From a366bd1400ed5400f767bdd1b985fd1245bbdb93 Mon Sep 17 00:00:00 2001
From: zhangxiang <zhangxiang@novalon.cn>
Date: Mon, 28 Sep 2026 10:45:03 +0800
Subject: [PATCH] =?UTF-8?q?fix(qa):=20=E7=AC=AC=E4=BA=94=E8=BD=AE=E7=B3=BB?=
 =?UTF-8?q?=E7=BB=9F=E6=80=A7=E8=B4=A8=E9=87=8F=E4=BF=9D=E9=9A=9C=E7=BC=BA?=
 =?UTF-8?q?=E9=99=B7=E4=BF=AE=E5=A4=8D=20+=20=E5=8D=95=E5=85=83/=E9=9B=86?=
 =?UTF-8?q?=E6=88=90=E6=B5=8B=E8=AF=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

安全/鉴权：登出清服务端 httpOnly 令牌、登录 IP 限流前置 bcrypt、停用账号
令牌在 6 个内联 role handler 失效、admin/items 存在性 oracle 认证前置、
同意偏好 sanitize fail-closed、api-crypto 按 HTTP 方法判体。

CMS：workflow 状态更新+审计收进交互式 $transaction（失败即回滚）、编辑器
richtext 走 textarea 防换行损毁、array/object 子字段按作用域读写防污染、
about/contact/erp-upgrade 补 ISR revalidate 与路由映射。

UI/a11y：AnimatedCounter 入视口前显起点、CLS 累计上报、MetricCard 动画入
effect 并卸载取消 rAF、后台状态四态映射/搜索防抖+序号守卫/媒体单 input/
吞错改横幅/表单 label-aria 关联。

新增对应判别性单测与 pagination/rate-limit/client-ip/sanitize/validate-content-data
等模块及 tests-integration 真库集成层。
---
 .../(marketing)/about/about-content-v4.tsx    |  43 +-
 .../(marketing)/about/brand/brand-content.tsx |  18 +-
 src/app/(marketing)/about/page.test.tsx       |  18 -
 src/app/(marketing)/about/page.tsx            |   2 +
 .../(marketing)/cases/[slug]/client.test.tsx  |  85 +++
 src/app/(marketing)/cases/[slug]/client.tsx   |  16 +-
 .../(marketing)/cases/[slug]/page.test.tsx    |  15 +
 src/app/(marketing)/cases/[slug]/page.tsx     |   5 +-
 .../(marketing)/cases/cases-content-v3.tsx    |  30 +-
 .../contact/contact-content-v3.test.tsx       |  12 +
 .../contact/contact-content-v3.tsx            |  33 +-
 src/app/(marketing)/contact/page.tsx          |   2 +
 src/app/(marketing)/home-content-v15.test.tsx |   2 +-
 src/app/(marketing)/home-content-v15.tsx      |  36 +-
 .../methodology/methodology-content.tsx       |   8 +-
 .../news/[slug]/NewsDetailClient.tsx          |  18 +-
 src/app/(marketing)/news/news-content-v3.tsx  |   6 +-
 .../news/news-detail-content-v3.tsx           |   8 +-
 .../erp-upgrade/erp-upgrade-content-v2.tsx    |  10 +-
 .../(marketing)/products/erp-upgrade/page.tsx |   2 +
 .../products/product-detail-content-v3.tsx    |  18 +-
 .../products/products-content-v3.test.tsx     |  18 +-
 .../products/products-content-v3.tsx          |  21 +-
 .../products/standalone/[id]/client.tsx       |  16 +-
 .../services/service-detail-content-v4.tsx    | 137 ++--
 .../services/services-content-v3.tsx          |  32 +-
 .../solutions/solution-detail-content-v3.tsx  |  24 +-
 .../solutions/solutions-content-v3.tsx        |  22 +-
 src/app/(marketing)/team/team-content-v3.tsx  |  25 +-
 src/app/(marketing)/template.tsx              |   2 +-
 src/app/__tests__/cms-page-revalidate.test.ts |  23 +
 .../[modelCode]/[itemId]/page.test.tsx        | 616 ++++++++++++++++++
 .../content/[modelCode]/[itemId]/page.tsx     | 507 ++++++++------
 .../admin/content/[modelCode]/page.test.tsx   | 154 +++++
 src/app/admin/content/[modelCode]/page.tsx    |  32 +-
 src/app/admin/login/page.tsx                  |   9 +-
 src/app/admin/media/page.tsx                  |  29 +-
 src/app/admin/notifications/page.tsx          |  11 +-
 src/app/admin/page.tsx                        |  11 +-
 src/app/admin/roles/page.tsx                  |  18 +-
 src/app/admin/users/page.tsx                  |  40 +-
 src/app/admin/zones/page.tsx                  |  16 +-
 .../admin/items/[id]/workflow/route.test.ts   |  17 +
 .../api/admin/items/[id]/workflow/route.ts    |   9 +-
 src/app/api/admin/items/route.test.ts         | 277 +++++++-
 src/app/api/admin/items/route.ts              |  76 ++-
 src/app/api/admin/media/route.test.ts         |  37 ++
 src/app/api/admin/media/route.ts              |  46 +-
 src/app/api/admin/roles/route.test.ts         | 134 +++-
 src/app/api/admin/roles/route.ts              |  37 +-
 src/app/api/admin/stats/route.ts              |  11 +-
 src/app/api/admin/users/route.test.ts         | 320 +++++++++
 src/app/api/admin/users/route.ts              |  94 ++-
 src/app/api/auth/login/route.test.ts          | 175 +++++
 src/app/api/auth/login/route.ts               |  34 +-
 src/app/api/auth/refresh/route.test.ts        | 158 +++++
 src/app/api/auth/refresh/route.ts             |  20 +-
 src/app/api/cms/draft/disable/route.test.ts   |  83 +++
 src/app/api/cms/draft/disable/route.ts        |   9 +
 src/app/api/cms/draft/enable/route.test.ts    | 135 ++++
 src/app/api/cms/draft/enable/route.ts         |  20 +-
 src/app/api/cms/revalidate/route.test.ts      |  29 +
 src/app/api/cms/revalidate/route.ts           |  16 +
 src/app/api/contact/route.ts                  | 116 ++--
 src/app/error.tsx                             |   8 +-
 src/app/global-error.test.tsx                 |  33 +
 src/app/global-error.tsx                      |  76 +++
 src/app/globals.css                           | 128 +---
 src/app/layout.tsx                            |  41 +-
 src/app/not-found-content.tsx                 |  10 +-
 src/app/privacy/page.test.tsx                 |  34 +-
 src/app/privacy/page.tsx                      |   5 +-
 src/app/terms/page.test.tsx                   |  38 +-
 src/app/terms/page.tsx                        |   5 +-
 src/components/admin/admin-layout.tsx         |  14 +-
 src/components/admin/auth-context.test.tsx    |  61 ++
 src/components/admin/auth-context.tsx         |   9 +
 src/components/analytics/CookieConsent.tsx    |  19 +-
 .../analytics/GoogleAnalytics.test.tsx        | 101 ++-
 src/components/analytics/GoogleAnalytics.tsx  |  42 +-
 .../analytics/PerformanceTracker.test.tsx     |  16 +
 .../analytics/PerformanceTracker.tsx          |   4 +-
 src/components/cms/RichTextEditor.test.tsx    | 314 ---------
 src/components/cms/RichTextEditor.tsx         | 204 ------
 src/components/content/sections.test.tsx      | 381 ++++++++++-
 src/components/content/sections.tsx           |  30 +-
 src/components/content/testimonials.test.tsx  |  55 --
 src/components/content/testimonials.tsx       | 155 -----
 .../detail/detail-case-studies-section.tsx    |   8 +-
 src/components/detail/detail-case-study.tsx   |   2 +-
 .../detail/detail-certification.tsx           |   2 +-
 .../detail/detail-certifications-section.tsx  |   2 +-
 src/components/detail/detail-cta-section.tsx  |   6 +-
 src/components/detail/detail-hero.tsx         |  38 +-
 .../detail/detail-product-value.tsx           |  50 +-
 .../detail/detail-trust-section.tsx           |  36 +-
 src/components/detail/detail.test.tsx         |  57 +-
 src/components/detail/index.ts                |   1 -
 src/components/detail/l3-signals-slot.tsx     |   4 +-
 src/components/detail/list-page-hero.test.tsx | 152 -----
 src/components/detail/list-page-hero.tsx      | 166 -----
 .../detail/micro-interactions.test.tsx        |  30 +
 src/components/detail/micro-interactions.tsx  |  35 +-
 src/components/detail/product-card.tsx        |   4 +-
 src/components/detail/service-value.tsx       |   8 +-
 .../detail/solution-service-card.tsx          |  18 +-
 src/components/detail/solution-value.tsx      |  16 +-
 .../examples/ContactFormAnalyticsExample.tsx  | 107 ---
 src/components/layout/footer.tsx              |   2 +-
 src/components/layout/header.test.tsx         |  68 +-
 src/components/layout/header.tsx              |  31 +-
 src/components/layout/index.ts                |   7 -
 src/components/layout/mega-dropdown.test.tsx  |  88 +++
 src/components/layout/mega-dropdown.tsx       |  34 +-
 src/components/layout/mobile-tab-bar.tsx      |   4 +-
 src/components/layout/page-nav.tsx            |  43 --
 src/components/sections/case-card.tsx         |   2 +-
 .../sections/case-detail-page.test.tsx        | 529 +++++++++++++++
 src/components/sections/case-detail-page.tsx  | 251 ++++---
 src/components/sections/challenge-section.tsx |   4 +-
 src/components/sections/cta-section.tsx       |   6 +-
 .../hero-particle-field-engine.test.tsx       | 507 ++++++++++++++
 .../sections/hero-particle-field.tsx          |   6 +-
 src/components/sections/hero-section-v2.tsx   |  22 +-
 src/components/sections/index.ts              |  24 -
 src/components/sections/industry-grid.tsx     |   4 +-
 src/components/sections/insight-card.tsx      |   2 +-
 .../sections/methodology-section.tsx          |  12 +-
 src/components/sections/product-card.tsx      |  12 +-
 .../sections/product-matrix-section.tsx       |   6 +-
 src/components/sections/question-card.tsx     |   6 +-
 src/components/sections/section-header.tsx    |   6 +-
 src/components/sections/sections.test.tsx     |  43 +-
 src/components/sections/service-card.tsx      |   6 +-
 .../sections/social-proof-section.tsx         |  22 +-
 src/components/sections/stats-bar.tsx         | 131 ----
 src/components/sections/why-us-section.tsx    |  24 +-
 src/components/seo/structured-data.test.tsx   |  18 +
 src/components/seo/structured-data.tsx        |  23 +-
 src/components/ui/accordion.test.tsx          | 128 ----
 src/components/ui/accordion.tsx               |  65 --
 src/components/ui/animated-counter.test.tsx   |  37 +-
 src/components/ui/animated-counter.tsx        |   4 +-
 src/components/ui/back-to-top.tsx             |   5 +-
 src/components/ui/brand-visuals.tsx           |  18 +-
 src/components/ui/button.test.tsx             |  25 +-
 src/components/ui/button.tsx                  |  18 +-
 src/components/ui/challenge-card.tsx          |   6 +-
 src/components/ui/cta-button.tsx              |   8 +-
 src/components/ui/dialog.test.tsx             | 131 ----
 src/components/ui/dialog.tsx                  | 124 ----
 src/components/ui/flip-clock.tsx              | 148 -----
 src/components/ui/index.ts                    | 201 ------
 src/components/ui/loading-skeleton.test.tsx   | 150 -----
 src/components/ui/loading-skeleton.tsx        |  96 ---
 src/components/ui/loading-state.tsx           |   4 +-
 src/components/ui/metric-card.test.tsx        | 104 ---
 src/components/ui/metric-card.tsx             | 123 ----
 src/components/ui/milestone-timeline.tsx      | 129 ----
 src/components/ui/motion-provider.tsx         |   9 +
 src/components/ui/page-transition.tsx         |   4 +-
 src/components/ui/product-card.tsx            |   8 +-
 src/components/ui/scroll-progress.test.tsx    |  28 +-
 src/components/ui/scroll-progress.tsx         |   2 +-
 src/components/ui/scroll-reveal.tsx           |  11 +-
 src/components/ui/select.test.tsx             | 136 ----
 src/components/ui/select.tsx                  | 168 -----
 src/components/ui/stats-showcase.tsx          | 142 ----
 src/components/ui/tabs.test.tsx               | 148 -----
 src/components/ui/tabs.tsx                    |  65 --
 src/hooks/use-count-up.test.ts                |   6 +-
 src/hooks/use-focus-trap.test.tsx             | 209 +++++-
 src/hooks/use-focus-trap.ts                   | 120 +++-
 src/hooks/use-keyboard-shortcuts.test.ts      | 293 ---------
 src/hooks/use-keyboard-shortcuts.ts           |  45 --
 .../use-swipe-gesture.components.test.tsx     |  60 +-
 src/hooks/use-swipe-gesture.tsx               |  14 +-
 src/instrumentation-client.ts                 |  94 +++
 src/instrumentation.ts                        |  32 +
 src/lib/admin-api.test.ts                     |  56 ++
 src/lib/admin-api.ts                          |  41 +-
 src/lib/analytics.test.ts                     |  79 ++-
 src/lib/analytics.ts                          |  40 +-
 src/lib/api-crypto.test.ts                    |  41 +-
 src/lib/api-crypto.ts                         |   9 +-
 src/lib/api-response.test.ts                  |  13 +-
 src/lib/client-ip.test.ts                     |  56 ++
 src/lib/client-ip.ts                          |  27 +
 src/lib/cms/data-server.test.ts               |  93 +++
 src/lib/cms/data-server.ts                    |  19 +-
 src/lib/cms/internal-redirect.ts              |  10 +
 src/lib/cms/types.ts                          |  14 +-
 src/lib/cms/validate-content-data.test.ts     | 183 ++++++
 src/lib/cms/validate-content-data.ts          | 123 ++++
 src/lib/cms/workflow.test.ts                  | 161 ++++-
 src/lib/cms/workflow.ts                       |  99 ++-
 src/lib/colors.test.ts                        | 183 ------
 src/lib/colors.ts                             | 100 ---
 src/lib/constants/company.ts                  |   2 +-
 src/lib/constants/design-system.test.ts       |  14 +-
 src/lib/constants/design-system.ts            |  10 +-
 src/lib/db.test.ts                            |  76 ++-
 src/lib/db.ts                                 |  38 +-
 src/lib/gradients.test.ts                     | 132 ----
 src/lib/gradients.ts                          |  45 --
 src/lib/media/image-processor.test.ts         |  31 +-
 src/lib/media/image-processor.ts              |   3 +-
 src/lib/media/media-service.test.ts           |  95 ++-
 src/lib/media/media-service.ts                |  55 +-
 src/lib/media/storage.test.ts                 |  38 ++
 src/lib/media/storage.ts                      |  23 +-
 src/lib/media/upload-policy.test.ts           | 182 ++++++
 src/lib/media/upload-policy.ts                | 145 +++++
 src/lib/pagination.test.ts                    |  33 +
 src/lib/pagination.ts                         |  34 +
 src/lib/permissions.test.ts                   | 117 +++-
 src/lib/permissions.ts                        |  86 ++-
 src/lib/rate-limit.test.ts                    |  41 ++
 src/lib/rate-limit.ts                         |  42 ++
 src/lib/sanitize.test.ts                      | 110 ++++
 src/lib/sanitize.ts                           |  51 ++
 src/lib/seed-metric-basis.test.ts             |  70 ++
 src/lib/seed-permissions.test.ts              |  68 ++
 src/lib/utils.test.ts                         |  40 ++
 224 files changed, 8938 insertions(+), 5579 deletions(-)
 create mode 100644 src/app/(marketing)/cases/[slug]/client.test.tsx
 create mode 100644 src/app/__tests__/cms-page-revalidate.test.ts
 create mode 100644 src/app/admin/content/[modelCode]/[itemId]/page.test.tsx
 create mode 100644 src/app/admin/content/[modelCode]/page.test.tsx
 create mode 100644 src/app/api/admin/users/route.test.ts
 create mode 100644 src/app/api/auth/login/route.test.ts
 create mode 100644 src/app/api/auth/refresh/route.test.ts
 create mode 100644 src/app/api/cms/draft/disable/route.test.ts
 create mode 100644 src/app/api/cms/draft/enable/route.test.ts
 create mode 100644 src/app/global-error.test.tsx
 create mode 100644 src/app/global-error.tsx
 create mode 100644 src/components/admin/auth-context.test.tsx
 delete mode 100644 src/components/cms/RichTextEditor.test.tsx
 delete mode 100644 src/components/cms/RichTextEditor.tsx
 delete mode 100644 src/components/content/testimonials.test.tsx
 delete mode 100644 src/components/content/testimonials.tsx
 delete mode 100644 src/components/detail/list-page-hero.test.tsx
 delete mode 100644 src/components/detail/list-page-hero.tsx
 create mode 100644 src/components/detail/micro-interactions.test.tsx
 delete mode 100644 src/components/examples/ContactFormAnalyticsExample.tsx
 delete mode 100644 src/components/layout/index.ts
 create mode 100644 src/components/layout/mega-dropdown.test.tsx
 delete mode 100644 src/components/layout/page-nav.tsx
 create mode 100644 src/components/sections/case-detail-page.test.tsx
 create mode 100644 src/components/sections/hero-particle-field-engine.test.tsx
 delete mode 100644 src/components/sections/index.ts
 delete mode 100644 src/components/sections/stats-bar.tsx
 delete mode 100644 src/components/ui/accordion.test.tsx
 delete mode 100644 src/components/ui/accordion.tsx
 delete mode 100644 src/components/ui/dialog.test.tsx
 delete mode 100644 src/components/ui/dialog.tsx
 delete mode 100644 src/components/ui/flip-clock.tsx
 delete mode 100644 src/components/ui/index.ts
 delete mode 100644 src/components/ui/loading-skeleton.test.tsx
 delete mode 100644 src/components/ui/loading-skeleton.tsx
 delete mode 100644 src/components/ui/metric-card.test.tsx
 delete mode 100644 src/components/ui/metric-card.tsx
 delete mode 100644 src/components/ui/milestone-timeline.tsx
 create mode 100644 src/components/ui/motion-provider.tsx
 delete mode 100644 src/components/ui/select.test.tsx
 delete mode 100644 src/components/ui/select.tsx
 delete mode 100644 src/components/ui/stats-showcase.tsx
 delete mode 100644 src/components/ui/tabs.test.tsx
 delete mode 100644 src/components/ui/tabs.tsx
 delete mode 100644 src/hooks/use-keyboard-shortcuts.test.ts
 delete mode 100644 src/hooks/use-keyboard-shortcuts.ts
 create mode 100644 src/instrumentation-client.ts
 create mode 100644 src/instrumentation.ts
 create mode 100644 src/lib/client-ip.test.ts
 create mode 100644 src/lib/client-ip.ts
 create mode 100644 src/lib/cms/internal-redirect.ts
 create mode 100644 src/lib/cms/validate-content-data.test.ts
 create mode 100644 src/lib/cms/validate-content-data.ts
 delete mode 100644 src/lib/colors.test.ts
 delete mode 100644 src/lib/colors.ts
 delete mode 100644 src/lib/gradients.test.ts
 delete mode 100644 src/lib/gradients.ts
 create mode 100644 src/lib/media/upload-policy.test.ts
 create mode 100644 src/lib/media/upload-policy.ts
 create mode 100644 src/lib/pagination.test.ts
 create mode 100644 src/lib/pagination.ts
 create mode 100644 src/lib/rate-limit.test.ts
 create mode 100644 src/lib/rate-limit.ts
 create mode 100644 src/lib/sanitize.test.ts
 create mode 100644 src/lib/sanitize.ts
 create mode 100644 src/lib/seed-metric-basis.test.ts
 create mode 100644 src/lib/seed-permissions.test.ts

diff --git a/src/app/(marketing)/about/about-content-v4.tsx b/src/app/(marketing)/about/about-content-v4.tsx
index d99c952..2a223d0 100644
--- a/src/app/(marketing)/about/about-content-v4.tsx
+++ b/src/app/(marketing)/about/about-content-v4.tsx
@@ -57,7 +57,7 @@ function HeroSection({ data }: { data: AboutData }) {
           <motion.div
             initial={{ opacity: 0, y: 20 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
             className="text-sm font-mono tracking-[0.15em] text-text-muted mb-8"
           >
             {data.heroSubtitle || ''}
@@ -66,8 +66,8 @@ function HeroSection({ data }: { data: AboutData }) {
           <motion.h1
             initial={{ opacity: 0, y: 40 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-            className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.92] tracking-tightest mb-8 sm:mb-10 md:mb-12"
+            transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+            className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.92] tracking-tighter mb-8 sm:mb-10 md:mb-12"
           >
             {titleLines.map((line, i) => (
               <div key={i} className={`block ${i > 0 ? 'mt-4 sm:mt-6' : ''}`}>
@@ -80,7 +80,7 @@ function HeroSection({ data }: { data: AboutData }) {
                         style={{ transformOrigin: 'left' }}
                         initial={{ scaleX: 0 }}
                         animate={{ scaleX: 1 }}
-                        transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                        transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                       />
                     </span>
                   </span>
@@ -94,7 +94,7 @@ function HeroSection({ data }: { data: AboutData }) {
           <motion.p
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
             className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-10 sm:mb-12"
           >
             {data.heroDescription || ''}
@@ -103,7 +103,7 @@ function HeroSection({ data }: { data: AboutData }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.7, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.7, ease: EASE_OUT }}
             className="flex flex-col sm:flex-row gap-4 sm:gap-6"
           >
             <CTAButton href={data.heroPrimaryCtaHref || '/contact'} className="min-h-[52px] touch-manipulation">
@@ -137,7 +137,7 @@ function MetricsStrip({ data }: { data: AboutData }) {
               initial={{ opacity: 0, y: 20 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-80px' }}
-              transition={{ duration: 0.3, delay: i * 0.06, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: i * 0.06, ease: EASE_OUT }}
               className="text-center lg:text-left"
             >
               <div className={`text-3xl sm:text-4xl md:text-5xl font-black tracking-tight mb-2 ${i === 0 ? 'text-brand-ink' : 'text-ink'}`}>
@@ -165,7 +165,7 @@ function WhoWeAreSection({ data }: { data: AboutData }) {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="lg:col-span-5"
           >
             <div className="flex items-center gap-4 mb-6">
@@ -194,7 +194,7 @@ function WhoWeAreSection({ data }: { data: AboutData }) {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
             className="lg:col-span-7"
           >
             <div className="flex items-center gap-4 mb-6">
@@ -213,12 +213,13 @@ function WhoWeAreSection({ data }: { data: AboutData }) {
                   className="group relative border-b border-border-primary pb-6 md:pb-8 last:border-0 last:pb-0"
                 >
                   <div className="flex items-start gap-6 md:gap-8">
-                    {/* 纯装饰序号：与右侧 value.title 并列，无独立语义，标记 aria-hidden 豁免对比度要求 */}
-                    <div aria-hidden="true" className="text-4xl md:text-5xl font-black text-text-muted/30 font-mono shrink-0 leading-none pt-1">
+                    {/* 装饰序号：aria-hidden 只把它移出无障碍树，axe 仍按可见文字校验 1.4.3，
+                        所以用大字档令牌 text-text-hint（对 #F1F5F9 卡底 3.11:1 ≥ AA 大字 3:1） */}
+                    <div aria-hidden="true" className="text-4xl md:text-5xl font-black text-text-hint font-mono shrink-0 leading-none pt-1">
                       {value.number}
                     </div>
                     <div className="flex-1">
-                      <h3 className="text-xl md:text-2xl font-bold text-ink mb-3 group-hover:text-brand-ink transition-colors duration-300">
+                      <h3 className="text-xl md:text-2xl font-bold text-ink mb-3 group-hover:text-brand-ink transition-colors duration-normal">
                         {value.title}
                       </h3>
                       <p className="text-text-secondary leading-relaxed">{value.description}</p>
@@ -244,7 +245,7 @@ function MilestonesSection({ data }: { data: AboutData }) {
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl mb-16 sm:mb-20 md:mb-24"
         >
           <div className="flex items-center gap-4 mb-6">
@@ -268,7 +269,7 @@ function MilestonesSection({ data }: { data: AboutData }) {
               initial={{ opacity: 0, x: -20 }}
               whileInView={{ opacity: 1, x: 0 }}
               viewport={{ once: true, margin: '-60px' }}
-              transition={{ duration: 0.3, delay: idx * 0.06, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: idx * 0.06, ease: EASE_OUT }}
               className="relative pl-8 sm:pl-12 md:pl-16 pb-10 sm:pb-12 md:pb-14 last:pb-0"
             >
               <div className="absolute left-0 top-2 bottom-0 w-px bg-border-primary last:hidden" />
@@ -307,7 +308,7 @@ function CertificationsSection({ data }: { data: AboutData }) {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="max-w-3xl"
           >
             <div className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-6">
@@ -340,7 +341,7 @@ function CertificationsSection({ data }: { data: AboutData }) {
               initial={{ opacity: 0, y: 30 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-80px' }}
-              transition={{ duration: 0.3, ease: EASE_OUT }}
+              transition={{ duration: 0.28, ease: EASE_OUT }}
             >
               <div className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-6">
                 Certifications
@@ -355,7 +356,7 @@ function CertificationsSection({ data }: { data: AboutData }) {
                   return (
                     <div
                       key={cert.name}
-                      className="p-5 sm:p-6 border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-border-secondary transition-all duration-300"
+                      className="p-5 sm:p-6 border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-border-secondary transition-all duration-normal"
                     >
                       <div className="w-10 h-10 flex items-center justify-center mb-4 text-text-secondary">
                         <Icon className="w-5 h-5" />
@@ -374,7 +375,7 @@ function CertificationsSection({ data }: { data: AboutData }) {
               initial={{ opacity: 0, y: 30 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-80px' }}
-              transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
             >
               <div className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-6">
                 Partners
@@ -386,9 +387,9 @@ function CertificationsSection({ data }: { data: AboutData }) {
                 {partners.map((partner) => (
                   <div
                     key={partner}
-                    className="aspect-[3/2] flex items-center justify-center border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-border-secondary transition-all duration-300 group"
+                    className="aspect-[3/2] flex items-center justify-center border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-border-secondary transition-all duration-normal group"
                   >
-                    <span className="text-sm font-bold text-text-muted group-hover:text-text-secondary transition-colors duration-300">
+                    <span className="text-sm font-bold text-text-muted group-hover:text-text-secondary transition-colors duration-normal">
                       {partner}
                     </span>
                   </div>
@@ -415,7 +416,7 @@ function CTASection({ data }: { data: AboutData }) {
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95] mb-8">
diff --git a/src/app/(marketing)/about/brand/brand-content.tsx b/src/app/(marketing)/about/brand/brand-content.tsx
index 0fc0d59..7734533 100644
--- a/src/app/(marketing)/about/brand/brand-content.tsx
+++ b/src/app/(marketing)/about/brand/brand-content.tsx
@@ -75,7 +75,7 @@ export default function BrandContent() {
             <motion.div
               initial={{ opacity: 0, y: 20 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
               className="mb-8 sm:mb-10"
             >
               <span className="inline-flex items-center gap-2 px-3 py-1.5 bg-brand/[0.08] border border-brand/20 rounded-full">
@@ -90,7 +90,7 @@ export default function BrandContent() {
             <motion.h1
               initial={{ opacity: 0, y: 40 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
               className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl text-ink leading-[1.05] tracking-tight mb-8 sm:mb-10"
             >
               <span className="sr-only">睿新致遠</span>
@@ -106,7 +106,7 @@ export default function BrandContent() {
             <motion.div
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.4, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.4, ease: EASE_OUT }}
               className="flex flex-wrap gap-6 sm:gap-10 md:gap-14 mb-10"
             >
               {brandStats.map((stat, i) => (
@@ -125,7 +125,7 @@ export default function BrandContent() {
             <motion.p
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
               className="text-lg sm:text-xl text-text-secondary/80 max-w-2xl leading-relaxed"
             >
               公司于 2026 年 1 月正式成立，核心团队专注企业数字化，从战略规划到系统落地，致力于陪伴每一家企业实现可衡量的业务改善。
@@ -161,9 +161,9 @@ export default function BrandContent() {
           <div className="grid sm:grid-cols-2 lg:grid-cols-4 gap-6">
             {brandValues.map((item, i) => (
               <ScrollReveal key={item.title} delay={i * 0.1}>
-                <div className="group relative bg-bg-primary border border-border-primary p-8 h-full transition-all duration-300 hover:border-brand/20 hover:shadow-md">
+                <div className="group relative bg-bg-primary border border-border-primary p-8 h-full transition-all duration-normal hover:border-brand/20 hover:shadow-md">
                   <div className="absolute top-0 left-0 right-0 h-0.5 bg-brand scale-x-0 group-hover:scale-x-100 transition-transform duration-150 origin-left" />
-                  <div className="w-12 h-12 flex items-center justify-center bg-brand/[0.06] text-brand-ink mb-6 transition-colors duration-300 group-hover:bg-brand group-hover:text-white">
+                  <div className="w-12 h-12 flex items-center justify-center bg-brand/[0.06] text-brand-ink mb-6 transition-colors duration-normal group-hover:bg-brand group-hover:text-white">
                     <item.icon className="w-5 h-5" />
                   </div>
                   <h3 className="text-lg font-bold text-ink mb-3">{item.title}</h3>
@@ -323,8 +323,8 @@ export default function BrandContent() {
               { icon: Globe, title: '多行业场景', desc: '方法论适配制造、零售、医疗、金融、教育、物流等多行业场景' },
             ].map((item, i) => (
               <ScrollReveal key={item.title} delay={i * 0.1}>
-                <div className="group relative bg-bg-secondary border border-border-primary p-8 h-full transition-all duration-300 hover:border-brand/20 hover:bg-bg-primary hover:shadow-sm">
-                  <div className="w-12 h-12 flex items-center justify-center bg-brand/[0.06] text-brand-ink mb-6 transition-colors duration-300 group-hover:bg-brand group-hover:text-white">
+                <div className="group relative bg-bg-secondary border border-border-primary p-8 h-full transition-all duration-normal hover:border-brand/20 hover:bg-bg-primary hover:shadow-sm">
+                  <div className="w-12 h-12 flex items-center justify-center bg-brand/[0.06] text-brand-ink mb-6 transition-colors duration-normal group-hover:bg-brand group-hover:text-white">
                     <item.icon className="w-5 h-5" />
                   </div>
                   <h3 className="text-lg font-bold text-ink mb-3">{item.title}</h3>
@@ -345,7 +345,7 @@ export default function BrandContent() {
 
         <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10 relative z-10">
           <ScrollReveal className="max-w-3xl">
-            <h2 className="font-sans text-2xl sm:text-3xl md:text-4xl lg:text-6xl xl:text-7xl font-black text-dark-text-primary tracking-tightest leading-[0.9] mb-8 sm:mb-10">
+            <h2 className="font-sans text-2xl sm:text-3xl md:text-4xl lg:text-6xl xl:text-7xl font-black text-dark-text-primary tracking-tighter leading-[0.9] mb-8 sm:mb-10">
               成为下一个
               <br />
               <span className="text-brand-ink">数据驱动型企业</span>
diff --git a/src/app/(marketing)/about/page.test.tsx b/src/app/(marketing)/about/page.test.tsx
index 4b8d1c3..f62242e 100644
--- a/src/app/(marketing)/about/page.test.tsx
+++ b/src/app/(marketing)/about/page.test.tsx
@@ -76,24 +76,6 @@ jest.mock('@/components/ui/card', () => {
   return { Card, CardContent };
 });
 
-jest.mock('@/components/ui/flip-clock', () => {
-  const FlipClock = ({ years, months, days }: { years: number; months: number; days: number }) => (
-    <div data-testid="flip-clock">
-      {years}年 {months}月 {days}天
-    </div>
-  );
-  FlipClock.displayName = 'FlipClock';
-  return { FlipClock };
-});
-
-jest.mock('@/components/layout/page-nav', () => ({
-  PageNav: ({ items }: { items: Array<{ label: string }> }) => (
-    <nav data-testid="page-nav">
-      {items.map((item, i) => <span key={i}>{item.label}</span>)}
-    </nav>
-  ),
-}));
-
 jest.mock('date-fns', () => ({
   differenceInYears: () => 0,
   differenceInMonths: () => 0,
diff --git a/src/app/(marketing)/about/page.tsx b/src/app/(marketing)/about/page.tsx
index e9960b2..dfdd3aa 100644
--- a/src/app/(marketing)/about/page.tsx
+++ b/src/app/(marketing)/about/page.tsx
@@ -3,6 +3,8 @@ import { COMPANY_INFO } from '@/lib/constants';
 import { getPublishedItems } from '@/lib/cms/data-server';
 import { AboutClient } from './client';
 
+export const revalidate = 3600;
+
 export const metadata: Metadata = {
   title: `关于我们 - ${COMPANY_INFO.displayName}`,
   description: `了解${COMPANY_INFO.name}。专业核心团队，以结果导向的服务理念，做企业数字化转型的同行者与成长伙伴。`,
diff --git a/src/app/(marketing)/cases/[slug]/client.test.tsx b/src/app/(marketing)/cases/[slug]/client.test.tsx
new file mode 100644
index 0000000..ec5ed98
--- /dev/null
+++ b/src/app/(marketing)/cases/[slug]/client.test.tsx
@@ -0,0 +1,85 @@
+import { render, screen } from '@testing-library/react';
+import '@testing-library/jest-dom';
+import { CaseDetailClient } from './client';
+import type { ContentItem } from '@/lib/cms/types';
+
+jest.mock('next/navigation', () => ({
+  notFound: jest.fn(() => {
+    throw new Error('NEXT_NOT_FOUND');
+  }),
+}));
+
+jest.mock('@/components/sections/case-detail-page', () => ({
+  __esModule: true,
+  default: function MockCaseDetailPage({ data }: { data: unknown }) {
+    return <div data-testid="case-detail-page">{JSON.stringify(data)}</div>;
+  },
+}));
+
+function makeItem(data: Record<string, unknown>): ContentItem {
+  return {
+    id: 'item-1',
+    modelId: 'model-case-study',
+    modelCode: 'case-study',
+    title: '测试案例',
+    slug: 'test-case',
+    locale: 'zh-CN',
+    status: 'published',
+    data,
+    version: 1,
+    sortOrder: 0,
+    createdBy: 'system',
+    updatedBy: 'system',
+    createdAt: new Date().toISOString(),
+    updatedAt: new Date().toISOString(),
+  } as unknown as ContentItem;
+}
+
+function renderedData(item: ContentItem): Record<string, unknown> {
+  render(<CaseDetailClient item={item} />);
+  return JSON.parse(screen.getByTestId('case-detail-page').textContent ?? '{}');
+}
+
+describe('CaseDetailClient · CMS 载荷归一（C-1）', () => {
+  it('把缺失的 metrics / timeline / services 归一为空数组，challenge 归一为空串', () => {
+    const data = renderedData(
+      makeItem({
+        client: '测试客户',
+        industry: '制造业',
+        subtitle: '副标题',
+        solution: '方案',
+        result: '成果',
+      }),
+    );
+    expect(data.metrics).toEqual([]);
+    expect(data.timeline).toEqual([]);
+    expect(data.services).toEqual([]);
+    expect(data.challenge).toBe('');
+  });
+
+  it('完整载荷原样透传，不吞掉已有数据', () => {
+    const data = renderedData(
+      makeItem({
+        client: '测试客户',
+        industry: '制造业',
+        subtitle: '副标题',
+        challenge: '真实挑战',
+        solution: '方案',
+        result: '成果',
+        metrics: [{ value: '40%', label: '效率提升' }],
+        timeline: [{ phase: '诊断', duration: '1周', description: '描述' }],
+        services: [{ id: 'svc', title: '服务', description: '描述' }],
+        testimonial: { quote: '很好', author: '张总', role: 'CTO', company: '某企业' },
+        projectDuration: '16 周',
+        departments: ['供应链'],
+        verified: true,
+      }),
+    );
+    expect(data.challenge).toBe('真实挑战');
+    expect(data.metrics).toEqual([{ value: '40%', label: '效率提升' }]);
+    expect(data.timeline).toHaveLength(1);
+    expect(data.services).toHaveLength(1);
+    expect(data.testimonial).toEqual({ quote: '很好', author: '张总', role: 'CTO，某企业' });
+    expect(data.verified).toBe(true);
+  });
+});
diff --git a/src/app/(marketing)/cases/[slug]/client.tsx b/src/app/(marketing)/cases/[slug]/client.tsx
index 6d3f2a7..5c4f8d6 100644
--- a/src/app/(marketing)/cases/[slug]/client.tsx
+++ b/src/app/(marketing)/cases/[slug]/client.tsx
@@ -2,7 +2,6 @@
 
 import { notFound } from 'next/navigation';
 import CaseDetailPage from '@/components/sections/case-detail-page';
-import { ScrollProgress } from '@/components/ui/scroll-progress';
 import type { ContentItem } from '@/lib/cms/types';
 import type { CaseStudyData } from '@/lib/cms/types';
 
@@ -28,12 +27,12 @@ export function CaseDetailClient({ item }: CaseDetailClientProps) {
     industry: data.industry,
     title: item.title,
     subtitle: data.subtitle,
-    challenge: data.challenge,
+    challenge: data.challenge ?? '',
     solution: data.solution,
     result: data.result,
-    metrics: data.metrics,
-    timeline: data.timeline,
-    services: data.services,
+    metrics: data.metrics ?? [],
+    timeline: data.timeline ?? [],
+    services: data.services ?? [],
     testimonial: data.testimonial
       ? {
           quote: data.testimonial.quote,
@@ -48,10 +47,5 @@ export function CaseDetailClient({ item }: CaseDetailClientProps) {
     verified: data.verified,
   };
 
-  return (
-    <>
-      <ScrollProgress />
-      <CaseDetailPage data={detailData} />
-    </>
-  );
+  return <CaseDetailPage data={detailData} />;
 }
diff --git a/src/app/(marketing)/cases/[slug]/page.test.tsx b/src/app/(marketing)/cases/[slug]/page.test.tsx
index 68801a8..b218df9 100644
--- a/src/app/(marketing)/cases/[slug]/page.test.tsx
+++ b/src/app/(marketing)/cases/[slug]/page.test.tsx
@@ -123,5 +123,20 @@ describe('CaseDetailPage', () => {
 
       expect(metadata.title).toBe('案例未找到 - 睿新致远');
     });
+
+    it('survives a case published without challenge / metrics (C-1)', async () => {
+      mockedGetPublishedItemBySlug.mockResolvedValue(
+        createMockCase(
+          {},
+          { challenge: undefined, metrics: undefined },
+        ) as unknown as Awaited<ReturnType<typeof getPublishedItemBySlug>>,
+      );
+
+      await expect(
+        generateMetadata({ params: Promise.resolve({ slug: 'test-case' }) }),
+      ).resolves.toMatchObject({
+        title: '测试案例 - 制造业案例 - 睿新致远',
+      });
+    });
   });
 });
diff --git a/src/app/(marketing)/cases/[slug]/page.tsx b/src/app/(marketing)/cases/[slug]/page.tsx
index 709b99d..8bd1fec 100644
--- a/src/app/(marketing)/cases/[slug]/page.tsx
+++ b/src/app/(marketing)/cases/[slug]/page.tsx
@@ -25,10 +25,13 @@ export async function generateMetadata({ params }: CaseDetailPageProps): Promise
   }
 
   const data = item.data as unknown as CaseStudyData;
+  const challengeExcerpt = data.challenge?.substring(0, 80) ?? '';
+  const metricsSummary =
+    data.metrics?.map((m: { value: string; label: string }) => `${m.value} ${m.label}`).join('，') ?? '';
 
   return {
     title: `${item.title} - ${data.industry}案例 - ${COMPANY_INFO.displayName}`,
-    description: `${data.client}数字化转型案例：${data.challenge.substring(0, 80)}... ${data.metrics?.map((m: { value: string; label: string }) => `${m.value} ${m.label}`).join('，')}`,
+    description: `${data.client}数字化转型案例：${challengeExcerpt}... ${metricsSummary}`,
   };
 }
 
diff --git a/src/app/(marketing)/cases/cases-content-v3.tsx b/src/app/(marketing)/cases/cases-content-v3.tsx
index 6775e7b..577a8cc 100644
--- a/src/app/(marketing)/cases/cases-content-v3.tsx
+++ b/src/app/(marketing)/cases/cases-content-v3.tsx
@@ -26,7 +26,7 @@ function CaseCard({ caseItem, index }: { caseItem: CaseStudy; index: number }) {
       initial={{ opacity: 0, y: 20 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-60px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
       className="group relative block overflow-hidden border border-border-primary hover:border-border-secondary bg-bg-elevated hover:bg-bg-secondary transition-all duration-150 flex flex-col h-full"
     >
       <div className="absolute top-0 left-0 h-0 w-[2px] group-hover:h-full transition-all duration-150 origin-top bg-brand" />
@@ -41,7 +41,7 @@ function CaseCard({ caseItem, index }: { caseItem: CaseStudy; index: number }) {
           </span>
         </div>
 
-        <h3 className="text-lg sm:text-xl font-bold text-ink mb-4 leading-tight group-hover:text-brand-ink transition-colors duration-300">
+        <h3 className="text-lg sm:text-xl font-bold text-ink mb-4 leading-tight group-hover:text-brand-ink transition-colors duration-normal">
           {caseItem.title}
         </h3>
 
@@ -86,7 +86,7 @@ function CaseCard({ caseItem, index }: { caseItem: CaseStudy; index: number }) {
           </div>
           <div className="flex items-center gap-1.5 text-brand-ink text-sm font-semibold">
             查看详情
-            <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-300" />
+            <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-normal" />
           </div>
         </div>
       </div>
@@ -133,7 +133,7 @@ export default function CasesContentV3({
             <motion.div
               initial={{ opacity: 0, y: 20 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
               className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-8"
             >
               Case Studies
@@ -142,8 +142,8 @@ export default function CasesContentV3({
             <motion.h1
               initial={{ opacity: 0, y: 40 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.88] tracking-tightest mb-10 sm:mb-12 md:mb-16"
+              transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.88] tracking-tighter mb-10 sm:mb-12 md:mb-16"
             >
               <div className="block">{heroTitle1}</div>
               <div className="block mt-4 sm:mt-6">
@@ -155,7 +155,7 @@ export default function CasesContentV3({
                       style={{ transformOrigin: 'left' }}
                       initial={{ scaleX: 0 }}
                       animate={{ scaleX: 1 }}
-                      transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                      transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                     />
                   </span>
                 </span>
@@ -165,7 +165,7 @@ export default function CasesContentV3({
             <motion.p
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
               className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-12"
             >
               {heroDescriptionLines.map((line, i) => (
@@ -179,7 +179,7 @@ export default function CasesContentV3({
             <motion.div
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.7, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.7, ease: EASE_OUT }}
               className="flex flex-wrap gap-3"
             >
               <span className="px-4 py-2 text-xs font-bold text-brand-ink border border-brand/20 bg-brand/[0.05]">
@@ -212,7 +212,7 @@ export default function CasesContentV3({
                 initial={{ opacity: 0, y: 20 }}
                 whileInView={{ opacity: 1, y: 0 }}
                 viewport={{ once: true, margin: '-80px' }}
-                transition={{ duration: 0.3, delay: i * 0.06, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: i * 0.06, ease: EASE_OUT }}
                 className="text-center lg:text-left"
               >
                 <div className={`text-3xl sm:text-4xl md:text-5xl font-black tracking-tight mb-2 ${
@@ -238,7 +238,7 @@ export default function CasesContentV3({
                   initial={{ opacity: 0, y: 30 }}
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true, margin: '-80px' }}
-                  transition={{ duration: 0.3, ease: EASE_OUT }}
+                  transition={{ duration: 0.28, ease: EASE_OUT }}
                   className="lg:max-w-2xl"
                 >
                   <div className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-6">
@@ -256,7 +256,7 @@ export default function CasesContentV3({
                   initial={{ opacity: 0, y: 30 }}
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true, margin: '-80px' }}
-                  transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+                  transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
                 >
                   {/* 原生 button + aria-pressed：互斥筛选 chip 的可访问语义。
                       role="radio" 需 radiogroup 父级 + roving tabindex 才合法，
@@ -270,7 +270,7 @@ export default function CasesContentV3({
                         aria-pressed={selectedIndustry === industry.id}
                         onClick={() => setSelectedIndustry(industry.id)}
                         className={cn(
-                          'px-4 py-2 text-xs font-medium transition-all duration-300',
+                          'px-4 py-2 text-xs font-medium transition-all duration-normal',
                           selectedIndustry === industry.id
                             ? 'bg-brand text-white'
                             : 'bg-bg-secondary text-text-secondary hover:bg-bg-tertiary hover:text-ink'
@@ -306,7 +306,7 @@ export default function CasesContentV3({
             <motion.div
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, ease: EASE_OUT }}
+              transition={{ duration: 0.28, ease: EASE_OUT }}
               className="relative overflow-hidden rounded-[2rem] bg-dark-bg p-10 sm:p-12 shadow-card"
             >
               {/* 背景纹理与出口结构沿用首页共创深色卡（home-content-v15 Cases 区） */}
@@ -353,7 +353,7 @@ export default function CasesContentV3({
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="max-w-3xl"
           >
             <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95] mb-8">
diff --git a/src/app/(marketing)/contact/contact-content-v3.test.tsx b/src/app/(marketing)/contact/contact-content-v3.test.tsx
index 867d1a8..250d4c6 100644
--- a/src/app/(marketing)/contact/contact-content-v3.test.tsx
+++ b/src/app/(marketing)/contact/contact-content-v3.test.tsx
@@ -344,6 +344,18 @@ describe('ContactContentV3 - 联系表单集成测试', () => {
       const emailError = errorElements.find((el) => el.textContent?.includes('邮箱'));
       expect(emailError).toBeTruthy();
     });
+
+    // 验收 A-18：字段校验通过后 errors 仍保留该 key（值为 undefined），
+    // 「请修正以下 N 项内容」面板因此带着 N 个空条目出现并在输入过程中顶开表单布局。
+    it('should not render the error summary after valid fields are blurred', async () => {
+      await renderContactContent();
+      fillFormFields();
+      for (const id of ['name-input', 'phone-input', 'email-input', 'subject-input', 'message-input']) {
+        fireEvent.blur(screen.getByTestId(id));
+      }
+
+      expect(screen.queryByRole('alert')).not.toBeInTheDocument();
+    });
   });
 
   describe('Form Submission', () => {
diff --git a/src/app/(marketing)/contact/contact-content-v3.tsx b/src/app/(marketing)/contact/contact-content-v3.tsx
index 7918f1a..af73118 100644
--- a/src/app/(marketing)/contact/contact-content-v3.tsx
+++ b/src/app/(marketing)/contact/contact-content-v3.tsx
@@ -28,6 +28,9 @@ import { LegacyTooltip as Tooltip } from '@/components/ui/tooltip';
 
 const EASE_OUT = [0.22, 1, 0.36, 1] as const;
 
+// jitless 关掉 Zod 模块求值时的 `new Function` eval 探测：探测的 throw 被库吞掉，但浏览器仍就地点报一次 securitypolicyviolation（本站 CSP 无 'unsafe-eval'），会淹没真实违规的定位。
+z.config({ jitless: true });
+
 const contactFormSchema = z.object({
   name: z.string().min(2, '姓名至少需要2个字符'),
   phone: z.string().regex(/^1[3-9]\d{9}$/, '请输入有效的手机号码'),
@@ -108,7 +111,14 @@ function ContactFormContent({ data }: { data: ContactData }) {
   const validateField = (field: keyof ContactFormData, value: string) => {
     try {
       contactFormSchema.shape[field].parse(value);
-      setErrors((prev) => ({ ...prev, [field]: undefined }));
+      // 通过时必须删除 key：留成 undefined 会让 Object.keys(errors) 把有效字段也计入
+      // 「请修正以下 N 项内容」，虚假错误面板在输入过程中插入并顶开表单布局。
+      setErrors((prev) => {
+        if (!(field in prev)) {return prev;}
+        const next = {...prev};
+        delete next[field];
+        return next;
+      });
     } catch (error) {
       if (error instanceof z.ZodError) {
         const fieldError = error.issues[0];
@@ -235,7 +245,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
               <motion.div
                 initial={{ opacity: 0, y: 20 }}
                 animate={{ opacity: 1, y: 0 }}
-                transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
                 className="text-sm font-mono tracking-[0.15em] text-text-muted mb-8"
               >
                 {data.heroSubtitle}
@@ -245,8 +255,8 @@ function ContactFormContent({ data }: { data: ContactData }) {
             <motion.h1
               initial={{ opacity: 0, y: 40 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.88] tracking-tightest mb-10 sm:mb-12 md:mb-16"
+              transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.88] tracking-tighter mb-10 sm:mb-12 md:mb-16"
             >
               {heroTitleLines.map((line, i) => (
                 <div key={i} className={`block ${i > 0 ? 'mt-4 sm:mt-6' : ''}`}>
@@ -259,7 +269,10 @@ function ContactFormContent({ data }: { data: ContactData }) {
                           style={{ transformOrigin: 'left' }}
                           initial={{ scaleX: 0 }}
                           animate={{ scaleX: 1 }}
-                          transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                          // 装饰性标题下划线：delay 属调度不属时长，1.2s 为已批准保留值
+                          // （见 .workbuddy/memory/2026-09-04.md「delay 一律判 P2，不得判 P0；
+                          // 字面 delay >150ms 保留」），且全站另有 6 处同形同值，改一处即跨页不一致。
+                          transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                         />
                       </span>
                     </span>
@@ -274,7 +287,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
               <motion.p
                 initial={{ opacity: 0, y: 30 }}
                 animate={{ opacity: 1, y: 0 }}
-                transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
                 className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-12 sm:mb-16"
               >
                 {data.heroDescription}
@@ -293,7 +306,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
               initial={{ opacity: 0, y: 30 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-60px' }}
-              transition={{ duration: 0.3, ease: EASE_OUT }}
+              transition={{ duration: 0.28, ease: EASE_OUT }}
               className="lg:col-span-2 space-y-8"
             >
               <div>
@@ -309,7 +322,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
                       <p className="text-sm text-text-muted mb-1">{data.emailLabel || ''}</p>
                       <a
                         href={`mailto:${emailAddress}`}
-                        className="inline-flex items-center min-h-6 text-ink hover:text-brand-ink transition-colors duration-300"
+                        className="inline-flex items-center min-h-6 text-ink hover:text-brand-ink transition-colors duration-normal"
                         data-testid="email-link"
                       >
                         {emailAddress}
@@ -365,7 +378,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
               initial={{ opacity: 0, y: 30 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-60px' }}
-              transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
               className="lg:col-span-3"
             >
               <div className="relative border border-border-primary bg-bg-elevated p-6 sm:p-8 lg:p-10 h-full overflow-hidden" id="contact-form-section">
@@ -546,7 +559,7 @@ function ContactFormContent({ data }: { data: ContactData }) {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-60px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="max-w-3xl mx-auto text-center"
           >
             <div className="text-sm font-mono tracking-[0.2em] text-text-muted uppercase mb-8">
diff --git a/src/app/(marketing)/contact/page.tsx b/src/app/(marketing)/contact/page.tsx
index ba04c68..a2a3ee2 100644
--- a/src/app/(marketing)/contact/page.tsx
+++ b/src/app/(marketing)/contact/page.tsx
@@ -1,6 +1,8 @@
 import { getPublishedItems } from '@/lib/cms/data-server';
 import ContactContentV3 from './contact-content-v3';
 
+export const revalidate = 3600;
+
 export default async function ContactPage() {
   const items = await getPublishedItems('contact-page');
   const data = items[0]?.data ?? {};
diff --git a/src/app/(marketing)/home-content-v15.test.tsx b/src/app/(marketing)/home-content-v15.test.tsx
index a998e93..838569b 100644
--- a/src/app/(marketing)/home-content-v15.test.tsx
+++ b/src/app/(marketing)/home-content-v15.test.tsx
@@ -178,7 +178,7 @@ describe('HomeContentV15 - 创始人观点区（对标 Accenture CEO Quote）',
 
     expect(screen.getByTestId('founder-quote-section')).toBeInTheDocument();
     expect(screen.getByText(/数字化不是一次性项目/)).toBeInTheDocument();
-    expect(screen.getByText('Novalon 创始团队')).toBeInTheDocument();
+    expect(screen.getByText('睿新致远创始团队')).toBeInTheDocument();
   });
 });
 
diff --git a/src/app/(marketing)/home-content-v15.tsx b/src/app/(marketing)/home-content-v15.tsx
index 2d71a82..8a9a316 100644
--- a/src/app/(marketing)/home-content-v15.tsx
+++ b/src/app/(marketing)/home-content-v15.tsx
@@ -112,7 +112,7 @@ const FALLBACK_FOUNDER_QUOTE = {
   // 排版约束：3 行均势（17 / 18 / 13 字），避开"量。"孤儿字。
   // 配合 blockquote 的 whitespace-pre-line 渲染换行。
   text: '我们相信，数字化不是一次性项目，\n而是持续迭代的能力建设。\n每一份投入，都应当经得起衡量。',
-  name: 'Novalon 创始团队',
+  name: '睿新致远创始团队',
   role: '技术咨询 · 数字化转型同行者',
 };
 
@@ -255,7 +255,7 @@ function HeroSection({ heroData }: {
                 className={`group inline-flex items-center gap-2 text-sm font-medium transition-colors duration-200 py-4 ${dark ? 'text-white/70 hover:text-white' : 'text-text-secondary hover:text-ink'}`}
               >
                 {secondaryCtaLabel}
-                <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
               </a>
             )}
           </motion.div>
@@ -394,7 +394,7 @@ function NarrativeSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
         <div className="grid md:grid-cols-3 gap-px bg-border-primary">
           {NARRATIVE_ACTS_CMS.map((act) => (
             <StaggerReveal key={act.number} staggerDelay={0.05}>
-              <div className="group relative h-full bg-bg-primary p-8 sm:p-10 md:p-12 transition-colors duration-300 hover:bg-bg-secondary">
+              <div className="group relative h-full bg-bg-primary p-8 sm:p-10 md:p-12 transition-colors duration-normal hover:bg-bg-secondary">
                 <div className="flex items-start justify-between mb-8">
                   <span
                     aria-hidden="true"
@@ -403,7 +403,7 @@ function NarrativeSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
                     {act.number}
                   </span>
                 </div>
-                <h3 className="text-xl lg:text-2xl font-bold text-ink mb-4 group-hover:text-brand-ink transition-colors duration-300">
+                <h3 className="text-xl lg:text-2xl font-bold text-ink mb-4 group-hover:text-brand-ink transition-colors duration-normal">
                   {act.title}
                 </h3>
                 <p className="text-text-secondary leading-relaxed mb-8 text-sm">
@@ -415,7 +415,7 @@ function NarrativeSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
                     className="group/link inline-flex items-center min-h-6 gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors"
                   >
                     <span>{act.cta}</span>
-                    <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover/link:translate-x-1" />
+                    <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover/link:translate-x-1" />
                   </a>
                 </div>
               </div>
@@ -464,7 +464,7 @@ function InsightsSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
               className="group inline-flex items-center min-h-6 gap-3 text-ink font-semibold text-sm"
             >
               查看全部洞察
-              <ArrowRight className="w-4 h-5 transition-transform duration-300 group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
+              <ArrowRight className="w-4 h-5 transition-transform duration-normal group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
             </StaticLink>
           </ScrollReveal>
         </div>
@@ -474,7 +474,7 @@ function InsightsSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
             <StaggerReveal key={i} staggerDelay={0.05}>
               <a
                 href={insight.href}
-                className="group flex flex-col h-full bg-bg-primary p-8 sm:p-10 md:p-12 transition-colors duration-300 hover:bg-bg-secondary"
+                className="group flex flex-col h-full bg-bg-primary p-8 sm:p-10 md:p-12 transition-colors duration-normal hover:bg-bg-secondary"
               >
                 <div className="flex items-center justify-between mb-8">
                   <span className="text-[13px] tracking-[0.12em] font-semibold text-brand-ink">
@@ -484,7 +484,7 @@ function InsightsSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
                     <span className="text-xs text-text-muted tabular-nums">{insight.date}</span>
                   )}
                 </div>
-                <h3 className="text-xl lg:text-2xl font-bold text-ink mb-4 leading-[1.25] group-hover:text-brand-ink transition-colors duration-300">
+                <h3 className="text-xl lg:text-2xl font-bold text-ink mb-4 leading-[1.25] group-hover:text-brand-ink transition-colors duration-normal">
                   {insight.title}
                 </h3>
                 <p className="text-text-secondary leading-relaxed mb-8 text-sm flex-1">
@@ -493,7 +493,7 @@ function InsightsSection({ pageCopy }: { pageCopy?: HomePageCopy | null }) {
                 <div className="pt-6 border-t border-border-primary">
                   <span className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors">
                     了解详情
-                    <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                    <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
                   </span>
                 </div>
               </a>
@@ -543,7 +543,7 @@ function ServicesSection({ services, pageCopy }: { services?: Record<string, any
                   </div>
                   <p className="text-text-secondary leading-relaxed mb-8 text-sm">{service.desc}</p>
                   <div className="flex flex-wrap gap-2 mb-8">
-                    {service.highlights.map((h: string, j: number) => (
+                    {(Array.isArray(service.highlights) ? service.highlights : []).map((h: string, j: number) => (
                       <span key={j} className="px-3 py-1.5 text-xs text-text-muted border border-border-primary font-medium">
                         {h}
                       </span>
@@ -565,7 +565,7 @@ function ServicesSection({ services, pageCopy }: { services?: Record<string, any
                   <div className="mt-auto pt-2">
                     <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors">
                       <span>了解详情</span>
-                      <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                      <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
                     </div>
                   </div>
                 </div>
@@ -728,7 +728,7 @@ function CasesSection({ cases, pageCopy }: { cases?: Record<string, any>[]; page
               className="group inline-flex items-center min-h-6 gap-3 text-ink font-semibold text-sm"
             >
               查看全部案例
-              <ArrowRight className="w-4 h-5 transition-transform duration-300 group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
+              <ArrowRight className="w-4 h-5 transition-transform duration-normal group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
             </StaticLink>
           </ScrollReveal>
         </div>
@@ -780,7 +780,7 @@ function CasesSection({ cases, pageCopy }: { cases?: Record<string, any>[]; page
                   <div className="mt-auto pt-6 border-t border-white/10 flex items-center justify-between gap-6 flex-wrap">
                     <span className="inline-flex items-center gap-2 text-sm font-semibold text-white group-hover:text-brand-light transition-colors">
                       查看完整案例
-                      <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                      <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
                     </span>
                   </div>
                 </div>
@@ -825,7 +825,7 @@ function CasesSection({ cases, pageCopy }: { cases?: Record<string, any>[]; page
                   </h3>
 
                   <div className="grid grid-cols-3 gap-4 mb-8">
-                    {caseItem.metrics.slice(0, 3).map((metric: Record<string, any>, j: number) => (
+                    {(Array.isArray(caseItem.metrics) ? caseItem.metrics : []).slice(0, 3).map((metric: Record<string, any>, j: number) => (
                       <div key={j}>
                         <div className={cn(
                           'text-xl sm:text-2xl font-black leading-none mb-2',
@@ -843,7 +843,7 @@ function CasesSection({ cases, pageCopy }: { cases?: Record<string, any>[]; page
                   <div className="mt-auto pt-4 border-t border-border-primary">
                     <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors">
                       <span>了解详情</span>
-                      <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                      <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
                     </div>
                   </div>
                 </a>
@@ -884,7 +884,7 @@ function NewsSection({ news, pageCopy }: { news?: NewsItem[]; pageCopy?: HomePag
               className="group inline-flex items-center min-h-6 gap-3 text-ink font-semibold text-sm"
             >
               {ctaLabel}
-              <ArrowRight className="w-4 h-5 transition-transform duration-300 group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
+              <ArrowRight className="w-4 h-5 transition-transform duration-normal group-hover:translate-x-2 text-text-secondary group-hover:text-brand-ink" />
             </StaticLink>
           </ScrollReveal>
         </div>
@@ -905,7 +905,7 @@ function NewsSection({ news, pageCopy }: { news?: NewsItem[]; pageCopy?: HomePag
                     {item.date}
                   </span>
                 </div>
-                <h3 className="text-lg lg:text-xl font-bold text-ink mb-4 leading-[1.3] line-clamp-2 group-hover:text-brand-ink transition-colors duration-300">
+                <h3 className="text-lg lg:text-xl font-bold text-ink mb-4 leading-[1.3] line-clamp-2 group-hover:text-brand-ink transition-colors duration-normal">
                   {item.title}
                 </h3>
                 <p className="text-sm text-text-secondary leading-relaxed mb-6 line-clamp-2 flex-1">
@@ -914,7 +914,7 @@ function NewsSection({ news, pageCopy }: { news?: NewsItem[]; pageCopy?: HomePag
                 <div className="pt-4 border-t border-border-primary">
                   <span className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors">
                     阅读全文
-                    <ArrowRight className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-1" />
+                    <ArrowRight className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-1" />
                   </span>
                 </div>
               </StaticLink>
diff --git a/src/app/(marketing)/methodology/methodology-content.tsx b/src/app/(marketing)/methodology/methodology-content.tsx
index 980ae69..c2c3e2f 100644
--- a/src/app/(marketing)/methodology/methodology-content.tsx
+++ b/src/app/(marketing)/methodology/methodology-content.tsx
@@ -35,7 +35,7 @@ export function MethodologyContent({ data }: MethodologyContentProps) {
             <motion.div
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
               className="inline-flex items-center gap-2 px-3 py-1.5 text-xs font-bold text-brand-ink bg-brand/10 mb-8"
             >
               {heroSubtitle}
@@ -43,7 +43,7 @@ export function MethodologyContent({ data }: MethodologyContentProps) {
             <motion.h1
               initial={{ opacity: 0, y: 40 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
               className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-bold text-ink leading-[1.05] tracking-tight mb-8 whitespace-pre-line"
             >
               {heroTitle}
@@ -51,7 +51,7 @@ export function MethodologyContent({ data }: MethodologyContentProps) {
             <motion.p
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.35, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.35, ease: EASE_OUT }}
               className="text-lg sm:text-xl text-text-secondary max-w-2xl leading-relaxed"
             >
               {heroDescription}
@@ -85,7 +85,7 @@ export function MethodologyContent({ data }: MethodologyContentProps) {
                 {phases.map((phase, idx) => (
                   <motion.div
                     key={phase.title || idx}
-                    className="relative overflow-hidden bg-bg-elevated border border-border-primary transition-all duration-300 hover:-translate-y-1 hover:shadow-lg"
+                    className="relative overflow-hidden bg-bg-elevated border border-border-primary transition-all duration-normal hover:-translate-y-1 hover:shadow-lg"
                   >
                     <div className="p-7 md:p-8">
                       <div className="w-11 h-11 rounded-full flex items-center justify-center mb-5 text-base font-bold bg-brand/10 text-brand-ink">
diff --git a/src/app/(marketing)/news/[slug]/NewsDetailClient.tsx b/src/app/(marketing)/news/[slug]/NewsDetailClient.tsx
index edc61d1..1c7d556 100644
--- a/src/app/(marketing)/news/[slug]/NewsDetailClient.tsx
+++ b/src/app/(marketing)/news/[slug]/NewsDetailClient.tsx
@@ -31,7 +31,7 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
         <div className="container-wide">
           {/* Breadcrumb */}
           <nav aria-label="breadcrumb" className="flex items-center gap-2 text-sm text-[var(--color-text-muted)] mb-8">
-            <StaticLink href="/news" className="hover:text-[var(--color-brand)] transition-colors duration-300">
+            <StaticLink href="/news" className="hover:text-brand-ink transition-colors duration-normal">
               新闻动态
             </StaticLink>
             <span>/</span>
@@ -41,10 +41,12 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
           <motion.div
             initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, ease: EASE }}
+            transition={{ duration: 0.28, ease: EASE }}
             className="max-w-4xl"
           >
-            <Badge className="mb-4 bg-[var(--color-brand-bg)] text-[var(--color-brand)] hover:bg-[var(--color-brand)]/20 border-0">
+            {/* hover 底色用 12% 软红令牌而非 /20：半透明底叠加页面底色后，
+                浅色主题下 text-brand-ink 实测 4.18:1（< AA 4.5:1），12% 为 4.80:1；深色分别 6.22 / 6.60。 */}
+            <Badge className="mb-4 bg-[var(--color-brand-bg)] text-brand-ink hover:bg-brand-soft border-0">
               {news.category}
             </Badge>
             <h1 className="text-3xl sm:text-4xl lg:text-5xl font-semibold text-[var(--color-text-primary)] mb-5 tracking-tight leading-tight">
@@ -68,7 +70,7 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
             initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true }}
-            transition={{ duration: 0.3, ease: EASE }}
+            transition={{ duration: 0.28, ease: EASE }}
             className="max-w-4xl"
           >
             {/* Featured Image */}
@@ -82,7 +84,7 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
               </div>
             ) : (
               <div className="aspect-video bg-gradient-to-br from-[var(--color-brand-bg)] to-[var(--color-bg-tertiary)] rounded-xl mb-10 flex items-center justify-center">
-                <Newspaper className="w-16 h-16 text-[var(--color-brand)]/30" />
+                <Newspaper className="w-16 h-16 text-brand-ink/30" />
               </div>
             )}
 
@@ -105,7 +107,7 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
                 <div className="grid md:grid-cols-3 gap-6">
                   {relatedNews.map((related) => (
                     <StaticLink key={related.id} href={`/news/${related.id}`}>
-                      <Card className="overflow-hidden group h-full transition-all duration-300 hover:-translate-y-1 hover:shadow-lg">
+                      <Card className="overflow-hidden group h-full transition-all duration-normal hover:-translate-y-1 hover:shadow-lg">
                         <div className="aspect-video overflow-hidden">
                           {related.image ? (
                             <img
@@ -115,13 +117,13 @@ export function NewsDetailClient({ news }: NewsDetailClientProps) {
                             />
                           ) : (
                             <div className="w-full h-full bg-gradient-to-br from-[var(--color-brand-bg)] to-[var(--color-bg-tertiary)] flex items-center justify-center">
-                              <Newspaper className="w-8 h-8 text-[var(--color-brand)]/30" />
+                              <Newspaper className="w-8 h-8 text-brand-ink/30" />
                             </div>
                           )}
                         </div>
                         <div className="p-4">
                           <Badge variant="secondary" className="mb-2 text-xs">{related.category}</Badge>
-                          <h3 className="text-base font-semibold text-[var(--color-text-primary)] mb-1 line-clamp-2 group-hover:text-[var(--color-brand)] transition-colors duration-300">
+                          <h3 className="text-base font-semibold text-[var(--color-text-primary)] mb-1 line-clamp-2 group-hover:text-brand-ink transition-colors duration-normal">
                             {related.title}
                           </h3>
                           <p className="text-sm text-[var(--color-text-muted)] line-clamp-2 leading-relaxed">{related.excerpt}</p>
diff --git a/src/app/(marketing)/news/news-content-v3.tsx b/src/app/(marketing)/news/news-content-v3.tsx
index c7c734f..a09a6ff 100644
--- a/src/app/(marketing)/news/news-content-v3.tsx
+++ b/src/app/(marketing)/news/news-content-v3.tsx
@@ -24,7 +24,7 @@ function NewsCard({ newsItem, index }: { newsItem: NewsItem; index: number }) {
       initial={{ opacity: 0, y: 20 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-80px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
     >
       <StaticLink
         href={`/news/${newsItem.id}`}
@@ -58,7 +58,7 @@ function NewsCard({ newsItem, index }: { newsItem: NewsItem; index: number }) {
             </div>
           </div>
 
-          <h2 className="text-lg sm:text-xl font-semibold text-ink mb-3 line-clamp-2 group-hover:text-brand-ink transition-colors duration-300 leading-snug">
+          <h2 className="text-lg sm:text-xl font-semibold text-ink mb-3 line-clamp-2 group-hover:text-brand-ink transition-colors duration-normal leading-snug">
             {newsItem.title}
           </h2>
 
@@ -68,7 +68,7 @@ function NewsCard({ newsItem, index }: { newsItem: NewsItem; index: number }) {
 
           <div className="flex items-center text-brand-ink text-sm font-medium">
             阅读全文
-            <ArrowRight className="ml-2 w-4 h-4 group-hover:translate-x-1 transition-transform duration-300" />
+            <ArrowRight className="ml-2 w-4 h-4 group-hover:translate-x-1 transition-transform duration-normal" />
           </div>
         </div>
       </StaticLink>
diff --git a/src/app/(marketing)/news/news-detail-content-v3.tsx b/src/app/(marketing)/news/news-detail-content-v3.tsx
index ee245c0..539aedc 100644
--- a/src/app/(marketing)/news/news-detail-content-v3.tsx
+++ b/src/app/(marketing)/news/news-detail-content-v3.tsx
@@ -16,7 +16,7 @@ function RelatedNewsCard({ news, index }: { news: NewsItem; index: number }) {
       initial={{ opacity: 0, y: 20 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-80px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
     >
       <a
         href={`/news/${news.id}`}
@@ -42,7 +42,7 @@ function RelatedNewsCard({ news, index }: { news: NewsItem; index: number }) {
           <Badge variant="outline" className="mb-3 text-xs border-brand/30 text-brand-ink">
             {news.category}
           </Badge>
-          <h3 className="text-base font-semibold text-ink mb-2 line-clamp-2 group-hover:text-brand-ink transition-colors duration-300 leading-snug">
+          <h3 className="text-base font-semibold text-ink mb-2 line-clamp-2 group-hover:text-brand-ink transition-colors duration-normal leading-snug">
             {news.title}
           </h3>
           <p className="text-sm text-text-secondary line-clamp-2 leading-relaxed">{news.excerpt}</p>
@@ -66,7 +66,7 @@ export default function NewsDetailContentV3({ news, relatedNews = [] }: NewsDeta
         <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10 relative z-10">
           <ScrollReveal>
             <nav aria-label="breadcrumb" className="flex items-center gap-2 text-sm text-text-muted mb-8 sm:mb-10">
-              <StaticLink href="/news" className="hover:text-brand-ink transition-colors duration-300">
+              <StaticLink href="/news" className="hover:text-brand-ink transition-colors duration-normal">
                 新闻动态
               </StaticLink>
               <span>/</span>
@@ -150,7 +150,7 @@ export default function NewsDetailContentV3({ news, relatedNews = [] }: NewsDeta
             <div className="mt-16 sm:mt-20 flex flex-col sm:flex-row justify-center gap-4">
               <StaticLink
                 href="/news"
-                className="inline-flex items-center justify-center gap-2 px-8 py-4 font-medium text-base text-ink border border-border-primary rounded-full hover:border-border-secondary hover:bg-bg-secondary transition-all duration-300"
+                className="inline-flex items-center justify-center gap-2 px-8 py-4 font-medium text-base text-ink border border-border-primary rounded-full hover:border-border-secondary hover:bg-bg-secondary transition-all duration-normal"
               >
                 <ArrowLeft className="w-4 h-4" />
                 返回新闻列表
diff --git a/src/app/(marketing)/products/erp-upgrade/erp-upgrade-content-v2.tsx b/src/app/(marketing)/products/erp-upgrade/erp-upgrade-content-v2.tsx
index 55cba13..61c8d93 100644
--- a/src/app/(marketing)/products/erp-upgrade/erp-upgrade-content-v2.tsx
+++ b/src/app/(marketing)/products/erp-upgrade/erp-upgrade-content-v2.tsx
@@ -222,7 +222,7 @@ export default function ErpUpgradeContentV2({ item }: ErpUpgradeContentV2Props)
                 key={index}
                 className="text-center p-8 border border-border-primary bg-bg-elevated hover:border-brand/30 hover:bg-bg-secondary transition-all duration-150 group"
               >
-                <div className="w-12 h-12 mx-auto mb-6 bg-brand/10 border border-brand/20 flex items-center justify-center group-hover:scale-110 transition-transform duration-300">
+                <div className="w-12 h-12 mx-auto mb-6 bg-brand/10 border border-brand/20 flex items-center justify-center group-hover:scale-110 transition-transform duration-normal">
                   <item.icon className="w-6 h-6 text-brand-ink" />
                 </div>
                 <div className="text-4xl md:text-5xl font-bold text-brand-ink mb-3">{item.value}</div>
@@ -296,8 +296,10 @@ export default function ErpUpgradeContentV2({ item }: ErpUpgradeContentV2Props)
             >
               {UPGRADE_PROCESS.map((item, index) => (
                 <div key={index} className="relative">
-                  {/* 大号步骤数字是水印装饰（两主题下都是 10% 透明度），步骤信息由下方标题/描述承载 */}
-                  <div aria-hidden="true" className="text-6xl font-bold text-brand-ink/10 mb-4">{item.step}</div>
+                  {/* 大号步骤数字仍对读屏隐藏（步骤信息由下方标题/描述承载），但透明度取 /80：
+                      10% 在两主题下合成后均约 1.07:1，被 axe color-contrast 判 serious（验收 §8-⑤ 实测）；
+                      /80 与 about 页步骤号同一档位（about-content-v4.tsx:172），实测见 docs/acceptance/2026-09-21-axe/ */}
+                  <div aria-hidden="true" className="text-6xl font-bold text-brand-ink/80 mb-4">{item.step}</div>
                   <h3 className="text-xl font-semibold mb-3 text-ink">{item.title}</h3>
                   <p className="text-text-secondary mb-4 leading-relaxed">{item.desc}</p>
                   <div className="inline-flex items-center gap-2 text-sm text-brand-ink">
@@ -360,7 +362,7 @@ export default function ErpUpgradeContentV2({ item }: ErpUpgradeContentV2Props)
                   key={index}
                   className="group text-center p-8 border border-border-primary bg-bg-elevated hover:border-brand/30 hover:bg-bg-secondary transition-all duration-150 min-w-[200px]"
                 >
-                  <div className="w-16 h-16 mx-auto mb-4 bg-brand/10 border border-brand/20 flex items-center justify-center group-hover:scale-110 transition-transform duration-300">
+                  <div className="w-16 h-16 mx-auto mb-4 bg-brand/10 border border-brand/20 flex items-center justify-center group-hover:scale-110 transition-transform duration-normal">
                     <Shield className="w-8 h-8 text-brand-ink" />
                   </div>
                   <h4 className="text-base font-semibold mb-1 text-ink">{cert.name}</h4>
diff --git a/src/app/(marketing)/products/erp-upgrade/page.tsx b/src/app/(marketing)/products/erp-upgrade/page.tsx
index baffaa1..a5c4ef2 100644
--- a/src/app/(marketing)/products/erp-upgrade/page.tsx
+++ b/src/app/(marketing)/products/erp-upgrade/page.tsx
@@ -3,6 +3,8 @@ import { getProductBySlug } from '@/lib/cms/data-server';
 import { COMPANY_INFO } from '@/lib/constants';
 import ErpUpgradeContentV2 from './erp-upgrade-content-v2';
 
+export const revalidate = 3600;
+
 export const metadata: Metadata = {
   title: `ERP升级专题 - 企业数字化转型 | ${COMPANY_INFO.displayName}`,
   description: '睿新ERP升级专题，为企业提供全方位数字化转型解决方案，解决数据孤岛、效率低下、安全隐患等痛点。',
diff --git a/src/app/(marketing)/products/product-detail-content-v3.tsx b/src/app/(marketing)/products/product-detail-content-v3.tsx
index 75ba655..197bccd 100644
--- a/src/app/(marketing)/products/product-detail-content-v3.tsx
+++ b/src/app/(marketing)/products/product-detail-content-v3.tsx
@@ -33,7 +33,7 @@ function DetailHero({ product }: DetailHeroProps) {
         <motion.div
           initial={{ opacity: 0, y: 30 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="flex items-center gap-4 mb-8"
         >
           <div className="w-16 h-16 rounded-2xl bg-brand-soft flex items-center justify-center text-brand-ink">
@@ -61,7 +61,7 @@ function DetailHero({ product }: DetailHeroProps) {
         <motion.h1
           initial={{ opacity: 0, y: 50 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
           className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-bold text-ink leading-tight tracking-tighter mb-6 sm:mb-8 max-w-4xl"
         >
           {product.title}
@@ -70,7 +70,7 @@ function DetailHero({ product }: DetailHeroProps) {
         <motion.p
           initial={{ opacity: 0, y: 40 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.3, ease: EASE_OUT }}
           className="text-xl lg:text-2xl text-text-secondary max-w-3xl leading-relaxed mb-8"
         >
           {product.description}
@@ -79,7 +79,7 @@ function DetailHero({ product }: DetailHeroProps) {
         <motion.p
           initial={{ opacity: 0, y: 40 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.4, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.4, ease: EASE_OUT }}
           className="text-lg text-text-muted max-w-3xl leading-relaxed mb-12"
         >
           {product.overview}
@@ -88,7 +88,7 @@ function DetailHero({ product }: DetailHeroProps) {
         <motion.div
           initial={{ opacity: 0, y: 40 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.55, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.55, ease: EASE_OUT }}
           className="flex flex-wrap gap-6"
         >
           <CTAButton href="/contact" dataTestId="product-detail-hero-primary">
@@ -175,8 +175,8 @@ function BenefitsSection({ benefits }: BenefitsSectionProps) {
             </p>
           </ScrollReveal>
 
-          <div className="space-y-px bg-border-primary">
-            <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+          <div>
+            <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="space-y-px bg-border-primary">
               {benefits.map((benefit, idx) => (
                 <div
                   key={idx}
@@ -228,8 +228,8 @@ function ProcessSection({ process }: ProcessSectionProps) {
         </ScrollReveal>
 
         <div className="relative">
-          <div className="grid md:grid-cols-2 lg:grid-cols-4 gap-px bg-border-primary">
-            <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+          <div>
+            <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="grid md:grid-cols-2 lg:grid-cols-4 gap-px bg-border-primary">
               {process.map((step, idx) => (
                 <div
                   key={idx}
diff --git a/src/app/(marketing)/products/products-content-v3.test.tsx b/src/app/(marketing)/products/products-content-v3.test.tsx
index b14e130..5e14d8f 100644
--- a/src/app/(marketing)/products/products-content-v3.test.tsx
+++ b/src/app/(marketing)/products/products-content-v3.test.tsx
@@ -51,8 +51,8 @@ jest.mock('@/components/ui/scroll-reveal', () => ({
   ScrollReveal: ({ children, className }: any) => (
     <div data-testid="scroll-reveal" className={className}>{children}</div>
   ),
-  StaggerReveal: ({ children, className }: any) => (
-    <div data-testid="stagger-reveal" className={className}>{children}</div>
+  StaggerReveal: ({ children, className, role }: any) => (
+    <div data-testid="stagger-reveal" className={className} role={role}>{children}</div>
   ),
 }));
 
@@ -303,6 +303,20 @@ describe('ProductsContentV3 - 产品列表页集成测试', () => {
     expect(biCard).toHaveAttribute('data-bento-size', 'wide');
   });
 
+  // 验收 B-8：/products 上 7 个 role="listitem" 无 list 父级，axe 报 critical aria-required-parent
+  it('every bento listitem is owned by a role="list" container', async () => {
+    const { default: ProductsContentV3 } = await import('./products-content-v3');
+    const { container } = render(<ProductsContentV3 products={allMockProducts} />);
+
+    const items = Array.from(container.querySelectorAll('[role="listitem"]'));
+    const lists = Array.from(container.querySelectorAll('[role="list"]'));
+    expect(items.length).toBeGreaterThan(0);
+    expect(lists.length).toBeGreaterThanOrEqual(2);
+    items.forEach((item) => {
+      expect(item.closest('[role="list"]')).not.toBeNull();
+    });
+  });
+
   it('should render suite combos section', async () => {
     const { default: ProductsContentV3 } = await import('./products-content-v3');
     render(<ProductsContentV3 products={allMockProducts} />);
diff --git a/src/app/(marketing)/products/products-content-v3.tsx b/src/app/(marketing)/products/products-content-v3.tsx
index b421a3f..43b5ca3 100644
--- a/src/app/(marketing)/products/products-content-v3.tsx
+++ b/src/app/(marketing)/products/products-content-v3.tsx
@@ -6,7 +6,7 @@ import { EASE_OUT } from '@/components/ui/page-decoration';
 import { StaticLink } from '@/components/ui/static-link';
 import { CTAButton } from '@/components/ui/cta-button';
 import { MetricsBasisNote } from '@/components/ui/metrics-basis-note';
-import { BentoItem } from '@/components/sections/bento-grid';
+import { BentoGrid, BentoItem } from '@/components/sections/bento-grid';
 import { ArrowRight, ArrowUpRight, Package, Cpu, TrendingUp, Users, Settings, FileText } from 'lucide-react';
 import type { Product } from '@/lib/constants/products';
 import { CTA_LABELS } from '@/lib/constants/cta-labels';
@@ -43,8 +43,8 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.h1
             initial={{ opacity: 0, y: 70 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
-            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tightest mb-8 sm:mb-10 md:mb-12"
+            transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
+            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tighter mb-8 sm:mb-10 md:mb-12"
           >
             <div className="block">{heroTitle1}</div>
             <div className="block mt-5">
@@ -55,7 +55,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
                   style={{ transformOrigin: 'left' }}
                   initial={{ scaleX: 0 }}
                   animate={{ scaleX: 1 }}
-                  transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                  transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                 />
               </span>
             </div>
@@ -65,7 +65,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.p
             initial={{ opacity: 0, y: 50 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.45, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.45, ease: EASE_OUT }}
             className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-10 sm:mb-12"
           >
             {heroDescriptionLines.map((line, i) => (
@@ -79,7 +79,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.div
             initial={{ opacity: 0, y: 50 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.6, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.6, ease: EASE_OUT }}
             className="flex flex-wrap gap-6"
           >
             <CTAButton href="/contact" dataTestId="products-hero-primary">
@@ -107,12 +107,12 @@ function ProductCard({ product, size = 'small' }: { product: Product; size?: 'la
         initial={{ opacity: 0, y: 20 }}
         whileInView={{ opacity: 1, y: 0 }}
         viewport={{ once: true, margin: '-60px' }}
-        transition={{ duration: 0.3, ease: EASE_OUT }}
+        transition={{ duration: 0.28, ease: EASE_OUT }}
         className="h-full"
       >
       <StaticLink
         href={linkHref}
-        className="group relative block overflow-hidden border border-border-primary hover:border-border-secondary bg-bg-elevated hover:bg-bg-secondary hover:-translate-y-1 hover:shadow-lg transition-all duration-300 flex flex-col h-full after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-300 group-hover:after:scale-x-100"
+        className="group relative block overflow-hidden border border-border-primary hover:border-border-secondary bg-bg-elevated hover:bg-bg-secondary hover:-translate-y-1 hover:shadow-lg transition-all duration-normal flex flex-col h-full after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-normal group-hover:after:scale-x-100"
         {...(isExternal ? { target: '_blank', rel: 'noopener noreferrer' } : {})}
       >
         <div className={cn('p-6 sm:p-7 lg:p-8 flex flex-col flex-1', isLarge && 'lg:p-10')}>
@@ -246,7 +246,7 @@ function EnterpriseProductsSection({ products }: { products: Product[] }) {
           </ScrollReveal>
         </div>
 
-        <div className="grid md:grid-cols-2 lg:grid-cols-4 gap-px bg-border-primary">
+        <BentoGrid>
           {enterpriseProducts.map((product) => (
             <ProductCard
               key={product.id}
@@ -254,7 +254,7 @@ function EnterpriseProductsSection({ products }: { products: Product[] }) {
               size={product.id === 'erp' ? 'large' : product.id === 'bi' ? 'wide' : 'small'}
             />
           ))}
-        </div>
+        </BentoGrid>
       </div>
     </section>
   );
@@ -289,6 +289,7 @@ function SpecializedProductsSection({ products }: { products: Product[] }) {
 
         <StaggerReveal
           className="grid md:grid-cols-2 lg:grid-cols-3 gap-px bg-border-primary"
+          role="list"
           staggerDelay={0.05}
           delayChildren={0.05}
         >
diff --git a/src/app/(marketing)/products/standalone/[id]/client.tsx b/src/app/(marketing)/products/standalone/[id]/client.tsx
index 8bb2923..15597f0 100644
--- a/src/app/(marketing)/products/standalone/[id]/client.tsx
+++ b/src/app/(marketing)/products/standalone/[id]/client.tsx
@@ -75,7 +75,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
               initial={{ opacity: 0, y: 20 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true }}
-              transition={{ duration: 0.3 }}
+              transition={{ duration: 0.28 }}
               className="max-w-3xl mx-auto text-center"
             >
               <div className="mb-6 flex justify-center">
@@ -97,7 +97,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                       initial={{ opacity: 0, y: 10 }}
                       whileInView={{ opacity: 1, y: 0 }}
                       viewport={{ once: true }}
-                      transition={{ duration: 0.3, delay: index * 0.06 }}
+                      transition={{ duration: 0.28, delay: index * 0.06 }}
                       className="rounded-lg border border-border-primary bg-bg-secondary p-4"
                     >
                       <div className="mb-2 flex h-8 w-8 items-center justify-center rounded-lg bg-bg-primary text-text-muted">
@@ -134,7 +134,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                   initial={{ opacity: 0, x: -20 }}
                   whileInView={{ opacity: 1, x: 0 }}
                   viewport={{ once: true }}
-                  transition={{ duration: 0.3 }}
+                  transition={{ duration: 0.28 }}
                 >
                   <h2 className="mb-6 text-2xl font-bold text-ink">核心能力</h2>
                   {features.length > 0 ? (
@@ -145,7 +145,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                           initial={{ opacity: 0, x: -10 }}
                           whileInView={{ opacity: 1, x: 0 }}
                           viewport={{ once: true }}
-                          transition={{ duration: 0.3, delay: index * 0.05 }}
+                          transition={{ duration: 0.28, delay: index * 0.05 }}
                           className="flex items-start gap-3"
                         >
                           <CheckCircle2 className="mt-0.5 h-5 w-5 shrink-0 text-brand-ink" />
@@ -168,7 +168,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                   initial={{ opacity: 0, y: 20 }}
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true }}
-                  transition={{ duration: 0.3 }}
+                  transition={{ duration: 0.28 }}
                   className="mb-10"
                 >
                   <div className="flex items-center gap-3 mb-4">
@@ -189,7 +189,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                       initial={{ opacity: 0, y: 10 }}
                       whileInView={{ opacity: 1, y: 0 }}
                       viewport={{ once: true }}
-                      transition={{ duration: 0.3, delay: index * 0.05 }}
+                      transition={{ duration: 0.28, delay: index * 0.05 }}
                       className="rounded-lg border border-border-primary bg-bg-primary p-5"
                     >
                       <div className="mb-2 text-sm text-text-muted">{param.name}</div>
@@ -211,7 +211,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                   initial={{ opacity: 0, y: 20 }}
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true }}
-                  transition={{ duration: 0.3 }}
+                  transition={{ duration: 0.28 }}
                   className="mb-10"
                 >
                   <div className="flex items-center gap-3 mb-4">
@@ -232,7 +232,7 @@ export function StandaloneProductClient({ item }: StandaloneProductClientProps)
                       initial={{ opacity: 0, x: -10 }}
                       whileInView={{ opacity: 1, x: 0 }}
                       viewport={{ once: true }}
-                      transition={{ duration: 0.3, delay: index * 0.05 }}
+                      transition={{ duration: 0.28, delay: index * 0.05 }}
                       className="flex flex-col sm:flex-row sm:items-center justify-between gap-4 rounded-lg border border-border-primary bg-bg-secondary p-5"
                     >
                       <div className="flex items-start gap-4">
diff --git a/src/app/(marketing)/services/service-detail-content-v4.tsx b/src/app/(marketing)/services/service-detail-content-v4.tsx
index ca7e5b1..3b19d19 100644
--- a/src/app/(marketing)/services/service-detail-content-v4.tsx
+++ b/src/app/(marketing)/services/service-detail-content-v4.tsx
@@ -1,19 +1,36 @@
-'use client';
+"use client";
 
-import { motion } from 'framer-motion';
-import { CTAButton } from '@/components/ui/cta-button';
-import { CTA_LABELS } from '@/lib/constants/cta-labels';
-import { CheckCircle2, Zap, Clock, Users, Award, TrendingUp, Shield } from 'lucide-react';
-import type { LucideIcon } from 'lucide-react';
-import type { Service } from '@/lib/constants/services';
-import { L3EmptyFallback, CaseStudiesSection } from '@/components/detail';
+import { motion } from "framer-motion";
+import { CTAButton } from "@/components/ui/cta-button";
+import { CTA_LABELS } from "@/lib/constants/cta-labels";
+import {
+  CheckCircle2,
+  Zap,
+  Clock,
+  Users,
+  Award,
+  TrendingUp,
+  Shield,
+} from "lucide-react";
+import type { LucideIcon } from "lucide-react";
+import type { Service } from "@/lib/constants/services";
+import { L3EmptyFallback, CaseStudiesSection } from "@/components/detail";
 
 const EASE_OUT = [0.22, 1, 0.36, 1] as const;
 
-const FEATURE_ICONS: LucideIcon[] = [Zap, Clock, Users, Award, TrendingUp, Shield];
+const FEATURE_ICONS: LucideIcon[] = [
+  Zap,
+  Clock,
+  Users,
+  Award,
+  TrendingUp,
+  Shield,
+];
 
 function DetailHero({ service }: { service: Service }) {
-  const firstBenefit = service.benefits?.[0] || '效率提升 40%';
+  // N-30：原先无数据时兜底成编造的「效率提升 40%」，属「零编造」硬违规——
+  // 页面上出现的具体百分比必须来自数据本身，没有就不渲染这一行。
+  const firstBenefit = service.benefits?.[0];
 
   return (
     <section className="relative overflow-hidden bg-bg-primary">
@@ -22,20 +39,20 @@ function DetailHero({ service }: { service: Service }) {
           <motion.h1
             initial={{ opacity: 0, y: 40 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-black text-ink leading-[0.95] tracking-tightest mb-6 sm:mb-8"
+            transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-black text-ink leading-[0.95] tracking-tighter mb-6 sm:mb-8"
           >
             <div className="block">{service.title}</div>
-            <div className="block mt-4 sm:mt-6">
+            <div className={firstBenefit ? "block mt-4 sm:mt-6" : "hidden"}>
               <span className="relative inline-block">
                 <span className="relative text-brand-ink font-black">
                   {firstBenefit}
                   <motion.span
                     className="absolute -bottom-2 left-0 w-full h-[3px] bg-brand"
-                    style={{ transformOrigin: 'left' }}
+                    style={{ transformOrigin: "left" }}
                     initial={{ scaleX: 0 }}
                     animate={{ scaleX: 1 }}
-                    transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                    transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                   />
                 </span>
               </span>
@@ -45,7 +62,7 @@ function DetailHero({ service }: { service: Service }) {
           <motion.p
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
             className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-10 sm:mb-12"
           >
             {service.description}
@@ -54,13 +71,21 @@ function DetailHero({ service }: { service: Service }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.7, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.7, ease: EASE_OUT }}
             className="flex flex-col sm:flex-row gap-4 sm:gap-6"
           >
-            <CTAButton href="/contact" dataTestId="service-detail-hero-primary" className="min-h-[52px]">
+            <CTAButton
+              href="/contact"
+              dataTestId="service-detail-hero-primary"
+              className="min-h-[52px]"
+            >
               {CTA_LABELS.consult}
             </CTAButton>
-            <CTAButton href="#cases" variant="secondary" className="min-h-[52px] touch-manipulation">
+            <CTAButton
+              href="#cases"
+              variant="secondary"
+              className="min-h-[52px] touch-manipulation"
+            >
               查看案例
             </CTAButton>
           </motion.div>
@@ -81,8 +106,8 @@ function OverviewSection({ service }: { service: Service }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
-            viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            viewport={{ once: true, margin: "-80px" }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="lg:col-span-5"
           >
             <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95]">
@@ -93,8 +118,8 @@ function OverviewSection({ service }: { service: Service }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
-            viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+            viewport={{ once: true, margin: "-80px" }}
+            transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
             className="lg:col-span-7"
           >
             <p className="text-text-secondary leading-relaxed text-lg mb-8">
@@ -125,8 +150,8 @@ function FeaturesSection({ service }: { service: Service }) {
         <motion.div
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
-          viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          viewport={{ once: true, margin: "-80px" }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl mb-16 sm:mb-20 md:mb-24"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95]">
@@ -139,7 +164,7 @@ function FeaturesSection({ service }: { service: Service }) {
 
         <div className="grid md:grid-cols-2 lg:grid-cols-3 gap-px bg-border-primary">
           {service.features.map((feature, index) => {
-            const [title, desc] = feature.split('：');
+            const [title, desc] = feature.split("：");
             const Icon = FEATURE_ICONS[index % FEATURE_ICONS.length]!;
 
             return (
@@ -147,13 +172,17 @@ function FeaturesSection({ service }: { service: Service }) {
                 key={index}
                 initial={{ opacity: 0, y: 20 }}
                 whileInView={{ opacity: 1, y: 0 }}
-                viewport={{ once: true, margin: '-60px' }}
-                transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+                viewport={{ once: true, margin: "-60px" }}
+                transition={{
+                  duration: 0.28,
+                  delay: index * 0.06,
+                  ease: EASE_OUT,
+                }}
                 className="group relative p-8 sm:p-10 transition-all duration-150 hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 bg-bg-primary"
               >
                 <div className="relative z-10">
                   <Icon className="w-8 h-8 mb-6 text-brand-ink" />
-                  <h3 className="text-lg sm:text-xl font-bold mb-3 text-ink group-hover:text-brand-ink transition-colors duration-300">
+                  <h3 className="text-lg sm:text-xl font-bold mb-3 text-ink group-hover:text-brand-ink transition-colors duration-normal">
                     {desc ? title : feature.slice(0, 10)}
                   </h3>
                   <p className="text-sm leading-relaxed text-text-secondary">
@@ -181,8 +210,8 @@ function ProcessSection({ service }: { service: Service }) {
         <motion.div
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
-          viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          viewport={{ once: true, margin: "-80px" }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl mb-16 sm:mb-20 md:mb-24"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95]">
@@ -195,21 +224,28 @@ function ProcessSection({ service }: { service: Service }) {
 
         <div className="grid md:grid-cols-2 lg:grid-cols-5 gap-px bg-border-primary">
           {service.process.slice(0, 5).map((step, index) => {
-            const [title, desc] = step.split('：');
+            const [title, desc] = step.split("：");
             return (
               <motion.div
                 key={index}
                 initial={{ opacity: 0, y: 20 }}
                 whileInView={{ opacity: 1, y: 0 }}
-                viewport={{ once: true, margin: '-60px' }}
-                transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+                viewport={{ once: true, margin: "-60px" }}
+                transition={{
+                  duration: 0.28,
+                  delay: index * 0.06,
+                  ease: EASE_OUT,
+                }}
                 className="relative group p-6 sm:p-8 bg-bg-primary hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 transition-all duration-150"
               >
                 <div
                   className="w-2 h-2 rounded-full mb-6"
-                  style={{ backgroundColor: index === 0 ? '#C41E3A' : 'var(--color-border-primary)' }}
+                  style={{
+                    backgroundColor:
+                      index === 0 ? "#C41E3A" : "var(--color-border-primary)",
+                  }}
                 />
-                <h3 className="text-lg font-bold mb-2 text-ink group-hover:text-brand-ink transition-colors duration-300">
+                <h3 className="text-lg font-bold mb-2 text-ink group-hover:text-brand-ink transition-colors duration-normal">
                   {desc ? title : step.slice(0, 6)}
                 </h3>
                 <p className="text-sm leading-relaxed text-text-secondary">
@@ -237,8 +273,8 @@ function CTASection() {
         <motion.div
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
-          viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          viewport={{ once: true, margin: "-80px" }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95] mb-8">
@@ -250,10 +286,19 @@ function CTASection() {
             首次咨询免费，没有任何销售压力。
           </p>
           <div className="flex flex-col sm:flex-row gap-4 sm:gap-6">
-            <CTAButton href="/contact" dataTestId="service-detail-bottom-primary" className="min-h-[52px]">
+            <CTAButton
+              href="/contact"
+              dataTestId="service-detail-bottom-primary"
+              className="min-h-[52px]"
+            >
               {CTA_LABELS.consult}
             </CTAButton>
-            <CTAButton href="/services" variant="secondary" dataTestId="service-detail-bottom-secondary" className="min-h-[52px]">
+            <CTAButton
+              href="/services"
+              variant="secondary"
+              dataTestId="service-detail-bottom-secondary"
+              className="min-h-[52px]"
+            >
               返回服务列表
             </CTAButton>
           </div>
@@ -263,7 +308,11 @@ function CTASection() {
   );
 }
 
-export default function ServiceDetailContentV4({ service }: { service: Service }) {
+export default function ServiceDetailContentV4({
+  service,
+}: {
+  service: Service;
+}) {
   return (
     <div className="min-h-screen bg-bg-primary text-ink">
       <DetailHero service={service} />
@@ -271,7 +320,11 @@ export default function ServiceDetailContentV4({ service }: { service: Service }
       <FeaturesSection service={service} />
       <ProcessSection service={service} />
       <L3EmptyFallback caseStudies={service.caseStudies} />
-      <CaseStudiesSection caseStudies={service.caseStudies} id="cases" heading="真实案例，可衡量的成果" />
+      <CaseStudiesSection
+        caseStudies={service.caseStudies}
+        id="cases"
+        heading="真实案例，可衡量的成果"
+      />
       <CTASection />
     </div>
   );
diff --git a/src/app/(marketing)/services/services-content-v3.tsx b/src/app/(marketing)/services/services-content-v3.tsx
index 0ca1345..3222b46 100644
--- a/src/app/(marketing)/services/services-content-v3.tsx
+++ b/src/app/(marketing)/services/services-content-v3.tsx
@@ -90,8 +90,8 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.h1
             initial={{ opacity: 0, y: 40 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tightest mb-8 sm:mb-10 md:mb-12"
+            transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tighter mb-8 sm:mb-10 md:mb-12"
           >
             <div className="block">{heroTitle1}</div>
             <div className="block mt-4 sm:mt-6">
@@ -103,7 +103,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
                     style={{ transformOrigin: 'left' }}
                     initial={{ scaleX: 0 }}
                     animate={{ scaleX: 1 }}
-                    transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                    transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                   />
                 </span>
               </span>
@@ -113,7 +113,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.p
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
             className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-10 sm:mb-12"
           >
             {heroDescriptionLines.map((line, i) => (
@@ -127,7 +127,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.7, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.7, ease: EASE_OUT }}
             className="flex flex-col sm:flex-row gap-4 sm:gap-6"
           >
             <CTAButton href="/contact" dataTestId="services-hero-primary" className="min-h-[52px]">
@@ -182,7 +182,7 @@ function ServicesGridSection({ services, pageCopy }: { services?: Service[]; pag
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl mb-16 sm:mb-20 md:mb-24"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95]">
@@ -200,14 +200,14 @@ function ServicesGridSection({ services, pageCopy }: { services?: Service[]; pag
               initial={{ opacity: 0, y: 30 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-60px' }}
-              transition={{ duration: 0.3, delay: i * 0.06, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: i * 0.06, ease: EASE_OUT }}
             >
               <StaticLink
                 href={`/services/${service.id}`}
-                className="group relative block p-8 sm:p-10 md:p-12 transition-all duration-300 hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 bg-bg-primary border border-transparent hover:border-border-primary after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-300 group-hover:after:scale-x-100"
+                className="group relative block p-8 sm:p-10 md:p-12 transition-all duration-normal hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 bg-bg-primary border border-transparent hover:border-border-primary after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-normal group-hover:after:scale-x-100"
               >
                 <div className="relative z-10">
-                  <h3 className="text-xl sm:text-2xl font-bold text-ink group-hover:text-brand-ink transition-colors duration-300 mb-3">
+                  <h3 className="text-xl sm:text-2xl font-bold text-ink group-hover:text-brand-ink transition-colors duration-normal mb-3">
                     {service.title}
                   </h3>
 
@@ -236,9 +236,9 @@ function ServicesGridSection({ services, pageCopy }: { services?: Service[]; pag
                     <MetricsBasisNote basis={weakestBasis(service.metrics.map((m) => m.basis))} className="mb-6" />
                   )}
 
-                  <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors duration-300">
+                  <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors duration-normal">
                     <span>了解详情</span>
-                    <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-300" />
+                    <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-normal" />
                   </div>
                 </div>
               </StaticLink>
@@ -260,7 +260,7 @@ function ProcessModesSection() {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: EASE_OUT }}
+            transition={{ duration: 0.28, ease: EASE_OUT }}
             className="lg:col-span-7"
           >
             <h2 className="text-3xl sm:text-4xl md:text-5xl font-extrabold text-ink tracking-tight leading-[0.95] mb-10 sm:mb-14">
@@ -293,7 +293,7 @@ function ProcessModesSection() {
             initial={{ opacity: 0, y: 30 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
             className="lg:col-span-5"
           >
             <h2 className="text-3xl sm:text-4xl md:text-5xl font-extrabold text-ink tracking-tight leading-[0.95] mb-10 sm:mb-14">
@@ -304,10 +304,10 @@ function ProcessModesSection() {
               {SERVICE_MODES.map((mode) => (
                 <div
                   key={mode.title}
-                  className="group relative p-6 sm:p-7 border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-brand/20 hover:shadow-md transition-all duration-300"
+                  className="group relative p-6 sm:p-7 border border-border-primary bg-bg-primary hover:bg-bg-secondary hover:border-brand/20 hover:shadow-md transition-all duration-normal"
                 >
                   <div className="relative z-10">
-                    <h3 className="text-xl font-bold text-ink mb-3 group-hover:text-brand-ink transition-colors duration-300">
+                    <h3 className="text-xl font-bold text-ink mb-3 group-hover:text-brand-ink transition-colors duration-normal">
                       {mode.title}
                     </h3>
                     <p className="text-text-secondary leading-relaxed text-sm sm:text-[15px] mb-4">{mode.description}</p>
@@ -337,7 +337,7 @@ function CTASection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95] mb-8">
diff --git a/src/app/(marketing)/solutions/solution-detail-content-v3.tsx b/src/app/(marketing)/solutions/solution-detail-content-v3.tsx
index 8e86828..6a00cf3 100644
--- a/src/app/(marketing)/solutions/solution-detail-content-v3.tsx
+++ b/src/app/(marketing)/solutions/solution-detail-content-v3.tsx
@@ -46,7 +46,7 @@ function DetailHero({ solution }: DetailHeroProps) {
         <motion.div
           initial={{ opacity: 0, y: 30 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="flex items-center gap-4 mb-8"
         >
           <div className="w-16 h-16 rounded-2xl bg-brand-soft flex items-center justify-center text-brand-ink">
@@ -63,7 +63,7 @@ function DetailHero({ solution }: DetailHeroProps) {
         <motion.h1
           initial={{ opacity: 0, y: 50 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.15, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.15, ease: EASE_OUT }}
           className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-bold text-ink leading-tight tracking-tighter mb-6 sm:mb-8 max-w-4xl"
         >
           {solution.title}
@@ -72,7 +72,7 @@ function DetailHero({ solution }: DetailHeroProps) {
         <motion.p
           initial={{ opacity: 0, y: 40 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.3, ease: EASE_OUT }}
           className="text-xl lg:text-2xl text-text-secondary max-w-3xl leading-relaxed mb-12"
         >
           {solution.description}
@@ -81,7 +81,7 @@ function DetailHero({ solution }: DetailHeroProps) {
         <motion.div
           initial={{ opacity: 0, y: 40 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.45, ease: EASE_OUT }}
+          transition={{ duration: 0.28, delay: 0.45, ease: EASE_OUT }}
           className="flex flex-wrap gap-6"
         >
           <CTAButton href="/contact" dataTestId="solution-detail-hero-primary">
@@ -118,8 +118,8 @@ function ChallengesSection({ challenges }: ChallengesSectionProps) {
             </p>
           </ScrollReveal>
 
-          <div className="space-y-px bg-border-primary">
-            <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+          <div>
+            <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="space-y-px bg-border-primary">
               {challenges.map((challenge, idx) => (
                 <div
                   key={idx}
@@ -165,8 +165,8 @@ function SolutionsSection({ solutions }: SolutionsSectionProps) {
           </h2>
         </ScrollReveal>
 
-        <div className="grid md:grid-cols-2 gap-px bg-border-primary">
-          <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+        <div>
+          <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="grid md:grid-cols-2 gap-px bg-border-primary">
             {solutions.map((solution, idx) => (
               <div
                 key={idx}
@@ -220,8 +220,8 @@ function ValuePropositionSection({ valueProposition }: ValuePropositionProps) {
           </h2>
         </ScrollReveal>
 
-        <div className="grid md:grid-cols-3 gap-px bg-border-primary">
-          <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+        <div>
+          <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="grid md:grid-cols-3 gap-px bg-border-primary">
             {valueProposition.points.map((point, idx) => {
               const icon = VALUE_ICONS[point.icon] || <Settings className="w-6 h-6" />;
               return (
@@ -275,8 +275,8 @@ function SuiteCombinationSection({ suiteCombination, products }: SuiteCombinatio
           </h2>
         </ScrollReveal>
 
-        <div className="grid lg:grid-cols-5 gap-px bg-border-primary mb-px">
-          <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+        <div>
+          <StaggerReveal staggerDelay={0.05} delayChildren={0.05} className="grid lg:grid-cols-5 gap-px bg-border-primary mb-px">
             {primaryProducts.map((product) => product && (
               <div
                 key={product.id}
diff --git a/src/app/(marketing)/solutions/solutions-content-v3.tsx b/src/app/(marketing)/solutions/solutions-content-v3.tsx
index c85d289..770d4f3 100644
--- a/src/app/(marketing)/solutions/solutions-content-v3.tsx
+++ b/src/app/(marketing)/solutions/solutions-content-v3.tsx
@@ -38,8 +38,8 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.h1
             initial={{ opacity: 0, y: 40 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tightest mb-8 sm:mb-10 md:mb-12"
+            transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+            className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl xl:text-7xl font-black text-ink leading-[0.95] tracking-tighter mb-8 sm:mb-10 md:mb-12"
           >
             <div className="block">{heroTitle1}</div>
             <div className="block mt-4 sm:mt-6">
@@ -51,7 +51,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
                     style={{ transformOrigin: 'left' }}
                     initial={{ scaleX: 0 }}
                     animate={{ scaleX: 1 }}
-                    transition={{ duration: 0.3, delay: 1.2, ease: EASE_OUT }}
+                    transition={{ duration: 0.28, delay: 1.2, ease: EASE_OUT }}
                   />
                 </span>
               </span>
@@ -61,7 +61,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.p
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
             className="text-lg md:text-xl text-text-secondary max-w-2xl leading-relaxed mb-10 sm:mb-12"
           >
             {heroDescriptionLines.map((line, i) => (
@@ -75,7 +75,7 @@ function HeroSection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           <motion.div
             initial={{ opacity: 0, y: 30 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.7, ease: EASE_OUT }}
+            transition={{ duration: 0.28, delay: 0.7, ease: EASE_OUT }}
             className="flex flex-col sm:flex-row gap-4 sm:gap-6"
           >
             <CTAButton href="/contact" dataTestId="solutions-hero-primary" className="min-h-[52px]">
@@ -106,11 +106,11 @@ function SolutionCard({ solution, index, products, featured = false }: { solutio
       initial={{ opacity: 0, y: 30 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-60px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
     >
       <StaticLink
         href={`/solutions/${solution.id}`}
-        className="group relative block transition-all duration-300 hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 bg-bg-elevated border border-border-primary hover:border-brand/20 after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-300 group-hover:after:scale-x-100"
+        className="group relative block transition-all duration-normal hover:bg-bg-secondary hover:shadow-lg hover:-translate-y-1 bg-bg-elevated border border-border-primary hover:border-brand/20 after:absolute after:bottom-0 after:left-0 after:h-0.5 after:w-full after:origin-left after:scale-x-0 after:bg-brand after:transition-transform after:duration-normal group-hover:after:scale-x-100"
       >
         <div className="relative z-10 p-8 sm:p-10 md:p-12">
           <div className="flex items-center gap-3 mb-6">
@@ -150,9 +150,9 @@ function SolutionCard({ solution, index, products, featured = false }: { solutio
             </div>
           </div>
 
-          <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors duration-300 mt-6">
+          <div className="inline-flex items-center gap-2 text-sm font-semibold text-text-secondary group-hover:text-brand-ink transition-colors duration-normal mt-6">
             <span>了解详情</span>
-            <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-300" />
+            <ArrowUpRight className="w-4 h-4 group-hover:translate-x-0.5 group-hover:-translate-y-0.5 transition-transform duration-normal" />
           </div>
         </div>
       </StaticLink>
@@ -173,7 +173,7 @@ function SolutionsGridSection({ solutions, products, pageCopy }: { solutions: So
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl mb-16 sm:mb-20 md:mb-24"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95]">
@@ -204,7 +204,7 @@ function CTASection({ pageCopy }: { pageCopy?: PageCopy | null }) {
           initial={{ opacity: 0, y: 30 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: EASE_OUT }}
+          transition={{ duration: 0.28, ease: EASE_OUT }}
           className="max-w-3xl"
         >
           <h2 className="text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-extrabold text-ink tracking-tight leading-[0.95] mb-8">
diff --git a/src/app/(marketing)/team/team-content-v3.tsx b/src/app/(marketing)/team/team-content-v3.tsx
index 372e673..cbae420 100644
--- a/src/app/(marketing)/team/team-content-v3.tsx
+++ b/src/app/(marketing)/team/team-content-v3.tsx
@@ -70,7 +70,7 @@ function StrengthCard({ strength, index }: { strength: StrengthData; index: numb
       initial={shouldReduceMotion ? {} : { opacity: 0, y: 30 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-80px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
       whileHover={{ y: -6 }}
     >
       <div className="absolute top-0 left-0 bottom-0 w-1 bg-brand scale-y-0 group-hover:scale-y-100 transition-transform duration-150 origin-top" />
@@ -80,9 +80,8 @@ function StrengthCard({ strength, index }: { strength: StrengthData; index: numb
           <div className="w-12 h-12 flex items-center justify-center border border-brand/30 bg-brand/[0.08] text-brand-ink">
             <Icon className="w-5 h-5" />
           </div>
-          {/* 纯装饰序号：与右侧 h3 标题并列，无独立语义。
-              aria-hidden 让 WCAG 1.4.3 对比度要求不适用于装饰内容（1.13:1 无需强行提亮） */}
-          <span aria-hidden="true" className="text-4xl font-bold text-text-muted/10 font-mono">{strength.number}</span>
+          {/* 装饰序号：aria-hidden 不豁免 WCAG 1.4.3（axe 按可见文字判定），改用大字档令牌 text-text-hint */}
+          <span aria-hidden="true" className="text-4xl font-bold text-text-hint font-mono">{strength.number}</span>
         </div>
 
         <h3 className="text-xl font-bold text-ink mb-3">{strength.title}</h3>
@@ -105,7 +104,7 @@ function CultureCard({ culture, index }: { culture: CultureData; index: number }
       initial={shouldReduceMotion ? {} : { opacity: 0, y: 30 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-80px' }}
-      transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+      transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
       whileHover={{ y: -8 }}
     >
       <div className="absolute top-0 left-0 right-0 h-1 bg-brand scale-x-0 group-hover:scale-x-100 transition-transform duration-150 origin-left" />
@@ -115,7 +114,7 @@ function CultureCard({ culture, index }: { culture: CultureData; index: number }
           <Icon className="w-7 h-7" />
         </div>
 
-        <span aria-hidden="true" className="block text-6xl font-bold text-text-muted/10 font-mono mb-4">{culture.number}</span>
+        <span aria-hidden="true" className="block text-6xl font-bold text-text-hint font-mono mb-4">{culture.number}</span>
 
         <h3 className="text-2xl font-bold text-ink mb-4">{culture.title}</h3>
         <p className="text-text-secondary leading-relaxed">{culture.description}</p>
@@ -149,7 +148,7 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
             <motion.div
               initial={{ opacity: 0, y: 20 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.1, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.1, ease: EASE_OUT }}
               className="mb-8 sm:mb-10"
             >
               <span className="inline-flex items-center gap-2 px-3 py-1.5 bg-brand/[0.08] border border-brand/20 rounded-full">
@@ -164,8 +163,8 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
             <motion.h1
               initial={{ opacity: 0, y: 40 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.2, ease: EASE_OUT }}
-              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.92] tracking-tightest mb-8 sm:mb-10"
+              transition={{ duration: 0.28, delay: 0.2, ease: EASE_OUT }}
+              className="text-4xl sm:text-5xl md:text-6xl lg:text-7xl font-black text-ink leading-[0.92] tracking-tighter mb-8 sm:mb-10"
             >
               {(teamData.heroTitle || '').split('\n').map((line, i) => (
                 <span key={i}>
@@ -180,7 +179,7 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
               <motion.div
                 initial={{ opacity: 0, y: 30 }}
                 animate={{ opacity: 1, y: 0 }}
-                transition={{ duration: 0.3, delay: 0.4, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: 0.4, ease: EASE_OUT }}
                 className="flex flex-wrap gap-6 sm:gap-10 md:gap-14 mb-10 sm:mb-12"
               >
                 {stats.map((stat, i) => (
@@ -201,7 +200,7 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
               <motion.p
                 initial={{ opacity: 0, y: 30 }}
                 animate={{ opacity: 1, y: 0 }}
-                transition={{ duration: 0.3, delay: 0.5, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: 0.5, ease: EASE_OUT }}
                 className="text-lg sm:text-xl text-text-secondary/80 max-w-2xl leading-relaxed mb-12 sm:mb-14"
               >
                 {teamData.heroDescription}
@@ -212,7 +211,7 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
             <motion.div
               initial={{ opacity: 0, y: 30 }}
               animate={{ opacity: 1, y: 0 }}
-              transition={{ duration: 0.3, delay: 0.6, ease: EASE_OUT }}
+              transition={{ duration: 0.28, delay: 0.6, ease: EASE_OUT }}
               className="flex flex-col sm:flex-row sm:items-center gap-4 sm:gap-6"
             >
               <CTAButton href={teamData.heroPrimaryCtaHref || '/contact'}>
@@ -331,7 +330,7 @@ export default function TeamContentV3({ data }: { data: Record<string, unknown>
 
         <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10 relative z-10">
           <ScrollReveal className="max-w-3xl">
-            <h2 className="font-sans text-2xl sm:text-3xl md:text-4xl lg:text-6xl xl:text-7xl font-black text-dark-text-primary tracking-tightest leading-[0.9] mb-8 sm:mb-10">
+            <h2 className="font-sans text-2xl sm:text-3xl md:text-4xl lg:text-6xl xl:text-7xl font-black text-dark-text-primary tracking-tighter leading-[0.9] mb-8 sm:mb-10">
               {teamData.ctaTitle || '成为下一个'}
               <br />
               <span className="text-brand-ink">数据驱动型企业</span>
diff --git a/src/app/(marketing)/template.tsx b/src/app/(marketing)/template.tsx
index 85d554f..84939a7 100644
--- a/src/app/(marketing)/template.tsx
+++ b/src/app/(marketing)/template.tsx
@@ -12,7 +12,7 @@ const pageVariants: Variants = {
     opacity: 1,
     y: 0,
     transition: {
-      duration: 0.3,
+      duration: 0.28,
       ease: [0.16, 1, 0.3, 1] as [number, number, number, number],
     },
   },
diff --git a/src/app/__tests__/cms-page-revalidate.test.ts b/src/app/__tests__/cms-page-revalidate.test.ts
new file mode 100644
index 0000000..57ba8da
--- /dev/null
+++ b/src/app/__tests__/cms-page-revalidate.test.ts
@@ -0,0 +1,23 @@
+import { describe, it, expect, jest } from '@jest/globals';
+
+/**
+ * S-3 回归：/about、/contact、/products/erp-upgrade 三页曾无任何缓存失效通道
+ * （无 revalidate 导出、revalidate 路由也无映射），构建后发布的 CMS 内容永不刷新。
+ * 这里钉死三页的 ISR 窗口与其余营销页（3600s）同档。
+ */
+
+jest.mock('@/lib/cms/data-server', () => ({
+  getPublishedItems: jest.fn(async () => []),
+  getProductBySlug: jest.fn(async () => null),
+}));
+
+describe.each([
+  ['about', '@/app/(marketing)/about/page'],
+  ['contact', '@/app/(marketing)/contact/page'],
+  ['erp-upgrade', '@/app/(marketing)/products/erp-upgrade/page'],
+])('%s 页导出 ISR revalidate', (_name, modulePath) => {
+  it('revalidate = 3600，与全站营销页一致', () => {
+    const mod = jest.requireActual(modulePath) as { revalidate?: number | false };
+    expect(mod.revalidate).toBe(3600);
+  });
+});
diff --git a/src/app/admin/content/[modelCode]/[itemId]/page.test.tsx b/src/app/admin/content/[modelCode]/[itemId]/page.test.tsx
new file mode 100644
index 0000000..18162ce
--- /dev/null
+++ b/src/app/admin/content/[modelCode]/[itemId]/page.test.tsx
@@ -0,0 +1,616 @@
+import { describe, it, expect, beforeEach, jest } from '@jest/globals';
+import { render, screen, fireEvent, waitFor, act } from '@testing-library/react';
+import '@testing-library/jest-dom';
+
+/**
+ * 内容编辑器「保存 / 发布」链路的回归测试（B-1）。
+ *
+ * 回归背景：编辑器曾在每次保存时回传 status，而后端 PUT /api/admin/items 对状态变更
+ * 一律 400（src/app/api/admin/items/route.ts:224），导致编辑器每次保存都失败、
+ * 发布按钮永远不可用。此文件钉死三件事：
+ *   1. 保存载荷（POST 新建 / PUT 更新）永远不含 status 键；
+ *   2. 状态变更只经 adminApi.runWorkflow 通道，且必须先保存成功；
+ *   3. 状态区为只读展示，表单里没有改状态的控件。
+ */
+
+// jest.Mock 的返回值必须是 Promise 形态，否则 mockResolvedValue 的参数会被解析成 never
+type Fn = jest.Mock<(...args: unknown[]) => Promise<unknown>>;
+
+interface ApiMock {
+  getModels: Fn;
+  getItems: Fn;
+  createItem: Fn;
+  updateItem: Fn;
+  runWorkflow: Fn;
+}
+
+interface ToastMock {
+  success: Fn;
+  error: Fn;
+  info: Fn;
+  dismiss: Fn;
+}
+
+interface NavMock {
+  state: { params: Record<string, string> };
+  push: Fn;
+}
+
+interface AuthMock {
+  state: { user: Record<string, string> | null; loading: boolean };
+}
+
+// next/navigation：App Router 动态段与路由跳转在此打桩（factory 内建 mock，避免 hoist TDZ）
+// router 对象必须稳定：page.tsx 的 load effect 以 router 为依赖，每次返回新对象会让 load() 反复重跑，
+// 从而把 workflow 刚写入的 status 覆盖回条目原状态（真实 Next router 是 context 单例，身份稳定）。
+jest.mock('next/navigation', () => {
+  const push = jest.fn();
+  const router = { push, prefetch: jest.fn() };
+  const state = { params: { modelCode: 'news', itemId: 'new' } as Record<string, string> };
+  return { state, push, useRouter: () => router, useParams: () => state.params };
+});
+
+jest.mock('@/components/admin/auth-context', () => {
+  const state = {
+    user: { id: 'u1', username: 'admin', nickname: '管理员', role: 'superadmin', avatar: '' },
+    loading: false,
+  };
+  return { state, useAuth: () => ({ user: state.user, loading: state.loading, token: 't', login: jest.fn(), logout: jest.fn() }) };
+});
+
+// 只 mock 客户端方法层：断言「调了哪个方法、传了什么」，不碰 fetch / 加密细节
+jest.mock('@/lib/admin-api', () => ({
+  adminApi: {
+    getModels: jest.fn(),
+    getItems: jest.fn(),
+    createItem: jest.fn(),
+    updateItem: jest.fn(),
+    runWorkflow: jest.fn(),
+  },
+}));
+
+jest.mock('@/components/ui/sonner', () => ({
+  Toaster: () => null,
+  toast: { success: jest.fn(), error: jest.fn(), info: jest.fn(), dismiss: jest.fn() },
+}));
+
+import ContentEditorPage from './page';
+
+const nav = jest.requireMock('next/navigation') as NavMock;
+const auth = jest.requireMock('@/components/admin/auth-context') as AuthMock;
+const api = (jest.requireMock('@/lib/admin-api') as { adminApi: ApiMock }).adminApi;
+const toastMock = (jest.requireMock('@/components/ui/sonner') as { toast: ToastMock }).toast;
+
+const MODEL = {
+  id: 'model-news',
+  code: 'news',
+  name: '新闻',
+  // 不设 required，避免每个用例都要填满字段才能触发保存
+  fields: [{ name: 'summary', type: 'text', label: '摘要' }],
+};
+
+function itemFixture(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'item-1',
+    title: '原标题',
+    slug: 'old-news',
+    status: 'draft',
+    data: { summary: '原摘要' },
+    ...overrides,
+  };
+}
+
+function itemsResult(items: unknown[]) {
+  return { items, total: items.length, page: 1, pageSize: 100, totalPages: 1 };
+}
+
+/** 渲染并等待 load() 完成（loading 门禁期间表单不存在） */
+async function renderEditor(params: { modelCode: string; itemId: string }) {
+  nav.state.params = params;
+  const utils = render(<ContentEditorPage />);
+  await screen.findByPlaceholderText('请输入标题');
+  return utils;
+}
+
+/** page.tsx 的 AUTO_SAVE_DELAY 为 3000ms（真实时长，本仓库单测不使用假定时器）。
+ *  跨过这个窗口才能断言「自动保存到底有没有发出请求」。 */
+const AUTOSAVE_WINDOW = 3500;
+
+async function waitMs(ms: number) {
+  await act(async () => {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+  });
+}
+
+function requireCall(mock: Fn, label: string): unknown[] {
+  const call = mock.mock.calls[0];
+  if (!call) throw new Error(`${label} 未被调用`);
+  return call;
+}
+
+function payloadOf(mock: Fn, argIndex = 0, label = 'api'): Record<string, unknown> {
+  const call = requireCall(mock, label);
+  return call[argIndex] as Record<string, unknown>;
+}
+
+function callsOf(mock: Fn): unknown[][] {
+  return mock.mock.calls as unknown[][];
+}
+
+/** 同名按钮常有页眉/页脚两份（如「保存」「创建」），点第一份即可，两者回调相同。
+ *  保存/发布回调内部要 await 多个请求，故在 act 作用域里让微任务链走完，否则 React 报未包裹 act */
+async function clickButton(name: string, index = 0) {
+  const buttons = screen.getAllByRole('button', { name });
+  await act(async () => {
+    fireEvent.click(buttons[index] as HTMLElement);
+  });
+}
+
+async function typeText(placeholder: string, value: string) {
+  await changeInput(screen.getByPlaceholderText(placeholder), value);
+}
+
+async function changeInput(el: HTMLElement, value: string) {
+  await act(async () => {
+    fireEvent.change(el, { target: { value } });
+  });
+}
+
+async function openPublishDialog() {
+  await clickButton('发布');
+  const confirmBtn = await screen.findByRole('button', { name: '确认发布' });
+  await act(async () => {
+    fireEvent.click(confirmBtn);
+  });
+}
+
+// 每组用例都重建整套默认实现（clearAllMocks 不清实现），避免依赖上一组的残留
+function resetMocks() {
+  jest.clearAllMocks();
+  auth.state.user = { id: 'u1', username: 'admin', nickname: '管理员', role: 'superadmin', avatar: '' };
+  auth.state.loading = false;
+  api.getModels.mockResolvedValue([MODEL]);
+  api.getItems.mockResolvedValue(itemsResult([itemFixture()]));
+  api.createItem.mockResolvedValue({ id: 'created-1' });
+  api.updateItem.mockResolvedValue({ id: 'item-1' });
+  api.runWorkflow.mockResolvedValue({ status: 'review' });
+}
+
+describe('内容编辑器：保存载荷不得携带 status（B-1 回归）', () => {
+  beforeEach(resetMocks);
+
+  it('新建保存走 createItem，且 POST 载荷不含 status 键', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'new' });
+    await typeText('请输入标题', '新条目');
+    await changeInput(screen.getByLabelText('摘要'), '新摘要');
+
+    await clickButton('创建');
+
+    await waitFor(() => expect(api.createItem).toHaveBeenCalledTimes(1));
+    const payload = payloadOf(api.createItem, 0, 'createItem');
+    expect(payload).toEqual(
+      expect.objectContaining({
+        modelId: 'model-news',
+        modelCode: 'news',
+        title: '新条目',
+        data: { summary: '新摘要' },
+      }),
+    );
+    // 后端 POST 只接受 status 缺省或 'draft'（items/route.ts:138），回传其它值直接 400
+    expect(payload).not.toHaveProperty('status');
+    expect(api.updateItem).not.toHaveBeenCalled();
+    await waitFor(() => expect(nav.push).toHaveBeenCalledWith('/admin/content/news'));
+  });
+
+  it('编辑保存走 updateItem，且 PUT 载荷不含 status 键', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    await typeText('请输入标题', '改过的标题');
+
+    await clickButton('保存');
+
+    await waitFor(() => expect(api.updateItem).toHaveBeenCalledTimes(1));
+    const call = requireCall(api.updateItem, 'updateItem');
+    expect(call[0]).toBe('item-1');
+    const payload = call[1] as Record<string, unknown>;
+    expect(payload).toEqual(
+      expect.objectContaining({
+        title: '改过的标题',
+        data: { summary: '原摘要' },
+      }),
+    );
+    // 此处正是缺陷现场：PUT 拒绝任何状态变更（items/route.ts:224），带上 status 即 400
+    expect(payload).not.toHaveProperty('status');
+    expect(api.createItem).not.toHaveBeenCalled();
+    // 「保存」不导航
+    expect(nav.push).not.toHaveBeenCalled();
+  });
+
+  it('保存失败时抛出后端错误文案，且不触达 workflow', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    api.updateItem.mockRejectedValue(new Error('状态变更请使用 /api/admin/items/[id]/workflow 接口'));
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(api.updateItem).toHaveBeenCalledTimes(1));
+    expect(payloadOf(api.updateItem, 1, 'updateItem')).not.toHaveProperty('status');
+    expect(api.runWorkflow).not.toHaveBeenCalled();
+    expect(toastMock.error).toHaveBeenCalledWith('状态变更请使用 /api/admin/items/[id]/workflow 接口');
+    // 保存未成功 → 状态停留在草稿
+    expect(screen.getByText('草稿')).toBeInTheDocument();
+  });
+});
+
+describe('内容编辑器：状态流转只经 runWorkflow 通道', () => {
+  beforeEach(resetMocks);
+
+  it('draft 项点发布：内容先落库，再 submit 后 approve，UI 落到已发布', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    api.runWorkflow
+      .mockResolvedValueOnce({ status: 'review' })
+      .mockResolvedValueOnce({ status: 'published' });
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(screen.getByText('已发布')).toBeInTheDocument());
+    // 保存先于状态流转
+    expect(api.updateItem).toHaveBeenCalledTimes(1);
+    expect(callsOf(api.runWorkflow)).toEqual([
+      ['item-1', 'submit'],
+      ['item-1', 'approve'],
+    ]);
+    expect(toastMock.success).toHaveBeenCalledWith('新闻资讯已发布');
+    // 已发布后发布按钮消失
+    expect(screen.queryByRole('button', { name: '发布' })).toBeNull();
+  });
+
+  it('review 项点发布：跳过 submit，只 approve', async () => {
+    api.getItems.mockResolvedValue(itemsResult([itemFixture({ status: 'review' })]));
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    expect(screen.getByText('待审核')).toBeInTheDocument();
+    api.runWorkflow.mockResolvedValue({ status: 'published' });
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(screen.getByText('已发布')).toBeInTheDocument());
+    expect(callsOf(api.runWorkflow)).toEqual([['item-1', 'approve']]);
+  });
+
+  it('approve 被拒（403 无 publish 权限）：submit 已生效，approve 失败只提示不改状态', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    api.runWorkflow
+      .mockResolvedValueOnce({ status: 'review' })
+      .mockRejectedValueOnce(new Error('无权限执行该操作'));
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(callsOf(api.runWorkflow)).toHaveLength(2));
+    expect(callsOf(api.runWorkflow)).toEqual([
+      ['item-1', 'submit'],
+      ['item-1', 'approve'],
+    ]);
+    expect(toastMock.error).toHaveBeenCalledWith('无权限执行该操作');
+    expect(toastMock.success).not.toHaveBeenCalled();
+    // submit 已在服务端把条目推进到 review，approve 失败不回滚：UI 必须跟随服务端状态显示「待审核」，
+    // 否则编辑者会以为还是草稿而重复提交。
+    expect(screen.getByText('待审核')).toBeInTheDocument();
+    expect(screen.queryByText('草稿')).not.toBeInTheDocument();
+  });
+
+  it('新建项发布：workflow 用 createItem 返回的 id，发布成功回到列表', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'new' });
+    api.createItem.mockResolvedValue({ id: 'created-9' });
+    api.runWorkflow
+      .mockResolvedValueOnce({ status: 'review' })
+      .mockResolvedValueOnce({ status: 'published' });
+    await typeText('请输入标题', '新条目');
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(callsOf(api.runWorkflow)).toHaveLength(2));
+    expect(payloadOf(api.createItem, 0, 'createItem')).not.toHaveProperty('status');
+    expect(callsOf(api.runWorkflow)).toEqual([
+      ['created-9', 'submit'],
+      ['created-9', 'approve'],
+    ]);
+    // 新建路径不得走 PUT
+    expect(api.updateItem).not.toHaveBeenCalled();
+    await waitFor(() => expect(nav.push).toHaveBeenCalledWith('/admin/content/news'));
+  });
+
+  it('新建但未取回 id：不发 workflow，提示去列表页重开', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'new' });
+    api.createItem.mockResolvedValue({});
+    await typeText('请输入标题', '新条目');
+
+    await openPublishDialog();
+
+    await waitFor(() => expect(api.createItem).toHaveBeenCalledTimes(1));
+    expect(api.runWorkflow).not.toHaveBeenCalled();
+    expect(toastMock.error).toHaveBeenCalledWith('创建成功但未取回条目 ID，请在列表页重新打开后发布');
+    expect(nav.push).not.toHaveBeenCalled();
+  });
+
+  it('标题为空时不打开发布对话框，也不保存', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    await typeText('请输入标题', '');
+
+    await clickButton('发布');
+
+    await waitFor(() => expect(toastMock.error).toHaveBeenCalledWith('请修正表单中的错误后再发布'));
+    expect(screen.queryByRole('button', { name: '确认发布' })).toBeNull();
+    expect(api.updateItem).not.toHaveBeenCalled();
+    expect(api.runWorkflow).not.toHaveBeenCalled();
+  });
+});
+
+describe('内容编辑器：状态区只读', () => {
+  beforeEach(resetMocks);
+
+  it('渲染当前状态文案，且表单内不存在任何 select / combobox', async () => {
+    const { container } = await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+
+    expect(screen.getByText('草稿')).toBeInTheDocument();
+    expect(container.querySelector('select')).toBeNull();
+    expect(screen.queryByRole('combobox')).toBeNull();
+    // 状态标签是段落而非 label，说明它不指向任何可交互控件
+    expect(screen.getByText('状态').tagName).toBe('P');
+    expect(screen.getByText('状态通过「发布」提交审核变更，不可在此直接修改')).toBeInTheDocument();
+  });
+
+  it('四态文案与 ContentStatus 取值一致，且任一状态下都没有改状态的控件', async () => {
+    nav.state.params = { modelCode: 'news', itemId: 'item-1' };
+    const cases: Array<[string, string]> = [
+      ['draft', '草稿'],
+      ['review', '待审核'],
+      ['published', '已发布'],
+      ['archived', '已归档'],
+    ];
+    for (const [status, label] of cases) {
+      api.getItems.mockResolvedValue(itemsResult([itemFixture({ status })]));
+      const { container, unmount } = render(<ContentEditorPage />);
+      await screen.findByPlaceholderText('请输入标题');
+      expect(screen.getByText(label)).toBeInTheDocument();
+      expect(container.querySelector('select')).toBeNull();
+      // 逐轮卸载，避免同名文案在多份渲染结果里重复命中
+      unmount();
+    }
+  });
+});
+
+describe('内容编辑器：条目定位不得依赖列表分页窗口', () => {
+  beforeEach(resetMocks);
+
+  it('分页窗口之外的条目（第 101 条起）按 itemId 精确取回并回填表单', async () => {
+    // 真实服务端语义：不带 id 的列表请求只回一页数据，目标条目可能不在其中；
+    // 带 id 的请求才保证回目标条目本身。
+    api.getItems.mockImplementation((...args: unknown[]) => {
+      const params = args[0] as Record<string, unknown>;
+      if (params.id === 'item-101') return Promise.resolve(itemsResult([itemFixture({ id: 'item-101' })]));
+      return Promise.resolve(itemsResult([]));
+    });
+
+    await renderEditor({ modelCode: 'news', itemId: 'item-101' });
+
+    expect(screen.getByPlaceholderText('请输入标题')).toHaveValue('原标题');
+    expect(screen.getByLabelText('摘要')).toHaveValue('原摘要');
+  });
+
+  it('按 itemId 取不到条目时给出未找到提示，且不渲染任何保存入口', async () => {
+    api.getItems.mockResolvedValue(itemsResult([]));
+    nav.state.params = { modelCode: 'news', itemId: 'deleted-item' };
+    render(<ContentEditorPage />);
+
+    expect(await screen.findByText(/条目未找到/)).toBeInTheDocument();
+    // 空表单一旦可保存，PUT 就会用 { title, data: {} } 覆盖真实记录
+    expect(screen.queryByPlaceholderText('请输入标题')).toBeNull();
+    expect(screen.queryByRole('button', { name: '保存并返回' })).toBeNull();
+    expect(api.updateItem).not.toHaveBeenCalled();
+  });
+});
+
+describe('内容编辑器：自动保存的触发时机与并发顺序', () => {
+  beforeEach(resetMocks);
+
+  it('只打开已有条目、未做任何编辑：不标记未保存，跨过自动保存窗口也不发 PUT', async () => {
+    nav.state.params = { modelCode: 'news', itemId: 'item-1' };
+    render(<ContentEditorPage />);
+    await screen.findByPlaceholderText('请输入标题');
+
+    expect(screen.getByPlaceholderText('请输入标题')).toHaveValue('原标题');
+    expect(screen.queryByText('未保存')).toBeNull();
+
+    await waitMs(AUTOSAVE_WINDOW);
+    // 幻影保存会把 version 加一（items/route.ts:240）并覆盖并发编辑者的写入
+    expect(api.updateItem).not.toHaveBeenCalled();
+  });
+
+  it('上一次保存仍在飞行中：下一次自动保存排队等待，且排队的是最新快照', async () => {
+    let releaseFirst: ((value: unknown) => void) | null = null;
+    api.updateItem.mockImplementation(
+      () =>
+        new Promise((resolve) => {
+          releaseFirst = resolve;
+        }),
+    );
+
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+    await changeInput(screen.getByPlaceholderText('请输入标题'), '第一版');
+    await waitMs(AUTOSAVE_WINDOW);
+
+    expect(callsOf(api.updateItem)).toHaveLength(1);
+    expect(payloadOf(api.updateItem, 1, 'updateItem')).toEqual(
+      expect.objectContaining({ title: '第一版' }),
+    );
+
+    await changeInput(screen.getByPlaceholderText('请输入标题'), '第二版');
+    await waitMs(AUTOSAVE_WINDOW);
+
+    // 修复前：自动保存不看在飞请求就再发一次，两个 PUT 在服务端的落库顺序不确定，
+    // 旧快照可能覆盖新快照
+    expect(callsOf(api.updateItem)).toHaveLength(1);
+
+    await act(async () => {
+      (releaseFirst as (value: unknown) => void)({ id: 'item-1' });
+    });
+    await waitFor(() => expect(callsOf(api.updateItem)).toHaveLength(2));
+    // 排队不能丢更新：第二次的载荷必须是最新快照
+    expect(callsOf(api.updateItem)[1]?.[1]).toEqual(
+      expect.objectContaining({ title: '第二版' }),
+    );
+  });
+});
+
+describe('内容编辑器：richtext / array / object 字段的读写保真（S-21/S-22 回归）', () => {
+  const RICH_MODEL = {
+    id: 'model-rich',
+    code: 'news',
+    name: '新闻',
+    fields: [
+      { name: 'content', type: 'richtext', label: '正文内容' },
+      {
+        name: 'metrics',
+        type: 'array',
+        label: '指标',
+        fields: [
+          { name: 'label', type: 'text', label: '标签' },
+          { name: 'value', type: 'text', label: '数值' },
+        ],
+      },
+      {
+        name: 'testimonial',
+        type: 'object',
+        label: '客户证言',
+        fields: [
+          { name: 'quote', type: 'textarea', label: '证言内容' },
+          { name: 'author', type: 'text', label: '作者' },
+        ],
+      },
+    ],
+  };
+
+  const richItem = {
+    id: 'item-1',
+    title: '原标题',
+    slug: 'rich-news',
+    status: 'draft',
+    data: {
+      content: '第一段\n第二段',
+      metrics: [{ label: '上线周期', value: '6周' }],
+      testimonial: { quote: '非常专业', author: '张三' },
+    },
+  };
+
+  beforeEach(() => {
+    resetMocks();
+    api.getModels.mockResolvedValue([RICH_MODEL]);
+    api.getItems.mockResolvedValue(itemsResult([richItem]));
+  });
+
+  it('富文本渲染为 textarea：编辑不丢换行，保存载荷保留完整段落', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+
+    const box = screen.getByLabelText('正文内容');
+    expect(box.tagName).toBe('TEXTAREA');
+    expect(box).toHaveValue('第一段\n第二段');
+
+    await changeInput(box, '第一段\n第二段\n第三段');
+    await clickButton('保存');
+
+    await waitFor(() => expect(api.updateItem).toHaveBeenCalledTimes(1));
+    expect(payloadOf(api.updateItem, 1, 'updateItem')).toEqual(
+      expect.objectContaining({ data: expect.objectContaining({ content: '第一段\n第二段\n第三段' }) }),
+    );
+  });
+
+  it('array 字段编辑回写数组本身：不产生顶层 label/value 垃圾键', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+
+    const box = screen.getByLabelText('指标');
+    expect(box.tagName).toBe('TEXTAREA');
+    expect(box).toHaveValue(JSON.stringify(richItem.data.metrics, null, 2));
+
+    await changeInput(box, JSON.stringify([{ label: '上线周期', value: '5天' }]));
+    await clickButton('保存');
+
+    await waitFor(() => expect(api.updateItem).toHaveBeenCalledTimes(1));
+    const data = (payloadOf(api.updateItem, 1, 'updateItem').data as Record<string, unknown>);
+    expect(data.metrics).toEqual([{ label: '上线周期', value: '5天' }]);
+    // 修复前：子字段 onChange 写的是顶层键，保存载荷被污染出 label/value
+    expect(data).not.toHaveProperty('label');
+    expect(data).not.toHaveProperty('value');
+  });
+
+  it('object 子字段读写父对象：编辑作者只改 testimonial.author，不泄漏顶层键', async () => {
+    await renderEditor({ modelCode: 'news', itemId: 'item-1' });
+
+    // 修复前：子字段读的是顶层 formData（undefined），输入框是空的
+    expect(screen.getByLabelText('作者')).toHaveValue('张三');
+    expect(screen.getByLabelText('证言内容')).toHaveValue('非常专业');
+
+    await changeInput(screen.getByLabelText('作者'), '李四');
+    await clickButton('保存');
+
+    await waitFor(() => expect(api.updateItem).toHaveBeenCalledTimes(1));
+    const data = (payloadOf(api.updateItem, 1, 'updateItem').data as Record<string, unknown>);
+    expect(data.testimonial).toEqual({ quote: '非常专业', author: '李四' });
+    expect(data).not.toHaveProperty('author');
+    expect(data).not.toHaveProperty('quote');
+  });
+});
+
+describe('内容编辑器：加载失败时不得出现任何写入口（与「条目未找到」同型的数据丢失面）', () => {
+  beforeEach(resetMocks);
+
+  /** 三处写入口（页眉/页脚）必须全部缺席：只要有一份渲染出来，用户就能对
+   *  一条从未成功加载的记录发起 PUT/POST。 */
+  function expectNoWriteAffordances() {
+    expect(screen.queryByRole('button', { name: '保存' })).toBeNull();
+    expect(screen.queryByRole('button', { name: '保存并返回' })).toBeNull();
+    expect(screen.queryByRole('button', { name: '发布' })).toBeNull();
+    expect(screen.queryByRole('button', { name: '创建' })).toBeNull();
+  }
+
+  it('模型查找失败（回包里没有当前 modelCode）：保留「模型未找到」提示，但无任何保存/发布入口，不发 PUT/POST', async () => {
+    api.getModels.mockResolvedValue([{ ...MODEL, code: 'other-model' }]);
+    nav.state.params = { modelCode: 'news', itemId: 'item-1' };
+    render(<ContentEditorPage />);
+
+    expect(await screen.findByText('模型未找到')).toBeInTheDocument();
+    expectNoWriteAffordances();
+    expect(api.updateItem).not.toHaveBeenCalled();
+    expect(api.createItem).not.toHaveBeenCalled();
+  });
+
+  it('getModels 网络/5xx 错误（reject）：错误文案照常展示，同样无任何写入口', async () => {
+    api.getModels.mockRejectedValue(new Error('请求失败 (500)'));
+    nav.state.params = { modelCode: 'news', itemId: 'item-1' };
+    render(<ContentEditorPage />);
+
+    expect(await screen.findByText('请求失败 (500)')).toBeInTheDocument();
+    expectNoWriteAffordances();
+    expect(api.updateItem).not.toHaveBeenCalled();
+    expect(api.createItem).not.toHaveBeenCalled();
+  });
+
+  it('getItems 网络错误：条目从未加载成功，跨过自动保存窗口后 PUT 仍为零，且不渲染写入口', async () => {
+    api.getItems.mockRejectedValue(new Error('网络异常'));
+    nav.state.params = { modelCode: 'news', itemId: 'item-1' };
+    render(<ContentEditorPage />);
+
+    expect(await screen.findByText('网络异常')).toBeInTheDocument();
+    expectNoWriteAffordances();
+    await waitMs(AUTOSAVE_WINDOW);
+    expect(api.updateItem).not.toHaveBeenCalled();
+  });
+
+  it('新建路径模型加载失败：无「创建」入口，不发 POST', async () => {
+    api.getModels.mockResolvedValue([]);
+    nav.state.params = { modelCode: 'news', itemId: 'new' };
+    render(<ContentEditorPage />);
+
+    expect(await screen.findByText('模型未找到')).toBeInTheDocument();
+    expectNoWriteAffordances();
+    expect(api.createItem).not.toHaveBeenCalled();
+    expect(api.updateItem).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/app/admin/content/[modelCode]/[itemId]/page.tsx b/src/app/admin/content/[modelCode]/[itemId]/page.tsx
index f3ff7ec..1fc2f46 100644
--- a/src/app/admin/content/[modelCode]/[itemId]/page.tsx
+++ b/src/app/admin/content/[modelCode]/[itemId]/page.tsx
@@ -59,6 +59,11 @@ interface ModelData {
 // 自动保存延迟（毫秒）
 const AUTO_SAVE_DELAY = 3000;
 
+// 「已落库内容」的可比较形态：自动保存只应在用户真的改过内容后触发
+function snapshotOf(title: string, slug: string, data: Record<string, unknown>): string {
+  return JSON.stringify([title, slug, data]);
+}
+
 function JsonEditor({
   id,
   value,
@@ -126,6 +131,14 @@ function FieldError({ error }: { error?: string }) {
   );
 }
 
+// 与 src/lib/cms/types.ts:81 ContentStatus 四态一致
+const STATUS_LABELS: Record<string, string> = {
+  draft: '草稿',
+  review: '待审核',
+  published: '已发布',
+  archived: '已归档',
+};
+
 export default function ContentEditorPage() {
   const params = useParams();
   const modelCode = params.modelCode as string;
@@ -142,14 +155,23 @@ export default function ContentEditorPage() {
   const [loading, setLoading] = useState(true);
   const [saving, setSaving] = useState(false);
   const [error, setError] = useState('');
+  const [itemNotFound, setItemNotFound] = useState(false);
   const [validationErrors, setValidationErrors] = useState<Record<string, string>>({});
+  // 唯一的写入门禁：load() 是否成功取回可编辑对象——新建=模型定义，编辑=条目本身
+  //（落库快照已写入 persistedSnapshotRef）。模型未找到、网络/4xx/5xx、条目缺失一律为 false。
+  // 所有保存/发布/workflow/自动保存入口的渲染与触发都过这一个条件，不再逐分支补 if。
+  const [canEdit, setCanEdit] = useState(false);
 
   // 自动保存状态
   const [lastSaved, setLastSaved] = useState<Date | null>(null);
   const [autoSaveStatus, setAutoSaveStatus] = useState<'idle' | 'saving' | 'saved' | 'unsaved'>('idle');
   const autoSaveTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-  const isInitialMountRef = useRef(true);
   const hasUnsavedChangesRef = useRef(false);
+  // null = load() 尚未把条目取回（含未找到），此时自动保存保持解除武装；
+  // 之后它是「最近一次落库内容」的快照，与当前表单不等才视为脏。
+  const persistedSnapshotRef = useRef<string | null>(null);
+  // 保存串行链：上一次请求落定前不发下一次，避免旧快照晚于新快照落库
+  const saveChainRef = useRef<Promise<unknown>>(Promise.resolve());
 
   // 发布确认对话框
   const [publishDialogOpen, setPublishDialogOpen] = useState(false);
@@ -180,46 +202,65 @@ export default function ContentEditorPage() {
     return errors;
   }, [title, slug, formData, model]);
 
-  // 实际保存操作
-  const performSave = useCallback(async (newStatus?: string): Promise<boolean> => {
-    const targetStatus = newStatus ?? status;
-    setSaving(true);
-    setError('');
-
-    try {
-      if (isNew) {
-        await adminApi.createItem({
-          modelId: model?.id,
-          modelCode,
-          title: title.trim(),
-          slug: slug.trim() || undefined,
-          status: targetStatus,
-          data: formData,
-        });
-        // 新建完成后不设置 autoSaveStatus，因为会导航离开
-        return true;
-      } else {
+  // 实际保存操作。状态不在此处变更：POST 只接受草稿、PUT 拒绝改 status（B-1），
+  // 发布走 handlePublishConfirm → adminApi.runWorkflow。返回新建项的 id 供发布链使用。
+  // 入参是发起保存那一刻的快照，而不是执行时的 state：排队等待期间用户可能又改了内容。
+  const submitSnapshot = useCallback(
+    async (snapshot: {
+      title: string;
+      slug: string;
+      data: Record<string, unknown>;
+    }): Promise<{ ok: boolean; id?: string }> => {
+      try {
+        if (isNew) {
+          const created = (await adminApi.createItem({
+            modelId: model?.id,
+            modelCode,
+            title: snapshot.title,
+            slug: snapshot.slug || undefined,
+            data: snapshot.data,
+          })) as { id?: string };
+          // 新建完成后不设置 autoSaveStatus，因为会导航离开
+          return { ok: true, id: created?.id };
+        }
         await adminApi.updateItem(itemId, {
-          title: title.trim(),
-          slug: slug.trim() || undefined,
-          status: targetStatus,
-          data: formData,
+          title: snapshot.title,
+          slug: snapshot.slug || undefined,
+          data: snapshot.data,
         });
+        persistedSnapshotRef.current = snapshotOf(snapshot.title, snapshot.slug, snapshot.data);
         setLastSaved(new Date());
         setAutoSaveStatus('saved');
         hasUnsavedChangesRef.current = false;
-        return true;
+        return { ok: true };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : '保存失败';
+        setError(message);
+        toast.error(message);
+        setAutoSaveStatus('unsaved');
+        return { ok: false };
+      } finally {
+        setSaving(false);
       }
-    } catch (err) {
-      const message = err instanceof Error ? err.message : '保存失败';
-      setError(message);
-      toast.error(message);
-      setAutoSaveStatus('unsaved');
-      return false;
-    } finally {
-      setSaving(false);
-    }
-  }, [isNew, itemId, model, modelCode, title, slug, status, formData]);
+    },
+    [isNew, itemId, model, modelCode],
+  );
+
+  const performSave = useCallback((): Promise<{ ok: boolean; id?: string }> => {
+    // 触发侧兜底：手动保存、自动保存、发布前的落库全部汇入这里，canEdit 为 false 时
+    // 写入口既不会渲染（见 JSX 门禁）也绝不会发出请求。
+    if (!canEdit) return Promise.resolve({ ok: false });
+    const snapshot = { title: title.trim(), slug: slug.trim(), data: formData };
+    setSaving(true);
+    setError('');
+    const run = saveChainRef.current.then(
+      () => submitSnapshot(snapshot),
+      () => submitSnapshot(snapshot),
+    );
+    // 链尾吞掉异常，保证下一次保存仍排在链上
+    saveChainRef.current = run.catch(() => undefined);
+    return run;
+  }, [canEdit, title, slug, formData, submitSnapshot]);
 
   // 自动保存（仅编辑已有内容时）
   const triggerAutoSave = useCallback(() => {
@@ -241,13 +282,21 @@ export default function ContentEditorPage() {
     }, AUTO_SAVE_DELAY);
   }, [isNew, validate, performSave]);
 
-  // 标题/Slug/表单数据变更时触发自动保存
+  // 标题/Slug/表单数据变更时触发自动保存。
+  // 判脏的基准是「最近一次落库的快照」而不是「是否首次挂载」：load() 写回条目内容时
+  // state 也会变化，那一次不是用户改动，不能标记未保存、更不能触发一次 PUT 把 version 加一。
   useEffect(() => {
-    if (isInitialMountRef.current) {
-      isInitialMountRef.current = false;
+    if (isNew) return;
+    const persisted = persistedSnapshotRef.current;
+    if (persisted === null) return;
+    const current = snapshotOf(title, slug, formData);
+    if (current === persisted) {
+      if (autoSaveTimerRef.current) {
+        clearTimeout(autoSaveTimerRef.current);
+        autoSaveTimerRef.current = null;
+      }
       return;
     }
-    if (isNew) return;
     setAutoSaveStatus('unsaved');
     hasUnsavedChangesRef.current = true;
     triggerAutoSave();
@@ -283,6 +332,8 @@ export default function ContentEditorPage() {
     if (!user) return;
 
     const load = async () => {
+      // params 变更重跑时先解除门禁：旧条目的 canEdit 不能让写入口在新 load 完成前复活
+      setCanEdit(false);
       try {
         const modelsRes = await adminApi.getModels();
         const models = (modelsRes as ModelData[]) || [];
@@ -297,21 +348,24 @@ export default function ContentEditorPage() {
         setFormData(defaults);
 
         if (!isNew) {
-          const itemsRes = await adminApi.getItems({ modelCode, page: 1, pageSize: 100 });
+          const itemsRes = await adminApi.getItems({ modelCode, id: itemId, page: 1, pageSize: 1 });
           const items = (itemsRes as { items: Array<{ id: string; title: string; slug: string; status: string; data: Record<string, unknown> }> }).items || [];
           const item = items.find((i) => i.id === itemId);
-          if (item) {
-            setTitle(item.title);
-            setSlug(item.slug);
-            setStatus(item.status);
-            setFormData(item.data || {});
+          // 条目取不到就是不存在：必须在这里停下，否则空表单一旦保存就用
+          // { title, data: {} } 覆盖真实记录。自动保存保持解除武装（基准快照仍为 null）。
+          if (!item) {
+            setItemNotFound(true);
+            return;
           }
+          setTitle(item.title);
+          setSlug(item.slug);
+          setStatus(item.status);
+          setFormData(item.data || {});
+          persistedSnapshotRef.current = snapshotOf(item.title, item.slug, item.data || {});
         }
-
-        // 初始加载完成后，允许后续变更触发自动保存
-        setTimeout(() => {
-          isInitialMountRef.current = false;
-        }, 0);
+        // 编辑态要走到这里才放行：条目已回填且落库快照已建立；新建态模型就绪即放行。
+        // 任一步抛出都到不了这一行，写入口随之保持关闭。
+        setCanEdit(true);
       } catch (err) {
         setError(err instanceof Error ? err.message : '加载失败');
       } finally {
@@ -355,8 +409,8 @@ export default function ContentEditorPage() {
       return;
     }
 
-    const success = await performSave();
-    if (success) {
+    const saved = await performSave();
+    if (saved.ok) {
       toast.success(isNew ? `${modelLabel}创建成功` : `${modelLabel}保存成功`);
       router.push(`/admin/content/${modelCode}`);
     }
@@ -373,14 +427,15 @@ export default function ContentEditorPage() {
 
     if (isNew) {
       // 新建内容直接保存并跳转
-      const success = await performSave();
-      if (success) {
+      const saved = await performSave();
+      if (saved.ok) {
         toast.success(`${modelLabel}创建成功`);
         router.push(`/admin/content/${modelCode}`);
       }
     } else {
-      await performSave();
-      if (autoSaveStatus === 'saved') {
+      // 用返回值判断而不是 autoSaveStatus：后者是本次渲染闭包里的旧值
+      const saved = await performSave();
+      if (saved.ok) {
         toast.success('已保存');
       }
     }
@@ -397,94 +452,139 @@ export default function ContentEditorPage() {
     setPublishDialogOpen(true);
   };
 
-  // 确认发布
+  // 确认发布：内容先落库，状态改由 workflow 通道驱动（B-1 —— POST 只建草稿、PUT 拒绝改状态，
+  // publish 权限只在 workflow 上校验）。合法路径 draft→submit→review→approve→published；
+  // 账号无 publish 权限时 approve 返回 403，条目停在「待审核」，这是审批制的预期结果。
   const handlePublishConfirm = async () => {
     setPublishDialogOpen(false);
     setPublishPending(true);
-    const success = await performSave('published');
-    setPublishPending(false);
-    if (success) {
-      toast.success(`${modelLabel}已发布`);
-      if (isNew) {
+
+    const saved = await performSave();
+    const targetId = isNew ? saved.id : itemId;
+    if (!saved.ok || !targetId) {
+      setPublishPending(false);
+      if (saved.ok) toast.error('创建成功但未取回条目 ID，请在列表页重新打开后发布');
+      return;
+    }
+
+    try {
+      let current = status;
+      if (current === 'draft') {
+        current = (await adminApi.runWorkflow(targetId, 'submit')).status ?? 'review';
+        // submit 此刻已落库：随后 approve 失败（如无 publish 权限的 403）时，
+        // UI 必须停在「待审核」这个服务端真实状态，而不是继续显示「草稿」。
+        setStatus(current);
+      }
+      if (current === 'review') {
+        current = (await adminApi.runWorkflow(targetId, 'approve')).status ?? 'published';
+      }
+      setStatus(current);
+      toast.success(current === 'published' ? `${modelLabel}已发布` : `${modelLabel}已提交审核`);
+      if (isNew && current === 'published') {
         router.push(`/admin/content/${modelCode}`);
       }
+    } catch (err) {
+      toast.error(err instanceof Error ? err.message : '发布失败');
+    } finally {
+      setPublishPending(false);
     }
   };
 
-  const renderField = (field: FieldDef, prefix = '') => {
+  // scope 非空时本字段是父 object 的子字段：读父对象的对应键、以合并方式写回父对象。
+  // 历史实现无作用域，子字段直接读写顶层 formData —— 读恒为 undefined，写污染出垃圾顶层键（S-22）。
+  const renderField = (
+    field: FieldDef,
+    prefix = '',
+    scope?: { parent: Record<string, unknown>; write: (subName: string, v: unknown) => void },
+  ) => {
     const key = prefix + field.name;
-    const value = formData[field.name];
+    const value = scope ? scope.parent[field.name] : formData[field.name];
+    const set = scope
+      ? (v: unknown) => scope.write(field.name, v)
+      : (v: unknown) => handleFieldChange(field.name, v);
     const error = validationErrors[field.name];
 
+    const labelled = (
+      control: React.ReactNode,
+      opts?: { withBlur?: boolean; withDescription?: boolean; withError?: boolean },
+    ) => (
+      <div key={key}>
+        <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
+          {field.label}
+          {field.required && <span className="text-error-text ml-1">*</span>}
+        </label>
+        {opts?.withDescription && field.description && (
+          <p className="text-xs text-text-muted mb-1.5">{field.description}</p>
+        )}
+        {control}
+        {opts?.withError && <FieldError error={error} />}
+      </div>
+    );
+
     switch (field.type) {
       case 'text':
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-              {field.required && <span className="text-error-text ml-1">*</span>}
-            </label>
-            {field.description && (
-              <p className="text-xs text-text-muted mb-1.5">{field.description}</p>
-            )}
-            <input
-              id={key}
-              type="text"
-              value={(value as string) || ''}
-              onChange={(e) => handleFieldChange(field.name, e.target.value)}
-              onBlur={() => handleFieldBlur(field.name)}
-              placeholder={field.placeholder}
-              className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent ${
-                error ? 'border-error bg-error-bg' : 'border-border-secondary'
-              }`}
-            />
-            <FieldError error={error} />
-          </div>
+        return labelled(
+          <input
+            id={key}
+            type="text"
+            value={(value as string) || ''}
+            onChange={(e) => set(e.target.value)}
+            onBlur={() => handleFieldBlur(field.name)}
+            placeholder={field.placeholder}
+            className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent ${
+              error ? 'border-error bg-error-bg' : 'border-border-secondary'
+            }`}
+          />,
+          { withDescription: true, withError: true },
         );
 
       case 'textarea':
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-              {field.required && <span className="text-error-text ml-1">*</span>}
-            </label>
-            {field.description && (
-              <p className="text-xs text-text-muted mb-1.5">{field.description}</p>
-            )}
-            <textarea
-              id={key}
-              value={(value as string) || ''}
-              onChange={(e) => handleFieldChange(field.name, e.target.value)}
-              onBlur={() => handleFieldBlur(field.name)}
-              placeholder={field.placeholder}
-              rows={4}
-              className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent resize-y ${
-                error ? 'border-error bg-error-bg' : 'border-border-secondary'
-              }`}
-            />
-            <FieldError error={error} />
-          </div>
+        return labelled(
+          <textarea
+            id={key}
+            value={(value as string) || ''}
+            onChange={(e) => set(e.target.value)}
+            onBlur={() => handleFieldBlur(field.name)}
+            placeholder={field.placeholder}
+            rows={4}
+            className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent resize-y ${
+              error ? 'border-error bg-error-bg' : 'border-border-secondary'
+            }`}
+          />,
+          { withDescription: true, withError: true },
+        );
+
+      case 'richtext':
+        // 与 textarea 同型渲染。历史缺此分支时 richtext 掉进 default 的单行 input，
+        // 浏览器对 input[type=text] 的 value 消毒会剥掉全部换行，编辑一次即永久损毁段落
+        //（新闻正文渲染端为 whitespace-pre-line）。
+        return labelled(
+          <textarea
+            id={key}
+            value={(value as string) || ''}
+            onChange={(e) => set(e.target.value)}
+            onBlur={() => handleFieldBlur(field.name)}
+            placeholder={field.placeholder}
+            rows={12}
+            className={`w-full px-3 py-2 border rounded-lg text-sm font-mono focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent resize-y ${
+              error ? 'border-error bg-error-bg' : 'border-border-secondary'
+            }`}
+          />,
+          { withDescription: true, withError: true },
         );
 
       case 'number':
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-              {field.required && <span className="text-error-text ml-1">*</span>}
-            </label>
-            <input
-              id={key}
-              type="number"
-              value={(value as number) ?? ''}
-              onChange={(e) => handleFieldChange(field.name, parseFloat(e.target.value) || 0)}
-              className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent ${
-                error ? 'border-error bg-error-bg' : 'border-border-secondary'
-              }`}
-            />
-            <FieldError error={error} />
-          </div>
+        return labelled(
+          <input
+            id={key}
+            type="number"
+            value={(value as number) ?? ''}
+            onChange={(e) => set(parseFloat(e.target.value) || 0)}
+            className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent ${
+              error ? 'border-error bg-error-bg' : 'border-border-secondary'
+            }`}
+          />,
+          { withError: true },
         );
 
       case 'boolean':
@@ -494,7 +594,7 @@ export default function ContentEditorPage() {
               id={key}
               type="checkbox"
               checked={!!value}
-              onChange={(e) => handleFieldChange(field.name, e.target.checked)}
+              onChange={(e) => set(e.target.checked)}
               className="w-4 h-4 rounded border-border-secondary text-text-primary focus:ring-border-dark"
             />
             <label htmlFor={key} className="text-sm font-medium text-text-secondary">{field.label}</label>
@@ -506,45 +606,32 @@ export default function ContentEditorPage() {
 
       case 'select':
       case 'dropdown':
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-            </label>
-            <select
-              id={key}
-              value={(value as string) || ''}
-              onChange={(e) => handleFieldChange(field.name, e.target.value)}
-              className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
-            >
-              <option value="">请选择</option>
-              {field.options?.map((opt) => (
-                <option key={String(opt.value)} value={String(opt.value)}>
-                  {opt.label}
-                </option>
-              ))}
-            </select>
-          </div>
+        return labelled(
+          <select
+            id={key}
+            value={(value as string) || ''}
+            onChange={(e) => set(e.target.value)}
+            className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
+          >
+            <option value="">请选择</option>
+            {field.options?.map((opt) => (
+              <option key={String(opt.value)} value={String(opt.value)}>
+                {opt.label}
+              </option>
+            ))}
+          </select>,
         );
 
       case 'json':
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-              {field.required && <span className="text-error-text ml-1">*</span>}
-            </label>
-            {field.description && (
-              <p className="text-xs text-text-muted mb-1.5">{field.description}</p>
-            )}
-            <JsonEditor
-              id={key}
-              value={value}
-              onChange={(json) => handleFieldChange(field.name, json)}
-              placeholder={field.placeholder}
-              error={error}
-            />
-          </div>
+        return labelled(
+          <JsonEditor
+            id={key}
+            value={value}
+            onChange={(json) => set(json)}
+            placeholder={field.placeholder}
+            error={error}
+          />,
+          { withDescription: true, withError: false },
         );
 
       case 'image':
@@ -557,7 +644,7 @@ export default function ContentEditorPage() {
               id={key}
               type="text"
               value={(value as string) || ''}
-              onChange={(e) => handleFieldChange(field.name, e.target.value)}
+              onChange={(e) => set(e.target.value)}
               placeholder="输入图片 URL 或从媒体库选择"
               className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
             />
@@ -572,30 +659,50 @@ export default function ContentEditorPage() {
         );
 
       case 'array':
+        // 数组走整体 JSON 编辑（与 json 同控件）。历史写法把 fields 子字段摊平成顶层输入框，
+        // 编辑既写不进数组又污染 data（S-22）。
+        return labelled(
+          <JsonEditor
+            id={key}
+            value={value}
+            onChange={(json) => set(json)}
+            placeholder={field.placeholder}
+            error={error}
+          />,
+          { withDescription: true, withError: false },
+        );
+
       case 'object':
         return (
           <fieldset key={key} className="border border-border-primary rounded-lg p-4">
             <legend className="text-sm font-medium text-text-secondary mb-3 px-1">
               {field.label}
             </legend>
-            {field.fields?.map((subField) => renderField(subField, `${field.name}.`))}
+            {field.fields?.map((subField) => {
+              const parentValue = (value && typeof value === 'object' && !Array.isArray(value))
+                ? (value as Record<string, unknown>)
+                : {};
+              return (
+                <div key={subField.name} className="mb-3 last:mb-0">
+                  {renderField(subField, `${field.name}.`, {
+                    parent: parentValue,
+                    write: (subName, v) => set({ ...parentValue, [subName]: v }),
+                  })}
+                </div>
+              );
+            })}
           </fieldset>
         );
 
       default:
-        return (
-          <div key={key}>
-            <label htmlFor={key} className="block text-sm font-medium text-text-secondary mb-1">
-              {field.label}
-            </label>
-            <input
-              id={key}
-              type="text"
-              value={(value as string) || ''}
-              onChange={(e) => handleFieldChange(field.name, e.target.value)}
-              className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
-            />
-          </div>
+        return labelled(
+          <input
+            id={key}
+            type="text"
+            value={(value as string) || ''}
+            onChange={(e) => set(e.target.value)}
+            className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
+          />,
         );
     }
   };
@@ -608,6 +715,27 @@ export default function ContentEditorPage() {
     );
   }
 
+  // 条目不存在：整个表单（连同所有保存入口）都不渲染，避免空表单 PUT 覆盖真实记录
+  if (itemNotFound) {
+    return (
+      <div className="space-y-4 max-w-3xl">
+        <div className="flex items-center gap-4">
+          <button
+            onClick={() => router.push(`/admin/content/${modelCode}`)}
+            className="p-2 rounded hover:bg-bg-hover transition-colors"
+          >
+            <ArrowLeft className="w-5 h-5" />
+          </button>
+          <h1 className="text-xl font-bold text-text-primary">编辑{modelLabel}</h1>
+        </div>
+        <div className="bg-error-bg border border-border-secondary text-error-text rounded-lg px-4 py-3 text-sm">
+          条目未找到，无法编辑。请返回列表确认后重新打开。
+          <div className="mt-1 text-xs text-text-muted">{itemId}</div>
+        </div>
+      </div>
+    );
+  }
+
   return (
     <div className="space-y-6 max-w-3xl">
       {/* Header */}
@@ -631,6 +759,9 @@ export default function ContentEditorPage() {
             <p className="text-sm text-text-muted mt-1">{model?.name}</p>
           </div>
         </div>
+        {/* 写入门禁（渲染侧，唯一一处）：条目/模型未成功加载前，自动保存指示、
+            保存、发布、保存并返回整簇都不渲染；下方页脚同款簇同理。 */}
+        {canEdit && (
         <div className="flex items-center gap-3">
           {/* 自动保存状态指示器 */}
           {!isNew && (
@@ -704,6 +835,7 @@ export default function ContentEditorPage() {
             {saving ? '保存中...' : isNew ? '创建' : '保存并返回'}
           </button>
         </div>
+        )}
       </div>
 
       {error && (
@@ -790,19 +922,14 @@ export default function ContentEditorPage() {
           <FieldError error={validationErrors.slug} />
         </div>
 
-        {/* 状态 */}
+        {/* 状态：只读展示。流转必须走 /api/admin/items/[id]/workflow（B-1），
+            此前此处的 <select> 一旦改动必然被 PUT 拒绝为 400 */}
         <div>
-          <label htmlFor="status" className="block text-sm font-medium text-text-secondary mb-1">状态</label>
-          <select
-            id="status"
-            value={status}
-            onChange={(e) => setStatus(e.target.value)}
-            className="w-full px-3 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
-          >
-            <option value="draft">草稿</option>
-            <option value="published">已发布</option>
-            <option value="archived">已归档</option>
-          </select>
+          <p className="text-sm font-medium text-text-secondary mb-1">状态</p>
+          <p className="px-3 py-2 border border-border-secondary rounded-lg text-sm text-text-secondary">
+            {STATUS_LABELS[status] ?? status}
+          </p>
+          <p className="mt-1 text-xs text-text-muted">状态通过「发布」提交审核变更，不可在此直接修改</p>
         </div>
 
         {/* 模型字段 */}
@@ -815,6 +942,7 @@ export default function ContentEditorPage() {
           <FileText className="w-3.5 h-3.5" />
           {modelCode} / {isNew ? '新建' : itemId}
         </div>
+        {canEdit && (
         <div className="flex items-center gap-3">
           {/* 仅保存按钮（底部） */}
           {!isNew && (
@@ -838,6 +966,7 @@ export default function ContentEditorPage() {
             {saving ? '保存中...' : isNew ? '创建' : '保存并返回'}
           </button>
         </div>
+        )}
       </div>
 
       {/* 发布确认对话框 */}
diff --git a/src/app/admin/content/[modelCode]/page.test.tsx b/src/app/admin/content/[modelCode]/page.test.tsx
new file mode 100644
index 0000000..c4fefc7
--- /dev/null
+++ b/src/app/admin/content/[modelCode]/page.test.tsx
@@ -0,0 +1,154 @@
+import { describe, it, expect, beforeEach, jest } from '@jest/globals';
+import { render, screen, fireEvent, waitFor, act } from '@testing-library/react';
+import '@testing-library/jest-dom';
+
+/**
+ * 内容列表页「搜索」链路的回归测试。
+ *
+ * 钉死两件事：
+ *   1. 输入框连续按键不得逐次打后端（防抖），只按最终关键词发一次请求；
+ *   2. 迟到的旧关键词响应不得覆盖新关键词的响应（乱序即错数据）。
+ */
+
+type Fn = jest.Mock<(...args: unknown[]) => Promise<unknown>>;
+
+interface ApiMock {
+  getItems: Fn;
+  deleteItem: Fn;
+}
+
+interface NavMock {
+  state: { params: Record<string, string> };
+  push: Fn;
+}
+
+interface AuthMock {
+  state: { user: Record<string, string> | null; loading: boolean };
+}
+
+jest.mock('next/navigation', () => {
+  const push = jest.fn();
+  const router = { push, prefetch: jest.fn() };
+  const state = { params: { modelCode: 'news' } as Record<string, string> };
+  return { state, push, useRouter: () => router, useParams: () => state.params };
+});
+
+jest.mock('@/components/admin/auth-context', () => {
+  const state = {
+    user: { id: 'u1', username: 'admin', nickname: '管理员', role: 'superadmin', avatar: '' },
+    loading: false,
+  };
+  return { state, useAuth: () => ({ user: state.user, loading: state.loading, token: 't', login: jest.fn(), logout: jest.fn() }) };
+});
+
+jest.mock('@/lib/admin-api', () => ({
+  adminApi: {
+    getItems: jest.fn(),
+    deleteItem: jest.fn(),
+  },
+}));
+
+jest.mock('@/components/ui/sonner', () => ({
+  Toaster: () => null,
+  toast: { success: jest.fn(), error: jest.fn(), info: jest.fn(), dismiss: jest.fn() },
+}));
+
+import ContentListPage from './page';
+
+const nav = jest.requireMock('next/navigation') as NavMock;
+const auth = jest.requireMock('@/components/admin/auth-context') as AuthMock;
+const api = (jest.requireMock('@/lib/admin-api') as { adminApi: ApiMock }).adminApi;
+
+const SEARCH_INPUT = '搜索新闻资讯...';
+
+function row(title: string) {
+  return {
+    id: `row-${title}`,
+    title,
+    slug: `slug-${title}`,
+    status: 'draft',
+    data: {},
+    sortOrder: 0,
+    publishedAt: null,
+    updatedAt: '2026-01-01T00:00:00.000Z',
+  };
+}
+
+function rowsResult(items: unknown[]) {
+  return { items, total: items.length, page: 1, pageSize: 10, totalPages: 1 };
+}
+
+function callsOf(mock: Fn): unknown[][] {
+  return mock.mock.calls as unknown[][];
+}
+
+/** 每次请求带的 search 关键词序列（undefined = 首屏 / 翻页请求） */
+function searchesOf(mock: Fn): Array<string | undefined> {
+  return callsOf(mock).map((call) => (call[0] as { search?: string })?.search);
+}
+
+async function typeSearch(value: string) {
+  await act(async () => {
+    fireEvent.change(screen.getByPlaceholderText(SEARCH_INPUT), { target: { value } });
+  });
+}
+
+async function waitMs(ms: number) {
+  await act(async () => {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+  });
+}
+
+function resetMocks() {
+  jest.clearAllMocks();
+  auth.state.user = { id: 'u1', username: 'admin', nickname: '管理员', role: 'superadmin', avatar: '' };
+  auth.state.loading = false;
+  api.getItems.mockResolvedValue(rowsResult([row('全部内容')]));
+  api.deleteItem.mockResolvedValue({ message: '删除成功' });
+}
+
+describe('内容列表页：搜索请求节流', () => {
+  beforeEach(resetMocks);
+
+  it('连续输入不得逐次请求，只在防抖窗口后按最终关键词发一次', async () => {
+    nav.state.params = { modelCode: 'news' };
+    render(<ContentListPage />);
+    await waitFor(() => expect(api.getItems).toHaveBeenCalledTimes(1));
+
+    await typeSearch('a');
+    await typeSearch('ab');
+    await typeSearch('abc');
+
+    // 修复前：search 直接进 effect 依赖，每个按键立刻打一次请求
+    expect(callsOf(api.getItems)).toHaveLength(1);
+
+    await waitFor(() => expect(searchesOf(api.getItems)).toEqual([undefined, 'abc']));
+    expect(callsOf(api.getItems)).toHaveLength(2);
+  });
+
+  it('旧关键词的迟到响应不得覆盖新关键词的结果', async () => {
+    api.getItems.mockImplementation((params: unknown) => {
+      const search = (params as { search?: string })?.search;
+      if (search === 'slow') {
+        return new Promise((resolve) => {
+          setTimeout(() => resolve(rowsResult([row('慢查询结果')])), 500);
+        });
+      }
+      if (search === 'slowq') return Promise.resolve(rowsResult([row('新查询结果')]));
+      return Promise.resolve(rowsResult([row('全部内容')]));
+    });
+
+    nav.state.params = { modelCode: 'news' };
+    render(<ContentListPage />);
+    await waitFor(() => expect(screen.getByText('全部内容')).toBeInTheDocument());
+
+    await typeSearch('slow');
+    await waitMs(350); // 慢请求已发出，尚未返回
+    await typeSearch('slowq');
+    await waitFor(() => expect(screen.getByText('新查询结果')).toBeInTheDocument());
+    await waitMs(600); // 慢响应此刻才到达
+
+    expect(screen.getByText('新查询结果')).toBeInTheDocument();
+    expect(screen.queryByText('慢查询结果')).toBeNull();
+  });
+});
diff --git a/src/app/admin/content/[modelCode]/page.tsx b/src/app/admin/content/[modelCode]/page.tsx
index cea89ab..779b7f4 100644
--- a/src/app/admin/content/[modelCode]/page.tsx
+++ b/src/app/admin/content/[modelCode]/page.tsx
@@ -1,6 +1,6 @@
 'use client';
 
-import { useEffect, useState, useCallback } from 'react';
+import { useEffect, useState, useCallback, useRef } from 'react';
 import { useRouter, useParams } from 'next/navigation';
 import { useAuth } from '@/components/admin/auth-context';
 import { adminApi } from '@/lib/admin-api';
@@ -27,6 +27,17 @@ const MODEL_LABELS: Record<string, string> = {
   'stat-item': '数据指标',
 };
 
+// 与 src/lib/cms/types.ts ContentStatus 四态一致（见 [itemId]/page.tsx 的 STATUS_LABELS）
+const STATUS_LABELS: Record<string, string> = {
+  draft: '草稿',
+  review: '待审核',
+  published: '已发布',
+  archived: '已归档',
+};
+
+// 搜索输入的稳定窗口：逐键打后端既浪费配额，又让乱序响应有机会覆盖正确结果
+const SEARCH_DEBOUNCE_MS = 300;
+
 interface ContentItem {
   id: string;
   title: string;
@@ -47,16 +58,25 @@ export default function ContentListPage() {
   const [items, setItems] = useState<ContentItem[]>([]);
   const [total, setTotal] = useState(0);
   const [page, setPage] = useState(1);
+  const [searchInput, setSearchInput] = useState('');
   const [search, setSearch] = useState('');
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState('');
   const [deleteDialogOpen, setDeleteDialogOpen] = useState(false);
   const [pendingDeleteId, setPendingDeleteId] = useState<string | null>(null);
   const pageSize = 10;
+  // 单调递增的请求序号：只有最新一次请求的响应可以写进 state
+  const fetchSeqRef = useRef(0);
 
   const modelLabel = MODEL_LABELS[modelCode] || modelCode;
 
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), SEARCH_DEBOUNCE_MS);
+    return () => clearTimeout(timer);
+  }, [searchInput]);
+
   const fetchItems = useCallback(async () => {
+    const seq = ++fetchSeqRef.current;
     setLoading(true);
     setError('');
     try {
@@ -66,13 +86,15 @@ export default function ContentListPage() {
         pageSize,
         ...(search ? { search } : {}),
       });
+      if (seq !== fetchSeqRef.current) return;
       const data = res as { items: ContentItem[]; total: number };
       setItems(data?.items || []);
       setTotal(data?.total || 0);
     } catch (err) {
+      if (seq !== fetchSeqRef.current) return;
       setError(err instanceof Error ? err.message : '加载失败');
     } finally {
-      setLoading(false);
+      if (seq === fetchSeqRef.current) setLoading(false);
     }
   }, [modelCode, page, search]);
 
@@ -137,8 +159,8 @@ export default function ContentListPage() {
           <Search className="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-text-muted" />
           <input
             type="text"
-            value={search}
-            onChange={(e) => { setSearch(e.target.value); setPage(1); }}
+            value={searchInput}
+            onChange={(e) => { setSearchInput(e.target.value); setPage(1); }}
             placeholder={`搜索${modelLabel}...`}
             className="w-full pl-10 pr-4 py-2 border border-border-secondary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-dark focus:border-transparent"
           />
@@ -201,7 +223,7 @@ export default function ContentListPage() {
                             : 'bg-bg-hover text-text-tertiary'
                         }`}
                       >
-                        {item.status === 'published' ? '已发布' : item.status === 'draft' ? '草稿' : '已归档'}
+                        {STATUS_LABELS[item.status] || item.status}
                       </span>
                     </td>
                     <td className="px-4 py-3 text-sm text-text-muted">
diff --git a/src/app/admin/login/page.tsx b/src/app/admin/login/page.tsx
index 1498aa5..57d04a1 100644
--- a/src/app/admin/login/page.tsx
+++ b/src/app/admin/login/page.tsx
@@ -48,10 +48,11 @@ export default function AdminLoginPage() {
           )}
 
           <div>
-            <label className="block text-sm font-medium text-text-secondary mb-1.5">
+            <label htmlFor="admin-login-username" className="block text-sm font-medium text-text-secondary mb-1.5">
               用户名
             </label>
             <input
+              id="admin-login-username"
               type="text"
               value={username}
               onChange={(e) => setUsername(e.target.value)}
@@ -63,11 +64,12 @@ export default function AdminLoginPage() {
           </div>
 
           <div>
-            <label className="block text-sm font-medium text-text-secondary mb-1.5">
+            <label htmlFor="admin-login-password" className="block text-sm font-medium text-text-secondary mb-1.5">
               密码
             </label>
             <div className="relative">
               <input
+                id="admin-login-password"
                 type={showPassword ? 'text' : 'password'}
                 value={password}
                 onChange={(e) => setPassword(e.target.value)}
@@ -77,7 +79,8 @@ export default function AdminLoginPage() {
               />
               <button
                 type="button"
-                onClick={() => setShowPassword(!showPassword)}
+                onClick={() => setShowPassword((prev) => !prev)}
+                aria-label={showPassword ? '隐藏密码' : '显示密码'}
                 className="absolute right-3 top-1/2 -translate-y-1/2 text-text-muted hover:text-text-tertiary"
               >
                 {showPassword ? <EyeOff className="w-4 h-4" /> : <Eye className="w-4 h-4" />}
diff --git a/src/app/admin/media/page.tsx b/src/app/admin/media/page.tsx
index caf00b9..6dbb3d3 100644
--- a/src/app/admin/media/page.tsx
+++ b/src/app/admin/media/page.tsx
@@ -32,6 +32,7 @@ export default function MediaPage() {
   const [items, setItems] = useState<MediaItem[]>([]);
   const [loading, setLoading] = useState(true);
   const [uploading, setUploading] = useState(false);
+  const [error, setError] = useState('');
   const [copiedId, setCopiedId] = useState<string | null>(null);
   const [deleteDialogOpen, setDeleteDialogOpen] = useState(false);
   const [pendingDeleteId, setPendingDeleteId] = useState<string | null>(null);
@@ -42,8 +43,9 @@ export default function MediaPage() {
       const res = await adminApi.getMedia({ pageSize: 100 });
       const data = (res as { items: MediaItem[] });
       setItems(data?.items || []);
+      setError('');
     } catch (err) {
-      console.error(err);
+      setError(err instanceof Error ? err.message : '加载失败');
     } finally {
       setLoading(false);
     }
@@ -99,6 +101,8 @@ export default function MediaPage() {
     navigator.clipboard.writeText(url).then(() => {
       setCopiedId(id);
       setTimeout(() => setCopiedId(null), 2000);
+    }).catch(() => {
+      toast.error('复制失败，请手动复制图片地址');
     });
   };
 
@@ -138,6 +142,12 @@ export default function MediaPage() {
         </label>
       </div>
 
+      {error && (
+        <div className="bg-error-bg border border-border-secondary text-error-text rounded-lg px-4 py-3 text-sm">
+          {error}
+        </div>
+      )}
+
       <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-6 gap-4">
         {items.map((item) => (
           <div
@@ -191,23 +201,20 @@ export default function MediaPage() {
         ))}
       </div>
 
-      {items.length === 0 && !loading && (
+      {items.length === 0 && !loading && !error && (
         <div className="text-center py-16 bg-bg-primary rounded-lg border border-dashed border-border-secondary">
           {/* eslint-disable-next-line jsx-a11y/alt-text -- lucide Image 图标（装饰性 SVG，非 <img>），aria-hidden 表明装饰意图 */}
           <Image aria-hidden="true" className="w-12 h-12 mx-auto mb-4 text-text-muted" />
           <h3 className="text-sm font-medium text-text-primary mb-1">暂无媒体文件</h3>
           <p className="text-sm text-text-muted mb-4">上传图片、文档等资源，即可在内容编辑中使用</p>
-          <label className="inline-flex items-center gap-2 bg-dark-bg text-white rounded-lg px-4 py-2 text-sm font-medium hover:bg-dark-bg-secondary cursor-pointer transition-colors">
+          <button
+            type="button"
+            onClick={() => fileInputRef.current?.click()}
+            className="inline-flex items-center gap-2 bg-dark-bg text-white rounded-lg px-4 py-2 text-sm font-medium hover:bg-dark-bg-secondary transition-colors"
+          >
             <Upload className="w-4 h-4" />
             上传文件
-            <input
-              ref={fileInputRef}
-              type="file"
-              onChange={handleUpload}
-              className="hidden"
-              accept="image/*,.pdf,.doc,.docx,.xls,.xlsx,.ppt,.pptx,.zip"
-            />
-          </label>
+          </button>
         </div>
       )}
 
diff --git a/src/app/admin/notifications/page.tsx b/src/app/admin/notifications/page.tsx
index f0591a1..6a33c43 100644
--- a/src/app/admin/notifications/page.tsx
+++ b/src/app/admin/notifications/page.tsx
@@ -1,6 +1,6 @@
 'use client';
 
-import { useEffect, useState, useCallback } from 'react';
+import { useEffect, useState, useCallback, useRef } from 'react';
 import { useRouter } from 'next/navigation';
 import { useAuth } from '@/components/admin/auth-context';
 import { adminApi } from '@/lib/admin-api';
@@ -63,8 +63,11 @@ export default function NotificationsPage() {
   const [unreadOnly, setUnreadOnly] = useState(false);
   const [unreadCount, setUnreadCount] = useState(0);
   const pageSize = 20;
+  // 单调递增的请求序号：只有最新一次请求的响应可以写进 state
+  const fetchSeqRef = useRef(0);
 
   const fetchNotifications = useCallback(async () => {
+    const seq = ++fetchSeqRef.current;
     setLoading(true);
     setError('');
     try {
@@ -80,12 +83,14 @@ export default function NotificationsPage() {
         pageSize: number;
         totalPages: number;
       }>(`/api/admin/notifications?${query.toString()}`);
+      if (seq !== fetchSeqRef.current) return;
       setNotifications(data.items || []);
       setTotal(data.total || 0);
     } catch (err) {
+      if (seq !== fetchSeqRef.current) return;
       setError(err instanceof Error ? err.message : '加载失败');
     } finally {
-      setLoading(false);
+      if (seq === fetchSeqRef.current) setLoading(false);
     }
   }, [page, unreadOnly]);
 
@@ -164,7 +169,7 @@ export default function NotificationsPage() {
         </div>
         <div className="flex items-center gap-2">
           <button
-            onClick={() => { setUnreadOnly(!unreadOnly); setPage(1); }}
+            onClick={() => { setUnreadOnly((prev) => !prev); setPage(1); }}
             className={`flex items-center gap-2 px-3 py-2 rounded-lg text-sm font-medium border transition-colors ${
               unreadOnly
                 ? 'bg-dark-bg text-white border-border-dark'
diff --git a/src/app/admin/page.tsx b/src/app/admin/page.tsx
index 28fc203..ad1a93f 100644
--- a/src/app/admin/page.tsx
+++ b/src/app/admin/page.tsx
@@ -98,6 +98,7 @@ export default function AdminDashboardPage() {
   const router = useRouter();
   const [stats, setStats] = useState<DashboardStats | null>(null);
   const [fetching, setFetching] = useState(true);
+  const [error, setError] = useState('');
 
   useEffect(() => {
     if (!authLoading && !user) {
@@ -106,8 +107,8 @@ export default function AdminDashboardPage() {
     }
     if (user) {
       adminApi.request<DashboardStats>('/api/admin/stats')
-        .then((s) => setStats(s))
-        .catch(console.error)
+        .then((s) => { setStats(s); setError(''); })
+        .catch((err) => setError(err instanceof Error ? err.message : '加载失败'))
         .finally(() => setFetching(false));
     }
   }, [user, authLoading, router]);
@@ -127,6 +128,12 @@ export default function AdminDashboardPage() {
         <p className="text-sm text-text-muted mt-1">欢迎回来，{user?.nickname || user?.username}</p>
       </div>
 
+      {error && (
+        <div className="bg-error-bg border border-border-secondary text-error-text rounded-lg px-4 py-3 text-sm">
+          {error}
+        </div>
+      )}
+
       {/* Stats cards */}
       <div className="grid grid-cols-2 sm:grid-cols-3 lg:grid-cols-6 gap-4">
         {[
diff --git a/src/app/admin/roles/page.tsx b/src/app/admin/roles/page.tsx
index 31dd21d..55c118b 100644
--- a/src/app/admin/roles/page.tsx
+++ b/src/app/admin/roles/page.tsx
@@ -42,6 +42,7 @@ export default function RolesPage() {
   const [saving, setSaving] = useState(false);
   const [error, setError] = useState('');
 
+  // 不依赖 selectedRole：切换角色若触发整体 refetch，服务端数据会覆盖未保存的本地编辑
   const fetchRoles = useCallback(async () => {
     setLoading(true);
     setError('');
@@ -56,19 +57,17 @@ export default function RolesPage() {
       });
       setPermissions(permSet);
 
-      if (data.roles?.length > 0 && !selectedRole) {
-        // 默认选中第一个非 super_admin 角色，方便配置
-        const defaultRole = data.roles.find((r) => r.code !== 'super_admin') || data.roles[0];
-        if (defaultRole) {
-          setSelectedRole(defaultRole.code);
-        }
+      // 默认选中第一个非 super_admin 角色，方便配置；已有选中值时不覆盖
+      const defaultRole = (data.roles || []).find((r) => r.code !== 'super_admin') || data.roles?.[0];
+      if (defaultRole) {
+        setSelectedRole((prev) => prev || defaultRole.code);
       }
     } catch (err) {
       setError(err instanceof Error ? err.message : '加载失败');
     } finally {
       setLoading(false);
     }
-  }, [selectedRole]);
+  }, []);
 
   useEffect(() => {
     if (!authLoading && !user) {
@@ -241,7 +240,10 @@ export default function RolesPage() {
                         <code className="text-xs text-text-muted">{model.code}</code>
                       </td>
                       {ACTION_ORDER.map((action) => {
-                        const enabled = hasPermission(selectedRole, model.code, action);
+                        // super_admin 无逐行权限记录（运行时短路放行），矩阵整体按已授权呈现，与头部「拥有所有权限」文案一致
+                        const enabled =
+                          selectedRoleInfo?.code === 'super_admin' ||
+                          hasPermission(selectedRole, model.code, action);
                         return (
                           <td key={action} className="px-2 py-3 text-center">
                             <button
diff --git a/src/app/admin/users/page.tsx b/src/app/admin/users/page.tsx
index 5a4b07a..58846dc 100644
--- a/src/app/admin/users/page.tsx
+++ b/src/app/admin/users/page.tsx
@@ -1,6 +1,6 @@
 'use client';
 
-import { useEffect, useState, useCallback } from 'react';
+import { useEffect, useState, useCallback, useRef } from 'react';
 import { useRouter } from 'next/navigation';
 import { useAuth } from '@/components/admin/auth-context';
 import { adminApi } from '@/lib/admin-api';
@@ -52,6 +52,8 @@ const ROLE_COLORS: Record<string, string> = {
   readonly: 'bg-bg-hover text-text-secondary',
 };
 
+const SEARCH_DEBOUNCE_MS = 300;
+
 export default function UsersPage() {
   const { user, loading: authLoading } = useAuth();
   const router = useRouter();
@@ -59,11 +61,14 @@ export default function UsersPage() {
   const [users, setUsers] = useState<UserData[]>([]);
   const [total, setTotal] = useState(0);
   const [page, setPage] = useState(1);
+  const [searchInput, setSearchInput] = useState('');
   const [search, setSearch] = useState('');
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState('');
   const [roles, setRoles] = useState<RoleData[]>([]);
   const pageSize = 20;
+  // 单调递增的请求序号：只有最新一次请求的响应可以写进 state
+  const fetchSeqRef = useRef(0);
 
   // Create/Edit dialog state
   const [dialogOpen, setDialogOpen] = useState(false);
@@ -82,7 +87,13 @@ export default function UsersPage() {
   const [deleteDialogOpen, setDeleteDialogOpen] = useState(false);
   const [pendingDeleteId, setPendingDeleteId] = useState<string | null>(null);
 
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), SEARCH_DEBOUNCE_MS);
+    return () => clearTimeout(timer);
+  }, [searchInput]);
+
   const fetchUsers = useCallback(async () => {
+    const seq = ++fetchSeqRef.current;
     setLoading(true);
     setError('');
     try {
@@ -98,12 +109,14 @@ export default function UsersPage() {
         pageSize: number;
         totalPages: number;
       }>(`/api/admin/users?${query.toString()}`);
+      if (seq !== fetchSeqRef.current) return;
       setUsers(data.users || []);
       setTotal(data.total || 0);
     } catch (err) {
+      if (seq !== fetchSeqRef.current) return;
       setError(err instanceof Error ? err.message : '加载失败');
     } finally {
-      setLoading(false);
+      if (seq === fetchSeqRef.current) setLoading(false);
     }
   }, [page, search]);
 
@@ -259,8 +272,8 @@ export default function UsersPage() {
         <input
           type="text"
           placeholder="搜索用户名、昵称或邮箱..."
-          value={search}
-          onChange={(e) => { setSearch(e.target.value); setPage(1); }}
+          value={searchInput}
+          onChange={(e) => { setSearchInput(e.target.value); setPage(1); }}
           className="w-full pl-10 pr-4 py-2 border border-border-primary rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-border-primary"
         />
       </div>
@@ -419,8 +432,9 @@ export default function UsersPage() {
 
             <div className="space-y-4">
               <div>
-                <label className="block text-sm font-medium text-text-secondary mb-1">用户名</label>
+                <label htmlFor="admin-user-username" className="block text-sm font-medium text-text-secondary mb-1">用户名</label>
                 <input
+                  id="admin-user-username"
                   type="text"
                   value={formData.username}
                   onChange={(e) => setFormData((p) => ({ ...p, username: e.target.value }))}
@@ -431,10 +445,11 @@ export default function UsersPage() {
               </div>
 
               <div>
-                <label className="block text-sm font-medium text-text-secondary mb-1">
+                <label htmlFor="admin-user-password" className="block text-sm font-medium text-text-secondary mb-1">
                   {editingUser ? '新密码（留空不修改）' : '密码'}
                 </label>
                 <input
+                  id="admin-user-password"
                   type="password"
                   value={formData.password}
                   onChange={(e) => setFormData((p) => ({ ...p, password: e.target.value }))}
@@ -445,8 +460,9 @@ export default function UsersPage() {
 
               <div className="grid grid-cols-2 gap-4">
                 <div>
-                  <label className="block text-sm font-medium text-text-secondary mb-1">昵称</label>
+                  <label htmlFor="admin-user-nickname" className="block text-sm font-medium text-text-secondary mb-1">昵称</label>
                   <input
+                    id="admin-user-nickname"
                     type="text"
                     value={formData.nickname}
                     onChange={(e) => setFormData((p) => ({ ...p, nickname: e.target.value }))}
@@ -454,8 +470,9 @@ export default function UsersPage() {
                   />
                 </div>
                 <div>
-                  <label className="block text-sm font-medium text-text-secondary mb-1">邮箱</label>
+                  <label htmlFor="admin-user-email" className="block text-sm font-medium text-text-secondary mb-1">邮箱</label>
                   <input
+                    id="admin-user-email"
                     type="email"
                     value={formData.email}
                     onChange={(e) => setFormData((p) => ({ ...p, email: e.target.value }))}
@@ -465,8 +482,9 @@ export default function UsersPage() {
               </div>
 
               <div>
-                <label className="block text-sm font-medium text-text-secondary mb-1">手机号</label>
+                <label htmlFor="admin-user-phone" className="block text-sm font-medium text-text-secondary mb-1">手机号</label>
                 <input
+                  id="admin-user-phone"
                   type="tel"
                   value={formData.phone}
                   onChange={(e) => setFormData((p) => ({ ...p, phone: e.target.value }))}
@@ -475,8 +493,8 @@ export default function UsersPage() {
               </div>
 
               <div>
-                <label className="block text-sm font-medium text-text-secondary mb-2">角色分配</label>
-                <div className="flex flex-wrap gap-2">
+                <span id="admin-user-roles-label" className="block text-sm font-medium text-text-secondary mb-2">角色分配</span>
+                <div className="flex flex-wrap gap-2" role="group" aria-labelledby="admin-user-roles-label">
                   {roles.map((r) => (
                     <button
                       key={r.code}
diff --git a/src/app/admin/zones/page.tsx b/src/app/admin/zones/page.tsx
index e33bd1a..361bab9 100644
--- a/src/app/admin/zones/page.tsx
+++ b/src/app/admin/zones/page.tsx
@@ -31,6 +31,7 @@ export default function ZonesPage() {
   const [loading, setLoading] = useState(true);
   const [editingZone, setEditingZone] = useState<Zone | null>(null);
   const [saving, setSaving] = useState(false);
+  const [error, setError] = useState('');
 
   useEffect(() => {
     if (!authLoading && !user) {
@@ -40,7 +41,8 @@ export default function ZonesPage() {
     if (user) {
       adminApi.getZones().then((res) => {
         setZones((res as Zone[]) || []);
-      }).catch(console.error).finally(() => setLoading(false));
+        setError('');
+      }).catch((err) => setError(err instanceof Error ? err.message : '加载失败')).finally(() => setLoading(false));
     }
   }, [user, authLoading, router]);
 
@@ -86,6 +88,12 @@ export default function ZonesPage() {
         <p className="text-sm text-text-muted mt-1">管理系统各页面的内容区域布局</p>
       </div>
 
+      {error && (
+        <div className="bg-error-bg border border-border-secondary text-error-text rounded-lg px-4 py-3 text-sm">
+          {error}
+        </div>
+      )}
+
       <div className="grid gap-4">
         {zones.map((zone) => (
           <div key={zone.id} className="bg-bg-primary rounded-lg border border-border-primary p-4">
@@ -111,8 +119,9 @@ export default function ZonesPage() {
               <div className="mt-4 pt-4 border-t border-border-light space-y-4">
                 <div className="grid grid-cols-2 gap-4">
                   <div>
-                    <label className="block text-xs font-medium text-text-secondary mb-1">名称</label>
+                    <label htmlFor="zone-edit-name" className="block text-xs font-medium text-text-secondary mb-1">名称</label>
                     <input
+                      id="zone-edit-name"
                       type="text"
                       value={editingZone.name}
                       onChange={(e) => setEditingZone({ ...editingZone, name: e.target.value })}
@@ -120,8 +129,9 @@ export default function ZonesPage() {
                     />
                   </div>
                   <div>
-                    <label className="block text-xs font-medium text-text-secondary mb-1">页面标识</label>
+                    <label htmlFor="zone-edit-page-code" className="block text-xs font-medium text-text-secondary mb-1">页面标识</label>
                     <input
+                      id="zone-edit-page-code"
                       type="text"
                       value={editingZone.pageCode}
                       onChange={(e) => setEditingZone({ ...editingZone, pageCode: e.target.value })}
diff --git a/src/app/api/admin/items/[id]/workflow/route.test.ts b/src/app/api/admin/items/[id]/workflow/route.test.ts
index 4a02ebb..16c8fb6 100644
--- a/src/app/api/admin/items/[id]/workflow/route.test.ts
+++ b/src/app/api/admin/items/[id]/workflow/route.test.ts
@@ -36,6 +36,12 @@ jest.mock('@/lib/permissions', () => ({
   requirePermission: mockRequirePermission,
 }));
 
+// Q-8：workflow POST 现会先 authenticateRequest 再探存在性；默认给有效会话。
+const mockAuthenticateRequest = jest.fn<(request: NextRequest) => unknown>();
+jest.mock('@/lib/auth', () => ({
+  authenticateRequest: mockAuthenticateRequest,
+}));
+
 jest.unmock('./route');
 
 import { POST } from './route';
@@ -77,6 +83,7 @@ beforeEach(() => {
   jest.clearAllMocks();
   mockContentItemFindUnique.mockResolvedValue(mockItem);
   mockContentItemFindUniqueOrThrow.mockResolvedValue(mockUpdatedItem);
+  mockAuthenticateRequest.mockReturnValue({ userId: 'user-1', username: 'editor', role: 'editor' });
 });
 
 describe('POST /api/admin/items/[id]/workflow', () => {
@@ -111,6 +118,16 @@ describe('POST /api/admin/items/[id]/workflow', () => {
     expect(body.error).toBe('内容不存在');
   });
 
+  // Q-8：匿名调用者不得用「404 vs 401」枚举 ID —— 认证须先于存在性探针。
+  it('rejects an unauthenticated workflow with 401 WITHOUT probing item existence', async () => {
+    mockAuthenticateRequest.mockReturnValue(null);
+    const request = createMockRequest({ action: 'submit' });
+    const response = await POST(request, { params: Promise.resolve({ id: 'item-1' }) });
+
+    expect(response.status).toBe(401);
+    expect(mockContentItemFindUnique).not.toHaveBeenCalled();
+  });
+
   it('submit requires update permission', async () => {
     mockAuthorized('update');
     const request = createMockRequest({ action: 'submit' });
diff --git a/src/app/api/admin/items/[id]/workflow/route.ts b/src/app/api/admin/items/[id]/workflow/route.ts
index f2b19da..e9874c4 100644
--- a/src/app/api/admin/items/[id]/workflow/route.ts
+++ b/src/app/api/admin/items/[id]/workflow/route.ts
@@ -1,6 +1,7 @@
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
 import { requirePermission } from '@/lib/permissions';
+import { authenticateRequest } from '@/lib/auth';
 import {
   submitForReview,
   approve,
@@ -11,14 +12,17 @@ import {
 import {
   success,
   notFound,
+  unauthorized,
   validationError,
   internalError,
   forbidden,
 } from '@/lib/api-response';
 import { withCrypto } from '@/lib/api-crypto';
+import { parseCmsData } from '@/lib/cms/validate-content-data';
 
+// 与 items/route.ts 同源：脏 data 列不得让这个已成功的审批动作在返回阶段变成 500（B-4）。
 function parseItem(item: { data: string; [key: string]: unknown }) {
-  return { ...item, data: JSON.parse(item.data as string) };
+  return { ...item, data: parseCmsData(item.data) };
 }
 
 interface WorkflowBody {
@@ -51,6 +55,9 @@ export const POST = withCrypto(async (
       return validationError(`非法的 action: ${action}`);
     }
 
+    // Q-8：认证先于存在性探针，避免匿名枚举内容 ID。
+    if (!authenticateRequest(request)) return unauthorized();
+
     const existing = await prisma.contentItem.findUnique({ where: { id } });
     if (!existing) return notFound('内容不存在');
 
diff --git a/src/app/api/admin/items/route.test.ts b/src/app/api/admin/items/route.test.ts
index 9881ffb..d7c1a76 100644
--- a/src/app/api/admin/items/route.test.ts
+++ b/src/app/api/admin/items/route.test.ts
@@ -10,6 +10,7 @@ const mockContentItemCreate = jest.fn<(args: unknown) => Promise<unknown>>();
 const mockContentItemUpdate = jest.fn<(args: unknown) => Promise<unknown>>();
 const mockContentItemDelete = jest.fn<(args: unknown) => Promise<unknown>>();
 const mockAuditLogCreate = jest.fn<(args: unknown) => Promise<unknown>>();
+const mockContentModelFindUnique = jest.fn<(args: unknown) => Promise<unknown | null>>();
 
 jest.mock('@/lib/db', () => ({
   prisma: {
@@ -22,6 +23,9 @@ jest.mock('@/lib/db', () => ({
       update: mockContentItemUpdate,
       delete: mockContentItemDelete,
     },
+    contentModel: {
+      findUnique: mockContentModelFindUnique,
+    },
     auditLog: {
       create: mockAuditLogCreate,
     },
@@ -37,9 +41,27 @@ jest.mock('@/lib/permissions', () => ({
   requirePermission: mockRequirePermission,
 }));
 
+// Q-8：PUT/DELETE 现会先 authenticateRequest 再探存在性；默认给出有效会话，
+// 让既有的「已授权」用例继续走通，枚举用例单独置空。
+const mockAuthenticateRequest = jest.fn<(request: NextRequest) => unknown>();
+jest.mock('@/lib/auth', () => ({
+  authenticateRequest: mockAuthenticateRequest,
+}));
+
 jest.unmock('./route');
 
 import { GET, POST, PUT, DELETE } from './route';
+import { CONTENT_TYPE_CONFIGS } from '@/lib/cms/content-types';
+
+const productFields = CONTENT_TYPE_CONFIGS['product'].model.fields;
+
+function mockProductModel() {
+  mockContentModelFindUnique.mockResolvedValue({
+    id: 'model-1',
+    code: 'product',
+    fields: JSON.stringify(productFields),
+  });
+}
 
 function createMockRequest(options: {
   url?: string;
@@ -98,6 +120,9 @@ beforeEach(() => {
   mockContentItemUpdate.mockResolvedValue(mockItem);
   mockContentItemDelete.mockResolvedValue(undefined);
   mockAuditLogCreate.mockResolvedValue({ id: 'log-1' });
+  mockContentModelFindUnique.mockResolvedValue(null);
+  // Q-8：默认视为已登录（合法会话），使「已授权」路径不受存在性前置门影响。
+  mockAuthenticateRequest.mockReturnValue({ userId: 'user-1', username: 'editor', role: 'content_editor' });
 });
 
 describe('/api/admin/items', () => {
@@ -131,6 +156,42 @@ describe('/api/admin/items', () => {
       });
     });
 
+    // Q-7：`page`/`pageSize` 未经校验会把 NaN 传进 Prisma skip/take（真库抛错→500），
+    // 且 pageSize 无界可被用来整表拉取。修复后经 parsePagination 收敛为有界默认值。
+    it('sanitizes non-numeric page and clamps oversized pageSize (no NaN/ unbounded take)', async () => {
+      mockAuthorized();
+      const response = await GET(
+        createMockRequest({ url: 'http://localhost/api/admin/items?page=abc&pageSize=99999' })
+      );
+      const body = await response.json();
+
+      expect(response.status).toBe(200);
+      expect(body.page).toBe(1);
+      expect(body.pageSize).toBe(100);
+      expect(mockContentItemFindMany).toHaveBeenCalledWith(
+        expect.objectContaining({ skip: 0, take: 100 })
+      );
+    });
+
+    // Q-8：匿名调用者不得通过「404(存在) vs 401(不存在)」枚举内容 ID —— 认证必须先于存在性探针。
+    it('rejects an unauthenticated PUT with 401 WITHOUT probing item existence (no ID oracle)', async () => {
+      mockAuthenticateRequest.mockReturnValue(null);
+      const response = await PUT(
+        createMockRequest({ url: 'http://localhost/api/admin/items?id=item-1' })
+      );
+      expect(response.status).toBe(401);
+      expect(mockContentItemFindUnique).not.toHaveBeenCalled();
+    });
+
+    it('rejects an unauthenticated DELETE with 401 WITHOUT probing item existence (no ID oracle)', async () => {
+      mockAuthenticateRequest.mockReturnValue(null);
+      const response = await DELETE(
+        createMockRequest({ url: 'http://localhost/api/admin/items?id=item-1' })
+      );
+      expect(response.status).toBe(401);
+      expect(mockContentItemFindUnique).not.toHaveBeenCalled();
+    });
+
     it('filters by modelCode and status', async () => {
       mockAuthorized();
       await GET(createMockRequest({ url: 'http://localhost/api/admin/items?modelCode=news&status=published' }));
@@ -162,6 +223,19 @@ describe('/api/admin/items', () => {
         })
       );
     });
+
+    it('applies id filter so the editor can locate one item without paging', async () => {
+      mockAuthorized();
+      await GET(
+        createMockRequest({ url: 'http://localhost/api/admin/items?modelCode=news&id=item-101&page=1&pageSize=1' })
+      );
+
+      expect(mockContentItemFindMany).toHaveBeenCalledWith(
+        expect.objectContaining({
+          where: { modelCode: 'news', id: 'item-101' },
+        })
+      );
+    });
   });
 
   describe('POST', () => {
@@ -200,7 +274,7 @@ describe('/api/admin/items', () => {
       expect(body.error).toContain('已存在');
     });
 
-    it('creates item and audit log', async () => {
+    it('creates item as draft and writes audit log', async () => {
       mockAuthorized();
       const response = await POST(createMockRequest({
         json: async () => ({
@@ -209,7 +283,6 @@ describe('/api/admin/items', () => {
           title: '新新闻',
           slug: 'new-news',
           data: { body: 'content' },
-          status: 'published',
           sortOrder: 1,
         }),
       }));
@@ -224,9 +297,9 @@ describe('/api/admin/items', () => {
             modelCode: 'news',
             title: '新新闻',
             slug: 'new-news',
-            status: 'published',
+            status: 'draft',
             sortOrder: 1,
-            publishedAt: expect.any(Date),
+            publishedAt: null,
           }),
         })
       );
@@ -240,6 +313,49 @@ describe('/api/admin/items', () => {
         })
       );
     });
+
+    // B-1：create 权限不得成为发布通道，且未知 status 不能入库（否则 workflow 表外状态会永久卡死）。
+    it.each(['published', 'review', 'archived', '任意字符串'])(
+      'refuses status "%s" on create and writes nothing',
+      async (status) => {
+        mockAuthorized();
+        const response = await POST(createMockRequest({
+          json: async () => ({
+            modelId: 'model-1',
+            modelCode: 'news',
+            title: '新新闻',
+            data: { body: 'content' },
+            status,
+          }),
+        }));
+        const body = await response.json();
+
+        expect(response.status).toBe(400);
+        expect(body.error).toContain('workflow');
+        expect(mockContentItemCreate).not.toHaveBeenCalled();
+        expect(mockAuditLogCreate).not.toHaveBeenCalled();
+      },
+    );
+
+    it('treats an explicit draft status as the default (no bypass, no rejection)', async () => {
+      mockAuthorized();
+      const response = await POST(createMockRequest({
+        json: async () => ({
+          modelId: 'model-1',
+          modelCode: 'news',
+          title: '新新闻',
+          data: { body: 'content' },
+          status: 'draft',
+        }),
+      }));
+
+      expect(response.status).toBe(201);
+      expect(mockContentItemCreate).toHaveBeenCalledWith(
+        expect.objectContaining({
+          data: expect.objectContaining({ status: 'draft', publishedAt: null }),
+        })
+      );
+    });
   });
 
   describe('PUT', () => {
@@ -275,6 +391,21 @@ describe('/api/admin/items', () => {
       expect(body.error).toContain('状态变更');
     });
 
+    it('accepts a PUT that echoes the unchanged status (admin autosave sends it every time)', async () => {
+      mockAuthorized();
+      const response = await PUT(createMockRequest({
+        url: 'http://localhost/api/admin/items?id=item-1',
+        json: async () => ({ title: '更新', status: 'draft' }),
+      }));
+
+      expect(response.status).toBe(200);
+      expect(mockContentItemUpdate).toHaveBeenCalledWith(
+        expect.objectContaining({
+          data: expect.objectContaining({ title: '更新' }),
+        })
+      );
+    });
+
     it('returns 400 when slug duplicated', async () => {
       mockAuthorized();
       mockContentItemFindFirst.mockResolvedValue({ id: 'other', slug: 'duplicated' });
@@ -359,4 +490,142 @@ describe('/api/admin/items', () => {
       );
     });
   });
+
+  describe('写入侧字段声明校验（B-3）', () => {
+    it('rejects a metric basis outside the declared options before any write', async () => {
+      mockAuthorized();
+      mockProductModel();
+
+      const response = await POST(createMockRequest({
+        json: async () => ({
+          modelId: 'model-1',
+          modelCode: 'product',
+          title: '虚构指标产品',
+          data: { metrics: [{ value: '99.9%', label: '系统可用率', basis: 'customer-proven' }] },
+        }),
+      }));
+      const body = await response.json();
+
+      expect(response.status).toBe(400);
+      expect(body.code).toBe('VALIDATION_ERROR');
+      expect(body.details.fields).toEqual([
+        expect.objectContaining({ path: 'metrics[0].basis', rule: 'option' }),
+      ]);
+      expect(mockContentItemCreate).not.toHaveBeenCalled();
+      expect(mockAuditLogCreate).not.toHaveBeenCalled();
+    });
+
+    it('accepts a payload that stays inside the declared constraints', async () => {
+      mockAuthorized();
+      mockProductModel();
+
+      const response = await POST(createMockRequest({
+        json: async () => ({
+          modelId: 'model-1',
+          modelCode: 'product',
+          title: 'ERP 套件',
+          data: {
+            metrics: [{ value: '30%', label: '库存周转提升', basis: 'target' }],
+            categoryId: 'enterprise',
+            status: '研发中',
+          },
+        }),
+      }));
+
+      expect(response.status).toBe(201);
+      expect(mockContentItemCreate).toHaveBeenCalledWith(
+        expect.objectContaining({
+          data: expect.objectContaining({
+            data: JSON.stringify({
+              metrics: [{ value: '30%', label: '库存周转提升', basis: 'target' }],
+              categoryId: 'enterprise',
+              status: '研发中',
+            }),
+          }),
+        })
+      );
+    });
+
+    it('leaves keys the model never declares alone', async () => {
+      mockAuthorized();
+      mockProductModel();
+
+      const response = await POST(createMockRequest({
+        json: async () => ({
+          modelId: 'model-1',
+          modelCode: 'product',
+          title: '含未声明键',
+          data: { notDeclaredAtAll: { basis: 'whatever' }, freeform: '任意结构' },
+        }),
+      }));
+
+      expect(response.status).toBe(201);
+    });
+
+    it('stays permissive when the model row is missing or its fields column is dirty', async () => {
+      mockAuthorized();
+      mockContentModelFindUnique.mockResolvedValue({ id: 'model-1', code: 'product', fields: 'null' });
+
+      const missingModel = await POST(createMockRequest({
+        json: async () => ({ modelId: 'model-1', modelCode: 'product', title: '无模型', data: {} }),
+      }));
+      expect(missingModel.status).toBe(201);
+
+      mockContentItemCreate.mockClear();
+
+      const dirtyFields = await POST(createMockRequest({
+        json: async () => ({ modelId: 'model-1', modelCode: 'product', title: '脏声明', data: {} }),
+      }));
+      expect(dirtyFields.status).toBe(201);
+    });
+
+    it('rejects an invalid PUT payload before touching the row', async () => {
+      mockAuthorized();
+      mockProductModel();
+      mockContentItemFindUnique.mockResolvedValue({ ...mockItem, modelCode: 'product' });
+
+      const response = await PUT(createMockRequest({
+        url: 'http://localhost/api/admin/items?id=item-1',
+        json: async () => ({ data: { status: '已上线' } }),
+      }));
+      const body = await response.json();
+
+      expect(response.status).toBe(400);
+      expect(body.details.fields).toEqual([
+        expect.objectContaining({ path: 'status', rule: 'option' }),
+      ]);
+      expect(mockContentItemUpdate).not.toHaveBeenCalled();
+      expect(mockAuditLogCreate).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('脏 data 列不再打断读写（B-4）', () => {
+    it('returns {} instead of 500 when a stored data column is not valid JSON', async () => {
+      mockAuthorized();
+      mockContentItemFindMany.mockResolvedValue([{ ...mockItem, data: 'null' }]);
+
+      const response = await GET(createMockRequest({}));
+      const body = await response.json();
+
+      expect(response.status).toBe(200);
+      expect(body.items[0].data).toEqual({});
+    });
+
+    it('serialises a null PUT payload as {} so the column stays readable', async () => {
+      mockAuthorized();
+      mockContentItemFindUnique.mockResolvedValue({ ...mockItem, data: 'null' });
+
+      const response = await PUT(createMockRequest({
+        url: 'http://localhost/api/admin/items?id=item-1',
+        json: async () => ({ data: null }),
+      }));
+
+      expect(response.status).toBe(200);
+      expect(mockContentItemUpdate).toHaveBeenCalledWith(
+        expect.objectContaining({
+          data: expect.objectContaining({ data: '{}' }),
+        })
+      );
+    });
+  });
 });
diff --git a/src/app/api/admin/items/route.ts b/src/app/api/admin/items/route.ts
index a643ebe..e89ac4a 100644
--- a/src/app/api/admin/items/route.ts
+++ b/src/app/api/admin/items/route.ts
@@ -1,16 +1,44 @@
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
 import { requirePermission } from '@/lib/permissions';
+import { authenticateRequest } from '@/lib/auth';
 import {
   success,
   notFound,
+  unauthorized,
   validationError,
   internalError,
 } from '@/lib/api-response';
 import { withCrypto } from '@/lib/api-crypto';
+import { parsePagination } from '@/lib/pagination';
+import {
+  parseCmsData,
+  validateContentData,
+  type ContentFieldError,
+} from '@/lib/cms/validate-content-data';
+import type { FieldDefinition } from '@/lib/cms/types';
 
 function parseItem(item: { data: string; [key: string]: unknown }) {
-  return { ...item, data: JSON.parse(item.data as string) };
+  return { ...item, data: parseCmsData(item.data) };
+}
+
+/**
+ * 读取模型的字段声明用于写入侧校验（B-3）。
+ * 模型缺失或 fields 脏数据时返回空数组，即不施加任何声明约束，保持既有宽松行为。
+ */
+async function loadDeclaredFields(modelCode: string): Promise<FieldDefinition[]> {
+  try {
+    const model = await prisma.contentModel.findUnique({ where: { code: modelCode } });
+    if (!model) return [];
+    const fields = parseCmsData<FieldDefinition[]>(model.fields, []);
+    return Array.isArray(fields) ? fields : [];
+  } catch {
+    return [];
+  }
+}
+
+function fieldValidationError(errors: ContentFieldError[]) {
+  return validationError('内容字段校验未通过', { fields: errors });
 }
 
 /**
@@ -58,11 +86,13 @@ export const GET = withCrypto(async (request: NextRequest) => {
   try {
     const status = searchParams.get('status');
     const search = searchParams.get('search');
-    const page = parseInt(searchParams.get('page') || '1');
-    const pageSize = parseInt(searchParams.get('pageSize') || '10');
+    const id = searchParams.get('id');
+    const { page, pageSize } = parsePagination(searchParams, { maxPageSize: 100, defaultPageSize: 10 });
 
     const where: Record<string, unknown> = {};
     if (modelCode) where.modelCode = modelCode;
+    // 编辑器按 id 定位单条内容：分页窗口（前 N 条）之外的条目否则永远取不到
+    if (id) where.id = id;
     if (status) where.status = status;
     if (search) {
       where.OR = [
@@ -107,6 +137,20 @@ export const POST = withCrypto(async (request: NextRequest) => {
     const permission = await requirePermission(request, modelCode, 'create');
     if ('response' in permission) return permission.response;
 
+    // B-1：创建接口不能成为发布通道。status 只接受缺省或 'draft'，其余取值一律拒绝并指向
+    // workflow 接口（那里才校验 publish 权限与合法流转）。这同时堵掉了任意 status 字符串
+    // 入库后「所有动作都返回 false、条目永久卡死且无反馈」的情况。
+    if (status !== undefined && status !== 'draft') {
+      return validationError(
+        '新建内容只能保存为草稿，状态变更请使用 /api/admin/items/[id]/workflow 接口',
+      );
+    }
+
+    const fieldErrors = validateContentData(await loadDeclaredFields(modelCode), data);
+    if (fieldErrors.length > 0) {
+      return fieldValidationError(fieldErrors);
+    }
+
     // 未提供 slug 时自动生成唯一 slug；提供时检查唯一性
     const finalSlug = slug
       ? slug
@@ -127,12 +171,12 @@ export const POST = withCrypto(async (request: NextRequest) => {
         modelCode,
         title,
         slug: finalSlug,
-        status: status || 'draft',
+        status: 'draft',
         data: JSON.stringify(data || {}),
         sortOrder: sortOrder || 0,
         createdBy: permission.user.username,
         updatedBy: permission.user.username,
-        publishedAt: status === 'published' ? new Date() : null,
+        publishedAt: null,
       },
     });
 
@@ -160,6 +204,9 @@ export const PUT = withCrypto(async (request: NextRequest) => {
   const id = searchParams.get('id');
   if (!id) return validationError('缺少 ID');
 
+  // 存在性探针必须在认证之后：否则匿名调用者可用「404=存在 vs 401=不存在」枚举内容 ID（Q-8）。
+  if (!authenticateRequest(request)) return unauthorized();
+
   const existing = await prisma.contentItem.findUnique({ where: { id } });
   if (!existing) return notFound('内容不存在');
 
@@ -180,11 +227,20 @@ export const PUT = withCrypto(async (request: NextRequest) => {
       }
     }
 
-    // 状态流转必须通过 /api/admin/items/[id]/workflow 进行
-    if (status !== undefined) {
+    // 状态流转必须通过 /api/admin/items/[id]/workflow 进行。但「原样回传当前状态」不是流转：
+    // 管理端每次保存（含自动保存）都会把现有 status 一起 PUT 上来，若一概拒绝会让所有编辑保存变 400。
+    if (status !== undefined && status !== existing.status) {
       return validationError('状态变更请使用 /api/admin/items/[id]/workflow 接口');
     }
 
+    const fieldErrors = validateContentData(
+      await loadDeclaredFields(existing.modelCode),
+      data,
+    );
+    if (fieldErrors.length > 0) {
+      return fieldValidationError(fieldErrors);
+    }
+
     const updateData: Record<string, unknown> = {
       updatedBy: permission.user.username,
       updatedAt: new Date(),
@@ -194,7 +250,8 @@ export const PUT = withCrypto(async (request: NextRequest) => {
     if (title !== undefined) updateData.title = title;
     // slug 为空字符串时保留原值，避免触发唯一约束冲突
     if (slug !== undefined && slug !== '') updateData.slug = slug;
-    if (data !== undefined) updateData.data = JSON.stringify(data);
+    // data 为 null 时与 POST 同样落库为 `{}`，避免脏列让读取侧整页崩溃（B-4）
+    if (data !== undefined) updateData.data = JSON.stringify(data ?? {});
     if (sortOrder !== undefined) updateData.sortOrder = sortOrder;
 
     const item = await prisma.contentItem.update({
@@ -227,6 +284,9 @@ export const DELETE = withCrypto(async (request: NextRequest) => {
   const id = searchParams.get('id');
   if (!id) return validationError('缺少 ID');
 
+  // Q-8：认证先于存在性探针，避免匿名枚举内容 ID。
+  if (!authenticateRequest(request)) return unauthorized();
+
   const existing = await prisma.contentItem.findUnique({ where: { id } });
   if (!existing) return notFound('内容不存在');
 
diff --git a/src/app/api/admin/media/route.test.ts b/src/app/api/admin/media/route.test.ts
index 542c190..61a0a9c 100644
--- a/src/app/api/admin/media/route.test.ts
+++ b/src/app/api/admin/media/route.test.ts
@@ -22,6 +22,7 @@ jest.mock('@/lib/media/media-service', () => ({
 }));
 
 import { GET, POST, DELETE } from './route';
+import { UploadPolicyError } from '@/lib/media/upload-policy';
 
 function createMockRequest(options: {
   url?: string;
@@ -206,6 +207,42 @@ describe('/api/admin/media', () => {
       expect(body.error).toContain('10MB');
       expect(mockUploadMedia).not.toHaveBeenCalled();
     });
+
+    // Q-9：多文件批次里第二个文件未过策略时，第一个已成功写入的文件必须被回滚删除，
+    // 否则孤儿资产落盘 + 入库却无返回、无清理路径。旧实现无回滚 ⇒ mockDeleteMedia 不被调用 ⇒ RED。
+    it('rolls back already-uploaded files when a later file fails the policy check', async () => {
+      mockAuthorized();
+      mockUploadMedia
+        .mockResolvedValueOnce({ id: 'asset-1' })
+        .mockRejectedValueOnce(new UploadPolicyError('非法文件类型'));
+      mockDeleteMedia.mockResolvedValue(undefined);
+
+      const formData = new FormData();
+      formData.append('files', createTestFile('a', 'a.png', 'image/png'));
+      formData.append('files', createTestFile('b', 'b.png', 'image/png'));
+
+      const response = await POST(createMockRequest({ formData: async () => formData }));
+      const body = await response.json();
+
+      expect(response.status).toBe(400);
+      expect(body.error).toContain('非法文件类型');
+      expect(mockDeleteMedia).toHaveBeenCalledWith('asset-1');
+    });
+
+    // Q-9：预检尺寸——批次中任一文件超限，须在任何写入发生前整批拒绝。
+    it('rejects the whole batch without uploading when one file is oversized', async () => {
+      mockAuthorized();
+      mockUploadMedia.mockResolvedValue({ id: 'asset-x' });
+
+      const formData = new FormData();
+      formData.append('files', createTestFile('ok', 'ok.png', 'image/png'));
+      formData.append('files', createTestFile('big', 'big.png', 'image/png', 10 * 1024 * 1024 + 1));
+
+      const response = await POST(createMockRequest({ formData: async () => formData }));
+
+      expect(response.status).toBe(400);
+      expect(mockUploadMedia).not.toHaveBeenCalled();
+    });
   });
 
   describe('DELETE', () => {
diff --git a/src/app/api/admin/media/route.ts b/src/app/api/admin/media/route.ts
index 47a99a3..4d0a72c 100644
--- a/src/app/api/admin/media/route.ts
+++ b/src/app/api/admin/media/route.ts
@@ -12,6 +12,7 @@ import {
   validationError,
   internalError,
 } from '@/lib/api-response';
+import { UploadPolicyError } from '@/lib/media/upload-policy';
 import { withCrypto } from '@/lib/api-crypto';
 
 const MODEL_CODE = 'media';
@@ -68,30 +69,49 @@ export const POST = withCrypto(async (request: NextRequest) => {
       return validationError('请选择文件');
     }
 
-    const results = [];
+    // 预检尺寸：任一无关文件超限即整批拒绝，且此时尚未写入任何文件（不产生孤儿）。
     for (const file of files) {
       if (file.size > MAX_FILE_SIZE) {
         return validationError(`文件 "${file.name}" 大小不能超过 10MB`);
       }
+    }
 
-      const bytes = await file.arrayBuffer();
-      const buffer = Buffer.from(bytes);
+    const results: Awaited<ReturnType<typeof uploadMedia>>[] = [];
+    try {
+      for (const file of files) {
+        const bytes = await file.arrayBuffer();
+        const buffer = Buffer.from(bytes);
 
-      const asset = await uploadMedia(
-        {
-          name: file.name,
-          buffer,
-          mimeType: file.type || 'application/octet-stream',
-          size: file.size,
-        },
-        permission.user.username
-      );
+        const asset = await uploadMedia(
+          {
+            name: file.name,
+            buffer,
+            mimeType: file.type || 'application/octet-stream',
+            size: file.size,
+          },
+          permission.user.username
+        );
 
-      results.push(asset);
+        results.push(asset);
+      }
+    } catch (error) {
+      // 多文件批次中途失败（如某个文件未过 magic-byte/类型策略）：回滚本请求已成功写入的文件，
+      // 否则前面的文件已落盘 + 入库，而请求返回错误 → 形成无返回、无清理路径的孤儿资产（Q-9）。
+      if (results.length > 0) {
+        await Promise.all(results.map((a) => deleteMedia(a.id).catch(() => {})));
+      }
+      if (error instanceof UploadPolicyError) {
+        return validationError(error.message);
+      }
+      console.error('Upload media error:', error);
+      return internalError();
     }
 
     return success(files.length === 1 ? results[0] : results, 201);
   } catch (error) {
+    if (error instanceof UploadPolicyError) {
+      return validationError(error.message);
+    }
     console.error('Upload media error:', error);
     return internalError();
   }
diff --git a/src/app/api/admin/roles/route.test.ts b/src/app/api/admin/roles/route.test.ts
index 95224a7..3564e66 100644
--- a/src/app/api/admin/roles/route.test.ts
+++ b/src/app/api/admin/roles/route.test.ts
@@ -4,10 +4,12 @@ import { NextRequest } from 'next/server';
 // ─── Mock @/lib/db ────────────────────────────────────────────────────────
 const mockRoleFindMany = jest.fn<(args?: unknown) => Promise<unknown[]>>();
 const mockPermissionFindMany = jest.fn<(args?: unknown) => Promise<unknown[]>>();
-const mockPermissionDeleteMany = jest.fn<(args?: unknown) => Promise<unknown>>();
-const mockPermissionCreate = jest.fn<(args?: unknown) => Promise<unknown>>();
+const mockPermissionDeleteMany = jest.fn<(args?: unknown) => unknown>();
+const mockPermissionCreate = jest.fn<(args?: unknown) => unknown>();
+const mock$transaction = jest.fn<(ops: unknown[], options?: unknown) => unknown>();
 const mockContentModelFindMany = jest.fn<(args?: unknown) => Promise<unknown[]>>();
 const mockUserRoleFindMany = jest.fn<(args?: unknown) => Promise<unknown[]>>();
+const mockUserCount = jest.fn<(args?: unknown) => Promise<number>>();
 const mockRoleFindUnique = jest.fn<(args?: unknown) => Promise<unknown | null>>();
 
 jest.mock('@/lib/db', () => ({
@@ -27,6 +29,10 @@ jest.mock('@/lib/db', () => ({
     userRole: {
       findMany: mockUserRoleFindMany,
     },
+    user: {
+      count: mockUserCount,
+    },
+    $transaction: mock$transaction,
   },
 }));
 
@@ -66,9 +72,29 @@ const mockPermissions = [
 
 function mockAuthenticated(roleCodes: string[]) {
   mockAuthenticateRequest.mockReturnValue({ userId: 'user-1', username: 'admin' });
+  mockUserCount.mockResolvedValue(1); // 默认「启用」账号（Q-4 存活判定）
   mockUserRoleFindMany.mockResolvedValue(roleCodes.map((code) => ({ roleCode: code })));
 }
 
+/**
+ * Prisma 的 PrismaPromise 是「惰性 + 可 then」的对象。这里用同样的形状冒充，
+ * 一旦被 await（= 独立提交）就登记标签，从而能断言
+ * 「deleteMany/create 只作为事务数组的成员交给 $transaction，没有被单独提交」。
+ */
+function thenableOp<T>(label: string, value: T, awaited: string[]) {
+  return {
+    then: jest.fn(
+      (
+        onFulfilled?: ((v: T) => unknown) | null,
+        _onRejected?: ((e: unknown) => unknown) | null
+      ) => {
+        awaited.push(label);
+        return Promise.resolve(onFulfilled ? onFulfilled(value) : undefined);
+      }
+    ),
+  };
+}
+
 beforeEach(() => {
   jest.clearAllMocks();
 });
@@ -170,8 +196,17 @@ describe('PUT /api/admin/roles', () => {
   it('replaces permissions and filters invalid actions', async () => {
     mockAuthenticated(['super_admin']);
     mockRoleFindUnique.mockResolvedValue({ code: 'content_editor', name: '内容编辑' });
-    mockPermissionDeleteMany.mockResolvedValue({ count: 2 });
-    mockPermissionCreate.mockResolvedValue({});
+
+    const awaited: string[] = [];
+    const deleteOp = thenableOp('deleteMany', { count: 2 }, awaited);
+    const createOps = [
+      thenableOp('create:news:read', { id: 'p1' }, awaited),
+      thenableOp('create:news:update', { id: 'p2' }, awaited),
+    ];
+    mockPermissionDeleteMany.mockReturnValue(deleteOp);
+    let created = 0;
+    mockPermissionCreate.mockImplementation(() => createOps[created++]);
+    mock$transaction.mockReturnValue(thenableOp('transaction', [], awaited));
 
     const response = await PUT(
       createMockRequest({
@@ -181,6 +216,7 @@ describe('PUT /api/admin/roles', () => {
           { modelCode: 'news', action: 'update' },
           { modelCode: 'news', action: 'hack' },
           { modelCode: '', action: 'read' },
+          { modelCode: 'news', action: 'read' }, // 重复项应被去重
         ],
       })
     );
@@ -203,5 +239,95 @@ describe('PUT /api/admin/roles', () => {
     expect(body.permissions).toContain('news:read');
     expect(body.permissions).toContain('news:update');
     expect(body.permissions).not.toContain('news:hack');
+
+    // 删除 + 重建作为「一个原子单元」交给 $transaction：数组顺序即执行顺序
+    expect(mock$transaction).toHaveBeenCalledTimes(1);
+    expect(mock$transaction.mock.calls[0]![0]).toEqual([deleteOp, createOps[0], createOps[1]]);
+    // 除事务本身外，没有任何一条语句被独立 await（= 独立提交）
+    expect(awaited).toEqual(['transaction']);
+  });
+
+  it('commits the rewrite through $transaction so a failing create cannot leave a half-written role', async () => {
+    mockAuthenticated(['super_admin']);
+    mockRoleFindUnique.mockResolvedValue({ code: 'content_editor', name: '内容编辑' });
+
+    const awaited: string[] = [];
+    const deleteOp = thenableOp('deleteMany', { count: 5 }, awaited);
+    const createOps = [
+      thenableOp('create:news:read', { id: 'p1' }, awaited),
+      thenableOp('create:product:read', { id: 'p2' }, awaited),
+    ];
+    mockPermissionDeleteMany.mockReturnValue(deleteOp);
+    let created = 0;
+    mockPermissionCreate.mockImplementation(() => createOps[created++]);
+    // 第 N 条 create 失败：事务整体回滚，$transaction 直接 reject
+    mock$transaction.mockImplementation(() =>
+      Promise.reject(new Error('Unique constraint failed on Permission'))
+    );
+
+    const response = await PUT(
+      createMockRequest({
+        roleCode: 'content_editor',
+        permissions: [
+          { modelCode: 'news', action: 'read' },
+          { modelCode: 'product', action: 'read' },
+        ],
+      })
+    );
+    const body = await response.json();
+
+    expect(response.status).toBe(500);
+    expect(body.code).toBe('INTERNAL_ERROR');
+    // 失败前没有任何语句被独立提交：整批操作要么全成、要么全滚
+    expect(awaited).toEqual([]);
+    expect(mock$transaction.mock.calls[0]![0]).toHaveLength(3);
+  });
+
+  it('clears every permission through a single transaction when the new list is empty', async () => {
+    mockAuthenticated(['super_admin']);
+    mockRoleFindUnique.mockResolvedValue({ code: 'readonly', name: '只读' });
+
+    const awaited: string[] = [];
+    const deleteOp = thenableOp('deleteMany', { count: 3 }, awaited);
+    mockPermissionDeleteMany.mockReturnValue(deleteOp);
+    mock$transaction.mockReturnValue(thenableOp('transaction', [], awaited));
+
+    const response = await PUT(createMockRequest({ roleCode: 'readonly', permissions: [] }));
+
+    expect(response.status).toBe(200);
+    expect(mockPermissionCreate).not.toHaveBeenCalled();
+    expect(mock$transaction).toHaveBeenCalledTimes(1);
+    expect(mock$transaction.mock.calls[0]![0]).toEqual([deleteOp]);
+    expect(awaited).toEqual(['transaction']);
   });
 });
+
+/**
+ * Q-4（N-20 同类）：roles GET/PUT 走内联 super_admin 检查但不看 User.status，
+ * 被停用的超管凭 ≤24h 令牌仍能读权限矩阵或整体重写它（deleteMany+create）。
+ * 修复后须先过 authenticateActiveRequest 的存活判定，否则 401 且不触达任何写。
+ */
+describe('Q-4 停用账号令牌：admin/roles 一律 401 且零写入', () => {
+  it('停用的 super_admin 不能读取角色权限', async () => {
+    mockAuthenticated(['super_admin']);
+    mockUserCount.mockResolvedValue(0); // status !== 1
+
+    const response = await GET(createMockRequest());
+    expect(response.status).toBe(401);
+  });
+
+  it('停用的 super_admin 不能重写权限矩阵', async () => {
+    mockAuthenticated(['super_admin']);
+    mockUserCount.mockResolvedValue(0);
+
+    const response = await PUT(
+      createMockRequest({ roleCode: 'content_editor', permissions: [{ modelCode: 'news', action: 'read' }] })
+    );
+
+    expect(response.status).toBe(401);
+    expect(mock$transaction).not.toHaveBeenCalled();
+    expect(mockPermissionDeleteMany).not.toHaveBeenCalled();
+    expect(mockPermissionCreate).not.toHaveBeenCalled();
+  });
+});
+
diff --git a/src/app/api/admin/roles/route.ts b/src/app/api/admin/roles/route.ts
index 9696d36..9676de4 100644
--- a/src/app/api/admin/roles/route.ts
+++ b/src/app/api/admin/roles/route.ts
@@ -1,7 +1,8 @@
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
-import { authenticateRequest } from '@/lib/auth';
+import type { Prisma } from '@/generated/prisma/client';
 import { success, unauthorized, forbidden, internalError, validationError } from '@/lib/api-response';
+import { authenticateActiveRequest } from '@/lib/permissions';
 import { withCrypto } from '@/lib/api-crypto';
 
 // 内置角色，不允许删除
@@ -9,7 +10,7 @@ const BUILTIN_ROLES = new Set(['super_admin', 'content_admin', 'content_editor',
 
 // GET /api/admin/roles - 获取角色列表及其权限
 export const GET = withCrypto(async (request: NextRequest) => {
-  const user = authenticateRequest(request);
+  const user = await authenticateActiveRequest(request);
   if (!user) return unauthorized();
 
   // 仅管理员可查看角色权限
@@ -51,7 +52,7 @@ export const GET = withCrypto(async (request: NextRequest) => {
 
 // PUT /api/admin/roles/:roleCode - 更新角色权限
 export const PUT = withCrypto(async (request: NextRequest) => {
-  const user = authenticateRequest(request);
+  const user = await authenticateActiveRequest(request);
   if (!user) return unauthorized();
 
   const userRoles = await prisma.userRole.findMany({ where: { userId: user.userId } });
@@ -77,25 +78,35 @@ export const PUT = withCrypto(async (request: NextRequest) => {
     const role = await prisma.role.findUnique({ where: { code: roleCode } });
     if (!role) return validationError('角色不存在');
 
-    // 先删除该角色所有权限，再重新写入
-    await prisma.permission.deleteMany({ where: { roleCode } });
-
     const validActions = new Set(['create', 'read', 'update', 'delete', 'publish']);
     const uniqueKeys = new Set<string>();
+    const permissionWrites: Prisma.PrismaPromise<unknown>[] = [];
     for (const perm of permissions || []) {
       if (!perm.modelCode || !validActions.has(perm.action)) continue;
       const key = `${perm.modelCode}:${perm.action}`;
       if (uniqueKeys.has(key)) continue;
       uniqueKeys.add(key);
-      await prisma.permission.create({
-        data: {
-          roleCode,
-          modelCode: perm.modelCode,
-          action: perm.action,
-        },
-      });
+      // 只构造查询、不 await：交由下面的事务统一提交
+      permissionWrites.push(
+        prisma.permission.create({
+          data: {
+            roleCode,
+            modelCode: perm.modelCode,
+            action: perm.action,
+          },
+        })
+      );
     }
 
+    // 清空 + 重建必须作为「单个原子单元」提交（验收 B-5）：
+    // 原先 deleteMany 与逐条 create 分别 await，任一 create 失败即留下空权限/半权限角色
+    // （既是降权也是提权方向）。$transaction(数组) 在 Prisma 中于同一事务内顺序执行，
+    // 任一语句失败整体回滚。签名见 src/generated/prisma/internal/class.ts:200。
+    await prisma.$transaction([
+      prisma.permission.deleteMany({ where: { roleCode } }),
+      ...permissionWrites,
+    ]);
+
     return success({ roleCode, permissions: Array.from(uniqueKeys) });
   } catch (error) {
     console.error('Update roles error:', error);
diff --git a/src/app/api/admin/stats/route.ts b/src/app/api/admin/stats/route.ts
index 91c0ecb..39e38a7 100644
--- a/src/app/api/admin/stats/route.ts
+++ b/src/app/api/admin/stats/route.ts
@@ -1,13 +1,16 @@
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
-import { authenticateRequest } from '@/lib/auth';
-import { success, unauthorized, internalError } from '@/lib/api-response';
+import { requirePermission } from '@/lib/permissions';
+import { success, internalError } from '@/lib/api-response';
 import { withCrypto } from '@/lib/api-crypto';
 
 // GET /api/admin/stats - 获取仪表盘统计数据
 export const GET = withCrypto(async (request: NextRequest) => {
-  const user = authenticateRequest(request);
-  if (!user) return unauthorized();
+  // 原实现只验「有没有会话」，而本路由会返回跨全部模型的最近内容条目（title/modelCode/status），
+  // 任何登录账号（含零权限角色）都能读到受保护草稿 ⇒ 升级为 content-model 读权限（N-19）。
+  const permission = await requirePermission(request, 'content-model', 'read');
+  if ('response' in permission) return permission.response;
+  const user = permission.user;
 
   try {
     const [modelCount, itemCount, zoneCount, userCount, pendingReviewCount, unreadCount] = await Promise.all([
diff --git a/src/app/api/admin/users/route.test.ts b/src/app/api/admin/users/route.test.ts
new file mode 100644
index 0000000..ebc742f
--- /dev/null
+++ b/src/app/api/admin/users/route.test.ts
@@ -0,0 +1,320 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import { NextRequest } from 'next/server';
+
+// ─── Mock @/lib/db ────────────────────────────────────────────────────────
+const mockUserRoleFindMany = jest.fn<(args?: unknown) => Promise<unknown[]>>();
+const mockUserRoleCreate = jest.fn<(args?: unknown) => Promise<unknown>>();
+const mockUserRoleDeleteMany = jest.fn<(args?: unknown) => Promise<unknown>>();
+const mockUserRoleCount = jest.fn<(args?: unknown) => Promise<number>>();
+const mockRoleFindUnique = jest.fn<(args?: unknown) => Promise<unknown | null>>();
+const mockUserFindUnique = jest.fn<(args?: unknown) => Promise<unknown | null>>();
+const mockUserCount = jest.fn<(args?: unknown) => Promise<number>>();
+const mockUserCreate = jest.fn<(args?: unknown) => Promise<unknown>>();
+const mockUserUpdate = jest.fn<(args?: unknown) => Promise<unknown>>();
+
+jest.mock('@/lib/db', () => ({
+  prisma: {
+    userRole: {
+      findMany: mockUserRoleFindMany,
+      create: mockUserRoleCreate,
+      deleteMany: mockUserRoleDeleteMany,
+      count: mockUserRoleCount,
+    },
+    role: { findUnique: mockRoleFindUnique },
+    user: {
+      findUnique: mockUserFindUnique,
+      create: mockUserCreate,
+      update: mockUserUpdate,
+      count: mockUserCount,
+    },
+  },
+}));
+
+// ─── Mock @/lib/auth ──────────────────────────────────────────────────────
+const mockAuthenticateRequest = jest.fn<(request: NextRequest) => unknown>();
+const mockHashPassword = jest.fn<(pw: string) => Promise<string>>();
+
+jest.mock('@/lib/auth', () => ({
+  authenticateRequest: mockAuthenticateRequest,
+  hashPassword: mockHashPassword,
+}));
+
+import { POST, PUT } from './route';
+
+/**
+ * 调用者身份 + 目标用户 URL。PUT 通过 query `?id=` 指定被改用户，
+ * 该参数完全由攻击者控制，是 A-2 的攻击面入口。
+ */
+function req(opts: {
+  callerId?: string;
+  targetId?: string;
+  body?: Record<string, unknown>;
+}): NextRequest {
+  const qs = opts.targetId ? `?id=${opts.targetId}` : '';
+  return {
+    url: `http://localhost/api/admin/users${qs}`,
+    headers: new Headers(),
+    json: async () => opts.body ?? {},
+  } as unknown as NextRequest;
+}
+
+/** 调用者角色 → userRole.findMany 按其 userId 分支返回。 */
+function callers(map: Record<string, string[]>) {
+  mockUserRoleFindMany.mockImplementation(async (args: unknown) => {
+    const userId = (args as { where: { userId: string } }).where.userId;
+    return (map[userId] ?? []).map((roleCode) => ({ roleCode }));
+  });
+}
+
+const ALL_ROLES_EXIST = async () => ({ code: 'anything', name: '角色' });
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  mockHashPassword.mockResolvedValue('hashed');
+  mockRoleFindUnique.mockImplementation(ALL_ROLES_EXIST);
+  mockUserFindUnique.mockResolvedValue(null);
+  // 默认调用者为「启用」账号（authenticateActiveRequest 以 user.count(id,status:1) 判活）。
+  mockUserCount.mockResolvedValue(1);
+  mockUserCreate.mockResolvedValue({
+    id: 'u-new',
+    username: 'victim',
+    nickname: '',
+    email: '',
+    phone: '',
+  });
+  mockUserUpdate.mockResolvedValue({ id: 'u-target' });
+});
+
+describe('POST /api/admin/users — A-1 角色授予越权', () => {
+  it('content_admin 不得创建 super_admin 账号', async () => {
+    callers({ attacker: ['content_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'attacker', username: 'attacker' });
+
+    const res = await POST(
+      req({ body: { username: 'evil', password: 'Passw0rd!', roleCodes: ['super_admin'] } })
+    );
+
+    expect(res.status).toBe(403);
+    expect(mockUserRoleCreate).not.toHaveBeenCalled();
+  });
+
+  it('content_admin 不得借「先建号再自我提权」绕过：只允许授予非特权角色', async () => {
+    callers({ attacker: ['content_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'attacker', username: 'attacker' });
+
+    const res = await POST(
+      req({ body: { username: 'evil', password: 'Passw0rd!', roleCodes: ['content_editor'] } })
+    );
+
+    expect(res.status).toBe(201);
+    expect(mockUserRoleCreate).toHaveBeenCalledWith({
+      data: { userId: 'u-new', roleCode: 'content_editor' },
+    });
+  });
+
+  it('super_admin 可以创建 super_admin', async () => {
+    callers({ boss: ['super_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'boss', username: 'boss' });
+
+    const res = await POST(
+      req({ body: { username: 'peer', password: 'Passw0rd!', roleCodes: ['super_admin'] } })
+    );
+
+    expect(res.status).toBe(201);
+    expect(mockUserRoleCreate).toHaveBeenCalledWith({
+      data: { userId: 'u-new', roleCode: 'super_admin' },
+    });
+  });
+
+  it('未声明角色时仍回落 readonly（原行为不变）', async () => {
+    callers({ boss: ['super_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'boss', username: 'boss' });
+
+    const res = await POST(req({ body: { username: 'plain', password: 'Passw0rd!' } }));
+
+    expect(res.status).toBe(201);
+    expect(mockUserRoleCreate).toHaveBeenCalledWith({
+      data: { userId: 'u-new', roleCode: 'readonly' },
+    });
+  });
+});
+
+describe('PUT /api/admin/users — A-2 凭据/状态接管', () => {
+  beforeEach(() => {
+    mockAuthenticateRequest.mockReturnValue({ userId: 'attacker', username: 'attacker' });
+  });
+
+  it('content_admin 不得重置他人密码', async () => {
+    callers({ attacker: ['content_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { password: 'Pwned123!' } }));
+
+    expect(res.status).toBe(403);
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+
+  it('content_admin 不得停用超管账号（DoS 接管面）', async () => {
+    callers({ attacker: ['content_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { status: 0 } }));
+
+    expect(res.status).toBe(403);
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+
+  it('content_admin 不得把超管降级为 readonly（撤销方向同样受限）', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['super_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { roleCodes: ['readonly'] } }));
+
+    expect(res.status).toBe(403);
+    expect(mockUserRoleDeleteMany).not.toHaveBeenCalled();
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+
+  it('任何写操作前必须完成鉴权：资料字段不得先落库再被角色校验拒绝', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['super_admin'] });
+
+    const res = await PUT(
+      req({ targetId: 'u-target', body: { nickname: 'pwned', roleCodes: ['readonly'] } })
+    );
+
+    expect(res.status).toBe(403);
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+
+  it('super_admin 可以重置他人密码', async () => {
+    callers({ attacker: ['super_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'attacker', username: 'attacker' });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { password: 'Rotated123!' } }));
+
+    expect(res.status).toBe(200);
+    expect(mockUserUpdate).toHaveBeenCalledWith(
+      expect.objectContaining({ where: { id: 'u-target' } })
+    );
+  });
+
+  it('本人仍可修改自己的密码（自助改密不被误伤）', async () => {
+    callers({ me: ['content_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'me', username: 'me' });
+
+    const res = await PUT(req({ targetId: 'me', body: { password: 'Mine12345!' } }));
+
+    expect(res.status).toBe(200);
+  });
+
+  it('content_admin 仍可编辑普通用户的资料（未被过度收紧）', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['content_editor'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { nickname: '新昵称' } }));
+
+    expect(res.status).toBe(200);
+    expect(mockUserUpdate).toHaveBeenCalledWith(
+      expect.objectContaining({ data: expect.objectContaining({ nickname: '新昵称' }) })
+    );
+  });
+});
+
+/**
+ * 账号级特权护栏的「只改资料」形态。裁定依据 ACCEPTANCE_REVIEW_2026-09-21.md §A-2 修复口径：
+ * 「目标持有 super_admin 时同样要求调用者为 super_admin」—— 条件挂在目标角色上，不挂在
+ * 「本次是否提交 roleCodes」上。故省略 roleCodes 不是放行理由，本组用例把它钉成回归契约。
+ */
+describe('PUT /api/admin/users — 超管账号的资料编辑（A-2 口径：整次 PUT 拒绝，非仅角色变更）', () => {
+  beforeEach(() => {
+    mockAuthenticateRequest.mockReturnValue({ userId: 'attacker', username: 'attacker' });
+  });
+
+  it('profile-only PUT（省略 roleCodes）改超管昵称 ⇒ 403 且零写入', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['super_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { nickname: 'pwned' } }));
+
+    expect(res.status).toBe(403);
+    // 零写入 = user.update / userRole.deleteMany / userRole.create 全未触达
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+    expect(mockUserRoleDeleteMany).not.toHaveBeenCalled();
+    expect(mockUserRoleCreate).not.toHaveBeenCalled();
+  });
+
+  it('被拒的 profile-only 请求给出「编辑超管账号」文案，而非「变动角色」文案（避免误读为实现疏漏）', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['super_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { phone: '13800000000' } }));
+    const payload = (await res.json()) as { error?: string };
+
+    expect(payload.error).toContain('无权编辑持有特权角色的账号');
+    expect(payload.error).toContain('super_admin');
+    expect(payload.error).not.toContain('无权变动特权角色');
+  });
+
+  it('真实 UI 形态（roleCodes 原样回传 + 只改昵称）同样 403 —— 与省略形态结果一致，无旁路', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['super_admin'] });
+
+    // src/app/admin/users/page.tsx 的编辑表单总是回传 roleCodes，并用目标现有角色预填
+    const res = await PUT(
+      req({ targetId: 'u-target', body: { nickname: 'pwned', roleCodes: ['super_admin'] } })
+    );
+    const payload = (await res.json()) as { error?: string };
+
+    expect(res.status).toBe(403);
+    expect(payload.error).toContain('无权变动特权角色');
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+    expect(mockUserRoleDeleteMany).not.toHaveBeenCalled();
+    expect(mockUserRoleCreate).not.toHaveBeenCalled();
+  });
+
+  it('super_admin 改超管账号资料仍放行（护栏按调用者分级，不是把该账号封死）', async () => {
+    callers({ attacker: ['super_admin'], 'u-target': ['super_admin'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { nickname: '正确昵称' } }));
+
+    expect(res.status).toBe(200);
+    expect(mockUserUpdate).toHaveBeenCalledWith(
+      expect.objectContaining({ data: expect.objectContaining({ nickname: '正确昵称' }) })
+    );
+  });
+
+  it('省略 roleCodes 不是绕开凭据校验的后门：改普通用户状态依旧 403', async () => {
+    callers({ attacker: ['content_admin'], 'u-target': ['content_editor'] });
+
+    const res = await PUT(req({ targetId: 'u-target', body: { status: 0 } }));
+
+    expect(res.status).toBe(403);
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+});
+
+/**
+ * Q-4（N-20 同类）：这些 handler 走 authenticateRequest + 内联 role 检查，曾完全不看 User.status，
+ * 于是「被停用但仍持 ≤24h 有效令牌」的超管仍能列/建/改/删用户。修复后须经
+ * authenticateActiveRequest 的存活判定（user.count(id,status:1)）在角色检查与任何写入之前拒绝。
+ */
+describe('Q-4 停用账号令牌：admin/users 一律 401 且零写入', () => {
+  it('停用的 super_admin 不能创建用户', async () => {
+    callers({ ghost: ['super_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'ghost', username: 'ghost' });
+    mockUserCount.mockResolvedValue(0); // status !== 1 ⇒ 判为不存活
+
+    const res = await POST(
+      req({ body: { username: 'evil', password: 'Passw0rd!', roleCodes: ['content_editor'] } })
+    );
+
+    expect(res.status).toBe(401);
+    expect(mockUserCreate).not.toHaveBeenCalled();
+    expect(mockUserRoleCreate).not.toHaveBeenCalled();
+  });
+
+  it('停用的 super_admin 不能编辑他人（含重置密码）', async () => {
+    callers({ ghost: ['super_admin'] });
+    mockAuthenticateRequest.mockReturnValue({ userId: 'ghost', username: 'ghost' });
+    mockUserCount.mockResolvedValue(0);
+
+    const res = await PUT(req({ targetId: 'u-target', body: { password: 'Pwned123!' } }));
+
+    expect(res.status).toBe(401);
+    expect(mockUserUpdate).not.toHaveBeenCalled();
+  });
+});
+
diff --git a/src/app/api/admin/users/route.ts b/src/app/api/admin/users/route.ts
index 87c53a9..915fc0c 100644
--- a/src/app/api/admin/users/route.ts
+++ b/src/app/api/admin/users/route.ts
@@ -1,12 +1,14 @@
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
-import { authenticateRequest, hashPassword } from '@/lib/auth';
+import { hashPassword } from '@/lib/auth';
 import { success, unauthorized, forbidden, internalError, validationError } from '@/lib/api-response';
+import { authenticateActiveRequest, mayChangeCredentials, privilegedRolesInPlay } from '@/lib/permissions';
 import { withCrypto } from '@/lib/api-crypto';
+import { parsePagination } from '@/lib/pagination';
 
 // GET /api/admin/users - 获取用户列表
 export const GET = withCrypto(async (request: NextRequest) => {
-  const user = authenticateRequest(request);
+  const user = await authenticateActiveRequest(request);
   if (!user) return unauthorized();
 
   const userRoles = await prisma.userRole.findMany({ where: { userId: user.userId } });
@@ -17,8 +19,7 @@ export const GET = withCrypto(async (request: NextRequest) => {
 
   try {
     const { searchParams } = new URL(request.url);
-    const page = Math.max(1, parseInt(searchParams.get('page') || '1', 10));
-    const pageSize = Math.min(100, Math.max(1, parseInt(searchParams.get('pageSize') || '20', 10)));
+    const { page, pageSize } = parsePagination(searchParams, { defaultPageSize: 20, maxPageSize: 100 });
     const search = searchParams.get('search') || '';
 
     const where = search
@@ -82,7 +83,7 @@ export const GET = withCrypto(async (request: NextRequest) => {
 
 // POST /api/admin/users - 创建用户
 export const POST = withCrypto(async (request: NextRequest) => {
-  const user = authenticateRequest(request);
+  const user = await authenticateActiveRequest(request);
   if (!user) return unauthorized();
 
   const userRoles = await prisma.userRole.findMany({ where: { userId: user.userId } });
@@ -113,6 +114,19 @@ export const POST = withCrypto(async (request: NextRequest) => {
       return validationError('密码长度不能少于 6 位');
     }
 
+    // 分配角色：先定角色再建号，避免越权请求留下无角色的垃圾账号
+    const rolesToAssign = body.roleCodes?.length ? body.roleCodes : ['readonly'];
+    const blocked = privilegedRolesInPlay(roleCodes, rolesToAssign, []);
+    if (blocked.length > 0) {
+      return forbidden(`无权授予特权角色：${blocked.join(', ')}`);
+    }
+    // 残留风险（**按设计保留**，非疏漏）：护栏只拦 PRIVILEGED_ROLE_CODES，故 content_admin 仍可
+    // 建出同类（授予 content_admin）乃至 content_editor / reviewer 等自己不持有的角色。
+    // 与 roles/route.ts 对比：该路由的 GET/PUT 一律限 super_admin，且显式禁改 super_admin 自身权限，
+    // 即「角色能做什么」由超管独占，而「谁能被分配一个非特权角色」下放给内容管理员 ——
+    // 这是 A-1 修复口径（ACCEPTANCE_REVIEW §A-1：仅要求「非 super_admin 不得授予 super_admin」）
+    // 刻意留下的授权面；收窄它需另行裁定，不在本次变更范围内。
+
     // 检查用户名是否已存在
     const existing = await prisma.user.findUnique({ where: { username: body.username } });
     if (existing) {
@@ -131,8 +145,6 @@ export const POST = withCrypto(async (request: NextRequest) => {
       },
     });
 
-    // 分配角色
-    const rolesToAssign = body.roleCodes?.length ? body.roleCodes : ['readonly'];
     for (const roleCode of rolesToAssign) {
       const role = await prisma.role.findUnique({ where: { code: roleCode } });
       if (role) {
@@ -158,7 +170,7 @@ export const POST = withCrypto(async (request: NextRequest) => {
 
 // PUT /api/admin/users - 更新用户
 export const PUT = withCrypto(async (request: NextRequest) => {
-  const currentUser = authenticateRequest(request);
+  const currentUser = await authenticateActiveRequest(request);
   if (!currentUser) return unauthorized();
 
   const userRoles = await prisma.userRole.findMany({ where: { userId: currentUser.userId } });
@@ -181,13 +193,61 @@ export const PUT = withCrypto(async (request: NextRequest) => {
       roleCodes?: string[];
     };
 
+    const isTargetSelf = userId === currentUser.userId;
+    const targetRoleCodes = (await prisma.userRole.findMany({ where: { userId } })).map(
+      (ur) => ur.roleCode
+    );
+
+    // ── 全部授权判定必须先于任何写入 ──
+    // 原实现在 user.update 之后才做角色校验，被拒时资料字段已经落库。
+    //
+    // 账号级特权护栏（验收 A-1 / A-2）：调用者非 super_admin 时，只要该账号「变更前或变更后」
+    // 处于 super_admin，就整次 PUT 拒绝 —— 包括 body.roleCodes 缺省的「只改资料」形态。
+    // 省略 roleCodes 时把目标现有角色并入判定是**裁定过的策略**，不是回落到默认值的疏漏：
+    //   · 依据 ACCEPTANCE_REVIEW_2026-09-21.md §A-2 修复口径 ——「目标持有 super_admin 时同样要求
+    //     调用者为 super_admin」，条件挂在目标的角色上，而非「本次是否改角色」上。非超管调用者
+    //     改超管资料，本质仍是「在不居于其上的账号上写入」：昵称/邮箱会展示在用户列表
+    //     （users/page.tsx 表格）与超管自己的后台侧栏、仪表盘上，改之即可冒充该身份、
+    //     在管理面内制造误导。这条边界不因请求少了个键而消失。
+    //   · 仓库内唯一的真实调用方 src/app/admin/users/page.tsx 的编辑表单**总是**回传 roleCodes
+    //     （handleSave 组包处），且 openEditDialog 用目标现有角色预填，所以「省略 roleCodes」
+    //     只可能来自手写/被篡改的请求，不存在被误伤的正常用户流程。
+    //   · 若只在 body.roleCodes 存在时才判定，同一意图（改超管昵称）会因为「有没有带那个键」
+    //     而一个 403 一个 200，UI 那条仍然 403 —— 策略不可解释，且给直接调 API 的客户端留了旁路。
+    const resultingRoleCodes = body.roleCodes ?? targetRoleCodes;
+    const blockedRoles = privilegedRolesInPlay(roleCodes, resultingRoleCodes, targetRoleCodes);
+    if (blockedRoles.length > 0) {
+      // 文案按「是否提交角色」分开，避免把资料编辑误读成角色校验写错了对象
+      return forbidden(
+        body.roleCodes
+          ? `无权变动特权角色：${blockedRoles.join(', ')}`
+          : `无权编辑持有特权角色的账号：${blockedRoles.join(', ')}（仅超级管理员可修改其资料）`
+      );
+    }
+
+    // 不能移除自己的超级管理员角色（否则会自锁在管理面之外）
+    if (
+      isTargetSelf &&
+      body.roleCodes &&
+      targetRoleCodes.includes('super_admin') &&
+      !body.roleCodes.includes('super_admin')
+    ) {
+      return forbidden('不能移除自己的超级管理员角色');
+    }
+
+    const wantsPassword = Boolean(body.password);
+    const wantsStatus = body.status !== undefined;
+    if ((wantsPassword || wantsStatus) && !mayChangeCredentials(roleCodes, isTargetSelf)) {
+      return forbidden('仅超级管理员可重置他人密码或变更他人状态');
+    }
+
     const updateData: Record<string, unknown> = {};
     if (body.nickname !== undefined) updateData.nickname = body.nickname;
     if (body.email !== undefined) updateData.email = body.email;
     if (body.phone !== undefined) updateData.phone = body.phone;
-    if (body.status !== undefined) updateData.status = body.status;
-    if (body.password) {
-      updateData.password = await hashPassword(body.password);
+    if (wantsStatus) updateData.status = body.status;
+    if (wantsPassword) {
+      updateData.password = await hashPassword(body.password as string);
     }
 
     await prisma.user.update({
@@ -197,16 +257,6 @@ export const PUT = withCrypto(async (request: NextRequest) => {
 
     // 更新角色分配
     if (body.roleCodes) {
-      // 防止将自己从 super_admin 移除
-      if (userId === currentUser.userId) {
-        const currentRoles = await prisma.userRole.findMany({ where: { userId } });
-        const currentIsSuperAdmin = currentRoles.some((r) => r.roleCode === 'super_admin');
-        const stillHasSuperAdmin = body.roleCodes.includes('super_admin');
-        if (currentIsSuperAdmin && !stillHasSuperAdmin) {
-          return forbidden('不能移除自己的超级管理员角色');
-        }
-      }
-
       await prisma.userRole.deleteMany({ where: { userId } });
       for (const roleCode of body.roleCodes) {
         const role = await prisma.role.findUnique({ where: { code: roleCode } });
@@ -225,7 +275,7 @@ export const PUT = withCrypto(async (request: NextRequest) => {
 
 // DELETE /api/admin/users - 删除用户
 export const DELETE = withCrypto(async (request: NextRequest) => {
-  const currentUser = authenticateRequest(request);
+  const currentUser = await authenticateActiveRequest(request);
   if (!currentUser) return unauthorized();
 
   const userRoles = await prisma.userRole.findMany({ where: { userId: currentUser.userId } });
diff --git a/src/app/api/auth/login/route.test.ts b/src/app/api/auth/login/route.test.ts
new file mode 100644
index 0000000..539ab50
--- /dev/null
+++ b/src/app/api/auth/login/route.test.ts
@@ -0,0 +1,175 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import type { NextRequest } from 'next/server';
+import bcrypt from 'bcryptjs';
+
+const mockFindUnique = jest.fn<(args: unknown) => Promise<unknown>>();
+
+jest.mock('@/lib/db', () => ({
+  prisma: {
+    user: {
+      findUnique: mockFindUnique,
+    },
+  },
+}));
+
+const mockVerifyPassword = jest.fn<(password: string, hash: string) => Promise<boolean>>();
+const mockGenerateTokens = jest.fn<(payload: unknown) => { accessToken: string; refreshToken: string }>();
+const mockSetTokenCookie = jest.fn();
+
+jest.mock('@/lib/auth', () => ({
+  verifyPassword: (password: string, hash: string) => mockVerifyPassword(password, hash),
+  generateTokens: (payload: unknown) => mockGenerateTokens(payload),
+  setTokenCookie: (
+    response: unknown,
+    accessToken: string,
+    refreshToken: string,
+    secure: boolean,
+  ) => mockSetTokenCookie(response, accessToken, refreshToken, secure),
+}));
+
+jest.unmock('./route');
+
+import { POST, loginRateLimiter } from './route';
+
+function createRequest(body: Record<string, unknown>): NextRequest {
+  return {
+    url: 'http://localhost:3000/api/auth/login',
+    nextUrl: { protocol: 'http:' },
+    headers: new Headers(),
+    json: async () => body,
+  } as unknown as NextRequest;
+}
+
+// 真实 cost-10 哈希：用于比对「未知账号」分支付出的 bcrypt 工作量与真实账号一致。
+const storedHash = bcrypt.hashSync('correct-password', 10);
+
+const activeUser = {
+  id: 'user-1',
+  username: 'editor',
+  nickname: '编辑',
+  password: storedHash,
+  role: 'content_editor',
+  status: 1,
+  avatar: '',
+};
+
+const disabledUser = { ...activeUser, id: 'user-2', username: 'banned', status: 0 };
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  loginRateLimiter.reset();
+  mockFindUnique.mockResolvedValue(activeUser);
+  mockVerifyPassword.mockResolvedValue(true);
+  mockGenerateTokens.mockReturnValue({ accessToken: 'access-1', refreshToken: 'refresh-1' });
+});
+
+describe('POST /api/auth/login', () => {
+  it('returns 400 when username or password is missing', async () => {
+    const response = await POST(createRequest({ username: 'editor' }));
+
+    expect(response.status).toBe(400);
+    expect(mockVerifyPassword).not.toHaveBeenCalled();
+  });
+
+  it('runs bcrypt verification even for an unknown username (no timing shortcut)', async () => {
+    mockFindUnique.mockResolvedValue(null);
+
+    const response = await POST(createRequest({ username: 'nobody', password: 'hunter2' }));
+
+    expect(response.status).toBe(401);
+    expect(mockVerifyPassword).toHaveBeenCalledTimes(1);
+    const [passwordArg, hashArg] = mockVerifyPassword.mock.calls[0]!;
+    expect(passwordArg).toBe('hunter2');
+    expect(hashArg).toMatch(/^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/);
+    expect(hashArg).not.toBe(activeUser.password);
+    // cost factor 与 hashPassword(10) 一致 ⇒ 未知账号不会因少跑一轮 bcrypt 而更快响应（B-2）。
+    expect(bcrypt.getRounds(hashArg)).toBe(bcrypt.getRounds(storedHash));
+    expect(bcrypt.compareSync('hunter2', hashArg)).toBe(false);
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+  });
+
+  it('gives unknown and disabled accounts an identical response shape once the password fails', async () => {
+    mockFindUnique.mockResolvedValue(null);
+    mockVerifyPassword.mockResolvedValue(false);
+    const unknownResponse = await POST(createRequest({ username: 'nobody', password: 'wrong' }));
+    const unknownBody = await unknownResponse.json();
+
+    mockFindUnique.mockResolvedValue({ ...disabledUser, status: 1 });
+    mockVerifyPassword.mockResolvedValue(false);
+    const enabledWrongResponse = await POST(
+      createRequest({ username: 'editor', password: 'wrong' }),
+    );
+    const enabledWrongBody = await enabledWrongResponse.json();
+
+    expect(unknownResponse.status).toBe(enabledWrongResponse.status);
+    expect(unknownBody).toEqual(enabledWrongBody);
+    expect(mockVerifyPassword).toHaveBeenCalledTimes(2);
+  });
+
+  it('reports the disabled state only after the password has been verified', async () => {
+    mockFindUnique.mockResolvedValue(disabledUser);
+    mockVerifyPassword.mockResolvedValue(false);
+
+    const wrongPassword = await POST(
+      createRequest({ username: 'banned', password: 'wrong' }),
+    );
+    expect(await wrongPassword.json()).toEqual({
+      error: '用户名或密码错误',
+      code: 'UNAUTHORIZED',
+    });
+
+    mockVerifyPassword.mockResolvedValue(true);
+    const rightPassword = await POST(
+      createRequest({ username: 'banned', password: 'correct' }),
+    );
+
+    expect(rightPassword.status).toBe(401);
+    expect(await rightPassword.json()).toEqual({
+      error: '账号已被禁用，请联系管理员',
+      code: 'UNAUTHORIZED',
+    });
+    expect(mockVerifyPassword).toHaveBeenLastCalledWith('correct', disabledUser.password);
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+  });
+
+  it('never leaks the disabled state for an unknown username', async () => {
+    mockFindUnique.mockResolvedValue(null);
+    mockVerifyPassword.mockResolvedValue(true);
+
+    const response = await POST(createRequest({ username: 'nobody', password: 'guess' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(401);
+    expect(body.error).toBe('用户名或密码错误');
+    expect(body.error).not.toContain('禁用');
+  });
+
+  it('issues tokens for an enabled user with a valid password', async () => {
+    const response = await POST(createRequest({ username: 'editor', password: 'correct' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(mockGenerateTokens).toHaveBeenCalledWith({
+      userId: 'user-1',
+      username: 'editor',
+      role: 'content_editor',
+    });
+    expect(body.accessToken).toBe('access-1');
+    expect(mockSetTokenCookie).toHaveBeenCalledTimes(1);
+  });
+
+  it('throttles by IP before bcrypt once the window budget is exhausted', async () => {
+    // 前 10 次放行（各自跑一轮 bcrypt），第 11 次应被限流：429 且不再触达 bcrypt。
+    for (let i = 0; i < 10; i += 1) {
+      const ok = await POST(createRequest({ username: 'editor', password: 'correct' }));
+      expect(ok.status).toBe(200);
+    }
+    expect(mockVerifyPassword).toHaveBeenCalledTimes(10);
+
+    const limited = await POST(createRequest({ username: 'editor', password: 'correct' }));
+    expect(limited.status).toBe(429);
+    expect(await limited.json()).toMatchObject({ code: 'TOO_MANY_REQUESTS' });
+    // 关键：限流判定在 bcrypt 之前 ⇒ 撞库者无法用被拒请求继续消耗 CPU。
+    expect(mockVerifyPassword).toHaveBeenCalledTimes(10);
+  });
+});
diff --git a/src/app/api/auth/login/route.ts b/src/app/api/auth/login/route.ts
index 12de7d5..ac6c2a0 100644
--- a/src/app/api/auth/login/route.ts
+++ b/src/app/api/auth/login/route.ts
@@ -1,10 +1,32 @@
-import { NextRequest } from 'next/server';
+import { NextRequest, NextResponse } from 'next/server';
 import { prisma } from '@/lib/db';
 import { verifyPassword, generateTokens, setTokenCookie } from '@/lib/auth';
 import { success, unauthorized, validationError, internalError } from '@/lib/api-response';
+import { getClientIp } from '@/lib/client-ip';
+import { createMemoryRateLimiter } from '@/lib/rate-limit';
+
+// 与 hashPassword 的 cost factor(10) 一致的固定哑元哈希：用户不存在时也要吃掉一次完整 bcrypt，
+// 否则「未知账号」比「已禁用账号」快一个哈希量，构成可枚举用户名与口令的时间侧信道（B-2）。
+const TIMING_EQUALIZER_HASH = '$2b$10$VUixc994Qoz7jP1YEF2v/Oo9wc0uojx05w0cQIbcMoXHpPZ8BENyO';
+
+// 登录端点此前无任何限流：匿名者可无限驱动 cost-10 bcrypt（CPU DoS）并离线式撞库。
+// 按 IP 限流（不锁账号），与 contact 同姿态；判定在 bcrypt 之前，才真正省掉工作量。
+// 导出以便测试跨用例 reset()。
+export const loginRateLimiter = createMemoryRateLimiter({
+  windowMs: 15 * 60 * 1000,
+  max: 10,
+});
 
 export async function POST(request: NextRequest) {
   try {
+    const clientIp = getClientIp(request.headers);
+    if (loginRateLimiter.isLimited(clientIp)) {
+      return NextResponse.json(
+        { error: '尝试次数过多，请稍后再试', code: 'TOO_MANY_REQUESTS' },
+        { status: 429 },
+      );
+    }
+
     const body = await request.json();
     const { username, password } = body;
 
@@ -13,19 +35,17 @@ export async function POST(request: NextRequest) {
     }
 
     const user = await prisma.user.findUnique({ where: { username } });
-    if (!user) {
+
+    const isValid = await verifyPassword(password, user?.password ?? TIMING_EQUALIZER_HASH);
+    if (!user || !isValid) {
       return unauthorized('用户名或密码错误');
     }
 
+    // 禁用状态只在凭据校验通过后披露，避免与「用户名不存在」形成可区分响应（B-2）。
     if (user.status === 0) {
       return unauthorized('账号已被禁用，请联系管理员');
     }
 
-    const isValid = await verifyPassword(password, user.password);
-    if (!isValid) {
-      return unauthorized('用户名或密码错误');
-    }
-
     const { accessToken, refreshToken } = generateTokens({
       userId: user.id,
       username: user.username,
diff --git a/src/app/api/auth/refresh/route.test.ts b/src/app/api/auth/refresh/route.test.ts
new file mode 100644
index 0000000..3f8bd42
--- /dev/null
+++ b/src/app/api/auth/refresh/route.test.ts
@@ -0,0 +1,158 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import type { NextRequest } from 'next/server';
+
+const mockUserFindUnique = jest.fn<(args: unknown) => Promise<unknown>>();
+const mockUserRoleFindMany = jest.fn<(args: unknown) => Promise<unknown[]>>();
+
+jest.mock('@/lib/db', () => ({
+  prisma: {
+    user: { findUnique: mockUserFindUnique },
+    userRole: { findMany: mockUserRoleFindMany },
+  },
+}));
+
+const mockVerifyRefreshToken = jest.fn<(token: string) => unknown>();
+const mockGenerateTokens = jest.fn<(payload: unknown) => { accessToken: string; refreshToken: string }>();
+const mockSetTokenCookie = jest.fn();
+
+jest.mock('@/lib/auth', () => ({
+  verifyRefreshToken: (token: string) => mockVerifyRefreshToken(token),
+  generateTokens: (payload: unknown) => mockGenerateTokens(payload),
+  setTokenCookie: (r: unknown, a: string, b: string, s: boolean) => mockSetTokenCookie(r, a, b, s),
+}));
+
+jest.unmock('./route');
+
+import { POST } from './route';
+
+const legacyPayload = {
+  userId: 'user-1',
+  username: 'editor',
+  role: 'super_admin',
+};
+
+function createRequest(body: Record<string, unknown>): NextRequest {
+  return {
+    url: 'http://localhost:3000/api/auth/refresh',
+    nextUrl: { protocol: 'http:' },
+    headers: new Headers(),
+    json: async () => body,
+  } as unknown as NextRequest;
+}
+
+const request = () => createRequest({ refreshToken: 'signed-refresh-token' });
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  mockVerifyRefreshToken.mockReturnValue(legacyPayload);
+  mockUserFindUnique.mockResolvedValue({ id: 'user-1', username: 'editor', role: 'admin', status: 1 });
+  mockUserRoleFindMany.mockResolvedValue([{ userId: 'user-1', roleCode: 'super_admin' }]);
+  mockGenerateTokens.mockReturnValue({ accessToken: 'new-access', refreshToken: 'new-refresh' });
+});
+
+describe('POST /api/auth/refresh', () => {
+  it('returns 401 when the refresh token is missing', async () => {
+    const response = await POST(createRequest({}));
+
+    expect(response.status).toBe(401);
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+  });
+
+  it('returns 401 when the refresh token signature is invalid', async () => {
+    mockVerifyRefreshToken.mockImplementation(() => {
+      throw new Error('jwt expired');
+    });
+
+    const response = await POST(request());
+
+    expect(response.status).toBe(401);
+    expect(mockUserFindUnique).not.toHaveBeenCalled();
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+  });
+
+  it('mints no access token for a disabled user', async () => {
+    mockUserFindUnique.mockResolvedValue({ id: 'user-1', username: 'editor', status: 0 });
+
+    const response = await POST(request());
+    const body = await response.json();
+
+    expect(response.status).toBe(401);
+    expect(body.code).toBe('UNAUTHORIZED');
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+    expect(mockSetTokenCookie).not.toHaveBeenCalled();
+    expect(mockUserRoleFindMany).not.toHaveBeenCalled();
+  });
+
+  it('mints no access token for a deleted user', async () => {
+    mockUserFindUnique.mockResolvedValue(null);
+
+    const response = await POST(request());
+
+    expect(response.status).toBe(401);
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+    expect(mockSetTokenCookie).not.toHaveBeenCalled();
+  });
+
+  it('looks the account up by the token subject id, not by username', async () => {
+    await POST(request());
+
+    expect(mockUserFindUnique).toHaveBeenCalledWith({ where: { id: 'user-1' } });
+    expect(mockUserRoleFindMany).toHaveBeenCalledWith({ where: { userId: 'user-1' } });
+  });
+
+  it('re-signs with the demoted role from the database instead of the stale claim', async () => {
+    mockUserRoleFindMany.mockResolvedValue([{ userId: 'user-1', roleCode: 'content_editor' }]);
+
+    const response = await POST(request());
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(mockGenerateTokens).toHaveBeenCalledWith({
+      userId: 'user-1',
+      username: 'editor',
+      role: 'content_editor',
+    });
+    expect(mockGenerateTokens.mock.calls[0]![0]).not.toMatchObject({ role: 'super_admin' });
+    expect(body).toEqual({ accessToken: 'new-access', refreshToken: 'new-refresh' });
+  });
+
+  it('falls back to the stored role column when the account carries no role grants', async () => {
+    mockUserRoleFindMany.mockResolvedValue([]);
+
+    const response = await POST(request());
+
+    expect(response.status).toBe(200);
+    expect(mockGenerateTokens).toHaveBeenCalledWith({
+      userId: 'user-1',
+      username: 'editor',
+      role: 'admin',
+    });
+  });
+
+  it('re-issues from the current account row rather than the token payload', async () => {
+    mockUserFindUnique.mockResolvedValue({
+      id: 'user-1',
+      username: 'renamed-editor',
+      role: 'content_editor',
+      status: 1,
+    });
+    mockUserRoleFindMany.mockResolvedValue([{ userId: 'user-1', roleCode: 'reviewer' }]);
+
+    await POST(request());
+
+    expect(mockGenerateTokens).toHaveBeenCalledWith({
+      userId: 'user-1',
+      username: 'renamed-editor',
+      role: 'reviewer',
+    });
+  });
+
+  it('returns 500 when the account lookup fails instead of handing out a token', async () => {
+    mockUserFindUnique.mockRejectedValue(new Error('SQLITE_BUSY'));
+
+    const response = await POST(request());
+
+    expect(response.status).toBe(500);
+    expect(mockGenerateTokens).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/app/api/auth/refresh/route.ts b/src/app/api/auth/refresh/route.ts
index ef06096..f0c6ea4 100644
--- a/src/app/api/auth/refresh/route.ts
+++ b/src/app/api/auth/refresh/route.ts
@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { prisma } from '@/lib/db';
 import { verifyRefreshToken, generateTokens, setTokenCookie } from '@/lib/auth';
 import { success, unauthorized, internalError } from '@/lib/api-response';
 
@@ -18,10 +19,23 @@ export async function POST(request: NextRequest) {
       return unauthorized('刷新令牌无效或已过期');
     }
 
+    // 原实现只验签名即用旧 payload 重签，被禁用/删除的账号可在 7 天内继续换取访问令牌（B-7）。
+    const user = await prisma.user.findUnique({ where: { id: payload.userId } });
+    if (!user || user.status === 0) {
+      return unauthorized('登录状态已失效，请重新登录');
+    }
+
+    // 角色按 permissions 层的同源查询（UserRole 关联表）实查后重签，避免沿用降权前的旧 claim；
+    // 无关联角色的历史账号回落到 login 同源的 User.role 标量。
+    const userRoles = await prisma.userRole.findMany({ where: { userId: user.id } });
+    const role = userRoles[0]?.roleCode ?? user.role;
+
+    // 令牌轮换与吊销（jti / tokenVersion）需要 schema 变更，仍是已记录的 backlog 项：
+    // 失窃的 refresh token 在账号仍启用的前提下到期前可持续换取新令牌。
     const tokens = generateTokens({
-      userId: payload.userId,
-      username: payload.username,
-      role: payload.role,
+      userId: user.id,
+      username: user.username,
+      role,
     });
 
     const response = success({
diff --git a/src/app/api/cms/draft/disable/route.test.ts b/src/app/api/cms/draft/disable/route.test.ts
new file mode 100644
index 0000000..8df072e
--- /dev/null
+++ b/src/app/api/cms/draft/disable/route.test.ts
@@ -0,0 +1,83 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import type { NextRequest } from 'next/server';
+
+const mockDisable = jest.fn<() => void>();
+const mockDraftMode = jest.fn<() => Promise<{ disable: () => void }>>();
+
+jest.mock('next/headers', () => ({
+  draftMode: () => mockDraftMode(),
+}));
+
+// 与 enable 的同名测试同法：jest.setup.js 的 next/server 桩只有 json()，
+// 而 N-18 的判据正是 Location 指向何处。
+jest.mock('next/server', () => {
+  const jsonResponse = (body: unknown, init?: { status?: number }) => ({
+    status: init?.status ?? 200,
+    headers: new Headers({ 'content-type': 'application/json' }),
+    json: async () => body,
+  });
+  const redirectResponse = (url: URL | string, init?: { status?: number }) => ({
+    status: init?.status ?? 307,
+    headers: new Headers({ location: String(url) }),
+    json: async () => null,
+  });
+  return {
+    NextResponse: { json: jsonResponse, redirect: redirectResponse },
+    NextRequest: class {},
+  };
+});
+
+jest.unmock('./route');
+
+import { POST } from './route';
+
+function createRequest(body: Record<string, unknown>): NextRequest {
+  return {
+    url: 'http://localhost:3000/api/cms/draft/disable',
+    headers: new Headers(),
+    json: async () => body,
+  } as unknown as NextRequest;
+}
+
+function locationOf(response: unknown): string {
+  const headers = (response as { headers?: Headers }).headers;
+  return String(headers?.get('location') ?? '');
+}
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  mockDraftMode.mockResolvedValue({ disable: mockDisable });
+});
+
+describe('POST /api/cms/draft/disable', () => {
+  it('disables draft mode and returns json when no redirect is requested', async () => {
+    const response = await POST(createRequest({}));
+
+    expect(response.status).toBe(200);
+    expect(mockDisable).toHaveBeenCalledTimes(1);
+    await expect(response.json()).resolves.toMatchObject({ code: 0 });
+  });
+
+  it('redirects to a declared in-site path', async () => {
+    const response = await POST(createRequest({ redirect: '/cases/demo' }));
+
+    expect(response.status).toBe(307);
+    expect(locationOf(response)).toBe('http://localhost:3000/cases/demo');
+    expect(mockDisable).toHaveBeenCalledTimes(1);
+  });
+
+  // N-18：修复前本路由把 body.redirect 原样交给 new URL()，任何绝对 URL 都能把用户送出站外，
+  // 而姊妹路由 enable 早已因 B-6 加了同一道校验。
+  it.each([
+    ['absolute cross-site url', 'https://evil.example/phish'],
+    ['protocol-relative url', '//evil.example/phish'],
+    ['backslash-obfuscated url', '/\\evil.example/phish'],
+    ['scheme-handler url', 'javascript:alert(1)'],
+  ])('refuses %s redirect with 400 and leaves draft mode untouched', async (_name, redirect) => {
+    const response = await POST(createRequest({ redirect }));
+
+    expect(response.status).toBe(400);
+    expect(mockDisable).not.toHaveBeenCalled();
+    await expect(response.json()).resolves.toMatchObject({ code: 400 });
+  });
+});
diff --git a/src/app/api/cms/draft/disable/route.ts b/src/app/api/cms/draft/disable/route.ts
index 6207546..33a7b04 100644
--- a/src/app/api/cms/draft/disable/route.ts
+++ b/src/app/api/cms/draft/disable/route.ts
@@ -1,5 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { draftMode } from 'next/headers';
+import { isInternalRedirect } from '@/lib/cms/internal-redirect';
 
 // 静态导出（output: 'export'）不支持 GET + searchParams 的 API 路由。
 // 使用 POST 避免 Next.js 在构建时尝试预渲染。未来迁移到真实后端时可改回 GET。
@@ -8,6 +9,14 @@ export async function POST(request: NextRequest) {
     const body = await request.json().catch(() => ({}));
     const redirect = typeof body.redirect === 'string' ? body.redirect : null;
 
+    // 与 /api/cms/draft/enable 同序：先校验重定向目标，非法请求不留副作用（N-18）。
+    if (redirect && !isInternalRedirect(redirect)) {
+      return NextResponse.json(
+        { code: 400, message: 'Redirect must be an in-site path', data: null },
+        { status: 400 }
+      );
+    }
+
     const draft = await draftMode();
     draft.disable();
 
diff --git a/src/app/api/cms/draft/enable/route.test.ts b/src/app/api/cms/draft/enable/route.test.ts
new file mode 100644
index 0000000..bba0229
--- /dev/null
+++ b/src/app/api/cms/draft/enable/route.test.ts
@@ -0,0 +1,135 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import type { NextRequest } from 'next/server';
+
+const mockEnable = jest.fn<() => void>();
+const mockDraftMode = jest.fn<() => Promise<{ enable: () => void; isEnabled: boolean }>>();
+
+jest.mock('next/headers', () => ({
+  draftMode: () => mockDraftMode(),
+}));
+
+// jest.setup.js 的全局 next/server 桩只实现 json()，无法承载 redirect 断言（B-6 需要 Location）。
+jest.mock('next/server', () => {
+  const jsonResponse = (body: unknown, init?: { status?: number }) => ({
+    status: init?.status ?? 200,
+    headers: new Headers({ 'content-type': 'application/json' }),
+    json: async () => body,
+  });
+  const redirectResponse = (url: URL | string, init?: { status?: number }) => ({
+    status: init?.status ?? 307,
+    headers: new Headers({ location: String(url) }),
+    json: async () => null,
+  });
+  return {
+    NextResponse: { json: jsonResponse, redirect: redirectResponse },
+    NextRequest: class {},
+  };
+});
+
+jest.unmock('./route');
+
+import { POST } from './route';
+
+function createRequest(body: Record<string, unknown>): NextRequest {
+  return {
+    url: 'http://localhost:3000/api/cms/draft/enable',
+    headers: new Headers(),
+    json: async () => body,
+  } as unknown as NextRequest;
+}
+
+function locationOf(response: unknown): string {
+  const headers = (response as { headers?: Headers }).headers;
+  return String(headers?.get('location') ?? '');
+}
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  mockDraftMode.mockResolvedValue({ enable: mockEnable, isEnabled: true });
+  process.env.CMS_PREVIEW_SECRET = 'test-preview-secret';
+});
+
+describe('POST /api/cms/draft/enable', () => {
+  it('fails closed with 500 and never enables draft mode when the secret is not configured', async () => {
+    delete process.env.CMS_PREVIEW_SECRET;
+
+    const response = await POST(createRequest({ secret: 'guessed-by-attacker' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(500);
+    expect(body).toMatchObject({ code: 500 });
+    expect(mockDraftMode).not.toHaveBeenCalled();
+    expect(mockEnable).not.toHaveBeenCalled();
+  });
+
+  it('does not enable draft mode for an unconfigured secret even with a redirect target', async () => {
+    delete process.env.CMS_PREVIEW_SECRET;
+
+    const response = await POST(createRequest({ redirect: '/cases/demo' }));
+
+    expect(response.status).toBe(500);
+    expect(locationOf(response)).toBe('');
+    expect(mockEnable).not.toHaveBeenCalled();
+  });
+
+  it('rejects a wrong secret with 401 and never enables draft mode', async () => {
+    const response = await POST(createRequest({ secret: 'wrong-secret' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(401);
+    expect(body).toMatchObject({ code: 401 });
+    expect(mockEnable).not.toHaveBeenCalled();
+  });
+
+  it('rejects a missing secret with 401', async () => {
+    const response = await POST(createRequest({}));
+
+    expect(response.status).toBe(401);
+    expect(mockEnable).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    ['protocol-relative', '//evil.com'],
+    ['absolute cross-origin', 'https://evil.com/path'],
+    ['backslash bypass', '/\\evil.com'],
+    ['leading-space bypass', ' //evil.com'],
+    ['scheme injection', 'javascript:alert(1)'],
+  ])('refuses %s redirect without enabling draft mode', async (_name, redirect) => {
+    const response = await POST(createRequest({ secret: 'test-preview-secret', redirect }));
+    const body = await response.json();
+
+    expect(response.status).toBe(400);
+    expect(body).toMatchObject({ code: 400 });
+    expect(locationOf(response)).not.toContain('evil.com');
+    expect(mockEnable).not.toHaveBeenCalled();
+  });
+
+  it('enables draft mode and redirects to a declared in-site path', async () => {
+    const response = await POST(
+      createRequest({ secret: 'test-preview-secret', redirect: '/cases/demo' }),
+    );
+
+    expect(response.status).toBe(307);
+    expect(mockEnable).toHaveBeenCalledTimes(1);
+    expect(locationOf(response)).toBe('http://localhost:3000/cases/demo');
+  });
+
+  it('redirects to the model preview path when only modelCode and slug are given', async () => {
+    const response = await POST(
+      createRequest({ secret: 'test-preview-secret', modelCode: 'case-study', slug: 'demo' }),
+    );
+
+    expect(response.status).toBe(307);
+    expect(mockEnable).toHaveBeenCalledTimes(1);
+    expect(locationOf(response)).toBe('http://localhost:3000/cases/demo?preview=true');
+  });
+
+  it('confirms activation with JSON when no redirect target is supplied', async () => {
+    const response = await POST(createRequest({ secret: 'test-preview-secret' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(body).toMatchObject({ code: 0, data: { enabled: true } });
+    expect(mockEnable).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/src/app/api/cms/draft/enable/route.ts b/src/app/api/cms/draft/enable/route.ts
index 84c8948..83e7cf5 100644
--- a/src/app/api/cms/draft/enable/route.ts
+++ b/src/app/api/cms/draft/enable/route.ts
@@ -1,8 +1,10 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { draftMode } from 'next/headers';
+import { isInternalRedirect } from '@/lib/cms/internal-redirect';
 
 // 静态导出（output: 'export'）不支持 GET + searchParams 的 API 路由。
 // 使用 POST 避免 Next.js 在构建时尝试预渲染。未来迁移到真实后端时可改回 GET。
+
 export async function POST(request: NextRequest) {
   try {
     const body = await request.json().catch(() => ({}));
@@ -11,8 +13,24 @@ export async function POST(request: NextRequest) {
     const modelCode = typeof body.modelCode === 'string' ? body.modelCode : null;
     const redirect = typeof body.redirect === 'string' ? body.redirect : null;
 
+    // 重定向目标先于 draft.enable() 校验，非法请求不留草稿模式副作用。
+    if (redirect && !isInternalRedirect(redirect)) {
+      return NextResponse.json(
+        { code: 400, message: 'Redirect must be an in-site path', data: null },
+        { status: 400 }
+      );
+    }
+
     const expectedSecret = process.env.CMS_PREVIEW_SECRET;
-    if (expectedSecret && secret !== expectedSecret) {
+    // 与 /api/cms/revalidate 一致 fail-closed：密钥未配置时原实现 `if (expectedSecret && ...)` 会放行任意请求（B-6）。
+    if (!expectedSecret) {
+      return NextResponse.json(
+        { code: 500, message: 'Preview secret is not configured', data: null },
+        { status: 500 }
+      );
+    }
+
+    if (secret !== expectedSecret) {
       return NextResponse.json(
         { code: 401, message: 'Invalid secret token', data: null },
         { status: 401 }
diff --git a/src/app/api/cms/revalidate/route.test.ts b/src/app/api/cms/revalidate/route.test.ts
index 19b3001..5e9a8ba 100644
--- a/src/app/api/cms/revalidate/route.test.ts
+++ b/src/app/api/cms/revalidate/route.test.ts
@@ -257,4 +257,33 @@ describe('POST /api/cms/revalidate', () => {
     expect(body.data.revalidatedPaths).toContain('/products');
     expect(body.data.revalidatedPaths).not.toContain('/products/standalone/novavis');
   });
+
+  // S-3：/about、/contact 为单页模型（无 listPage 配置），/products/erp-upgrade 是
+  // 硬编码页但数据来自 product(erp)。此前映射缺口 ⇒ CMS 发布后这些页面永不刷新。
+  it('revalidates /about for about-page model', async () => {
+    const response = await POST(createMockRequest({ modelCode: 'about-page' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(mockRevalidatePath).toHaveBeenCalledWith('/about');
+    expect(body.data.revalidatedPaths).toContain('/about');
+  });
+
+  it('revalidates /contact for contact-page model', async () => {
+    const response = await POST(createMockRequest({ modelCode: 'contact-page' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(mockRevalidatePath).toHaveBeenCalledWith('/contact');
+    expect(body.data.revalidatedPaths).toContain('/contact');
+  });
+
+  it('also revalidates the hardcoded /products/erp-upgrade page when product model changes', async () => {
+    const response = await POST(createMockRequest({ modelCode: 'product', slug: 'erp' }));
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(mockRevalidatePath).toHaveBeenCalledWith('/products/erp-upgrade');
+    expect(body.data.revalidatedPaths).toContain('/products/erp-upgrade');
+  });
 });
diff --git a/src/app/api/cms/revalidate/route.ts b/src/app/api/cms/revalidate/route.ts
index c9c8e42..0202ba6 100644
--- a/src/app/api/cms/revalidate/route.ts
+++ b/src/app/api/cms/revalidate/route.ts
@@ -106,6 +106,22 @@ export async function POST(request: NextRequest) {
         revalidatedPaths.push('/team');
       }
 
+      // about-page / contact-page 为无 listPage 配置的单页模型，固定映射（S-3）
+      if (body.modelCode === 'about-page' && !revalidatedPaths.includes('/about')) {
+        revalidatePath('/about');
+        revalidatedPaths.push('/about');
+      }
+      if (body.modelCode === 'contact-page' && !revalidatedPaths.includes('/contact')) {
+        revalidatePath('/contact');
+        revalidatedPaths.push('/contact');
+      }
+
+      // /products/erp-upgrade 是硬编码页面，但数据来自 product 模型（slug=erp）（S-3）
+      if (body.modelCode === 'product' && !revalidatedPaths.includes('/products/erp-upgrade')) {
+        revalidatePath('/products/erp-upgrade');
+        revalidatedPaths.push('/products/erp-upgrade');
+      }
+
       // 首页相关模型变更时同步刷新 /
       if (HOME_AFFECTED_MODELS.has(body.modelCode) && !revalidatedPaths.includes('/')) {
         revalidatePath('/');
diff --git a/src/app/api/contact/route.ts b/src/app/api/contact/route.ts
index 0533515..6ec4c39 100644
--- a/src/app/api/contact/route.ts
+++ b/src/app/api/contact/route.ts
@@ -1,100 +1,94 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { z } from 'zod';
-import { COMPANY_INFO } from '@/lib/constants';
+import { NextRequest, NextResponse } from "next/server";
+import { z } from "zod";
+import { COMPANY_INFO } from "@/lib/constants";
+import { getClientIp } from "@/lib/client-ip";
+import { createMemoryRateLimiter } from "@/lib/rate-limit";
 
 const contactSchema = z.object({
-  name: z.string().min(2, '姓名至少需要2个字符').max(50, '姓名不能超过50个字符'),
-  phone: z.string().regex(/^1[3-9]\d{9}$/, '请输入有效的手机号码'),
-  email: z.string().email('请输入有效的邮箱地址').max(100, '邮箱地址过长'),
-  subject: z.string().min(2, '主题至少需要2个字符').max(120, '主题不能超过120个字符'),
-  message: z.string().min(10, '留言内容至少需要10个字符').max(2000, '留言内容不能超过2000个字符'),
+  name: z
+    .string()
+    .min(2, "姓名至少需要2个字符")
+    .max(50, "姓名不能超过50个字符"),
+  phone: z.string().regex(/^1[3-9]\d{9}$/, "请输入有效的手机号码"),
+  email: z.string().email("请输入有效的邮箱地址").max(100, "邮箱地址过长"),
+  subject: z
+    .string()
+    .min(2, "主题至少需要2个字符")
+    .max(120, "主题不能超过120个字符"),
+  message: z
+    .string()
+    .min(10, "留言内容至少需要10个字符")
+    .max(2000, "留言内容不能超过2000个字符"),
 });
 
-// 简单内存限流：按 IP 地址限制提交频率
-const rateLimitMap = new Map<string, { count: number; resetAt: number }>();
-const RATE_LIMIT_WINDOW_MS = 60 * 60 * 1000; // 1 小时
-const RATE_LIMIT_MAX_REQUESTS = 5;
-
-function getClientIp(request: NextRequest): string {
-  const forwarded = request.headers.get('x-forwarded-for');
-  if (forwarded) {
-    return forwarded.split(',')[0]?.trim() ?? 'unknown';
-  }
-  return request.headers.get('x-real-ip') ?? 'unknown';
-}
-
-function isRateLimited(clientIp: string): boolean {
-  const now = Date.now();
-  const record = rateLimitMap.get(clientIp);
-
-  if (!record || now > record.resetAt) {
-    rateLimitMap.set(clientIp, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });
-    return false;
-  }
-
-  record.count += 1;
-  return record.count > RATE_LIMIT_MAX_REQUESTS;
-}
+// 简单内存限流：按 IP 地址限制提交频率（复用 src/lib/rate-limit，与登录端点同一实现）
+const contactRateLimiter = createMemoryRateLimiter({
+  windowMs: 60 * 60 * 1000, // 1 小时
+  max: 5,
+});
 
 function sanitizeInput(input: string): string {
   // 去除首尾空白并过滤潜在危险标签
-  return input.trim().replace(/[<>]/g, '');
+  return input.trim().replace(/[<>]/g, "");
 }
 
 export async function POST(request: NextRequest) {
   try {
-    const clientIp = getClientIp(request);
-    if (isRateLimited(clientIp)) {
+    const clientIp = getClientIp(request.headers);
+    if (contactRateLimiter.isLimited(clientIp)) {
       return NextResponse.json(
-        { success: false, message: '提交过于频繁，请稍后再试' },
-        { status: 429 }
+        { success: false, message: "提交过于频繁，请稍后再试" },
+        { status: 429 },
       );
     }
 
     const body = await request.formData();
 
     const parseResult = contactSchema.safeParse({
-      name: body.get('name'),
-      phone: body.get('phone'),
-      email: body.get('email'),
-      subject: body.get('subject'),
-      message: body.get('message'),
+      name: body.get("name"),
+      phone: body.get("phone"),
+      email: body.get("email"),
+      subject: body.get("subject"),
+      message: body.get("message"),
     });
 
     if (!parseResult.success) {
       const firstError = parseResult.error.issues[0];
       return NextResponse.json(
-        { success: false, message: firstError?.message ?? '表单数据无效' },
-        { status: 400 }
+        { success: false, message: firstError?.message ?? "表单数据无效" },
+        { status: 400 },
       );
     }
 
     const { name, phone, email, subject, message } = parseResult.data;
 
     const formBody = new URLSearchParams();
-    formBody.append('name', sanitizeInput(name));
-    formBody.append('phone', sanitizeInput(phone));
-    formBody.append('email', sanitizeInput(email));
-    formBody.append('subject', sanitizeInput(subject));
-    formBody.append('message', sanitizeInput(message));
-    formBody.append('_subject', `网站留言: ${sanitizeInput(subject)}`);
-    formBody.append('_captcha', 'false');
-    formBody.append('_template', 'table');
+    formBody.append("name", sanitizeInput(name));
+    formBody.append("phone", sanitizeInput(phone));
+    formBody.append("email", sanitizeInput(email));
+    formBody.append("subject", sanitizeInput(subject));
+    formBody.append("message", sanitizeInput(message));
+    formBody.append("_subject", `网站留言: ${sanitizeInput(subject)}`);
+    formBody.append("_captcha", "false");
+    formBody.append("_template", "table");
 
-    const response = await fetch(`https://formsubmit.co/ajax/${COMPANY_INFO.email}`, {
-      method: 'POST',
-      headers: { 'Accept': 'application/json' },
-      body: formBody.toString(),
-    });
+    const response = await fetch(
+      `https://formsubmit.co/ajax/${COMPANY_INFO.email}`,
+      {
+        method: "POST",
+        headers: { Accept: "application/json" },
+        body: formBody.toString(),
+      },
+    );
 
     const data = await response.json();
 
     return NextResponse.json(data, { status: response.status });
   } catch (error) {
-    console.error('Contact form error:', error);
+    console.error("Contact form error:", error);
     return NextResponse.json(
-      { success: false, message: '服务器内部错误' },
-      { status: 500 }
+      { success: false, message: "服务器内部错误" },
+      { status: 500 },
     );
   }
 }
diff --git a/src/app/error.tsx b/src/app/error.tsx
index dc3340f..2c8f450 100644
--- a/src/app/error.tsx
+++ b/src/app/error.tsx
@@ -23,7 +23,7 @@ export default function Error({
         <div className="max-w-2xl mx-auto text-center">
           <div className="mb-8">
             <div className="w-24 h-24 bg-[var(--color-brand-bg)] rounded-full flex items-center justify-center mx-auto mb-6">
-              <AlertTriangle className="w-12 h-12 text-[var(--color-brand)]" />
+              <AlertTriangle className="w-12 h-12 text-brand-ink" />
             </div>
             <div className="w-32 h-1 bg-[var(--color-brand)] mx-auto" />
           </div>
@@ -73,7 +73,7 @@ export default function Error({
                 className="flex items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-10 h-10 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mr-4 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <AlertTriangle className="w-5 h-5 text-[var(--color-brand)]" />
+                  <AlertTriangle className="w-5 h-5 text-brand-ink" />
                 </div>
                 <div className="text-left">
                   <div className="font-semibold text-[var(--color-text-primary)]">联系我们</div>
@@ -86,7 +86,7 @@ export default function Error({
                 className="flex items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-10 h-10 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mr-4 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <RefreshCw className="w-5 h-5 text-[var(--color-brand)]" />
+                  <RefreshCw className="w-5 h-5 text-brand-ink" />
                 </div>
                 <div className="text-left">
                   <div className="font-semibold text-[var(--color-text-primary)]">服务</div>
@@ -98,7 +98,7 @@ export default function Error({
 
           <div className="mt-8 text-sm text-[var(--color-text-placeholder)]">
             如果问题持续存在，请{' '}
-            <StaticLink href="/contact" className="text-[var(--color-brand)] hover:underline">
+            <StaticLink href="/contact" className="text-brand-ink hover:underline">
               联系我们的技术团队
             </StaticLink>
           </div>
diff --git a/src/app/global-error.test.tsx b/src/app/global-error.test.tsx
new file mode 100644
index 0000000..ede1ffc
--- /dev/null
+++ b/src/app/global-error.test.tsx
@@ -0,0 +1,33 @@
+/**
+ * PR-NEXT: 追加 src/app/global-error.tsx 的回归测试
+ */
+import { render, screen, fireEvent } from '@testing-library/react';
+import GlobalError from './global-error';
+
+describe('GlobalError - 根布局错误兜底页', () => {
+  it('自带文档壳并声明中文语言（axe html-has-lang）', () => {
+    const { container } = render(
+      <GlobalError error={Object.assign(new Error('boom'), { digest: 'd-1' })} retry={jest.fn()} />
+    );
+    const html = container.querySelector('html');
+    expect(html).not.toBeNull();
+    expect(html).toHaveAttribute('lang', 'zh-CN');
+    expect(container.querySelector('body')).not.toBeNull();
+    expect(container.querySelector('title')?.textContent).toContain('四川睿新致远科技有限公司');
+  });
+
+  it('给出可操作出口且重试按钮接线到 retry', () => {
+    const retry = jest.fn();
+    render(<GlobalError error={Object.assign(new Error('boom'), { digest: undefined })} retry={retry} />);
+    fireEvent.click(screen.getByRole('button', { name: '重试' }));
+    expect(retry).toHaveBeenCalledTimes(1);
+    expect(screen.getByRole('link', { name: '返回首页' })).toHaveAttribute('href', '/');
+  });
+
+  it('有 digest 时展示错误编号，供工单定位', () => {
+    render(
+      <GlobalError error={Object.assign(new Error('boom'), { digest: 'abc123' })} retry={jest.fn()} />
+    );
+    expect(screen.getByText(/abc123/)).toBeInTheDocument();
+  });
+});
diff --git a/src/app/global-error.tsx b/src/app/global-error.tsx
new file mode 100644
index 0000000..e8f6b50
--- /dev/null
+++ b/src/app/global-error.tsx
@@ -0,0 +1,76 @@
+'use client';
+
+// 根布局抛错时 Next.js 用内置文档顶替 root layout，而内置文档的 <html> 没有 lang、
+// 也不读本站的 html[data-theme] 令牌，深色下会落到浏览器默认画布（实测 #0A0E14 令牌失效、
+// bgMatchesToken=false，axe 报 html-has-lang）。全站 axe 扫描扩到预渲染产物后暴露此缺口。
+// 因此这里自带文档壳 + 与 globals.css 同值的 OS 主题样式，不依赖 root layout。
+export default function GlobalError({
+  error,
+  retry,
+}: {
+  error: Error & { digest?: string };
+  retry: () => void;
+}) {
+  return (
+    <html lang="zh-CN">
+      <head>
+        <meta charSet="utf-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1" />
+        <title>页面无法显示 | 四川睿新致远科技有限公司</title>
+        <style>{`
+          :root { color-scheme: light; }
+          body { margin: 0; background: #FFFFFF; color: #0A0E14;
+            font-family: system-ui, -apple-system, "PingFang SC", "Microsoft YaHei", sans-serif; }
+          @media (prefers-color-scheme: dark) {
+            :root { color-scheme: dark; }
+            body { background: #0A0E14; color: #F8FAFC; }
+          }
+        `}</style>
+      </head>
+      <body>
+        <main style={{ maxWidth: 640, margin: '0 auto', padding: '96px 24px', textAlign: 'center' }}>
+          <h1 style={{ fontSize: 28, fontWeight: 700, margin: '0 0 16px' }}>应用暂时无法显示此页面</h1>
+          <p style={{ fontSize: 16, lineHeight: 1.7, margin: '0 0 8px' }}>
+            渲染过程中出现错误，我们已记录该问题。请重试，或返回首页继续浏览。
+          </p>
+          {error.digest ? (
+            <p style={{ fontSize: 13, margin: '0 0 24px' }}>错误编号：{error.digest}</p>
+          ) : (
+            <p style={{ fontSize: 13, margin: '0 0 24px' }}>请稍后重试</p>
+          )}
+          <div style={{ display: 'flex', gap: 12, justifyContent: 'center' }}>
+            <button
+              type="button"
+              onClick={() => retry()}
+              style={{
+                fontSize: 15,
+                fontWeight: 600,
+                padding: '10px 20px',
+                border: '1px solid currentColor',
+                background: 'transparent',
+                color: 'inherit',
+                cursor: 'pointer',
+              }}
+            >
+              重试
+            </button>
+            <a
+              href="/"
+              style={{
+                fontSize: 15,
+                fontWeight: 600,
+                padding: '10px 20px',
+                border: '1px solid currentColor',
+                background: 'transparent',
+                color: 'inherit',
+                textDecoration: 'none',
+              }}
+            >
+              返回首页
+            </a>
+          </div>
+        </main>
+      </body>
+    </html>
+  );
+}
diff --git a/src/app/globals.css b/src/app/globals.css
index 868e8e2..27690dd 100644
--- a/src/app/globals.css
+++ b/src/app/globals.css
@@ -25,6 +25,11 @@ body {
   --color-brand-light: #E04A68;
   --color-brand-soft: rgba(196, 30, 58, 0.12);
   --color-brand-bg: #FEF2F4;
+  /* Tailwind 无法对「任意值形式的裸 var()」套用 /NN 透明度修饰符（bg-[var(--color-brand-bg)] 再加 /50
+     编译后 0 条规则，静默失效），故底色通道也要提供 rgb 三元组，配合 tailwind.config.js 的
+     brand.bg = rgb(var(--color-brand-bg-rgb) / <alpha-value>) 让 bg-brand-bg/50 正确生成。
+     254 242 244 = #FEF2F4，alpha 默认 1 时与裸 var() 同色，无视觉漂移。 */
+  --color-brand-bg-rgb: 254 242 244;
   --color-brand-rgb: 196 30 58;
   /* 品牌「文字墨色」专用通道（text-brand-ink）。
      与 --color-brand-rgb 分离的原因：--color-brand-rgb 同时服务 bg-brand / border-brand，
@@ -33,6 +38,10 @@ body {
      深色下取 #F87171（248 113 113）：于 #0A0E14/#0F1419/#151B23 分别 6.99/6.69/6.26，全达 AA。 */
   --color-brand-ink: #C41E3A;
   --color-brand-ink-rgb: 196 30 58;
+  /* 品牌红文字通道的 hover 档：与 --color-brand-hover（底色通道）分离，
+     暗色下必须提亮，否则 #A01830 压在 #0A0E14 上仅 2.06:1（验收 A-12 残留项）。 */
+  --color-brand-ink-hover: #A01830;
+  --color-brand-ink-hover-rgb: 160 24 48;
   /* 详情页 Hero badge 的 accent 文字色（accentColor 由各页 hero-themes 传入，
      经 --badge-accent 自定义属性注入）。浅色 = 原色；深色 = 45% accent + 55% 白的提亮变体
      —— accentColor 多为深色系（#1e3a5f 等），直接用作深底文字仅 1.65:1 */
@@ -76,6 +85,10 @@ body {
   --color-bg-secondary-rgb: 248 250 252;
   --color-bg-tertiary: #F1F5F9;
   --color-bg-section: #F8FAFC;
+  /* 同 --color-brand-bg-rgb 的理由：bg-[var(--color-bg-section)] 再加 /60 这类写法编译后 0 条规则。
+     与 --color-bg-secondary-rgb 当前同值但语义不同（section ≠ secondary），故独立建三元组，
+     避免任一 token 调整时静默串色。248 250 252 = #F8FAFC。 */
+  --color-bg-section-rgb: 248 250 252;
   --color-bg-hover: #F1F5F9;
   --color-bg-elevated: #FFFFFF;
   --color-bg-primary-rgb: 255 255 255;
@@ -268,12 +281,14 @@ body {
   /* ease-out 别名：默认使用水墨曲线（Porsche 风格：快速开始，缓慢结束） */
   --ease-out: cubic-bezier(0.22, 1, 0.36, 1);
 
-  /* 动效延迟序列（错落动效用） */
-  --stagger-xs: 30ms;
-  --stagger-sm: 60ms;
-  --stagger-md: 100ms;
-  --stagger-lg: 150ms;
-  --stagger-xl: 200ms;
+  /* 动效延迟序列（错落动效用）—— 已删除：--stagger-xs…xl 此前零消费者。
+     全站 stagger 全部由 framer-motion 以「秒」为单位的数值驱动
+     （transition.delay / variants.staggerChildren），CSS 自定义属性无法被
+     transition.delay 读取（除非物质化 getComputedStyle），故令牌在此形同虚设。
+     唯一事实来源改为 JS：src/components/ui/scroll-reveal.tsx（StaggerReveal
+     默认 staggerDelay = 0.05）与 page-transition.tsx。
+     取值区间按 CONTEXT.md「动效设计四原则」4：子元素 stagger 30–60ms、
+     Section 间 stagger 100–150ms。 */
 
   /* 容器宽度 */
   --container-max: 1360px;
@@ -369,15 +384,6 @@ body {
   --accordion-trigger-height: 3rem;
   --accordion-trigger-padding-x: 1rem;
 
-  /* Skeleton 骨架屏 */
-  --skeleton-radius: var(--radius-sm);
-  --skeleton-bg: var(--color-bg-tertiary);
-
-  /* Stats Bar 数据条 */
-  --stats-bar-gap: var(--spacing-2xl);
-  --stats-number-size: var(--font-size-4xl);
-  --stats-label-size: var(--font-size-xs);
-
   /* === 12 列网格系统（Grid System）=== */
   --grid-columns: 12;
   --grid-gap-xs: 0.5rem;
@@ -419,6 +425,8 @@ html[data-theme='dark'] {
   --color-bg-secondary-rgb: 15 20 25;
   --color-bg-tertiary: #151B23;
   --color-bg-section: #0F1419;
+  /* 与 :root 的 --color-bg-section-rgb 成对覆写，否则深色下 bg-bg-section/NN 会退回浅色值 */
+  --color-bg-section-rgb: 15 20 25;
   --color-bg-hover: #151B23;
   --color-bg-elevated: #151B23;
 
@@ -470,7 +478,11 @@ html[data-theme='dark'] {
        此前只翻了 error-bg，导致深色下白字压浅粉底仅 1.04:1（首页「首批客户共创计划」卡）。 */
   --color-brand-ink: #F87171;
   --color-brand-ink-rgb: 248 113 113;
+  --color-brand-ink-hover: #FCA5A5;
+  --color-brand-ink-hover-rgb: 252 165 165;
   --color-brand-bg: #2A1418;
+  /* 42 20 24 = #2A1418；与上方 --color-brand-bg 同步翻转，否则 bg-brand-bg/NN 在深色下仍是浅粉 */
+  --color-brand-bg-rgb: 42 20 24;
 
   /* hero 徽章文字：accentColor 直用作深底文字不可读（如 #1e3a5f 于 #0B1119 仅 1.65:1），
      深色下按 accent 45% + 白 55% 提亮；--badge-accent 未注入时回退到反色墨字。 */
@@ -1312,16 +1324,13 @@ p, li, span {
 /* WCAG 2.5.5 (AAA): 44×44px 触控目标仅作用于移动端导航/页眉/页脚交互元素。
    原全局选择器会撑大正文行内链接，破坏排版节奏与组件自有的尺寸控制。 */
 @media (max-width: 768px) {
-  /* MobileTabBar 是 fixed bottom-0 高度 64px，需给 main 与 footer 都留出安全区
-     防止正文/页脚被遮挡（"联系我们"等页脚内链接被截问题）。
-     使用 calc + env(safe-area-inset-bottom) 兼容刘海屏/小白条。
-     全站单一 <main>（ClientLayout，2026-09-19 polish 三重 main 收敛后）。 */
+  /* MobileTabBar 是 fixed bottom-0 高度 64px（含 env 安全区），需给页面底部留出等高的避让。
+     全站单一 <main>（ClientLayout）且 <Footer> 就在 main 内，因此这条 padding 是唯一的避让点：
+     此前 main 与 footer 各加一次，safe-area 被算了两遍（验收 R-1，iPhone SE 上底部空 128px+2×inset）。
+     使用 calc + env(safe-area-inset-bottom) 兼容刘海屏/小白条。 */
   main {
     padding-bottom: calc(64px + env(safe-area-inset-bottom, 0px));
   }
-  footer {
-    padding-bottom: calc(64px + env(safe-area-inset-bottom, 0px));
-  }
   nav a,
   nav button,
   header a,
@@ -1456,78 +1465,3 @@ p, li, span {
 .glow-border:hover {
   animation-play-state: running;
 }
-
-/* === CMS RichTextEditor (TipTap) 样式 === */
-/* 仅用于 CMS Studio 暗色主题，选择器限定在 .rich-text-editor-content */
-.rich-text-editor-content {
-  min-height: 120px;
-  padding: 0.75rem;
-  color: white;
-  font-size: 0.875rem;
-  line-height: 1.6;
-  outline: none;
-}
-
-.rich-text-editor-content:empty::before {
-  content: attr(data-placeholder);
-  color: rgba(255, 255, 255, 0.3);
-  pointer-events: none;
-}
-
-.rich-text-editor-content h2 {
-  font-size: 1.125rem;
-  font-weight: 600;
-  margin: 0.75rem 0 0.5rem;
-  color: white;
-}
-
-.rich-text-editor-content h3 {
-  font-size: 1rem;
-  font-weight: 600;
-  margin: 0.5rem 0 0.375rem;
-  color: white;
-}
-
-.rich-text-editor-content p {
-  margin: 0.375rem 0;
-}
-
-.rich-text-editor-content ul,
-.rich-text-editor-content ol {
-  padding-left: 1.25rem;
-  margin: 0.5rem 0;
-}
-
-.rich-text-editor-content ul {
-  list-style: disc;
-}
-
-.rich-text-editor-content ol {
-  list-style: decimal;
-}
-
-.rich-text-editor-content li {
-  margin: 0.25rem 0;
-}
-
-.rich-text-editor-content blockquote {
-  border-left: 3px solid var(--color-brand);
-  padding-left: 0.75rem;
-  margin: 0.5rem 0;
-  color: rgba(255, 255, 255, 0.7);
-  font-style: italic;
-}
-
-.rich-text-editor-content a {
-  color: var(--color-brand);
-  text-decoration: underline;
-}
-
-.rich-text-editor-content strong {
-  font-weight: 600;
-  color: white;
-}
-
-.rich-text-editor-content em {
-  font-style: italic;
-}
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index abba085..80be67c 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -12,6 +12,7 @@ import { OrganizationSchema, WebsiteSchema, LocalBusinessSchema } from "@/compon
 import { MobileTabBar } from "@/components/layout/mobile-tab-bar";
 import { ErrorBoundary } from "@/components/ui/error-boundary";
 import { ScrollProgress } from "@/components/ui/scroll-progress";
+import { MotionProvider } from "@/components/ui/motion-provider";
 import { BackToTop } from "@/components/ui/back-to-top";
 import { ClientLayout } from "@/components/layout/client-layout";
 import { getPublishedItems } from "@/lib/cms/data-server";
@@ -188,8 +189,6 @@ export default async function RootLayout({
         <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
         <link rel="manifest" href="/site.webmanifest" />
         <meta name="theme-color" content="#C41E3A" />
-        <link rel="dns-prefetch" href="//formsubmit.co" />
-        <link rel="preconnect" href="//formsubmit.co" crossOrigin="anonymous" />
         <OrganizationSchema />
         <WebsiteSchema />
         <LocalBusinessSchema />
@@ -204,24 +203,26 @@ export default async function RootLayout({
         >
           跳转到主要内容
         </a>
-        <ScrollProgress />
-        <GoogleAnalyticsWrapper />
-        <GlobalErrorTracker />
-        <PerformanceTracker />
-        <OutboundLinkTracker />
-        <ScrollDepthTracker />
-        <ErrorBoundary>
-          <SiteConfigProvider config={siteConfig}>
-            <ClientLayout>
-              {children}
-            </ClientLayout>
-          </SiteConfigProvider>
-        </ErrorBoundary>
-        <Suspense fallback={null}>
-          <MobileTabBar />
-        </Suspense>
-        <CookieConsent />
-        <BackToTop />
+        <MotionProvider>
+          <ScrollProgress />
+          <GoogleAnalyticsWrapper />
+          <GlobalErrorTracker />
+          <PerformanceTracker />
+          <OutboundLinkTracker />
+          <ScrollDepthTracker />
+          <ErrorBoundary>
+            <SiteConfigProvider config={siteConfig}>
+              <ClientLayout>
+                {children}
+              </ClientLayout>
+            </SiteConfigProvider>
+          </ErrorBoundary>
+          <Suspense fallback={null}>
+            <MobileTabBar />
+          </Suspense>
+          <CookieConsent />
+          <BackToTop />
+        </MotionProvider>
       </body>
     </html>
   );
diff --git a/src/app/not-found-content.tsx b/src/app/not-found-content.tsx
index d48f3ce..10e50b4 100644
--- a/src/app/not-found-content.tsx
+++ b/src/app/not-found-content.tsx
@@ -11,7 +11,7 @@ export function NotFoundContent() {
       <div className="container-wide px-4 py-20">
         <div className="max-w-xl mx-auto text-center">
           <div className="mb-8">
-            <h1 className="text-8xl sm:text-[120px] font-bold text-[var(--color-brand)] leading-none mb-4 opacity-20">
+            <h1 className="text-8xl sm:text-[120px] font-bold text-brand-ink/80 leading-none mb-4">
               404
             </h1>
           </div>
@@ -44,7 +44,7 @@ export function NotFoundContent() {
                 className="flex flex-col items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-9 h-9 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mb-2 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <Search className="w-4 h-4 text-[var(--color-brand)]" />
+                  <Search className="w-4 h-4 text-brand-ink" />
                 </div>
                 <span className="font-medium text-sm text-[var(--color-text-primary)]">产品</span>
               </StaticLink>
@@ -54,7 +54,7 @@ export function NotFoundContent() {
                 className="flex flex-col items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-9 h-9 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mb-2 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <Search className="w-4 h-4 text-[var(--color-brand)]" />
+                  <Search className="w-4 h-4 text-brand-ink" />
                 </div>
                 <span className="font-medium text-sm text-[var(--color-text-primary)]">解决方案</span>
               </StaticLink>
@@ -64,7 +64,7 @@ export function NotFoundContent() {
                 className="flex flex-col items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-9 h-9 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mb-2 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <Search className="w-4 h-4 text-[var(--color-brand)]" />
+                  <Search className="w-4 h-4 text-brand-ink" />
                 </div>
                 <span className="font-medium text-sm text-[var(--color-text-primary)]">关于我们</span>
               </StaticLink>
@@ -74,7 +74,7 @@ export function NotFoundContent() {
                 className="flex flex-col items-center p-4 bg-[var(--color-bg-primary)] rounded-lg hover:shadow-md transition-shadow group"
               >
                 <div className="w-9 h-9 bg-[var(--color-brand-bg)] rounded-lg flex items-center justify-center mb-2 group-hover:bg-[var(--color-brand-soft)] transition-colors">
-                  <Search className="w-4 h-4 text-[var(--color-brand)]" />
+                  <Search className="w-4 h-4 text-brand-ink" />
                 </div>
                 <span className="font-medium text-sm text-[var(--color-text-primary)]">联系我们</span>
               </StaticLink>
diff --git a/src/app/privacy/page.test.tsx b/src/app/privacy/page.test.tsx
index 82ef186..4bc4ca7 100644
--- a/src/app/privacy/page.test.tsx
+++ b/src/app/privacy/page.test.tsx
@@ -74,7 +74,7 @@ describe('PrivacyPolicyPage', () => {
             heroTitle: 'CMS 隐私政策标题',
             heroDescription: 'CMS 隐私政策描述',
             lastUpdated: '2026-07-17',
-            content: '<div data-testid="cms-content"><h2>CMS 内容</h2></div>',
+            content: '<div><h2>CMS 内容</h2></div>',
           },
           version: 1,
           sortOrder: 0,
@@ -90,7 +90,8 @@ describe('PrivacyPolicyPage', () => {
 
       expect(screen.getByRole('heading', { level: 1 })).toHaveTextContent('CMS 隐私政策标题');
       expect(screen.getByText('CMS 隐私政策描述')).toBeInTheDocument();
-      expect(screen.getByTestId('cms-content')).toBeInTheDocument();
+      // 净化器按白名单丢弃 data-testid，故以内容而非测试钩子断言 CMS 通路生效
+      expect(screen.getByRole('heading', { level: 2 })).toHaveTextContent('CMS 内容');
     });
 
     it('should fall back to inline content when CMS is unavailable', async () => {
@@ -103,4 +104,33 @@ describe('PrivacyPolicyPage', () => {
       expect(screen.getByText('引言')).toBeInTheDocument();
     });
   });
+
+  describe('存储型 XSS 净化（验收 A-3）', () => {
+    function mockCmsContent(content: string) {
+      mockedGetPublishedItems.mockResolvedValue([
+        { data: { pageType: 'privacy', content } },
+      ] as unknown as Awaited<ReturnType<typeof getPublishedItems>>);
+    }
+
+    it('CMS 载荷中的脚本与事件属性不出现在 DOM', async () => {
+      mockCmsContent(
+        '<p>合法政策段落</p>' +
+          '<script>alert("xss")</script>' +
+          '<img src="x" onerror="alert(1)">' +
+          '<a href="javascript:alert(2)">点我</a>'
+      );
+      const { container } = render(await PrivacyPolicyPage());
+      const html = container.innerHTML;
+      expect(html).not.toContain('<script');
+      expect(html).not.toMatch(/onerror|javascript:/);
+      expect(html).toContain('合法政策段落');
+    });
+
+    it('净化后仍渲染管理员撰写的正常富文本', async () => {
+      mockCmsContent('<h2>我们收集的信息</h2><ul><li>邮箱</li></ul>');
+      const { container } = render(await PrivacyPolicyPage());
+      expect(container).toHaveTextContent('我们收集的信息');
+      expect(container.querySelector('li')?.textContent).toBe('邮箱');
+    });
+  });
 });
diff --git a/src/app/privacy/page.tsx b/src/app/privacy/page.tsx
index 09b1d89..03c2977 100644
--- a/src/app/privacy/page.tsx
+++ b/src/app/privacy/page.tsx
@@ -1,5 +1,6 @@
 import { Metadata } from 'next';
 import { getPublishedItems } from '@/lib/cms/data-server';
+import { sanitizeRichText } from '@/lib/sanitize';
 import { COMPANY_INFO } from '@/lib/constants';
 
 export const metadata: Metadata = {
@@ -248,7 +249,7 @@ export default async function PrivacyPolicyPage() {
 
   return (
     <div className="min-h-screen bg-[var(--color-bg-primary)]">
-      <div className="bg-gradient-to-br from-[var(--color-brand)] via-[var(--color-brand)]/80 to-[var(--color-brand-section)] py-20">
+      <div className="bg-gradient-to-br from-[var(--color-brand)] via-brand/80 to-[var(--color-brand-section)] py-20">
         <div className="container-wide">
           <h1 className="text-4xl md:text-5xl font-bold text-white mb-4">
             {heroTitle}
@@ -264,7 +265,7 @@ export default async function PrivacyPolicyPage() {
           {cmsContent ? (
             <div
               className="prose prose-lg max-w-none"
-              dangerouslySetInnerHTML={{ __html: cmsContent }}
+              dangerouslySetInnerHTML={{ __html: sanitizeRichText(cmsContent) }}
             />
           ) : (
             <PrivacyContent />
diff --git a/src/app/terms/page.test.tsx b/src/app/terms/page.test.tsx
index 6bbd44a..5fb0925 100644
--- a/src/app/terms/page.test.tsx
+++ b/src/app/terms/page.test.tsx
@@ -74,7 +74,7 @@ describe('TermsOfServicePage', () => {
             heroTitle: 'CMS 服务条款标题',
             heroDescription: 'CMS 服务条款描述',
             lastUpdated: '2026-07-17',
-            content: '<div data-testid="cms-content"><h2>CMS 条款内容</h2></div>',
+            content: '<div><h2>CMS 条款内容</h2></div>',
           },
           version: 1,
           sortOrder: 0,
@@ -90,7 +90,8 @@ describe('TermsOfServicePage', () => {
 
       expect(screen.getByRole('heading', { level: 1 })).toHaveTextContent('CMS 服务条款标题');
       expect(screen.getByText('CMS 服务条款描述')).toBeInTheDocument();
-      expect(screen.getByTestId('cms-content')).toBeInTheDocument();
+      // 净化器按白名单丢弃 data-testid，故以内容而非测试钩子断言 CMS 通路生效
+      expect(screen.getByRole('heading', { level: 2 })).toHaveTextContent('CMS 条款内容');
     });
 
     it('should fall back to inline content when CMS is unavailable', async () => {
@@ -103,4 +104,37 @@ describe('TermsOfServicePage', () => {
       expect(screen.getByText('引言')).toBeInTheDocument();
     });
   });
+
+  describe('存储型 XSS 净化（验收 A-3）', () => {
+    function mockCmsContent(content: string) {
+      mockedGetPublishedItems.mockResolvedValue([
+        {
+          data: { pageType: 'terms', content },
+        },
+      ] as unknown as Awaited<ReturnType<typeof getPublishedItems>>);
+    }
+
+    it('CMS 载荷中的脚本与事件属性不出现在 DOM', async () => {
+      mockCmsContent(
+        '<p>合法条款段落</p>' +
+          '<script>alert("xss")</script>' +
+          '<img src="x" onerror="alert("xss-img")">' +
+          '<a href="javascript:alert("xss-href")">点我</a>' +
+          '<iframe src="https://evil.example.com"></iframe>'
+      );
+      const { container } = render(await TermsOfServicePage());
+      const html = container.innerHTML;
+      expect(html).not.toContain('<script');
+      expect(html).not.toMatch(/onerror|javascript:/);
+      expect(html).not.toContain('<iframe');
+      expect(html).toContain('合法条款段落');
+    });
+
+    it('净化后仍渲染管理员撰写的正常富文本', async () => {
+      mockCmsContent('<h2>第三条 服务内容</h2><p>我们提供 <strong>SaaS</strong> 服务。</p>');
+      const { container } = render(await TermsOfServicePage());
+      expect(container).toHaveTextContent('第三条 服务内容');
+      expect(container.querySelector('strong')?.textContent).toBe('SaaS');
+    });
+  });
 });
diff --git a/src/app/terms/page.tsx b/src/app/terms/page.tsx
index c6298e6..7894fbd 100644
--- a/src/app/terms/page.tsx
+++ b/src/app/terms/page.tsx
@@ -1,5 +1,6 @@
 import { Metadata } from 'next';
 import { getPublishedItems } from '@/lib/cms/data-server';
+import { sanitizeRichText } from '@/lib/sanitize';
 import { COMPANY_INFO } from '@/lib/constants';
 
 export const metadata: Metadata = {
@@ -193,7 +194,7 @@ export default async function TermsOfServicePage() {
 
   return (
     <div className="min-h-screen bg-[var(--color-bg-primary)]">
-      <div className="bg-gradient-to-br from-[var(--color-brand)] via-[var(--color-brand)]/80 to-[var(--color-brand-section)] py-20">
+      <div className="bg-gradient-to-br from-[var(--color-brand)] via-brand/80 to-[var(--color-brand-section)] py-20">
         <div className="container-wide">
           <h1 className="text-4xl md:text-5xl font-bold text-white mb-4">
             {heroTitle}
@@ -209,7 +210,7 @@ export default async function TermsOfServicePage() {
           {cmsContent ? (
             <div
               className="prose prose-lg max-w-none"
-              dangerouslySetInnerHTML={{ __html: cmsContent }}
+              dangerouslySetInnerHTML={{ __html: sanitizeRichText(cmsContent) }}
             />
           ) : (
             <TermsContent />
diff --git a/src/components/admin/admin-layout.tsx b/src/components/admin/admin-layout.tsx
index e78267f..59470da 100644
--- a/src/components/admin/admin-layout.tsx
+++ b/src/components/admin/admin-layout.tsx
@@ -26,6 +26,18 @@ import {
 } from 'lucide-react';
 import { ThemeToggle } from '@/components/theme/theme-toggle';
 
+// 令牌的 role claim 有两个来源：login 签发 User.role 标量（取值见 prisma/seed.ts:199,313,324 与
+// schema 默认值 'admin'），refresh 则按 UserRole.roleCode 重签（B-7 修复，refresh/route.ts:31）。
+// 侧栏必须同时认这两套取值，否则刷新后的 super_admin 会掉进 else 分支显示成「编辑」。
+const ROLE_LABELS: Record<string, string> = {
+  admin: '管理员',
+  super_admin: '超级管理员',
+  content_admin: '内容管理员',
+  content_editor: '内容编辑',
+  reviewer: '审核员',
+  readonly: '只读用户',
+};
+
 const menuItems = [
   {
     label: '内容管理',
@@ -238,7 +250,7 @@ export function AdminLayout({ children }: { children: React.ReactNode }) {
               <p className="text-sm font-medium text-text-primary truncate">
                 {user?.nickname || user?.username}
               </p>
-              <p className="text-xs text-text-muted">{user?.role === 'admin' ? '管理员' : '编辑'}</p>
+              <p className="text-xs text-text-muted">{ROLE_LABELS[user?.role ?? ''] ?? '编辑'}</p>
             </div>
             <button
               onClick={handleLogout}
diff --git a/src/components/admin/auth-context.test.tsx b/src/components/admin/auth-context.test.tsx
new file mode 100644
index 0000000..23331f1
--- /dev/null
+++ b/src/components/admin/auth-context.test.tsx
@@ -0,0 +1,61 @@
+import { renderHook, act, waitFor } from '@testing-library/react';
+import type { ReactNode } from 'react';
+import { AuthProvider, useAuth } from '@/components/admin/auth-context';
+
+const push = jest.fn();
+jest.mock('next/navigation', () => ({ useRouter: () => ({ push }) }));
+
+describe('AuthContext.logout', () => {
+  let fetchMock: jest.Mock;
+
+  const wrapper = ({ children }: { children: ReactNode }) => (
+    <AuthProvider>{children}</AuthProvider>
+  );
+
+  beforeEach(() => {
+    push.mockClear();
+    fetchMock = jest.fn().mockResolvedValue({ ok: true, json: async () => ({}) });
+    global.fetch = fetchMock;
+    localStorage.setItem('novalon_admin_token', 'tok');
+    localStorage.setItem(
+      'novalon_admin_user',
+      JSON.stringify({ id: '1', username: 'a', nickname: 'A', role: 'x', avatar: '' }),
+    );
+  });
+
+  afterEach(() => {
+    localStorage.clear();
+  });
+
+  it('清除服务端 httpOnly cookie（调用 /api/auth/logout）并本地状态与跳转', async () => {
+    const { result } = renderHook(() => useAuth(), { wrapper });
+    await waitFor(() => expect(result.current.loading).toBe(false));
+
+    act(() => {
+      result.current.logout();
+    });
+
+    // 关键判据：若不调用 logout 端点，clearTokenCookie 永不触发，
+    // authenticateRequest 会凭 cookie 在登出后继续放行全站受守卫 API 至多 24h。
+    expect(fetchMock).toHaveBeenCalledWith(
+      '/api/auth/logout',
+      expect.objectContaining({ method: 'POST' }),
+    );
+    expect(localStorage.getItem('novalon_admin_token')).toBeNull();
+    expect(localStorage.getItem('novalon_admin_user')).toBeNull();
+    expect(push).toHaveBeenCalledWith('/admin/login');
+  });
+
+  it('即使网络失败也清理本地状态并跳转', async () => {
+    fetchMock.mockRejectedValueOnce(new Error('network down'));
+    const { result } = renderHook(() => useAuth(), { wrapper });
+    await waitFor(() => expect(result.current.loading).toBe(false));
+
+    await act(async () => {
+      result.current.logout();
+    });
+
+    expect(localStorage.getItem('novalon_admin_token')).toBeNull();
+    expect(push).toHaveBeenCalledWith('/admin/login');
+  });
+});
diff --git a/src/components/admin/auth-context.tsx b/src/components/admin/auth-context.tsx
index f3d2472..d387a34 100644
--- a/src/components/admin/auth-context.tsx
+++ b/src/components/admin/auth-context.tsx
@@ -72,6 +72,15 @@ export function AuthProvider({ children }: { children: ReactNode }) {
   }, []);
 
   const logout = useCallback(() => {
+    // 必须请求 /api/auth/logout 让服务端 clearTokenCookie 下发 Max-Age=0 的 Set-Cookie。
+    // 登录时 httpOnly 的 novalon_token(24h)/novalon_refresh(7d) 由 login 路由写入，
+    // 而 authenticateRequest 会回退读取 cookie —— 仅清 localStorage 无法真正登出，
+    // 受守卫 API 会在登出后仍凭 cookie 放行至多 24h。
+    try {
+      fetch('/api/auth/logout', { method: 'POST' }).catch(() => {});
+    } catch {
+      // 网络不可用也要继续清理本地并跳转
+    }
     setToken(null);
     setUser(null);
     localStorage.removeItem('novalon_admin_token');
diff --git a/src/components/analytics/CookieConsent.tsx b/src/components/analytics/CookieConsent.tsx
index 9265d29..dfe7dbc 100644
--- a/src/components/analytics/CookieConsent.tsx
+++ b/src/components/analytics/CookieConsent.tsx
@@ -1,6 +1,6 @@
 'use client';
 
-import { useState, useEffect, useCallback, useRef } from 'react';
+import { useState, useEffect, useCallback } from 'react';
 import {
   updateConsentDetailed,
   trackButtonClick,
@@ -36,12 +36,12 @@ export function CookieConsent() {
   const [showSettings, setShowSettings] = useState(false);
   const [isAnimating, setIsAnimating] = useState(false);
   const [preferences, setPreferences] = useState<CookiePreferences>(getDefaultPreferences());
-  const consentCheckedRef = useRef(false);
 
+  // 刻意不加「只跑一次」的 ref 守卫：dev 下 React StrictMode 会 effect → cleanup → effect 连跑两次，
+  // 第一次的 cleanup 已 clearTimeout；若第二次被守卫拦掉，就没有人再挂 2s 定时器，
+  // 同意条在 E2E 默认的 dev 目标下永远不渲染 —— 这是 A-12 逃过全部自动化门禁的根因。
+  // 各分支本身可重入：迁移过的第二次走 stored 分支，只重复一次幂等的 updateConsentDetailed。
   useEffect(() => {
-    if (consentCheckedRef.current) {return;}
-    consentCheckedRef.current = true;
-
     if (isAdminRoute()) {
       hasConsentBeenHandled = true;
       return;
@@ -139,6 +139,7 @@ export function CookieConsent() {
           exit={{ y: 100, opacity: 0 }}
           transition={{ type: 'spring', damping: 25, stiffness: 300 }}
           className="fixed bottom-16 md:bottom-0 left-0 right-0 z-[9998] bg-[var(--color-bg-primary)] border-t border-[var(--color-border-secondary)] shadow-lg"
+          data-testid="cookie-consent-banner"
         >
           <div className="max-w-7xl mx-auto px-4 py-4 sm:px-6 lg:px-8">
             {!showSettings ? (
@@ -149,7 +150,7 @@ export function CookieConsent() {
                     继续使用即表示您同意我们的{' '}
                     <a
                       href="/privacy"
-                      className="text-[var(--color-brand)] hover:text-[var(--color-brand-hover)] underline font-medium"
+                      className="text-brand-ink hover:text-brand-ink-hover underline font-medium"
                     >
                       隐私政策
                     </a>
@@ -201,7 +202,7 @@ export function CookieConsent() {
                       type="checkbox"
                       checked
                       disabled
-                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-[var(--color-brand)] focus:ring-[var(--color-brand)] cursor-not-allowed"
+                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-brand-ink focus:ring-[var(--color-brand)] cursor-not-allowed"
                       aria-label="必要 Cookie"
                     />
                     <div className="flex-1">
@@ -220,7 +221,7 @@ export function CookieConsent() {
                       type="checkbox"
                       checked={preferences.analytics}
                       onChange={() => handleTogglePreference('analytics')}
-                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-[var(--color-brand)] focus:ring-[var(--color-brand)] cursor-pointer"
+                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-brand-ink focus:ring-[var(--color-brand)] cursor-pointer"
                       aria-label="分析 Cookie"
                     />
                     <div className="flex-1">
@@ -236,7 +237,7 @@ export function CookieConsent() {
                       type="checkbox"
                       checked={preferences.marketing}
                       onChange={() => handleTogglePreference('marketing')}
-                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-[var(--color-brand)] focus:ring-[var(--color-brand)] cursor-pointer"
+                      className="mt-1 h-4 w-4 rounded border-[var(--color-border-secondary)] text-brand-ink focus:ring-[var(--color-brand)] cursor-pointer"
                       aria-label="营销 Cookie"
                     />
                     <div className="flex-1">
diff --git a/src/components/analytics/GoogleAnalytics.test.tsx b/src/components/analytics/GoogleAnalytics.test.tsx
index 6d7b19e..9a505b5 100644
--- a/src/components/analytics/GoogleAnalytics.test.tsx
+++ b/src/components/analytics/GoogleAnalytics.test.tsx
@@ -1,6 +1,6 @@
 // @ts-nocheck
 import { describe, it, expect, jest, beforeEach } from '@jest/globals';
-import { render, act } from '@testing-library/react';
+import { render, act, waitFor } from '@testing-library/react';
 import '@testing-library/jest-dom';
 
 // Mock useSyncExternalStore to always return true (mounted in browser environment)
@@ -53,6 +53,7 @@ describe('GoogleAnalytics', () => {
     delete (window as any).gtag;
     mockPathname.mockReturnValue('/');
     mockSearchParams.mockReturnValue(new URLSearchParams());
+    document.title = '';
     process.env.NEXT_PUBLIC_GA_MEASUREMENT_ID = 'G-TEST123';
   });
 
@@ -111,7 +112,7 @@ describe('GoogleAnalytics', () => {
       expect(gtagMock).not.toHaveBeenCalled();
     });
 
-    it('should call config only when navigating to a different URL', () => {
+    it('should call config only when navigating to a different URL', async () => {
       setupGtag();
 
       const { GoogleAnalytics } = require('./GoogleAnalytics');
@@ -123,7 +124,7 @@ describe('GoogleAnalytics', () => {
         rerender(<GoogleAnalytics />);
       });
 
-      expect(gtagMock).toHaveBeenCalledTimes(1);
+      await waitFor(() => expect(gtagMock).toHaveBeenCalledTimes(1));
       expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', {
         page_path: '/contact',
         page_title: document.title,
@@ -131,7 +132,7 @@ describe('GoogleAnalytics', () => {
       });
     });
 
-    it('should include searchParams in navigation page_path', () => {
+    it('should include searchParams in navigation page_path', async () => {
       setupGtag();
 
       const { GoogleAnalytics } = require('./GoogleAnalytics');
@@ -143,12 +144,14 @@ describe('GoogleAnalytics', () => {
         rerender(<GoogleAnalytics />);
       });
 
-      expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', expect.objectContaining({
-        page_path: '/news?page=2',
-      }));
+      await waitFor(() =>
+        expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', expect.objectContaining({
+          page_path: '/news?page=2',
+        }))
+      );
     });
 
-    it('should skip duplicate config when URL is unchanged across re-renders', () => {
+    it('should skip duplicate config when URL is unchanged across re-renders', async () => {
       setupGtag();
 
       const { GoogleAnalytics } = require('./GoogleAnalytics');
@@ -158,13 +161,93 @@ describe('GoogleAnalytics', () => {
       act(() => {
         rerender(<GoogleAnalytics />);
       });
-      expect(gtagMock).toHaveBeenCalledTimes(1);
+      await waitFor(() => expect(gtagMock).toHaveBeenCalledTimes(1));
 
       act(() => {
         rerender(<GoogleAnalytics />);
       });
       expect(gtagMock).toHaveBeenCalledTimes(1);
     });
+
+    // 验收 A-17（探针实证）：Next.js 在路由 commit 之后才写入 <title>，
+    // 同步读取 document.title 会把 SPA pageview 的标题发成空串。
+    it('should read document.title after metadata paints, not during the navigation commit', async () => {
+      setupGtag();
+      document.title = '首页 - 睿新致远';
+
+      const { GoogleAnalytics } = require('./GoogleAnalytics');
+      const { rerender } = render(<GoogleAnalytics />);
+
+      mockPathname.mockReturnValue('/privacy');
+      act(() => {
+        rerender(<GoogleAnalytics />);
+      });
+      expect(gtagMock).not.toHaveBeenCalled();
+
+      act(() => {
+        document.title = '隐私政策 - 睿新致远';
+      });
+
+      await waitFor(() =>
+        expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', expect.objectContaining({
+          page_path: '/privacy',
+          page_title: '隐私政策 - 睿新致远',
+        }))
+      );
+    });
+
+    // 验收 A-17 复测：真实浏览器里 metadata 不在同一帧落地（chromium-mobile 第 2 帧、
+    // 桌面第 3–5 帧），只等一帧会把 page_title 发成上一页标题 —— GA4 页面维度被错归属。
+    it('should keep waiting while the title still belongs to the previous page', async () => {
+      setupGtag();
+      document.title = '首页 - 睿新致远';
+
+      const { GoogleAnalytics } = require('./GoogleAnalytics');
+      const { rerender } = render(<GoogleAnalytics />);
+
+      mockPathname.mockReturnValue('/privacy');
+      act(() => {
+        rerender(<GoogleAnalytics />);
+      });
+
+      const nextFrame = () => new Promise<void>((resolve) => requestAnimationFrame(() => resolve()));
+      for (let frame = 0; frame < 4; frame += 1) {
+         
+        await nextFrame();
+      }
+      expect(gtagMock).not.toHaveBeenCalled();
+
+      act(() => {
+        document.title = '隐私政策 - 睿新致远';
+      });
+
+      await waitFor(() =>
+        expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', expect.objectContaining({
+          page_title: '隐私政策 - 睿新致远',
+        }))
+      );
+    });
+
+    // 帧预算只用来「等」，不能吞掉 pageview：两条路由同名时必须在预算耗尽后兜底发出。
+    it('should still send the pageview when the title never changes', async () => {
+      setupGtag();
+      document.title = '固定标题';
+
+      const { GoogleAnalytics } = require('./GoogleAnalytics');
+      const { rerender } = render(<GoogleAnalytics />);
+
+      mockPathname.mockReturnValue('/terms');
+      act(() => {
+        rerender(<GoogleAnalytics />);
+      });
+
+      await waitFor(() =>
+        expect(gtagMock).toHaveBeenCalledWith('config', 'G-TEST123', expect.objectContaining({
+          page_path: '/terms',
+          page_title: '固定标题',
+        }))
+      );
+    });
   });
 
   describe('rendering guards', () => {
diff --git a/src/components/analytics/GoogleAnalytics.tsx b/src/components/analytics/GoogleAnalytics.tsx
index 2837f56..026eef5 100644
--- a/src/components/analytics/GoogleAnalytics.tsx
+++ b/src/components/analytics/GoogleAnalytics.tsx
@@ -6,6 +6,14 @@ import { useEffect, useRef, Suspense, useSyncExternalStore } from 'react';
 
 const GA_MEASUREMENT_ID = process.env.NEXT_PUBLIC_GA_MEASUREMENT_ID || '';
 
+/**
+ * SPA pageview 等待 <title> 落地的帧预算。
+ * 生产实测（e2e TC-GA4-004）：Next.js 的 metadata 提交晚于路由 commit，
+ * chromium-mobile 在第 2 帧、桌面 chromium 在第 3–5 帧才写入新标题，
+ * 单帧读取会把 page_title 发成上一页标题或空串（污染 GA4 报表的页面维度）。
+ */
+const MAX_TITLE_SETTLE_FRAMES = 10;
+
 function useIsMounted() {
   return useSyncExternalStore(
     (callback) => {
@@ -24,6 +32,8 @@ function GoogleAnalyticsContent() {
   // null = 尚未导航过：首屏 pageview 由 snippet 内唯一一次 config 发送（GA 用真实 URL）。
   // effect 只在「路由变化且 URL 与上次不同」时再发 config，消除复评指出的双 config。
   const lastNavigationUrlRef = useRef<string | null>(null);
+  /** 仍在等标题、尚未发出的上一次 pageview；新导航开始前先补发，避免丢计数 */
+  const pendingPageViewRef = useRef<(() => void) | null>(null);
 
   useEffect(() => {
     if (!GA_MEASUREMENT_ID || !mounted || typeof window === 'undefined') {return;}
@@ -38,11 +48,33 @@ function GoogleAnalyticsContent() {
     lastNavigationUrlRef.current = url;
 
     if (window.gtag) {
-      window.gtag('config', GA_MEASUREMENT_ID, {
-        page_path: url,
-        page_title: document.title,
-        page_location: window.location.origin + url,
-      });
+      pendingPageViewRef.current?.();
+
+      const titleBeforeNavigation = document.title;
+      let settled = false;
+      const send = () => {
+        if (settled) {return;}
+        settled = true;
+        pendingPageViewRef.current = null;
+        window.gtag?.('config', GA_MEASUREMENT_ID, {
+          page_path: url,
+          page_title: document.title,
+          page_location: window.location.origin + url,
+        });
+      };
+      pendingPageViewRef.current = send;
+
+      let framesWaited = 0;
+      const waitForTitle = () => {
+        if (settled) {return;}
+        if (document.title !== titleBeforeNavigation || framesWaited >= MAX_TITLE_SETTLE_FRAMES) {
+          send();
+          return;
+        }
+        framesWaited += 1;
+        requestAnimationFrame(waitForTitle);
+      };
+      requestAnimationFrame(waitForTitle);
     }
   }, [pathname, searchParams, mounted]);
 
diff --git a/src/components/analytics/PerformanceTracker.test.tsx b/src/components/analytics/PerformanceTracker.test.tsx
index 655504f..fc55054 100644
--- a/src/components/analytics/PerformanceTracker.test.tsx
+++ b/src/components/analytics/PerformanceTracker.test.tsx
@@ -167,6 +167,22 @@ describe('PerformanceTracker', () => {
     expect(mockTrackPerformance).toHaveBeenCalledWith('CLS', 150);
   });
 
+  // S-24：CLS 是会话累计指标。旧实现把累加器放在 observer 回调内，
+  // 分批到达的 layout-shift 各自只报本批增量，GA 收到的永不是总 CLS。
+  it('reports cumulative CLS across observer batches, not per-batch deltas', () => {
+    const { PerformanceTracker } = require('./PerformanceTracker');
+    render(<PerformanceTracker />);
+
+    simulateCLSEntry(0.1);
+    simulateCLSEntry(0.05);
+
+    const clsCalls = mockTrackPerformance.mock.calls.filter((c: unknown[]) => c[0] === 'CLS');
+    expect(clsCalls).toHaveLength(2);
+    expect(clsCalls[0][1]).toBeCloseTo(100, 5);
+    // 第二批上报的是累计值（≈150），而不是本批增量 50
+    expect(clsCalls[1][1]).toBeCloseTo(150, 5);
+  });
+
   it('should not track CLS when entry has recent input', () => {
     const { PerformanceTracker } = require('./PerformanceTracker');
     render(<PerformanceTracker />);
diff --git a/src/components/analytics/PerformanceTracker.tsx b/src/components/analytics/PerformanceTracker.tsx
index 4f56f41..ecc1919 100644
--- a/src/components/analytics/PerformanceTracker.tsx
+++ b/src/components/analytics/PerformanceTracker.tsx
@@ -26,8 +26,10 @@ export function PerformanceTracker() {
           }
         });
 
+        // CLS 是页面会话的累计值：累加器必须在回调外，分批上报每次的总值。
+        // 旧实现每批从 0 起算，只报本批增量（S-24）。
+        let clsValue = 0;
         const clsObserver = new PerformanceObserver((list) => {
-          let clsValue = 0;
           for (const entry of list.getEntries()) {
             if ('value' in entry && !(entry as LayoutShift).hadRecentInput) {
               clsValue += (entry as LayoutShift).value;
diff --git a/src/components/cms/RichTextEditor.test.tsx b/src/components/cms/RichTextEditor.test.tsx
deleted file mode 100644
index 3ab206f..0000000
--- a/src/components/cms/RichTextEditor.test.tsx
+++ /dev/null
@@ -1,314 +0,0 @@
-import { describe, it, expect, jest, beforeEach } from '@jest/globals';
-import { render, screen, fireEvent } from '@testing-library/react';
-import { RichTextEditor } from './RichTextEditor';
-
-// ─── Mocks ───────────────────────────────────────────────────────────────
-
-// Mock @tiptap/react
-const mockEditor = {
-  getHTML: jest.fn(() => '<p>test content</p>'),
-  commands: {
-    setContent: jest.fn(),
-  },
-  chain: jest.fn(() => ({
-    focus: jest.fn(() => ({
-      toggleBold: jest.fn(() => ({ run: jest.fn() })),
-      toggleItalic: jest.fn(() => ({ run: jest.fn() })),
-      toggleHeading: jest.fn(() => ({ run: jest.fn() })),
-      toggleBulletList: jest.fn(() => ({ run: jest.fn() })),
-      toggleOrderedList: jest.fn(() => ({ run: jest.fn() })),
-      toggleBlockquote: jest.fn(() => ({ run: jest.fn() })),
-      undo: jest.fn(() => ({ run: jest.fn() })),
-      redo: jest.fn(() => ({ run: jest.fn() })),
-      extendMarkRange: jest.fn(() => ({
-        unsetLink: jest.fn(() => ({ run: jest.fn() })),
-        setLink: jest.fn(() => ({ run: jest.fn() })),
-      })),
-      setLink: jest.fn(() => ({ run: jest.fn() })),
-      run: jest.fn(),
-    })),
-  })),
-  isActive: jest.fn(() => false),
-  can: jest.fn(() => ({
-    undo: jest.fn(() => true),
-    redo: jest.fn(() => true),
-  })),
-  getAttributes: jest.fn(() => ({ href: '' })),
-};
-
-jest.mock('@tiptap/react', () => ({
-  useEditor: jest.fn(() => mockEditor),
-  EditorContent: (_props: {
-    editor: typeof mockEditor;
-  }) => <div data-testid="editor-content" />,
-}));
-
-// Mock lucide-react icons
-jest.mock('lucide-react', () => {
-  const mockIcon = (name: string) => {
-    const Icon = (_props: Record<string, unknown>) => (
-      <svg data-testid={`icon-${name.toLowerCase()}`} />
-    );
-    Icon.displayName = name;
-    return Icon;
-  };
-  return {
-    Bold: mockIcon('bold'),
-    Italic: mockIcon('italic'),
-    Heading2: mockIcon('heading2'),
-    Heading3: mockIcon('heading3'),
-    List: mockIcon('list'),
-    ListOrdered: mockIcon('list-ordered'),
-    Link: mockIcon('link'),
-    Quote: mockIcon('quote'),
-    Undo2: mockIcon('undo2'),
-    Redo2: mockIcon('redo2'),
-  };
-});
-
-// Mock window.prompt
-const mockPrompt = jest.spyOn(window, 'prompt') as jest.Mock;
-
-beforeEach(() => {
-  jest.clearAllMocks();
-  mockPrompt.mockReturnValue(null);
-});
-
-// ─── Tests ───────────────────────────────────────────────────────────────
-
-describe('RichTextEditor', () => {
-  describe('Initial State', () => {
-    it('should render editor content when editor is ready', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      expect(screen.getByTestId('editor-content')).toBeInTheDocument();
-    });
-
-    it('should render loading state when editor is null', () => {
-      // Temporarily make useEditor return null
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      useEditorMock.mockReturnValueOnce(null);
-
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      expect(screen.getByText('加载编辑器...')).toBeInTheDocument();
-    });
-
-    it('should render toolbar with buttons', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      expect(screen.getByTitle('加粗')).toBeInTheDocument();
-      expect(screen.getByTitle('斜体')).toBeInTheDocument();
-      expect(screen.getByTitle('标题 2')).toBeInTheDocument();
-      expect(screen.getByTitle('标题 3')).toBeInTheDocument();
-      expect(screen.getByTitle('无序列表')).toBeInTheDocument();
-      expect(screen.getByTitle('有序列表')).toBeInTheDocument();
-      expect(screen.getByTitle('引用')).toBeInTheDocument();
-      expect(screen.getByTitle('链接')).toBeInTheDocument();
-      expect(screen.getByTitle('撤销')).toBeInTheDocument();
-      expect(screen.getByTitle('重做')).toBeInTheDocument();
-    });
-  });
-
-  describe('Editor Options', () => {
-    it('should call useEditor with correct options', () => {
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      render(<RichTextEditor value="initial content" onChange={jest.fn()} placeholder="custom placeholder" />);
-
-      expect(useEditorMock).toHaveBeenCalledWith(
-        expect.objectContaining({
-          content: 'initial content',
-          extensions: expect.any(Array),
-          immediatelyRender: false,
-        })
-      );
-    });
-
-    it('should use default placeholder when not provided', () => {
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-
-      expect(useEditorMock).toHaveBeenCalledWith(
-        expect.objectContaining({
-          extensions: expect.any(Array),
-        })
-      );
-    });
-  });
-
-  describe('Toolbar Interactions', () => {
-    it('should toggle bold on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      const boldButton = screen.getByTitle('加粗');
-      fireEvent.click(boldButton);
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle italic on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('斜体'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle heading 2 on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('标题 2'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle heading 3 on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('标题 3'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle bullet list on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('无序列表'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle ordered list on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('有序列表'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should toggle blockquote on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('引用'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should undo on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('撤销'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-
-    it('should redo on click', () => {
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('重做'));
-      expect(mockEditor.chain).toHaveBeenCalled();
-    });
-  });
-
-  describe('Link Button', () => {
-    it('should prompt for URL when link button is clicked', () => {
-      mockPrompt.mockReturnValue('https://example.com');
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('链接'));
-      expect(mockPrompt).toHaveBeenCalledWith('链接 URL', '');
-    });
-
-    it('should unset link when empty URL is provided', () => {
-      mockPrompt.mockReturnValue('');
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('链接'));
-      expect(mockPrompt).toHaveBeenCalledWith('链接 URL', '');
-    });
-
-    it('should not modify link when prompt is cancelled', () => {
-      mockPrompt.mockReturnValue(null);
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('链接'));
-      expect(mockPrompt).toHaveBeenCalledWith('链接 URL', '');
-    });
-
-    it('should show existing URL when editing a link', () => {
-      mockEditor.getAttributes.mockReturnValue({ href: 'https://existing.com' });
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      fireEvent.click(screen.getByTitle('链接'));
-      expect(mockPrompt).toHaveBeenCalledWith('链接 URL', 'https://existing.com');
-    });
-  });
-
-  describe('Content Synchronization', () => {
-    it('should sync content when value changes externally', () => {
-      const { rerender } = render(
-        <RichTextEditor value="initial" onChange={jest.fn()} />
-      );
-      rerender(<RichTextEditor value="updated" onChange={jest.fn()} />);
-      expect(mockEditor.commands.setContent).toHaveBeenCalledWith('updated');
-    });
-
-    it('should not sync content when HTML matches the value', () => {
-      // The component compares value === editor.getHTML()
-      // So we need to pass the same HTML string as the mock returns
-      mockEditor.getHTML.mockReturnValue('<p>same content</p>');
-      const { rerender } = render(
-        <RichTextEditor value="<p>same content</p>" onChange={jest.fn()} />
-      );
-      rerender(<RichTextEditor value="<p>same content</p>" onChange={jest.fn()} />);
-      // setContent should not be called when HTML matches the value
-      expect(mockEditor.commands.setContent).not.toHaveBeenCalled();
-    });
-
-    it('should call onUpdate when editor content changes', () => {
-      // Simulate the onUpdate callback
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      const onChange = jest.fn();
-
-      render(<RichTextEditor value="" onChange={onChange} />);
-
-      // Get the onUpdate callback from useEditor options
-      const editorOptions = useEditorMock.mock.calls[0]?.[0] as { onUpdate: (args: { editor: typeof mockEditor }) => void };
-      const onUpdate = editorOptions.onUpdate;
-
-      // Call onUpdate with mock editor
-      onUpdate({ editor: mockEditor });
-
-      expect(mockEditor.getHTML).toHaveBeenCalled();
-    });
-  });
-
-  describe('Editor State Management', () => {
-    it('should apply active state to toolbar buttons', () => {
-      mockEditor.isActive.mockReturnValue(true);
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      // When active, the button should have brand styling
-      const boldButton = screen.getByTitle('加粗');
-      expect(boldButton).toBeInTheDocument();
-    });
-
-    it('should disable undo button when cannot undo', () => {
-      mockEditor.can.mockReturnValue({
-        undo: jest.fn(() => false),
-        redo: jest.fn(() => true),
-      });
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      const undoButton = screen.getByTitle('撤销');
-      expect(undoButton).toBeDisabled();
-    });
-
-    it('should disable redo button when cannot redo', () => {
-      mockEditor.can.mockReturnValue({
-        undo: jest.fn(() => true),
-        redo: jest.fn(() => false),
-      });
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      const redoButton = screen.getByTitle('重做');
-      expect(redoButton).toBeDisabled();
-    });
-  });
-
-  describe('Edge Cases', () => {
-    it('should handle null editor in useEffect', () => {
-      // Force editor to be null after first render
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      useEditorMock.mockReturnValueOnce(null);
-
-      const { rerender } = render(
-        <RichTextEditor value="test" onChange={jest.fn()} />
-      );
-      // Rerender with null editor - should not crash
-      expect(() => {
-        rerender(<RichTextEditor value="updated" onChange={jest.fn()} />);
-      }).not.toThrow();
-    });
-
-    it('should handle empty value', () => {
-      const useEditorMock = (jest.requireMock('@tiptap/react') as { useEditor: jest.Mock }).useEditor;
-      render(<RichTextEditor value="" onChange={jest.fn()} />);
-      const editorOptions = useEditorMock.mock.calls[0]?.[0] as { content: string };
-      expect(editorOptions.content).toBe('');
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/components/cms/RichTextEditor.tsx b/src/components/cms/RichTextEditor.tsx
deleted file mode 100644
index fa583ee..0000000
--- a/src/components/cms/RichTextEditor.tsx
+++ /dev/null
@@ -1,204 +0,0 @@
-'use client';
-
-import { useEditor, EditorContent, type Editor } from '@tiptap/react';
-import StarterKit from '@tiptap/starter-kit';
-import Link from '@tiptap/extension-link';
-import Placeholder from '@tiptap/extension-placeholder';
-import { useEffect } from 'react';
-import {
-  Bold,
-  Italic,
-  Heading2,
-  Heading3,
-  List,
-  ListOrdered,
-  Link as LinkIcon,
-  Quote,
-  Undo2,
-  Redo2,
-} from 'lucide-react';
-
-interface RichTextEditorProps {
-  value: string;
-  onChange: (html: string) => void;
-  placeholder?: string;
-}
-
-/**
- * TipTap 富文本编辑器
- * 用于 CMS ContentEditor 的 richtext 字段
- * 支持：加粗、斜体、标题、列表、引用、链接
- * 暗色主题适配（CMS Studio 暗色背景）
- */
-export function RichTextEditor({ value, onChange, placeholder = '请输入内容...' }: RichTextEditorProps) {
-  const editor = useEditor({
-    extensions: [
-      StarterKit.configure({
-        heading: {
-          levels: [2, 3],
-        },
-      }),
-      Link.configure({
-        openOnClick: false,
-        HTMLAttributes: {
-          class: 'text-brand-ink underline',
-        },
-      }),
-      Placeholder.configure({
-        placeholder,
-      }),
-    ],
-    content: value,
-    immediatelyRender: false,
-    onUpdate: ({ editor: e }) => {
-      onChange(e.getHTML());
-    },
-    editorProps: {
-      attributes: {
-        class: 'rich-text-editor-content',
-      },
-    },
-  });
-
-  // 同步外部 value 变化（如切换内容条目时）
-  useEffect(() => {
-    if (editor && value !== editor.getHTML()) {
-      editor.commands.setContent(value || '');
-    }
-  }, [editor, value]);
-
-  if (!editor) {
-    return (
-      <div className="min-h-[120px] bg-white/[0.05] border border-white/[0.1] rounded-lg p-3 text-white/40 text-sm">
-        加载编辑器...
-      </div>
-    );
-  }
-
-  return (
-    <div className="rich-text-editor bg-white/[0.05] border border-white/[0.1] rounded-lg overflow-hidden focus-within:border-brand/50 focus-within:ring-1 focus-within:ring-brand/30 transition-colors">
-      <Toolbar editor={editor} />
-      <EditorContent editor={editor} />
-    </div>
-  );
-}
-
-function Toolbar({ editor }: { editor: Editor }) {
-  const btnClass = (isActive: boolean) =>
-    `p-1.5 rounded transition-colors ${
-      isActive
-        ? 'bg-brand/20 text-brand-ink'
-        : 'text-white/60 hover:bg-white/[0.05] hover:text-white'
-    }`;
-
-  const setLink = () => {
-    const previousUrl = editor.getAttributes('link').href;
-    const url = window.prompt('链接 URL', previousUrl);
-
-    if (url === null) return;
-    if (url === '') {
-      editor.chain().focus().extendMarkRange('link').unsetLink().run();
-      return;
-    }
-    editor.chain().focus().extendMarkRange('link').setLink({ href: url }).run();
-  };
-
-  return (
-    <div className="flex items-center gap-0.5 px-2 py-1.5 border-b border-white/[0.08] bg-white/[0.02]">
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleBold().run()}
-        className={btnClass(editor.isActive('bold'))}
-        title="加粗"
-      >
-        <Bold className="w-4 h-4" />
-      </button>
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleItalic().run()}
-        className={btnClass(editor.isActive('italic'))}
-        title="斜体"
-      >
-        <Italic className="w-4 h-4" />
-      </button>
-
-      <div className="w-px h-5 bg-white/[0.08] mx-1" />
-
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleHeading({ level: 2 }).run()}
-        className={btnClass(editor.isActive('heading', { level: 2 }))}
-        title="标题 2"
-      >
-        <Heading2 className="w-4 h-4" />
-      </button>
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleHeading({ level: 3 }).run()}
-        className={btnClass(editor.isActive('heading', { level: 3 }))}
-        title="标题 3"
-      >
-        <Heading3 className="w-4 h-4" />
-      </button>
-
-      <div className="w-px h-5 bg-white/[0.08] mx-1" />
-
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleBulletList().run()}
-        className={btnClass(editor.isActive('bulletList'))}
-        title="无序列表"
-      >
-        <List className="w-4 h-4" />
-      </button>
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleOrderedList().run()}
-        className={btnClass(editor.isActive('orderedList'))}
-        title="有序列表"
-      >
-        <ListOrdered className="w-4 h-4" />
-      </button>
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().toggleBlockquote().run()}
-        className={btnClass(editor.isActive('blockquote'))}
-        title="引用"
-      >
-        <Quote className="w-4 h-4" />
-      </button>
-
-      <div className="w-px h-5 bg-white/[0.08] mx-1" />
-
-      <button
-        type="button"
-        onClick={setLink}
-        className={btnClass(editor.isActive('link'))}
-        title="链接"
-      >
-        <LinkIcon className="w-4 h-4" />
-      </button>
-
-      <div className="flex-1" />
-
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().undo().run()}
-        disabled={!editor.can().undo()}
-        className="p-1.5 rounded text-white/60 hover:bg-white/[0.05] hover:text-white transition-colors disabled:opacity-30 disabled:cursor-not-allowed"
-        title="撤销"
-      >
-        <Undo2 className="w-4 h-4" />
-      </button>
-      <button
-        type="button"
-        onClick={() => editor.chain().focus().redo().run()}
-        disabled={!editor.can().redo()}
-        className="p-1.5 rounded text-white/60 hover:bg-white/[0.05] hover:text-white transition-colors disabled:opacity-30 disabled:cursor-not-allowed"
-        title="重做"
-      >
-        <Redo2 className="w-4 h-4" />
-      </button>
-    </div>
-  );
-}
diff --git a/src/components/content/sections.test.tsx b/src/components/content/sections.test.tsx
index 8cde4bf..cd4ef16 100644
--- a/src/components/content/sections.test.tsx
+++ b/src/components/content/sections.test.tsx
@@ -1,21 +1,66 @@
-import { describe, it, expect } from '@jest/globals';
+import { describe, it, expect, jest } from '@jest/globals';
 import { render, screen } from '@testing-library/react';
-import { MethodologyFramework } from './sections';
+import userEvent from '@testing-library/user-event';
+import '@testing-library/jest-dom';
+import {
+  MethodologyFramework,
+  TechStackShowcase,
+  DeliveryTimeline,
+  FAQSection,
+  DataProofSection,
+  type DataMetric,
+  type MethodologyLayer,
+  type TechStackCategory,
+  type TimelineStep,
+} from './sections';
+
+// ─── Mocks ───────────────────────────────────────────────────────────────
+// framer-motion 换成哑组件：本文件的动画不可见，animate/initial 是唯一能断言的状态输出，
+// 因此 FAQ 折叠态等「状态机」只能通过 data-animate 校验（见 sections.test.tsx 同族范式）。
+jest.mock('framer-motion', () => ({
+  motion: {
+    div: ({ children, initial, animate, variants, whileInView, viewport, transition, className, style, ...props }: any) => (
+      <div
+        data-testid="motion-div"
+        data-initial={JSON.stringify(initial)}
+        data-animate={JSON.stringify(animate)}
+        data-variants={JSON.stringify(variants)}
+        data-while-inview={JSON.stringify(whileInView)}
+        data-viewport={JSON.stringify(viewport)}
+        data-transition={JSON.stringify(transition)}
+        className={className}
+        style={style}
+        {...props}
+      >
+        {children}
+      </div>
+    ),
+  },
+  useInView: jest.fn(() => true),
+  AnimatePresence: ({ children }: any) => <>{children}</>,
+}));
+
+// ─── Test Data ───────────────────────────────────────────────────────────
+
+const layers: MethodologyLayer[] = [
+  { title: '诊断', description: '业务现状诊断', items: ['访谈', '数据分析'] },
+  { title: '设计', description: '解决方案设计', items: ['架构设计'] },
+];
+
+/** 取答案文本所在的高度动画容器 */
+function panelOf(answer: string): HTMLElement {
+  const el = screen.getByText(answer).closest('[data-testid="motion-div"]');
+  if (!el) throw new Error(`找不到答案「${answer}」所属的动画容器`);
+  return el as HTMLElement;
+}
+
+function panelAnimate(answer: string): { height?: number | string; opacity?: number } {
+  return JSON.parse(panelOf(answer).dataset.animate ?? '{}');
+}
+
+// ─── MethodologyFramework ────────────────────────────────────────────────
 
 describe('MethodologyFramework', () => {
-  const layers = [
-    {
-      title: '诊断',
-      description: '业务现状诊断',
-      items: ['访谈', '数据分析'],
-    },
-    {
-      title: '设计',
-      description: '解决方案设计',
-      items: ['架构设计'],
-    },
-  ];
-
   it('renders title and subtitle', () => {
     render(<MethodologyFramework title="方法论" subtitle="分层推进" layers={layers} />);
     expect(screen.getByText('方法论')).toBeInTheDocument();
@@ -33,7 +78,313 @@ describe('MethodologyFramework', () => {
   it('renders without subtitle', () => {
     const { container } = render(<MethodologyFramework title="方法论" layers={layers} />);
     expect(container.querySelector('h2')).toHaveTextContent('方法论');
+    // 无 subtitle 时只剩每层描述各一个 <p>，不额外多出引言段
+    expect(container.querySelectorAll('p')).toHaveLength(layers.length);
+  });
+
+  it('draws a connector only between adjacent layers, never after the last one', () => {
+    const { container } = render(<MethodologyFramework title="方法论" layers={layers} />);
+    expect(container.querySelectorAll('[class*="bg-gradient-to-b"]')).toHaveLength(1);
+
+    const single = render(<MethodologyFramework title="单步方法论" layers={[layers[0]!]} />);
+    expect(single.container.querySelectorAll('[class*="bg-gradient-to-b"]')).toHaveLength(0);
+  });
+
+  it('defaults the accent to brand red and honours a custom accentColor', () => {
+    const { container, unmount } = render(<MethodologyFramework title="M" layers={layers} />);
+    const dot = container.querySelector('div[class*="rounded-full"]');
+    expect(dot).toHaveStyle({ backgroundColor: 'rgb(196, 30, 58)' });
+    unmount();
+
+    const custom = render(
+      <MethodologyFramework title="M" layers={layers} accentColor="#0891B2" />,
+    );
+    expect(custom.container.querySelector('div[class*="rounded-full"]')).toHaveStyle({
+      backgroundColor: 'rgb(8, 145, 178)',
+    });
+  });
+
+  it('renders only the heading block when layers is empty', () => {
+    const { container } = render(<MethodologyFramework title="空方法论" layers={[]} />);
+    expect(screen.getByText('空方法论')).toBeInTheDocument();
+    expect(container.querySelectorAll('h3')).toHaveLength(0);
+  });
+});
+
+// ─── TechStackShowcase ───────────────────────────────────────────────────
+
+describe('TechStackShowcase', () => {
+  const categories: TechStackCategory[] = [
+    { name: '后端', items: ['Java', 'Node.js'] },
+    { name: '数据', items: ['ClickHouse'] },
+  ];
+
+  it('renders every category card with its technology chips', () => {
+    render(
+      <TechStackShowcase
+        title="技术栈"
+        subtitle="按能力域分组"
+        categories={categories}
+      />,
+    );
+    expect(screen.getByText('技术栈')).toBeInTheDocument();
+    expect(screen.getByText('按能力域分组')).toBeInTheDocument();
+    expect(screen.getAllByText('Java')).toHaveLength(1);
+    expect(screen.getAllByText('Node.js')).toHaveLength(1);
+    expect(screen.getAllByText('ClickHouse')).toHaveLength(1);
+  });
+
+  it('omits the subtitle paragraph when subtitle is not given', () => {
+    const { container } = render(<TechStackShowcase title="技术栈" categories={categories} />);
+    expect(container.querySelectorAll('p')).toHaveLength(0);
+    expect(container.querySelectorAll('h3')).toHaveLength(2);
+  });
+
+  it('renders a card without chips when a category has no items', () => {
+    const { container } = render(
+      <TechStackShowcase title="技术栈" categories={[{ name: '待定', items: [] }]} />,
+    );
+    expect(screen.getByText('待定')).toBeInTheDocument();
+    expect(container.querySelectorAll('h3')).toHaveLength(1);
+    // 空 items 下不产生任何 chip（chip 是 span，标题是 h3）
+    expect(container.querySelectorAll('.flex.flex-wrap.gap-2 span')).toHaveLength(0);
+  });
+});
+
+// ─── Q-5 响应式网格回归 ────────────────────────────────────────────────────
+// StaggerReveal 会为每个子项各包一层 motion.div。若把 grid/space 类放在「只含 StaggerReveal
+// 这一个子元素」的外层容器上，包装层成为唯一网格项 ⇒ 卡片在桌面端塌成单列、gap/space 全部失效。
+// 正确做法是把网格类挂到 StaggerReveal 自身（其 className 落在 motion.div 上，直接子项即各卡片）。
+describe('Q-5 网格类必须挂在 StaggerReveal 上（卡片为网格直接子项）', () => {
+  it('TechStackShowcase: grid-cols-3 元素直接父有每类一张卡', () => {
+    const { container } = render(
+      <TechStackShowcase
+        title="技术栈"
+        categories={[
+          { name: '后端', items: ['Java'] },
+          { name: '数据', items: ['ClickHouse'] },
+          { name: '前端', items: ['React'] },
+        ]}
+      />,
+    );
+    const grid = container.querySelector('[class*="grid-cols-3"]');
+    expect(grid).not.toBeNull();
+    expect(grid!.className).toContain('grid');
+    // 旧结构下 grid 元素只有 1 个子项（StaggerReveal 包裹层）⇒ 单列；修复后应为 3
+    expect(grid!.children.length).toBe(3);
+  });
+
+  it('DataProofSection: grid-cols-4 元素直接父有每个指标一格', () => {
+    const metrics = [
+      { value: '99.9%', label: '可用率' },
+      { value: '20+', label: '对接源' },
+      { value: '40%', label: '提效' },
+    ];
+    const { container } = render(<DataProofSection title="成果" metrics={metrics} />);
+    const grid = container.querySelector('[class*="grid-cols-4"]');
+    expect(grid).not.toBeNull();
+    expect(grid!.className).toContain('grid');
+    expect(grid!.children.length).toBe(3);
+  });
+
+  it('FAQSection: space-y 挂在 StaggerReveal 上，问答条目为其直接子项', () => {
+    const items = [
+      { question: 'Q1', answer: 'A1' },
+      { question: 'Q2', answer: 'A2' },
+    ];
+    const { container } = render(<FAQSection title="常见问题" items={items} />);
+    const stack = container.querySelector('[class*="space-y-3"]');
+    expect(stack).not.toBeNull();
+    // 旧结构下 space-y-3 在外层 div（仅 1 个子 = StaggerReveal 根）⇒ 间距失效
+    expect(stack!.children.length).toBe(2);
   });
 });
 
 
+// ─── DeliveryTimeline ────────────────────────────────────────────────────
+
+describe('DeliveryTimeline', () => {
+  const steps: TimelineStep[] = [
+    {
+      phase: '诊断',
+      title: '现状梳理',
+      description: '访谈与数据盘点',
+      duration: '2 周',
+      deliverables: ['诊断报告', '路线图'],
+    },
+    {
+      phase: '交付',
+      title: '系统上线',
+      description: '迭代开发与部署',
+      duration: '8 周',
+      deliverables: ['生产环境'],
+    },
+    {
+      phase: '陪跑',
+      title: '运营支持',
+      description: '指标看板与培训',
+      duration: '长期',
+      deliverables: [],
+    },
+  ];
+
+  it('numbers phases from 1 and shows duration, title, description and deliverables', () => {
+    render(<DeliveryTimeline title="交付路径" subtitle="四步走" steps={steps} />);
+    expect(screen.getByText('第 1 阶段：诊断')).toBeInTheDocument();
+    expect(screen.getByText('第 2 阶段：交付')).toBeInTheDocument();
+    expect(screen.getByText('第 3 阶段：陪跑')).toBeInTheDocument();
+    expect(screen.getByText('2 周')).toBeInTheDocument();
+    expect(screen.getByText('现状梳理')).toBeInTheDocument();
+    expect(screen.getByText('访谈与数据盘点')).toBeInTheDocument();
+    expect(screen.getByText('诊断报告')).toBeInTheDocument();
+    expect(screen.getAllByText('阶段产出')).toHaveLength(3);
+  });
+
+  it('alternates the card side per index', () => {
+    const { container } = render(<DeliveryTimeline title="交付路径" steps={steps} />);
+    const leftShifted = container.querySelectorAll('[class*="lg:ml-12"]');
+    const rightShifted = container.querySelectorAll('[class*="lg:mr-12"]');
+    expect(leftShifted).toHaveLength(2); // index 0 与 2
+    expect(rightShifted).toHaveLength(1); // index 1
+    expect(container.querySelectorAll('[class*="lg:flex-row-reverse"]')).toHaveLength(1);
+  });
+
+  it('paints the timeline node border with accentColor', () => {
+    const { container } = render(
+      <DeliveryTimeline title="交付路径" steps={steps} accentColor="#1D4ED8" />,
+    );
+    const node = container.querySelector('div[class*="rounded-full"]');
+    expect(node).toHaveStyle({ borderColor: 'rgb(29, 78, 216)' });
+  });
+
+  it('renders the heading only when there are no steps', () => {
+    const { container } = render(<DeliveryTimeline title="交付路径" steps={[]} />);
+    expect(screen.getByText('交付路径')).toBeInTheDocument();
+    expect(container.querySelectorAll('h3')).toHaveLength(0);
+    expect(container.querySelectorAll('[class*="rounded-full"]')).toHaveLength(0);
+  });
+});
+
+// ─── FAQSection ──────────────────────────────────────────────────────────
+
+describe('FAQSection', () => {
+  const items = [
+    { question: '交付周期多久？', answer: '通常 8-12 周。' },
+    { question: '是否私有化部署？', answer: '支持全栈私有化。' },
+  ];
+
+  it('keeps the first question open and the rest collapsed on mount', () => {
+    render(<FAQSection title="常见问题" subtitle="选型答疑" items={items} />);
+    expect(panelAnimate('通常 8-12 周。')).toEqual({ height: 'auto', opacity: 1 });
+    expect(panelAnimate('支持全栈私有化。')).toEqual({ height: 0, opacity: 0 });
+    // 展开项的箭头旋转 180°，折叠项归零
+    const openChevron = screen.getByText('交付周期多久？').closest('button');
+    expect(
+      JSON.parse(openChevron?.querySelector('[data-testid="motion-div"]')?.getAttribute('data-animate') ?? '{}'),
+    ).toEqual({ rotate: 180 });
+  });
+
+  it('opens the clicked question and closes the previously open one', async () => {
+    render(<FAQSection title="常见问题" items={items} />);
+    await userEvent.click(screen.getByText('是否私有化部署？'));
+    expect(panelAnimate('支持全栈私有化。')).toEqual({ height: 'auto', opacity: 1 });
+    expect(panelAnimate('通常 8-12 周。')).toEqual({ height: 0, opacity: 0 });
+  });
+
+  it('collapses the open question when its own trigger is clicked again', async () => {
+    render(<FAQSection title="常见问题" items={items} />);
+    await userEvent.click(screen.getByText('交付周期多久？'));
+    expect(panelAnimate('通常 8-12 周。')).toEqual({ height: 0, opacity: 0 });
+    // 全部折叠后箭头不再旋转
+    const chevron = screen
+      .getByText('交付周期多久？')
+      .closest('button')
+      ?.querySelector('[data-testid="motion-div"]');
+    expect(JSON.parse(chevron?.getAttribute('data-animate') ?? '{}')).toEqual({ rotate: 0 });
+  });
+
+  it('renders no accordion when items is empty', () => {
+    render(<FAQSection title="常见问题" items={[]} />);
+    expect(screen.getByText('常见问题')).toBeInTheDocument();
+    expect(screen.queryAllByRole('button')).toHaveLength(0);
+  });
+});
+
+// ─── DataProofSection ────────────────────────────────────────────────────
+
+describe('DataProofSection', () => {
+  const metrics: DataMetric[] = [
+    {
+      value: '40%',
+      label: '库存周转提升',
+      description: '以季度为口径',
+      trend: '+12% 环比',
+      trendUp: true,
+      basis: 'target',
+    },
+    { value: '99.9%', label: '系统可用率', trend: '-0.1% 波动', trendUp: false, basis: 'verified' },
+  ];
+
+  it('renders each metric with optional description and trend', () => {
+    render(<DataProofSection title="可验证的成果" subtitle="口径透明" metrics={metrics} />);
+    expect(screen.getByText('40%')).toBeInTheDocument();
+    expect(screen.getByText('库存周转提升')).toBeInTheDocument();
+    expect(screen.getByText('以季度为口径')).toBeInTheDocument();
+    expect(screen.getByText('99.9%')).toBeInTheDocument();
+    expect(screen.getByText('+12% 环比')).toBeInTheDocument();
+    expect(screen.getByText('-0.1% 波动')).toBeInTheDocument();
+  });
+
+  it('colors up-trends as success and down-trends as brand ink', () => {
+    const { container } = render(<DataProofSection title="成果" metrics={metrics} />);
+    const up = screen.getByText('+12% 环比').closest('[class*="inline-flex"]');
+    const down = screen.getByText('-0.1% 波动').closest('[class*="inline-flex"]');
+    expect(up?.className).toContain('text-success');
+    expect(up?.className).not.toContain('text-brand-ink');
+    expect(down?.className).toContain('text-brand-ink');
+    expect(container.querySelectorAll('[class*="inline-flex"]')).toHaveLength(2);
+  });
+
+  it('omits description and trend blocks when those fields are absent', () => {
+    const { container } = render(
+      <DataProofSection title="成果" metrics={[{ value: '3 座', label: '交付城市' }]} />,
+    );
+    expect(screen.getByText('交付城市')).toBeInTheDocument();
+    expect(container.querySelectorAll('[class*="inline-flex"]')).toHaveLength(0);
+    // 无 description 时不渲染 <p>，但口径角注本身是一个 <p>
+    expect(container.querySelectorAll('p')).toHaveLength(1);
+  });
+
+  it('annotates the aggregate basis as the weakest one across metrics', () => {
+    render(<DataProofSection title="成果" metrics={metrics} />);
+    // target(0) 弱于 verified(2) → 取 target 文案
+    expect(screen.getByTestId('metrics-basis-note')).toHaveTextContent('目标口径，非既成结果');
+  });
+
+  it('annotates a stronger note when every metric is verified', () => {
+    render(
+      <DataProofSection title="成果" metrics={[{ value: '40%', label: 'X', basis: 'verified' }]} />,
+    );
+    expect(screen.getByTestId('metrics-basis-note')).toHaveTextContent('已有可核验的实测出处');
+  });
+
+  it('annotates team-history wording when that is the only declared basis', () => {
+    render(
+      <DataProofSection title="成果" metrics={[{ value: '40%', label: 'X', basis: 'team-history' }]} />,
+    );
+    expect(screen.getByTestId('metrics-basis-note')).toHaveTextContent('团队历史项目成果');
+  });
+
+  it('renders nothing when metrics is empty', () => {
+    const { container } = render(<DataProofSection title="成果" metrics={[]} />);
+    expect(container).toBeEmptyDOMElement();
+    expect(screen.queryByText('成果')).not.toBeInTheDocument();
+  });
+
+  it('guards a missing metrics prop instead of throwing', () => {
+    const { container } = render(
+      <DataProofSection title="成果" metrics={undefined as unknown as DataMetric[]} />,
+    );
+    expect(container).toBeEmptyDOMElement();
+  });
+});
diff --git a/src/components/content/sections.tsx b/src/components/content/sections.tsx
index 8f07ab5..3e53316 100644
--- a/src/components/content/sections.tsx
+++ b/src/components/content/sections.tsx
@@ -51,7 +51,7 @@ export function MethodologyFramework({
                 initial={{ opacity: 0, x: -30 }}
                 whileInView={{ opacity: 1, x: 0 }}
                 viewport={{ once: true, margin: '-50px' }}
-                transition={{ duration: 0.3, delay: index * 0.06, ease: EASE_OUT }}
+                transition={{ duration: 0.28, delay: index * 0.06, ease: EASE_OUT }}
               >
                 <div className="flex gap-6 lg:gap-10">
                   <div className="flex flex-col items-center pt-2">
@@ -118,8 +118,11 @@ export function TechStackShowcase({ title, subtitle, categories }: TechStackShow
           )}
         </ScrollReveal>
 
-        <div className="grid md:grid-cols-2 lg:grid-cols-3 gap-6">
-          <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+        <StaggerReveal
+          staggerDelay={0.05}
+          delayChildren={0.05}
+          className="grid md:grid-cols-2 lg:grid-cols-3 gap-6"
+        >
             {categories.map((category, index) => (
               <div
                 key={index}
@@ -130,7 +133,7 @@ export function TechStackShowcase({ title, subtitle, categories }: TechStackShow
                   {category.items.map((item, i) => (
                     <span
                       key={i}
-                      className="px-3 py-1.5 text-xs font-medium bg-bg-secondary text-text-secondary border border-border-primary hover:border-brand/30 hover:text-brand-ink transition-colors duration-300"
+                      className="px-3 py-1.5 text-xs font-medium bg-bg-secondary text-text-secondary border border-border-primary hover:border-brand/30 hover:text-brand-ink transition-colors duration-normal"
                     >
                       {item}
                     </span>
@@ -139,7 +142,6 @@ export function TechStackShowcase({ title, subtitle, categories }: TechStackShow
               </div>
             ))}
           </StaggerReveal>
-        </div>
       </div>
     </section>
   );
@@ -269,12 +271,12 @@ export function FAQSection({ title, subtitle, items }: FAQSectionProps) {
             )}
           </ScrollReveal>
 
-          <div className="lg:col-span-8 space-y-3">
-            <StaggerReveal staggerDelay={0.06} delayChildren={0.05}>
+          <div className="lg:col-span-8">
+            <StaggerReveal staggerDelay={0.06} delayChildren={0.05} className="space-y-3">
               {items.map((item, index) => (
                 <div
                   key={index}
-                  className="border border-border-primary bg-bg-primary hover:border-border-secondary transition-colors duration-300"
+                  className="border border-border-primary bg-bg-primary hover:border-border-secondary transition-colors duration-normal"
                 >
                   <button
                     onClick={() => setOpenIndex(openIndex === index ? null : index)}
@@ -285,7 +287,7 @@ export function FAQSection({ title, subtitle, items }: FAQSectionProps) {
                     </span>
                     <motion.div
                       animate={{ rotate: openIndex === index ? 180 : 0 }}
-                      transition={{ duration: 0.3, ease: EASE_OUT }}
+                      transition={{ duration: 0.28, ease: EASE_OUT }}
                       className="shrink-0"
                     >
                       <ChevronDown className="w-5 h-5 text-text-muted" />
@@ -297,7 +299,7 @@ export function FAQSection({ title, subtitle, items }: FAQSectionProps) {
                       height: openIndex === index ? 'auto' : 0,
                       opacity: openIndex === index ? 1 : 0,
                     }}
-                    transition={{ duration: 0.3, ease: EASE_OUT }}
+                    transition={{ duration: 0.28, ease: EASE_OUT }}
                     className="overflow-hidden"
                   >
                     <div className="px-6 lg:px-7 pb-7 pt-1 text-text-secondary leading-relaxed">
@@ -347,8 +349,11 @@ export function DataProofSection({ title, subtitle, metrics }: DataProofSectionP
           )}
         </ScrollReveal>
 
-        <div className="grid md:grid-cols-2 lg:grid-cols-4 gap-px bg-border-primary">
-          <StaggerReveal staggerDelay={0.05} delayChildren={0.05}>
+        <StaggerReveal
+          staggerDelay={0.05}
+          delayChildren={0.05}
+          className="grid md:grid-cols-2 lg:grid-cols-4 gap-px bg-border-primary"
+        >
             {metrics.map((metric, index) => (
               <div
                 key={index}
@@ -378,7 +383,6 @@ export function DataProofSection({ title, subtitle, metrics }: DataProofSectionP
               </div>
             ))}
           </StaggerReveal>
-        </div>
         <MetricsBasisNote basis={basis} className="mt-6" />
       </div>
     </section>
diff --git a/src/components/content/testimonials.test.tsx b/src/components/content/testimonials.test.tsx
deleted file mode 100644
index baeda38..0000000
--- a/src/components/content/testimonials.test.tsx
+++ /dev/null
@@ -1,55 +0,0 @@
-import { describe, it, expect } from '@jest/globals';
-import { render, screen, fireEvent } from '@testing-library/react';
-import { TestimonialSection, LogoWall } from './testimonials';
-
-describe('TestimonialSection', () => {
-  const testimonials = [
-    {
-      quote: '服务非常专业',
-      author: '张三',
-      title: 'CEO',
-      company: 'A 公司',
-      industry: '科技',
-    },
-    {
-      quote: '交付准时',
-      author: '李四',
-      title: 'CTO',
-      company: 'B 公司',
-      industry: '制造',
-    },
-  ];
-
-  it('renders title and subtitle', () => {
-    render(<TestimonialSection title="客户评价" subtitle="来自客户的真实反馈" testimonials={testimonials} />);
-    expect(screen.getByText('客户评价')).toBeInTheDocument();
-    expect(screen.getByText('来自客户的真实反馈')).toBeInTheDocument();
-  });
-
-  it('renders first testimonial by default', () => {
-    render(<TestimonialSection title="客户评价" testimonials={testimonials} />);
-    expect(screen.getByText('张三')).toBeInTheDocument();
-    expect(screen.getByText('科技')).toBeInTheDocument();
-  });
-
-  it('switches testimonial on dot click', () => {
-    render(<TestimonialSection title="客户评价" testimonials={testimonials} />);
-    const dots = screen.getAllByRole('button');
-    fireEvent.click(dots[1]!);
-    expect(screen.getByText('李四')).toBeInTheDocument();
-    expect(screen.getByText('制造')).toBeInTheDocument();
-  });
-
-  it('renders without subtitle', () => {
-    const { container } = render(<TestimonialSection title="客户评价" testimonials={testimonials} />);
-    expect(container.querySelector('h2')).toHaveTextContent('客户评价');
-  });
-});
-
-describe('LogoWall (testimonials)', () => {
-  it('renders logo wall', () => {
-    render(<LogoWall title="合作企业" logos={[{ name: 'A 公司' }, { name: 'B 公司', industry: '制造' }]} />);
-    expect(screen.getByText('合作企业')).toBeInTheDocument();
-    expect(screen.getByText('A 公司')).toBeInTheDocument();
-  });
-});
diff --git a/src/components/content/testimonials.tsx b/src/components/content/testimonials.tsx
deleted file mode 100644
index 9136d09..0000000
--- a/src/components/content/testimonials.tsx
+++ /dev/null
@@ -1,155 +0,0 @@
-'use client';
-
-import { motion } from 'framer-motion';
-import { ScrollReveal } from '@/components/ui/scroll-reveal';
-import { SectionLabel, EASE_OUT } from '@/components/ui/page-decoration';
-import { Quote } from 'lucide-react';
-import { useState } from 'react';
-import { cn } from '@/lib/utils';
-
-export interface Testimonial {
-  quote: string;
-  author: string;
-  title: string;
-  company: string;
-  industry: string;
-}
-
-export interface TestimonialSectionProps {
-  title: string;
-  subtitle?: string;
-  testimonials: Testimonial[];
-  accentColor?: string;
-}
-
-export function TestimonialSection({
-  title,
-  subtitle,
-  testimonials,
-  accentColor = '#C41E3A',
-}: TestimonialSectionProps) {
-  const [activeIndex, setActiveIndex] = useState(0);
-
-  return (
-    <section className="relative py-20 sm:py-28 md:py-32 lg:py-40 overflow-hidden bg-bg-secondary">
-      <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10">
-        <ScrollReveal className="mb-16 sm:mb-20 max-w-3xl">
-          <SectionLabel>Client Stories</SectionLabel>
-          <h2 className="text-3xl md:text-4xl lg:text-5xl font-bold text-ink tracking-tight leading-tight mb-6">
-            {title}
-          </h2>
-          {subtitle && (
-            <p className="text-text-secondary leading-relaxed text-lg">
-              {subtitle}
-            </p>
-          )}
-        </ScrollReveal>
-
-        <div className="relative">
-          <div className="relative overflow-hidden">
-            <motion.div
-              className="flex"
-              animate={{ x: `-${activeIndex * 100}%` }}
-              transition={{ duration: 0.3, ease: EASE_OUT }}
-            >
-              {testimonials.map((testimonial, index) => (
-                <div key={index} className="w-full shrink-0">
-                  <div className="max-w-4xl mx-auto">
-                    <div className="relative p-10 lg:p-16 border border-border-primary bg-bg-primary">
-                      <Quote className="absolute top-8 left-8 w-12 h-12 opacity-10 text-brand-ink" />
-                      <div className="relative z-10">
-                        <p className="text-xl lg:text-2xl text-text-primary leading-relaxed font-light mb-10 lg:mb-14">
-                          「{testimonial.quote}」
-                        </p>
-                        <div className="flex items-center gap-5">
-                          <div
-                            className="w-14 h-14 rounded-full flex items-center justify-center text-white font-bold text-lg"
-                            style={{ backgroundColor: accentColor }}
-                          >
-                            {testimonial.author.charAt(0)}
-                          </div>
-                          <div>
-                            <div className="text-text-primary font-semibold text-lg">
-                              {testimonial.author}
-                            </div>
-                            <div className="text-text-secondary text-sm">
-                              {testimonial.title} · {testimonial.company}
-                            </div>
-                            <div className="text-text-muted text-xs mt-0.5">
-                              {testimonial.industry}
-                            </div>
-                          </div>
-                        </div>
-                      </div>
-                    </div>
-                  </div>
-                </div>
-              ))}
-            </motion.div>
-          </div>
-
-          <div className="flex justify-center gap-3 mt-10">
-            {testimonials.map((_, index) => (
-              <button
-                key={index}
-                onClick={() => setActiveIndex(index)}
-                className={cn(
-                  'h-2 rounded-full transition-all duration-300',
-                  activeIndex === index
-                    ? 'w-8'
-                    : 'w-2 bg-border-primary hover:bg-border-secondary'
-                )}
-                style={activeIndex === index ? { backgroundColor: accentColor } : {}}
-              />
-            ))}
-          </div>
-        </div>
-      </div>
-    </section>
-  );
-}
-
-export interface LogoWallProps {
-  title: string;
-  logos: { name: string; industry?: string }[];
-}
-
-export function LogoWall({ title, logos }: LogoWallProps) {
-  return (
-    <section className="relative py-16 sm:py-20 overflow-hidden bg-bg-primary">
-      <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10">
-        <ScrollReveal>
-          <div className="text-center mb-12">
-            <p className="text-sm text-text-muted tracking-[0.2em] uppercase font-medium">
-              {title}
-            </p>
-          </div>
-        </ScrollReveal>
-
-        <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-6 gap-px bg-border-primary">
-          {logos.map((logo, index) => (
-            <motion.div
-              key={index}
-              initial={{ opacity: 0, y: 20 }}
-              whileInView={{ opacity: 1, y: 0 }}
-              viewport={{ once: true }}
-              transition={{ duration: 0.3, delay: index * 0.05, ease: EASE_OUT }}
-              className="flex items-center justify-center p-8 bg-bg-primary hover:bg-bg-secondary transition-colors duration-300"
-            >
-              <div className="text-center">
-                <div className="text-text-secondary font-semibold text-base hover:text-text-primary transition-colors duration-300">
-                  {logo.name}
-                </div>
-                {logo.industry && (
-                  <div className="text-text-muted text-xs mt-1">
-                    {logo.industry}
-                  </div>
-                )}
-              </div>
-            </motion.div>
-          ))}
-        </div>
-      </div>
-    </section>
-  );
-}
diff --git a/src/components/detail/detail-case-studies-section.tsx b/src/components/detail/detail-case-studies-section.tsx
index 3ab0c42..af3088c 100644
--- a/src/components/detail/detail-case-studies-section.tsx
+++ b/src/components/detail/detail-case-studies-section.tsx
@@ -75,12 +75,12 @@ export function CaseStudiesSection({
           {caseStudies.map((study) => (
             <div
               key={study.client}
-              className="group relative block h-full overflow-hidden bg-bg-primary transition-all duration-300 hover:bg-bg-secondary"
+              className="group relative block h-full overflow-hidden bg-bg-primary transition-all duration-normal hover:bg-bg-secondary"
             >
               <div className="aspect-[4/3] bg-gradient-to-br from-bg-secondary to-bg-tertiary relative overflow-hidden">
                 <div className="absolute inset-0 flex items-center justify-center">
-                  {/* 客户名首字作占位图形（无真实配图时），纯装饰 → aria-hidden 豁免对比度 */}
-                  <span aria-hidden="true" className="text-6xl font-bold text-text-muted/10">
+                  {/* 客户名首字占位图形（无真实配图时）：aria-hidden 不豁免 1.4.3，用大字档令牌 text-text-hint */}
+                  <span aria-hidden="true" className="text-6xl font-bold text-text-hint">
                     {study.client.charAt(0)}
                   </span>
                 </div>
@@ -92,7 +92,7 @@ export function CaseStudiesSection({
               </div>
 
               <div className="p-8">
-                <h3 className="text-xl font-bold text-ink mb-3 group-hover:translate-x-2 transition-transform duration-300">
+                <h3 className="text-xl font-bold text-ink mb-3 group-hover:translate-x-2 transition-transform duration-normal">
                   {study.client}
                 </h3>
                 <p className="text-text-secondary text-sm leading-relaxed mb-6">
diff --git a/src/components/detail/detail-case-study.tsx b/src/components/detail/detail-case-study.tsx
index 096058d..d63886d 100644
--- a/src/components/detail/detail-case-study.tsx
+++ b/src/components/detail/detail-case-study.tsx
@@ -14,7 +14,7 @@ export function CaseStudyCard({ study, index }: CaseStudyCardProps) {
       initial={{ opacity: 0, y: 20 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-50px' }}
-      transition={{ duration: 0.3, delay: index * 0.06 }}
+      transition={{ duration: 0.28, delay: index * 0.06 }}
       className="rounded-xl border border-border-primary bg-bg-elevated p-6 shadow-sm transition-shadow hover:shadow-md"
     >
       <div className="mb-3 flex items-center gap-2">
diff --git a/src/components/detail/detail-certification.tsx b/src/components/detail/detail-certification.tsx
index 8be9391..80897b8 100644
--- a/src/components/detail/detail-certification.tsx
+++ b/src/components/detail/detail-certification.tsx
@@ -21,7 +21,7 @@ export function CertificationList({ certifications }: CertificationListProps) {
           initial: { opacity: 0, scale: 0.95 },
           whileInView: { opacity: 1, scale: 1 },
           viewport: { once: true, margin: '-50px' },
-          transition: { duration: 0.3, delay: index * 0.05 },
+          transition: { duration: 0.28, delay: index * 0.05 },
           className,
         };
         const inner = (
diff --git a/src/components/detail/detail-certifications-section.tsx b/src/components/detail/detail-certifications-section.tsx
index 6d79177..8082e67 100644
--- a/src/components/detail/detail-certifications-section.tsx
+++ b/src/components/detail/detail-certifications-section.tsx
@@ -57,7 +57,7 @@ export function CertificationsSection({ certifications }: CertificationsSectionP
           {certifications.map((cert, idx) => (
             <div
               key={idx}
-              className="group flex items-center gap-4 px-8 py-5 bg-bg-primary hover:bg-bg-secondary transition-all duration-300"
+              className="group flex items-center gap-4 px-8 py-5 bg-bg-primary hover:bg-bg-secondary transition-all duration-normal"
             >
               <div className="w-12 h-12 rounded-xl bg-brand-soft flex items-center justify-center text-brand-ink">
                 <Shield className="w-6 h-6" />
diff --git a/src/components/detail/detail-cta-section.tsx b/src/components/detail/detail-cta-section.tsx
index be0b74e..0d6d4c4 100644
--- a/src/components/detail/detail-cta-section.tsx
+++ b/src/components/detail/detail-cta-section.tsx
@@ -38,7 +38,7 @@ export function DetailCTASection({
           initial={{ opacity: 0, y: 32 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-100px' }}
-          transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+          transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
           className="max-w-3xl"
         >
           {/* 标签 */}
@@ -61,7 +61,7 @@ export function DetailCTASection({
               className="group inline-flex items-center gap-3 px-10 py-4 bg-white text-brand font-bold text-base hover:bg-white/90 transition-all duration-200"
             >
               <span>{primaryAction.label}</span>
-              <ArrowRight className="w-5 h-5 transition-transform duration-300 group-hover:translate-x-1" />
+              <ArrowRight className="w-5 h-5 transition-transform duration-normal group-hover:translate-x-1" />
             </a>
 
             {secondaryAction && (
@@ -78,7 +78,7 @@ export function DetailCTASection({
             initial={{ opacity: 0 }}
             whileInView={{ opacity: 1 }}
             viewport={{ once: true }}
-            transition={{ delay: 0.5, duration: 0.3 }}
+            transition={{ delay: 0.5, duration: 0.28 }}
             className="mt-10 text-sm text-white/70"
           >
             平均响应时间 &lt; 2小时 · 7×24小时技术支持 · 无需预付费用
diff --git a/src/components/detail/detail-hero.tsx b/src/components/detail/detail-hero.tsx
index b4cb7d1..b773ba3 100644
--- a/src/components/detail/detail-hero.tsx
+++ b/src/components/detail/detail-hero.tsx
@@ -69,7 +69,7 @@ export function DetailHero({
                   scale: 1,
                   filter: 'blur(0px)',
                   transition: {
-                    duration: 0.3,
+                    duration: 0.28,
                     ease: [0.22, 1, 0.36, 1] as const,
                   },
                 },
@@ -101,7 +101,7 @@ export function DetailHero({
                 y: 0,
                 filter: 'blur(0px)',
                 transition: {
-                  duration: 0.3,
+                  duration: 0.28,
                   ease: [0.22, 1, 0.36, 1] as const,
                 },
               },
@@ -120,7 +120,7 @@ export function DetailHero({
                 opacity: 1,
                 y: 0,
                 transition: {
-                  duration: 0.3,
+                  duration: 0.28,
                   delay: 0.25,
                   ease: [0.22, 1, 0.36, 1] as const,
                 },
@@ -139,7 +139,7 @@ export function DetailHero({
                   opacity: 1,
                   y: 0,
                   transition: {
-                    duration: 0.3,
+                    duration: 0.28,
                     delay: 0.4,
                     ease: [0.22, 1, 0.36, 1] as const,
                   },
@@ -159,7 +159,7 @@ export function DetailHero({
                   opacity: 1,
                   y: 0,
                   transition: {
-                    duration: 0.3,
+                    duration: 0.28,
                     delay: 0.55,
                     ease: [0.22, 1, 0.36, 1] as const,
                   },
@@ -168,19 +168,23 @@ export function DetailHero({
               className={`mt-12 flex flex-wrap gap-5 ${isCenterLayout ? 'justify-center' : ''}`}
             >
               {primaryAction && (
-                <a href={primaryAction.href}>
-                  <PressableButton variant="primary" className="px-10 py-4 text-base shadow-lg group">
-                    <span>{primaryAction.label}</span>
-                    <ArrowRight className="w-5 h-5 group-hover:translate-x-1 group-hover:-translate-y-0.5 transition-transform duration-300" />
-                  </PressableButton>
-                </a>
+                <PressableButton
+                  href={primaryAction.href}
+                  variant="primary"
+                  className="px-10 py-4 text-base shadow-lg group"
+                >
+                  <span>{primaryAction.label}</span>
+                  <ArrowRight className="w-5 h-5 group-hover:translate-x-1 group-hover:-translate-y-0.5 transition-transform duration-normal" />
+                </PressableButton>
               )}
               {secondaryAction && (
-                <a href={secondaryAction.href}>
-                  <PressableButton variant="secondary" className="px-8 py-4 text-base">
-                    {secondaryAction.label}
-                  </PressableButton>
-                </a>
+                <PressableButton
+                  href={secondaryAction.href}
+                  variant="secondary"
+                  className="px-8 py-4 text-base"
+                >
+                  {secondaryAction.label}
+                </PressableButton>
               )}
             </motion.div>
           )}
@@ -189,7 +193,7 @@ export function DetailHero({
         <motion.div
           initial={{ opacity: 0 }}
           animate={{ opacity: 1 }}
-          transition={{ delay: 1.5, duration: 0.3 }}
+          transition={{ delay: 1.5, duration: 0.28 }}
           className="absolute bottom-8 left-1/2 -translate-x-1/2"
         >
           <div
diff --git a/src/components/detail/detail-product-value.tsx b/src/components/detail/detail-product-value.tsx
index f061215..c47252a 100644
--- a/src/components/detail/detail-product-value.tsx
+++ b/src/components/detail/detail-product-value.tsx
@@ -1,7 +1,7 @@
 'use client';
 
 import { motion, useInView } from 'framer-motion';
-import { useRef, useState } from 'react';
+import { useEffect, useRef, useState } from 'react';
 import {
   CheckCircle2,
   ArrowRight,
@@ -70,25 +70,31 @@ function MetricCard({
   const suffix = value.replace(/[0-9.]/g, '');
   const [displayValue, setDisplayValue] = useState('0');
 
-  if (isInView && displayValue === '0') {
+  // 动画必须在 effect 中驱动并在卸载/重跑时取消。历史写法在 render 体内 setState +
+  // requestAnimationFrame：每一帧的 setState 又触发重渲染并再 spawn 一条从 0 开始的动画链，
+  // 相互竞争且从不取消（Q-6）。
+  useEffect(() => {
+    if (!isInView) return;
     if (isNaN(numericValue)) {
       setDisplayValue(value);
-    } else {
-      let startTime: number;
-      const animate = (currentTime: number) => {
-        if (!startTime) startTime = currentTime;
-        const progress = Math.min((currentTime - startTime) / 2000, 1);
-        const easeOutQuart = 1 - Math.pow(1 - progress, 4);
-        setDisplayValue(
-          Number.isInteger(numericValue)
-            ? Math.floor(numericValue * easeOutQuart).toString() + suffix
-            : (numericValue * easeOutQuart).toFixed(1) + suffix
-        );
-        if (progress < 1) requestAnimationFrame(animate);
-      };
-      requestAnimationFrame(animate);
+      return;
     }
-  }
+    let frame = 0;
+    let startTime: number | undefined;
+    const animate = (currentTime: number) => {
+      if (startTime === undefined) startTime = currentTime;
+      const progress = Math.min((currentTime - startTime) / 2000, 1);
+      const easeOutQuart = 1 - Math.pow(1 - progress, 4);
+      setDisplayValue(
+        Number.isInteger(numericValue)
+          ? Math.floor(numericValue * easeOutQuart).toString() + suffix
+          : (numericValue * easeOutQuart).toFixed(1) + suffix,
+      );
+      if (progress < 1) frame = requestAnimationFrame(animate);
+    };
+    frame = requestAnimationFrame(animate);
+    return () => cancelAnimationFrame(frame);
+  }, [isInView, numericValue, suffix, value]);
 
   return (
     <div className="bain-card p-8">
@@ -120,7 +126,7 @@ export function ProductValueSection({ product }: ProductValueSectionProps) {
           initial={{ opacity: 0, y: 32 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-120px' }}
-          transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+          transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
           className="mb-16 sm:mb-20"
         >
           <div className="flex items-center gap-3 mb-6">
@@ -149,7 +155,7 @@ export function ProductValueSection({ product }: ProductValueSectionProps) {
                 whileInView={{ opacity: 1, y: 0 }}
                 viewport={{ once: true }}
                 transition={{
-                  duration: 0.3,
+                  duration: 0.28,
                   delay: index * 0.06,
                   ease: [0.22, 1, 0.36, 1],
                 }}
@@ -190,7 +196,7 @@ export function ProductValueSection({ product }: ProductValueSectionProps) {
                   whileInView={{ opacity: 1, x: 0 }}
                   viewport={{ once: true }}
                   transition={{
-                    duration: 0.3,
+                    duration: 0.28,
                     delay: index * 0.06,
                     ease: [0.22, 1, 0.36, 1],
                   }}
@@ -225,7 +231,7 @@ export function ProductValueSection({ product }: ProductValueSectionProps) {
                     viewport={{ once: true }}
                     transition={{
                       delay: 0.3 + index * 0.05,
-                      duration: 0.3,
+                      duration: 0.28,
                       ease: [0.22, 1, 0.36, 1],
                     }}
                     className="flex items-start gap-3 text-sm text-text-secondary"
@@ -245,7 +251,7 @@ export function ProductValueSection({ product }: ProductValueSectionProps) {
             initial={{ opacity: 0, y: 32 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.2 }}
+            transition={{ duration: 0.28, delay: 0.2 }}
             className="mt-24"
           >
             <div className="mb-12">
diff --git a/src/components/detail/detail-trust-section.tsx b/src/components/detail/detail-trust-section.tsx
index 55e3706..8d27c94 100644
--- a/src/components/detail/detail-trust-section.tsx
+++ b/src/components/detail/detail-trust-section.tsx
@@ -2,6 +2,7 @@
 
 import { motion, useInView } from 'framer-motion';
 import { useRef, useEffect, useState } from 'react';
+import { useReducedMotion } from '@/hooks/use-reduced-motion';
 import { CaseStudyCard } from './detail-case-study';
 import { CertificationList } from './detail-certification';
 import type { CaseStudy, DataProof, Certification } from '@/lib/constants/products';
@@ -19,6 +20,7 @@ function AnimatedCounter({ value, duration = 2000 }: { value: string; duration?:
   const [displayValue, setDisplayValue] = useState('0');
   const ref = useRef<HTMLDivElement>(null);
   const isInView = useInView(ref, { once: true });
+  const shouldReduceMotion = useReducedMotion();
 
   useEffect(() => {
     if (!isInView) return;
@@ -29,7 +31,19 @@ function AnimatedCounter({ value, duration = 2000 }: { value: string; duration?:
       return;
     }
 
-    const suffix = value.replace(/[0-9.]/g, '');
+    const [, prefix = '', suffix = ''] = value.match(/^([^\d.]*)[\d.]+([^\d.]*)$/) ?? [];
+    const finalText =
+      prefix +
+      (Number.isInteger(numericValue) ? numericValue.toString() : numericValue.toFixed(1)) +
+      suffix;
+
+    // 尊重 prefers-reduced-motion：降级动效用户直接看到终值，不跑 2000ms rAF 计数。
+    // MotionConfig reducedMotion="user" 只管 framer-motion 的动画属性，管不到裸 rAF（S-9）。
+    if (shouldReduceMotion) {
+      setDisplayValue(finalText);
+      return;
+    }
+
     let startTime: number;
     let animationFrame: number;
 
@@ -40,9 +54,11 @@ function AnimatedCounter({ value, duration = 2000 }: { value: string; duration?:
       const currentValue = numericValue * easeOutQuart;
 
       setDisplayValue(
-        Number.isInteger(numericValue)
-          ? Math.floor(currentValue).toString() + suffix
-          : currentValue.toFixed(1) + suffix
+        prefix +
+          (Number.isInteger(numericValue)
+            ? Math.floor(currentValue).toString()
+            : currentValue.toFixed(1)) +
+          suffix
       );
 
       if (progress < 1) {
@@ -53,7 +69,7 @@ function AnimatedCounter({ value, duration = 2000 }: { value: string; duration?:
     animationFrame = requestAnimationFrame(animate);
 
     return () => cancelAnimationFrame(animationFrame);
-  }, [isInView, value, duration]);
+  }, [isInView, value, duration, shouldReduceMotion]);
 
   return (
     <div ref={ref} className="text-3xl sm:text-4xl font-black text-brand-ink tabular-nums leading-none">
@@ -80,7 +96,7 @@ export function DetailTrustSection({
               initial={{ opacity: 0, y: 24 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-80px' }}
-              transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+              transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
               className="mb-12"
             >
               <div className="flex items-center gap-3 mb-6">
@@ -104,7 +120,7 @@ export function DetailTrustSection({
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true, margin: '-60px' }}
                   transition={{
-                    duration: 0.3,
+                    duration: 0.28,
                     delay: index * 0.06,
                     ease: [0.22, 1, 0.36, 1],
                   }}
@@ -129,7 +145,7 @@ export function DetailTrustSection({
               initial={{ opacity: 0, y: 24 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-80px' }}
-              transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+              transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
               className="mb-12"
             >
               <h2 className="text-2xl sm:text-3xl md:text-4xl lg:text-5xl font-black text-ink tracking-tight leading-[0.95]">
@@ -145,7 +161,7 @@ export function DetailTrustSection({
                   whileInView={{ opacity: 1, y: 0 }}
                   viewport={{ once: true, margin: '-60px' }}
                   transition={{
-                    duration: 0.3,
+                    duration: 0.28,
                     delay: index * 0.06,
                     ease: [0.22, 1, 0.36, 1],
                   }}
@@ -162,7 +178,7 @@ export function DetailTrustSection({
             initial={{ opacity: 0, y: 24 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+            transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
             className="text-center"
           >
             <h3 className="text-lg font-semibold text-text-secondary mb-6">资质认证</h3>
diff --git a/src/components/detail/detail.test.tsx b/src/components/detail/detail.test.tsx
index fc0ffb7..7424f8c 100644
--- a/src/components/detail/detail.test.tsx
+++ b/src/components/detail/detail.test.tsx
@@ -1,5 +1,5 @@
 import { describe, it, expect, jest } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
+import { render, screen, act } from '@testing-library/react';
 import '@testing-library/jest-dom';
 
 // ─── Mocks ───────────────────────────────────────────────────────────────
@@ -445,6 +445,61 @@ describe('ProductValueSection', () => {
     expect(screen.queryByText('以可量化的目标约束交付')).not.toBeInTheDocument();
   });
 
+  it('指标计数动画由 effect 驱动并在卸载时取消排队帧（Q-6 回归）', async () => {
+    // Q-6：动画曾在 render 体内 setState + requestAnimationFrame——每帧 setState 又触发
+    // 重渲染并重启一条新动画链，且从不 cancelAnimationFrame；卸载后帧回调继续排队。
+    // 判别面：已排队的帧必须被逐一取消（sched === cancel），旧实现 sched>0 且 cancel=0 必红。
+    jest.useFakeTimers();
+    // faithful rAF 桩：cancel 必须真的撤销已排队的回调，否则「卸载后不再排队」无从判别
+    const pending = new Map<number, ReturnType<typeof setTimeout>>();
+    let handle = 0;
+    const sched = jest.fn((cb: FrameRequestCallback) => {
+      const id = ++handle;
+      pending.set(
+        id,
+        setTimeout(() => {
+          pending.delete(id);
+          cb(Date.now());
+        }, 16),
+      );
+      return id;
+    });
+    const cancel = jest.fn((id: number) => {
+      const t = pending.get(id);
+      if (t) clearTimeout(t);
+      pending.delete(id);
+    });
+    const prevRaf = global.requestAnimationFrame;
+    const prevCancel = global.cancelAnimationFrame;
+    global.requestAnimationFrame = sched as unknown as typeof requestAnimationFrame;
+    global.cancelAnimationFrame = cancel as unknown as typeof cancelAnimationFrame;
+    try {
+      const { ProductValueSection } = await import('./detail-product-value');
+      const { container, unmount } = render(<ProductValueSection product={mockProduct} />);
+      const card = container.querySelector('.tabular-nums') as HTMLElement;
+      expect(card.textContent).toBe('0');
+      await act(async () => {
+        jest.advanceTimersByTime(200);
+      });
+      // 动画真的在推进（中途值），而不是停在 0 或瞬间跳终值
+      expect(card.textContent).not.toBe('0');
+      expect(card.textContent).not.toBe('300%');
+      const scheduledBeforeUnmount = sched.mock.calls.length;
+      expect(scheduledBeforeUnmount).toBeGreaterThan(0);
+      unmount();
+      await act(async () => {
+        jest.advanceTimersByTime(3000);
+      });
+      // 泄漏判别：卸载后动画链必须死透——旧实现（render 期 rAF、从不 cancel）
+      // 在这里会继续排队每一帧；effect 版在 cleanup 里 cancel 掉最后一帧。
+      expect(sched.mock.calls.length).toBe(scheduledBeforeUnmount);
+    } finally {
+      global.requestAnimationFrame = prevRaf;
+      global.cancelAnimationFrame = prevCancel;
+      jest.useRealTimers();
+    }
+  });
+
 });
 
 describe('DetailTrustSection', () => {
diff --git a/src/components/detail/index.ts b/src/components/detail/index.ts
index 973c6f4..05081c8 100644
--- a/src/components/detail/index.ts
+++ b/src/components/detail/index.ts
@@ -20,7 +20,6 @@ export { CertificationsSection } from './detail-certifications-section';
 export { SolutionValueSection } from './solution-value';
 export { ServiceValueSection } from './service-value';
 
-export { ListPageHero } from './list-page-hero';
 export { ProductCard } from './product-card';
 export { SolutionCard } from './solution-service-card';
 
diff --git a/src/components/detail/l3-signals-slot.tsx b/src/components/detail/l3-signals-slot.tsx
index 4b4fc8e..1b54aad 100644
--- a/src/components/detail/l3-signals-slot.tsx
+++ b/src/components/detail/l3-signals-slot.tsx
@@ -129,7 +129,7 @@ function SignalCard({ signal }: { signal: L3Signal }) {
     <div
       className={cn(
         'group relative h-full p-6 sm:p-8 rounded-lg border border-border-primary bg-bg-primary',
-        'transition-all duration-300 ease-out',
+        'transition-all duration-normal ease-out',
         disabled
           ? 'opacity-70 cursor-not-allowed'
           : 'hover:border-brand/40 hover:shadow-md hover:-translate-y-1'
@@ -150,7 +150,7 @@ function SignalCard({ signal }: { signal: L3Signal }) {
         {title}
         {!disabled && (
           <ArrowUpRight
-            className="w-4 h-4 transition-transform duration-300 group-hover:translate-x-0.5 group-hover:-translate-y-0.5"
+            className="w-4 h-4 transition-transform duration-normal group-hover:translate-x-0.5 group-hover:-translate-y-0.5"
             aria-hidden="true"
           />
         )}
diff --git a/src/components/detail/list-page-hero.test.tsx b/src/components/detail/list-page-hero.test.tsx
deleted file mode 100644
index 5ad294c..0000000
--- a/src/components/detail/list-page-hero.test.tsx
+++ /dev/null
@@ -1,152 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect, jest } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-
-// ─── Mocks ───────────────────────────────────────────────────────────────
-
-jest.mock('framer-motion', () => ({
-  motion: {
-    div: ({ children, initial, animate, variants, whileInView, viewport, transition, className, ...props }: any) => (
-      <div
-        data-testid="motion-div"
-        data-initial={JSON.stringify(initial)}
-        data-animate={JSON.stringify(animate)}
-        data-variants={JSON.stringify(variants)}
-        data-while-inview={JSON.stringify(whileInView)}
-        data-viewport={JSON.stringify(viewport)}
-        data-transition={JSON.stringify(transition)}
-        className={className}
-        {...props}
-      >
-        {children}
-      </div>
-    ),
-    h1: ({ children, className, ...props }: any) => (
-      <h1 data-testid="motion-h1" className={className} {...props}>{children}</h1>
-    ),
-    p: ({ children, className, ...props }: any) => (
-      <p data-testid="motion-p" className={className} {...props}>{children}</p>
-    ),
-  },
-  useInView: jest.fn(() => true),
-  AnimatePresence: ({ children }: any) => <>{children}</>,
-}));
-
-jest.mock('@/hooks/use-reduced-motion', () => ({
-  useReducedMotion: jest.fn(() => false),
-}));
-
-// ─── Tests ───────────────────────────────────────────────────────────────
-
-describe('ListPageHero', () => {
-  it('should render title', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(<ListPageHero title="产品服务" subtitle="企业数字化转型全方位解决方案" />);
-    expect(screen.getByText('产品服务')).toBeInTheDocument();
-  });
-
-  it('should render subtitle', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(<ListPageHero title="产品服务" subtitle="企业数字化转型全方位解决方案" />);
-    expect(screen.getByText('企业数字化转型全方位解决方案')).toBeInTheDocument();
-  });
-
-  it('should render description when provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(
-      <ListPageHero
-        title="产品服务"
-        subtitle="企业数字化转型全方位解决方案"
-        description="覆盖企业全业务场景的产品矩阵"
-      />
-    );
-    expect(screen.getByText('覆盖企业全业务场景的产品矩阵')).toBeInTheDocument();
-  });
-
-  it('should not render description when not provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(<ListPageHero title="产品服务" subtitle="企业数字化转型全方位解决方案" />);
-    expect(screen.queryByText('覆盖企业全业务场景的产品矩阵')).not.toBeInTheDocument();
-  });
-
-  it('should render badge when provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(
-      <ListPageHero
-        title="产品服务"
-        subtitle="企业数字化转型全方位解决方案"
-        badge={{ text: '新品发布', variant: 'brand' }}
-      />
-    );
-    expect(screen.getByText('新品发布')).toBeInTheDocument();
-  });
-
-  it('should not render badge when not provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(<ListPageHero title="产品服务" subtitle="企业数字化转型全方位解决方案" />);
-    expect(screen.queryByText('新品发布')).not.toBeInTheDocument();
-  });
-
-  it('should render stats when provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    const stats = [
-      { value: '6', label: '企业套装' },
-      { value: '3', label: '专业产品' },
-    ];
-    render(
-      <ListPageHero
-        title="产品服务"
-        subtitle="企业数字化转型全方位解决方案"
-        stats={stats}
-      />
-    );
-    expect(screen.getByText('6')).toBeInTheDocument();
-    expect(screen.getByText('企业套装')).toBeInTheDocument();
-    expect(screen.getByText('3')).toBeInTheDocument();
-    expect(screen.getByText('专业产品')).toBeInTheDocument();
-  });
-
-  it('should not render stats when not provided', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(<ListPageHero title="产品服务" subtitle="企业数字化转型全方位解决方案" />);
-    expect(screen.queryByText('6')).not.toBeInTheDocument();
-  });
-
-  it('should render with badge variant "blue"', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(
-      <ListPageHero
-        title="解决方案"
-        subtitle="行业解决方案"
-        badge={{ text: '推荐', variant: 'blue' }}
-      />
-    );
-    expect(screen.getByText('推荐')).toBeInTheDocument();
-  });
-
-  it('should render with badge variant "green"', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(
-      <ListPageHero
-        title="服务"
-        subtitle="专业服务"
-        badge={{ text: '热门', variant: 'green' }}
-      />
-    );
-    expect(screen.getByText('热门')).toBeInTheDocument();
-  });
-
-  it('should render with badge variant "neutral"', async () => {
-    const { ListPageHero } = await import('./list-page-hero');
-    render(
-      <ListPageHero
-        title="案例"
-        subtitle="客户案例"
-        badge={{ text: '案例', variant: 'neutral' }}
-      />
-    );
-    const neutralBadges = screen.getAllByText('案例');
-    expect(neutralBadges.length).toBeGreaterThanOrEqual(1);
-  });
-});
\ No newline at end of file
diff --git a/src/components/detail/list-page-hero.tsx b/src/components/detail/list-page-hero.tsx
deleted file mode 100644
index 11ac108..0000000
--- a/src/components/detail/list-page-hero.tsx
+++ /dev/null
@@ -1,166 +0,0 @@
-'use client';
-
-import { motion } from 'framer-motion';
-import { useReducedMotion } from '@/hooks/use-reduced-motion';
-
-interface ListPageHeroProps {
-  title: string;
-  subtitle: string;
-  description?: string;
-  stats?: Array<{ value: string; label: string }>;
-  badge?: {
-    text: string;
-    variant?: 'brand' | 'blue' | 'green' | 'neutral';
-  };
-}
-
-const BADGE_VARIANTS = {
-  brand: {
-    bg: 'var(--color-brand-bg)',
-    text: 'var(--color-brand)',
-    border: 'rgba(var(--color-brand-rgb), 0.15)',
-    dot: 'var(--color-brand)',
-  },
-  blue: {
-    bg: 'rgba(var(--color-accent-blue-rgb), 0.08)',
-    text: 'var(--color-accent-blue)',
-    border: 'rgba(var(--color-accent-blue-rgb), 0.15)',
-    dot: 'var(--color-accent-blue)',
-  },
-  green: {
-    bg: 'rgba(34, 197, 94, 0.08)',
-    text: '#16a34a',
-    border: 'rgba(34, 197, 94, 0.15)',
-    dot: '#22c55e',
-  },
-  neutral: {
-    bg: 'var(--color-bg-section)',
-    text: 'var(--color-text-secondary)',
-    border: 'var(--color-border-primary)',
-    dot: 'var(--color-text-subtle)',
-  },
-};
-
-export function ListPageHero({
-  title,
-  subtitle,
-  description,
-  stats,
-  badge,
-}: ListPageHeroProps) {
-  const shouldReduceMotion = useReducedMotion();
-  const badgeStyle = BADGE_VARIANTS[badge?.variant || 'brand'];
-
-  return (
-    <section className="relative overflow-hidden">
-      {/* Multi-layer background */}
-      <div className="absolute inset-0 bg-gradient-to-br from-[var(--color-bg-section)] via-[var(--color-bg-secondary)] to-[var(--color-bg-section)]" />
-      <div className="absolute inset-0 bg-[radial-gradient(ellipse_at_top_right,_rgba(var(--color-brand-rgb),_0.05)_0%,_transparent_50%)]" />
-      <div className="absolute inset-0 bg-[radial-gradient(ellipse_at_bottom_left,_rgba(var(--color-brand-rgb),_0.03)_0%,_transparent_50%)]" />
-
-      {/* Subtle grid texture */}
-      <div
-        className="absolute inset-0 opacity-[0.03]"
-        style={{
-          backgroundImage:
-            'linear-gradient(rgba(var(--color-border-primary-rgb), 0.5) 1px, transparent 1px), linear-gradient(90deg, rgba(var(--color-border-primary-rgb), 0.5) 1px, transparent 1px)',
-          backgroundSize: '60px 60px',
-        }}
-        aria-hidden="true"
-      />
-
-      {/* Decorative accent line */}
-      <div className="absolute top-0 left-0 right-0 h-px" style={{ background: 'linear-gradient(90deg, transparent, var(--color-brand), transparent)' }} aria-hidden="true" />
-
-      <div className="container-wide relative z-10 py-20 lg:py-28">
-        <motion.div
-          initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
-          whileInView={{ opacity: 1, y: 0 }}
-          viewport={{ once: true }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-          className="max-w-4xl mx-auto text-center"
-        >
-          {/* Dynamic Badge */}
-          {badge && badge.text && (
-            <motion.div
-              initial={shouldReduceMotion ? {} : { opacity: 0, scale: 0.95, y: 8 }}
-              whileInView={{ opacity: 1, scale: 1, y: 0 }}
-              viewport={{ once: true }}
-              transition={{ delay: 0.1, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-              className="inline-flex items-center gap-2 px-4 py-1.5 rounded-full text-sm font-medium mb-6 backdrop-blur-sm"
-              style={{ backgroundColor: badgeStyle.bg, color: badgeStyle.text, border: `1px solid ${badgeStyle.border}` }}
-            >
-              <span className="w-2 h-2 rounded-full animate-pulse" style={{ backgroundColor: badgeStyle.dot }} />
-              {badge?.text || ''}
-            </motion.div>
-          )}
-
-          {/* Title */}
-          <motion.h1
-            initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
-            whileInView={{ opacity: 1, y: 0 }}
-            viewport={{ once: true }}
-            transition={{ delay: 0.15, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-            className="text-4xl md:text-5xl lg:text-6xl font-bold tracking-tight mb-6 text-[var(--color-text-primary)]"
-          >
-            {title}
-          </motion.h1>
-
-          {/* Subtitle */}
-          <motion.p
-            initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
-            whileInView={{ opacity: 1, y: 0 }}
-            viewport={{ once: true }}
-            transition={{ delay: 0.25, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-            className="text-lg md:text-xl max-w-2xl mx-auto leading-relaxed mb-4 text-[var(--color-text-secondary)]"
-          >
-            {subtitle}
-          </motion.p>
-
-          {/* Description */}
-          {description && (
-            <motion.p
-              initial={shouldReduceMotion ? {} : { opacity: 0, y: 18 }}
-              whileInView={{ opacity: 1, y: 0 }}
-              viewport={{ once: true }}
-              transition={{ delay: 0.35, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-              className="text-base max-w-xl mx-auto mb-10 text-[var(--color-text-muted)]"
-            >
-              {description}
-            </motion.p>
-          )}
-
-          {/* Stats Row */}
-          {stats && stats.length > 0 && (
-            <motion.div
-              initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
-              whileInView={{ opacity: 1, y: 0 }}
-              viewport={{ once: true }}
-              transition={{ delay: 0.4, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-              className="flex flex-wrap justify-center gap-8 md:gap-12 mt-12 pt-12 border-t border-[var(--color-border-primary)]"
-            >
-              {stats.map((stat, index) => (
-                <motion.div
-                  key={stat.label}
-                  initial={shouldReduceMotion ? {} : { opacity: 0, scale: 0.95 }}
-                  whileInView={{ opacity: 1, scale: 1 }}
-                  viewport={{ once: true }}
-                  transition={{ delay: 0.5 + index * 0.08, duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
-                  className="text-center min-w-[100px]"
-                >
-                  <div className="text-3xl md:text-4xl font-bold tracking-tight text-[var(--color-text-primary)]">
-                    {stat.value}
-                  </div>
-                  <div className="text-sm mt-1 text-[var(--color-text-subtle)]">{stat.label}</div>
-                </motion.div>
-              ))}
-            </motion.div>
-          )}
-        </motion.div>
-      </div>
-
-      {/* Bottom fade */}
-      <div className="absolute bottom-0 left-0 right-0 h-20 bg-gradient-to-t from-[var(--color-bg-primary)] to-transparent pointer-events-none" aria-hidden="true" />
-    </section>
-  );
-}
diff --git a/src/components/detail/micro-interactions.test.tsx b/src/components/detail/micro-interactions.test.tsx
new file mode 100644
index 0000000..419f973
--- /dev/null
+++ b/src/components/detail/micro-interactions.test.tsx
@@ -0,0 +1,30 @@
+import { describe, it, expect } from '@jest/globals';
+import { render } from '@testing-library/react';
+import '@testing-library/jest-dom';
+import { PressableButton } from './micro-interactions';
+
+// S-5 回归：带 href 的 PressableButton 必须渲染单个 <a>（可导航），而不是把 <button> 嵌进 <a>
+// —— 旧实现 `<a><motion.button/></a>` 是无效交互嵌套，SR 会同时播报「链接 + 按钮」。
+// 旧码下 `container.querySelector('button')` 不为 null ⇒ 本用例判红（真判别）。
+describe('PressableButton (S-5)', () => {
+  it('renders a single anchor (no nested button) when href is provided', () => {
+    const { container } = render(
+      <PressableButton href="/products/erp" variant="primary">
+        了解更多
+      </PressableButton>
+    );
+    const anchor = container.querySelector('a[href="/products/erp"]');
+    expect(anchor).not.toBeNull();
+    expect(container.querySelector('button')).toBeNull();
+  });
+
+  it('renders a button (not an anchor) when no href is provided', () => {
+    const { container } = render(
+      <PressableButton variant="secondary" onClick={() => {}}>
+        点击
+      </PressableButton>
+    );
+    expect(container.querySelector('button')).not.toBeNull();
+    expect(container.querySelector('a')).toBeNull();
+  });
+});
diff --git a/src/components/detail/micro-interactions.tsx b/src/components/detail/micro-interactions.tsx
index d7799cd..bf6ddc1 100644
--- a/src/components/detail/micro-interactions.tsx
+++ b/src/components/detail/micro-interactions.tsx
@@ -129,31 +129,28 @@ export function PressableButton({
       'bg-transparent text-brand-ink hover:bg-brand/5',
   };
 
-  const content = (
-    <motion.button
-      whileHover={{ y: -1 }}
-      whileTap={{ scale: 0.97, y: 0 }}
-      transition={{
-        type: 'spring',
-        stiffness: 400,
-        damping: 25,
-      }}
-      onClick={onClick}
-      className={`inline-flex items-center gap-2 px-6 py-3 font-semibold rounded-md transition-all duration-fast ease-standard ${baseStyles[variant]} ${className}`}
-    >
-      {children}
-    </motion.button>
-  );
+  const sharedCls = `inline-flex items-center gap-2 px-6 py-3 font-semibold rounded-md transition-all duration-fast ease-standard ${baseStyles[variant]} ${className}`;
+  const pressMotion = {
+    whileHover: { y: -1 },
+    whileTap: { scale: 0.97, y: 0 },
+    transition: { type: 'spring' as const, stiffness: 400, damping: 25 },
+  };
 
+  // 有 href 时渲染单个 <a>（motion.a），而不是把 <button> 嵌进 <a>——后者是无效交互嵌套，
+  // 屏幕阅读器会同时播报「链接 + 按钮」两个控件，Enter/Space 激活语义含糊（S-5）。
   if (href) {
     return (
-      <a href={href} className="inline-block">
-        {content}
-      </a>
+      <motion.a href={href} onClick={onClick} className={sharedCls} {...pressMotion}>
+        {children}
+      </motion.a>
     );
   }
 
-  return content;
+  return (
+    <motion.button onClick={onClick} className={sharedCls} {...pressMotion}>
+      {children}
+    </motion.button>
+  );
 }
 
 interface HoverLinkProps {
diff --git a/src/components/detail/product-card.tsx b/src/components/detail/product-card.tsx
index 0d07ea9..9182d61 100644
--- a/src/components/detail/product-card.tsx
+++ b/src/components/detail/product-card.tsx
@@ -24,13 +24,13 @@ export function ProductCard({ product }: ProductCardProps) {
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true }}
       transition={{
-        duration: 0.3,
+        duration: 0.28,
         ease: [0.22, 1, 0.36, 1] as const,
       }}
       className="group"
     >
       <Link href={`/products/${product.id}`} className="block">
-        <div className="relative h-full rounded-2xl bg-bg-elevated border border-border-primary overflow-hidden hover:border-brand/30 hover:shadow-lg hover:-translate-y-1 transition-all duration-300">
+        <div className="relative h-full rounded-2xl bg-bg-elevated border border-border-primary overflow-hidden hover:border-brand/30 hover:shadow-lg hover:-translate-y-1 transition-all duration-normal">
           <div className="aspect-video relative overflow-hidden bg-bg-secondary">
             <Image
               src={product.image}
diff --git a/src/components/detail/service-value.tsx b/src/components/detail/service-value.tsx
index 94dc2e3..9b1f74d 100644
--- a/src/components/detail/service-value.tsx
+++ b/src/components/detail/service-value.tsx
@@ -26,7 +26,7 @@ export function ServiceValueSection({ service }: ServiceValueSectionProps) {
           initial={{ opacity: 0, y: 32 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-120px' }}
-          transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+          transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
           className="mb-16 sm:mb-20"
         >
           <div className="flex items-center gap-3 mb-6">
@@ -63,7 +63,7 @@ export function ServiceValueSection({ service }: ServiceValueSectionProps) {
                   viewport={{ once: true }}
                   transition={{
                     delay: index * 0.06,
-                    duration: 0.3,
+                    duration: 0.28,
                     ease: [0.22, 1, 0.36, 1],
                   }}
                   className="bain-card p-6"
@@ -105,7 +105,7 @@ export function ServiceValueSection({ service }: ServiceValueSectionProps) {
                   viewport={{ once: true }}
                   transition={{
                     delay: index * 0.06,
-                    duration: 0.3,
+                    duration: 0.28,
                     ease: [0.22, 1, 0.36, 1],
                   }}
                   className="bain-card p-5 flex items-start gap-3"
@@ -135,7 +135,7 @@ export function ServiceValueSection({ service }: ServiceValueSectionProps) {
                     viewport={{ once: true }}
                     transition={{
                       delay: index * 0.06,
-                      duration: 0.3,
+                      duration: 0.28,
                       ease: [0.22, 1, 0.36, 1],
                     }}
                     className="bain-card p-5"
diff --git a/src/components/detail/solution-service-card.tsx b/src/components/detail/solution-service-card.tsx
index a9f926e..fd13209 100644
--- a/src/components/detail/solution-service-card.tsx
+++ b/src/components/detail/solution-service-card.tsx
@@ -37,13 +37,13 @@ export function SolutionCard({ solution }: SolutionCardProps) {
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true }}
       transition={{
-        duration: 0.3,
+        duration: 0.28,
         ease: [0.22, 1, 0.36, 1] as const,
       }}
       className="group"
     >
       <Link href={`/solutions/${solution.id}`} className="block">
-        <div className="relative h-full rounded-2xl bg-bg-elevated border border-border-primary overflow-hidden hover:border-brand/30 hover:shadow-lg hover:-translate-y-1 transition-all duration-300">
+        <div className="relative h-full rounded-2xl bg-bg-elevated border border-border-primary overflow-hidden hover:border-brand/30 hover:shadow-lg hover:-translate-y-1 transition-all duration-normal">
           <div className="aspect-video relative overflow-hidden bg-bg-secondary flex items-center justify-center">
             {solution.image ? (
               <Image
@@ -117,19 +117,19 @@ export function ServiceCard({ service }: ServiceCardProps) {
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true }}
       transition={{
-        duration: 0.3,
+        duration: 0.28,
         ease: [0.22, 1, 0.36, 1] as const,
       }}
       className="group"
     >
       <Link href={`/services/${service.id}`} className="block">
-        <div className="relative h-full rounded-2xl bg-bg-secondary border border-border-primary overflow-hidden hover:border-blue-300 hover:shadow-lg hover:-translate-y-1 transition-all duration-300">
+        <div className="relative h-full rounded-2xl bg-bg-secondary border border-border-primary overflow-hidden hover:border-brand/30 hover:shadow-lg hover:-translate-y-1 transition-all duration-normal">
           <div className="p-8">
-            <div className="w-14 h-14 rounded-2xl bg-gradient-to-br from-[var(--color-accent-blue)] to-[#1d4ed8] flex items-center justify-center mb-5 shadow-md shadow-brand group-hover:scale-110 transition-transform">
-              <Cpu className="w-7 h-7 text-white" />
+            <div className="w-14 h-14 rounded-2xl bg-accent-blue-soft flex items-center justify-center mb-5 shadow-sm group-hover:scale-110 transition-transform">
+              <Cpu className="w-7 h-7 text-accent-blue" />
             </div>
 
-            <h3 className="text-xl font-bold text-ink mb-3 group-hover:text-blue-600 transition-colors">
+            <h3 className="text-xl font-bold text-ink mb-3 group-hover:text-brand-ink transition-colors">
               {service.title}
             </h3>
 
@@ -142,7 +142,7 @@ export function ServiceCard({ service }: ServiceCardProps) {
                 {service.features.slice(0, 3).map((feature) => (
                   <span
                     key={feature}
-                    className="px-2.5 py-1 rounded-md text-xs font-medium bg-bg-elevated text-blue-600 border border-border-primary"
+                    className="px-2.5 py-1 rounded-md text-xs font-medium bg-bg-elevated text-text-secondary border border-border-primary"
                   >
                     {feature.split('：')[0]}
                   </span>
@@ -150,7 +150,7 @@ export function ServiceCard({ service }: ServiceCardProps) {
               </div>
             )}
 
-            <div className="flex items-center gap-2 text-sm font-semibold text-blue-600 group-hover:gap-3 transition-all">
+            <div className="flex items-center gap-2 text-sm font-semibold text-brand-ink group-hover:gap-3 transition-all">
               了解服务
               <ArrowRight className="w-4 h-4" />
             </div>
diff --git a/src/components/detail/solution-value.tsx b/src/components/detail/solution-value.tsx
index a2736f1..6008906 100644
--- a/src/components/detail/solution-value.tsx
+++ b/src/components/detail/solution-value.tsx
@@ -21,7 +21,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
           initial={{ opacity: 0, y: 32 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-120px' }}
-          transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+          transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
           className="mb-16 sm:mb-20"
         >
           <div className="flex items-center gap-3 mb-6">
@@ -45,7 +45,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
             initial={{ opacity: 0, x: -30 }}
             whileInView={{ opacity: 1, x: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
+            transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
           >
             <div className="bain-card p-8">
               <h3 className="text-xl font-bold text-ink mb-6 flex items-center gap-3">
@@ -63,7 +63,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
                     viewport={{ once: true }}
                     transition={{
                       delay: index * 0.06,
-                      duration: 0.3,
+                      duration: 0.28,
                       ease: [0.22, 1, 0.36, 1],
                     }}
                     className="flex items-start gap-3 text-text-secondary"
@@ -81,7 +81,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
             initial={{ opacity: 0, x: 30 }}
             whileInView={{ opacity: 1, x: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.15, ease: [0.22, 1, 0.36, 1] }}
+            transition={{ duration: 0.28, delay: 0.15, ease: [0.22, 1, 0.36, 1] }}
           >
             <div className="bain-card p-8">
               <h3 className="text-xl font-bold text-ink mb-6 flex items-center gap-3">
@@ -99,7 +99,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
                     viewport={{ once: true }}
                     transition={{
                       delay: 0.25 + index * 0.08,
-                      duration: 0.3,
+                      duration: 0.28,
                       ease: [0.22, 1, 0.36, 1],
                     }}
                     className="flex items-start gap-3 text-text-secondary"
@@ -119,7 +119,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
             initial={{ opacity: 0, y: 32 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.3 }}
+            transition={{ duration: 0.28, delay: 0.3 }}
           >
             <div className="mb-12">
               <div className="flex items-center gap-3 mb-6">
@@ -142,7 +142,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
                   viewport={{ once: true }}
                   transition={{
                     delay: index * 0.06,
-                    duration: 0.3,
+                    duration: 0.28,
                     ease: [0.22, 1, 0.36, 1],
                   }}
                   className="bain-card p-7"
@@ -164,7 +164,7 @@ export function SolutionValueSection({ solution }: SolutionValueSectionProps) {
             initial={{ opacity: 0, y: 32 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true, margin: '-80px' }}
-            transition={{ duration: 0.3, delay: 0.4 }}
+            transition={{ duration: 0.28, delay: 0.4 }}
             className="mt-20"
           >
             <div className="mb-12">
diff --git a/src/components/examples/ContactFormAnalyticsExample.tsx b/src/components/examples/ContactFormAnalyticsExample.tsx
deleted file mode 100644
index 4689024..0000000
--- a/src/components/examples/ContactFormAnalyticsExample.tsx
+++ /dev/null
@@ -1,107 +0,0 @@
-'use client';
-
-import { useState } from 'react';
-import { trackContactForm } from '@/lib/analytics';
-
-export function ContactFormAnalyticsExample() {
-  const [formData, setFormData] = useState({
-    name: '',
-    email: '',
-    phone: '',
-    company: '',
-    message: ''
-  });
-
-  const handleSubmit = async (e: React.FormEvent) => {
-    e.preventDefault();
-
-    try {
-      // 追踪表单提交
-      trackContactForm(formData);
-
-      // 提交表单逻辑...
-      console.log('Form submitted:', formData);
-
-    } catch (error) {
-      console.error('Form submission error:', error);
-    }
-  };
-
-  return (
-    <form onSubmit={handleSubmit} className="space-y-4">
-      <div>
-        <label htmlFor="name" className="block text-sm font-medium mb-1">
-          姓名
-        </label>
-        <input
-          id="name"
-          type="text"
-          value={formData.name}
-          onChange={(e) => setFormData({ ...formData, name: e.target.value })}
-          className="w-full px-3 py-2 border rounded-lg"
-          required
-        />
-      </div>
-
-      <div>
-        <label htmlFor="email" className="block text-sm font-medium mb-1">
-          邮箱
-        </label>
-        <input
-          id="email"
-          type="email"
-          value={formData.email}
-          onChange={(e) => setFormData({ ...formData, email: e.target.value })}
-          className="w-full px-3 py-2 border rounded-lg"
-          required
-        />
-      </div>
-
-      <div>
-        <label htmlFor="phone" className="block text-sm font-medium mb-1">
-          电话
-        </label>
-        <input
-          id="phone"
-          type="tel"
-          value={formData.phone}
-          onChange={(e) => setFormData({ ...formData, phone: e.target.value })}
-          className="w-full px-3 py-2 border rounded-lg"
-        />
-      </div>
-
-      <div>
-        <label htmlFor="company" className="block text-sm font-medium mb-1">
-          公司
-        </label>
-        <input
-          id="company"
-          type="text"
-          value={formData.company}
-          onChange={(e) => setFormData({ ...formData, company: e.target.value })}
-          className="w-full px-3 py-2 border rounded-lg"
-        />
-      </div>
-
-      <div>
-        <label htmlFor="message" className="block text-sm font-medium mb-1">
-          留言内容
-        </label>
-        <textarea
-          id="message"
-          value={formData.message}
-          onChange={(e) => setFormData({ ...formData, message: e.target.value })}
-          className="w-full px-3 py-2 border rounded-lg h-32"
-          required
-        />
-      </div>
-
-      <button
-        type="submit"
-        className="w-full bg-blue-600 text-white py-2 px-4 rounded-lg hover:bg-blue-700 transition-colors"
-      >
-        提交
-      </button>
-    </form>
-  );
-}
diff --git a/src/components/layout/footer.tsx b/src/components/layout/footer.tsx
index 47ecb9b..c4c9dc2 100644
--- a/src/components/layout/footer.tsx
+++ b/src/components/layout/footer.tsx
@@ -168,7 +168,7 @@ export function Footer() {
           </div>
         </div>
 
-        <div className="border-t border-dark-border pt-6 pb-[calc(8rem+env(safe-area-inset-bottom,0px))] md:pb-8">
+        <div className="border-t border-dark-border pt-6 pb-8">
           <div className="flex flex-col md:flex-row justify-between items-start md:items-center gap-6 mb-6">
             <p className="text-dark-text-secondary text-xs">
               © {new Date().getFullYear()} {config.name}. 版权所有.
diff --git a/src/components/layout/header.test.tsx b/src/components/layout/header.test.tsx
index 80b81fa..4c52fb8 100644
--- a/src/components/layout/header.test.tsx
+++ b/src/components/layout/header.test.tsx
@@ -1,9 +1,10 @@
 import { describe, it, expect, jest, beforeEach, afterEach } from '@jest/globals';
-import { render, screen, fireEvent, waitFor } from '@testing-library/react';
+import { render, screen, fireEvent, waitFor, within, act } from '@testing-library/react';
 import '@testing-library/jest-dom';
 
 const mockPush = jest.fn();
 const mockReplace = jest.fn();
+const mockUseFocusTrap = jest.fn((_isActive: boolean, _options?: unknown) => ({ current: null }));
 
 jest.mock('next/navigation', () => ({
   usePathname: jest.fn(() => '/'),
@@ -128,7 +129,7 @@ jest.mock('@/lib/constants', () => ({
 }));
 
 jest.mock('@/hooks/use-focus-trap', () => ({
-  useFocusTrap: () => ({ current: null }),
+  useFocusTrap: (isActive: boolean, options?: unknown) => mockUseFocusTrap(isActive, options),
 }));
 
 jest.mock('@/components/layout/mega-dropdown', () => ({
@@ -236,12 +237,71 @@ describe('Header', () => {
     it('should have proper ARIA attributes on menu button', () => {
       render(<Header />);
       const menuButton = screen.getByTestId('mobile-menu-button');
-      
+
       expect(menuButton).toHaveAttribute('aria-expanded', 'false');
-      expect(menuButton).toHaveAttribute('aria-controls', 'mobile-menu');
       expect(menuButton).toHaveAttribute('aria-label', '打开菜单');
     });
 
+    it('should not expose a dangling aria-controls target while the drawer is closed', () => {
+      render(<Header />);
+      const menuButton = screen.getByTestId('mobile-menu-button');
+
+      // aria-controls 指向只存在于 {isOpen && …} 内的 id；关闭时必须撤掉，
+      // 否则 AT 解析到一个不存在的节点。
+      expect(menuButton).not.toHaveAttribute('aria-controls');
+      expect(document.getElementById('mobile-menu')).toBeNull();
+    });
+
+    it('should point aria-controls at a real element once the drawer is open', async () => {
+      render(<Header />);
+      const menuButton = screen.getByTestId('mobile-menu-button');
+
+      fireEvent.click(menuButton);
+
+      await waitFor(() => {
+        expect(menuButton).toHaveAttribute('aria-controls', 'mobile-menu');
+      });
+      const target = document.getElementById(menuButton.getAttribute('aria-controls') as string);
+      expect(target).not.toBeNull();
+      expect(target).toBe(screen.getByTestId('mobile-navigation'));
+    });
+
+    it('should hand Escape back to the drawer owner through useFocusTrap onEscape', async () => {
+      render(<Header />);
+      const menuButton = screen.getByTestId('mobile-menu-button');
+      fireEvent.click(menuButton);
+      await waitFor(() => {
+        expect(screen.getByTestId('mobile-navigation')).toBeInTheDocument();
+      });
+
+      const options = mockUseFocusTrap.mock.calls
+        .map((call) => call[1] as { onEscape?: () => void } | undefined)
+        .find((call) => typeof call?.onEscape === 'function');
+      expect(options?.onEscape).toBeInstanceOf(Function);
+
+      // 焦点归还/关闭由调用方决定：onEscape 必须真的关闭抽屉。
+      act(() => {
+        options?.onEscape?.();
+      });
+      await waitFor(() => {
+        expect(screen.queryByTestId('mobile-navigation')).not.toBeInTheDocument();
+      });
+    });
+
+    it('should render the theme toggle inside the mobile drawer with a >=44px target', async () => {
+      render(<Header />);
+      fireEvent.click(screen.getByTestId('mobile-menu-button'));
+      await waitFor(() => {
+        expect(screen.getByTestId('mobile-navigation')).toBeInTheDocument();
+      });
+
+      const drawer = screen.getByTestId('mobile-navigation');
+      const toggle = within(drawer).getByTestId('theme-toggle');
+      // w-11 / h-11 = 2.75rem = 44px（Tailwind 默认刻度）
+      expect(toggle).toHaveClass('w-11');
+      expect(toggle).toHaveClass('h-11');
+    });
+
     it('should update aria-expanded when menu is toggled', async () => {
       render(<Header />);
       const menuButton = screen.getByTestId('mobile-menu-button');
diff --git a/src/components/layout/header.tsx b/src/components/layout/header.tsx
index 07a594f..8c62cec 100644
--- a/src/components/layout/header.tsx
+++ b/src/components/layout/header.tsx
@@ -18,7 +18,9 @@ function HeaderContent() {
   const [isScrolled, setIsScrolled] = useState(false);
   const [openDropdown, setOpenDropdown] = useState<string | null>(null);
   const pathname = usePathname();
-  const focusTrapRef = useFocusTrap<HTMLDivElement>(isOpen);
+  const focusTrapRef = useFocusTrap<HTMLDivElement>(isOpen, {
+    onEscape: () => setIsOpen(false),
+  });
 
   useEffect(() => {
     const handleScroll = () => {
@@ -86,8 +88,8 @@ function HeaderContent() {
         animate={{
           height: isScrolled ? 64 : 80,
         }}
-        transition={{ duration: 0.3, ease: [0.22, 1, 0.36, 1] }}
-        className="fixed top-0 left-0 right-0 z-50 transition-colors duration-300 bg-bg-primary border-b border-border-primary"
+        transition={{ duration: 0.28, ease: [0.22, 1, 0.36, 1] }}
+        className="fixed top-0 left-0 right-0 z-50 transition-colors duration-normal bg-bg-primary border-b border-border-primary"
       >
         <div className="max-w-container mx-auto px-4 sm:px-6 lg:px-10">
           <div className="flex items-center justify-between h-16 md:h-full">
@@ -103,7 +105,7 @@ function HeaderContent() {
                 alt={config.name}
                 width={160}
                 height={40}
-                className="logo-on-light relative transition-all duration-300 ease-out group-hover/logo:scale-[1.02] w-auto h-8 md:h-10"
+                className="logo-on-light relative transition-all duration-normal ease-out group-hover/logo:scale-[1.02] w-auto h-8 md:h-10"
                 loading="eager"
                 priority
                 suppressHydrationWarning
@@ -113,7 +115,7 @@ function HeaderContent() {
                 alt={config.name}
                 width={160}
                 height={40}
-                className="logo-on-dark relative transition-all duration-300 ease-out group-hover/logo:scale-[1.02] w-auto h-8 md:h-10"
+                className="logo-on-dark relative transition-all duration-normal ease-out group-hover/logo:scale-[1.02] w-auto h-8 md:h-10"
                 loading="eager"
                 suppressHydrationWarning
               />
@@ -141,7 +143,7 @@ function HeaderContent() {
                       onClick={handleNavClick}
                       className={cn(
                         'relative inline-flex items-center px-3 py-2 text-sm font-medium',
-                        'transition-all duration-300 ease-out',
+                        'transition-all duration-normal ease-out',
                         isActive(item)
                           ? 'text-text-primary'
                           : 'text-text-secondary hover:text-text-primary hover:bg-bg-secondary'
@@ -152,7 +154,7 @@ function HeaderContent() {
                       <span
                         className={cn(
                           'absolute -bottom-0.5 left-3 right-3 h-0.5 bg-brand',
-                          'transition-all duration-300 ease-out',
+                          'transition-all duration-normal ease-out',
                           isActive(item)
                             ? 'opacity-100 scale-x-100'
                             : 'opacity-0 scale-x-0'
@@ -180,11 +182,12 @@ function HeaderContent() {
             </div>
 
             <button
-              className="md:hidden p-2 -mr-2 text-text-secondary hover:text-text-primary hover:bg-bg-secondary rounded-sm transition-all duration-300 ease-out active:scale-95"
-              onClick={() => setIsOpen(!isOpen)}
+              className="md:hidden p-2 -mr-2 text-text-secondary hover:text-text-primary hover:bg-bg-secondary rounded-sm transition-all duration-normal ease-out active:scale-95"
+              onClick={() => setIsOpen((prev) => !prev)}
               onKeyDown={handleKeyDown}
               aria-expanded={isOpen}
-              aria-controls="mobile-menu"
+              /* 面板仅在 isOpen 时挂载：关闭时不给 aria-controls，避免指向不存在的 id。 */
+              aria-controls={isOpen ? 'mobile-menu' : undefined}
               aria-label={isOpen ? '关闭菜单' : '打开菜单'}
               data-testid="mobile-menu-button"
               style={{ minWidth: '44px', minHeight: '44px' }}
@@ -221,6 +224,12 @@ function HeaderContent() {
               aria-label="移动端导航"
               data-testid="mobile-navigation"
             >
+              {/* 桌面端 ThemeToggle 在 `hidden md:flex` 容器内，移动端只有抽屉可达；
+                  w-11 h-11 = 44px，满足触摸目标下限。放在 nav 之外，避免混入导航链接列表。 */}
+              <div className="max-w-container mx-auto px-4 sm:px-6 pt-6 flex items-center justify-between">
+                <span className="text-sm text-text-secondary">外观主题</span>
+                <ThemeToggle className="w-11 h-11" />
+              </div>
               <nav className="max-w-container mx-auto px-4 sm:px-6 py-6">
                 {config.mainNav.map((item, index) => (
                   <motion.div
@@ -234,7 +243,7 @@ function HeaderContent() {
                       onClick={handleNavClick}
                       className={`
                         block px-4 py-4 text-base font-medium
-                        transition-all duration-300 ease-out
+                        transition-all duration-normal ease-out
                         ${isActive(item)
                           ? 'text-text-primary bg-bg-secondary'
                           : 'text-text-secondary hover:text-text-primary hover:bg-bg-secondary'
diff --git a/src/components/layout/index.ts b/src/components/layout/index.ts
deleted file mode 100644
index a4e0089..0000000
--- a/src/components/layout/index.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-export { Header } from './header';
-export { Footer } from './footer';
-export { Breadcrumb } from './breadcrumb';
-export { MobileTabBar } from './mobile-tab-bar';
-export { MegaDropdown } from './mega-dropdown';
-export { PageNav } from './page-nav';
-export { ClientLayout } from './client-layout';
diff --git a/src/components/layout/mega-dropdown.test.tsx b/src/components/layout/mega-dropdown.test.tsx
new file mode 100644
index 0000000..4cc5df3
--- /dev/null
+++ b/src/components/layout/mega-dropdown.test.tsx
@@ -0,0 +1,88 @@
+import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import { render, screen, fireEvent } from '@testing-library/react';
+import '@testing-library/jest-dom';
+import { MegaDropdown } from './mega-dropdown';
+import type { MegaDropdownGroup } from '@/lib/site-config';
+
+jest.mock('framer-motion', () => ({
+  motion: {
+    div: ({ children, className, ...props }: { children: React.ReactNode; className?: string; [key: string]: unknown }) => (
+      <div className={className} {...props}>
+        {children}
+      </div>
+    ),
+  },
+  AnimatePresence: ({ children }: { children: React.ReactNode }) => <>{children}</>,
+}));
+
+jest.mock('@/components/ui/static-link', () => {
+  const MockStaticLink = ({ children, href, ...props }: { children: React.ReactNode; href: string; [key: string]: unknown }) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  );
+  MockStaticLink.displayName = 'MockStaticLink';
+  return { StaticLink: MockStaticLink };
+});
+
+const GROUPS: MegaDropdownGroup[] = [
+  {
+    id: 'enterprise',
+    title: '企业套装',
+    items: [{ id: 'erp', title: 'ERP', description: '企业资源计划', href: '/products/erp' }],
+  },
+];
+
+function renderDropdown(overrides: Partial<Parameters<typeof MegaDropdown>[0]> = {}) {
+  const props = {
+    label: '产品',
+    groups: GROUPS,
+    isOpen: true,
+    onToggle: jest.fn(),
+    onOpen: jest.fn(),
+    onClose: jest.fn(),
+    ...overrides,
+  };
+  render(<MegaDropdown {...props} />);
+  return props;
+}
+
+describe('MegaDropdown 键盘可达性（验收 B-10）', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+  });
+
+  it('Escape 关闭面板并把焦点交还触发按钮', () => {
+    const props = renderDropdown();
+    const trigger = screen.getByRole('button', { name: /产品/ });
+    trigger.focus();
+
+    fireEvent.keyDown(trigger, { key: 'Escape' });
+
+    expect(props.onClose).toHaveBeenCalledTimes(1);
+    expect(trigger).toHaveFocus();
+  });
+
+  it('面板内的链接上按 Escape 同样关闭', () => {
+    const props = renderDropdown();
+    fireEvent.keyDown(screen.getByRole('link', { name: /ERP/ }), { key: 'Escape' });
+    expect(props.onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it('面板未打开时 Escape 不触发关闭', () => {
+    const props = renderDropdown({ isOpen: false });
+    fireEvent.keyDown(screen.getByRole('button', { name: /产品/ }), { key: 'Escape' });
+    expect(props.onClose).not.toHaveBeenCalled();
+  });
+
+  it('焦点移出容器时关闭，容器内部移动不关闭', () => {
+    const props = renderDropdown();
+    const trigger = screen.getByRole('button', { name: /产品/ });
+
+    fireEvent.blur(trigger, { relatedTarget: trigger });
+    expect(props.onClose).not.toHaveBeenCalled();
+
+    fireEvent.blur(trigger, { relatedTarget: document.body });
+    expect(props.onClose).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/src/components/layout/mega-dropdown.tsx b/src/components/layout/mega-dropdown.tsx
index 75f68f6..490ee21 100644
--- a/src/components/layout/mega-dropdown.tsx
+++ b/src/components/layout/mega-dropdown.tsx
@@ -1,6 +1,6 @@
 'use client';
 
-import { useRef, useEffect } from 'react';
+import { useRef, useEffect, type KeyboardEvent, type FocusEvent } from 'react';
 import { ChevronDown, Lock, Sparkles } from 'lucide-react';
 import { StaticLink } from '@/components/ui/static-link';
 import { AnimatePresence, motion } from 'framer-motion';
@@ -18,6 +18,7 @@ interface MegaDropdownProps {
 
 export function MegaDropdown({ label, groups, isOpen, isActive, onToggle, onOpen, onClose }: MegaDropdownProps) {
   const dropdownRef = useRef<HTMLDivElement>(null);
+  const triggerRef = useRef<HTMLButtonElement>(null);
   const timeoutRef = useRef<ReturnType<typeof setTimeout>>(undefined);
 
   const handleMouseEnter = () => {
@@ -29,18 +30,41 @@ export function MegaDropdown({ label, groups, isOpen, isActive, onToggle, onOpen
     timeoutRef.current = setTimeout(onClose, 300);
   };
 
+  // 键盘与无指针设备（验收 B-10）：Escape 关闭并把焦点还给触发按钮；
+  // 焦点移出整个下拉容器时关闭，否则面板会以「看不见但仍在 DOM 里」的状态滞留。
+  const handleKeyDown = (event: KeyboardEvent<HTMLDivElement>) => {
+    if (event.key !== 'Escape' || !isOpen) return;
+    event.stopPropagation();
+    onClose();
+    triggerRef.current?.focus();
+  };
+
+  const handleBlur = (event: FocusEvent<HTMLDivElement>) => {
+    if (!isOpen) return;
+    if (event.relatedTarget instanceof Node && event.currentTarget.contains(event.relatedTarget)) return;
+    onClose();
+  };
+
   useEffect(() => {
     return () => clearTimeout(timeoutRef.current);
   }, []);
 
   return (
-    <div ref={dropdownRef} className="relative" onMouseEnter={handleMouseEnter} onMouseLeave={handleMouseLeave}>
+    <div
+      ref={dropdownRef}
+      className="relative"
+      onMouseEnter={handleMouseEnter}
+      onMouseLeave={handleMouseLeave}
+      onKeyDown={handleKeyDown}
+      onBlur={handleBlur}
+    >
       <div className="-mx-2 px-2 py-2">
         <button
+          ref={triggerRef}
           onClick={onToggle}
           className={`
             relative flex items-center gap-1 px-3 py-2 text-sm font-medium
-            transition-all duration-300 ease-out
+            transition-all duration-normal ease-out
             ${isOpen || isActive
               ? 'text-text-primary'
               : 'text-text-secondary hover:text-text-primary hover:bg-bg-secondary'
@@ -57,7 +81,7 @@ export function MegaDropdown({ label, groups, isOpen, isActive, onToggle, onOpen
           <span
             className={`
               absolute -bottom-0.5 left-3 right-3 h-0.5 bg-brand
-              transition-all duration-300 ease-out
+              transition-all duration-normal ease-out
               ${isActive
                 ? 'opacity-100 scale-x-100'
                 : 'opacity-0 scale-x-0'
@@ -129,7 +153,7 @@ export function MegaDropdown({ label, groups, isOpen, isActive, onToggle, onOpen
                         <StaticLink
                           key={item.id}
                           href={item.href}
-                          className="block p-3 border border-transparent transition-all duration-300 ease-out group hover:border-border-primary hover:bg-bg-secondary"
+                          className="block p-3 border border-transparent transition-all duration-normal ease-out group hover:border-border-primary hover:bg-bg-secondary"
                         >
                           {content}
                         </StaticLink>
diff --git a/src/components/layout/mobile-tab-bar.tsx b/src/components/layout/mobile-tab-bar.tsx
index b6b2067..384f53d 100644
--- a/src/components/layout/mobile-tab-bar.tsx
+++ b/src/components/layout/mobile-tab-bar.tsx
@@ -54,13 +54,13 @@ export function MobileTabBar() {
               <div className="relative flex flex-col items-center justify-center py-2">
                 <Icon
                   className={cn(
-                    'w-6 h-6 transition-colors duration-300',
+                    'w-6 h-6 transition-colors duration-normal',
                     active ? 'text-brand-ink' : 'text-text-muted group-hover:text-text-secondary'
                   )}
                 />
                 <span
                   className={cn(
-                    'text-xs mt-1 transition-colors duration-300',
+                    'text-xs mt-1 transition-colors duration-normal',
                     active ? 'text-brand-ink font-medium' : 'text-text-muted'
                   )}
                 >
diff --git a/src/components/layout/page-nav.tsx b/src/components/layout/page-nav.tsx
deleted file mode 100644
index da14dee..0000000
--- a/src/components/layout/page-nav.tsx
+++ /dev/null
@@ -1,43 +0,0 @@
-'use client';
-
-import { StaticLink } from '@/components/ui/static-link';
-import { ChevronRight, Home } from 'lucide-react';
-
-interface BreadcrumbItem {
-  label: string;
-  href?: string;
-}
-
-interface PageNavProps {
-  items: BreadcrumbItem[];
-}
-
-export function PageNav({ items }: PageNavProps) {
-  return (
-    <nav aria-label="breadcrumb" className="flex items-center gap-[3px] md:gap-1 text-[11px] md:text-sm text-[var(--color-text-subtle)] mb-2 md:mb-8 -ml-0.5">
-      <StaticLink href="/" className="flex items-center w-fit hover:text-[var(--color-brand)] transition-colors" aria-label="返回首页">
-        <Home className="w-2.5 h-2.5 md:w-3.5 md:h-3.5" />
-      </StaticLink>
-      {items.map((item, index) => {
-        const isLast = index === items.length - 1;
-        return (
-          <div key={index} className="flex items-center gap-[3px] md:gap-1">
-            <ChevronRight className="w-2.5 h-2.5 md:w-3.5 md:h-3.5 text-[var(--color-border-secondary)]" />
-            {isLast || !item.href ? (
-              <span className={isLast ? 'text-[var(--color-text-primary)] font-medium' : ''}>
-                {item.label}
-              </span>
-            ) : (
-              <StaticLink
-                href={item.href}
-                className="hover:text-[var(--color-brand)] transition-colors"
-              >
-                {item.label}
-              </StaticLink>
-            )}
-          </div>
-        );
-      })}
-    </nav>
-  );
-}
diff --git a/src/components/sections/case-card.tsx b/src/components/sections/case-card.tsx
index 754c9b4..d813950 100644
--- a/src/components/sections/case-card.tsx
+++ b/src/components/sections/case-card.tsx
@@ -103,7 +103,7 @@ export function CaseCard({
         {/* Impact numbers — Results (Bain-style, most visual weight) */}
         <div className="grid grid-cols-2 gap-4 sm:gap-6 pt-5 md:pt-7 mb-5 md:mb-7 border-t border-[var(--color-border-primary)]">
           {impact.map((item, i) => (
-            <div key={i} className="transition-transform duration-300 group-hover:scale-[1.02]">
+            <div key={i} className="transition-transform duration-normal group-hover:scale-[1.02]">
               <div className="font-sans tabular-nums text-[32px] sm:text-[38px] md:text-[42px] font-bold leading-none mb-1 md:mb-1.5 tracking-[-1.5px] text-[var(--color-text-primary)]">
                 {item.value}
               </div>
diff --git a/src/components/sections/case-detail-page.test.tsx b/src/components/sections/case-detail-page.test.tsx
new file mode 100644
index 0000000..406d899
--- /dev/null
+++ b/src/components/sections/case-detail-page.test.tsx
@@ -0,0 +1,529 @@
+import { describe, it, expect, jest, beforeEach } from "@jest/globals";
+import { createElement } from "react";
+import {
+  render,
+  screen,
+  within,
+  act,
+  type RenderResult,
+} from "@testing-library/react";
+import "@testing-library/jest-dom";
+import CaseDetailPage, { type CaseDetailData } from "./case-detail-page";
+
+// ─── Mocks ───────────────────────────────────────────────────────────────
+// motion 的 style 上挂的是 MotionValue，jsdom 无法求值：useTransform 降级为普通数值，
+// 断言只落在「解析出的数据」与「条件渲染结果」上，不依赖动画实现。
+jest.mock("framer-motion", () => {
+  // 动画专属 props 落在 DOM 上只会让 React 报未知属性，且 jsdom 无法求值：统一剔除，只保留结构相关属性
+  const animationOnly = [
+    "initial",
+    "animate",
+    "exit",
+    "variants",
+    "whileInView",
+    "viewport",
+    "transition",
+    "whileHover",
+    "whileTap",
+    "layout",
+  ];
+  const motionTag =
+    (tag: string, testId: string) =>
+    ({ children, ...rest }: any) => {
+      for (const key of animationOnly) delete rest[key];
+      return createElement(tag, { "data-testid": testId, ...rest }, children);
+    };
+  return {
+    motion: {
+      div: motionTag("div", "motion-div"),
+      h1: motionTag("h1", "motion-h1"),
+      h2: motionTag("h2", "motion-h2"),
+      p: motionTag("p", "motion-p"),
+      span: motionTag("span", "motion-span"),
+    },
+    useInView: jest.fn(() => true),
+    useScroll: jest.fn(() => ({ scrollYProgress: { get: () => 0 } })),
+    useTransform: jest.fn(() => 1),
+    AnimatePresence: ({ children }: any) => <>{children}</>,
+  };
+});
+
+jest.mock("@/hooks/use-reduced-motion", () => ({
+  useReducedMotion: jest.fn(() => false),
+}));
+
+jest.mock("@/components/ui/scroll-reveal", () => ({
+  ScrollReveal: ({ children, className }: any) => (
+    <div data-testid="scroll-reveal" className={className}>
+      {children}
+    </div>
+  ),
+  StaggerReveal: ({ children, className }: any) => (
+    <div data-testid="stagger-reveal" className={className}>
+      {children}
+    </div>
+  ),
+}));
+
+jest.mock("@/components/ui/static-link", () => ({
+  StaticLink: ({ children, href, className, onClick, ...props }: any) => (
+    <a
+      href={href}
+      className={className}
+      onClick={onClick}
+      data-testid="static-link"
+      {...props}
+    >
+      {children}
+    </a>
+  ),
+}));
+
+jest.mock("@/components/ui/button", () => ({
+  Button: ({ children, size, variant }: any) => (
+    <span data-testid="mock-button" data-size={size} data-variant={variant}>
+      {children}
+    </span>
+  ),
+}));
+
+jest.mock("next/link", () => ({
+  __esModule: true,
+  default: ({ children, href, className, ...props }: any) => (
+    <a href={href} className={className} data-testid="next-link" {...props}>
+      {children}
+    </a>
+  ),
+}));
+
+// 计数器在这里只需要证明「数字被正确拆成 value + suffix + 小数位」，动画本身归 ui 层用例
+jest.mock("@/components/ui/animated-counter", () => ({
+  AnimatedCounter: ({ value, decimals, suffix }: any) => (
+    <span
+      data-testid="animated-counter"
+      data-value={value}
+      data-decimals={decimals}
+      data-suffix={suffix}
+    >
+      {`${value}${suffix}`}
+    </span>
+  ),
+}));
+
+// ─── Test Data ───────────────────────────────────────────────────────────
+
+const baseData: CaseDetailData = {
+  id: "c1",
+  client: "华东某连锁零售",
+  industry: "零售",
+  title: "全渠道库存中台重构",
+  subtitle: "把 12 个系统的库存数据收敛成一份真相",
+  challenge: "多仓多店库存不互通，超卖频发",
+  solution: "统一库存域模型 + 实时对账链路",
+  result: "上线一个季度后超卖归零",
+  metrics: [
+    { value: "40%", label: "库存周转提升" },
+    { value: "99.9%", label: "系统可用率", highlight: true },
+    { value: "12", label: "接入系统数" },
+    { value: "3 座", label: "覆盖仓数" },
+    { value: "8 步", label: "未被选中的第五项" },
+  ],
+  timeline: [
+    {
+      phase: "现状盘点",
+      duration: "2 周",
+      description: "梳理库存口径与主数据来源",
+    },
+    { phase: "模型重构", duration: "6 周", description: "落地统一库存域模型" },
+  ],
+  services: [
+    { id: "consulting", title: "战略咨询", description: "业务诊断" },
+    { id: "data", title: "数据治理", description: "口径统一" },
+    { id: "delivery", title: "敏捷交付", description: "系统建设" },
+    { id: "support", title: "长期陪跑", description: "运营支持" },
+  ],
+  testimonial: {
+    quote: "超卖问题彻底消失了",
+    author: "李总",
+    role: "供应链负责人",
+  },
+  projectDuration: "16 周",
+  departments: ["供应链", "电商", "财务"],
+  dataScale: "日均 200 万行",
+  businessProblem: "库存真相分散在 12 个系统里",
+  verified: true,
+};
+
+// 页面结构固定为 6 个并列 section，按文档顺序取用即可隔离同名文案
+const SECTION = {
+  hero: 0,
+  challenge: 1,
+  solution: 2,
+  results: 3,
+  related: 4,
+  cta: 5,
+} as const;
+
+function section(view: RenderResult, which: number): HTMLElement {
+  const el = Array.from(view.container.querySelectorAll("section"))[which];
+  if (!el) throw new Error(`第 ${which} 个 section 未渲染`);
+  return el;
+}
+
+function reduced(v: boolean) {
+  const { useReducedMotion } = require("@/hooks/use-reduced-motion");
+  (useReducedMotion as jest.Mock).mockReturnValue(v);
+}
+
+beforeEach(() => {
+  reduced(false);
+});
+
+// ─── Hero ────────────────────────────────────────────────────────────────
+
+describe("CaseDetailPage · Hero", () => {
+  it("leads with industry, client, the first metric and the H1 title", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.getByText("零售")).toBeInTheDocument();
+    expect(hero.getByText("华东某连锁零售")).toBeInTheDocument();
+    expect(hero.getByText("40%")).toBeInTheDocument();
+    expect(
+      hero.getByText("把 12 个系统的库存数据收敛成一份真相"),
+    ).toBeInTheDocument();
+    expect(hero.getByRole("heading", { level: 1 })).toHaveTextContent(
+      "全渠道库存中台重构",
+    );
+  });
+
+  it("shows only metrics 2-4 in the quick stats row and brand-reds the highlighted one", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.getByText("99.9%")).toBeInTheDocument();
+    expect(hero.getByText("12")).toBeInTheDocument();
+    expect(hero.getByText("3 座")).toBeInTheDocument();
+    expect(hero.queryByText("8 步")).not.toBeInTheDocument();
+    // highlight 决定数字用品牌红还是正文色（CSS 变量原样透传，不做解析）
+    const brand = Array.from(
+      section(view, SECTION.hero).querySelectorAll(
+        '[style*="var(--color-brand)"]',
+      ),
+    );
+    expect(brand.filter((n) => n.textContent === "99.9%")).toHaveLength(1);
+    expect(brand.some((n) => n.textContent === "3 座")).toBe(false);
+  });
+
+  it("无 metrics 时不编造成果数字（N-30：原实现兜底渲染 40% / 核心成果提升）", () => {
+    const view = render(<CaseDetailPage data={{ ...baseData, metrics: [] }} />);
+    const hero = within(section(view, SECTION.hero));
+    // AGENTS.md §3「零编造」：页面上出现的具体百分比必须来自数据本身。
+    expect(hero.queryByText("40%")).toBeNull();
+    expect(hero.queryByText("核心成果提升")).toBeNull();
+    // 快照区仍在结构里，但没有一张数据卡
+    expect(
+      section(view, SECTION.hero).querySelector('[class*="grid-cols-3"]')
+        ?.children,
+    ).toHaveLength(0);
+  });
+
+  it("renders every verifiable dimension with departments joined by 、", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.getByText("项目周期")).toBeInTheDocument();
+    expect(hero.getByText("16 周")).toBeInTheDocument();
+    expect(hero.getByText("涉及部门")).toBeInTheDocument();
+    expect(hero.getByText("供应链、电商、财务")).toBeInTheDocument();
+    expect(hero.getByText("数据规模")).toBeInTheDocument();
+    expect(hero.getByText("日均 200 万行")).toBeInTheDocument();
+    expect(hero.getByText("✓ 客户授权公开")).toBeInTheDocument();
+  });
+
+  it("hides each dimension whose data is missing, empty or false", () => {
+    const view = render(
+      <CaseDetailPage
+        data={{
+          ...baseData,
+          projectDuration: undefined,
+          departments: [],
+          dataScale: undefined,
+          verified: false,
+        }}
+      />,
+    );
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.queryByText("项目周期")).not.toBeInTheDocument();
+    expect(hero.queryByText("涉及部门")).not.toBeInTheDocument();
+    expect(hero.queryByText("数据规模")).not.toBeInTheDocument();
+    expect(hero.queryByText("✓ 客户授权公开")).not.toBeInTheDocument();
+  });
+
+  it("drops only the dimensions that are absent instead of the whole row", () => {
+    const view = render(
+      <CaseDetailPage
+        data={{
+          ...baseData,
+          departments: ["供应链"],
+          projectDuration: undefined,
+        }}
+      />,
+    );
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.queryByText("项目周期")).not.toBeInTheDocument();
+    expect(hero.getByText("供应链")).toBeInTheDocument();
+    expect(hero.getByText("数据规模")).toBeInTheDocument();
+  });
+
+  it("offers the consult CTA and an in-page anchor to the solution", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const hero = within(section(view, SECTION.hero));
+    expect(hero.getByText("预约咨询")).toBeInTheDocument();
+    expect(hero.getByRole("link", { name: "查看方案" })).toHaveAttribute(
+      "href",
+      "#solution",
+    );
+  });
+});
+
+// ─── 挑战 / 方案 ─────────────────────────────────────────────────────────
+
+describe("CaseDetailPage · 挑战与方案", () => {
+  it("puts the concrete business problem above the challenge statement", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const challenge = within(section(view, SECTION.challenge));
+    expect(challenge.getByText("具体业务问题")).toBeInTheDocument();
+    expect(
+      challenge.getByText("库存真相分散在 12 个系统里"),
+    ).toBeInTheDocument();
+    expect(challenge.getByText("面临的挑战")).toBeInTheDocument();
+    expect(
+      challenge.getByText("多仓多店库存不互通，超卖频发"),
+    ).toBeInTheDocument();
+  });
+
+  it("drops the business problem block when the case has none", () => {
+    const view = render(
+      <CaseDetailPage data={{ ...baseData, businessProblem: undefined }} />,
+    );
+    const challenge = within(section(view, SECTION.challenge));
+    expect(challenge.queryByText("具体业务问题")).not.toBeInTheDocument();
+    expect(
+      challenge.getByText("多仓多店库存不互通，超卖频发"),
+    ).toBeInTheDocument();
+  });
+
+  it("numbers the implementation path steps in order", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const solution = within(section(view, SECTION.solution));
+    expect(
+      solution.getByText("统一库存域模型 + 实时对账链路"),
+    ).toBeInTheDocument();
+    expect(solution.getByText("现状盘点")).toBeInTheDocument();
+    expect(solution.getByText("梳理库存口径与主数据来源")).toBeInTheDocument();
+    expect(solution.getByText("落地统一库存域模型")).toBeInTheDocument();
+    expect(solution.getByText("2 周")).toBeInTheDocument();
+    expect(solution.getByText("6 周")).toBeInTheDocument();
+    expect(solution.getAllByText(/^[12]$/).map((n) => n.textContent)).toEqual([
+      "1",
+      "2",
+    ]);
+  });
+
+  it("keeps the 实施路径 heading when the timeline is empty", () => {
+    const view = render(
+      <CaseDetailPage data={{ ...baseData, timeline: [] }} />,
+    );
+    const solution = within(section(view, SECTION.solution));
+    expect(solution.getByText("实施路径")).toBeInTheDocument();
+    expect(solution.queryByText("现状盘点")).not.toBeInTheDocument();
+  });
+});
+
+// ─── 成果 ────────────────────────────────────────────────────────────────
+
+describe("CaseDetailPage · 成果", () => {
+  it("counts up the first four metrics, splitting value into number and suffix", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const results = within(section(view, SECTION.results));
+    const counters = results.getAllByTestId("animated-counter");
+    expect(counters).toHaveLength(4); // 第五项被 slice(0, 4) 截断
+    expect(counters.some((c) => c.textContent === "8 步")).toBe(false);
+    const ninetyNine = counters.find((c) => c.textContent === "99.9%");
+    expect(ninetyNine).toHaveAttribute("data-value", "99.9");
+    expect(ninetyNine).toHaveAttribute("data-decimals", "1");
+    const forty = counters.find((c) => c.textContent === "40%");
+    expect(forty).toHaveAttribute("data-value", "40");
+    expect(forty).toHaveAttribute("data-decimals", "0");
+    const plain = counters.find((c) => c.textContent === "12");
+    expect(plain).toHaveAttribute("data-suffix", "");
+    expect(counters.find((c) => c.textContent === "3 座")).toHaveAttribute(
+      "data-suffix",
+      " 座",
+    );
+    expect(results.getByText("可量化的业务成果")).toBeInTheDocument();
+    expect(results.getByText("上线一个季度后超卖归零")).toBeInTheDocument();
+  });
+
+  it("keeps a non-numeric metric verbatim instead of animating it", () => {
+    const view = render(
+      <CaseDetailPage
+        data={{
+          ...baseData,
+          metrics: [
+            { value: "N/A", label: "未量化" },
+            ...baseData.metrics.slice(1),
+          ],
+        }}
+      />,
+    );
+    const results = within(section(view, SECTION.results));
+    expect(results.getByText("N/A")).toBeInTheDocument();
+    expect(results.getAllByTestId("animated-counter")).toHaveLength(3);
+  });
+
+  it("badges the highlighted metric as the core indicator", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const results = within(section(view, SECTION.results));
+    expect(results.getAllByText("核心指标")).toHaveLength(1);
+  });
+
+  it("renders no badge when no metric is highlighted", () => {
+    const view = render(
+      <CaseDetailPage
+        data={{
+          ...baseData,
+          metrics: baseData.metrics.map((m) => ({ ...m, highlight: false })),
+        }}
+      />,
+    );
+    expect(
+      within(section(view, SECTION.results)).queryByText("核心指标"),
+    ).not.toBeInTheDocument();
+  });
+
+  it("renders the customer quote with author and role", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const results = within(section(view, SECTION.results));
+    expect(results.getByRole("blockquote")).toHaveTextContent(
+      "超卖问题彻底消失了",
+    );
+    expect(results.getByText("李总")).toBeInTheDocument();
+    expect(results.getByText("供应链负责人")).toBeInTheDocument();
+  });
+
+  it("omits the whole testimonial block when the case has none", () => {
+    const view = render(
+      <CaseDetailPage data={{ ...baseData, testimonial: undefined }} />,
+    );
+    expect(
+      within(section(view, SECTION.results)).queryByRole("blockquote"),
+    ).not.toBeInTheDocument();
+  });
+
+  it("renders static numbers instead of the counter under reduced motion", () => {
+    reduced(true);
+    const view = render(<CaseDetailPage data={baseData} />);
+    const results = within(section(view, SECTION.results));
+    expect(results.queryByTestId("animated-counter")).not.toBeInTheDocument();
+    expect(results.getByText("99.9")).toBeInTheDocument();
+    expect(results.getByText("40")).toBeInTheDocument();
+    // 后缀被拆成独立的小号 span：40% 与 99.9% 各一个，'12' 无后缀不产生
+    expect(results.getAllByText("%")).toHaveLength(2);
+    expect(results.getByText("3")).toBeInTheDocument();
+    expect(results.getByText("座")).toBeInTheDocument();
+  });
+
+  it("starts the counters only when the results block actually enters the viewport", () => {
+    // 全局 IntersectionObserver 桩恒定报 isIntersecting: true，这里换成手动触发的桩以覆盖「未进入视口」与「进入后即停止观察」
+    const NativeIO = global.IntersectionObserver;
+    const observers: StubIO[] = [];
+    class StubIO {
+      targets: Element[] = [];
+      disconnected = false;
+      constructor(
+        private readonly cb: (
+          entries: Array<{ isIntersecting: boolean }>,
+          obs: StubIO,
+        ) => void,
+      ) {
+        observers.push(this);
+      }
+      observe(el: Element) {
+        this.targets.push(el);
+      }
+      unobserve() {}
+      disconnect() {
+        this.disconnected = true;
+      }
+      fire(entries: Array<{ isIntersecting: boolean }>) {
+        this.cb(entries, this);
+      }
+    }
+    global.IntersectionObserver =
+      StubIO as unknown as typeof IntersectionObserver;
+    const view = render(<CaseDetailPage data={baseData} />);
+    try {
+      const results = within(section(view, SECTION.results));
+      expect(observers).toHaveLength(1);
+      expect(observers[0]!.targets).toHaveLength(1);
+      // 视口外：数字保持解析后的原值，计数器不挂载
+      expect(results.queryByTestId("animated-counter")).not.toBeInTheDocument();
+      expect(results.getByText("99.9")).toBeInTheDocument();
+
+      // 回传空列表 / isIntersecting 为 false 都不能提前点亮计数器
+      observers[0]!.fire([]);
+      act(() => observers[0]!.fire([{ isIntersecting: false }]));
+      expect(results.queryByTestId("animated-counter")).not.toBeInTheDocument();
+      expect(observers[0]!.disconnected).toBe(false);
+
+      act(() => observers[0]!.fire([{ isIntersecting: true }]));
+      expect(results.getAllByTestId("animated-counter")).toHaveLength(4);
+      expect(observers[0]!.disconnected).toBe(true); // 只观察一次
+    } finally {
+      global.IntersectionObserver = NativeIO; // 卸载留给 RTL 自动 cleanup，effect 清的是实例本身
+    }
+  });
+});
+
+// ─── 相关服务 / CTA ──────────────────────────────────────────────────────
+
+describe("CaseDetailPage · 相关服务与 CTA", () => {
+  it("lists at most three related services linked by id", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const related = within(section(view, SECTION.related));
+    const links = related.getAllByTestId("next-link");
+    expect(links).toHaveLength(3);
+    expect(links.map((l) => l.getAttribute("href"))).toEqual([
+      "/services/consulting",
+      "/services/data",
+      "/services/delivery",
+    ]);
+    expect(related.getByText("战略咨询")).toBeInTheDocument();
+    expect(related.queryByText("长期陪跑")).not.toBeInTheDocument();
+  });
+
+  it("renders an empty service grid when the case declares no services", () => {
+    const view = render(
+      <CaseDetailPage data={{ ...baseData, services: [] }} />,
+    );
+    const related = within(section(view, SECTION.related));
+    expect(related.getByText("相关")).toBeInTheDocument();
+    expect(related.queryAllByTestId("next-link")).toHaveLength(0);
+  });
+
+  it("closes with the two conversion links and the shared CTA label", () => {
+    const view = render(<CaseDetailPage data={baseData} />);
+    const cta = within(section(view, SECTION.cta));
+    const links = cta.getAllByTestId("static-link");
+    expect(links.map((a) => a.getAttribute("href"))).toEqual([
+      "/contact",
+      "/cases",
+    ]);
+    expect(cta.getByText("预约咨询")).toBeInTheDocument();
+    expect(cta.getByText("查看更多案例")).toBeInTheDocument();
+  });
+
+  it("does not mount its own reading-progress bar（P-4：全站唯一实例归 layout）", () => {
+    render(<CaseDetailPage data={baseData} />);
+    expect(screen.queryByTestId("scroll-progress")).not.toBeInTheDocument();
+  });
+});
diff --git a/src/components/sections/case-detail-page.tsx b/src/components/sections/case-detail-page.tsx
index a72c2d4..6685d6a 100644
--- a/src/components/sections/case-detail-page.tsx
+++ b/src/components/sections/case-detail-page.tsx
@@ -1,17 +1,23 @@
-'use client';
+"use client";
 
-import { motion, useScroll, useTransform } from 'framer-motion';
-import { useRef, useState, useEffect } from 'react';
-import { ScrollReveal, StaggerReveal } from '@/components/ui/scroll-reveal';
-import { StaticLink } from '@/components/ui/static-link';
-import { CTA_LABELS } from '@/lib/constants/cta-labels';
-import { SectionHeader } from '@/components/sections/section-header';
-import { ServiceCard } from '@/components/sections/service-card';
-import { ScrollProgress } from '@/components/ui/scroll-progress';
-import { useReducedMotion } from '@/hooks/use-reduced-motion';
-import { ArrowRight, Quote, Building2, Target, Lightbulb, TrendingUp } from 'lucide-react';
-import { Button } from '@/components/ui/button';
-import { AnimatedCounter } from '@/components/ui/animated-counter';
+import { motion, useScroll, useTransform } from "framer-motion";
+import { useRef, useState, useEffect } from "react";
+import { ScrollReveal, StaggerReveal } from "@/components/ui/scroll-reveal";
+import { StaticLink } from "@/components/ui/static-link";
+import { CTA_LABELS } from "@/lib/constants/cta-labels";
+import { SectionHeader } from "@/components/sections/section-header";
+import { ServiceCard } from "@/components/sections/service-card";
+import { useReducedMotion } from "@/hooks/use-reduced-motion";
+import {
+  ArrowRight,
+  Quote,
+  Building2,
+  Target,
+  Lightbulb,
+  TrendingUp,
+} from "lucide-react";
+import { Button } from "@/components/ui/button";
+import { AnimatedCounter } from "@/components/ui/animated-counter";
 
 const EASE = [0.22, 1, 0.36, 1] as const;
 
@@ -44,7 +50,7 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
   const heroRef = useRef<HTMLDivElement>(null);
   const { scrollYProgress } = useScroll({
     target: heroRef,
-    offset: ['start start', 'end start'],
+    offset: ["start start", "end start"],
   });
 
   const opacity = useTransform(scrollYProgress, [0, 0.6], [1, 0]);
@@ -54,7 +60,7 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
     <section
       ref={heroRef}
       className="relative min-h-[85svh] flex items-center overflow-hidden pt-20"
-      style={{ background: 'var(--color-bg-primary)' }}
+      style={{ background: "var(--color-bg-primary)" }}
     >
       <motion.div
         className="relative z-10 w-full max-w-[1280px] mx-auto px-5 sm:px-8 lg:px-16 py-20 md:py-28"
@@ -64,19 +70,22 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="flex flex-wrap items-center gap-3 mb-8"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, ease: EASE }}
+          transition={{ duration: 0.28, ease: EASE }}
         >
           <span
             className="inline-flex items-center gap-2 px-4 py-1.5 rounded-full text-xs font-medium"
             style={{
-              backgroundColor: 'var(--color-brand-soft)',
-              color: 'var(--color-brand)',
+              backgroundColor: "var(--color-brand-soft)",
+              color: "var(--color-brand)",
             }}
           >
             <Building2 className="w-3.5 h-3.5" />
             {data.industry}
           </span>
-          <span className="text-[12px]" style={{ color: 'var(--color-text-muted)' }}>
+          <span
+            className="text-[12px]"
+            style={{ color: "var(--color-text-muted)" }}
+          >
             {data.client}
           </span>
         </motion.div>
@@ -86,19 +95,19 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="mb-8"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 30 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.1, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.1, ease: EASE }}
         >
           <div
             className="font-sans text-[clamp(56px,12vw,120px)] font-black leading-none tracking-[-2px] mb-2"
-            style={{ color: 'var(--color-brand)' }}
+            style={{ color: "var(--color-brand)" }}
           >
-            {data.metrics[0]?.value || '40%'}
+            {data.metrics[0]?.value}
           </div>
           <div
             className="text-lg md:text-xl font-medium"
-            style={{ color: 'var(--color-text-secondary)' }}
+            style={{ color: "var(--color-text-secondary)" }}
           >
-            {data.metrics[0]?.label || '核心成果提升'}
+            {data.metrics[0]?.label}
           </div>
         </motion.div>
 
@@ -106,17 +115,17 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="font-sans text-[clamp(28px,5vw,48px)] font-bold leading-[1.15] tracking-[-0.5px] text-[var(--color-text-primary)] mb-6 max-w-3xl"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 30 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.25, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.25, ease: EASE }}
         >
           {data.title}
         </motion.h1>
 
         <motion.p
           className="text-base md:text-lg max-w-2xl leading-relaxed mb-10 font-light"
-          style={{ color: 'var(--color-text-secondary)' }}
+          style={{ color: "var(--color-text-secondary)" }}
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.4, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.4, ease: EASE }}
         >
           {data.subtitle}
         </motion.p>
@@ -126,17 +135,24 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="grid grid-cols-3 gap-6 sm:gap-10 max-w-lg mb-10"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.55, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.55, ease: EASE }}
         >
           {data.metrics.slice(1, 4).map((m, i) => (
             <div key={i}>
               <div
                 className="font-sans tabular-nums text-[28px] sm:text-[32px] font-bold leading-none mb-1.5"
-                style={{ color: m.highlight ? 'var(--color-brand)' : 'var(--color-text-primary)' }}
+                style={{
+                  color: m.highlight
+                    ? "var(--color-brand)"
+                    : "var(--color-text-primary)",
+                }}
               >
                 {m.value}
               </div>
-              <div className="text-[11px] sm:text-[12px]" style={{ color: 'var(--color-text-muted)' }}>
+              <div
+                className="text-[11px] sm:text-[12px]"
+                style={{ color: "var(--color-text-muted)" }}
+              >
                 {m.label}
               </div>
             </div>
@@ -148,25 +164,28 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="flex flex-wrap gap-x-6 gap-y-3 text-sm mb-10 border-y border-border-primary py-4"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.65, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.65, ease: EASE }}
         >
           {data.projectDuration && (
-            <div style={{ color: 'var(--color-text-secondary)' }}>
-              <span style={{ color: 'var(--color-text-muted)' }}>项目周期</span> {data.projectDuration}
+            <div style={{ color: "var(--color-text-secondary)" }}>
+              <span style={{ color: "var(--color-text-muted)" }}>项目周期</span>{" "}
+              {data.projectDuration}
             </div>
           )}
           {data.departments && data.departments.length > 0 && (
-            <div style={{ color: 'var(--color-text-secondary)' }}>
-              <span style={{ color: 'var(--color-text-muted)' }}>涉及部门</span> {data.departments.join('、')}
+            <div style={{ color: "var(--color-text-secondary)" }}>
+              <span style={{ color: "var(--color-text-muted)" }}>涉及部门</span>{" "}
+              {data.departments.join("、")}
             </div>
           )}
           {data.dataScale && (
-            <div style={{ color: 'var(--color-text-secondary)' }}>
-              <span style={{ color: 'var(--color-text-muted)' }}>数据规模</span> {data.dataScale}
+            <div style={{ color: "var(--color-text-secondary)" }}>
+              <span style={{ color: "var(--color-text-muted)" }}>数据规模</span>{" "}
+              {data.dataScale}
             </div>
           )}
           {data.verified && (
-            <div style={{ color: 'var(--color-brand)' }}>✓ 客户授权公开</div>
+            <div style={{ color: "var(--color-brand)" }}>✓ 客户授权公开</div>
           )}
         </motion.div>
 
@@ -174,7 +193,7 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
           className="flex flex-wrap gap-4"
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
           animate={{ opacity: 1, y: 0 }}
-          transition={{ duration: 0.3, delay: 0.8, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.8, ease: EASE }}
         >
           <Button size="lg" asChild>
             <StaticLink href="/contact">
@@ -193,7 +212,10 @@ function CaseDetailHero({ data }: CaseDetailHeroProps) {
 
 function ChallengeSection({ data }: { data: CaseDetailData }) {
   return (
-    <section className="relative py-20 sm:py-28 md:py-36 lg:py-44" style={{ background: 'var(--color-bg-primary)' }}>
+    <section
+      className="relative py-20 sm:py-28 md:py-36 lg:py-44"
+      style={{ background: "var(--color-bg-primary)" }}
+    >
       <div className="max-w-[1280px] mx-auto px-5 sm:px-8 lg:px-16">
         <div className="grid lg:grid-cols-12 gap-12 lg:gap-16 items-start">
           <ScrollReveal className="lg:col-span-5">
@@ -209,17 +231,17 @@ function ChallengeSection({ data }: { data: CaseDetailData }) {
             {data.businessProblem && (
               <div
                 className="mb-6 pl-4 border-l-2"
-                style={{ borderColor: 'var(--color-brand)' }}
+                style={{ borderColor: "var(--color-brand)" }}
               >
                 <div
                   className="text-xs font-medium mb-2"
-                  style={{ color: 'var(--color-text-muted)' }}
+                  style={{ color: "var(--color-text-muted)" }}
                 >
                   具体业务问题
                 </div>
                 <p
                   className="text-base md:text-lg leading-relaxed"
-                  style={{ color: 'var(--color-text-primary)' }}
+                  style={{ color: "var(--color-text-primary)" }}
                 >
                   {data.businessProblem}
                 </p>
@@ -228,21 +250,24 @@ function ChallengeSection({ data }: { data: CaseDetailData }) {
             <div
               className="p-8 sm:p-10 lg:p-12"
               style={{
-                backgroundColor: 'var(--color-bg-secondary)',
+                backgroundColor: "var(--color-bg-secondary)",
               }}
             >
               <div className="flex items-center gap-3 mb-6">
-                <Target className="w-6 h-6" style={{ color: 'var(--color-brand)' }} />
+                <Target
+                  className="w-6 h-6"
+                  style={{ color: "var(--color-brand)" }}
+                />
                 <span
                   className="text-sm font-semibold"
-                  style={{ color: 'var(--color-brand)' }}
+                  style={{ color: "var(--color-brand)" }}
                 >
                   面临的挑战
                 </span>
               </div>
               <p
                 className="text-lg md:text-xl leading-relaxed mb-6"
-                style={{ color: 'var(--color-text-primary)' }}
+                style={{ color: "var(--color-text-primary)" }}
               >
                 {data.challenge}
               </p>
@@ -259,7 +284,7 @@ function SolutionSection({ data }: { data: CaseDetailData }) {
     <section
       id="solution"
       className="relative py-20 sm:py-28 md:py-36 lg:py-44 overflow-hidden"
-      style={{ background: 'var(--color-bg-secondary)' }}
+      style={{ background: "var(--color-bg-secondary)" }}
     >
       <div className="max-w-[1280px] mx-auto px-5 sm:px-8 lg:px-16">
         <ScrollReveal className="mb-16 sm:mb-20 max-w-2xl">
@@ -271,30 +296,45 @@ function SolutionSection({ data }: { data: CaseDetailData }) {
           />
         </ScrollReveal>
 
-        <div className="grid lg:grid-cols-2 gap-0" style={{ border: '1px solid var(--color-border-primary)' }}>
-          <div style={{ backgroundColor: 'var(--color-bg-primary)' }}>
+        <div
+          className="grid lg:grid-cols-2 gap-0"
+          style={{ border: "1px solid var(--color-border-primary)" }}
+        >
+          <div style={{ backgroundColor: "var(--color-bg-primary)" }}>
             <div className="p-8 sm:p-10 lg:p-12">
               <div className="flex items-center gap-3 mb-6">
-                <Lightbulb className="w-6 h-6" style={{ color: 'var(--color-brand)' }} />
+                <Lightbulb
+                  className="w-6 h-6"
+                  style={{ color: "var(--color-brand)" }}
+                />
                 <span
                   className="text-sm font-semibold"
-                  style={{ color: 'var(--color-brand)' }}
+                  style={{ color: "var(--color-brand)" }}
                 >
                   核心思路
                 </span>
               </div>
-              <p className="text-base md:text-lg leading-relaxed" style={{ color: 'var(--color-text-secondary)' }}>
+              <p
+                className="text-base md:text-lg leading-relaxed"
+                style={{ color: "var(--color-text-secondary)" }}
+              >
                 {data.solution}
               </p>
             </div>
           </div>
 
-          <div className="p-8 sm:p-10 lg:p-12" style={{ backgroundColor: 'var(--color-bg-primary)' }}>
+          <div
+            className="p-8 sm:p-10 lg:p-12"
+            style={{ backgroundColor: "var(--color-bg-primary)" }}
+          >
             <div className="flex items-center gap-3 mb-6">
-              <TrendingUp className="w-6 h-6" style={{ color: 'var(--color-brand)' }} />
+              <TrendingUp
+                className="w-6 h-6"
+                style={{ color: "var(--color-brand)" }}
+              />
               <span
                 className="text-sm font-semibold"
-                style={{ color: 'var(--color-brand)' }}
+                style={{ color: "var(--color-brand)" }}
               >
                 实施路径
               </span>
@@ -305,20 +345,31 @@ function SolutionSection({ data }: { data: CaseDetailData }) {
                   <div
                     className="shrink-0 w-8 h-8 rounded-full flex items-center justify-center text-xs font-bold"
                     style={{
-                      backgroundColor: 'var(--color-brand-soft)',
-                      color: 'var(--color-brand)',
+                      backgroundColor: "var(--color-brand-soft)",
+                      color: "var(--color-brand)",
                     }}
                   >
                     {i + 1}
                   </div>
                   <div>
                     <div className="flex items-center gap-3 mb-1">
-                      <h4 className="text-[var(--color-text-primary)] font-semibold">{t.phase}</h4>
-                      <span className="text-[11px] px-2 py-0.5 rounded" style={{ backgroundColor: 'var(--color-bg-tertiary)', color: 'var(--color-text-muted)' }}>
+                      <h4 className="text-[var(--color-text-primary)] font-semibold">
+                        {t.phase}
+                      </h4>
+                      <span
+                        className="text-[11px] px-2 py-0.5 rounded"
+                        style={{
+                          backgroundColor: "var(--color-bg-tertiary)",
+                          color: "var(--color-text-muted)",
+                        }}
+                      >
                         {t.duration}
                       </span>
                     </div>
-                    <p className="text-sm leading-relaxed" style={{ color: 'var(--color-text-secondary)' }}>
+                    <p
+                      className="text-sm leading-relaxed"
+                      style={{ color: "var(--color-text-secondary)" }}
+                    >
                       {t.description}
                     </p>
                   </div>
@@ -346,16 +397,22 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
           observer.disconnect();
         }
       },
-      { threshold: 0.2 }
+      { threshold: 0.2 },
     );
     observer.observe(resultsRef.current);
     return () => observer.disconnect();
   }, []);
 
-  const parseValue = (val: string): { num: number; suffix: string; isNumeric: boolean } => {
+  const parseValue = (
+    val: string,
+  ): { num: number; suffix: string; isNumeric: boolean } => {
     const match = val.match(/^([\d.]+)(.*)$/);
     if (match && match[1] && !isNaN(parseFloat(match[1]))) {
-      return { num: parseFloat(match[1]), suffix: match[2] || '', isNumeric: true };
+      return {
+        num: parseFloat(match[1]),
+        suffix: match[2] || "",
+        isNumeric: true,
+      };
     }
     return { num: 0, suffix: val, isNumeric: false };
   };
@@ -364,24 +421,26 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
     <section
       ref={resultsRef}
       className="relative py-20 sm:py-28 md:py-36 lg:py-44 overflow-hidden"
-      style={{ background: 'var(--color-brand)' }}
+      style={{ background: "var(--color-brand)" }}
     >
       {/* Background decoration */}
       <div className="absolute inset-0 pointer-events-none">
         <div
           className="absolute w-[600px] h-[600px] rounded-full opacity-[0.15] blur-[120px]"
           style={{
-            background: 'radial-gradient(circle, rgba(255,255,255,0.8), transparent 70%)',
-            top: '-30%',
-            right: '-10%',
+            background:
+              "radial-gradient(circle, rgba(255,255,255,0.8), transparent 70%)",
+            top: "-30%",
+            right: "-10%",
           }}
         />
         <div
           className="absolute w-[400px] h-[400px] rounded-full opacity-[0.1] blur-[100px]"
           style={{
-            background: 'radial-gradient(circle, rgba(255,255,255,0.6), transparent 70%)',
-            bottom: '-20%',
-            left: '10%',
+            background:
+              "radial-gradient(circle, rgba(255,255,255,0.6), transparent 70%)",
+            bottom: "-20%",
+            left: "10%",
           }}
         />
       </div>
@@ -390,7 +449,7 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
         <ScrollReveal className="mb-16 sm:mb-20 text-center max-w-3xl mx-auto">
           <div
             className="text-xs font-medium mb-4"
-            style={{ color: 'rgba(255,255,255,0.6)' }}
+            style={{ color: "rgba(255,255,255,0.6)" }}
           >
             项目成果
           </div>
@@ -402,15 +461,20 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
           </p>
         </ScrollReveal>
 
-        <div className="grid md:grid-cols-2 lg:grid-cols-4 gap-px mb-16" style={{ backgroundColor: 'rgba(255,255,255,0.15)' }}>
+        <div
+          className="grid md:grid-cols-2 lg:grid-cols-4 gap-px mb-16"
+          style={{ backgroundColor: "rgba(255,255,255,0.15)" }}
+        >
           {data.metrics.slice(0, 4).map((m, i) => {
             const { num, suffix, isNumeric } = parseValue(m.value);
-            const decimals = String(num).includes('.') ? String(num).split('.')[1]?.length ?? 0 : 0;
+            const decimals = String(num).includes(".")
+              ? (String(num).split(".")[1]?.length ?? 0)
+              : 0;
             return (
               <div
                 key={i}
                 className="p-10 sm:p-12 text-center transition-all duration-150 hover:bg-white/[0.05] group relative overflow-hidden"
-                style={{ backgroundColor: 'var(--color-brand)' }}
+                style={{ backgroundColor: "var(--color-brand)" }}
               >
                 {m.highlight && (
                   <div className="absolute top-4 right-4 px-2 py-1 text-[10px] font-bold text-brand bg-white rounded-full">
@@ -430,7 +494,9 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
                     <>
                       {isNumeric ? num : suffix}
                       {isNumeric && suffix && (
-                        <span className="text-[0.5em] font-bold text-white/80 ml-0.5">{suffix}</span>
+                        <span className="text-[0.5em] font-bold text-white/80 ml-0.5">
+                          {suffix}
+                        </span>
                       )}
                     </>
                   )}
@@ -456,8 +522,12 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
                     <Building2 className="w-5 h-5 text-white/60" />
                   </div>
                   <div>
-                    <div className="font-semibold text-white text-lg">{data.testimonial.author}</div>
-                    <div className="text-sm text-white/50">{data.testimonial.role}</div>
+                    <div className="font-semibold text-white text-lg">
+                      {data.testimonial.author}
+                    </div>
+                    <div className="text-sm text-white/50">
+                      {data.testimonial.role}
+                    </div>
                   </div>
                 </div>
               </div>
@@ -469,9 +539,16 @@ function ResultsSection({ data }: { data: CaseDetailData }) {
   );
 }
 
-function RelatedServicesSection({ services }: { services: CaseDetailData['services'] }) {
+function RelatedServicesSection({
+  services,
+}: {
+  services: CaseDetailData["services"];
+}) {
   return (
-    <section className="relative py-20 sm:py-28 md:py-36 lg:py-44" style={{ background: 'var(--color-bg-primary)' }}>
+    <section
+      className="relative py-20 sm:py-28 md:py-36 lg:py-44"
+      style={{ background: "var(--color-bg-primary)" }}
+    >
       <div className="max-w-[1280px] mx-auto px-5 sm:px-8 lg:px-16">
         <ScrollReveal className="mb-16 sm:mb-20 max-w-2xl">
           <SectionHeader
@@ -501,15 +578,20 @@ function RelatedServicesSection({ services }: { services: CaseDetailData['servic
 
 function CTASection() {
   return (
-    <section className="relative py-20 sm:py-28 md:py-36 lg:py-44 overflow-hidden" style={{ background: 'var(--color-bg-secondary)' }}>
+    <section
+      className="relative py-20 sm:py-28 md:py-36 lg:py-44 overflow-hidden"
+      style={{ background: "var(--color-bg-secondary)" }}
+    >
       <div className="max-w-[800px] mx-auto px-5 sm:px-8 lg:px-16 text-center relative z-10">
         <ScrollReveal>
           <h2 className="font-sans text-3xl sm:text-4xl md:text-5xl lg:text-6xl font-bold text-[var(--color-text-primary)] leading-tight tracking-tight mb-6">
             您也想实现类似的
-            <span style={{ color: 'var(--color-brand)' }}> 业务突破</span>
-            ？
+            <span style={{ color: "var(--color-brand)" }}> 业务突破</span>？
           </h2>
-          <p className="text-lg md:text-xl mb-10 font-light" style={{ color: 'var(--color-text-secondary)' }}>
+          <p
+            className="text-lg md:text-xl mb-10 font-light"
+            style={{ color: "var(--color-text-secondary)" }}
+          >
             免费咨询，48小时内给出初步方案建议
           </p>
           <div className="flex flex-col sm:flex-row justify-center gap-4">
@@ -532,7 +614,6 @@ function CTASection() {
 export default function CaseDetailPage({ data }: { data: CaseDetailData }) {
   return (
     <div className="min-h-screen">
-      <ScrollProgress />
       <CaseDetailHero data={data} />
       <ChallengeSection data={data} />
       <SolutionSection data={data} />
diff --git a/src/components/sections/challenge-section.tsx b/src/components/sections/challenge-section.tsx
index 980aac6..0f15b06 100644
--- a/src/components/sections/challenge-section.tsx
+++ b/src/components/sections/challenge-section.tsx
@@ -40,7 +40,7 @@ export function ChallengeSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-100px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="mb-14"
         >
           <div className="flex items-center gap-4 mb-4">
@@ -49,7 +49,7 @@ export function ChallengeSection() {
             <div className="h-px flex-1 bg-[var(--color-border-primary)]" />
           </div>
           <h2 className="text-3xl sm:text-4xl font-semibold text-[var(--color-text-primary)] text-center">
-            您的挑战，我们的<span className="text-[var(--color-brand)] font-calligraphy">使命</span>
+            您的挑战，我们的<span className="text-brand-ink font-calligraphy">使命</span>
           </h2>
           <p className="text-base text-[var(--color-text-muted)] text-center mt-4 max-w-xl mx-auto">
             深入理解企业数字化进程中的核心痛点，提供针对性解决方案
diff --git a/src/components/sections/cta-section.tsx b/src/components/sections/cta-section.tsx
index 3bd0727..ba6c804 100644
--- a/src/components/sections/cta-section.tsx
+++ b/src/components/sections/cta-section.tsx
@@ -41,7 +41,7 @@ export function CTASection({
           initial={shouldReduceMotion ? {} : { opacity: 0, scale: 0.96, y: 16 }}
           whileInView={{ opacity: 1, scale: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="text-center max-w-3xl mx-auto relative"
         >
           <div className="absolute -top-8 left-1/2 -translate-x-1/2 hidden md:block">
@@ -51,10 +51,10 @@ export function CTASection({
             initial={shouldReduceMotion ? {} : { opacity: 0, y: -8 }}
             whileInView={{ opacity: 1, y: 0 }}
             viewport={{ once: true }}
-            transition={{ duration: 0.3, delay: 0.15 }}
+            transition={{ duration: 0.28, delay: 0.15 }}
             className="inline-flex items-center gap-2 px-4 py-1.5 rounded-full bg-[var(--color-brand-soft)] border border-[var(--color-border-primary)] mb-8"
           >
-            <Sparkles className="w-3.5 h-3.5 text-[var(--color-brand)]" />
+            <Sparkles className="w-3.5 h-3.5 text-brand-ink" />
             <span className="text-sm font-medium text-[var(--color-text-primary)]">开始对话</span>
           </motion.div>
 
diff --git a/src/components/sections/hero-particle-field-engine.test.tsx b/src/components/sections/hero-particle-field-engine.test.tsx
new file mode 100644
index 0000000..18f3e84
--- /dev/null
+++ b/src/components/sections/hero-particle-field-engine.test.tsx
@@ -0,0 +1,507 @@
+import { describe, it, expect, jest, beforeEach, afterEach } from '@jest/globals';
+import { render, screen } from '@testing-library/react';
+import '@testing-library/jest-dom';
+import HeroParticleField, { type HeroVariant } from './hero-particle-field';
+
+// ─── Mocks ───────────────────────────────────────────────────────────────
+// 本文件负责粒子引擎（绘制分支 / 出界回绕 / 启停），不做快照比对，
+// 因此把 canvas 2d 上下文换成可回放的记录器：jsdom 无 canvas 实现，
+// 不打桩的话 useEffect 会在 getContext('2d') 处提前 return（见 hero-particle-field.tsx:107）。
+jest.mock('@/hooks/use-reduced-motion', () => ({
+  useReducedMotion: jest.fn(() => false),
+}));
+
+type Call = { op: string; args: unknown[] };
+type StyleWrite = { prop: string; value: string };
+interface CtxStub {
+  calls: Call[];
+  styles: StyleWrite[];
+  gradients: { addColorStop: jest.Mock }[];
+}
+
+function createCtxStub() {
+  const calls: Call[] = [];
+  const styles: StyleWrite[] = [];
+  const gradients: { addColorStop: jest.Mock }[] = [];
+  const record = (op: string) =>
+    jest.fn((...args: unknown[]) => {
+      calls.push({ op, args });
+    });
+  const stub: Record<string, unknown> = {
+    calls,
+    styles,
+    gradients,
+    setTransform: record('setTransform'),
+    clearRect: record('clearRect'),
+    beginPath: record('beginPath'),
+    moveTo: record('moveTo'),
+    lineTo: record('lineTo'),
+    stroke: record('stroke'),
+    arc: record('arc'),
+    fill: record('fill'),
+    createLinearGradient: jest.fn(() => {
+      const g = { addColorStop: jest.fn() };
+      gradients.push(g);
+      return g;
+    }),
+  };
+  for (const prop of ['lineWidth', 'globalAlpha', 'shadowColor', 'shadowBlur', 'strokeStyle', 'fillStyle']) {
+    let value: unknown = '';
+    Object.defineProperty(stub, prop, {
+      configurable: true,
+      get: () => value,
+      set: (next: unknown) => {
+        value = next;
+        styles.push({ prop, value: String(next) });
+      },
+    });
+  }
+  return stub as unknown as CanvasRenderingContext2D & CtxStub;
+}
+
+// ─── 环境夹具 ────────────────────────────────────────────────────────────
+
+const VIEWPORT = { width: 1200, height: 700 };
+const originalWebdriver = navigator.webdriver;
+let ctxStub: CanvasRenderingContext2D & CtxStub;
+let getCtxSpy: jest.SpiedFunction<typeof HTMLCanvasElement.prototype.getContext>;
+let rectSpy: jest.SpiedFunction<typeof Element.prototype.getBoundingClientRect>;
+let frameQueue: Array<(t: number) => void>;
+let rafSpy: jest.SpiedFunction<typeof window.requestAnimationFrame>;
+let cafSpy: jest.SpiedFunction<typeof window.cancelAnimationFrame>;
+
+/** jsdom 里 navigator.webdriver 默认为 true → 引擎走静态降级；本夹具默认要的是可动画环境 */
+function setWebdriver(value: boolean) {
+  Object.defineProperty(navigator, 'webdriver', { configurable: true, get: () => value });
+}
+
+function setReduceMotion(value: boolean) {
+  const { useReducedMotion } = require('@/hooks/use-reduced-motion');
+  (useReducedMotion as jest.Mock).mockReturnValue(value);
+}
+
+function setViewport(size: { width: number; height: number }) {
+  rectSpy.mockReturnValue({
+    ...size,
+    top: 0,
+    left: 0,
+    right: size.width,
+    bottom: size.height,
+    x: 0,
+    y: 0,
+    toJSON: () => ({}),
+  } as DOMRect);
+}
+
+/** 画布「可见尺寸」决定回绕边界，与 build() 用的父容器矩形分离，便于构造出界场景 */
+function setCanvasClientBox(width: number, height: number) {
+  Object.defineProperty(HTMLCanvasElement.prototype, 'clientWidth', { configurable: true, get: () => width });
+  Object.defineProperty(HTMLCanvasElement.prototype, 'clientHeight', { configurable: true, get: () => height });
+}
+
+function arcPositions(since = 0): { x: number; y: number }[] {
+  return ctxStub.calls
+    .slice(since)
+    .filter((c) => c.op === 'arc')
+    .map((c) => ({ x: Number(c.args[0]), y: Number(c.args[1]) }));
+}
+
+function written(prop: string): string[] {
+  return ctxStub.styles.filter((s) => s.prop === prop).map((s) => s.value);
+}
+
+/** 手动推进 rAF 队列，返回推进的帧数 */
+function runFrames(stamps: number[]): number {
+  let done = 0;
+  for (const t of stamps) {
+    const pending = frameQueue.splice(0, frameQueue.length);
+    if (pending.length === 0) break;
+    pending.forEach((cb) => cb(t));
+    done += 1;
+  }
+  return done;
+}
+
+/** 动画路径下 build() 不直接落笔（paint 只发生在 step 内），推进一帧即可检查绘制结果 */
+function paintOnce() {
+  expect(runFrames([16])).toBe(1);
+}
+
+beforeEach(() => {
+  ctxStub = createCtxStub();
+  frameQueue = [];
+  getCtxSpy = jest
+    .spyOn(HTMLCanvasElement.prototype, 'getContext')
+    .mockImplementation((() => ctxStub) as never);
+  rectSpy = jest.spyOn(Element.prototype, 'getBoundingClientRect').mockReturnValue({
+    ...VIEWPORT,
+    top: 0,
+    left: 0,
+    right: VIEWPORT.width,
+    bottom: VIEWPORT.height,
+    x: 0,
+    y: 0,
+    toJSON: () => ({}),
+  } as DOMRect);
+  rafSpy = jest
+    .spyOn(window, 'requestAnimationFrame')
+    .mockImplementation(((cb: (t: number) => void) => {
+      frameQueue.push(cb);
+      return frameQueue.length;
+    }) as never);
+  cafSpy = jest.spyOn(window, 'cancelAnimationFrame').mockImplementation((() => undefined) as never);
+  setWebdriver(false);
+  setReduceMotion(false);
+  setCanvasClientBox(VIEWPORT.width, VIEWPORT.height);
+  document.documentElement.style.removeProperty('--color-brand-rgb');
+});
+
+afterEach(() => {
+  getCtxSpy.mockRestore();
+  rectSpy.mockRestore();
+  rafSpy.mockRestore();
+  cafSpy.mockRestore();
+  setWebdriver(originalWebdriver);
+  Object.defineProperty(HTMLCanvasElement.prototype, 'clientWidth', { configurable: true, get: () => 0 });
+  Object.defineProperty(HTMLCanvasElement.prototype, 'clientHeight', { configurable: true, get: () => 0 });
+  document.documentElement.style.removeProperty('--color-brand-rgb');
+  delete (globalThis as Record<string, unknown>).ResizeObserver;
+});
+
+// ─── 尺寸与密度 ──────────────────────────────────────────────────────────
+
+describe('HeroParticleField · 画布尺寸与粒子密度', () => {
+  it('sizes the backing store by devicePixelRatio and caps DPR at 2', () => {
+    Object.defineProperty(window, 'devicePixelRatio', { configurable: true, get: () => 4 });
+    const { unmount } = render(<HeroParticleField />);
+    const canvas = screen.getByTestId('hero-particle-field') as HTMLCanvasElement;
+    expect(canvas.width).toBe(VIEWPORT.width * 2);
+    expect(canvas.height).toBe(VIEWPORT.height * 2);
+    expect(canvas.style.width).toBe('1200px');
+    expect(ctxStub.calls[0]).toEqual({ op: 'setTransform', args: [2, 0, 0, 2, 0, 0] });
+    unmount();
+    Object.defineProperty(window, 'devicePixelRatio', { configurable: true, get: () => 1 });
+  });
+
+  it('keeps a 1x devicePixelRatio untouched', () => {
+    Object.defineProperty(window, 'devicePixelRatio', { configurable: true, get: () => 1 });
+    render(<HeroParticleField />);
+    const canvas = screen.getByTestId('hero-particle-field') as HTMLCanvasElement;
+    expect(canvas.width).toBe(VIEWPORT.width);
+    expect(ctxStub.calls[0]).toEqual({ op: 'setTransform', args: [1, 0, 0, 1, 0, 0] });
+  });
+
+  it('treats a zero devicePixelRatio as 1 instead of collapsing the canvas', () => {
+    // 部分宿主在缩放计算前上报 dpr=0：Math.min(0, 2)=0 会把位图缩成 0x0，必须回落到 1
+    Object.defineProperty(window, 'devicePixelRatio', { configurable: true, get: () => 0 });
+    try {
+      render(<HeroParticleField />);
+      const canvas = screen.getByTestId('hero-particle-field') as HTMLCanvasElement;
+      expect(canvas.width).toBe(VIEWPORT.width);
+      expect(canvas.style.width).toBe('1200px');
+      expect(ctxStub.calls[0]).toEqual({ op: 'setTransform', args: [1, 0, 0, 1, 0, 0] });
+    } finally {
+      Object.defineProperty(window, 'devicePixelRatio', { configurable: true, get: () => 1 });
+    }
+  });
+
+  it('scales particle count with area', () => {
+    render(<HeroParticleField />);
+    paintOnce();
+    // 1200x700 / 26000 ≈ 32
+    expect(arcPositions()).toHaveLength(32);
+  });
+
+  it('caps particle count at 56 on a very large viewport', () => {
+    setViewport({ width: 4000, height: 4000 });
+    render(<HeroParticleField />);
+    paintOnce();
+    expect(arcPositions()).toHaveLength(56);
+  });
+
+  it('draws nothing extra when the container has zero area', () => {
+    setViewport({ width: 0, height: 0 });
+    render(<HeroParticleField />);
+    paintOnce();
+    const canvas = screen.getByTestId('hero-particle-field') as HTMLCanvasElement;
+    // 面积为 0 时不产生粒子，但画布仍保留 1px 下限（避免 canvas 尺寸非法）
+    expect(canvas.width).toBe(1);
+    expect(arcPositions()).toHaveLength(0);
+    expect(written('fillStyle')).toHaveLength(0);
+  });
+});
+
+// ─── 变体绘制 ────────────────────────────────────────────────────────────
+
+describe('HeroParticleField · 变体绘制', () => {
+  const renderVariant = (variant: HeroVariant, dark = false) => {
+    const view = render(<HeroParticleField variant={variant} dark={dark} />);
+    paintOnce();
+    return view;
+  };
+
+  it('drift paints nodes only — no links, no streams, no glow', () => {
+    renderVariant('drift');
+    expect(ctxStub.gradients).toHaveLength(0);
+    expect(ctxStub.calls.filter((c) => c.op === 'stroke')).toHaveLength(0);
+    expect(written('shadowColor')).toHaveLength(0);
+    expect(written('fillStyle').length).toBeGreaterThan(0);
+  });
+
+  it('grid draws thin ink links on a light background', () => {
+    renderVariant('grid');
+    expect(written('strokeStyle')).toContain('rgba(10,14,20,1)');
+    expect(written('shadowColor')).toHaveLength(0);
+  });
+
+  it('network draws white links and brand-red glow only for the bright nodes on dark', () => {
+    renderVariant('network', true);
+    expect(written('strokeStyle')).toContain('rgba(255,255,255,1)');
+    expect(written('shadowColor')).toContain('rgba(196,30,58,0.9)');
+    expect(written('shadowBlur')).toContain('8');
+  });
+
+  it('spotlight combines links with glow', () => {
+    renderVariant('spotlight', true);
+    expect(ctxStub.calls.filter((c) => c.op === 'stroke').length).toBeGreaterThan(0);
+    expect(written('shadowColor')).toContain('rgba(196,30,58,0.9)');
+  });
+
+  it('constellation adds vertical data streams and dim secondary nodes', () => {
+    renderVariant('constellation', true);
+    // 16 条竖向数据流，各用一条线性渐变
+    expect(ctxStub.gradients).toHaveLength(16);
+    expect(ctxStub.gradients[0]!.addColorStop).toHaveBeenCalledTimes(3);
+    const fills = written('fillStyle');
+    expect(fills.some((f) => f.startsWith('rgba(180,190,205'))).toBe(true); // 暗白次级节点
+    expect(fills.some((f) => f.startsWith('rgba(196, 30, 58'))).toBe(true); // 品牌红主节点
+    // 次级节点半径收缩到 0.7 倍，且不做 dim 的每 4 个一取的规则会被固定种子复现
+    const dimCount = ctxStub.calls.filter((c) => c.op === 'arc').length;
+    expect(dimCount).toBe(32);
+  });
+
+  it('uses the cool-grey dim node on a light constellation too', () => {
+    renderVariant('constellation', false);
+    expect(written('fillStyle').some((f) => f.startsWith('rgba(100,116,139'))).toBe(true);
+    expect(written('shadowColor')).toHaveLength(0); // 浅底不辉光
+  });
+
+  it('re-derives the variant when the prop changes', () => {
+    const { rerender } = render(<HeroParticleField variant="drift" />);
+    paintOnce();
+    expect(ctxStub.gradients).toHaveLength(0);
+    const before = ctxStub.calls.length;
+    rerender(<HeroParticleField variant="constellation" />);
+    paintOnce();
+    expect(screen.getByTestId('hero-particle-field')).toHaveAttribute('data-variant', 'constellation');
+    expect(ctxStub.calls.length).toBeGreaterThan(before);
+    expect(ctxStub.gradients).toHaveLength(16);
+  });
+});
+
+// ─── 品牌色读取 ──────────────────────────────────────────────────────────
+
+describe('HeroParticleField · 品牌红取值', () => {
+  it('reads --color-brand-rgb from the document root', () => {
+    document.documentElement.style.setProperty('--color-brand-rgb', '12 200 40');
+    render(<HeroParticleField />);
+    paintOnce();
+    expect(written('fillStyle')[0]).toContain('rgba(12, 200, 40,');
+  });
+
+  it.each([
+    ['malformed tokens', 'a b c'],
+    ['a partial triple', '12 34'],
+  ])('falls back to the literal brand red for %s', (_label, raw) => {
+    document.documentElement.style.setProperty('--color-brand-rgb', raw);
+    render(<HeroParticleField />);
+    paintOnce();
+    expect(written('fillStyle')[0]).toContain('rgba(196, 30, 58,');
+  });
+
+  it('falls back when the token is not declared at all', () => {
+    render(<HeroParticleField />);
+    paintOnce();
+    expect(written('fillStyle')[0]).toContain('rgba(196, 30, 58,');
+  });
+});
+
+// ─── 动画循环 ────────────────────────────────────────────────────────────
+
+describe('HeroParticleField · 循环与降级', () => {
+  it('drives a continuous rAF loop that keeps every node inside the wrap box', () => {
+    setCanvasClientBox(8, 8); // 视口远小于初始分布 → 第一帧即触发回绕
+    render(<HeroParticleField />);
+    expect(rafSpy).toHaveBeenCalledTimes(1);
+    const frames = runFrames([16, 32, 48, 64, 96, 120, 160, 200]);
+    expect(frames).toBeGreaterThan(1);
+
+    const positions = arcPositions();
+    const xs = positions.map((p) => p.x);
+    const ys = positions.map((p) => p.y);
+    expect(positions.length).toBe(32 * frames);
+    expect(Math.min(...xs)).toBeGreaterThanOrEqual(-3);
+    expect(Math.max(...xs)).toBeLessThanOrEqual(11);
+    expect(Math.min(...ys)).toBeGreaterThanOrEqual(-3);
+    expect(Math.max(...ys)).toBeLessThanOrEqual(11);
+    // 两个方向都真的发生了回绕：右出界 → 左侧 -3 入场，左出界 → 右侧 w+3 入场
+    expect(xs).toContain(-3);
+    expect(xs).toContain(11);
+    expect(ys).toContain(-3);
+    expect(ys).toContain(11);
+  });
+
+  it('falls back to the backing-store box while the canvas has no layout size', () => {
+    // 首帧尚未排版时 clientWidth/Height 会是 0：回绕与淡出必须改用位图尺寸，而不是被 0x0 挤到边界
+    setCanvasClientBox(0, 0);
+    render(<HeroParticleField />);
+    paintOnce();
+    const positions = arcPositions();
+    const xs = positions.map((p) => p.x);
+    const ys = positions.map((p) => p.y);
+    expect(positions).toHaveLength(32);
+    expect(Math.max(...xs) - Math.min(...xs)).toBeGreaterThan(600);
+    expect(Math.max(...ys) - Math.min(...ys)).toBeGreaterThan(300);
+    expect(Math.max(...xs)).toBeLessThanOrEqual(VIEWPORT.width + 3);
+    expect(Math.max(...ys)).toBeLessThanOrEqual(VIEWPORT.height + 3);
+  });
+
+  it('cancels the scheduled frame on unmount', () => {
+    const { unmount } = render(<HeroParticleField />);
+    runFrames([16]);
+    unmount();
+    expect(cafSpy).toHaveBeenCalled();
+  });
+
+  it('paints a single static frame and never schedules rAF under reduced motion', () => {
+    setReduceMotion(true);
+    render(<HeroParticleField />);
+    expect(rafSpy).not.toHaveBeenCalled();
+    expect(ctxStub.calls.filter((c) => c.op === 'fill')).toHaveLength(32);
+    setReduceMotion(false);
+  });
+
+  it('paints a single static frame in automated browsers (navigator.webdriver)', () => {
+    setWebdriver(true);
+    render(<HeroParticleField />);
+    expect(rafSpy).not.toHaveBeenCalled();
+    expect(arcPositions()).toHaveLength(32);
+    // 静态帧仍要落笔：边缘淡出后的透明度写入了 fillStyle
+    expect(written('fillStyle').length).toBeGreaterThan(0);
+  });
+
+  it('degrades to a static frame when requestAnimationFrame is unavailable', () => {
+    const savedRaf = window.requestAnimationFrame;
+    // @ts-expect-error 运行期删除，模拟无 rAF 的老宿主
+    delete window.requestAnimationFrame;
+    try {
+      render(<HeroParticleField />);
+      expect(arcPositions()).toHaveLength(32);
+      expect(rafSpy).not.toHaveBeenCalled();
+    } finally {
+      // `writable` 必须显式给出：defineProperty 的默认值是 false，缺省会把它变成只读属性，
+      // 随后 afterEach 里 rafSpy.mockRestore() 的赋值就会抛
+      // "Cannot assign to read only property 'requestAnimationFrame'"，整套件判为 failed to run。
+      Object.defineProperty(window, 'requestAnimationFrame', {
+        configurable: true,
+        writable: true,
+        value: savedRaf,
+      });
+    }
+  });
+
+  it('stops when the tab is hidden and restarts when it becomes visible', () => {
+    render(<HeroParticleField />);
+    const rafCallsBefore = rafSpy.mock.calls.length;
+    const visibility = Object.getOwnPropertyDescriptor(Document.prototype, 'visibilityState')
+      ?? Object.getOwnPropertyDescriptor(document, 'visibilityState');
+    Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => 'hidden' });
+    document.dispatchEvent(new Event('visibilitychange'));
+    expect(cafSpy).toHaveBeenCalled();
+    expect(rafSpy.mock.calls.length).toBe(rafCallsBefore);
+
+    Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => 'visible' });
+    document.dispatchEvent(new Event('visibilitychange'));
+    expect(rafSpy.mock.calls.length).toBeGreaterThan(rafCallsBefore);
+    if (visibility) Object.defineProperty(document, 'visibilityState', visibility);
+  });
+
+  it('still runs the loop on hosts without IntersectionObserver and unmounts cleanly', () => {
+    // 老宿主缺 IO：引擎要直接按挂载即起跑，卸载时的 io?.disconnect() 也不能抛错
+    const savedIO = (globalThis as Record<string, unknown>).IntersectionObserver;
+    delete (globalThis as Record<string, unknown>).IntersectionObserver;
+    try {
+      const { unmount } = render(<HeroParticleField />);
+      expect(rafSpy).toHaveBeenCalledTimes(1);
+      paintOnce();
+      expect(arcPositions()).toHaveLength(32);
+      expect(() => unmount()).not.toThrow();
+      expect(cafSpy).toHaveBeenCalled();
+    } finally {
+      (globalThis as Record<string, unknown>).IntersectionObserver = savedIO;
+    }
+  });
+
+  it('rebuilds and repaints through ResizeObserver when the host provides one', () => {
+    const observers: Array<{ cb: () => void; targets: Element[]; disconnected: boolean }> = [];
+    class MockResizeObserver {
+      cb: () => void;
+      targets: Element[] = [];
+      disconnected = false;
+      constructor(cb: () => void) {
+        this.cb = cb;
+        observers.push(this);
+      }
+      observe(el: Element) {
+        this.targets.push(el);
+      }
+      unobserve() {}
+      disconnect() {
+        this.disconnected = true;
+      }
+    }
+    (globalThis as Record<string, unknown>).ResizeObserver = MockResizeObserver;
+
+    render(<HeroParticleField />);
+    const canvas = screen.getByTestId('hero-particle-field') as HTMLCanvasElement;
+    expect(canvas.width).toBe(1200);
+    const observer = observers[0];
+    expect(observer?.targets).toHaveLength(1);
+
+    setViewport({ width: 800, height: 600 });
+    observer!.cb();
+    // 重建：位图尺寸与变换矩阵按新容器重排（800x600 / 26000 ≈ 18 个粒子）
+    expect(canvas.width).toBe(800);
+    expect(canvas.height).toBe(600);
+    expect(ctxStub.calls.filter((c) => c.op === 'setTransform')).toHaveLength(2);
+    runFrames([16]);
+    expect(arcPositions()).toHaveLength(18);
+  });
+
+  it('disconnects the observers on unmount', () => {
+    const observers: Array<{ disconnected: boolean }> = [];
+    class MockResizeObserver {
+      disconnected = false;
+      constructor(cb: () => void) {
+        void cb;
+        observers.push(this);
+      }
+      observe() {}
+      unobserve() {}
+      disconnect() {
+        this.disconnected = true;
+      }
+    }
+    (globalThis as Record<string, unknown>).ResizeObserver = MockResizeObserver;
+    const { unmount } = render(<HeroParticleField />);
+    unmount();
+    expect(observers[0]?.disconnected).toBe(true);
+  });
+
+  it('appends a custom class to the canvas layer', () => {
+    render(<HeroParticleField className="hero-overlay" />);
+    const canvas = screen.getByTestId('hero-particle-field');
+    expect(canvas.className).toContain('hero-overlay');
+    expect(canvas.className).toContain('pointer-events-none');
+  });
+});
diff --git a/src/components/sections/hero-particle-field.tsx b/src/components/sections/hero-particle-field.tsx
index b9478a3..9dc52ba 100644
--- a/src/components/sections/hero-particle-field.tsx
+++ b/src/components/sections/hero-particle-field.tsx
@@ -270,10 +270,14 @@ export function HeroParticleField({
 
     // 离屏或标签页隐藏即停，回到视口且可见再启动
     let io: IntersectionObserver | undefined;
+    // 记录是否仍在视口内；onVisibility 须同时满足「可见 + 在视口」才启动，
+    // 否则滚出视口后切走标签页再切回，会在离屏 canvas 上把 rAF 空转起来（S-8，违背 :271 契约）。
+    let intersecting = true;
     if (typeof IntersectionObserver !== 'undefined') {
       io = new IntersectionObserver(
         (entries) => {
           const visible = entries.some((e) => e.isIntersecting);
+          intersecting = visible;
           if (visible && document.visibilityState === 'visible' && !reduceMotion && !isAutomation) {
             start();
           } else {
@@ -286,7 +290,7 @@ export function HeroParticleField({
     }
     const onVisibility = () => {
       if (document.visibilityState !== 'visible') stop();
-      else if (!reduceMotion && !isAutomation) start();
+      else if (intersecting && !reduceMotion && !isAutomation) start();
     };
     document.addEventListener('visibilitychange', onVisibility);
 
diff --git a/src/components/sections/hero-section-v2.tsx b/src/components/sections/hero-section-v2.tsx
index 23d2ed8..528530d 100644
--- a/src/components/sections/hero-section-v2.tsx
+++ b/src/components/sections/hero-section-v2.tsx
@@ -44,7 +44,7 @@ export function HeroSectionV2() {
   const fadeUp = (delay: number) => ({
     initial: shouldReduceMotion ? {} : { opacity: 0, y: 24 },
     animate: { opacity: 1, y: 0 },
-    transition: { duration: 0.3, delay, ease: EASE },
+    transition: { duration: 0.28, delay, ease: EASE },
   });
 
   return (
@@ -60,7 +60,7 @@ export function HeroSectionV2() {
               {...fadeUp(0)}
               className="mb-6"
             >
-              <span className="inline-flex items-center gap-2 px-3 py-1.5 sm:px-4 sm:py-2 rounded-full bg-[var(--color-brand-bg)] text-[var(--color-brand)] text-xs sm:text-sm font-medium border border-[var(--color-brand)]/10">
+              <span className="inline-flex items-center gap-2 px-3 py-1.5 sm:px-4 sm:py-2 rounded-full bg-[var(--color-brand-bg)] text-brand-ink text-xs sm:text-sm font-medium border border-brand/10">
                 {COMPANY_INFO.slogan}
               </span>
             </motion.div>
@@ -92,7 +92,7 @@ export function HeroSectionV2() {
               {...fadeUp(0.35)}
               className="flex flex-col sm:flex-row items-start gap-4 mb-10"
             >
-              <Button size="lg" asChild className="min-h-[52px] px-8 text-base font-semibold shadow-lg shadow-[var(--color-brand)]/20">
+              <Button size="lg" asChild className="min-h-[52px] px-8 text-base font-semibold shadow-lg shadow-brand/20">
                 <StaticLink href="/contact">
                   {CTA_LABELS.consult}
                   <ArrowRight className="w-4 h-4 ml-2" />
@@ -107,7 +107,7 @@ export function HeroSectionV2() {
           <motion.div
             initial={shouldReduceMotion ? {} : { opacity: 0, y: 32 }}
             animate={{ opacity: 1, y: 0 }}
-            transition={{ duration: 0.3, delay: 0.5, ease: EASE }}
+            transition={{ duration: 0.28, delay: 0.5, ease: EASE }}
           >
             <div
               ref={cardRef}
@@ -123,16 +123,16 @@ export function HeroSectionV2() {
               onMouseLeave={() => setIsCardHovered(false)}
             >
               <div
-                className="absolute inset-0 rounded-2xl pointer-events-none transition-opacity duration-300"
+                className="absolute inset-0 rounded-2xl pointer-events-none transition-opacity duration-normal"
                 style={{
                   opacity: isCardHovered ? 1 : 0,
                   background: `radial-gradient(400px circle at ${mousePos.x}px ${mousePos.y}px, rgba(var(--color-brand-rgb), 0.06), transparent 40%)`,
                 }}
               />
 
-              <div className="relative rounded-2xl bg-[var(--color-bg-primary)]/80 backdrop-blur-sm p-6 sm:p-8 lg:p-10">
+              <div className="relative rounded-2xl bg-bg-primary/80 backdrop-blur-sm p-6 sm:p-8 lg:p-10">
                 <div className="w-12 h-12 lg:w-14 lg:h-14 rounded-xl bg-[var(--color-brand-bg)] flex items-center justify-center mb-5 lg:mb-6">
-                  <Handshake className="w-5 h-5 lg:w-6 lg:h-6 text-[var(--color-brand)]" strokeWidth={1.8} />
+                  <Handshake className="w-5 h-5 lg:w-6 lg:h-6 text-brand-ink" strokeWidth={1.8} />
                 </div>
 
                 <h3 className="text-lg lg:text-xl font-semibold text-[var(--color-text-primary)] mb-2">
@@ -148,14 +148,14 @@ export function HeroSectionV2() {
                     return (
                       <div
                         key={step.label}
-                        className="flex items-center gap-3 lg:gap-4 p-2.5 lg:p-3 rounded-lg bg-[var(--color-bg-section)]/60"
+                        className="flex items-center gap-3 lg:gap-4 p-2.5 lg:p-3 rounded-lg bg-bg-section/60"
                       >
                         <div className="w-8 h-8 lg:w-9 lg:h-9 rounded-lg bg-[var(--color-brand-bg)] flex items-center justify-center shrink-0">
-                          <Icon className="w-3.5 h-3.5 lg:w-4 lg:h-4 text-[var(--color-brand)]" strokeWidth={2.2} />
+                          <Icon className="w-3.5 h-3.5 lg:w-4 lg:h-4 text-brand-ink" strokeWidth={2.2} />
                         </div>
                         <div className="flex-1 min-w-0">
                           <div className="flex items-center gap-1.5 lg:gap-2">
-                            <span className="text-[10px] lg:text-xs font-bold text-[var(--color-brand)]">0{idx + 1}</span>
+                            <span className="text-[10px] lg:text-xs font-bold text-brand-ink">0{idx + 1}</span>
                             <span className="text-xs lg:text-sm font-medium text-[var(--color-text-primary)]">{step.label}</span>
                           </div>
                           <p className="text-[10px] lg:text-xs text-[var(--color-text-muted)] mt-0.5 hidden sm:block">{step.desc}</p>
@@ -166,7 +166,7 @@ export function HeroSectionV2() {
                 </div>
 
                 {/* Integrated capabilities */}
-                <div className="mt-4 pt-4 border-t border-[var(--color-border-primary)]/50">
+                <div className="mt-4 pt-4 border-t border-border-primary/50">
                   <div className="flex flex-wrap gap-1.5">
                     {CAPABILITIES.map((cap, idx) => {
                       const Icon = cap.icon;
diff --git a/src/components/sections/index.ts b/src/components/sections/index.ts
deleted file mode 100644
index 45599fd..0000000
--- a/src/components/sections/index.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-export { SectionHeader } from './section-header';
-
-export { ServiceCard } from './service-card';
-export { ServiceGrid } from './service-grid';
-
-export { ProductCard as SectionProductCard } from './product-card';
-export { ProductMatrixSection } from './product-matrix-section';
-
-export { CaseCard } from './case-card';
-export { default as CaseDetailPage } from './case-detail-page';
-
-export { InsightCard } from './insight-card';
-export { IndustryGrid } from './industry-grid';
-
-export { StatsBar } from './stats-bar';
-export { SocialProofSection } from './social-proof-section';
-export { WhyUsSection } from './why-us-section';
-export { ChallengeSection } from './challenge-section';
-export { MethodologySection } from './methodology-section';
-
-export { CTASection } from './cta-section';
-export { HeroSectionV2 } from './hero-section-v2';
-
-export { QuestionCard } from './question-card';
diff --git a/src/components/sections/industry-grid.tsx b/src/components/sections/industry-grid.tsx
index 88d1b3d..e107f51 100644
--- a/src/components/sections/industry-grid.tsx
+++ b/src/components/sections/industry-grid.tsx
@@ -30,8 +30,8 @@ export function IndustryGrid({ items, className = '' }: IndustryGridProps) {
             tabIndex={0}
           >
             <div className="relative z-10">
-              <Icon className="w-7 h-7 sm:w-8 sm:h-8 mx-auto mb-2 sm:mb-3 transition-transform duration-150 group-hover:scale-110 text-[var(--color-text-primary)] group-hover:text-[var(--color-brand)]" />
-              <div className="text-[13px] sm:text-[14px] font-medium transition-colors duration-150 text-[var(--color-text-primary)] group-hover:text-[var(--color-brand)]">
+              <Icon className="w-7 h-7 sm:w-8 sm:h-8 mx-auto mb-2 sm:mb-3 transition-transform duration-150 group-hover:scale-110 text-[var(--color-text-primary)] group-hover:text-brand-ink" />
+              <div className="text-[13px] sm:text-[14px] font-medium transition-colors duration-150 text-[var(--color-text-primary)] group-hover:text-brand-ink">
                 {item.name}
               </div>
               <div className="text-[10px] sm:text-[11px] mt-1 sm:mt-1.5 transition-colors duration-150 text-[var(--color-text-subtle)] group-hover:text-[var(--color-text-muted)]">
diff --git a/src/components/sections/insight-card.tsx b/src/components/sections/insight-card.tsx
index 17a3989..6fb37cd 100644
--- a/src/components/sections/insight-card.tsx
+++ b/src/components/sections/insight-card.tsx
@@ -56,7 +56,7 @@ export function InsightCard({
           <p className="text-[13px] sm:text-[14px] leading-relaxed max-w-[400px] mb-5 md:mb-6 text-[var(--color-text-secondary)]">
             {desc}
           </p>
-          <span className="text-[12px] inline-flex items-center gap-1.5 transition-colors duration-300 text-[var(--color-text-muted)] group-hover:text-[var(--color-brand)]">
+          <span className="text-[12px] inline-flex items-center gap-1.5 transition-colors duration-normal text-[var(--color-text-muted)] group-hover:text-brand-ink">
             阅读全文
             <ArrowUpRight className="w-3 h-3" />
           </span>
diff --git a/src/components/sections/methodology-section.tsx b/src/components/sections/methodology-section.tsx
index 52e2933..c09c1ed 100644
--- a/src/components/sections/methodology-section.tsx
+++ b/src/components/sections/methodology-section.tsx
@@ -19,11 +19,11 @@ export function MethodologySection() {
         <motion.div
           initial={{ opacity: 0, y: 20 }}
           animate={isInView ? { opacity: 1, y: 0 } : {}}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="text-center max-w-3xl mx-auto mb-14"
         >
           <h2 id="methodology-heading" className="text-3xl sm:text-4xl font-semibold text-[var(--color-text-primary)] mb-4">
-            实施<span className="text-[var(--color-brand)]">方法论</span>
+            实施<span className="text-brand-ink">方法论</span>
           </h2>
           <p className="text-base text-[var(--color-text-muted)]">
             经过核心团队实践打磨的四阶段模型，确保每个项目都能科学推进、高效落地
@@ -40,7 +40,7 @@ export function MethodologySection() {
               return (
                 <Card
                   key={phase.id}
-                  className="relative overflow-hidden transition-all duration-300 hover:-translate-y-1 hover:shadow-lg"
+                  className="relative overflow-hidden transition-all duration-normal hover:-translate-y-1 hover:shadow-lg"
                 >
                   <div className="p-6 md:p-8">
                     <div
@@ -51,7 +51,7 @@ export function MethodologySection() {
                     </div>
 
                     <h3 className="text-lg font-semibold text-[var(--color-text-primary)] mb-1">{phase.title}</h3>
-                    <p className="text-xs text-[var(--color-brand)] font-medium mb-3">{phase.subtitle}</p>
+                    <p className="text-xs text-brand-ink font-medium mb-3">{phase.subtitle}</p>
                     <p className="text-sm text-[var(--color-text-muted)] leading-relaxed mb-5">{phase.description}</p>
 
                     <div className="mb-4">
@@ -59,7 +59,7 @@ export function MethodologySection() {
                       <ul className="space-y-1.5">
                         {phase.activities.map((activity, i) => (
                           <li key={i} className="flex items-start gap-2 text-xs text-[var(--color-text-muted)]">
-                            <CheckCircle2 className="w-3.5 h-3.5 text-[var(--color-brand)] mt-0.5 shrink-0" />
+                            <CheckCircle2 className="w-3.5 h-3.5 text-brand-ink mt-0.5 shrink-0" />
                             {activity}
                           </li>
                         ))}
@@ -71,7 +71,7 @@ export function MethodologySection() {
                       <ul className="space-y-1.5">
                         {phase.deliverables.map((deliverable, i) => (
                           <li key={i} className="flex items-start gap-2 text-xs text-[var(--color-text-subtle)]">
-                            <span className="w-1.5 h-1.5 bg-[var(--color-brand)]/40 rounded-full mt-1.5 shrink-0" />
+                            <span className="w-1.5 h-1.5 bg-brand/40 rounded-full mt-1.5 shrink-0" />
                             {deliverable}
                           </li>
                         ))}
diff --git a/src/components/sections/product-card.tsx b/src/components/sections/product-card.tsx
index 03a6318..b775166 100644
--- a/src/components/sections/product-card.tsx
+++ b/src/components/sections/product-card.tsx
@@ -29,12 +29,12 @@ export function ProductCard({
   return (
     <StaticLink
       href={href}
-      className={`group relative block p-6 sm:p-8 lg:p-10 bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] rounded-sm transition-all duration-300 overflow-hidden ${className}`}
+      className={`group relative block p-6 sm:p-8 lg:p-10 bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] rounded-sm transition-all duration-normal overflow-hidden ${className}`}
       style={{ minHeight: '44px', minWidth: '44px' }}
     >
       {/* Left accent bar — visible on hover */}
       <div
-        className="absolute left-0 top-0 bottom-0 w-[3px] bg-[var(--color-brand)] transition-transform duration-300 origin-top"
+        className="absolute left-0 top-0 bottom-0 w-[3px] bg-[var(--color-brand)] transition-transform duration-normal origin-top"
         style={{ transform: 'scaleY(0)' }}
         onMouseEnter={(e) => {
           e.currentTarget.style.transform = 'scaleY(1)';
@@ -54,7 +54,7 @@ export function ProductCard({
             {title}
           </h3>
           {badge && (
-            <span className="text-[10px] tracking-[2px] uppercase px-2 py-0.5 rounded-full bg-[var(--color-brand-bg)] text-[var(--color-brand)] font-medium">
+            <span className="text-[10px] tracking-[2px] uppercase px-2 py-0.5 rounded-full bg-[var(--color-brand-bg)] text-brand-ink font-medium">
               {badge}
             </span>
           )}
@@ -66,16 +66,16 @@ export function ProductCard({
         </p>
 
         {/* CTA link */}
-        <span className="inline-flex items-center gap-1.5 text-[13px] font-medium text-[var(--color-text-primary)] transition-all duration-300 group-hover:text-[var(--color-brand)] group-hover:gap-2.5">
+        <span className="inline-flex items-center gap-1.5 text-[13px] font-medium text-[var(--color-text-primary)] transition-all duration-normal group-hover:text-brand-ink group-hover:gap-2.5">
           了解更多
-          <ArrowRight className="w-3.5 h-3.5 transition-transform duration-300 group-hover:translate-x-1" />
+          <ArrowRight className="w-3.5 h-3.5 transition-transform duration-normal group-hover:translate-x-1" />
         </span>
       </div>
 
       {/* Hover background lift */}
       <div className="absolute inset-0 bg-[var(--color-bg-hover)] opacity-0 transition-opacity duration-150 pointer-events-none" />
       <div
-        className="absolute inset-0 opacity-0 transition-opacity duration-300 pointer-events-none"
+        className="absolute inset-0 opacity-0 transition-opacity duration-normal pointer-events-none"
         onMouseEnter={(e) => { e.currentTarget.style.opacity = '1'; }}
       />
     </StaticLink>
diff --git a/src/components/sections/product-matrix-section.tsx b/src/components/sections/product-matrix-section.tsx
index a0e0c7f..2a3591c 100644
--- a/src/components/sections/product-matrix-section.tsx
+++ b/src/components/sections/product-matrix-section.tsx
@@ -17,7 +17,7 @@ export function ProductMatrixSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-100px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="flex flex-col md:flex-row md:items-end md:justify-between gap-4 mb-14"
         >
           <div>
@@ -25,11 +25,11 @@ export function ProductMatrixSection() {
               产品矩阵
             </h2>
             <p className="text-base text-[var(--color-text-muted)] max-w-lg">
-              6 款自研产品覆盖企业数字化全场景，目前全部<span className="text-[var(--color-brand)] font-medium">研发中</span>，欢迎提前了解规划
+              6 款自研产品覆盖企业数字化全场景，目前全部<span className="text-brand-ink font-medium">研发中</span>，欢迎提前了解规划
             </p>
           </div>
           <div className="flex items-center gap-2">
-            <span className="inline-flex items-center gap-1.5 px-3 py-1 rounded-full bg-[var(--color-brand-bg)] text-[var(--color-brand)] text-xs font-medium border border-[var(--color-brand)]/10">
+            <span className="inline-flex items-center gap-1.5 px-3 py-1 rounded-full bg-[var(--color-brand-bg)] text-brand-ink text-xs font-medium border border-brand/10">
               <span className="w-1.5 h-1.5 rounded-full bg-[var(--color-brand)] animate-pulse" />
               研发中 · 即将上线
             </span>
diff --git a/src/components/sections/question-card.tsx b/src/components/sections/question-card.tsx
index c4bc064..3c1462f 100644
--- a/src/components/sections/question-card.tsx
+++ b/src/components/sections/question-card.tsx
@@ -27,7 +27,7 @@ export function QuestionCard({
       className={`group md:grid md:grid-cols-2 border-b border-[var(--color-border-primary)] relative overflow-hidden ${className}`}
     >
       {/* Left accent bar — visible on hover */}
-      <div className="absolute left-0 top-0 bottom-0 w-[3px] hidden md:block transition-transform duration-300 origin-top bg-[var(--color-brand)]"
+      <div className="absolute left-0 top-0 bottom-0 w-[3px] hidden md:block transition-transform duration-normal origin-top bg-[var(--color-brand)]"
         style={{ transform: 'scaleY(0)' }}
         onMouseEnter={(e) => { e.currentTarget.style.transform = 'scaleY(1)'; }}
       />
@@ -46,11 +46,11 @@ export function QuestionCard({
         </p>
         <StaticLink
           href={href}
-          className="inline-flex items-center gap-2 text-[13px] font-medium text-[var(--color-text-primary)] transition-all duration-300 hover:text-[var(--color-brand)] group/link"
+          className="inline-flex items-center gap-2 text-[13px] font-medium text-[var(--color-text-primary)] transition-all duration-normal hover:text-brand-ink group/link"
           style={{ minHeight: '44px', minWidth: '44px' }}
         >
           {linkText}
-          <ChevronRight className="w-3.5 h-3.5 transition-transform duration-300 group-hover/link:translate-x-1" />
+          <ChevronRight className="w-3.5 h-3.5 transition-transform duration-normal group-hover/link:translate-x-1" />
         </StaticLink>
       </div>
     </div>
diff --git a/src/components/sections/section-header.tsx b/src/components/sections/section-header.tsx
index 750afb8..58e8e7b 100644
--- a/src/components/sections/section-header.tsx
+++ b/src/components/sections/section-header.tsx
@@ -35,7 +35,7 @@ export function SectionHeader({
       initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-40px' }}
-      transition={{ duration: 0.3, ease: EASE }}
+      transition={{ duration: 0.28, ease: EASE }}
     >
       {/* Eyebrow label with brand accent bar */}
       <div className="flex items-center gap-3 mb-4 md:mb-5">
@@ -51,7 +51,7 @@ export function SectionHeader({
           initial={shouldReduceMotion ? {} : { scaleY: 0 }}
           whileInView={{ scaleY: 1 }}
           viewport={{ once: true, margin: '-40px' }}
-          transition={{ duration: 0.3, delay: 0.1, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.1, ease: EASE }}
         />
         <motion.div
           className="text-[10px] tracking-[4px] uppercase font-medium"
@@ -63,7 +63,7 @@ export function SectionHeader({
           initial={shouldReduceMotion ? {} : { opacity: 0, x: -8 }}
           whileInView={{ opacity: 1, x: 0 }}
           viewport={{ once: true, margin: '-40px' }}
-          transition={{ duration: 0.3, delay: 0.2, ease: EASE }}
+          transition={{ duration: 0.28, delay: 0.2, ease: EASE }}
         >
           {label}
         </motion.div>
diff --git a/src/components/sections/sections.test.tsx b/src/components/sections/sections.test.tsx
index 0a29779..4c8757e 100644
--- a/src/components/sections/sections.test.tsx
+++ b/src/components/sections/sections.test.tsx
@@ -131,6 +131,15 @@ describe('SectionHeader', () => {
     expect(heading.closest('h2')?.style.color).toBe('rgb(255, 255, 255)');
   });
 
+  it('washes the description white on dark sections and keeps it muted on light ones', async () => {
+    const { SectionHeader } = await import('./section-header');
+    const { unmount } = render(<SectionHeader label="TEST" title="Title" desc="深色底的说明文字" light />);
+    expect(screen.getByText('深色底的说明文字').style.color).toBe('rgba(255, 255, 255, 0.5)');
+    unmount();
+    render(<SectionHeader label="TEST" title="Title" desc="浅色底的说明文字" />);
+    expect(screen.getByText('浅色底的说明文字').style.color).toBe('var(--color-text-muted)');
+  });
+
   it('should apply custom className', async () => {
     const { SectionHeader } = await import('./section-header');
     render(<SectionHeader label="T" title="T" className="my-class" />);
@@ -149,40 +158,6 @@ describe('SectionHeader', () => {
   });
 });
 
-describe('StatsBar', () => {
-  const mockItems = [
-    { number: '500', unit: '+', label: '客户' },
-    { number: '99', unit: '%', label: '满意度', desc: '客户反馈评分' },
-  ];
-
-  it('should render stat items', async () => {
-    const { StatsBar } = await import('./stats-bar');
-    render(<StatsBar items={mockItems} />);
-    expect(screen.getByText('客户')).toBeInTheDocument();
-    expect(screen.getByText('满意度')).toBeInTheDocument();
-  });
-
-  it('should render description when provided', async () => {
-    const { StatsBar } = await import('./stats-bar');
-    render(<StatsBar items={mockItems} />);
-    expect(screen.getByText('客户反馈评分')).toBeInTheDocument();
-  });
-
-  it('should apply custom className', async () => {
-    const { StatsBar } = await import('./stats-bar');
-    const { container } = render(<StatsBar items={mockItems} className="stats-class" />);
-    const grid = container.querySelector('.stats-class');
-    expect(grid).toBeInTheDocument();
-  });
-
-  it('should render in dark mode', async () => {
-    const { StatsBar } = await import('./stats-bar');
-    render(<StatsBar items={mockItems} dark />);
-    const labels = screen.getAllByText('客户');
-    expect(labels.length).toBeGreaterThan(0);
-  });
-});
-
 describe('ProductCard', () => {
   it('should render title, description and icon', async () => {
     const { ProductCard } = await import('./product-card');
diff --git a/src/components/sections/service-card.tsx b/src/components/sections/service-card.tsx
index 896dc07..0417d8f 100644
--- a/src/components/sections/service-card.tsx
+++ b/src/components/sections/service-card.tsx
@@ -30,11 +30,11 @@ export function ServiceCard({
 
   return (
     <motion.div
-      className={`group relative bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] rounded-[var(--radius-lg)] overflow-hidden transition-all duration-normal ease-ink hover:-translate-y-1 hover:shadow-[var(--shadow-lg)] hover:border-[var(--color-brand)]/20 ${className}`}
+      className={`group relative bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] rounded-[var(--radius-lg)] overflow-hidden transition-all duration-normal ease-ink hover:-translate-y-1 hover:shadow-[var(--shadow-lg)] hover:border-brand/20 ${className}`}
       initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
       whileInView={{ opacity: 1, y: 0 }}
       viewport={{ once: true, margin: '-40px' }}
-      transition={{ duration: 0.3, delay, ease: [0.22, 1, 0.36, 1] }}
+      transition={{ duration: 0.28, delay, ease: [0.22, 1, 0.36, 1] }}
     >
       <div className="p-6 md:p-8">
         {/* Title */}
@@ -50,7 +50,7 @@ export function ServiceCard({
         {/* Link */}
         <Link
           href={href}
-          className="inline-flex items-center text-sm font-medium transition-all duration-fast group-hover:gap-2.5 text-[var(--color-brand)]"
+          className="inline-flex items-center text-sm font-medium transition-all duration-fast group-hover:gap-2.5 text-brand-ink"
           style={{ minHeight: '44px', minWidth: '44px' }}
         >
           <span>了解详情</span>
diff --git a/src/components/sections/social-proof-section.tsx b/src/components/sections/social-proof-section.tsx
index 0b1d810..1973db5 100644
--- a/src/components/sections/social-proof-section.tsx
+++ b/src/components/sections/social-proof-section.tsx
@@ -31,7 +31,7 @@ export function SocialProofSection() {
     <section id="social-proof" role="region" aria-labelledby="social-proof-heading" className="py-16 md:py-24 lg:py-28 relative overflow-hidden">
       {/* Background accent */}
       <div className="absolute inset-0 bg-[var(--color-bg-primary)]" aria-hidden="true" />
-      <div className="absolute top-0 left-0 right-0 h-px bg-gradient-to-r from-transparent via-[var(--color-brand)]/10 to-transparent" aria-hidden="true" />
+      <div className="absolute top-0 left-0 right-0 h-px bg-gradient-to-r from-transparent via-brand/10 to-transparent" aria-hidden="true" />
       <div className="absolute bottom-0 left-0 right-0 h-px bg-gradient-to-r from-transparent via-[var(--color-border-primary)] to-transparent" aria-hidden="true" />
 
       <div className="container-wide relative z-10">
@@ -40,7 +40,7 @@ export function SocialProofSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-100px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="text-center max-w-3xl mx-auto mb-16"
         >
           <h2 id="social-proof-heading" className="text-3xl sm:text-4xl font-semibold text-[var(--color-text-primary)] mb-4">
@@ -56,7 +56,7 @@ export function SocialProofSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 24 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="grid grid-cols-2 lg:grid-cols-4 gap-6 md:gap-8 mb-16"
         >
           {METRICS.map((metric, idx) => {
@@ -67,11 +67,11 @@ export function SocialProofSection() {
                 initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
                 whileInView={{ opacity: 1, y: 0 }}
                 viewport={{ once: true, margin: '-60px' }}
-                transition={{ duration: 0.3, delay: idx * 0.06, ease: [0.16, 1, 0.3, 1] }}
+                transition={{ duration: 0.28, delay: idx * 0.06, ease: [0.16, 1, 0.3, 1] }}
                 className="text-center group"
               >
-                <div className="w-12 h-12 rounded-full bg-[var(--color-brand)]/5 flex items-center justify-center mx-auto mb-4 group-hover:bg-[var(--color-brand)]/10 transition-colors duration-300">
-                  <Icon className="w-5 h-5 text-[var(--color-brand)]" strokeWidth={1.5} />
+                <div className="w-12 h-12 rounded-full bg-brand/5 flex items-center justify-center mx-auto mb-4 group-hover:bg-brand/10 transition-colors duration-normal">
+                  <Icon className="w-5 h-5 text-brand-ink" strokeWidth={1.5} />
                 </div>
                 <div className="text-4xl md:text-5xl font-bold text-[var(--color-text-primary)] tracking-tight mb-1">
                   {metric.value}
@@ -95,16 +95,16 @@ export function SocialProofSection() {
               initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
               whileInView={{ opacity: 1, y: 0 }}
               viewport={{ once: true, margin: '-60px' }}
-              transition={{ duration: 0.3, delay: 0.2 + idx * 0.1, ease: [0.16, 1, 0.3, 1] }}
-              className="relative p-6 md:p-8 rounded-2xl bg-[var(--color-bg-section)] border border-[var(--color-border-primary)] hover:border-[rgba(var(--color-brand-rgb),0.2)] transition-all duration-300"
+              transition={{ duration: 0.28, delay: 0.2 + idx * 0.1, ease: [0.16, 1, 0.3, 1] }}
+              className="relative p-6 md:p-8 rounded-2xl bg-[var(--color-bg-section)] border border-[var(--color-border-primary)] hover:border-[rgba(var(--color-brand-rgb),0.2)] transition-all duration-normal"
             >
-              <Quote className="w-8 h-8 text-[var(--color-brand)]/15 mb-4" strokeWidth={1.5} />
+              <Quote className="w-8 h-8 text-brand-ink/15 mb-4" strokeWidth={1.5} />
               <blockquote className="text-[var(--color-text-secondary)] text-base leading-relaxed mb-6">
                 &ldquo;{t.quote}&rdquo;
               </blockquote>
               <div className="flex items-center gap-3">
-                <div className="w-10 h-10 rounded-full bg-gradient-to-br from-[var(--color-brand)]/10 to-[var(--color-brand)]/5 flex items-center justify-center">
-                  <span className="text-sm font-semibold text-[var(--color-brand)]">{t.author[0]}</span>
+                <div className="w-10 h-10 rounded-full bg-gradient-to-br from-brand/10 to-brand/5 flex items-center justify-center">
+                  <span className="text-sm font-semibold text-brand-ink">{t.author[0]}</span>
                 </div>
                 <div>
                   <div className="text-sm font-medium text-[var(--color-text-primary)]">{t.author}</div>
diff --git a/src/components/sections/stats-bar.tsx b/src/components/sections/stats-bar.tsx
deleted file mode 100644
index 31d4791..0000000
--- a/src/components/sections/stats-bar.tsx
+++ /dev/null
@@ -1,131 +0,0 @@
-'use client';
-
-import { useState, useEffect, useRef } from 'react';
-
-interface StatItem {
-  number: string;
-  unit: string;
-  label: string;
-  desc?: string;
-}
-
-interface StatsBarProps {
-  items: StatItem[];
-  /** Whether to show on dark background */
-  dark?: boolean;
-  className?: string;
-}
-
-function CountUpNumber({ end, startCounting }: { end: number; startCounting: boolean }) {
-  const [count, setCount] = useState(0);
-  const frameRef = useRef<number>(0);
-
-  useEffect(() => {
-    if (!startCounting) return;
-    const duration = 1800;
-    const startTime = performance.now();
-    const easeOutCubic = (t: number) => 1 - Math.pow(1 - t, 3);
-    const animate = (now: number) => {
-      const progress = Math.min((now - startTime) / duration, 1);
-      const eased = easeOutCubic(progress);
-      setCount(Math.floor(end * eased));
-      if (progress < 1) {
-        frameRef.current = requestAnimationFrame(animate);
-      } else {
-        setCount(end);
-      }
-    };
-    frameRef.current = requestAnimationFrame(animate);
-    return () => cancelAnimationFrame(frameRef.current);
-  }, [end, startCounting]);
-
-  return <>{count}</>;
-}
-
-export function StatsBar({ items, dark = false, className = '' }: StatsBarProps) {
-  const [inView, setInView] = useState(false);
-  const sectionRef = useRef<HTMLDivElement>(null);
-
-  useEffect(() => {
-    const el = sectionRef.current;
-    if (!el) return;
-    const observer = new IntersectionObserver(
-      ([entry]) => {
-        if (entry?.isIntersecting) {
-          setInView(true);
-          observer.disconnect();
-        }
-      },
-      { threshold: 0.1 },
-    );
-    observer.observe(el);
-    return () => observer.disconnect();
-  }, []);
-
-  return (
-    <div
-      ref={sectionRef}
-      className={`grid grid-cols-2 md:grid-cols-3 lg:grid-cols-${items.length} gap-px rounded-sm overflow-hidden ${className}`}
-      style={{
-        background: dark ? 'rgba(255,255,255,0.04)' : 'var(--color-border-primary)',
-      }}
-    >
-      {items.map((item, i) => (
-        <div
-          key={i}
-          className="py-10 sm:py-12 md:py-14 px-4 sm:px-6 md:px-8 text-center transition-all duration-normal ease-ink hover:bg-[var(--color-bg-hover)] group"
-          style={{ background: dark ? 'var(--color-brand)' : 'var(--color-bg-primary)' }}
-        >
-          <div
-            className="font-sans tabular-nums text-[clamp(36px,8vw,64px)] font-bold leading-none mb-1 md:mb-2 tracking-[-0.02em] transition-all duration-slow ease-ink group-hover:scale-105"
-            style={{
-              color: dark ? '#FFFFFF' : 'var(--color-text-primary)',
-              transform: inView ? 'scale(1)' : 'scale(0.9)',
-              opacity: inView ? 1 : 0,
-              transitionDelay: `${i * 80}ms`,
-            }}
-          >
-            {inView ? (
-              <CountUpNumber end={parseInt(item.number)} startCounting={true} />
-            ) : (
-              item.number
-            )}
-            <span
-              style={{
-                color: dark ? 'rgba(255,255,255,0.6)' : 'var(--color-brand)',
-                fontSize: '0.4em',
-                fontWeight: 700,
-              }}
-            >
-              {item.unit}
-            </span>
-          </div>
-          <div
-            className="text-[12px] sm:text-[13px] font-medium mb-3 md:mb-4 tracking-[0.08em] uppercase transition-all duration-normal"
-            style={{
-              color: dark ? 'rgba(255,255,255,0.5)' : 'var(--color-text-muted)',
-              opacity: inView ? 1 : 0,
-              transform: inView ? 'translateY(0)' : 'translateY(8px)',
-              transitionDelay: `${i * 80 + 150}ms`,
-            }}
-          >
-            {item.label}
-          </div>
-          {item.desc && (
-            <div
-              className="text-[12px] sm:text-[13px] leading-relaxed transition-all duration-normal"
-              style={{
-                color: dark ? 'rgba(255,255,255,0.35)' : 'var(--color-text-subtle)',
-                opacity: inView ? 1 : 0,
-                transform: inView ? 'translateY(0)' : 'translateY(6px)',
-                transitionDelay: `${i * 80 + 250}ms`,
-              }}
-            >
-              {item.desc}
-            </div>
-          )}
-        </div>
-      ))}
-    </div>
-  );
-}
diff --git a/src/components/sections/why-us-section.tsx b/src/components/sections/why-us-section.tsx
index 07a8ceb..b10e74f 100644
--- a/src/components/sections/why-us-section.tsx
+++ b/src/components/sections/why-us-section.tsx
@@ -51,23 +51,23 @@ export function WhyUsSection() {
     <section id="why-us" className="relative py-20 md:py-28 bg-[var(--color-bg-section)] bg-texture-dots overflow-hidden">
       {/* Decorative large numbers background */}
       <div className="absolute inset-0 overflow-hidden pointer-events-none" aria-hidden="true">
-        <span className="absolute -top-24 -left-12 text-[20rem] font-bold text-[var(--color-brand)]/[0.02] leading-none select-none font-calligraphy">睿</span>
-        <span className="absolute -bottom-32 -right-8 text-[16rem] font-bold text-[var(--color-brand)]/[0.02] leading-none select-none">新</span>
+        <span className="absolute -top-24 -left-12 text-[20rem] font-bold text-brand-ink/[0.02] leading-none select-none font-calligraphy">睿</span>
+        <span className="absolute -bottom-32 -right-8 text-[16rem] font-bold text-brand-ink/[0.02] leading-none select-none">新</span>
       </div>
       <div className="container-wide relative z-10">
         <motion.div
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 20 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-100px' }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
           className="mb-14"
         >
-          <div className="inline-flex items-center gap-2 px-4 py-1.5 rounded-full bg-[var(--color-brand-bg)] border border-[var(--color-brand)]/10 mb-4">
+          <div className="inline-flex items-center gap-2 px-4 py-1.5 rounded-full bg-[var(--color-brand-bg)] border border-brand/10 mb-4">
             <span className="w-1.5 h-1.5 rounded-full bg-[var(--color-brand)]" />
-            <span className="text-xs font-medium tracking-wider text-[var(--color-brand)]">核心优势</span>
+            <span className="text-xs font-medium tracking-wider text-brand-ink">核心优势</span>
           </div>
           <h2 className="text-3xl sm:text-4xl font-semibold text-[var(--color-text-primary)] mb-4">
-            为什么选择<span className="text-[var(--color-brand)] font-calligraphy">我们</span>
+            为什么选择<span className="text-brand-ink font-calligraphy">我们</span>
           </h2>
           <p className="text-base text-[var(--color-text-muted)]">
             我们不是一家&ldquo;做完就跑&rdquo;的外包公司，而是愿意与您一起成长的数字化转型同行者
@@ -83,8 +83,8 @@ export function WhyUsSection() {
                 initial={shouldReduceMotion ? {} : { opacity: 0, y: 24, scale: 0.96 }}
                 whileInView={{ opacity: 1, y: 0, scale: 1 }}
                 viewport={{ once: true, margin: '-60px' }}
-                transition={{ duration: 0.3, delay: idx * 0.06, ease: [0.16, 1, 0.3, 1] }}
-                className="relative group p-6 md:p-8 rounded-2xl bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] hover:border-[rgba(var(--color-brand-rgb),0.25)] transition-all duration-300"
+                transition={{ duration: 0.28, delay: idx * 0.06, ease: [0.16, 1, 0.3, 1] }}
+                className="relative group p-6 md:p-8 rounded-2xl bg-[var(--color-bg-primary)] border border-[var(--color-border-primary)] hover:border-[rgba(var(--color-brand-rgb),0.25)] transition-all duration-normal"
               >
                 <div className="flex items-start justify-between mb-4">
                   <div
@@ -134,7 +134,7 @@ export function WhyUsSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 16 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-80px' }}
-          transition={{ duration: 0.3, delay: 0.3, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, delay: 0.3, ease: [0.16, 1, 0.3, 1] }}
           className="text-center"
         >
           <p className="text-sm text-[var(--color-text-muted)] mb-6">想深入了解我们的团队能力？</p>
@@ -151,7 +151,7 @@ export function WhyUsSection() {
           initial={shouldReduceMotion ? {} : { opacity: 0, y: 16 }}
           whileInView={{ opacity: 1, y: 0 }}
           viewport={{ once: true, margin: '-60px' }}
-          transition={{ duration: 0.3, delay: 0.4, ease: [0.16, 1, 0.3, 1] }}
+          transition={{ duration: 0.28, delay: 0.4, ease: [0.16, 1, 0.3, 1] }}
           className="mt-16 pt-10 border-t border-[var(--color-border-primary)]"
         >
           <p className="text-xs text-center text-[var(--color-text-subtle)] mb-6 tracking-wide uppercase">技术伙伴 / 技术栈</p>
@@ -169,8 +169,8 @@ export function WhyUsSection() {
                 key={tech.name}
                 className="group flex flex-col items-center gap-1.5"
               >
-                <div className="px-4 py-2 rounded-lg bg-[var(--color-bg-section)] border border-[var(--color-border-primary)] group-hover:border-[rgba(var(--color-brand-rgb),0.2)] group-hover:bg-[var(--color-brand-bg)]/30 transition-all duration-300">
-                  <span className="text-sm font-mono font-medium text-[var(--color-text-subtle)] group-hover:text-[var(--color-brand)] transition-colors duration-300 tracking-wider">
+                <div className="px-4 py-2 rounded-lg bg-[var(--color-bg-section)] border border-[var(--color-border-primary)] group-hover:border-[rgba(var(--color-brand-rgb),0.2)] group-hover:bg-brand-bg/30 transition-all duration-normal">
+                  <span className="text-sm font-mono font-medium text-[var(--color-text-subtle)] group-hover:text-brand-ink transition-colors duration-normal tracking-wider">
                     {tech.abbr}
                   </span>
                 </div>
diff --git a/src/components/seo/structured-data.test.tsx b/src/components/seo/structured-data.test.tsx
index 67163e1..b951115 100644
--- a/src/components/seo/structured-data.test.tsx
+++ b/src/components/seo/structured-data.test.tsx
@@ -230,6 +230,24 @@ describe('StructuredData', () => {
     });
   });
 
+  describe('JSON-LD 序列化的 </script> 闭合防护', () => {
+    const PAYLOAD = '</script><img src=x onerror=alert(1)>';
+
+    it('序列化结果里不出现字面 </script>，改为 \\u003c 转义', () => {
+      const { container } = render(<FAQSchema items={[{ question: PAYLOAD, answer: 'a' }]} />);
+      const text = container.querySelector('script[type="application/ld+json"]')?.textContent ?? '';
+      expect(text).not.toContain('</script>');
+      expect(text).toContain('\\u003c/script\\u003e');
+    });
+
+    it('转义不改变 JSON 语义，解析后仍是原字符串', () => {
+      const { container } = render(<FAQSchema items={[{ question: PAYLOAD, answer: 'b' }]} />);
+      const script = container.querySelector('script[type="application/ld+json"]');
+      const schema = JSON.parse(script?.textContent || '{}');
+      expect(schema.mainEntity[0].name).toBe(PAYLOAD);
+    });
+  });
+
   describe('LocalBusinessSchema', () => {
     it('should render local business schema', () => {
       const { container } = render(<LocalBusinessSchema />);
diff --git a/src/components/seo/structured-data.tsx b/src/components/seo/structured-data.tsx
index e7d3ba0..6acc358 100644
--- a/src/components/seo/structured-data.tsx
+++ b/src/components/seo/structured-data.tsx
@@ -1,5 +1,14 @@
 import { COMPANY_INFO } from '@/lib/constants';
 
+/**
+ * JSON-LD 内联脚本的序列化。JSON.stringify 不转义尖括号，因此字符串值里出现的 `</script>`
+ * 会提前闭合 <script>，把后续内容放回 HTML 标记流（与 A-3 同一类缺陷，只是换了 sink）。
+ * `\u003c` / `\u003e` 在 JSON 解析后逐字等值，对搜索引擎解析器无影响。
+ */
+function jsonLd(schema: unknown): string {
+  return JSON.stringify(schema).replace(/</g, '\\u003c').replace(/>/g, '\\u003e');
+}
+
 export function OrganizationSchema() {
   const schema = {
     "@context": "https://schema.org",
@@ -50,7 +59,7 @@ export function OrganizationSchema() {
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -76,7 +85,7 @@ export function WebsiteSchema() {
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -120,7 +129,7 @@ export function ServiceSchema({ name, description, areaServed }: ServiceSchemaPr
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -159,7 +168,7 @@ export function ProductSchema({ name, description, image, category }: ProductSch
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -186,7 +195,7 @@ export function FAQSchema({ items }: { items: FAQItem[] }) {
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -211,7 +220,7 @@ export function BreadcrumbSchema({ items }: { items: BreadcrumbItem[] }) {
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
@@ -263,7 +272,7 @@ export function LocalBusinessSchema() {
   return (
     <script
       type="application/ld+json"
-      dangerouslySetInnerHTML={{ __html: JSON.stringify(schema) }}
+      dangerouslySetInnerHTML={{ __html: jsonLd(schema) }}
     />
   );
 }
diff --git a/src/components/ui/accordion.test.tsx b/src/components/ui/accordion.test.tsx
deleted file mode 100644
index e680ecd..0000000
--- a/src/components/ui/accordion.test.tsx
+++ /dev/null
@@ -1,128 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import { Accordion, AccordionItem, AccordionTrigger, AccordionContent } from './accordion';
-
-describe('Accordion Components', () => {
-  describe('AccordionItem', () => {
-    it('should render item with children', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1">Item Content</AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('Item Content')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1" data-testid="item">Item</AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByTestId('item')).toHaveAttribute('data-slot', 'accordion-item');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1" className="custom-item">Item</AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('Item')).toHaveClass('custom-item');
-    });
-  });
-
-  describe('AccordionTrigger', () => {
-    it('should render trigger text', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1">
-            <AccordionTrigger>点击展开</AccordionTrigger>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('点击展开')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1">
-            <AccordionTrigger data-testid="trigger">Trigger</AccordionTrigger>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByTestId('trigger')).toHaveAttribute('data-slot', 'accordion-trigger');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Accordion type="single">
-          <AccordionItem value="item1">
-            <AccordionTrigger className="custom-trigger">Trigger</AccordionTrigger>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('Trigger')).toHaveClass('custom-trigger');
-    });
-  });
-
-  describe('AccordionContent', () => {
-    it('should render content when item is open', () => {
-      render(
-        <Accordion type="single" defaultValue="item1">
-          <AccordionItem value="item1">
-            <AccordionTrigger>标题</AccordionTrigger>
-            <AccordionContent>展开内容</AccordionContent>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('展开内容')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Accordion type="single" defaultValue="item1">
-          <AccordionItem value="item1">
-            <AccordionContent data-testid="content">Content</AccordionContent>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByTestId('content')).toHaveAttribute('data-slot', 'accordion-content');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Accordion type="single" defaultValue="item1">
-          <AccordionItem value="item1">
-            <AccordionContent className="custom-content">Content</AccordionContent>
-          </AccordionItem>
-        </Accordion>
-      );
-      expect(screen.getByText('Content')).toHaveClass('custom-content');
-    });
-  });
-
-  describe('Accordion Composition', () => {
-    it('should render complete accordion structure', () => {
-      render(
-        <Accordion type="single" defaultValue="faq1">
-          <AccordionItem value="faq1">
-            <AccordionTrigger>问题一</AccordionTrigger>
-            <AccordionContent>答案一</AccordionContent>
-          </AccordionItem>
-          <AccordionItem value="faq2">
-            <AccordionTrigger>问题二</AccordionTrigger>
-            <AccordionContent>答案二</AccordionContent>
-          </AccordionItem>
-        </Accordion>
-      );
-
-      expect(screen.getByText('问题一')).toBeInTheDocument();
-      expect(screen.getByText('答案一')).toBeInTheDocument();
-      expect(screen.getByText('问题二')).toBeInTheDocument();
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/components/ui/accordion.tsx b/src/components/ui/accordion.tsx
deleted file mode 100644
index 3c431cd..0000000
--- a/src/components/ui/accordion.tsx
+++ /dev/null
@@ -1,65 +0,0 @@
-'use client';
-
-import * as React from 'react';
-import * as AccordionPrimitive from '@radix-ui/react-accordion';
-import { ChevronDown } from 'lucide-react';
-import { cn } from '@/lib/utils';
-
-/**
- * 标准 shadcn/ui Accordion 组件
- * 基于 @radix-ui/react-accordion
- */
-const Accordion = AccordionPrimitive.Root;
-
-const AccordionItem = React.forwardRef<
-  React.ElementRef<typeof AccordionPrimitive.Item>,
-  React.ComponentPropsWithoutRef<typeof AccordionPrimitive.Item>
->(({ className, ...props }, ref) => (
-  <AccordionPrimitive.Item
-    ref={ref}
-    data-slot="accordion-item"
-    className={cn('border-b border-border-primary', className)}
-    {...props}
-  />
-));
-AccordionItem.displayName = 'AccordionItem';
-
-const AccordionTrigger = React.forwardRef<
-  React.ElementRef<typeof AccordionPrimitive.Trigger>,
-  React.ComponentPropsWithoutRef<typeof AccordionPrimitive.Trigger>
->(({ className, children, ...props }, ref) => (
-  <AccordionPrimitive.Header className="flex">
-    <AccordionPrimitive.Trigger
-      ref={ref}
-      data-slot="accordion-trigger"
-      className={cn(
-        'flex flex-1 items-center justify-between py-4 text-sm font-medium transition-all hover:underline',
-        'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-brand focus-visible:ring-offset-2',
-        '[&[data-state=open]>svg]:rotate-180',
-        className
-      )}
-      {...props}
-    >
-      {children}
-      <ChevronDown className="size-4 shrink-0 text-text-muted transition-transform duration-normal" />
-    </AccordionPrimitive.Trigger>
-  </AccordionPrimitive.Header>
-));
-AccordionTrigger.displayName = AccordionPrimitive.Trigger.displayName;
-
-const AccordionContent = React.forwardRef<
-  React.ElementRef<typeof AccordionPrimitive.Content>,
-  React.ComponentPropsWithoutRef<typeof AccordionPrimitive.Content>
->(({ className, children, ...props }, ref) => (
-  <AccordionPrimitive.Content
-    ref={ref}
-    data-slot="accordion-content"
-    className="overflow-hidden text-sm data-[state=closed]:animate-accordion-up data-[state=open]:animate-accordion-down"
-    {...props}
-  >
-    <div className={cn('pb-4 pt-0', className)}>{children}</div>
-  </AccordionPrimitive.Content>
-));
-AccordionContent.displayName = AccordionPrimitive.Content.displayName;
-
-export { Accordion, AccordionItem, AccordionTrigger, AccordionContent };
diff --git a/src/components/ui/animated-counter.test.tsx b/src/components/ui/animated-counter.test.tsx
index 11c0cbf..090dcc4 100644
--- a/src/components/ui/animated-counter.test.tsx
+++ b/src/components/ui/animated-counter.test.tsx
@@ -3,9 +3,9 @@ import { describe, it, expect, jest } from '@jest/globals';
 import { render, screen } from '@testing-library/react';
 import '@testing-library/jest-dom';
 
-// Mock hooks
+// Mock hooks：忠实于 useCountUp 的真实语义 —— enabled=false 时停在起点
 jest.mock('@/hooks/use-count-up', () => ({
-  useCountUp: jest.fn(() => 500),
+  useCountUp: jest.fn(({ enabled, end, start = 0 }) => (enabled ? end : start)),
 }));
 
 jest.mock('@/hooks/use-reduced-motion', () => ({
@@ -15,34 +15,57 @@ jest.mock('@/hooks/use-reduced-motion', () => ({
 describe('AnimatedCounter', () => {
   it('renders value with prefix and suffix', () => {
     const { AnimatedCounter } = require('./animated-counter');
-    render(<AnimatedCounter value={500} prefix="¥" suffix="+" />);
+    render(<AnimatedCounter value={500} prefix="¥" suffix="+" startOnView={false} />);
     expect(screen.getByText('¥500+')).toBeInTheDocument();
   });
 
   it('renders with aria-label containing prefix, value, and suffix', () => {
     const { AnimatedCounter } = require('./animated-counter');
-    render(<AnimatedCounter value={500} prefix="¥" suffix="+" />);
+    render(<AnimatedCounter value={500} prefix="¥" suffix="+" startOnView={false} />);
     const el = screen.getByText('¥500+');
     expect(el).toHaveAttribute('aria-label', '¥500+');
   });
 
   it('renders with tabular-nums class', () => {
     const { AnimatedCounter } = require('./animated-counter');
-    render(<AnimatedCounter value={500} />);
+    render(<AnimatedCounter value={500} startOnView={false} />);
     const el = screen.getByText('500');
     expect(el).toHaveClass('tabular-nums');
   });
 
   it('renders with custom decimals', () => {
     const { AnimatedCounter } = require('./animated-counter');
-    render(<AnimatedCounter value={500} decimals={1} />);
+    render(<AnimatedCounter value={500} decimals={1} startOnView={false} />);
     expect(screen.getByText('500.0')).toBeInTheDocument();
   });
 
   it('applies custom className', () => {
     const { AnimatedCounter } = require('./animated-counter');
-    render(<AnimatedCounter value={500} className="custom-class" />);
+    render(<AnimatedCounter value={500} className="custom-class" startOnView={false} />);
     const el = screen.getByText('500');
     expect(el).toHaveClass('custom-class');
   });
+
+  // S-23：旧实现 displayValue 在「未进入视口」分支直显终值，
+  // IntersectionObserver 异步首回调后突然跳到 0 再爬升 —— 用户先看到答案再看计数。
+  it('startOnView 时入视口前显示起点 0 而不是终值（S-23 回归）', () => {
+    let observerCallback;
+    global.IntersectionObserver = class {
+      constructor(cb) { observerCallback = cb; }
+      observe() {}
+      disconnect() {}
+      unobserve() {}
+    };
+    const { AnimatedCounter } = require('./animated-counter');
+    render(<AnimatedCounter value={500} />);
+    // 尚未相交：必须停在起点 0（旧码此处直显 500 ⇒ 判红）
+    observerCallback([{ isIntersecting: false }]);
+    expect(screen.getByText('0')).toBeInTheDocument();
+    // 相交后动画接管（useCountUp mock 回 500）；observer 回调里的 setState 需 act 包裹
+    const { act } = require('@testing-library/react');
+    act(() => {
+      observerCallback([{ isIntersecting: true }]);
+    });
+    expect(screen.getByText('500')).toBeInTheDocument();
+  });
 });
\ No newline at end of file
diff --git a/src/components/ui/animated-counter.tsx b/src/components/ui/animated-counter.tsx
index cd88310..e55ac5f 100644
--- a/src/components/ui/animated-counter.tsx
+++ b/src/components/ui/animated-counter.tsx
@@ -59,7 +59,9 @@ export function AnimatedCounter({
     return () => observer.disconnect();
   }, [startOnView, threshold]);
 
-  const displayValue = start ? (shouldReduceMotion ? value : count) : value;
+  // 未进入视口时显示起点而不是终值：旧写法先闪出答案再跳回 0 计数（S-23）。
+  // useCountUp 在 enabled=false 期间本就停在起点 0。
+  const displayValue = shouldReduceMotion ? value : count;
 
   return (
     <span
diff --git a/src/components/ui/back-to-top.tsx b/src/components/ui/back-to-top.tsx
index 1cade4d..4dfee78 100644
--- a/src/components/ui/back-to-top.tsx
+++ b/src/components/ui/back-to-top.tsx
@@ -16,6 +16,9 @@ export function BackToTop() {
     };
 
     window.addEventListener('scroll', handleScroll, { passive: true });
+    // 初始同步：浏览器滚动还原或经 hash 锚点落到页面中部时，首帧尚未触发 scroll 事件，
+    // 不调用则按钮在 scrollY>500 的载入下一直隐藏（S-9）。
+    handleScroll();
     return () => window.removeEventListener('scroll', handleScroll);
   }, []);
 
@@ -35,7 +38,7 @@ export function BackToTop() {
           exit={shouldReduceMotion ? {} : { opacity: 0, y: 20, scale: 0.8 }}
           transition={{ duration: 0.2, ease: 'easeOut' }}
           onClick={scrollToTop}
-          className="fixed right-4 bottom-20 md:bottom-8 md:right-8 z-40 p-3 bg-brand text-white hover:bg-brand-hover transition-all duration-300 ease-out focus:outline-none focus:ring-2 focus:ring-brand focus:ring-offset-2 focus:ring-offset-white"
+          className="fixed right-4 bottom-20 md:bottom-8 md:right-8 z-40 p-3 bg-brand text-white hover:bg-brand-hover transition-all duration-normal ease-out focus:outline-none focus:ring-2 focus:ring-brand focus:ring-offset-2 focus:ring-offset-white"
           aria-label="返回顶部"
           title="返回顶部"
           whileHover={shouldReduceMotion ? {} : { scale: 1.05 }}
diff --git a/src/components/ui/brand-visuals.tsx b/src/components/ui/brand-visuals.tsx
index 7217482..9581051 100644
--- a/src/components/ui/brand-visuals.tsx
+++ b/src/components/ui/brand-visuals.tsx
@@ -9,9 +9,9 @@ export function GeometricDecoration({ variant = 'circles' }: { variant?: 'circle
     return (
       <div className="absolute inset-0 overflow-hidden pointer-events-none" aria-hidden="true">
         <svg className="absolute top-[10%] right-[5%] w-64 h-64 opacity-[0.04]" viewBox="0 0 200 200">
-          <circle cx="100" cy="100" r="80" fill="none" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="0.5" />
-          <circle cx="100" cy="100" r="60" fill="none" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="0.5" />
-          <circle cx="100" cy="100" r="40" fill="none" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="0.5" />
+          <circle cx="100" cy="100" r="80" fill="none" stroke="currentColor" className="text-brand-ink" strokeWidth="0.5" />
+          <circle cx="100" cy="100" r="60" fill="none" stroke="currentColor" className="text-brand-ink" strokeWidth="0.5" />
+          <circle cx="100" cy="100" r="40" fill="none" stroke="currentColor" className="text-brand-ink" strokeWidth="0.5" />
           <circle
             cx="100" cy="100" r="20"
             fill="rgba(var(--color-brand-rgb, 196, 30, 58), 0.1)"
@@ -29,9 +29,9 @@ export function GeometricDecoration({ variant = 'circles' }: { variant?: 'circle
     return (
       <div className="absolute inset-0 overflow-hidden pointer-events-none" aria-hidden="true">
         <svg className="absolute top-0 right-0 w-full h-full opacity-[0.02]" viewBox="0 0 1000 1000" preserveAspectRatio="none">
-          <line x1="800" y1="0" x2="1000" y2="400" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="1" />
-          <line x1="850" y1="0" x2="1000" y2="300" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="0.5" />
-          <line x1="900" y1="0" x2="1000" y2="200" stroke="currentColor" className="text-[var(--color-brand)]" strokeWidth="0.5" />
+          <line x1="800" y1="0" x2="1000" y2="400" stroke="currentColor" className="text-brand-ink" strokeWidth="1" />
+          <line x1="850" y1="0" x2="1000" y2="300" stroke="currentColor" className="text-brand-ink" strokeWidth="0.5" />
+          <line x1="900" y1="0" x2="1000" y2="200" stroke="currentColor" className="text-brand-ink" strokeWidth="0.5" />
           <line x1="0" y1="600" x2="300" y2="1000" stroke="currentColor" className="text-[var(--color-text-subtle)]" strokeWidth="0.5" />
           <line x1="0" y1="700" x2="200" y2="1000" stroke="currentColor" className="text-[var(--color-text-subtle)]" strokeWidth="0.5" />
         </svg>
@@ -63,7 +63,7 @@ export function DataBar({ value, max = 100, label, color = 'brand' }: { value: n
           initial={{ width: 0 }}
           whileInView={{ width: `${percentage}%` }}
           viewport={{ once: true }}
-          transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1], delay: 0.2 }}
+          transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1], delay: 0.2 }}
           className="h-full rounded-full"
           style={{ backgroundColor: colorMap[color] }}
         />
@@ -92,14 +92,14 @@ export function BrandStamp({ children }: { children: React.ReactNode }) {
       initial={shouldReduceMotion ? {} : { scale: 1.3, opacity: 0, rotate: -12 }}
       whileInView={{ scale: 1, opacity: 1, rotate: -5 }}
       viewport={{ once: true }}
-      transition={{ duration: 0.3, ease: [0.16, 1, 0.3, 1] }}
+      transition={{ duration: 0.28, ease: [0.16, 1, 0.3, 1] }}
       className="inline-block px-3 py-1.5 border-2 border-[var(--color-brand)] rounded-sm"
       style={{
         transform: 'rotate(-5deg)',
         background: 'repeating-linear-gradient(45deg, transparent, transparent 2px, rgba(var(--color-brand-rgb), 0.03) 2px, rgba(var(--color-brand-rgb), 0.03) 4px)',
       }}
     >
-      <span className="text-xs font-bold tracking-widest text-[var(--color-brand)] font-calligraphy">
+      <span className="text-xs font-bold tracking-widest text-brand-ink font-calligraphy">
         {children}
       </span>
     </motion.div>
diff --git a/src/components/ui/button.test.tsx b/src/components/ui/button.test.tsx
index 60360cd..44aea1a 100644
--- a/src/components/ui/button.test.tsx
+++ b/src/components/ui/button.test.tsx
@@ -1,5 +1,5 @@
 import { describe, it, expect } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
+import { render, screen, fireEvent, act } from '@testing-library/react';
 import '@testing-library/jest-dom';
 import { Button } from './button';
 
@@ -146,4 +146,27 @@ describe('Button Component', () => {
       expect(button).toHaveClass('min-w-[44px]');
     });
   });
+
+  describe('Ripple (Q-10)', () => {
+    // 诚实说明：真正修的缺陷是「同毫秒点击 id 相撞（重复 key）+ 卸载不清定时器」。
+    // 但本仓 Jest 跑的是 production React 构建 ⇒ 重复 key 的 dev 告警被剥离，
+    // 且 timer-on-unmount 在 React 18 不再告警——两条都无法在本环境里做出「移除修复即判红」的
+    // 判别性断言（做过 RED 探针：还原成 Date.now() 后本用例仍绿 ⇒ 不能假装它是回归锁）。
+    // 因此这里只覆盖被我改动的渲染路径本身（涟漪出现→按窗口清除），它能捕获
+    // 「涟漪永不清除 / 根本不出现」这类真实回归；id 唯一性与卸载清理靠 code review 保证。
+    it('adds a ripple on click and clears it after the 600ms animation window', () => {
+      jest.useFakeTimers();
+      try {
+        const { container } = render(<Button data-testid="ripple-btn">Go</Button>);
+        fireEvent.click(screen.getByTestId('ripple-btn'));
+        expect(container.querySelectorAll('.animate-ripple')).toHaveLength(1);
+        act(() => {
+          jest.advanceTimersByTime(600);
+        });
+        expect(container.querySelectorAll('.animate-ripple')).toHaveLength(0);
+      } finally {
+        jest.useRealTimers();
+      }
+    });
+  });
 });
diff --git a/src/components/ui/button.tsx b/src/components/ui/button.tsx
index 7b68f05..9f29587 100644
--- a/src/components/ui/button.tsx
+++ b/src/components/ui/button.tsx
@@ -48,6 +48,18 @@ export interface ButtonProps
 const Button = React.forwardRef<HTMLButtonElement, ButtonProps>(
   ({ className, variant, size, asChild = false, onClick, children, showRipple = true, ...props }, ref) => {
     const [ripples, setRipples] = React.useState<{ x: number; y: number; id: number }[]>([]);
+    // 自增序号：Date.now() 在同一毫秒内的多次点击会算出相同 id ⇒ 重复 React key + 清理时
+    // filter 会把同 id 的多条涟漪一起删掉。用 ref 计数器保证每条涟漪 key 唯一（Q-10）。
+    const rippleSeq = React.useRef(0);
+    const rippleTimers = React.useRef<ReturnType<typeof setTimeout>[]>([]);
+
+    // 卸载时清空未触发的定时器，避免卸载后 setState 泄漏。
+    React.useEffect(
+      () => () => {
+        rippleTimers.current.forEach(clearTimeout);
+      },
+      []
+    );
 
     const handleClick = (e: React.MouseEvent<HTMLButtonElement>) => {
       if (showRipple && variant !== 'link' && variant !== 'ghost') {
@@ -55,13 +67,15 @@ const Button = React.forwardRef<HTMLButtonElement, ButtonProps>(
         const rect = button.getBoundingClientRect();
         const x = e.clientX - rect.left;
         const y = e.clientY - rect.top;
-        const id = Date.now();
+        const id = rippleSeq.current++;
 
         setRipples((prev) => [...prev, { x, y, id }]);
 
-        setTimeout(() => {
+        const timer = setTimeout(() => {
           setRipples((prev) => prev.filter((r) => r.id !== id));
+          rippleTimers.current = rippleTimers.current.filter((t) => t !== timer);
         }, 600);
+        rippleTimers.current.push(timer);
       }
 
       onClick?.(e);
diff --git a/src/components/ui/challenge-card.tsx b/src/components/ui/challenge-card.tsx
index f68d7f4..a180c5a 100644
--- a/src/components/ui/challenge-card.tsx
+++ b/src/components/ui/challenge-card.tsx
@@ -29,7 +29,7 @@ export function ChallengeCard({ title, description, scenario, href, index }: Cha
 
   return (
     <a href={href}>
-      <Card className="group relative overflow-hidden transition-all duration-300 hover:-translate-y-1 hover:shadow-lg">
+      <Card className="group relative overflow-hidden transition-all duration-normal hover:-translate-y-1 hover:shadow-lg">
         <div className="p-6 md:p-8">
           <div className="flex items-start justify-between mb-5">
             <div
@@ -37,7 +37,7 @@ export function ChallengeCard({ title, description, scenario, href, index }: Cha
               style={{ backgroundColor: `rgba(var(--color-brand-rgb), ${config.iconBgOpacity})` }}
             >
               <IconComponent
-                className="w-5 h-5 text-[var(--color-brand)]"
+                className="w-5 h-5 text-brand-ink"
                 strokeWidth={1.8}
               />
             </div>
@@ -54,7 +54,7 @@ export function ChallengeCard({ title, description, scenario, href, index }: Cha
             {description}
           </p>
 
-          <div className="flex items-center gap-2 text-sm font-medium text-[var(--color-brand)]">
+          <div className="flex items-center gap-2 text-sm font-medium text-brand-ink">
             <span>了解方案</span>
             <ArrowRight className="w-4 h-4" />
           </div>
diff --git a/src/components/ui/cta-button.tsx b/src/components/ui/cta-button.tsx
index 7205606..255c286 100644
--- a/src/components/ui/cta-button.tsx
+++ b/src/components/ui/cta-button.tsx
@@ -50,10 +50,10 @@ const VARIANT_STYLES: Record<CTAButtonVariant, string> = {
 };
 
 const ARROW_STYLES: Record<CTAButtonVariant, string> = {
-  primary: 'w-5 h-5 transition-transform duration-300 group-hover:translate-x-2',
-  secondary: 'w-5 h-5 transition-transform duration-300 group-hover:translate-x-2',
-  dark: 'w-5 h-5 transition-transform duration-300 group-hover:translate-x-2',
-  inline: 'w-4 h-4 transition-transform duration-300 group-hover:translate-x-1',
+  primary: 'w-5 h-5 transition-transform duration-normal group-hover:translate-x-2',
+  secondary: 'w-5 h-5 transition-transform duration-normal group-hover:translate-x-2',
+  dark: 'w-5 h-5 transition-transform duration-normal group-hover:translate-x-2',
+  inline: 'w-4 h-4 transition-transform duration-normal group-hover:translate-x-1',
 };
 
 export function CTAButton({
diff --git a/src/components/ui/dialog.test.tsx b/src/components/ui/dialog.test.tsx
deleted file mode 100644
index 982bb63..0000000
--- a/src/components/ui/dialog.test.tsx
+++ /dev/null
@@ -1,131 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import {
-  Dialog,
-  DialogTrigger,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogDescription,
-} from './dialog';
-
-describe('Dialog Components', () => {
-  describe('DialogTrigger', () => {
-    it('should render trigger button', () => {
-      render(
-        <Dialog>
-          <DialogTrigger>打开对话框</DialogTrigger>
-        </Dialog>
-      );
-      expect(screen.getByText('打开对话框')).toBeInTheDocument();
-    });
-  });
-
-  describe('DialogHeader', () => {
-    it('should render header with children', () => {
-      render(<DialogHeader>Header Content</DialogHeader>);
-      expect(screen.getByText('Header Content')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(<DialogHeader data-testid="header">Header</DialogHeader>);
-      expect(screen.getByTestId('header')).toHaveAttribute('data-slot', 'dialog-header');
-    });
-
-    it('should apply custom className', () => {
-      render(<DialogHeader className="custom-class">Header</DialogHeader>);
-      const header = screen.getByText('Header');
-      expect(header).toHaveClass('custom-class');
-    });
-  });
-
-  describe('DialogTitle', () => {
-    it('should render title text', () => {
-      render(
-        <Dialog open>
-          <DialogTitle>Dialog Title</DialogTitle>
-        </Dialog>
-      );
-      expect(screen.getByText('Dialog Title')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Dialog open>
-          <DialogTitle data-testid="title">Title</DialogTitle>
-        </Dialog>
-      );
-      expect(screen.getByTestId('title')).toHaveAttribute('data-slot', 'dialog-title');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Dialog open>
-          <DialogTitle className="custom-title">Title</DialogTitle>
-        </Dialog>
-      );
-      expect(screen.getByText('Title')).toHaveClass('custom-title');
-    });
-  });
-
-  describe('DialogDescription', () => {
-    it('should render description text', () => {
-      render(
-        <Dialog open>
-          <DialogDescription>Dialog Description</DialogDescription>
-        </Dialog>
-      );
-      expect(screen.getByText('Dialog Description')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Dialog open>
-          <DialogDescription data-testid="desc">Desc</DialogDescription>
-        </Dialog>
-      );
-      expect(screen.getByTestId('desc')).toHaveAttribute('data-slot', 'dialog-description');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Dialog open>
-          <DialogDescription className="custom-desc">Desc</DialogDescription>
-        </Dialog>
-      );
-      expect(screen.getByText('Desc')).toHaveClass('custom-desc');
-    });
-  });
-
-  describe('DialogContent', () => {
-    it('should render content with children when open', () => {
-      render(
-        <Dialog open>
-          <DialogContent>Content Body</DialogContent>
-        </Dialog>
-      );
-      expect(screen.getByText('Content Body')).toBeInTheDocument();
-    });
-  });
-
-  describe('Dialog Composition', () => {
-    it('should render complete dialog structure', () => {
-      render(
-        <Dialog open>
-          <DialogTrigger>打开</DialogTrigger>
-          <DialogContent>
-            <DialogHeader>
-              <DialogTitle>确认操作</DialogTitle>
-              <DialogDescription>确定要执行此操作吗？</DialogDescription>
-            </DialogHeader>
-          </DialogContent>
-        </Dialog>
-      );
-
-      expect(screen.getByText('确认操作')).toBeInTheDocument();
-      expect(screen.getByText('确定要执行此操作吗？')).toBeInTheDocument();
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/components/ui/dialog.tsx b/src/components/ui/dialog.tsx
deleted file mode 100644
index 4f36391..0000000
--- a/src/components/ui/dialog.tsx
+++ /dev/null
@@ -1,124 +0,0 @@
-'use client';
-
-import * as React from 'react';
-import * as DialogPrimitive from '@radix-ui/react-dialog';
-import { X } from 'lucide-react';
-import { cn } from '@/lib/utils';
-
-/**
- * 标准 shadcn/ui Dialog 组件
- * 基于 @radix-ui/react-dialog
- */
-const Dialog = DialogPrimitive.Root;
-const DialogTrigger = DialogPrimitive.Trigger;
-const DialogPortal = DialogPrimitive.Portal;
-const DialogClose = DialogPrimitive.Close;
-
-const DialogOverlay = React.forwardRef<
-  React.ElementRef<typeof DialogPrimitive.Overlay>,
-  React.ComponentPropsWithoutRef<typeof DialogPrimitive.Overlay>
->(({ className, ...props }, ref) => (
-  <DialogPrimitive.Overlay
-    ref={ref}
-    data-slot="dialog-overlay"
-    className={cn(
-      'fixed inset-0 z-50 bg-overlay/60 backdrop-blur-sm',
-      'data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0',
-      className
-    )}
-    {...props}
-  />
-));
-DialogOverlay.displayName = DialogPrimitive.Overlay.displayName;
-
-const DialogContent = React.forwardRef<
-  React.ElementRef<typeof DialogPrimitive.Content>,
-  React.ComponentPropsWithoutRef<typeof DialogPrimitive.Content>
->(({ className, children, ...props }, ref) => (
-  <DialogPortal>
-    <DialogOverlay />
-    <DialogPrimitive.Content
-      ref={ref}
-      data-slot="dialog-content"
-      className={cn(
-        'fixed left-[50%] top-[50%] z-50 grid w-full max-w-lg translate-x-[-50%] translate-y-[-50%] gap-4 border border-border-primary bg-bg-primary p-6 shadow-lg duration-fast',
-        'data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95',
-        'sm:rounded-lg',
-        className
-      )}
-      {...props}
-    >
-      {children}
-      <DialogPrimitive.Close
-        data-slot="dialog-close"
-        className={cn(
-          'absolute right-4 top-4 rounded-sm opacity-70 transition-opacity',
-          'hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-brand',
-          'disabled:pointer-events-none',
-          className
-        )}
-      >
-        <X className="size-4" />
-        <span className="sr-only">关闭</span>
-      </DialogPrimitive.Close>
-    </DialogPrimitive.Content>
-  </DialogPortal>
-));
-DialogContent.displayName = DialogPrimitive.Content.displayName;
-
-const DialogHeader = ({ className, ...props }: React.ComponentProps<'div'>) => (
-  <div
-    data-slot="dialog-header"
-    className={cn('flex flex-col space-y-1.5 text-center sm:text-left', className)}
-    {...props}
-  />
-);
-DialogHeader.displayName = 'DialogHeader';
-
-const DialogFooter = ({ className, ...props }: React.ComponentProps<'div'>) => (
-  <div
-    data-slot="dialog-footer"
-    className={cn('flex flex-col-reverse sm:flex-row sm:justify-end sm:space-x-2', className)}
-    {...props}
-  />
-);
-DialogFooter.displayName = 'DialogFooter';
-
-const DialogTitle = React.forwardRef<
-  React.ElementRef<typeof DialogPrimitive.Title>,
-  React.ComponentPropsWithoutRef<typeof DialogPrimitive.Title>
->(({ className, ...props }, ref) => (
-  <DialogPrimitive.Title
-    ref={ref}
-    data-slot="dialog-title"
-    className={cn('text-lg font-semibold leading-none tracking-tight text-text-primary', className)}
-    {...props}
-  />
-));
-DialogTitle.displayName = DialogPrimitive.Title.displayName;
-
-const DialogDescription = React.forwardRef<
-  React.ElementRef<typeof DialogPrimitive.Description>,
-  React.ComponentPropsWithoutRef<typeof DialogPrimitive.Description>
->(({ className, ...props }, ref) => (
-  <DialogPrimitive.Description
-    ref={ref}
-    data-slot="dialog-description"
-    className={cn('text-sm text-text-muted', className)}
-    {...props}
-  />
-));
-DialogDescription.displayName = DialogPrimitive.Description.displayName;
-
-export {
-  Dialog,
-  DialogPortal,
-  DialogOverlay,
-  DialogTrigger,
-  DialogClose,
-  DialogContent,
-  DialogHeader,
-  DialogFooter,
-  DialogTitle,
-  DialogDescription,
-};
diff --git a/src/components/ui/flip-clock.tsx b/src/components/ui/flip-clock.tsx
deleted file mode 100644
index b9a40ab..0000000
--- a/src/components/ui/flip-clock.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-'use client';
-
-import { useReducer, useEffect } from 'react';
-import { motion, AnimatePresence } from 'framer-motion';
-
-interface FlipCardProps {
-  value: number;
-  label: string;
-  maxDigits?: number;
-}
-
-interface FlipDigitProps {
-  digit: number;
-  prevDigit: number;
-}
-
-function FlipDigit({ digit, prevDigit }: FlipDigitProps) {
-  return (
-    <div className="relative w-14 h-20 sm:w-16 sm:h-24 md:w-20 md:h-28 perspective-1000">
-      {/* 背景卡片 - 静态显示当前数字 */}
-      <div className="absolute inset-0 bg-gradient-to-b from-[var(--color-bg-primary)] via-[var(--color-bg-primary)] to-[var(--color-bg-secondary)] rounded-lg shadow-xl overflow-hidden border border-[var(--color-border-primary)]">
-        <div className="absolute top-0 left-0 right-0 h-1/2 bg-gradient-to-b from-[var(--color-bg-primary)] to-[var(--color-bg-secondary)] border-b border-[var(--color-border-primary)] overflow-hidden">
-          <div className="absolute inset-0 flex items-center justify-center text-4xl sm:text-5xl md:text-6xl font-bold text-[var(--color-brand)]">
-            {digit}
-          </div>
-        </div>
-        <div className="absolute bottom-0 left-0 right-0 h-1/2 bg-gradient-to-b from-[var(--color-bg-primary)] to-[var(--color-bg-secondary)] overflow-hidden">
-          <div className="absolute inset-0 flex items-center justify-center text-4xl sm:text-5xl md:text-6xl font-bold text-[var(--color-brand)]">
-            {digit}
-          </div>
-        </div>
-      </div>
-      
-      {/* 翻转动画层 */}
-      <AnimatePresence custom={true}>
-        {/* 上半部分翻转 */}
-        <motion.div
-          key={`top-${prevDigit}`}
-          initial={{ rotateX: 0 }}
-          animate={{ rotateX: -180 }}
-          exit={{ rotateX: -180 }}
-          transition={{ duration: 0.6, ease: [0.4, 0, 0.2, 1] }}
-          className="absolute inset-0 bg-gradient-to-b from-[var(--color-bg-primary)] to-[var(--color-bg-secondary)] rounded-t-lg overflow-hidden border-t border-l border-r border-[var(--color-border-primary)]"
-          style={{ 
-            transformOrigin: 'bottom',
-            backfaceVisibility: 'hidden',
-          }}
-        >
-          <div className="absolute inset-0 flex items-center justify-center text-4xl sm:text-5xl md:text-6xl font-bold text-[var(--color-brand)]">
-            {prevDigit}
-          </div>
-        </motion.div>
-        
-        {/* 下半部分翻转 */}
-        <motion.div
-          key={`bottom-${digit}`}
-          initial={{ rotateX: 180 }}
-          animate={{ rotateX: 0 }}
-          exit={{ rotateX: 0 }}
-          transition={{ duration: 0.6, ease: [0.4, 0, 0.2, 1] }}
-          className="absolute inset-0 bg-gradient-to-b from-[var(--color-bg-primary)] to-[var(--color-bg-secondary)] rounded-b-lg overflow-hidden border-b border-l border-r border-[var(--color-border-primary)]"
-          style={{ 
-            transformOrigin: 'top',
-            backfaceVisibility: 'hidden',
-          }}
-        >
-          <div className="absolute inset-0 flex items-center justify-center text-4xl sm:text-5xl md:text-6xl font-bold text-[var(--color-brand)]">
-            {digit}
-          </div>
-        </motion.div>
-      </AnimatePresence>
-      
-      <div className="absolute top-1/2 left-0 right-0 h-px bg-[var(--color-border-primary)] transform -translate-y-1/2" />
-      <div className="absolute top-0 left-0 right-0 h-px bg-[var(--color-border-light)]/50" />
-      <div className="absolute bottom-0 left-0 right-0 h-px bg-[var(--color-border-light)]/50" />
-      
-      {/* 侧面阴影增强立体感 */}
-      <div className="absolute inset-0 rounded-lg shadow-[inset_0_2px_4px_rgba(0,0,0,0.1)] pointer-events-none" />
-    </div>
-  );
-}
-
-function FlipCard({ value, label, maxDigits = 2 }: FlipCardProps) {
-  const [state, dispatch] = useReducer(
-    (prev: { current: number; previous: number }, next: number) => {
-      if (next === prev.current) {
-        return prev;
-      }
-      return { current: next, previous: prev.current };
-    },
-    { current: value, previous: value }
-  );
-  useEffect(() => {
-    dispatch(value);
-  }, [value]);
-
-  const formatNumber = (num: number) => {
-    const str = num.toString().padStart(maxDigits, '0');
-    return str.split('').map(c => parseInt(c));
-  };
-
-  const currentDigits = formatNumber(state.current);
-  const prevDigits = formatNumber(state.previous);
-
-  return (
-    <div className="flex flex-col items-center">
-      <div className="flex gap-1 sm:gap-2 mb-3">
-        {currentDigits.map((digit, index) => (
-          <FlipDigit
-            key={index}
-            digit={digit}
-            prevDigit={prevDigits[index] ?? digit}
-          />
-        ))}
-      </div>
-      <div className="text-sm sm:text-base text-[var(--color-text-placeholder)] font-medium">{label}</div>
-    </div>
-  );
-}
-
-interface FlipClockProps {
-  years: number;
-  months: number;
-  days: number;
-}
-
-export function FlipClock({ years, months, days }: FlipClockProps) {
-  return (
-    <div className="bg-[var(--color-bg-secondary)] rounded-2xl p-8 border border-[var(--color-border-primary)]">
-      <h2 className="text-2xl font-bold text-[var(--color-text-primary)] mb-6">运营时长</h2>
-      <p className="text-[var(--color-text-placeholder)] mb-6 leading-relaxed">
-        自 <span className="font-semibold text-[var(--color-text-primary)]">2026 年 1 月 15 日</span> 成立以来
-      </p>
-      
-      <div className="flex flex-wrap justify-center items-center gap-4 sm:gap-6 mb-6">
-        <FlipCard value={years} label="年" maxDigits={2} />
-        <div className="text-2xl sm:text-3xl font-bold text-[var(--color-brand)]">:</div>
-        <FlipCard value={months} label="个月" maxDigits={2} />
-        <div className="text-2xl sm:text-3xl font-bold text-[var(--color-brand)]">:</div>
-        <FlipCard value={days} label="天" maxDigits={3} />
-      </div>
-      
-      <p className="text-[var(--color-text-placeholder)] leading-relaxed font-medium">
-        持续打磨产品，致力于为企业提供优质的数字化转型服务
-      </p>
-    </div>
-  );
-}
diff --git a/src/components/ui/index.ts b/src/components/ui/index.ts
deleted file mode 100644
index 9ed7f39..0000000
--- a/src/components/ui/index.ts
+++ /dev/null
@@ -1,201 +0,0 @@
-// === shadcn/ui 标准组件 ===
-export { Button, buttonVariants } from './button';
-export type { ButtonProps } from './button';
-
-export {
-  Card,
-  CardHeader,
-  CardFooter,
-  CardTitle,
-  CardAction,
-  CardDescription,
-  CardContent,
-} from './card';
-
-export { Badge, badgeVariants } from './badge';
-
-export { Input } from './input';
-
-export { Textarea } from './textarea';
-
-export { Label, labelVariants } from './label';
-
-export { LabeledInput } from './labeled-input';
-export type { LabeledInputProps } from './labeled-input';
-
-export { LabeledTextarea } from './labeled-textarea';
-export type { LabeledTextareaProps } from './labeled-textarea';
-
-export { Skeleton, SkeletonText, SkeletonCard, SkeletonList, SkeletonHero, SkeletonForm } from './skeleton';
-
-// === 表单类 ===
-export { Checkbox } from './checkbox';
-export { Switch } from './switch';
-export { RadioGroup, RadioGroupItem } from './radio-group';
-export { Slider } from './slider';
-export {
-  Select,
-  SelectGroup,
-  SelectValue,
-  SelectTrigger,
-  SelectContent,
-  SelectLabel,
-  SelectItem,
-  SelectSeparator,
-  SelectScrollUpButton,
-  SelectScrollDownButton,
-} from './select';
-export {
-  Form,
-  FormField,
-  FormItem,
-  FormLabel,
-  FormControl,
-  FormDescription,
-  FormMessage,
-  useFormField,
-  useFormWithZod,
-} from './form';
-
-// === 反馈类 ===
-export { Alert, AlertTitle, AlertDescription, alertVariants } from './alert';
-export {
-  AlertDialog,
-  AlertDialogPortal,
-  AlertDialogOverlay,
-  AlertDialogTrigger,
-  AlertDialogContent,
-  AlertDialogHeader,
-  AlertDialogFooter,
-  AlertDialogTitle,
-  AlertDialogDescription,
-  AlertDialogAction,
-  AlertDialogCancel,
-} from './alert-dialog';
-export {
-  Dialog,
-  DialogPortal,
-  DialogOverlay,
-  DialogTrigger,
-  DialogClose,
-  DialogContent,
-  DialogHeader,
-  DialogFooter,
-  DialogTitle,
-  DialogDescription,
-} from './dialog';
-export { Progress } from './progress';
-
-// === 导航类 ===
-export {
-  DropdownMenu,
-  DropdownMenuTrigger,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuCheckboxItem,
-  DropdownMenuRadioItem,
-  DropdownMenuLabel,
-  DropdownMenuSeparator,
-  DropdownMenuShortcut,
-  DropdownMenuGroup,
-  DropdownMenuPortal,
-  DropdownMenuSub,
-  DropdownMenuSubContent,
-  DropdownMenuSubTrigger,
-  DropdownMenuRadioGroup,
-} from './dropdown-menu';
-export { Tabs, TabsList, TabsTrigger, TabsContent } from './tabs';
-export { Accordion, AccordionItem, AccordionTrigger, AccordionContent } from './accordion';
-export {
-  Pagination,
-  PaginationContent,
-  PaginationLink,
-  PaginationItem,
-  PaginationPrevious,
-  PaginationNext,
-  PaginationEllipsis,
-} from './pagination';
-export {
-  Breadcrumb,
-  BreadcrumbList,
-  BreadcrumbItem,
-  BreadcrumbLink,
-  BreadcrumbPage,
-  BreadcrumbSeparator,
-  BreadcrumbEllipsis,
-} from './breadcrumb';
-
-// === 数据类 ===
-export {
-  Table,
-  TableHeader,
-  TableBody,
-  TableFooter,
-  TableHead,
-  TableRow,
-  TableCell,
-  TableCaption,
-} from './table';
-export { Avatar, AvatarImage, AvatarFallback } from './avatar';
-export { Separator } from './separator';
-export { ScrollArea, ScrollBar } from './scroll-area';
-
-// === 浮层类 ===
-export {
-  Tooltip,
-  TooltipTrigger,
-  TooltipContent,
-  TooltipProvider,
-  LegacyTooltip,
-} from './tooltip';
-export { Popover, PopoverTrigger, PopoverContent, PopoverAnchor } from './popover';
-export { HoverCard, HoverCardTrigger, HoverCardContent } from './hover-card';
-export {
-  ContextMenu,
-  ContextMenuTrigger,
-  ContextMenuContent,
-  ContextMenuItem,
-  ContextMenuCheckboxItem,
-  ContextMenuRadioItem,
-  ContextMenuLabel,
-  ContextMenuSeparator,
-  ContextMenuShortcut,
-  ContextMenuGroup,
-  ContextMenuPortal,
-  ContextMenuSub,
-  ContextMenuSubContent,
-  ContextMenuSubTrigger,
-  ContextMenuRadioGroup,
-} from './context-menu';
-
-// === Toast (Sonner) ===
-export { Toaster, toast } from './sonner';
-export { Toast } from './toast';
-
-// === 业务自定义组件（保留） ===
-export { ScrollReveal, StaggerReveal } from './scroll-reveal';
-export { ScrollProgress } from './scroll-progress';
-export { BackToTop } from './back-to-top';
-export { StaticLink } from './static-link';
-export { Spinner, LoadingState, PageLoader, useLoadingState } from './loading-state';
-export { ErrorBoundary } from './error-boundary';
-export { PageTransition, StaggerChildren } from './page-transition';
-export {
-  EASE_OUT,
-  GrainOverlay,
-  SectionLabel,
-} from './page-decoration';
-export {
-  GeometricDecoration,
-  DataBar,
-  GradientDivider,
-  BrandStamp,
-} from './brand-visuals';
-export { ChallengeCard } from './challenge-card';
-export { ProductCard as UiProductCard } from './product-card';
-export { DetailSwipeNav } from './detail-swipe-nav';
-export { FlipClock } from './flip-clock';
-export { AnimatedCounter } from './animated-counter';
-export { MetricCard } from './metric-card';
-export { StatsShowcase } from './stats-showcase';
-export { MilestoneTimeline } from './milestone-timeline';
diff --git a/src/components/ui/loading-skeleton.test.tsx b/src/components/ui/loading-skeleton.test.tsx
deleted file mode 100644
index c2a622a..0000000
--- a/src/components/ui/loading-skeleton.test.tsx
+++ /dev/null
@@ -1,150 +0,0 @@
-import { describe, it, expect } from '@jest/globals';
-import { render } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import {
-  Skeleton,
-  CardSkeleton,
-  ServiceCardSkeleton,
-  CaseCardSkeleton,
-  ProductCardSkeleton,
-  NewsCardSkeleton,
-  SectionSkeleton,
-} from './loading-skeleton';
-
-describe('Loading Skeleton Components', () => {
-  describe('Skeleton', () => {
-    it('should render skeleton element', () => {
-      const { container } = render(<Skeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should apply default styles', () => {
-      const { container } = render(<Skeleton />);
-      const skeleton = container.firstChild as HTMLElement;
-      // loading-skeleton.tsx 使用 skeleton-brand 自定义类
-      expect(skeleton).toHaveClass('skeleton-brand');
-      expect(skeleton).toHaveClass('rounded-md');
-    });
-
-    it('should apply custom className', () => {
-      const { container } = render(<Skeleton className="custom-class" />);
-      const skeleton = container.firstChild as HTMLElement;
-      expect(skeleton).toHaveClass('custom-class');
-    });
-  });
-
-  describe('CardSkeleton', () => {
-    it('should render card skeleton', () => {
-      const { container } = render(<CardSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should have correct structure', () => {
-      const { container } = render(<CardSkeleton />);
-      // CardSkeleton 包含 4 个子 Skeleton，使用 skeleton-brand 类
-      const skeletonElements = container.querySelectorAll('.skeleton-brand');
-      expect(skeletonElements.length).toBeGreaterThan(0);
-    });
-  });
-
-  describe('ServiceCardSkeleton', () => {
-    it('should render service card skeleton', () => {
-      const { container } = render(<ServiceCardSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should have full height', () => {
-      const { container } = render(<ServiceCardSkeleton />);
-      const card = container.firstChild as HTMLElement;
-      expect(card).toHaveClass('h-full');
-    });
-  });
-
-  describe('CaseCardSkeleton', () => {
-    it('should render case card skeleton', () => {
-      const { container } = render(<CaseCardSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should have image placeholder', () => {
-      const { container } = render(<CaseCardSkeleton />);
-      const imageSkeleton = container.querySelector('.h-48');
-      expect(imageSkeleton).toBeInTheDocument();
-    });
-  });
-
-  describe('ProductCardSkeleton', () => {
-    it('should render product card skeleton', () => {
-      const { container } = render(<ProductCardSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should have flex column layout', () => {
-      const { container } = render(<ProductCardSkeleton />);
-      const card = container.firstChild as HTMLElement;
-      expect(card).toHaveClass('flex');
-      expect(card).toHaveClass('flex-col');
-    });
-  });
-
-  describe('NewsCardSkeleton', () => {
-    it('should render news card skeleton', () => {
-      const { container } = render(<NewsCardSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should have image placeholder', () => {
-      const { container } = render(<NewsCardSkeleton />);
-      const imageSkeleton = container.querySelector('.h-48');
-      expect(imageSkeleton).toBeInTheDocument();
-    });
-  });
-
-  describe('SectionSkeleton', () => {
-    it('should render section skeleton', () => {
-      const { container } = render(<SectionSkeleton />);
-      expect(container.firstChild).toBeInTheDocument();
-    });
-
-    it('should render multiple service card skeletons', () => {
-      const { container } = render(<SectionSkeleton />);
-      // SectionSkeleton 渲染 4 个 ServiceCardSkeleton
-      // ServiceCardSkeleton 容器使用 var(--color-bg-primary)
-      const cards = container.querySelectorAll('.skeleton-brand');
-      // 每个 ServiceCardSkeleton 包含 4 个 Skeleton，4 个卡片共 16 个
-      expect(cards.length).toBeGreaterThanOrEqual(4);
-    });
-  });
-
-  describe('Accessibility', () => {
-    it('should not have any accessible content', () => {
-      const { container } = render(<CardSkeleton />);
-      const textContent = container.textContent;
-      expect(textContent).toBe('');
-    });
-
-    it('should be purely decorative', () => {
-      const { container } = render(<SectionSkeleton />);
-      const elements = container.querySelectorAll('*');
-      elements.forEach(element => {
-        expect(element).not.toHaveAttribute('aria-label');
-        expect(element).not.toHaveAttribute('aria-labelledby');
-      });
-    });
-  });
-
-  describe('Animation', () => {
-    it('should have pulse animation', () => {
-      const { container } = render(<Skeleton />);
-      const skeleton = container.firstChild as HTMLElement;
-      // loading-skeleton.tsx 使用 skeleton-brand 自定义类（CSS 中包含动画）
-      expect(skeleton).toHaveClass('skeleton-brand');
-    });
-
-    it('should apply animation to all skeleton elements', () => {
-      const { container } = render(<CardSkeleton />);
-      const skeletons = container.querySelectorAll('.skeleton-brand');
-      expect(skeletons.length).toBeGreaterThan(0);
-    });
-  });
-});
diff --git a/src/components/ui/loading-skeleton.tsx b/src/components/ui/loading-skeleton.tsx
deleted file mode 100644
index e0ccad6..0000000
--- a/src/components/ui/loading-skeleton.tsx
+++ /dev/null
@@ -1,96 +0,0 @@
-'use client';
-
-import { cn } from '@/lib/utils';
-
-interface SkeletonProps {
-  className?: string;
-}
-
-export function Skeleton({ className }: SkeletonProps) {
-  return (
-    <div
-      className={cn(
-        'skeleton-brand rounded-md',
-        className
-      )}
-    />
-  );
-}
-
-export function CardSkeleton() {
-  return (
-    <div className="bg-[var(--color-bg-section)] rounded-xl border border-[var(--color-border-primary)] p-6">
-      <Skeleton className="h-12 w-12 rounded-xl mb-4" />
-      <Skeleton className="h-6 w-3/4 mb-3" />
-      <Skeleton className="h-4 w-full mb-2" />
-      <Skeleton className="h-4 w-2/3" />
-    </div>
-  );
-}
-
-export function ServiceCardSkeleton() {
-  return (
-    <div className="bg-[var(--color-bg-primary)] rounded-xl border border-[var(--color-border-primary)] p-6 h-full">
-      <Skeleton className="h-14 w-14 rounded-xl mb-4" />
-      <Skeleton className="h-6 w-3/4 mb-3" />
-      <Skeleton className="h-4 w-full mb-2" />
-      <Skeleton className="h-4 w-2/3" />
-    </div>
-  );
-}
-
-export function CaseCardSkeleton() {
-  return (
-    <div className="bg-[var(--color-bg-primary)] rounded-xl border border-[var(--color-border-primary)] overflow-hidden">
-      <Skeleton className="h-48 w-full" />
-      <div className="p-6">
-        <Skeleton className="h-5 w-1/2 mb-3" />
-        <Skeleton className="h-6 w-3/4 mb-3" />
-        <Skeleton className="h-4 w-full mb-2" />
-        <Skeleton className="h-4 w-2/3" />
-      </div>
-    </div>
-  );
-}
-
-export function ProductCardSkeleton() {
-  return (
-    <div className="bg-[var(--color-bg-section)] rounded-xl border border-[var(--color-border-primary)] p-6 h-full flex flex-col">
-      <Skeleton className="h-6 w-1/3 mb-3" />
-      <Skeleton className="h-7 w-3/4 mb-4" />
-      <Skeleton className="h-4 w-full mb-2" />
-      <Skeleton className="h-4 w-2/3 mb-4" />
-      <Skeleton className="h-10 w-full mt-auto" />
-    </div>
-  );
-}
-
-export function NewsCardSkeleton() {
-  return (
-    <div className="bg-[var(--color-bg-primary)] rounded-xl border border-[var(--color-border-primary)] overflow-hidden">
-      <Skeleton className="h-48 w-full" />
-      <div className="p-6">
-        <Skeleton className="h-5 w-1/4 mb-3" />
-        <Skeleton className="h-6 w-3/4 mb-3" />
-        <Skeleton className="h-4 w-full mb-2" />
-        <Skeleton className="h-4 w-2/3" />
-      </div>
-    </div>
-  );
-}
-
-export function SectionSkeleton() {
-  return (
-    <div className="py-24">
-      <div className="container-wide">
-        <div className="max-w-6xl mx-auto">
-          <div className="grid md:grid-cols-2 gap-8">
-            {Array.from({ length: 4 }).map((_, index) => (
-              <ServiceCardSkeleton key={index} />
-            ))}
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/src/components/ui/loading-state.tsx b/src/components/ui/loading-state.tsx
index e5e13eb..4bcb174 100644
--- a/src/components/ui/loading-state.tsx
+++ b/src/components/ui/loading-state.tsx
@@ -54,7 +54,7 @@ export function LoadingState({
   if (isLoading && showSkeleton) {
     return (
       <div
-        className={cn('animate-in fade-in duration-300', className)}
+        className={cn('animate-in fade-in duration-normal', className)}
         role="status"
         aria-label="内容加载中"
         aria-busy="true"
@@ -97,7 +97,7 @@ export function Spinner({ size = 'md', className }: SpinnerProps) {
   return (
     <svg
       className={cn(
-        'animate-spin text-[var(--color-brand)]',
+        'animate-spin text-brand-ink',
         sizeClasses[size],
         className
       )}
diff --git a/src/components/ui/metric-card.test.tsx b/src/components/ui/metric-card.test.tsx
deleted file mode 100644
index a935830..0000000
--- a/src/components/ui/metric-card.test.tsx
+++ /dev/null
@@ -1,104 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect, jest } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import { MetricCard } from './metric-card';
-
-// ─── Mocks ───────────────────────────────────────────────────────────────
-
-jest.mock('framer-motion', () => ({
-  motion: {
-    div: ({ children, className, ...props }: any) => (
-      <div className={className} {...props}>{children}</div>
-    ),
-    span: ({ children, className, ...props }: any) => (
-      <span className={className} {...props}>{children}</span>
-    ),
-  },
-  useInView: jest.fn(() => true),
-}));
-
-jest.mock('lucide-react', () => ({
-  ArrowUpRight: (props: any) => <svg data-testid="icon-trend-up" className={props.className} />,
-  ArrowDownRight: (props: any) => <svg data-testid="icon-trend-down" className={props.className} />,
-}));
-
-jest.mock('@/components/ui/animated-counter', () => ({
-  AnimatedCounter: ({ value, prefix, suffix }: any) => (
-    <span>{prefix}{value}{suffix}</span>
-  ),
-}));
-
-// ─── Tests ───────────────────────────────────────────────────────────────
-
-describe('MetricCard', () => {
-  it('should render label and value', () => {
-    render(<MetricCard label="客户数" value={500} />);
-    expect(screen.getByText('客户数')).toBeInTheDocument();
-    expect(screen.getByText('500')).toBeInTheDocument();
-  });
-
-  it('should render icon when provided', () => {
-    render(
-      <MetricCard
-        label="收入"
-        value={1000}
-        icon={<span data-testid="custom-icon">$</span>}
-      />
-    );
-    expect(screen.getByTestId('custom-icon')).toBeInTheDocument();
-  });
-
-  it('should render prefix and suffix', () => {
-    render(<MetricCard label="增长率" value={99} prefix="+" suffix="%" />);
-    expect(screen.getByText('+99%')).toBeInTheDocument();
-  });
-
-  it('should render description when provided', () => {
-    render(<MetricCard label="用户" value={1000} description="活跃用户数" />);
-    expect(screen.getByText('活跃用户数')).toBeInTheDocument();
-  });
-
-  it('should render trend with up direction', () => {
-    render(
-      <MetricCard
-        label="收入"
-        value={500}
-        trend={{ value: '+12%', direction: 'up' }}
-      />
-    );
-    expect(screen.getByText('+12%')).toBeInTheDocument();
-    expect(screen.getByTestId('icon-trend-up')).toBeInTheDocument();
-  });
-
-  it('should render trend with down direction', () => {
-    render(
-      <MetricCard
-        label="流失率"
-        value={5}
-        trend={{ value: '-2%', direction: 'down', label: '较上月' }}
-      />
-    );
-    expect(screen.getByText('-2%')).toBeInTheDocument();
-    expect(screen.getByText('较上月')).toBeInTheDocument();
-    expect(screen.getByTestId('icon-trend-down')).toBeInTheDocument();
-  });
-
-  it('should apply custom className', () => {
-    const { container } = render(
-      <MetricCard label="测试" value={1} className="custom-class" />
-    );
-    const div = container.querySelector('.custom-class');
-    expect(div).toBeInTheDocument();
-  });
-
-  it('should render in dark theme', () => {
-    render(<MetricCard label="Dark" value={100} theme="dark" />);
-    expect(screen.getByText('Dark')).toBeInTheDocument();
-  });
-
-  it('should render with different accent colors', () => {
-    render(<MetricCard label="Blue" value={1} accentColor="blue" />);
-    expect(screen.getByText('Blue')).toBeInTheDocument();
-  });
-});
\ No newline at end of file
diff --git a/src/components/ui/metric-card.tsx b/src/components/ui/metric-card.tsx
deleted file mode 100644
index 64ab25a..0000000
--- a/src/components/ui/metric-card.tsx
+++ /dev/null
@@ -1,123 +0,0 @@
-'use client';
-
-import type { ReactNode } from 'react';
-import { ArrowUpRight, ArrowDownRight } from 'lucide-react';
-import { AnimatedCounter } from '@/components/ui/animated-counter';
-import { cn } from '@/lib/utils';
-
-type TrendDirection = 'up' | 'down' | 'neutral';
-
-interface MetricCardProps {
-  icon?: ReactNode;
-  label: string;
-  value: number;
-  prefix?: string;
-  suffix?: string;
-  decimals?: number;
-  description?: string;
-  trend?: {
-    value: string;
-    direction: TrendDirection;
-    label?: string;
-  };
-  accentColor?: 'brand' | 'blue' | 'teal' | 'amber' | 'purple';
-  className?: string;
-  theme?: 'light' | 'dark';
-}
-
-const accentStyles: Record<string, string> = {
-  brand: 'text-brand-ink bg-brand-bg',
-  blue: 'text-accent-blue bg-accent-blue/10',
-  teal: 'text-accent-teal bg-accent-teal/10',
-  amber: 'text-accent-amber bg-accent-amber/10',
-  purple: 'text-accent-purple bg-accent-purple/10',
-};
-
-const trendIcon = {
-  up: ArrowUpRight,
-  down: ArrowDownRight,
-  neutral: ArrowUpRight,
-};
-
-const trendColor: Record<TrendDirection, string> = {
-  up: 'text-success',
-  down: 'text-error',
-  neutral: 'text-text-muted',
-};
-
-export function MetricCard({
-  icon,
-  label,
-  value,
-  prefix = '',
-  suffix = '',
-  decimals = 0,
-  description,
-  trend,
-  accentColor = 'brand',
-  className,
-  theme = 'light',
-}: MetricCardProps) {
-  const TrendIcon = trend ? trendIcon[trend.direction] : null;
-  const isDark = theme === 'dark';
-
-  return (
-    <div
-      className={cn(
-        'group relative overflow-hidden rounded-sm border p-6 sm:p-7 transition-all duration-300 ease-out',
-        isDark
-          ? 'bg-overlay/50 border-white/[0.08] hover:border-white/20 hover:bg-overlay'
-          : 'border-border-primary bg-bg-primary hover:bg-bg-secondary',
-        className
-      )}
-    >
-      <div className="flex items-start justify-between mb-5">
-        {icon && (
-          <div
-            className={cn(
-              'flex w-12 h-12 items-center justify-center rounded-xl transition-transform duration-300 group-hover:scale-110',
-              accentStyles[accentColor]
-            )}
-          >
-            {icon}
-          </div>
-        )}
-        {trend && TrendIcon && (
-          <div className={cn('flex items-center gap-1 text-xs font-medium', trendColor[trend.direction])}>
-            <TrendIcon className="w-3.5 h-3.5" />
-            <span>{trend.value}</span>
-            {trend.label && <span className={isDark ? 'text-white/40' : 'text-text-subtle'}>{trend.label}</span>}
-          </div>
-        )}
-      </div>
-
-      <div className="space-y-1.5">
-        <div className={cn(
-          'text-sm font-medium tracking-wide uppercase',
-          isDark ? 'text-white/50' : 'text-text-muted'
-        )}>
-          {label}
-        </div>
-        <div className={cn(
-          'text-3xl sm:text-4xl font-bold tracking-tight',
-          isDark ? 'text-white' : 'text-text-primary'
-        )}>
-          <AnimatedCounter
-            value={value}
-            decimals={decimals}
-            prefix={prefix}
-            suffix={suffix}
-          />
-        </div>
-        {description && (
-          <p className={cn(
-            'text-sm leading-relaxed pt-2',
-            isDark ? 'text-white/60' : 'text-text-muted'
-          )}>
-            {description}
-          </p>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/src/components/ui/milestone-timeline.tsx b/src/components/ui/milestone-timeline.tsx
deleted file mode 100644
index ac28da1..0000000
--- a/src/components/ui/milestone-timeline.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-'use client';
-
-import { useRef, useState, useEffect } from 'react';
-import { cn } from '@/lib/utils';
-
-interface MilestoneItem {
-  year: string;
-  title: string;
-  description: string;
-  highlight?: string;
-  icon?: React.ReactNode;
-}
-
-interface MilestoneTimelineProps {
-  items: MilestoneItem[];
-  className?: string;
-  variant?: 'horizontal' | 'vertical';
-  theme?: 'light' | 'dark';
-}
-
-export function MilestoneTimeline({
-  items,
-  className,
-  variant = 'horizontal',
-  theme = 'light',
-}: MilestoneTimelineProps) {
-  const ref = useRef<HTMLDivElement>(null);
-  const [inView, setInView] = useState(false);
-
-  useEffect(() => {
-    const el = ref.current;
-    if (!el) return;
-
-    const observer = new IntersectionObserver(
-      ([entry]) => {
-        if (entry?.isIntersecting) {
-          setInView(true);
-          observer.disconnect();
-        }
-      },
-      { threshold: 0.15 },
-    );
-
-    observer.observe(el);
-    return () => observer.disconnect();
-  }, []);
-
-  const isDark = theme === 'dark';
-
-  if (variant === 'vertical') {
-    return (
-      <div ref={ref} className={cn('relative', className)}>
-        <div className={cn('absolute left-4 top-0 bottom-0 w-px', isDark ? 'bg-white/10' : 'bg-border-primary')} />
-        <div className="space-y-10">
-          {items.map((item, i) => (
-            <div
-              key={i}
-              className="relative pl-14"
-              style={{
-                opacity: inView ? 1 : 0,
-                transform: inView ? 'translateX(0)' : 'translateX(-20px)',
-                transition: `all 0.6s cubic-bezier(0.22, 1, 0.36, 1) ${i * 120}ms`,
-              }}
-            >
-              <div className={cn(
-                'absolute left-2 top-1 w-5 h-5 rounded-full border-2 flex items-center justify-center',
-                isDark ? 'bg-dark-bg border-brand' : 'bg-bg-primary border-brand'
-              )}>
-                <div className="w-2 h-2 rounded-full bg-brand" />
-              </div>
-              <div className="text-sm font-bold text-brand-ink mb-1 tracking-wider">
-                {item.year}
-              </div>
-              <h4 className={cn('text-lg font-semibold mb-2', isDark ? 'text-white' : 'text-text-primary')}>
-                {item.title}
-              </h4>
-              <p className={cn('text-sm leading-relaxed', isDark ? 'text-white/60' : 'text-text-muted')}>
-                {item.description}
-              </p>
-              {item.highlight && (
-                <div className={cn(
-                  'mt-3 inline-flex items-center px-3 py-1 rounded-full text-xs font-medium',
-                  isDark ? 'bg-brand/10 text-brand-ink' : 'bg-brand-bg text-brand-ink'
-                )}>
-                  {item.highlight}
-                </div>
-              )}
-            </div>
-          ))}
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div ref={ref} className={cn('relative', className)}>
-      <div className={cn('absolute left-0 right-0 top-6 h-px', isDark ? 'bg-white/10' : 'bg-border-primary')} />
-      <div className="grid grid-cols-1 sm:grid-cols-2 md:grid-cols-4 gap-6 lg:gap-8">
-        {items.map((item, i) => (
-          <div
-            key={i}
-            className="relative pt-12 text-center"
-            style={{
-              opacity: inView ? 1 : 0,
-              transform: inView ? 'translateY(0)' : 'translateY(20px)',
-              transition: `all 0.6s cubic-bezier(0.22, 1, 0.36, 1) ${i * 120}ms`,
-            }}
-          >
-            <div className={cn(
-              'absolute top-4 left-1/2 -translate-x-1/2 w-5 h-5 rounded-full border-2 flex items-center justify-center z-10',
-              isDark ? 'bg-ink border-brand' : 'bg-bg-primary border-brand'
-            )}>
-              <div className="w-2 h-2 rounded-full bg-brand" />
-            </div>
-            <div className="text-sm font-bold text-brand-ink mb-2 tracking-wider">
-              {item.year}
-            </div>
-            <h4 className={cn('text-base font-semibold mb-2 leading-snug', isDark ? 'text-white' : 'text-text-primary')}>
-              {item.title}
-            </h4>
-            <p className={cn('text-xs sm:text-sm leading-relaxed', isDark ? 'text-white/60' : 'text-text-muted')}>
-              {item.description}
-            </p>
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
diff --git a/src/components/ui/motion-provider.tsx b/src/components/ui/motion-provider.tsx
new file mode 100644
index 0000000..4992b7b
--- /dev/null
+++ b/src/components/ui/motion-provider.tsx
@@ -0,0 +1,9 @@
+'use client';
+
+import { type ReactNode } from 'react';
+import { MotionConfig } from 'framer-motion';
+
+// 组件级 useReducedMotion 只覆盖显式调用它的文件；这里让全部 framer-motion 动效遵守系统设置（验收 R-5）
+export function MotionProvider({ children }: { children: ReactNode }) {
+  return <MotionConfig reducedMotion="user">{children}</MotionConfig>;
+}
diff --git a/src/components/ui/page-transition.tsx b/src/components/ui/page-transition.tsx
index b40cacf..a2c0531 100644
--- a/src/components/ui/page-transition.tsx
+++ b/src/components/ui/page-transition.tsx
@@ -16,7 +16,7 @@ const pageVariants = {
     y: 0,
     scale: 1,
     transition: {
-      duration: 0.3,
+      duration: 0.28,
       ease: [0.25, 1, 0.5, 1] as const,
       staggerChildren: 0.05,
     },
@@ -72,7 +72,7 @@ const sectionVariants = {
     y: 0,
     transition: {
       delay: i * 0.06,
-      duration: 0.3,
+      duration: 0.28,
       ease: [0.25, 1, 0.5, 1] as const,
     },
   }),
diff --git a/src/components/ui/product-card.tsx b/src/components/ui/product-card.tsx
index e518b6c..261e6cb 100644
--- a/src/components/ui/product-card.tsx
+++ b/src/components/ui/product-card.tsx
@@ -46,7 +46,7 @@ export function ProductCard({ title, description, href, index, status }: Product
 
   return (
     <a href={href}>
-      <Card className="group h-full relative overflow-hidden transition-all duration-300 hover:-translate-y-1 hover:shadow-lg">
+      <Card className="group h-full relative overflow-hidden transition-all duration-normal hover:-translate-y-1 hover:shadow-lg">
         {/* 产品图标 */}
         <div className="flex items-start justify-between mb-4">
           <div
@@ -81,7 +81,7 @@ export function ProductCard({ title, description, href, index, status }: Product
         </div>
 
         {/* 标题 */}
-        <h3 className="text-base font-semibold mb-2 leading-snug tracking-tight text-[var(--color-text-primary)] group-hover:text-[var(--color-brand)] transition-colors">
+        <h3 className="text-base font-semibold mb-2 leading-snug tracking-tight text-[var(--color-text-primary)] group-hover:text-brand-ink transition-colors">
           {title}
         </h3>
 
@@ -92,7 +92,7 @@ export function ProductCard({ title, description, href, index, status }: Product
 
         {/* 研发中/内测中 提示 */}
         {(status === '研发中' || status === '内测中') && (
-          <div className="flex items-center gap-1.5 text-xs text-[var(--color-brand)]/70 mb-4 px-3 py-2 rounded-lg bg-[var(--color-brand-bg)]/50">
+          <div className="flex items-center gap-1.5 text-xs text-brand-ink/70 mb-4 px-3 py-2 rounded-lg bg-brand-bg/50">
             <svg className="w-3.5 h-3.5 animate-spin" viewBox="0 0 24 24" fill="none">
               <circle cx="12" cy="12" r="10" stroke="currentColor" strokeWidth="2.5" strokeLinecap="round" strokeDasharray="32 16" />
             </svg>
@@ -101,7 +101,7 @@ export function ProductCard({ title, description, href, index, status }: Product
         )}
 
         {/* CTA 链接 */}
-        <div className="flex items-center gap-1.5 text-sm font-medium text-[var(--color-text-subtle)] group-hover:text-[var(--color-brand)] transition-colors min-h-[44px] mt-auto">
+        <div className="flex items-center gap-1.5 text-sm font-medium text-[var(--color-text-subtle)] group-hover:text-brand-ink transition-colors min-h-[44px] mt-auto">
           <span>{status === '研发中' ? '了解规划' : status === '内测中' ? '申请内测' : '了解更多'}</span>
           <ArrowUpRight className="w-4 h-4" strokeWidth={2} />
         </div>
diff --git a/src/components/ui/scroll-progress.test.tsx b/src/components/ui/scroll-progress.test.tsx
index dd5b95f..c52ea10 100644
--- a/src/components/ui/scroll-progress.test.tsx
+++ b/src/components/ui/scroll-progress.test.tsx
@@ -1,15 +1,19 @@
 import { render } from '@testing-library/react';
 import '@testing-library/jest-dom';
 import { ScrollProgress } from './scroll-progress';
+import { useReducedMotion } from '@/hooks/use-reduced-motion';
 
 // Mock useReducedMotion
 jest.mock('@/hooks/use-reduced-motion', () => ({
-  useReducedMotion: () => false,
+  useReducedMotion: jest.fn(() => false),
 }));
 
+const mockedReduced = useReducedMotion as jest.MockedFunction<typeof useReducedMotion>;
+
 describe('ScrollProgress', () => {
   beforeEach(() => {
     jest.clearAllMocks();
+    mockedReduced.mockReturnValue(false);
     // Mock document/scroll geometry for predictable progress calculation
     Object.defineProperty(document.documentElement, 'scrollHeight', {
       value: 1000,
@@ -92,4 +96,26 @@ describe('ScrollProgress', () => {
     expect(innerBar.style.background).toContain('255');
     expect(innerBar.style.background).toContain('0');
   });
+
+  it('prefers-reduced-motion 下只去掉过渡、保留进度宽度', () => {
+    mockedReduced.mockReturnValue(true);
+    Object.defineProperty(window, 'scrollY', { value: 250, configurable: true, writable: true });
+
+    const { container } = render(<ScrollProgress />);
+    const innerBar = (container.firstChild as HTMLElement).firstChild as HTMLElement;
+
+    // scrollY 250 / 可滚动高度 500 ⇒ 进度 50%：宽度信号不得被坍缩为 0
+    expect(innerBar.style.transform).toBe('scaleX(0.5)');
+    expect(innerBar.style.transition).toBe('none');
+  });
+
+  it('未开启 reduced-motion 时进度宽度与过渡同时在场', () => {
+    Object.defineProperty(window, 'scrollY', { value: 250, configurable: true, writable: true });
+
+    const { container } = render(<ScrollProgress />);
+    const innerBar = (container.firstChild as HTMLElement).firstChild as HTMLElement;
+
+    expect(innerBar.style.transform).toBe('scaleX(0.5)');
+    expect(innerBar.style.transition).toBe('transform 0.1s linear');
+  });
 });
diff --git a/src/components/ui/scroll-progress.tsx b/src/components/ui/scroll-progress.tsx
index 53e7a34..b0db858 100644
--- a/src/components/ui/scroll-progress.tsx
+++ b/src/components/ui/scroll-progress.tsx
@@ -56,7 +56,7 @@ export function ScrollProgress({
           height: '100%',
           background: color,
           transformOrigin: 'left',
-          transform: `scaleX(${shouldReduceMotion ? 0 : progress / 100})`,
+          transform: `scaleX(${progress / 100})`,
           transition: shouldReduceMotion ? 'none' : 'transform 0.1s linear',
         }}
       />
diff --git a/src/components/ui/scroll-reveal.tsx b/src/components/ui/scroll-reveal.tsx
index 878bd6d..faa68d8 100644
--- a/src/components/ui/scroll-reveal.tsx
+++ b/src/components/ui/scroll-reveal.tsx
@@ -66,11 +66,11 @@ export function ScrollReveal({
   xOffset = 0,
   margin = '-40px',
   variant = 'fadeIn',
-  // 入场时长默认值：CONTEXT.md L52「动效设计四原则 · Fast」规定入场 200-300ms。
-  // 原值 0.4（400ms）超出目标区间，改为 300ms（目标上限）。
-  // 注意：700ms 是「禁止超过」的硬上限（CONTEXT.md L58），不是目标值。
+  // 入场时长默认值：CONTEXT.md「动效设计四原则 · Fast」规定入场 180–280ms
+  // （即 --transition-fast … --transition-normal），另规定「禁止超过 700ms 的入场动效」。
+  // 原值 0.4 / 0.3 均超出区间，改为区间上限 0.28。
   // 本默认值被 22 个文件消费，改动影响面大，需视觉回归。
-  duration = 0.3,
+  duration = 0.28,
   once = true,
   amount = 0,
 }: ScrollRevealProps) {
@@ -96,6 +96,7 @@ export function ScrollReveal({
 interface StaggerRevealProps {
   children: ReactNode;
   className?: string;
+  role?: string;
   staggerDelay?: number;
   delayChildren?: number;
   variant?: RevealVariant;
@@ -108,6 +109,7 @@ interface StaggerRevealProps {
 export function StaggerReveal({
   children,
   className = '',
+  role,
   staggerDelay = 0.05,
   delayChildren = 0.05,
   variant = 'fadeIn',
@@ -136,6 +138,7 @@ export function StaggerReveal({
   return (
     <motion.div
       className={className}
+      role={role}
       initial="hidden"
       whileInView="visible"
       viewport={{ once, margin }}
diff --git a/src/components/ui/select.test.tsx b/src/components/ui/select.test.tsx
deleted file mode 100644
index 2c69eac..0000000
--- a/src/components/ui/select.test.tsx
+++ /dev/null
@@ -1,136 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import {
-  Select,
-  SelectTrigger,
-  SelectContent,
-  SelectItem,
-  SelectValue,
-} from './select';
-
-describe('Select Components', () => {
-  describe('SelectTrigger', () => {
-    it('should render trigger with placeholder', () => {
-      render(
-        <Select>
-          <SelectTrigger>
-            <SelectValue placeholder="请选择" />
-          </SelectTrigger>
-        </Select>
-      );
-      expect(screen.getByText('请选择')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Select>
-          <SelectTrigger data-testid="trigger">
-            <SelectValue placeholder="选择" />
-          </SelectTrigger>
-        </Select>
-      );
-      expect(screen.getByTestId('trigger')).toHaveAttribute('data-slot', 'select-trigger');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Select>
-          <SelectTrigger className="custom-trigger" data-testid="trigger">
-            <SelectValue placeholder="选择" />
-          </SelectTrigger>
-        </Select>
-      );
-      expect(screen.getByTestId('trigger')).toHaveClass('custom-trigger');
-    });
-
-    it('should render with selected value', () => {
-      render(
-        <Select value="option1">
-          <SelectTrigger>
-            <SelectValue />
-          </SelectTrigger>
-          <SelectContent>
-            <SelectItem value="option1">选项一</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-      expect(screen.getByText('选项一')).toBeInTheDocument();
-    });
-  });
-
-  describe('SelectContent', () => {
-    it('should render content with items when open', () => {
-      render(
-        <Select open>
-          <SelectContent>
-            <SelectItem value="option1">选项一</SelectItem>
-            <SelectItem value="option2">选项二</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-      const items = screen.getAllByRole('option');
-      expect(items).toHaveLength(2);
-      expect(items[0]).toHaveTextContent('选项一');
-      expect(items[1]).toHaveTextContent('选项二');
-    });
-  });
-
-  describe('SelectItem', () => {
-    it('should render item text', () => {
-      render(
-        <Select open>
-          <SelectContent>
-            <SelectItem value="option1">选项一</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-      const item = screen.getByRole('option');
-      expect(item).toHaveTextContent('选项一');
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Select open>
-          <SelectContent>
-            <SelectItem value="opt1" data-testid="item">Item</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-      expect(screen.getByTestId('item')).toHaveAttribute('data-slot', 'select-item');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Select open>
-          <SelectContent>
-            <SelectItem value="opt1" className="custom-item" data-testid="item">Item</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-      expect(screen.getByTestId('item')).toHaveClass('custom-item');
-    });
-  });
-
-  describe('Select Composition', () => {
-    it('should render complete select structure', () => {
-      render(
-        <Select open>
-          <SelectTrigger>
-            <SelectValue placeholder="请选择" />
-          </SelectTrigger>
-          <SelectContent>
-            <SelectItem value="cn">中文</SelectItem>
-            <SelectItem value="en">英文</SelectItem>
-            <SelectItem value="jp">日文</SelectItem>
-          </SelectContent>
-        </Select>
-      );
-
-      expect(screen.getByText('中文')).toBeInTheDocument();
-      expect(screen.getByText('英文')).toBeInTheDocument();
-      expect(screen.getByText('日文')).toBeInTheDocument();
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/components/ui/select.tsx b/src/components/ui/select.tsx
deleted file mode 100644
index e296bba..0000000
--- a/src/components/ui/select.tsx
+++ /dev/null
@@ -1,168 +0,0 @@
-'use client';
-
-import * as React from 'react';
-import * as SelectPrimitive from '@radix-ui/react-select';
-import { Check, ChevronDown, ChevronUp } from 'lucide-react';
-import { cn } from '@/lib/utils';
-
-/**
- * 标准 shadcn/ui Select 组件
- * 基于 @radix-ui/react-select
- */
-const Select = SelectPrimitive.Root;
-const SelectGroup = SelectPrimitive.Group;
-const SelectValue = SelectPrimitive.Value;
-
-const SelectTrigger = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.Trigger>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.Trigger>
->(({ className, children, ...props }, ref) => (
-  <SelectPrimitive.Trigger
-    ref={ref}
-    data-slot="select-trigger"
-    className={cn(
-      'flex h-11 w-full items-center justify-between rounded-md border border-border-primary bg-bg-primary px-3 py-2 text-sm shadow-sm',
-      'placeholder:text-text-placeholder',
-      'focus:outline-none focus-visible:ring-2 focus-visible:ring-brand focus-visible:ring-offset-2',
-      'disabled:cursor-not-allowed disabled:opacity-50',
-      'data-[placeholder]:text-text-placeholder',
-      'transition-colors duration-fast hover:border-border-secondary',
-      '[&>span]:line-clamp-1',
-      className
-    )}
-    {...props}
-  >
-    {children}
-    <SelectPrimitive.Icon asChild>
-      <ChevronDown className="size-4 opacity-50" />
-    </SelectPrimitive.Icon>
-  </SelectPrimitive.Trigger>
-));
-SelectTrigger.displayName = SelectPrimitive.Trigger.displayName;
-
-const SelectScrollUpButton = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.ScrollUpButton>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.ScrollUpButton>
->(({ className, ...props }, ref) => (
-  <SelectPrimitive.ScrollUpButton
-    ref={ref}
-    data-slot="select-scroll-up-button"
-    className={cn('flex cursor-default items-center justify-center py-1', className)}
-    {...props}
-  >
-    <ChevronUp className="size-4" />
-  </SelectPrimitive.ScrollUpButton>
-));
-SelectScrollUpButton.displayName = SelectPrimitive.ScrollUpButton.displayName;
-
-const SelectScrollDownButton = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.ScrollDownButton>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.ScrollDownButton>
->(({ className, ...props }, ref) => (
-  <SelectPrimitive.ScrollDownButton
-    ref={ref}
-    data-slot="select-scroll-down-button"
-    className={cn('flex cursor-default items-center justify-center py-1', className)}
-    {...props}
-  >
-    <ChevronDown className="size-4" />
-  </SelectPrimitive.ScrollDownButton>
-));
-SelectScrollDownButton.displayName = SelectPrimitive.ScrollDownButton.displayName;
-
-const SelectContent = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.Content>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.Content>
->(({ className, children, position = 'popper', ...props }, ref) => (
-  <SelectPrimitive.Portal>
-    <SelectPrimitive.Content
-      ref={ref}
-      data-slot="select-content"
-      className={cn(
-        'relative z-50 max-h-96 min-w-[8rem] overflow-hidden rounded-md border border-border-primary bg-bg-primary text-text-primary shadow-md',
-        'data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95',
-        'data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2',
-        position === 'popper' && 'data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1',
-        className
-      )}
-      position={position}
-      {...props}
-    >
-      <SelectScrollUpButton />
-      <SelectPrimitive.Viewport
-        className={cn(
-          'p-1',
-          position === 'popper' && 'h-[var(--radix-select-trigger-height)] w-full min-w-[var(--radix-select-trigger-width)]'
-        )}
-      >
-        {children}
-      </SelectPrimitive.Viewport>
-      <SelectScrollDownButton />
-    </SelectPrimitive.Content>
-  </SelectPrimitive.Portal>
-));
-SelectContent.displayName = SelectPrimitive.Content.displayName;
-
-const SelectLabel = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.Label>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.Label>
->(({ className, ...props }, ref) => (
-  <SelectPrimitive.Label
-    ref={ref}
-    data-slot="select-label"
-    className={cn('px-2 py-1.5 text-xs font-medium text-text-muted', className)}
-    {...props}
-  />
-));
-SelectLabel.displayName = SelectPrimitive.Label.displayName;
-
-const SelectItem = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.Item>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.Item>
->(({ className, children, ...props }, ref) => (
-  <SelectPrimitive.Item
-    ref={ref}
-    data-slot="select-item"
-    className={cn(
-      'relative flex w-full cursor-default select-none items-center rounded-sm py-1.5 pl-2 pr-8 text-sm outline-none',
-      'focus:bg-bg-secondary focus:text-text-primary',
-      'data-[disabled]:pointer-events-none data-[disabled]:opacity-50',
-      className
-    )}
-    {...props}
-  >
-    <span className="absolute right-2 flex size-3.5 items-center justify-center">
-      <SelectPrimitive.ItemIndicator>
-        <Check className="size-4 text-brand-ink" />
-      </SelectPrimitive.ItemIndicator>
-    </span>
-    <SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
-  </SelectPrimitive.Item>
-));
-SelectItem.displayName = SelectPrimitive.Item.displayName;
-
-const SelectSeparator = React.forwardRef<
-  React.ElementRef<typeof SelectPrimitive.Separator>,
-  React.ComponentPropsWithoutRef<typeof SelectPrimitive.Separator>
->(({ className, ...props }, ref) => (
-  <SelectPrimitive.Separator
-    ref={ref}
-    data-slot="select-separator"
-    className={cn('-mx-1 my-1 h-px bg-border-primary', className)}
-    {...props}
-  />
-));
-SelectSeparator.displayName = SelectPrimitive.Separator.displayName;
-
-export {
-  Select,
-  SelectGroup,
-  SelectValue,
-  SelectTrigger,
-  SelectContent,
-  SelectLabel,
-  SelectItem,
-  SelectSeparator,
-  SelectScrollUpButton,
-  SelectScrollDownButton,
-};
diff --git a/src/components/ui/stats-showcase.tsx b/src/components/ui/stats-showcase.tsx
deleted file mode 100644
index d39cc14..0000000
--- a/src/components/ui/stats-showcase.tsx
+++ /dev/null
@@ -1,142 +0,0 @@
-'use client';
-
-import { useRef, useState, useEffect } from 'react';
-import { AnimatedCounter } from '@/components/ui/animated-counter';
-import { cn } from '@/lib/utils';
-
-interface StatShowcaseItem {
-  value: number;
-  prefix?: string;
-  suffix?: string;
-  decimals?: number;
-  label: string;
-  description?: string;
-  accent?: string;
-}
-
-interface StatsShowcaseProps {
-  items: StatShowcaseItem[];
-  columns?: 2 | 3 | 4;
-  variant?: 'default' | 'dark' | 'minimal';
-  className?: string;
-}
-
-export function StatsShowcase({
-  items,
-  columns = 4,
-  variant = 'default',
-  className,
-}: StatsShowcaseProps) {
-  const sectionRef = useRef<HTMLDivElement>(null);
-  const [inView, setInView] = useState(false);
-
-  useEffect(() => {
-    const el = sectionRef.current;
-    if (!el) return;
-
-    const observer = new IntersectionObserver(
-      ([entry]) => {
-        if (entry?.isIntersecting) {
-          setInView(true);
-          observer.disconnect();
-        }
-      },
-      { threshold: 0.2 },
-    );
-
-    observer.observe(el);
-    return () => observer.disconnect();
-  }, []);
-
-  const gridCols = {
-    2: 'grid-cols-1 sm:grid-cols-2',
-    3: 'grid-cols-1 sm:grid-cols-2 lg:grid-cols-3',
-    4: 'grid-cols-2 sm:grid-cols-2 lg:grid-cols-4',
-  };
-
-  const isDark = variant === 'dark';
-
-  return (
-    <div
-      ref={sectionRef}
-      className={cn(
-        'grid gap-px overflow-hidden rounded-sm',
-        gridCols[columns],
-        isDark
-          ? 'bg-white/5'
-          : 'bg-border-primary',
-        className
-      )}
-    >
-      {items.map((item, i) => (
-        <div
-          key={i}
-          className={cn(
-            'relative p-8 sm:p-10 md:p-12 text-center transition-all duration-300 group',
-            isDark ? 'bg-dark-bg hover:bg-dark-bg-secondary' : 'bg-bg-primary hover:bg-bg-hover'
-          )}
-        >
-          <div className="relative z-10">
-            <div
-              className={cn(
-                'font-sans text-[clamp(40px,9vw,72px)] font-bold leading-none mb-3 tracking-tight',
-                isDark ? 'text-white' : 'text-text-primary'
-              )}
-              style={{
-                opacity: inView ? 1 : 0,
-                transform: inView ? 'translateY(0)' : 'translateY(12px)',
-                transition: `all 0.7s cubic-bezier(0.22, 1, 0.36, 1) ${i * 100}ms`,
-              }}
-            >
-              <AnimatedCounter
-                value={item.value}
-                decimals={item.decimals || 0}
-                prefix={item.prefix}
-                suffix={item.suffix}
-                startOnView={false}
-                duration={1800}
-              />
-            </div>
-
-            <div
-              className={cn(
-                'text-xs sm:text-sm font-medium tracking-[0.15em] uppercase mb-3',
-                isDark ? 'text-white/60' : 'text-text-muted'
-              )}
-              style={{
-                opacity: inView ? 1 : 0,
-                transform: inView ? 'translateY(0)' : 'translateY(8px)',
-                transition: `all 0.6s cubic-bezier(0.22, 1, 0.36, 1) ${i * 100 + 150}ms`,
-              }}
-            >
-              {item.label}
-            </div>
-
-            {item.description && (
-              <div
-                className={cn(
-                  'text-xs sm:text-sm leading-relaxed max-w-[200px] mx-auto',
-                  isDark ? 'text-white/40' : 'text-text-subtle'
-                )}
-                style={{
-                  opacity: inView ? 1 : 0,
-                  transform: inView ? 'translateY(0)' : 'translateY(6px)',
-                  transition: `all 0.6s cubic-bezier(0.22, 1, 0.36, 1) ${i * 100 + 250}ms`,
-                }}
-              >
-                {item.description}
-              </div>
-            )}
-          </div>
-
-          {item.accent && (
-            <div
-              className="absolute top-0 left-1/2 -translate-x-1/2 w-12 h-0.5 opacity-0 group-hover:opacity-100 transition-opacity duration-150"
-              style={{ backgroundColor: item.accent }}
-            />
-          )}
-        </div>
-      ))}
-    </div>
-  );
-}
diff --git a/src/components/ui/tabs.test.tsx b/src/components/ui/tabs.test.tsx
deleted file mode 100644
index 6926275..0000000
--- a/src/components/ui/tabs.test.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-// @ts-nocheck
-import { describe, it, expect } from '@jest/globals';
-import { render, screen } from '@testing-library/react';
-import '@testing-library/jest-dom';
-import { Tabs, TabsList, TabsTrigger, TabsContent } from './tabs';
-
-describe('Tabs Components', () => {
-  describe('TabsList', () => {
-    it('should render list with children', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1">Tab 1</TabsTrigger>
-          </TabsList>
-        </Tabs>
-      );
-      expect(screen.getByText('Tab 1')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList data-testid="list">List</TabsList>
-        </Tabs>
-      );
-      expect(screen.getByTestId('list')).toHaveAttribute('data-slot', 'tabs-list');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList className="custom-list">List</TabsList>
-        </Tabs>
-      );
-      expect(screen.getByText('List')).toHaveClass('custom-list');
-    });
-  });
-
-  describe('TabsTrigger', () => {
-    it('should render trigger text', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1">标签一</TabsTrigger>
-          </TabsList>
-        </Tabs>
-      );
-      expect(screen.getByText('标签一')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1" data-testid="trigger">Trigger</TabsTrigger>
-          </TabsList>
-        </Tabs>
-      );
-      expect(screen.getByTestId('trigger')).toHaveAttribute('data-slot', 'tabs-trigger');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1" className="custom-trigger">Trigger</TabsTrigger>
-          </TabsList>
-        </Tabs>
-      );
-      expect(screen.getByText('Trigger')).toHaveClass('custom-trigger');
-    });
-
-    it('should handle disabled state', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1" disabled>Disabled</TabsTrigger>
-          </TabsList>
-        </Tabs>
-      );
-      expect(screen.getByText('Disabled')).toBeDisabled();
-    });
-  });
-
-  describe('TabsContent', () => {
-    it('should render content when value matches', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsContent value="tab1">内容一</TabsContent>
-        </Tabs>
-      );
-      expect(screen.getByText('内容一')).toBeInTheDocument();
-    });
-
-    it('should have data-slot attribute', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsContent value="tab1" data-testid="content">Content</TabsContent>
-        </Tabs>
-      );
-      expect(screen.getByTestId('content')).toHaveAttribute('data-slot', 'tabs-content');
-    });
-
-    it('should apply custom className', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsContent value="tab1" className="custom-content">Content</TabsContent>
-        </Tabs>
-      );
-      expect(screen.getByText('Content')).toHaveClass('custom-content');
-    });
-  });
-
-  describe('Tabs Composition', () => {
-    it('should render complete tabs structure', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1">标签一</TabsTrigger>
-            <TabsTrigger value="tab2">标签二</TabsTrigger>
-          </TabsList>
-          <TabsContent value="tab1">内容一</TabsContent>
-          <TabsContent value="tab2">内容二</TabsContent>
-        </Tabs>
-      );
-
-      expect(screen.getByText('标签一')).toBeInTheDocument();
-      expect(screen.getByText('标签二')).toBeInTheDocument();
-      expect(screen.getByText('内容一')).toBeInTheDocument();
-    });
-
-    it('should not show content for non-matching tab', () => {
-      render(
-        <Tabs defaultValue="tab1">
-          <TabsList>
-            <TabsTrigger value="tab1">Tab 1</TabsTrigger>
-            <TabsTrigger value="tab2">Tab 2</TabsTrigger>
-          </TabsList>
-          <TabsContent value="tab1">Content 1</TabsContent>
-          <TabsContent value="tab2">Content 2</TabsContent>
-        </Tabs>
-      );
-
-      expect(screen.getByText('Content 1')).toBeInTheDocument();
-      expect(screen.queryByText('Content 2')).not.toBeInTheDocument();
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/components/ui/tabs.tsx b/src/components/ui/tabs.tsx
deleted file mode 100644
index a4f18fc..0000000
--- a/src/components/ui/tabs.tsx
+++ /dev/null
@@ -1,65 +0,0 @@
-'use client';
-
-import * as React from 'react';
-import * as TabsPrimitive from '@radix-ui/react-tabs';
-import { cn } from '@/lib/utils';
-
-/**
- * 标准 shadcn/ui Tabs 组件
- * 基于 @radix-ui/react-tabs
- */
-const Tabs = TabsPrimitive.Root;
-
-const TabsList = React.forwardRef<
-  React.ElementRef<typeof TabsPrimitive.List>,
-  React.ComponentPropsWithoutRef<typeof TabsPrimitive.List>
->(({ className, ...props }, ref) => (
-  <TabsPrimitive.List
-    ref={ref}
-    data-slot="tabs-list"
-    className={cn(
-      'inline-flex h-10 items-center justify-center rounded-md bg-bg-tertiary p-1 text-text-muted',
-      className
-    )}
-    {...props}
-  />
-));
-TabsList.displayName = TabsPrimitive.List.displayName;
-
-const TabsTrigger = React.forwardRef<
-  React.ElementRef<typeof TabsPrimitive.Trigger>,
-  React.ComponentPropsWithoutRef<typeof TabsPrimitive.Trigger>
->(({ className, ...props }, ref) => (
-  <TabsPrimitive.Trigger
-    ref={ref}
-    data-slot="tabs-trigger"
-    className={cn(
-      'inline-flex items-center justify-center whitespace-nowrap rounded-sm px-3 py-1.5 text-sm font-medium',
-      'ring-offset-background transition-all duration-fast',
-      'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-brand focus-visible:ring-offset-2',
-      'disabled:pointer-events-none disabled:opacity-50',
-      'data-[state=active]:bg-bg-primary data-[state=active]:text-text-primary data-[state=active]:shadow-sm',
-      className
-    )}
-    {...props}
-  />
-));
-TabsTrigger.displayName = TabsPrimitive.Trigger.displayName;
-
-const TabsContent = React.forwardRef<
-  React.ElementRef<typeof TabsPrimitive.Content>,
-  React.ComponentPropsWithoutRef<typeof TabsPrimitive.Content>
->(({ className, ...props }, ref) => (
-  <TabsPrimitive.Content
-    ref={ref}
-    data-slot="tabs-content"
-    className={cn(
-      'mt-2 ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-brand focus-visible:ring-offset-2',
-      className
-    )}
-    {...props}
-  />
-));
-TabsContent.displayName = TabsPrimitive.Content.displayName;
-
-export { Tabs, TabsList, TabsTrigger, TabsContent };
diff --git a/src/hooks/use-count-up.test.ts b/src/hooks/use-count-up.test.ts
index 9446d3f..b796b88 100644
--- a/src/hooks/use-count-up.test.ts
+++ b/src/hooks/use-count-up.test.ts
@@ -47,10 +47,14 @@ describe('useCountUp', () => {
     });
 
     it('should reach end value after sufficient time', () => {
-      renderHook(() => useCountUp({ end: 100, duration: 500 }));
+      const { result } = renderHook(() =>
+        useCountUp({ end: 100, duration: 500 })
+      );
 
       // Simulate animation frames progressing past the duration
       advanceFrames([0, 100, 200, 300, 400, 500, 600]);
+
+      expect(result.current).toBe(100);
     });
 
     it('should have intermediate values during animation', () => {
diff --git a/src/hooks/use-focus-trap.test.tsx b/src/hooks/use-focus-trap.test.tsx
index ec173b5..ca5cc6a 100644
--- a/src/hooks/use-focus-trap.test.tsx
+++ b/src/hooks/use-focus-trap.test.tsx
@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeEach, jest } from '@jest/globals';
 import { renderHook, render, screen, fireEvent } from '@testing-library/react';
-import { useState } from 'react';
+import { useState, type ReactElement } from 'react';
 import { useFocusTrap } from './use-focus-trap';
 
 describe('useFocusTrap', () => {
@@ -628,4 +628,211 @@ describe('useFocusTrap', () => {
       }).not.toThrow();
     });
   });
+
+  describe('Focusability Filter', () => {
+    it('should not treat tabIndex={-1} buttons as focusable', () => {
+      function NegativeTabIndexTrap() {
+        const ref = useFocusTrap<HTMLDivElement>(true);
+        return (
+          <div ref={ref}>
+            <button tabIndex={-1} data-testid="neg-btn">programmatic only</button>
+            <button data-testid="real-btn">real</button>
+          </div>
+        );
+      }
+
+      render(<NegativeTabIndexTrap />);
+
+      // 挂载时的初始焦点必须跳过 tabindex=-1（选择器 union 里 button 也会命中它）
+      expect(document.activeElement).toBe(screen.getByTestId('real-btn'));
+
+      const preventDefaultSpy = jest.spyOn(Event.prototype, 'preventDefault');
+      screen.getByTestId('real-btn').focus();
+      fireEvent.keyDown(document, { key: 'Tab' });
+      // real-btn 是唯一的 first/last，Tab 应留在原地；旧实现会把焦点交给 -1 按钮
+      expect(preventDefaultSpy).toHaveBeenCalled();
+      expect(document.activeElement).toBe(screen.getByTestId('real-btn'));
+      preventDefaultSpy.mockRestore();
+    });
+
+    it('should not treat input[type=hidden] as focusable', () => {
+      function HiddenInputTrap() {
+        const ref = useFocusTrap<HTMLDivElement>(true);
+        return (
+          <div ref={ref}>
+            <input type="hidden" data-testid="hidden-input" />
+            <button data-testid="after-hidden">visible</button>
+          </div>
+        );
+      }
+
+      render(<HiddenInputTrap />);
+
+      expect(document.activeElement).toBe(screen.getByTestId('after-hidden'));
+    });
+
+    it('should not treat disabled controls as focusable', () => {
+      function DisabledTrap() {
+        const ref = useFocusTrap<HTMLDivElement>(true);
+        return (
+          <div ref={ref}>
+            <button disabled data-testid="disabled-btn">disabled</button>
+            <button data-testid="enabled-btn">enabled</button>
+          </div>
+        );
+      }
+
+      render(<DisabledTrap />);
+
+      expect(document.activeElement).toBe(screen.getByTestId('enabled-btn'));
+    });
+  });
+
+  describe('Escape Owner Contract', () => {
+    function OwnerTrap({ isActive, onEscape }: { isActive: boolean; onEscape?: () => void }) {
+      const ref = useFocusTrap<HTMLDivElement>(isActive, { onEscape });
+      return (
+        <div>
+          <button data-testid="opener">opener</button>
+          <button data-testid="elsewhere">elsewhere</button>
+          <div ref={ref} data-testid="trap">
+            <button data-testid="inside">inside</button>
+          </div>
+        </div>
+      );
+    }
+
+    function openWithOpener(rerender: (ui: ReactElement) => void, onEscape?: () => void) {
+      (screen.getByTestId('opener') as HTMLElement).focus();
+      rerender(<OwnerTrap isActive onEscape={onEscape} />);
+    }
+
+    it('should notify the owner and keep focus inside the still-open trap on Escape', () => {
+      const onEscape = jest.fn();
+      const { rerender } = render(<OwnerTrap isActive={false} />);
+      openWithOpener(rerender, onEscape);
+      expect(document.activeElement).toBe(screen.getByTestId('inside'));
+
+      fireEvent.keyDown(document, { key: 'Escape' });
+
+      expect(onEscape).toHaveBeenCalledTimes(1);
+      // 焦点不得在 owner 还没关闭陷阱前逃到 trap 之外
+      expect(document.activeElement).toBe(screen.getByTestId('inside'));
+    });
+
+    it('should return focus to the opener once the owner actually closes the trap', () => {
+      const onEscape = jest.fn();
+      const { rerender } = render(<OwnerTrap isActive={false} />);
+      openWithOpener(rerender, onEscape);
+
+      fireEvent.keyDown(document, { key: 'Escape' });
+      rerender(<OwnerTrap isActive={false} onEscape={onEscape} />);
+
+      expect(document.activeElement).toBe(screen.getByTestId('opener'));
+    });
+
+    it('should preventDefault Escape when the owner handles it', () => {
+      const preventDefaultSpy = jest.spyOn(Event.prototype, 'preventDefault');
+      const onEscape = jest.fn();
+      const { rerender } = render(<OwnerTrap isActive={false} />);
+      openWithOpener(rerender, onEscape);
+
+      fireEvent.keyDown(document, { key: 'Escape' });
+
+      expect(preventDefaultSpy).toHaveBeenCalled();
+      preventDefaultSpy.mockRestore();
+    });
+
+    it('should keep the legacy immediate focus return when no owner is registered', () => {
+      const { rerender } = render(<OwnerTrap isActive={false} />);
+      openWithOpener(rerender);
+
+      fireEvent.keyDown(document, { key: 'Escape' });
+
+      expect(document.activeElement).toBe(screen.getByTestId('opener'));
+    });
+
+    it('should not steal focus the user moved outside before the trap closed', () => {
+      const onEscape = jest.fn();
+      const { rerender } = render(<OwnerTrap isActive={false} />);
+      openWithOpener(rerender, onEscape);
+
+      (screen.getByTestId('elsewhere') as HTMLElement).focus();
+      rerender(<OwnerTrap isActive={false} onEscape={onEscape} />);
+
+      expect(document.activeElement).toBe(screen.getByTestId('elsewhere'));
+    });
+
+    it('should restore focus to the opener when the trap container unmounts', () => {
+      // 对应 header 抽屉：面板随状态卸载，焦点不能掉回 body。
+      function ConditionalTrap() {
+        const [active, setActive] = useState(false);
+        const ref = useFocusTrap<HTMLDivElement>(active);
+        return (
+          <div>
+            <button data-testid="opener" onClick={() => setActive((prev) => !prev)}>toggle</button>
+            {active && (
+              <div ref={ref} data-testid="trap">
+                <button data-testid="inside">inside</button>
+              </div>
+            )}
+          </div>
+        );
+      }
+
+      render(<ConditionalTrap />);
+      (screen.getByTestId('opener') as HTMLElement).focus();
+
+      fireEvent.click(screen.getByTestId('opener'));
+      expect(document.activeElement).toBe(screen.getByTestId('inside'));
+
+      fireEvent.click(screen.getByTestId('opener'));
+      expect(screen.queryByTestId('trap')).not.toBeInTheDocument();
+      expect(document.activeElement).toBe(screen.getByTestId('opener'));
+    });
+  });
+
+  describe('Nested Scroll Lock', () => {
+    function NestedTraps({ secondActive }: { secondActive: boolean }) {
+      const outerRef = useFocusTrap<HTMLDivElement>(true);
+      const innerRef = useFocusTrap<HTMLDivElement>(secondActive);
+      return (
+        <>
+          <div ref={outerRef} data-testid="outer">
+            <button data-testid="outer-btn">outer</button>
+          </div>
+          {secondActive && (
+            <div ref={innerRef} data-testid="inner">
+              <button data-testid="inner-btn">inner</button>
+            </div>
+          )}
+        </>
+      );
+    }
+
+    it('should keep the body locked when a nested trap deactivates first', () => {
+      const { rerender, unmount } = render(<NestedTraps secondActive={false} />);
+      expect(document.body.style.overflow).toBe('hidden');
+
+      rerender(<NestedTraps secondActive />);
+      expect(document.body.style.overflow).toBe('hidden');
+
+      // 内层解锁不能把外层一起放开
+      rerender(<NestedTraps secondActive={false} />);
+      expect(document.body.style.overflow).toBe('hidden');
+
+      unmount();
+      expect(document.body.style.overflow).toBe('unset');
+    });
+
+    it('should restore the pre-existing overflow value rather than a hardcoded unset', () => {
+      document.body.style.overflow = 'scroll';
+      const { unmount } = render(<NestedTraps secondActive={false} />);
+      expect(document.body.style.overflow).toBe('hidden');
+
+      unmount();
+      expect(document.body.style.overflow).toBe('scroll');
+      document.body.style.overflow = 'unset';
+    });
+  });
 });
\ No newline at end of file
diff --git a/src/hooks/use-focus-trap.ts b/src/hooks/use-focus-trap.ts
index 964ee03..6e54585 100644
--- a/src/hooks/use-focus-trap.ts
+++ b/src/hooks/use-focus-trap.ts
@@ -2,26 +2,81 @@
 
 import { useEffect, useRef, useCallback } from 'react';
 
-export function useFocusTrap<T extends HTMLElement>(isActive: boolean) {
+export interface UseFocusTrapOptions {
+  /**
+   * Escape 的归属回调。提供时 hook 只吞掉事件并通知调用方，焦点在陷阱停用后
+   * （容器卸载 / isActive 转 false）才归还给唤起元素；未提供时保留旧行为：
+   * 立即把焦点还给唤起元素。
+   */
+  onEscape?: () => void;
+}
+
+// `[tabindex]` 单独列出后由 isFocusable 排除负值，避免把 tabIndex={-1} 当可聚焦。
+const FOCUSABLE_SELECTOR = 'a[href], button, input, select, textarea, [tabindex]';
+
+function isFocusable(el: HTMLElement): boolean {
+  if (el.hasAttribute('disabled')) return false;
+  if (el.getAttribute('type') === 'hidden') return false;
+  const tabIndex = el.getAttribute('tabindex');
+  if (tabIndex !== null && Number.parseInt(tabIndex, 10) < 0) return false;
+  return el.offsetParent !== null;
+}
+
+function isSentinel(el: Element | null): boolean {
+  return !el || el === document.body || el === document.documentElement;
+}
+
+/**
+ * 滚动锁栈：多个 trap 层叠时共享一次 overflow 覆写，
+ * 只有最外层（栈空）解除时才恢复原始值。
+ */
+const scrollLock: { owners: symbol[]; previousOverflow: string | null } = {
+  owners: [],
+  previousOverflow: null,
+};
+
+function acquireScrollLock(token: symbol): void {
+  if (scrollLock.owners.length === 0) {
+    scrollLock.previousOverflow = document.body.style.overflow;
+  }
+  scrollLock.owners.push(token);
+  document.body.style.overflow = 'hidden';
+}
+
+function releaseScrollLock(token: symbol): void {
+  const index = scrollLock.owners.indexOf(token);
+  if (index === -1) return;
+  scrollLock.owners.splice(index, 1);
+  if (scrollLock.owners.length === 0) {
+    document.body.style.overflow = scrollLock.previousOverflow ?? '';
+    scrollLock.previousOverflow = null;
+  }
+}
+
+export function useFocusTrap<T extends HTMLElement>(
+  isActive: boolean,
+  options: UseFocusTrapOptions = {}
+) {
   const containerRef = useRef<T>(null);
   const previousActiveElement = useRef<HTMLElement | null>(null);
+  const onEscapeRef = useRef<UseFocusTrapOptions['onEscape']>(options.onEscape);
+
+  useEffect(() => {
+    onEscapeRef.current = options.onEscape;
+  }, [options.onEscape]);
 
   const getFocusableElements = useCallback(() => {
     if (!containerRef.current) return [];
-    
-    const elements = containerRef.current.querySelectorAll<HTMLElement>(
-      'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])'
-    );
-    
-    return Array.from(elements).filter(
-      (el) => !el.hasAttribute('disabled') && el.offsetParent !== null
-    );
+
+    const elements = containerRef.current.querySelectorAll<HTMLElement>(FOCUSABLE_SELECTOR);
+
+    return Array.from(elements).filter(isFocusable);
   }, []);
 
   const handleKeyDown = useCallback(
     (event: KeyboardEvent) => {
       if (!isActive || !containerRef.current) return;
-      
+
       if (event.key === 'Tab') {
         const focusableElements = getFocusableElements();
         const firstElement = focusableElements[0];
@@ -41,6 +96,13 @@ export function useFocusTrap<T extends HTMLElement>(isActive: boolean) {
       }
 
       if (event.key === 'Escape') {
+        const owner = onEscapeRef.current;
+        if (owner) {
+          // 关闭与否由调用方决定，焦点归还交给停用时的清理逻辑。
+          event.preventDefault();
+          owner();
+          return;
+        }
         event.preventDefault();
         previousActiveElement.current?.focus();
       }
@@ -49,19 +111,39 @@ export function useFocusTrap<T extends HTMLElement>(isActive: boolean) {
   );
 
   useEffect(() => {
-    if (isActive) {
-      previousActiveElement.current = document.activeElement as HTMLElement;
-      
-      const focusableElements = getFocusableElements();
-      focusableElements[0]?.focus();
+    if (!isActive) return;
 
-      document.addEventListener('keydown', handleKeyDown);
-      document.body.style.overflow = 'hidden';
-    }
+    const container = containerRef.current;
+    const opener = document.activeElement as HTMLElement | null;
+    previousActiveElement.current = isSentinel(opener) ? null : opener;
+
+    const token = Symbol('focus-trap');
+    let focusOwned = false;
+    const trackFocus = () => {
+      focusOwned = !!container && container.contains(document.activeElement);
+    };
+
+    getFocusableElements()[0]?.focus();
+    trackFocus();
+
+    document.addEventListener('keydown', handleKeyDown);
+    document.addEventListener('focusin', trackFocus);
+    acquireScrollLock(token);
 
     return () => {
       document.removeEventListener('keydown', handleKeyDown);
-      document.body.style.overflow = 'unset';
+      document.removeEventListener('focusin', trackFocus);
+      releaseScrollLock(token);
+
+      // 焦点仍归陷阱所有（含容器卸载后焦点被丢弃）才归还唤起元素；
+      // 用户已把焦点移去别处时不抢占。
+      const active = document.activeElement;
+      const stillInTrap = !!container && container.contains(active);
+      const target = previousActiveElement.current;
+      if ((focusOwned || stillInTrap) && target && document.contains(target)) {
+        target.focus();
+      }
+      previousActiveElement.current = null;
     };
   }, [isActive, handleKeyDown, getFocusableElements]);
 
diff --git a/src/hooks/use-keyboard-shortcuts.test.ts b/src/hooks/use-keyboard-shortcuts.test.ts
deleted file mode 100644
index 5305a4c..0000000
--- a/src/hooks/use-keyboard-shortcuts.test.ts
+++ /dev/null
@@ -1,293 +0,0 @@
-import { describe, it, expect, jest, beforeEach } from '@jest/globals';
-import { renderHook } from '@testing-library/react';
-import { useKeyboardShortcuts } from './use-keyboard-shortcuts';
-
-describe('useKeyboardShortcuts', () => {
-  beforeEach(() => {
-    jest.clearAllMocks();
-  });
-
-  describe('Mod+K Shortcut', () => {
-    it('should call onSearch when Cmd+K is pressed', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'k', metaKey: true })
-      );
-
-      expect(onSearch).toHaveBeenCalledTimes(1);
-    });
-
-    it('should call onSearch when Ctrl+K is pressed', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'k', ctrlKey: true })
-      );
-
-      expect(onSearch).toHaveBeenCalledTimes(1);
-    });
-
-    it('should prevent default on Mod+K', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      const event = new KeyboardEvent('keydown', {
-        key: 'k',
-        metaKey: true,
-        cancelable: true,
-      });
-      const preventDefaultSpy = jest.spyOn(event, 'preventDefault');
-
-      document.dispatchEvent(event);
-
-      expect(preventDefaultSpy).toHaveBeenCalled();
-    });
-  });
-
-  describe('Alt+H Shortcut', () => {
-    it('should call onNavigateHome when Alt+H is pressed', () => {
-      const onNavigateHome = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onNavigateHome }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'h', altKey: true })
-      );
-
-      expect(onNavigateHome).toHaveBeenCalledTimes(1);
-    });
-
-    it('should prevent default on Alt+H', () => {
-      const onNavigateHome = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onNavigateHome }));
-
-      const event = new KeyboardEvent('keydown', {
-        key: 'h',
-        altKey: true,
-        cancelable: true,
-      });
-      const preventDefaultSpy = jest.spyOn(event, 'preventDefault');
-
-      document.dispatchEvent(event);
-
-      expect(preventDefaultSpy).toHaveBeenCalled();
-    });
-  });
-
-  describe('Skip to Content (Tab from skip link)', () => {
-    it('should call onSkipToContent when Tab is pressed from skip-to-content element', () => {
-      const onSkipToContent = jest.fn();
-
-      // Simulate a skip-to-content link being focused
-      const skipLink = document.createElement('a');
-      skipLink.setAttribute('data-skip-to-content', 'true');
-      document.body.appendChild(skipLink);
-
-      // Set it as the active element
-      jest.spyOn(document, 'activeElement', 'get').mockReturnValue(skipLink);
-
-      renderHook(() => useKeyboardShortcuts({ onSkipToContent }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'Tab', shiftKey: false })
-      );
-
-      expect(onSkipToContent).toHaveBeenCalledTimes(1);
-
-      document.body.removeChild(skipLink);
-      jest.restoreAllMocks();
-    });
-  });
-
-  describe('Input Element Guard', () => {
-    it('should not trigger shortcuts when event originates from input element', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      // Create an input element and dispatch event on it (event.target will be the input)
-      const input = document.createElement('input');
-      document.body.appendChild(input);
-
-      input.dispatchEvent(
-        new KeyboardEvent('keydown', {
-          key: 'k',
-          metaKey: true,
-          bubbles: true,
-        })
-      );
-
-      expect(onSearch).not.toHaveBeenCalled();
-      document.body.removeChild(input);
-    });
-
-    it('should not trigger shortcuts when event originates from textarea', () => {
-      const onNavigateHome = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onNavigateHome }));
-
-      const textarea = document.createElement('textarea');
-      document.body.appendChild(textarea);
-
-      textarea.dispatchEvent(
-        new KeyboardEvent('keydown', {
-          key: 'h',
-          altKey: true,
-          bubbles: true,
-        })
-      );
-
-      expect(onNavigateHome).not.toHaveBeenCalled();
-      document.body.removeChild(textarea);
-    });
-
-    it('should not trigger shortcuts when event originates from select element', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      const select = document.createElement('select');
-      document.body.appendChild(select);
-
-      select.dispatchEvent(
-        new KeyboardEvent('keydown', {
-          key: 'k',
-          metaKey: true,
-          bubbles: true,
-        })
-      );
-
-      expect(onSearch).not.toHaveBeenCalled();
-      document.body.removeChild(select);
-    });
-  });
-
-  describe('Edge Cases', () => {
-    it('should work with no callbacks provided', () => {
-      renderHook(() => useKeyboardShortcuts());
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'k', metaKey: true })
-      );
-      // Should not throw
-    });
-
-    it('should not call callbacks for non-matching keys', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'a', metaKey: true })
-      );
-
-      expect(onSearch).not.toHaveBeenCalled();
-    });
-
-    it('should not call onSearch when Ctrl is pressed without K', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'j', ctrlKey: true })
-      );
-
-      expect(onSearch).not.toHaveBeenCalled();
-    });
-
-    it('should not call onNavigateHome when Alt is pressed without H', () => {
-      const onNavigateHome = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onNavigateHome }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'g', altKey: true })
-      );
-
-      expect(onNavigateHome).not.toHaveBeenCalled();
-    });
-
-    it('should not call onNavigateHome when H is pressed without Alt', () => {
-      const onNavigateHome = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onNavigateHome }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'h', altKey: false })
-      );
-
-      expect(onNavigateHome).not.toHaveBeenCalled();
-    });
-
-    it('should not call onSkipToContent when Tab is pressed without skip-to-content element', () => {
-      const onSkipToContent = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSkipToContent }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'Tab', shiftKey: false })
-      );
-
-      expect(onSkipToContent).not.toHaveBeenCalled();
-    });
-
-    it('should not call onSkipToContent when Shift+Tab is pressed from skip-to-content element', () => {
-      const onSkipToContent = jest.fn();
-
-      const skipLink = document.createElement('a');
-      skipLink.setAttribute('data-skip-to-content', 'true');
-      document.body.appendChild(skipLink);
-      jest.spyOn(document, 'activeElement', 'get').mockReturnValue(skipLink);
-
-      renderHook(() => useKeyboardShortcuts({ onSkipToContent }));
-
-      // Shift+Tab should not trigger skip-to-content (only Tab without shift)
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'Tab', shiftKey: true })
-      );
-
-      expect(onSkipToContent).not.toHaveBeenCalled();
-
-      document.body.removeChild(skipLink);
-      jest.restoreAllMocks();
-    });
-
-    it('should not call onSkipToContent when activeElement is null', () => {
-      const onSkipToContent = jest.fn();
-      jest.spyOn(document, 'activeElement', 'get').mockReturnValue(null);
-
-      renderHook(() => useKeyboardShortcuts({ onSkipToContent }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'Tab', shiftKey: false })
-      );
-
-      // When activeElement is null, optional chaining prevents crash
-      expect(onSkipToContent).not.toHaveBeenCalled();
-      jest.restoreAllMocks();
-    });
-
-    it('should not call onSearch when neither metaKey nor ctrlKey is pressed', () => {
-      const onSearch = jest.fn();
-      renderHook(() => useKeyboardShortcuts({ onSearch }));
-
-      document.dispatchEvent(
-        new KeyboardEvent('keydown', { key: 'k', metaKey: false, ctrlKey: false })
-      );
-
-      expect(onSearch).not.toHaveBeenCalled();
-    });
-  });
-
-  describe('Lifecycle', () => {
-    it('should add keydown listener on mount', () => {
-      const spy = jest.spyOn(document, 'addEventListener');
-      renderHook(() => useKeyboardShortcuts());
-      expect(spy).toHaveBeenCalledWith('keydown', expect.any(Function));
-      spy.mockRestore();
-    });
-
-    it('should remove keydown listener on unmount', () => {
-      const spy = jest.spyOn(document, 'removeEventListener');
-      const { unmount } = renderHook(() => useKeyboardShortcuts());
-      unmount();
-      expect(spy).toHaveBeenCalledWith('keydown', expect.any(Function));
-      spy.mockRestore();
-    });
-  });
-});
\ No newline at end of file
diff --git a/src/hooks/use-keyboard-shortcuts.ts b/src/hooks/use-keyboard-shortcuts.ts
deleted file mode 100644
index 04acbbe..0000000
--- a/src/hooks/use-keyboard-shortcuts.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-'use client';
-
-import { useEffect, useCallback } from 'react';
-
-interface KeyboardShortcutsProps {
-  onSearch?: () => void;
-  onNavigateHome?: () => void;
-  onSkipToContent?: () => void;
-}
-
-export function useKeyboardShortcuts({
-  onSearch,
-  onNavigateHome,
-  onSkipToContent,
-}: KeyboardShortcutsProps = {}) {
-  const handleKeyDown = useCallback((event: KeyboardEvent) => {
-    if (event.target instanceof HTMLInputElement ||
-        event.target instanceof HTMLTextAreaElement ||
-        event.target instanceof HTMLSelectElement) {
-      return;
-    }
-
-    const isModKey = event.metaKey || event.ctrlKey;
-
-    switch (true) {
-      case isModKey && event.key === 'k':
-        event.preventDefault();
-        onSearch?.();
-        break;
-      case event.altKey && event.key === 'h':
-        event.preventDefault();
-        onNavigateHome?.();
-        break;
-      case event.key === 'Tab' && !event.shiftKey && (document.activeElement?.getAttribute('data-skip-to-content') === 'true' || document.activeElement?.getAttribute('data-skip-to-content')):
-        event.preventDefault();
-        onSkipToContent?.();
-        break;
-    }
-  }, [onSearch, onNavigateHome, onSkipToContent]);
-
-  useEffect(() => {
-    document.addEventListener('keydown', handleKeyDown);
-    return () => document.removeEventListener('keydown', handleKeyDown);
-  }, [handleKeyDown]);
-}
diff --git a/src/hooks/use-swipe-gesture.components.test.tsx b/src/hooks/use-swipe-gesture.components.test.tsx
index edfc33d..2c60dc6 100644
--- a/src/hooks/use-swipe-gesture.components.test.tsx
+++ b/src/hooks/use-swipe-gesture.components.test.tsx
@@ -5,8 +5,10 @@ import { render, screen, act, fireEvent } from '@testing-library/react';
 
 // ─── Mocks ───────────────────────────────────────────────────────────────
 
+const mockPush = jest.fn();
+
 jest.mock('next/navigation', () => ({
-  useRouter: () => ({ push: jest.fn() }),
+  useRouter: () => ({ push: mockPush }),
 }));
 
 jest.mock('framer-motion', () => ({
@@ -271,6 +273,62 @@ describe('SwipeNavigation', () => {
   });
 });
 
+// ─── Tests: SwipeNavigation · edge-swipe 手势真的能触发（P-1） ───────────
+
+describe('SwipeNavigation · edge-swipe gestures', () => {
+  function swipe(fromX: number, toX: number) {
+    fireEvent.touchStart(document.body, {
+      touches: [{ clientX: fromX, clientY: 0, identifier: 0 }],
+    });
+    fireEvent.touchMove(document.body, {
+      touches: [{ clientX: toX, clientY: 0, identifier: 0 }],
+    });
+    fireEvent.touchEnd(document.body);
+  }
+
+  it('right swipe started at the left edge of the page pushes prevRoute', async () => {
+    Object.defineProperty(window, 'innerWidth', { value: 1024, configurable: true });
+    const { SwipeNavigation } = await import('./use-swipe-gesture');
+    render(<SwipeNavigation prevRoute="/prev" nextRoute="/next" />);
+    mockPush.mockClear();
+
+    swipe(5, 600);
+    act(() => {
+      jest.advanceTimersByTime(200);
+    });
+
+    expect(mockPush).toHaveBeenCalledWith('/prev');
+  });
+
+  it('left swipe started at the right edge of the page pushes nextRoute', async () => {
+    Object.defineProperty(window, 'innerWidth', { value: 1024, configurable: true });
+    const { SwipeNavigation } = await import('./use-swipe-gesture');
+    render(<SwipeNavigation prevRoute="/prev" nextRoute="/next" />);
+    mockPush.mockClear();
+
+    swipe(1019, 400);
+    act(() => {
+      jest.advanceTimersByTime(200);
+    });
+
+    expect(mockPush).toHaveBeenCalledWith('/next');
+  });
+
+  it('keeps the edge threshold: a middle-of-screen touch never swipes', async () => {
+    Object.defineProperty(window, 'innerWidth', { value: 1024, configurable: true });
+    const { SwipeNavigation } = await import('./use-swipe-gesture');
+    render(<SwipeNavigation prevRoute="/prev" nextRoute="/next" />);
+    mockPush.mockClear();
+
+    swipe(500, 900);
+    act(() => {
+      jest.advanceTimersByTime(200);
+    });
+
+    expect(mockPush).not.toHaveBeenCalled();
+  });
+});
+
 // ─── Tests: PullToRefresh ────────────────────────────────────────────────
 
 describe('PullToRefresh', () => {
diff --git a/src/hooks/use-swipe-gesture.tsx b/src/hooks/use-swipe-gesture.tsx
index d1c14d8..d0e6bd3 100644
--- a/src/hooks/use-swipe-gesture.tsx
+++ b/src/hooks/use-swipe-gesture.tsx
@@ -103,8 +103,10 @@ export function useSwipeGesture(options: SwipeGestureOptions = {}) {
   }, [onSwipeLeft, onSwipeRight]);
 
   useEffect(() => {
-    const element = containerRef.current || document;
-    
+    // 挂到 document：调用方的 containerRef 容器是无尺寸装饰层，触摸永远无法从中冒泡；
+    // 命中区域仍由 handleTouchStart 的 edgeSize 阈值收窄。
+    const element = document;
+
     element.addEventListener('touchstart', handleTouchStart, { passive: true });
     element.addEventListener('touchmove', handleTouchMove, { passive: false });
     element.addEventListener('touchend', handleTouchEnd, { passive: true });
@@ -234,13 +236,13 @@ export function SwipeNavigation({
               </p>
               <div className="flex items-center justify-center gap-4 mt-2">
                 {prevRoute && (
-                  <div className="flex items-center gap-1 text-[var(--color-brand)]">
+                  <div className="flex items-center gap-1 text-brand-ink">
                     <ArrowLeft className="w-3 h-3" />
                     <span className="text-xs">{prevLabel}</span>
                   </div>
                 )}
                 {nextRoute && (
-                  <div className="flex items-center gap-1 text-[var(--color-brand)]">
+                  <div className="flex items-center gap-1 text-brand-ink">
                     <span className="text-xs">{nextLabel}</span>
                     <ArrowRight className="w-3 h-3" />
                   </div>
@@ -332,13 +334,13 @@ export function PullToRefresh({ onRefresh, children, className }: PullToRefreshP
       >
         <motion.div
           animate={{ rotate: isRefreshing ? 360 : pullDistance > 60 ? 180 : 0 }}
-          transition={{ duration: 0.3 }}
+          transition={{ duration: 0.28 }}
         >
           <svg
             className={cn(
               'w-6 h-6 transition-colors',
               pullDistance > 60
-                ? 'text-[var(--color-brand)]'
+                ? 'text-brand-ink'
                 : 'text-[var(--color-text-subtle)]'
             )}
             fill="none"
diff --git a/src/instrumentation-client.ts b/src/instrumentation-client.ts
new file mode 100644
index 0000000..227b049
--- /dev/null
+++ b/src/instrumentation-client.ts
@@ -0,0 +1,94 @@
+import * as Sentry from '@sentry/nextjs';
+
+/**
+ * 客户端 Sentry 初始化入口。原 sentry.client.config.ts 的内容整体迁移至此，原因（佐证来自已安装版本源码）：
+ *   - Next 16 起 `next build` 默认使用 Turbopack
+ *     （node_modules/next/dist/docs/01-app/02-guides/upgrading/version-16.md:128），
+ *     而 SDK 明确警告 sentry.client.config.ts 在 Turbopack 下不再被加载：
+ *     node_modules/@sentry/nextjs/build/esm/config/webpack.js:207-213
+ *     （"renaming your sentry.client.config.ts file, or moving its content to instrumentation-client.ts"）
+ *   - instrumentation-client.ts 是 Next 官方客户端入口约定：在 HTML 加载后、React hydration 前执行，
+ *     且仅顶层同步代码保证在 hydration 前完成 —— 因此本文件顶层直接同步调用 Sentry.init：
+ *     node_modules/next/dist/docs/01-app/03-api-reference/03-file-conventions/instrumentation-client.md（Usage / Execution timing 两节）
+ *   - 路由导航插桩要求导出 onRouterTransitionStart = Sentry.captureRouterTransitionStart，否则构建期告警：
+ *     node_modules/@sentry/nextjs/build/esm/config/withSentryConfig/getFinalConfigObjectUtils.js:131-137；
+ *     captureRouterTransitionStart 见 node_modules/@sentry/nextjs/build/types/client/index.d.ts:8
+ *
+ * 无 DSN 门禁与 GA（GoogleAnalytics.tsx 无 ID 即返回 null）同一约定：NEXT_PUBLIC_SENTRY_DSN 为空时
+ * 跳过 Sentry.init，SDK 保持惰性、不发任何请求。
+ */
+const SENTRY_DSN = process.env.NEXT_PUBLIC_SENTRY_DSN || '';
+
+if (SENTRY_DSN) {
+  Sentry.init({
+    dsn: SENTRY_DSN,
+    environment: process.env.NODE_ENV || 'development',
+    enabled: process.env.NODE_ENV !== 'development',
+
+    tracesSampleRate: process.env.NODE_ENV === 'production' ? 0.2 : 0,
+    replaysSessionSampleRate: 0,
+    replaysOnErrorSampleRate: 1.0,
+
+    ignoreErrors: [
+      /_AutofillCallbackHandler/,
+      /NetworkError/,
+      /webkit\.messageHandlers/,
+      /Non-Error promise rejection captured/,
+      /^Loading CSS chunk.*failed/,
+      /^Loading chunk.*failed/,
+      /^Failed to fetch dynamically imported module/,
+    ],
+
+    denyUrls: [
+      /extensions\//i,
+      /^chrome:\/\//i,
+      /webappstoolbars/i,
+      /safari-extension:/i,
+      /mypersonalassistant/i,
+    ],
+
+    initialScope: {
+      tags: {
+        project: 'novalon-website',
+        version: process.env.npm_package_version || 'unknown',
+        deployment: process.env.NODE_ENV || 'unknown',
+      },
+      user: {
+        id: 'anonymous',
+        segment: 'visitor',
+      },
+    },
+
+    beforeSend(event) {
+      if (event.request?.url) {
+        event.request.url = event.request.url.replace(/\/[a-f0-9]{32}/gi, '/[hash]');
+      }
+
+      if (event.breadcrumbs) {
+        event.breadcrumbs = event.breadcrumbs.filter((breadcrumb) => {
+          return !(
+            breadcrumb.category === 'console' &&
+            breadcrumb.level === 'log'
+          );
+        });
+      }
+
+      return event;
+    },
+
+    integrations: [
+      Sentry.browserTracingIntegration(),
+      Sentry.replayIntegration({
+        maskAllText: true,
+        blockAllMedia: true,
+      }),
+    ],
+  });
+
+  console.log('[Sentry] Client-side monitoring initialized');
+} else {
+  console.warn('[Sentry] NEXT_PUBLIC_SENTRY_DSN not configured, error monitoring disabled');
+}
+
+// App Router 导航插桩钩子（见文件头注释；仅声明函数引用，无副作用，DSN 缺失时 SDK 未 init 也不会发送）
+export const onRouterTransitionStart = Sentry.captureRouterTransitionStart;
diff --git a/src/instrumentation.ts b/src/instrumentation.ts
new file mode 100644
index 0000000..98a47b9
--- /dev/null
+++ b/src/instrumentation.ts
@@ -0,0 +1,32 @@
+import * as Sentry from '@sentry/nextjs';
+
+/**
+ * Next.js 服务端 instrumentation 入口（Next 16 文件约定：根目录或 src/ 下，本仓库使用 src/）。
+ * 依据（本仓库自带官方文档）：
+ *   - node_modules/next/dist/docs/01-app/02-guides/instrumentation.md
+ *     （register() 在每个服务器实例启动时调用一次；按 NEXT_RUNTIME 条件导入 runtime 专属代码）
+ *   - node_modules/next/dist/docs/01-app/03-api-reference/03-file-conventions/instrumentation.md
+ *     （可选导出 onRequestError，用于把服务端错误转发给 observability provider）
+ *
+ * Sentry v10 的接线要求（佐证来自已安装版本源码，非记忆）：
+ *   - instrumentation 文件必须存在且包含 onRequestError 钩子，否则 SDK 判定为过期配置：
+ *     node_modules/@sentry/nextjs/build/esm/config/webpack.js:305-317
+ *   - instrumentation 文件引用 sentry.server/edge.config 即视为受支持的初始化位置：
+ *     node_modules/@sentry/nextjs/build/esm/config/webpack.js:320-331（warnAboutDeprecatedConfigFiles）
+ *   - captureRequestError 由 @sentry/nextjs 顶层导出：
+ *     node_modules/@sentry/nextjs/build/types/index.types.d.ts（export { captureRequestError } from './common/captureRequestError'）
+ *
+ * 无 DSN 时行为与 GoogleAnalytics.tsx 的门禁一致：sentry.*.config 内部读到空 DSN 即跳过
+ * Sentry.init，SDK 不发送任何请求（见 sentry.server.config.ts / sentry.edge.config.ts 的 if (SENTRY_DSN) 分支）。
+ */
+export async function register() {
+  if (process.env.NEXT_RUNTIME === 'nodejs') {
+    await import('../sentry.server.config');
+  }
+
+  if (process.env.NEXT_RUNTIME === 'edge') {
+    await import('../sentry.edge.config');
+  }
+}
+
+export const onRequestError = Sentry.captureRequestError;
diff --git a/src/lib/admin-api.test.ts b/src/lib/admin-api.test.ts
index e4ee557..8fe4f92 100644
--- a/src/lib/admin-api.test.ts
+++ b/src/lib/admin-api.test.ts
@@ -149,6 +149,62 @@ describe('AdminApiClient', () => {
 
       await expect(adminApi.request('/api/admin/models')).rejects.toThrow('模型不存在');
     });
+
+    // L-1：withCrypto 会把 4xx/5xx 也加密成 { data: <encrypted> } + X-Encrypted: true，
+    // 解密成功后的错误信封必须按 res.ok 拒绝，且优先透出服务端自己的错误文案。
+    it('rejects encrypted error envelope (403) with the server message', async () => {
+      mockStorage['novalon_admin_token'] = 'test-token';
+      mockDecrypt.mockResolvedValue(JSON.stringify({ error: '无权修改该内容' }));
+      mockFetch.mockResolvedValueOnce(
+        new Response(JSON.stringify({ data: 'encrypted-error' }), {
+          status: 403,
+          headers: { 'Content-Type': 'application/json', 'X-Encrypted': 'true' },
+        }),
+      );
+
+      await expect(adminApi.updateItem('item-1', { title: 'x' })).rejects.toThrow('无权修改该内容');
+      expect(mockDecrypt).toHaveBeenCalledWith('encrypted-error');
+    });
+
+    it('rejects encrypted error envelope (400) preferring message field', async () => {
+      mockStorage['novalon_admin_token'] = 'test-token';
+      mockEncrypt.mockResolvedValue('encrypted-data');
+      mockDecrypt.mockResolvedValue(JSON.stringify({ message: '字段校验失败' }));
+      mockFetch.mockResolvedValueOnce(
+        new Response(JSON.stringify({ data: 'encrypted-error' }), {
+          status: 400,
+          headers: { 'Content-Type': 'application/json', 'X-Encrypted': 'true' },
+        }),
+      );
+
+      await expect(adminApi.createItem({ title: 'x' })).rejects.toThrow('字段校验失败');
+    });
+
+    it('falls back to status when decrypted error envelope carries no message', async () => {
+      mockStorage['novalon_admin_token'] = 'test-token';
+      mockDecrypt.mockResolvedValue(JSON.stringify({ detail: 'opaque' }));
+      mockFetch.mockResolvedValueOnce(
+        new Response(JSON.stringify({ data: 'encrypted-error' }), {
+          status: 403,
+          headers: { 'Content-Type': 'application/json', 'X-Encrypted': 'true' },
+        }),
+      );
+
+      await expect(adminApi.getItems({ page: 1 })).rejects.toThrow('请求失败 (403)');
+    });
+
+    it('resolves encrypted success response unchanged', async () => {
+      mockStorage['novalon_admin_token'] = 'test-token';
+      mockDecrypt.mockResolvedValue(JSON.stringify({ items: [{ id: 'a' }], total: 1 }));
+      mockFetch.mockResolvedValueOnce(
+        new Response(JSON.stringify({ data: 'encrypted-ok' }), {
+          status: 200,
+          headers: { 'Content-Type': 'application/json', 'X-Encrypted': 'true' },
+        }),
+      );
+
+      await expect(adminApi.getItems({ page: 1 })).resolves.toEqual({ items: [{ id: 'a' }], total: 1 });
+    });
   });
 
   // ============ 公开 API 方法测试 ============
diff --git a/src/lib/admin-api.ts b/src/lib/admin-api.ts
index c523bff..5e68e92 100644
--- a/src/lib/admin-api.ts
+++ b/src/lib/admin-api.ts
@@ -69,26 +69,31 @@ class AdminApiClient {
       throw new Error('未授权');
     }
 
-    // 解密响应体
+    // 解密响应体（withCrypto 对非 2xx 同样加密，故错误信封解密后仍须按 res.ok 拒绝）
     const isEncryptedResponse = res.headers.get('X-Encrypted') === 'true';
     if (isEncryptedResponse) {
+      let payload: unknown;
       try {
         const responseText = await res.text();
         const responseJson = JSON.parse(responseText);
         const encryptedData = responseJson.data as string;
-        if (encryptedData) {
-          const decryptedText = await decrypt(encryptedData);
-          return JSON.parse(decryptedText) as T;
-        }
-        return responseJson as T;
+        payload = encryptedData
+          ? JSON.parse(await decrypt(encryptedData))
+          : responseJson;
       } catch (e) {
-        // 解密失败时尝试读取原始 JSON
+        // 解密失败时降级为状态码错误（响应体已被读取，无法再取明文 error）
         if (!res.ok) {
-          const data = await res.json().catch(() => ({}));
-          throw new Error(data.error || data.message || `请求失败 (${res.status})`);
+          throw new Error(`请求失败 (${res.status})`);
         }
         throw e;
       }
+
+      if (!res.ok) {
+        const error = payload as { error?: string; message?: string } | null;
+        throw new Error(error?.error || error?.message || `请求失败 (${res.status})`);
+      }
+
+      return payload as T;
     }
 
     if (!res.ok) {
@@ -139,8 +144,22 @@ class AdminApiClient {
     });
   }
 
-  async deleteItem(id: string) {
-    return this.request(`/api/admin/items?id=${id}`, {
+  /**
+   * 状态流转的唯一通道（B-1）：POST 只建草稿、PUT 拒绝改 status，publish 权限只在
+   * /api/admin/items/[id]/workflow 上校验。draft→submit→review→approve→published。
+   */
+  async runWorkflow(
+    id: string,
+    action: 'submit' | 'approve' | 'reject' | 'archive',
+    reason?: string,
+  ) {
+    return this.request<{ id?: string; status?: string }>(`/api/admin/items/${id}/workflow`, {
+      method: 'POST',
+      body: JSON.stringify(reason ? { action, reason } : { action }),
+    });
+  }
+
+  async deleteItem(id: string) {    return this.request(`/api/admin/items?id=${id}`, {
       method: 'DELETE',
     });
   }
diff --git a/src/lib/analytics.test.ts b/src/lib/analytics.test.ts
index 8f580dd..42edd14 100644
--- a/src/lib/analytics.test.ts
+++ b/src/lib/analytics.test.ts
@@ -70,6 +70,32 @@ describe('Analytics', () => {
       const result = analytics.getStoredPreferences();
       expect(result).toBeNull();
     });
+
+    // Q-10③：localStorage 可能被篡改/写坏；同意判定必须严格，真值非布尔不得当作已同意（fail-closed）。
+    it('coerces truthy non-boolean consent fields to false instead of granting', () => {
+      localStorageMock.setItem(
+        'novalon-cookie-preferences',
+        JSON.stringify({ necessary: false, analytics: 'yes', marketing: 1, functionality: true })
+      );
+      const result = analytics.getStoredPreferences();
+      expect(result).toEqual({
+        necessary: true, // 必要类恒真，不受存储值影响
+        analytics: false, // 'yes' 非严格 true ⇒ 不授予
+        marketing: false, // 1 非严格 true ⇒ 不授予
+        functionality: true,
+      });
+    });
+
+    it('ignores a non-object payload (array/number) rather than trusting it', () => {
+      localStorageMock.setItem('novalon-cookie-preferences', '[1,2,3]');
+      const result = analytics.getStoredPreferences();
+      expect(result).toEqual({
+        necessary: true,
+        analytics: false,
+        marketing: false,
+        functionality: false,
+      });
+    });
   });
 
   describe('storePreferences', () => {
@@ -88,6 +114,8 @@ describe('Analytics', () => {
         throw new Error('Storage full');
       });
 
+      // 本地 spy：jest.setup.js 只静音 info/debug，warn 不再是全局 mock
+      const warnSpy = jest.spyOn(console, 'warn').mockImplementation(() => {});
       analytics.storePreferences({
         necessary: true,
         analytics: true,
@@ -95,7 +123,8 @@ describe('Analytics', () => {
         functionality: true,
       });
 
-      expect(console.warn).toHaveBeenCalled();
+      expect(warnSpy).toHaveBeenCalled();
+      warnSpy.mockRestore();
     });
   });
 
@@ -153,8 +182,10 @@ describe('Analytics', () => {
     });
 
     it('should not call gtag when not available', () => {
-      analytics.trackEvent('click', 'engagement', 'button-1', 1);
-      // No gtag available, should not throw
+      expect((window as any).gtag).toBeUndefined();
+      expect(() =>
+        analytics.trackEvent('click', 'engagement', 'button-1', 1)
+      ).not.toThrow();
     });
   });
 
@@ -192,8 +223,12 @@ describe('Analytics', () => {
     });
 
     it('should warn when gtag is not available', () => {
+      const warnSpy = jest.spyOn(console, 'warn').mockImplementation(() => {});
+
       analytics.trackError('TEST', 'No gtag');
-      expect(console.warn).toHaveBeenCalled();
+
+      expect(warnSpy).toHaveBeenCalled();
+      warnSpy.mockRestore();
     });
 
     it('should set fatal to "false" string when not fatal', () => {
@@ -205,6 +240,17 @@ describe('Analytics', () => {
       const callArgs = gtag.mock.calls[0]?.[2] as Record<string, unknown>;
       expect(callArgs?.fatal).toBe('false');
     });
+
+    it('should not echo tracked errors to the console', () => {
+      const gtag = jest.fn();
+      (window as any).gtag = gtag;
+      const logSpy = jest.spyOn(console, 'log').mockImplementation(() => {});
+
+      analytics.trackError('API_ERROR', 'Failed to fetch', true);
+
+      expect(logSpy).not.toHaveBeenCalled();
+      logSpy.mockRestore();
+    });
   });
 
   describe('trackPageView', () => {
@@ -221,7 +267,8 @@ describe('Analytics', () => {
     });
 
     it('should not throw when gtag is not available', () => {
-      analytics.trackPageView('/', 'Home');
+      expect((window as any).gtag).toBeUndefined();
+      expect(() => analytics.trackPageView('/', 'Home')).not.toThrow();
     });
   });
 
@@ -326,28 +373,34 @@ describe('Analytics', () => {
       const callArgs = gtag.mock.calls[0]?.[2] as Record<string, unknown>;
       expect(callArgs?.value).toBe(1);
     });
+
+    it('should keep an explicit value of 0', () => {
+      const gtag = jest.fn();
+      (window as any).gtag = gtag;
+
+      analytics.trackConversion('zero_value_conversion', 0);
+
+      const callArgs = gtag.mock.calls[0]?.[2] as Record<string, unknown>;
+      expect(callArgs?.value).toBe(0);
+    });
   });
 
   describe('trackOutboundLink', () => {
-    it('should call gtag with outbound link data', () => {
+    it('should send exactly one outbound_click event', () => {
       const gtag = jest.fn();
       (window as any).gtag = gtag;
 
       analytics.trackOutboundLink('https://example.com', 'Example');
 
+      // 旧实现同时发 outbound_click 与 click，GA4 里每次外跳被双计。
+      expect(gtag).toHaveBeenCalledTimes(1);
       expect(gtag).toHaveBeenCalledWith('event', 'outbound_click', {
         event_category: 'engagement',
         event_label: 'https://example.com',
         event_value: undefined,
         send_to: 'G-TEST123',
       });
-
-      expect(gtag).toHaveBeenCalledWith('event', 'click', {
-        event_category: 'outbound',
-        event_label: 'https://example.com',
-        transport_type: 'beacon',
-        send_to: 'G-TEST123',
-      });
+      expect(gtag).not.toHaveBeenCalledWith('event', 'click', expect.anything());
     });
   });
 
diff --git a/src/lib/analytics.ts b/src/lib/analytics.ts
index e422cb7..a9bfd0a 100644
--- a/src/lib/analytics.ts
+++ b/src/lib/analytics.ts
@@ -26,13 +26,35 @@ export function getDefaultPreferences(): CookiePreferences {
   return { ...DEFAULT_PREFERENCES };
 }
 
+/**
+ * 把 localStorage 里可能被篡改/半截的原始值收敛为类型安全的 CookiePreferences。
+ * 动机（Q-10③）：`updateConsentDetailed` 用 `preferences.analytics ? 'granted' : 'denied'` 判定，
+ * 而旧实现把 `JSON.parse(...) as CookiePreferences` 直接透传 ⇒ 一个 `"no"`/`1`/任意真值字符串
+ * 会「意外获得」analytics/ad 同意（隐私合规上是 fail-open）。此处对四个开关做「严格 === true
+ * 才算同意」的白名单式收敛，necessary 恒为真（不受存储值影响）。
+ */
+function sanitizePreferences(raw: unknown): CookiePreferences {
+  const src = raw && typeof raw === 'object' ? (raw as Record<string, unknown>) : {};
+  const granted = (v: unknown): boolean => v === true;
+  const pref: CookiePreferences = {
+    necessary: true,
+    analytics: granted(src.analytics),
+    marketing: granted(src.marketing),
+    functionality: granted(src.functionality),
+  };
+  if (typeof src.timestamp === 'number') {
+    pref.timestamp = src.timestamp;
+  }
+  return pref;
+}
+
 export function getStoredPreferences(): CookiePreferences | null {
   if (typeof window === 'undefined') return null;
 
   try {
     const stored = localStorage.getItem('novalon-cookie-preferences');
     if (stored) {
-      return JSON.parse(stored) as CookiePreferences;
+      return sanitizePreferences(JSON.parse(stored));
     }
   } catch (e) {
     console.warn('[Analytics] Failed to read cookie preferences:', e);
@@ -112,10 +134,6 @@ export function trackError(
     ...errorData,
     send_to: GA_MEASUREMENT_ID,
   });
-
-  if (process.env.NODE_ENV === 'development') {
-    console.log('[GA4] Error tracked:', errorData);
-  }
 }
 
 export function trackPageView(url: string, title: string): void {
@@ -169,23 +187,15 @@ export function trackConversion(conversionLabel: string, value?: number): void {
   window.gtag('event', 'conversion', {
     send_to: GA_MEASUREMENT_ID,
     transaction_id: `${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
-    value: value || 1,
+    value: value ?? 1,
     currency: 'CNY',
     conversion_label: conversionLabel,
   });
 }
 
 export function trackOutboundLink(url: string, _linkText?: string): void {
+  // 单次发送：此前同时发 outbound_click 与 click，GA4 里每次外跳被计两次。
   trackEvent('outbound_click', 'engagement', url);
-
-  if (typeof window !== 'undefined' && window.gtag && GA_MEASUREMENT_ID) {
-    window.gtag('event', 'click', {
-      event_category: 'outbound',
-      event_label: url,
-      transport_type: 'beacon',
-      send_to: GA_MEASUREMENT_ID,
-    });
-  }
 }
 
 export function trackScrollDepth(percentage: number, _maxScroll?: number): void {
diff --git a/src/lib/api-crypto.test.ts b/src/lib/api-crypto.test.ts
index fa118d7..f020eac 100644
--- a/src/lib/api-crypto.test.ts
+++ b/src/lib/api-crypto.test.ts
@@ -9,7 +9,7 @@
 // @ts-nocheck
 
 
-import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import { describe, it, expect, jest, beforeEach, afterEach } from '@jest/globals';
 
 // ========== 全局 Mock 设置 ==========
 
@@ -239,14 +239,21 @@ type HandlerFn = (
 // ========== 测试套件 ==========
 
 describe('withCrypto', () => {
+  // jest.setup.js 只静音 info/debug，console.error 是真实函数；断言错误日志必须自带 spy，
+  // 并在 afterEach 还原，避免把静音状态泄漏给其它套件。
+  let errorSpy: ReturnType<typeof jest.spyOn>;
   beforeEach(() => {
     jest.clearAllMocks();
+    errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
     mockIsEncryptionAvailable.mockReturnValue(true);
     mockEncrypt.mockImplementation((text: string) => `enc:${text}`);
     mockDecrypt.mockImplementation(
       (text: string) => text.replace(/^enc:/, ''),
     );
   });
+  afterEach(() => {
+    errorSpy.mockRestore();
+  });
 
   // ── 未加密请求 ──────────────────────────────────────────────
 
@@ -395,6 +402,33 @@ describe('withCrypto', () => {
     expect(body).toEqual({ data: 'enc:{"params":{"id":"123"}}' });
   });
 
+  // Q-10①：是否有请求体应按 HTTP 方法判定，不能信任客户端可缺失/可自报的 content-length。
+  // 分块传输的加密 POST 不带 content-length 头 ⇒ 旧实现判为「无 body」跳过解密、把密文交给 handler。
+  it('加密 POST 无 content-length 头（分块传输）时仍解密请求体', async () => {
+    const handler = jest
+      .fn<HandlerFn>()
+      .mockImplementation(async (req: NextRequest) => {
+        const body = await (req as any).json();
+        return NextResponse.json({ received: body }) as unknown as NextResponse;
+      });
+    const wrapped = withCrypto(handler);
+
+    const req = createRequest('http://localhost/api/test', {
+      method: 'POST',
+      headers: {
+        'x-encrypted': 'true',
+        'content-type': 'application/json',
+        // 故意省略 content-length
+      },
+      body: JSON.stringify({ data: 'enc:{"chunked":true}' }),
+    });
+    await wrapped(req);
+
+    expect(mockDecrypt).toHaveBeenCalledWith('enc:{"chunked":true}');
+    const handlerReq = handler.mock.calls[0]?.[0] as any;
+    expect(await handlerReq.json()).toEqual({ chunked: true });
+  });
+
   // ── 加密请求（body 解密失败） ───────────────────────────────
 
   it('加密请求 body 解密失败时返回 400 错误', async () => {
@@ -553,13 +587,18 @@ describe('withCrypto', () => {
 });
 
 describe('decryptRequest', () => {
+  let errorSpy: ReturnType<typeof jest.spyOn>;
   beforeEach(() => {
     jest.clearAllMocks();
+    errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
     mockIsEncryptionAvailable.mockReturnValue(true);
     mockDecrypt.mockImplementation(
       (text: string) => text.replace(/^enc:/, ''),
     );
   });
+  afterEach(() => {
+    errorSpy.mockRestore();
+  });
 
   it('加密不可用时返回 null', async () => {
     mockIsEncryptionAvailable.mockReturnValue(false);
diff --git a/src/lib/api-crypto.ts b/src/lib/api-crypto.ts
index 0f09f73..8af7e97 100644
--- a/src/lib/api-crypto.ts
+++ b/src/lib/api-crypto.ts
@@ -46,10 +46,13 @@ export function withCrypto<T extends Record<string, unknown> = Record<string, un
     }
 
     // ---- 解密请求体 ----
-    const contentLength = request.headers.get('content-length');
-    const hasBody = contentLength && parseInt(contentLength) > 0;
+    // 是否有请求体按 HTTP 方法判定，不看客户端可缺失/可自报的 content-length：
+    // 分块传输（无 content-length 头）的加密 POST/PUT/PATCH 旧会被误判为「无 body」而跳过解密，
+    // 把密文 {data:"..."} 原样交给 handler（Q-10①）。
+    const method = request.method.toUpperCase();
+    const mayHaveBody = method === 'POST' || method === 'PUT' || method === 'PATCH';
 
-    if (hasBody) {
+    if (mayHaveBody) {
       try {
         const cloned = request.clone();
         const bodyText = await cloned.text();
diff --git a/src/lib/api-response.test.ts b/src/lib/api-response.test.ts
index c81181b..24b9fbf 100644
--- a/src/lib/api-response.test.ts
+++ b/src/lib/api-response.test.ts
@@ -1,5 +1,5 @@
 // @ts-nocheck
-import { describe, it, expect, jest, beforeEach } from '@jest/globals';
+import { describe, it, expect, jest, beforeEach, afterEach } from '@jest/globals';
 import {
   unauthorized,
   forbidden,
@@ -90,8 +90,14 @@ describe('badRequest', () => {
 });
 
 describe('internalError', () => {
+  // jest.setup.js 只静音 info/debug，console.error 是真实函数；要断言日志就得自带 spy 并还原
+  let errorSpy: ReturnType<typeof jest.spyOn>;
   beforeEach(() => {
     jest.clearAllMocks();
+    errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+  });
+  afterEach(() => {
+    errorSpy.mockRestore();
   });
 
   it('返回默认错误消息和 500 状态码', async () => {
@@ -131,8 +137,13 @@ describe('success', () => {
 });
 
 describe('handleApiError', () => {
+  let errorSpy: ReturnType<typeof jest.spyOn>;
   beforeEach(() => {
     jest.clearAllMocks();
+    errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+  });
+  afterEach(() => {
+    errorSpy.mockRestore();
   });
 
   it('包含 "未授权" 的 Error 返回 unauthorized 响应', async () => {
diff --git a/src/lib/client-ip.test.ts b/src/lib/client-ip.test.ts
new file mode 100644
index 0000000..ee84919
--- /dev/null
+++ b/src/lib/client-ip.test.ts
@@ -0,0 +1,56 @@
+import { describe, it, expect } from "@jest/globals";
+import { getClientIp } from "./client-ip";
+
+function headersOf(init: Record<string, string>): Headers {
+  return new Headers(init);
+}
+
+describe("getClientIp", () => {
+  it("优先取 X-Real-IP（Nginx 用 $remote_addr 覆写，客户端无法伪造）", () => {
+    const headers = headersOf({
+      "x-real-ip": "203.0.113.9",
+      "x-forwarded-for": "1.1.1.1",
+    });
+
+    expect(getClientIp(headers)).toBe("203.0.113.9");
+  });
+
+  it("N-25 攻击面：伪造最左 XFF 不得改变限流桶（无 X-Real-IP 时取链尾）", () => {
+    const headers = headersOf({
+      "x-forwarded-for": "1.1.1.1, 2.2.2.2, 198.51.100.7",
+    });
+
+    expect(getClientIp(headers)).toBe("198.51.100.7");
+  });
+
+  it("逐请求轮换 XFF 时，旧实现会得到 3 个不同桶、新实现稳定为一个", () => {
+    const spoofed = ["1.1.1.1", "2.2.2.2", "3.3.3.3"].map((ip) =>
+      headersOf({ "x-forwarded-for": `${ip}, 198.51.100.7` }),
+    );
+
+    const buckets = new Set(spoofed.map((h) => getClientIp(h)));
+    expect(buckets.size).toBe(1);
+    expect([...buckets][0]).toBe("198.51.100.7");
+  });
+
+  it("只有一跳时取该跳", () => {
+    expect(getClientIp(headersOf({ "x-forwarded-for": "198.51.100.7" }))).toBe(
+      "198.51.100.7",
+    );
+  });
+
+  it("空白值等同缺失（trim 后为空 ⇒ 不成为限流键）", () => {
+    expect(
+      getClientIp(headersOf({ "x-forwarded-for": "198.51.100.7, ,  " })),
+    ).toBe("198.51.100.7");
+    expect(getClientIp(headersOf({ "x-real-ip": "   " }))).toBe("unknown");
+    expect(getClientIp(headersOf({ "x-real-ip": "" }))).toBe("unknown");
+    expect(getClientIp(headersOf({ "x-forwarded-for": "  ,  " }))).toBe(
+      "unknown",
+    );
+  });
+
+  it("两个头都缺失时为 unknown", () => {
+    expect(getClientIp(headersOf({}))).toBe("unknown");
+  });
+});
diff --git a/src/lib/client-ip.ts b/src/lib/client-ip.ts
new file mode 100644
index 0000000..eae2942
--- /dev/null
+++ b/src/lib/client-ip.ts
@@ -0,0 +1,27 @@
+/**
+ * 取客户端 IP 用于限流键。
+ *
+ * 边缘（nginx-static.conf:100-101 / nginx-static-production.conf:103-104）同时设置：
+ *   - `X-Real-IP: $remote_addr` ⇒ 由 Nginx **覆写**，客户端无法伪造，最可信；
+ *   - `X-Forwarded-For: $proxy_add_x_forwarded_for` ⇒ 语义是**追加**，
+ *     因此客户端自带的 `X-Forwarded-For` 会原样保留在最左侧。
+ *
+ * 原实现读 `forwarded.split(',')[0]`（最左 = 客户端可控）⇒ 请求头里每次换一个
+ * `X-Forwarded-For: 1.2.3.4` 就能拿到一个新的限流桶，把 contact 表单的「5 次/小时」整体绕过。
+ * 这里改成：优先 `X-Real-IP`，其次取 XFF 链的**最右**一项（最近一跳由边缘写入的真实地址）。
+ */
+export function getClientIp(headers: Headers): string {
+  const realIp = headers.get("x-real-ip")?.trim();
+  if (realIp) return realIp;
+
+  const forwarded = headers.get("x-forwarded-for")?.trim();
+  if (forwarded) {
+    const chain = forwarded
+      .split(",")
+      .map((part) => part.trim())
+      .filter((part) => part.length > 0);
+    return chain[chain.length - 1] ?? "unknown";
+  }
+
+  return "unknown";
+}
diff --git a/src/lib/cms/data-server.test.ts b/src/lib/cms/data-server.test.ts
index c2c672b..16188fe 100644
--- a/src/lib/cms/data-server.test.ts
+++ b/src/lib/cms/data-server.test.ts
@@ -324,6 +324,11 @@ describe('data-server - CMS 数据访问层', () => {
   });
 
   describe('Helper Functions', () => {
+    // jest.spyOn 直接替换模块导出绑定；不还原会污染后续所有调用 getPublishedItems 的用例。
+    afterEach(() => {
+      jest.restoreAllMocks();
+    });
+
     it('getCases should call getPublishedItems with case-study', async () => {
       const spy = jest.spyOn(dataServer, 'getPublishedItems');
       spy.mockResolvedValue([]);
@@ -532,5 +537,93 @@ describe('data-server - CMS 数据访问层', () => {
       expect(result['home-solutions']).toHaveLength(1);
       expect(result['home-solutions']![0]!.title).toBe('Solution B');
     });
+
+    it('survives a dirty items column instead of throwing on .map', async () => {
+      mockContentZone.findMany.mockResolvedValue([
+        createZoneOverride('home-hero', null as unknown as never[]),
+        createZoneOverride('home-trust', [{ itemId: 'trust-1', sortOrder: 1 }]),
+      ]);
+      mockContentItem.findMany.mockResolvedValue([
+        { ...mockPrismaItem, id: 'trust-1', modelCode: 'hero-banner', title: 'Trust Signal' },
+      ]);
+
+      await expect(dataServer.getResolvedHomeZones()).resolves.toEqual({
+        'home-hero': [],
+        'home-trust': [expect.objectContaining({ title: 'Trust Signal' })],
+      });
+    });
+  });
+
+  describe('dirty data columns must not take down page consumers（B-4）', () => {
+    it.each(['null', 'not json', '', '{"unterminated":'])('reads data %s as {}', async (raw) => {
+      mockContentItem.findMany.mockResolvedValue([{ ...mockPrismaItem, data: raw }]);
+
+      const items = await dataServer.getPublishedItems('legal-page');
+
+      expect(items).toHaveLength(1);
+      expect(items[0]!.data).toEqual({});
+    });
+
+    it('handles a physically null data column without throwing', async () => {
+      mockContentItem.findMany.mockResolvedValue([{ ...mockPrismaItem, data: null }]);
+
+      const items = await dataServer.getPublishedItems('legal-page');
+
+      expect(items[0]!.data).toEqual({});
+    });
+
+    it('lets the terms page predicate run over a dirty row', async () => {
+      mockContentItem.findMany.mockResolvedValue([
+        { ...mockPrismaItem, modelCode: 'legal-page', data: 'null' },
+      ]);
+
+      const items = await dataServer.getPublishedItems('legal-page');
+
+      // src/app/terms/page.tsx:180 与 products/page.tsx:20 直接读取 item.data.<key>
+      expect(() => items.find((item) => item.data.pageType === 'terms')).not.toThrow();
+      expect(items.find((item) => item.data.pageType === 'terms')).toBeUndefined();
+      expect(() => items.map((item) => ({ ...item.data, id: item.data.id }))).not.toThrow();
+    });
+
+    it('lets the single-item consumers fall back too', async () => {
+      mockContentItem.findFirst.mockResolvedValue({ ...mockPrismaItem, data: 'null' });
+      mockContentItem.findUnique.mockResolvedValue({ ...mockPrismaItem, data: 'bogus' });
+
+      const bySlug = await dataServer.getPublishedItemBySlug('legal-page', 'terms');
+      const byId = await dataServer.getItemById('item-1');
+
+      expect(bySlug!.data).toEqual({});
+      expect(byId!.data).toEqual({});
+    });
+
+    it('degrades dirty zone and model columns to empty values', async () => {
+      mockContentZone.findUnique.mockResolvedValue({
+        ...mockPrismaZone,
+        allowedModels: 'null',
+        items: 'oops',
+        settings: 'null',
+      });
+      mockContentModel.findMany.mockResolvedValue([{ ...mockPrismaModel, fields: 'null' }]);
+
+      const zone = await dataServer.getZone('home-hero');
+      const models = await dataServer.getContentModels();
+
+      expect(zone!.allowedModels).toEqual([]);
+      expect(zone!.items).toEqual([]);
+      expect(zone!.settings).toEqual({});
+      expect(models[0]!.fields).toEqual([]);
+    });
+
+    it('keeps page zones resolvable when a column is dirty', async () => {
+      mockContentZone.findMany.mockResolvedValue([
+        { ...mockPrismaZone, allowedModels: 'null', items: 'null', settings: 'null' },
+      ]);
+
+      const zones = await dataServer.getPageZones('home');
+
+      expect(zones[0]!.allowedModels).toEqual([]);
+      expect(zones[0]!.items).toEqual([]);
+      expect(zones[0]!.settings).toEqual({});
+    });
   });
 });
\ No newline at end of file
diff --git a/src/lib/cms/data-server.ts b/src/lib/cms/data-server.ts
index 3bf2ea3..8299e4a 100644
--- a/src/lib/cms/data-server.ts
+++ b/src/lib/cms/data-server.ts
@@ -4,7 +4,8 @@
  */
 import { prisma } from '@/lib/db';
 import { cache } from 'react';
-import type { ContentItem, ContentStatus } from './types';
+import { parseCmsData } from './validate-content-data';
+import type { ContentItem, ContentStatus, ContentZoneItem, FieldDefinition } from './types';
 
 // ============ 类型转换 ============
 
@@ -17,7 +18,7 @@ function toContentItem(item: Record<string, unknown>): ContentItem {
     slug: (item.slug as string | null) ?? undefined,
     locale: (item.locale as string | null) ?? 'zh-CN',
     status: item.status as ContentStatus,
-    data: JSON.parse(item.data as string),
+    data: parseCmsData(item.data),
     version: item.version as number,
     sortOrder: (item.sortOrder as number | null) ?? undefined,
     publishedAt: (item.publishedAt as Date | null)?.toISOString(),
@@ -72,9 +73,9 @@ export const getPageZones = cache(async (pageCode: string) => {
   });
   return zones.map((z) => ({
     ...z,
-    allowedModels: JSON.parse(z.allowedModels),
-    items: JSON.parse(z.items),
-    settings: JSON.parse(z.settings),
+    allowedModels: parseCmsData<string[]>(z.allowedModels, []),
+    items: parseCmsData<ContentZoneItem[]>(z.items, []),
+    settings: parseCmsData(z.settings),
   }));
 });
 
@@ -86,9 +87,9 @@ export const getZone = cache(async (code: string) => {
   if (!zone) return null;
   return {
     ...zone,
-    allowedModels: JSON.parse(zone.allowedModels),
-    items: JSON.parse(zone.items),
-    settings: JSON.parse(zone.settings),
+    allowedModels: parseCmsData<string[]>(zone.allowedModels, []),
+    items: parseCmsData<ContentZoneItem[]>(zone.items, []),
+    settings: parseCmsData(zone.settings),
   };
 });
 
@@ -103,7 +104,7 @@ export const getContentModels = cache(async () => {
   });
   return models.map((m) => ({
     ...m,
-    fields: JSON.parse(m.fields),
+    fields: parseCmsData<FieldDefinition[]>(m.fields, []),
   }));
 });
 
diff --git a/src/lib/cms/internal-redirect.ts b/src/lib/cms/internal-redirect.ts
new file mode 100644
index 0000000..f0fbde2
--- /dev/null
+++ b/src/lib/cms/internal-redirect.ts
@@ -0,0 +1,10 @@
+/**
+ * 只接受站内绝对路径：`//evil.com` 经 new URL 解析会跳出到站外 origin，
+ * `https://evil.com`、`javascript:` 等绝对形式同理（B-6）。
+ *
+ * 原为 `/api/cms/draft/enable` 的私有函数；`/api/cms/draft/disable` 曾各自实现重定向而漏掉
+ * 该校验（N-18），故提取共享，避免同一缺陷在姊妹路由中重复。
+ */
+export function isInternalRedirect(redirect: string): boolean {
+  return redirect.startsWith('/') && !redirect.startsWith('//') && !redirect.startsWith('/\\');
+}
diff --git a/src/lib/cms/types.ts b/src/lib/cms/types.ts
index cdd5a96..d6a2d42 100644
--- a/src/lib/cms/types.ts
+++ b/src/lib/cms/types.ts
@@ -189,11 +189,23 @@ export interface PaginatedResult<T> {
   totalPages: number;
 }
 
+/** 审计日志中除工作流以外的常规写动作 */
+export type AuditCrudAction = 'create' | 'update' | 'delete' | 'publish' | 'unpublish';
+
+/** 发布工作流写入审计日志的动作（与 `workflow.ts` 的 WorkflowAction 取值一致） */
+export type AuditWorkflowAction = 'submit' | 'approve' | 'reject' | 'archive';
+
 export interface AuditLog {
   id: string;
   module: 'model' | 'item' | 'zone' | 'theme' | 'media';
   targetId: string;
-  action: 'create' | 'update' | 'delete' | 'publish' | 'unpublish';
+  /**
+   * CRUD 动作 + 发布工作流动作。
+   * submit/approve/reject/archive 由 `src/lib/cms/workflow.ts` 写入（`ContentItemAuditAction`），
+   * 缺了它们「驳回」与「编辑」在审计日志里就不可区分（验收 §5）。
+   * 列在 Prisma schema 中为自由字符串（`AuditLog.action String`），无需迁移即可容纳。
+   */
+  action: AuditCrudAction | AuditWorkflowAction;
   operator: string;
   beforeData?: Record<string, unknown>;
   afterData?: Record<string, unknown>;
diff --git a/src/lib/cms/validate-content-data.test.ts b/src/lib/cms/validate-content-data.test.ts
new file mode 100644
index 0000000..d5d1b53
--- /dev/null
+++ b/src/lib/cms/validate-content-data.test.ts
@@ -0,0 +1,183 @@
+import { describe, it, expect } from '@jest/globals';
+import { parseCmsData, validateContentData } from './validate-content-data';
+import { CONTENT_TYPE_CONFIGS } from './content-types';
+import type { FieldDefinition } from './types';
+
+const productFields = CONTENT_TYPE_CONFIGS['product'].model.fields;
+const metricsField = productFields.find((f) => f.name === 'metrics') as FieldDefinition;
+const basisField = metricsField.fields!.find((f) => f.name === 'basis') as FieldDefinition;
+
+const declared: FieldDefinition[] = [
+  { name: 'title', type: 'text', label: '标题' },
+  { name: 'body', type: 'richtext', label: '正文' },
+  { name: 'sortOrder', type: 'number', label: '排序', validation: { min: 0, max: 99 } },
+  {
+    name: 'slug',
+    type: 'text',
+    label: '标识',
+    validation: { pattern: '^[a-z0-9-]+$' },
+  },
+  {
+    name: 'color',
+    type: 'select',
+    label: '主题色',
+    options: [
+      { label: '品牌红', value: 'brand' },
+      { label: '蓝', value: 'blue' },
+    ],
+  },
+  {
+    name: 'items',
+    type: 'array',
+    label: '条目',
+    fields: [
+      { name: 'label', type: 'text', label: '标签' },
+      { name: 'color', type: 'select', label: '颜色', options: [{ label: '青', value: 'teal' }] },
+    ],
+  },
+  {
+    name: 'seo',
+    type: 'object',
+    label: 'SEO',
+    fields: [{ name: 'keywords', type: 'text', label: '关键词', validation: { max: 10 } }],
+  },
+];
+
+describe('validateContentData', () => {
+  it('accepts a payload that satisfies every declared constraint', () => {
+    expect(
+      validateContentData(declared, {
+        title: '制造业主数据治理',
+        body: '<p>正文</p>',
+        sortOrder: 5,
+        slug: 'main-data',
+        color: 'brand',
+        items: [{ label: '能力一', color: 'teal' }, { label: '能力二' }],
+        seo: { keywords: 'ERP,CRM' },
+      }),
+    ).toEqual([]);
+  });
+
+  it('rejects a select value outside the declared options', () => {
+    const errors = validateContentData(declared, { color: 'neon-pink' });
+
+    expect(errors).toEqual([
+      {
+        path: 'color',
+        rule: 'option',
+        message: '主题色 的值不在声明的选项范围内',
+      },
+    ]);
+  });
+
+  it('rejects a fabricated metric basis inside a declared array element', () => {
+    const errors = validateContentData(productFields, {
+      metrics: [{ value: '99.9%', label: '系统可用率', basis: 'customer-validated' }],
+    });
+
+    expect(errors).toHaveLength(1);
+    expect(errors[0]).toMatchObject({ path: 'metrics[0].basis', rule: 'option' });
+  });
+
+  it('documents that "verified" is itself a declared option, so enum checks cannot refuse it', () => {
+    expect(basisField.options!.map((o) => o.value)).toEqual(['target', 'team-history', 'verified']);
+    expect(validateContentData(productFields, { metrics: [{ basis: 'verified' }] })).toEqual([]);
+  });
+
+  it('rejects a number above the declared max and below the declared min', () => {
+    expect(validateContentData(declared, { sortOrder: 100 })[0]).toMatchObject({
+      path: 'sortOrder',
+      rule: 'max',
+    });
+    expect(validateContentData(declared, { sortOrder: -1 })[0]).toMatchObject({
+      path: 'sortOrder',
+      rule: 'min',
+    });
+    expect(validateContentData(declared, { sortOrder: 99 })).toEqual([]);
+  });
+
+  it('treats max on a string field as a length bound and checks the declared pattern', () => {
+    expect(validateContentData(declared, { seo: { keywords: 'a'.repeat(11) } })[0]).toMatchObject({
+      path: 'seo.keywords',
+      rule: 'max',
+    });
+    expect(validateContentData(declared, { slug: 'UPPER CASE!!' })[0]).toMatchObject({
+      path: 'slug',
+      rule: 'pattern',
+    });
+  });
+
+  it('ignores keys the model never declares', () => {
+    expect(
+      validateContentData(declared, {
+        undeclaredProof: '已通过 ISO 认证',
+        metrics: [{ basis: 'anything-goes' }],
+        color: 'brand',
+      }),
+    ).toEqual([]);
+  });
+
+  it('ignores absent and emptied fields instead of enforcing them', () => {
+    expect(validateContentData(declared, {})).toEqual([]);
+    expect(validateContentData(declared, { title: null, color: undefined })).toEqual([]);
+  });
+
+  it('stays permissive when there is nothing to validate against', () => {
+    expect(validateContentData([], { color: 'neon-pink' })).toEqual([]);
+    expect(validateContentData(null, { color: 'neon-pink' })).toEqual([]);
+    expect(validateContentData(undefined, { anything: true })).toEqual([]);
+    expect(validateContentData(declared, null)).toEqual([]);
+    expect(validateContentData(declared, 'not-an-object')).toEqual([]);
+    expect(validateContentData([{} as FieldDefinition], { title: 'x' })).toEqual([]);
+  });
+
+  it('collects every violation instead of stopping at the first one', () => {
+    const errors = validateContentData(declared, {
+      color: 'neon-pink',
+      sortOrder: 500,
+      slug: 'Bad Slug',
+      items: [{ color: 'teal' }, { color: 'magenta' }],
+    });
+
+    expect(errors.map((e) => e.path).sort()).toEqual(
+      ['color', 'items[1].color', 'slug', 'sortOrder'].sort(),
+    );
+  });
+
+  it('does not crash on a malformed declared pattern', () => {
+    const broken: FieldDefinition[] = [
+      { name: 'code', type: 'text', label: '编码', validation: { pattern: '([unclosed' } },
+    ];
+
+    expect(validateContentData(broken, { code: 'abc' })).toEqual([]);
+  });
+});
+
+describe('parseCmsData（B-4）', () => {
+  it.each([
+    ['the literal string null', 'null'],
+    ['truncated JSON', '{"pageType":"terms"'],
+    ['non-JSON text', 'not json'],
+    ['a bare number', '123'],
+    ['a bare string', '"terms"'],
+    ['an empty column', ''],
+  ])('returns {} for %s', (_label: string, raw: string) => {
+    expect(parseCmsData(raw)).toEqual({});
+  });
+
+  it('returns {} for missing values rather than null', () => {
+    expect(parseCmsData(null)).toEqual({});
+    expect(parseCmsData(undefined)).toEqual({});
+  });
+
+  it('keeps valid objects and arrays intact', () => {
+    expect(parseCmsData('{"pageType":"terms"}')).toEqual({ pageType: 'terms' });
+    expect(parseCmsData('["hero-banner"]')).toEqual(['hero-banner']);
+    expect(parseCmsData('[]')).toEqual([]);
+  });
+
+  it('lets array columns fall back to [] so downstream .map keeps working', () => {
+    expect(parseCmsData('null', [])).toEqual([]);
+    expect(parseCmsData('bogus', [])).toEqual([]);
+  });
+});
diff --git a/src/lib/cms/validate-content-data.ts b/src/lib/cms/validate-content-data.ts
new file mode 100644
index 0000000..b3fccfe
--- /dev/null
+++ b/src/lib/cms/validate-content-data.ts
@@ -0,0 +1,123 @@
+import type { FieldDefinition } from './types';
+
+/**
+ * CMS 内容列的读取/写入守卫（B-4、B-3），无 prisma / react 依赖，页面与 API 路由共用。
+ */
+
+/**
+ * CMS 的 JSON 列（ContentItem.data / ContentZone.items / ContentModel.fields 等）
+ * 可能是 null、非法 JSON 或基础类型。单个脏值不应让整页渲染或 SSG 中断（B-4），
+ * 与 media-service.ts 的 parseDerivatives 同族守卫：无法归一为对象/数组时回落到空值。
+ * 数组列需显式传入 `[]` 作为回落值，否则下游 `.map` 会二次抛错。
+ */
+export function parseCmsData<T = Record<string, unknown>>(raw: unknown, fallback?: T): T {
+  const empty = (fallback ?? {}) as T;
+  if (typeof raw !== 'string') return empty;
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    return parsed !== null && typeof parsed === 'object' ? (parsed as T) : empty;
+  } catch {
+    return empty;
+  }
+}
+
+/**
+ * 写入侧内容校验（B-3）。
+ *
+ * 只执行 `ContentModel.fields` 已声明的约束：未声明的键一律放行，未填的键不判必填，
+ * 以免改变既有载荷形态（seed 与页面组件依赖宽松结构）。
+ * 声明了 `options` 即视为枚举 —— `select`/`dropdown` 与带 `options` 的 `text` 字段
+ * 在 content-types.ts 中同义（如 news 的 category、legal-page 的 pageType）。
+ */
+export interface ContentFieldError {
+  path: string;
+  rule: 'option' | 'min' | 'max' | 'pattern';
+  message: string;
+}
+
+const STRING_TYPES: readonly FieldDefinition['type'][] = ['text', 'textarea', 'richtext'];
+
+export function validateContentData(
+  fields: FieldDefinition[] | null | undefined,
+  data: unknown,
+): ContentFieldError[] {
+  const errors: ContentFieldError[] = [];
+  validateFields(fields, data, '', errors);
+  return errors;
+}
+
+function validateFields(
+  fields: FieldDefinition[] | null | undefined,
+  value: unknown,
+  prefix: string,
+  errors: ContentFieldError[],
+): void {
+  if (!Array.isArray(fields) || fields.length === 0) return;
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) return;
+
+  const record = value as Record<string, unknown>;
+  for (const field of fields) {
+    if (!Object.prototype.hasOwnProperty.call(record, field.name)) continue;
+    const raw = record[field.name];
+    if (raw === null || raw === undefined) continue;
+    validateField(field, raw, prefix ? `${prefix}.${field.name}` : field.name, errors);
+  }
+}
+
+function validateField(
+  field: FieldDefinition,
+  value: unknown,
+  path: string,
+  errors: ContentFieldError[],
+): void {
+  const label = field.label || field.name;
+
+  if (Array.isArray(field.options) && field.options.length > 0) {
+    const allowed = field.options.map((option) => option.value);
+    if (!allowed.includes(value as (typeof allowed)[number])) {
+      errors.push({ path, rule: 'option', message: `${label} 的值不在声明的选项范围内` });
+      return;
+    }
+  }
+
+  const validation = field.validation;
+
+  if (field.type === 'number' && typeof value === 'number' && validation) {
+    if (typeof validation.min === 'number' && value < validation.min) {
+      errors.push({ path, rule: 'min', message: `${label} 不得小于 ${validation.min}` });
+    }
+    if (typeof validation.max === 'number' && value > validation.max) {
+      errors.push({ path, rule: 'max', message: `${label} 不得大于 ${validation.max}` });
+    }
+  }
+
+  if (STRING_TYPES.includes(field.type) && typeof value === 'string' && validation) {
+    if (typeof validation.min === 'number' && value.length < validation.min) {
+      errors.push({ path, rule: 'min', message: `${label} 长度不得少于 ${validation.min}` });
+    }
+    if (typeof validation.max === 'number' && value.length > validation.max) {
+      errors.push({ path, rule: 'max', message: `${label} 长度不得超过 ${validation.max}` });
+    }
+    if (typeof validation.pattern === 'string') {
+      let matched: boolean;
+      try {
+        matched = new RegExp(validation.pattern).test(value);
+      } catch {
+        matched = true;
+      }
+      if (!matched) {
+        errors.push({ path, rule: 'pattern', message: `${label} 不符合声明的格式` });
+      }
+    }
+  }
+
+  if (!Array.isArray(field.fields) || field.fields.length === 0) return;
+
+  if (Array.isArray(value)) {
+    value.forEach((element, index) => {
+      validateFields(field.fields, element, `${path}[${index}]`, errors);
+    });
+  } else if (typeof value === 'object') {
+    validateFields(field.fields, value, path, errors);
+  }
+}
diff --git a/src/lib/cms/workflow.test.ts b/src/lib/cms/workflow.test.ts
index dc6b161..90a6610 100644
--- a/src/lib/cms/workflow.test.ts
+++ b/src/lib/cms/workflow.test.ts
@@ -3,7 +3,8 @@ import type { ContentItem } from './types';
 
 // ─── Mock @/lib/db 提供可控的 prisma 实例 ──────────────────────────────
 const mockContentItemFindUnique = jest.fn<(args: unknown) => Promise<unknown | null>>();
-const mockContentItemUpdate = jest.fn<(args: unknown) => Promise<unknown>>();
+const mockContentItemUpdateMany = jest.fn<(args: unknown) => Promise<{ count: number }>>();
+const mockContentItemFindUniqueOrThrow = jest.fn<(args: unknown) => Promise<unknown>>();
 const mockAuditLogCreate = jest.fn<(args: unknown) => Promise<unknown>>();
 const mockNotifyReviewers = jest.fn<(item: ContentItem, actor: { userId: string; username: string }) => Promise<number>>();
 const mockNotifyCreator = jest.fn<
@@ -19,11 +20,33 @@ jest.mock('@/lib/db', () => ({
   prisma: {
     contentItem: {
       findUnique: mockContentItemFindUnique,
-      update: mockContentItemUpdate,
+      updateMany: mockContentItemUpdateMany,
+      findUniqueOrThrow: mockContentItemFindUniqueOrThrow,
     },
     auditLog: {
       create: mockAuditLogCreate,
     },
+    // 交互式事务：进入前对「库」做快照，回调抛出即回滚快照，让回滚可被断言（Q-10②）。
+    // 数组形态 $transaction([a,b]) 是并行提交，无法承载「更新→读回→审计」的写后读依赖，
+    // 因此谓词只接函数入参——非函数调用直接判红而不是静默走旁路。
+    $transaction: jest.fn(async (fn: unknown) => {
+      if (typeof fn !== 'function') {
+        throw new Error('workflow 需要交互式 $transaction（写后读依赖），不接受数组形态');
+      }
+      const snapshot = storedItem;
+      try {
+        return await fn({
+          contentItem: {
+            updateMany: mockContentItemUpdateMany,
+            findUniqueOrThrow: mockContentItemFindUniqueOrThrow,
+          },
+          auditLog: { create: mockAuditLogCreate },
+        });
+      } catch (err) {
+        storedItem = snapshot;
+        throw err;
+      }
+    }),
   },
 }));
 
@@ -66,11 +89,44 @@ function createMockItem(status: ContentItem['status'], overrides: Partial<Conten
   } as ContentItem;
 }
 
+/** 「数据库」里当前的行 */
+let storedItem: ContentItem | null = null;
+
+/** 把条目放进「数据库」，findUnique / findUniqueOrThrow 都读到这一份行 */
+function stubStoredItem(item: ContentItem | null) {
+  storedItem = item;
+  mockContentItemFindUnique.mockImplementation(async () => item);
+  mockContentItemFindUniqueOrThrow.mockImplementation(async () => {
+    if (!item) throw new Error('Row not found');
+    return item;
+  });
+}
+
+let consoleErrorSpy: jest.Spied<typeof console.error>;
+
 beforeEach(() => {
   jest.clearAllMocks();
-  mockContentItemUpdate.mockImplementation(async (args: unknown) => {
-    const { data, where } = args as { data: Record<string, unknown>; where: { id: string } };
-    return { id: where.id, ...data };
+  consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+  stubStoredItem(null);
+
+  // 条件更新：只有 where.status 仍等于库里的当前状态才命中 1 行，
+  // 并按 data.version.increment 原子自增后写回（模拟数据库语义）
+  mockContentItemUpdateMany.mockImplementation(async (args: unknown) => {
+    const { where, data } = args as {
+      where: { id: string; status: ContentItem['status'] };
+      data: Record<string, unknown>;
+    };
+    if (!storedItem || storedItem.status !== where.status || storedItem.id !== where.id) {
+      return { count: 0 };
+    }
+    const increment = (data.version as { increment: number } | undefined)?.increment ?? 0;
+    const next = {
+      ...storedItem,
+      ...data,
+      version: storedItem.version + increment,
+    } as unknown as ContentItem;
+    stubStoredItem(next);
+    return { count: 1 };
   });
   mockAuditLogCreate.mockResolvedValue({ id: 'log-1' });
   mockNotifyReviewers.mockResolvedValue(1);
@@ -101,29 +157,34 @@ describe('isValidTransition', () => {
 });
 
 describe('submitForReview', () => {
-  it('transitions draft to review and increments version', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('draft'));
+  it('transitions draft to review and lets the database increment the version', async () => {
+    stubStoredItem(createMockItem('draft'));
 
     const result = await submitForReview('item-1', mockUser);
 
     expect(result.status).toBe('review');
     expect(result.version).toBe(2);
-    expect(mockContentItemUpdate).toHaveBeenCalledWith(
+    // 关键：不再传绝对值 item.version + 1，而是交给数据库自增（验收 B-5）
+    expect(mockContentItemUpdateMany).toHaveBeenCalledWith(
       expect.objectContaining({
-        where: { id: 'item-1' },
+        where: { id: 'item-1', status: 'draft' },
         data: expect.objectContaining({
           status: 'review',
-          version: 2,
+          version: { increment: 1 },
           updatedBy: 'editor',
         }),
       })
     );
+    const data = mockContentItemUpdateMany.mock.calls[0]![0] as unknown as {
+      data: Record<string, unknown>;
+    };
+    expect(data.data).not.toHaveProperty('version', 2);
     expect(mockAuditLogCreate).toHaveBeenCalledWith(
       expect.objectContaining({
         data: expect.objectContaining({
           module: 'item',
           targetId: 'item-1',
-          action: 'update',
+          action: 'submit',
           operator: 'editor',
         }),
       })
@@ -140,31 +201,38 @@ describe('submitForReview', () => {
   });
 
   it('throws for illegal transition', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('published'));
+    stubStoredItem(createMockItem('published'));
     await expect(submitForReview('item-1', mockUser)).rejects.toThrow(
       '当前状态 published 不允许提交审核'
     );
+    expect(mockContentItemUpdateMany).not.toHaveBeenCalled();
   });
 });
 
 describe('approve', () => {
   it('transitions review to published and sets publishedAt', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('review'));
+    stubStoredItem(createMockItem('review'));
 
     const result = await approve('item-1', mockReviewer);
 
     expect(result.status).toBe('published');
     expect(result.version).toBe(2);
-    expect(mockContentItemUpdate).toHaveBeenCalledWith(
+    expect(mockContentItemUpdateMany).toHaveBeenCalledWith(
       expect.objectContaining({
+        where: { id: 'item-1', status: 'review' },
         data: expect.objectContaining({
           status: 'published',
           publishedAt: expect.any(Date),
-          version: 2,
+          version: { increment: 1 },
           updatedBy: 'reviewer',
         }),
       })
     );
+    expect(mockAuditLogCreate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({ action: 'approve' }),
+      })
+    );
     expect(mockNotifyCreator).toHaveBeenCalledWith(
       expect.objectContaining({ id: 'item-1', title: '测试内容' }),
       'review_approved',
@@ -173,16 +241,55 @@ describe('approve', () => {
   });
 
   it('throws for non-review item', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('draft'));
+    stubStoredItem(createMockItem('draft'));
     await expect(approve('item-1', mockReviewer)).rejects.toThrow(
       '当前状态 draft 不允许审核通过'
     );
   });
+
+  it('still succeeds and logs when the notification fails', async () => {
+    stubStoredItem(createMockItem('review'));
+    mockNotifyCreator.mockRejectedValueOnce(new Error('SQLITE_BUSY'));
+
+    const result = await approve('item-1', mockReviewer);
+
+    // 流转已成功：通知失败不得把它变成 500（验收 B-5），但必须留下日志
+    expect(result.status).toBe('published');
+    expect(result.version).toBe(2);
+    expect(consoleErrorSpy).toHaveBeenCalledTimes(1);
+    expect(consoleErrorSpy.mock.calls[0]![0]).toContain('通知发送失败');
+    expect(consoleErrorSpy.mock.calls[0]![1]).toBeInstanceOf(Error);
+  });
+
+  it('aborts the transition when another writer already changed the status', async () => {
+    stubStoredItem(createMockItem('review'));
+    // 条件更新命中 0 行 = 并发下 status 已不是刚读到的值（status TOCTOU）
+    mockContentItemUpdateMany.mockResolvedValueOnce({ count: 0 });
+
+    await expect(approve('item-1', mockReviewer)).rejects.toThrow('当前状态已被其他操作改变');
+    expect(mockAuditLogCreate).not.toHaveBeenCalled();
+    expect(mockNotifyCreator).not.toHaveBeenCalled();
+    expect(consoleErrorSpy).not.toHaveBeenCalled();
+  });
+
+  it('rolls the status back when the audit log write fails, instead of committing an unaudited transition', async () => {
+    stubStoredItem(createMockItem('review'));
+    mockAuditLogCreate.mockRejectedValueOnce(new Error('write conflict'));
+
+    await expect(approve('item-1', mockReviewer)).rejects.toThrow('write conflict');
+    // 修复前：updateMany 与 auditLog.create 是两条独立写，审计失败时状态已落库，
+    // 出现「已发布但无审计」的静默不一致，且调用方收到 500 会以为流转没发生。
+    expect(storedItem).not.toBeNull();
+    expect(storedItem!.status).toBe('review');
+    expect(storedItem!.version).toBe(1);
+    // 通知不得在事务提交前发出
+    expect(mockNotifyCreator).not.toHaveBeenCalled();
+  });
 });
 
 describe('reject', () => {
-  it('transitions review back to draft', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('review'));
+  it('transitions review back to draft and records a distinguishable audit action', async () => {
+    stubStoredItem(createMockItem('review'));
 
     const result = await reject('item-1', mockReviewer, '需要补充数据来源');
 
@@ -191,6 +298,7 @@ describe('reject', () => {
     expect(mockAuditLogCreate).toHaveBeenCalledWith(
       expect.objectContaining({
         data: expect.objectContaining({
+          action: 'reject',
           afterData: expect.stringContaining('需要补充数据来源'),
         }),
       })
@@ -204,7 +312,7 @@ describe('reject', () => {
   });
 
   it('throws for non-review item', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('published'));
+    stubStoredItem(createMockItem('published'));
     await expect(reject('item-1', mockReviewer)).rejects.toThrow(
       '当前状态 published 不允许驳回'
     );
@@ -212,13 +320,18 @@ describe('reject', () => {
 });
 
 describe('archive', () => {
-  it('transitions published to archived', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('published'));
+  it('transitions published to archived with its own audit action', async () => {
+    stubStoredItem(createMockItem('published'));
 
     const result = await archive('item-1', mockReviewer);
 
     expect(result.status).toBe('archived');
     expect(result.version).toBe(2);
+    expect(mockAuditLogCreate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({ action: 'archive' }),
+      })
+    );
     expect(mockNotifyCreator).toHaveBeenCalledWith(
       expect.objectContaining({ id: 'item-1', title: '测试内容' }),
       'item_archived',
@@ -227,9 +340,7 @@ describe('archive', () => {
   });
 
   it('throws for non-published item', async () => {
-    mockContentItemFindUnique.mockResolvedValue(createMockItem('review'));
-    await expect(archive('item-1', mockReviewer)).rejects.toThrow(
-      '当前状态 review 不允许归档'
-    );
+    stubStoredItem(createMockItem('review'));
+    await expect(archive('item-1', mockReviewer)).rejects.toThrow('当前状态 review 不允许归档');
   });
 });
diff --git a/src/lib/cms/workflow.ts b/src/lib/cms/workflow.ts
index 854e89d..f3ce18b 100644
--- a/src/lib/cms/workflow.ts
+++ b/src/lib/cms/workflow.ts
@@ -1,7 +1,10 @@
 import { prisma } from '@/lib/db';
-import type { ContentItem, ContentStatus } from './types';
+import type { Prisma } from '@/generated/prisma/client';
+import type { AuditLog, ContentItem, ContentStatus } from './types';
 import { notifyReviewers, notifyCreator } from './notifications';
 
+type PrismaTx = Prisma.TransactionClient;
+
 export type WorkflowAction = 'submit' | 'approve' | 'reject' | 'archive';
 
 interface WorkflowUser {
@@ -63,12 +66,13 @@ async function transition(
   }
 
   const targetStatus = TARGET_STATUS[action];
-  const nextVersion = item.version + 1;
   const now = new Date();
 
   const updateData: Record<string, unknown> = {
     status: targetStatus,
-    version: nextVersion,
+    // 由数据库自增而非读-改-写（item.version + 1）：后者在并发流转下会互相覆盖版本号，
+    // 与 src/app/api/admin/items/route.ts 的 { increment: 1 } 统一到同一套语义（验收 B-5）。
+    version: { increment: 1 },
     updatedBy: user.username,
     updatedAt: now,
   };
@@ -77,36 +81,69 @@ async function transition(
     updateData.publishedAt = now;
   }
 
-  const updated = await prisma.contentItem.update({
-    where: { id: itemId },
-    data: updateData,
+  // 条件更新（compare-and-swap）：只有 status 仍等于刚才读到的值时才写入。
+  // 单条 UPDATE 在 SQLite 内是原子的，因此并发流转不会把他人刚改过的状态再覆盖一次
+  // （原实现是先 findUnique 校验、再无条件 update，status 校验存在 TOCTOU 窗口）。
+  //
+  // 「状态更新 → 读回 → 审计」必须同事务提交：读回依赖更新的写后读，审计依赖读回的快照，
+  // 因此用交互式事务。历史实现是三条独立写，审计写入失败时会留下
+  // 「状态已变更但无审计记录」的静默不一致（Q-10②）。
+  const { updated } = await prisma.$transaction(async (tx: PrismaTx) => {
+    const { count } = await tx.contentItem.updateMany({
+      where: { id: itemId, status: item.status },
+      data: updateData,
+    });
+
+    if (count === 0) {
+      // 文案含「当前状态」以命中 workflow 路由的 400 分支（不是 500）
+      throw new Error('当前状态已被其他操作改变，请刷新后重试');
+    }
+
+    const after = await tx.contentItem.findUniqueOrThrow({
+      where: { id: itemId },
+    });
+
+    const afterData: Record<string, unknown> = { ...after };
+    if (reason) {
+      afterData.reason = reason;
+    }
+
+    // 工作流动作即审计动作：类型标注让取值与 AuditLog['action'] 联合类型在编译期对齐
+    const auditAction: AuditLog['action'] = action;
+
+    await tx.auditLog.create({
+      data: {
+        module: 'item',
+        targetId: itemId,
+        // 审计动作直接记录工作流动作本身（submit/approve/reject/archive 已在
+        // src/lib/cms/types.ts 的 AuditLog['action'] 联合类型中声明），
+        // 使「驳回」不再与「编辑」同为 'update' 而不可区分（验收 §5）。
+        // 显式标注类型：取值越出联合类型时编译期即报错，无需 as unknown as。
+        action: auditAction,
+        operator: user.username,
+        beforeData: JSON.stringify(item),
+        afterData: JSON.stringify(afterData),
+      },
+    });
+
+    return { updated: after };
   });
 
-  const afterData: Record<string, unknown> = { ...updated };
-  if (reason) {
-    afterData.reason = reason;
-  }
-
-  await prisma.auditLog.create({
-    data: {
-      module: 'item',
-      targetId: itemId,
-      action: action === 'approve' || action === 'archive' ? action : 'update',
-      operator: user.username,
-      beforeData: JSON.stringify(item),
-      afterData: JSON.stringify(afterData),
-    },
-  });
-
-  // 生成站内通知：提交审核时通知审核人；审核结果/归档时通知创建人
-  if (action === 'submit') {
-    await notifyReviewers(item, user);
-  } else if (action === 'approve') {
-    await notifyCreator(item, 'review_approved', user);
-  } else if (action === 'reject') {
-    await notifyCreator(item, 'review_rejected', user, reason);
-  } else if (action === 'archive') {
-    await notifyCreator(item, 'item_archived', user);
+  // 生成站内通知：提交审核时通知审核人；审核结果/归档时通知创建人。
+  // 通知失败不回滚也不上抛——流转已成功，抛错会让调用方得到 500 并误以为审批失败；
+  // 但必须留下可排查的日志，不能静默吞掉（验收 B-5）。
+  try {
+    if (action === 'submit') {
+      await notifyReviewers(item, user);
+    } else if (action === 'approve') {
+      await notifyCreator(item, 'review_approved', user);
+    } else if (action === 'reject') {
+      await notifyCreator(item, 'review_rejected', user, reason);
+    } else if (action === 'archive') {
+      await notifyCreator(item, 'item_archived', user);
+    }
+  } catch (error) {
+    console.error(`[cms:workflow] 通知发送失败（action=${action}, item=${itemId}）:`, error);
   }
 
   return {
diff --git a/src/lib/colors.test.ts b/src/lib/colors.test.ts
deleted file mode 100644
index b36a14b..0000000
--- a/src/lib/colors.test.ts
+++ /dev/null
@@ -1,183 +0,0 @@
-import { describe, it, expect } from '@jest/globals';
-import { brandColors, colorValues, gradients } from './colors';
-
-describe('colors', () => {
-  describe('brandColors', () => {
-    it('should have primary color palette', () => {
-      expect(brandColors.primary).toBeDefined();
-      expect(brandColors.primary[900]).toBe('#0A0A0A');
-      expect(brandColors.primary[50]).toBe('#F5F5F5');
-    });
-
-    it('should have brand color palette', () => {
-      expect(brandColors.brand).toBeDefined();
-      expect(brandColors.brand[600]).toBe('#C41E3A');
-      expect(brandColors.brand[100]).toBe('#FEF2F4');
-    });
-
-    it('should have neutral color palette', () => {
-      expect(brandColors.neutral).toBeDefined();
-      expect(brandColors.neutral[900]).toBe('#1C1C1C');
-      expect(brandColors.neutral[50]).toBe('#FFFBF5');
-    });
-
-    it('should have success color palette', () => {
-      expect(brandColors.success).toBeDefined();
-      expect(brandColors.success[600]).toBe('#16A34A');
-      expect(brandColors.success[100]).toBe('#F0FDF4');
-    });
-
-    it('should have warning color palette', () => {
-      expect(brandColors.warning).toBeDefined();
-      expect(brandColors.warning[600]).toBe('#D97706');
-      expect(brandColors.warning[100]).toBe('#FFFBEB');
-    });
-
-    it('should have info color palette', () => {
-      expect(brandColors.info).toBeDefined();
-      expect(brandColors.info[600]).toBe('#5C5C5C');
-      expect(brandColors.info[100]).toBe('#F5F5F5');
-    });
-
-    it('should have error color palette', () => {
-      expect(brandColors.error).toBeDefined();
-      expect(brandColors.error[600]).toBe('#C41E3A');
-      expect(brandColors.error[100]).toBe('#FEF2F4');
-    });
-
-    it('should have valid hex color format', () => {
-      const hexPattern = /^#[0-9A-Fa-f]{6}$/;
-      
-      Object.values(brandColors.primary).forEach(color => {
-        expect(color).toMatch(hexPattern);
-      });
-      
-      Object.values(brandColors.brand).forEach(color => {
-        expect(color).toMatch(hexPattern);
-      });
-    });
-  });
-
-  describe('colorValues', () => {
-    it('should have primary colors', () => {
-      expect(colorValues.primary).toBe('#1C1C1C');
-      expect(colorValues.primaryHover).toBe('#0A0A0A');
-      expect(colorValues.primaryLight).toBe('#3D3D3D');
-      expect(colorValues.primaryLighter).toBe('#F5F5F5');
-    });
-
-    it('should have brand colors', () => {
-      expect(colorValues.brand).toBe('#C41E3A');
-      expect(colorValues.brandHover).toBe('#A01830');
-      expect(colorValues.brandLight).toBe('#E04A68');
-      expect(colorValues.brandBg).toBe('#FEF2F4');
-    });
-
-    it('should have text colors', () => {
-      expect(colorValues.textPrimary).toBe('#1C1C1C');
-      expect(colorValues.textSecondary).toBe('#3D3D3D');
-      expect(colorValues.textTertiary).toBe('#5C5C5C');
-      expect(colorValues.textMuted).toBe('#8C8C8C');
-    });
-
-    it('should have background colors', () => {
-      expect(colorValues.bgPrimary).toBe('#FAFAFA');
-      expect(colorValues.bgSecondary).toBe('#FFFBF5');
-      expect(colorValues.bgTertiary).toBe('#F5F5F5');
-      expect(colorValues.bgHover).toBe('#EFEFEF');
-    });
-
-    it('should have border colors', () => {
-      expect(colorValues.border).toBe('#E5E5E5');
-      expect(colorValues.borderSecondary).toBe('#D4D4D4');
-      expect(colorValues.borderAccent).toBe('#1C1C1C');
-    });
-
-    it('should have link colors', () => {
-      expect(colorValues.link).toBe('#1C1C1C');
-      expect(colorValues.linkHover).toBe('#C41E3A');
-    });
-
-    it('should have status colors', () => {
-      expect(colorValues.success).toBe('#16A34A');
-      expect(colorValues.successBg).toBe('#F0FDF4');
-      expect(colorValues.warning).toBe('#D97706');
-      expect(colorValues.warningBg).toBe('#FFFBEB');
-      expect(colorValues.info).toBe('#5C5C5C');
-      expect(colorValues.infoBg).toBe('#F5F5F5');
-      expect(colorValues.error).toBe('#C41E3A');
-      expect(colorValues.errorBg).toBe('#FEF2F4');
-    });
-
-    it('should have valid hex color format', () => {
-      const hexPattern = /^#[0-9A-Fa-f]{6}$/;
-      
-      Object.values(colorValues).forEach(color => {
-        expect(color).toMatch(hexPattern);
-      });
-    });
-  });
-
-  describe('gradients', () => {
-    it('should have primary gradient', () => {
-      expect(gradients.primary).toBeDefined();
-      expect(gradients.primary).toContain('linear-gradient');
-      expect(gradients.primary).toContain('135deg');
-    });
-
-    it('should have hero gradient', () => {
-      expect(gradients.hero).toBeDefined();
-      expect(gradients.hero).toContain('linear-gradient');
-      expect(gradients.hero).toContain('180deg');
-    });
-
-    it('should have brand gradient', () => {
-      expect(gradients.brand).toBeDefined();
-      expect(gradients.brand).toContain('linear-gradient');
-      expect(gradients.brand).toContain('135deg');
-    });
-
-    it('should have subtle gradient', () => {
-      expect(gradients.subtle).toBeDefined();
-      expect(gradients.subtle).toContain('linear-gradient');
-      expect(gradients.subtle).toContain('180deg');
-    });
-
-    it('should have card gradient', () => {
-      expect(gradients.card).toBeDefined();
-      expect(gradients.card).toContain('linear-gradient');
-      expect(gradients.card).toContain('180deg');
-    });
-
-    it('should have cta gradient', () => {
-      expect(gradients.cta).toBeDefined();
-      expect(gradients.cta).toContain('linear-gradient');
-      expect(gradients.cta).toContain('135deg');
-    });
-
-    it('should have valid gradient format', () => {
-      const gradientPattern = /^linear-gradient\(/;
-      
-      Object.values(gradients).forEach(gradient => {
-        expect(gradient).toMatch(gradientPattern);
-      });
-    });
-  });
-
-  describe('Type Exports', () => {
-    it('should export BrandColor type', () => {
-      const color: typeof brandColors = brandColors;
-      expect(color).toBeDefined();
-    });
-
-    it('should export ColorValue type', () => {
-      const value: typeof colorValues = colorValues;
-      expect(value).toBeDefined();
-    });
-
-    it('should export Gradient type', () => {
-      const gradient: typeof gradients = gradients;
-      expect(gradient).toBeDefined();
-    });
-  });
-});
diff --git a/src/lib/colors.ts b/src/lib/colors.ts
deleted file mode 100644
index 2b13d34..0000000
--- a/src/lib/colors.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-export const brandColors = {
-  primary: {
-    900: '#0A0A0A',
-    800: '#1C1C1C',
-    700: '#2D2D2D',
-    600: '#3D3D3D',
-    500: '#5C5C5C',
-    400: '#8C8C8C',
-    300: '#B8B8B8',
-    200: '#D4D4D4',
-    100: '#E5E5E5',
-    50: '#F5F5F5',
-  },
-  brand: {
-    600: '#C41E3A',
-    700: '#A01830',
-    500: '#E04A68',
-    400: '#F08C9F',
-    100: '#FEF2F4',
-  },
-  neutral: {
-    900: '#1C1C1C',
-    800: '#3D3D3D',
-    700: '#5C5C5C',
-    600: '#8C8C8C',
-    500: '#B8B8B8',
-    400: '#D4D4D4',
-    300: '#E5E5E5',
-    200: '#F0F0F0',
-    100: '#FAFAFA',
-    50: '#FFFBF5',
-  },
-  success: {
-    600: '#16A34A',
-    100: '#F0FDF4',
-  },
-  warning: {
-    600: '#D97706',
-    100: '#FFFBEB',
-  },
-  info: {
-    600: '#5C5C5C',
-    100: '#F5F5F5',
-  },
-  error: {
-    600: '#C41E3A',
-    100: '#FEF2F4',
-  },
-} as const;
-
-export const colorValues = {
-  primary: '#1C1C1C',
-  primaryHover: '#0A0A0A',
-  primaryLight: '#3D3D3D',
-  primaryLighter: '#F5F5F5',
-  
-  brand: '#C41E3A',
-  brandHover: '#A01830',
-  brandLight: '#E04A68',
-  brandBg: '#FEF2F4',
-  
-  textPrimary: '#1C1C1C',
-  textSecondary: '#3D3D3D',
-  textTertiary: '#5C5C5C',
-  textMuted: '#8C8C8C',
-  
-  bgPrimary: '#FAFAFA',
-  bgSecondary: '#FFFBF5',
-  bgTertiary: '#F5F5F5',
-  bgHover: '#EFEFEF',
-  
-  border: '#E5E5E5',
-  borderSecondary: '#D4D4D4',
-  borderAccent: '#1C1C1C',
-  
-  link: '#1C1C1C',
-  linkHover: '#C41E3A',
-  
-  success: '#16A34A',
-  successBg: '#F0FDF4',
-  warning: '#D97706',
-  warningBg: '#FFFBEB',
-  info: '#5C5C5C',
-  infoBg: '#F5F5F5',
-  error: '#C41E3A',
-  errorBg: '#FEF2F4',
-} as const;
-
-export const gradients = {
-  primary: 'linear-gradient(135deg, #1C1C1C 0%, #3D3D3D 100%)',
-  hero: 'linear-gradient(180deg, #FAFAFA 0%, #FFFBF5 100%)',
-  brand: 'linear-gradient(135deg, #C41E3A 0%, #E04A68 100%)',
-  subtle: 'linear-gradient(180deg, #FAFAFA 0%, #F5F5F5 100%)',
-  card: 'linear-gradient(180deg, #FAFAFA 0%, #FFFBF5 100%)',
-  cta: 'linear-gradient(135deg, #C41E3A 0%, #A01830 100%)',
-} as const;
-
-export type BrandColor = typeof brandColors;
-export type ColorValue = typeof colorValues;
-export type Gradient = typeof gradients;
diff --git a/src/lib/constants/company.ts b/src/lib/constants/company.ts
index 1a3ce14..5fd12d6 100644
--- a/src/lib/constants/company.ts
+++ b/src/lib/constants/company.ts
@@ -128,7 +128,7 @@ export function canonicalTrustSource(source?: string | null): string | undefined
 
 /**
  * 首批客户共创状态（无真实 quote 时的如实标注）。
- * 有真实客户 quote / 共创伙伴后，可在 `src/components/content/testimonials.tsx` 启用 Testimonial 区块替换本标签。
+ * 有真实客户 quote / 共创伙伴后，再新建客户评价区块替换本标签（原 testimonials 占位组件因零引用已移除）。
  */
 export const EARLY_ACCESS = {
   label: '首批客户共创中',
diff --git a/src/lib/constants/design-system.test.ts b/src/lib/constants/design-system.test.ts
index 722f32b..292ad34 100644
--- a/src/lib/constants/design-system.test.ts
+++ b/src/lib/constants/design-system.test.ts
@@ -92,8 +92,12 @@ describe('DESIGN_SYSTEM', () => {
       expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.initial).toEqual({ opacity: 0, y: 24 });
       expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.animate).toEqual({ opacity: 1, y: 0 });
       expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.viewport).toEqual({ once: true, margin: '-80px' });
-      expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.transition.duration).toBe(0.6);
-      expect(DESIGN_SYSTEM.effects.scroll.staggerChildren.delay).toBe(0.08);
+      // CONTEXT.md「动效设计四原则」：入场 180–280ms（--transition-fast … --transition-normal），
+      // 子元素 stagger 30–60ms。断言区间而非具体值，令牌漂移时才会红。
+      expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.transition.duration).toBeGreaterThanOrEqual(0.18);
+      expect(DESIGN_SYSTEM.effects.scroll.fadeInUp.transition.duration).toBeLessThanOrEqual(0.28);
+      expect(DESIGN_SYSTEM.effects.scroll.staggerChildren.delay).toBeGreaterThanOrEqual(0.03);
+      expect(DESIGN_SYSTEM.effects.scroll.staggerChildren.delay).toBeLessThanOrEqual(0.06);
     });
   });
 
@@ -135,7 +139,9 @@ describe('DESIGN_SYSTEM', () => {
       expect(DESIGN_SYSTEM.components.badge).toBeDefined();
       expect(DESIGN_SYSTEM.components.badge.base).toContain('rounded-full');
       expect(DESIGN_SYSTEM.components.badge.variants).toBeDefined();
-      expect(DESIGN_SYSTEM.components.badge.variants.primary).toContain('var(--color-brand)');
+      // 双通道（DESIGN.md:154）：底色仍走 --color-brand-bg，文字走翻转的 --color-brand-ink。
+      expect(DESIGN_SYSTEM.components.badge.variants.primary).toContain('bg-[var(--color-brand-bg)]');
+      expect(DESIGN_SYSTEM.components.badge.variants.primary).toContain('text-brand-ink');
       expect(DESIGN_SYSTEM.components.badge.variants.secondary).toContain('var(--color-text-secondary)');
       expect(DESIGN_SYSTEM.components.badge.variants.success).toContain('text-green-700');
       expect(DESIGN_SYSTEM.components.badge.variants.warning).toContain('text-yellow-700');
@@ -145,7 +151,7 @@ describe('DESIGN_SYSTEM', () => {
       expect(DESIGN_SYSTEM.components.button).toBeDefined();
       expect(DESIGN_SYSTEM.components.button.primary).toContain('bg-[var(--color-brand)]');
       expect(DESIGN_SYSTEM.components.button.secondary).toContain('border-[var(--color-border-primary)]');
-      expect(DESIGN_SYSTEM.components.button.ghost).toContain('text-[var(--color-brand)]');
+      expect(DESIGN_SYSTEM.components.button.ghost).toContain('text-brand-ink');
     });
 
     it('has metric component styles', () => {
diff --git a/src/lib/constants/design-system.ts b/src/lib/constants/design-system.ts
index c58e770..cb5898c 100644
--- a/src/lib/constants/design-system.ts
+++ b/src/lib/constants/design-system.ts
@@ -80,10 +80,10 @@ export const DESIGN_SYSTEM = Object.freeze({
         initial: { opacity: 0, y: 24 },
         animate: { opacity: 1, y: 0 },
         viewport: { once: true, margin: '-80px' },
-        transition: { duration: 0.6, ease: [0.16, 1, 0.3, 1] as const }, // ⚠️ P1：0.6s 超 300ms 目标
+        transition: { duration: 0.28, ease: [0.22, 1, 0.36, 1] as const },
       },
       staggerChildren: {
-        delay: 0.08,
+        delay: 0.06,
       },
     },
   },
@@ -118,14 +118,14 @@ export const DESIGN_SYSTEM = Object.freeze({
 
   components: {
     card: {
-      base: 'rounded-2xl border border-[var(--color-border-primary)] overflow-hidden transition-all duration-300 bg-[var(--color-bg-primary)]',
+      base: 'rounded-2xl border border-[var(--color-border-primary)] overflow-hidden transition-all duration-normal bg-[var(--color-bg-primary)]',
       hover: 'hover:border-[rgba(var(--color-brand-rgb),0.2)] hover:shadow-lg hover:-translate-y-1',
       padding: 'p-6 lg:p-8',
     },
     badge: {
       base: 'inline-flex items-center gap-1.5 px-3 py-1 rounded-full text-xs font-medium',
       variants: {
-        primary: 'bg-[var(--color-brand-bg)] text-[var(--color-brand)]',
+        primary: 'bg-[var(--color-brand-bg)] text-brand-ink',
         secondary: 'bg-[var(--color-bg-tertiary)] text-[var(--color-text-secondary)]',
         success: 'bg-green-50 text-green-700',
         warning: 'bg-yellow-50 text-yellow-700',
@@ -134,7 +134,7 @@ export const DESIGN_SYSTEM = Object.freeze({
     button: {
       primary: 'inline-flex items-center gap-2 px-6 py-3 text-white font-semibold rounded-lg shadow-md transition-all duration-200 bg-[var(--color-brand)] hover:brightness-110 hover:shadow-lg',
       secondary: 'inline-flex items-center gap-2 px-6 py-3 font-semibold rounded-lg border transition-all duration-200 bg-[var(--color-bg-primary)] text-[var(--color-text-secondary)] border-[var(--color-border-primary)] hover:border-[var(--color-text-hint)] hover:shadow-sm',
-      ghost: 'inline-flex items-center gap-2 px-4 py-2 font-medium rounded-lg transition-colors duration-200 text-[var(--color-brand)] hover:bg-[var(--color-brand-bg)]',
+      ghost: 'inline-flex items-center gap-2 px-4 py-2 font-medium rounded-lg transition-colors duration-200 text-brand-ink hover:bg-[var(--color-brand-bg)]',
     },
     metric: {
       container: 'text-center p-6 rounded-xl border bg-[var(--color-bg-section)] border-[var(--color-border-primary)]',
diff --git a/src/lib/db.test.ts b/src/lib/db.test.ts
index 66d51f6..4446b84 100644
--- a/src/lib/db.test.ts
+++ b/src/lib/db.test.ts
@@ -1,10 +1,70 @@
-// @ts-nocheck
-import { describe, it, expect } from '@jest/globals';
+import { describe, it, expect, jest, beforeEach, afterEach } from '@jest/globals';
 
-// PrismaClient is already mocked in jest.setup.js
-describe('db', () => {
-  it('should export prisma instance', async () => {
-    const { prisma } = await import('./db');
-    expect(prisma).toBeDefined();
+// PrismaClient 由本文件的 mock 提供：只需暴露 $queryRaw，即可断言真实下发的 PRAGMA。
+const mockQueryRaw = jest.fn<(parts: readonly string[]) => Promise<unknown>>();
+
+jest.mock('@/generated/prisma/client', () => ({
+  PrismaClient: jest.fn().mockImplementation(() => ({
+    $queryRaw: mockQueryRaw,
+  })),
+}));
+
+type DbModule = typeof import('./db');
+
+/** 重新求值模块（导入即触发一次 PRAGMA 下发），返回全新的 db 实例 */
+async function loadFreshDb(): Promise<DbModule> {
+  delete (globalThis as unknown as { prisma?: unknown }).prisma;
+  jest.resetModules();
+  return (await import('./db')) as DbModule;
+}
+
+let consoleErrorSpy: jest.Spied<typeof console.error>;
+
+beforeEach(() => {
+  jest.clearAllMocks();
+  consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+  mockQueryRaw.mockResolvedValue([]);
+});
+
+afterEach(() => {
+  consoleErrorSpy.mockRestore();
+});
+
+describe('SQLite 并发默认值（验收 B-5）', () => {
+  it('导入 src/lib/db 即把 journal_mode 切到 WAL 并设置 busy_timeout', async () => {
+    await loadFreshDb();
+
+    expect(mockQueryRaw).toHaveBeenCalledTimes(2);
+    expect(mockQueryRaw.mock.calls[0]![0][0]).toBe('PRAGMA journal_mode=WAL');
+    expect(mockQueryRaw.mock.calls[1]![0][0]).toBe('PRAGMA busy_timeout=5000');
   });
-});
\ No newline at end of file
+
+  it('applySqliteConcurrencyDefaults 幂等：重复调用不重复下发 PRAGMA', async () => {
+    const db = await loadFreshDb();
+
+    await db.applySqliteConcurrencyDefaults();
+    await db.applySqliteConcurrencyDefaults();
+
+    expect(mockQueryRaw).toHaveBeenCalledTimes(2);
+  });
+
+  it('PRAGMA 失败只记录日志，既不抛出也不掩盖', async () => {
+    mockQueryRaw.mockRejectedValueOnce(new Error('SQLITE_CANTOPEN: unable to open database file'));
+
+    const db = await loadFreshDb();
+
+    await expect(db.applySqliteConcurrencyDefaults()).resolves.toBeUndefined();
+    expect(consoleErrorSpy).toHaveBeenCalledTimes(1);
+    expect(consoleErrorSpy.mock.calls[0]![0]).toContain('WAL');
+    expect((consoleErrorSpy.mock.calls[0]![1] as Error).message).toContain('SQLITE_CANTOPEN');
+    // 第一条 PRAGMA 失败后不再尝试第二条（连接本身已不可用）
+    expect(mockQueryRaw).toHaveBeenCalledTimes(1);
+  });
+
+  it('导出的 prisma 仍是同一个客户端实例，且带 $queryRaw 能力', async () => {
+    const db = await loadFreshDb();
+
+    expect(db.prisma).toBeDefined();
+    expect(typeof db.prisma.$queryRaw).toBe('function');
+  });
+});
diff --git a/src/lib/db.ts b/src/lib/db.ts
index f479a84..72829e0 100644
--- a/src/lib/db.ts
+++ b/src/lib/db.ts
@@ -8,4 +8,40 @@ export const prisma = globalForPrisma.prisma ?? new PrismaClient();
 
 if (process.env.NODE_ENV !== 'production') {
   globalForPrisma.prisma = prisma;
-}
\ No newline at end of file
+}
+
+/**
+ * SQLite 并发默认值调优（验收 B-5）。
+ *
+ * 实测（@prisma/client 6.19.3 + 生成客户端 src/generated/prisma，对临时库文件跑 `PRAGMA` 读回）：
+ *   - journal_mode 默认 'delete'（rollback journal）⇒ 同一时刻只允许一个写者，
+ *     并发写会立刻 SQLITE_BUSY；WAL 允许「一读多写」并显著缩小写锁窗口。
+ *   - busy_timeout 默认已是 5000（并非 0），此处仍显式设置以固定预期、不依赖引擎默认值。
+ *   - datasource URL 上的查询参数（`?journal_mode=WAL&busy_timeout=…`）在本版本被**静默忽略**：
+ *     `file:<db>?journal_mode=WAL` 与 `file:<db>?totally_bogus=1` 都读回 journal_mode='delete'，
+ *     故不能靠改 DATABASE_URL 解决（该结论也意味着「改 .env/schema.prisma」并非正确方向）。
+ *   - `$on('beforeConnect')` 在本生成客户端不可用：`$on` 只接受 LogLevel
+ *     （src/generated/prisma/internal/class.ts:128 + prismaNamespace.ts:1515），
+ *     `beforeConnect` 仅存在于 binary 运行时（node_modules/@prisma/client/runtime/binary.js）。
+ *   - `PRAGMA journal_mode=WAL` 对**库文件**持久生效（新客户端实例不再执行 PRAGMA 仍读回 'wal'），
+ *     因此进程内执行一次即可覆盖后续连接；busy_timeout 是连接级设置，但 SQLite 的默认值已足够。
+ *
+ * 失败只记录不上抛：数据库不可用时真正的业务查询会给出更准确的错误，
+ * 不能让一个 PRAGMA 失败把整个模块导入变成 rejection。
+ */
+let sqliteTuning: Promise<void> | null = null;
+
+export function applySqliteConcurrencyDefaults(): Promise<void> {
+  if (!sqliteTuning) {
+    sqliteTuning = (async () => {
+      await prisma.$queryRaw`PRAGMA journal_mode=WAL`;
+      await prisma.$queryRaw`PRAGMA busy_timeout=5000`;
+    })().catch((error: unknown) => {
+      console.error('Failed to apply SQLite WAL/busy_timeout pragmas:', error);
+    });
+  }
+  return sqliteTuning;
+}
+
+// 模块首次被导入即尽力开启 WAL（等价于「连接时设置」，因为 Prisma 会在此处隐式建立连接）。
+void applySqliteConcurrencyDefaults();
diff --git a/src/lib/gradients.test.ts b/src/lib/gradients.test.ts
deleted file mode 100644
index 90aea9a..0000000
--- a/src/lib/gradients.test.ts
+++ /dev/null
@@ -1,132 +0,0 @@
-import { describe, it, expect } from '@jest/globals';
-import {
-  getGradientStyle,
-  getGlowStyle,
-  getBorderGradientStyle,
-  getTextGradientStyle,
-  getHeroGradientStyle,
-  getCTAGradientStyle,
-} from './gradients';
-
-describe('gradients', () => {
-  describe('getGradientStyle', () => {
-    it('should return primary gradient style', () => {
-      const style = getGradientStyle('primary');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should return hero gradient style', () => {
-      const style = getGradientStyle('hero');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should return brand gradient style', () => {
-      const style = getGradientStyle('brand');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should return subtle gradient style', () => {
-      const style = getGradientStyle('subtle');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should return card gradient style', () => {
-      const style = getGradientStyle('card');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should return cta gradient style', () => {
-      const style = getGradientStyle('cta');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-  });
-
-  describe('getGlowStyle', () => {
-    it('should return primary glow style with default opacity', () => {
-      const style = getGlowStyle('primary');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('radial-gradient');
-      expect(style.background).toContain('0, 94, 184');
-    });
-
-    it('should return brand glow style with default opacity', () => {
-      const style = getGlowStyle('brand');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('radial-gradient');
-      expect(style.background).toContain('196, 30, 58');
-    });
-
-    it('should return glow style with custom opacity', () => {
-      const style = getGlowStyle('primary', 0.5);
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('0.5');
-    });
-
-    it('should return glow style with zero opacity', () => {
-      const style = getGlowStyle('brand', 0);
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('0)');
-    });
-
-    it('should return glow style with full opacity', () => {
-      const style = getGlowStyle('primary', 1);
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('1)');
-    });
-  });
-
-  describe('getBorderGradientStyle', () => {
-    it('should return border gradient style', () => {
-      const style = getBorderGradientStyle();
-      expect(style).toHaveProperty('borderImage');
-      expect(style.borderImage).toContain('linear-gradient');
-    });
-  });
-
-  describe('getTextGradientStyle', () => {
-    it('should return primary text gradient style', () => {
-      const style = getTextGradientStyle('primary');
-      expect(style).toHaveProperty('background');
-      expect(style).toHaveProperty('WebkitBackgroundClip');
-      expect(style).toHaveProperty('WebkitTextFillColor');
-      expect(style).toHaveProperty('backgroundClip');
-      expect(style.WebkitBackgroundClip).toBe('text');
-      expect(style.WebkitTextFillColor).toBe('transparent');
-    });
-
-    it('should return brand text gradient style', () => {
-      const style = getTextGradientStyle('brand');
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-    });
-
-    it('should default to primary gradient', () => {
-      const style = getTextGradientStyle();
-      expect(style).toHaveProperty('background');
-    });
-  });
-
-  describe('getHeroGradientStyle', () => {
-    it('should return hero gradient style', () => {
-      const style = getHeroGradientStyle();
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-      expect(style.background).toContain('180deg');
-    });
-  });
-
-  describe('getCTAGradientStyle', () => {
-    it('should return CTA gradient style', () => {
-      const style = getCTAGradientStyle();
-      expect(style).toHaveProperty('background');
-      expect(style.background).toContain('linear-gradient');
-      expect(style.background).toContain('135deg');
-    });
-  });
-});
diff --git a/src/lib/gradients.ts b/src/lib/gradients.ts
deleted file mode 100644
index 2487a05..0000000
--- a/src/lib/gradients.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import { gradients } from './colors';
-
-export const getGradientStyle = (type: keyof typeof gradients) => {
-  return {
-    background: gradients[type],
-  };
-};
-
-export const getGlowStyle = (color: 'primary' | 'brand', opacity: number = 0.1) => {
-  const colorMap = {
-    primary: '0, 94, 184',
-    brand: '196, 30, 58',
-  };
-  const colorValue = colorMap[color];
-  return {
-    background: `radial-gradient(circle, rgba(${colorValue}, ${opacity}) 0%, transparent 70%)`,
-  };
-};
-
-export const getBorderGradientStyle = () => {
-  return {
-    borderImage: `${gradients.primary} 1`,
-  };
-};
-
-export const getTextGradientStyle = (type: 'primary' | 'brand' = 'primary') => {
-  return {
-    background: gradients[type],
-    WebkitBackgroundClip: 'text',
-    WebkitTextFillColor: 'transparent',
-    backgroundClip: 'text',
-  };
-};
-
-export const getHeroGradientStyle = () => {
-  return {
-    background: gradients.hero,
-  };
-};
-
-export const getCTAGradientStyle = () => {
-  return {
-    background: gradients.cta,
-  };
-};
diff --git a/src/lib/media/image-processor.test.ts b/src/lib/media/image-processor.test.ts
index 14cc1b6..de87456 100644
--- a/src/lib/media/image-processor.test.ts
+++ b/src/lib/media/image-processor.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, beforeAll } from '@jest/globals';
+import { describe, it, expect, beforeAll, jest } from '@jest/globals';
 import sharp from 'sharp';
 import {
   isImage,
@@ -84,12 +84,41 @@ describe('image-processor', () => {
       expect(derivatives.avif!.url).toMatch(/\.avif$/);
     });
 
+    // 派生命名原先只用 `image-${Date.now()}`（原图则走 generateUniqueFileName 带随机后缀），
+    // 同一毫秒内的两次上传会算出同名路径 ⇒ saveDerivative 互相覆盖。
+    it('does not reuse derivative names within the same millisecond', async () => {
+      const nowSpy = jest.spyOn(Date, 'now').mockReturnValue(1_700_000_000_000);
+      try {
+        const a = await generateDerivatives(testPng, 'image/png');
+        const b = await generateDerivatives(testPng, 'image/png');
+
+        expect(a.thumbnail!.path).not.toBe(b.thumbnail!.path);
+        expect(a.webp!.path).not.toBe(b.webp!.path);
+        expect(a.avif!.path).not.toBe(b.avif!.path);
+        expect(a.webp!.url).not.toBe(b.webp!.url);
+      } finally {
+        nowSpy.mockRestore();
+      }
+    });
+
     it('keeps original aspect ratio for thumbnail', async () => {
       const derivatives = await generateDerivatives(testPng, 'image/png');
       const thumb = derivatives.thumbnail!;
       expect(thumb.width / thumb.height).toBeCloseTo(800 / 600, 1);
     });
 
+    // 缩略图被声明为 `.webp`（buildDerivative 用 ext='webp'），但旧实现对 thumbnailBuffer
+    // 只 `.resize().toBuffer()` 而不调 `.webp()` ⇒ 字节其实是输入格式（PNG/JPEG），
+    // 落盘文件内容与其 `.webp` 扩展名和 image/webp MIME 不符。
+    it('encodes the thumbnail as real WebP bytes regardless of input format', async () => {
+      const fromPng = await generateDerivatives(testPng, 'image/png');
+      const fromJpeg = await generateDerivatives(testJpeg, 'image/jpeg');
+
+      expect((await sharp(fromPng.thumbnail!.buffer).metadata()).format).toBe('webp');
+      expect((await sharp(fromJpeg.thumbnail!.buffer).metadata()).format).toBe('webp');
+      expect(fromPng.thumbnail!.path).toMatch(/-thumbnail\.webp$/);
+    });
+
     it('returns empty derivatives for non-image files', async () => {
       const derivatives = await generateDerivatives(txtBuffer, 'text/plain');
       expect(Object.keys(derivatives)).toHaveLength(0);
diff --git a/src/lib/media/image-processor.ts b/src/lib/media/image-processor.ts
index 3db1a82..e5fa82b 100644
--- a/src/lib/media/image-processor.ts
+++ b/src/lib/media/image-processor.ts
@@ -72,12 +72,13 @@ export async function generateDerivatives(
     return {};
   }
 
-  const originalName = `image-${Date.now()}`;
+  const originalName = `image-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
   const derivatives: GeneratedDerivatives = {};
 
   // 缩略图
   const thumbnailBuffer = await sharp(buffer)
     .resize(THUMBNAIL_SIZE, THUMBNAIL_SIZE, { fit: 'inside', withoutEnlargement: true })
+    .webp({ quality: 80 })
     .toBuffer();
   const thumbnailMeta = await sharp(thumbnailBuffer).metadata();
   derivatives.thumbnail = buildDerivative(
diff --git a/src/lib/media/media-service.test.ts b/src/lib/media/media-service.test.ts
index 571cf37..bb47901 100644
--- a/src/lib/media/media-service.test.ts
+++ b/src/lib/media/media-service.test.ts
@@ -44,14 +44,38 @@ jest.mock('@/lib/db', () => ({
 
 import { uploadMedia, deleteMedia, getMediaById, listMedia } from './media-service';
 
+// uploadMedia 现要求真实魔数（验收 A-4），故夹具带合法文件头
+const PNG_BYTES = Buffer.concat([
+  Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]),
+  Buffer.from('fake-png-body'),
+]);
+const PDF_BYTES = Buffer.concat([Buffer.from('%PDF-1.7\n', 'ascii'), Buffer.from('fake-pdf-body')]);
+
 describe('media-service', () => {
   beforeEach(() => {
     jest.clearAllMocks();
   });
 
   describe('uploadMedia', () => {
+    it('HTML 载荷在落盘前即被拒绝（验收 A-4 服务层收口）', async () => {
+      const html = Buffer.from('<html><script>alert(1)</script></html>');
+      await expect(
+        uploadMedia({ name: 'evil.html', buffer: html, mimeType: 'text/html', size: html.length }, 'editor')
+      ).rejects.toThrow('不允许的文件类型');
+      expect(mockStorageSave).not.toHaveBeenCalled();
+      expect(mockMediaAssetCreate).not.toHaveBeenCalled();
+    });
+
+    it('内容伪装成 .png 的 HTML 同样被拒绝', async () => {
+      const html = Buffer.from('<html><body>x</body></html>');
+      await expect(
+        uploadMedia({ name: 'attack.png', buffer: html, mimeType: 'image/png', size: html.length }, 'editor')
+      ).rejects.toThrow();
+      expect(mockStorageSave).not.toHaveBeenCalled();
+    });
+
     it('uploads image and creates MediaAsset with derivatives', async () => {
-      const pngBuffer = Buffer.from('fake-png');
+      const pngBuffer = PNG_BYTES;
       mockStorageSave
         .mockResolvedValueOnce({ path: 'public/uploads/original.png', url: '/uploads/original.png' })
         .mockResolvedValueOnce({ path: 'public/uploads/thumb.webp', url: '/uploads/thumb.webp' })
@@ -98,7 +122,7 @@ describe('media-service', () => {
     });
 
     it('uploads non-image file without generating derivatives', async () => {
-      const pdfBuffer = Buffer.from('fake-pdf');
+      const pdfBuffer = PDF_BYTES;
       mockStorageSave.mockResolvedValueOnce({ path: 'public/uploads/file.pdf', url: '/uploads/file.pdf' });
       mockMediaAssetCreate.mockResolvedValue({ id: 'asset-2' });
 
@@ -136,7 +160,7 @@ describe('media-service', () => {
       mockMediaAssetCreate.mockResolvedValue({ id: 'asset-3' });
 
       await uploadMedia(
-        { name: 'key.png', buffer: Buffer.from('x'), mimeType: 'image/png', size: 100 },
+        { name: 'key.png', buffer: PNG_BYTES, mimeType: 'image/png', size: 100 },
         'editor'
       );
 
@@ -154,7 +178,7 @@ describe('media-service', () => {
       mockMediaAssetCreate.mockResolvedValue({ id: 'asset-4' });
 
       await uploadMedia(
-        { name: 'broken.png', buffer: Buffer.from('not-really-png'), mimeType: 'image/png', size: 100 },
+        { name: 'broken.png', buffer: PNG_BYTES, mimeType: 'image/png', size: 100 },
         'editor'
       );
 
@@ -171,7 +195,22 @@ describe('media-service', () => {
   });
 
   describe('deleteMedia', () => {
-    it('deletes original file and all derivatives then removes db record', async () => {
+    let callOrder: string[];
+    let consoleErrorSpy: jest.Spied<typeof console.error>;
+
+    beforeEach(() => {
+      callOrder = [];
+      consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+      mockStorageDelete.mockImplementation(async (filePath: string) => {
+        callOrder.push(`file:${filePath}`);
+      });
+      mockMediaAssetDelete.mockImplementation(async () => {
+        callOrder.push('db:delete');
+        return { id: 'asset-1' };
+      });
+    });
+
+    it('removes the db record first, then the original file and all derivatives', async () => {
       mockMediaAssetFindUnique.mockResolvedValue({
         id: 'asset-1',
         path: 'public/uploads/original.png',
@@ -190,14 +229,54 @@ describe('media-service', () => {
       expect(mockStorageDelete).toHaveBeenCalledWith('public/uploads/original-webp.webp');
       expect(mockStorageDelete).toHaveBeenCalledWith('public/uploads/original-avif.avif');
       expect(mockMediaAssetDelete).toHaveBeenCalledWith({ where: { id: 'asset-1' } });
+      // 顺序即修复点：先删记录，DB 失败时不会留下「指向已删文件的资产行」（验收 §5）
+      expect(callOrder[0]).toBe('db:delete');
+      expect(callOrder).toEqual([
+        'db:delete',
+        'file:public/uploads/original.png',
+        'file:public/uploads/thumb.webp',
+        'file:public/uploads/original-webp.webp',
+        'file:public/uploads/original-avif.avif',
+      ]);
     });
 
     it('throws when media asset not found', async () => {
       mockMediaAssetFindUnique.mockResolvedValue(null);
       await expect(deleteMedia('missing')).rejects.toThrow('文件不存在');
+      expect(mockMediaAssetDelete).not.toHaveBeenCalled();
+      expect(mockStorageDelete).not.toHaveBeenCalled();
     });
 
-    it('only deletes original file when derivatives JSON is invalid', async () => {
+    it('leaves every file on disk when the db delete fails', async () => {
+      mockMediaAssetFindUnique.mockResolvedValue({
+        id: 'asset-1',
+        path: 'public/uploads/original.png',
+        derivatives: JSON.stringify({ thumbnail: { path: 'public/uploads/thumb.webp' } }),
+      });
+      mockMediaAssetDelete.mockRejectedValue(new Error('SQLITE_BUSY'));
+
+      await expect(deleteMedia('asset-1')).rejects.toThrow('SQLITE_BUSY');
+      expect(mockStorageDelete).not.toHaveBeenCalled();
+    });
+
+    it('logs a manual-cleanup trail instead of failing after the record is gone', async () => {
+      mockMediaAssetFindUnique.mockResolvedValue({
+        id: 'asset-1',
+        path: 'public/uploads/original.png',
+        derivatives: JSON.stringify({ thumbnail: { path: 'public/uploads/thumb.webp' } }),
+      });
+      const denied = Object.assign(new Error('operation not permitted'), { code: 'EPERM' });
+      mockStorageDelete.mockRejectedValueOnce(denied);
+
+      await expect(deleteMedia('asset-1')).resolves.toBeUndefined();
+
+      expect(mockStorageDelete).toHaveBeenCalledTimes(2);
+      expect(consoleErrorSpy).toHaveBeenCalledTimes(1);
+      expect(consoleErrorSpy.mock.calls[0]![0]).toContain('public/uploads/original.png');
+      expect(consoleErrorSpy.mock.calls[0]![1]).toBe(denied);
+    });
+
+    it('still deletes the original file but logs when derivatives JSON is invalid', async () => {
       mockMediaAssetFindUnique.mockResolvedValue({
         id: 'asset-2',
         path: 'public/uploads/original.png',
@@ -209,6 +288,10 @@ describe('media-service', () => {
       expect(mockStorageDelete).toHaveBeenCalledTimes(1);
       expect(mockStorageDelete).toHaveBeenCalledWith('public/uploads/original.png');
       expect(mockMediaAssetDelete).toHaveBeenCalledWith({ where: { id: 'asset-2' } });
+      // 空 catch 已换成可排查的日志：否则派生文件永远无人知晓
+      expect(consoleErrorSpy).toHaveBeenCalledTimes(1);
+      expect(consoleErrorSpy.mock.calls[0]![0]).toContain('derivatives');
+      expect(consoleErrorSpy.mock.calls[0]![0]).toContain('asset-2');
     });
   });
 
diff --git a/src/lib/media/media-service.ts b/src/lib/media/media-service.ts
index c13c2eb..0470d3f 100644
--- a/src/lib/media/media-service.ts
+++ b/src/lib/media/media-service.ts
@@ -2,11 +2,10 @@ import path from 'path';
 import { prisma } from '@/lib/db';
 import { getStorageProvider } from './storage';
 import { generateDerivatives, getImageMetadata, isImage } from './image-processor';
+import { assertUploadAllowed } from './upload-policy';
 import type { UploadMediaInput, ListMediaOptions, MediaDerivatives, StoredFile, StoredDerivative, GeneratedDerivatives } from './types';
 
-function generateUniqueFileName(originalName: string): string {
-  const ext = path.extname(originalName) || '';
-  const baseName = path.basename(originalName, ext) || 'file';
+function generateUniqueFileName(baseName: string, ext: string): string {
   const timestamp = Date.now();
   const random = Math.random().toString(36).slice(2, 10);
   return `${baseName}-${timestamp}-${random}${ext}`;
@@ -14,10 +13,11 @@ function generateUniqueFileName(originalName: string): string {
 
 async function saveOriginalFile(
   provider: ReturnType<typeof getStorageProvider>,
-  input: UploadMediaInput
+  input: UploadMediaInput,
+  policy: ReturnType<typeof assertUploadAllowed>
 ): Promise<StoredFile> {
-  const fileName = generateUniqueFileName(input.name);
-  return provider.save(fileName, input.buffer, input.mimeType);
+  const fileName = generateUniqueFileName(policy.baseName, policy.ext);
+  return provider.save(fileName, input.buffer, policy.mimeType);
 }
 
 async function saveDerivative(
@@ -34,21 +34,29 @@ async function saveDerivative(
  * 图片会自动生成缩略图、WebP、AVIF 派生格式并持久化
  */
 export async function uploadMedia(input: UploadMediaInput, createdBy: string) {
+  // 落盘前必须先过白名单与魔数：一旦写入 public/uploads/ 即可以同源 URL 被取回
+  const policy = assertUploadAllowed({
+    name: input.name,
+    buffer: input.buffer,
+    mimeType: input.mimeType,
+    size: input.size,
+  });
+
   const provider = getStorageProvider();
-  const original = await saveOriginalFile(provider, input);
+  const original = await saveOriginalFile(provider, input, policy);
 
   let width = 0;
   let height = 0;
   let derivatives: MediaDerivatives = {};
 
-  if (isImage(input.mimeType)) {
+  if (isImage(policy.mimeType)) {
     const metadata = await getImageMetadata(input.buffer);
     if (metadata) {
       width = metadata.width;
       height = metadata.height;
     }
 
-    const generated: GeneratedDerivatives = await generateDerivatives(input.buffer, input.mimeType);
+    const generated: GeneratedDerivatives = await generateDerivatives(input.buffer, policy.mimeType);
     const savedDerivatives: MediaDerivatives = {};
 
     for (const key of Object.keys(generated) as Array<keyof MediaDerivatives>) {
@@ -74,7 +82,7 @@ export async function uploadMedia(input: UploadMediaInput, createdBy: string) {
       name: input.name,
       path: original.path,
       url: original.url,
-      mimeType: input.mimeType,
+      mimeType: policy.mimeType,
       size: input.size,
       width,
       height,
@@ -87,7 +95,11 @@ export async function uploadMedia(input: UploadMediaInput, createdBy: string) {
 }
 
 /**
- * 删除媒体资源：清理原始文件及所有派生格式，然后删除数据库记录
+ * 删除媒体资源：先删数据库记录，再清理原始文件与所有派生格式
+ *
+ * 顺序刻意如此（验收 §5）：原实现先删文件后删记录，DB 失败即留下「指向已删文件的资产行」，
+ * 前端与 CMS 会持续取回一个 404 资源。反序后最坏情况退化为「文件残留」，
+ * 每条残留都会带路径写入日志，可据此人工回收。
  */
 export async function deleteMedia(id: string) {
   const existing = await prisma.mediaAsset.findUnique({ where: { id } });
@@ -106,15 +118,24 @@ export async function deleteMedia(id: string) {
         pathsToDelete.push(derivative.path);
       }
     }
-  } catch {
-    // derivatives 字段不是有效 JSON 时仅删除原始文件
-  }
-
-  for (const filePath of pathsToDelete) {
-    await provider.delete(filePath);
+  } catch (error) {
+    // 不再空 catch：derivatives 非法时派生文件路径已无法枚举，必须留下可排查的记录，
+    // 否则这些文件永远无人知晓（验收 §5）。
+    console.error(
+      `[media] asset=${id} 的 derivatives 不是合法 JSON，跳过派生文件枚举（可能有残留文件需人工清理）:`,
+      error
+    );
   }
 
   await prisma.mediaAsset.delete({ where: { id } });
+
+  for (const filePath of pathsToDelete) {
+    try {
+      await provider.delete(filePath);
+    } catch (error) {
+      console.error(`[media] asset=${id} 文件删除失败，需人工清理 path=${filePath}:`, error);
+    }
+  }
 }
 
 /**
diff --git a/src/lib/media/storage.test.ts b/src/lib/media/storage.test.ts
index 55b2836..3a142b9 100644
--- a/src/lib/media/storage.test.ts
+++ b/src/lib/media/storage.test.ts
@@ -72,6 +72,44 @@ describe('LocalStorageProvider', () => {
       provider.delete(path.join(tempDir, 'not-exist.txt'))
     ).resolves.toBeUndefined();
   });
+
+  it('deletes a file addressed relative to the storage directory', async () => {
+    const result = await provider.save('relative-delete.txt', Buffer.from('x'), 'text/plain');
+    const relative = path.relative(tempDir, result.path);
+
+    await provider.delete(relative);
+
+    await expect(fs.access(result.path)).rejects.toThrow();
+  });
+
+  it('refuses to delete an absolute path outside the storage directory', async () => {
+    const outsideDir = await fs.mkdtemp(path.join(os.tmpdir(), 'media-outside-'));
+    const outsideFile = path.join(outsideDir, 'keep-me.txt');
+    await fs.writeFile(outsideFile, 'do not delete');
+
+    await expect(provider.delete(outsideFile)).rejects.toThrow(/outside the storage directory/);
+    await expect(fs.readFile(outsideFile)).resolves.toEqual(Buffer.from('do not delete'));
+
+    await fs.rm(outsideDir, { recursive: true, force: true });
+  });
+
+  it('refuses to delete through ../ traversal', async () => {
+    const nested = path.join(tempDir, 'nested');
+    await fs.mkdir(nested, { recursive: true });
+    const providerInNested = new LocalStorageProvider(nested, '/test-uploads');
+    const outsideFile = path.join(tempDir, 'secret.txt');
+    await fs.writeFile(outsideFile, 'still here');
+
+    await expect(providerInNested.delete('../secret.txt')).rejects.toThrow(
+      /outside the storage directory/
+    );
+    await expect(fs.readFile(outsideFile)).resolves.toEqual(Buffer.from('still here'));
+  });
+
+  it('refuses to delete the storage directory itself', async () => {
+    await expect(provider.delete(tempDir)).rejects.toThrow(/outside the storage directory/);
+    await expect(fs.stat(tempDir)).resolves.toBeDefined();
+  });
 });
 
 describe('S3StorageProvider', () => {
diff --git a/src/lib/media/storage.ts b/src/lib/media/storage.ts
index 4cd0264..04bfda8 100644
--- a/src/lib/media/storage.ts
+++ b/src/lib/media/storage.ts
@@ -26,9 +26,30 @@ export class LocalStorageProvider implements StorageProvider {
     };
   }
 
+  /**
+   * 把入参路径解析为 baseDir 内的绝对路径；越界即拒绝。
+   *
+   * delete() 目前只被喂库内路径（`deleteMedia` 传 MediaAsset.path / derivatives.path），
+   * 但它是文件系统边界，不能依赖调用方的自律（验收 §5）：
+   * `../` 逃逸、绝对路径、指向 baseDir 自身都必须失败。
+   * 绝对路径仍可命中 baseDir 内的同一文件，故 `save()` 返回的绝对路径不受影响。
+   */
+  private resolveContainedPath(filePath: string): string {
+    const baseDir = path.resolve(this.baseDir);
+    const resolved = path.resolve(baseDir, filePath);
+    const relative = path.relative(baseDir, resolved);
+
+    if (relative === '' || relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+      throw new Error(`Refusing to delete path outside the storage directory: ${filePath}`);
+    }
+
+    return resolved;
+  }
+
   async delete(filePath: string): Promise<void> {
+    const resolved = this.resolveContainedPath(filePath);
     try {
-      await fs.unlink(filePath);
+      await fs.unlink(resolved);
     } catch (error) {
       // 文件可能已被删除，忽略 ENOENT
       if ((error as NodeJS.ErrnoException).code !== 'ENOENT') {
diff --git a/src/lib/media/upload-policy.test.ts b/src/lib/media/upload-policy.test.ts
new file mode 100644
index 0000000..a224776
--- /dev/null
+++ b/src/lib/media/upload-policy.test.ts
@@ -0,0 +1,182 @@
+import {
+  evaluateUpload,
+  assertUploadAllowed,
+  sniffMimeTypes,
+  toSafeBaseName,
+  isInlineSafeImage,
+  MAX_UPLOAD_BYTES,
+  UploadPolicyError,
+} from './upload-policy';
+
+const PNG = Buffer.concat([
+  Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]),
+  Buffer.from('IHDR-rest-of-a-png-file', 'ascii'),
+]);
+const JPEG = Buffer.concat([Buffer.from([0xff, 0xd8, 0xff, 0xe0]), Buffer.alloc(64, 1)]);
+const GIF = Buffer.concat([Buffer.from('GIF89a', 'ascii'), Buffer.alloc(32)]);
+const WEBP = Buffer.concat([
+  Buffer.from('RIFF', 'ascii'),
+  Buffer.from([0x10, 0, 0, 0]),
+  Buffer.from('WEBP', 'ascii'),
+  Buffer.alloc(16),
+]);
+const AVIF = Buffer.concat([
+  Buffer.from([0, 0, 0, 0x1e]),
+  Buffer.from('ftyp', 'ascii'),
+  Buffer.from('avif', 'ascii'),
+  Buffer.alloc(16),
+]);
+const PDF = Buffer.concat([Buffer.from('%PDF-1.7\n', 'ascii'), Buffer.alloc(64)]);
+const ZIP = Buffer.concat([Buffer.from([0x50, 0x4b, 0x03, 0x04]), Buffer.alloc(64)]);
+const OLE2 = Buffer.concat([
+  Buffer.from([0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1]),
+  Buffer.alloc(64),
+]);
+const HTML = Buffer.from('<html><script>alert(document.domain)</script></html>', 'utf8');
+
+describe('sniffMimeTypes', () => {
+  it('识别常见图片与文档容器', () => {
+    expect(sniffMimeTypes(PNG)).toEqual(['image/png']);
+    expect(sniffMimeTypes(JPEG)).toEqual(['image/jpeg']);
+    expect(sniffMimeTypes(GIF)).toEqual(['image/gif']);
+    expect(sniffMimeTypes(WEBP)).toEqual(['image/webp']);
+    expect(sniffMimeTypes(AVIF)).toEqual(['image/avif']);
+    expect(sniffMimeTypes(PDF)).toEqual(['application/pdf']);
+  });
+
+  it('ZIP 与 OLE2 容器只给出候选集合而非单一类型', () => {
+    expect(sniffMimeTypes(ZIP)).toContain('application/zip');
+    expect(sniffMimeTypes(ZIP).length).toBeGreaterThan(1);
+    expect(sniffMimeTypes(OLE2)).toContain('application/msword');
+  });
+
+  it('HTML / 未知内容返回空集合', () => {
+    expect(sniffMimeTypes(HTML)).toEqual([]);
+    expect(sniffMimeTypes(Buffer.alloc(0))).toEqual([]);
+    expect(sniffMimeTypes(Buffer.from('random bytes here'))).toEqual([]);
+  });
+});
+
+describe('evaluateUpload：同源脚本执行面（验收 A-4）', () => {
+  it('拒绝 .html：即使客户端把 MIME 报成 image/png', () => {
+    expect(evaluateUpload({ name: 'evil.html', buffer: HTML, mimeType: 'image/png' })).toMatchObject({
+      ok: false,
+    });
+    expect(evaluateUpload({ name: 'evil.htm', buffer: HTML, mimeType: 'text/html' }).ok).toBe(false);
+  });
+
+  it('拒绝 .svg（同源可直接执行脚本），尽管前端 accept="image/*" 会放行选择', () => {
+    const svg = Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script></svg>');
+    const verdict = evaluateUpload({ name: 'logo.svg', buffer: svg, mimeType: 'image/svg+xml' });
+    expect(verdict.ok).toBe(false);
+  });
+
+  it('拒绝可执行与脚本类扩展名', () => {
+    for (const name of ['x.js', 'x.mjs', 'x.jsx', 'x.php', 'x.phar', 'x.exe', 'x.sh', 'x.xhtml', 'x.xml', 'x.html5']) {
+      expect(evaluateUpload({ name, buffer: PNG, mimeType: 'image/png' }).ok).toBe(false);
+    }
+  });
+
+  it('拒绝无扩展名与双扩展名伪装', () => {
+    expect(evaluateUpload({ name: 'LICENSE', buffer: PNG, mimeType: 'image/png' }).ok).toBe(false);
+    expect(evaluateUpload({ name: 'invoice.pdf.html', buffer: HTML, mimeType: 'text/html' }).ok).toBe(false);
+  });
+
+  it('内容伪装：扩展名 .png 但字节是 HTML 时被拒', () => {
+    const verdict = evaluateUpload({ name: 'banner.png', buffer: HTML, mimeType: 'image/png' });
+    expect(verdict.ok).toBe(false);
+    expect(verdict).toMatchObject({ ok: false, reason: expect.stringContaining('识别') });
+  });
+
+  it('真实 PNG 头 + .png 后缀，但声明 MIME 为 text/html 时被拒', () => {
+    expect(evaluateUpload({ name: 'banner.png', buffer: PNG, mimeType: 'text/html' }).ok).toBe(false);
+  });
+
+  it('声明 MIME 与扩展名不一致时被拒', () => {
+    expect(evaluateUpload({ name: 'a.png', buffer: PNG, mimeType: 'application/pdf' }).ok).toBe(false);
+    expect(evaluateUpload({ name: 'a.pdf', buffer: PDF, mimeType: 'image/png' }).ok).toBe(false);
+  });
+
+  it('拒绝空文件与超限文件', () => {
+    expect(evaluateUpload({ name: 'a.png', buffer: Buffer.alloc(0), mimeType: 'image/png' }).ok).toBe(false);
+    const verdict = evaluateUpload({
+      name: 'a.png',
+      buffer: PNG,
+      mimeType: 'image/png',
+      size: MAX_UPLOAD_BYTES + 1,
+    });
+    expect(verdict).toMatchObject({ ok: false, reason: expect.stringContaining('10MB') });
+  });
+});
+
+describe('evaluateUpload：合法上传不被误伤', () => {
+  it('放行真实图片', () => {
+    for (const [name, buffer, mimeType] of [
+      ['photo.png', PNG, 'image/png'],
+      ['photo.jpg', JPEG, 'image/jpeg'],
+      ['anim.gif', GIF, 'image/gif'],
+      ['modern.webp', WEBP, 'image/webp'],
+      ['next-gen.avif', AVIF, 'image/avif'],
+    ] as const) {
+      expect(evaluateUpload({ name, buffer, mimeType })).toMatchObject({ ok: true, mimeType });
+    }
+  });
+
+  it('放行办公文档（ZIP 与 OLE2 容器）', () => {
+    expect(
+      evaluateUpload({
+        name: 'whitepaper.docx',
+        buffer: ZIP,
+        mimeType: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+      }).ok
+    ).toBe(true);
+    expect(evaluateUpload({ name: 'deck.ppt', buffer: OLE2, mimeType: 'application/vnd.ms-powerpoint' }).ok).toBe(
+      true
+    );
+    expect(evaluateUpload({ name: 'bundle.zip', buffer: ZIP, mimeType: 'application/zip' }).ok).toBe(true);
+  });
+
+  it('扩展名大小写不敏感', () => {
+    expect(evaluateUpload({ name: 'LOGO.PNG', buffer: PNG, mimeType: 'image/png' })).toMatchObject({
+      ok: true,
+      ext: '.png',
+    });
+  });
+});
+
+describe('文件名归一化', () => {
+  it('剥离路径穿越与目录成分', () => {
+    expect(toSafeBaseName('../../../etc/passwd')).toBe('passwd');
+    expect(toSafeBaseName('..%2f..%2fwindows')).not.toContain('/');
+    expect(evaluateUpload({ name: '../../uploads/x.png', buffer: PNG, mimeType: 'image/png' })).toMatchObject({
+      ok: true,
+      baseName: 'x',
+    });
+  });
+
+  it('非 ASCII 与特殊字符收敛为安全 slug，空名回落 file', () => {
+    expect(evaluateUpload({ name: '产品 发布!!图.png', buffer: PNG, mimeType: 'image/png' })).toMatchObject({
+      baseName: 'file',
+    });
+    expect(toSafeBaseName('a b/c.png')).toBe('c');
+    expect(toSafeBaseName('....hidden')).toBe('file'); // 纯点号词干收敛到兜底名
+    expect(toSafeBaseName('x'.repeat(200)).length).toBeLessThanOrEqual(60);
+  });
+
+  it('isInlineSafeImage 只对图片放行内联渲染', () => {
+    expect(isInlineSafeImage('image/png')).toBe(true);
+    expect(isInlineSafeImage('application/pdf')).toBe(false);
+    expect(isInlineSafeImage('application/zip')).toBe(false);
+  });
+});
+
+describe('assertUploadAllowed', () => {
+  it('合法输入返回判定结果，非法输入抛 UploadPolicyError', () => {
+    expect(assertUploadAllowed({ name: 'a.png', buffer: PNG, mimeType: 'image/png' })).toMatchObject({
+      ok: true,
+    });
+    expect(() => assertUploadAllowed({ name: 'a.html', buffer: HTML, mimeType: 'text/html' })).toThrow(
+      UploadPolicyError
+    );
+  });
+});
diff --git a/src/lib/media/upload-policy.ts b/src/lib/media/upload-policy.ts
new file mode 100644
index 0000000..02b25a2
--- /dev/null
+++ b/src/lib/media/upload-policy.ts
@@ -0,0 +1,145 @@
+import path from 'path';
+
+/**
+ * 上传落盘白名单与内容嗅探（验收 A-4）。
+ *
+ * 客户端可控的 file.type / file.name 一律不作为可信输入：扩展名与魔数都必须落在
+ * 白名单交集内，实际 MIME 取嗅探结果。HTML/SVG/XHTML 等可在同源直接执行脚本的类型
+ * 被整体排除，即使前端 accept="image/*" 允许选择 svg 也会在此拒绝。
+ */
+
+export const MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
+
+const EXTENSION_TO_MIMES: Record<string, string[]> = {
+  '.png': ['image/png'],
+  '.jpg': ['image/jpeg'],
+  '.jpeg': ['image/jpeg'],
+  '.gif': ['image/gif'],
+  '.webp': ['image/webp'],
+  '.avif': ['image/avif'],
+  '.bmp': ['image/bmp'],
+  '.ico': ['image/vnd.microsoft.icon', 'image/x-icon'],
+  '.pdf': ['application/pdf'],
+  '.zip': ['application/zip', 'application/x-zip-compressed'],
+  '.docx': ['application/vnd.openxmlformats-officedocument.wordprocessingml.document'],
+  '.xlsx': ['application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'],
+  '.pptx': ['application/vnd.openxmlformats-officedocument.presentationml.presentation'],
+  '.doc': ['application/msword'],
+  '.xls': ['application/vnd.ms-excel'],
+  '.ppt': ['application/vnd.ms-powerpoint'],
+};
+
+function startsWith(buffer: Buffer, bytes: number[], offset = 0): boolean {
+  if (buffer.length < offset + bytes.length) return false;
+  return bytes.every((byte, i) => buffer[offset + i] === byte);
+}
+
+function ascii(buffer: Buffer, offset: number, length: number): string {
+  return buffer.subarray(offset, offset + length).toString('ascii');
+}
+
+/** 返回该 buffer 在魔数上**可能**是哪些 MIME；ZIP 与 OLE2 容器无法凭魔数细分，故给出集合。 */
+export function sniffMimeTypes(buffer: Buffer): string[] {
+  if (startsWith(buffer, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a])) return ['image/png'];
+  if (startsWith(buffer, [0xff, 0xd8, 0xff])) return ['image/jpeg'];
+  if (ascii(buffer, 0, 6) === 'GIF87a' || ascii(buffer, 0, 6) === 'GIF89a') return ['image/gif'];
+  if (ascii(buffer, 0, 4) === 'RIFF' && ascii(buffer, 8, 4) === 'WEBP') return ['image/webp'];
+  if (ascii(buffer, 4, 4) === 'ftyp' && ['avif', 'avis', 'mif1', 'msf1'].includes(ascii(buffer, 8, 4))) {
+    return ['image/avif'];
+  }
+  if (ascii(buffer, 0, 2) === 'BM') return ['image/bmp'];
+  if (startsWith(buffer, [0x00, 0x00, 0x01, 0x00])) return ['image/vnd.microsoft.icon', 'image/x-icon'];
+  if (ascii(buffer, 0, 5) === '%PDF-') return ['application/pdf'];
+  if (startsWith(buffer, [0x50, 0x4b, 0x03, 0x04]) || startsWith(buffer, [0x50, 0x4b, 0x05, 0x06])) {
+    return [
+      'application/zip',
+      'application/x-zip-compressed',
+      'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+      'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+      'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+    ];
+  }
+  if (startsWith(buffer, [0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1])) {
+    return ['application/msword', 'application/vnd.ms-excel', 'application/vnd.ms-powerpoint'];
+  }
+  return [];
+}
+
+/** 该 MIME 在响应头里应使用的规范值：非图片一律走下载型分发。 */
+export function isInlineSafeImage(mimeType: string): boolean {
+  return mimeType.startsWith('image/');
+}
+
+export function toSafeBaseName(originalName: string): string {
+  const base = path.basename(originalName, path.extname(originalName));
+  const slug = base.replace(/[^a-zA-Z0-9._-]+/g, '-').replace(/^[-.]+/, '').slice(0, 60);
+  return slug.length > 0 ? slug : 'file';
+}
+
+export type UploadVerdict =
+  | { ok: true; mimeType: string; ext: string; baseName: string }
+  | { ok: false; reason: string };
+
+export class UploadPolicyError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = 'UploadPolicyError';
+  }
+}
+
+export function evaluateUpload(input: {
+  name: string;
+  buffer: Buffer;
+  mimeType: string;
+  size?: number;
+}): UploadVerdict {
+  if (!input.name || typeof input.name !== 'string') {
+    return { ok: false, reason: '文件名缺失' };
+  }
+
+  const size = input.size ?? input.buffer.length;
+  if (size === 0 || input.buffer.length === 0) {
+    return { ok: false, reason: '文件为空' };
+  }
+  if (size > MAX_UPLOAD_BYTES) {
+    return { ok: false, reason: `文件大小不能超过 ${Math.floor(MAX_UPLOAD_BYTES / 1024 / 1024)}MB` };
+  }
+
+  const ext = path.extname(input.name).toLowerCase();
+  const allowedByExt = EXTENSION_TO_MIMES[ext];
+  if (!allowedByExt) {
+    return { ok: false, reason: `不允许的文件类型：${ext || '（无扩展名）'}` };
+  }
+
+  const sniffed = sniffMimeTypes(input.buffer);
+  if (sniffed.length === 0) {
+    return { ok: false, reason: '无法识别的文件内容' };
+  }
+
+  // 扩展名白名单 ∩ 魔数结果，三者（含客户端声明）必须一致，否则视为伪装上传
+  const agreed = allowedByExt.filter((mime) => sniffed.includes(mime));
+  if (agreed.length === 0) {
+    return { ok: false, reason: '文件内容与扩展名不符' };
+  }
+  if (!allowedByExt.includes(input.mimeType)) {
+    return { ok: false, reason: '声明的类型与扩展名不符' };
+  }
+
+  return {
+    ok: true,
+    mimeType: agreed.includes(input.mimeType) ? input.mimeType : agreed[0]!,
+    ext,
+    baseName: toSafeBaseName(input.name),
+  };
+}
+
+export function assertUploadAllowed(input: {
+  name: string;
+  buffer: Buffer;
+  mimeType: string;
+  size?: number;
+}): Extract<UploadVerdict, { ok: true }> {
+  const verdict = evaluateUpload(input);
+  if (!verdict.ok) throw new UploadPolicyError(verdict.reason);
+  return verdict;
+}
diff --git a/src/lib/pagination.test.ts b/src/lib/pagination.test.ts
new file mode 100644
index 0000000..abff5fb
--- /dev/null
+++ b/src/lib/pagination.test.ts
@@ -0,0 +1,33 @@
+import { describe, it, expect } from '@jest/globals';
+import { parsePagination } from './pagination';
+
+const sp = (qs: string) => new URLSearchParams(qs);
+
+describe('parsePagination', () => {
+  it('defaults to page 1 / given size when params absent', () => {
+    expect(parsePagination(sp(''))).toEqual({ page: 1, pageSize: 10 });
+    expect(parsePagination(sp(''), { defaultPageSize: 20 })).toEqual({ page: 1, pageSize: 20 });
+  });
+
+  it('parses valid positive integers', () => {
+    expect(parsePagination(sp('page=3&pageSize=25'))).toEqual({ page: 3, pageSize: 25 });
+  });
+
+  // Q-7 的核心：非数字必须回落到安全默认，而不是产生 NaN → Prisma skip:NaN → 500。
+  it('falls back to defaults for non-numeric, zero, negative inputs', () => {
+    expect(parsePagination(sp('page=abc&pageSize=xyz'))).toEqual({ page: 1, pageSize: 10 });
+    expect(parsePagination(sp('page=0&pageSize=0'))).toEqual({ page: 1, pageSize: 10 });
+    expect(parsePagination(sp('page=-5&pageSize=-1'))).toEqual({ page: 1, pageSize: 10 });
+  });
+
+  it('clamps pageSize to the max (blocks unbounded full-table reads)', () => {
+    expect(parsePagination(sp('pageSize=100000'), { maxPageSize: 100 })).toEqual({
+      page: 1,
+      pageSize: 100,
+    });
+  });
+
+  it('floors fractional values', () => {
+    expect(parsePagination(sp('page=2.9&pageSize=8.7'))).toEqual({ page: 2, pageSize: 8 });
+  });
+});
diff --git a/src/lib/pagination.ts b/src/lib/pagination.ts
new file mode 100644
index 0000000..b24cde3
--- /dev/null
+++ b/src/lib/pagination.ts
@@ -0,0 +1,34 @@
+// 分页参数解析：把 URL 上任意字符串收敛为安全、有界的 page/pageSize。
+// 动机（Q-7）：此前各列表路由用 `parseInt(sp.get('page') || '1')` 直接算 `skip/take`——
+//   · `?page=abc` → NaN → Prisma `skip: NaN` 抛错 → 500（应是安全默认，不是崩）；
+//   · `?page=0` / 负数 → 负 skip → 抛错；
+//   · `?pageSize=100000` → 无界 `take`，任何有权读取者都能整表拉取大 `data` JSON。
+// 放在 src/lib（覆盖率棘轮内）供列表路由复用，避免每处各写一份（副本会漂移）。
+export interface Pagination {
+  page: number;
+  pageSize: number;
+}
+
+export interface ParsePaginationOptions {
+  /** 缺省每页条数（参数缺失或非正时） */
+  defaultPageSize?: number;
+  /** 每页上限，超出即夹取 */
+  maxPageSize?: number;
+}
+
+export function parsePagination(
+  searchParams: URLSearchParams,
+  options: ParsePaginationOptions = {}
+): Pagination {
+  const { defaultPageSize = 10, maxPageSize = 100 } = options;
+
+  const rawPage = Number.parseInt(searchParams.get('page') ?? '', 10);
+  const rawSize = Number.parseInt(searchParams.get('pageSize') ?? '', 10);
+
+  const page = Number.isFinite(rawPage) && rawPage >= 1 ? Math.floor(rawPage) : 1;
+
+  let pageSize = Number.isFinite(rawSize) && rawSize >= 1 ? Math.floor(rawSize) : defaultPageSize;
+  if (pageSize > maxPageSize) pageSize = maxPageSize;
+
+  return { page, pageSize };
+}
diff --git a/src/lib/permissions.test.ts b/src/lib/permissions.test.ts
index c808ada..e800623 100644
--- a/src/lib/permissions.test.ts
+++ b/src/lib/permissions.test.ts
@@ -4,6 +4,7 @@ jest.mock('@/lib/db', () => ({
   prisma: {
     userRole: { findMany: jest.fn() },
     permission: { findMany: jest.fn() },
+    user: { findUnique: jest.fn() },
   },
 }));
 
@@ -11,7 +12,15 @@ jest.unmock('./permissions');
 
 import { NextRequest } from 'next/server';
 import { prisma } from '@/lib/db';
-import { hasPermission, checkUserPermission, requirePermission } from './permissions';
+import {
+  hasPermission,
+  checkUserPermission,
+  requirePermission,
+  privilegedRolesInPlay,
+  isPrivilegedRole,
+  mayChangeCredentials,
+  PRIVILEGED_ROLE_CODES,
+} from './permissions';
 import type { Permission, PermissionSuccess, PermissionFailure } from './permissions';
 
 jest.mock('@/lib/auth', () => ({
@@ -30,6 +39,9 @@ const mockUserRoleFindMany = prisma.userRole.findMany as jest.MockedFunction<
 const mockPermissionFindMany = prisma.permission.findMany as jest.MockedFunction<
   (args: unknown) => Promise<unknown[]>
 >;
+const mockUserFindUnique = prisma.user.findUnique as unknown as jest.MockedFunction<
+  (args: unknown) => Promise<{ status: number } | null>
+>;
 
 describe('hasPermission', () => {
   it('returns true when user has super_admin role', () => {
@@ -70,6 +82,8 @@ describe('hasPermission', () => {
 describe('checkUserPermission', () => {
   beforeEach(() => {
     jest.clearAllMocks();
+    // N-20：checkUserPermission 现在先核验账号状态，活跃账号是所有既有用例的前提。
+    mockUserFindUnique.mockResolvedValue({ status: 1 });
   });
 
   it('returns true when user role has permission', async () => {
@@ -97,6 +111,31 @@ describe('checkUserPermission', () => {
 
     expect(result).toBe(false);
   });
+
+  it('denies a disabled account even though its role grants the permission (N-20)', async () => {
+    mockUserFindUnique.mockResolvedValue({ status: 0 });
+    mockUserRoleFindMany.mockResolvedValue([{ roleCode: 'content_editor' }]);
+    mockPermissionFindMany.mockResolvedValue([
+      { roleCode: 'content_editor', modelCode: 'news', action: 'create' },
+    ]);
+
+    await expect(checkUserPermission('user-1', 'news', 'create')).resolves.toBe(false);
+    expect(mockUserRoleFindMany).not.toHaveBeenCalled();
+  });
+
+  it('denies an account whose row no longer exists', async () => {
+    mockUserFindUnique.mockResolvedValue(null);
+
+    await expect(checkUserPermission('user-1', 'news', 'create')).resolves.toBe(false);
+  });
+
+  // 状态校验必须早于 super_admin 短路，否则被停用的超管令牌仍可在 24h 有效期内畅通无阻。
+  it('denies a disabled super_admin instead of short-circuiting on role', async () => {
+    mockUserFindUnique.mockResolvedValue({ status: 0 });
+    mockUserRoleFindMany.mockResolvedValue([{ roleCode: 'super_admin' }]);
+
+    await expect(checkUserPermission('user-1', 'news', 'create')).resolves.toBe(false);
+  });
 });
 
 describe('requirePermission', () => {
@@ -104,6 +143,8 @@ describe('requirePermission', () => {
 
   beforeEach(() => {
     jest.clearAllMocks();
+    // N-20：checkUserPermission 现在先核验账号状态，活跃账号是所有既有用例的前提。
+    mockUserFindUnique.mockResolvedValue({ status: 1 });
   });
 
   it('returns user when authenticated and authorized', async () => {
@@ -144,3 +185,77 @@ describe('requirePermission', () => {
     expect((result as PermissionFailure).response.status).toBe(403);
   });
 });
+
+describe('PRIVILEGED_ROLE_CODES / isPrivilegedRole', () => {
+  it('特权集合只有 super_admin，与 hasPermission 的全权语义一致', () => {
+    expect([...PRIVILEGED_ROLE_CODES]).toEqual(['super_admin']);
+    expect(isPrivilegedRole('super_admin')).toBe(true);
+    expect(isPrivilegedRole('content_admin')).toBe(false);
+  });
+});
+
+/**
+ * 账号级特权护栏（验收 A-1 / A-2）。口径来自 ACCEPTANCE_REVIEW_2026-09-21.md §A-2：
+ * 「目标持有 super_admin 时同样要求调用者为 super_admin」—— 判定挂在账号的前后状态上，
+ * 与「调用者本次是否提交 roleCodes」无关，故省略 roleCodes（resulting === current）也须拦下。
+ */
+describe('privilegedRolesInPlay', () => {
+  it('调用者自身是 super_admin ⇒ 任何方向都不拦', () => {
+    expect(privilegedRolesInPlay(['super_admin'], ['super_admin'], ['super_admin'])).toEqual([]);
+    expect(privilegedRolesInPlay(['super_admin'], [], ['super_admin'])).toEqual([]);
+  });
+
+  it('授予方向：非超管把 super_admin 加进账号 ⇒ 拦下', () => {
+    expect(privilegedRolesInPlay(['content_admin'], ['super_admin'], ['content_editor'])).toEqual([
+      'super_admin',
+    ]);
+  });
+
+  it('撤销方向：非超管把 super_admin 摘掉（降级）⇒ 同样拦下', () => {
+    expect(privilegedRolesInPlay(['content_admin'], ['readonly'], ['super_admin'])).toEqual([
+      'super_admin',
+    ]);
+  });
+
+  it('状态未变动方向：非超管只改资料，resulting 回落到账号现有角色 ⇒ 仍拦下（策略而非疏漏）', () => {
+    const currentRoles = ['super_admin'];
+    // 调用者省略 body.roleCodes 时 users/route.ts 传入 resultingRoleCodes === targetRoleCodes
+    expect(privilegedRolesInPlay(['content_admin'], currentRoles, currentRoles)).toEqual([
+      'super_admin',
+    ]);
+  });
+
+  it('建号方向：POST 无变更前状态（[]）时按授予结果判定', () => {
+    expect(privilegedRolesInPlay(['content_admin'], ['super_admin'], [])).toEqual(['super_admin']);
+    expect(privilegedRolesInPlay(['content_admin'], ['content_editor'], [])).toEqual([]);
+  });
+
+  it('前后均不含特权角色 ⇒ 放行，且结果去重', () => {
+    expect(
+      privilegedRolesInPlay(['content_admin'], ['content_admin', 'readonly'], ['content_admin'])
+    ).toEqual([]);
+    expect(
+      privilegedRolesInPlay(
+        ['reviewer'],
+        ['super_admin', 'super_admin'],
+        ['super_admin', 'readonly']
+      )
+    ).toEqual(['super_admin']);
+  });
+
+  it('自定义特权角色名不参与判定（护栏范围由 PRIVILEGED_ROLE_CODES 定义）', () => {
+    expect(privilegedRolesInPlay(['content_admin'], ['audit_admin'], [])).toEqual([]);
+  });
+});
+
+describe('mayChangeCredentials', () => {
+  it('自助（目标是本人）始终允许，非超管不得改他人', () => {
+    expect(mayChangeCredentials(['content_admin'], true)).toBe(true);
+    expect(mayChangeCredentials(['readonly'], true)).toBe(true);
+    expect(mayChangeCredentials(['content_admin'], false)).toBe(false);
+  });
+
+  it('super_admin 可改他人凭据；判定与 roleCodes 是否提交无关', () => {
+    expect(mayChangeCredentials(['super_admin'], false)).toBe(true);
+  });
+});
diff --git a/src/lib/permissions.ts b/src/lib/permissions.ts
index db22def..e0a3ab8 100644
--- a/src/lib/permissions.ts
+++ b/src/lib/permissions.ts
@@ -35,6 +35,15 @@ export async function checkUserPermission(
   modelCode: string,
   action: PermissionAction
 ): Promise<boolean> {
+  // 访问令牌有效期 24h（`src/lib/auth.ts:7`），而 B-7 的账号状态校验只加在 `/api/auth/refresh` 上
+  // ⇒ 被停用/删除的账号在令牌过期前仍能通过每一个 guarded 路由（N-20）。
+  // 必须早于下面的 super_admin 短路，否则超管令牌被停用时仍放行。
+  const account = await prisma.user.findUnique({
+    where: { id: userId },
+    select: { status: true },
+  });
+  if (!account || account.status === 0) return false;
+
   const userRoles = await prisma.userRole.findMany({
     where: { userId },
   });
@@ -56,10 +65,32 @@ export async function checkUserPermission(
   return hasPermission(roleCodes, modelCode, action, permissions);
 }
 
+/**
+ * 认证请求 **并** 确认账号未被停用。返回 payload 或 null（null ⇒ 调用方 unauthorized）。
+ *
+ * 为什么需要它：`authenticateRequest` 只验 JWT 签名，不看 `User.status`。N-20 把状态校验加在
+ * `checkUserPermission` 里，但 `admin/users` 与 `admin/roles` 这 6 个 handler 走的是「authenticateRequest
+ * + 内联 role 数组」而非 `requirePermission`，于是停用的 super_admin 在其 ≤24h 令牌有效期内仍能
+ * 列/建/改/删用户与改权限矩阵（Q-4，与 N-20 同族，只是绕开了那个已修的收口）。
+ * 用 `count` 而非 `findUnique` 以避开各 handler 内已有的 username 查询语义。
+ */
+export async function authenticateActiveRequest(
+  request: NextRequest
+): Promise<JwtPayload | null> {
+  const user = authenticateRequest(request);
+  if (!user) return null;
+
+  const active = await prisma.user.count({
+    where: { id: user.userId, status: 1 },
+  });
+  if (active === 0) return null;
+
+  return user;
+}
+
 export interface PermissionSuccess {
   user: JwtPayload;
 }
-
 export interface PermissionFailure {
   response: NextResponse;
 }
@@ -68,8 +99,7 @@ export interface PermissionFailure {
  * 校验请求是否已认证并具备指定权限
  * 通过返回 { user }，失败返回 { response }
  */
-export async function requirePermission(
-  request: NextRequest,
+export async function requirePermission(  request: NextRequest,
   modelCode: string,
   action: PermissionAction
 ): Promise<PermissionSuccess | PermissionFailure> {
@@ -85,3 +115,53 @@ export async function requirePermission(
 
   return { user };
 }
+
+// ============ 账号与角色变更授权（验收 A-1 / A-2） ============
+
+/**
+ * 特权角色：授予它等于交付不受限管理能力，撤销它等于把他人踢出管理面，
+ * 因此两个方向都必须由同等级调用者操作。与 hasPermission 的 super_admin 全权语义保持一致。
+ */
+export const PRIVILEGED_ROLE_CODES: readonly string[] = ['super_admin'];
+
+export function isPrivilegedRole(roleCode: string): boolean {
+  return PRIVILEGED_ROLE_CODES.includes(roleCode);
+}
+
+/**
+ * 账号级特权护栏：返回调用者无权经手的特权角色。
+ *
+ * 口径来源 ACCEPTANCE_REVIEW_2026-09-21.md §A-2「修复」行：
+ * 「改密/停用他人须 super_admin；**目标持有 super_admin 时同样要求调用者为 super_admin**」——
+ * 条件写在「目标持有」上，而不是写在「本次请求是否改角色」上。故本函数取
+ * 「变更前 currentRoleCodes ∪ 变更后 resultingRoleCodes」两个状态求并集：
+ *
+ *  - 撤销方向必须并入，否则 `roleCodes: ['readonly']` 覆盖掉目标原有的 super_admin 即降级，
+ *    与授予 super_admin 是同一类越权，只是方向相反；
+ *  - 「调用者省略 roleCodes」同样要判定（此时 resultingRoleCodes === currentRoleCodes）：
+ *    非超管改超管的昵称/手机号依然是对这个账号的写操作。这是**裁定过的策略而非疏漏**，
+ *    不可因为「角色没变」就放行 —— 详见 users/route.ts PUT 护栏处的注释。
+ *
+ * 返回空数组表示调用者有权完成该次写操作。
+ *
+ * @param callerRoleCodes      调用者角色
+ * @param resultingRoleCodes   写入后该账号的角色集（未提交 roleCodes 时即目标现有角色）
+ * @param currentRoleCodes     写入前该账号的角色集（POST 建号时为 []）
+ */
+export function privilegedRolesInPlay(
+  callerRoleCodes: string[],
+  resultingRoleCodes: string[],
+  currentRoleCodes: string[]
+): string[] {
+  if (callerRoleCodes.includes('super_admin')) return [];
+  const inPlay = new Set([...resultingRoleCodes, ...currentRoleCodes]);
+  return [...inPlay].filter(isPrivilegedRole);
+}
+
+/**
+ * 改密与启停属账号接管面（A-2）：`?id=` 由调用者提供，若不校验目标身份，
+ * content_admin 可直接替换超管口令或停用超管后登录。自助改密仍允许。
+ */
+export function mayChangeCredentials(callerRoleCodes: string[], isTargetSelf: boolean): boolean {
+  return isTargetSelf || callerRoleCodes.includes('super_admin');
+}
diff --git a/src/lib/rate-limit.test.ts b/src/lib/rate-limit.test.ts
new file mode 100644
index 0000000..b9a8c67
--- /dev/null
+++ b/src/lib/rate-limit.test.ts
@@ -0,0 +1,41 @@
+import { describe, it, expect } from '@jest/globals';
+import { createMemoryRateLimiter } from './rate-limit';
+
+describe('createMemoryRateLimiter', () => {
+  it('allows max requests then limits the max+1th within the window', () => {
+    const clock = 1_000;
+    const limiter = createMemoryRateLimiter({ windowMs: 1000, max: 3, now: () => clock });
+
+    expect(limiter.isLimited('ip')).toBe(false); // 1
+    expect(limiter.isLimited('ip')).toBe(false); // 2
+    expect(limiter.isLimited('ip')).toBe(false); // 3
+    expect(limiter.isLimited('ip')).toBe(true); // 4 -> over max
+    expect(limiter.isLimited('ip')).toBe(true); // 5 -> still limited
+  });
+
+  it('tracks keys independently', () => {
+    const clock = 0;
+    const limiter = createMemoryRateLimiter({ windowMs: 100, max: 1, now: () => clock });
+    expect(limiter.isLimited('a')).toBe(false);
+    expect(limiter.isLimited('a')).toBe(true);
+    expect(limiter.isLimited('b')).toBe(false); // 不同 key 独立
+  });
+
+  it('resets the count once the window expires', () => {
+    let clock = 0;
+    const limiter = createMemoryRateLimiter({ windowMs: 100, max: 1, now: () => clock });
+    expect(limiter.isLimited('ip')).toBe(false); // count=1, resetAt=100
+    expect(limiter.isLimited('ip')).toBe(true); // count=2 > 1
+    clock = 101; // 超过 resetAt
+    expect(limiter.isLimited('ip')).toBe(false); // 新窗口，count=1
+  });
+
+  it('reset() clears all buckets', () => {
+    const clock = 0;
+    const limiter = createMemoryRateLimiter({ windowMs: 100, max: 1, now: () => clock });
+    expect(limiter.isLimited('ip')).toBe(false);
+    expect(limiter.isLimited('ip')).toBe(true);
+    limiter.reset();
+    expect(limiter.isLimited('ip')).toBe(false);
+  });
+});
diff --git a/src/lib/rate-limit.ts b/src/lib/rate-limit.ts
new file mode 100644
index 0000000..c964f21
--- /dev/null
+++ b/src/lib/rate-limit.ts
@@ -0,0 +1,42 @@
+// 进程内内存限流器。语义与旧的 contact 内联实现一致：窗口内首次请求计数为 1，
+// 超过 max 后判为受限。时钟可注入以便测试确定性；`reset()` 供测试隔离跨用例状态。
+// 放在 src/lib（覆盖率棘轮内）——这是可复用、可 grep 的安全控制，而非散落在各路由的副本。
+export interface RateLimiterOptions {
+  /** 滑动窗口的固定长度（毫秒） */
+  windowMs: number;
+  /** 窗口内允许的最大请求数；第 max+1 次起判为受限 */
+  max: number;
+  /** 当前时间来源，测试可注入 */
+  now?: () => number;
+}
+
+export interface RateLimiter {
+  isLimited(key: string): boolean;
+  reset(): void;
+}
+
+export function createMemoryRateLimiter({
+  windowMs,
+  max,
+  now = Date.now,
+}: RateLimiterOptions): RateLimiter {
+  const buckets = new Map<string, { count: number; resetAt: number }>();
+
+  return {
+    isLimited(key: string): boolean {
+      const ts = now();
+      const record = buckets.get(key);
+
+      if (!record || ts > record.resetAt) {
+        buckets.set(key, { count: 1, resetAt: ts + windowMs });
+        return false;
+      }
+
+      record.count += 1;
+      return record.count > max;
+    },
+    reset(): void {
+      buckets.clear();
+    },
+  };
+}
diff --git a/src/lib/sanitize.test.ts b/src/lib/sanitize.test.ts
new file mode 100644
index 0000000..2e00775
--- /dev/null
+++ b/src/lib/sanitize.test.ts
@@ -0,0 +1,110 @@
+import { sanitizeRichText } from './sanitize';
+
+describe('sanitizeRichText', () => {
+  describe('输入边界', () => {
+    it('非字符串输入返回空串', () => {
+      expect(sanitizeRichText(undefined)).toBe('');
+      expect(sanitizeRichText(null)).toBe('');
+      expect(sanitizeRichText(42)).toBe('');
+      expect(sanitizeRichText({ html: 'x' })).toBe('');
+    });
+
+    it('保留合法富文本结构', () => {
+      const html = '<h2>标题</h2><p>段落<strong>强调</strong><em>斜体</em></p><ul><li>项</li></ul>';
+      expect(sanitizeRichText(html)).toBe(html);
+    });
+  });
+
+  describe('脚本与事件处理器（验收 A-3）', () => {
+    it('丢弃 <script> 及其内容', () => {
+      const out = sanitizeRichText('<p>正常</p><script>alert(1)</script>');
+      expect(out).not.toContain('alert');
+      expect(out).not.toContain('<script');
+      expect(out).toContain('<p>正常</p>');
+    });
+
+    it('剔除任意 on* 事件属性', () => {
+      const out = sanitizeRichText(
+        '<img src="https://cdn.example.com/a.png" onerror="alert(1)"><p onclick="alert(2)">x</p>'
+      );
+      expect(out).not.toMatch(/on(error|load|click|mouse)/i);
+      expect(out).not.toContain('alert');
+    });
+
+    it('剔除 <style> 与 iframe / object / embed', () => {
+      const out = sanitizeRichText(
+        '<style>body{display:none}</style><iframe src="https://evil.example.com"></iframe>' +
+          '<object data="x"></object><embed src="y">'
+      );
+      expect(out).not.toContain('display:none');
+      expect(out).not.toMatch(/<(iframe|object|embed)/i);
+    });
+
+    it('SVG 内嵌脚本被整体移除', () => {
+      expect(sanitizeRichText('<svg><script>alert(2)</script></svg>')).not.toContain('alert');
+    });
+
+    it('属性内的伪协议与外站脚本源被移除', () => {
+      expect(sanitizeRichText('<a href="javascript:alert(1)">t</a>')).not.toContain('javascript:');
+      expect(sanitizeRichText('<a href="data:text/html;base64,PHNjcmlwdD4=">t</a>')).not.toContain('data:');
+      expect(sanitizeRichText('<a href="vbscript:msgbox(1)">t</a>')).not.toContain('vbscript:');
+    });
+
+    it('嵌套/畸形标签无法绕过（标签名大小写与内联拆分）', () => {
+      expect(sanitizeRichText('<ScRiPt>alert(1)</ScRiPt>')).not.toContain('alert');
+      expect(sanitizeRichText('<img src="x" onerror=alert(1)>')).not.toContain('alert');
+      expect(sanitizeRichText('<<script>alert(1)//<//script>')).not.toContain('alert');
+    });
+
+    it('深嵌套受 nestingLimit 约束，不产生无界输出', () => {
+      const deep = '<div>'.repeat(500) + 'x' + '</div>'.repeat(500);
+      const out = sanitizeRichText(deep);
+      expect(out.length).toBeLessThan(deep.length);
+    });
+  });
+
+  describe('链接协议与 tabnabbing', () => {
+    it('保留 http/https/mailto/tel 与站内相对链接', () => {
+      expect(sanitizeRichText('<a href="https://novalon.cn">a</a>')).toContain('href="https://novalon.cn"');
+      expect(sanitizeRichText('<a href="/terms">a</a>')).toContain('href="/terms"');
+      expect(sanitizeRichText('<a href="mailto:hi@novalon.cn">a</a>')).toContain('mailto:hi@novalon.cn');
+      expect(sanitizeRichText('<a href="tel:+8610000000">a</a>')).toContain('tel:+8610000000');
+    });
+
+    it('target=_blank 自动补 rel=noopener noreferrer', () => {
+      const out = sanitizeRichText('<a href="https://x.cn" target="_blank">a</a>');
+      expect(out).toContain('target="_blank"');
+      expect(out).toContain('rel="noopener noreferrer"');
+    });
+
+    it('协议相对形式 //host 被拒绝', () => {
+      expect(sanitizeRichText('<a href="//evil.example.com">a</a>')).not.toContain('//evil.example.com');
+    });
+  });
+
+  describe('CMS 富文本所需能力不被过度阉割', () => {
+    it('保留 class 与排版类标签', () => {
+      const out = sanitizeRichText(
+        '<h3 class="text-lg">t</h3><blockquote><p>q</p></blockquote><ol><li>1</li></ol><table><tbody><tr><td>c</td></tr></tbody></table><hr><br>'
+      );
+      expect(out).toContain('<h3 class="text-lg">t</h3>');
+      expect(out).toContain('<blockquote>');
+      expect(out).toContain('<ol><li>1</li></ol>');
+      expect(out).toContain('<table>');
+      expect(out).toContain('<hr');
+      expect(out).toContain('<br');
+    });
+
+    it('保留合法图片源但拒绝 javascript:/data:', () => {
+      expect(sanitizeRichText('<img src="https://cdn.example.com/a.png" alt="a">')).toContain(
+        'src="https://cdn.example.com/a.png"'
+      );
+      expect(sanitizeRichText('<img src="javascript:alert(1)">')).not.toContain('javascript:');
+    });
+
+    it('丢弃未声明的属性（data-*、style、form 相关）', () => {
+      const out = sanitizeRichText('<p data-token="x" style="color:red" contenteditable="true">y</p>');
+      expect(out).toBe('<p>y</p>');
+    });
+  });
+});
diff --git a/src/lib/sanitize.ts b/src/lib/sanitize.ts
new file mode 100644
index 0000000..4a00061
--- /dev/null
+++ b/src/lib/sanitize.ts
@@ -0,0 +1,51 @@
+import sanitizeHtml from 'sanitize-html';
+
+/**
+ * CMS 富文本渲染端净化（验收 A-3）。
+ * 白名单而非黑名单：新增的危险标签默认被丢弃，无需跟进上游漏洞库。
+ */
+const ALLOWED_TAGS = [
+  'a', 'abbr', 'b', 'blockquote', 'br', 'caption', 'cite', 'code', 'col', 'colgroup',
+  'dd', 'div', 'dl', 'dt', 'em', 'figcaption', 'figure', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+  'hr', 'i', 'img', 'li', 'mark', 'ol', 'p', 'pre', 's', 'small', 'span', 'strong',
+  'sub', 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'u', 'ul',
+];
+
+const ALLOWED_ATTRIBUTES: Record<string, string[]> = {
+  a: ['href', 'title', 'target', 'rel'],
+  img: ['src', 'alt', 'title', 'width', 'height'],
+  col: ['span', 'width'],
+  td: ['colspan', 'rowspan'],
+  th: ['colspan', 'rowspan'],
+  ol: ['start', 'type'],
+  '*': ['class'],
+};
+
+// 无 javascript/data/vbscript：伪协议在属性层即被剔除（探针实测 href 整体消失）
+const ALLOWED_SCHEMES = ['http', 'https', 'mailto', 'tel'];
+
+const OPTIONS: sanitizeHtml.IOptions = {
+  allowedTags: ALLOWED_TAGS,
+  allowedAttributes: ALLOWED_ATTRIBUTES,
+  allowedSchemes: ALLOWED_SCHEMES,
+  // 协议相对 URL（//evil.example.com）等价于跟随页面协议外跳，一并拒绝
+  allowProtocolRelative: false,
+  // 危险标签连同其内容整体丢弃；recursiveEscape 会把 &lt;script&gt; 作为可见文本泄漏给读者
+  disallowedTagsMode: 'discard',
+  nonTextTags: ['script', 'style', 'textarea', 'title', 'noscript', 'iframe', 'object', 'embed', 'svg', 'math'],
+  nestingLimit: 50,
+  transformTags: {
+    a: (tagName, attribs) => ({
+      tagName,
+      attribs:
+        attribs.target === '_blank'
+          ? { ...attribs, rel: 'noopener noreferrer' }
+          : attribs,
+    }),
+  },
+};
+
+export function sanitizeRichText(html: unknown): string {
+  if (typeof html !== 'string' || html.length === 0) return '';
+  return sanitizeHtml(html, OPTIONS);
+}
diff --git a/src/lib/seed-metric-basis.test.ts b/src/lib/seed-metric-basis.test.ts
new file mode 100644
index 0000000..f60ad15
--- /dev/null
+++ b/src/lib/seed-metric-basis.test.ts
@@ -0,0 +1,70 @@
+import { describe, it, expect } from '@jest/globals';
+import { readFileSync } from 'fs';
+import path from 'path';
+
+/**
+ * 口径字段反漂移守卫。
+ *
+ * 背景：数据口径 `basis` 由 src/lib/cms/content-types.ts 的 metricBasisField 声明，
+ * 但 prisma/seed.ts 里为 page 型模型**另写了一份字段定义**，并通过
+ * `contentModel.upsert({ fields: JSON.stringify(config.model.fields) })` 落库；
+ * 后台表单读的是库里这份 ⇒ 种子少写一个 basis，编辑者就永远无法为该指标声明口径。
+ *
+ * 两侧格式不同（content-types 一行一个键、种子把 name/type 写在同一行），
+ * 故归属判定用「整源索引 + 最近的前置数组头」，不做逐行正则。
+ */
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const CONTENT_TYPES = readFileSync(path.join(ROOT, 'src/lib/cms/content-types.ts'), 'utf8');
+const SEED = readFileSync(path.join(ROOT, 'prisma/seed.ts'), 'utf8');
+
+const BASIS_VALUES = ['target', 'team-history', 'verified'];
+
+/** 返回「子字段里出现过 marker 的数组字段名」集合 */
+function arrayFieldsCarrying(source: string, marker: RegExp): string[] {
+  const headers: { name: string; at: number }[] = [];
+  for (const m of source.matchAll(/name:\s*'([a-zA-Z]+)',\s*type:\s*'array'/g)) {
+    headers.push({ name: m[1] as string, at: m.index as number });
+  }
+  const found = new Set<string>();
+  for (const m of source.matchAll(new RegExp(marker, 'g'))) {
+    const at = m.index as number;
+    let owner: string | null = null;
+    for (const h of headers) {
+      if (h.at < at) owner = h.name;
+      else break;
+    }
+    if (owner) found.add(owner);
+  }
+  return [...found];
+}
+
+const typedWithBasis = arrayFieldsCarrying(CONTENT_TYPES, /\.\.\.metricBasisField/);
+const seedWithBasis = arrayFieldsCarrying(SEED, /name:\s*'basis'/);
+// 种子里「含指标子字段」的数组字段名（value/label/metric 三元组）
+const seedMetricArrays = arrayFieldsCarrying(SEED, /name:\s*'(?:value|metric)',\s*type:\s*'text'/);
+
+describe('seed 的指标数组必须与 content-types 一样声明数据口径 basis', () => {
+  it('两侧解析都真的看到了东西（防「匹配零」的假绿）', () => {
+    expect(typedWithBasis.length).toBeGreaterThan(0);
+    expect(seedMetricArrays.length).toBeGreaterThan(0);
+  });
+
+  it('content-types 带 basis 的字段名，种子若也定义则必须同样带 basis', () => {
+    const overlapping = seedMetricArrays.filter((n) => typedWithBasis.includes(n));
+    expect(overlapping.length).toBeGreaterThan(0);
+
+    const missing = overlapping.filter((n) => !seedWithBasis.includes(n));
+    expect(missing).toEqual([]);
+  });
+
+  it('种子声明 basis 时，其选项值必须与 content-types 同一套（防自造第三套口径标签）', () => {
+    for (const value of BASIS_VALUES) {
+      expect(CONTENT_TYPES).toContain(`value: '${value}'`);
+    }
+    expect(seedWithBasis.length).toBeGreaterThan(0);
+    for (const value of BASIS_VALUES) {
+      expect(SEED).toContain(`value: '${value}'`);
+    }
+  });
+});
diff --git a/src/lib/seed-permissions.test.ts b/src/lib/seed-permissions.test.ts
new file mode 100644
index 0000000..877742c
--- /dev/null
+++ b/src/lib/seed-permissions.test.ts
@@ -0,0 +1,68 @@
+/**
+ * L-2 防漂移门禁：prisma/seed.ts 的 permissionMatrix 授予的 modelCode 必须是真实存在
+ * 的权限码（hasPermission 按 modelCode 全等匹配，src/lib/permissions.ts:26）。
+ * 曾出现授予 'team' / 'legal' 这类不存在的码、漏发真实页面模型，导致非 super_admin
+ * 在 legal/team/contact 内容与 admin 外壳路由上被 fail-closed 拒绝。
+ */
+import { describe, it, expect } from '@jest/globals';
+import { readFileSync } from 'fs';
+import path from 'path';
+import { CONTENT_TYPE_CONFIGS } from '@/lib/cms/content-types';
+
+const SEED_PATH = path.resolve(__dirname, '../../prisma/seed.ts');
+const seedSource = readFileSync(SEED_PATH, 'utf8');
+
+/** 权限门控使用、但 ContentModel 表中不存在对应行的外壳码 */
+const SHELL_PERMISSION_CODES = ['media', 'content-model', 'content-zone'];
+
+/** 站点级配置模型，刻意仅 super_admin 可写（见 seed 注释），故不进授权数组 */
+const SUPER_ADMIN_ONLY_MODELS = ['site-config', 'navigation'];
+
+function extractArray(name: string): string[] {
+  const match = seedSource.match(new RegExp(`const ${name} = \\[([\\s\\S]*?)\\];`));
+  if (!match?.[1]) throw new Error(`prisma/seed.ts 中应存在 const ${name} = [...] 数组`);
+  return [...match[1].matchAll(/'([^']+)'/g)].map((m) => m[1]!);
+}
+
+/** seed 实际创建的 ContentModel 行：CONTENT_TYPE_CONFIGS + seed.ts modelConfigs 块 */
+function realContentModelCodes(): Set<string> {
+  const fromConfigs = Object.values(CONTENT_TYPE_CONFIGS).map((c) => c.model.code);
+  const modelConfigsBlock = seedSource.match(/const modelConfigs = \[[\s\S]*?\n  \];/);
+  if (!modelConfigsBlock?.[0]) throw new Error('prisma/seed.ts 中应存在 modelConfigs 块');
+  const fromSeed = [...modelConfigsBlock[0].matchAll(/code: '([^']+)'/g)].map((m) => m[1]!);
+  return new Set([...fromConfigs, ...fromSeed]);
+}
+
+describe('prisma/seed.ts permissionMatrix 模型码一致性', () => {
+  const granted = extractArray('contentModels');
+  const real = realContentModelCodes();
+
+  it('授权数组非空且成功解析出真实模型集合', () => {
+    expect(granted.length).toBeGreaterThan(0);
+    expect(real.size).toBeGreaterThanOrEqual(14);
+  });
+
+  it('数组中每个码都是真实 ContentModel 或外壳权限码（杜绝 team/legal 式幽灵码）', () => {
+    const unknown = granted.filter((code) => !real.has(code) && !SHELL_PERMISSION_CODES.includes(code));
+    expect(unknown).toEqual([]);
+  });
+
+  it('每个真实内容模型都被授予非超管角色（除刻意 super_admin 独有的站点配置）', () => {
+    const missed = [...real].filter(
+      (code) => !SUPER_ADMIN_ONLY_MODELS.includes(code) && !granted.includes(code),
+    );
+    expect(missed).toEqual([]);
+  });
+
+  it('外壳码授权路径：media 走内容数组；content-model/content-zone 仅以 read 授予非超管角色', () => {
+    expect(granted).toContain('media');
+    const shellReads = extractArray('shellReadModels');
+    expect(shellReads).toEqual(['content-model', 'content-zone']);
+    const matrixBlock = seedSource.match(/const permissionMatrix[\s\S]*?\n  \];/);
+    if (!matrixBlock?.[0]) throw new Error('prisma/seed.ts 中应存在 permissionMatrix 块');
+    expect(matrixBlock[0]).toContain('shellReadModels');
+    // shell 码不得混进全动作数组（否则 editor 可 update content-zone、越过 super_admin 独占的 zone 编辑）
+    expect(granted).not.toContain('content-model');
+    expect(granted).not.toContain('content-zone');
+  });
+});
diff --git a/src/lib/utils.test.ts b/src/lib/utils.test.ts
index 4b3511a..2396741 100644
--- a/src/lib/utils.test.ts
+++ b/src/lib/utils.test.ts
@@ -114,6 +114,32 @@ describe('utils', () => {
       expect(result).toBeGreaterThanOrEqual(-10);
       expect(result).toBeLessThanOrEqual(-1);
     });
+
+    // 验收 A-14：仅断言边界检不出算子错误（`*(max-min)+min` 改成 `/(max-min)+min` 时
+    // 取值被压到区间一端 11% 长度内仍全绿），故须钉住映射关系与跨度。
+    it('按 Math.random 的取值线性映射到区间（算子与偏移均被检验）', () => {
+      const spy = jest.spyOn(Math, 'random');
+      try {
+        spy.mockReturnValue(0);
+        expect(randomBetween(1, 10)).toBe(1);
+        spy.mockReturnValue(0.5);
+        expect(randomBetween(1, 10)).toBeCloseTo(5.5, 10);
+        spy.mockReturnValue(0.25);
+        expect(randomBetween(-8, 8)).toBeCloseTo(-4, 10);
+        spy.mockReturnValue(0.999999);
+        expect(randomBetween(1, 10)).toBeLessThan(10);
+      } finally {
+        spy.mockRestore();
+      }
+    });
+
+    it('多次取样的值域跨度覆盖全区间', () => {
+      const samples = Array.from({ length: 500 }, () => randomBetween(0, 100));
+      const min = Math.min(...samples);
+      const max = Math.max(...samples);
+      expect(min).toBeLessThan(8);
+      expect(max).toBeGreaterThan(92);
+    });
   });
 
   describe('lerp', () => {
@@ -126,6 +152,20 @@ describe('utils', () => {
       expect(lerp(0, 10, 0)).toBe(0);
       expect(lerp(0, 10, 1)).toBe(10);
     });
+
+    // 验收 A-13：原用例 start 恒为 0，使 `end - start` 与 `end + start` 数值相同，
+    // start 偏移量从未被检验。以下用例全部使用非零 start。
+    it('非零 start 时偏移量与差值均参与计算', () => {
+      expect(lerp(10, 20, 0.5)).toBe(15);
+      expect(lerp(100, 200, 0.25)).toBe(125);
+      expect(lerp(-10, 10, 0.5)).toBe(0);
+      expect(lerp(5, 5, 0.7)).toBe(5);
+      expect(lerp(20, 10, 0.5)).toBe(15);
+      expect(lerp(3, 7, 0)).toBe(3);
+      expect(lerp(3, 7, 1)).toBe(7);
+      expect(lerp(2, 4, 2)).toBe(6);
+      expect(lerp(2, 4, -1)).toBe(0);
+    });
   });
 
   describe('clamp', () => {