trustbase-seller-backend 0.3.6 → 0.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trustbase-seller-backend",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "TrustBase Seller Backend (merchant edition) — 商品上链/订单/支付/质押 write API for TrustBase 保障链生态. 单卖家自托管形态: 签名 key 即卖家身份, 私钥不出门.",
   "main": "run-unified.js",
   "bin": {

package/routes/onboard.html

@@ -63,6 +63,25 @@ h1{font-size:22px;margin-bottom:4px}
 /* 结算规则只读展示框 (按主体推导, 商户不用选; settlement_id=结算规则 ID 716/719/727,
    qualification_type=行业类目 MCC — 两次微信实测错误交叉锁定后的正确口径) */
 #apply-form .arule{padding:10px 12px;border:1px dashed #D4CDBF;border-radius:8px;background:#F7F3EB;color:#6B655B;font-size:14px}
+/* ===== 分步向导 stepper (2026-10-03 腾讯式分步填写): 6 步, 当前橙/完成绿/未达灰, 可回跳完成步 ===== */
+#wz-bar{display:flex;gap:6px;overflow-x:auto;margin-bottom:12px;padding-bottom:4px}
+#wz-bar .wz-item{display:flex;align-items:center;gap:6px;flex:none;font-size:12px;padding:6px 10px;border-radius:999px;border:1px solid #EAE3D6;background:#FFFDF9;cursor:pointer;color:#6B655B}
+#wz-bar .wz-dot{display:inline-flex;align-items:center;justify-content:center;width:20px;height:20px;border-radius:50%;background:#D4CDBF;color:#fff;font-size:11px;font-weight:600}
+#wz-bar .wz-item.cur{border-color:#C4633C;background:#FBF1EA;color:#C4633C;font-weight:600}
+#wz-bar .wz-item.cur .wz-dot{background:#C4633C}
+#wz-bar .wz-item.done{border-color:#BBF7D0;background:#F0FDF4;color:#166534}
+#wz-bar .wz-item.done .wz-dot{background:#16A34A}
+#wz-bar .wz-item.todo{color:#BDB5A6;cursor:default}
+#wz-step-head{margin-bottom:10px}
+#wz-step-head .desc{margin-top:2px}
+#wz-nav{display:flex;gap:10px;margin-top:16px}
+#wz-nav .sbtn{flex:1;padding:12px;text-align:center;font-size:15px}
+#wz-preview .wz-grp{border:1px solid #EAE3D6;border-radius:10px;padding:10px 12px;margin-bottom:10px;background:#FFFDF9}
+#wz-preview .wz-grp-t{font-size:13px;font-weight:600;color:#C4633C;margin-bottom:6px}
+#wz-preview .wz-row{display:flex;justify-content:space-between;font-size:13px;padding:3px 0;border-bottom:1px dashed #EFE9DC;gap:12px}
+#wz-preview .wz-row:last-child{border-bottom:none}
+#wz-preview .wz-row span{color:#8A857B;flex:none}
+#wz-preview .wz-row b{text-align:right;word-break:break-all}
 /* 特殊资质槽 (就地位: 行业选择正下方, 紧凑矮版 — 选了餐饮下面立刻要食品经营许可证) */
 #apply-form #a_up_qual_wrap{margin-top:4px}
 #apply-form #a_up_qual_wrap label.sbtn{padding:10px;gap:2px}
@@ -181,7 +200,9 @@ img.auprev{display:none;width:100%;max-height:140px;object-fit:cover;border-radi
     <div class="hintbox" id="apply-msg"></div>
     <div id="apply-status" style="display:none;margin-top:12px"></div>
     <div id="apply-form" style="display:none;margin-top:12px">
-      <div class="desc" style="margin-bottom:12px">以下资料由你的电脑<b>本地加密</b>后交给服务商，向微信申请特约商户收款账户。身份证号/银行卡号在你电脑上就已加密，任何人 (含服务商) 都看不到明文。</div>
+      <div class="desc" style="margin-bottom:12px">以下资料由你的电脑<b>本地加密</b>后交给服务商，向微信申请特约商户收款账户。身份证号/银行卡号在你电脑上就已加密，任何人 (含服务商) 都看不到明文。</div>
+      <div id="wz-bar"></div>
+      <div id="wz-step-head"><b id="wz-title" style="font-size:15px"></b><div class="desc" id="wz-desc"></div></div>
 
       <div class="acard">
         <div class="acard-h">经营场景 <span class="aopt">三选一, 决定第 4/5 张卡片要什么资料</span></div>
@@ -317,9 +338,18 @@ img.auprev{display:none;width:100%;max-height:140px;object-fit:cover;border-radi
         </div>
       </div>
 
+      <div class="acard" id="wz-preview-card" style="display:none">
+        <div class="acard-h"><span class="anum">6</span>确认提交</div>
+        <div class="desc" style="margin-bottom:8px">请核对以下资料，确认无误后提交。身份证号/卡号等敏感信息已打码。</div>
+        <div id="wz-preview"></div>
+      </div>
       <div id="apply-err" style="display:none"></div>
       <button class="abtn" id="btn-apply-submit" onclick="submitApplyment()">加密并提交进件</button>
       <div class="aprivacy">🔒 资料只保存在这台电脑; 敏感字段本机加密后交服务商; 服务商暂时不可达时加密暂存本机, 可重试。</div>
+      <div id="wz-nav">
+        <button type="button" class="sbtn" id="wz-prev" onclick="wzGo(-1)">← 上一步</button>
+        <button type="button" class="sbtn primary" id="wz-next" onclick="wzGo(1)">下一步 →</button>
+      </div>
     </div>
   </div>
 </div>
@@ -1039,6 +1069,170 @@ async function submit(){
     loadStatus(); // 刷新进度面板
   }catch(e){alert('网络错误: '+e.message);btn.disabled=false}
 }
+// ============================== 分步卡片向导 (2026-10-03 腾讯式分步填写) ==============================
+// 6 步: 主体资料 → 法人与超管 → 结算账户 → 经营与行业(场景+行业+许可证) → 证件上传 → 确认提交(预览)。
+// 全部既有逻辑 (字段 id/applyFormBody/上传槽/草稿/联动/错误红卡) 原样复用, 这里只做分步显隐+导航。
+var WZ_STEPS=[
+  {t:'主体资料',d:'营业执照上的主体信息，需与微信实名审核一致'},
+  {t:'法人与超管',d:'法人身份将用于微信实名审核，超管接收开户通知'},
+  {t:'结算账户',d:'微信收的款结算到这张卡（企业主体须对公账户）'},
+  {t:'经营与行业',d:'选经营场景和所属行业，特殊行业就地传许可证'},
+  {t:'证件上传',d:'拍清楚、四角完整、无反光 — 模糊是驳回首因'},
+  {t:'确认提交',d:'核对资料，确认后提交微信审核'}
+];
+var _wzCur=1,_wzMax=1,_wzGroups=[];
+function wzInit(){
+  var cards=document.querySelectorAll('#apply-form > .acard');
+  // 既有卡片 DOM 顺序: [经营场景卡, ①主体, ②法人, ③结算, ④场景信息, ⑤证件上传]
+  _wzGroups=[
+    [cards[1]],[cards[2]],[cards[3]],[cards[0],cards[4]],[cards[5]],
+    [document.getElementById('wz-preview-card'),document.getElementById('btn-apply-submit'),document.querySelector('#apply-form .aprivacy')]
+  ];
+  var bar=document.getElementById('wz-bar');
+  bar.innerHTML='';
+  WZ_STEPS.forEach(function(st,i){
+    var d=document.createElement('div');
+    d.className='wz-item todo'; d.setAttribute('data-step',i+1);
+    d.innerHTML='<span class="wz-dot">'+(i+1)+'</span><span class="wz-lbl">'+st.t+'</span>';
+    d.addEventListener('click',function(){ if(i+1<=_wzMax) wzShow(i+1); }); // 只许回跳已完成步
+    bar.appendChild(d);
+  });
+  wzShow(1);
+}
+function wzShow(n){
+  _wzCur=n; if(n>_wzMax)_wzMax=n;
+  _wzGroups.forEach(function(g,i){
+    g.forEach(function(el){ if(el) el.style.display=(i+1===n)?'':'none'; });
+  });
+  document.querySelectorAll('#wz-bar .wz-item').forEach(function(it){
+    var s=Number(it.getAttribute('data-step'));
+    it.className='wz-item'+(s===n?' cur':(s<_wzMax?' done':' todo'));
+    it.querySelector('.wz-dot').innerHTML=(s<_wzMax&&s!==n)?'✓':String(s);
+  });
+  var st=WZ_STEPS[n-1];
+  document.getElementById('wz-title').textContent='第 '+n+'/6 步 · '+st.t;
+  document.getElementById('wz-desc').textContent=st.d;
+  document.getElementById('wz-prev').style.visibility=n===1?'hidden':'visible';
+  document.getElementById('wz-next').style.display=n===6?'none':'';
+  if(n===6) renderWzPreview();
+  hideApplyErr();
+  document.getElementById('apply-form').scrollIntoView({behavior:'smooth',block:'start'});
+}
+function wzGo(dir){
+  if(dir>0){ var v=wzValidate(_wzCur); if(!v.ok){ showApplyErr(v.msg,v.field); return; } } // 下一步先校验当前步
+  var n=_wzCur+dir;
+  if(n<1||n>6) return;
+  wzShow(n);
+  saveApplyDraft();
+}
+// 当前步必填校验 (不过则红卡指到缺的字段, 不放行; 与后端 APPLY_* 校验同字段名, 错误定位复用)
+function wzValidate(n){
+  function need(id,label,field){
+    var e=document.getElementById(id);
+    if(!e||!String(e.value||'').trim()) return {ok:false,field:field||id.replace(/^a_/,''),msg:'请填写: '+label};
+    return null;
+  }
+  if(n===1){
+    return need('a_shortname','商户简称','merchant_shortname')||need('a_merchant_name','营业执照名称','merchant_name')
+      ||need('a_license_number','统一社会信用代码','license_number')||need('a_service_phone','客服电话','service_phone')||{ok:true};
+  }
+  if(n===2){
+    var r=need('a_legal_name','法人/经营者姓名','legal_name')||need('a_legal_id_number','法人身份证号','legal_id_number');
+    if(r) return r;
+    if(document.getElementById('a_subject_type').value==='SUBJECT_TYPE_ENTERPRISE'){
+      r=need('a_legal_id_address','身份证居住地址','legal_id_address'); if(r) return r;
+    }
+    return need('a_period_begin','身份证有效期开始','legal_id_period_begin')||need('a_period_end','身份证有效期结束','legal_id_period_end')
+      ||need('a_contact_name','超管姓名','contact_name')||need('a_contact_mobile','超管手机号','contact_mobile')
+      ||need('a_contact_email','联系邮箱','contact_email')||{ok:true};
+  }
+  if(n===3){
+    return need('a_account_bank','开户银行','account_bank')||need('a_account_name','开户名称','account_name')
+      ||need('a_account_number','银行账号','account_number')||{ok:true};
+  }
+  if(n===4){
+    var scene=currentScene(), r=null;
+    if(scene==='SALES_SCENES_STORE'){
+      r=need('a_store_name','门店名称','store_name')||need('a_store_address_code','门店省市编码','store_address_code')||need('a_store_address','门店详细地址','store_address');
+    }else if(scene==='SALES_SCENES_WEB'){
+      r=need('a_website_url','网站网址','website_url');
+    }else if(scene==='SALES_SCENES_MP'){
+      r=need('a_appid','公众号/小程序 AppID','appid');
+    }else{
+      r=need('a_app_appid','应用 AppID','app_appid');
+    }
+    if(r) return r;
+    var ind=aval('a_settlement_id');
+    if(!ind) return {ok:false,field:'qualification_type',msg:'请选择: 所属行业'};
+    if(typeof QUAL_REQUIRED!=='undefined'&&QUAL_REQUIRED[ind]&&!_aMedia.qual_media_id){
+      return {ok:false,field:'qual_media_id',msg:'请上传: '+ind+' 所需资质 ('+QUAL_REQUIRED[ind]+')'};
+    }
+    if(scene==='SALES_SCENES_APP'){
+      var spA=(window._spInfo&&window._spInfo.app_screenshots)||{};
+      var provider=(document.getElementById('a_app_provider')||{}).value||'sp';
+      var reuse=provider==='sp'&&Object.keys(spA).length>0&&(document.getElementById('a_app_reuse')||{}).checked;
+      if(!reuse&&!(_aMedia.app_home_media_id&&_aMedia.app_tail_media_id&&_aMedia.app_inner_media_id&&_aMedia.app_pay_media_id)){
+        return {ok:false,field:'app_screenshots',msg:'请上传 4 张应用截图 (或勾选使用服务商提供的应用截图)'};
+      }
+    }
+    return {ok:true};
+  }
+  if(n===5){
+    var scene=currentScene();
+    if(!_aMedia.license_media_id) return {ok:false,field:'license_media_id',msg:'请上传: 营业执照照片'};
+    if(!_aMedia.legal_id_front_media_id) return {ok:false,field:'legal_id_front_media_id',msg:'请上传: 身份证人像面'};
+    if(!_aMedia.legal_id_back_media_id) return {ok:false,field:'legal_id_back_media_id',msg:'请上传: 身份证国徽面'};
+    if(scene==='SALES_SCENES_STORE'){
+      if(!_aMedia.store_entrance_media_id) return {ok:false,field:'store_entrance_media_id',msg:'请上传: 门店门头照片'};
+      if(!_aMedia.store_indoor_media_id) return {ok:false,field:'store_indoor_media_id',msg:'请上传: 门店内部照片'};
+    }else if(scene==='SALES_SCENES_WEB'){
+      if(!_aMedia.web_home_media_id) return {ok:false,field:'web_home_media_id',msg:'请上传: 网站首页截图'};
+      if(!_aMedia.web_product_media_id) return {ok:false,field:'web_product_media_id',msg:'请上传: 商品/服务页截图'};
+    }else if(scene==='SALES_SCENES_MP'){
+      if(!_aMedia.mp_media_id) return {ok:false,field:'mp_media_id',msg:'请上传: 公众号/小程序页面截图'};
+    }
+    return {ok:true};
+  }
+  return {ok:true}; // 第 6 步提交由后端兜底
+}
+// 第 6 步预览: 分组只读摘要 (敏感字段 ***后4位)
+function wzMask(s){ s=String(s||''); return s.length<=4?'***':'***'+s.slice(-4); }
+function renderWzPreview(){
+  var f=applyFormBody();
+  var scene=currentScene();
+  var rows=[];
+  function grp(t,items){
+    rows.push('<div class="wz-grp"><div class="wz-grp-t">'+escHtml(t)+'</div>'
+      +items.map(function(it){return '<div class="wz-row"><span>'+escHtml(it[0])+'</span><b>'+escHtml(it[1]==null||it[1]===''?'—':it[1])+'</b></div>';}).join('')+'</div>');
+  }
+  grp('主体资料',[
+    ['主体类型',(document.querySelector('#a_subject_type option:checked')||{}).textContent||f.subject_type],
+    ['商户简称',f.merchant_shortname],['营业执照名称',f.merchant_name],
+    ['信用代码',f.license_number],['客服电话',f.service_phone]]);
+  grp('法人与超管',[
+    ['法人姓名',f.legal_name],['身份证号',wzMask(f.legal_id_number)],
+    ['有效期',f.legal_id_period_begin+' ~ '+f.legal_id_period_end],
+    ['超管',f.contact_name+' '+wzMask(f.contact_mobile)],['邮箱',f.contact_email]]);
+  grp('结算账户',[
+    ['账户类型',f.account_type==='BANK_ACCOUNT_TYPE_CORPORATE'?'对公账户':'经营者个人卡'],
+    ['开户行',f.account_bank],['户名',wzMask(f.account_name)],['卡号',wzMask(f.account_number)]]);
+  var sceneName={SALES_SCENES_APP:'APP 应用',SALES_SCENES_STORE:'线下门店',SALES_SCENES_WEB:'互联网网站',SALES_SCENES_MP:'公众号/小程序'}[scene]||scene;
+  grp('经营与行业',[
+    ['经营场景',sceneName],
+    ['所属行业',(document.getElementById('a_industry_cat')||{}).value+' > '+f.qualification_type],
+    ['结算规则',(document.getElementById('a_settlement_rule')||{}).textContent||''],
+    ['特殊资质',_aMedia.qual_media_id?'已上传 ✓':'—']]);
+  var docs=[['营业执照',_aMedia.license_media_id],['身份证人像面',_aMedia.legal_id_front_media_id],['身份证国徽面',_aMedia.legal_id_back_media_id]];
+  var sceneDocs={store_entrance_media_id:'门店门头照',store_indoor_media_id:'门店内部照',web_home_media_id:'网站首页截图',web_product_media_id:'商品/服务页截图',mp_media_id:'公众号/小程序截图',app_home_media_id:'应用首页截图',app_tail_media_id:'应用尾页截图',app_inner_media_id:'应用内页截图',app_pay_media_id:'应用支付页截图'};
+  for(var k in sceneDocs){ if(_aMedia[k]) docs.push([sceneDocs[k],_aMedia[k]]); }
+  if(scene==='SALES_SCENES_APP'&&f.app_screenshots&&f.app_screenshots.length&&(document.getElementById('a_app_reuse')||{}).checked){
+    docs.push(['应用截图','服务商素材 ✓']);
+  }
+  grp('证件',docs.map(function(d){return [d[0], d[1]?(d[1]==='服务商素材 ✓'?d[1]:'已上传 ✓'):'未上传 ✗'];}));
+  document.getElementById('wz-preview').innerHTML=rows.join('');
+}
+window.addEventListener('load',wzInit);
+
 // 安全卡二维码: 本机后端读 tb-keyring 出 dataURL (qrcode 包无浏览器 build, 且安全词不进 script 依赖链);
 // 只在创建会话 (_mn 在内存) 拉取 — 刷新后不再展示 (与"安全词只展示一次"同口径)
 async function loadBackupQr(){

package/test-onboard-applyment.js

@@ -795,3 +795,26 @@ test("APP 场景页面: 默认选中 APP + 字段组 + 复用勾选 + 4 截图
         assert.ok(html.includes("app_screenshots"), "提交字段");
     } finally { srv.close(); }
 });
+
+test("分步向导: stepper/导航/校验/预览 元素与逻辑齐备", async () => {
+    const { srv, base } = await startSeller();
+    try {
+        const html = await (await fetch(base + "/onboard/")).text();
+        // stepper + 6 步 + 导航
+        assert.ok(html.includes("wz-bar") && html.includes("WZ_STEPS"), "进度条");
+        assert.ok(html.includes("确认提交"), "第 6 步");
+        assert.ok(html.includes("wz-prev") && html.includes("wz-next"), "上一步/下一步");
+        assert.ok(html.includes("wzGo") && html.includes("wzShow"), "导航函数");
+        // 校验: 下一步拦 + 上一步不校验 + 回跳完成步
+        assert.ok(html.includes("wzValidate"), "当前步校验");
+        assert.ok(html.includes("if(dir>0){ var v=wzValidate(_wzCur); if(!v.ok)"), "上一步不校验");
+        assert.ok(html.includes("if(i+1<=_wzMax) wzShow(i+1)"), "只许回跳已完成步");
+        // 第 6 步预览: 分组 + 脱敏
+        assert.ok(html.includes("wz-preview") && html.includes("renderWzPreview"), "预览渲染");
+        assert.ok(html.includes("wzMask") && html.includes("***"), "敏感字段脱敏");
+        assert.ok(html.includes("主体资料") && html.includes("法人与超管") && html.includes("结算账户")
+            && html.includes("经营与行业") && html.includes("证件上传"), "6 步标题");
+        // 旧结构未破坏: 既有卡片/字段 id 都在
+        assert.ok(html.includes("a_shortname") && html.includes("a_up_license") && html.includes("btn-apply-submit"), "既有字段/提交钮保留");
+    } finally { srv.close(); }
+});