trustbase-seller-backend 0.3.7 → 0.3.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trustbase-seller-backend",
-  "version": "0.3.7",
+  "version": "0.3.9",
   "description": "TrustBase Seller Backend (merchant edition) — 商品上链/订单/支付/质押 write API for TrustBase 保障链生态. 单卖家自托管形态: 签名 key 即卖家身份, 私钥不出门.",
   "main": "run-unified.js",
   "bin": {

package/routes/onboard.html

@@ -289,14 +289,13 @@ img.auprev{display:none;width:100%;max-height:140px;object-fit:cover;border-radi
         <div class="acard-h"><span class="anum">4</span><span id="acard4-title">门店信息</span></div>
         <div id="scene_fields_app">
           <div class="agrid">
-            <div class="afield"><label for="a_app_appid">应用 AppID</label><input id="a_app_appid" placeholder="默认由服务商提供">
-              <div class="hint" id="a_appid_note" style="display:none;font-size:12px;color:#16A34A;margin-top:3px">✓ 由服务商提供, 无需自备</div></div>
+            <div class="afield" id="a_appid_field"><label for="a_app_appid">应用 AppID</label><input id="a_app_appid" placeholder="wx 开头">
+              <div class="hint" id="a_appid_note" style="display:none;font-size:12px;color:#16A34A;margin-top:3px">✓ 由服务商提供</div></div>
             <div class="afield"><label for="a_app_provider">应用归属</label>
               <select id="a_app_provider"><option value="sp">服务商应用 (默认, 零自备)</option><option value="own">商户自有应用</option></select></div>
           </div>
-          <div class="ahint" id="a_app_reuse_row" style="display:none;margin-top:8px">
-            <label style="cursor:pointer"><input type="checkbox" id="a_app_reuse" checked style="width:auto;margin-right:6px">使用服务商提供的应用截图 ✓ (推荐, 不用自己传)</label>
-          </div>
+          <div class="ahint" id="a_app_provided" style="display:none;margin-top:8px;background:#F0FDF4;border-color:#BBF7D0;color:#166534"></div>
+          <div class="ahint" id="a_app_missing" style="display:none;margin-top:8px">⚠️ 服务商尚未配置应用，请联系服务商配置，或改用下方"商户自有应用"填写</div>
           <div class="ahint" id="a_app_own_hint" style="display:none;margin-top:8px">使用自有应用: 请填自己的 AppID 并上传 4 张应用截图</div>
         </div>
         <div class="agrid" id="scene_fields_store">
@@ -698,22 +697,40 @@ function setScene(scene){
   });
   paintAppScene(); // APP 场景: 服务商素材复用行显隐 + 截图槽联动
 }
-// APP 场景 (普通商户零自备): 服务商已配素材 → 默认勾选"使用服务商提供的应用截图", 截图槽隐藏;
-// 取消勾选或选自有应用 → 显示 4 个截图槽自己传
+// APP 场景 (2026-10-03 UX 修正): 服务商配置完整 (AppID+4素材) → AppID 框和截图槽全隐藏,
+// 只留绿标"应用和截图由服务商提供, 无需操作"; 未配齐 → 提示联系服务商 + 展开自有字段组;
+// 选自有应用 → AppID 输入框 + 4 张截图槽。
+function appSpComplete(){
+  var sp=window._spInfo||{}, a=sp.app_screenshots||{};
+  return !!(sp.app_appid&&a.home&&a.tail&&a.inner&&a.pay);
+}
+function maskAppid(a){ a=String(a||''); return a.length>8?a.slice(0,4)+'****'+a.slice(-4):a; }
 function paintAppScene(){
   if(currentScene()!=='SALES_SCENES_APP') return;
-  var spAssets=(window._spInfo&&window._spInfo.app_screenshots)||{};
-  var hasSp=Object.keys(spAssets).length>0;
-  var reuseRow=document.getElementById('a_app_reuse_row');
-  if(reuseRow) reuseRow.style.display=hasSp?'':'none';
+  var complete=appSpComplete();
   var provider=(document.getElementById('a_app_provider')||{}).value||'sp';
-  var reuse=hasSp&&provider==='sp'&&(document.getElementById('a_app_reuse')||{}).checked;
+  var zeroMode=provider==='sp'&&complete; // 零操作: 全隐藏
+  var missing=provider==='sp'&&!complete; // 服务商未配齐 → 提示+自有组
+  var fAppid=document.getElementById('a_appid_field');
+  if(fAppid) fAppid.style.display=zeroMode?'none':'';
+  var provided=document.getElementById('a_app_provided');
+  if(provided){
+    provided.style.display=zeroMode?'':'none';
+    if(zeroMode) provided.textContent='✓ 应用和截图由服务商提供 (AppID: '+maskAppid((window._spInfo||{}).app_appid)+'), 无需操作';
+  }
+  var missEl=document.getElementById('a_app_missing');
+  if(missEl) missEl.style.display=missing?'':'none';
+  var ownHint=document.getElementById('a_app_own_hint');
+  if(ownHint) ownHint.style.display=provider==='own'?'':'none';
   ['a_up_s1','a_up_s2','a_up_s3','a_up_s4'].forEach(function(id){
-    var el=document.getElementById(id);
-    if(el) el.style.display=reuse?'none':'';
+    var el=document.getElementById(id); if(el) el.style.display=zeroMode?'none':'';
   });
-  var ownHint=document.getElementById('a_app_own_hint');
-  if(ownHint) ownHint.style.display=(provider==='own'||!reuse)&&!hasSp?'':'none';
+  // AppID: 服务商配了 → 预填 (隐藏提交也要用); 未配 → 不显示误导占位, 占位统一 "wx 开头"
+  var appidEl=document.getElementById('a_app_appid');
+  if(appidEl){
+    if((window._spInfo||{}).app_appid&&!appidEl.value) appidEl.value=(window._spInfo||{}).app_appid;
+    appidEl.placeholder='wx 开头';
+  }
 }
 setScene('SALES_SCENES_APP'); // 默认 APP (普通商户零自备)
 function aval(id){var e=document.getElementById(id);return e?e.value.trim():''}
@@ -742,13 +759,14 @@ function applyFormBody(){
     body.web_home_media_id=_aMedia.web_home_media_id||'';body.web_product_media_id=_aMedia.web_product_media_id||'';
   }else if(scene==='SALES_SCENES_APP'){
     var provider=aval('a_app_provider')||'sp';
-    body.appid=aval('a_app_appid');
     body.appid_provider=provider; // sp=服务商应用(默认零自备) / own=商户自有应用
-    var spAssets=(window._spInfo&&window._spInfo.app_screenshots)||{};
-    var reuse=provider==='sp'&&Object.keys(spAssets).length>0&&(document.getElementById('a_app_reuse')||{}).checked;
-    if(reuse){
-      body.app_screenshots=['home','tail','inner','pay'].map(function(k){return spAssets[k];}).filter(Boolean); // 复用服务商素材
+    if(provider==='sp'&&appSpComplete()){
+      // 零操作: AppID 和截图全部用服务商配置 (商户页面全隐藏)
+      body.appid=(window._spInfo||{}).app_appid;
+      var sa=(window._spInfo||{}).app_screenshots||{};
+      body.app_screenshots=['home','tail','inner','pay'].map(function(k){return sa[k];}).filter(Boolean);
     }else{
+      body.appid=aval('a_app_appid');
       body.app_screenshots=[_aMedia.app_home_media_id,_aMedia.app_tail_media_id,_aMedia.app_inner_media_id,_aMedia.app_pay_media_id].filter(Boolean);
     }
   }else{
@@ -1004,12 +1022,8 @@ async function loadSpInfo(){
     if(!j||!j.name) return;
     window._spInfo=j; // APP 场景零自备: app_appid/app_screenshots 预填复用
     var appidEl=document.getElementById('a_app_appid');
-    if(appidEl&&j.app_appid&&!appidEl.value){
-      appidEl.value=j.app_appid;
-      var note=document.getElementById('a_appid_note');
-      if(note) note.style.display='block';
-    }
-    paintAppScene(); // 素材复用行按服务商配置刷新
+    if(appidEl&&j.app_appid&&!appidEl.value) appidEl.value=j.app_appid;
+    paintAppScene(); // 三态显隐按服务商配置完整度刷新
     card.style.display='block';
     card.classList.toggle('offline', !!j.offline);
     document.getElementById('sp-name').textContent=j.offline&&!j.stale?'服务商暂时不可达':j.name;
@@ -1159,7 +1173,10 @@ function wzValidate(n){
     }else if(scene==='SALES_SCENES_MP'){
       r=need('a_appid','公众号/小程序 AppID','appid');
     }else{
-      r=need('a_app_appid','应用 AppID','app_appid');
+      // APP 场景: 服务商配置完整(零操作)时 AppID 框隐藏且用服务商值, 不校验输入框
+      if(!((document.getElementById('a_app_provider')||{}).value!=='own'&&appSpComplete())){
+        r=need('a_app_appid','应用 AppID','app_appid');
+      }
     }
     if(r) return r;
     var ind=aval('a_settlement_id');
@@ -1168,11 +1185,10 @@ function wzValidate(n){
       return {ok:false,field:'qual_media_id',msg:'请上传: '+ind+' 所需资质 ('+QUAL_REQUIRED[ind]+')'};
     }
     if(scene==='SALES_SCENES_APP'){
-      var spA=(window._spInfo&&window._spInfo.app_screenshots)||{};
       var provider=(document.getElementById('a_app_provider')||{}).value||'sp';
-      var reuse=provider==='sp'&&Object.keys(spA).length>0&&(document.getElementById('a_app_reuse')||{}).checked;
-      if(!reuse&&!(_aMedia.app_home_media_id&&_aMedia.app_tail_media_id&&_aMedia.app_inner_media_id&&_aMedia.app_pay_media_id)){
-        return {ok:false,field:'app_screenshots',msg:'请上传 4 张应用截图 (或勾选使用服务商提供的应用截图)'};
+      if(!(provider==='sp'&&appSpComplete())
+        &&!(_aMedia.app_home_media_id&&_aMedia.app_tail_media_id&&_aMedia.app_inner_media_id&&_aMedia.app_pay_media_id)){
+        return {ok:false,field:'app_screenshots',msg:'请上传 4 张应用截图 (或等服务商配置后重试)'};
       }
     }
     return {ok:true};
@@ -1225,7 +1241,7 @@ function renderWzPreview(){
   var docs=[['营业执照',_aMedia.license_media_id],['身份证人像面',_aMedia.legal_id_front_media_id],['身份证国徽面',_aMedia.legal_id_back_media_id]];
   var sceneDocs={store_entrance_media_id:'门店门头照',store_indoor_media_id:'门店内部照',web_home_media_id:'网站首页截图',web_product_media_id:'商品/服务页截图',mp_media_id:'公众号/小程序截图',app_home_media_id:'应用首页截图',app_tail_media_id:'应用尾页截图',app_inner_media_id:'应用内页截图',app_pay_media_id:'应用支付页截图'};
   for(var k in sceneDocs){ if(_aMedia[k]) docs.push([sceneDocs[k],_aMedia[k]]); }
-  if(scene==='SALES_SCENES_APP'&&f.app_screenshots&&f.app_screenshots.length&&(document.getElementById('a_app_reuse')||{}).checked){
+  if(scene==='SALES_SCENES_APP'&&f.appid_provider==='sp'&&appSpComplete()){
     docs.push(['应用截图','服务商素材 ✓']);
   }
   grp('证件',docs.map(function(d){return [d[0], d[1]?(d[1]==='服务商素材 ✓'?d[1]:'已上传 ✓'):'未上传 ✗'];}));
@@ -1381,9 +1397,7 @@ async function restoreIdentity(){
     }
   }
   if(stl){ stl.addEventListener('change',paintQualSlot); }
-  // APP 场景联动: 复用勾选/应用归属切换 → 截图槽显隐
-  var appReuse=document.getElementById('a_app_reuse');
-  if(appReuse) appReuse.addEventListener('change',function(){ paintAppScene(); saveApplyDraft(); });
+  // APP 场景联动: 应用归属切换 → 字段组/截图槽显隐
   var appProv=document.getElementById('a_app_provider');
   if(appProv) appProv.addEventListener('change',function(){ paintAppScene(); saveApplyDraft(); });
   if(catEl){ catEl.addEventListener('change',function(){ renderIndustrySubs(false); }); }

package/routes/sp-applyment.js

@@ -292,6 +292,23 @@ function buildMultipart(filename, fileBuf, metaStr) {
     return { boundary, body: Buffer.concat([Buffer.from(head, "utf8"), fileBuf, Buffer.from(tail, "utf8")]) };
 }
 
+/** 服务商配置档案 (sp_profile 键值表, /sp/config 配置页的数据源; 读表优先 env 兜底) */
+function ensureSpProfile(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS sp_profile (
+  key TEXT PRIMARY KEY, value TEXT NOT NULL DEFAULT '', updated_at INTEGER NOT NULL)`);
+}
+/** 读配置: 表里有值用表, 否则 undefined (调用方回落 env) */
+function spProfileGet(db, key) {
+    ensureSpProfile(db);
+    const row = db.prepare("SELECT value FROM sp_profile WHERE key = ?").get(key);
+    return row && row.value !== "" ? row.value : undefined;
+}
+function spProfileSet(db, key, value) {
+    ensureSpProfile(db);
+    db.prepare("INSERT INTO sp_profile (key, value, updated_at) VALUES (?,?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at")
+        .run(key, String(value), nowSec());
+}
+
 /** 服务商应用素材: 表优先, env SP_APP_ASSETS_JSON ({home,tail,inner,pay} 各 media_id) 兜底 */
 function readAppAssets(db) {
     try {
@@ -312,6 +329,229 @@ function readAppAssets(db) {
     } catch (_) { return {}; }
 }
 
+/** sp-config 段 (2026-10-03): /sp/config 服务商配置页 + GET/PUT /api/sp/config + 素材删除。
+ *  页面极简卡片风 (设计规范), 一屏三件事: 应用配置 / 服务商名片 / 状态总览。 */
+
+/** 配齐度计算 (AppID / 4 素材 / 名片 / 费率 四块) */
+function configCompleteness(db) {
+    const appid = spProfileGet(db, "app_appid") || process.env.SP_APP_APPID || "";
+    const assets = readAppAssets(db);
+    const name = spProfileGet(db, "sp_name") || process.env.SP_NAME || "";
+    const contact = spProfileGet(db, "sp_contact") || process.env.SP_CONTACT || "";
+    const KIND_LABEL = { home: "首页截图", tail: "尾页截图", inner: "应用内截图", pay: "支付页截图" };
+    const missing = [];
+    if (!appid) missing.push("AppID");
+    for (const k of ["home", "tail", "inner", "pay"]) if (!assets[k]) missing.push(KIND_LABEL[k]);
+    if (!name) missing.push("服务商名称");
+    if (!contact) missing.push("客服联系方式");
+    const assetCount = ["home", "tail", "inner", "pay"].filter((k) => assets[k]).length;
+    return {
+        appid: !!appid,
+        assets: assetCount, // 0-4
+        profile: !!(name && contact),
+        rate: true, // getDefaultRateBp 总有兜底
+        complete: missing.length === 0,
+        missing,
+    };
+}
+
+/** 当前全量配置 (表优先 env 兜底) */
+function currentConfig(db) {
+    const bp = spCommission.getDefaultRateBp(db);
+    return {
+        app_appid: spProfileGet(db, "app_appid") || process.env.SP_APP_APPID || "",
+        sp_name: spProfileGet(db, "sp_name") || process.env.SP_NAME || "",
+        sp_desc: spProfileGet(db, "sp_desc") || process.env.SP_DESC || "",
+        sp_official_url: spProfileGet(db, "sp_official_url") || process.env.SP_OFFICIAL_URL || "",
+        sp_contact: spProfileGet(db, "sp_contact") || process.env.SP_CONTACT || "",
+        commission_bp: bp,
+        rate_pct: (bp / 100).toFixed(2) + "%",
+        assets: readAppAssets(db),
+    };
+}
+
+const CONFIG_PAGE_HTML = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>服务商配置 · TrustBase SP</title>
+<style>
+*{margin:0;padding:0;box-sizing:border-box}
+body{background:#F7F3EB;color:#33302B;font-family:-apple-system,'PingFang SC','Microsoft YaHei',sans-serif;line-height:1.7}
+.wrap{max-width:640px;margin:0 auto;padding:20px 16px 60px}
+h1{font-size:20px;margin-bottom:4px}
+.sub{font-size:13px;color:#8A857B;margin-bottom:16px}
+.chips{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:16px}
+.chip{font-size:12px;border-radius:999px;padding:5px 12px;border:1px solid #EAE3D6;background:#FCFAF4;color:#8A857B}
+.chip.ok{background:#F0FDF4;border-color:#BBF7D0;color:#166534}
+.box{background:#FCFAF4;border:1px solid #EAE3D6;border-radius:14px;padding:18px;margin-bottom:14px}
+.box h3{font-size:15px;color:#C4633C;margin-bottom:10px}
+label{display:block;font-size:13px;color:#6B655B;margin:10px 0 4px}
+input{width:100%;padding:10px 12px;border:1px solid #D4CDBF;border-radius:8px;font-size:15px;background:#fff}
+input:focus{outline:none;border-color:#C4633C;box-shadow:0 0 0 3px rgba(196,99,60,.15)}
+.cur{font-size:12px;color:#8A857B;margin-top:3px;word-break:break-all}
+.btn{display:inline-block;background:#C4633C;color:#fff;border:none;border-radius:8px;padding:10px 24px;font-size:15px;cursor:pointer;margin-top:12px}
+.btn:disabled{background:#ccc}
+.slots{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-top:8px}
+.slot{border:2px dashed #D4CDBF;border-radius:10px;background:#FFFDF9;padding:10px;text-align:center;font-size:12px;color:#6B655B}
+.slot .t{font-weight:600;color:#33302B;margin-bottom:6px}
+.slot img{max-width:100%;max-height:100px;border-radius:6px;margin-bottom:6px}
+.slot .mid{font-size:11px;color:#16A34A;word-break:break-all;margin-bottom:6px}
+.upbtn{display:inline-block;background:#fff;border:1px solid #C4633C;color:#C4633C;border-radius:6px;padding:4px 12px;font-size:12px;cursor:pointer;margin:2px}
+.upbtn.del{color:#DC2626;border-color:#FCA5A5}
+.stat{font-size:13px;margin-top:10px;padding:10px 12px;border-radius:8px}
+.stat.ok{background:#F0FDF4;border:1px solid #BBF7D0;color:#166534}
+.stat.miss{background:#FFFBEB;border:1px solid #FDE68A;color:#92400E}
+.msg{font-size:13px;margin-top:8px}
+.msg.err{color:#DC2626}.msg.ok{color:#16A34A}
+@media (max-width:640px){.slots{grid-template-columns:1fr}}
+</style>
+</head>
+<body>
+<div class="wrap">
+<h1>服务商配置</h1>
+<div class="sub">TrustBase 服务商运营台 · 应用/名片/状态 一屏三件事</div>
+
+<div class="chips" id="chips"></div>
+
+<div class="box">
+<h3>① 应用配置 (商户 APP 场景进件零自备)</h3>
+<label>服务商应用 AppID</label>
+<input id="appid" placeholder="wx 开头 (微信开放平台注册的应用)">
+<div class="cur" id="appid-cur"></div>
+<button class="btn" onclick="saveAppid()">保存 AppID</button>
+<label style="margin-top:14px">应用截图素材 (4 张)</label>
+<div class="slots" id="slots"></div>
+<div class="stat" id="app-stat"></div>
+<div class="msg" id="app-msg"></div>
+</div>
+
+<div class="box">
+<h3>② 服务商名片 (商户入驻页展示)</h3>
+<label>名称</label><input id="p_name" placeholder="如: 无锡小播鼠网络科技">
+<label>简介</label><input id="p_desc" placeholder="一句话介绍">
+<label>官网</label><input id="p_url" placeholder="https://">
+<label>客服联系方式</label><input id="p_contact" placeholder="微信/电话/邮箱">
+<label>默认抽佣费率 (bp, 100 = 1.00%)</label><input id="p_bp" type="number" min="0" max="3000">
+<div class="cur" id="bp-cur"></div>
+<button class="btn" onclick="saveProfile()">保存名片</button>
+<div class="msg" id="p-msg"></div>
+</div>
+</div>
+
+<script>
+var KINDS=[['home','首页'],['tail','尾页'],['inner','应用内'],['pay','支付页']];
+var CFG=null;
+function adminKey(){
+  var k=localStorage.getItem('spAdminKey')||'';
+  if(!k){k=prompt('请输入管理密钥 (x-sp-admin-key)')||''; if(k)localStorage.setItem('spAdminKey',k);}
+  return k;
+}
+function api(path,opts){
+  opts=opts||{};
+  opts.headers=Object.assign({'Content-Type':'application/json','Accept':'application/json','x-sp-admin-key':adminKey()},opts.headers||{});
+  return fetch(path,opts).then(function(r){
+    if(r.status===401){localStorage.removeItem('spAdminKey');}
+    return r.json().then(function(j){return{status:r.status,json:j};});
+  });
+}
+function esc(s){return String(s==null?'':s).replace(/&/g,'&amp;').replace(/</g,'&lt;');}
+function maskMid(m){m=String(m||'');return m.length>16?m.slice(0,12)+'…'+m.slice(-4):m;}
+
+function render(){
+  var c=CFG, comp=c.completeness;
+  // 状态总览
+  document.getElementById('chips').innerHTML=
+    '<span class="chip '+(comp.appid?'ok':'')+'">'+(comp.appid?'✓':'○')+' AppID</span>'
+    +'<span class="chip '+(comp.assets===4?'ok':'')+'">'+(comp.assets===4?'✓':'○')+' 素材 '+comp.assets+'/4</span>'
+    +'<span class="chip '+(comp.profile?'ok':'')+'">'+(comp.profile?'✓':'○')+' 名片</span>'
+    +'<span class="chip '+(comp.rate?'ok':'')+'">'+(comp.rate?'✓':'○')+' 费率</span>';
+  // ① 应用配置
+  document.getElementById('appid').value=c.app_appid||'';
+  document.getElementById('appid-cur').textContent=c.app_appid?('当前: '+c.app_appid):'未配置';
+  document.getElementById('slots').innerHTML=KINDS.map(function(kk){
+    var mid=c.assets[kk[0]];
+    return '<div class="slot"><div class="t">'+kk[1]+'</div>'
+      +(mid?'<div class="mid">✓ 已上传 ('+esc(maskMid(mid))+')</div>':'')
+      +'<img id="img-'+kk[0]+'" style="display:none">'
+      +'<label class="upbtn">'+(mid?'替换':'点击上传')+'<input type="file" accept="image/*" style="display:none" onchange="upAsset(event,\x27'+kk[0]+'\x27)"></label>'
+      +(mid?'<button class="upbtn del" onclick="delAsset(\x27'+kk[0]+'\x27)">删除</button>':'')
+      +'</div>';
+  }).join('');
+  var st=document.getElementById('app-stat');
+  if(comp.appid&&comp.assets===4){st.className='stat ok';st.textContent='✓ 已配齐，商户进件自动进入零自备模式';}
+  else{st.className='stat miss';st.textContent='还差 '+comp.missing.length+' 项：'+comp.missing.join('、');}
+  // ② 名片
+  document.getElementById('p_name').value=c.sp_name||'';
+  document.getElementById('p_desc').value=c.sp_desc||'';
+  document.getElementById('p_url').value=c.sp_official_url||'';
+  document.getElementById('p_contact').value=c.sp_contact||'';
+  document.getElementById('p_bp').value=c.commission_bp;
+  document.getElementById('bp-cur').textContent='当前: '+c.commission_bp+' bp ('+c.rate_pct+')';
+}
+async function load(){
+  var r=await api('/api/sp/config');
+  if(r.status!==200){alert(r.json.message||'加载失败');return;}
+  CFG=r.json; render();
+}
+async function saveAppid(){
+  var r=await api('/api/sp/config',{method:'PUT',body:JSON.stringify({app_appid:document.getElementById('appid').value.trim()})});
+  var m=document.getElementById('app-msg');
+  m.className='msg '+(r.json.ok?'ok':'err'); m.textContent=r.json.ok?'✓ 已保存':(r.json.message||'保存失败');
+  if(r.json.ok) load();
+}
+async function saveProfile(){
+  var bp=Number(document.getElementById('p_bp').value);
+  var r=await api('/api/sp/config',{method:'PUT',body:JSON.stringify({
+    sp_name:document.getElementById('p_name').value.trim(),
+    sp_desc:document.getElementById('p_desc').value.trim(),
+    sp_official_url:document.getElementById('p_url').value.trim(),
+    sp_contact:document.getElementById('p_contact').value.trim(),
+    commission_bp:bp})});
+  var m=document.getElementById('p-msg');
+  m.className='msg '+(r.json.ok?'ok':'err'); m.textContent=r.json.ok?'✓ 已保存 (商户端 /api/sp/info 立即生效)':(r.json.message||'保存失败');
+  if(r.json.ok) load();
+}
+function shrink(file,cb){
+  var rd=new FileReader();
+  rd.onload=function(){
+    var img=new Image();
+    img.onload=function(){
+      var max=1600,w=img.width,h=img.height;
+      if(Math.max(w,h)>max){var k=max/Math.max(w,h);w=Math.round(w*k);h=Math.round(h*k);}
+      var cv=document.createElement('canvas');cv.width=w;cv.height=h;
+      cv.getContext('2d').drawImage(img,0,0,w,h);
+      cb(null,cv.toDataURL('image/jpeg',0.85).split(',')[1]);
+    };
+    img.src=rd.result;
+  };
+  rd.readAsDataURL(file);
+}
+async function upAsset(ev,kind){
+  var file=ev.target.files&&ev.target.files[0];
+  if(!file) return;
+  var m=document.getElementById('app-msg');
+  m.className='msg';m.textContent='上传中...';
+  shrink(file,async function(err,b64){
+    if(err){m.className='msg err';m.textContent=err.message;return;}
+    var assets={}; assets[kind]={filename:kind+'.jpg',content_b64:b64};
+    var r=await api('/api/sp/app-assets',{method:'POST',body:JSON.stringify({assets:assets})});
+    m.className='msg '+(r.json.ok?'ok':'err');
+    m.textContent=r.json.ok?'✓ 已上传':(r.json.message||'上传失败');
+    if(r.json.ok) load();
+  });
+}
+async function delAsset(kind){
+  if(!confirm('删除这张素材图?')) return;
+  var r=await api('/api/sp/app-assets/'+kind,{method:'DELETE'});
+  if(r.json.ok) load();
+}
+adminKey(); load();
+</script>
+</body>
+</html>`;
+
 /** mock 微信应答 (SP_APPLYMENT_MOCK=1; 不碰真 API) */
 function mockWx(method, urlPath) {
     if (method === "POST" && urlPath === "/v3/merchant/media/upload") {
@@ -690,17 +930,18 @@ function createSpApplymentRouter(deps) {
      *  M3 🟡-1: 公示比例读 sp_commission_rates 默认行 (__default__) 优先, env 只作首次种子 */
     router.get("/info", (req, res) => {
         const bp = spCommission.getDefaultRateBp(db);
+        // 2026-10-03 配置页落地: 名片/AppID 读 sp_profile 表优先 (env 兜底) — 配置页保存即生效
         res.json({
-            name: process.env.SP_NAME || "TrustBase 官方服务商",
-            desc: process.env.SP_DESC || "",
-            official_url: process.env.SP_OFFICIAL_URL || "",
-            contact: process.env.SP_CONTACT || "",
+            name: spProfileGet(db, "sp_name") || process.env.SP_NAME || "TrustBase 官方服务商",
+            desc: spProfileGet(db, "sp_desc") || process.env.SP_DESC || "",
+            official_url: spProfileGet(db, "sp_official_url") || process.env.SP_OFFICIAL_URL || "",
+            contact: spProfileGet(db, "sp_contact") || process.env.SP_CONTACT || "",
             commission_rate_bp: bp,
             rate_pct: (bp / 100).toFixed(2) + "%",
             chain_address: process.env.SP_CHAIN_ADDR || "",
             gateway: String(req.headers.host || ""), // 本网关域名 (从请求 host 推断)
-            // 普通商户 APP 场景零自备: 服务商应用 AppID + 应用截图素材 (sp_app_assets 表优先, env 兜底)
-            app_appid: process.env.SP_APP_APPID || "",
+            // 普通商户 APP 场景零自备: 服务商应用 AppID + 应用截图素材 (sp_profile/素材表优先, env 兜底)
+            app_appid: spProfileGet(db, "app_appid") || process.env.SP_APP_APPID || "",
             app_screenshots: readAppAssets(db),
         });
     });
@@ -771,6 +1012,62 @@ function createSpApplymentRouter(deps) {
         }
     });
 
+    /** GET/PUT /config — 服务商配置 (admin)。浏览器 (Accept: text/html) → /sp/config 配置页;
+     *  API (Accept: application/json) → 全量配置 JSON (表优先 env 兜底 + 配齐度) */
+    router.get("/config", (req, res) => {
+        const wantsHtml = String(req.headers.accept || "").includes("text/html");
+        if (wantsHtml) { // 页面本身不鉴权 (admin key 在页面内输入, 所有 API 都要 key — 同 /sp/apply 口径)
+            res.setHeader("Content-Type", "text/html; charset=utf-8");
+            return res.send(CONFIG_PAGE_HTML);
+        }
+        if (!checkAdmin(req, res)) return;
+        res.json({ ok: true, ...currentConfig(db), completeness: configCompleteness(db) });
+    });
+    router.put("/config", (req, res) => {
+        if (!checkAdmin(req, res)) return;
+        try {
+            const b = req.body || {};
+            const KEYMAP = { app_appid: "app_appid", sp_name: "sp_name", sp_desc: "sp_desc", sp_official_url: "sp_official_url", sp_contact: "sp_contact" };
+            const saved = {};
+            for (const k of Object.keys(KEYMAP)) {
+                if (b[k] !== undefined) {
+                    const v = String(b[k]).trim().slice(0, 200);
+                    spProfileSet(db, KEYMAP[k], v);
+                    saved[k] = v;
+                }
+            }
+            if (b.commission_bp !== undefined) {
+                const bp = Number(b.commission_bp);
+                if (!Number.isInteger(bp) || bp < 0 || bp > spCommission.MAX_RATE_BP) {
+                    throw new HttpError(422, "rate_out_of_range", `commission_bp 必须是 0..${spCommission.MAX_RATE_BP} 的整数 (万分比)`);
+                }
+                // 费率写 sp_commission_rates 默认行 (__default__) — /api/sp/info 的 getDefaultRateBp 单源
+                spCommission.ensureCommissionTables(db);
+                const now = nowSec();
+                db.prepare(`INSERT INTO sp_commission_rates (sub_mchid, provider, rate_bp, updated_by, created_at, updated_at)
+ VALUES ('__default__','',?,'config-page',?,?)
+ ON CONFLICT(sub_mchid) DO UPDATE SET rate_bp=excluded.rate_bp, updated_by=excluded.updated_by, updated_at=excluded.updated_at`)
+                    .run(bp, now, now);
+                saved.commission_bp = bp;
+            }
+            if (!Object.keys(saved).length) throw new HttpError(400, "invalid_param", "没有可保存的字段");
+            console.log(`[sp-applyment] 配置已保存 keys=${Object.keys(saved).join(",")}`);
+            res.json({ ok: true, saved, ...currentConfig(db), completeness: configCompleteness(db) });
+        } catch (e) {
+            return chainWrites.handleError(res, e, "/api/sp/config");
+        }
+    });
+    /** DELETE /app-assets/:kind — 删除一张应用素材 (admin; 配置页"删除"按钮) */
+    router.delete("/app-assets/:kind", (req, res) => {
+        if (!checkAdmin(req, res)) return;
+        const kind = String(req.params.kind || "");
+        if (!["home", "tail", "inner", "pay"].includes(kind)) {
+            return res.status(400).json({ ok: false, error: "invalid_param", message: "kind 必须是 home/tail/inner/pay" });
+        }
+        db.prepare("DELETE FROM sp_app_assets WHERE kind = ?").run(kind);
+        res.json({ ok: true, assets: readAppAssets(db) });
+    });
+
     /** POST /applyment/submit — 组装进件 JSON (敏感字段 RSA-OAEP 加密) → 微信提交 → 台账落行
      *  幂等/重提 (2026-10-03 F1/F3 fix):
      *   - business_code 由调用方 (卖家本机) 首次提交时生成并随单带上; 未带则 SP 兜底生成

package/test-onboard-applyment.js

@@ -782,14 +782,18 @@ test("APP 场景零自备: 默认场景=APP + 服务商素材复用提交组装
     } finally { srv.close(); }
 });
 
-test("APP 场景页面: 默认选中 APP + 字段组 + 复用勾选 + 4 截图槽", async () => {
+test("APP 场景页面: 默认选中 APP + 三态显隐 (配齐全隐藏/未配提示/自有展开)", async () => {
     const { srv, base } = await startSeller();
     try {
         const html = await (await fetch(base + "/onboard/")).text();
         assert.ok(html.includes('value="SALES_SCENES_APP" checked'), "默认场景=APP");
         assert.ok(html.includes("scene_fields_app"), "APP 字段组");
         assert.ok(html.includes("a_app_appid") && html.includes("a_app_provider"), "AppID + 归属");
-        assert.ok(html.includes("a_app_reuse") && html.includes("使用服务商提供的应用截图"), "素材复用勾选");
+        assert.ok(html.includes("a_app_provided") && html.includes("无需操作"), "零操作绿标");
+        assert.ok(html.includes("a_app_missing") && html.includes("尚未配置应用"), "未配提示");
+        assert.ok(html.includes("appSpComplete") && html.includes("maskAppid"), "完整度判定 + AppID 打码");
+        assert.ok(html.includes("a_appid_field"), "AppID 字段容器 (可整体隐藏)");
+        assert.ok(!html.includes("a_app_reuse"), "复用勾选已移除 (零自备=默认行为)");
         assert.ok(html.includes("a_up_s3") && html.includes("a_up_s4"), "4 截图槽");
         assert.ok(html.includes("paintAppScene"), "场景联动");
         assert.ok(html.includes("app_screenshots"), "提交字段");

package/test-sp-applyment.js

@@ -425,3 +425,69 @@ test("M4-APP: /info 带 app 配置 (env + 素材表) + POST /app-assets 上传
         delete process.env.SP_APP_APPID; delete process.env.SP_APP_ASSETS_JSON;
     }
 });
+
+test("SP 配置页后端: config 读写 (表优先 env) + 配齐度 + info 立即生效 + 素材删除", async () => {
+    const { srv, base } = await startServer();
+    try {
+        // 无 key → 401
+        let r = await fetch(base + "/api/sp/config", { headers: { Accept: "application/json" } });
+        assert.strictEqual(r.status, 401);
+        // 页面: Accept text/html 无 key 也 200 (admin key 页面内输入)
+        r = await fetch(base + "/sp/config", { headers: { Accept: "text/html" } });
+        assert.strictEqual(r.status, 200);
+        assert.ok((await r.text()).includes("服务商配置"));
+        // 读默认 (env 兜底)
+        let j = await (await fetch(base + "/api/sp/config", { headers: { ...H, Accept: "application/json" } })).json();
+        assert.strictEqual(j.ok, true);
+        assert.strictEqual(j.app_appid, "");
+        assert.strictEqual(j.completeness.appid, false);
+        assert.ok(j.completeness.missing.includes("AppID"));
+        // PUT 应用 AppID + 名片 + 费率 → 表优先, /info 立即生效
+        r = await fetch(base + "/api/sp/config", {
+            method: "PUT", headers: { ...H, Accept: "application/json" },
+            body: JSON.stringify({ app_appid: "wx_cfg_app_001", sp_name: "配置页服务商", sp_contact: "微信: cfg", commission_bp: 200 }),
+        });
+        j = await r.json();
+        assert.strictEqual(j.ok, true);
+        assert.strictEqual(j.saved.app_appid, "wx_cfg_app_001");
+        assert.strictEqual(j.saved.commission_bp, 200);
+        assert.strictEqual(j.completeness.appid, true);
+        j = await (await fetch(base + "/api/sp/info")).json();
+        assert.strictEqual(j.app_appid, "wx_cfg_app_001", "/info 读表立即生效");
+        assert.strictEqual(j.name, "配置页服务商");
+        assert.strictEqual(j.contact, "微信: cfg");
+        assert.strictEqual(j.commission_rate_bp, 200);
+        assert.strictEqual(j.rate_pct, "2.00%");
+        // env 设置后表仍优先 (表 > env)
+        process.env.SP_NAME = "env-不应生效";
+        j = await (await fetch(base + "/api/sp/info")).json();
+        assert.strictEqual(j.name, "配置页服务商", "表优先于 env");
+        delete process.env.SP_NAME;
+        // 素材上传 → 配齐度 4/4 + /info app_screenshots
+        for (const kind of ["home", "tail", "inner", "pay"]) {
+            const ur = await fetch(base + "/api/sp/app-assets", {
+                method: "POST", headers: H,
+                body: JSON.stringify({ assets: { [kind]: { filename: kind + ".jpg", content_b64: Buffer.from("fake-" + kind).toString("base64") } } }),
+            });
+            assert.strictEqual(ur.status, 200);
+        }
+        j = await (await fetch(base + "/api/sp/config", { headers: { ...H, Accept: "application/json" } })).json();
+        assert.strictEqual(j.completeness.assets, 4);
+        assert.ok(j.completeness.complete, "AppID+4素材+名片全齐 → complete");
+        j = await (await fetch(base + "/api/sp/info")).json();
+        assert.ok(j.app_screenshots.home && j.app_screenshots.pay, "素材返回");
+        // 删除一张 → 不再 complete
+        r = await fetch(base + "/api/sp/app-assets/pay", { method: "DELETE", headers: H });
+        assert.strictEqual((await r.json()).ok, true);
+        j = await (await fetch(base + "/api/sp/config", { headers: { ...H, Accept: "application/json" } })).json();
+        assert.strictEqual(j.completeness.assets, 3);
+        assert.ok(!j.completeness.complete);
+        assert.ok(j.completeness.missing.includes("支付页截图"));
+        // 费率越界 422
+        r = await fetch(base + "/api/sp/config", {
+            method: "PUT", headers: { ...H, Accept: "application/json" },
+            body: JSON.stringify({ commission_bp: 3001 }),
+        });
+        assert.strictEqual(r.status, 422);
+    } finally { srv.close(); }
+});