diff --git a/app/Console/Commands/Store/DeductDailyPointsCommand.php b/app/Console/Commands/Store/DeductDailyPointsCommand.php
new file mode 100644
index 0000000000..d0eba4037a
--- /dev/null
+++ b/app/Console/Commands/Store/DeductDailyPointsCommand.php
@@ -0,0 +1,85 @@
+<?php
+
+namespace Pterodactyl\Console\Commands\Store;
+
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Pterodactyl\Models\Server;
+use Pterodactyl\Models\UserPoints;
+use Pterodactyl\Models\PointTransaction;
+use Pterodactyl\Services\Store\PointsCalculator;
+
+/**
+ * Deducts daily points from each user based on the servers they own.
+ * Servers that are suspended or have no point cost assigned are skipped.
+ * If a user runs out of points their server is suspended automatically.
+ *
+ * Schedule: daily (registered in Console\Kernel)
+ */
+class DeductDailyPointsCommand extends Command
+{
+    protected $signature = 'p:store:deduct-daily-points';
+
+    protected $description = 'Deduct daily points from users based on their running servers\' resource costs.';
+
+    public function __construct(private readonly PointsCalculator $calculator)
+    {
+        parent::__construct();
+    }
+
+    public function handle(): void
+    {
+        // Only process fully installed, non-suspended servers.
+        $servers = Server::query()
+            ->where(function ($q) {
+                $q->whereNull('status')->orWhere('status', '');
+            })
+            ->get()
+            ->filter(fn (Server $s) => $s->isInstalled() && !$s->isSuspended());
+
+        $deductedCount = 0;
+        $suspendedCount = 0;
+
+        foreach ($servers as $server) {
+            $cost = $server->points_per_day ?? $this->calculator->forServer($server);
+
+            // Persist the calculated cost if not already stored.
+            if (is_null($server->points_per_day)) {
+                $server->forceFill(['points_per_day' => $cost])->save();
+            }
+
+            DB::transaction(function () use ($server, $cost, &$deductedCount, &$suspendedCount) {
+                $points = UserPoints::firstOrCreate(
+                    ['user_id' => $server->owner_id],
+                    ['balance' => 0]
+                );
+
+                if ($points->balance < $cost) {
+                    // Not enough points — suspend the server.
+                    $server->forceFill(['status' => Server::STATUS_SUSPENDED])->save();
+                    $suspendedCount++;
+
+                    PointTransaction::create([
+                        'user_id'     => $server->owner_id,
+                        'amount'      => 0,
+                        'type'        => 'spend',
+                        'description' => "积分不足，服务器 [{$server->name}] 已被暂停。",
+                    ]);
+                } else {
+                    $points->decrement('balance', $cost);
+
+                    PointTransaction::create([
+                        'user_id'     => $server->owner_id,
+                        'amount'      => -$cost,
+                        'type'        => 'spend',
+                        'description' => "服务器 [{$server->name}] 每日扣除 {$cost} 积分。",
+                    ]);
+
+                    $deductedCount++;
+                }
+            });
+        }
+
+        $this->info("完成：已从 {$deductedCount} 台服务器扣除积分，已暂停 {$suspendedCount} 台积分不足的服务器。");
+    }
+}
diff --git a/app/Console/Kernel.php b/app/Console/Kernel.php
index 56343297c4..365a1b09ed 100644
--- a/app/Console/Kernel.php
+++ b/app/Console/Kernel.php
@@ -12,6 +12,7 @@
 use Pterodactyl\Console\Commands\Schedule\ProcessRunnableCommand;
 use Pterodactyl\Console\Commands\Maintenance\PruneOrphanedBackupsCommand;
 use Pterodactyl\Console\Commands\Maintenance\CleanServiceBackupFilesCommand;
+use Pterodactyl\Console\Commands\Store\DeductDailyPointsCommand;
 
 class Kernel extends ConsoleKernel
 {
@@ -34,6 +35,7 @@ protected function schedule(Schedule $schedule): void
         // Execute scheduled commands for servers every minute, as if there was a normal cron running.
         $schedule->command(ProcessRunnableCommand::class)->everyMinute()->withoutOverlapping();
         $schedule->command(CleanServiceBackupFilesCommand::class)->daily();
+        $schedule->command(DeductDailyPointsCommand::class)->dailyAt('03:00');
 
         if (config('backups.prune_age')) {
             // Every 30 minutes, run the backup pruning command so that any abandoned backups can be deleted.
diff --git a/app/Http/Controllers/Admin/Store/OrderAdminController.php b/app/Http/Controllers/Admin/Store/OrderAdminController.php
new file mode 100644
index 0000000000..2630484489
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/OrderAdminController.php
@@ -0,0 +1,100 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\DB;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\Order;
+use Pterodactyl\Http\Controllers\Api\Client\PaymentController;
+use Pterodactyl\Http\Controllers\Controller;
+
+class OrderAdminController extends Controller
+{
+    public function __construct(
+        private readonly AlertsMessageBag $alert,
+        private readonly PaymentController $payment,
+    ) {
+    }
+
+    public function index(Request $request): View
+    {
+        $query = Order::query()->with(['user', 'product'])->orderByDesc('created_at');
+
+        if ($search = $request->input('filter.order_no')) {
+            $query->where('order_no', 'like', "%{$search}%");
+        }
+        if ($status = $request->input('filter.status')) {
+            $query->where('status', $status);
+        }
+
+        return view('admin.store.orders.index', [
+            'orders' => $query->paginate(30),
+        ]);
+    }
+
+    /**
+     * Manually mark an order as paid and trigger fulfillment.
+     */
+    public function complete(int $id): RedirectResponse
+    {
+        $order = Order::findOrFail($id);
+
+        if ($order->isPaid()) {
+            $this->alert->warning('该订单已经是已支付状态。')->flash();
+            return redirect()->route('admin.store.orders');
+        }
+
+        DB::transaction(function () use ($order) {
+            $order->update([
+                'status'  => Order::STATUS_PAID,
+                'paid_at' => now(),
+            ]);
+            $this->payment->fulfillOrder($order);
+        });
+
+        $this->alert->success("订单 [{$order->order_no}] 已手动标记为已支付并完成发货。")->flash();
+
+        return redirect()->route('admin.store.orders');
+    }
+
+    /**
+     * Cancel a pending or paid order.
+     */
+    public function cancel(int $id): RedirectResponse
+    {
+        $order = Order::findOrFail($id);
+        $order->update(['status' => Order::STATUS_CANCELLED]);
+
+        $this->alert->success("订单 [{$order->order_no}] 已取消。")->flash();
+
+        return redirect()->route('admin.store.orders');
+    }
+
+    /**
+     * Mark an order as refunded.
+     */
+    public function refund(int $id): RedirectResponse
+    {
+        $order = Order::findOrFail($id);
+        $order->update(['status' => Order::STATUS_REFUNDED]);
+
+        $this->alert->success("订单 [{$order->order_no}] 已标记为已退款。")->flash();
+
+        return redirect()->route('admin.store.orders');
+    }
+
+    /**
+     * Permanently delete an order.
+     */
+    public function destroy(int $id): RedirectResponse
+    {
+        Order::findOrFail($id)->delete();
+
+        $this->alert->success('订单已删除。')->flash();
+
+        return redirect()->route('admin.store.orders');
+    }
+}
diff --git a/app/Http/Controllers/Admin/Store/PaymentSettingsController.php b/app/Http/Controllers/Admin/Store/PaymentSettingsController.php
new file mode 100644
index 0000000000..d0ab325976
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/PaymentSettingsController.php
@@ -0,0 +1,46 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\PaymentSetting;
+use Pterodactyl\Http\Controllers\Controller;
+
+class PaymentSettingsController extends Controller
+{
+    public function __construct(private readonly AlertsMessageBag $alert)
+    {
+    }
+
+    public function index(): View
+    {
+        return view('admin.store.payment-settings.index', [
+            'settings' => PaymentSetting::allAsArray(),
+        ]);
+    }
+
+    public function update(Request $request): RedirectResponse
+    {
+        $keys = [
+            'alipay_enabled', 'alipay_app_id', 'alipay_private_key', 'alipay_public_key',
+            'alipay_face_enabled', 'alipay_face_code',
+            'wechat_enabled', 'wechat_app_id', 'wechat_mch_id', 'wechat_api_key',
+        ];
+
+        foreach ($keys as $key) {
+            // Checkboxes send no value when unchecked, so treat absence as '0'.
+            if (str_ends_with($key, '_enabled')) {
+                PaymentSetting::set($key, $request->has($key) ? '1' : '0');
+            } else {
+                PaymentSetting::set($key, $request->input($key, ''));
+            }
+        }
+
+        $this->alert->success('支付设置已保存。')->flash();
+
+        return redirect()->route('admin.store.payment-settings');
+    }
+}
diff --git a/app/Http/Controllers/Admin/Store/PointsAdminController.php b/app/Http/Controllers/Admin/Store/PointsAdminController.php
new file mode 100644
index 0000000000..fba9fbc513
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/PointsAdminController.php
@@ -0,0 +1,66 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\DB;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\User;
+use Pterodactyl\Models\UserPoints;
+use Pterodactyl\Models\PointTransaction;
+use Pterodactyl\Http\Controllers\Controller;
+
+class PointsAdminController extends Controller
+{
+    public function __construct(private readonly AlertsMessageBag $alert)
+    {
+    }
+
+    public function index(Request $request): View
+    {
+        $query = User::query()
+            ->select('users.*')
+            ->selectRaw('COALESCE(up.balance, 0) as points_balance')
+            ->leftJoin('user_points as up', 'up.user_id', '=', 'users.id');
+
+        if ($search = $request->input('filter.email')) {
+            $query->where('users.email', 'like', "%{$search}%");
+        }
+
+        return view('admin.store.points.index', [
+            'users' => $query->orderByDesc('points_balance')->paginate(50),
+        ]);
+    }
+
+    public function adjust(Request $request, int $userId): RedirectResponse
+    {
+        $data = $request->validate([
+            'amount'      => 'required|integer|not_in:0',
+            'description' => 'nullable|string|max:191',
+        ]);
+
+        $user = User::findOrFail($userId);
+
+        DB::transaction(function () use ($user, $data) {
+            $points = UserPoints::firstOrCreate(
+                ['user_id' => $user->id],
+                ['balance' => 0]
+            );
+            $points->increment('balance', $data['amount']);
+
+            PointTransaction::create([
+                'user_id'     => $user->id,
+                'amount'      => $data['amount'],
+                'type'        => 'admin_adjust',
+                'description' => $data['description'] ?? '管理员调整',
+            ]);
+        });
+
+        $verb = $data['amount'] > 0 ? '增加' : '减少';
+        $this->alert->success("已为用户 {$user->email} {$verb} " . abs($data['amount']) . " 积分。")->flash();
+
+        return redirect()->route('admin.store.points');
+    }
+}
diff --git a/app/Http/Controllers/Admin/Store/ProductController.php b/app/Http/Controllers/Admin/Store/ProductController.php
new file mode 100644
index 0000000000..b68e96d055
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/ProductController.php
@@ -0,0 +1,125 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\Product;
+use Pterodactyl\Models\Location;
+use Pterodactyl\Models\Node;
+use Pterodactyl\Models\Egg;
+use Pterodactyl\Services\Store\PointsCalculator;
+use Pterodactyl\Http\Controllers\Controller;
+
+class ProductController extends Controller
+{
+    public function __construct(
+        private readonly AlertsMessageBag $alert,
+        private readonly PointsCalculator $calculator,
+    ) {
+    }
+
+    public function index(): View
+    {
+        return view('admin.store.products.index', [
+            'products'    => Product::query()->orderBy('sort_order')->orderBy('price')->paginate(50),
+            'cpu_rate'    => $this->calculator->getCpuRatePerCore(),
+            'memory_rate' => $this->calculator->getMemoryRatePerGb(),
+            'disk_rate'   => $this->calculator->getDiskRatePerGb(),
+        ]);
+    }
+
+    public function create(): View
+    {
+        return view('admin.store.products.new', [
+            'product'      => null,
+            'locations'    => Location::all(),
+            'nodes'        => Node::all(),
+            'eggs'         => Egg::with('nest')->orderBy('name')->get(),
+            'cpu_rate'     => $this->calculator->getCpuRatePerCore(),
+            'memory_rate'  => $this->calculator->getMemoryRatePerGb(),
+            'disk_rate'    => $this->calculator->getDiskRatePerGb(),
+        ]);
+    }
+
+    public function store(Request $request): RedirectResponse
+    {
+        $data = $this->validateProduct($request);
+        Product::create($data);
+        $this->alert->success('商品已创建。')->flash();
+        return redirect()->route('admin.store.products');
+    }
+
+    public function edit(int $id): View
+    {
+        return view('admin.store.products.new', [
+            'product'      => Product::findOrFail($id),
+            'locations'    => Location::all(),
+            'nodes'        => Node::all(),
+            'eggs'         => Egg::with('nest')->orderBy('name')->get(),
+            'cpu_rate'     => $this->calculator->getCpuRatePerCore(),
+            'memory_rate'  => $this->calculator->getMemoryRatePerGb(),
+            'disk_rate'    => $this->calculator->getDiskRatePerGb(),
+        ]);
+    }
+
+    public function update(Request $request, int $id): RedirectResponse
+    {
+        $data = $this->validateProduct($request);
+        Product::findOrFail($id)->update($data);
+        $this->alert->success('商品已更新。')->flash();
+        return redirect()->route('admin.store.products');
+    }
+
+    public function destroy(int $id): RedirectResponse
+    {
+        Product::findOrFail($id)->delete();
+        $this->alert->success('商品已删除。')->flash();
+        return redirect()->route('admin.store.products');
+    }
+
+    private function validateProduct(Request $request): array
+    {
+        $isServer = $request->input('type') === 'server';
+
+        $data = $request->validate([
+            'name'        => 'required|string|max:191',
+            'description' => 'nullable|string|max:1000',
+            'type'        => 'required|string|in:points,server_days,server,custom',
+            'value'       => 'required|integer|min:0',
+            'price'       => 'required|numeric|min:0',
+            'currency'    => 'required|string|max:8',
+            'is_active'   => 'sometimes|boolean',
+            'sort_order'  => 'nullable|integer|min:0',
+            // Server package fields
+            'location_id'        => 'nullable|integer|exists:locations,id',
+            'node_id'            => 'nullable|integer|exists:nodes,id',
+            'egg_id'             => 'nullable|integer|exists:eggs,id',
+            'cpu'                => 'nullable|integer|min:0',
+            'memory'             => 'nullable|integer|min:0',
+            'disk'               => 'nullable|integer|min:0',
+            'databases'          => 'nullable|integer|min:0',
+            'backups'            => 'nullable|integer|min:0',
+            'allocations'        => 'nullable|integer|min:0',
+            // Per-product daily-points rates
+            'points_cpu_rate'    => 'nullable|integer|min:0',
+            'points_memory_rate' => 'nullable|integer|min:0',
+            'points_disk_rate'   => 'nullable|integer|min:0',
+        ]);
+
+        $data['is_active']  = $request->boolean('is_active');
+        $data['sort_order'] = $data['sort_order'] ?? 0;
+
+        // Clear server-only fields when type is not 'server'
+        if (!$isServer) {
+            foreach (['location_id','node_id','egg_id','cpu','memory','disk','databases','backups','allocations',
+                      'points_cpu_rate','points_memory_rate','points_disk_rate'] as $f) {
+                $data[$f] = null;
+            }
+        }
+
+        return $data;
+    }
+}
diff --git a/app/Http/Controllers/Admin/Store/RedemptionCodeAdminController.php b/app/Http/Controllers/Admin/Store/RedemptionCodeAdminController.php
new file mode 100644
index 0000000000..269cbdbf6a
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/RedemptionCodeAdminController.php
@@ -0,0 +1,58 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Str;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\RedemptionCode;
+use Pterodactyl\Http\Controllers\Controller;
+
+class RedemptionCodeAdminController extends Controller
+{
+    public function __construct(private readonly AlertsMessageBag $alert)
+    {
+    }
+
+    public function index(): View
+    {
+        return view('admin.store.redemption-codes.index', [
+            'codes' => RedemptionCode::query()
+                ->withCount('uses')
+                ->orderByDesc('created_at')
+                ->paginate(50),
+        ]);
+    }
+
+    public function store(Request $request): RedirectResponse
+    {
+        $data = $request->validate([
+            'code'          => 'nullable|string|max:64|unique:redemption_codes,code',
+            'type'          => 'required|string|in:points,days',
+            'value'         => 'required|integer|min:1',
+            'uses_total'    => 'required|integer|min:1',
+            'expires_at'    => 'nullable|date',
+        ]);
+
+        // Auto-generate a code if not provided.
+        $data['code'] = $data['code'] ?: strtoupper(Str::random(12));
+        $data['uses_remaining'] = $data['uses_total'];
+
+        RedemptionCode::create($data);
+
+        $this->alert->success("兑换码 [{$data['code']}] 已创建。")->flash();
+
+        return redirect()->route('admin.store.redemption-codes');
+    }
+
+    public function destroy(int $id): RedirectResponse
+    {
+        RedemptionCode::findOrFail($id)->delete();
+
+        $this->alert->success('兑换码已删除。')->flash();
+
+        return redirect()->route('admin.store.redemption-codes');
+    }
+}
diff --git a/app/Http/Controllers/Admin/Store/TicketAdminController.php b/app/Http/Controllers/Admin/Store/TicketAdminController.php
new file mode 100644
index 0000000000..7f0a845331
--- /dev/null
+++ b/app/Http/Controllers/Admin/Store/TicketAdminController.php
@@ -0,0 +1,94 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Admin\Store;
+
+use Illuminate\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Http\RedirectResponse;
+use Prologue\Alerts\AlertsMessageBag;
+use Pterodactyl\Models\Ticket;
+use Pterodactyl\Models\TicketReply;
+use Pterodactyl\Http\Controllers\Controller;
+
+class TicketAdminController extends Controller
+{
+    public function __construct(private readonly AlertsMessageBag $alert)
+    {
+    }
+
+    public function index(Request $request): View
+    {
+        $query = Ticket::query()
+            ->with('user')
+            ->withCount('replies')
+            ->orderByDesc('created_at');
+
+        if ($status = $request->input('filter.status')) {
+            $query->where('status', $status);
+        }
+        if ($priority = $request->input('filter.priority')) {
+            $query->where('priority', $priority);
+        }
+
+        return view('admin.store.tickets.index', [
+            'tickets' => $query->paginate(30),
+        ]);
+    }
+
+    public function view(int $id): View
+    {
+        $ticket = Ticket::with([
+            'user',
+            'replies' => fn ($q) => $q->with('user')->orderBy('created_at'),
+        ])->findOrFail($id);
+
+        return view('admin.store.tickets.view', ['ticket' => $ticket]);
+    }
+
+    public function reply(Request $request, int $id): RedirectResponse
+    {
+        $ticket = Ticket::findOrFail($id);
+
+        $data = $request->validate(['content' => 'required|string|max:65535']);
+
+        TicketReply::create([
+            'ticket_id' => $ticket->id,
+            'user_id'   => $request->user()->id,
+            'content'   => $data['content'],
+            'is_staff'  => true,
+        ]);
+
+        $ticket->update([
+            'last_reply_at' => now(),
+            'status'        => Ticket::STATUS_IN_PROGRESS,
+        ]);
+
+        $this->alert->success('回复已发送。')->flash();
+
+        return redirect()->route('admin.store.tickets.view', $ticket->id);
+    }
+
+    public function updateStatus(Request $request, int $id): RedirectResponse
+    {
+        $ticket = Ticket::findOrFail($id);
+
+        $data = $request->validate([
+            'status' => 'required|string|in:open,in_progress,closed',
+        ]);
+
+        $ticket->update(['status' => $data['status']]);
+
+        $this->alert->success('工单状态已更新。')->flash();
+
+        return redirect()->route('admin.store.tickets.view', $ticket->id);
+    }
+
+    public function destroy(int $id): RedirectResponse
+    {
+        Ticket::findOrFail($id)->delete();
+
+        $this->alert->success('工单已删除。')->flash();
+
+        return redirect()->route('admin.store.tickets');
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/OrderController.php b/app/Http/Controllers/Api/Client/OrderController.php
new file mode 100644
index 0000000000..4770b8866e
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/OrderController.php
@@ -0,0 +1,63 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Pterodactyl\Models\Order;
+
+class OrderController extends ClientApiController
+{
+    /**
+     * List all orders for the authenticated user (newest first).
+     */
+    public function index(Request $request): JsonResponse
+    {
+        $orders = Order::where('user_id', $request->user()->id)
+            ->with('product')
+            ->orderByDesc('created_at')
+            ->paginate(20);
+
+        return new JsonResponse([
+            'data' => $orders->map(fn (Order $o) => $this->transform($o)),
+            'meta' => [
+                'total'        => $orders->total(),
+                'current_page' => $orders->currentPage(),
+                'last_page'    => $orders->lastPage(),
+            ],
+        ]);
+    }
+
+    /**
+     * Cancel a pending order belonging to the authenticated user.
+     */
+    public function cancel(Request $request, string $orderNo): JsonResponse
+    {
+        $order = Order::where('order_no', $orderNo)
+            ->where('user_id', $request->user()->id)
+            ->firstOrFail();
+
+        if (!$order->isPending()) {
+            return new JsonResponse(['message' => '只有待支付订单可以取消。'], 422);
+        }
+
+        $order->update(['status' => Order::STATUS_CANCELLED]);
+
+        return new JsonResponse(['success' => true]);
+    }
+
+    private function transform(Order $o): array
+    {
+        return [
+            'order_no'       => $o->order_no,
+            'subject'        => $o->subject,
+            'product_name'   => $o->product?->name,
+            'amount'         => $o->amount,
+            'currency'       => $o->currency,
+            'status'         => $o->status,
+            'payment_method' => $o->payment_method,
+            'paid_at'        => $o->paid_at?->toIso8601String(),
+            'created_at'     => $o->created_at?->toIso8601String(),
+        ];
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/PaymentController.php b/app/Http/Controllers/Api/Client/PaymentController.php
new file mode 100644
index 0000000000..1496c2eae2
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/PaymentController.php
@@ -0,0 +1,176 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Str;
+use Illuminate\Support\Facades\DB;
+use Pterodactyl\Models\Order;
+use Pterodactyl\Models\Product;
+use Pterodactyl\Models\UserPoints;
+use Pterodactyl\Models\PointTransaction;
+use Pterodactyl\Models\PaymentSetting;
+use Pterodactyl\Exceptions\DisplayException;
+
+class PaymentController extends ClientApiController
+{
+    /**
+     * Create a new order for the given product.
+     *
+     * @throws \Pterodactyl\Exceptions\DisplayException
+     */
+    public function createOrder(Request $request): JsonResponse
+    {
+        $request->validate([
+            'product_id'     => 'required|integer|exists:products,id',
+            'payment_method' => 'required|string|in:alipay,alipay_face,wechat',
+        ]);
+
+        $method = $request->input('payment_method');
+
+        // Check that the chosen payment method is actually enabled.
+        if (!PaymentSetting::isEnabled($method)) {
+            throw new DisplayException('所选支付方式当前不可用。');
+        }
+
+        $product = Product::where('id', $request->input('product_id'))
+            ->where('is_active', true)
+            ->firstOrFail();
+
+        $order = Order::create([
+            'order_no'       => date('YmdHis') . strtoupper(Str::random(8)),
+            'user_id'        => $request->user()->id,
+            'product_id'     => $product->id,
+            'subject'        => $product->name,
+            'amount'         => $product->price,
+            'currency'       => $product->currency,
+            'status'         => Order::STATUS_PENDING,
+            'payment_method' => $method,
+        ]);
+
+        $paymentInfo = $this->buildPaymentInfo($order, $method);
+
+        return new JsonResponse([
+            'order_no'       => $order->order_no,
+            'amount'         => $order->amount,
+            'currency'       => $order->currency,
+            'payment_method' => $order->payment_method,
+            'payment_info'   => $paymentInfo,
+        ]);
+    }
+
+    /**
+     * Query the status of an order.
+     * For pending orders the payment info is also returned so the user can re-display the QR code.
+     */
+    public function queryOrder(Request $request, string $orderNo): JsonResponse
+    {
+        $order = Order::where('order_no', $orderNo)
+            ->where('user_id', $request->user()->id)
+            ->firstOrFail();
+
+        $response = [
+            'order_no' => $order->order_no,
+            'status'   => $order->status,
+            'amount'   => $order->amount,
+            'paid_at'  => $order->paid_at?->toIso8601String(),
+        ];
+
+        // Include payment_info so pending orders can show the payment screen again.
+        if ($order->isPending() && $order->payment_method) {
+            $response['payment_info'] = $this->buildPaymentInfo($order, $order->payment_method);
+        }
+
+        return new JsonResponse($response);
+    }
+
+    /**
+     * Handle payment callback/notify from payment gateway.
+     *
+     * IMPORTANT: In production you MUST verify the cryptographic signature sent
+     * by the payment provider (Alipay RSA2 / WeChat Pay HMAC-SHA256) before
+     * processing any order fulfillment. Skipping this check allows anyone to
+     * forge a successful-payment notification.
+     */
+    public function notify(Request $request, string $method): JsonResponse
+    {
+        $orderNo = $request->input('out_trade_no');
+        $tradeNo = $request->input('trade_no') ?? $request->input('transaction_id');
+
+        $order = Order::where('order_no', $orderNo)
+            ->where('status', Order::STATUS_PENDING)
+            ->first();
+
+        if (!$order) {
+            return new JsonResponse(['success' => false]);
+        }
+
+        DB::transaction(function () use ($order, $tradeNo) {
+            $order->update([
+                'status'             => Order::STATUS_PAID,
+                'payment_trade_no'   => $tradeNo,
+                'paid_at'            => now(),
+            ]);
+
+            $this->fulfillOrder($order);
+        });
+
+        return new JsonResponse(['success' => true]);
+    }
+
+    /**
+     * Build payment gateway-specific information.
+     * In production this would call the actual Alipay/WeChat SDK.
+     */
+    private function buildPaymentInfo(Order $order, string $method): array
+    {
+        return match ($method) {
+            'alipay' => [
+                'type'         => 'alipay_online',
+                'instructions' => '请使用支付宝扫描下方二维码完成支付',
+                'qr_placeholder' => 'https://qr.alipay.com/placeholder/' . $order->order_no,
+            ],
+            'alipay_face' => [
+                'type'         => 'alipay_face_to_face',
+                'instructions' => '请向收款方出示下方付款码，或使用支付宝扫码',
+                'qr_placeholder' => PaymentSetting::get('alipay_face_code', '（收款码未配置）'),
+            ],
+            'wechat' => [
+                'type'         => 'wechat_pay',
+                'instructions' => '请使用微信扫描下方二维码完成支付',
+                'qr_placeholder' => 'weixin://wxpay/bizpayurl?placeholder=' . $order->order_no,
+            ],
+            default => [],
+        };
+    }
+
+    /**
+     * Fulfill a paid order by granting the product's reward.
+     */
+    public function fulfillOrder(Order $order): void
+    {
+        if (!$order->product) {
+            return;
+        }
+
+        $product = $order->product;
+
+        if ($product->type === 'points') {
+            $points = UserPoints::firstOrCreate(
+                ['user_id' => $order->user_id],
+                ['balance' => 0]
+            );
+            $points->increment('balance', $product->value);
+
+            PointTransaction::create([
+                'user_id'     => $order->user_id,
+                'amount'      => $product->value,
+                'type'        => 'earn',
+                'description' => "购买商品 [{$product->name}] 获得积分，订单号：{$order->order_no}",
+            ]);
+        }
+        // server and server_days types can be fulfilled here in the future
+        // once the server provisioning integration is wired up.
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/PointsController.php b/app/Http/Controllers/Api/Client/PointsController.php
new file mode 100644
index 0000000000..74cc50aed3
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/PointsController.php
@@ -0,0 +1,40 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Pterodactyl\Models\UserPoints;
+use Pterodactyl\Models\PointTransaction;
+
+class PointsController extends ClientApiController
+{
+    /**
+     * Return the authenticated user's points balance and recent transactions.
+     */
+    public function index(Request $request): JsonResponse
+    {
+        $user = $request->user();
+
+        $points = UserPoints::firstOrCreate(
+            ['user_id' => $user->id],
+            ['balance' => 0]
+        );
+
+        $transactions = PointTransaction::where('user_id', $user->id)
+            ->orderByDesc('created_at')
+            ->limit(20)
+            ->get();
+
+        return new JsonResponse([
+            'balance' => $points->balance,
+            'transactions' => $transactions->map(fn ($t) => [
+                'id' => $t->id,
+                'amount' => $t->amount,
+                'type' => $t->type,
+                'description' => $t->description,
+                'created_at' => $t->created_at?->toIso8601String(),
+            ]),
+        ]);
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/RedemptionCodeController.php b/app/Http/Controllers/Api/Client/RedemptionCodeController.php
new file mode 100644
index 0000000000..aebe4fefd5
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/RedemptionCodeController.php
@@ -0,0 +1,79 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\DB;
+use Pterodactyl\Models\UserPoints;
+use Pterodactyl\Models\PointTransaction;
+use Pterodactyl\Models\RedemptionCode;
+use Pterodactyl\Models\RedemptionCodeUse;
+use Pterodactyl\Exceptions\DisplayException;
+
+class RedemptionCodeController extends ClientApiController
+{
+    /**
+     * Redeem a code for the authenticated user.
+     *
+     * @throws \Pterodactyl\Exceptions\DisplayException
+     * @throws \Throwable
+     */
+    public function redeem(Request $request): JsonResponse
+    {
+        $request->validate(['code' => 'required|string|max:64']);
+
+        $user = $request->user();
+        $code = $request->input('code');
+
+        $redemptionCode = RedemptionCode::where('code', $code)->first();
+
+        if (!$redemptionCode || !$redemptionCode->isUsable()) {
+            throw new DisplayException('兑换码无效或已过期。');
+        }
+
+        $alreadyUsed = RedemptionCodeUse::where('redemption_code_id', $redemptionCode->id)
+            ->where('user_id', $user->id)
+            ->exists();
+
+        if ($alreadyUsed) {
+            throw new DisplayException('您已使用过此兑换码。');
+        }
+
+        DB::transaction(function () use ($redemptionCode, $user) {
+            // Record usage
+            RedemptionCodeUse::create([
+                'redemption_code_id' => $redemptionCode->id,
+                'user_id' => $user->id,
+            ]);
+
+            // Decrement uses remaining
+            $redemptionCode->decrement('uses_remaining');
+
+            // Apply reward based on type
+            if ($redemptionCode->type === 'points') {
+                $points = UserPoints::firstOrCreate(
+                    ['user_id' => $user->id],
+                    ['balance' => 0]
+                );
+                $points->increment('balance', $redemptionCode->value);
+
+                PointTransaction::create([
+                    'user_id' => $user->id,
+                    'amount' => $redemptionCode->value,
+                    'type' => 'redeem_code',
+                    'description' => "兑换码 [{$redemptionCode->code}] 获得积分",
+                ]);
+            }
+        });
+
+        return new JsonResponse([
+            'success' => true,
+            'type' => $redemptionCode->type,
+            'value' => $redemptionCode->value,
+            'message' => $redemptionCode->type === 'points'
+                ? "兑换成功！获得 {$redemptionCode->value} 积分。"
+                : "兑换成功！",
+        ]);
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/StoreController.php b/app/Http/Controllers/Api/Client/StoreController.php
new file mode 100644
index 0000000000..ff7fb611d8
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/StoreController.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Pterodactyl\Models\Product;
+use Pterodactyl\Models\Location;
+use Pterodactyl\Models\Node;
+use Pterodactyl\Models\PaymentSetting;
+
+class StoreController extends ClientApiController
+{
+    /**
+     * Return a list of active products in the store, along with enabled payment methods.
+     */
+    public function index(): JsonResponse
+    {
+        $products = Product::where('is_active', true)
+            ->orderBy('sort_order')
+            ->orderBy('price')
+            ->get();
+
+        return new JsonResponse([
+            'products'        => $products->map(fn ($p) => $this->transformProduct($p)),
+            'payment_methods' => PaymentSetting::enabledMethods(),
+        ]);
+    }
+
+    private function transformProduct(Product $p): array
+    {
+        $data = [
+            'id'          => $p->id,
+            'name'        => $p->name,
+            'description' => $p->description,
+            'type'        => $p->type,
+            'value'       => $p->value,
+            'price'       => $p->price,
+            'currency'    => $p->currency,
+        ];
+
+        // For server packages, include resource configuration.
+        if ($p->type === 'server') {
+            $location = $p->location_id ? Location::find($p->location_id) : null;
+            $node     = $p->node_id     ? Node::find($p->node_id) : null;
+
+            $data['server_config'] = [
+                'location'    => $location ? ['id' => $location->id, 'short' => $location->short, 'long' => $location->long] : null,
+                'node'        => $node     ? ['id' => $node->id, 'name' => $node->name] : null,
+                'cpu'         => $p->cpu,
+                'memory'      => $p->memory,
+                'disk'        => $p->disk,
+                'databases'   => $p->databases,
+                'backups'     => $p->backups,
+                'allocations' => $p->allocations,
+            ];
+        }
+
+        return $data;
+    }
+}
diff --git a/app/Http/Controllers/Api/Client/TicketController.php b/app/Http/Controllers/Api/Client/TicketController.php
new file mode 100644
index 0000000000..d8029df878
--- /dev/null
+++ b/app/Http/Controllers/Api/Client/TicketController.php
@@ -0,0 +1,142 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Client;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use Pterodactyl\Models\Ticket;
+use Pterodactyl\Models\TicketReply;
+use Pterodactyl\Exceptions\DisplayException;
+
+class TicketController extends ClientApiController
+{
+    /**
+     * List all tickets for the authenticated user (newest first).
+     */
+    public function index(Request $request): JsonResponse
+    {
+        $tickets = Ticket::where('user_id', $request->user()->id)
+            ->withCount('replies')
+            ->orderByDesc('created_at')
+            ->paginate(20);
+
+        return new JsonResponse([
+            'data' => $tickets->map(fn (Ticket $t) => $this->transformSummary($t)),
+            'meta' => [
+                'total'        => $tickets->total(),
+                'current_page' => $tickets->currentPage(),
+                'last_page'    => $tickets->lastPage(),
+            ],
+        ]);
+    }
+
+    /**
+     * Create a new support ticket.
+     */
+    public function store(Request $request): JsonResponse
+    {
+        $data = $request->validate([
+            'title'    => 'required|string|max:191',
+            'content'  => 'required|string|max:65535',
+            'priority' => 'sometimes|string|in:low,normal,high,urgent',
+        ]);
+
+        $ticket = Ticket::create([
+            'user_id'  => $request->user()->id,
+            'title'    => $data['title'],
+            'content'  => $data['content'],
+            'priority' => $data['priority'] ?? Ticket::PRIORITY_NORMAL,
+            'status'   => Ticket::STATUS_OPEN,
+        ]);
+
+        return new JsonResponse(['ticket' => $this->transformSummary($ticket)], 201);
+    }
+
+    /**
+     * View a single ticket with all its replies.
+     *
+     * @throws \Pterodactyl\Exceptions\DisplayException
+     */
+    public function show(Request $request, int $id): JsonResponse
+    {
+        $ticket = Ticket::where('user_id', $request->user()->id)
+            ->where('id', $id)
+            ->with(['replies' => fn ($q) => $q->with('user')->orderBy('created_at')])
+            ->firstOrFail();
+
+        return new JsonResponse(['ticket' => $this->transformDetail($ticket)]);
+    }
+
+    /**
+     * Add a reply to an existing ticket.
+     *
+     * @throws \Pterodactyl\Exceptions\DisplayException
+     */
+    public function reply(Request $request, int $id): JsonResponse
+    {
+        $ticket = Ticket::where('user_id', $request->user()->id)
+            ->where('id', $id)
+            ->firstOrFail();
+
+        if ($ticket->status === Ticket::STATUS_CLOSED) {
+            throw new DisplayException('工单已关闭，无法回复。');
+        }
+
+        $data = $request->validate(['content' => 'required|string|max:65535']);
+
+        TicketReply::create([
+            'ticket_id' => $ticket->id,
+            'user_id'   => $request->user()->id,
+            'content'   => $data['content'],
+            'is_staff'  => false,
+        ]);
+
+        $ticket->update([
+            'last_reply_at' => now(),
+            'status'        => Ticket::STATUS_OPEN,
+        ]);
+
+        return new JsonResponse(['success' => true]);
+    }
+
+    /**
+     * Close a ticket.
+     */
+    public function close(Request $request, int $id): JsonResponse
+    {
+        $ticket = Ticket::where('user_id', $request->user()->id)
+            ->where('id', $id)
+            ->firstOrFail();
+
+        $ticket->update(['status' => Ticket::STATUS_CLOSED]);
+
+        return new JsonResponse(['success' => true]);
+    }
+
+    private function transformSummary(Ticket $t): array
+    {
+        return [
+            'id'            => $t->id,
+            'title'         => $t->title,
+            'status'        => $t->status,
+            'priority'      => $t->priority,
+            'replies_count' => $t->replies_count ?? 0,
+            'last_reply_at' => $t->last_reply_at?->toIso8601String(),
+            'created_at'    => $t->created_at?->toIso8601String(),
+        ];
+    }
+
+    private function transformDetail(Ticket $t): array
+    {
+        return array_merge($this->transformSummary($t), [
+            'content' => $t->content,
+            'replies' => $t->replies->map(fn (TicketReply $r) => [
+                'id'         => $r->id,
+                'content'    => $r->content,
+                'is_staff'   => $r->is_staff,
+                'user_name'  => $r->user?->username ?? '—',
+                'created_at' => $r->created_at?->toIso8601String(),
+            ])->all(),
+        ]);
+    }
+}
diff --git a/app/Models/Order.php b/app/Models/Order.php
new file mode 100644
index 0000000000..7318a841f3
--- /dev/null
+++ b/app/Models/Order.php
@@ -0,0 +1,75 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+/**
+ * \Pterodactyl\Models\Order.
+ *
+ * @property int $id
+ * @property string $order_no
+ * @property int $user_id
+ * @property int|null $product_id
+ * @property string $subject
+ * @property float $amount
+ * @property string $currency
+ * @property string $status
+ * @property string|null $payment_method
+ * @property string|null $payment_trade_no
+ * @property \Illuminate\Support\Carbon|null $paid_at
+ * @property array|null $metadata
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class Order extends Model
+{
+    public const STATUS_PENDING = 'pending';
+    public const STATUS_PAID = 'paid';
+    public const STATUS_CANCELLED = 'cancelled';
+    public const STATUS_REFUNDED = 'refunded';
+
+    public const PAYMENT_ALIPAY = 'alipay';
+    public const PAYMENT_ALIPAY_FACE = 'alipay_face';
+    public const PAYMENT_WECHAT = 'wechat';
+
+    protected $table = 'orders';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'user_id' => 'integer',
+        'product_id' => 'integer',
+        'amount' => 'float',
+        'metadata' => 'array',
+        'paid_at' => 'datetime',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\Product, $this>
+     */
+    public function product(): BelongsTo
+    {
+        return $this->belongsTo(Product::class);
+    }
+
+    public function isPaid(): bool
+    {
+        return $this->status === self::STATUS_PAID;
+    }
+
+    public function isPending(): bool
+    {
+        return $this->status === self::STATUS_PENDING;
+    }
+}
diff --git a/app/Models/PaymentSetting.php b/app/Models/PaymentSetting.php
new file mode 100644
index 0000000000..01977bd5d0
--- /dev/null
+++ b/app/Models/PaymentSetting.php
@@ -0,0 +1,74 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Model as BaseModel;
+
+/**
+ * Key-value store for payment gateway settings.
+ *
+ * @property int $id
+ * @property string $key
+ * @property string|null $value
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class PaymentSetting extends BaseModel
+{
+    protected $table = 'payment_settings';
+
+    protected $guarded = ['id'];
+
+    /**
+     * Retrieve a specific payment setting by key, returning $default if not set.
+     */
+    public static function get(string $key, mixed $default = null): mixed
+    {
+        $row = static::query()->where('key', $key)->first();
+
+        return $row?->value ?? $default;
+    }
+
+    /**
+     * Set a payment setting value, upserting if needed.
+     */
+    public static function set(string $key, mixed $value): void
+    {
+        static::query()->updateOrInsert(
+            ['key' => $key],
+            ['value' => $value, 'updated_at' => now()]
+        );
+    }
+
+    /**
+     * Return all settings as an associative array.
+     */
+    public static function allAsArray(): array
+    {
+        return static::query()->pluck('value', 'key')->all();
+    }
+
+    /**
+     * Determine whether a given payment method is enabled.
+     */
+    public static function isEnabled(string $method): bool
+    {
+        return (bool) static::get($method . '_enabled', false);
+    }
+
+    /**
+     * Return an array of currently enabled payment method keys.
+     */
+    public static function enabledMethods(): array
+    {
+        $methods = [];
+        foreach (['alipay', 'alipay_face', 'wechat'] as $method) {
+            if (static::isEnabled($method)) {
+                $methods[] = $method;
+            }
+        }
+        return $methods;
+    }
+}
diff --git a/app/Models/PointTransaction.php b/app/Models/PointTransaction.php
new file mode 100644
index 0000000000..2534b943a1
--- /dev/null
+++ b/app/Models/PointTransaction.php
@@ -0,0 +1,38 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+/**
+ * \Pterodactyl\Models\PointTransaction.
+ *
+ * @property int $id
+ * @property int $user_id
+ * @property int $amount
+ * @property string $type
+ * @property string|null $description
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class PointTransaction extends Model
+{
+    protected $table = 'point_transactions';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'user_id' => 'integer',
+        'amount' => 'integer',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+}
diff --git a/app/Models/Product.php b/app/Models/Product.php
new file mode 100644
index 0000000000..ba712b5d56
--- /dev/null
+++ b/app/Models/Product.php
@@ -0,0 +1,77 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+/**
+ * \Pterodactyl\Models\Product.
+ *
+ * @property int $id
+ * @property string $name
+ * @property string|null $description
+ * @property string $type  points|server_days|server|custom
+ * @property int $value
+ * @property float $price
+ * @property string $currency
+ * @property bool $is_active
+ * @property int $sort_order
+ * @property int|null $location_id
+ * @property int|null $node_id
+ * @property int|null $egg_id
+ * @property int|null $cpu
+ * @property int|null $memory
+ * @property int|null $disk
+ * @property int|null $databases
+ * @property int|null $backups
+ * @property int|null $allocations
+ * @property int|null $points_cpu_rate
+ * @property int|null $points_memory_rate
+ * @property int|null $points_disk_rate
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class Product extends Model
+{
+    protected $table = 'products';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'value'       => 'integer',
+        'price'       => 'float',
+        'is_active'   => 'boolean',
+        'sort_order'  => 'integer',
+        'location_id' => 'integer',
+        'node_id'     => 'integer',
+        'egg_id'      => 'integer',
+        'cpu'         => 'integer',
+        'memory'      => 'integer',
+        'disk'        => 'integer',
+        'databases'          => 'integer',
+        'backups'            => 'integer',
+        'allocations'        => 'integer',
+        'points_cpu_rate'    => 'integer',
+        'points_memory_rate' => 'integer',
+        'points_disk_rate'   => 'integer',
+    ];
+
+    public static array $validationRules = [
+        'name'     => 'required|string|max:191',
+        'type'     => 'required|string|in:points,server_days,server,custom',
+        'value'    => 'required|integer|min:0',
+        'price'    => 'required|numeric|min:0',
+        'currency' => 'required|string|max:8',
+        'is_active' => 'sometimes|boolean',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\HasMany<\Pterodactyl\Models\Order, $this>
+     */
+    public function orders(): HasMany
+    {
+        return $this->hasMany(Order::class);
+    }
+}
diff --git a/app/Models/RedemptionCode.php b/app/Models/RedemptionCode.php
new file mode 100644
index 0000000000..1355f30766
--- /dev/null
+++ b/app/Models/RedemptionCode.php
@@ -0,0 +1,71 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+/**
+ * \Pterodactyl\Models\RedemptionCode.
+ *
+ * @property int $id
+ * @property string $code
+ * @property string $type
+ * @property int $value
+ * @property int $uses_total
+ * @property int $uses_remaining
+ * @property \Illuminate\Support\Carbon|null $expires_at
+ * @property bool $is_active
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class RedemptionCode extends Model
+{
+    protected $table = 'redemption_codes';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'value' => 'integer',
+        'uses_total' => 'integer',
+        'uses_remaining' => 'integer',
+        'is_active' => 'boolean',
+        'expires_at' => 'datetime',
+    ];
+
+    public static array $validationRules = [
+        'code' => 'required|string|max:64',
+        'type' => 'required|string|in:points,days',
+        'value' => 'required|integer|min:1',
+        'uses_total' => 'required|integer|min:1',
+        'expires_at' => 'nullable|date',
+    ];
+
+    /**
+     * Check whether this code is usable (active, not expired, has uses remaining).
+     */
+    public function isUsable(): bool
+    {
+        if (!$this->is_active) {
+            return false;
+        }
+        if ($this->uses_remaining <= 0) {
+            return false;
+        }
+        if ($this->expires_at && $this->expires_at->isPast()) {
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\HasMany<\Pterodactyl\Models\RedemptionCodeUse, $this>
+     */
+    public function uses(): HasMany
+    {
+        return $this->hasMany(RedemptionCodeUse::class, 'redemption_code_id');
+    }
+}
diff --git a/app/Models/RedemptionCodeUse.php b/app/Models/RedemptionCodeUse.php
new file mode 100644
index 0000000000..0c48e2f5f7
--- /dev/null
+++ b/app/Models/RedemptionCodeUse.php
@@ -0,0 +1,44 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+/**
+ * \Pterodactyl\Models\RedemptionCodeUse.
+ *
+ * @property int $id
+ * @property int $redemption_code_id
+ * @property int $user_id
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class RedemptionCodeUse extends Model
+{
+    protected $table = 'redemption_code_uses';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'redemption_code_id' => 'integer',
+        'user_id' => 'integer',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\RedemptionCode, $this>
+     */
+    public function code(): BelongsTo
+    {
+        return $this->belongsTo(RedemptionCode::class, 'redemption_code_id');
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+}
diff --git a/app/Models/Server.php b/app/Models/Server.php
index bb7dcc0099..312d746cee 100644
--- a/app/Models/Server.php
+++ b/app/Models/Server.php
@@ -46,6 +46,8 @@
  * @property \Illuminate\Support\Carbon|null $created_at
  * @property \Illuminate\Support\Carbon|null $updated_at
  * @property \Illuminate\Support\Carbon|null $installed_at
+ * @property \Illuminate\Support\Carbon|null $expires_at
+ * @property int|null $points_per_day
  * @property \Illuminate\Database\Eloquent\Collection|\Pterodactyl\Models\ActivityLog[] $activity
  * @property int|null $activity_count
  * @property Allocation|null $allocation
@@ -198,6 +200,8 @@ class Server extends Model implements Identifiable
         self::UPDATED_AT => 'datetime',
         'deleted_at' => 'datetime',
         'installed_at' => 'datetime',
+        'expires_at' => 'datetime',
+        'points_per_day' => 'integer',
     ];
 
     /**
diff --git a/app/Models/Ticket.php b/app/Models/Ticket.php
new file mode 100644
index 0000000000..0ad313e4a3
--- /dev/null
+++ b/app/Models/Ticket.php
@@ -0,0 +1,64 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+/**
+ * \Pterodactyl\Models\Ticket.
+ *
+ * @property int $id
+ * @property int $user_id
+ * @property string $title
+ * @property string $content
+ * @property string $status  open|in_progress|closed
+ * @property string $priority  low|normal|high|urgent
+ * @property \Illuminate\Support\Carbon|null $last_reply_at
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class Ticket extends Model
+{
+    public const STATUS_OPEN        = 'open';
+    public const STATUS_IN_PROGRESS = 'in_progress';
+    public const STATUS_CLOSED      = 'closed';
+
+    public const PRIORITY_LOW    = 'low';
+    public const PRIORITY_NORMAL = 'normal';
+    public const PRIORITY_HIGH   = 'high';
+    public const PRIORITY_URGENT = 'urgent';
+
+    protected $table = 'tickets';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'user_id'       => 'integer',
+        'last_reply_at' => 'datetime',
+    ];
+
+    public static array $validationRules = [
+        'title'    => 'required|string|max:191',
+        'content'  => 'required|string|max:65535',
+        'priority' => 'sometimes|string|in:low,normal,high,urgent',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\HasMany<\Pterodactyl\Models\TicketReply, $this>
+     */
+    public function replies(): HasMany
+    {
+        return $this->hasMany(TicketReply::class);
+    }
+}
diff --git a/app/Models/TicketReply.php b/app/Models/TicketReply.php
new file mode 100644
index 0000000000..13e0ada268
--- /dev/null
+++ b/app/Models/TicketReply.php
@@ -0,0 +1,51 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+/**
+ * \Pterodactyl\Models\TicketReply.
+ *
+ * @property int $id
+ * @property int $ticket_id
+ * @property int $user_id
+ * @property string $content
+ * @property bool $is_staff
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class TicketReply extends Model
+{
+    protected $table = 'ticket_replies';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'ticket_id' => 'integer',
+        'user_id'   => 'integer',
+        'is_staff'  => 'boolean',
+    ];
+
+    public static array $validationRules = [
+        'content' => 'required|string|max:65535',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\Ticket, $this>
+     */
+    public function ticket(): BelongsTo
+    {
+        return $this->belongsTo(Ticket::class);
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+}
diff --git a/app/Models/UserPoints.php b/app/Models/UserPoints.php
new file mode 100644
index 0000000000..a6fdef7b2c
--- /dev/null
+++ b/app/Models/UserPoints.php
@@ -0,0 +1,50 @@
+<?php
+
+namespace Pterodactyl\Models;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+/**
+ * \Pterodactyl\Models\UserPoints.
+ *
+ * @property int $id
+ * @property int $user_id
+ * @property int $balance
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ *
+ * @mixin \Eloquent
+ */
+class UserPoints extends Model
+{
+    protected $table = 'user_points';
+
+    protected $guarded = ['id'];
+
+    protected $casts = [
+        'user_id' => 'integer',
+        'balance' => 'integer',
+    ];
+
+    public static array $validationRules = [
+        'user_id' => 'required|integer|exists:users,id',
+        'balance' => 'required|integer',
+    ];
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\Pterodactyl\Models\User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\HasMany<\Pterodactyl\Models\PointTransaction, $this>
+     */
+    public function transactions(): HasMany
+    {
+        return $this->hasMany(PointTransaction::class, 'user_id', 'user_id');
+    }
+}
diff --git a/app/Services/Store/PointsCalculator.php b/app/Services/Store/PointsCalculator.php
new file mode 100644
index 0000000000..2c9823341c
--- /dev/null
+++ b/app/Services/Store/PointsCalculator.php
@@ -0,0 +1,98 @@
+<?php
+
+namespace Pterodactyl\Services\Store;
+
+use Pterodactyl\Models\Server;
+use Pterodactyl\Models\Product;
+
+/**
+ * Calculates the daily points cost for a server based on its resource limits.
+ *
+ * Global rates (configurable via environment variables or app config):
+ *   POINTS_CPU_PER_CORE    — points per 100% CPU core per day (default 10)
+ *   POINTS_MEMORY_PER_GB   — points per GB of memory per day  (default 5)
+ *   POINTS_DISK_PER_GB     — points per GB of disk per day    (default 1)
+ *
+ * Per-product overrides (set on the Product model):
+ *   points_cpu_rate, points_memory_rate, points_disk_rate
+ */
+class PointsCalculator
+{
+    public function __construct(
+        private readonly int $cpuRatePerCore  = 10,
+        private readonly int $memoryRatePerGb = 5,
+        private readonly int $diskRatePerGb   = 1,
+    ) {
+    }
+
+    /**
+     * Calculate the daily points cost for the given resource limits.
+     *
+     * @param  int  $cpu    CPU limit in % (100 = 1 core)
+     * @param  int  $memory Memory limit in MB
+     * @param  int  $disk   Disk limit in MB
+     * @param  int|null  $cpuRate    Per-product CPU rate override (points per core/day)
+     * @param  int|null  $memoryRate Per-product memory rate override (points per GB/day)
+     * @param  int|null  $diskRate   Per-product disk rate override (points per GB/day)
+     */
+    public function calculate(
+        int $cpu,
+        int $memory,
+        int $disk,
+        ?int $cpuRate    = null,
+        ?int $memoryRate = null,
+        ?int $diskRate   = null,
+    ): int {
+        $cpuCores = max(0, $cpu)    / 100;
+        $memoryGb = max(0, $memory) / 1024;
+        $diskGb   = max(0, $disk)   / 1024;
+
+        $cost = (int) ceil(
+            $cpuCores  * ($cpuRate    ?? $this->cpuRatePerCore)
+            + $memoryGb * ($memoryRate ?? $this->memoryRatePerGb)
+            + $diskGb   * ($diskRate   ?? $this->diskRatePerGb)
+        );
+
+        // Minimum of 1 point per day for any active server.
+        return max(1, $cost);
+    }
+
+    /**
+     * Calculate and return the daily points cost for a Server model.
+     */
+    public function forServer(Server $server): int
+    {
+        return $this->calculate($server->cpu, $server->memory, $server->disk);
+    }
+
+    /**
+     * Calculate the daily points cost using a Product's per-product rate overrides.
+     * Falls back to global rates for fields left null.
+     */
+    public function forProduct(Product $product): int
+    {
+        return $this->calculate(
+            $product->cpu    ?? 0,
+            $product->memory ?? 0,
+            $product->disk   ?? 0,
+            $product->points_cpu_rate,
+            $product->points_memory_rate,
+            $product->points_disk_rate,
+        );
+    }
+
+    public function getCpuRatePerCore(): int
+    {
+        return $this->cpuRatePerCore;
+    }
+
+    public function getMemoryRatePerGb(): int
+    {
+        return $this->memoryRatePerGb;
+    }
+
+    public function getDiskRatePerGb(): int
+    {
+        return $this->diskRatePerGb;
+    }
+}
diff --git a/app/Transformers/Api/Client/ServerTransformer.php b/app/Transformers/Api/Client/ServerTransformer.php
index 747d2f2d82..1cc3f6c263 100644
--- a/app/Transformers/Api/Client/ServerTransformer.php
+++ b/app/Transformers/Api/Client/ServerTransformer.php
@@ -79,6 +79,8 @@ public function transform(Server $server): array
             // This field is deprecated, please use "status".
             'is_installing' => !$server->isInstalled(),
             'is_transferring' => !is_null($server->transfer),
+            'expires_at' => $server->expires_at?->toIso8601String(),
+            'points_per_day' => $server->points_per_day,
         ];
     }
 
diff --git a/database/migrations/2026_03_08_000001_add_expires_at_to_servers_table.php b/database/migrations/2026_03_08_000001_add_expires_at_to_servers_table.php
new file mode 100644
index 0000000000..82aa372956
--- /dev/null
+++ b/database/migrations/2026_03_08_000001_add_expires_at_to_servers_table.php
@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('servers', function (Blueprint $table) {
+            $table->timestamp('expires_at')->nullable()->after('installed_at');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('servers', function (Blueprint $table) {
+            $table->dropColumn('expires_at');
+        });
+    }
+};
diff --git a/database/migrations/2026_03_08_000002_create_user_points_table.php b/database/migrations/2026_03_08_000002_create_user_points_table.php
new file mode 100644
index 0000000000..fe24efe4e3
--- /dev/null
+++ b/database/migrations/2026_03_08_000002_create_user_points_table.php
@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('user_points', function (Blueprint $table) {
+            $table->id();
+            $table->unsignedInteger('user_id');
+            $table->integer('balance')->default(0);
+            $table->timestamps();
+
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->unique('user_id');
+        });
+
+        Schema::create('point_transactions', function (Blueprint $table) {
+            $table->id();
+            $table->unsignedInteger('user_id');
+            $table->integer('amount');
+            $table->string('type', 32); // earn, spend, refund, admin_adjust, redeem_code
+            $table->string('description')->nullable();
+            $table->timestamps();
+
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('point_transactions');
+        Schema::dropIfExists('user_points');
+    }
+};
diff --git a/database/migrations/2026_03_08_000003_create_redemption_codes_table.php b/database/migrations/2026_03_08_000003_create_redemption_codes_table.php
new file mode 100644
index 0000000000..63a65e22b1
--- /dev/null
+++ b/database/migrations/2026_03_08_000003_create_redemption_codes_table.php
@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('redemption_codes', function (Blueprint $table) {
+            $table->id();
+            $table->string('code', 64)->unique();
+            $table->string('type', 32)->default('points'); // points, days, product
+            $table->integer('value')->default(0); // points amount, or days
+            $table->unsignedInteger('uses_total')->default(1);
+            $table->unsignedInteger('uses_remaining')->default(1);
+            $table->timestamp('expires_at')->nullable();
+            $table->boolean('is_active')->default(true);
+            $table->timestamps();
+        });
+
+        Schema::create('redemption_code_uses', function (Blueprint $table) {
+            $table->id();
+            $table->unsignedBigInteger('redemption_code_id');
+            $table->unsignedInteger('user_id');
+            $table->timestamps();
+
+            $table->foreign('redemption_code_id')->references('id')->on('redemption_codes')->onDelete('cascade');
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->unique(['redemption_code_id', 'user_id']);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('redemption_code_uses');
+        Schema::dropIfExists('redemption_codes');
+    }
+};
diff --git a/database/migrations/2026_03_08_000004_create_store_tables.php b/database/migrations/2026_03_08_000004_create_store_tables.php
new file mode 100644
index 0000000000..8a94c63a3d
--- /dev/null
+++ b/database/migrations/2026_03_08_000004_create_store_tables.php
@@ -0,0 +1,49 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('products', function (Blueprint $table) {
+            $table->id();
+            $table->string('name');
+            $table->text('description')->nullable();
+            $table->string('type', 32)->default('points'); // points, server_days, custom
+            $table->integer('value')->default(0); // e.g. number of points or server days
+            $table->decimal('price', 10, 2)->default(0);
+            $table->string('currency', 8)->default('CNY');
+            $table->boolean('is_active')->default(true);
+            $table->integer('sort_order')->default(0);
+            $table->timestamps();
+        });
+
+        Schema::create('orders', function (Blueprint $table) {
+            $table->id();
+            $table->string('order_no', 64)->unique();
+            $table->unsignedInteger('user_id');
+            $table->unsignedBigInteger('product_id')->nullable();
+            $table->string('subject')->default('');
+            $table->decimal('amount', 10, 2)->default(0);
+            $table->string('currency', 8)->default('CNY');
+            $table->string('status', 32)->default('pending'); // pending, paid, cancelled, refunded
+            $table->string('payment_method', 32)->nullable(); // alipay, alipay_face, wechat
+            $table->string('payment_trade_no', 128)->nullable();
+            $table->timestamp('paid_at')->nullable();
+            $table->json('metadata')->nullable();
+            $table->timestamps();
+
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->foreign('product_id')->references('id')->on('products')->onDelete('set null');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('orders');
+        Schema::dropIfExists('products');
+    }
+};
diff --git a/database/migrations/2026_03_08_000005_add_points_per_day_to_servers_table.php b/database/migrations/2026_03_08_000005_add_points_per_day_to_servers_table.php
new file mode 100644
index 0000000000..58cb66f3e2
--- /dev/null
+++ b/database/migrations/2026_03_08_000005_add_points_per_day_to_servers_table.php
@@ -0,0 +1,24 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('servers', function (Blueprint $table) {
+            // Daily points cost for this server, calculated from resource limits.
+            // NULL means the server has not been assigned a point cost yet.
+            $table->integer('points_per_day')->nullable()->default(null)->after('expires_at');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('servers', function (Blueprint $table) {
+            $table->dropColumn('points_per_day');
+        });
+    }
+};
diff --git a/database/migrations/2026_03_08_000006_expand_products_and_payment_settings.php b/database/migrations/2026_03_08_000006_expand_products_and_payment_settings.php
new file mode 100644
index 0000000000..9c144e2df1
--- /dev/null
+++ b/database/migrations/2026_03_08_000006_expand_products_and_payment_settings.php
@@ -0,0 +1,57 @@
+<?php
+
+use Illuminate\Support\Facades\DB;
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        // Add server-package resource fields to products.
+        Schema::table('products', function (Blueprint $table) {
+            // Server package configuration (only used when type = 'server')
+            $table->unsignedInteger('location_id')->nullable()->after('sort_order');
+            $table->unsignedBigInteger('node_id')->nullable()->after('location_id');
+            $table->unsignedBigInteger('egg_id')->nullable()->after('node_id');
+            $table->integer('cpu')->nullable()->comment('CPU limit % (100 = 1 core)')->after('egg_id');
+            $table->integer('memory')->nullable()->comment('Memory limit MB')->after('cpu');
+            $table->integer('disk')->nullable()->comment('Disk limit MB')->after('memory');
+            $table->integer('databases')->nullable()->default(0)->after('disk');
+            $table->integer('backups')->nullable()->default(0)->after('databases');
+            $table->integer('allocations')->nullable()->default(1)->after('backups');
+        });
+
+        // Payment gateway settings
+        Schema::create('payment_settings', function (Blueprint $table) {
+            $table->id();
+            $table->string('key', 191)->unique();
+            $table->text('value')->nullable();
+            $table->timestamps();
+        });
+
+        // Seed default payment settings (all disabled)
+        DB::table('payment_settings')->insert([
+            ['key' => 'alipay_enabled',     'value' => '0', 'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'alipay_app_id',      'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'alipay_private_key', 'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'alipay_public_key',  'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'alipay_face_enabled','value' => '0', 'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'alipay_face_code',   'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'wechat_enabled',     'value' => '0', 'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'wechat_app_id',      'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'wechat_mch_id',      'value' => '',  'created_at' => now(), 'updated_at' => now()],
+            ['key' => 'wechat_api_key',     'value' => '',  'created_at' => now(), 'updated_at' => now()],
+        ]);
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('payment_settings');
+
+        Schema::table('products', function (Blueprint $table) {
+            $table->dropColumn(['location_id', 'node_id', 'egg_id', 'cpu', 'memory', 'disk', 'databases', 'backups', 'allocations']);
+        });
+    }
+};
diff --git a/database/migrations/2026_03_08_000007_create_tickets_tables.php b/database/migrations/2026_03_08_000007_create_tickets_tables.php
new file mode 100644
index 0000000000..d944ea0148
--- /dev/null
+++ b/database/migrations/2026_03_08_000007_create_tickets_tables.php
@@ -0,0 +1,42 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('tickets', function (Blueprint $table) {
+            $table->id();
+            $table->unsignedInteger('user_id');
+            $table->string('title', 191);
+            $table->text('content');
+            $table->string('status', 32)->default('open'); // open, in_progress, closed
+            $table->string('priority', 16)->default('normal'); // low, normal, high, urgent
+            $table->timestamp('last_reply_at')->nullable();
+            $table->timestamps();
+
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+        });
+
+        Schema::create('ticket_replies', function (Blueprint $table) {
+            $table->id();
+            $table->unsignedBigInteger('ticket_id');
+            $table->unsignedInteger('user_id');
+            $table->text('content');
+            $table->boolean('is_staff')->default(false);
+            $table->timestamps();
+
+            $table->foreign('ticket_id')->references('id')->on('tickets')->onDelete('cascade');
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('ticket_replies');
+        Schema::dropIfExists('tickets');
+    }
+};
diff --git a/database/migrations/2026_03_08_000008_add_points_rates_to_products.php b/database/migrations/2026_03_08_000008_add_points_rates_to_products.php
new file mode 100644
index 0000000000..72283b856d
--- /dev/null
+++ b/database/migrations/2026_03_08_000008_add_points_rates_to_products.php
@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('products', function (Blueprint $table) {
+            // Per-product daily-points deduction rates for server-type products.
+            // When set, these override the global PointsCalculator rates.
+            $table->integer('points_cpu_rate')->nullable()
+                ->comment('Points per 100% CPU per day (overrides global rate)')->after('allocations');
+            $table->integer('points_memory_rate')->nullable()
+                ->comment('Points per GB memory per day (overrides global rate)')->after('points_cpu_rate');
+            $table->integer('points_disk_rate')->nullable()
+                ->comment('Points per GB disk per day (overrides global rate)')->after('points_memory_rate');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('products', function (Blueprint $table) {
+            $table->dropColumn(['points_cpu_rate', 'points_memory_rate', 'points_disk_rate']);
+        });
+    }
+};
diff --git a/resources/scripts/api/createOrder.ts b/resources/scripts/api/createOrder.ts
new file mode 100644
index 0000000000..46400c0d4c
--- /dev/null
+++ b/resources/scripts/api/createOrder.ts
@@ -0,0 +1,41 @@
+import http from '@/api/http';
+
+export interface OrderPaymentInfo {
+    type: string;
+    instructions: string;
+    qr_placeholder: string;
+}
+
+export interface OrderResponse {
+    order_no: string;
+    amount: number;
+    currency: string;
+    payment_method: string;
+    payment_info: OrderPaymentInfo;
+}
+
+export interface OrderStatus {
+    order_no: string;
+    status: string;
+    amount: number;
+    paid_at: string | null;
+    payment_info?: OrderPaymentInfo;
+}
+
+export type PaymentMethod = 'alipay' | 'alipay_face' | 'wechat';
+
+export const createOrder = (productId: number, paymentMethod: PaymentMethod): Promise<OrderResponse> => {
+    return new Promise((resolve, reject) => {
+        http.post('/api/client/store/order', { product_id: productId, payment_method: paymentMethod })
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
+
+export const queryOrder = (orderNo: string): Promise<OrderStatus> => {
+    return new Promise((resolve, reject) => {
+        http.get(`/api/client/store/order/${orderNo}`)
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/api/getOrders.ts b/resources/scripts/api/getOrders.ts
new file mode 100644
index 0000000000..8c012099e9
--- /dev/null
+++ b/resources/scripts/api/getOrders.ts
@@ -0,0 +1,38 @@
+import http from '@/api/http';
+
+export interface Order {
+    order_no: string;
+    subject: string;
+    product_name: string | null;
+    amount: number;
+    currency: string;
+    status: string;
+    payment_method: string | null;
+    paid_at: string | null;
+    created_at: string;
+}
+
+export interface OrdersResult {
+    data: Order[];
+    meta: {
+        total: number;
+        current_page: number;
+        last_page: number;
+    };
+}
+
+export const getOrders = (): Promise<OrdersResult> => {
+    return new Promise((resolve, reject) => {
+        http.get('/api/client/orders')
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
+
+export const cancelOrder = (orderNo: string): Promise<void> => {
+    return new Promise((resolve, reject) => {
+        http.delete(`/api/client/orders/${orderNo}`)
+            .then(() => resolve())
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/api/getPoints.ts b/resources/scripts/api/getPoints.ts
new file mode 100644
index 0000000000..739ed2730d
--- /dev/null
+++ b/resources/scripts/api/getPoints.ts
@@ -0,0 +1,22 @@
+import http from '@/api/http';
+
+export interface PointTransaction {
+    id: number;
+    amount: number;
+    type: string;
+    description: string | null;
+    created_at: string;
+}
+
+export interface PointsData {
+    balance: number;
+    transactions: PointTransaction[];
+}
+
+export default (): Promise<PointsData> => {
+    return new Promise((resolve, reject) => {
+        http.get('/api/client/points')
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/api/getStore.ts b/resources/scripts/api/getStore.ts
new file mode 100644
index 0000000000..59f2c3ae21
--- /dev/null
+++ b/resources/scripts/api/getStore.ts
@@ -0,0 +1,36 @@
+import http from '@/api/http';
+
+export interface ServerConfig {
+    location: { id: number; short: string; long: string } | null;
+    node: { id: number; name: string } | null;
+    cpu: number | null;
+    memory: number | null;
+    disk: number | null;
+    databases: number | null;
+    backups: number | null;
+    allocations: number | null;
+}
+
+export interface Product {
+    id: number;
+    name: string;
+    description: string | null;
+    type: string;
+    value: number;
+    price: number;
+    currency: string;
+    server_config?: ServerConfig;
+}
+
+export interface StoreData {
+    products: Product[];
+    payment_methods: string[];
+}
+
+export default (): Promise<StoreData> => {
+    return new Promise((resolve, reject) => {
+        http.get('/api/client/store')
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/api/redeemCode.ts b/resources/scripts/api/redeemCode.ts
new file mode 100644
index 0000000000..3b58f93a5d
--- /dev/null
+++ b/resources/scripts/api/redeemCode.ts
@@ -0,0 +1,16 @@
+import http from '@/api/http';
+
+export interface RedeemResult {
+    success: boolean;
+    type: string;
+    value: number;
+    message: string;
+}
+
+export default (code: string): Promise<RedeemResult> => {
+    return new Promise((resolve, reject) => {
+        http.post('/api/client/redeem', { code })
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/api/server/getServer.ts b/resources/scripts/api/server/getServer.ts
index 16743ef870..3cd72b95d6 100644
--- a/resources/scripts/api/server/getServer.ts
+++ b/resources/scripts/api/server/getServer.ts
@@ -60,6 +60,8 @@ export interface Server {
     isTransferring: boolean;
     variables: ServerEggVariable[];
     allocations: Allocation[];
+    expiresAt: string | null;
+    pointsPerDay: number | null;
 }
 
 export const rawDataToServerObject = ({ attributes: data }: FractalResponseData): Server => ({
@@ -83,6 +85,8 @@ export const rawDataToServerObject = ({ attributes: data }: FractalResponseData)
     eggFeatures: data.egg_features || [],
     featureLimits: { ...data.feature_limits },
     isTransferring: data.is_transferring,
+    expiresAt: data.expires_at || null,
+    pointsPerDay: data.points_per_day ?? null,
     variables: ((data.relationships?.variables as FractalResponseList | undefined)?.data || []).map(
         rawDataToServerEggVariable
     ),
diff --git a/resources/scripts/api/tickets.ts b/resources/scripts/api/tickets.ts
new file mode 100644
index 0000000000..c08f900599
--- /dev/null
+++ b/resources/scripts/api/tickets.ts
@@ -0,0 +1,73 @@
+import http from '@/api/http';
+
+export interface TicketSummary {
+    id: number;
+    title: string;
+    status: string;
+    priority: string;
+    replies_count: number;
+    last_reply_at: string | null;
+    created_at: string;
+}
+
+export interface TicketReply {
+    id: number;
+    content: string;
+    is_staff: boolean;
+    user_name: string;
+    created_at: string;
+}
+
+export interface TicketDetail extends TicketSummary {
+    content: string;
+    replies: TicketReply[];
+}
+
+export interface TicketsResult {
+    data: TicketSummary[];
+    meta: {
+        total: number;
+        current_page: number;
+        last_page: number;
+    };
+}
+
+export const getTickets = (): Promise<TicketsResult> => {
+    return new Promise((resolve, reject) => {
+        http.get('/api/client/tickets')
+            .then(({ data }) => resolve(data))
+            .catch(reject);
+    });
+};
+
+export const getTicket = (id: number): Promise<TicketDetail> => {
+    return new Promise((resolve, reject) => {
+        http.get(`/api/client/tickets/${id}`)
+            .then(({ data }) => resolve(data.ticket))
+            .catch(reject);
+    });
+};
+
+export const createTicket = (title: string, content: string, priority?: string): Promise<TicketSummary> => {
+    return new Promise((resolve, reject) => {
+        http.post('/api/client/tickets', { title, content, priority: priority ?? 'normal' })
+            .then(({ data }) => resolve(data.ticket))
+            .catch(reject);
+    });
+};
+
+export const replyTicket = (id: number, content: string): Promise<void> => {
+    return new Promise((resolve, reject) => {
+        http.post(`/api/client/tickets/${id}/reply`, { content })
+            .then(() => resolve())
+            .catch(reject);
+    });
+};
+
+export const closeTicket = (id: number): Promise<void> => {
+    return new Promise((resolve, reject) => {
+        http.post(`/api/client/tickets/${id}/close`, {})
+            .then(() => resolve())
+            .catch(reject);
+    });
+};
diff --git a/resources/scripts/components/NavigationBar.tsx b/resources/scripts/components/NavigationBar.tsx
index ba1177189b..89ecd8d213 100644
--- a/resources/scripts/components/NavigationBar.tsx
+++ b/resources/scripts/components/NavigationBar.tsx
@@ -2,7 +2,7 @@ import * as React from 'react';
 import { useState } from 'react';
 import { Link, NavLink } from 'react-router-dom';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faCogs, faLayerGroup, faSignOutAlt } from '@fortawesome/free-solid-svg-icons';
+import { faCogs, faLayerGroup, faShoppingCart, faSignOutAlt, faStar, faTicketAlt } from '@fortawesome/free-solid-svg-icons';
 import { useStoreState } from 'easy-peasy';
 import { ApplicationStore } from '@/state';
 import SearchContainer from '@/components/dashboard/search/SearchContainer';
@@ -69,6 +69,21 @@ export default () => {
                             <FontAwesomeIcon icon={faLayerGroup} />
                         </NavLink>
                     </Tooltip>
+                    <Tooltip placement={'bottom'} content={'商店'}>
+                        <NavLink to={'/store'}>
+                            <FontAwesomeIcon icon={faShoppingCart} />
+                        </NavLink>
+                    </Tooltip>
+                    <Tooltip placement={'bottom'} content={'我的积分'}>
+                        <NavLink to={'/points'}>
+                            <FontAwesomeIcon icon={faStar} />
+                        </NavLink>
+                    </Tooltip>
+                    <Tooltip placement={'bottom'} content={'工单'}>
+                        <NavLink to={'/tickets'}>
+                            <FontAwesomeIcon icon={faTicketAlt} />
+                        </NavLink>
+                    </Tooltip>
                     {rootAdmin && (
                         <Tooltip placement={'bottom'} content={'管理员后台'}>
                             <a href={'/admin'} rel={'noreferrer'}>
diff --git a/resources/scripts/components/dashboard/PointsContainer.tsx b/resources/scripts/components/dashboard/PointsContainer.tsx
new file mode 100644
index 0000000000..786dc74242
--- /dev/null
+++ b/resources/scripts/components/dashboard/PointsContainer.tsx
@@ -0,0 +1,128 @@
+import React from 'react';
+import useSWR from 'swr';
+import tw from 'twin.macro';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import Spinner from '@/components/elements/Spinner';
+import ContentBox from '@/components/elements/ContentBox';
+import getPoints, { PointsData } from '@/api/getPoints';
+import getServers from '@/api/getServers';
+import useFlash from '@/plugins/useFlash';
+import { PaginatedResult } from '@/api/http';
+import { Server } from '@/api/server/getServer';
+
+const typeLabel: Record<string, string> = {
+    earn: '购买获得',
+    spend: '消费',
+    refund: '退款',
+    admin_adjust: '管理员调整',
+    redeem_code: '兑换码',
+};
+
+export default () => {
+    const { clearFlashes, clearAndAddHttpError } = useFlash();
+
+    const { data, error } = useSWR<PointsData>('/api/client/points', () => getPoints());
+    const { data: serversData } = useSWR<PaginatedResult<Server>>(
+        ['/api/client/servers', false, 1],
+        () => getServers({ page: 1 })
+    );
+
+    React.useEffect(() => {
+        if (error) clearAndAddHttpError({ key: 'points', error });
+        if (!error) clearFlashes('points');
+    }, [error]);
+
+    const serversWithCost = serversData?.items.filter((s) => s.pointsPerDay) ?? [];
+    const totalDailyCost = serversWithCost.reduce((sum, s) => sum + (s.pointsPerDay ?? 0), 0);
+
+    return (
+        <PageContentBlock title={'我的积分'} showFlashKey={'points'}>
+            {!data ? (
+                <Spinner centered size={'large'} />
+            ) : (
+                <div css={tw`mt-4 space-y-6`}>
+                    {/* Balance + daily cost card */}
+                    <div css={tw`grid grid-cols-1 sm:grid-cols-2 gap-4`}>
+                        <div css={tw`bg-neutral-700 rounded-lg p-6 shadow-lg flex items-center justify-between`}>
+                            <div>
+                                <p css={tw`text-neutral-400 text-sm`}>当前积分余额</p>
+                                <p css={tw`text-5xl font-bold text-cyan-400 mt-1`}>{data.balance.toLocaleString()}</p>
+                            </div>
+                            <div css={tw`text-6xl opacity-10`}>⭐</div>
+                        </div>
+                        <div css={tw`bg-neutral-700 rounded-lg p-6 shadow-lg flex items-center justify-between`}>
+                            <div>
+                                <p css={tw`text-neutral-400 text-sm`}>每日扣除（所有服务器）</p>
+                                <p css={tw`text-5xl font-bold text-yellow-400 mt-1`}>{totalDailyCost.toLocaleString()}</p>
+                                {data.balance > 0 && totalDailyCost > 0 && (
+                                    <p css={tw`text-neutral-500 text-xs mt-2`}>
+                                        约可维持 {Math.floor(data.balance / totalDailyCost)} 天
+                                        {serversData && serversData.pagination.total > serversData.pagination.perPage && (
+                                            <span css={tw`text-neutral-600`}> (仅计算当前页)</span>
+                                        )}
+                                    </p>
+                                )}
+                            </div>
+                            <div css={tw`text-6xl opacity-10`}>🕐</div>
+                        </div>
+                    </div>
+
+                    {/* Per-server cost breakdown */}
+                    {serversWithCost.length > 0 && (
+                        <ContentBox title={'服务器积分消耗明细'}>
+                            <div css={tw`divide-y divide-neutral-600`}>
+                                {serversWithCost.map((server) => (
+                                    <div key={server.uuid} css={tw`flex items-center justify-between py-3`}>
+                                        <div>
+                                            <p css={tw`text-neutral-200 text-sm`}>{server.name}</p>
+                                            <p css={tw`text-neutral-500 text-xs mt-0.5`}>
+                                                CPU {server.limits.cpu}% / 内存 {server.limits.memory}MB / 磁盘 {server.limits.disk}MB
+                                            </p>
+                                        </div>
+                                        <span css={tw`text-yellow-400 font-bold text-sm`}>
+                                            {server.pointsPerDay} 积分/天
+                                        </span>
+                                    </div>
+                                ))}
+                            </div>
+                        </ContentBox>
+                    )}
+
+                    {/* Transaction history */}
+                    <ContentBox title={'积分明细'}>
+                        {data.transactions.length === 0 ? (
+                            <p css={tw`text-center text-sm text-neutral-400 py-4`}>暂无积分记录。</p>
+                        ) : (
+                            <div css={tw`divide-y divide-neutral-600`}>
+                                {data.transactions.map((t) => (
+                                    <div key={t.id} css={tw`flex items-center justify-between py-3`}>
+                                        <div>
+                                            <p css={tw`text-neutral-200 text-sm`}>
+                                                {typeLabel[t.type] || t.type}
+                                            </p>
+                                            {t.description && (
+                                                <p css={tw`text-neutral-500 text-xs mt-0.5`}>{t.description}</p>
+                                            )}
+                                            <p css={tw`text-neutral-600 text-xs mt-0.5`}>
+                                                {new Date(t.created_at).toLocaleString('zh-CN')}
+                                            </p>
+                                        </div>
+                                        <span
+                                            css={[
+                                                tw`font-bold text-lg`,
+                                                t.amount >= 0 ? tw`text-green-400` : tw`text-red-400`,
+                                            ]}
+                                        >
+                                            {t.amount >= 0 ? '+' : ''}
+                                            {t.amount}
+                                        </span>
+                                    </div>
+                                ))}
+                            </div>
+                        )}
+                    </ContentBox>
+                </div>
+            )}
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/dashboard/RedeemContainer.tsx b/resources/scripts/components/dashboard/RedeemContainer.tsx
new file mode 100644
index 0000000000..08906c703d
--- /dev/null
+++ b/resources/scripts/components/dashboard/RedeemContainer.tsx
@@ -0,0 +1,75 @@
+import React, { useState } from 'react';
+import tw from 'twin.macro';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import ContentBox from '@/components/elements/ContentBox';
+import redeemCode, { RedeemResult } from '@/api/redeemCode';
+import useFlash from '@/plugins/useFlash';
+
+export default () => {
+    const { clearFlashes, clearAndAddHttpError, addFlash } = useFlash();
+    const [code, setCode] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [result, setResult] = useState<RedeemResult | null>(null);
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (!code.trim()) return;
+
+        clearFlashes('redeem');
+        setResult(null);
+        setLoading(true);
+
+        try {
+            const res = await redeemCode(code.trim());
+            setResult(res);
+            setCode('');
+            addFlash({
+                type: 'success',
+                key: 'redeem',
+                title: '兑换成功',
+                message: res.message,
+            });
+        } catch (e) {
+            clearAndAddHttpError({ key: 'redeem', error: e as any });
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    return (
+        <PageContentBlock title={'兑换码'} showFlashKey={'redeem'}>
+            <div css={tw`max-w-lg mx-auto mt-8`}>
+                <ContentBox title={'输入兑换码'}>
+                    <p css={tw`text-neutral-400 text-sm mb-4`}>
+                        输入您的兑换码以获取积分、延长服务器有效期或其他奖励。
+                    </p>
+                    <form onSubmit={handleSubmit}>
+                        <div css={tw`flex gap-3`}>
+                            <input
+                                type={'text'}
+                                value={code}
+                                onChange={(e) => setCode(e.target.value)}
+                                placeholder={'请输入兑换码…'}
+                                css={tw`flex-1 bg-neutral-800 border border-neutral-600 text-white rounded px-3 py-2 text-sm focus:outline-none focus:border-cyan-500 transition-colors duration-150`}
+                                disabled={loading}
+                            />
+                            <button
+                                type={'submit'}
+                                css={tw`bg-cyan-500 hover:bg-cyan-600 text-white text-sm px-5 py-2 rounded transition-colors duration-150 disabled:opacity-50`}
+                                disabled={loading || !code.trim()}
+                            >
+                                {loading ? '兑换中…' : '立即兑换'}
+                            </button>
+                        </div>
+                    </form>
+
+                    {result && (
+                        <div css={tw`mt-4 p-4 bg-green-900 bg-opacity-40 border border-green-700 rounded`}>
+                            <p css={tw`text-green-400 text-sm font-medium`}>{result.message}</p>
+                        </div>
+                    )}
+                </ContentBox>
+            </div>
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/dashboard/ServerRow.tsx b/resources/scripts/components/dashboard/ServerRow.tsx
index ef76df6dfe..5c16066473 100644
--- a/resources/scripts/components/dashboard/ServerRow.tsx
+++ b/resources/scripts/components/dashboard/ServerRow.tsx
@@ -1,6 +1,6 @@
 import React, { memo, useEffect, useRef, useState } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faEthernet, faHdd, faMemory, faMicrochip, faServer } from '@fortawesome/free-solid-svg-icons';
+import { faCalendarAlt, faCoins, faEthernet, faHdd, faMemory, faMicrochip, faServer } from '@fortawesome/free-solid-svg-icons';
 import { Link } from 'react-router-dom';
 import { Server } from '@/api/server/getServer';
 import getServerResourceUsage, { ServerPowerState, ServerStats } from '@/api/server/getServerResourceUsage';
@@ -15,6 +15,19 @@ import isEqual from 'react-fast-compare';
 // than the more faded default style.
 const isAlarmState = (current: number, limit: number): boolean => limit > 0 && current / (limit * 1024 * 1024) >= 0.9;
 
+const formatExpiry = (expiresAt: string | null): { label: string; isExpired: boolean; isExpiringSoon: boolean } => {
+    if (!expiresAt) return { label: '', isExpired: false, isExpiringSoon: false };
+    const now = Date.now();
+    const expiry = new Date(expiresAt).getTime();
+    const diff = expiry - now;
+    const isExpired = diff <= 0;
+    const isExpiringSoon = !isExpired && diff < 7 * 24 * 60 * 60 * 1000; // within 7 days
+
+    const date = new Date(expiresAt);
+    const label = `${date.getFullYear()}-${String(date.getMonth() + 1).padStart(2, '0')}-${String(date.getDate()).padStart(2, '0')}`;
+    return { label, isExpired, isExpiringSoon };
+};
+
 const Icon = memo(
     styled(FontAwesomeIcon)<{ $alarm: boolean }>`
         ${(props) => (props.$alarm ? tw`text-red-400` : tw`text-neutral-500`)};
@@ -88,6 +101,8 @@ export default ({ server, className }: { server: Server; className?: string }) =
     const memoryLimit = server.limits.memory !== 0 ? bytesToString(mbToBytes(server.limits.memory)) : '无限制';
     const cpuLimit = server.limits.cpu !== 0 ? server.limits.cpu + ' %' : '无限制';
 
+    const expiry = formatExpiry(server.expiresAt);
+
     return (
         <StatusIndicatorBox as={Link} to={`/server/${server.id}`} className={className} $status={stats?.status}>
             <div css={tw`flex items-center col-span-12 sm:col-span-5 lg:col-span-6`}>
@@ -99,6 +114,33 @@ export default ({ server, className }: { server: Server; className?: string }) =
                     {!!server.description && (
                         <p css={tw`text-sm text-neutral-300 break-words line-clamp-2`}>{server.description}</p>
                     )}
+                    {expiry.label && (
+                        <p css={tw`text-xs mt-1 flex items-center`}>
+                            <FontAwesomeIcon
+                                icon={faCalendarAlt}
+                                css={expiry.isExpired ? tw`text-red-400` : expiry.isExpiringSoon ? tw`text-yellow-400` : tw`text-neutral-500`}
+                            />
+                            <span
+                                css={[
+                                    tw`ml-1`,
+                                    expiry.isExpired
+                                        ? tw`text-red-400`
+                                        : expiry.isExpiringSoon
+                                        ? tw`text-yellow-400`
+                                        : tw`text-neutral-400`,
+                                ]}
+                            >
+                                {expiry.isExpired ? '已到期: ' : '到期: '}
+                                {expiry.label}
+                            </span>
+                        </p>
+                    )}
+                    {server.pointsPerDay !== null && server.pointsPerDay !== undefined && (
+                        <p css={tw`text-xs mt-1 flex items-center`}>
+                            <FontAwesomeIcon icon={faCoins} css={tw`text-yellow-500`} />
+                            <span css={tw`ml-1 text-neutral-400`}>{server.pointsPerDay} 积分/天</span>
+                        </p>
+                    )}
                 </div>
             </div>
             <div css={tw`flex-1 ml-4 lg:block lg:col-span-2 hidden`}>
diff --git a/resources/scripts/components/dashboard/store/CheckoutModal.tsx b/resources/scripts/components/dashboard/store/CheckoutModal.tsx
new file mode 100644
index 0000000000..030c17b2f9
--- /dev/null
+++ b/resources/scripts/components/dashboard/store/CheckoutModal.tsx
@@ -0,0 +1,172 @@
+import React, { useState } from 'react';
+import tw from 'twin.macro';
+import Modal from '@/components/elements/Modal';
+import { Product } from '@/api/getStore';
+import { OrderResponse, PaymentMethod } from '@/api/createOrder';
+
+const ALL_PAYMENT_METHODS: { key: PaymentMethod; label: string; description: string }[] = [
+    {
+        key: 'alipay',
+        label: '支付宝（在线）',
+        description: '使用支付宝 APP 扫码支付',
+    },
+    {
+        key: 'alipay_face',
+        label: '支付宝（面对面）',
+        description: '出示付款码或扫描对方收款码',
+    },
+    {
+        key: 'wechat',
+        label: '微信支付',
+        description: '使用微信扫描支付二维码',
+    },
+];
+
+interface Props {
+    product: Product | null;
+    isOpen: boolean;
+    enabledMethods: string[];
+    onClose: () => void;
+    onCheckout: (paymentMethod: PaymentMethod) => Promise<OrderResponse | undefined>;
+}
+
+export default ({ product, isOpen, enabledMethods, onClose, onCheckout }: Props) => {
+    const available = ALL_PAYMENT_METHODS.filter((m) => enabledMethods.includes(m.key));
+    const [selectedMethod, setSelectedMethod] = useState<PaymentMethod>(
+        available.length > 0 ? available[0].key : 'alipay'
+    );
+    const [loading, setLoading] = useState(false);
+    const [orderResult, setOrderResult] = useState<OrderResponse | null>(null);
+
+    const handleSubmit = async () => {
+        setLoading(true);
+        try {
+            const result = await onCheckout(selectedMethod);
+            if (result) {
+                setOrderResult(result);
+            }
+        } catch {
+            // Error is handled by the parent (StoreContainer) via flash messages.
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const handleClose = () => {
+        setOrderResult(null);
+        onClose();
+    };
+
+    if (!product) return null;
+
+    return (
+        <Modal visible={isOpen} onDismissed={handleClose} showSpinnerOverlay={loading} dismissable>
+            <div css={tw`p-4`}>
+                {orderResult ? (
+                    <div>
+                        <h2 css={tw`text-xl font-bold text-white mb-4`}>订单已创建</h2>
+                        <div css={tw`bg-neutral-800 rounded p-4 mb-4`}>
+                            <p css={tw`text-neutral-300 text-sm mb-2`}>
+                                订单号：<span css={tw`text-white font-mono`}>{orderResult.order_no}</span>
+                            </p>
+                            <p css={tw`text-neutral-300 text-sm mb-4`}>
+                                金额：
+                                <span css={tw`text-cyan-400 font-bold text-lg`}>
+                                    ¥{orderResult.amount.toFixed(2)}
+                                </span>
+                            </p>
+                            {orderResult.payment_info.instructions && (
+                                <p css={tw`text-neutral-400 text-sm mb-2`}>{orderResult.payment_info.instructions}</p>
+                            )}
+                            {orderResult.payment_info.qr_placeholder && (
+                                <div css={tw`bg-white p-4 rounded inline-block mt-2`}>
+                                    {orderResult.payment_info.qr_placeholder.startsWith('data:image') ? (
+                                        <img
+                                            src={orderResult.payment_info.qr_placeholder}
+                                            alt={'收款码'}
+                                            css={tw`max-w-xs`}
+                                        />
+                                    ) : (
+                                        <>
+                                            <p css={tw`text-gray-500 text-xs text-center`}>（支付二维码将在此显示）</p>
+                                            <p css={tw`text-gray-400 text-xs text-center mt-1 break-all`}>
+                                                {orderResult.payment_info.qr_placeholder}
+                                            </p>
+                                        </>
+                                    )}
+                                </div>
+                            )}
+                        </div>
+                        <button
+                            css={tw`w-full bg-neutral-600 hover:bg-neutral-500 text-white py-2 rounded transition-colors duration-150`}
+                            onClick={handleClose}
+                        >
+                            关闭
+                        </button>
+                    </div>
+                ) : (
+                    <div>
+                        <h2 css={tw`text-xl font-bold text-white mb-1`}>购买确认</h2>
+                        <p css={tw`text-neutral-400 text-sm mb-4`}>
+                            {product.name} — ¥{product.price.toFixed(2)}
+                        </p>
+
+                        {available.length === 0 ? (
+                            <div css={tw`bg-red-900 bg-opacity-40 border border-red-700 rounded p-4 mb-4`}>
+                                <p css={tw`text-red-400 text-sm`}>当前暂无可用的支付方式，请联系管理员开启支付方式。</p>
+                            </div>
+                        ) : (
+                            <>
+                                <p css={tw`text-neutral-300 text-sm mb-3`}>请选择支付方式：</p>
+                                <div css={tw`space-y-2 mb-6`}>
+                                    {available.map((m) => (
+                                        <label
+                                            key={m.key}
+                                            css={[
+                                                tw`flex items-start p-3 rounded border cursor-pointer transition-colors duration-150`,
+                                                selectedMethod === m.key
+                                                    ? tw`border-cyan-500 bg-cyan-900 bg-opacity-30`
+                                                    : tw`border-neutral-600 hover:border-neutral-400`,
+                                            ]}
+                                        >
+                                            <input
+                                                type={'radio'}
+                                                name={'payment_method'}
+                                                value={m.key}
+                                                checked={selectedMethod === m.key}
+                                                onChange={() => setSelectedMethod(m.key)}
+                                                css={tw`mt-1 mr-3`}
+                                            />
+                                            <div>
+                                                <p css={tw`text-white text-sm font-medium`}>{m.label}</p>
+                                                <p css={tw`text-neutral-400 text-xs mt-0.5`}>{m.description}</p>
+                                            </div>
+                                        </label>
+                                    ))}
+                                </div>
+                            </>
+                        )}
+
+                        <div css={tw`flex gap-3`}>
+                            <button
+                                css={tw`flex-1 bg-neutral-600 hover:bg-neutral-500 text-white py-2 rounded transition-colors duration-150`}
+                                onClick={handleClose}
+                            >
+                                取消
+                            </button>
+                            {available.length > 0 && (
+                                <button
+                                    css={tw`flex-1 bg-cyan-500 hover:bg-cyan-600 text-white py-2 rounded transition-colors duration-150`}
+                                    onClick={handleSubmit}
+                                    disabled={loading}
+                                >
+                                    确认支付
+                                </button>
+                            )}
+                        </div>
+                    </div>
+                )}
+            </div>
+        </Modal>
+    );
+};
diff --git a/resources/scripts/components/dashboard/store/OrdersContainer.tsx b/resources/scripts/components/dashboard/store/OrdersContainer.tsx
new file mode 100644
index 0000000000..1df32a9a40
--- /dev/null
+++ b/resources/scripts/components/dashboard/store/OrdersContainer.tsx
@@ -0,0 +1,188 @@
+import React, { useState } from 'react';
+import useSWR from 'swr';
+import tw from 'twin.macro';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import Spinner from '@/components/elements/Spinner';
+import ContentBox from '@/components/elements/ContentBox';
+import Modal from '@/components/elements/Modal';
+import { getOrders, cancelOrder, Order, OrdersResult } from '@/api/getOrders';
+import { queryOrder, OrderPaymentInfo } from '@/api/createOrder';
+import useFlash from '@/plugins/useFlash';
+
+const statusLabel: Record<string, { text: string; color: string }> = {
+    pending:   { text: '待支付', color: '#f39c12' },
+    paid:      { text: '已支付', color: '#27ae60' },
+    cancelled: { text: '已取消', color: '#7f8c8d' },
+    refunded:  { text: '已退款', color: '#2980b9' },
+};
+
+const methodLabel: Record<string, string> = {
+    alipay:      '支付宝',
+    alipay_face: '支付宝面对面',
+    wechat:      '微信支付',
+};
+
+interface ResumeState {
+    order: Order;
+    paymentInfo: OrderPaymentInfo;
+}
+
+export default () => {
+    const { clearFlashes, clearAndAddHttpError, addFlash } = useFlash();
+    const [cancelling, setCancelling] = useState<string | null>(null);
+    const [resuming, setResuming] = useState<string | null>(null);
+    const [resumeModal, setResumeModal] = useState<ResumeState | null>(null);
+
+    const { data, error, mutate } = useSWR<OrdersResult>('/api/client/orders', () => getOrders());
+
+    React.useEffect(() => {
+        if (error) clearAndAddHttpError({ key: 'orders', error });
+        if (!error) clearFlashes('orders');
+    }, [error]);
+
+    const handleCancel = async (orderNo: string) => {
+        if (!confirm('确定取消此订单？')) return;
+        setCancelling(orderNo);
+        try {
+            await cancelOrder(orderNo);
+            addFlash({ type: 'success', key: 'orders', title: '订单已取消', message: `订单 ${orderNo} 已成功取消。` });
+            mutate();
+        } catch (e) {
+            clearAndAddHttpError({ key: 'orders', error: e as any });
+        } finally {
+            setCancelling(null);
+        }
+    };
+
+    const handleResume = async (order: Order) => {
+        setResuming(order.order_no);
+        try {
+            const status = await queryOrder(order.order_no);
+            if (status.payment_info) {
+                setResumeModal({ order, paymentInfo: status.payment_info });
+            } else {
+                addFlash({ type: 'info', key: 'orders', title: '订单状态已更新', message: '该订单已不再是待支付状态，请刷新。' });
+                mutate();
+            }
+        } catch (e) {
+            clearAndAddHttpError({ key: 'orders', error: e as any });
+        } finally {
+            setResuming(null);
+        }
+    };
+
+    return (
+        <PageContentBlock title={'我的订单'} showFlashKey={'orders'}>
+            {/* Resume payment modal */}
+            {resumeModal && (
+                <Modal visible onDismissed={() => setResumeModal(null)} dismissable>
+                    <div css={tw`p-4`}>
+                        <h2 css={tw`text-xl font-bold text-white mb-3`}>继续支付</h2>
+                        <div css={tw`bg-neutral-800 rounded p-4 mb-4`}>
+                            <p css={tw`text-neutral-300 text-sm mb-2`}>
+                                订单号：<span css={tw`text-white font-mono`}>{resumeModal.order.order_no}</span>
+                            </p>
+                            <p css={tw`text-neutral-300 text-sm mb-4`}>
+                                金额：
+                                <span css={tw`text-cyan-400 font-bold text-lg`}>
+                                    {resumeModal.order.currency === 'CNY' ? '¥' : resumeModal.order.currency}
+                                    {resumeModal.order.amount.toFixed(2)}
+                                </span>
+                                &nbsp;· {resumeModal.order.payment_method ? (methodLabel[resumeModal.order.payment_method] ?? resumeModal.order.payment_method) : ''}
+                            </p>
+                            {resumeModal.paymentInfo.instructions && (
+                                <p css={tw`text-neutral-400 text-sm mb-3`}>{resumeModal.paymentInfo.instructions}</p>
+                            )}
+                            {resumeModal.paymentInfo.qr_placeholder && (
+                                <div css={tw`bg-white p-4 rounded inline-block`}>
+                                    {resumeModal.paymentInfo.qr_placeholder.startsWith('data:image') ? (
+                                        <img
+                                            src={resumeModal.paymentInfo.qr_placeholder}
+                                            alt={'收款码'}
+                                            css={tw`max-w-xs`}
+                                        />
+                                    ) : (
+                                        <>
+                                            <p css={tw`text-gray-500 text-xs text-center`}>（支付二维码将在此显示）</p>
+                                            <p css={tw`text-gray-400 text-xs text-center mt-1 break-all`}>
+                                                {resumeModal.paymentInfo.qr_placeholder}
+                                            </p>
+                                        </>
+                                    )}
+                                </div>
+                            )}
+                        </div>
+                        <button
+                            css={tw`w-full bg-neutral-600 hover:bg-neutral-500 text-white py-2 rounded transition-colors duration-150`}
+                            onClick={() => { setResumeModal(null); mutate(); }}
+                        >
+                            关闭（支付完成后刷新页面）
+                        </button>
+                    </div>
+                </Modal>
+            )}
+
+            {!data ? (
+                <Spinner centered size={'large'} />
+            ) : data.data.length === 0 ? (
+                <p css={tw`text-center text-sm text-neutral-400 mt-8`}>暂无订单记录。</p>
+            ) : (
+                <ContentBox css={tw`mt-4`}>
+                    <div css={tw`divide-y divide-neutral-600`}>
+                        {data.data.map((order: Order) => {
+                            const st = statusLabel[order.status] ?? { text: order.status, color: '#888' };
+                            return (
+                                <div key={order.order_no} css={tw`py-4 flex flex-col sm:flex-row sm:items-center sm:justify-between gap-2`}>
+                                    <div css={tw`flex-1`}>
+                                        <div css={tw`flex items-center gap-2`}>
+                                            <span css={tw`font-mono text-xs text-neutral-400`}>{order.order_no}</span>
+                                            <span
+                                                css={tw`text-xs px-2 py-0.5 rounded-full font-medium`}
+                                                style={{ color: st.color, border: `1px solid ${st.color}` }}
+                                            >
+                                                {st.text}
+                                            </span>
+                                        </div>
+                                        <p css={tw`text-neutral-200 text-sm mt-1`}>{order.product_name ?? order.subject}</p>
+                                        <p css={tw`text-neutral-500 text-xs mt-0.5`}>
+                                            {order.payment_method ? (methodLabel[order.payment_method] ?? order.payment_method) : '—'}
+                                            &nbsp;·&nbsp;
+                                            {new Date(order.created_at).toLocaleDateString('zh-CN')}
+                                            {order.paid_at && (
+                                                <span css={tw`text-green-500`}>&nbsp;· 支付于 {new Date(order.paid_at).toLocaleDateString('zh-CN')}</span>
+                                            )}
+                                        </p>
+                                    </div>
+                                    <div css={tw`flex items-center gap-2`}>
+                                        <span css={tw`text-xl font-bold text-cyan-400`}>
+                                            {order.currency === 'CNY' ? '¥' : order.currency}
+                                            {order.amount.toFixed(2)}
+                                        </span>
+                                        {order.status === 'pending' && (
+                                            <>
+                                                <button
+                                                    css={tw`bg-cyan-600 hover:bg-cyan-500 text-white text-xs px-3 py-1 rounded transition-colors duration-150 disabled:opacity-50`}
+                                                    onClick={() => handleResume(order)}
+                                                    disabled={resuming === order.order_no}
+                                                >
+                                                    {resuming === order.order_no ? '加载中…' : '继续支付'}
+                                                </button>
+                                                <button
+                                                    css={tw`bg-red-700 hover:bg-red-600 text-white text-xs px-3 py-1 rounded transition-colors duration-150 disabled:opacity-50`}
+                                                    onClick={() => handleCancel(order.order_no)}
+                                                    disabled={cancelling === order.order_no}
+                                                >
+                                                    {cancelling === order.order_no ? '取消中…' : '取消订单'}
+                                                </button>
+                                            </>
+                                        )}
+                                    </div>
+                                </div>
+                            );
+                        })}
+                    </div>
+                </ContentBox>
+            )}
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/dashboard/store/StoreContainer.tsx b/resources/scripts/components/dashboard/store/StoreContainer.tsx
new file mode 100644
index 0000000000..36eb51af6d
--- /dev/null
+++ b/resources/scripts/components/dashboard/store/StoreContainer.tsx
@@ -0,0 +1,167 @@
+import React, { useState } from 'react';
+import useSWR from 'swr';
+import tw from 'twin.macro';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import Spinner from '@/components/elements/Spinner';
+import getStore, { Product, StoreData } from '@/api/getStore';
+import { createOrder, PaymentMethod } from '@/api/createOrder';
+import useFlash from '@/plugins/useFlash';
+import ContentBox from '@/components/elements/ContentBox';
+import CheckoutModal from '@/components/dashboard/store/CheckoutModal';
+
+export default () => {
+    const { clearFlashes, clearAndAddHttpError, addFlash } = useFlash();
+    const [selectedProduct, setSelectedProduct] = useState<Product | null>(null);
+    const [isCheckoutOpen, setIsCheckoutOpen] = useState(false);
+
+    const { data, error } = useSWR<StoreData>('/api/client/store', () => getStore());
+
+    React.useEffect(() => {
+        if (error) clearAndAddHttpError({ key: 'store', error });
+        if (!error) clearFlashes('store');
+    }, [error]);
+
+    const handleBuy = (product: Product) => {
+        setSelectedProduct(product);
+        setIsCheckoutOpen(true);
+    };
+
+    const handleCheckout = async (paymentMethod: PaymentMethod) => {
+        if (!selectedProduct) return;
+        clearFlashes('store');
+        try {
+            const order = await createOrder(selectedProduct.id, paymentMethod);
+            setIsCheckoutOpen(false);
+            addFlash({
+                type: 'success',
+                key: 'store',
+                title: '订单已创建',
+                message: `订单号：${order.order_no}，请完成支付。`,
+            });
+            return order;
+        } catch (e) {
+            clearAndAddHttpError({ key: 'store', error: e as any });
+        }
+    };
+
+    const currencyLabel = (currency: string) => (currency === 'CNY' ? '¥' : currency);
+
+    const typeLabel = (type: string, value: number) => {
+        switch (type) {
+            case 'points':
+                return `${value} 积分`;
+            case 'server_days':
+                return `延期 ${value} 天`;
+            case 'server':
+                return '服务器套餐';
+            default:
+                return String(value);
+        }
+    };
+
+    return (
+        <PageContentBlock title={'商店'} showFlashKey={'store'}>
+            <CheckoutModal
+                product={selectedProduct}
+                isOpen={isCheckoutOpen}
+                enabledMethods={data?.payment_methods ?? []}
+                onClose={() => setIsCheckoutOpen(false)}
+                onCheckout={handleCheckout}
+            />
+            {!data ? (
+                <Spinner centered size={'large'} />
+            ) : data.products.length === 0 ? (
+                <p css={tw`text-center text-sm text-neutral-400 mt-8`}>暂无在售商品。</p>
+            ) : (
+                <div css={tw`grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-4 mt-4`}>
+                    {data.products.map((product) => (
+                        <ContentBox key={product.id} css={tw`flex flex-col`}>
+                            <div css={tw`flex-1`}>
+                                <div css={tw`flex items-center justify-between mb-2`}>
+                                    <h3 css={tw`text-neutral-100 text-lg font-semibold`}>{product.name}</h3>
+                                    <span css={tw`text-xs px-2 py-0.5 rounded-full bg-neutral-600 text-neutral-300`}>
+                                        {product.type === 'points'     ? '积分'
+                                            : product.type === 'server_days' ? '延期'
+                                            : product.type === 'server'      ? '服务器'
+                                            : '其他'}
+                                    </span>
+                                </div>
+                                {product.description && (
+                                    <p css={tw`text-neutral-400 text-sm mb-3`}>{product.description}</p>
+                                )}
+                                <p css={tw`text-neutral-300 text-sm`}>
+                                    内容：<span css={tw`text-white`}>{typeLabel(product.type, product.value)}</span>
+                                </p>
+
+                                {/* Server package resource details */}
+                                {product.type === 'server' && product.server_config && (
+                                    <div css={tw`mt-3 space-y-1`}>
+                                        {product.server_config.location && (
+                                            <p css={tw`text-neutral-400 text-xs`}>
+                                                📍 {product.server_config.location.short} — {product.server_config.location.long}
+                                            </p>
+                                        )}
+                                        {product.server_config.node && (
+                                            <p css={tw`text-neutral-400 text-xs`}>
+                                                🖥 节点：{product.server_config.node.name}
+                                            </p>
+                                        )}
+                                        <div css={tw`flex flex-wrap gap-2 mt-2`}>
+                                            {product.server_config.cpu != null && (
+                                                <span css={tw`bg-neutral-600 text-neutral-200 text-xs px-2 py-0.5 rounded`}>
+                                                    CPU {product.server_config.cpu}%
+                                                </span>
+                                            )}
+                                            {product.server_config.memory != null && (
+                                                <span css={tw`bg-neutral-600 text-neutral-200 text-xs px-2 py-0.5 rounded`}>
+                                                    内存 {(product.server_config.memory / 1024).toFixed(1)}GB
+                                                </span>
+                                            )}
+                                            {product.server_config.disk != null && (
+                                                <span css={tw`bg-neutral-600 text-neutral-200 text-xs px-2 py-0.5 rounded`}>
+                                                    磁盘 {(product.server_config.disk / 1024).toFixed(1)}GB
+                                                </span>
+                                            )}
+                                            {product.server_config.databases != null && product.server_config.databases > 0 && (
+                                                <span css={tw`bg-neutral-600 text-neutral-200 text-xs px-2 py-0.5 rounded`}>
+                                                    DB×{product.server_config.databases}
+                                                </span>
+                                            )}
+                                            {product.server_config.backups != null && product.server_config.backups > 0 && (
+                                                <span css={tw`bg-neutral-600 text-neutral-200 text-xs px-2 py-0.5 rounded`}>
+                                                    备份×{product.server_config.backups}
+                                                </span>
+                                            )}
+                                        </div>
+                                    </div>
+                                )}
+                            </div>
+                            <div css={tw`mt-4 flex items-center justify-between`}>
+                                <span css={tw`text-2xl font-bold text-cyan-400`}>
+                                    {currencyLabel(product.currency)}
+                                    {product.price.toFixed(2)}
+                                </span>
+                                <button
+                                    css={[
+                                        tw`text-white text-sm px-4 py-2 rounded transition-colors duration-150`,
+                                        data.payment_methods.length === 0
+                                            ? tw`bg-neutral-600 cursor-not-allowed opacity-50`
+                                            : tw`bg-cyan-500 hover:bg-cyan-600`,
+                                    ]}
+                                    onClick={() => handleBuy(product)}
+                                    disabled={data.payment_methods.length === 0}
+                                    title={data.payment_methods.length === 0 ? '暂无可用支付方式' : undefined}
+                                >
+                                    立即购买
+                                </button>
+                            </div>
+                        </ContentBox>
+                    ))}
+                </div>
+            )}
+            {data && data.payment_methods.length === 0 && (
+                <p css={tw`text-center text-xs text-neutral-500 mt-4`}>⚠ 管理员尚未开启任何支付方式，暂时无法购买。</p>
+            )}
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/dashboard/store/TicketDetailContainer.tsx b/resources/scripts/components/dashboard/store/TicketDetailContainer.tsx
new file mode 100644
index 0000000000..556c9a932f
--- /dev/null
+++ b/resources/scripts/components/dashboard/store/TicketDetailContainer.tsx
@@ -0,0 +1,179 @@
+import React, { useState } from 'react';
+import useSWR from 'swr';
+import tw from 'twin.macro';
+import { useParams, useHistory } from 'react-router-dom';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import Spinner from '@/components/elements/Spinner';
+import ContentBox from '@/components/elements/ContentBox';
+import { getTicket, replyTicket, closeTicket, TicketDetail } from '@/api/tickets';
+import useFlash from '@/plugins/useFlash';
+
+const statusLabel: Record<string, string> = {
+    open: '待处理', in_progress: '处理中', closed: '已关闭',
+};
+
+const priorityLabel: Record<string, string> = {
+    low: '低', normal: '普通', high: '高', urgent: '紧急',
+};
+
+export default () => {
+    const { id } = useParams<{ id: string }>();
+    const history = useHistory();
+    const ticketId = parseInt(id, 10);
+
+    const { clearFlashes, clearAndAddHttpError, addFlash } = useFlash();
+    const [replyContent, setReplyContent] = useState('');
+    const [submitting, setSubmitting] = useState(false);
+    const [closing, setClosing] = useState(false);
+
+    const { data, error, mutate } = useSWR<TicketDetail>(
+        `/api/client/tickets/${ticketId}`,
+        () => getTicket(ticketId)
+    );
+
+    React.useEffect(() => {
+        if (error) clearAndAddHttpError({ key: 'ticket-detail', error });
+        if (!error) clearFlashes('ticket-detail');
+    }, [error]);
+
+    const handleReply = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (!replyContent.trim()) return;
+
+        setSubmitting(true);
+        try {
+            await replyTicket(ticketId, replyContent.trim());
+            setReplyContent('');
+            addFlash({ type: 'success', key: 'ticket-detail', title: '回复已发送', message: '' });
+            mutate();
+        } catch (e) {
+            clearAndAddHttpError({ key: 'ticket-detail', error: e as any });
+        } finally {
+            setSubmitting(false);
+        }
+    };
+
+    const handleClose = async () => {
+        if (!confirm('确定关闭此工单？关闭后将无法继续回复。')) return;
+        setClosing(true);
+        try {
+            await closeTicket(ticketId);
+            mutate();
+        } catch (e) {
+            clearAndAddHttpError({ key: 'ticket-detail', error: e as any });
+        } finally {
+            setClosing(false);
+        }
+    };
+
+    if (!data && !error) {
+        return <Spinner centered size={'large'} />;
+    }
+
+    if (!data) {
+        return null;
+    }
+
+    return (
+        <PageContentBlock title={`工单 #${data.id}`} showFlashKey={'ticket-detail'}>
+            <div css={tw`mt-4 space-y-4`}>
+                {/* Back button */}
+                <button
+                    css={tw`text-sm text-neutral-400 hover:text-white transition-colors duration-150`}
+                    onClick={() => history.push('/tickets')}
+                >
+                    ← 返回工单列表
+                </button>
+
+                {/* Ticket header */}
+                <div css={tw`bg-neutral-700 rounded-lg p-4 shadow-lg`}>
+                    <div css={tw`flex items-start justify-between`}>
+                        <div>
+                            <h2 css={tw`text-white text-xl font-semibold`}>{data.title}</h2>
+                            <div css={tw`flex gap-2 mt-2 flex-wrap`}>
+                                <span css={tw`text-xs text-neutral-400`}>
+                                    状态：<span css={tw`text-neutral-200`}>{statusLabel[data.status] ?? data.status}</span>
+                                </span>
+                                <span css={tw`text-xs text-neutral-400`}>
+                                    优先级：<span css={tw`text-neutral-200`}>{priorityLabel[data.priority] ?? data.priority}</span>
+                                </span>
+                                <span css={tw`text-xs text-neutral-400`}>
+                                    创建：<span css={tw`text-neutral-200`}>{new Date(data.created_at).toLocaleString('zh-CN')}</span>
+                                </span>
+                            </div>
+                        </div>
+                        {data.status !== 'closed' && (
+                            <button
+                                css={tw`bg-neutral-600 hover:bg-neutral-500 text-white text-xs px-3 py-1 rounded transition-colors duration-150 disabled:opacity-50`}
+                                onClick={handleClose}
+                                disabled={closing}
+                            >
+                                关闭工单
+                            </button>
+                        )}
+                    </div>
+                </div>
+
+                {/* Conversation */}
+                <div css={tw`space-y-3`}>
+                    {/* Initial message */}
+                    <div css={tw`bg-neutral-700 rounded-lg p-4`}>
+                        <p css={tw`text-xs text-neutral-400 mb-2`}>
+                            初始消息 · {new Date(data.created_at).toLocaleString('zh-CN')}
+                        </p>
+                        <p css={tw`text-neutral-200 text-sm whitespace-pre-wrap`}>{data.content}</p>
+                    </div>
+
+                    {/* Replies */}
+                    {data.replies.map((reply) => (
+                        <div
+                            key={reply.id}
+                            css={[
+                                tw`rounded-lg p-4`,
+                                reply.is_staff ? tw`bg-blue-900 bg-opacity-40` : tw`bg-neutral-700`,
+                            ]}
+                        >
+                            <p css={tw`text-xs text-neutral-400 mb-2`}>
+                                {reply.is_staff ? (
+                                    <span css={tw`text-yellow-400 font-medium`}>工作人员</span>
+                                ) : (
+                                    <span css={tw`text-cyan-400`}>{reply.user_name}</span>
+                                )}
+                                {' · '}
+                                {new Date(reply.created_at).toLocaleString('zh-CN')}
+                            </p>
+                            <p css={tw`text-neutral-200 text-sm whitespace-pre-wrap`}>{reply.content}</p>
+                        </div>
+                    ))}
+                </div>
+
+                {/* Reply form */}
+                {data.status !== 'closed' && (
+                    <ContentBox title={'添加回复'}>
+                        <form onSubmit={handleReply} css={tw`space-y-3`}>
+                            <textarea
+                                value={replyContent}
+                                onChange={(e) => setReplyContent(e.target.value)}
+                                css={tw`w-full bg-neutral-800 border border-neutral-600 text-white rounded px-3 py-2 text-sm focus:outline-none focus:border-cyan-500`}
+                                rows={5}
+                                placeholder={'输入您的回复…'}
+                                required
+                            />
+                            <button
+                                type={'submit'}
+                                css={tw`bg-cyan-500 hover:bg-cyan-600 text-white text-sm px-5 py-2 rounded transition-colors duration-150 disabled:opacity-50`}
+                                disabled={submitting || !replyContent.trim()}
+                            >
+                                {submitting ? '发送中…' : '发送回复'}
+                            </button>
+                        </form>
+                    </ContentBox>
+                )}
+
+                {data.status === 'closed' && (
+                    <p css={tw`text-center text-sm text-neutral-500 py-4`}>工单已关闭，如需继续请联系管理员重新开启。</p>
+                )}
+            </div>
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/dashboard/store/TicketsContainer.tsx b/resources/scripts/components/dashboard/store/TicketsContainer.tsx
new file mode 100644
index 0000000000..4ce3bd3531
--- /dev/null
+++ b/resources/scripts/components/dashboard/store/TicketsContainer.tsx
@@ -0,0 +1,186 @@
+import React, { useState } from 'react';
+import useSWR from 'swr';
+import tw from 'twin.macro';
+import { useHistory } from 'react-router-dom';
+import PageContentBlock from '@/components/elements/PageContentBlock';
+import Spinner from '@/components/elements/Spinner';
+import ContentBox from '@/components/elements/ContentBox';
+import { getTickets, createTicket, TicketSummary, TicketsResult } from '@/api/tickets';
+import useFlash from '@/plugins/useFlash';
+
+const statusColor: Record<string, string> = {
+    open:        '#3498db',
+    in_progress: '#f39c12',
+    closed:      '#7f8c8d',
+};
+
+const statusLabel: Record<string, string> = {
+    open:        '待处理',
+    in_progress: '处理中',
+    closed:      '已关闭',
+};
+
+const priorityColor: Record<string, string> = {
+    low:    '#7f8c8d',
+    normal: '#3498db',
+    high:   '#e67e22',
+    urgent: '#e74c3c',
+};
+
+const priorityLabel: Record<string, string> = {
+    low: '低', normal: '普通', high: '高', urgent: '紧急',
+};
+
+export default () => {
+    const history = useHistory();
+    const { clearFlashes, clearAndAddHttpError, addFlash } = useFlash();
+
+    const [showForm, setShowForm] = useState(false);
+    const [title, setTitle] = useState('');
+    const [content, setContent] = useState('');
+    const [priority, setPriority] = useState('normal');
+    const [submitting, setSubmitting] = useState(false);
+
+    const { data, error, mutate } = useSWR<TicketsResult>('/api/client/tickets', () => getTickets());
+
+    React.useEffect(() => {
+        if (error) clearAndAddHttpError({ key: 'tickets', error });
+        if (!error) clearFlashes('tickets');
+    }, [error]);
+
+    const handleSubmit = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (!title.trim() || !content.trim()) return;
+
+        setSubmitting(true);
+        try {
+            const ticket = await createTicket(title.trim(), content.trim(), priority);
+            addFlash({ type: 'success', key: 'tickets', title: '工单已提交', message: `工单 #${ticket.id} 已成功创建。` });
+            setTitle('');
+            setContent('');
+            setShowForm(false);
+            mutate();
+        } catch (e) {
+            clearAndAddHttpError({ key: 'tickets', error: e as any });
+        } finally {
+            setSubmitting(false);
+        }
+    };
+
+    return (
+        <PageContentBlock title={'我的工单'} showFlashKey={'tickets'}>
+            <div css={tw`mt-4 space-y-4`}>
+                {/* Create ticket button */}
+                {!showForm && (
+                    <button
+                        css={tw`bg-cyan-500 hover:bg-cyan-600 text-white text-sm px-4 py-2 rounded transition-colors duration-150`}
+                        onClick={() => setShowForm(true)}
+                    >
+                        + 新建工单
+                    </button>
+                )}
+
+                {/* Create ticket form */}
+                {showForm && (
+                    <ContentBox title={'提交新工单'}>
+                        <form onSubmit={handleSubmit} css={tw`space-y-4`}>
+                            <div>
+                                <label css={tw`block text-neutral-300 text-sm mb-1`}>标题</label>
+                                <input
+                                    type={'text'}
+                                    value={title}
+                                    onChange={(e) => setTitle(e.target.value)}
+                                    css={tw`w-full bg-neutral-800 border border-neutral-600 text-white rounded px-3 py-2 text-sm focus:outline-none focus:border-cyan-500`}
+                                    placeholder={'简要描述您的问题'}
+                                    required
+                                />
+                            </div>
+                            <div>
+                                <label css={tw`block text-neutral-300 text-sm mb-1`}>内容</label>
+                                <textarea
+                                    value={content}
+                                    onChange={(e) => setContent(e.target.value)}
+                                    css={tw`w-full bg-neutral-800 border border-neutral-600 text-white rounded px-3 py-2 text-sm focus:outline-none focus:border-cyan-500`}
+                                    rows={6}
+                                    placeholder={'详细描述您遇到的问题…'}
+                                    required
+                                />
+                            </div>
+                            <div>
+                                <label css={tw`block text-neutral-300 text-sm mb-1`}>优先级</label>
+                                <select
+                                    value={priority}
+                                    onChange={(e) => setPriority(e.target.value)}
+                                    css={tw`bg-neutral-800 border border-neutral-600 text-white rounded px-3 py-2 text-sm focus:outline-none focus:border-cyan-500`}
+                                >
+                                    <option value={'low'}>低</option>
+                                    <option value={'normal'}>普通</option>
+                                    <option value={'high'}>高</option>
+                                    <option value={'urgent'}>紧急</option>
+                                </select>
+                            </div>
+                            <div css={tw`flex gap-3`}>
+                                <button
+                                    type={'button'}
+                                    css={tw`bg-neutral-600 hover:bg-neutral-500 text-white text-sm px-4 py-2 rounded transition-colors duration-150`}
+                                    onClick={() => setShowForm(false)}
+                                >
+                                    取消
+                                </button>
+                                <button
+                                    type={'submit'}
+                                    css={tw`bg-cyan-500 hover:bg-cyan-600 text-white text-sm px-4 py-2 rounded transition-colors duration-150 disabled:opacity-50`}
+                                    disabled={submitting}
+                                >
+                                    {submitting ? '提交中…' : '提交工单'}
+                                </button>
+                            </div>
+                        </form>
+                    </ContentBox>
+                )}
+
+                {/* Tickets list */}
+                {!data ? (
+                    <Spinner centered size={'large'} />
+                ) : data.data.length === 0 ? (
+                    <p css={tw`text-center text-sm text-neutral-400 mt-4`}>暂无工单。点击上方按钮创建您的第一个工单。</p>
+                ) : (
+                    <ContentBox>
+                        <div css={tw`divide-y divide-neutral-600`}>
+                            {data.data.map((ticket: TicketSummary) => (
+                                <div
+                                    key={ticket.id}
+                                    css={tw`py-4 flex items-center justify-between cursor-pointer hover:bg-neutral-600 hover:bg-opacity-30 px-2 rounded transition-colors duration-150`}
+                                    onClick={() => history.push(`/tickets/${ticket.id}`)}
+                                >
+                                    <div css={tw`flex-1`}>
+                                        <div css={tw`flex items-center gap-2 flex-wrap`}>
+                                            <span css={tw`text-neutral-400 text-xs font-mono`}>#{ticket.id}</span>
+                                            <span
+                                                css={tw`text-xs px-2 py-0.5 rounded-full`}
+                                                style={{ color: statusColor[ticket.status], border: `1px solid ${statusColor[ticket.status]}` }}
+                                            >
+                                                {statusLabel[ticket.status] ?? ticket.status}
+                                            </span>
+                                            <span
+                                                css={tw`text-xs px-2 py-0.5 rounded-full`}
+                                                style={{ color: priorityColor[ticket.priority], border: `1px solid ${priorityColor[ticket.priority]}` }}
+                                            >
+                                                {priorityLabel[ticket.priority] ?? ticket.priority}
+                                            </span>
+                                        </div>
+                                        <p css={tw`text-neutral-200 text-sm mt-1`}>{ticket.title}</p>
+                                        <p css={tw`text-neutral-500 text-xs mt-0.5`}>
+                                            {ticket.replies_count} 条回复 · {new Date(ticket.created_at).toLocaleDateString('zh-CN')}
+                                        </p>
+                                    </div>
+                                    <span css={tw`text-neutral-500 text-xs ml-4`}>›</span>
+                                </div>
+                            ))}
+                        </div>
+                    </ContentBox>
+                )}
+            </div>
+        </PageContentBlock>
+    );
+};
diff --git a/resources/scripts/components/server/console/ServerDetailsBlock.tsx b/resources/scripts/components/server/console/ServerDetailsBlock.tsx
index 900b2db5d5..1d24b8a94c 100644
--- a/resources/scripts/components/server/console/ServerDetailsBlock.tsx
+++ b/resources/scripts/components/server/console/ServerDetailsBlock.tsx
@@ -1,5 +1,7 @@
 import React, { useEffect, useMemo, useState } from 'react';
 import {
+    faCalendarAlt,
+    faCoins,
     faClock,
     faCloudDownloadAlt,
     faCloudUploadAlt,
@@ -26,6 +28,20 @@ const statusMap: Record<NonNullable<ServerStatus>, string> = {
 
 type Stats = Record<'memory' | 'cpu' | 'disk' | 'uptime' | 'rx' | 'tx', number>;
 
+/** Compute display info for an expiry timestamp. */
+const useExpiryInfo = (expiresAt: string | null) =>
+    useMemo(() => {
+        if (!expiresAt) return null;
+        const now = Date.now();
+        const expiry = new Date(expiresAt).getTime();
+        const diff = expiry - now;
+        const isExpired = diff <= 0;
+        const isExpiringSoon = !isExpired && diff < 7 * 24 * 60 * 60 * 1000;
+        const d = new Date(expiresAt);
+        const label = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')}`;
+        return { label, isExpired, isExpiringSoon };
+    }, [expiresAt]);
+
 const getBackgroundColor = (value: number, max: number | null): string | undefined => {
     const delta = !max ? 0 : value / max;
 
@@ -53,6 +69,10 @@ const ServerDetailsBlock = ({ className }: { className?: string }) => {
     const connected = ServerContext.useStoreState((state) => state.socket.connected);
     const instance = ServerContext.useStoreState((state) => state.socket.instance);
     const limits = ServerContext.useStoreState((state) => state.server.data!.limits);
+    const expiresAt = ServerContext.useStoreState((state) => state.server.data!.expiresAt);
+    const pointsPerDay = ServerContext.useStoreState((state) => state.server.data!.pointsPerDay);
+
+    const expiryInfo = useExpiryInfo(expiresAt);
 
     const textLimits = useMemo(
         () => ({
@@ -144,6 +164,37 @@ const ServerDetailsBlock = ({ className }: { className?: string }) => {
             <StatBlock icon={faCloudUploadAlt} title={'网络(出站)'}>
                 {status === 'offline' ? <span className={'text-gray-400'}>离线</span> : bytesToString(stats.tx)}
             </StatBlock>
+            {expiryInfo && (
+                <StatBlock
+                    icon={faCalendarAlt}
+                    title={'到期时间'}
+                    color={
+                        expiryInfo.isExpired
+                            ? 'bg-red-500'
+                            : expiryInfo.isExpiringSoon
+                            ? 'bg-yellow-500'
+                            : undefined
+                    }
+                >
+                    <span
+                        className={
+                            expiryInfo.isExpired
+                                ? 'text-red-400'
+                                : expiryInfo.isExpiringSoon
+                                ? 'text-yellow-400'
+                                : ''
+                        }
+                    >
+                        {expiryInfo.isExpired && <span className={'mr-1'}>已到期</span>}
+                        {expiryInfo.label}
+                    </span>
+                </StatBlock>
+            )}
+            {pointsPerDay !== null && pointsPerDay !== undefined && (
+                <StatBlock icon={faCoins} title={'每日积分'}>
+                    {pointsPerDay} <span className={'text-gray-400 text-xs'}>积分/天</span>
+                </StatBlock>
+            )}
         </div>
     );
 };
diff --git a/resources/scripts/routers/DashboardRouter.tsx b/resources/scripts/routers/DashboardRouter.tsx
index 4ad69c6521..9144c335d7 100644
--- a/resources/scripts/routers/DashboardRouter.tsx
+++ b/resources/scripts/routers/DashboardRouter.tsx
@@ -12,6 +12,12 @@ import routes from '@/routers/routes';
 export default () => {
     const location = useLocation();
 
+    const isStorePath = location.pathname.startsWith('/store')
+        || location.pathname.startsWith('/points')
+        || location.pathname.startsWith('/redeem')
+        || location.pathname.startsWith('/orders')
+        || location.pathname.startsWith('/tickets');
+
     return (
         <>
             <NavigationBar />
@@ -28,6 +34,19 @@ export default () => {
                     </div>
                 </SubNavigation>
             )}
+            {isStorePath && (
+                <SubNavigation>
+                    <div>
+                        {routes.store
+                            .filter((route) => !!route.name)
+                            .map(({ path, name, exact = false }) => (
+                                <NavLink key={path} to={path} exact={exact}>
+                                    {name}
+                                </NavLink>
+                            ))}
+                    </div>
+                </SubNavigation>
+            )}
             <TransitionRouter>
                 <React.Suspense fallback={<Spinner centered />}>
                     <Switch location={location}>
@@ -39,6 +58,11 @@ export default () => {
                                 <Component />
                             </Route>
                         ))}
+                        {routes.store.map(({ path, component: Component, exact = false }) => (
+                            <Route key={path} path={path} exact={exact}>
+                                <Component />
+                            </Route>
+                        ))}
                         <Route path={'*'}>
                             <NotFound />
                         </Route>
diff --git a/resources/scripts/routers/routes.ts b/resources/scripts/routers/routes.ts
index 9cb110b17e..160c6b99b8 100644
--- a/resources/scripts/routers/routes.ts
+++ b/resources/scripts/routers/routes.ts
@@ -13,6 +13,12 @@ import AccountApiContainer from '@/components/dashboard/AccountApiContainer';
 import AccountSSHContainer from '@/components/dashboard/ssh/AccountSSHContainer';
 import ActivityLogContainer from '@/components/dashboard/activity/ActivityLogContainer';
 import ServerActivityLogContainer from '@/components/server/ServerActivityLogContainer';
+import StoreContainer from '@/components/dashboard/store/StoreContainer';
+import PointsContainer from '@/components/dashboard/PointsContainer';
+import RedeemContainer from '@/components/dashboard/RedeemContainer';
+import OrdersContainer from '@/components/dashboard/store/OrdersContainer';
+import TicketsContainer from '@/components/dashboard/store/TicketsContainer';
+import TicketDetailContainer from '@/components/dashboard/store/TicketDetailContainer';
 
 // Each of the router files is already code split out appropriately — so
 // all of the items above will only be loaded in when that router is loaded.
@@ -38,6 +44,8 @@ interface ServerRouteDefinition extends RouteDefinition {
 interface Routes {
     // All of the routes available under "/account"
     account: RouteDefinition[];
+    // Top-level store/points routes (accessible from the nav bar)
+    store: RouteDefinition[];
     // All of the routes available under "/server/:id"
     server: ServerRouteDefinition[];
 }
@@ -66,6 +74,45 @@ export default {
             component: ActivityLogContainer,
         },
     ],
+    store: [
+        {
+            path: '/store',
+            name: '商店',
+            component: StoreContainer,
+            exact: true,
+        },
+        {
+            path: '/points',
+            name: '我的积分',
+            component: PointsContainer,
+            exact: true,
+        },
+        {
+            path: '/redeem',
+            name: '兑换码',
+            component: RedeemContainer,
+            exact: true,
+        },
+        {
+            path: '/orders',
+            name: '我的订单',
+            component: OrdersContainer,
+            exact: true,
+        },
+        {
+            path: '/tickets',
+            name: '工单',
+            component: TicketsContainer,
+            exact: true,
+        },
+        {
+            // Ticket detail — not shown in sub-nav
+            path: '/tickets/:id',
+            name: undefined,
+            component: TicketDetailContainer,
+            exact: true,
+        },
+    ],
     server: [
         {
             path: '/',
diff --git a/resources/views/admin/store/orders/index.blade.php b/resources/views/admin/store/orders/index.blade.php
new file mode 100644
index 0000000000..ec576f9e2c
--- /dev/null
+++ b/resources/views/admin/store/orders/index.blade.php
@@ -0,0 +1,122 @@
+@extends('layouts.admin')
+
+@section('title')
+    订单管理
+@endsection
+
+@section('content-header')
+    <h1>订单管理<small>查看和处理所有用户的支付订单。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">订单管理</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">订单列表</h3>
+                <div class="box-tools search01">
+                    <form action="{{ route('admin.store.orders') }}" method="GET">
+                        <div class="input-group input-group-sm">
+                            <input type="text" name="filter[order_no]" class="form-control pull-right"
+                                value="{{ request()->input('filter.order_no') }}" placeholder="搜索订单号">
+                            <select name="filter[status]" class="form-control" style="width:auto">
+                                <option value="">全部状态</option>
+                                @foreach(['pending'=>'待支付','paid'=>'已支付','cancelled'=>'已取消','refunded'=>'已退款'] as $v=>$l)
+                                    <option value="{{ $v }}" {{ request()->input('filter.status') === $v ? 'selected' : '' }}>{{ $l }}</option>
+                                @endforeach
+                            </select>
+                            <div class="input-group-btn">
+                                <button type="submit" class="btn btn-default"><i class="fa fa-search"></i></button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+            <div class="box-body table-responsive no-padding">
+                <table class="table table-hover">
+                    <thead>
+                        <tr>
+                            <th>订单号</th>
+                            <th>用户</th>
+                            <th>商品</th>
+                            <th>金额</th>
+                            <th>支付方式</th>
+                            <th>状态</th>
+                            <th>创建时间</th>
+                            <th>操作</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        @foreach ($orders as $order)
+                            <tr>
+                                <td><code>{{ $order->order_no }}</code></td>
+                                <td>
+                                    @if($order->user)
+                                        <a href="{{ route('admin.users.view', $order->user->id) }}">{{ $order->user->email }}</a>
+                                    @else
+                                        <span class="text-muted">已删除用户</span>
+                                    @endif
+                                </td>
+                                <td>{{ $order->product?->name ?? $order->subject }}</td>
+                                <td>{{ $order->currency === 'CNY' ? '¥' : $order->currency }}{{ number_format($order->amount, 2) }}</td>
+                                <td>
+                                    @switch($order->payment_method)
+                                        @case('alipay') 支付宝 @break
+                                        @case('alipay_face') 支付宝面对面 @break
+                                        @case('wechat') 微信支付 @break
+                                        @default {{ $order->payment_method ?? '—' }}
+                                    @endswitch
+                                </td>
+                                <td>
+                                    @switch($order->status)
+                                        @case('paid') <span class="label label-success">已支付</span> @break
+                                        @case('pending') <span class="label label-warning">待支付</span> @break
+                                        @case('cancelled') <span class="label label-default">已取消</span> @break
+                                        @case('refunded') <span class="label label-info">已退款</span> @break
+                                        @default <span class="label label-default">{{ $order->status }}</span>
+                                    @endswitch
+                                </td>
+                                <td>{{ $order->created_at->format('Y-m-d H:i') }}</td>
+                                <td>
+                                    <div class="btn-group btn-group-xs">
+                                        @if($order->status === 'pending')
+                                            <form action="{{ route('admin.store.orders.complete', $order->id) }}" method="POST" style="display:inline">
+                                                @csrf
+                                                <button type="submit" class="btn btn-success btn-xs" onclick="return confirm('手动完成此订单并发货？')">完成</button>
+                                            </form>
+                                            <form action="{{ route('admin.store.orders.cancel', $order->id) }}" method="POST" style="display:inline">
+                                                @csrf
+                                                <button type="submit" class="btn btn-warning btn-xs" onclick="return confirm('取消此订单？')">取消</button>
+                                            </form>
+                                        @endif
+                                        @if($order->status === 'paid')
+                                            <form action="{{ route('admin.store.orders.refund', $order->id) }}" method="POST" style="display:inline">
+                                                @csrf
+                                                <button type="submit" class="btn btn-info btn-xs" onclick="return confirm('标记此订单为已退款？')">退款</button>
+                                            </form>
+                                        @endif
+                                        <form action="{{ route('admin.store.orders.delete', $order->id) }}" method="POST" style="display:inline">
+                                            @csrf
+                                            @method('DELETE')
+                                            <button type="submit" class="btn btn-danger btn-xs" onclick="return confirm('确定永久删除此订单？')">删除</button>
+                                        </form>
+                                    </div>
+                                </td>
+                            </tr>
+                        @endforeach
+                    </tbody>
+                </table>
+            </div>
+            @if($orders->hasPages())
+                <div class="box-footer with-border">
+                    <div class="col-md-12 text-center">{!! $orders->appends(request()->input())->render() !!}</div>
+                </div>
+            @endif
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/admin/store/payment-settings/index.blade.php b/resources/views/admin/store/payment-settings/index.blade.php
new file mode 100644
index 0000000000..efff19d375
--- /dev/null
+++ b/resources/views/admin/store/payment-settings/index.blade.php
@@ -0,0 +1,122 @@
+@extends('layouts.admin')
+
+@section('title')
+    支付设置
+@endsection
+
+@section('content-header')
+    <h1>支付设置<small>配置支付宝和微信支付的参数及开关。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">支付设置</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">支付方式配置</h3>
+            </div>
+            <form action="{{ route('admin.store.payment-settings') }}" method="POST">
+                @csrf
+                <div class="box-body">
+
+                    {{-- Alipay Online --}}
+                    <div class="callout callout-info" style="margin-bottom:20px">
+                        <h4><i class="fa fa-mobile"></i> 支付宝（在线扫码）</h4>
+                    </div>
+                    <div class="form-group">
+                        <div class="checkbox">
+                            <label>
+                                <input type="checkbox" name="alipay_enabled" value="1"
+                                    {{ ($settings['alipay_enabled'] ?? '0') === '1' ? 'checked' : '' }}>
+                                <strong>启用支付宝在线支付</strong>
+                            </label>
+                        </div>
+                    </div>
+                    <div class="row">
+                        <div class="col-md-6 form-group">
+                            <label>应用 ID（App ID）</label>
+                            <input type="text" name="alipay_app_id" class="form-control"
+                                value="{{ $settings['alipay_app_id'] ?? '' }}" placeholder="2021xxxxxxxxxxxxxx">
+                        </div>
+                    </div>
+                    <div class="form-group">
+                        <label>应用私钥（RSA2）</label>
+                        <textarea name="alipay_private_key" class="form-control" rows="4"
+                            placeholder="MIIEvAIBADANBgkqhkiG9w0B...">{{ $settings['alipay_private_key'] ?? '' }}</textarea>
+                        <p class="help-block">请粘贴不含头尾 -----BEGIN/END----- 行的纯私钥内容。</p>
+                    </div>
+                    <div class="form-group">
+                        <label>支付宝公钥（验签用）</label>
+                        <textarea name="alipay_public_key" class="form-control" rows="3"
+                            placeholder="MIIBIjANBgkqhkiG9w0B...">{{ $settings['alipay_public_key'] ?? '' }}</textarea>
+                    </div>
+
+                    <hr>
+
+                    {{-- Alipay Face to Face --}}
+                    <div class="callout callout-warning" style="margin-bottom:20px">
+                        <h4><i class="fa fa-qrcode"></i> 支付宝（面对面收款）</h4>
+                    </div>
+                    <div class="form-group">
+                        <div class="checkbox">
+                            <label>
+                                <input type="checkbox" name="alipay_face_enabled" value="1"
+                                    {{ ($settings['alipay_face_enabled'] ?? '0') === '1' ? 'checked' : '' }}>
+                                <strong>启用面对面收款</strong>
+                            </label>
+                        </div>
+                    </div>
+                    <div class="form-group">
+                        <label>收款码链接（URL 或 base64 图片）</label>
+                        <input type="text" name="alipay_face_code" class="form-control"
+                            value="{{ $settings['alipay_face_code'] ?? '' }}"
+                            placeholder="https://qr.alipay.com/xxxx 或 data:image/png;base64,...">
+                        <p class="help-block">用户选择此支付方式时将展示该收款码图片。</p>
+                    </div>
+
+                    <hr>
+
+                    {{-- WeChat Pay --}}
+                    <div class="callout callout-success" style="margin-bottom:20px">
+                        <h4><i class="fa fa-weixin"></i> 微信支付</h4>
+                    </div>
+                    <div class="form-group">
+                        <div class="checkbox">
+                            <label>
+                                <input type="checkbox" name="wechat_enabled" value="1"
+                                    {{ ($settings['wechat_enabled'] ?? '0') === '1' ? 'checked' : '' }}>
+                                <strong>启用微信支付</strong>
+                            </label>
+                        </div>
+                    </div>
+                    <div class="row">
+                        <div class="col-md-4 form-group">
+                            <label>AppID</label>
+                            <input type="text" name="wechat_app_id" class="form-control"
+                                value="{{ $settings['wechat_app_id'] ?? '' }}" placeholder="wx...">
+                        </div>
+                        <div class="col-md-4 form-group">
+                            <label>商户号（Mch ID）</label>
+                            <input type="text" name="wechat_mch_id" class="form-control"
+                                value="{{ $settings['wechat_mch_id'] ?? '' }}" placeholder="1xxxxxxxxx">
+                        </div>
+                        <div class="col-md-4 form-group">
+                            <label>API 密钥</label>
+                            <input type="password" name="wechat_api_key" class="form-control"
+                                value="{{ $settings['wechat_api_key'] ?? '' }}" placeholder="32位 API 密钥">
+                        </div>
+                    </div>
+
+                </div>
+                <div class="box-footer">
+                    <button type="submit" class="btn btn-primary pull-right"><i class="fa fa-save"></i> 保存设置</button>
+                </div>
+            </form>
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/admin/store/points/index.blade.php b/resources/views/admin/store/points/index.blade.php
new file mode 100644
index 0000000000..d2d1964a86
--- /dev/null
+++ b/resources/views/admin/store/points/index.blade.php
@@ -0,0 +1,126 @@
+@extends('layouts.admin')
+
+@section('title')
+    积分管理
+@endsection
+
+@section('content-header')
+    <h1>积分管理<small>查看和调整用户积分余额。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">积分管理</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">用户积分列表</h3>
+                <div class="box-tools search01">
+                    <form action="{{ route('admin.store.points') }}" method="GET">
+                        <div class="input-group input-group-sm">
+                            <input type="text" name="filter[email]" class="form-control pull-right"
+                                value="{{ request()->input('filter.email') }}" placeholder="搜索邮箱">
+                            <div class="input-group-btn">
+                                <button type="submit" class="btn btn-default"><i class="fa fa-search"></i></button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+            <div class="box-body table-responsive no-padding">
+                <table class="table table-hover">
+                    <thead>
+                        <tr>
+                            <th>ID</th>
+                            <th>邮箱</th>
+                            <th>用户名</th>
+                            <th class="text-right">积分余额</th>
+                            <th class="text-center">操作</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        @foreach ($users as $user)
+                            <tr>
+                                <td><code>{{ $user->id }}</code></td>
+                                <td><a href="{{ route('admin.users.view', $user->id) }}">{{ $user->email }}</a></td>
+                                <td>{{ $user->username }}</td>
+                                <td class="text-right">
+                                    <strong>{{ number_format($user->points_balance) }}</strong>
+                                </td>
+                                <td class="text-center">
+                                    <button type="button" class="btn btn-xs btn-primary"
+                                        data-toggle="modal"
+                                        data-target="#adjustModal"
+                                        data-userid="{{ $user->id }}"
+                                        data-email="{{ $user->email }}"
+                                        data-balance="{{ $user->points_balance }}">
+                                        调整积分
+                                    </button>
+                                </td>
+                            </tr>
+                        @endforeach
+                    </tbody>
+                </table>
+            </div>
+            @if($users->hasPages())
+                <div class="box-footer with-border">
+                    <div class="col-md-12 text-center">{!! $users->appends(request()->input())->render() !!}</div>
+                </div>
+            @endif
+        </div>
+    </div>
+</div>
+
+{{-- Adjust Points Modal --}}
+<div class="modal fade" id="adjustModal" tabindex="-1" role="dialog">
+    <div class="modal-dialog" role="document">
+        <div class="modal-content">
+            <form id="adjustForm" action="" method="POST">
+                @csrf
+                <div class="modal-header">
+                    <button type="button" class="close" data-dismiss="modal"><span>&times;</span></button>
+                    <h4 class="modal-title">调整积分</h4>
+                </div>
+                <div class="modal-body">
+                    <p>用户：<strong id="modalEmail"></strong></p>
+                    <p>当前余额：<strong id="modalBalance"></strong> 积分</p>
+                    <div class="form-group">
+                        <label for="pAmount">调整数量（正数增加，负数减少）</label>
+                        <input type="number" id="pAmount" name="amount" class="form-control" value="0" required>
+                    </div>
+                    <div class="form-group">
+                        <label for="pDescription">备注</label>
+                        <input type="text" id="pDescription" name="description" class="form-control" placeholder="管理员调整" maxlength="191">
+                    </div>
+                </div>
+                <div class="modal-footer">
+                    <button type="button" class="btn btn-default" data-dismiss="modal">取消</button>
+                    <button type="submit" class="btn btn-primary">确认调整</button>
+                </div>
+            </form>
+        </div>
+    </div>
+</div>
+@endsection
+
+@section('footer-scripts')
+    @parent
+    <script>
+        $('#adjustModal').on('show.bs.modal', function (event) {
+            var button = $(event.relatedTarget);
+            var userId = button.data('userid');
+            var email = button.data('email');
+            var balance = button.data('balance');
+
+            var modal = $(this);
+            modal.find('#modalEmail').text(email);
+            modal.find('#modalBalance').text(balance);
+            modal.find('#adjustForm').attr('action', '/admin/store/points/' + userId + '/adjust');
+            modal.find('#pAmount').val(0);
+            modal.find('#pDescription').val('');
+        });
+    </script>
+@endsection
diff --git a/resources/views/admin/store/products/index.blade.php b/resources/views/admin/store/products/index.blade.php
new file mode 100644
index 0000000000..a0562b03f0
--- /dev/null
+++ b/resources/views/admin/store/products/index.blade.php
@@ -0,0 +1,100 @@
+@extends('layouts.admin')
+
+@section('title')
+    商品管理
+@endsection
+
+@section('content-header')
+    <h1>商品管理<small>管理商店中的商品。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">商品管理</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">积分费率说明</h3>
+            </div>
+            <div class="box-body">
+                <p class="text-muted">
+                    当前积分计算费率（每天）：
+                    <strong>CPU</strong> {{ $cpu_rate }} 积分/核心 &nbsp;|&nbsp;
+                    <strong>内存</strong> {{ $memory_rate }} 积分/GB &nbsp;|&nbsp;
+                    <strong>磁盘</strong> {{ $disk_rate }} 积分/GB
+                </p>
+                <p class="text-muted small">
+                    示例（取整后取最小值1）：2核 CPU + 2GB 内存 + 10GB 磁盘 ≈ max(1, ceil(2×{{ $cpu_rate }} + 2×{{ $memory_rate }} + 10×{{ $disk_rate }})) = {{ max(1, (int) ceil(2 * $cpu_rate + 2 * $memory_rate + 10 * $disk_rate)) }} 积分/天
+                </p>
+            </div>
+        </div>
+    </div>
+</div>
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">商品列表</h3>
+                <div class="box-tools">
+                    <a href="{{ route('admin.store.products.new') }}" class="btn btn-sm btn-primary">新建商品</a>
+                </div>
+            </div>
+            <div class="box-body table-responsive no-padding">
+                <table class="table table-hover">
+                    <thead>
+                        <tr>
+                            <th>ID</th>
+                            <th>名称</th>
+                            <th>类型</th>
+                            <th>内容</th>
+                            <th>价格</th>
+                            <th>状态</th>
+                            <th>排序</th>
+                            <th></th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        @foreach ($products as $product)
+                            <tr>
+                                <td><code>{{ $product->id }}</code></td>
+                                <td><a href="{{ route('admin.store.products.edit', $product->id) }}">{{ $product->name }}</a></td>
+                                <td>
+                                    @if($product->type === 'points') 积分
+                                    @elseif($product->type === 'server_days') 服务器天数
+                                    @else 自定义
+                                    @endif
+                                </td>
+                                <td>{{ $product->value }}</td>
+                                <td>{{ $product->currency === 'CNY' ? '¥' : $product->currency }}{{ number_format($product->price, 2) }}</td>
+                                <td>
+                                    @if($product->is_active)
+                                        <span class="label label-success">已上架</span>
+                                    @else
+                                        <span class="label label-default">已下架</span>
+                                    @endif
+                                </td>
+                                <td>{{ $product->sort_order }}</td>
+                                <td>
+                                    <form action="{{ route('admin.store.products.delete', $product->id) }}" method="POST" style="display:inline">
+                                        @csrf
+                                        @method('DELETE')
+                                        <button type="submit" class="btn btn-xs btn-danger" onclick="return confirm('确定删除此商品？')">删除</button>
+                                    </form>
+                                </td>
+                            </tr>
+                        @endforeach
+                    </tbody>
+                </table>
+            </div>
+            @if($products->hasPages())
+                <div class="box-footer with-border">
+                    <div class="col-md-12 text-center">{!! $products->render() !!}</div>
+                </div>
+            @endif
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/admin/store/products/new.blade.php b/resources/views/admin/store/products/new.blade.php
new file mode 100644
index 0000000000..90ac4507d5
--- /dev/null
+++ b/resources/views/admin/store/products/new.blade.php
@@ -0,0 +1,189 @@
+@extends('layouts.admin')
+
+@section('title')
+    {{ $product ? '编辑商品' : '新建商品' }}
+@endsection
+
+@section('content-header')
+    <h1>{{ $product ? '编辑商品' : '新建商品' }}<small>{{ $product ? '修改现有商品信息' : '在商店中新增商品' }}</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li><a href="{{ route('admin.store.products') }}">商品管理</a></li>
+        <li class="active">{{ $product ? '编辑' : '新建' }}</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12 col-md-10">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">商品信息</h3>
+            </div>
+            <form action="{{ $product ? route('admin.store.products.edit', $product->id) : route('admin.store.products') }}" method="POST">
+                @csrf
+                @if($product) @method('POST') @endif
+                <div class="box-body">
+                    {{-- Base fields --}}
+                    <div class="row">
+                        <div class="col-md-8 form-group">
+                            <label for="pName">名称 <span class="text-danger">*</span></label>
+                            <input type="text" id="pName" name="name" class="form-control" value="{{ old('name', $product?->name) }}" required>
+                        </div>
+                        <div class="col-md-4 form-group">
+                            <label for="pType">类型 <span class="text-danger">*</span></label>
+                            <select id="pType" name="type" class="form-control" onchange="toggleServerFields(this.value)">
+                                <option value="points"     {{ old('type', $product?->type) === 'points'     ? 'selected' : '' }}>积分</option>
+                                <option value="server_days"{{ old('type', $product?->type) === 'server_days'? 'selected' : '' }}>服务器天数延期</option>
+                                <option value="server"     {{ old('type', $product?->type) === 'server'     ? 'selected' : '' }}>服务器套餐</option>
+                                <option value="custom"     {{ old('type', $product?->type) === 'custom'     ? 'selected' : '' }}>自定义</option>
+                            </select>
+                        </div>
+                    </div>
+                    <div class="form-group">
+                        <label for="pDescription">描述</label>
+                        <textarea id="pDescription" name="description" class="form-control" rows="3">{{ old('description', $product?->description) }}</textarea>
+                    </div>
+                    <div class="row">
+                        <div class="col-md-4 form-group">
+                            <label for="pValue">内容数量 <span class="text-danger">*</span></label>
+                            <input type="number" id="pValue" name="value" class="form-control" value="{{ old('value', $product?->value ?? 0) }}" min="0" required>
+                            <p class="text-muted small">积分类型填积分数量；天数类型填天数；服务器套餐填 0。</p>
+                        </div>
+                        <div class="col-md-3 form-group">
+                            <label for="pPrice">价格 <span class="text-danger">*</span></label>
+                            <input type="number" id="pPrice" name="price" class="form-control" value="{{ old('price', $product?->price ?? '0.00') }}" min="0" step="0.01" required>
+                        </div>
+                        <div class="col-md-2 form-group">
+                            <label for="pCurrency">货币</label>
+                            <input type="text" id="pCurrency" name="currency" class="form-control" value="{{ old('currency', $product?->currency ?? 'CNY') }}" maxlength="8">
+                        </div>
+                        <div class="col-md-3 form-group">
+                            <label for="pSortOrder">排序权重</label>
+                            <input type="number" id="pSortOrder" name="sort_order" class="form-control" value="{{ old('sort_order', $product?->sort_order ?? 0) }}" min="0">
+                        </div>
+                    </div>
+                    <div class="form-group">
+                        <label>上架状态</label>
+                        <div>
+                            <div class="radio radio-success radio-inline">
+                                <input type="radio" id="pActiveTrue" name="is_active" value="1" {{ old('is_active', $product?->is_active ?? 1) ? 'checked' : '' }}>
+                                <label for="pActiveTrue">上架</label>
+                            </div>
+                            <div class="radio radio-warning radio-inline">
+                                <input type="radio" id="pActiveFalse" name="is_active" value="0" {{ !old('is_active', $product?->is_active ?? 1) ? 'checked' : '' }}>
+                                <label for="pActiveFalse">下架</label>
+                            </div>
+                        </div>
+                    </div>
+
+                    {{-- Server package fields (shown only when type = 'server') --}}
+                    <div id="serverFields" style="{{ old('type', $product?->type) === 'server' ? '' : 'display:none' }}">
+                        <hr>
+                        <h4>服务器套餐配置</h4>
+                        <p class="text-muted small">配置用户购买后自动创建的服务器参数（需要节点有空余配额）。</p>
+                        <div class="row">
+                            <div class="col-md-4 form-group">
+                                <label for="pLocation">地域</label>
+                                <select id="pLocation" name="location_id" class="form-control">
+                                    <option value="">— 不限定地域 —</option>
+                                    @foreach($locations as $loc)
+                                        <option value="{{ $loc->id }}" {{ old('location_id', $product?->location_id) == $loc->id ? 'selected' : '' }}>
+                                            {{ $loc->short }} — {{ $loc->long }}
+                                        </option>
+                                    @endforeach
+                                </select>
+                            </div>
+                            <div class="col-md-4 form-group">
+                                <label for="pNode">节点</label>
+                                <select id="pNode" name="node_id" class="form-control">
+                                    <option value="">— 自动选择节点 —</option>
+                                    @foreach($nodes as $node)
+                                        <option value="{{ $node->id }}" {{ old('node_id', $product?->node_id) == $node->id ? 'selected' : '' }}>
+                                            [{{ $node->location->short ?? '?' }}] {{ $node->name }}
+                                        </option>
+                                    @endforeach
+                                </select>
+                                <p class="text-muted small">指定节点后忽略地域设置。</p>
+                            </div>
+                            <div class="col-md-4 form-group">
+                                <label for="pEgg">预设 (Egg)</label>
+                                <select id="pEgg" name="egg_id" class="form-control">
+                                    <option value="">— 选择 Egg —</option>
+                                    @foreach($eggs as $egg)
+                                        <option value="{{ $egg->id }}" {{ old('egg_id', $product?->egg_id) == $egg->id ? 'selected' : '' }}>
+                                            [{{ $egg->nest->name ?? '?' }}] {{ $egg->name }}
+                                        </option>
+                                    @endforeach
+                                </select>
+                            </div>
+                        </div>
+                        <div class="row">
+                            <div class="col-md-2 form-group">
+                                <label>CPU (%)</label>
+                                <input type="number" name="cpu" class="form-control" value="{{ old('cpu', $product?->cpu ?? 100) }}" min="0" placeholder="100">
+                                <p class="text-muted small">100 = 1核</p>
+                            </div>
+                            <div class="col-md-2 form-group">
+                                <label>内存 (MB)</label>
+                                <input type="number" name="memory" class="form-control" value="{{ old('memory', $product?->memory ?? 512) }}" min="0" placeholder="512">
+                            </div>
+                            <div class="col-md-2 form-group">
+                                <label>磁盘 (MB)</label>
+                                <input type="number" name="disk" class="form-control" value="{{ old('disk', $product?->disk ?? 5120) }}" min="0" placeholder="5120">
+                            </div>
+                            <div class="col-md-2 form-group">
+                                <label>数据库</label>
+                                <input type="number" name="databases" class="form-control" value="{{ old('databases', $product?->databases ?? 0) }}" min="0">
+                            </div>
+                            <div class="col-md-2 form-group">
+                                <label>备份</label>
+                                <input type="number" name="backups" class="form-control" value="{{ old('backups', $product?->backups ?? 0) }}" min="0">
+                            </div>
+                            <div class="col-md-2 form-group">
+                                <label>端口分配</label>
+                                <input type="number" name="allocations" class="form-control" value="{{ old('allocations', $product?->allocations ?? 1) }}" min="1">
+                            </div>
+                        </div>
+                        <hr>
+                        <h5>每日积分消耗费率 <small class="text-muted">（留空则使用全局费率；不同节点/地域可设置不同价格）</small></h5>
+                        <div class="row">
+                            <div class="col-md-4 form-group">
+                                <label>CPU 费率 <small class="text-muted">积分/核/天</small></label>
+                                <input type="number" name="points_cpu_rate" class="form-control"
+                                    value="{{ old('points_cpu_rate', $product?->points_cpu_rate) }}"
+                                    min="0" placeholder="留空使用全局 ({{ $cpu_rate }})">
+                            </div>
+                            <div class="col-md-4 form-group">
+                                <label>内存费率 <small class="text-muted">积分/GB/天</small></label>
+                                <input type="number" name="points_memory_rate" class="form-control"
+                                    value="{{ old('points_memory_rate', $product?->points_memory_rate) }}"
+                                    min="0" placeholder="留空使用全局 ({{ $memory_rate }})">
+                            </div>
+                            <div class="col-md-4 form-group">
+                                <label>磁盘费率 <small class="text-muted">积分/GB/天</small></label>
+                                <input type="number" name="points_disk_rate" class="form-control"
+                                    value="{{ old('points_disk_rate', $product?->points_disk_rate) }}"
+                                    min="0" placeholder="留空使用全局 ({{ $disk_rate }})">
+                            </div>
+                        </div>
+                    </div>
+                </div>
+                <div class="box-footer">
+                    <a href="{{ route('admin.store.products') }}" class="btn btn-default">返回</a>
+                    <button type="submit" class="btn btn-primary pull-right">{{ $product ? '保存更改' : '创建商品' }}</button>
+                </div>
+            </form>
+        </div>
+    </div>
+</div>
+@endsection
+
+@section('footer-scripts')
+    @parent
+    <script>
+        function toggleServerFields(type) {
+            document.getElementById('serverFields').style.display = (type === 'server') ? '' : 'none';
+        }
+    </script>
+@endsection
diff --git a/resources/views/admin/store/redemption-codes/index.blade.php b/resources/views/admin/store/redemption-codes/index.blade.php
new file mode 100644
index 0000000000..7d6f6bd3dc
--- /dev/null
+++ b/resources/views/admin/store/redemption-codes/index.blade.php
@@ -0,0 +1,114 @@
+@extends('layouts.admin')
+
+@section('title')
+    兑换码管理
+@endsection
+
+@section('content-header')
+    <h1>兑换码管理<small>创建和管理用户兑换码。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">兑换码管理</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12 col-md-5">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">创建兑换码</h3>
+            </div>
+            <form action="{{ route('admin.store.redemption-codes') }}" method="POST">
+                @csrf
+                <div class="box-body">
+                    <div class="form-group">
+                        <label for="pCode">兑换码（留空自动生成）</label>
+                        <input type="text" id="pCode" name="code" class="form-control" value="{{ old('code') }}" maxlength="64" placeholder="留空则自动生成">
+                    </div>
+                    <div class="row">
+                        <div class="col-md-6 form-group">
+                            <label for="pType">奖励类型 <span class="text-danger">*</span></label>
+                            <select id="pType" name="type" class="form-control">
+                                <option value="points" {{ old('type') === 'points' ? 'selected' : '' }}>积分</option>
+                                <option value="days" {{ old('type') === 'days' ? 'selected' : '' }}>天数</option>
+                            </select>
+                        </div>
+                        <div class="col-md-6 form-group">
+                            <label for="pValue">奖励数量 <span class="text-danger">*</span></label>
+                            <input type="number" id="pValue" name="value" class="form-control" value="{{ old('value', 100) }}" min="1" required>
+                        </div>
+                    </div>
+                    <div class="row">
+                        <div class="col-md-6 form-group">
+                            <label for="pUsesTotal">可用次数 <span class="text-danger">*</span></label>
+                            <input type="number" id="pUsesTotal" name="uses_total" class="form-control" value="{{ old('uses_total', 1) }}" min="1" required>
+                        </div>
+                        <div class="col-md-6 form-group">
+                            <label for="pExpiresAt">到期时间</label>
+                            <input type="datetime-local" id="pExpiresAt" name="expires_at" class="form-control" value="{{ old('expires_at') }}">
+                        </div>
+                    </div>
+                </div>
+                <div class="box-footer">
+                    <button type="submit" class="btn btn-primary pull-right">创建兑换码</button>
+                </div>
+            </form>
+        </div>
+    </div>
+    <div class="col-xs-12 col-md-7">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">兑换码列表</h3>
+            </div>
+            <div class="box-body table-responsive no-padding">
+                <table class="table table-hover">
+                    <thead>
+                        <tr>
+                            <th>ID</th>
+                            <th>兑换码</th>
+                            <th>类型</th>
+                            <th>数量</th>
+                            <th>剩余次数</th>
+                            <th>到期时间</th>
+                            <th>状态</th>
+                            <th></th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        @foreach ($codes as $code)
+                            <tr>
+                                <td><code>{{ $code->id }}</code></td>
+                                <td><code>{{ $code->code }}</code></td>
+                                <td>{{ $code->type === 'points' ? '积分' : '天数' }}</td>
+                                <td>{{ $code->value }}</td>
+                                <td>{{ $code->uses_remaining }} / {{ $code->uses_total }}</td>
+                                <td>{{ $code->expires_at ? $code->expires_at->format('Y-m-d H:i') : '永久' }}</td>
+                                <td>
+                                    @if($code->is_active && ($code->expires_at === null || $code->expires_at->isFuture()) && $code->uses_remaining > 0)
+                                        <span class="label label-success">有效</span>
+                                    @else
+                                        <span class="label label-default">已失效</span>
+                                    @endif
+                                </td>
+                                <td>
+                                    <form action="{{ route('admin.store.redemption-codes.delete', $code->id) }}" method="POST" style="display:inline">
+                                        @csrf
+                                        @method('DELETE')
+                                        <button type="submit" class="btn btn-xs btn-danger" onclick="return confirm('确定删除此兑换码？')">删除</button>
+                                    </form>
+                                </td>
+                            </tr>
+                        @endforeach
+                    </tbody>
+                </table>
+            </div>
+            @if($codes->hasPages())
+                <div class="box-footer with-border">
+                    <div class="col-md-12 text-center">{!! $codes->render() !!}</div>
+                </div>
+            @endif
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/admin/store/tickets/index.blade.php b/resources/views/admin/store/tickets/index.blade.php
new file mode 100644
index 0000000000..124b20ed8f
--- /dev/null
+++ b/resources/views/admin/store/tickets/index.blade.php
@@ -0,0 +1,108 @@
+@extends('layouts.admin')
+
+@section('title')
+    工单管理
+@endsection
+
+@section('content-header')
+    <h1>工单管理<small>查看和处理用户提交的支持工单。</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li class="active">工单管理</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    <div class="col-xs-12">
+        <div class="box box-primary">
+            <div class="box-header with-border">
+                <h3 class="box-title">工单列表</h3>
+                <div class="box-tools search01">
+                    <form action="{{ route('admin.store.tickets') }}" method="GET">
+                        <div class="input-group input-group-sm">
+                            <select name="filter[status]" class="form-control" style="width:auto">
+                                <option value="">全部状态</option>
+                                @foreach(['open'=>'待处理','in_progress'=>'处理中','closed'=>'已关闭'] as $v=>$l)
+                                    <option value="{{ $v }}" {{ request()->input('filter.status') === $v ? 'selected' : '' }}>{{ $l }}</option>
+                                @endforeach
+                            </select>
+                            <select name="filter[priority]" class="form-control" style="width:auto">
+                                <option value="">全部优先级</option>
+                                @foreach(['low'=>'低','normal'=>'普通','high'=>'高','urgent'=>'紧急'] as $v=>$l)
+                                    <option value="{{ $v }}" {{ request()->input('filter.priority') === $v ? 'selected' : '' }}>{{ $l }}</option>
+                                @endforeach
+                            </select>
+                            <div class="input-group-btn">
+                                <button type="submit" class="btn btn-default"><i class="fa fa-search"></i></button>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+            <div class="box-body table-responsive no-padding">
+                <table class="table table-hover">
+                    <thead>
+                        <tr>
+                            <th>ID</th>
+                            <th>标题</th>
+                            <th>用户</th>
+                            <th>优先级</th>
+                            <th>状态</th>
+                            <th>回复数</th>
+                            <th>最后回复</th>
+                            <th>创建时间</th>
+                            <th></th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        @foreach ($tickets as $ticket)
+                            <tr>
+                                <td><code>#{{ $ticket->id }}</code></td>
+                                <td><a href="{{ route('admin.store.tickets.view', $ticket->id) }}">{{ $ticket->title }}</a></td>
+                                <td>
+                                    @if($ticket->user)
+                                        <a href="{{ route('admin.users.view', $ticket->user->id) }}">{{ $ticket->user->email }}</a>
+                                    @else
+                                        <span class="text-muted">已删除</span>
+                                    @endif
+                                </td>
+                                <td>
+                                    @switch($ticket->priority)
+                                        @case('urgent') <span class="label label-danger">紧急</span> @break
+                                        @case('high')   <span class="label label-warning">高</span> @break
+                                        @case('normal') <span class="label label-info">普通</span> @break
+                                        @default        <span class="label label-default">低</span>
+                                    @endswitch
+                                </td>
+                                <td>
+                                    @switch($ticket->status)
+                                        @case('open')        <span class="label label-primary">待处理</span> @break
+                                        @case('in_progress') <span class="label label-warning">处理中</span> @break
+                                        @default             <span class="label label-default">已关闭</span>
+                                    @endswitch
+                                </td>
+                                <td class="text-center">{{ $ticket->replies_count }}</td>
+                                <td>{{ $ticket->last_reply_at ? $ticket->last_reply_at->format('m-d H:i') : '—' }}</td>
+                                <td>{{ $ticket->created_at->format('m-d H:i') }}</td>
+                                <td>
+                                    <form action="{{ route('admin.store.tickets.delete', $ticket->id) }}" method="POST" style="display:inline">
+                                        @csrf
+                                        @method('DELETE')
+                                        <button type="submit" class="btn btn-xs btn-danger" onclick="return confirm('删除此工单？')">删除</button>
+                                    </form>
+                                </td>
+                            </tr>
+                        @endforeach
+                    </tbody>
+                </table>
+            </div>
+            @if($tickets->hasPages())
+                <div class="box-footer with-border">
+                    <div class="col-md-12 text-center">{!! $tickets->appends(request()->input())->render() !!}</div>
+                </div>
+            @endif
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/admin/store/tickets/view.blade.php b/resources/views/admin/store/tickets/view.blade.php
new file mode 100644
index 0000000000..c95f560ec7
--- /dev/null
+++ b/resources/views/admin/store/tickets/view.blade.php
@@ -0,0 +1,117 @@
+@extends('layouts.admin')
+
+@section('title')
+    工单 #{{ $ticket->id }}
+@endsection
+
+@section('content-header')
+    <h1>工单 <code>#{{ $ticket->id }}</code><small>{{ $ticket->title }}</small></h1>
+    <ol class="breadcrumb">
+        <li><a href="{{ route('admin.index') }}">管理</a></li>
+        <li><a href="{{ route('admin.store.tickets') }}">工单管理</a></li>
+        <li class="active">#{{ $ticket->id }}</li>
+    </ol>
+@endsection
+
+@section('content')
+<div class="row">
+    {{-- Ticket info + status changer --}}
+    <div class="col-xs-12 col-md-4">
+        <div class="box box-primary">
+            <div class="box-header with-border"><h3 class="box-title">工单信息</h3></div>
+            <div class="box-body">
+                <dl class="dl-horizontal" style="margin:0">
+                    <dt>提交人</dt>
+                    <dd>
+                        @if($ticket->user)
+                            <a href="{{ route('admin.users.view', $ticket->user->id) }}">{{ $ticket->user->email }}</a>
+                        @else <span class="text-muted">已删除</span> @endif
+                    </dd>
+                    <dt>优先级</dt>
+                    <dd>
+                        @switch($ticket->priority)
+                            @case('urgent') <span class="label label-danger">紧急</span> @break
+                            @case('high')   <span class="label label-warning">高</span> @break
+                            @case('normal') <span class="label label-info">普通</span> @break
+                            @default        <span class="label label-default">低</span>
+                        @endswitch
+                    </dd>
+                    <dt>当前状态</dt>
+                    <dd>
+                        @switch($ticket->status)
+                            @case('open')        <span class="label label-primary">待处理</span> @break
+                            @case('in_progress') <span class="label label-warning">处理中</span> @break
+                            @default             <span class="label label-default">已关闭</span>
+                        @endswitch
+                    </dd>
+                    <dt>创建时间</dt>
+                    <dd>{{ $ticket->created_at->format('Y-m-d H:i') }}</dd>
+                </dl>
+            </div>
+            <div class="box-footer">
+                <form action="{{ route('admin.store.tickets.status', $ticket->id) }}" method="POST">
+                    @csrf
+                    <div class="input-group input-group-sm">
+                        <select name="status" class="form-control">
+                            @foreach(['open'=>'待处理','in_progress'=>'处理中','closed'=>'已关闭'] as $v=>$l)
+                                <option value="{{ $v }}" {{ $ticket->status === $v ? 'selected' : '' }}>{{ $l }}</option>
+                            @endforeach
+                        </select>
+                        <div class="input-group-btn">
+                            <button type="submit" class="btn btn-default btn-sm">更新状态</button>
+                        </div>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    {{-- Conversation --}}
+    <div class="col-xs-12 col-md-8">
+        <div class="box box-primary">
+            <div class="box-header with-border"><h3 class="box-title">工单内容与回复</h3></div>
+            <div class="box-body">
+                {{-- Initial message --}}
+                <div class="direct-chat-msg" style="margin-bottom:16px">
+                    <div class="direct-chat-info clearfix">
+                        <span class="direct-chat-name pull-left">{{ $ticket->user?->username ?? '—' }}</span>
+                        <span class="direct-chat-timestamp pull-right">{{ $ticket->created_at->format('Y-m-d H:i') }}</span>
+                    </div>
+                    <div class="direct-chat-text" style="background:#4a4a55;color:#e0e0e0;border:none">
+                        {!! nl2br(e($ticket->content)) !!}
+                    </div>
+                </div>
+
+                @foreach($ticket->replies as $reply)
+                    <div class="direct-chat-msg {{ $reply->is_staff ? 'right' : '' }}" style="margin-bottom:16px">
+                        <div class="direct-chat-info clearfix">
+                            <span class="direct-chat-name {{ $reply->is_staff ? 'pull-right' : 'pull-left' }}">
+                                {{ $reply->is_staff ? '工作人员' : ($reply->user?->username ?? '—') }}
+                                @if($reply->is_staff) <span class="label label-warning" style="font-size:10px">Staff</span> @endif
+                            </span>
+                            <span class="direct-chat-timestamp {{ $reply->is_staff ? 'pull-left' : 'pull-right' }}">
+                                {{ $reply->created_at->format('Y-m-d H:i') }}
+                            </span>
+                        </div>
+                        <div class="direct-chat-text"
+                            style="{{ $reply->is_staff ? 'background:#2a4a6a;color:#dde;border:none' : 'background:#4a4a55;color:#e0e0e0;border:none' }}">
+                            {!! nl2br(e($reply->content)) !!}
+                        </div>
+                    </div>
+                @endforeach
+            </div>
+            @if($ticket->status !== 'closed')
+            <div class="box-footer">
+                <form action="{{ route('admin.store.tickets.reply', $ticket->id) }}" method="POST">
+                    @csrf
+                    <div class="form-group">
+                        <textarea name="content" class="form-control" rows="4" placeholder="输入回复内容..." required></textarea>
+                    </div>
+                    <button type="submit" class="btn btn-primary pull-right">发送回复</button>
+                </form>
+            </div>
+            @endif
+        </div>
+    </div>
+</div>
+@endsection
diff --git a/resources/views/layouts/admin.blade.php b/resources/views/layouts/admin.blade.php
index 34ae3b2ddb..1d0c197290 100644
--- a/resources/views/layouts/admin.blade.php
+++ b/resources/views/layouts/admin.blade.php
@@ -122,6 +122,37 @@
                                 <i class="fa fa-th-large"></i> <span>预设组</span>
                             </a>
                         </li>
+                        <li class="header">商店管理</li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.products') ?: 'active' }}">
+                            <a href="{{ route('admin.store.products') }}">
+                                <i class="fa fa-shopping-bag"></i> <span>商品管理</span>
+                            </a>
+                        </li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.redemption-codes') ?: 'active' }}">
+                            <a href="{{ route('admin.store.redemption-codes') }}">
+                                <i class="fa fa-ticket"></i> <span>兑换码管理</span>
+                            </a>
+                        </li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.orders') ?: 'active' }}">
+                            <a href="{{ route('admin.store.orders') }}">
+                                <i class="fa fa-credit-card"></i> <span>订单管理</span>
+                            </a>
+                        </li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.points') ?: 'active' }}">
+                            <a href="{{ route('admin.store.points') }}">
+                                <i class="fa fa-star"></i> <span>积分管理</span>
+                            </a>
+                        </li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.payment-settings') ?: 'active' }}">
+                            <a href="{{ route('admin.store.payment-settings') }}">
+                                <i class="fa fa-money"></i> <span>支付设置</span>
+                            </a>
+                        </li>
+                        <li class="{{ ! starts_with(Route::currentRouteName(), 'admin.store.tickets') ?: 'active' }}">
+                            <a href="{{ route('admin.store.tickets') }}">
+                                <i class="fa fa-envelope"></i> <span>工单管理</span>
+                            </a>
+                        </li>
                     </ul>
                 </section>
             </aside>
diff --git a/routes/admin.php b/routes/admin.php
index a1e102eed5..581c903bb0 100644
--- a/routes/admin.php
+++ b/routes/admin.php
@@ -2,6 +2,7 @@
 
 use Illuminate\Support\Facades\Route;
 use Pterodactyl\Http\Controllers\Admin;
+use Pterodactyl\Http\Controllers\Admin\Store;
 use Pterodactyl\Http\Middleware\Admin\Servers\ServerInstalled;
 
 Route::get('/', [Admin\BaseController::class, 'index'])->name('admin.index');
@@ -226,3 +227,50 @@
     Route::delete('/egg/{egg:id}', [Admin\Nests\EggController::class, 'destroy']);
     Route::delete('/egg/{egg:id}/variables/{variable:id}', [Admin\Nests\EggVariableController::class, 'destroy']);
 });
+
+/*
+|--------------------------------------------------------------------------
+| Store Management Routes
+|--------------------------------------------------------------------------
+|
+| Endpoint: /admin/store
+|
+*/
+
+Route::group(['prefix' => 'store'], function () {
+    // Products
+    Route::get('/products', [Store\ProductController::class, 'index'])->name('admin.store.products');
+    Route::get('/products/new', [Store\ProductController::class, 'create'])->name('admin.store.products.new');
+    Route::get('/products/{id}/edit', [Store\ProductController::class, 'edit'])->name('admin.store.products.edit');
+
+    Route::post('/products', [Store\ProductController::class, 'store']);
+    Route::post('/products/{id}', [Store\ProductController::class, 'update']);
+    Route::delete('/products/{id}', [Store\ProductController::class, 'destroy'])->name('admin.store.products.delete');
+
+    // Redemption Codes
+    Route::get('/redemption-codes', [Store\RedemptionCodeAdminController::class, 'index'])->name('admin.store.redemption-codes');
+    Route::post('/redemption-codes', [Store\RedemptionCodeAdminController::class, 'store']);
+    Route::delete('/redemption-codes/{id}', [Store\RedemptionCodeAdminController::class, 'destroy'])->name('admin.store.redemption-codes.delete');
+
+    // Orders
+    Route::get('/orders', [Store\OrderAdminController::class, 'index'])->name('admin.store.orders');
+    Route::post('/orders/{id}/complete', [Store\OrderAdminController::class, 'complete'])->name('admin.store.orders.complete');
+    Route::post('/orders/{id}/cancel', [Store\OrderAdminController::class, 'cancel'])->name('admin.store.orders.cancel');
+    Route::post('/orders/{id}/refund', [Store\OrderAdminController::class, 'refund'])->name('admin.store.orders.refund');
+    Route::delete('/orders/{id}', [Store\OrderAdminController::class, 'destroy'])->name('admin.store.orders.delete');
+
+    // Points
+    Route::get('/points', [Store\PointsAdminController::class, 'index'])->name('admin.store.points');
+    Route::post('/points/{userId}/adjust', [Store\PointsAdminController::class, 'adjust'])->name('admin.store.points.adjust');
+
+    // Payment Settings
+    Route::get('/payment-settings', [Store\PaymentSettingsController::class, 'index'])->name('admin.store.payment-settings');
+    Route::post('/payment-settings', [Store\PaymentSettingsController::class, 'update']);
+
+    // Tickets
+    Route::get('/tickets', [Store\TicketAdminController::class, 'index'])->name('admin.store.tickets');
+    Route::get('/tickets/{id}', [Store\TicketAdminController::class, 'view'])->name('admin.store.tickets.view');
+    Route::post('/tickets/{id}/reply', [Store\TicketAdminController::class, 'reply'])->name('admin.store.tickets.reply');
+    Route::post('/tickets/{id}/status', [Store\TicketAdminController::class, 'updateStatus'])->name('admin.store.tickets.status');
+    Route::delete('/tickets/{id}', [Store\TicketAdminController::class, 'destroy'])->name('admin.store.tickets.delete');
+});
diff --git a/routes/api-client.php b/routes/api-client.php
index 02d3f6d2bb..5813b89b62 100644
--- a/routes/api-client.php
+++ b/routes/api-client.php
@@ -8,6 +8,7 @@
 use Pterodactyl\Http\Middleware\RequireTwoFactorAuthentication;
 use Pterodactyl\Http\Middleware\Api\Client\Server\ResourceBelongsToServer;
 use Pterodactyl\Http\Middleware\Api\Client\Server\AuthenticateServerAccess;
+use Pterodactyl\Http\Middleware\Api\Client\RequireClientApiKey;
 
 /*
 |--------------------------------------------------------------------------
@@ -20,6 +21,71 @@
 Route::get('/', [Client\ClientController::class, 'index'])->name('api:client.index');
 Route::get('/permissions', [Client\ClientController::class, 'permissions']);
 
+/*
+|--------------------------------------------------------------------------
+| Points API
+|--------------------------------------------------------------------------
+*/
+Route::prefix('/points')->group(function () {
+    Route::get('/', [Client\PointsController::class, 'index'])->name('api:client.points');
+});
+
+/*
+|--------------------------------------------------------------------------
+| Orders API
+|--------------------------------------------------------------------------
+*/
+Route::prefix('/orders')->group(function () {
+    Route::get('/', [Client\OrderController::class, 'index'])->name('api:client.orders');
+    Route::delete('/{orderNo}', [Client\OrderController::class, 'cancel'])->name('api:client.orders.cancel');
+});
+
+/*
+|--------------------------------------------------------------------------
+| Tickets API
+|--------------------------------------------------------------------------
+*/
+Route::prefix('/tickets')->group(function () {
+    Route::get('/', [Client\TicketController::class, 'index'])->name('api:client.tickets');
+    Route::post('/', [Client\TicketController::class, 'store'])->name('api:client.tickets.store');
+    Route::get('/{id}', [Client\TicketController::class, 'show'])->name('api:client.tickets.show');
+    Route::post('/{id}/reply', [Client\TicketController::class, 'reply'])->name('api:client.tickets.reply');
+    Route::post('/{id}/close', [Client\TicketController::class, 'close'])->name('api:client.tickets.close');
+});
+
+/*
+|--------------------------------------------------------------------------
+| Redemption Codes API
+|--------------------------------------------------------------------------
+*/
+Route::prefix('/redeem')->group(function () {
+    Route::post('/', [Client\RedemptionCodeController::class, 'redeem'])->name('api:client.redeem');
+});
+
+/*
+|--------------------------------------------------------------------------
+| Store API
+|--------------------------------------------------------------------------
+*/
+Route::prefix('/store')->group(function () {
+    Route::get('/', [Client\StoreController::class, 'index'])->name('api:client.store');
+    Route::post('/order', [Client\PaymentController::class, 'createOrder'])->name('api:client.store.order');
+    Route::get('/order/{orderNo}', [Client\PaymentController::class, 'queryOrder'])->name('api:client.store.order.query');
+});
+
+/*
+|--------------------------------------------------------------------------
+| Payment Notify (webhook, no auth required)
+|--------------------------------------------------------------------------
+| Payment gateway (Alipay / WeChat) servers POST here. Auth middleware is
+| intentionally stripped — signature verification is performed inside the
+| controller before any order is fulfilled.
+|--------------------------------------------------------------------------
+*/
+Route::post('/payment/notify/{method}', [Client\PaymentController::class, 'notify'])
+    ->withoutMiddleware(['auth:sanctum', RequireClientApiKey::class, RequireTwoFactorAuthentication::class])
+    ->name('api:client.payment.notify');
+
 Route::prefix('/account')->middleware(AccountSubject::class)->group(function () {
     Route::prefix('/')->withoutMiddleware(RequireTwoFactorAuthentication::class)->group(function () {
         Route::get('/', [Client\AccountController::class, 'index'])->name('api:client.account');