Add candidate account archiving and password reset

app.js

@@ -37,8 +37,8 @@ function renderError(error) {
 
 const baseViewContext = { state, app, h, formatDate, dateRange, badge, money, passPolicyText, statusLabels, icons, api, renderError, emptyState };
 const { brand, renderHome, renderAuth } = createPublicViews(baseViewContext);
-const { adminNavForUser, portalShell, loadingPanel, renderCandidate } = createCandidateViews({ ...baseViewContext, brand });
-const { renderAdmin, workflowStepEditor } = createAdminViews({ ...baseViewContext, brand, portalShell, loadingPanel, adminNavForUser });
+const { adminNavForUser, portalShell, loadingPanel, renderCandidate, accountSecurity } = createCandidateViews({ ...baseViewContext, brand });
+const { renderAdmin, workflowStepEditor } = createAdminViews({ ...baseViewContext, brand, portalShell, loadingPanel, adminNavForUser, accountSecurity });
 
 function navigate(route) {
   location.hash = route;
@@ -172,6 +172,15 @@ document.addEventListener('click', async event => {
     }
     if (action === 'edit-exam') return openExamForm(state.pageData.exams.find(exam => exam.id === target.dataset.id));
     if (action === 'review-candidate') return openCandidateReview(target.dataset.id);
+    if (action === 'reset-candidate-password') return openCandidatePasswordReset(target.dataset.id);
+    if (action === 'candidate-archive') {
+      const scope = document.querySelector('[data-archive-scope]')?.value || '';
+      const separator = scope.indexOf(':');
+      if (separator < 1) return toast('请选择归档范围', '可以选择一个班级或整个年级');
+      const archived = target.dataset.archived === 'true';
+      const data = await api('/api/admin/candidate-accounts/archive', { method: 'POST', body: { scopeType: scope.slice(0, separator), scopeValue: scope.slice(separator + 1), archived } });
+      toast(archived ? '账户已归档' : '账户已恢复', `${data.scopeLabel} · ${data.count} 个账户状态已更新`); return renderRoute();
+    }
     if (action === 'review-registration') return openRegistrationReview(target.dataset.id);
     if (action === 'excel-download') {
       const query = new URLSearchParams();
@@ -352,6 +361,15 @@ document.addEventListener('submit', async event => {
       if (body.newPassword !== body.confirmPassword) throw new Error('两次输入的新密码不一致');
       await api('/api/auth/change-password', { method: 'POST', body });
       await refreshSession(); toast('密码修改成功', '下一步请补全个人信息'); navigate('candidate/onboarding');
+    } else if (kind === 'account-password') {
+      const body = formObject(form);
+      if (body.newPassword !== body.confirmPassword) throw new Error('两次输入的新密码不一致');
+      await api('/api/auth/change-password', { method: 'POST', body });
+      form.reset(); toast('密码修改成功', '下次登录请使用新密码');
+    } else if (kind === 'candidate-password-reset') {
+      const body = formObject(form);
+      const data = await api(`/api/admin/candidates/${body.id}/reset-password`, { method: 'POST' });
+      setModal(`<div class="modal-head"><div><span>PASSWORD RESET</span><h2>临时密码已生成</h2><p>请通过线下安全渠道交给考生，仅此处展示一次。</p></div><button data-action="close-modal">×</button></div><div class="issued-number"><span>报名号</span><strong>${h(data.candidateNumber)}</strong><span>临时密码</span><strong>${h(data.temporaryPassword)}</strong><p>原密码和现有登录会话均已失效，考生下次登录必须修改此密码。</p></div><div class="modal-foot"><button class="solid-button" data-action="close-modal">我已保存</button></div>`);
     } else if (kind === 'candidate-profile') {
       const data = await api('/api/candidate/profile', { method: 'PUT', body: formObject(form) });
       state.profile = data.profile; await refreshSession(); toast('资料已提交', '管理员审核后会更新状态'); navigate('candidate/dashboard');
@@ -555,6 +573,12 @@ function openCandidateReview(id) {
   setModal(`<div class="modal-head"><div><span>CANDIDATE REVIEW</span><h2>${canReview ? '处理' : '查看'} ${h(item.name)} 的资料</h2><p class="mono">报名号 ${h(item.candidateNumber)} · 更新于 ${formatDate(item.updatedAt,true)}</p></div><button data-action="close-modal">×</button></div><div class="review-profile"><dl><div><dt>证件号码</dt><dd class="mono">${h(item.idNumberMasked)}</dd></div><div><dt>性别 / 籍贯</dt><dd>${h(item.gender)} · ${h(item.nativePlace)}</dd></div><div><dt>联系电话</dt><dd>${h(item.phone)}</dd></div><div><dt>电子邮箱</dt><dd>${h(item.email)}</dd></div><div><dt>就读学校</dt><dd>${h(item.school)}</dd></div><div><dt>年级班级</dt><dd>${h(item.grade)}</dd></div><div><dt>家庭住址</dt><dd>${h(item.address)}</dd></div><div><dt>监护人</dt><dd>${h(item.guardianName || item.emergencyContact)} · ${h(item.guardianPhone || item.emergencyPhone)}</dd></div><div><dt>当前步骤</dt><dd>${h(item.workflow?.currentStepDetail?.name || '流程已结束')}</dd></div><div><dt>当前责任人</dt><dd>${h(item.workflow?.assignee?.displayName || '—')}</dd></div></dl></div>${canReview ? `<form class="modal-form" data-form="candidate-review"><input type="hidden" name="id" value="${h(item.id)}"><label><span>审核结论</span><select name="status"><option value="approved">通过当前步骤</option><option value="rejected">退回考生修改</option></select></label><label><span>审核意见</span><textarea name="reviewNote" rows="3" placeholder="填写核验说明或需要补充的资料">${h(item.reviewNote)}</textarea></label><div class="modal-foot"><button type="button" class="ghost-button" data-action="close-modal">取消</button><button type="submit" class="solid-button">确认处理</button></div></form>` : '<div class="modal-foot"><button class="solid-button" data-action="close-modal">关闭</button></div>'}`);
 }
 
+function openCandidatePasswordReset(id) {
+  const item = state.pageData?.candidates?.find(candidate => candidate.id === id);
+  if (!item) return toast('考生不存在', '请刷新页面后重试');
+  setModal(`<div class="modal-head"><div><span>RESET PASSWORD</span><h2>重置 ${h(item.name)} 的密码</h2><p class="mono">报名号 ${h(item.candidateNumber)}</p></div><button data-action="close-modal">×</button></div><form class="modal-form" data-form="candidate-password-reset"><input type="hidden" name="id" value="${h(item.id)}"><div class="reset-warning"><strong>重置后立即生效</strong><p>系统将生成临时密码，使原密码及该考生所有现有登录会话失效，并要求下次登录先改密。</p></div><div class="modal-foot"><button type="button" class="ghost-button" data-action="close-modal">取消</button><button type="submit" class="solid-button">确认重置</button></div></form>`);
+}
+
 function openRegistrationReview(id) {
   const reg = state.pageData.registrations.find(item => item.id === id);
   const canReview = reg.status === 'pending' && reg.workflow?.assignee?.id === state.user.id;