span>
-        </div>
-
-        <div class="price-row">
-          <span class="price-label">包装费用</span>
-          <div class="price-input-wrap">
-            <span>¥</span>
-            <input v-model.number="selectedProject.packaging_cost" type="number" class="form-input-inline" @change="saveProject" />
+      <!-- Pricing + Profit side by side -->
+      <div class="price-profit-row">
+        <div class="pricing-col">
+          <h4>💰 价格计算</h4>
+          <div class="price-row">
+            <span class="price-label">原料成本</span>
+            <span class="price-val-box">{{ oils.fmtPrice(materialCost) }}</span>
+          </div>
+          <div class="price-row">
+            <span class="price-label">包装费用</span>
+            <div class="price-input-wrap"><span>¥</span><input v-model.number="selectedProject.packaging_cost" type="number" class="form-input-inline" placeholder="0" @focus="clearZero($event)" @change="saveProject" /></div>
+          </div>
+          <div class="price-row">
+            <span class="price-label">人工费用</span>
+            <div class="price-input-wrap"><span>¥</span><input v-model.number="selectedProject.labor_cost" type="number" class="form-input-inline" placeholder="0" @focus="clearZero($event)" @change="saveProject" /></div>
+          </div>
+          <div class="price-row">
+            <span class="price-label">其他成本</span>
+            <div class="price-input-wrap"><span>¥</span><input v-model.number="selectedProject.other_cost" type="number" class="form-input-inline" placeholder="0" @focus="clearZero($event)" @change="saveProject" /></div>
+          </div>
+          <div class="price-row total">
+            <span class="price-label">总成本</span>
+            <span class="price-val-box">{{ oils.fmtPrice(totalCost) }}</span>
+          </div>
+          <div class="price-row">
+            <span class="price-label">售价</span>
+            <div class="price-input-wrap"><span>¥</span><input v-model.number="selectedProject.selling_price" type="number" class="form-input-inline" @change="saveProject" /></div>
+          </div>
+          <div class="price-row">
+            <span class="price-label">批量数量</span>
+            <input v-model.number="selectedProject.quantity" type="number" min="1" class="form-input-inline" @change="saveProject" />
           </div>
         </div>
-
-        <div class="price-row">
-          <span class="price-label">人工费用</span>
-          <div class="price-input-wrap">
-            <span>¥</span>
-            <input v-model.number="selectedProject.labor_cost" type="number" class="form-input-inline" @change="saveProject" />
-          </div>
-        </div>
-
-        <div class="price-row">
-          <span class="price-label">其他成本</span>
-          <div class="price-input-wrap">
-            <span>¥</span>
-            <input v-model.number="selectedProject.other_cost" type="number" class="form-input-inline" @change="saveProject" />
-          </div>
-        </div>
-
-        <div class="price-row total">
-          <span class="price-label">总成本</span>
-          <span class="price-value cost">{{ oils.fmtPrice(totalCost) }}</span>
-        </div>
-
-        <div class="price-row">
-          <span class="price-label">售价</span>
-          <div class="price-input-wrap">
-            <span>¥</span>
-            <input v-model.number="selectedProject.selling_price" type="number" class="form-input-inline" @change="saveProject" />
-          </div>
-        </div>
-
-        <div class="price-row">
-          <span class="price-label">批量数量</span>
-          <input v-model.number="selectedProject.quantity" type="number" min="1" class="form-input-inline" @change="saveProject" />
-        </div>
-      </div>
-
-      <!-- Profit Analysis -->
-      <div class="profit-section">
-        <h4>📊 利润分析</h4>
-        <div class="profit-grid">
+        <div class="profit-col">
+          <h4>📊 利润分析</h4>
           <div class="profit-card">
-            <div class="profit-label">单件利润</div>
-            <div class="profit-value" :class="{ negative: unitProfit < 0 }">{{ oils.fmtPrice(unitProfit) }}</div>
+            <div class="profit-card-label">单件利润</div>
+            <div class="profit-card-value" :class="{ negative: unitProfit < 0 }">{{ oils.fmtPrice(unitProfit) }}</div>
           </div>
           <div class="profit-card">
-            <div class="profit-label">利润率</div>
-            <div class="profit-value" :class="{ negative: profitMargin < 0 }">{{ profitMargin.toFixed(1) }}%</div>
+            <div class="profit-card-label">利润率</div>
+            <div class="profit-card-value" :class="{ negative: profitMargin < 0 }">{{ profitMargin.toFixed(1) }}%</div>
           </div>
           <div class="profit-card">
-            <div class="profit-label">批量总利润</div>
-            <div class="profit-value" :class="{ negative: batchProfit < 0 }">{{ oils.fmtPrice(batchProfit) }}</div>
+            <div class="profit-card-label">批量总收入</div>
+            <div class="profit-card-value">{{ oils.fmtPrice(batchRevenue) }}</div>
           </div>
           <div class="profit-card">
-            <div class="profit-label">批量总收入</div>
-            <div class="profit-value">{{ oils.fmtPrice(batchRevenue) }}</div>
+            <div class="profit-card-label">批量总利润</div>
+            <div class="profit-card-value" :class="{ negative: batchProfit < 0 }">{{ oils.fmtPrice(batchProfit) }}</div>
           </div>
         </div>
       </div>
@@ -244,6 +272,38 @@ async function loadProjects() {
   }
 }
 
+// Demo = first project (芳香调理技术), managed by admin
+const demoProject = computed(() => projects.value.find(p => p.name && p.name.includes('芳香调理')) || projects.value[0] || null)
+const userProjects = computed(() => {
+  const demoId = demoProject.value?._id || demoProject.value?.id
+  return projects.value.filter(p => (p._id || p.id) !== demoId)
+})
+const isDemoMode = computed(() => selectedProject.value?._demo === true)
+
+function selectDemoProject() {
+  const p = demoProject.value
+  if (!p) return
+  selectedProject.value = {
+    ...p,
+    _demo: true,
+    ingredients: (p.ingredients || []).map(i => ({ ...i })),
+    packaging_cost: p.packaging_cost || 0,
+    labor_cost: p.labor_cost || 0,
+    other_cost: p.other_cost || 0,
+    selling_price: p.selling_price || 299,
+    quantity: p.quantity || 1,
+    notes: p.notes || '',
+  }
+}
+
+function handleCreateProject() {
+  if (!auth.isBusiness && !auth.isAdmin) {
+    showCertPrompt()
+    return
+  }
+  createProject()
+}
+
 async function createProject() {
   const name = await showPrompt('项目名称:', '新项目')
   if (!name) return
@@ -256,7 +316,7 @@ async function createProject() {
         packaging_cost: 0,
         labor_cost: 0,
         other_cost: 0,
-        selling_price: 0,
+        selling_price: 299,
         quantity: 1,
         notes: '',
       }),
@@ -273,7 +333,7 @@ async function createProject() {
 }
 
 function selectProject(p) {
-  if (!auth.isBusiness) {
+  if (!auth.isBusiness && !auth.isAdmin) {
     showCertPrompt()
     return
   }
@@ -283,7 +343,7 @@ function selectProject(p) {
     packaging_cost: p.packaging_cost || 0,
     labor_cost: p.labor_cost || 0,
     other_cost: p.other_cost || 0,
-    selling_price: p.selling_price || 0,
+    selling_price: p.selling_price || 299,
     quantity: p.quantity || 1,
     notes: p.notes || '',
   }
@@ -291,7 +351,10 @@ function selectProject(p) {
 
 async function saveProject() {
   if (!selectedProject.value) return
+  // Demo mode for non-admin: only save locally, don't hit API
+  if (isDemoMode.value && !auth.isAdmin) return
   const id = selectedProject.value._id || selectedProject.value.id
+  if (!id) return
   try {
     await api(`/api/projects/${id}`, {
       method: 'PUT',
@@ -372,6 +435,41 @@ const batchRevenue = computed(() => {
   return (selectedProject.value?.selling_price || 0) * (selectedProject.value?.quantity || 1)
 })
 
+const consumptionData = computed(() => {
+  if (!selectedProject.value) return []
+  const ings = (selectedProject.value.ingredients || []).filter(i => i.oil && i.oil !== '椰子油' && i.drops > 0)
+  return ings.map(i => {
+    const meta = oils.oilsMeta[i.oil]
+    const bottleDrops = meta ? meta.dropCount : 0
+    const sessions = bottleDrops > 0 && i.drops > 0 ? Math.floor(bottleDrops / i.drops) : 0
+    return { oil: i.oil, drops: i.drops, bottleDrops, sessions, isLimit: false }
+  })
+})
+
+const limitingOil = computed(() => {
+  const data = consumptionData.value.filter(c => c.sessions > 0)
+  if (!data.length) return ''
+  const min = data.reduce((a, b) => a.sessions < b.sessions ? a : b)
+  min.isLimit = true
+  return min.oil
+})
+
+const allSameSession = computed(() => {
+  const data = consumptionData.value.filter(c => c.sessions > 0)
+  if (data.length <= 1) return true
+  return data.every(c => c.sessions === data[0].sessions)
+})
+
+const maxSessions = computed(() => {
+  const data = consumptionData.value.filter(c => c.sessions > 0)
+  if (!data.length) return 0
+  return Math.min(...data.map(c => c.sessions))
+})
+
+function clearZero(e) {
+  if (e.target.value === '0' || e.target.value === 0) e.target.value = ''
+}
+
 function formatDate(d) {
   if (!d) return ''
   return new Date(d).toLocaleDateString('zh-CN')
@@ -383,11 +481,44 @@ function formatDate(d) {
   padding: 0 12px 24px;
 }
 
-.toolbar {
+.commercial-header {
+  text-align: center; padding: 24px 16px 16px; margin-bottom: 16px;
+}
+.commercial-icon { font-size: 48px; margin-bottom: 8px; }
+.commercial-desc { font-size: 14px; color: var(--text-light, #999); }
+.demo-card { border-style: dashed !important; opacity: 0.85; }
+.proj-actions-hover { opacity: 0; transition: opacity 0.15s; }
+.project-card:hover .proj-actions-hover { opacity: 1; }
+
+.readonly-row { background: #f8f7f5; }
+.readonly-oil { font-size: 13px; color: #6b6375; }
+.readonly-drops { font-size: 13px; color: #3e3a44; font-weight: 500; }
+
+.consumption-section { margin-bottom: 20px; padding: 14px; background: #f8f7f5; border-radius: 12px; border: 1.5px solid #e5e4e7; }
+.consumption-section h4 { margin: 0 0 12px; font-size: 14px; color: #3e3a44; }
+.consumption-table { width: 100%; border-collapse: collapse; font-size: 13px; margin-bottom: 10px; }
+.consumption-table th { text-align: left; padding: 6px 8px; color: #999; font-size: 12px; border-bottom: 1px solid #eee; }
+.consumption-table td { padding: 6px 8px; border-bottom: 1px solid #f5f5f5; }
+.consumption-table .limit-oil { background: #fff3e0; font-weight: 600; }
+.consumption-summary { font-size: 13px; color: #e65100; padding: 8px; background: #fff8e1; border-radius: 8px; }
+.proj-badge {
+  font-size: 10px; background: #fff3e0; color: #e65100; padding: 2px 8px; border-radius: 8px;
+}
+
+.toolbar-sticky {
+  position: sticky;
+  top: 0;
+  z-index: 20;
+  background: linear-gradient(135deg, #f0faf5 0%, #e8f0e8 100%);
+  margin: 0 -12px;
+  padding: 0 12px;
+  border-bottom: 1.5px solid #d4e8d4;
+}
+.toolbar-inner {
   display: flex;
   align-items: center;
   justify-content: space-between;
-  margin-bottom: 16px;
+  padding: 12px 0;
 }
 
 .page-title {
@@ -526,25 +657,24 @@ function formatDate(d) {
 .section-actions { display: flex; gap: 6px; }
 
 .ingredients-table { width: 100%; border-collapse: collapse; margin-bottom: 12px; }
+.ingredients-table th { white-space: nowrap; }
 .ingredients-table th {
   text-align: center; padding: 10px 8px; font-size: 12px; font-weight: 600;
   color: var(--text-light, #999); border-bottom: 2px solid #e5e4e7;
 }
-.ingredients-table td { padding: 10px 8px; border-bottom: 1px solid #f0f0f0; text-align: center; }
+.ingredients-table td { padding: 6px 4px; border-bottom: 1px solid #f0f0f0; text-align: center; white-space: nowrap; }
 .ingredients-table .form-select { width: 100%; padding: 6px 8px; border: 1.5px solid #d4cfc7; border-radius: 8px; font-size: 13px; font-family: inherit; background: #fff; }
-.drops-input { width: 65px; padding: 6px 8px; border: 1.5px solid #d4cfc7; border-radius: 8px; font-size: 13px; text-align: center; outline: none; font-family: inherit; }
+.drops-input { width: 45px; padding: 4px 4px; border: 1.5px solid #d4cfc7; border-radius: 6px; font-size: 12px; text-align: center; outline: none; font-family: inherit; }
 .drops-input:focus { border-color: #7ec6a4; }
 .cell-ppd { color: #999; font-size: 12px; }
 .cell-subtotal { color: #4a9d7e; font-weight: 600; }
-.remove-btn { border: none; background: none; color: #ccc; cursor: pointer; font-size: 18px; }
+.remove-btn { border: none; background: none; color: #ccc; cursor: pointer; font-size: 12px; padding: 0; width: 16px; }
 .remove-btn:hover { color: #c0392b; }
 
-.total-row {
-  background: #e8f5e9; border-radius: 12px; padding: 14px 18px;
-  display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px;
-}
-.total-label { font-size: 14px; color: #3e3a44; font-weight: 500; }
-.total-price { font-size: 20px; font-weight: 700; color: #2e7d5a; }
+.total-table { background: #e8f5e9; border-radius: 10px; margin-bottom: 0; }
+.total-table td { border: none; padding: 10px 8px; }
+.total-label-cell { font-size: 14px; color: #3e3a44; font-weight: 600; }
+.total-price-cell { font-size: 18px; font-weight: 700; color: #2e7d5a; text-align: center; }
 
 .pricing-inline { margin-top: 12px; }
 .price-field { display: flex; align-items: center; gap: 8px; }
@@ -575,12 +705,18 @@ function formatDate(d) {
 
 .price-row {
   display: flex;
-  justify-content: space-between;
   align-items: center;
-  padding: 8px 0;
+  justify-content: space-between;
+  padding: 6px 0;
   border-bottom: 1px solid #eae8e5;
-  font-size: 14px;
+  font-size: 13px;
 }
+.price-row .price-label { color: #6b6375; }
+.price-row .price-value { text-align: right; font-weight: 600; }
+.price-val-box { width: 70px; text-align: right; font-weight: 600; color: #4a9d7e; font-size: 13px; }
+.price-row .price-input-wrap { display: flex; align-items: center; gap: 2px; }
+.price-row .form-input-inline, .price-row input[type="number"] { width: 70px; text-align: right; padding: 4px 6px; border: 1px solid #d4cfc7; border-radius: 6px; font-size: 13px; font-family: inherit; outline: none; }
+.price-row .form-input-inline:focus, .price-row input[type="number"]:focus { border-color: #7ec6a4; }
 
 .price-row.total {
   border-top: 2px solid #d4cfc7;
@@ -625,35 +761,20 @@ function formatDate(d) {
   border-color: #7ec6a4;
 }
 
-.profit-grid {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 8px;
+.price-profit-row {
+  display: flex; gap: 16px; margin-bottom: 20px;
 }
-
+.pricing-col, .profit-col {
+  flex: 1; padding: 14px; background: #f8f7f5; border-radius: 12px; border: 1.5px solid #e5e4e7;
+}
+.pricing-col h4, .profit-col h4 { margin: 0 0 10px; font-size: 14px; color: #3e3a44; }
 .profit-card {
-  padding: 12px;
-  background: #fff;
-  border-radius: 10px;
-  text-align: center;
-  border: 1.5px solid #e5e4e7;
-}
-
-.profit-label {
-  font-size: 12px;
-  color: #6b6375;
-  margin-bottom: 4px;
-}
-
-.profit-value {
-  font-size: 18px;
-  font-weight: 700;
-  color: #4a9d7e;
-}
-
-.profit-value.negative {
-  color: #ef5350;
+  padding: 10px 12px; background: #fff; border-radius: 10px;
+  border: 1.5px solid #e5e4e7; text-align: center; margin-bottom: 6px;
 }
+.profit-card-label { font-size: 12px; color: #6b6375; margin-bottom: 2px; }
+.profit-card-value { font-size: 18px; font-weight: 700; color: #4a9d7e; }
+.profit-card-value.negative { color: #ef5350; }
 
 .notes-textarea {
   width: 100%;

frontend/src/views/RecipeManager.vue

@@ -1,7 +1,7 @@
 <template>
   <div class="recipe-manager">
-    <!-- Review Bar (admin only) -->
-    <div v-if="auth.isAdmin && pendingCount > 0" class="review-bar" @click="showPending = !showPending" >
+    <!-- Review Bar (admin + senior_editor with assigned reviews) -->
+    <div v-if="(auth.isAdmin || auth.canManage) && pendingCount > 0" class="review-bar" @click="showPending = !showPending" >
       📝 待审核配方: {{ pendingCount }} 条
       <span class="toggle-icon">{{ showPending ? '▾' : '▸' }}</span>
     </div>
@@ -9,48 +9,47 @@
       <div v-for="r in pendingRecipes" :key="r._id" class="pending-item">
         <span class="pending-name clickable" @click="openRecipeDetail(r)">{{ r.name }}</span>
         <span class="pending-owner">{{ r._owner_name }}</span>
-        <button class="btn-sm btn-approve" @click="approveRecipe(r)">通过</button>
-        <button class="btn-sm btn-reject" @click="rejectRecipe(r)">拒绝</button>
+        <template v-if="auth.isAdmin">
+          <button class="btn-sm btn-approve" @click="approveRecipe(r)">通过</button>
+          <button class="btn-sm btn-reject" @click="rejectRecipe(r)">拒绝</button>
+          <button class="btn-sm btn-outline" @click="r._showAssign = !r._showAssign">指派</button>
+          <div v-if="r._showAssign" class="assign-row">
+            <select v-model="r._assignTo" class="assign-select">
+              <option value="">选择审核人...</option>
+              <option v-for="u in seniorEditors" :key="u.id" :value="u.id">{{ u.display_name || u.username }}</option>
+            </select>
+            <button class="btn-sm btn-primary" @click="assignReview(r)" :disabled="!r._assignTo">发送</button>
+          </div>
+        </template>
+        <template v-else>
+          <button class="btn-sm btn-approve" @click="recommendApprove(r)">推荐通过</button>
+          <button class="btn-sm btn-reject" @click="rejectRecipe(r)">拒绝</button>
+        </template>
       </div>
     </div>
 
-    <!-- Row 1: Search (editor+) -->
-    <template v-if="auth.canEdit">
-      <div class="manage-toolbar">
-        <div class="search-box">
-          <input class="search-input" v-model="manageSearch" placeholder="搜索配方..." />
-          <button v-if="manageSearch" class="search-clear-btn" @click="manageSearch = ''">✕</button>
-        </div>
+    <!-- Search bar -->
+    <div class="search-bar">
+      <div class="search-box">
+        <input class="search-input" v-model="manageSearch" placeholder="搜索配方名、精油、标签..." />
+        <button v-if="manageSearch" class="search-clear-btn" @click="manageSearch = ''">✕</button>
       </div>
-    </template>
+    </div>
 
-    <!-- Row 2: Add + Select + Tags + Batch + Export -->
-    <div class="toolbar-row">
-      <button v-if="auth.canEdit" class="btn-outline btn-sm" @click="showAddOverlay = true">新增</button>
-      <button
-        class="btn-sm"
-        :class="isAllSelected ? 'btn-select-active' : 'btn-outline'"
-        @click="toggleSelectAll"
-      >全选</button>
-      <span v-if="totalSelected > 0" class="select-count">共{{ totalSelected }}个</span>
-      <button class="tag-toggle-btn" @click="showTagFilter = !showTagFilter">
-        标签 {{ showTagFilter ? '▾' : '▸' }}
+    <!-- Action buttons -->
+    <div class="action-bar">
+      <button class="action-chip" @click="showAddOverlay = true">新增</button>
+      <button class="action-chip" :class="{ active: isAllSelected }" @click="toggleSelectAll">
+        全选<span v-if="totalSelected > 0" class="chip-count">{{ totalSelected }}</span>
       </button>
-      <button v-if="totalSelected > 0" class="tag-toggle-btn" @click="showBatchMenu = !showBatchMenu">
-        批量操作 {{ showBatchMenu ? '▾' : '▸' }}
-      </button>
-      <button v-if="totalSelected > 0" class="btn-sm btn-outline" @click="clearSelection">取消</button>
+      <button class="action-chip" :class="{ active: showTagFilter }" @click="toggleTagFilter">标签</button>
+      <button v-if="totalSelected > 0" class="action-chip" :class="{ active: showBatchMenu }" @click="showBatchMenu = !showBatchMenu">批量</button>
+      <button v-if="totalSelected > 0" class="action-chip cancel" @click="clearSelection">取消</button>
       <button v-if="auth.isAdmin" class="export-btn" @click="exportExcel" title="导出Excel">📥</button>
     </div>
-    <div v-if="showBatchMenu && totalSelected > 0" class="batch-menu">
-      <button class="batch-menu-btn" @click="executeBatchAction('tag')">🏷 批量打标签</button>
-      <button class="batch-menu-btn" @click="executeBatchAction('export')">📷 批量导出卡片</button>
-      <button v-if="selectedDiaryIds.size > 0 && selectedIds.size === 0" class="batch-menu-btn" @click="executeBatchAction('share_public')">📤 批量共享到公共库</button>
-      <button class="batch-menu-btn batch-delete" @click="executeBatchAction('delete')">🗑 批量删除</button>
-    </div>
     <div v-if="showTagFilter" class="tag-list-bar">
       <span
-        v-for="tag in recipeStore.allTags"
+        v-for="tag in visibleAllTags"
         :key="tag"
         class="tag-chip"
         :class="{ active: selectedTags.includes(tag) }"
@@ -62,15 +61,55 @@
       </div>
     </div>
 
+    <div v-if="showBatchMenu && totalSelected > 0" class="batch-menu">
+      <button class="batch-menu-btn" @click="doBatch('tag')">🏷 批量打标签</button>
+      <button class="batch-menu-btn" @click="doBatch('export')">📷 批量导出卡片</button>
+      <button v-if="selectedDiaryIds.size > 0 && selectedIds.size === 0" class="batch-menu-btn" @click="doBatch('share_public')">📤 批量共享到公共库</button>
+      <button class="batch-menu-btn batch-delete" @click="doBatch('delete')">🗑 批量删除</button>
+    </div>
+    <!-- Batch Tag Picker -->
+    <div v-if="showBatchTagPicker" class="batch-tag-picker">
+      <div class="editor-tags">
+        <span v-for="tag in batchTagsSelected" :key="tag" class="editor-tag">
+          {{ tag }}
+          <span class="tag-remove" @click="batchTagsSelected = batchTagsSelected.filter(t => t !== tag)">×</span>
+        </span>
+      </div>
+      <div class="candidate-tags">
+        <span
+          v-for="tag in recipeStore.allTags.filter(t => !batchTagsSelected.includes(t))"
+          :key="tag"
+          class="candidate-tag"
+          @click="batchTagsSelected.push(tag)"
+        >+ {{ tag }}</span>
+      </div>
+      <div class="tag-input-row">
+        <input v-model="batchNewTag" class="editor-input" placeholder="新标签..." @keydown.enter="addBatchTag" style="flex:1;max-width:120px" />
+        <button class="action-btn action-btn-sm" @click="addBatchTag" :disabled="!batchNewTag.trim()">+</button>
+      </div>
+      <div v-if="batchExistingTags.length" style="margin-top:8px">
+        <div style="font-size:12px;color:#999;margin-bottom:4px">点击移除已有标签：</div>
+        <div class="editor-tags">
+          <span v-for="tag in batchExistingTags" :key="'rm-'+tag" class="editor-tag tag-removable" @click="batchTagsToRemove.includes(tag) ? batchTagsToRemove.splice(batchTagsToRemove.indexOf(tag),1) : batchTagsToRemove.push(tag)" :class="{ 'tag-marked-remove': batchTagsToRemove.includes(tag) }">
+            {{ tag }} <span style="margin-left:2px">{{ batchTagsToRemove.includes(tag) ? '✓移除' : '×' }}</span>
+          </span>
+        </div>
+      </div>
+      <div style="display:flex;gap:6px;margin-top:8px">
+        <button class="action-btn action-btn-primary action-btn-sm" @click="applyBatchTags">确认</button>
+        <button class="action-btn action-btn-sm" @click="showBatchTagPicker = false">取消</button>
+      </div>
+    </div>
+
     <!-- My Recipes Section (from diary) -->
     <div class="recipe-section">
       <h3 class="section-title clickable" @click="showMyRecipes = !showMyRecipes">
-        <button class="mini-select" :class="{ active: isMyAllSelected }" @click.stop="toggleMySelect">✓</button>
+        <button class="mini-select" :class="{ active: isMyAllSelected }" @click.stop="toggleMySelect" title="全选我的配方">✓</button>
         <span>📖 我的配方 ({{ myRecipes.length }})</span>
         <span v-if="!auth.isAdmin" class="contrib-tag">已贡献 {{ sharedCount.adopted }}/{{ sharedCount.total }} 条</span>
         <span class="toggle-icon">{{ showMyRecipes ? '▾' : '▸' }}</span>
       </h3>
-      <template v-if="showMyRecipes || manageSearch">
+      <template v-if="showMyRecipes || manageSearch || selectedTags.length">
       <div class="recipe-list">
         <div
           v-for="d in myFilteredRecipes"
@@ -86,17 +125,15 @@
           />
           <div class="row-info" @click="editDiaryRecipe(d)">
             <span class="row-name">{{ d.name }}</span>
-            <span class="row-owner">{{ auth.user?.display_name || auth.user?.username }}</span>
             <span class="row-tags">
-              <span v-for="t in (d.tags || [])" :key="t" class="mini-tag">{{ t }}</span>
+              <span v-for="t in (d.tags || []).filter(t => auth.canEdit || !EDITOR_ONLY_TAGS.includes(t))" :key="t" class="mini-tag">{{ t }}</span>
             </span>
             <span class="row-cost">{{ oils.fmtPrice(oils.calcCost(d.ingredients || [])) }}</span>
             <span v-if="getDiaryShareStatus(d) === 'shared'" class="share-tag shared">已共享</span>
             <span v-else-if="getDiaryShareStatus(d) === 'pending'" class="share-tag pending">等待审核</span>
           </div>
           <div class="row-actions">
-            <button v-if="getDiaryShareStatus(d) !== 'shared'" class="btn-icon" @click="shareDiaryToPublic(d)" title="共享到公共配方库">📤</button>
-            <button class="btn-icon" @click="editDiaryRecipe(d)" title="编辑">✏️</button>
+            <button class="btn-icon" @click="handleShare(d)" title="共享到公共配方库">📤</button>
             <button class="btn-icon" @click="removeDiaryRecipe(d)" title="删除">🗑️</button>
           </div>
         </div>
@@ -108,11 +145,11 @@
     <!-- Public Recipes Section (editor+) -->
     <div v-if="auth.canEdit" class="recipe-section">
       <h3 class="section-title clickable" @click="showPublicRecipes = !showPublicRecipes">
-        <button class="mini-select" :class="{ active: isPubAllSelected }" @click.stop="togglePubSelect">✓</button>
+        <button class="mini-select" :class="{ active: isPubAllSelected }" @click.stop="togglePubSelect" title="全选公共配方">✓</button>
         <span>🌿 公共配方库 ({{ publicRecipes.length }})</span>
         <span class="toggle-icon">{{ showPublicRecipes ? '▾' : '▸' }}</span>
       </h3>
-      <div v-if="showPublicRecipes || manageSearch" class="recipe-list">
+      <div v-if="showPublicRecipes || manageSearch || selectedTags.length" class="recipe-list">
         <div
           v-for="r in publicFilteredRecipes"
           :key="r._id"
@@ -127,14 +164,12 @@
           />
           <div class="row-info" @click="editRecipe(r)">
             <span class="row-name">{{ r.name }}</span>
-            <span class="row-owner">{{ r._owner_name }}</span>
             <span class="row-tags">
-              <span v-for="t in r.tags" :key="t" class="mini-tag">{{ t }}</span>
+              <span v-for="t in (r.tags || []).filter(t => auth.canEdit || !EDITOR_ONLY_TAGS.includes(t))" :key="t" class="mini-tag">{{ t }}</span>
             </span>
             <span class="row-cost">{{ oils.fmtPrice(oils.calcCost(r.ingredients)) }}</span>
           </div>
           <div class="row-actions" v-if="auth.canEditRecipe(r)">
-            <button class="btn-icon" @click="editRecipe(r)" title="编辑">✏️</button>
             <button class="btn-icon" @click="removeRecipe(r)" title="删除">🗑️</button>
           </div>
         </div>
@@ -199,7 +234,7 @@
           </div>
           <div class="editor-header-actions">
             <button class="action-btn action-btn-primary action-btn-sm" @click="saveCurrentRecipe">💾 保存</button>
-            <button class="action-btn action-btn-sm" @click="closeOverlay">✕ 取消</button>
+            <button class="action-btn action-btn-sm" @click="previewRecipe">👁 预览</button>
           </div>
         </div>
 
@@ -224,7 +259,7 @@
             <select v-model.number="formDilution" class="select-sm">
               <option v-for="n in [3,4,5,6,7,8,9,10,12,15,20]" :key="n" :value="n">{{ n }}</option>
             </select>
-            <span class="ratio-hint">纯精油总数约为 {{ suggestedEoDrops }} 滴</span>
+            <span class="ratio-hint">时，纯精油总数约为 {{ suggestedEoDrops }} 滴，现在为 {{ eoTotalDrops }} 滴</span>
           </div>
         </div>
 
@@ -282,8 +317,8 @@
           <button class="add-row-btn" @click="addOilRow">+ 添加精油</button>
         </div>
 
-        <!-- Real-time summary -->
-        <div class="recipe-summary">
+        <!-- Real-time summary (only when volume selected) -->
+        <div v-if="formVolume" class="recipe-summary">
           {{ recipeSummaryText }}
         </div>
 
@@ -339,9 +374,11 @@
 
     <!-- Recipe Detail Overlay -->
     <RecipeDetailOverlay
-      v-if="previewRecipeIndex !== null"
+      v-if="previewRecipeIndex !== null || previewRecipeData !== null"
       :recipeIndex="previewRecipeIndex"
-      @close="previewRecipeIndex = null"
+      :recipeData="previewRecipeData"
+      :isDiary="true"
+      @close="previewRecipeIndex = null; previewRecipeData = null"
     />
 
     <!-- Tag Picker Overlay -->
@@ -360,7 +397,7 @@
 import { ref, computed, reactive, onMounted, watch } from 'vue'
 import { useAuthStore } from '../stores/auth'
 import { useOilsStore } from '../stores/oils'
-import { useRecipesStore } from '../stores/recipes'
+import { useRecipesStore, EDITOR_ONLY_TAGS } from '../stores/recipes'
 import { useDiaryStore } from '../stores/diary'
 import { useUiStore } from '../stores/ui'
 import { api } from '../composables/useApi'
@@ -387,6 +424,7 @@ const editingRecipe = ref(null)
 const showPending = ref(false)
 const pendingRecipes = ref([])
 const pendingCount = ref(0)
+const seniorEditors = ref([])
 
 // Form state
 const formName = ref('')
@@ -400,12 +438,18 @@ const newIngOil = ref('')
 const newIngSearch = ref('')
 const newIngDrops = ref(1)
 const newIngDropdownOpen = ref(false)
-const formVolume = ref('30')
-const formCustomVolume = ref(100)
+const formVolume = ref('')
+const formCustomVolume = ref(null)
 const formCustomUnit = ref('drops')
 const formDilution = ref(6)
 
-const formCocoRow = ref({ oil: '椰子油', drops: 10, _search: '椰子油', _open: false })
+const formCocoRow = ref(null)
+
+watch(() => formVolume.value, (vol) => {
+  if (vol && !formCocoRow.value) {
+    formCocoRow.value = { oil: '椰子油', drops: vol === 'single' ? 10 : 0, _search: '椰子油', _open: false }
+  }
+})
 
 // EO ingredients (everything except coconut)
 const formEoIngredients = computed(() =>
@@ -524,6 +568,15 @@ async function deleteGlobalTag(tag) {
   }
 }
 
+function toggleTagFilter() {
+  if (showTagFilter.value) {
+    showTagFilter.value = false
+    selectedTags.value = []
+  } else {
+    showTagFilter.value = true
+  }
+}
+
 function toggleTag(tag) {
   const idx = selectedTags.value.indexOf(tag)
   if (idx >= 0) selectedTags.value.splice(idx, 1)
@@ -546,6 +599,82 @@ function clearSelection() {
   showBatchMenu.value = false
 }
 
+function addBatchTag() {
+  const tag = batchNewTag.value.trim()
+  if (tag && !batchTagsSelected.value.includes(tag)) {
+    batchTagsSelected.value.push(tag)
+  }
+  batchNewTag.value = ''
+}
+
+async function applyBatchTags() {
+  const tagsToAdd = batchTagsSelected.value
+  const tagsToRemove = batchTagsToRemove.value
+  if (!tagsToAdd.length && !tagsToRemove.length) { ui.showToast('请选择要添加或移除的标签'); return }
+  const pubIds = [...selectedIds]
+  const diaryIds = [...selectedDiaryIds]
+  for (const id of pubIds) {
+    const recipe = recipeStore.recipes.find(r => r._id === id)
+    if (!recipe) continue
+    let newTags = [...recipe.tags]
+    let changed = false
+    for (const t of tagsToAdd) {
+      if (!newTags.includes(t)) { newTags.push(t); changed = true }
+    }
+    for (const t of tagsToRemove) {
+      const idx = newTags.indexOf(t)
+      if (idx >= 0) { newTags.splice(idx, 1); changed = true }
+    }
+    if (changed) {
+      await api(`/api/recipes/${recipe._id}`, {
+        method: 'PUT',
+        body: JSON.stringify({ tags: newTags }),
+      })
+      recipe.tags = newTags
+    }
+  }
+  for (const id of diaryIds) {
+    const d = diaryStore.userDiary.find(r => r.id === id)
+    if (!d) continue
+    let dtags = [...(d.tags || [])]
+    let changed = false
+    for (const t of tagsToAdd) {
+      if (!dtags.includes(t)) { dtags.push(t); changed = true }
+    }
+    for (const t of tagsToRemove) {
+      const idx = dtags.indexOf(t)
+      if (idx >= 0) { dtags.splice(idx, 1); changed = true }
+    }
+    if (changed) await diaryStore.updateDiary(id, { ...d, tags: dtags })
+  }
+  showBatchTagPicker.value = false
+  const msgs = []
+  if (tagsToAdd.length) msgs.push(`添加${tagsToAdd.length}个`)
+  if (tagsToRemove.length) msgs.push(`移除${tagsToRemove.length}个`)
+  ui.showToast(`已为 ${pubIds.length + diaryIds.length} 个配方${msgs.join('、')}标签`)
+  clearSelection()
+}
+
+function previewRecipe() {
+  const eoIngs = formIngredients.value.filter(i => i.oil && i.oil !== '椰子油' && i.drops > 0)
+  const cleanIngs = eoIngs.map(i => ({ oil: i.oil, drops: i.drops }))
+  if (formCocoRow.value && cocoActualDrops.value > 0) {
+    cleanIngs.push({ oil: '椰子油', drops: cocoActualDrops.value })
+  }
+  previewRecipeData.value = {
+    _id: null,
+    name: formName.value || '未命名配方',
+    note: formNote.value || '',
+    tags: formTags.value,
+    ingredients: cleanIngs,
+  }
+}
+
+function doBatch(action) {
+  showBatchMenu.value = false
+  executeBatchAction(action)
+}
+
 function toggleSelectAll() {
   if (isAllSelected.value) {
     clearSelection()
@@ -592,26 +721,11 @@ async function executeBatchAction(action) {
     }
     ui.showToast(`已删除 ${totalCount} 个配方`)
   } else if (action === 'tag') {
-    const tagName = await showPrompt('输入要添加的标签:')
-    if (!tagName) return
-    for (const id of pubIds) {
-      const recipe = recipeStore.recipes.find(r => r._id === id)
-      if (recipe && !recipe.tags.includes(tagName)) {
-        recipe.tags.push(tagName)
-        await recipeStore.saveRecipe(recipe)
-      }
-    }
-    for (const id of diaryIds) {
-      const d = diaryStore.userDiary.find(r => r.id === id)
-      if (d) {
-        const tags = [...(d.tags || [])]
-        if (!tags.includes(tagName)) {
-          tags.push(tagName)
-          await diaryStore.updateDiary(id, { ...d, tags })
-        }
-      }
-    }
-    ui.showToast(`已为 ${totalCount} 个配方添加标签`)
+    batchTagsSelected.value = []
+    batchTagsToRemove.value = []
+    batchNewTag.value = ''
+    showBatchTagPicker.value = true
+    return // don't clear selection yet
   } else if (action === 'share_public') {
     const ok = await showConfirm(`将 ${diaryIds.length} 个配方分享到公共配方库？`)
     if (!ok) return
@@ -640,35 +754,41 @@ async function executeBatchAction(action) {
   clearSelection()
 }
 
-function calcDilutionFromIngs(ingredients) {
-  const ings = ingredients || []
-  const coco = ings.find(i => i.oil === '椰子油')
-  const eoDrops = ings.filter(i => i.oil && i.oil !== '椰子油').reduce((s, i) => s + (i.drops || 0), 0)
-  const cocoDrops = coco ? (coco.drops || 0) : 0
-  const totalDrops = eoDrops + cocoDrops
-  if (eoDrops > 0 && cocoDrops > 0) {
-    formDilution.value = Math.round(cocoDrops / eoDrops)
-  }
-  // Guess volume
-  const DROPS_PER_ML = 18.6
-  const ml = totalDrops / DROPS_PER_ML
-  if (ml <= 1.5) formVolume.value = 'single'
-  else if (Math.abs(ml - 5) < 1.5) formVolume.value = '5'
-  else if (Math.abs(ml - 10) < 3) formVolume.value = '10'
-  else if (Math.abs(ml - 30) < 8) formVolume.value = '30'
-  else { formVolume.value = 'custom'; formCustomVolume.value = Math.round(totalDrops); formCustomUnit.value = 'drops' }
+function calcDilutionFromIngs() {
+  // No default selection — user chooses
 }
 
 function editRecipe(recipe) {
-  editingRecipe.value = recipe
+  editingRecipe.value = { _id: recipe._id, _version: recipe._version, name: recipe.name }
   formName.value = recipe.name
   const ings = recipe.ingredients || []
   formIngredients.value = ings.filter(i => i.oil !== '椰子油').map(i => ({ ...i, _search: i.oil, _open: false }))
   const coco = ings.find(i => i.oil === '椰子油')
-  formCocoRow.value = coco ? { ...coco, _search: '椰子油', _open: false } : { oil: '椰子油', drops: 10, _search: '椰子油', _open: false }
+  if (coco) {
+    formCocoRow.value = { ...coco, _search: '椰子油', _open: false }
+    // Guess volume from total drops
+    const eoDrops = ings.filter(i => i.oil && i.oil !== '椰子油').reduce((s, i) => s + (i.drops || 0), 0)
+    const totalDrops = eoDrops + coco.drops
+    const ml = totalDrops / DROPS_PER_ML
+    if (ml <= 2) formVolume.value = 'single'
+    else if (Math.abs(ml - 5) < 1.5) formVolume.value = '5'
+    else if (Math.abs(ml - 10) < 2.5) formVolume.value = '10'
+    else if (Math.abs(ml - 15) < 2.5) formVolume.value = '15'
+    else if (Math.abs(ml - 20) < 3) formVolume.value = '20'
+    else if (Math.abs(ml - 30) < 6) formVolume.value = '30'
+    else { formVolume.value = 'custom'; formCustomVolume.value = Math.round(ml) }
+    // Guess dilution
+    if (eoDrops > 0 && coco.drops > 0) {
+      const ratio = Math.round(coco.drops / eoDrops)
+      const options = [3,4,5,6,7,8,9,10,12,15,20]
+      formDilution.value = options.reduce((a, b) => Math.abs(b - ratio) < Math.abs(a - ratio) ? b : a)
+    }
+  } else {
+    formCocoRow.value = null
+    formVolume.value = ''
+  }
   formNote.value = recipe.note || ''
   formTags.value = [...(recipe.tags || [])]
-  calcDilutionFromIngs(recipe.ingredients)
   showAddOverlay.value = true
 }
 
@@ -681,7 +801,7 @@ function closeOverlay() {
 function resetForm() {
   formName.value = ''
   formIngredients.value = [{ oil: '', drops: 1, _search: '', _open: false }]
-  formCocoRow.value = { oil: '椰子油', drops: 10, _search: '椰子油', _open: false }
+  formCocoRow.value = null
   formNote.value = ''
   formTags.value = []
   smartPasteText.value = ''
@@ -690,7 +810,8 @@ function resetForm() {
   newIngOil.value = ''
   newIngSearch.value = ''
   newIngDrops.value = 1
-  formVolume.value = '30'
+  formVolume.value = ''
+  formCustomVolume.value = null
   formDilution.value = 6
 }
 
@@ -860,6 +981,10 @@ function toggleFormTag(tag) {
 }
 
 async function saveCurrentRecipe() {
+  if (formVolume.value === 'custom' && !formCustomVolume.value) {
+    ui.showToast('请输入自定义容量')
+    return
+  }
   const eoIngs = formIngredients.value.filter(i => i.oil && i.oil !== '椰子油' && i.drops > 0)
   if (!formName.value.trim()) {
     ui.showToast('请输入配方名称')
@@ -882,6 +1007,38 @@ async function saveCurrentRecipe() {
     tags: formTags.value,
   }
 
+  // Dedup check for new recipes (not editing)
+  if (!editingRecipe.value) {
+    const name = formName.value.trim()
+    // Check public library
+    const pubDup = recipeStore.recipes.find(r => r.name === name)
+    // Check personal diary
+    const diaryDup = diaryStore.userDiary.find(d => d.name === name)
+    const dup = pubDup || diaryDup
+    if (dup) {
+      const dupIngs = (dup.ingredients || []).filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+      const myIngs = cleanIngs.filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+      const identical = dupIngs.length === myIngs.length && dupIngs.every((ing, i) => ing.oil === myIngs[i].oil && ing.drops === myIngs[i].drops)
+      const where = pubDup ? '公共配方库' : '我的配方'
+      if (identical) {
+        ui.showToast(`${where}中已有一模一样的配方「${name}」`)
+        return
+      }
+      // Show difference
+      const existIngs = dupIngs.map(i => `${i.oil}${i.drops}滴`).join('、')
+      const newIngs = myIngs.map(i => `${i.oil}${i.drops}滴`).join('、')
+      const ok = await showConfirm(
+        `${where}中已有同名配方「${name}」，内容不同：\n\n已有：${existIngs}\n新的：${newIngs}\n\n是否改名后保存？`,
+        { okText: '改名', cancelText: '取消' }
+      )
+      if (!ok) return
+      const newName = await showPrompt('请输入新名称：', name)
+      if (!newName || !newName.trim()) return
+      formName.value = newName.trim()
+      diaryPayload.name = newName.trim()
+    }
+  }
+
   if (editingRecipe.value && editingRecipe.value._diary_id) {
     // Editing an existing diary recipe
     try {
@@ -895,12 +1052,17 @@ async function saveCurrentRecipe() {
   }
 
   if (editingRecipe.value && editingRecipe.value._id) {
-    // Editing an existing public recipe
+    // Editing an existing public recipe — safety check
+    const mappedIngs = cleanIngs.map(i => ({ oil_name: i.oil, drops: i.drops }))
+    if (mappedIngs.length === 0) {
+      const ok = await showConfirm('配方中没有精油成分，确定保存吗？这将清空所有成分。')
+      if (!ok) return
+    }
     const payload = {
       _id: editingRecipe.value._id,
       _version: editingRecipe.value._version,
       name: formName.value.trim(),
-      ingredients: cleanIngs.map(i => ({ oil_name: i.oil, drops: i.drops })),
+      ingredients: mappedIngs,
       note: formNote.value,
       tags: formTags.value,
     }
@@ -914,7 +1076,26 @@ async function saveCurrentRecipe() {
     return
   }
 
-  // New recipe: always save to diary (personal)
+  // New recipe: admin/senior_editor can choose public or personal
+  if (auth.canManage) {
+    const toPublic = await showConfirm('保存到哪里？', { okText: '公共配方库', cancelText: '个人配方' })
+    if (toPublic) {
+      try {
+        const pubPayload = {
+          name: formName.value.trim(),
+          ingredients: cleanIngs.map(i => ({ oil_name: i.oil, drops: i.drops })),
+          note: formNote.value,
+          tags: formTags.value,
+        }
+        await recipeStore.saveRecipe(pubPayload)
+        ui.showToast('已添加到公共配方库')
+        closeOverlay()
+      } catch (e) {
+        ui.showToast('保存失败: ' + (e.message || '未知错误'))
+      }
+      return
+    }
+  }
   try {
     await diaryStore.createDiary(diaryPayload)
     ui.showToast('已添加到我的配方')
@@ -964,13 +1145,57 @@ async function saveAllParsed() {
   closeOverlay()
 }
 
-const sharedCount = ref({ adopted: 0, total: 0 })
+const sharedCount = ref({ adopted: 0, total: 0, adoptedNames: [], pendingNames: [] })
+
+async function loadContribution() {
+  try {
+    const res = await api('/api/me/contribution')
+    if (res.ok) {
+      const data = await res.json()
+      sharedCount.value = {
+        adopted: data.adopted_count || 0,
+        total: data.shared_count || 0,
+        adoptedNames: data.adopted_names || [],
+        pendingNames: data.pending_names || [],
+      }
+    }
+  } catch {}
+}
 const previewRecipeIndex = ref(null)
+const previewRecipeData = ref(null)
 const showBatchMenu = ref(false)
+const visibleAllTags = computed(() => {
+  const tags = recipeStore.allTags
+  if (auth.canEdit) return tags
+  return tags.filter(t => !EDITOR_ONLY_TAGS.includes(t))
+})
+const showBatchTagPicker = ref(false)
+const batchTagsSelected = ref([])
+const batchNewTag = ref('')
+const batchTagsToRemove = ref([])
+
+const batchExistingTags = computed(() => {
+  const tagSets = []
+  for (const id of selectedIds) {
+    const r = recipeStore.recipes.find(x => x._id === id)
+    if (r) tagSets.push(r.tags || [])
+  }
+  for (const id of selectedDiaryIds) {
+    const d = diaryStore.userDiary.find(x => x.id === id)
+    if (d) tagSets.push(d.tags || [])
+  }
+  if (!tagSets.length) return []
+  const all = new Set(tagSets.flat())
+  return [...all].sort((a, b) => a.localeCompare(b, 'zh'))
+})
 const totalSelected = computed(() => selectedIds.size + selectedDiaryIds.size)
 const isMyAllSelected = computed(() => myFilteredRecipes.value.length > 0 && selectedDiaryIds.size === myFilteredRecipes.value.length)
 const isPubAllSelected = computed(() => publicFilteredRecipes.value.length > 0 && selectedIds.size === publicFilteredRecipes.value.length)
-const isAllSelected = computed(() => isMyAllSelected.value && (!auth.canEdit || isPubAllSelected.value))
+const isAllSelected = computed(() => {
+  const myOk = myFilteredRecipes.value.length > 0 && isMyAllSelected.value
+  const pubOk = !auth.canEdit || (publicFilteredRecipes.value.length > 0 && isPubAllSelected.value)
+  return myOk && pubOk
+})
 const showMyRecipes = ref(false)
 const showPublicRecipes = ref(false)
 const showReviewHistory = ref(false)
@@ -994,19 +1219,25 @@ function formatDate(d) {
 onMounted(async () => {
   if (auth.isLoggedIn) {
     await diaryStore.loadDiary()
-    try {
-      const res = await api('/api/me/contribution')
-      if (res.ok) {
-        const data = await res.json()
-        sharedCount.value = { adopted: data.adopted_count || 0, total: data.shared_count || 0 }
-      }
-    } catch {}
+    await loadContribution()
   }
   if (auth.isAdmin) {
     try {
       const res = await api('/api/recipe-reviews')
       if (res.ok) reviewHistory.value = await res.json()
     } catch {}
+    try {
+      const res = await api('/api/users')
+      if (res.ok) {
+        const users = await res.json()
+        seniorEditors.value = users.filter(u => u.role === 'senior_editor')
+      }
+    } catch {}
+  }
+  // Auto-expand pending if navigated from notification
+  if (localStorage.getItem('oil_open_pending')) {
+    localStorage.removeItem('oil_open_pending')
+    showPending.value = true
   }
   // Open recipe editor if redirected from card view
   const editId = localStorage.getItem('oil_edit_recipe_id')
@@ -1023,27 +1254,122 @@ function editDiaryRecipe(diary) {
   const ings = diary.ingredients || []
   formIngredients.value = ings.filter(i => i.oil !== '椰子油').map(i => ({ ...i, _search: i.oil, _open: false }))
   const coco = ings.find(i => i.oil === '椰子油')
-  formCocoRow.value = coco ? { ...coco, _search: '椰子油', _open: false } : { oil: '椰子油', drops: 10, _search: '椰子油', _open: false }
+  if (coco) {
+    formCocoRow.value = { ...coco, _search: '椰子油', _open: false }
+    const eoDrops = ings.filter(i => i.oil && i.oil !== '椰子油').reduce((s, i) => s + (i.drops || 0), 0)
+    const totalDrops = eoDrops + coco.drops
+    const ml = totalDrops / DROPS_PER_ML
+    if (ml <= 2) formVolume.value = 'single'
+    else if (Math.abs(ml - 5) < 1.5) formVolume.value = '5'
+    else if (Math.abs(ml - 10) < 2.5) formVolume.value = '10'
+    else if (Math.abs(ml - 15) < 2.5) formVolume.value = '15'
+    else if (Math.abs(ml - 20) < 3) formVolume.value = '20'
+    else if (Math.abs(ml - 30) < 6) formVolume.value = '30'
+    else { formVolume.value = 'custom'; formCustomVolume.value = Math.round(ml) }
+    if (eoDrops > 0 && coco.drops > 0) {
+      const ratio = Math.round(coco.drops / eoDrops)
+      const options = [3,4,5,6,7,8,9,10,12,15,20]
+      formDilution.value = options.reduce((a, b) => Math.abs(b - ratio) < Math.abs(a - ratio) ? b : a)
+    }
+  } else {
+    formCocoRow.value = null
+    formVolume.value = ''
+  }
   formNote.value = diary.note || ''
   formTags.value = [...(diary.tags || [])]
-  calcDilutionFromIngs(diary.ingredients)
   showAddOverlay.value = true
 }
 
+async function assignReview(recipe) {
+  const userId = recipe._assignTo
+  if (!userId) return
+  try {
+    const res = await api('/api/recipes/' + recipe._id + '/assign-review', {
+      method: 'POST',
+      body: JSON.stringify({ user_id: userId }),
+    })
+    if (res.ok) {
+      recipe._showAssign = false
+      recipe._assignTo = ''
+      ui.showToast('已指派审核')
+    }
+  } catch {
+    ui.showToast('指派失败')
+  }
+}
+
 function openRecipeDetail(recipe) {
   const idx = recipeStore.recipes.findIndex(r => r._id === recipe._id)
   if (idx >= 0) previewRecipeIndex.value = idx
 }
 
-function getDiaryShareStatus(d) {
-  // Check if a public recipe with same name exists, owned by current user or adopted by admin
+function diaryMatchesPublic(d) {
   const pub = recipeStore.recipes.find(r => r.name === d.name)
-  if (!pub) return null
-  if (pub._owner_id === auth.user?.id) return 'pending'
-  return 'shared'
+  if (!pub) return false
+  const dIngs = (d.ingredients || []).filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+  const pIngs = (pub.ingredients || []).filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+  return dIngs.length === pIngs.length && dIngs.every((ing, i) => ing.oil === pIngs[i].oil && ing.drops === pIngs[i].drops)
+}
+
+function getDiaryShareStatus(d) {
+  // Check pending (owned by user in public library, not yet adopted)
+  if (sharedCount.value.pendingNames.includes(d.name)) return 'pending'
+  // Check if public library has same recipe with same content
+  if (diaryMatchesPublic(d)) return 'shared'
+  // Check adopted names from audit log
+  if (sharedCount.value.adoptedNames.includes(d.name) && diaryMatchesPublic(d)) return 'shared'
+  return null
+}
+
+function handleShare(d) {
+  const status = getDiaryShareStatus(d)
+  if (status === 'shared') {
+    ui.showToast('该配方已共享到公共配方库，感谢你的贡献！')
+    return
+  }
+  if (status === 'pending') {
+    ui.showToast('该配方正在审核中，请耐心等待')
+    return
+  }
+  shareDiaryToPublic(d)
+}
+
+async function recommendApprove(recipe) {
+  try {
+    await api('/api/recipes/' + recipe._id + '/recommend', {
+      method: 'POST',
+      body: JSON.stringify({ recommendation: 'approve' }),
+    })
+    ui.showToast('已推荐通过，等待管理员最终审核')
+  } catch {
+    ui.showToast('操作失败')
+  }
 }
 
 async function shareDiaryToPublic(diary) {
+  // Check for duplicates in public library
+  const dup = recipeStore.recipes.find(r => r.name === diary.name)
+  if (dup) {
+    const dIngs = (diary.ingredients || []).filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+    const pIngs = (dup.ingredients || []).filter(i => i.oil).sort((a, b) => a.oil.localeCompare(b.oil))
+    const identical = dIngs.length === pIngs.length && dIngs.every((ing, i) => ing.oil === pIngs[i].oil && ing.drops === pIngs[i].drops)
+    if (identical) {
+      ui.showToast('公共配方库中已有一模一样的配方「' + diary.name + '」')
+      return
+    }
+    // Same name, different content — show details
+    const existIngs = pIngs.map(i => `${i.oil}${i.drops}滴`).join('、')
+    const newIngs = dIngs.map(i => `${i.oil}${i.drops}滴`).join('、')
+    const action = await showConfirm(
+      `公共配方库中已有同名配方「${diary.name}」，内容不同：\n\n已有：${existIngs}\n新的：${newIngs}\n\n是否改名后共享？`,
+      { okText: '改名', cancelText: '取消' }
+    )
+    if (!action) return
+    const newName = await showPrompt('请输入新名称：', diary.name)
+    if (!newName || !newName.trim()) return
+    diary = { ...diary, name: newName.trim() }
+  }
+
   const ok = await showConfirm(`将「${diary.name}」共享到公共配方库？`)
   if (!ok) return
   try {
@@ -1057,12 +1383,13 @@ async function shareDiaryToPublic(diary) {
       }),
     })
     if (res.ok) {
-      if (auth.isAdmin) {
+      if (auth.isAdmin || auth.canManage) {
         ui.showToast('已共享到公共配方库')
       } else {
         ui.showToast('已提交，等待管理员审核')
       }
       await recipeStore.loadRecipes()
+      await loadContribution()
     }
   } catch {
     ui.showToast('共享失败')
@@ -1091,7 +1418,59 @@ async function removeRecipe(recipe) {
   }
 }
 
+function recipesIdentical(a, b) {
+  if ((a.ingredients || []).length !== (b.ingredients || []).length) return false
+  const aIngs = [...a.ingredients].sort((x, y) => x.oil.localeCompare(y.oil))
+  const bIngs = [...b.ingredients].sort((x, y) => x.oil.localeCompare(y.oil))
+  return aIngs.every((ing, i) => ing.oil === bIngs[i].oil && ing.drops === bIngs[i].drops)
+}
+
+function formatIngsCompare(ings) {
+  return (ings || []).map(i => `${i.oil} ${i.drops}滴`).join('、')
+}
+
 async function approveRecipe(recipe) {
+  const dup = recipeStore.recipes.find(r => r.name === recipe.name && r._id !== recipe._id)
+  if (dup) {
+    if (recipesIdentical(recipe, dup)) {
+      // Identical — delete this duplicate silently
+      const ok = await showConfirm(`公共配方库中已有一模一样的配方「${recipe.name}」，忽略这条？`)
+      if (!ok) return
+      try {
+        await api(`/api/recipes/${recipe._id}/reject`, { method: 'POST', body: '{}' })
+        await recipeStore.loadRecipes()
+        ui.showToast('已忽略重复配方')
+      } catch { ui.showToast('操作失败') }
+      return
+    }
+    // Different content
+    const msg = `已有同名配方「${recipe.name}」但内容不同：\n\n` +
+      `已有：${formatIngsCompare(dup.ingredients)}\n` +
+      `新的：${formatIngsCompare(recipe.ingredients)}`
+    const action = await showConfirm(msg, { okText: '改名后采纳', cancelText: '放弃' })
+    if (!action) {
+      // User chose to discard
+      try {
+        await api(`/api/recipes/${recipe._id}/reject`, { method: 'POST', body: JSON.stringify({ reason: '与已有同名配方重复' }) })
+        await recipeStore.loadRecipes()
+        ui.showToast('已放弃')
+      } catch { ui.showToast('操作失败') }
+      return
+    }
+    // User wants to rename
+    const newName = await showPrompt('请输入新名称：', recipe.name)
+    if (!newName || !newName.trim()) return
+    try {
+      await api(`/api/recipes/${recipe._id}`, {
+        method: 'PUT',
+        body: JSON.stringify({ name: newName.trim() }),
+      })
+      recipe.name = newName.trim()
+    } catch {
+      ui.showToast('改名失败')
+      return
+    }
+  }
   try {
     const res = await api('/api/recipes/' + recipe._id + '/adopt', { method: 'POST' })
     if (res.ok) {
@@ -1160,7 +1539,9 @@ function onTagPickerSave(tags) {
 
 watch(() => recipeStore.recipes, () => {
   if (auth.isAdmin) {
-    const pending = recipeStore.recipes.filter(r => r._owner_id && r._owner_id !== auth.user.id)
+    const pending = recipeStore.recipes
+      .filter(r => r._owner_id && r._owner_id !== auth.user.id)
+      .map(r => ({ ...r, _showAssign: false, _assignTo: '' }))
     pendingRecipes.value = pending
     pendingCount.value = pending.length
   }
@@ -1420,8 +1801,8 @@ watch(() => recipeStore.recipes, () => {
 .log-recipe { font-weight: 500; color: #3e3a44; }
 .log-from { color: #999; font-size: 12px; }
 .log-time { color: #bbb; font-size: 11px; margin-left: auto; white-space: nowrap; }
-.section-title.clickable { cursor: pointer; display: flex; justify-content: space-between; align-items: center; }
-.toggle-icon { font-size: 12px; color: #999; }
+.section-title.clickable { cursor: pointer; display: flex; align-items: center; gap: 6px; }
+.toggle-icon { font-size: 12px; color: #999; margin-left: auto; }
 
 .contrib-tag {
   font-size: 11px;
@@ -1589,13 +1970,13 @@ watch(() => recipeStore.recipes, () => {
 .action-btn-primary { background: linear-gradient(135deg, #7ec6a4, #4a9d7e); color: #fff; border-color: transparent; }
 .action-btn-primary:hover { opacity: 0.9; }
 .action-btn-sm { padding: 5px 12px; font-size: 12px; }
-.volume-controls { display: flex; gap: 6px; margin-bottom: 8px; }
-.volume-btn { flex: 1; padding: 6px 0; border: 1.5px solid #d4cfc7; border-radius: 8px; background: #fff; font-size: 13px; cursor: pointer; font-family: inherit; color: #6b6375; text-align: center; }
+.volume-controls { display: flex; gap: 4px; margin-bottom: 8px; flex-wrap: wrap; }
+.volume-btn { padding: 8px 10px; border: 1.5px solid #d4cfc7; border-radius: 8px; background: #fff; font-size: 13px; cursor: pointer; font-family: inherit; color: #6b6375; text-align: center; }
 .volume-btn.active { background: #e8f5e9; border-color: #7ec6a4; color: #2e7d5a; font-weight: 600; }
 .volume-btn:hover { border-color: #7ec6a4; }
 .custom-volume-row { display: flex; gap: 6px; align-items: center; margin-bottom: 6px; }
 .ratio-row { display: flex; align-items: center; gap: 8px; margin-top: 8px; flex-wrap: wrap; }
-.ratio-label { font-size: 12px; color: #3e3a44; font-weight: 500; white-space: nowrap; }
+.ratio-label { font-size: 12px; color: #4a9d7e; font-weight: 500; white-space: nowrap; }
 .ratio-options { display: flex; gap: 4px; flex-wrap: wrap; }
 .ratio-btn {
   padding: 3px 8px; border: 1px solid #e5e4e7; border-radius: 6px; background: #fff;
@@ -1614,15 +1995,40 @@ watch(() => recipeStore.recipes, () => {
 }
 .drops-sm { width: 50px; padding: 4px 6px; border: 1.5px solid #d4cfc7; border-radius: 6px; font-size: 12px; text-align: center; outline: none; font-family: inherit; }
 .drops-sm:focus { border-color: #7ec6a4; }
-.select-sm { padding: 4px 6px; border: 1.5px solid #d4cfc7; border-radius: 6px; font-size: 12px; font-family: inherit; background: #fff; width: auto; }
+.select-sm { padding: 3px 6px; border: 1.5px solid #d4cfc7; border-radius: 6px; font-size: 12px; font-family: inherit; background: #fff; width: auto; }
 .btn-select-active { background: #e8f5e9; color: #2e7d5a; border: 1.5px solid #7ec6a4; border-radius: 10px; padding: 7px 14px; font-size: 13px; cursor: pointer; font-family: inherit; font-weight: 600; }
-.toolbar-row {
-  display: flex; gap: 8px; align-items: center; flex-wrap: wrap; margin-bottom: 8px;
+.search-bar { margin-bottom: 8px; }
+.search-bar .search-box {
+  display: flex; align-items: center; background: #f8f7f5; border: 1.5px solid #e5e4e7;
+  border-radius: 10px; padding: 2px 10px;
+}
+.search-bar .search-input {
+  flex: 1; border: none; background: transparent; padding: 8px 4px; font-size: 14px;
+  outline: none; font-family: inherit;
+}
+
+.action-bar {
+  display: flex; gap: 6px; align-items: center; flex-wrap: wrap; margin-bottom: 10px;
+}
+.action-chip {
+  padding: 5px 14px; border: 1.5px solid #e5e4e7; border-radius: 20px; background: #fff;
+  font-size: 13px; cursor: pointer; font-family: inherit; color: #6b6375; white-space: nowrap;
+  transition: all 0.15s;
+}
+.action-chip:hover { border-color: #7ec6a4; color: #4a9d7e; }
+.action-chip.active { background: #e8f5e9; border-color: #7ec6a4; color: #2e7d5a; font-weight: 600; }
+.action-chip.cancel { color: #999; }
+.chip-count {
+  display: inline-block; background: #4a9d7e; color: #fff; font-size: 11px;
+  min-width: 16px; height: 16px; line-height: 16px; text-align: center;
+  border-radius: 8px; margin-left: 4px; padding: 0 4px;
+}
+.detail-close-btn {
+  border: none; background: #f0eeeb; width: 26px; height: 26px; border-radius: 50%;
+  cursor: pointer; font-size: 13px; display: flex; align-items: center; justify-content: center; color: #6b6375;
 }
 .select-count { font-size: 12px; color: #4a9d7e; font-weight: 500; white-space: nowrap; }
-.batch-menu {
-  display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 8px; padding: 8px 0;
-}
+.batch-menu { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 8px; }
 .batch-menu-btn {
   padding: 5px 12px; border: 1.5px solid #e5e4e7; border-radius: 8px; background: #fff;
   font-size: 12px; cursor: pointer; font-family: inherit; color: #6b6375;
@@ -1630,13 +2036,22 @@ watch(() => recipeStore.recipes, () => {
 .batch-menu-btn:hover { border-color: #7ec6a4; color: #4a9d7e; }
 .batch-delete { color: #c0392b; border-color: #e8b4b0; }
 .batch-delete:hover { background: #fdf0ee; border-color: #c0392b; }
+.batch-tag-picker {
+  padding: 12px; background: #f8faf8; border: 1.5px solid #d4e8d4; border-radius: 10px; margin-bottom: 10px;
+}
+.tag-removable { cursor: pointer; transition: all 0.15s; }
+.tag-removable:hover { background: #fce4ec; border-color: #e8b4b0; color: #c62828; }
+.tag-marked-remove { background: #ffebee !important; color: #c62828 !important; text-decoration: line-through; }
 .mini-select {
-  width: 20px; height: 20px; border: 1.5px solid #d4cfc7; border-radius: 4px;
-  background: #fff; color: transparent; font-size: 12px; cursor: pointer;
+  width: 18px; height: 18px; border: 1.5px solid #d4cfc7; border-radius: 4px;
+  background: #fff; color: transparent; font-size: 11px; cursor: pointer;
   display: inline-flex; align-items: center; justify-content: center; flex-shrink: 0;
-  margin-right: 4px;
+  padding: 0; margin-right: 4px; line-height: 1;
 }
 .mini-select.active { background: #4a9d7e; border-color: #4a9d7e; color: #fff; }
+.assign-row { display: flex; gap: 6px; align-items: center; margin-top: 4px; }
+.assign-select { padding: 4px 8px; border: 1px solid #d4cfc7; border-radius: 6px; font-size: 12px; font-family: inherit; }
+.btn-primary { background: linear-gradient(135deg, #7ec6a4, #4a9d7e); color: #fff; border: none; border-radius: 8px; cursor: pointer; font-family: inherit; }
 .tag-list-bar {
   display: flex; flex-wrap: wrap; gap: 6px; margin-bottom: 10px; padding: 8px 0;
 }

frontend/src/views/RecipeSearch.vue

@@ -169,7 +169,7 @@ import { ref, computed, onMounted, nextTick, watch } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { useAuthStore } from '../stores/auth'
 import { useOilsStore } from '../stores/oils'
-import { useRecipesStore } from '../stores/recipes'
+import { useRecipesStore, EDITOR_ONLY_TAGS } from '../stores/recipes'
 import { useDiaryStore } from '../stores/diary'
 import { useUiStore } from '../stores/ui'
 import { api } from '../composables/useApi'
@@ -315,7 +315,8 @@ const exactResults = computed(() => {
   const q = searchQuery.value.trim().toLowerCase()
   return recipeStore.recipes.filter(r => {
     const nameMatch = r.name.toLowerCase().includes(q)
-    const tagMatch = r.tags && r.tags.some(t => t.toLowerCase().includes(q))
+    const visibleTags = auth.canEdit ? (r.tags || []) : (r.tags || []).filter(t => !EDITOR_ONLY_TAGS.includes(t))
+    const tagMatch = visibleTags.some(t => t.toLowerCase().includes(q))
     return nameMatch || tagMatch
   }).sort((a, b) => a.name.localeCompare(b.name, 'zh'))
 })
@@ -719,7 +720,7 @@ function onCarouselTouchEnd(e) {
   font-size: 14px;
   font-weight: 600;
   color: #3e3a44;
-  padding: 8px 4px;
+  padding: 10px 12px;
   margin-bottom: 8px;
 }
 

frontend/src/views/UserManagement.vue

@@ -30,10 +30,10 @@
             <div class="review-info">
               <span class="review-name">{{ group.latest.display_name || group.latest.username }}</span>
               <span class="review-reason">商户名：{{ group.latest.business_name }}</span>
-              <span class="biz-status-tag" :class="'biz-' + group.latest.status">{{ { pending: '待审核', approved: '已通过', rejected: '已拒绝' }[group.latest.status] }}</span>
+              <span class="biz-status-tag" :class="'biz-' + group.effectiveStatus">{{ { pending: '待审核', approved: '已通过', rejected: '已拒绝' }[group.effectiveStatus] }}</span>
             </div>
             <div class="review-actions">
-              <template v-if="group.latest.status === 'pending'">
+              <template v-if="group.effectiveStatus === 'pending'">
                 <button class="btn-sm btn-approve" @click="approveBusiness(group.latest)">通过</button>
                 <button class="btn-sm btn-reject" @click="rejectBusiness(group.latest)">拒绝</button>
               </template>
@@ -141,6 +141,13 @@ const groupedBizApps = computed(() => {
   return Object.values(map).map(g => {
     g.history.sort((a, b) => b.id - a.id)
     g.latest = g.history[0]
+    // Check if user is already verified (from users list)
+    const user = users.value.find(u => (u._id || u.id) === g.user_id)
+    if (user && user.business_verified) {
+      g.effectiveStatus = 'approved'
+    } else {
+      g.effectiveStatus = g.latest.status
+    }
     return reactive(g)
   }).filter(g => g.latest)
 })

frontend/vite.config.js

@@ -1,12 +1,17 @@
 import { defineConfig } from 'vite'
 import vue from '@vitejs/plugin-vue'
 
+const buildTime = new Date().toLocaleString('en-GB', { timeZone: 'Europe/London', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit' })
+
 export default defineConfig({
+  define: {
+    __BUILD_TIME__: JSON.stringify(buildTime),
+  },
   plugins: [vue()],
   server: {
     proxy: {
-      '/api': 'http://localhost:8000',
-      '/uploads': 'http://localhost:8000'
+      '/api': `http://localhost:${process.env.VITE_API_PORT || 8000}`,
+      '/uploads': `http://localhost:${process.env.VITE_API_PORT || 8000}`
     }
   },
   build: {