trustbase-seller-backend 0.1.5

package/api/wc-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-credentials.js","sourceRoot":"","sources":["../../src/api/wc-credentials.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CH,8DAqPC;AA/RD,qCAAoD;AACpD,+CAAiC;AAOjC;;GAEG;AACH,SAAS,mBAAmB;IAC1B,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB;IAC7B,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,8BAA8B,MAAM,EAAE,CAAC;AAChD,CAAC;AAYD;;GAEG;AACH,SAAgB,yBAAyB,CAAC,MAA2B;IACnE,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAEtB,+DAA+D;IAC/D,uCAAuC;IACvC,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,gBAAgB;oBAC3B,YAAY,EAAE,kDAAkD;iBACjE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,SAAS;YACT,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,uDAAuD,CAAC;iBAChE,GAAG,CAAC,OAAO,CAAQ,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,kBAAkB;oBAC7B,YAAY,EAAE,qBAAqB,OAAO,EAAE;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,MAAM,WAAW,GAAG;gBAClB,eAAe;gBACf,aAAa;gBACb,mBAAmB;gBACnB,iBAAiB;gBACjB,gBAAgB;gBAChB,eAAe;aAChB,CAAC;YACF,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtG,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,gBAAgB;oBAC3B,YAAY,EAAE,sCAAsC;iBACrD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,QAAQ;YACR,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;YAC3C,MAAM,eAAe,GAAG,sBAAsB,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE9B,oCAAoC;YACpC,IAAI,CAAC;gBACH,EAAE,CAAC,OAAO,CAAC;;;;;;;;SAQV,CAAC,CAAC,GAAG,CACJ,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EACrB,UAAU,EACV,OAAO,CACR,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,UAAU;oBACrB,YAAY,EAAE,GAAG,CAAC,OAAO;iBAC1B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,0DAA0D;YAC1D,MAAM,QAAQ,GAA0B;gBACtC,OAAO;gBACP,QAAQ;gBACR,YAAY;gBACZ,eAAe;gBACf,MAAM,EAAE,WAAW;gBACnB,UAAU;gBACV,YAAY,EAAE,kCAAkC;oBAC9C,wCAAwC;oBACxC,8CAA8C;oBAC9C,YAAY,SAAS,IAAI,kBAAkB,IAAI;oBAC/C,cAAc,QAAQ,IAAI;oBAC1B,oBAAoB,YAAY,IAAI;oBACpC,uBAAuB,eAAe,IAAI;oBAC1C,gBAAgB;oBAChB,uCAAuC;aAC1C,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,qDAAqD;IACrD,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN;;;uCAG6B,CAC9B;iBACA,GAAG,EAAW,CAAC;YAElB,uDAAuD;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,WAAW;gBACvB,YAAY,EAAE,CAAC,CAAC,eAAe;gBAC/B,oBAAoB,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAChE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBACtD,UAAU,EAAE,CAAC,CAAC,aAAa;gBAC3B,+BAA+B;aAChC,CAAC,CAAC,CAAC;YAEJ,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,kDAAkD;IAClD,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC/B,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CACN;;;mBAGS,CACV;iBACA,GAAG,CAAC,OAAO,CAAQ,CAAC;YAEvB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,uBAAuB;oBAClC,YAAY,EAAE,oCAAoC,OAAO,EAAE;iBAC5D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,WAAW;gBACzB,YAAY,EAAE,GAAG,CAAC,eAAe;gBACjC,oBAAoB,EAAE,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAClE,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxD,UAAU,EAAE,GAAG,CAAC,aAAa;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,mDAAmD;IACnD,+DAA+D;IAC/D,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAE/B,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,uDAAuD,CAAC;iBAChE,GAAG,CAAC,OAAO,CAAQ,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,kBAAkB;oBAC7B,YAAY,EAAE,qBAAqB,OAAO,EAAE;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sCAAsC;YACtC,EAAE,CAAC,OAAO,CAAC;;;;;;;;OAQV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEhB,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,mBAAmB,OAAO,4CAA4C;gBAC/E,SAAS,EAAE,0DAA0D;aACtE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/api/wc-tracker-receiver.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Woocommerce REST API wc-tracker/v1 Webhook 接收端 (baobei #16326 W3 实战锁版)
+ *
+ * 接收店小秘 / 第三方 ERP 主动推送的物流状态变更 (跟 baobei 2048c52 wc-v3 push 形成完整闭环)
+ *
+ * 设计原则 (Lesson #335 三处一致实战风格):
+ * 1. HMAC-SHA256 签名验证 (跟 WooCommerce REST API 同款,跟 baobei 9ccbf60 wc-v3.ts 一致)
+ * 2. Consumer Key/Secret 查 sellers 表 (跟 baobei wc-v3.ts lookup 模式一致)
+ * 3. 写入 order_events 表做 audit trail (跟 baobei 96a4217 order_events 表一致)
+ * 4. update orders / sellers 表 (跟链上 emit handler 一致)
+ *
+ * 接收端不主动 push,只被动接收 — 跟 WooCommerce Webhook 标准一致
+ *
+ * @see docs/wc-rest-api-integration-spec.md §5 追踪插件 endpoint (baobei 实战锁版 8/22 15:22)
+ */
+import { Router, Request, Response, NextFunction } from 'express';
+import Database = require('better-sqlite3');
+export interface WcTrackerReceiverConfig {
+    db: Database.Database;
+}
+export interface WcWebhookPayload {
+    event_type: string;
+    source: string;
+    height?: number;
+    tx_hash?: string;
+    timestamp: string;
+    order_id?: string;
+    seller?: string;
+    tracking_number?: string;
+    carrier?: string;
+    status?: string;
+    estimated_delivery?: string;
+    note?: string;
+    amount?: string;
+    reason?: string;
+    error?: string;
+    meta_data?: any[];
+}
+/**
+ * HMAC-SHA256 签名验证中间件 (跟 baobei wc-v3.ts 同款,反向)
+ */
+export declare function verifyWcTrackerSignature(consumerKeyLookup: (key: string) => string | null): (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * 创建 wc-tracker/v1 webhook 接收端 router
+ */
+export declare function createWcTrackerReceiverRouter(config: WcTrackerReceiverConfig): Router;
+//# sourceMappingURL=wc-tracker-receiver.d.ts.map

package/api/wc-tracker-receiver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-tracker-receiver.d.ts","sourceRoot":"","sources":["../../src/api/wc-tracker-receiver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAE5C,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,IAEzC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA6D/D;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CA4KrF"}

package/api/wc-tracker-receiver.js

@@ -0,0 +1,264 @@
+"use strict";
+/**
+ * Woocommerce REST API wc-tracker/v1 Webhook 接收端 (baobei #16326 W3 实战锁版)
+ *
+ * 接收店小秘 / 第三方 ERP 主动推送的物流状态变更 (跟 baobei 2048c52 wc-v3 push 形成完整闭环)
+ *
+ * 设计原则 (Lesson #335 三处一致实战风格):
+ * 1. HMAC-SHA256 签名验证 (跟 WooCommerce REST API 同款,跟 baobei 9ccbf60 wc-v3.ts 一致)
+ * 2. Consumer Key/Secret 查 sellers 表 (跟 baobei wc-v3.ts lookup 模式一致)
+ * 3. 写入 order_events 表做 audit trail (跟 baobei 96a4217 order_events 表一致)
+ * 4. update orders / sellers 表 (跟链上 emit handler 一致)
+ *
+ * 接收端不主动 push,只被动接收 — 跟 WooCommerce Webhook 标准一致
+ *
+ * @see docs/wc-rest-api-integration-spec.md §5 追踪插件 endpoint (baobei 实战锁版 8/22 15:22)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyWcTrackerSignature = verifyWcTrackerSignature;
+exports.createWcTrackerReceiverRouter = createWcTrackerReceiverRouter;
+const express_1 = require("express");
+const crypto = __importStar(require("crypto"));
+/**
+ * HMAC-SHA256 签名验证中间件 (跟 baobei wc-v3.ts 同款,反向)
+ */
+function verifyWcTrackerSignature(consumerKeyLookup) {
+    return (req, res, next) => {
+        // 1. 从 query 或 header 拿 consumer_key
+        const ck = req.query.consumer_key || req.headers['x-wc-consumer-key'];
+        if (!ck) {
+            res.status(401).json({
+                code: 'woocommerce_rest_authentication_error',
+                message: 'Consumer key is missing.',
+                data: { status: 401 },
+            });
+            return;
+        }
+        // 2. 查 sellers 表获取 consumer_secret
+        const consumerSecret = consumerKeyLookup(ck);
+        if (!consumerSecret) {
+            res.status(401).json({
+                code: 'woocommerce_rest_authentication_error',
+                message: 'Consumer key is invalid.',
+                data: { status: 401 },
+            });
+            return;
+        }
+        // 3. 构造签名 base string (跟 baobei wc-v3.ts verifyWooCommerceSignature 同款)
+        const url = new URL(req.url, `http://${req.headers.host}`);
+        const params = {};
+        url.searchParams.forEach((value, key) => {
+            if (key !== 'consumer_secret' && key !== 'oauth_signature') {
+                params[key] = value;
+            }
+        });
+        params['consumer_key'] = ck;
+        const sortedParams = Object.keys(params)
+            .sort()
+            .map((k) => `${k}=${params[k]}`)
+            .join('&');
+        const baseString = `${req.method}&${encodeURIComponent(url.origin + url.pathname)}&${encodeURIComponent(sortedParams)}`;
+        // 4. HMAC-SHA256
+        const signature = crypto
+            .createHmac('sha256', consumerSecret)
+            .update(baseString)
+            .digest('base64');
+        const providedSig = url.searchParams.get('oauth_signature');
+        if (providedSig !== signature) {
+            res.status(401).json({
+                code: 'woocommerce_rest_authentication_error',
+                message: 'Signature is invalid.',
+                data: { status: 401 },
+            });
+            return;
+        }
+        // 验证通过,把 secret 附到 req
+        req.wc_consumer_secret = consumerSecret;
+        next();
+    };
+}
+/**
+ * 创建 wc-tracker/v1 webhook 接收端 router
+ */
+function createWcTrackerReceiverRouter(config) {
+    const router = (0, express_1.Router)();
+    const { db } = config;
+    // 鉴权中间件 (跟 baobei wc-v3.ts 同款 HMAC)
+    const auth = verifyWcTrackerSignature((consumerKey) => {
+        const row = db
+            .prepare(`SELECT wc_consumer_secret FROM sellers WHERE wc_consumer_key = ? LIMIT 1`)
+            .get(consumerKey);
+        return row?.wc_consumer_secret || null;
+    });
+    // ============================================================
+    // POST /wc-tracker/v1/shipments — 物流单号推送
+    // ============================================================
+    router.post('/wc-tracker/v1/shipments', auth, (req, res) => {
+        try {
+            const body = req.body;
+            const { order_id, tracking_number, carrier, status, estimated_delivery } = body;
+            if (!order_id || !tracking_number) {
+                res.status(400).json({
+                    code: 'woocommerce_rest_api_error',
+                    message: 'Missing required fields: order_id, tracking_number',
+                    data: { status: 400 },
+                });
+                return;
+            }
+            // 验证订单存在
+            const order = db
+                .prepare('SELECT id, status FROM orders WHERE id = ? LIMIT 1')
+                .get(order_id);
+            if (!order) {
+                res.status(404).json({
+                    code: 'woocommerce_rest_api_error',
+                    message: 'Order not found.',
+                    data: { status: 404 },
+                });
+                return;
+            }
+            // 1. 更新 orders.shipping_tracking (如果字段存在) 或 status
+            try {
+                db.prepare(`UPDATE orders SET status = 'shipped' WHERE id = ?`).run(order_id);
+            }
+            catch (e) {
+                console.warn('[wc-tracker] update orders status:', e);
+            }
+            // 2. 写入 order_events 表做 audit trail (跟 baobei 96a4217 一致)
+            db.prepare(`
+        INSERT INTO order_events (height, tx_hash, order_id, event_type, payment_authority, psp_payment_id, created_at)
+        VALUES (0, ?, ?, 'shipment_tracker', ?, ?, datetime('now'))
+      `).run(`${tracking_number}-${carrier || ''}`, order_id, carrier || '', JSON.stringify({
+                tracking_number,
+                carrier,
+                status: status || 'in_transit',
+                estimated_delivery,
+                source: 'wc-tracker',
+                received_at: new Date().toISOString(),
+            }));
+            res.json({
+                ok: true,
+                shipment_id: order_id,
+                order_id,
+                tracking_number,
+                carrier,
+                status: status || 'in_transit',
+            });
+        }
+        catch (err) {
+            console.error('[wc-tracker] shipments error:', err.message);
+            res.status(500).json({
+                code: 'woocommerce_rest_api_error',
+                message: err.message,
+                data: { status: 500 },
+            });
+        }
+    });
+    // ============================================================
+    // POST /wc-tracker/v1/orders — 订单状态变更
+    // ============================================================
+    router.post('/wc-tracker/v1/orders', auth, (req, res) => {
+        try {
+            const body = req.body;
+            const { order_id, status, note } = body;
+            if (!order_id) {
+                res.status(400).json({
+                    code: 'woocommerce_rest_api_error',
+                    message: 'Missing required field: order_id',
+                    data: { status: 400 },
+                });
+                return;
+            }
+            const order = db
+                .prepare('SELECT id FROM orders WHERE id = ? LIMIT 1')
+                .get(order_id);
+            if (!order) {
+                res.status(404).json({
+                    code: 'woocommerce_rest_api_error',
+                    message: 'Order not found.',
+                    data: { status: 404 },
+                });
+                return;
+            }
+            // 1. 如果是发货状态,更新 orders.status
+            if (status === 'shipped' || status === 'completed') {
+                try {
+                    db.prepare(`UPDATE orders SET status = ? WHERE id = ?`).run(status, order_id);
+                }
+                catch (e) {
+                    console.warn('[wc-tracker] update orders status:', e);
+                }
+            }
+            // 2. 写入 order_events audit trail
+            db.prepare(`
+        INSERT INTO order_events (height, tx_hash, order_id, event_type, payment_authority, psp_payment_id, created_at)
+        VALUES (0, ?, ?, 'order_tracker', ?, ?, datetime('now'))
+      `).run('', order_id, status || '', JSON.stringify({
+                note: note || '',
+                status,
+                source: 'wc-tracker',
+                received_at: new Date().toISOString(),
+            }));
+            res.json({
+                ok: true,
+                order_id,
+                status,
+                note: note || '',
+            });
+        }
+        catch (err) {
+            console.error('[wc-tracker] orders error:', err.message);
+            res.status(500).json({
+                code: 'woocommerce_rest_api_error',
+                message: err.message,
+                data: { status: 500 },
+            });
+        }
+    });
+    // ============================================================
+    // POST /wc-tracker/v1/webhook-test — 测试 webhook 端点 (claude 调试用)
+    // ============================================================
+    router.post('/wc-tracker/v1/webhook-test', auth, (req, res) => {
+        res.json({
+            ok: true,
+            message: 'wc-tracker/v1 webhook receiver is alive',
+            received_at: new Date().toISOString(),
+            consumer_key_prefix: (req.query.consumer_key || '').substring(0, 12) + '...',
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=wc-tracker-receiver.js.map

package/api/wc-tracker-receiver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-tracker-receiver.js","sourceRoot":"","sources":["../../src/api/wc-tracker-receiver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,4DAgEC;AAKD,sEA4KC;AA/QD,qCAAkE;AAClE,+CAAiC;AA0BjC;;GAEG;AACH,SAAgB,wBAAwB,CACtC,iBAAiD;IAEjD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,qCAAqC;QACrC,MAAM,EAAE,GAAI,GAAG,CAAC,KAAK,CAAC,YAAuB,IAAK,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,CAAC;QAE9F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,uCAAuC;gBAC7C,OAAO,EAAE,0BAA0B;gBACnC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,cAAc,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,uCAAuC;gBAC7C,OAAO,EAAE,0BAA0B;gBACnC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;gBAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACrC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;QAExH,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC;aACpC,MAAM,CAAC,UAAU,CAAC;aAClB,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpB,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,uCAAuC;gBAC7C,OAAO,EAAE,uBAAuB;gBAChC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uBAAuB;QACtB,GAAW,CAAC,kBAAkB,GAAG,cAAc,CAAC;QACjD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,6BAA6B,CAAC,MAA+B;IAC3E,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAEtB,oCAAoC;IACpC,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,WAAmB,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,0EAA0E,CAC3E;aACA,GAAG,CAAC,WAAW,CAAQ,CAAC;QAC3B,OAAO,GAAG,EAAE,kBAAkB,IAAI,IAAI,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,yCAAyC;IACzC,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAwB,CAAC;YAC1C,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;YAEhF,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,oDAAoD;oBAC7D,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,SAAS;YACT,MAAM,KAAK,GAAG,EAAE;iBACb,OAAO,CAAC,oDAAoD,CAAC;iBAC7D,GAAG,CAAC,QAAQ,CAAQ,CAAC;YAExB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,kBAAkB;oBAC3B,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,mDAAmD;YACnD,IAAI,CAAC;gBACH,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YAED,0DAA0D;YAC1D,EAAE,CAAC,OAAO,CAAC;;;OAGV,CAAC,CAAC,GAAG,CACJ,GAAG,eAAe,IAAI,OAAO,IAAI,EAAE,EAAE,EACrC,QAAQ,EACR,OAAO,IAAI,EAAE,EACb,IAAI,CAAC,SAAS,CAAC;gBACb,eAAe;gBACf,OAAO;gBACP,MAAM,EAAE,MAAM,IAAI,YAAY;gBAC9B,kBAAkB;gBAClB,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CACH,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,QAAQ;gBACrB,QAAQ;gBACR,eAAe;gBACf,OAAO;gBACP,MAAM,EAAE,MAAM,IAAI,YAAY;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,sCAAsC;IACtC,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAwB,CAAC;YAC1C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAExC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,kCAAkC;oBAC3C,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,EAAE;iBACb,OAAO,CAAC,4CAA4C,CAAC;iBACrD,GAAG,CAAC,QAAQ,CAAQ,CAAC;YAExB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,kBAAkB;oBAC3B,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,8BAA8B;YAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC;oBACH,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAChF,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,EAAE,CAAC,OAAO,CAAC;;;OAGV,CAAC,CAAC,GAAG,CACJ,EAAE,EACF,QAAQ,EACR,MAAM,IAAI,EAAE,EACZ,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,IAAI,IAAI,EAAE;gBAChB,MAAM;gBACN,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CACH,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,QAAQ;gBACR,MAAM;gBACN,IAAI,EAAE,IAAI,IAAI,EAAE;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,gEAAgE;IAChE,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/E,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,yCAAyC;YAClD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,mBAAmB,EAAE,CAAE,GAAG,CAAC,KAAK,CAAC,YAAuB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;SACzF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/api/wc-v3.d.ts

@@ -0,0 +1,40 @@
+/**
+ * WooCommerce REST API v3 Compatible Router (baobei #16243 实战锁版)
+ *
+ * Implements Woocommerce REST API compatible endpoints for TrustChain PWA
+ * 店小秘 / 其他 ERP 集成 (标准协议, 不需要 Partner 审核)
+ *
+ * 命名空间: /wp-json/wc/v3/*
+ * 鉴权: Consumer Key + Consumer Secret (HMAC-SHA256, 跟 WooCommerce 同款)
+ *
+ * 端点:
+ *   GET    /products             - 卖家 SKU 列表
+ *   GET    /products/:id         - 产品详情
+ *   GET    /orders               - 订单列表
+ *   GET    /orders/:id           - 订单详情
+ *   GET    /customers            - 客户列表
+ *   POST   /orders/:id/notes     - 写订单备注 (含物流单号)
+ *   POST   /orders/:id/refunds   - 退款
+ *   PUT    /products/:id         - 库存同步
+ *   POST   /wc-tracker/v1/shipments - 物流追踪
+ *   POST   /wc-tracker/v1/orders    - 订单状态追踪
+ *
+ * @see docs/wc-rest-api-integration-spec.md (baobei 实战锁版 8/22 15:22 SGT)
+ */
+import { Router, Request, Response, NextFunction } from 'express';
+import Database = require('better-sqlite3');
+export interface WcV3Config {
+    db: Database.Database;
+}
+/**
+ * 验证 WooCommerce REST API 请求 (HMAC-SHA256 签名)
+ * 跟 WooCommerce 完全同款算法
+ *
+ * @see https://woocommerce.github.io/woocommerce-rest-api-docs/#authentication
+ */
+export declare function verifyWooCommerceSignature(consumerKey: string, consumerSecret: string): (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * 创建 WooCommerce REST API v3 兼容路由
+ */
+export declare function createWcV3Router(config: WcV3Config): Router;
+//# sourceMappingURL=wc-v3.d.ts.map

package/api/wc-v3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-v3.d.ts","sourceRoot":"","sources":["../../src/api/wc-v3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAE5C,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,IAEd,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA0D/D;AAmDD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAymB3D"}