trustbase-seller-backend 0.5.0 → 0.5.6

package/README.md

@@ -3,7 +3,7 @@
 TrustBase 保障链生态的卖家自托管后端: 商品上链 / 订单 / 支付确认 / 单件质押 的写入口。
 **单卖家形态** — 签名 key 即卖家身份, 私钥不出本机。
 
-给「`npx @trustbase/shopxo-init` 一键安装器」当依赖用, 也可以独立运行。
+给「`npx trustbase-shop-init` 一键安装器」当依赖用, 也可以独立运行。
 
 ## 快速开始
 

package/docs/DEPLOYMENT.md

@@ -0,0 +1,42 @@
+# SP 网关 / seller-backend 部署必读
+
+## ⚠️ 必开配置 (缺一不可)
+
+### 1. 链节点 tx_index (必开!)
+
+```toml
+# config.toml
+[tx_index]
+indexer = "kv"  # 默认 null = 不索引交易
+```
+
+**为什么**: 网关"等入块"逻辑需要通过 tx hash 查交易确认。如果 indexer=null:
+- 交易明明入块了, 但查询返回"未找到"
+- 网关误报"未在 15s 内入块" → chain_txhash 留空 → 触发 retryPending 重复补链
+- 虽然链上硬约束 (code 4 duplicate) 防止重复事实, 但会浪费 gas + 日志噪音
+
+**实测**: 2026-10-02 node-c 开 indexer=kv 后 code 0 正常确认。
+
+### 2. SP 签名 key 环境变量 (必填!)
+
+```bash
+# .env
+CHAIN_HOME=/opt/trustbase-sp/chain-keys  # provider keyring 目录
+SP_CHAIN_KEY_NAME=tb-sp-provider           # provider 专用签名 key 名
+```
+
+**为什么**: 默认值 `emergency-key` + `/root/.trustchain` 在 SP 网关机器上不存在且非已注册 provider。
+第一笔真实支付 100% 写不上链 (signer 非 ACTIVE provider 被链上拒)。
+
+**自检**: 启动时自动检查 key 存在性 + provider ACTIVE 状态, 输出 `[STARTUP-CHECK]` 日志。
+
+## 部署检查清单
+
+- [ ] config.toml [tx_index] indexer = "kv"
+- [ ] .env CHAIN_HOME = <provider keyring 目录>
+- [ ] .env SP_CHAIN_KEY_NAME = <provider key 名>
+- [ ] 启动后检查 [STARTUP-CHECK] 输出全 ✓
+- [ ] SP_CHAIN_DISABLED 未设置或 =0
+
+---
+*pi 2026-10-02 · per kimi 18462 派单*

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trustbase-seller-backend",
-  "version": "0.5.0",
+  "version": "0.5.6",
   "description": "TrustBase Seller Backend (merchant edition) — 商品上链/订单/支付/质押 write API for TrustBase 保障链生态. 单卖家自托管形态: 签名 key 即卖家身份, 私钥不出门.",
   "main": "run-unified.js",
   "bin": {

package/routes/agent-pay.js

@@ -131,7 +131,9 @@ async function wxApiCall(method, urlPath, bodyObj, override) {
     return { status: r.status, json: j };
 }
 // Native 下单: 返回 code_url (SP 模式走 /v3/pay/partner/* endpoint — 2026-09-25 修)
-async function wxNativeOrder(outTradeNo, description, totalCents, expireSec) {
+// opts.settleInfo (2026-10-06 U7): 可选, 如 { profit_sharing: true } — 微信规则: 订单下单时
+// 不带 settle_info.profit_sharing 的分账请求会被拒; 默认不带 (向后兼容, 直连模式不用传)
+async function wxNativeOrder(outTradeNo, description, totalCents, expireSec, opts) {
     // SP 模式: 用服务商身份签名 + 请求体带 sp_mchid + sub_mchid
     const isSp = !!(WX.spMchid && process.env.WXPAY_SUB_MCHID);
     const override = isSp ? { mchid: WX.spMchid, serial: WX.spSerial, keyPath: WX.spKeyPath } : undefined;
@@ -143,6 +145,7 @@ async function wxNativeOrder(outTradeNo, description, totalCents, expireSec) {
         notify_url: WX.notifyUrl,
         amount: { total: totalCents, currency: "CNY" },
     };
+    if (opts && opts.settleInfo) body.settle_info = opts.settleInfo; // U7: 分账标记 (仅 rate>0 且 SP 模式时调用方传入)
     const endpoint = isSp ? "/v3/pay/partner/transactions/native" : "/v3/pay/transactions/native";
     const r = await wxApiCall("POST", endpoint, body, override);
     if (r.status !== 200 || !r.json.code_url) {

package/routes/agent-serviceprovider.js

@@ -2,7 +2,7 @@
 /**
  * agent-serviceprovider.js — AI Agent 服务商路由 (C5)
  *
- * 契约方: ShopXO trustbasechain 插件 ServiceProviderService.php (pi 2026-09-20, .215 已部署),
+ * 契约方(历史): ShopXO trustbasechain 插件 ServiceProviderService.php (pi 2026-09-20; ShopXO 已于 2026-09-22 下架, 该插件契约已废弃, 本路由保留给通用服务商对接),
  * 字段以插件源码为准, 不可改:
  *   POST /api/agent/serviceprovider/register    {provider, wechat_mchid, stake, name}
  *   POST /api/agent/serviceprovider/submit-fact {provider, order_ref, psp_txn_id, amount, evidence_hash}

package/routes/buyer-shop.js

@@ -0,0 +1,380 @@
+"use strict";
+/**
+ * buyer-shop.js — 买家公开店铺面 API (2026-10-06, v0.5.2; U7 分账标记 v0.5.6)
+ *
+ * 背景: Pi 交付示例店铺前端 @trustbaseai/shop-demo (pwa-shop-demo, 纯静态 PWA),
+ * 它假设了一套买家面 API 契约, 本模块是卖家后端的适配层。契约字段名与 Pi 前端
+ * 逐字对齐 (packages/pwa-shop-demo/public/app.js):
+ *
+ *   GET  /api/products       → [{id, name, description, price, image_url, stock}]  (price 单位: 元, 数字)
+ *   GET  /api/products/:id   → 单个同上 (404 {error, message})
+ *   POST /api/orders         body {product_id, quantity, buyer_card, client_order_no?}
+ *                            → {id, amount, code_url}  (amount 单位: 元)
+ *   GET  /api/orders/:id     → {id, status, amount, product_name, quantity, tx_hash, code_url}
+ *                              status ∈ pending/paid/completed/failed
+ *
+ * 数据源:
+ *   - 商品: store_products 表 (索引器 DB; 列以 PRAGMA 实读为准)。在架 = status='active'。
+ *     价格列现状只有 price_utct (TCT 微单位) — 折元走链上官方汇率 economy_params.utct_per_cny
+ *     (缺表/缺行/为 0 → env BUYER_SHOP_UTCT_PER_CNY → 默认 1_000_000 即 1 TCT = 1 元)。
+ *     若未来出现 price_cny/price_fen 列 (分) 则优先直读。整数分运算, 无浮点误差。
+ *   - 订单: 复用 agent_pay_sessions 表 (不新增表) — 既有微信回调 /api/agent/pay/notify/wechat
+ *     和 E3 对账轮询按 order_ref 自动翻转状态, 本模块零回调代码。
+ *
+ * U7 (2026-10-06, xiaomu 9/29 拍板官方 1% 抽佣): rate>0 且 SP 模式 → 下单时微信 body 带
+ *   settle_info: { profit_sharing: true } (微信规则: 不带标记的订单分账请求被拒)。
+ *   费率优先级: env SP_COMMISSION_BP (显式覆盖) → 网关公开接口
+ *   GET {SP_GATEWAY_URL}/api/sp/commission-rate/{sub_mchid} (60s 内存缓存, 失败缓存 0 防抖动)
+ *   → 本地 db sp_commission_rates (同库时直接命中)。sub_mchid = env WXPAY_SUB_MCHID
+ *   (无值 = 直连模式, 永不标记)。台账 ps_flag 列记录该单是否带分账标记 (运营台区分用)。
+ *   回调侧不动: sp-notify 的分账触发已按 rate>0 判断。
+ *
+ * 下单要点:
+ *   - 价格权威 = 本地 DB (单价 × qty 算总分), 客户端传的任何金额字段一律忽略
+ *   - qty 整数 >=1 且不超库存; 单价折算后 <= 0 分 → 409 (微信不支持 0 元单)
+ *   - 幂等两级: ① body.client_order_no → client_session_id='buyer:{card}:{no}' 同号返原单
+ *     ② 无 client_order_no → 同 buyer_card+product_id 5 分钟窗口内未支付未过期单直接复用
+ *   - client_session_id = 'buyer:'+buyer_card+':'+订单号 (订单号即对外 id = order_ref)
+ *   - 微信 Native 下单复用 agent-pay 的 wxNativeOrder (SP 模式由 env WXPAY_SUB_MCHID 自动切换);
+ *     AGENT_PAY_MODE=mock 时生成伪 code_url (测试/沙箱), 不碰真微信
+ *
+ * 公开面安全: 无鉴权 (买家无账号), 但 POST /api/orders IP 限流 10 单/分钟 (内存桶,
+ * 照 agent-pay rateLimit 模式); 全部 SQL 参数绑定; 错误一律 {error, message}。
+ * 术语红线: 买家可见 message 零链上词汇 (链上/助记词/gas/钱包/区块/TrustChain 不许出现);
+ * tx_hash 字段名保留 (契约要求), 值可为空字符串。
+ *
+ * 共存 (run-unified.js): POST /api/orders 与 chain-writes 的 WooCommerce 钩子同路径同方法 —
+ * 本路由按 body 形状接管 (有 buyer_card+product_id 才是买家单), 否则 next() 落回
+ * sensitiveOpGuard + chain-writes 老路径, 互不干扰。
+ */
+const express = require("express");
+const crypto = require("crypto");
+const agentPay = require("./agent-pay");
+
+function nowSec() { return Math.floor(Date.now() / 1000); }
+
+/** 限速: 每IP每分钟 N 次 (内存桶, 照 agent-pay.js rateLimit 模式; 桶随路由实例 —
+ *  单进程单实例语义不变, 测试多实例互不污染) */
+function makeRateLimiter() {
+    const bucket = new Map();
+    return function rateLimit(key, limit, windowMs) {
+        const now = Date.now();
+        const b = bucket.get(key) || { n: 0, reset: now + windowMs };
+        if (now > b.reset) { b.n = 0; b.reset = now + windowMs; }
+        b.n++;
+        bucket.set(key, b);
+        return b.n <= limit;
+    };
+}
+
+/** agent_pay_sessions 建表 (DDL 与 agent-pay.js ensureTables 一致; IF NOT EXISTS 幂等,
+ *  路由工厂直接建 — 0.4.3 教训: 写路径不依赖别的模块先建表) */
+function ensureBuyerTables(db) {
+    db.exec(`
+CREATE TABLE IF NOT EXISTS agent_pay_sessions (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  client_session_id TEXT UNIQUE NOT NULL,
+  sku_id TEXT NOT NULL,
+  qty INTEGER NOT NULL,
+  amount_total INTEGER NOT NULL,          -- 分 (服务端权威价×qty)
+  currency TEXT NOT NULL DEFAULT 'CNY',
+  agent_addr TEXT DEFAULT '',
+  order_ref TEXT UNIQUE NOT NULL,         -- tb-{nonce} = 买家面订单 id
+  pay_token_hash TEXT NOT NULL,
+  status_token_hash TEXT NOT NULL,
+  state TEXT NOT NULL DEFAULT 'CREATED',
+  psp_code_url TEXT DEFAULT '',
+  psp_txn_id TEXT DEFAULT '',
+  shopxo_order_no TEXT DEFAULT '',
+  chain_order_id TEXT DEFAULT '',
+  callback_url TEXT DEFAULT '',
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+`);
+    // 老库兼容: agent-pay 的物流列 + U7 分账标记列 (已存在则跳过)
+    for (const col of ["carrier TEXT DEFAULT ''", "tracking_no TEXT DEFAULT ''", "logistics_state TEXT DEFAULT ''", "timeline TEXT DEFAULT '[]'", "shopxo_order_no_ref TEXT DEFAULT ''",
+        "ps_flag INTEGER NOT NULL DEFAULT 0"]) { // U7: 1=下单带 settle_info.profit_sharing (rate>0 且 SP 模式)
+        try { db.exec("ALTER TABLE agent_pay_sessions ADD COLUMN " + col); } catch (e) { /* 已存在 */ }
+    }
+}
+
+function hasTable(db, name) {
+    return !!db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name = ?").get(name);
+}
+
+/** utct → 元 汇率 (1 元 = rate utct): economy_params 表 → env → 默认 1 TCT = 1 元 */
+function readUtctPerCny(db) {
+    try {
+        if (hasTable(db, "economy_params")) {
+            const row = db.prepare("SELECT utct_per_cny FROM economy_params WHERE id = 1").get();
+            if (row && Number(row.utct_per_cny) > 0) return Number(row.utct_per_cny);
+        }
+    } catch (_) { /* 表结构异常走默认 */ }
+    const env = Number(process.env.BUYER_SHOP_UTCT_PER_CNY || 0);
+    if (Number.isInteger(env) && env > 0) return env;
+    return 1000000;
+}
+
+/** session.state → 买家面 status (契约枚举 pending/paid/completed/failed) */
+function mapStatus(state) {
+    if (state === "PAID" || state === "ON_CHAIN" || state === "SHIPPED") return "paid";
+    if (state === "DELIVERED" || state === "CONFIRMED") return "completed";
+    if (state === "EXPIRED" || state === "CLOSED" || state === "REFUNDED" || state === "DISPUTED") return "failed";
+    return "pending"; // CREATED 等
+}
+
+/** 分 → 元 (数字, 两位小数; 整数运算无浮点误差) */
+function fenToYuan(fen) { return Math.floor(fen) / 100; }
+
+const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+const SESSION_TTL_SEC = 15 * 60;        // 支付窗口 15min (与微信 time_expire 对齐, 同 agent-pay)
+const IDEMPOTENCY_WINDOW_SEC = 5 * 60;  // 无 client_order_no 时的复用窗口
+const RATE_CACHE_MS = 60 * 1000;        // U7: 费率网关查询 60s 内存缓存
+
+/** U7 抽佣费率解析器 (每路由实例一个, 缓存随实例): 返回 rate_bp (整数 >=0)
+ *  优先级: env SP_COMMISSION_BP 显式覆盖 → 网关公开接口 (缓存 60s, 失败/异常缓存 0 防抖动)
+ *  → 本地 sp_commission_rates 表 (与网关同库时直接命中)。直连模式 (无 WXPAY_SUB_MCHID) 恒 0。 */
+function makeCommissionRateResolver(db, fetcher) {
+    const cache = new Map(); // sub_mchid → {bp, expiresAt}
+    const fetchFn = fetcher || globalThis.fetch;
+    return async function resolveRateBp() {
+        // ① env 显式覆盖 (最高优先, 不调网关不读表)
+        if (process.env.SP_COMMISSION_BP !== undefined && process.env.SP_COMMISSION_BP !== "") {
+            const v = Number(process.env.SP_COMMISSION_BP);
+            return Number.isInteger(v) && v >= 0 ? v : 0;
+        }
+        const subMchid = String(process.env.WXPAY_SUB_MCHID || "");
+        if (!subMchid) return 0; // 直连模式不标记
+        const hit = cache.get(subMchid);
+        if (hit && Date.now() < hit.expiresAt) return hit.bp;
+        const remember = (bp) => { cache.set(subMchid, { bp, expiresAt: Date.now() + RATE_CACHE_MS }); return bp; };
+        // ② 网关公开接口 (SP 网关是费率权威; 公开只读端点无需 key)
+        const gw = String(process.env.SP_GATEWAY_URL || "").replace(/\/+$/, "");
+        if (gw && fetchFn) {
+            try {
+                const r = await fetchFn(gw + "/api/sp/commission-rate/" + encodeURIComponent(subMchid), { signal: AbortSignal.timeout(5000) });
+                if (r && r.ok) {
+                    const j = await r.json();
+                    const bp = Number(j && j.rate_bp);
+                    return remember(Number.isInteger(bp) && bp >= 0 ? bp : 0);
+                }
+                if (r && r.status === 404) return remember(0); // 未登记 = 零抽成 (官方默认)
+            } catch (e) {
+                console.warn("[buyer-shop] 费率网关查询失败 (回落本地表):", e && e.message);
+            }
+        }
+        // ③ 本地表兜底 (卖家后端与 SP 网关同库部署时直接命中)
+        try {
+            if (hasTable(db, "sp_commission_rates")) {
+                const row = db.prepare("SELECT rate_bp FROM sp_commission_rates WHERE sub_mchid = ?").get(subMchid);
+                if (row && Number.isInteger(row.rate_bp) && row.rate_bp >= 0) return remember(row.rate_bp);
+            }
+        } catch (_) { /* 表异常按 0 */ }
+        return remember(0); // 全源失败/未登记 → 缓存 0 防抖动, 不阻塞下单
+    };
+}
+
+function createBuyerShopRouter(deps) {
+    const router = express.Router();
+    const { db } = deps;
+    ensureBuyerTables(db);
+    const rateLimit = makeRateLimiter();
+    const resolveRateBp = makeCommissionRateResolver(db, deps.fetcher);
+
+    const MODE = process.env.AGENT_PAY_MODE || "mock"; // mock | wechat (同 agent-pay 口径)
+    // 测试可注入假 wxNativeOrder; 生产默认 agent-pay 真实现 (SP 模式其内部自动切换)
+    const wxNativeOrder = deps.wxNativeOrder || agentPay.wxNativeOrder;
+
+    // store_products 列实读 (以实际 schema 为准做字段映射; 表不存在 → 商品面全空)
+    const productCols = hasTable(db, "store_products")
+        ? db.prepare("PRAGMA table_info(store_products)").all().map((c) => c.name)
+        : [];
+
+    /** 单价 (整数分, 权威口径): price_cny/price_fen 列 (分) 直读优先;
+     *  现状只有 price_utct (TCT 微单位) → 官方汇率折分 (整数运算, 不过浮点) */
+    function unitFenOf(row) {
+        if (productCols.includes("price_cny")) return Number(row.price_cny) || 0;
+        if (productCols.includes("price_fen")) return Number(row.price_fen) || 0;
+        const utct = Number(row.price_utct) || 0;
+        return Math.round((utct * 100) / readUtctPerCny(db));
+    }
+
+    /** 单行 → 契约结构 {id, name, description, price(元), image_url, stock} */
+    function productToJson(row) {
+        return {
+            id: String(row.id),
+            name: String(row.title || row.id),
+            description: String(row.description || ""),
+            price: fenToYuan(unitFenOf(row)),
+            image_url: productCols.includes("image_url") ? String(row.image_url || "") : "",
+            stock: Number(row.stock) || 0,
+        };
+    }
+
+    function getActiveProduct(id) {
+        if (!productCols.length) return null;
+        const row = db.prepare("SELECT * FROM store_products WHERE id = ?").get(String(id));
+        if (!row || row.status !== "active") return null; // 只在架商品可见 (不泄露下架品存在性)
+        return row;
+    }
+
+    /** session 行 → 契约下单/查单响应 */
+    function orderToJson(row) {
+        let productName = row.sku_id;
+        if (productCols.length) {
+            const p = db.prepare("SELECT title FROM store_products WHERE id = ?").get(row.sku_id);
+            if (p && p.title) productName = p.title;
+        }
+        let txHash = "";
+        if (row.chain_order_id && hasTable(db, "chain_write_log")) {
+            const c = db.prepare("SELECT txhash FROM chain_write_log WHERE order_id = ?").get(row.chain_order_id);
+            if (c && c.txhash) txHash = String(c.txhash);
+        }
+        return {
+            id: row.order_ref,
+            product_id: row.sku_id, // Pi 复核 P2: 前端详情页跳转要 product_id (契约补齐)
+            status: mapStatus(row.state),
+            amount: fenToYuan(row.amount_total),
+            product_name: productName,
+            quantity: row.qty,
+            tx_hash: txHash,
+            code_url: row.psp_code_url || "",
+        };
+    }
+
+    /** GET /products — 商品列表 (公开只读, 只在架) */
+    router.get("/products", (req, res) => {
+        try {
+            if (!productCols.length) return res.json([]);
+            const rows = db.prepare("SELECT * FROM store_products WHERE status = 'active' ORDER BY created_at DESC LIMIT 200").all();
+            res.json(rows.map(productToJson));
+        } catch (e) {
+            console.error("[buyer-shop] GET /products error:", e && e.message);
+            res.status(500).json({ error: "INTERNAL", message: "服务暂时不可用，请稍后再试" });
+        }
+    });
+
+    /** GET /products/:id — 商品详情 (公开只读, 下架/不存在一律 404) */
+    router.get("/products/:id", (req, res) => {
+        try {
+            const row = getActiveProduct(req.params.id);
+            if (!row) return res.status(404).json({ error: "NOT_FOUND", message: "商品不存在或已下架" });
+            res.json(productToJson(row));
+        } catch (e) {
+            console.error("[buyer-shop] GET /products/:id error:", e && e.message);
+            res.status(500).json({ error: "INTERNAL", message: "服务暂时不可用，请稍后再试" });
+        }
+    });
+
+    /** POST /orders — 买家下单 (公开; IP 限流 10 单/分钟; 价格以 DB 为权威)
+     *  共存: body 不是买家单形状 (无 buyer_card+product_id) → next() 落回 chain-writes 老路径 */
+    router.post("/orders", async (req, res, next) => {
+        try {
+            const b = req.body || {};
+            const isBuyerOrder = typeof b.buyer_card === "string" && b.buyer_card && b.product_id !== undefined;
+            if (!isBuyerOrder) return next(); // WooCommerce 钩子等其他调用方, 不归本模块
+            const err = (code, httpCode, message) => res.status(httpCode).json({ error: code, message });
+
+            const ip = req.ip || (req.connection && req.connection.remoteAddress) || "unknown";
+            if (!rateLimit("buyer-order:" + ip, 10, 60000)) {
+                return err("RATE_LIMITED", 429, "下单太频繁，请稍后再试");
+            }
+
+            // 输入校验
+            const productId = String(b.product_id || "");
+            const buyerCard = String(b.buyer_card || "");
+            if (!ID_RE.test(productId)) return err("INVALID_PARAM", 400, "product_id 无效");
+            if (!ID_RE.test(buyerCard)) return err("INVALID_PARAM", 400, "buyer_card 无效");
+            const qty = Number(b.quantity);
+            if (!Number.isInteger(qty) || qty < 1) return err("INVALID_PARAM", 400, "quantity 必须是 >=1 的整数");
+            if (qty > 99) return err("INVALID_PARAM", 400, "单笔最多 99 件");
+            const clientOrderNo = b.client_order_no !== undefined ? String(b.client_order_no) : "";
+            if (clientOrderNo && !ID_RE.test(clientOrderNo)) return err("INVALID_PARAM", 400, "client_order_no 无效");
+
+            // 幂等①: client_order_no 同号返原单
+            if (clientOrderNo) {
+                const exist = db.prepare("SELECT * FROM agent_pay_sessions WHERE client_session_id = ?")
+                    .get(`buyer:${buyerCard}:${clientOrderNo}`);
+                if (exist) return res.json(orderToJson(exist));
+            }
+
+            // 商品与价格 (权威 = 本地 DB; 客户端任何金额字段一律忽略)
+            const product = getActiveProduct(productId);
+            if (!product) return err("NOT_FOUND", 404, "商品不存在或已下架");
+            const stock = Number(product.stock) || 0;
+            if (stock < qty) return err("OUT_OF_STOCK", 409, "库存不足");
+            const unitFen = unitFenOf(product); // 整数分, 不过浮点
+            if (!(unitFen >= 1)) return err("PRICE_UNAVAILABLE", 409, "该商品暂未定价，暂不可购买");
+            const totalFen = unitFen * qty;
+
+            // 幂等②: 无 client_order_no 时, 同买家同商品 5 分钟内未支付未过期单直接复用
+            const now = nowSec();
+            if (!clientOrderNo) {
+                const exist = db.prepare(`SELECT * FROM agent_pay_sessions
+ WHERE client_session_id LIKE ? AND sku_id = ? AND state = 'CREATED' AND expires_at > ? AND created_at >= ?
+ ORDER BY created_at DESC LIMIT 1`)
+                    .get(`buyer:${buyerCard}:%`, productId, now, now - IDEMPOTENCY_WINDOW_SEC);
+                if (exist) return res.json(orderToJson(exist));
+            }
+
+            // U7: rate>0 且 SP 模式 → 微信下单带 settle_info.profit_sharing (不带标记的订单分账被拒)
+            const rateBp = await resolveRateBp();
+            const psFlag = process.env.WXPAY_SUB_MCHID && rateBp > 0 ? 1 : 0;
+
+            // 创建订单 (订单号 = order_ref, 对外 id)
+            const orderRef = "tb-" + crypto.randomBytes(8).toString("hex");
+            const clientSessionId = `buyer:${buyerCard}:${clientOrderNo || orderRef}`;
+            const exp = now + SESSION_TTL_SEC;
+
+            // 微信 Native 下单拿 code_url (mock 模式生成伪码, 不碰真微信)
+            let codeUrl = "";
+            if (MODE === "mock") {
+                codeUrl = `weixin://mock-pay/${orderRef}`;
+            } else {
+                try {
+                    codeUrl = await wxNativeOrder(orderRef, String(product.title || productId), totalFen, exp,
+                        psFlag ? { settleInfo: { profit_sharing: true } } : undefined);
+                } catch (e) {
+                    console.error("[buyer-shop] wx order fail:", e && e.message);
+                    return err("PAYMENT_UPSTREAM", 502, "支付通道暂时不可用，请稍后再试");
+                }
+            }
+
+            // 落 agent_pay_sessions (回调/对账按 order_ref 自动翻转状态; token 不发给买家,
+            // 买家面无账号体系, 订单 id 即凭据 — 与 pwa-shop-demo 轮询模型一致)
+            // U7: ps_flag 台账标注该单是否带分账标记 (运营台区分用)
+            db.prepare(`INSERT INTO agent_pay_sessions
+ (client_session_id, sku_id, qty, amount_total, currency, agent_addr, order_ref, pay_token_hash, status_token_hash, state, psp_code_url, callback_url, expires_at, created_at, updated_at, ps_flag)
+ VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`)
+                .run(clientSessionId, productId, qty, totalFen, "CNY", "buyer:" + buyerCard, orderRef,
+                    crypto.randomBytes(32).toString("hex"), crypto.randomBytes(32).toString("hex"),
+                    "CREATED", codeUrl, "", exp, now, now, psFlag);
+            console.log(`[buyer-shop] 下单 ${orderRef} product=${productId} qty=${qty} total=${totalFen}分 ps_flag=${psFlag}`);
+            const row = db.prepare("SELECT * FROM agent_pay_sessions WHERE order_ref = ?").get(orderRef);
+            res.json(orderToJson(row));
+        } catch (e) {
+            console.error("[buyer-shop] POST /orders error:", e && e.message);
+            res.status(500).json({ error: "INTERNAL", message: "服务暂时不可用，请稍后再试" });
+        }
+    });
+
+    /** GET /orders/:id — 订单查询 (公开, 订单 id 即凭据; 状态映射 session.state → 契约枚举) */
+    router.get("/orders/:id", (req, res) => {
+        try {
+            const id = String(req.params.id || "");
+            if (!/^tb-[0-9a-f]{16}$/.test(id)) return res.status(404).json({ error: "NOT_FOUND", message: "订单不存在" });
+            const row = db.prepare("SELECT * FROM agent_pay_sessions WHERE order_ref = ?").get(id);
+            if (!row) return res.status(404).json({ error: "NOT_FOUND", message: "订单不存在" });
+            res.json(orderToJson(row));
+        } catch (e) {
+            console.error("[buyer-shop] GET /orders/:id error:", e && e.message);
+            res.status(500).json({ error: "INTERNAL", message: "服务暂时不可用，请稍后再试" });
+        }
+    });
+
+    return router;
+}
+
+module.exports = { createBuyerShopRouter, ensureBuyerTables, mapStatus, makeCommissionRateResolver };

package/routes/onboard.html

@@ -178,7 +178,7 @@ img.auprev{display:none;width:100%;max-height:140px;object-fit:cover;border-radi
   <div class="body">② 备份店铺安全卡
     <div class="desc">安全卡 = 店铺的全部资产钥匙。丢了它且电脑坏了，谁也找不回 (服务商也不行)。请抄写或打印收好。</div>
     <div class="ops"><button class="sbtn" onclick="reprintKey()">重新打印安全卡</button><button class="sbtn" onclick="var h=document.getElementById('hint-recover');h.style.display=h.style.display==='block'?'none':'block'">如何恢复店铺</button><button class="sbtn primary" onclick="startBackupVerify()">我已抄好, 验证备份</button></div>
-    <div class="hintbox" id="hint-reprint">出于安全，24 个安全词只在生成时在本页展示一次。<br>重新打印请在你的电脑上运行: <code>npx @trustbase/shopxo-init print-key</code></div>
+    <div class="hintbox" id="hint-reprint">出于安全，24 个安全词只在生成时在本页展示一次。<br>重新打印请在你的电脑上运行: <code>npx trustbase-shop-init print-key</code></div>
     <div class="hintbox" id="hint-recover">丢了/换电脑，在新机器的入驻页恢复店铺，两种方式:<br>① 扫码: 用手机相机扫安全卡上的二维码，屏幕上会显示 24 个安全词;<br>② 手填: 把安全卡上的 24 个安全词按顺序填到下面。<br>
       <textarea id="restore-words" rows="3" placeholder="24 个安全词, 按顺序, 空格分隔" style="width:100%;margin-top:8px;padding:10px 12px;border:1px solid #D4CDBF;border-radius:8px;font-size:14px"></textarea>
       <button class="sbtn primary" style="margin-top:6px" onclick="restoreIdentity()">恢复店铺</button>

package/routes/sp-applyment.js

@@ -437,6 +437,7 @@ function currentConfig(db) {
         sp_desc: spProfileGet(db, "sp_desc") || process.env.SP_DESC || "",
         sp_official_url: spProfileGet(db, "sp_official_url") || process.env.SP_OFFICIAL_URL || "",
         sp_contact: spProfileGet(db, "sp_contact") || process.env.SP_CONTACT || "",
+        sp_services: spProfileGet(db, "sp_services") || process.env.SP_SERVICES || "",
         commission_bp: bp,
         rate_pct: (bp / 100).toFixed(2) + "%",
         assets: readAppAssets(db),
@@ -524,6 +525,7 @@ input:focus,select:focus{outline:none;border-color:#C4633C;box-shadow:0 0 0 3px
 <label>简介</label><input id="p_desc" placeholder="一句话介绍">
 <label>官网</label><input id="p_url" placeholder="https://">
 <label>客服联系方式</label><input id="p_contact" placeholder="微信/电话/邮箱">
+<label>服务内容 (每行一条, 商户入驻页展示)</label><textarea id="p_services" rows="4" style="width:100%;padding:10px 12px;border:1px solid #D4CDBF;border-radius:8px;font-size:14px;background:#fff" placeholder="如: 店铺软件托管与运维&#10;微信支付进件代办&#10;交易回调与对账"></textarea>
 <label>默认抽佣费率 (bp, 100 = 1.00%)</label><input id="p_bp" type="number" min="0" max="3000">
 <div class="cur" id="bp-cur"></div>
 <button class="btn" onclick="saveProfile()">保存名片</button>
@@ -594,6 +596,7 @@ function render(){
   }).join(''):'<div class="cur">还没有应用, 在下方新增第一个</div>';
   renderSlots();
   document.getElementById('p_name').value=c.sp_name||'';
+  document.getElementById('p_services').value=c.sp_services||'';
   document.getElementById('p_desc').value=c.sp_desc||'';
   document.getElementById('p_url').value=c.sp_official_url||'';
   document.getElementById('p_contact').value=c.sp_contact||'';
@@ -706,6 +709,7 @@ async function saveProfile(){
     sp_desc:document.getElementById('p_desc').value.trim(),
     sp_official_url:document.getElementById('p_url').value.trim(),
     sp_contact:document.getElementById('p_contact').value.trim(),
+    sp_services:document.getElementById('p_services').value,
     commission_bp:bp})});
   busy(btn,false);
   var m=document.getElementById('p-msg');
@@ -854,6 +858,11 @@ summary{font-size:13px;color:#8A857B;cursor:pointer}
 <div class="wrap">
 <h1>特约商户进件</h1>
 <div class="sub">TrustBase × 微信支付服务商 · 拍照上传证件, 提交后等待微信审核</div>
+
+<div class="box" id="spcard" style="display:none">
+<h3>服务商信息（为你提供服务的一方）</h3>
+<div id="spcard-body" style="font-size:13px"></div>
+</div>
 
 <div class="box">
 <h3>① 联系方式 (超级管理员)</h3>
@@ -929,11 +938,28 @@ summary{font-size:13px;color:#8A857B;cursor:pointer}
 </div>
 
 <script>
+function escText(s){return String(s==null?'':s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');}
+fetch('info').then(function(r){return r.json()}).then(function(sp){
+  if(!sp||!sp.name)return;
+  var h='<div style="font-size:15px;font-weight:600">'+escText(sp.name)+'</div>';
+  if(sp.desc)h+='<div style="color:#6B655B;margin-top:4px">'+escText(sp.desc)+'</div>';
+  if(Array.isArray(sp.services)&&sp.services.length){
+    h+='<div style="margin-top:8px;color:#6B655B">服务内容：</div><ul style="margin:4px 0 0;padding-left:18px">'+sp.services.map(function(x){return '<li>'+escText(x)+'</li>'}).join('')+'</ul>';
+  }
+  h+='<div style="margin-top:10px;font-size:12px;color:#8A857B">公示分账比例：'+escText(sp.rate_pct||'0.00%')+'（分账 = 微信支付按约定比例把交易款结算给服务商的机制；比例上限由你在授权时设置，实际抽取以交易为准）</div>';
+  h+='<div style="margin-top:10px;padding:8px 10px;background:#F0FDF4;border:1px solid #BBF7D0;border-radius:8px;font-size:12px;color:#166534">🔒 数据归你所有：店铺数据保存在你自己的电脑上，身份与信誉由你的安全卡持有；你可以随时更换服务商——店铺地址和客户不丢失。</div>';
+  if(sp.official_url)h+='<div style="margin-top:6px;font-size:12px">官网：<a href="'+escText(sp.official_url)+'" target="_blank" rel="noopener" style="color:#C4633C">'+escText(sp.official_url)+'</a></div>';
+  if(sp.contact)h+='<div style="font-size:12px;color:#8A857B">联系：'+escText(sp.contact)+'</div>';
+  document.getElementById('spcard-body').innerHTML=h;
+  document.getElementById('spcard').style.display='';
+}).catch(function(){});
+
 var API = '/api/sp/applyment';
 var mediaIds = {}; // 字段名 → 微信 media_id
 
 // admin key: 首次打开输入, 存 localStorage; 401 时清除重来
 function adminKey(){
+
   var k = localStorage.getItem('spAdminKey') || '';
   if (!k) { k = prompt('请输入管理密钥 (x-sp-admin-key)') || ''; if (k) localStorage.setItem('spAdminKey', k); }
   return k;
@@ -1102,6 +1128,7 @@ function createSpApplymentRouter(deps) {
         res.json({
             name: spProfileGet(db, "sp_name") || process.env.SP_NAME || "TrustBase 官方服务商",
             desc: spProfileGet(db, "sp_desc") || process.env.SP_DESC || "",
+            services: (spProfileGet(db, "sp_services") || process.env.SP_SERVICES || "").split("\n").map(function(x){return x.trim()}).filter(Boolean), // 2026-09-29 xiaomu: 服务内容清单(商户要知道为什么有分账比例)
             official_url: spProfileGet(db, "sp_official_url") || process.env.SP_OFFICIAL_URL || "",
             contact: spProfileGet(db, "sp_contact") || process.env.SP_CONTACT || "",
             commission_rate_bp: bp,
@@ -1202,7 +1229,7 @@ function createSpApplymentRouter(deps) {
         if (!checkAdmin(req, res)) return;
         try {
             const b = req.body || {};
-            const KEYMAP = { app_appid: "app_appid", sp_name: "sp_name", sp_desc: "sp_desc", sp_official_url: "sp_official_url", sp_contact: "sp_contact" };
+            const KEYMAP = { app_appid: "app_appid", sp_name: "sp_name", sp_desc: "sp_desc", sp_official_url: "sp_official_url", sp_contact: "sp_contact", sp_services: "sp_services" };
             const saved = {};
             for (const k of Object.keys(KEYMAP)) {
                 if (b[k] !== undefined) {

package/routes/sp-notify.js

@@ -70,7 +70,14 @@ CREATE TABLE IF NOT EXISTS sp_sub_merchants (
  *  evidence_hash 口径与 ShopXO 插件/agent-serviceprovider 一致: sha256(order_ref + psp_txn_id + amount) */
 async function submitPaymentFactToChain(fact) {
     const c = chainWrites.cfg();
-    c.keyName = process.env.SP_CHAIN_KEY_NAME || "emergency-key"; // SP 签名 key 独立可配
+    // [P1 修复 kimi 18462] 默认值不再写死 emergency-key (SP 网关机器上该 key 不存在且非 provider)
+    // 必填: SP_CHAIN_KEY_NAME + SP_CHAIN_HOME (或 CHAIN_HOME)
+    c.keyName = process.env.SP_CHAIN_KEY_NAME || "";
+    c.keyringHome = process.env.SP_CHAIN_HOME || process.env.CHAIN_HOME || c.keyringHome;
+    if (!c.keyName) {
+        console.warn("[sp-notify] SP_CHAIN_KEY_NAME 未设置 — 上链签名将失败。");
+        console.warn("[sp-notify] 请在 .env 配置: SP_CHAIN_KEY_NAME=<provider专用key名> + CHAIN_HOME=<keyring目录>");
+    }
     const addr = await chainWrites.keyAddress(c);
     const messages = [{
         "@type": "/trustchain.serviceprovider.v1.MsgSubmitPaymentFact",
@@ -331,4 +338,57 @@ function createSpNotifyRouter(deps) {
     return router;
 }
 
-module.exports = { createSpNotifyRouter, ensureTables, retryPending, retryProfitsharingSweep, submitPaymentFactToChain };
+/** [P1 修复] 启动自检: 签名 key 存在性 + provider ACTIVE 状态 (不阻塞启动, 只 WARN/ERROR) */
+async function verifyChainSigning(deps) {
+    try {
+        const c = chainWrites.cfg();
+        const keyName = process.env.SP_CHAIN_KEY_NAME || "";
+        const chainHome = process.env.SP_CHAIN_HOME || process.env.CHAIN_HOME || "";
+
+        if (!keyName) {
+            console.error("[sp-notify][STARTUP-CHECK] ❌ SP_CHAIN_KEY_NAME 未设置 — 支付事实无法上链");
+            console.error("[sp-notify][STARTUP-CHECK]    修法: .env 加 SP_CHAIN_KEY_NAME=<provider key 名>");
+            return false;
+        }
+        if (!chainHome) {
+            console.error("[sp-notify][STARTUP-CHECK] ⚠️ CHAIN_HOME/SP_CHAIN_HOME 未设置 — 使用默认 /root/.trustchain (可能没有 provider key)");
+        }
+
+        // 检查 key 是否能解析出地址
+        try {
+            const addr = await chainWrites.keyAddress(c);
+            console.log("[sp-notify][STARTUP-CHECK] ✓ 签名 key 可用, provider 地址:", addr);
+
+            // 检查该地址是否是链上 ACTIVE provider (查询, 失败只 WARN 不阻塞)
+            try {
+                const res = await fetch(`${process.env.CHAIN_RPC || "http://127.0.0.1:26657"}/abci_query?path="/trustchain.serviceprovider.v1.Query/ServiceProvider&data=${Buffer.from(JSON.stringify({provider: addr})).toString("hex").toUpperCase()}`);
+                if (res.ok) {
+                    const json = await res.json();
+                    const value = json?.result?.response?.value;
+                    if (value) {
+                        const decoded = JSON.parse(Buffer.from(value, "base64").toString());
+                        if (decoded?.status === "ACTIVE") {
+                            console.log("[sp-notify][STARTUP-CHECK] ✓ provider 状态 ACTIVE");
+                        } else {
+                            console.error(`[sp-notify][STARTUP-CHECK] ❌ provider 状态 ${decoded?.status || "unknown"} (需 ACTIVE) — 支付事实将被链上拒绝`);
+                        }
+                    } else {
+                        console.warn("[sp-notify][STARTUP-CHECK] ⚠️ provider 查询无结果 — 该地址可能未注册为 provider");
+                    }
+                }
+            } catch (queryErr) {
+                console.warn("[sp-notify][STARTUP-CHECK] ⚠️ provider 状态查询失败 (链节点可能未启动):", queryErr.message);
+            }
+            return true;
+        } catch (keyErr) {
+            console.error("[sp-notify][STARTUP-CHECK] ❌ 签名 key 不可用:", keyErr.message);
+            console.error("[sp-notify][STARTUP-CHECK]    检查 CHAIN_HOME 目录 + keyring 里是否有 key:", keyName);
+            return false;
+        }
+    } catch (e) {
+        console.warn("[sp-notify][STARTUP-CHECK] 自检异常 (不阻塞):", e.message);
+        return false;
+    }
+}
+
+module.exports = { createSpNotifyRouter, ensureTables, retryPending, retryProfitsharingSweep, submitPaymentFactToChain, verifyChainSigning };