From 6c5b3e53841a9b636864500379f74d66ff94d699 Mon Sep 17 00:00:00 2001
From: argszero <argszero@gmail.com>
Date: Tue, 15 Sep 2026 00:53:34 +0800
Subject: [PATCH] fix(ui): submit the inline cards from every field, not from a
 hand-written roster
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The inline form cards (`#topup-card`, `#raise-card`, `#dept-form-card`, `#model-form-card`,
`#ak-new-inline`) are `<div class="form">` / `<span class="inline-edit">`, not real `<form>`s
(the real one is `#share-form`, where the implicit submission of a `type="submit"` button makes
Enter work in every field for free). So Enter has to be implemented by hand — and it was
implemented as a **per-field roster**:

    $("#model-form-provider").addEventListener("keydown", ... $("#model-confirm").click());
    $("#model-form-model").addEventListener("keydown", ...)   // and that is the whole list

The model form has ten text controls. The roster named two of them, so the other eight — input
price, cache-hit price, output price, all three peak prices, context window, max output — did
nothing at all when you pressed Enter, while every one of them submits when you click Confirm.
Nothing errors; the card simply ignores the key. The department form on the same page registered
every field it has (2/2), and `#share-form` needs no registration at all, so this is an omission
that never got caught, not a deliberate trade-off.

A roster is the problem, not its entries: it does not grow when the markup does. The fix deletes
it and delegates Enter to the card:

    wireEnterSubmit($("#model-form-card"), "#model-confirm")

`wireEnterSubmit` listens on the container, so every text control the card has — today's and
tomorrow's — is covered, and it bails on non-text targets, so pressing Enter while the *Cancel*
button has focus still dismisses the card instead of submitting it. The delegate only calls
`btn.click()`: the busy state (`withLoading`), the field validation and the request all stay in
the confirm button's own listener, which is the one place that already implements them.

`src/i18n_pack.rs::enter_submit_is_delegated_to_the_card` pins the shape in CI:

    * no `keydown` registration that clicks a confirm button may hang off an id that
      `ui/index.html` declares on an `<input>` / `<select>` / `<textarea>` (the rule is derived
      from the markup, not from a list someone has to remember to update);
    * `wireEnterSubmit` must listen on the container, bail on non-`INPUT` and on
      `NON_TEXT_INPUT_TYPES`, and delegate with `btn.click()`;
    * all five cards must go through the helper, and the helper's call count must equal the
      number of cards.

The detector is proven on synthetic pre-fix text and on the pre-fix tree itself, and against two
shapes it must leave alone: `#chat-input`'s Enter sends a message (it does not click a button),
and the delegate's own target is the `card` parameter, not a `$("#id")`. The control flow has no
JS runner in CI, so the runtime half is carried by `ui/README.md` and its smoke-test notes.

Verified with a jsdom instrument over the real `ui/index.html` + four real scripts (only `fetch`
stubbed, answering in the backend's real shapes), driven through the real login form and the real
nav. Every control runs the same submission twice — leg A presses Enter in the control, leg B
clicks the confirm button with identical field values — so each control carries its own positive
control that refutes "this form could not submit with these values anyway":

    live (this tree)                        passed=23/23  reds={}
    pre-fix tree (6e022e1)                  passed=21/23  reds={S1b B1:model-form-card}
      -> 8 of 10 controls: Enter fired nothing, the click fired POST /api/admin/models
    guard removed (delegate fires on any Enter)  reds={D2:model-form-card D2:topup-card}
      -> Enter on the Cancel button submits the card

The two legs turn disjoint sets red, and the pre-fix red set is exactly the axis (the eight
controls). The guardless leg is the mutation that pins the direction: deleting the roster is not
enough, the delegate also has to keep "only text inputs submit" true.

- ui/js/app.js    : `wireEnterSubmit` + `NON_TEXT_INPUT_TYPES`; five cards delegated; roster gone
- src/i18n_pack.rs: CI tripwire for the shape, with detector controls
- ui/README.md    : record the rule and the smoke-test shape
- ui/index.html   : cache-bust app.js

Co-authored-by: EMRG Evolution <emrg@argszero.dev>
---
 src/i18n_pack.rs | 224 +++++++++++++++++++++++++++++++++++++++++++++++
 ui/README.md     |   8 ++
 ui/index.html    |   2 +-
 ui/js/app.js     |  57 +++++++++---
 4 files changed, 278 insertions(+), 13 deletions(-)

diff --git a/src/i18n_pack.rs b/src/i18n_pack.rs
index 612d813..890c8ab 100644
--- a/src/i18n_pack.rs
+++ b/src/i18n_pack.rs
@@ -1292,6 +1292,107 @@ mod tests {
         None
     }
 
+    /// `ui/index.html` 里声明在 `<input>` / `<select>` / `<textarea>` 上的 id（单个标签，不跨 `>`）。
+    fn form_control_ids(html: &str) -> std::collections::BTreeSet<String> {
+        let mut out = std::collections::BTreeSet::new();
+        for tag in ["<input", "<select", "<textarea"] {
+            let mut from = 0;
+            while let Some(at) = html[from..].find(tag) {
+                let start = from + at;
+                let end = start + html[start..].find('>').map(|e| e + 1).unwrap_or(0);
+                let element = &html[start..end];
+                if let Some(id) = element
+                    .split("id=\"")
+                    .nth(1)
+                    .and_then(|r| r.split('"').next())
+                {
+                    out.insert(id.to_string());
+                }
+                from = end.max(start + 1);
+            }
+        }
+        out
+    }
+
+    /// `at` 处是一个调用（形如 `.addEventListener(`），返回其**实参列表**（含括号），
+    /// 括号配平并跳过字符串 / 模板字面量里的括号。
+    fn balanced_call_args(src: &str, at: usize) -> Option<&str> {
+        let open = at + src[at..].find('(')?;
+        let bytes = src.as_bytes();
+        let (mut depth, mut i, mut quote) = (0i32, open, 0u8);
+        while i < bytes.len() {
+            let c = bytes[i];
+            if quote != 0 {
+                if c == b'\\' {
+                    i += 2;
+                    continue;
+                }
+                if c == quote {
+                    quote = 0;
+                }
+            } else if c == b'"' || c == b'\'' || c == b'`' {
+                quote = c;
+            } else if c == b'(' {
+                depth += 1;
+            } else if c == b')' {
+                depth -= 1;
+                if depth == 0 {
+                    return Some(&src[open..i + 1]);
+                }
+            }
+            i += 1;
+        }
+        None
+    }
+
+    /// 让 Enter 去**点确认按钮**（`.click(`）的 `keydown` 登记，若其目标是某个表单控件（`controls`），
+    /// 就是「逐字段登记」的形态 —— 返回这些目标 id。
+    ///
+    /// 只认「点了按钮」的登记：`#chat-input` 的 Enter 是「发送消息」（调 `sendChat()`），
+    /// 不是表单提交，不得误判；容器级委托的目标是函数参数（`card`），不是 `$("#id")`，也不进这个集合。
+    fn enter_click_registrations_on_controls(
+        src: &str,
+        controls: &std::collections::BTreeSet<String>,
+    ) -> Vec<String> {
+        let mut out = Vec::new();
+        for (at, _) in src.match_indices(".addEventListener(\"keydown\"") {
+            // 目标：登记表达式之前的那一段（`$("#id")` / `getElementById("id")` / `card`）
+            let back = src[..at]
+                .rfind([';', '{', '}', '\n'])
+                .map(|i| i + 1)
+                .unwrap_or(0);
+            let target = src[back..at].trim();
+            // 处理体：`addEventListener(` 的整个实参列表（配平括号，跳过字符串）。
+            // 不能取「到第一个 `;` 为止」—— `(e) => { if (e.key === "Enter") { e.preventDefault(); …click(); } }`
+            // 的第一处 `;` 出现在 `e.preventDefault()` 之后，会把 `.click(` 切在窗口外。
+            let body = match balanced_call_args(src, at) {
+                Some(b) => b,
+                None => continue,
+            };
+            if !body.contains("\"Enter\"") || !body.contains(".click(") {
+                continue;
+            }
+            let id = target
+                .split("\"#")
+                .nth(1)
+                .and_then(|r| r.split('"').next())
+                .or_else(|| {
+                    target
+                        .split("getElementById(\"")
+                        .nth(1)
+                        .and_then(|r| r.split('"').next())
+                });
+            if let Some(id) = id {
+                if controls.contains(id) {
+                    out.push(id.to_string());
+                }
+            }
+        }
+        out.sort();
+        out.dedup();
+        out
+    }
+
     /// 时间戳必须以**原始串**到达渲染器，格式化只能由 helper 做（C2126）。
     ///
     /// 后端用 `dao::utc_iso()` 统一序列化（`format!("{date}T{time}Z")`，见 `src/dao.rs`），
@@ -1379,4 +1480,127 @@ mod tests {
             );
         }
     }
+
+    /// 行内卡片的 Enter 提交必须**委托到容器**，不得逐字段登记（C2127）。
+    ///
+    /// 这些卡片是 `<div class="form">` / `<span class="inline-edit">` 而非真 `<form>`
+    /// （真表单见 `#share-form`：`type=submit` 按钮让浏览器自己实现隐式提交，全字段免费），
+    /// 所以 Enter 得自己实现。逐字段 `$("#某字段").addEventListener("keydown", …)` 把
+    /// 「哪些控件能提交」抄成一份**名册**，而名册不会随控件增长：模型表单曾有 10 个可输入
+    /// 控件、只登记了 2 个（厂商 / 模型名），输入价 / 缓存命中价 / 输出价 / 高峰三价 /
+    /// 上下文窗口 / 最大输出这 8 个按 Enter **毫无反应**（点「确认」都能提交）；同一页的
+    /// 部门表单却每个字段都登记了（2/2）⇒ 是漏登记，不是取舍。
+    ///
+    /// CI 里没有 JS 运行器，运行期那一半（按 Enter 到底有没有发出与点确认**相同**的请求）
+    /// 由 jsdom 仪器与 `ui/README.md` 的「行内卡片的 Enter 提交」小节承接。这里钉形状。
+    #[test]
+    fn enter_submit_is_delegated_to_the_card() {
+        let app = strip_js_comments(APP_JS);
+        let controls = form_control_ids(INDEX_HTML);
+        assert!(
+            controls.contains("model-form-in") && controls.len() > 20,
+            "ui/index.html 没读到表单控件（提取器输入为空）：{}",
+            controls.len()
+        );
+
+        // ① 不变量（派生自 markup，而非人写名册）：任何「Enter → 点确认按钮」的登记都不得
+        //    挂在 `index.html` 里声明于 input/select/textarea 的 id 上。
+        let bad = enter_click_registrations_on_controls(&app, &controls);
+        assert!(
+            bad.is_empty(),
+            "ui/js/app.js 有 {} 处逐字段登记的 Enter 提交：{bad:?} —— 卡片是 `<div class=\"form\">`，\
+             没有隐式提交，但「哪些控件能提交」不该靠人写名册（模型表单 10 个可输入控件曾只登记 2 个）。\
+             改成容器级委托 `wireEnterSubmit($(\"#卡片\"), \"#确认按钮\")`：挂冒泡，卡片里当前和以后的\
+             文本控件都自动生效",
+            bad.len()
+        );
+
+        // ② 阴性对照：提取器必须认得出修前的两种形态（否则 ① 只是恒真的形状巧合）。
+        let mut synthetic = std::collections::BTreeSet::new();
+        for id in [
+            "model-form-in",
+            "model-form-provider",
+            "dept-form-quota",
+            "chat-input",
+        ] {
+            synthetic.insert(id.to_string());
+        }
+        for (before, what) in [
+            (
+                "$(\"#model-form-in\").addEventListener(\"keydown\", (e) => { if (e.key === \"Enter\") { e.preventDefault(); $(\"#model-confirm\").click(); } });",
+                "模型表单「输入价」字段",
+            ),
+            (
+                "$(\"#dept-form-quota\").addEventListener(\"keydown\", (e) => { if (e.key === \"Enter\") { e.preventDefault(); $(\"#dept-confirm\").click(); } });",
+                "部门表单「配额」字段",
+            ),
+        ] {
+            assert_eq!(
+                enter_click_registrations_on_controls(before, &synthetic).len(),
+                1,
+                "阴性对照失败：提取器认不出逐字段登记（{what}）—— ① 等于没写"
+            );
+        }
+        //    阳性对照：同样挂在控件上、但**不点按钮**的 Enter（聊天输入框 = 发送消息）不得误判；
+        //    容器级委托的目标是函数参数 `card`，也不得误判。
+        for (after, what) in [
+            (
+                "$(\"#chat-input\").addEventListener(\"keydown\", (e) => { if (e.key === \"Enter\") sendChat(); });",
+                "聊天输入框（发送消息，不是表单提交）",
+            ),
+            (
+                "card.addEventListener(\"keydown\", (e) => { if (e.key !== \"Enter\") return; btn.click(); });",
+                "容器级委托本身",
+            ),
+        ] {
+            assert!(
+                enter_click_registrations_on_controls(after, &synthetic).is_empty(),
+                "阳性对照失败：提取器把合法形态判成违规（{what}：{after}）"
+            );
+        }
+
+        // ③ 委托的加载器本身：登记在**容器参数**上，并早退非文本输入（否则焦点在「取消」上
+        //    按 Enter 会同时触发取消与提交）。
+        let body = js_function_body(&app, "function wireEnterSubmit(")
+            .expect("ui/js/app.js 里找不到 wireEnterSubmit 的函数体");
+        assert!(
+            body.contains("card.addEventListener(\"keydown\""),
+            "wireEnterSubmit 不再把 keydown 挂在**容器**上：{body}"
+        );
+        assert!(
+            body.contains("tagName !== \"INPUT\"") && body.contains("NON_TEXT_INPUT_TYPES"),
+            "wireEnterSubmit 不再早退非文本输入控件：勾选框 / 下拉 / 按钮上的 Enter 不该提交，\
+             而且早退 `button` 才能避免「在『取消』上按 Enter 同时触发取消与提交」"
+        );
+        assert!(
+            body.contains("btn.click()"),
+            "wireEnterSubmit 不再点确认按钮：忙碌态（withLoading）、字段校验与请求都留在确认按钮\
+             自己的监听器里，委托不得复制一份"
+        );
+
+        // ④ 五张行内卡片都必须走这个 helper。这一条是**卡片的**名册（5 个、每个都是有意的动作），
+        //    不是**字段的**名册（模型表单里 10 个字段就是这么长出来的）；数量断言让「新增卡片却
+        //    另写一套」必须先改这里，而字段级遗漏已由 ① 兜住。
+        let mut calls = 0;
+        for card in [
+            "topup-card",
+            "raise-card",
+            "ak-new-inline",
+            "dept-form-card",
+            "model-form-card",
+        ] {
+            let call = format!("wireEnterSubmit($(\"#{card}\")");
+            assert!(
+                app.contains(&call),
+                "行内卡片 #{card} 没有走 wireEnterSubmit —— 它的 Enter 提交要么缺失、要么又回到了逐字段登记"
+            );
+            calls += app.match_indices(&call).count();
+        }
+        assert_eq!(
+            calls,
+            app.matches("wireEnterSubmit($(\"#").count(),
+            "wireEnterSubmit 的调用数与卡片数不一致：新增卡片请同步 ④ 的清单（并确认它是真 <form> \
+             还是需要委托）"
+        );
+    }
 }
diff --git a/ui/README.md b/ui/README.md
index ace562a..547689b 100644
--- a/ui/README.md
+++ b/ui/README.md
@@ -396,3 +396,11 @@ ui/
 - **CI 覆盖**：`src/i18n_pack.rs::wire_timestamps_reach_the_renderer_unsliced` 钉两件事 —— `_at` / `last_used` 这类线上字段不得被 `.slice()` / `.replace()` 原地加工（含阴性对照：提取器必须认得出修前的两种形态、并放过 `fmtPrecise(...).slice(...)` 与纯透传 `last: k.last_used || null`），以及 `txsToView` 返回的视图行里 `time` 必须是裸值。
 - **冒烟测试注意**：jsdom 启真 `index.html` + 四脚本、只 stub `fetch`，夹具必须带**非零秒**（`2026-09-13T16:30:45Z`）—— 用 `:00` 的夹具看不见第 ③ 面（改前改后都是 `:00`）。三面的期望值都从夹具用 `Date` **独立算出**（本地时间/本地日期），不要抄 helper 的输出。**时区是前提而不是细节**：`TZ=UTC` 下本地 == UTC，本轴整体不可见，探针必须先断言时区。
 
+## 行内卡片的 Enter 提交：容器级委托，不逐字段登记（C2127）
+
+- **两类容器，两条路**：`#share-form` 是**真 `<form>`**（配合 `type="submit"` 按钮，浏览器自己实现隐式提交，所有字段免费获得 Enter）；其余行内卡片是 `<div class="form">` / `<span class="inline-edit">`（`#topup-card` / `#raise-card` / `#dept-form-card` / `#model-form-card` / `#ak-new-inline`），隐式提交不存在，得自己实现。
+- **不变量**：**Enter 提交挂在容器上（`wireEnterSubmit($("#某卡片"), "#某确认按钮")`），不得逐字段登记**。逐字段 `$("#某字段").addEventListener("keydown", …)` 等于把「哪些控件能提交」抄成一份**名册**，而名册不会随控件增长 —— 模型表单曾有 10 个可输入控件、只登记了 2 个（厂商 / 模型名），输入价 / 缓存命中价 / 输出价 / 高峰三价 / 上下文窗口 / 最大输出这 8 个按 Enter 毫无反应（点「确认」都能提交）；而同页的部门表单每个字段都登记了（2/2）⇒ 是漏登记，不是取舍。
+- **哪类控件算「提交」**：只有文本类输入控件（`NON_TEXT_INPUT_TYPES` = checkbox / radio / button / submit / reset / file / range / color / hidden 之外）。这与真 `<form>` 的隐式提交一致；焦点在「取消」上按 Enter 更不该提交（这正是委托到容器时要早退 `button` 的原因）。
+- **请求只走一处**：委托只 `btn.click()`，不自己复制一遍校验与请求 —— 忙碌态（`withLoading`）、字段校验、API 调用都留在确认按钮自己的监听器里。
+- **CI 覆盖**：`src/i18n_pack.rs::enter_submit_is_delegated_to_the_card` 钉形状 —— ① 任何让 Enter 去点确认按钮的 `keydown` 登记都不得挂在 `ui/index.html` 里声明于 `input` / `select` / `textarea` 的 id 上（阳性对照：`#chat-input` 的 Enter 是「发送消息」不是「提交表单」，不点按钮 ⇒ 不得被误判）；② `wireEnterSubmit` 必须在容器参数上登记、早退非 `INPUT` 与非文本类型；③ 五张卡片都必须走这个 helper，且 helper 调用数与卡片数相等。
+- **冒烟测试注意**：每个控件跑**同一件事两遍** —— 在控件里按 Enter vs 用**相同的字段值**点确认按钮，比较是否发出了同一个请求（点确认那一遍是控件**自带的阳性对照**，排除「这个表单本来就用这些值提交不了」）。⚠️ `withLoading` 会把提交推迟 **320ms**，等待须 > 320ms，且每条腿前清空请求记录，否则会读到上一条腿的请求（结论完全反向）。
diff --git a/ui/index.html b/ui/index.html
index 2b54339..0cb806f 100644
--- a/ui/index.html
+++ b/ui/index.html
@@ -845,6 +845,6 @@ <h3 id="chat-title">使用模型</h3>
 <script src="js/api.js?v=20260914-13"></script>
 <script src="js/data.js?v=20260914-11"></script>
 <script src="js/i18n.js?v=20260914-12"></script>
-<script src="js/app.js?v=20260915-1"></script>
+<script src="js/app.js?v=20260915-2"></script>
 </body>
 </html>
diff --git a/ui/js/app.js b/ui/js/app.js
index d644dca..776dda6 100644
--- a/ui/js/app.js
+++ b/ui/js/app.js
@@ -172,6 +172,39 @@
     }, ms || 320);
   }
 
+  /* --- 行内表单卡片的 Enter 提交（C2127） --- */
+
+  // 哪些输入控件按 Enter 等于「提交」：文本类。非文本类（勾选框 / 单选框 / 下拉 / 文件 /
+  // 范围 / 颜色 / 隐藏域）按 Enter 不提交 —— 真 `<form>` 的隐式提交也是这个规则，
+  // 这里刻意对齐它，别自己发明一套。
+  const NON_TEXT_INPUT_TYPES = ["checkbox", "radio", "button", "submit", "reset", "file", "range", "color", "hidden"];
+
+  // 把「Enter 提交」挂到**容器**上，而不是逐字段登记（C2127）。
+  //
+  // 这些卡片是 `<div class="form">` / `<span class="inline-edit">` 而非真 `<form>`
+  // （真表单见 `#share-form`：`type=submit` 按钮让浏览器自己实现隐式提交，全字段免费），
+  // 所以 Enter 得自己实现。逐字段 `$("#某字段").addEventListener("keydown", …)` 等于把
+  // 「哪些控件能提交」抄成一份**名册** —— 而名册不会随控件增长：模型表单曾有 10 个可输入
+  // 控件、只登记了 2 个，另外 8 个（输入价 / 输出价 / 上下文窗口 …）按 Enter 毫无反应，
+  // 用户只会以为界面卡住；同一页的部门表单却每个字段都登记了（2/2）⇒ 漂移不是取舍。
+  //
+  // 容器级委托挂在事件冒泡上 ⇒ 卡片里**当前和以后**的文本控件都自动生效，名册消失。
+  function wireEnterSubmit(card, confirmSel) {
+    if (!card) return;
+    card.addEventListener("keydown", (e) => {
+      if (e.key !== "Enter") return;
+      const t = e.target;
+      // 只认「往里打字」的控件：焦点在按钮/勾选框/下拉上按 Enter 不提交
+      // （否则在「取消」上按 Enter 会同时触发取消与提交）。
+      if (!t || t.tagName !== "INPUT") return;
+      if (NON_TEXT_INPUT_TYPES.includes((t.type || "text").toLowerCase())) return;
+      const btn = $(confirmSel);
+      if (!btn || btn.disabled) return;
+      e.preventDefault();
+      btn.click(); // 走确认按钮自己的监听器（忙碌态、校验、请求都在那一处，不重复实现）
+    });
+  }
+
   /* --- 行内校验错误（rant 16:57:17 E：红边框 + 字段下方行内错误文案，修正后自动清除） --- */
 
   // 在输入框下方显示行内错误文案，并给输入框加红边框；输入修正时自动清除
@@ -3740,9 +3773,9 @@
     $("#topup-cancel").addEventListener("click", closeTopup);
     $("#raise-cancel").addEventListener("click", closeRaise);
     // 键盘可达（rant 15:50:05 B.9）：Enter 提交、Esc 关闭行内编辑
-    $("#topup-custom").addEventListener("keydown", (e) => { if (e.key === "Enter") $("#topup-confirm").click(); });
-    $("#raise-amount").addEventListener("keydown", (e) => { if (e.key === "Enter") $("#raise-confirm").click(); });
-    $("#raise-reason").addEventListener("keydown", (e) => { if (e.key === "Enter") $("#raise-confirm").click(); });
+    // Enter 走容器级委托（C2127）：卡片里每个文本控件都生效，且新增字段不用再登记。
+    wireEnterSubmit($("#topup-card"), "#topup-confirm");
+    wireEnterSubmit($("#raise-card"), "#raise-confirm");
     ["topup-card", "raise-card"].forEach((id) => {
       document.getElementById(id).addEventListener("keydown", (e) => {
         if (e.key === "Escape") { document.getElementById(id).hidden = true; }
@@ -3822,10 +3855,9 @@
     $("#new-api-key-btn").addEventListener("click", openNewKeyInline);
     $("#ak-new-ok").addEventListener("click", commitNewKey);
     $("#ak-new-cancel").addEventListener("click", closeNewKeyInline);
-    $("#ak-new-name").addEventListener("keydown", (e) => {
-      if (e.key === "Enter") commitNewKey();
-      else if (e.key === "Escape") closeNewKeyInline();
-    });
+    // Enter 提交走容器级委托（C2127）；Esc 收起由容器自己管。
+    wireEnterSubmit($("#ak-new-inline"), "#ak-new-ok");
+    $("#ak-new-inline").addEventListener("keydown", (e) => { if (e.key === "Escape") closeNewKeyInline(); });
 
     // API Key 搜索 + 行内操作（复制 / 改名 / 删除[行内二次确认]）
     wireSearch($("#ak-search"), renderSettings);
@@ -3902,9 +3934,8 @@
     $("#add-dept-btn").addEventListener("click", () => openDeptForm(null));
     $("#dept-confirm").addEventListener("click", (e) => withLoading(e.currentTarget, confirmDept));
     $("#dept-cancel").addEventListener("click", () => { $("#dept-form-card").hidden = true; });
-    // 键盘可达（B.9）：部门表单 Enter 提交、Esc 收起
-    $("#dept-form-name").addEventListener("keydown", (e) => { if (e.key === "Enter") { e.preventDefault(); $("#dept-confirm").click(); } });
-    $("#dept-form-quota").addEventListener("keydown", (e) => { if (e.key === "Enter") { e.preventDefault(); $("#dept-confirm").click(); } });
+    // 键盘可达（B.9）：部门表单 Enter 提交、Esc 收起。Enter 走容器级委托（C2127）。
+    wireEnterSubmit($("#dept-form-card"), "#dept-confirm");
     $("#dept-form-card").addEventListener("keydown", (e) => { if (e.key === "Escape") { $("#dept-form-card").hidden = true; } });
 
     $("#dept-body").addEventListener("click", (e) => {
@@ -3924,8 +3955,10 @@
     $("#add-model-btn").addEventListener("click", () => openModelForm(null));
     $("#model-confirm").addEventListener("click", (e) => withLoading(e.currentTarget, confirmModel));
     $("#model-cancel").addEventListener("click", () => { $("#model-form-card").hidden = true; });
-    $("#model-form-provider").addEventListener("keydown", (e) => { if (e.key === "Enter") { e.preventDefault(); $("#model-confirm").click(); } });
-    $("#model-form-model").addEventListener("keydown", (e) => { if (e.key === "Enter") { e.preventDefault(); $("#model-confirm").click(); } });
+    // Enter 提交由容器级委托统一提供（C2127）：这里原先是**逐字段**登记，而名册只写了
+    // 「厂商」「模型名」两个 —— 输入价 / 缓存命中价 / 输出价 / 高峰三价 / 上下文窗口 /
+    // 最大输出这 8 个控件按 Enter 毫无反应（点确认都能提交）。
+    wireEnterSubmit($("#model-form-card"), "#model-confirm");
     $("#model-form-card").addEventListener("keydown", (e) => { if (e.key === "Escape") { $("#model-form-card").hidden = true; } });
 
     $("#model-body").addEventListener("click", (e) => {