trustbase-seller-backend 0.1.6 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trustbase-seller-backend",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "TrustBase Seller Backend (merchant edition) — 商品上链/订单/支付/质押 write API for TrustBase 保障链生态. 单卖家自托管形态: 签名 key 即卖家身份, 私钥不出门.",
   "main": "run-unified.js",
   "bin": {

package/routes/agent-pay.js

@@ -114,6 +114,8 @@ async function wxApiCall(method, urlPath, bodyObj, override) {
             "Authorization": wxSignAuth(method, urlPath, bodyStr, override),
             "Content-Type": "application/json",
             "Accept": "application/json",
+            // 微信 APIv3 拒默认 Accept-Language: * (undici 自动带) — 2026-09-25 /v3/certificates 实测 PARAM_ERROR
+            "Accept-Language": "zh-CN",
             "User-Agent": "trustbase-seller-backend/1.0",
         },
         body: method === "GET" ? undefined : bodyStr,
@@ -213,10 +215,28 @@ async function refreshPlatformCerts() {
     console.log(`[agent-pay] 微信平台证书已刷新 (${Object.keys(certs).length} 张)`);
 }
 
-/** 验签: timestamp\nnonce\nbody 用平台证书公钥 RSA-SHA256 校验 */
+/** 验签: timestamp\nnonce\nbody RSA-SHA256 校验。
+ *  双轨 (2026-09-25 真机): serial 以 "PUB_KEY_ID_" 开头 = 微信支付公钥模式 (新政策,
+ *  /v3/certificates 返回空, 商户平台下载固定公钥); 否则走平台证书缓存 (老模式)。
+ *  公钥池 (2026-09-25): merchant + SP 多把公钥并存, 按回调 serial 精确匹配 ID —
+ *  直连回调用商户号公钥, SP 特约商户回调用服务商号公钥。 */
 function wxVerifyNotifySignature(serial, timestamp, nonce, rawBody, signature) {
-    loadPlatformCertsFromDisk();
-    const pem = wxPlatformCerts && wxPlatformCerts[serial];
+    let pem = null;
+    if (String(serial).startsWith("PUB_KEY_ID_")) {
+        const pool = [
+            [process.env.WXPAY_PUBLIC_KEY_ID, process.env.WXPAY_PUBLIC_KEY_PATH],
+            [process.env.WXPAY_SP_PUBLIC_KEY_ID, process.env.WXPAY_SP_PUBLIC_KEY_PATH],
+        ];
+        for (const [id, p] of pool) {
+            if (id && id === serial && p) {
+                try { pem = require("fs").readFileSync(p, "utf8"); } catch (_) { pem = null; }
+                break;
+            }
+        }
+    } else {
+        loadPlatformCertsFromDisk();
+        pem = wxPlatformCerts && wxPlatformCerts[serial];
+    }
     if (!pem) return false;
     const msg = [timestamp, nonce, rawBody].join("\n") + "\n";
     return crypto.createVerify("RSA-SHA256").update(msg).verify(pem, signature, "base64");

package/routes/onboard.html

@@ -82,29 +82,43 @@ h1{font-size:22px;margin-bottom:4px}
     <div class="ops"><button class="sbtn" id="btn-verify" onclick="submitVerification()">提交实名认证</button></div>
     <div class="desc" id="verify-desc">提交后由服务商审核微信特约商户收款账户; 审核通过后自动发放 100 TCT 引导金 (无需重复提交)</div>
     <div class="hintbox" id="verify-msg"></div>
-    <div class="ops noprint"><button class="sbtn" id="btn-materials" onclick="toggleMaterials()">填写进件资料并上传证件</button></div>
-    <div class="hintbox" id="materials-msg"></div>
-    <div id="materials-form" style="display:none;margin-top:10px">
-      <div class="desc" style="margin-bottom:6px">以下资料用于服务商代你向微信申请特约商户收款账户。<b>资料只保存在你的电脑上</b>，并交给服务商用于进件。</div>
+    <div class="ops noprint"><button class="sbtn" id="btn-apply-toggle" onclick="toggleApplyForm()">填写进件资料并上传证件</button></div>
+    <div class="hintbox" id="apply-msg"></div>
+    <div id="apply-status" style="display:none;margin-top:10px;background:#F0FDF4;border:1px solid #BBF7D0;border-radius:8px;padding:12px 14px;font-size:13px;line-height:2"></div>
+    <div id="apply-form" style="display:none;margin-top:10px">
+      <div class="desc" style="margin-bottom:6px">以下资料由你的电脑<b>本地加密</b>后交给服务商，向微信申请特约商户收款账户。身份证号/银行卡号在你电脑上就已加密，任何人 (含服务商) 都看不到明文。</div>
       <label>主体类型</label>
-      <select id="m_subject_type"><option>个体户</option><option>企业</option><option>小微</option></select>
-      <label>商户全称 (与执照一致)</label><input id="m_merchant_name" placeholder="如: 无锡嘟嘟百货商行">
-      <label>统一社会信用代码 / 执照编号</label><input id="m_license_no" placeholder="18 位">
-      <label>法人/经营者姓名</label><input id="m_legal_name">
-      <label>法人身份证号</label><input id="m_legal_id_no" placeholder="18 位">
-      <label>超级管理员姓名</label><input id="m_admin_name">
-      <label>超级管理员手机号</label><input id="m_admin_mobile" placeholder="需与微信实名一致">
-      <label>门店名称 (选填)</label><input id="m_store_name">
-      <label>门店地址 (选填)</label><input id="m_store_address">
-      <label>结算账户类型 (选填)</label><select id="m_settle_type"><option></option><option>对公</option><option>对私</option></select>
-      <label>开户行 (选填)</label><input id="m_bank_name">
-      <label>结算账号 (选填)</label><input id="m_bank_account">
-      <label>营业执照照片 (必传)</label><input type="file" id="m_file_license" accept="image/*">
-      <label>法人身份证·正面 (必传)</label><input type="file" id="m_file_legal_id_front" accept="image/*">
-      <label>法人身份证·反面 (必传)</label><input type="file" id="m_file_legal_id_back" accept="image/*">
-      <label>门店照片 (选填)</label><input type="file" id="m_file_store_photo" accept="image/*">
-      <div class="ops"><button class="sbtn" id="btn-materials-submit" onclick="submitMaterials()">提交资料</button></div>
-      <div class="desc">单个文件不超过 4MB；资料含证件照片，请勿转发到聊天工具或网盘。</div>
+      <select id="a_subject_type"><option value="SUBJECT_TYPE_INDIVIDUAL">个体工商户</option><option value="SUBJECT_TYPE_ENTERPRISE">企业</option></select>
+      <label>商户简称 (支付完成页向买家展示)</label><input id="a_shortname" placeholder="如: 张三餐饮店">
+      <label>营业执照名称 (全称, 与执照一致)</label><input id="a_merchant_name" placeholder="如: 无锡嘟嘟百货商行">
+      <label>统一社会信用代码</label><input id="a_license_number" placeholder="18 位, 9 开头">
+      <label>客服电话</label><input id="a_service_phone" placeholder="交易记录向买家展示">
+      <label>经营类目编码</label><input id="a_settlement_id" placeholder="如: 719 (见服务商提供的类目对照表)">
+      <label>类目资质描述</label><input id="a_qualification_type" placeholder="如: 零售">
+      <label>超级管理员姓名 (与微信实名一致)</label><input id="a_contact_name">
+      <label>超级管理员手机号</label><input id="a_contact_mobile" placeholder="11 位, 接收微信验证码">
+      <label>联系邮箱</label><input id="a_contact_email" placeholder="接收微信开户邮件">
+      <label>法人/经营者姓名</label><input id="a_legal_name">
+      <label>法人身份证号</label><input id="a_legal_id_number" placeholder="17 位数字 + 数字或 X">
+      <label>身份证有效期</label>
+      <div style="display:flex;gap:8px"><input id="a_period_begin" placeholder="开始 YYYY-MM-DD"><input id="a_period_end" placeholder="结束 或 长期"></div>
+      <label>结算账户类型</label>
+      <select id="a_account_type"><option value="BANK_ACCOUNT_TYPE_PERSONAL">经营者个人银行卡 (个体户)</option><option value="BANK_ACCOUNT_TYPE_CORPORATE">对公银行账户</option></select>
+      <label>开户名称</label><input id="a_account_name" placeholder="个人卡=经营者姓名 / 对公=执照名称">
+      <label>银行账号</label><input id="a_account_number">
+      <label>开户银行</label><input id="a_account_bank" placeholder="如: 招商银行">
+      <label>开户支行 (选填)</label><input id="a_bank_name" placeholder="如: 招商银行深圳分行营业部">
+      <label>开户行省市编码 (选填)</label><input id="a_bank_address_code" placeholder="如: 440300">
+      <label>门店名称</label><input id="a_store_name">
+      <label>门店省市编码</label><input id="a_store_address_code" placeholder="如: 440300">
+      <label>门店详细地址</label><input id="a_store_address" placeholder="xx 路 xx 号">
+      <div id="a_up_license"></div>
+      <div id="a_up_idfront"></div>
+      <div id="a_up_idback"></div>
+      <div id="a_up_entrance"></div>
+      <div id="a_up_indoor"></div>
+      <div class="ops"><button class="sbtn primary" id="btn-apply-submit" onclick="submitApplyment()">加密并提交进件</button></div>
+      <div class="desc">照片在本机压缩后上传; 敏感字段在本机加密; 服务商暂时不可达时资料加密暂存本机, 可重试。</div>
     </div>
   </div>
 </div>
@@ -235,67 +249,130 @@ function reprintKey(){
     h.style.display=h.style.display==='block'?'none':'block';
   }
 }
-function toggleMaterials(){
-  var el=document.getElementById('materials-form');
+// ---- 进件 (2026-10-03 架构纠偏: 卖家本机提交 → 本机加密 → SP 网关 → 微信) ----
+var _aMedia={}; // 字段名 → 微信 media_id (上传成功后才提交得动)
+function toggleApplyForm(){
+  var el=document.getElementById('apply-form');
   el.style.display = el.style.display==='none' ? 'block' : 'none';
 }
-function readFileBase64(input){
-  return new Promise(function(resolve,reject){
-    var f=input.files && input.files[0];
-    if(!f) return resolve(null);
-    if(f.size > 4*1024*1024) return reject(new Error('文件超过 4MB: '+f.name));
-    var r=new FileReader();
-    r.onload=function(){resolve({name:f.name,data:String(r.result).replace(/^data:[^;]+;base64,/,'')})};
-    r.onerror=function(){reject(new Error('读取失败: '+f.name))};
-    r.readAsDataURL(f);
+// 照片本机压缩 (≤1600px JPEG; 全局 JSON 上限 1MB, 超了降质再压)
+function shrinkImage(file,cb){
+  var rd=new FileReader();
+  rd.onload=function(){
+    var img=new Image();
+    img.onload=function(){
+      var max=1600,w=img.width,h=img.height;
+      if(Math.max(w,h)>max){var k=max/Math.max(w,h);w=Math.round(w*k);h=Math.round(h*k);}
+      var cv=document.createElement('canvas');cv.width=w;cv.height=h;
+      cv.getContext('2d').drawImage(img,0,0,w,h);
+      var b64=cv.toDataURL('image/jpeg',0.85).split(',')[1];
+      if(b64.length*0.75>950*1024) b64=cv.toDataURL('image/jpeg',0.6).split(',')[1];
+      if(b64.length*0.75>950*1024) return cb(new Error('图片压缩后仍超服务器上限, 请换更小的图'));
+      cb(null,{filename:(file.name||'photo').replace(/\.[^.]*$/,'')+'.jpg',content_b64:b64});
+    };
+    img.onerror=function(){cb(new Error('图片读取失败'))};
+    img.src=rd.result;
+  };
+  rd.onerror=function(){cb(new Error('文件读取失败'))};
+  rd.readAsDataURL(file);
+}
+// 照片上传位: 选图 → 本机压缩 → 卖家后端转发 SP 网关 → media_id
+function mountApplyUpload(slotId,field,label){
+  var slot=document.getElementById(slotId);
+  slot.innerHTML='<label>'+label+'</label>'
+    +'<label class="sbtn" style="cursor:pointer">拍照/选图<input type="file" accept="image/*" style="display:none"></label>'
+    +' <span id="st_'+field+'" style="font-size:12px"></span>';
+  var input=slot.querySelector('input[type=file]');
+  var stat=document.getElementById('st_'+field);
+  input.addEventListener('change',function(){
+    if(!input.files||!input.files[0]) return;
+    stat.style.color='';stat.textContent='压缩中...';
+    shrinkImage(input.files[0],function(err,payload){
+      if(err){stat.style.color='#DC2626';stat.textContent=err.message;return;}
+      stat.textContent='上传中...';
+      fetch('/api/onboard/applyment/upload',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(payload)})
+        .then(readJson).then(function(j){
+          if(j.ok&&j.media_id){_aMedia[field]=j.media_id;stat.style.color='#16A34A';stat.textContent='✓ 已上传';}
+          else{stat.style.color='#DC2626';stat.textContent='上传失败: '+(j.message||j.error||'未知错误');}
+        }).catch(function(e){stat.style.color='#DC2626';stat.textContent='网络错误: '+e.message;});
+    });
   });
 }
-function mval(id){var e=document.getElementById(id);return e?e.value.trim():''}
-async function submitMaterials(){
-  var btn=document.getElementById('btn-materials-submit');
-  var msg=document.getElementById('materials-msg');
-  btn.disabled=true;btn.textContent='提交中...';
+mountApplyUpload('a_up_license','license_media_id','营业执照照片 (必传)');
+mountApplyUpload('a_up_idfront','legal_id_front_media_id','身份证人像面 (必传)');
+mountApplyUpload('a_up_idback','legal_id_back_media_id','身份证国徽面 (必传)');
+mountApplyUpload('a_up_entrance','store_entrance_media_id','门店门头照片 (必传)');
+mountApplyUpload('a_up_indoor','store_indoor_media_id','门店内部照片 (必传)');
+function aval(id){var e=document.getElementById(id);return e?e.value.trim():''}
+function applyFormBody(){
+  return {
+    subject_type:aval('a_subject_type'),merchant_shortname:aval('a_shortname'),merchant_name:aval('a_merchant_name'),
+    license_number:aval('a_license_number'),service_phone:aval('a_service_phone'),
+    settlement_id:aval('a_settlement_id'),qualification_type:aval('a_qualification_type'),
+    contact_name:aval('a_contact_name'),contact_mobile:aval('a_contact_mobile'),contact_email:aval('a_contact_email'),
+    legal_name:aval('a_legal_name'),legal_id_number:aval('a_legal_id_number'),
+    legal_id_period_begin:aval('a_period_begin'),legal_id_period_end:aval('a_period_end'),
+    account_type:aval('a_account_type'),account_name:aval('a_account_name'),account_number:aval('a_account_number'),
+    account_bank:aval('a_account_bank'),bank_name:aval('a_bank_name'),bank_address_code:aval('a_bank_address_code'),
+    store_name:aval('a_store_name'),store_address_code:aval('a_store_address_code'),store_address:aval('a_store_address'),
+    license_media_id:_aMedia.license_media_id||'',legal_id_front_media_id:_aMedia.legal_id_front_media_id||'',
+    legal_id_back_media_id:_aMedia.legal_id_back_media_id||'',store_entrance_media_id:_aMedia.store_entrance_media_id||'',
+    store_indoor_media_id:_aMedia.store_indoor_media_id||''
+  };
+}
+// 状态机渲染: 未提交(表单) → 已提交(business_code+轮询) → TO_BE_SIGNED(签约链接) → FINISHED(sub_mchid+引导金)
+function renderApplyment(j){
+  var box=document.getElementById('apply-status');
+  if(!j||!j.status||j.status==='NOT_SUBMITTED'){box.style.display='none';return;}
+  box.style.display='block';
+  var html='';
+  if(j.status==='PENDING_PUSH'){
+    html='📦 进件资料已加密暂存本机'+(j.push_error?' (上次提交: '+j.push_error+')':'')
+      +' <button class="sbtn" onclick="retryApplyment()">重新提交</button>';
+  } else {
+    html='业务申请编号: <b>'+(j.business_code||'')+'</b>'
+      +'<br>申请状态: <b>'+j.status+'</b>'+(j.state_msg?' ('+j.state_msg+')':'')+(j.cached?' (本机缓存)':'');
+    if(j.reject_reason) html+='<br><span style="color:#DC2626">驳回原因: '+j.reject_reason+'</span> — 点"填写进件资料"修改后重新提交';
+    if(j.sub_mchid) html+='<br>特约商户号 sub_mchid: <b>'+j.sub_mchid+'</b>';
+    if(j.sign_url) html+='<br><a href="'+String(j.sign_url).replace(/"/g,'')+'" target="_blank" style="color:#C4633C;font-weight:600">👉 法人/超管用微信打开签约链接完成签约</a>';
+    if(j.status==='APPLYMENT_STATE_FINISHED') html+='<br>✅ 微信收款账户已开通, 引导金将自动发放, 可进入下一步上架商品';
+    html+=' <button class="sbtn" onclick="queryApplyment()">刷新状态</button>';
+  }
+  box.innerHTML=html;
+  if(j.status==='APPLYMENT_STATE_FINISHED') markStepDone('st-verification');
+}
+async function submitApplyment(){
+  var btn=document.getElementById('btn-apply-submit');
+  var msg=document.getElementById('apply-msg');
+  btn.disabled=true;btn.textContent='加密并提交中...';
   try{
-    var files={};
-    var names={license:'m_file_license',legal_id_front:'m_file_legal_id_front',legal_id_back:'m_file_legal_id_back',store_photo:'m_file_store_photo'};
-    for(var k in names){
-      var f=await readFileBase64(document.getElementById(names[k]));
-      if(f) files[k]=f;
+    var j=await readJson(await fetch('/api/onboard/applyment',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(applyFormBody())}));
+    if(j.ok){
+      msg.style.display='block';
+      msg.textContent='✅ 已提交微信审核 (敏感字段已在本机加密)'+(j.idempotent?' — 此前已提交过, 幂等忽略':'');
+      document.getElementById('apply-form').style.display='none';
+      queryApplyment();
+    } else {
+      msg.style.display='block';
+      msg.textContent='提交失败: '+(j.message||j.error||'未知错误');
+      loadApplymentStatus(); // PENDING_PUSH 时状态框给出重试按钮
     }
-    var body={subject_type:mval('m_subject_type'),merchant_name:mval('m_merchant_name'),license_no:mval('m_license_no'),
-      legal_name:mval('m_legal_name'),legal_id_no:mval('m_legal_id_no'),admin_name:mval('m_admin_name'),admin_mobile:mval('m_admin_mobile'),
-      store_name:mval('m_store_name'),store_address:mval('m_store_address'),settle_type:mval('m_settle_type'),bank_name:mval('m_bank_name'),bank_account:mval('m_bank_account'),
-      files:files};
-    var r=await fetch('/onboard/materials',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});
-    var j=await readJson(r);
-    if(!j.ok){msg.style.display='block';msg.textContent='提交失败: '+(j.message||j.error||'未知错误');btn.disabled=false;btn.textContent='提交资料';return}
-    msg.style.display='block';
-    msg.textContent='✅ '+(j.message||'资料已提交')+' — 服务商审核通过后自动发放引导金 (凭据 '+String(j.bundle_hash||'').slice(0,16)+'…)';
-    document.getElementById('materials-form').style.display='none';
-    markStepDone('st-verification');
-    loadStatus(); // 资料提交后立刻拉一次链上状态
-    btn.disabled=false;btn.textContent='提交资料';
-  }catch(e){
-    msg.style.display='block';msg.textContent='提交失败: '+e.message;
-    btn.disabled=false;btn.textContent='提交资料';
-  }
+  }catch(e){msg.style.display='block';msg.textContent='提交失败: 服务暂时不可用，请刷新重试 ('+e.message+')';}
+  btn.disabled=false;btn.textContent='加密并提交进件';
+}
+async function retryApplyment(){
+  var j=await readJson(await fetch('/api/onboard/applyment',{method:'POST',headers:{'Content-Type':'application/json'},body:'{}'}));
+  if(j.ok){queryApplyment();}
+  else{var msg=document.getElementById('apply-msg');msg.style.display='block';msg.textContent=j.message||'重试失败, 请稍后再试';}
+}
+async function queryApplyment(){
+  try{renderApplyment(await readJson(await fetch('/api/onboard/applyment/status')));}catch(e){}
 }
+async function loadApplymentStatus(){queryApplyment();}
 function markStepDone(id){
   var el=document.getElementById(id);
   if(el){el.className='step done';var m=el.querySelector('.mark');if(m)m.textContent='✅'}
 }
-async function loadMaterialsStatus(){
-  try{
-    var j=await readJson(await fetch('/onboard/materials'));
-    if(!j.ok) return;
-    if(j.submitted){
-      markStepDone('st-verification');
-      var msg=document.getElementById('materials-msg');
-      msg.style.display='block';
-      msg.textContent='资料已提交 (待审核)'+(j.pushed?' — 已送达服务商':' — '+ (j.push_error||'未能送达服务商'));
-    }
-  }catch(e){}
-}
 async function submitVerification(){
   var btn=document.getElementById('btn-verify');btn.disabled=true;btn.textContent='提交中...';
   var msg=document.getElementById('verify-msg');
@@ -324,7 +401,7 @@ async function loadStatus(){
 }
 window.addEventListener('load',loadStatus);
 setInterval(loadStatus,15000); // 链上实名审批/引导金发放会变, 页面自动刷新 (不必手点)
-window.addEventListener('load',loadMaterialsStatus);
+window.addEventListener('load',loadApplymentStatus);
 async function submit(){
   var btn=document.getElementById('btn');btn.disabled=true;btn.textContent='生成中...';
   var d={merchant_shortname:document.getElementById('m_name').value,mobile_phone:document.getElementById('m_phone').value,category:document.getElementById('m_category').value};

package/routes/onboard.js

@@ -13,6 +13,15 @@
  * N13 trustcoin 自助注册 (2026-09-23): submit-verification 前置 + POST /register-account
  * 独立重驱。链上 signer=creator 强制 — oracle 代签不可行, 必须商户本人签 (本机身份,
  * 同一 JS 直签通道)。oracle 侧 (c5-glue.js 步骤2.5) 见到链上账户已存在会自动继续发放。
+ *
+ * 2026-10-03 架构纠偏 (xiaomu 拍板): 微信特约商户进件主流程在卖家本机 ——
+ *   POST /api/onboard/applyment        进件提交 (敏感字段本地 RSA-OAEP 加密后转发 SP 网关;
+ *                                      空 body = 用暂存资料重试; 已有 business_code = 幂等返回)
+ *   POST /api/onboard/applyment/upload 证件照片 → 转发 SP 网关 media/upload → media_id
+ *   GET  /api/onboard/applyment/status  代理查 SP 网关状态 (sign_url/sub_mchid 回页面)
+ * SP 网关: env SP_GATEWAY_URL (默认 https://sp-notify.openclawskills.ployq.com),
+ * 凭证 header x-sp-admin-key = env SP_MERCHANT_TOKEN (开发期从简); SP 不可达时资料
+ * (密文) 暂存本地台账 onboard_applyments, 页面可重试。公钥: env WXPAY_SP_PUBLIC_KEY_PATH。
  */
 const fs = require("fs");
 const path = require("path");
@@ -429,6 +438,207 @@ function createOnboardRouter(deps) {
         }
     });
 
+    // ---------- 微信特约商户进件 (Stage 2, 2026-10-03 架构纠偏: 卖家本机提交 → SP 网关 → 微信) ----------
+    const spApplyment = require("./sp-applyment");
+    /** 在卖家本机就要加密的敏感字段 (与 sp-applyment buildApplymentBody 加密清单一致;
+     *  注意 legal_name 不在内: 营业执照 legal_person 按微信文档是明文, 加密版单独走 legal_name_cipher) */
+    const APPLY_SENSITIVE = ["contact_name", "contact_mobile", "contact_email", "legal_id_number", "account_name", "account_number"];
+    const APPLY_REQUIRED = ["contact_name", "contact_mobile", "contact_email", "merchant_shortname", "merchant_name", "license_number",
+        "legal_name", "legal_id_number", "legal_id_period_begin", "legal_id_period_end",
+        "account_name", "account_number", "account_bank", "store_name", "store_address_code", "store_address",
+        "service_phone", "settlement_id", "qualification_type"];
+    const APPLY_MEDIA = [["license_media_id", "营业执照照片"], ["legal_id_front_media_id", "身份证人像面"],
+        ["legal_id_back_media_id", "身份证国徽面"], ["store_entrance_media_id", "门店门头照片"], ["store_indoor_media_id", "门店内部照片"]];
+
+    /** SP 网关配置 (懒读 env, 测试可注入 deps.fetcher) */
+    function spGatewayUrl() {
+        return (process.env.SP_GATEWAY_URL || "https://sp-notify.openclawskills.ployq.com").trim().replace(/\/+$/, "");
+    }
+    async function spCall(method, urlPath, bodyObj) {
+        const fetcher = deps.fetcher || globalThis.fetch;
+        const token = (process.env.SP_MERCHANT_TOKEN || "").trim();
+        const r = await fetcher(spGatewayUrl() + urlPath, {
+            method,
+            headers: Object.assign({ "Content-Type": "application/json" }, token ? { "x-sp-admin-key": token } : {}),
+            body: bodyObj ? JSON.stringify(bodyObj) : undefined,
+            signal: AbortSignal.timeout(15000),
+        });
+        const j = await r.json().catch(() => ({}));
+        return { status: r.status, json: j };
+    }
+
+    /** 本地进件台账 (一台机器一个卖家, 取最新一行; business_code 未拿到前 status=PENDING_PUSH 可重试) */
+    db.exec(`
+CREATE TABLE IF NOT EXISTS onboard_applyments (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  status TEXT NOT NULL DEFAULT 'PENDING_PUSH', -- PENDING_PUSH / SUBMITTED / 微信 applyment_state
+  business_code TEXT NOT NULL DEFAULT '',      -- SP 网关首次提交成功后分配
+  applyment_id TEXT NOT NULL DEFAULT '',
+  sign_url TEXT NOT NULL DEFAULT '',
+  sub_mchid TEXT NOT NULL DEFAULT '',
+  state_msg TEXT NOT NULL DEFAULT '',
+  encrypted_payload TEXT NOT NULL DEFAULT '',  -- 转发 SP 的完整 JSON (敏感字段已加密, 可安全暂存重试)
+  form_snapshot TEXT NOT NULL DEFAULT '',      -- 页面展示快照 (敏感字段脱敏)
+  push_error TEXT NOT NULL DEFAULT '',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+`);
+    function latestApplyment() {
+        return db.prepare("SELECT * FROM onboard_applyments ORDER BY id DESC LIMIT 1").get() || null;
+    }
+    function maskTailLocal(s) {
+        s = String(s || "");
+        return s.length <= 4 ? "***" : "***" + s.slice(-4);
+    }
+
+    /** POST /applyment/upload — 证件照片转发 SP 网关 media/upload (base64 JSON 同款) */
+    router.post("/applyment/upload", async (req, res) => {
+        try {
+            const b = req.body || {};
+            if (!b.filename || !b.content_b64) {
+                return res.status(400).json({ ok: false, error: "invalid_param", message: "filename/content_b64 必填" });
+            }
+            const r = await spCall("POST", "/api/sp/applyment/upload", { filename: String(b.filename), content_b64: String(b.content_b64) });
+            if (r.status !== 200 || !r.json.media_id) {
+                return res.status(502).json({ ok: false, error: "sp_error", sp_status: r.status, message: "服务商上传失败: " + (r.json.message || ("HTTP " + r.status)) });
+            }
+            res.json({ ok: true, media_id: r.json.media_id });
+        } catch (e) {
+            console.warn("[onboard] applyment upload SP 不可达:", e && e.message);
+            res.status(503).json({ ok: false, error: "sp_unavailable", message: "服务商暂时不可用，请稍后再试" });
+        }
+    });
+
+    /**
+     * POST /applyment — 进件提交: 敏感字段本机 RSA-OAEP 加密 (SP 公钥) → 转发 SP 网关 submit
+     * (already_encrypted: true 直通)。空 body = 用台账暂存的密文资料重试; 已有 business_code = 幂等返回。
+     */
+    router.post("/applyment", async (req, res) => {
+        try {
+            const b = req.body || {};
+            const latest = latestApplyment();
+            // 幂等: 已拿到 business_code → 直接返回, 不再调 SP
+            if (latest && latest.business_code) {
+                return res.json({ ok: true, idempotent: true, business_code: latest.business_code, applyment_id: latest.applyment_id, status: latest.status });
+            }
+            const hasForm = APPLY_REQUIRED.some((k) => b[k]) || Object.keys(b).some((k) => /_media_id$/.test(k));
+            let payload;
+            const now = Math.floor(Date.now() / 1000);
+            if (hasForm) {
+                // 校验必填字段 + 必备照片
+                for (const k of APPLY_REQUIRED) {
+                    if (!String(b[k] || "").trim()) {
+                        return res.status(400).json({ ok: false, error: "invalid_param", message: "缺少必填字段: " + k });
+                    }
+                }
+                for (const [k, label] of APPLY_MEDIA) {
+                    if (!b[k]) {
+                        return res.status(400).json({ ok: false, error: "media_missing", message: label + " 未上传 (请先上传拿到 media_id)" });
+                    }
+                }
+                // 本机加密 (SP 微信支付公钥; 私钥只在微信侧, 密文暂存/传输都安全)
+                const pubPath = (process.env.WXPAY_SP_PUBLIC_KEY_PATH || "").trim();
+                if (!pubPath) {
+                    return res.status(500).json({ ok: false, error: "sp_pubkey_missing", message: "本机未配置 SP 微信支付公钥 (WXPAY_SP_PUBLIC_KEY_PATH)" });
+                }
+                let pem;
+                try { pem = fs.readFileSync(pubPath, "utf8"); }
+                catch (e) { return res.status(500).json({ ok: false, error: "sp_pubkey_missing", message: "SP 微信支付公钥读不到: " + pubPath }); }
+                payload = {};
+                for (const k of Object.keys(b)) {
+                    if (typeof b[k] === "string" && b[k].trim()) payload[k] = b[k].trim();
+                }
+                for (const k of APPLY_SENSITIVE) payload[k] = spApplyment.encryptSensitive(payload[k], pem);
+                // 法人姓名双轨: legal_person 要明文 (payload.legal_name 不动),
+                // id_card_info.id_card_name 要密文 (单独字段, SP 侧 already_encrypted 时优先取它)
+                payload.legal_name_cipher = spApplyment.encryptSensitive(payload.legal_name, pem);
+                payload.already_encrypted = true;
+                // 台账暂存 (密文 payload + 脱敏快照), SP 不可达可重试
+                const snapshot = { ...payload };
+                for (const k of APPLY_SENSITIVE) snapshot[k] = maskTailLocal(b[k]); // 快照留明文后4位展示
+                delete snapshot.already_encrypted;
+                delete snapshot.legal_name_cipher; // 密文不进展示快照
+                const payloadStr = JSON.stringify(payload);
+                if (latest) {
+                    db.prepare("UPDATE onboard_applyments SET status='PENDING_PUSH', encrypted_payload=?, form_snapshot=?, push_error='', updated_at=? WHERE id=?")
+                        .run(payloadStr, JSON.stringify(snapshot), now, latest.id);
+                } else {
+                    db.prepare("INSERT INTO onboard_applyments (status, encrypted_payload, form_snapshot, created_at, updated_at) VALUES ('PENDING_PUSH',?,?,?,?)")
+                        .run(payloadStr, JSON.stringify(snapshot), now, now);
+                }
+            } else if (latest && latest.encrypted_payload) {
+                payload = JSON.parse(latest.encrypted_payload); // 重试: 用暂存密文
+            } else {
+                return res.status(400).json({ ok: false, error: "no_form", message: "请先填写进件资料" });
+            }
+            // 转发 SP 网关
+            let r;
+            try {
+                r = await spCall("POST", "/api/sp/applyment/submit", payload);
+            } catch (e) {
+                const msg = "服务商暂时不可用，请稍后再试 (资料已加密保存在本机, 可点重试)";
+                db.prepare("UPDATE onboard_applyments SET push_error=?, updated_at=? WHERE id=(SELECT id FROM onboard_applyments ORDER BY id DESC LIMIT 1)")
+                    .run(msg, now);
+                console.warn("[onboard] applyment submit SP 不可达:", e && e.message);
+                return res.status(503).json({ ok: false, error: "sp_unavailable", message: msg, pending: true });
+            }
+            if (r.status !== 200) {
+                const msg = r.json.message || ("服务商返回 HTTP " + r.status);
+                db.prepare("UPDATE onboard_applyments SET push_error=?, updated_at=? WHERE id=(SELECT id FROM onboard_applyments ORDER BY id DESC LIMIT 1)")
+                    .run(String(msg).slice(0, 300), now);
+                // SP/微信业务错误 (如资料问题) 原样透传给卖家页面
+                return res.status(502).json({ ok: false, error: "sp_error", sp_status: r.status, wx_code: r.json.wx_code || "", message: msg });
+            }
+            db.prepare(`UPDATE onboard_applyments SET status='SUBMITTED', business_code=?, applyment_id=?, push_error='', updated_at=?
+ WHERE id=(SELECT id FROM onboard_applyments ORDER BY id DESC LIMIT 1)`)
+                .run(String(r.json.business_code || ""), String(r.json.applyment_id || ""), now);
+            console.log("[onboard] applyment 已提交 SP bc:", r.json.business_code);
+            res.json({ ok: true, business_code: r.json.business_code, applyment_id: r.json.applyment_id, status: "SUBMITTED" });
+        } catch (e) {
+            console.error("[onboard] applyment error:", e && e.message);
+            res.status(500).json({ ok: false, error: "internal", message: String(e && e.message).slice(0, 200) });
+        }
+    });
+
+    /** GET /applyment/status — 代理查 SP 网关状态 → 更新本地台账 → 回页面 (SP 不可达回台账缓存) */
+    router.get("/applyment/status", async (req, res) => {
+        try {
+            const latest = latestApplyment();
+            if (!latest) return res.json({ ok: true, status: "NOT_SUBMITTED" });
+            if (!latest.business_code) {
+                return res.json({ ok: true, status: latest.status, push_error: latest.push_error || undefined });
+            }
+            const now = Math.floor(Date.now() / 1000);
+            try {
+                const r = await spCall("GET", "/api/sp/applyment/status/" + encodeURIComponent(latest.business_code));
+                if (r.status === 200 && r.json) {
+                    const j = r.json;
+                    db.prepare(`UPDATE onboard_applyments SET status=?, sign_url=?, sub_mchid=?, state_msg=?, updated_at=?
+ WHERE id=(SELECT id FROM onboard_applyments ORDER BY id DESC LIMIT 1)`)
+                        .run(String(j.status || latest.status), String(j.sign_url || ""), String(j.sub_mchid || ""), String(j.state_msg || ""), now);
+                    return res.json({ ok: true, ...j });
+                }
+                // SP 返回业务错误: 透传 + 台账缓存兜底
+                return res.json({
+                    ok: true, status: latest.status, business_code: latest.business_code, cached: true,
+                    sign_url: latest.sign_url || undefined, sub_mchid: latest.sub_mchid || undefined,
+                    message: j_safeMsg(r),
+                });
+            } catch (e) {
+                return res.json({
+                    ok: true, status: latest.status, business_code: latest.business_code, cached: true,
+                    sign_url: latest.sign_url || undefined, sub_mchid: latest.sub_mchid || undefined,
+                    message: "服务商暂时不可用，请稍后再试 (展示本机缓存状态)",
+                });
+            }
+        } catch (e) {
+            console.error("[onboard] applyment status error:", e && e.message);
+            res.status(500).json({ ok: false, error: "internal", message: String(e && e.message).slice(0, 200) });
+        }
+    });
+    function j_safeMsg(r) { return "服务商返回 HTTP " + r.status + (r.json && r.json.message ? ": " + r.json.message : ""); }
+
     return router;
 }