merge(dev_jacy): shop WeChat unbound tip

Re-enable one-tap WeChat login, post-SMS OAuth bind, and quick login gates so partner/shop openId flows work again on staging.

.cursor/rules/git-conventions.mdc

@@ -29,4 +29,5 @@ chore(shared-types): add OrderStatus enum
 ## Agent 行为
 
 - **仅用户明确要求时** 才执行 git commit / push
-- 不 amend 已推送的 commit，不 force push main/master
+- 不 amend 已推送的 commit，不 force push main/master/dev
+- 发版：`dev`→测试(staging)，`main`→生产；用户只说「发布」默认发测试（见 dukang-release skill）

.cursor/skills/dukang-release/SKILL.md

@@ -1,89 +1,89 @@
 ---
 name: dukang-release
 description: >-
-  杜康好客生产发布流程：dev_jacy 提交合并到 dev，并用 deploy.sh 发版。
-  Use when the user says 发布、上传、deploy、上线、发版, or @杜康发布 / @dukang-release.
+  杜康好客发布流程：dev→测试(staging)，main→生产；同机双栈。
+  Use when the user says 发布、上传、deploy、上线、发版、发测试、发生产,
+  or @杜康发布 / @dukang-release.
 ---
 
 # 杜康发布
 
-将已完成改动发到生产（`aliyun-smarthr`）。**仅用户明确要求发布时执行。**
+同机双栈：`/opt/dukang-staging`（测试）与 `/opt/dukang`（生产）。**仅用户明确要求发布时执行。**
 
-## 分支约定
+## 分支与环境
 
-| 分支 | 用途 |
-|------|------|
-| `dev_jacy` | 日常开发 / 提交 |
-| `dev` | **发布分支**（服务器拉这个） |
+| 分支 | 环境 | 目录 | 端口 | 域名 |
+|------|------|------|------|------|
+| `dev_jacy` | 日常开发 | 本机 | — | — |
+| `dev` | **staging 测试** | `/opt/dukang-staging` | 8190–8194 | `*-test.dukanghaoke.com` |
+| `main` | **production 生产** | `/opt/dukang` | 8090–8094 | `*.dukanghaoke.com` |
 
-默认：`dev_jacy` → merge → `dev` → 部署。勿 force push `main`/`dev`。
+默认：`dev_jacy` → merge → `dev` → **发测试**。  
+生产：`dev` 验收通过 → merge → `main` → **发生产**。勿 force push `main`/`dev`。
+
+用户只说「发布」且未指明生产时 → **发测试（staging）**。  
+用户说「发生产 / 上线生产」→ 用 `deploy-prod.sh`。
 
 ## 标准流程（Windows）
 
-PowerShell 下 **分支名必须加引号**（否则 `checkout` 与 `dev` 会被粘成 `checkoutdev`）。
+PowerShell 下 **分支名必须加引号**。
 
-### 1. 提交（在 `dev_jacy`）
-
-```powershell
-git status -sb
-git add <files>
-git commit -m @"
-fix(scope): summary
-
-Optional body.
-"@
-```
-
-- Conventional Commits；不提交 `.env` / `dist` / `node_modules`
-- 用户未要求 commit 时不要擅自提交
-
-### 2. 推送并合并到 `dev`
+### A. 发测试（日常）
 
 ```powershell
+# 1. 在 dev_jacy 提交（用户要求时）
 git push -u origin HEAD
 git checkout "dev"
 git pull origin "dev"
 git merge "dev_jacy" -m "merge(dev_jacy): <简述>"
 git push origin "dev"
 git checkout "dev_jacy"
+
+# 2. 发 staging
+& "C:\Program Files\Git\bin\bash.exe" "<repo>/deploy/deploy-staging.sh" -- --skip-db
 ```
 
-### 3. 远程发版
-
-本机无 WSL bash 时用 **Git Bash**：
+### B. 发生产（验收后）
 
 ```powershell
-& "C:\Program Files\Git\bin\bash.exe" "<repo>/deploy/deploy.sh" --branch "dev" -- --skip-db
+git checkout "main"
+git pull origin "main"
+git merge "dev" -m "merge(dev): <简述>"
+git push origin "main"
+git checkout "dev_jacy"
+
+& "C:\Program Files\Git\bin\bash.exe" "<repo>/deploy/deploy-prod.sh" -- --skip-db
 ```
 
 - 默认加 `--skip-db`（无迁移时）
-- 有 Prisma 迁移时去掉 `--skip-db`，按用户确认是否 `--seed` / `--accept-data-loss`
-- `deploy/deploy.env` 提供 `DEPLOY_HOST` 等（勿提交密钥）
+- 有 Prisma 迁移：先在 **staging** 跑通（可 `--seed` / `--accept-data-loss`），再生产去掉 `--skip-db`
+- Staging 微信：正式号 + 全 Mock（`.env.staging`）
+- `deploy/deploy.env` 提供 `DEPLOY_HOST`、`STAGING_APP_ROOT`、`PROD_APP_ROOT`（勿提交密钥）
 
-### 4. 等待完成
+### 首次启用 Staging
 
-后台跑部署时轮询终端输出，成功标志：
+服务器一次性：`bash deploy/bootstrap-staging.sh`（见脚本说明）→ 配 `.env.staging` → DNS `*-test` → nginx → `deploy-staging.sh -- --seed`
+
+### 同步环境变量
+
+```powershell
+bash deploy/sync-api-env.sh staging
+bash deploy/sync-api-env.sh production
+```
+
+## 等待完成
 
 - 出现 `发版完成`
 - `exit_code: 0`
-- `mini-user(h5): 200`（或对应前端 200）
+- `mini-user(h5): 200` / `api: 200`
 
-说明：API 健康检查短暂 `FAIL`/`000` 多为重启中，以 `发版完成` + `exit_code: 0` 为准。
+## 回复用户
 
-### 5. 回复用户
-
-一句说明：已合并 commit、发版结果、建议微信强刷验证。
-
-## 常用变体
-
-| 场景 | 做法 |
-|------|------|
-| 仅部署已推送的 `dev` | 跳过 commit/merge，直接跑 `deploy.sh --branch "dev" -- --skip-db` |
-| 检查服务器 | `deploy.sh --branch "dev" --check` |
-| 含 DB | `deploy.sh --branch "dev" --`（无 skip-db）或按用户给 seed 参数 |
+说明：环境（测试/生产）、commit、建议硬刷验证。测试后台有橙色「测试环境」条。
 
 ## 禁止
 
-- 不 amend 已推送 commit；不 force push `main`/`master`/`dev`
-- 不把 `.env` / 私钥打进仓库
-- 用户只说「修好」未说发布时 → **只改代码，不发版**
+- 不 amend 已推送 commit；不 force push `main`/`dev`
+- 不把 `.env*` 私钥打进仓库
+- **禁止**再用 `dev` 直发生产
+- 用户只说「修好」未说发布 → 只改代码，不发版

.gitignore

@@ -8,7 +8,13 @@ server/dukang-api/.env
 server/dukang-api/.env.development
 server/dukang-api/.env.production
 server/dukang-api/.env.production.local
+server/dukang-api/.env.staging
+server/dukang-api/.env.staging.local
 deploy/deploy.env
+deploy/.staging-mysql.pass
+deploy/_ops-*.log
+deploy/_ops-*.sh
+
 .DS_Store
 coverage/
 *.tsbuildinfo

AGENTS.md

@@ -137,6 +137,19 @@ C 端门店仅 status=OPEN
 订单 Tab：待付款 | 已付款 | 已完成
 ```
 
+## 环境与发版
+
+| 环境 | 分支 | 目录 | 端口 | 域名 |
+|------|------|------|------|------|
+| local | `dev_jacy` | 本机 Docker 6016/6017 | API `:3000` | — |
+| **staging 测试** | `dev` | `/opt/dukang-staging` | 8190–8194 | `*-test.dukanghaoke.com` |
+| **production 生产** | `main` | `/opt/dukang` | 8090–8094 | `*.dukanghaoke.com` |
+
+- 日常发布 → `deploy/deploy-staging.sh`（`dev`）
+- 生产发布 → `deploy/deploy-prod.sh`（`main`，验收后）
+- Staging：正式微信 + 全 Mock；配置见 `.env.staging.example`
+- 详情：`@dukang-release` / `.cursor/skills/dukang-release/SKILL.md`
+
 ## 提交与 PR
 
 - Conventional Commits：`feat(trade):`、`fix(redeem):`；scope = 端或模块

MP_verify_ayPJ4CQqbUcec3jX.txt

@@ -0,0 +1 @@
+ayPJ4CQqbUcec3jX

apps/admin-web/package.json

@@ -13,6 +13,8 @@
     "@dukang/shared-types": "workspace:*",
     "antd": "^5.22.0",
     "dayjs": "^1.11.13",
+    "echarts": "^6.1.0",
+    "echarts-for-react": "^3.0.6",
     "element-china-area-data": "^6.1.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

apps/admin-web/src/components/ProxyOrderModal.tsx

@@ -0,0 +1,421 @@
+import { useEffect, useMemo, useRef, useState } from 'react';
+import {
+  Alert,
+  Button,
+  Checkbox,
+  Form,
+  Input,
+  InputNumber,
+  Modal,
+  QRCode,
+  Radio,
+  Select,
+  Space,
+  Typography,
+  message,
+} from 'antd';
+import type {
+  HqProxyOrderCreateRequest,
+  PartnerProxyDeliveryMode,
+  PartnerProxyOrderOptions,
+  PartnerProxyOrderPreviewResult,
+  ProxyOrderCreateResponse,
+  ProxyOrderPayResponse,
+} from '@dukang/shared-types';
+import ChinaRegionCascader from './ChinaRegionCascader';
+import { parseRegionCodes } from '../lib/china-region';
+import { request } from '../lib/api';
+
+type ProxyOrderModalProps = {
+  open: boolean;
+  onClose: () => void;
+  onSuccess: (order: { id: string; orderNo: string }) => void;
+};
+
+type PayStatus = {
+  id: string;
+  orderNo: string;
+  status: string;
+  payStatus: string;
+};
+
+function fmtMoney(n: number) {
+  return n.toLocaleString('zh-CN', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+}
+
+export default function ProxyOrderModal({ open, onClose, onSuccess }: ProxyOrderModalProps) {
+  const [options, setOptions] = useState<PartnerProxyOrderOptions | null>(null);
+  const [loadingOptions, setLoadingOptions] = useState(false);
+  const [phone, setPhone] = useState('');
+  const [receiverName, setReceiverName] = useState('');
+  const [regionCodes, setRegionCodes] = useState<string[]>([]);
+  const [addressDetail, setAddressDetail] = useState('');
+  const [productId, setProductId] = useState<string>();
+  const [quantity, setQuantity] = useState(2);
+  const [promoCodeId, setPromoCodeId] = useState<string>();
+  const [deliveryMode, setDeliveryMode] = useState<PartnerProxyDeliveryMode>('ADDRESS');
+  const [autoReceive, setAutoReceive] = useState(false);
+  const [preview, setPreview] = useState<PartnerProxyOrderPreviewResult | null>(null);
+  const [previewLoading, setPreviewLoading] = useState(false);
+  const [submitting, setSubmitting] = useState(false);
+
+  const [step, setStep] = useState<'form' | 'pay'>('form');
+  const [created, setCreated] = useState<ProxyOrderCreateResponse | null>(null);
+  const [codeUrl, setCodeUrl] = useState<string | null>(null);
+  const [payLoading, setPayLoading] = useState(false);
+  const [mockConfirming, setMockConfirming] = useState(false);
+  const pollRef = useRef<number | null>(null);
+
+  const region = useMemo(() => parseRegionCodes(regionCodes), [regionCodes]);
+
+  function stopPoll() {
+    if (pollRef.current != null) {
+      window.clearInterval(pollRef.current);
+      pollRef.current = null;
+    }
+  }
+
+  useEffect(() => {
+    if (!open) return;
+    setLoadingOptions(true);
+    request<PartnerProxyOrderOptions>('/admin/proxy-orders/options')
+      .then((data) => {
+        setOptions(data);
+        if (data.products[0]) setProductId(data.products[0].id);
+      })
+      .catch((e) => message.error(e instanceof Error ? e.message : '加载失败'))
+      .finally(() => setLoadingOptions(false));
+  }, [open]);
+
+  useEffect(() => {
+    if (!open || !productId || quantity < 1 || step !== 'form') {
+      if (step === 'form') setPreview(null);
+      return;
+    }
+    const timer = window.setTimeout(() => {
+      setPreviewLoading(true);
+      request<PartnerProxyOrderPreviewResult>('/admin/proxy-orders/preview', {
+        method: 'POST',
+        body: JSON.stringify({
+          productId,
+          quantity,
+          deliveryMode,
+          receiverCity: deliveryMode === 'ADDRESS' ? region?.city || undefined : undefined,
+          receiverDistrict: deliveryMode === 'ADDRESS' ? region?.district || undefined : undefined,
+        }),
+      })
+        .then(setPreview)
+        .catch(() => setPreview(null))
+        .finally(() => setPreviewLoading(false));
+    }, 300);
+    return () => window.clearTimeout(timer);
+  }, [open, productId, quantity, deliveryMode, region?.city, region?.district, step]);
+
+  useEffect(() => () => stopPoll(), []);
+
+  function resetForm() {
+    stopPoll();
+    setPhone('');
+    setReceiverName('');
+    setRegionCodes([]);
+    setAddressDetail('');
+    setQuantity(2);
+    setPromoCodeId(undefined);
+    setDeliveryMode('ADDRESS');
+    setAutoReceive(false);
+    setPreview(null);
+    setProductId(options?.products[0]?.id);
+    setStep('form');
+    setCreated(null);
+    setCodeUrl(null);
+    setPayLoading(false);
+    setMockConfirming(false);
+  }
+
+  function handleClose() {
+    resetForm();
+    onClose();
+  }
+
+  function validateForm(): string | null {
+    if (!/^1\d{10}$/.test(phone.trim())) return '请输入有效手机号';
+    if (!productId) return '请选择商品';
+    if (deliveryMode === 'ADDRESS') {
+      if (!region?.province || !region?.city || !region?.district) return '请选择省市区';
+      if (!addressDetail.trim()) return '请填写详细地址';
+      if (!autoReceive) return '配送到址须勾选同意自动收货';
+    } else {
+      const product = options?.products.find((p) => p.id === productId);
+      if (product && product.allowOnSitePickup === false) return '该商品不支持现场提货';
+    }
+    if (!preview) return '请等待费用计算完成';
+    return null;
+  }
+
+  function startPoll(orderId: string) {
+    stopPoll();
+    pollRef.current = window.setInterval(() => {
+      void request<PayStatus>(`/admin/proxy-orders/${orderId}/pay-status`)
+        .then((st) => {
+          if (st.payStatus === 'PAID') {
+            stopPoll();
+            message.success(`支付成功：${st.orderNo}`);
+            const payload = { id: st.id, orderNo: st.orderNo };
+            resetForm();
+            onSuccess(payload);
+          }
+        })
+        .catch(() => undefined);
+    }, 2000);
+  }
+
+  async function submit() {
+    const err = validateForm();
+    if (err) {
+      message.warning(err);
+      return;
+    }
+
+    const payload: HqProxyOrderCreateRequest = {
+      phone: phone.trim(),
+      deliveryMode,
+      autoReceive: deliveryMode === 'ADDRESS' ? true : undefined,
+      receiverName: receiverName.trim() || undefined,
+      province: deliveryMode === 'ADDRESS' ? region?.province : undefined,
+      city: deliveryMode === 'ADDRESS' ? region?.city : undefined,
+      district: deliveryMode === 'ADDRESS' ? region?.district : undefined,
+      addressDetail: deliveryMode === 'ADDRESS' ? addressDetail.trim() : undefined,
+      productId: productId!,
+      quantity,
+      promoCodeId: promoCodeId || undefined,
+    };
+
+    setSubmitting(true);
+    try {
+      const order = await request<ProxyOrderCreateResponse>('/admin/proxy-orders', {
+        method: 'POST',
+        body: JSON.stringify(payload),
+      });
+      setCreated(order);
+      setStep('pay');
+      setPayLoading(true);
+      const pay = await request<ProxyOrderPayResponse>(`/admin/proxy-orders/${order.id}/pay`, {
+        method: 'POST',
+        body: JSON.stringify({ payMethod: 'NATIVE' }),
+      });
+      setCodeUrl(pay.codeUrl ?? null);
+      startPoll(order.id);
+    } catch (e) {
+      message.error(e instanceof Error ? e.message : '下单失败');
+      setStep('form');
+      setCreated(null);
+    } finally {
+      setSubmitting(false);
+      setPayLoading(false);
+    }
+  }
+
+  async function handleMockConfirm() {
+    if (!created) return;
+    setMockConfirming(true);
+    try {
+      const st = await request<PayStatus>(`/admin/proxy-orders/${created.id}/pay/mock-confirm`, {
+        method: 'POST',
+        body: '{}',
+      });
+      stopPoll();
+      message.success(`支付成功：${st.orderNo}`);
+      const payload = { id: st.id, orderNo: st.orderNo };
+      resetForm();
+      onSuccess(payload);
+    } catch (e) {
+      message.error(e instanceof Error ? e.message : '模拟支付失败');
+    } finally {
+      setMockConfirming(false);
+    }
+  }
+
+  const deliveryLabel =
+    preview?.deliveryType === 'ON_SITE_PICKUP'
+      ? '现场提货'
+      : preview?.deliveryType === 'CROSS_CITY'
+        ? '跨城配送'
+        : '同城配送';
+
+  return (
+    <Modal
+      title={step === 'pay' ? '代下单 · 待支付' : '代下单'}
+      open={open}
+      onCancel={handleClose}
+      width={640}
+      destroyOnClose
+      footer={
+        step === 'pay' ? (
+          <Space>
+            <Button onClick={handleClose}>关闭</Button>
+            <Button type="primary" loading={mockConfirming} onClick={() => void handleMockConfirm()}>
+              模拟支付成功
+            </Button>
+          </Space>
+        ) : (
+          <Space>
+            <Button onClick={handleClose}>取消</Button>
+            <Button type="primary" loading={submitting || loadingOptions} onClick={() => void submit()}>
+              提交并收款
+            </Button>
+          </Space>
+        )
+      }
+    >
+      {step === 'pay' && created ? (
+        <div style={{ textAlign: 'center' }}>
+          <Alert
+            type="info"
+            showIcon
+            style={{ marginBottom: 16, textAlign: 'left' }}
+            message={`订单 ${created.orderNo} 待支付 ¥${fmtMoney(created.payAmount)}，请扫码支付`}
+            description={
+              created.deliveryType === 'ON_SITE_PICKUP'
+                ? '支付完成后将进入现场提货闭环'
+                : '支付完成后将进入待发货，由总部履约发货'
+            }
+          />
+          {payLoading && !codeUrl ? (
+            <Typography.Text type="secondary">正在生成收款码…</Typography.Text>
+          ) : codeUrl ? (
+            <Space direction="vertical" size={12} align="center">
+              <QRCode value={codeUrl} size={200} />
+              <Typography.Text type="secondary">请使用微信扫一扫完成支付（本地可用下方模拟支付）</Typography.Text>
+              <Typography.Text type="secondary" style={{ fontSize: 12, wordBreak: 'break-all' }}>
+                {codeUrl}
+              </Typography.Text>
+            </Space>
+          ) : (
+            <Typography.Text type="danger">收款码生成失败，请关闭后重试</Typography.Text>
+          )}
+        </div>
+      ) : (
+        <>
+          <Alert
+            type="info"
+            showIcon
+            style={{ marginBottom: 16 }}
+            message="提交后生成微信收款码，支付成功后发放好客权益；配送单进入待发货"
+          />
+
+          <Form layout="vertical">
+            <Form.Item label="用户手机号" required>
+              <Input
+                placeholder="11 位手机号"
+                value={phone}
+                maxLength={11}
+                onChange={(e) => setPhone(e.target.value.replace(/\D/g, '').slice(0, 11))}
+              />
+            </Form.Item>
+
+            <Form.Item label="酒品" required>
+              <Select
+                showSearch
+                optionFilterProp="label"
+                loading={loadingOptions}
+                placeholder="选择商品"
+                value={productId}
+                onChange={setProductId}
+                options={(options?.products ?? []).map((p) => ({
+                  value: p.id,
+                  label: `${p.name} · ${p.spec} · ¥${fmtMoney(p.price)}`,
+                }))}
+              />
+            </Form.Item>
+
+            <Form.Item label="数量" required>
+              <InputNumber
+                min={1}
+                value={quantity}
+                onChange={(v) => setQuantity(Math.max(1, Number(v) || 1))}
+                style={{ width: '100%' }}
+              />
+            </Form.Item>
+
+            {(options?.promoCodes.length ?? 0) > 0 ? (
+              <Form.Item label="绑定推广码（选填）">
+                <Select
+                  allowClear
+                  placeholder="不绑定"
+                  value={promoCodeId}
+                  onChange={setPromoCodeId}
+                  options={(options?.promoCodes ?? []).map((p) => ({
+                    value: p.id,
+                    label: `${p.code} · ${p.name}`,
+                  }))}
+                />
+              </Form.Item>
+            ) : null}
+
+            <Form.Item label="履约方式" required>
+              <Radio.Group
+                value={deliveryMode}
+                onChange={(e) => {
+                  setDeliveryMode(e.target.value);
+                  if (e.target.value !== 'ADDRESS') setAutoReceive(false);
+                }}
+                options={[
+                  { value: 'ADDRESS', label: '配送到址' },
+                  { value: 'ON_SITE_PICKUP', label: '现场提货' },
+                ]}
+              />
+            </Form.Item>
+
+            {deliveryMode === 'ADDRESS' ? (
+              <>
+                <Form.Item label="收货人（选填）">
+                  <Input
+                    placeholder="默认：用户+手机尾号"
+                    value={receiverName}
+                    maxLength={32}
+                    onChange={(e) => setReceiverName(e.target.value)}
+                  />
+                </Form.Item>
+                <Form.Item label="省市区" required>
+                  <ChinaRegionCascader value={regionCodes} onChange={setRegionCodes} />
+                </Form.Item>
+                <Form.Item label="详细地址" required>
+                  <Input.TextArea
+                    rows={2}
+                    placeholder="街道门牌等"
+                    value={addressDetail}
+                    maxLength={256}
+                    onChange={(e) => setAddressDetail(e.target.value)}
+                  />
+                </Form.Item>
+                <Form.Item>
+                  <Checkbox checked={autoReceive} onChange={(e) => setAutoReceive(e.target.checked)}>
+                    同意自动收货（配送到址必选）
+                  </Checkbox>
+                </Form.Item>
+              </>
+            ) : null}
+
+            <div style={{ background: '#fafafa', borderRadius: 8, padding: 12 }}>
+              <Typography.Text type="secondary">费用预览</Typography.Text>
+              {previewLoading ? (
+                <div>计算中…</div>
+              ) : preview ? (
+                <Space direction="vertical" size={2} style={{ width: '100%', marginTop: 8 }}>
+                  <div>履约：{deliveryLabel}</div>
+                  <div>商品金额：¥{fmtMoney(preview.productAmount)}</div>
+                  <div>实付：¥{fmtMoney(preview.payAmount)}</div>
+                  <div>好客权益：¥{fmtMoney(preview.benefitAmount)}</div>
+                </Space>
+              ) : (
+                <div style={{ marginTop: 8 }}>
+                  <Typography.Text type="secondary">请完善商品与数量</Typography.Text>
+                </div>
+              )}
+            </div>
+          </Form>
+        </>
+      )}
+    </Modal>
+  );
+}

apps/admin-web/src/layouts/AdminLayout.tsx

@@ -204,6 +204,8 @@ function filterMenuItems(items: MenuProps['items'], permissionKeys: string[]): M
     .filter(Boolean) as MenuProps['items'];
 }
 
+const IS_STAGING = import.meta.env.VITE_APP_ENV === 'staging';
+
 export default function AdminLayout() {
   const navigate = useNavigate();
   const location = useLocation();
@@ -239,16 +241,35 @@ export default function AdminLayout() {
 
   return (
     <Layout style={{ height: '100vh', overflow: 'hidden' }}>
+      {IS_STAGING ? (
+        <div
+          style={{
+            position: 'fixed',
+            top: 0,
+            left: 0,
+            right: 0,
+            zIndex: 1100,
+            background: '#d48806',
+            color: '#fff',
+            textAlign: 'center',
+            fontSize: 13,
+            fontWeight: 600,
+            lineHeight: '28px',
+          }}
+        >
+          测试环境 · staging · 数据与生产隔离 · Mock 开启
+        </div>
+      ) : null}
       <Sider
         breakpoint="lg"
         collapsedWidth={64}
         theme="dark"
         width={220}
-        style={{ height: '100vh', overflow: 'hidden' }}
+        style={{ height: '100vh', overflow: 'hidden', marginTop: IS_STAGING ? 28 : 0 }}
       >
-        <div style={{ display: 'flex', flexDirection: 'column', height: '100vh' }}>
+        <div style={{ display: 'flex', flexDirection: 'column', height: IS_STAGING ? 'calc(100vh - 28px)' : '100vh' }}>
           <div style={{ flexShrink: 0, padding: '16px', color: '#fff', fontWeight: 600 }}>
-            杜康 HQ
+            杜康 HQ{IS_STAGING ? ' · 测试' : ''}
           </div>
           <div className="admin-sider-menu-scroll" style={{ flex: 1, minHeight: 0, overflow: 'auto' }}>
             <Menu
@@ -264,7 +285,15 @@ export default function AdminLayout() {
           </div>
         </div>
       </Sider>
-      <Layout style={{ height: '100vh', overflow: 'hidden', display: 'flex', flexDirection: 'column' }}>
+      <Layout
+        style={{
+          height: IS_STAGING ? 'calc(100vh - 28px)' : '100vh',
+          marginTop: IS_STAGING ? 28 : 0,
+          overflow: 'hidden',
+          display: 'flex',
+          flexDirection: 'column',
+        }}
+      >
         <Header
           style={{
             flexShrink: 0,

apps/admin-web/src/lib/api.ts

@@ -88,6 +88,51 @@ export type DashboardStats = {
   ordersByStatus: Array<{ status: string; count: number }>;
 };
 
+export type DashboardAnalytics = {
+  summary: {
+    users: number;
+    orders: number;
+    payingUsers: number;
+    partners: number;
+    stores: number;
+    redeems: number;
+    redeemAmount: number;
+  };
+  byDate: Array<{
+    date: string;
+    users: number;
+    orders: number;
+    partners: number;
+    stores: number;
+    redeems: number;
+    redeemAmount: number;
+  }>;
+  byCity: Array<{
+    cityId: string;
+    cityName: string;
+    users: number;
+    orders: number;
+    partners: number;
+    stores: number;
+    redeems: number;
+    redeemAmount: number;
+  }>;
+  byPromo: Array<{
+    promoCodeId: string | null;
+    code: string;
+    name: string;
+    users: number;
+    orders: number;
+  }>;
+  byPartner: Array<{
+    partnerAccountId: string;
+    companyName: string;
+    stores: number;
+    redeems: number;
+    redeemAmount: number;
+  }>;
+};
+
 export type SystemVersion = {
   id: string;
   gitTag: string | null;
@@ -148,6 +193,10 @@ export type AdminOrderRow = {
   fulfillmentWarehouse?: { id: string; name: string } | null;
   fulfillmentHold?: boolean;
   fulfillmentHoldReason?: string | null;
+  orderType?: string;
+  isProxyOrder?: boolean;
+  proxyPartnerName?: string | null;
+  proxyPartnerPhone?: string | null;
   user?: { id: string; userNo: string; phone: string | null; nickname: string | null };
   delivery?: {
     provider: string;

apps/admin-web/src/lib/constants.ts

@@ -19,6 +19,17 @@ export const ORDER_STATUS_LABELS: Record<string, string> = {
   REFUNDED: '已退款',
 };
 
+/** 订单状态流转操作人（common_event.param3） */
+export const ORDER_STATUS_OPERATOR_LABELS: Record<string, string> = {
+  USER: '用户',
+  USER_ON_SITE: '用户·现场取货',
+  USER_WECHAT_CONFIRM: '用户·微信确认收货',
+  WECHAT_TRADE_MANAGE: '微信结算同步',
+  MOCK: 'Mock',
+  MOCK_PAY: 'Mock 支付',
+  SYSTEM: '系统',
+};
+
 /** 订单状态 Tag 颜色（Ant Design preset） */
 export const ORDER_STATUS_COLORS: Record<string, string> = {
   PENDING_PAY: 'red',

apps/admin-web/src/pages/DashboardPage.tsx

@@ -1,17 +1,22 @@
-import { useCallback, useEffect, useState } from 'react';
+import { useCallback, useEffect, useMemo, useState } from 'react';
 import { Link } from 'react-router-dom';
 import {
-  Button, Card, Col, Descriptions, Modal, Row, Space, Statistic, Table, Typography, message,
+  Button, Card, Col, DatePicker, Descriptions, Form, Modal, Row, Select, Space, Statistic, Table, Typography, message,
 } from 'antd';
 import { CloudUploadOutlined, ReloadOutlined } from '@ant-design/icons';
+import dayjs, { type Dayjs } from 'dayjs';
+import ReactECharts from 'echarts-for-react';
+import type { EChartsOption } from 'echarts';
 import {
   request,
+  type DashboardAnalytics,
   type DashboardStats,
   type DeployTriggerResult,
   type HqProfile,
+  type Paginated,
   type SystemVersion,
 } from '../lib/api';
-import { fmtTime } from '../lib/constants';
+import { ADMIN_OPTIONS_PAGE_SIZE, fmtTime } from '../lib/constants';
 
 const STATUS_LABELS: Record<string, string> = {
   PENDING_PAY: '待付款',
@@ -31,6 +36,26 @@ const DEPLOYED_BY_LABELS: Record<string, string> = {
   admin: 'Admin 发布',
 };
 
+type CityOption = { id: string; name: string; code: string };
+type PromoOption = { id: string; code: string; name: string };
+
+type AnalyticsFilters = {
+  range: [Dayjs, Dayjs];
+  cityId?: string;
+  promoCodeId?: string;
+  partnerAccountId?: string;
+};
+
+function buildAnalyticsQs(f: AnalyticsFilters) {
+  const qs = new URLSearchParams();
+  qs.set('dateFrom', f.range[0].format('YYYY-MM-DD'));
+  qs.set('dateTo', f.range[1].format('YYYY-MM-DD'));
+  if (f.cityId) qs.set('cityId', f.cityId);
+  if (f.promoCodeId) qs.set('promoCodeId', f.promoCodeId);
+  if (f.partnerAccountId) qs.set('partnerAccountId', f.partnerAccountId);
+  return qs.toString();
+}
+
 export default function DashboardPage() {
   const [stats, setStats] = useState<DashboardStats | null>(null);
   const [version, setVersion] = useState<SystemVersion | null>(null);
@@ -40,6 +65,21 @@ export default function DashboardPage() {
   const [deploying, setDeploying] = useState(false);
   const isSuperAdmin = profile?.adminRole === 'SUPER_ADMIN';
 
+  const [filterForm] = Form.useForm<{
+    range: [Dayjs, Dayjs];
+    cityId?: string;
+    promoCodeId?: string;
+    partnerAccountId?: string;
+  }>();
+  const [filters, setFilters] = useState<AnalyticsFilters>({
+    range: [dayjs().subtract(29, 'day'), dayjs()],
+  });
+  const [analytics, setAnalytics] = useState<DashboardAnalytics | null>(null);
+  const [analyticsLoading, setAnalyticsLoading] = useState(true);
+  const [cities, setCities] = useState<CityOption[]>([]);
+  const [promos, setPromos] = useState<PromoOption[]>([]);
+  const [partners, setPartners] = useState<Array<{ id: string; companyName?: string | null; name: string }>>([]);
+
   const loadVersion = useCallback(() => {
     setVersionLoading(true);
     return request<SystemVersion | null>('/admin/dashboard/version')
@@ -48,6 +88,17 @@ export default function DashboardPage() {
       .finally(() => setVersionLoading(false));
   }, []);
 
+  const loadAnalytics = useCallback((f: AnalyticsFilters) => {
+    setAnalyticsLoading(true);
+    return request<DashboardAnalytics>(`/admin/dashboard/analytics?${buildAnalyticsQs(f)}`)
+      .then(setAnalytics)
+      .catch((e) => {
+        message.error(e instanceof Error ? e.message : '加载统计失败');
+        setAnalytics(null);
+      })
+      .finally(() => setAnalyticsLoading(false));
+  }, []);
+
   useEffect(() => {
     request<DashboardStats>('/admin/dashboard/stats')
       .then(setStats)
@@ -64,8 +115,64 @@ export default function DashboardPage() {
       .catch(() => {
         setVersionLoading(false);
       });
+    void request<Paginated<CityOption>>(`/admin/cities?pageSize=${ADMIN_OPTIONS_PAGE_SIZE}`)
+      .then((res) => setCities(res.items ?? []))
+      .catch(() => setCities([]));
+    void request<Paginated<PromoOption>>(`/admin/promo-codes?pageSize=${ADMIN_OPTIONS_PAGE_SIZE}`)
+      .then((res) => setPromos(res.items ?? []))
+      .catch(() => setPromos([]));
+    void request<Paginated<{ id: string; companyName?: string | null; name: string }>>(
+      `/admin/partners?pageSize=${ADMIN_OPTIONS_PAGE_SIZE}`,
+    )
+      .then((res) => setPartners(res.items ?? []))
+      .catch(() => setPartners([]));
   }, [loadVersion]);
 
+  useEffect(() => {
+    void loadAnalytics(filters);
+  }, [filters, loadAnalytics]);
+
+  function applyFilters(values: {
+    range?: [Dayjs, Dayjs];
+    cityId?: string;
+    promoCodeId?: string;
+    partnerAccountId?: string;
+  }) {
+    const next: AnalyticsFilters = {
+      range: values.range ?? filters.range,
+      cityId: values.cityId || undefined,
+      promoCodeId: values.promoCodeId || undefined,
+      partnerAccountId: values.partnerAccountId || undefined,
+    };
+    setFilters(next);
+  }
+
+  function setCityFilter(cityId: string) {
+    const next = { ...filters, cityId: cityId === filters.cityId ? undefined : cityId };
+    filterForm.setFieldsValue({ cityId: next.cityId });
+    setFilters(next);
+  }
+
+  function setPromoFilter(promoCodeId: string) {
+    const key = promoCodeId === 'null' || promoCodeId === '' ? 'none' : promoCodeId;
+    const next = {
+      ...filters,
+      promoCodeId: key === filters.promoCodeId ? undefined : key,
+    };
+    filterForm.setFieldsValue({ promoCodeId: next.promoCodeId });
+    setFilters(next);
+  }
+
+  function setPartnerFilter(partnerAccountId: string) {
+    const next = {
+      ...filters,
+      partnerAccountId:
+        partnerAccountId === filters.partnerAccountId ? undefined : partnerAccountId,
+    };
+    filterForm.setFieldsValue({ partnerAccountId: next.partnerAccountId });
+    setFilters(next);
+  }
+
   function handleDeploy() {
     Modal.confirm({
       title: '确认发布更新？',
@@ -89,6 +196,176 @@ export default function DashboardPage() {
 
   const shortSha = version?.commitId ? version.commitId.slice(0, 7) : '—';
 
+  const ordersDrillQs = useMemo(() => {
+    const qs = new URLSearchParams();
+    qs.set('createdFrom', filters.range[0].format('YYYY-MM-DD'));
+    qs.set('createdTo', filters.range[1].format('YYYY-MM-DD'));
+    if (filters.cityId && filters.cityId !== 'none') qs.set('cityId', filters.cityId);
+    return qs.toString();
+  }, [filters]);
+
+  const byDateOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byDate ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['新增用户', '订单数'] },
+      grid: { left: 40, right: 20, top: 40, bottom: 40 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.date.slice(5)),
+        axisLabel: { rotate: rows.length > 14 ? 45 : 0 },
+      },
+      yAxis: { type: 'value', minInterval: 1 },
+      series: [
+        { name: '新增用户', type: 'line', smooth: true, data: rows.map((r) => r.users) },
+        { name: '订单数', type: 'line', smooth: true, data: rows.map((r) => r.orders) },
+      ],
+    };
+  }, [analytics]);
+
+  const byCityOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byCity ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['用户', '订单'] },
+      grid: { left: 48, right: 20, top: 40, bottom: 48 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.cityName),
+        axisLabel: { interval: 0, rotate: rows.length > 4 ? 30 : 0 },
+      },
+      yAxis: { type: 'value', minInterval: 1 },
+      series: [
+        { name: '用户', type: 'bar', data: rows.map((r) => r.users), barMaxWidth: 36 },
+        { name: '订单', type: 'bar', data: rows.map((r) => r.orders), barMaxWidth: 36 },
+      ],
+    };
+  }, [analytics]);
+
+  const byPromoOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byPromo ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['用户', '订单'] },
+      grid: { left: 48, right: 20, top: 40, bottom: 64 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.name || r.code),
+        axisLabel: { interval: 0, rotate: rows.length > 3 ? 30 : 0 },
+      },
+      yAxis: { type: 'value', minInterval: 1 },
+      series: [
+        { name: '用户', type: 'bar', data: rows.map((r) => r.users), barMaxWidth: 36 },
+        { name: '订单', type: 'bar', data: rows.map((r) => r.orders), barMaxWidth: 36 },
+      ],
+    };
+  }, [analytics]);
+
+  const opsByDateOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byDate ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['新增合伙人', '新签门店', '核销笔数', '核销金额'] },
+      grid: { left: 48, right: 48, top: 48, bottom: 40 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.date.slice(5)),
+        axisLabel: { rotate: rows.length > 14 ? 45 : 0 },
+      },
+      yAxis: [
+        { type: 'value', name: '数量', minInterval: 1 },
+        { type: 'value', name: '金额', minInterval: 1 },
+      ],
+      series: [
+        { name: '新增合伙人', type: 'line', smooth: true, data: rows.map((r) => r.partners) },
+        { name: '新签门店', type: 'line', smooth: true, data: rows.map((r) => r.stores) },
+        { name: '核销笔数', type: 'line', smooth: true, data: rows.map((r) => r.redeems) },
+        {
+          name: '核销金额',
+          type: 'line',
+          smooth: true,
+          yAxisIndex: 1,
+          data: rows.map((r) => r.redeemAmount),
+        },
+      ],
+    };
+  }, [analytics]);
+
+  const opsByCityOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byCity ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['合伙人', '门店', '核销笔数'] },
+      grid: { left: 48, right: 20, top: 40, bottom: 48 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.cityName),
+        axisLabel: { interval: 0, rotate: rows.length > 4 ? 30 : 0 },
+      },
+      yAxis: { type: 'value', minInterval: 1 },
+      series: [
+        { name: '合伙人', type: 'bar', data: rows.map((r) => r.partners), barMaxWidth: 28 },
+        { name: '门店', type: 'bar', data: rows.map((r) => r.stores), barMaxWidth: 28 },
+        { name: '核销笔数', type: 'bar', data: rows.map((r) => r.redeems), barMaxWidth: 28 },
+      ],
+    };
+  }, [analytics]);
+
+  const opsByPartnerOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byPartner ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['门店', '核销笔数', '核销金额'] },
+      grid: { left: 48, right: 48, top: 40, bottom: 64 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.companyName),
+        axisLabel: { interval: 0, rotate: rows.length > 3 ? 30 : 0 },
+      },
+      yAxis: [
+        { type: 'value', name: '数量', minInterval: 1 },
+        { type: 'value', name: '金额' },
+      ],
+      series: [
+        { name: '门店', type: 'bar', data: rows.map((r) => r.stores), barMaxWidth: 28 },
+        { name: '核销笔数', type: 'bar', data: rows.map((r) => r.redeems), barMaxWidth: 28 },
+        {
+          name: '核销金额',
+          type: 'line',
+          yAxisIndex: 1,
+          data: rows.map((r) => r.redeemAmount),
+        },
+      ],
+    };
+  }, [analytics]);
+
+  const redeemByCityOption = useMemo<EChartsOption>(() => {
+    const rows = analytics?.byCity ?? [];
+    return {
+      tooltip: { trigger: 'axis' },
+      legend: { data: ['核销笔数', '核销金额'] },
+      grid: { left: 48, right: 48, top: 40, bottom: 48 },
+      xAxis: {
+        type: 'category',
+        data: rows.map((r) => r.cityName),
+        axisLabel: { interval: 0, rotate: rows.length > 4 ? 30 : 0 },
+      },
+      yAxis: [
+        { type: 'value', name: '笔数', minInterval: 1 },
+        { type: 'value', name: '金额' },
+      ],
+      series: [
+        { name: '核销笔数', type: 'bar', data: rows.map((r) => r.redeems), barMaxWidth: 36 },
+        {
+          name: '核销金额',
+          type: 'line',
+          yAxisIndex: 1,
+          data: rows.map((r) => r.redeemAmount),
+        },
+      ],
+    };
+  }, [analytics]);
+
   return (
     <div>
       <Typography.Title level={4}>数据概览</Typography.Title>
@@ -176,6 +453,237 @@ export default function DashboardPage() {
         </Col>
       </Row>
 
+      <Card
+        title="数据统计筛选"
+        style={{ marginBottom: 24 }}
+        extra={
+          <Button
+            icon={<ReloadOutlined />}
+            size="small"
+            onClick={() => void loadAnalytics(filters)}
+          >
+            刷新
+          </Button>
+        }
+      >
+        <Form
+          form={filterForm}
+          layout="inline"
+          initialValues={{ range: filters.range }}
+          onFinish={applyFilters}
+        >
+          <Form.Item name="range" label="日期" rules={[{ required: true, message: '请选择日期' }]}>
+            <DatePicker.RangePicker allowClear={false} />
+          </Form.Item>
+          <Form.Item name="cityId" label="城市">
+            <Select
+              allowClear
+              placeholder="全部开城"
+              style={{ width: 160 }}
+              options={[
+                { value: 'none', label: '未选城' },
+                ...cities.map((c) => ({ value: c.id, label: c.name })),
+              ]}
+            />
+          </Form.Item>
+          <Form.Item name="promoCodeId" label="推广码">
+            <Select
+              allowClear
+              placeholder="全部来源"
+              style={{ width: 200 }}
+              options={[
+                { value: 'none', label: '自然量 / 无推广码' },
+                ...promos.map((p) => ({ value: p.id, label: `${p.name}（${p.code}）` })),
+              ]}
+            />
+          </Form.Item>
+          <Form.Item name="partnerAccountId" label="合伙人">
+            <Select
+              allowClear
+              placeholder="全部合伙人"
+              style={{ width: 200 }}
+              options={partners.map((p) => ({
+                value: p.id,
+                label: p.companyName || p.name,
+              }))}
+            />
+          </Form.Item>
+          <Form.Item>
+            <Button type="primary" htmlType="submit">查询</Button>
+          </Form.Item>
+        </Form>
+      </Card>
+
+      <Card
+        title="用户 / 订单统计"
+        style={{ marginBottom: 24 }}
+        extra={
+          <Space>
+            <Link to={`/orders?${ordersDrillQs}`}>查看订单</Link>
+            <Link to="/users">查看用户</Link>
+          </Space>
+        }
+      >
+        <Row gutter={[16, 16]} style={{ marginBottom: 16 }}>
+          <Col xs={24} sm={8}>
+            <Statistic title="区间新增用户" value={analytics?.summary.users ?? 0} />
+          </Col>
+          <Col xs={24} sm={8}>
+            <Statistic title="区间订单数" value={analytics?.summary.orders ?? 0} />
+          </Col>
+          <Col xs={24} sm={8}>
+            <Statistic title="区间付费用户" value={analytics?.summary.payingUsers ?? 0} />
+          </Col>
+        </Row>
+
+        <Row gutter={[16, 16]}>
+          <Col xs={24}>
+            <Card type="inner" title="按日趋势" loading={analyticsLoading} size="small">
+              <ReactECharts option={byDateOption} style={{ height: 320 }} notMerge />
+            </Card>
+          </Col>
+          <Col xs={24} lg={12}>
+            <Card
+              type="inner"
+              title="按城市（点击柱联动筛选）"
+              loading={analyticsLoading}
+              size="small"
+            >
+              <ReactECharts
+                option={byCityOption}
+                style={{ height: 300 }}
+                notMerge
+                onEvents={{
+                  click: (params: { name?: string }) => {
+                    const row = (analytics?.byCity ?? []).find((r) => r.cityName === params.name);
+                    if (row) setCityFilter(row.cityId);
+                  },
+                }}
+              />
+            </Card>
+          </Col>
+          <Col xs={24} lg={12}>
+            <Card
+              type="inner"
+              title="按推广码（点击柱联动筛选）"
+              loading={analyticsLoading}
+              size="small"
+            >
+              <ReactECharts
+                option={byPromoOption}
+                style={{ height: 300 }}
+                notMerge
+                onEvents={{
+                  click: (params: { name?: string }) => {
+                    const row = (analytics?.byPromo ?? []).find(
+                      (r) => (r.name || r.code) === params.name,
+                    );
+                    if (row) setPromoFilter(row.promoCodeId ?? 'none');
+                  },
+                }}
+              />
+            </Card>
+          </Col>
+        </Row>
+      </Card>
+
+      <Card
+        title="合伙人 / 门店 / 核销统计"
+        style={{ marginBottom: 24 }}
+        extra={
+          <Space>
+            <Link to="/city-partners">查看合伙人</Link>
+            <Link to="/stores">查看门店</Link>
+            <Link to="/redeem-records">查看核销</Link>
+          </Space>
+        }
+      >
+        <Row gutter={[16, 16]} style={{ marginBottom: 16 }}>
+          <Col xs={24} sm={6}>
+            <Statistic title="区间新增合伙人" value={analytics?.summary.partners ?? 0} />
+          </Col>
+          <Col xs={24} sm={6}>
+            <Statistic title="区间新签门店" value={analytics?.summary.stores ?? 0} />
+          </Col>
+          <Col xs={24} sm={6}>
+            <Statistic title="区间核销笔数" value={analytics?.summary.redeems ?? 0} />
+          </Col>
+          <Col xs={24} sm={6}>
+            <Statistic title="区间核销金额" value={analytics?.summary.redeemAmount ?? 0} precision={2} />
+          </Col>
+        </Row>
+
+        <Row gutter={[16, 16]}>
+          <Col xs={24}>
+            <Card type="inner" title="按日趋势（合伙人 / 门店 / 核销）" loading={analyticsLoading} size="small">
+              <ReactECharts option={opsByDateOption} style={{ height: 320 }} notMerge />
+            </Card>
+          </Col>
+          <Col xs={24} lg={12}>
+            <Card
+              type="inner"
+              title="按城市（点击柱联动筛选）"
+              loading={analyticsLoading}
+              size="small"
+            >
+              <ReactECharts
+                option={opsByCityOption}
+                style={{ height: 300 }}
+                notMerge
+                onEvents={{
+                  click: (params: { name?: string }) => {
+                    const row = (analytics?.byCity ?? []).find((r) => r.cityName === params.name);
+                    if (row) setCityFilter(row.cityId);
+                  },
+                }}
+              />
+            </Card>
+          </Col>
+          <Col xs={24} lg={12}>
+            <Card
+              type="inner"
+              title="按城市核销金额"
+              loading={analyticsLoading}
+              size="small"
+            >
+              <ReactECharts
+                option={redeemByCityOption}
+                style={{ height: 300 }}
+                notMerge
+                onEvents={{
+                  click: (params: { name?: string }) => {
+                    const row = (analytics?.byCity ?? []).find((r) => r.cityName === params.name);
+                    if (row) setCityFilter(row.cityId);
+                  },
+                }}
+              />
+            </Card>
+          </Col>
+          <Col xs={24}>
+            <Card
+              type="inner"
+              title="按合伙人（门店 / 核销，点击联动筛选）"
+              loading={analyticsLoading}
+              size="small"
+            >
+              <ReactECharts
+                option={opsByPartnerOption}
+                style={{ height: 320 }}
+                notMerge
+                onEvents={{
+                  click: (params: { name?: string }) => {
+                    const row = (analytics?.byPartner ?? []).find(
+                      (r) => r.companyName === params.name,
+                    );
+                    if (row) setPartnerFilter(row.partnerAccountId);
+                  },
+                }}
+              />
+            </Card>
+          </Col>
+        </Row>
+      </Card>
+
       <Row gutter={[16, 16]} style={{ marginBottom: 24 }}>
         <Col xs={24} sm={12} lg={8}>
           <Card

apps/admin-web/src/pages/OrdersPage.tsx

@@ -1,4 +1,5 @@
 import { useCallback, useEffect, useMemo, useState } from 'react';
+import { Link } from 'react-router-dom';
 import {
   Alert,
   Button,
@@ -24,9 +25,11 @@ import {
   DELIVERY_PROVIDER_LABELS,
   ORDER_STATUS_COLORS,
   ORDER_STATUS_LABELS,
+  ORDER_STATUS_OPERATOR_LABELS,
   fmtTime,
 } from '../lib/constants';
 import { FULFILLMENT_HOLD_REASON_LABELS } from '@dukang/shared-types';
+import ProxyOrderModal from '../components/ProxyOrderModal';
 
 type ShipDefaults = {
   provider: string;
@@ -102,7 +105,13 @@ type OrderDetail = AdminOrderRow & {
   listUnitPrice?: number;
   items?: AdminOrderItem[];
   payment?: Record<string, unknown> | null;
-  statusLogs?: Array<{ fromStatus: string | null; toStatus: string; createdAt: string }>;
+  statusLogs?: Array<{
+    fromStatus: string | null;
+    toStatus: string;
+    operator?: string | null;
+    remark?: string | null;
+    createdAt: string;
+  }>;
   benefitCoupons?: Array<Record<string, unknown>>;
   redeemSummary?: OrderRedeemSummary | null;
   redeemRecords?: OrderRedeemRecord[];
@@ -167,6 +176,7 @@ export default function OrdersPage() {
   const [selectedRowKeys, setSelectedRowKeys] = useState<string[]>([]);
   const [batchDeleteOpen, setBatchDeleteOpen] = useState(false);
   const [batchDeleting, setBatchDeleting] = useState(false);
+  const [deletingId, setDeletingId] = useState<string | null>(null);
   const [shipDefaults, setShipDefaults] = useState<ShipDefaults | null>(null);
   const [shipping, setShipping] = useState(false);
   const [logisticsShipping, setLogisticsShipping] = useState(false);
@@ -175,7 +185,9 @@ export default function OrdersPage() {
   const [shipTarget, setShipTarget] = useState<OrderDetail | null>(null);
   const [shipMode, setShipMode] = useState<ShipMode>('EXPRESS');
   const [warehouses, setWarehouses] = useState<WarehouseOption[]>([]);
+  const [proxyOpen, setProxyOpen] = useState(false);
   const canDeleteOrders = (profile?.permissionKeys ?? []).includes('orders_delete');
+  const canProxyOrder = (profile?.permissionKeys ?? []).includes('orders');
 
   const selectedOrders = useMemo(
     () => (data?.items ?? []).filter((row) => selectedRowKeys.includes(row.id)),
@@ -207,6 +219,7 @@ export default function OrdersPage() {
       const qs = new URLSearchParams({ page: String(page), pageSize: String(pageSize) });
       if (values.orderNo) qs.set('orderNo', values.orderNo);
       if (values.status) qs.set('status', values.status);
+      if (values.orderType) qs.set('orderType', values.orderType);
       if (values.cityId) qs.set('cityId', values.cityId);
       if (values.receiverPhone) qs.set('receiverPhone', values.receiverPhone);
       if (values.fulfillmentHold) qs.set('fulfillmentHold', 'true');
@@ -379,6 +392,43 @@ export default function OrdersPage() {
     }
   }
 
+  function askDeleteOrder(id: string, orderNo?: string) {
+    Modal.confirm({
+      title: '确认删除订单？',
+      content: (
+        <div>
+          <p>将永久删除订单{orderNo ? ` ${orderNo}` : ''} 及其配送、权益券、核销、发票等关联数据。</p>
+          <p style={{ color: 'var(--ant-color-error)', marginBottom: 0 }}>此操作不可恢复，请确认不是真实线上订单。</p>
+        </div>
+      ),
+      okText: '确认删除',
+      okType: 'danger',
+      cancelText: '取消',
+      onOk: () => deleteOrder(id),
+    });
+  }
+
+  async function deleteOrder(id: string) {
+    setDeletingId(id);
+    try {
+      const res = await request<{ deleted: number; message: string }>(`/admin/orders/${id}`, {
+        method: 'DELETE',
+      });
+      message.success(res.message || '订单已删除');
+      if (detail?.id === id) {
+        setDrawerOpen(false);
+        setDetail(null);
+      }
+      setSelectedRowKeys((prev) => prev.filter((k) => k !== id));
+      void load();
+    } catch (e) {
+      message.error(e instanceof Error ? e.message : '删除失败');
+      throw e;
+    } finally {
+      setDeletingId(null);
+    }
+  }
+
   const columns: ColumnsType<AdminOrderRow> = [
     { title: '订单号', dataIndex: 'orderNo', width: 180 },
     {
@@ -408,6 +458,11 @@ export default function OrdersPage() {
         <Space size={4} wrap>
           <Tag color={ORDER_STATUS_COLORS[s] || 'default'}>{ORDER_STATUS_LABELS[s] || s}</Tag>
           {row.fulfillmentHold ? <Tag color="orange">大单待确认</Tag> : null}
+          {row.orderType === 'PROXY' || row.isProxyOrder ? (
+            <Tag color="purple" title={row.proxyPartnerName || undefined}>
+              代下单
+            </Tag>
+          ) : null}
         </Space>
       ),
     },
@@ -415,7 +470,8 @@ export default function OrdersPage() {
       title: '配送',
       dataIndex: 'deliveryType',
       width: 90,
-      render: (v) => (v === 'LOCAL' ? '同城' : '跨城'),
+      render: (v) =>
+        v === 'ON_SITE_PICKUP' ? '现场提货' : v === 'LOCAL' ? '同城' : '跨城',
     },
     { title: '实付', dataIndex: 'payAmount', width: 90, render: (v) => `¥${v}` },
     { title: '收货人', dataIndex: 'receiverName', width: 90 },
@@ -439,7 +495,7 @@ export default function OrdersPage() {
     },
     {
       title: '操作',
-      width: 140,
+      width: 180,
       fixed: 'right',
       render: (_, row) => (
         <Space size={0}>
@@ -451,6 +507,17 @@ export default function OrdersPage() {
               配送
             </Button>
           )}
+          {canDeleteOrders && (
+            <Button
+              type="link"
+              size="small"
+              danger
+              loading={deletingId === row.id}
+              onClick={() => askDeleteOrder(row.id, row.orderNo)}
+            >
+              删除
+            </Button>
+          )}
         </Space>
       ),
     },
@@ -460,16 +527,38 @@ export default function OrdersPage() {
     <div>
       <Space style={{ marginBottom: 16, width: '100%', justifyContent: 'space-between' }}>
         <Typography.Title level={4} style={{ margin: 0 }}>订单监控</Typography.Title>
-        {canDeleteOrders ? (
-          <Button
-            danger
-            disabled={!selectedRowKeys.length}
-            onClick={() => setBatchDeleteOpen(true)}
-          >
-            批量删除{selectedRowKeys.length ? ` (${selectedRowKeys.length})` : ''}
-          </Button>
-        ) : null}
+        <Space>
+          {canProxyOrder ? (
+            <Button type="primary" onClick={() => setProxyOpen(true)}>
+              代下单
+            </Button>
+          ) : null}
+          {canDeleteOrders ? (
+            <Button
+              danger
+              disabled={!selectedRowKeys.length}
+              onClick={() => setBatchDeleteOpen(true)}
+            >
+              批量删除{selectedRowKeys.length ? ` (${selectedRowKeys.length})` : ''}
+            </Button>
+          ) : null}
+        </Space>
       </Space>
+
+      {!canDeleteOrders && profile ? (
+        <Alert
+          type="info"
+          showIcon
+          style={{ marginBottom: 16 }}
+          message="当前账号无「删除订单」权限"
+          description={
+            <span>
+              非超管账号需在 <Link to="/hq-permissions">权限分配</Link> 中勾选危险操作「删除订单」。
+            </span>
+          }
+        />
+      ) : null}
+
       <Form form={form} layout="inline" style={{ marginBottom: 16 }} onFinish={() => { setPage(1); void load(); }}>
         <Form.Item name="orderNo" label="订单号">
           <Input placeholder="DK..." allowClear />
@@ -477,6 +566,17 @@ export default function OrdersPage() {
         <Form.Item name="status" label="状态">
           <Select allowClear style={{ width: 120 }} options={Object.entries(ORDER_STATUS_LABELS).map(([value, label]) => ({ value, label }))} />
         </Form.Item>
+        <Form.Item name="orderType" label="类型">
+          <Select
+            allowClear
+            style={{ width: 120 }}
+            placeholder="全部"
+            options={[
+              { value: 'NORMAL', label: '普通订单' },
+              { value: 'PROXY', label: '代下单' },
+            ]}
+          />
+        </Form.Item>
         <Form.Item name="cityId" label="城市">
           <Select
             allowClear
@@ -540,6 +640,15 @@ export default function OrdersPage() {
                 配送发货
               </Button>
             )}
+            {canDeleteOrders && (
+              <Button
+                danger
+                loading={deletingId === detail.id}
+                onClick={() => askDeleteOrder(detail.id, detail.orderNo)}
+              >
+                删除订单
+              </Button>
+            )}
             <Typography.Text type="secondary">调试改状态</Typography.Text>
             <Select
               value={detail.status}
@@ -581,8 +690,16 @@ export default function OrdersPage() {
                         '大单待确认'}
                     </Tag>
                   ) : null}
+                  {detail.orderType === 'PROXY' || detail.isProxyOrder ? (
+                    <Tag color="purple">代下单</Tag>
+                  ) : null}
                 </Space>
               </Descriptions.Item>
+              {detail.orderType === 'PROXY' || detail.isProxyOrder || detail.proxyPartnerName ? (
+                <Descriptions.Item label="代下单人">
+                  {[detail.proxyPartnerName, detail.proxyPartnerPhone].filter(Boolean).join(' / ') || '—'}
+                </Descriptions.Item>
+              ) : null}
               <Descriptions.Item label="用户">{detail.user?.userNo} / {detail.user?.nickname}</Descriptions.Item>
               <Descriptions.Item label="商品额">¥{detail.productAmount}</Descriptions.Item>
               <Descriptions.Item label="实付">¥{detail.payAmount}</Descriptions.Item>
@@ -765,13 +882,40 @@ export default function OrdersPage() {
                 <Typography.Title level={5} style={{ marginTop: 16 }}>状态流转</Typography.Title>
                 <Table
                   size="small"
-                  rowKey="createdAt"
+                  rowKey={(_, i) => String(i)}
                   pagination={false}
                   dataSource={detail.statusLogs}
                   columns={[
-                    { title: '从', dataIndex: 'fromStatus', render: (v) => v || '—' },
-                    { title: '到', dataIndex: 'toStatus', render: (v) => ORDER_STATUS_LABELS[v] || v },
-                    { title: '时间', dataIndex: 'createdAt', render: (v) => new Date(v).toLocaleString('zh-CN') },
+                    {
+                      title: '从',
+                      dataIndex: 'fromStatus',
+                      width: 100,
+                      render: (v) => (v ? ORDER_STATUS_LABELS[v] || v : '—'),
+                    },
+                    {
+                      title: '到',
+                      dataIndex: 'toStatus',
+                      width: 100,
+                      render: (v) => ORDER_STATUS_LABELS[v] || v,
+                    },
+                    {
+                      title: '操作人',
+                      dataIndex: 'operator',
+                      width: 120,
+                      render: (v) => ORDER_STATUS_OPERATOR_LABELS[v] || v || '—',
+                    },
+                    {
+                      title: '备注',
+                      dataIndex: 'remark',
+                      ellipsis: true,
+                      render: (v) => v || '—',
+                    },
+                    {
+                      title: '时间',
+                      dataIndex: 'createdAt',
+                      width: 170,
+                      render: (v) => new Date(v).toLocaleString('zh-CN'),
+                    },
                   ]}
                 />
               </>
@@ -1078,6 +1222,16 @@ export default function OrdersPage() {
           ]}
         />
       </Modal>
+
+      <ProxyOrderModal
+        open={proxyOpen}
+        onClose={() => setProxyOpen(false)}
+        onSuccess={(order) => {
+          setProxyOpen(false);
+          void load();
+          void openDetail(order.id);
+        }}
+      />
     </div>
   );
 }

apps/admin-web/src/pages/ProductsPage.tsx

@@ -1,4 +1,4 @@
-import { useState } from 'react';
+import { useMemo, useRef, useState } from 'react';
 import {
   Button, Descriptions, Divider, Drawer, Form, Input, InputNumber, Modal, Popconfirm, Select, Space,
   Switch, Table, Tabs, Tag, Typography, message,
@@ -32,6 +32,8 @@ type Row = {
   status: string;
   sortOrder: number;
   allowOnSitePickup?: boolean;
+  visibilityWhitelistEnabled?: boolean;
+  visibilityPhones?: string[];
   mainImageUrl?: string | null;
   carouselUrls?: string[];
   detailImageUrls?: string[];
@@ -51,6 +53,8 @@ type ProductFormValues = {
   status?: string;
   sortOrder?: number;
   allowOnSitePickup?: boolean;
+  visibilityWhitelistEnabled?: boolean;
+  visibilityPhones?: string[];
   coverUrl?: string;
   carouselUrls?: string[];
   detailImageUrls?: string[];
@@ -59,6 +63,13 @@ type ProductFormValues = {
   features?: Array<{ icon?: string; title?: string; desc?: string }>;
 };
 
+type UserPickRow = {
+  id: string;
+  phone?: string | null;
+  nickname?: string | null;
+  userNo?: string;
+};
+
 function mapDetailToForm(d: Record<string, unknown>) {
   const detail = (d.detailContent ?? {}) as ProductDetailContentDto;
   return {
@@ -66,6 +77,8 @@ function mapDetailToForm(d: Record<string, unknown>) {
     coverUrl: (d as { mainImageUrl?: string }).mainImageUrl,
     carouselUrls: ((d as Row).carouselUrls?.length ? (d as Row).carouselUrls : ['']) as string[],
     detailImageUrls: ((d as Row).detailImageUrls?.length ? (d as Row).detailImageUrls : ['']) as string[],
+    visibilityWhitelistEnabled: !!(d as Row).visibilityWhitelistEnabled,
+    visibilityPhones: ((d as Row).visibilityPhones ?? []) as string[],
     storyTitle: detail.storyTitle ?? '',
     storyText: detail.storyText ?? '',
     features: detail.features?.length
@@ -91,6 +104,10 @@ function buildProductPayload(v: ProductFormValues) {
     features: features.length ? features : undefined,
   };
 
+  const visibilityPhones = (v.visibilityPhones ?? [])
+    .map((p) => String(p || '').replace(/\D/g, '').trim())
+    .filter(Boolean);
+
   return {
     skuCode: v.skuCode,
     barcode69: v.barcode69,
@@ -103,6 +120,8 @@ function buildProductPayload(v: ProductFormValues) {
     status: v.status,
     sortOrder: v.sortOrder,
     allowOnSitePickup: !!v.allowOnSitePickup,
+    visibilityWhitelistEnabled: !!v.visibilityWhitelistEnabled,
+    visibilityPhones,
     coverUrl: v.coverUrl,
     carouselUrls,
     detailImageUrls,
@@ -183,7 +202,88 @@ function ProductDetailFields({ form, aromaType }: { form: FormInstance; aromaTyp
   );
 }
 
-function BaseInfoFields({ mode }: { mode: 'create' | 'edit' }) {
+function VisibilityWhitelistFields({ form }: { form: FormInstance }) {
+  const [userOptions, setUserOptions] = useState<UserPickRow[]>([]);
+  const [userSearching, setUserSearching] = useState(false);
+  const searchTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  async function searchUsers(keyword: string) {
+    const q = keyword.trim();
+    if (searchTimer.current) clearTimeout(searchTimer.current);
+    if (!q) {
+      setUserOptions([]);
+      return;
+    }
+    searchTimer.current = setTimeout(() => {
+      void (async () => {
+        setUserSearching(true);
+        try {
+          const qs = new URLSearchParams({ page: '1', pageSize: '20', phone: q });
+          const res = await request<{ items: UserPickRow[] }>(`/admin/users?${qs}`);
+          setUserOptions((res.items ?? []).filter((u) => !!u.phone));
+        } catch {
+          setUserOptions([]);
+        } finally {
+          setUserSearching(false);
+        }
+      })();
+    }, 300);
+  }
+
+  const enabled = Form.useWatch('visibilityWhitelistEnabled', form);
+
+  return (
+    <>
+      <Form.Item
+        name="visibilityWhitelistEnabled"
+        label="可见白名单"
+        valuePropName="checked"
+        extra="开启后仅名单内手机号在 C 端可见/可购，用于在线测试"
+      >
+        <Switch checkedChildren="开" unCheckedChildren="关" />
+      </Form.Item>
+      {enabled ? (
+        <>
+          <Form.Item
+            name="visibilityPhones"
+            label="白名单手机号"
+            rules={[{ required: true, message: '请至少添加一个手机号' }]}
+            extra="可直接输入多个手机号回车添加，或从下方用户库选择"
+          >
+            <Select
+              mode="tags"
+              tokenSeparators={[',', ' ', '，', ';', '；']}
+              placeholder="输入手机号后回车"
+              style={{ width: '100%' }}
+            />
+          </Form.Item>
+          <Form.Item label="从用户库添加">
+            <Select
+              showSearch
+              filterOption={false}
+              placeholder="按手机号搜索用户"
+              loading={userSearching}
+              options={userOptions.map((u) => ({
+                value: u.phone!,
+                label: `${u.phone}${u.nickname ? ` · ${u.nickname}` : ''}${u.userNo ? `（${u.userNo}）` : ''}`,
+              }))}
+              onSearch={searchUsers}
+              onSelect={(phone: string) => {
+                const cur = (form.getFieldValue('visibilityPhones') as string[] | undefined) ?? [];
+                if (!cur.includes(phone)) {
+                  form.setFieldsValue({ visibilityPhones: [...cur, phone] });
+                }
+              }}
+              notFoundContent={userSearching ? '搜索中…' : '输入手机号搜索'}
+            />
+          </Form.Item>
+        </>
+      ) : null}
+    </>
+  );
+}
+
+function BaseInfoFields({ mode, form }: { mode: 'create' | 'edit'; form: FormInstance }) {
   return (
     <>
       {mode === 'create' && (
@@ -223,6 +323,7 @@ function BaseInfoFields({ mode }: { mode: 'create' | 'edit' }) {
       <Form.Item name="allowOnSitePickup" label="允许现场取货" valuePropName="checked">
         <Switch checkedChildren="开" unCheckedChildren="关" />
       </Form.Item>
+      <VisibilityWhitelistFields form={form} />
       <Form.Item name="coverUrl" label="封面">
         <OssUpload bizType="COVER" mediaType="IMAGE" />
       </Form.Item>
@@ -264,7 +365,7 @@ export default function ProductsPage() {
     }
   }
 
-  const columns: ColumnsType<Row> = [
+  const columns: ColumnsType<Row> = useMemo(() => [
     { title: 'SKU', dataIndex: 'skuCode', width: 90 },
     { title: '商品名', dataIndex: 'name', width: 180, ellipsis: true },
     { title: '香型', dataIndex: 'aromaType', width: 80, render: (v) => AROMA_TYPE_LABELS[v] || v },
@@ -274,6 +375,13 @@ export default function ProductsPage() {
     { title: '状态', dataIndex: 'status', width: 80, render: (s) => (
       <Tag color={s === 'ON_SALE' ? 'green' : undefined}>{PRODUCT_STATUS_LABELS[s] || s}</Tag>
     ) },
+    {
+      title: '白名单',
+      dataIndex: 'visibilityWhitelistEnabled',
+      width: 90,
+      render: (v: boolean, row) =>
+        v ? <Tag color="orange">限{row.visibilityPhones?.length ?? 0}人</Tag> : <Tag>公开</Tag>,
+    },
     {
       title: '现场取货',
       dataIndex: 'allowOnSitePickup',
@@ -305,7 +413,7 @@ export default function ProductsPage() {
         </Space>
       ),
     },
-  ];
+  ], [detail, editForm]);
 
   return (
     <div>
@@ -323,7 +431,7 @@ export default function ProductsPage() {
         </Form.Item>
         <Form.Item><Button type="primary" htmlType="submit">查询</Button></Form.Item>
       </Form>
-      <Table rowKey="id" className="admin-table-nowrap" loading={loading} columns={columns} dataSource={data?.items ?? []} scroll={{ x: 1140 }}
+      <Table rowKey="id" className="admin-table-nowrap" loading={loading} columns={columns} dataSource={data?.items ?? []} scroll={{ x: 1240 }}
         pagination={{ current: page, pageSize, total: data?.total ?? 0, showSizeChanger: true, onChange: (p, ps) => { setPage(p); setPageSize(ps); } }} />
       <Drawer title="编辑商品" width={720} open={drawerOpen} onClose={() => setDrawerOpen(false)}
         extra={detail && (
@@ -345,7 +453,7 @@ export default function ProductsPage() {
             </Descriptions>
             <Form form={editForm} layout="vertical">
               <Tabs items={[
-                { key: 'base', label: '基础信息', children: <BaseInfoFields mode="edit" /> },
+                { key: 'base', label: '基础信息', children: <BaseInfoFields mode="edit" form={editForm} /> },
                 {
                   key: 'detail',
                   label: '详情页',
@@ -372,11 +480,12 @@ export default function ProductsPage() {
       }} width={720}>
         <Form form={createForm} layout="vertical" initialValues={{
           aromaType: 'QINGXIANG', status: 'DRAFT', sortOrder: 0, allowOnSitePickup: false,
+          visibilityWhitelistEnabled: false, visibilityPhones: [],
           carouselUrls: [''], detailImageUrls: [''],
           features: [{ icon: 'water_drop', title: '', desc: '' }],
         }}>
           <Tabs items={[
-            { key: 'base', label: '基础信息', children: <BaseInfoFields mode="create" /> },
+            { key: 'base', label: '基础信息', children: <BaseInfoFields mode="create" form={createForm} /> },
             {
               key: 'detail',
               label: '详情页',

apps/admin-web/src/pages/StoresPage.tsx

@@ -306,7 +306,14 @@ type StoreRow = {
   category?: { id: string; name: string; parentId?: string | null } | null;
 };
 
-type PartnerOption = { id: string; companyName: string };
+type PartnerOption = { id: string; companyName: string; name?: string };
+
+function partnerOptionLabel(p: PartnerOption): string {
+  const company = (p.companyName || '').trim();
+  const person = (p.name || '').trim();
+  if (company && person) return `${company}-${person}`;
+  return company || person || p.id;
+}
 type CityOption = {
   id: string;
   name: string;
@@ -799,7 +806,7 @@ export default function StoresPage() {
             optionFilterProp="label"
             style={{ width: 180 }}
             placeholder="全部"
-            options={filterPartners.map((p) => ({ value: p.id, label: p.companyName || p.id }))}
+            options={filterPartners.map((p) => ({ value: p.id, label: partnerOptionLabel(p) }))}
           />
         </Form.Item>
         <Form.Item name="status" label="营业状态">
@@ -1129,7 +1136,7 @@ export default function StoresPage() {
                   loading={optionsLoading}
                   optionFilterProp="label"
                   placeholder={optionsLoading ? '加载中…' : '请选择开城合伙人'}
-                  options={partners.map((p) => ({ value: p.id, label: p.companyName }))}
+                  options={partners.map((p) => ({ value: p.id, label: partnerOptionLabel(p) }))}
                   onChange={(partnerAccountId) => {
                     const codes = createForm.getFieldValue('regionCodes') as string[] | undefined;
                     if (codes?.length === 3) bindRegionSelection(codes, partnerAccountId);

apps/h5-partner/package.json

@@ -9,15 +9,17 @@
     "lint": "echo ok"
   },
   "dependencies": {
-    "@dukang/shared-ui": "workspace:*",
     "@dukang/shared-types": "workspace:*",
+    "@dukang/shared-ui": "workspace:*",
     "@dukang/weixin-sdk": "workspace:*",
     "element-china-area-data": "^6.1.0",
+    "qrcode": "^1.5.4",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-router-dom": "^6.26.0"
   },
   "devDependencies": {
+    "@types/qrcode": "^1.5.6",
     "@types/react": "^18.3.3",
     "@types/react-dom": "^18.3.0",
     "@vitejs/plugin-react": "^4.3.1",

apps/h5-partner/public/MP_verify_ayPJ4CQqbUcec3jX.txt

@@ -0,0 +1 @@
+ayPJ4CQqbUcec3jX

apps/h5-partner/src/PartnerAppRoutes.tsx

@@ -16,6 +16,8 @@ import SettlementPage from './pages/SettlementPage';
 import WeeklyReportPage from './pages/WeeklyReportPage';
 import ProxyOrderPage from './pages/ProxyOrderPage';
 import ProxyOrderProductsPage from './pages/ProxyOrderProductsPage';
+import ProxyOrderListPage from './pages/ProxyOrderListPage';
+import ProxyOrderDetailPage from './pages/ProxyOrderDetailPage';
 import StaffListPage from './pages/StaffListPage';
 import StaffCreatePage from './pages/StaffCreatePage';
 import LeaderboardPage from './pages/LeaderboardPage';
@@ -33,6 +35,8 @@ function PrimaryRoutes() {
       <Route path="/center/settlement" element={<SettlementPage />} />
       <Route path="/center/staff" element={<StaffListPage />} />
       <Route path="/center/staff/new" element={<StaffCreatePage />} />
+      <Route path="/center/proxy-orders" element={<ProxyOrderListPage />} />
+      <Route path="/center/proxy-orders/:id" element={<ProxyOrderDetailPage />} />
       <Route path="/proxy-order" element={<ProxyOrderPage />} />
       <Route path="/proxy-order/products" element={<ProxyOrderProductsPage />} />
       <Route path="/reports/weekly" element={<WeeklyReportPage />} />

apps/h5-partner/src/components/AuthGate.tsx

@@ -1,5 +1,5 @@
 import { Navigate, useLocation } from 'react-router-dom';
-import { getPartnerProfile } from '../lib/api';
+import { getPartnerProfile, hasPartnerWxSession } from '../lib/api';
 import { usePartnerSession } from '../contexts/PartnerSessionContext';
 import { partnerHomePath } from '../lib/partnerAccess';
 
@@ -18,6 +18,10 @@ export default function AuthGate({ children }: { children: React.ReactNode }) {
   }
 
   if (!authenticated && !PUBLIC_PATHS.has(location.pathname)) {
+    const profile = getPartnerProfile();
+    if (profile && hasPartnerWxSession() && profile.hasWechat) {
+      return <Navigate to="/login?quick=1" replace state={{ from: location }} />;
+    }
     return <Navigate to="/login" replace state={{ from: location }} />;
   }
 

apps/h5-partner/src/components/TencentLocPickerOverlay.tsx

@@ -1,8 +1,9 @@
-import { useEffect, useRef, useState } from 'react';
+import { useEffect, useMemo, useState } from 'react';
+import type { ClientRuntimeConfig } from '@dukang/shared-types';
 import { request } from '../lib/api';
 import {
-  placeToPicked,
-  type LbsPlaceItem,
+  buildTencentLocPickerUrl,
+  parseTencentLocPickerMessage,
   type TencentPickedLocation,
 } from '../lib/tencentLocPicker';
 
@@ -12,117 +13,84 @@ type Props = {
   onPick: (loc: TencentPickedLocation) => void;
   latitude?: number | null;
   longitude?: number | null;
+  /** 保留兼容，iframe 选点不使用 */
   region?: string | null;
 };
 
+let cachedKey: string | null | undefined;
+
+async function loadTencentLbsKey(): Promise<string> {
+  if (cachedKey) return cachedKey;
+  const cfg = await request<ClientRuntimeConfig>('PARTNER_H5', '/common/client-config', {
+    silent: true,
+  });
+  const key = (cfg.tencentLbsKey || '').trim();
+  if (!key) {
+    throw new Error('未配置腾讯位置服务 Key，请联系管理员在系统设置中配置');
+  }
+  cachedKey = key;
+  return key;
+}
+
 export default function TencentLocPickerOverlay({
   open,
   onClose,
   onPick,
   latitude,
   longitude,
-  region,
 }: Props) {
-  const [keyword, setKeyword] = useState('');
-  const [items, setItems] = useState<LbsPlaceItem[]>([]);
+  const [key, setKey] = useState<string | null>(cachedKey ?? null);
   const [loading, setLoading] = useState(false);
+  const [error, setError] = useState('');
+  /** 选点结果仅存内存，界面不展示经纬度 */
   const [pending, setPending] = useState<TencentPickedLocation | null>(null);
-  const [hint, setHint] = useState('输入地点名称搜索');
-  const seqRef = useRef(0);
+  const [iframeReady, setIframeReady] = useState(false);
 
   useEffect(() => {
     if (!open) {
-      setKeyword('');
-      setItems([]);
       setPending(null);
-      setHint('输入地点名称搜索');
+      setIframeReady(false);
+      setError('');
       return;
     }
-    const lat = latitude != null ? Number(latitude) : NaN;
-    const lng = longitude != null ? Number(longitude) : NaN;
-    if (Number.isFinite(lat) && Number.isFinite(lng) && !(lat === 0 && lng === 0)) {
-      void loadNearby(lat, lng);
+    let cancelled = false;
+    if (key) return;
+    setLoading(true);
+    void loadTencentLbsKey()
+      .then((k) => {
+        if (!cancelled) setKey(k);
+      })
+      .catch((e) => {
+        if (!cancelled) setError(e instanceof Error ? e.message : '加载地图配置失败');
+      })
+      .finally(() => {
+        if (!cancelled) setLoading(false);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, key]);
+
+  useEffect(() => {
+    if (!open) return;
+    function onMessage(event: MessageEvent) {
+      const picked = parseTencentLocPickerMessage(event.data);
+      if (!picked) return;
+      setPending(picked);
     }
-    // eslint-disable-next-line react-hooks/exhaustive-deps
+    window.addEventListener('message', onMessage);
+    return () => window.removeEventListener('message', onMessage);
   }, [open]);
 
-  async function loadNearby(lat: number, lng: number) {
-    const seq = ++seqRef.current;
-    setLoading(true);
-    setHint('正在加载附近地点…');
-    try {
-      const res = await request<{ items: LbsPlaceItem[] }>(
-        'PARTNER_H5',
-        `/common/lbs/nearby?lat=${encodeURIComponent(String(lat))}&lng=${encodeURIComponent(String(lng))}`,
-        { silent: true },
-      );
-      if (seq !== seqRef.current) return;
-      setItems(res.items ?? []);
-      setHint(res.items?.length ? `附近 ${res.items.length} 个地点` : '附近暂无地点，请搜索');
-    } catch (e) {
-      if (seq !== seqRef.current) return;
-      setItems([]);
-      setHint(e instanceof Error ? e.message : '加载附近地点失败');
-    } finally {
-      if (seq === seqRef.current) setLoading(false);
-    }
-  }
-
-  async function runSearch() {
-    const trimmed = keyword.trim();
-    if (!trimmed) {
-      setHint('请输入搜索关键词');
-      return;
-    }
-    const seq = ++seqRef.current;
-    setLoading(true);
-    setHint('搜索中…');
-    try {
-      const params = new URLSearchParams({ keyword: trimmed });
-      if (region?.trim()) params.set('region', region.trim());
-      const lat = latitude != null ? Number(latitude) : NaN;
-      const lng = longitude != null ? Number(longitude) : NaN;
-      if (Number.isFinite(lat) && Number.isFinite(lng)) {
-        params.set('lat', String(lat));
-        params.set('lng', String(lng));
-      }
-      const res = await request<{ items: LbsPlaceItem[] }>(
-        'PARTNER_H5',
-        `/common/lbs/suggest?${params.toString()}`,
-        { silent: true },
-      );
-      if (seq !== seqRef.current) return;
-      setItems(res.items ?? []);
-      setHint(res.items?.length ? `找到 ${res.items.length} 个结果` : '无匹配结果');
-    } catch (e) {
-      if (seq !== seqRef.current) return;
-      setItems([]);
-      setHint(e instanceof Error ? e.message : '搜索失败');
-    } finally {
-      if (seq === seqRef.current) setLoading(false);
-    }
-  }
-
-  function useBrowserLocation() {
-    if (!navigator.geolocation) {
-      setHint('当前浏览器不支持定位');
-      return;
-    }
-    setLoading(true);
-    navigator.geolocation.getCurrentPosition(
-      (pos) => {
-        const lat = pos.coords.latitude;
-        const lng = pos.coords.longitude;
-        setPending({ latitude: lat, longitude: lng, name: '当前位置' });
-        void loadNearby(lat, lng);
-      },
-      () => {
-        setLoading(false);
-        setHint('定位失败，请检查定位权限');
-      },
-      { enableHighAccuracy: true, timeout: 12000 },
-    );
-  }
+  const src = useMemo(() => {
+    if (!key) return '';
+    const lat = latitude != null ? Number(latitude) : undefined;
+    const lng = longitude != null ? Number(longitude) : undefined;
+    return buildTencentLocPickerUrl(key, {
+      latitude: lat != null && Number.isFinite(lat) ? lat : undefined,
+      longitude: lng != null && Number.isFinite(lng) ? lng : undefined,
+    });
+  }, [key, latitude, longitude]);
 
   if (!open) return null;
 
@@ -134,6 +102,7 @@ export default function TencentLocPickerOverlay({
 
   return (
     <div
+      className="partner-locpicker-overlay"
       style={{
         position: 'fixed',
         inset: 0,
@@ -141,123 +110,124 @@ export default function TencentLocPickerOverlay({
         background: '#fff',
         display: 'flex',
         flexDirection: 'column',
+        height: '100dvh',
+        maxHeight: '-webkit-fill-available',
+        paddingTop: 'env(safe-area-inset-top)',
+        paddingBottom: 'env(safe-area-inset-bottom)',
+        boxSizing: 'border-box',
       }}
     >
       <div
         style={{
           display: 'flex',
-          alignItems: 'center',
-          justifyContent: 'space-between',
-          padding: '12px 16px',
+          flexDirection: 'column',
+          padding: '12px 12px 10px',
           borderBottom: '1px solid rgba(0,0,0,0.06)',
           flexShrink: 0,
-          gap: 8,
+          gap: 10,
+          background: '#fff',
         }}
       >
-        <button type="button" className="partner-btn-outline" style={{ padding: '6px 12px' }} onClick={onClose}>
-          关闭
-        </button>
-        <span style={{ fontWeight: 600 }}>地图选点</span>
-        <button
-          type="button"
-          className="partner-btn-primary"
-          style={{ padding: '6px 12px', opacity: pending ? 1 : 0.45, width: 'auto' }}
-          disabled={!pending}
-          onClick={confirmPick}
+        <h2
+          style={{
+            margin: 0,
+            textAlign: 'center',
+            fontWeight: 700,
+            fontSize: 17,
+            lineHeight: 1.3,
+          }}
         >
-          确认
-        </button>
-      </div>
-
-      <div style={{ padding: '12px 16px', borderBottom: '1px solid rgba(0,0,0,0.04)', flexShrink: 0 }}>
-        <div style={{ display: 'flex', gap: 8 }}>
-          <input
-            value={keyword}
-            onChange={(e) => setKeyword(e.target.value)}
-            onKeyDown={(e) => {
-              if (e.key === 'Enter') void runSearch();
-            }}
-            placeholder="输入小区 / 写字楼 / 门店名称"
-            style={{
-              flex: 1,
-              padding: '10px 12px',
-              border: '1px solid rgba(0,0,0,0.12)',
-              borderRadius: 8,
-              fontSize: 14,
-            }}
-          />
+          地图选点
+        </h2>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 10 }}>
           <button
             type="button"
             className="partner-btn-primary"
-            style={{ width: 'auto', padding: '8px 14px' }}
-            disabled={loading}
-            onClick={() => void runSearch()}
+            style={{
+              flex: 1,
+              padding: '12px 16px',
+              fontSize: 15,
+              fontWeight: 600,
+              opacity: pending ? 1 : 0.45,
+              width: 'auto',
+            }}
+            disabled={!pending}
+            onClick={confirmPick}
           >
-            搜索
+            确认
           </button>
-        </div>
-        <div style={{ display: 'flex', gap: 8, marginTop: 8, alignItems: 'center' }}>
           <button
             type="button"
             className="partner-btn-outline"
-            style={{ padding: '6px 12px' }}
-            disabled={loading}
-            onClick={useBrowserLocation}
+            style={{ padding: '12px 16px', minWidth: 72, flexShrink: 0 }}
+            onClick={onClose}
           >
-            定位当前位置
+            关闭
           </button>
-          <span className="label-md text-muted">{hint}</span>
         </div>
-        {pending ? (
-          <p className="label-md text-muted" style={{ margin: '8px 0 0' }}>
-            已选 {pending.latitude.toFixed(6)}, {pending.longitude.toFixed(6)}
-            {pending.name ? ` · ${pending.name}` : ''}
-          </p>
-        ) : null}
       </div>
 
-      <div style={{ flex: 1, minHeight: 0, overflow: 'auto', WebkitOverflowScrolling: 'touch' }}>
-        {loading && !items.length ? (
+      <p
+        className="label-md text-muted"
+        style={{
+          margin: 0,
+          padding: '8px 14px',
+          borderBottom: '1px solid rgba(0,0,0,0.04)',
+          flexShrink: 0,
+          fontSize: 12,
+        }}
+      >
+        {pending ? '已选定位置，请点右上角「确认」' : '在地图上点选或搜索地点，选中后点右上角「确认」'}
+      </p>
+
+      <div style={{ flex: 1, minHeight: 0, position: 'relative', background: '#f5f5f5' }}>
+        {loading ? (
           <p className="label-md text-muted" style={{ padding: 24, textAlign: 'center' }}>
-            加载中…
+            正在加载地图…
           </p>
-        ) : items.length ? (
-          <ul style={{ listStyle: 'none', margin: 0, padding: 0 }}>
-            {items.map((item) => {
-              const active =
-                pending?.latitude === item.latitude && pending?.longitude === item.longitude;
-              return (
-                <li key={`${item.id}-${item.latitude}-${item.longitude}`}>
-                  <button
-                    type="button"
-                    onClick={() => setPending(placeToPicked(item))}
-                    style={{
-                      width: '100%',
-                      textAlign: 'left',
-                      padding: '12px 16px',
-                      border: 0,
-                      borderBottom: '1px solid rgba(0,0,0,0.06)',
-                      background: active ? 'rgba(166, 29, 36, 0.06)' : '#fff',
-                      cursor: 'pointer',
-                    }}
-                  >
-                    <div style={{ fontWeight: 600, fontSize: 15 }}>{item.title}</div>
-                    <div className="label-md text-muted" style={{ marginTop: 4 }}>
-                      {item.address}
-                    </div>
-                    <div className="label-md text-muted" style={{ marginTop: 2, fontSize: 12 }}>
-                      {item.latitude.toFixed(6)}, {item.longitude.toFixed(6)}
-                    </div>
-                  </button>
-                </li>
-              );
-            })}
-          </ul>
-        ) : (
-          <p className="label-md text-muted" style={{ padding: 24, textAlign: 'center' }}>
-            {hint}
-          </p>
-        )}
+        ) : error ? (
+          <div style={{ padding: 24 }}>
+            <p className="label-md" style={{ color: 'var(--color-heritage-red, #a61d24)' }}>
+              {error}
+            </p>
+            <p className="label-md text-muted" style={{ marginTop: 12 }}>
+              请确认系统设置中已配置腾讯位置服务 Key，并白名单 apis.map.qq.com。
+            </p>
+          </div>
+        ) : src ? (
+          <>
+            {!iframeReady ? (
+              <p
+                className="label-md text-muted"
+                style={{
+                  position: 'absolute',
+                  inset: 0,
+                  display: 'flex',
+                  alignItems: 'center',
+                  justifyContent: 'center',
+                  margin: 0,
+                  zIndex: 1,
+                  pointerEvents: 'none',
+                }}
+              >
+                地图加载中…
+              </p>
+            ) : null}
+            <iframe
+              title="地图选点"
+              src={src}
+              allow="geolocation *"
+              onLoad={() => setIframeReady(true)}
+              style={{
+                width: '100%',
+                height: '100%',
+                border: 0,
+                display: 'block',
+                background: '#fff',
+              }}
+            />
+          </>
+        ) : null}
       </div>
     </div>
   );

apps/h5-partner/src/lib/api.ts

@@ -113,6 +113,10 @@ export function clearAuth(options?: { keepProfile?: boolean }) {
   }
 }
 
+export function getToken() {
+  return localStorage.getItem(ACCESS_TOKEN);
+}
+
 export function isLoggedIn() {
   return !!localStorage.getItem(ACCESS_TOKEN);
 }

apps/h5-partner/src/lib/proxyOrderDraft.ts

@@ -0,0 +1,56 @@
+import type { PartnerProxyDeliveryMode } from '@dukang/shared-types';
+
+const PROXY_ORDER_DRAFT_KEY = 'partner_proxy_order_draft_v2';
+
+export type ProxyOrderDraft = {
+  phone: string;
+  receiverName: string;
+  regionCodes: string[];
+  addressDetail: string;
+  productId: string;
+  quantity: number;
+  promoCodeId: string;
+  deliveryMode: PartnerProxyDeliveryMode;
+  autoReceive: boolean;
+};
+
+export function saveProxyOrderDraft(draft: ProxyOrderDraft) {
+  try {
+    sessionStorage.setItem(PROXY_ORDER_DRAFT_KEY, JSON.stringify(draft));
+  } catch {
+    /* ignore quota / private mode */
+  }
+}
+
+export function loadProxyOrderDraft(): ProxyOrderDraft | null {
+  try {
+    const raw = sessionStorage.getItem(PROXY_ORDER_DRAFT_KEY);
+    if (!raw) return null;
+    const parsed = JSON.parse(raw) as Partial<ProxyOrderDraft>;
+    if (!parsed || typeof parsed !== 'object') return null;
+    return {
+      phone: typeof parsed.phone === 'string' ? parsed.phone : '',
+      receiverName: typeof parsed.receiverName === 'string' ? parsed.receiverName : '',
+      regionCodes: Array.isArray(parsed.regionCodes)
+        ? parsed.regionCodes.filter((c): c is string => typeof c === 'string')
+        : [],
+      addressDetail: typeof parsed.addressDetail === 'string' ? parsed.addressDetail : '',
+      productId: typeof parsed.productId === 'string' ? parsed.productId : '',
+      quantity: typeof parsed.quantity === 'number' && parsed.quantity >= 1 ? parsed.quantity : 2,
+      promoCodeId: typeof parsed.promoCodeId === 'string' ? parsed.promoCodeId : '',
+      deliveryMode: parsed.deliveryMode === 'ON_SITE_PICKUP' ? 'ON_SITE_PICKUP' : 'ADDRESS',
+      autoReceive: parsed.autoReceive === true,
+    };
+  } catch {
+    return null;
+  }
+}
+
+export function clearProxyOrderDraft() {
+  try {
+    sessionStorage.removeItem(PROXY_ORDER_DRAFT_KEY);
+    sessionStorage.removeItem('partner_proxy_order_draft_v1');
+  } catch {
+    /* ignore */
+  }
+}

apps/h5-partner/src/lib/proxyOrderStatus.ts

@@ -0,0 +1,36 @@
+const STATUS_LABELS: Record<string, string> = {
+  PENDING_PAY: '待付款',
+  PENDING_SHIP: '待发货',
+  OUT_WAREHOUSE: '已出库',
+  SHIPPING: '配送中',
+  PENDING_RECEIVE: '待收货',
+  COMPLETED: '已完成',
+  CANCELLED: '已取消',
+  REFUNDING: '退款中',
+  REFUNDED: '已退款',
+};
+
+const PAY_LABELS: Record<string, string> = {
+  UNPAID: '未支付',
+  PAYING: '支付中',
+  PAID: '已付款',
+  REFUNDING: '退款中',
+  REFUNDED: '已退款',
+};
+
+export function proxyOrderStatusLabel(status?: string | null) {
+  if (!status) return '—';
+  return STATUS_LABELS[status] || status;
+}
+
+export function proxyOrderPayLabel(payStatus?: string | null) {
+  if (!payStatus) return '—';
+  return PAY_LABELS[payStatus] || payStatus;
+}
+
+export function proxyOrderStatusColor(status?: string | null) {
+  if (status === 'PENDING_PAY') return 'var(--color-warning, #d48806)';
+  if (status === 'COMPLETED') return 'var(--color-success-green)';
+  if (status === 'CANCELLED' || status === 'REFUNDED') return 'var(--color-text-muted, #999)';
+  return 'var(--color-primary, #8b1e1e)';
+}

apps/h5-partner/src/lib/tencentLocPicker.ts

@@ -24,3 +24,78 @@ export function placeToPicked(item: LbsPlaceItem): TencentPickedLocation {
     cityname: item.city || undefined,
   };
 }
+
+type LocPickerMessage = {
+  module?: string;
+  latlng?: { lat?: number; lng?: number };
+  poiaddress?: string;
+  poiname?: string;
+  cityname?: string;
+};
+
+const REFERER = 'dukang';
+
+function coerceMessageData(data: unknown): LocPickerMessage | null {
+  if (data == null) return null;
+  if (typeof data === 'string') {
+    const trimmed = data.trim();
+    if (!trimmed || (trimmed[0] !== '{' && trimmed[0] !== '[')) return null;
+    try {
+      return JSON.parse(trimmed) as LocPickerMessage;
+    } catch {
+      return null;
+    }
+  }
+  if (typeof data === 'object') return data as LocPickerMessage;
+  return null;
+}
+
+/** 腾讯地图选点组件（iframe） */
+export function buildTencentLocPickerUrl(
+  key: string,
+  options?: { latitude?: number; longitude?: number },
+): string {
+  const params = new URLSearchParams({
+    search: '1',
+    type: '1',
+    key,
+    referer: REFERER,
+    policy: '1',
+    total: '20',
+    radius: '2000',
+    mapdraggable: '1',
+  });
+  const lat = options?.latitude;
+  const lng = options?.longitude;
+  if (
+    lat != null &&
+    lng != null &&
+    Number.isFinite(lat) &&
+    Number.isFinite(lng) &&
+    !(lat === 0 && lng === 0)
+  ) {
+    params.set('coord', `${lat},${lng}`);
+    params.set('coordtype', '5');
+  }
+  return `https://apis.map.qq.com/tools/locpicker?${params.toString()}`;
+}
+
+export function parseTencentLocPickerMessage(data: unknown): TencentPickedLocation | null {
+  const loc = coerceMessageData(data);
+  if (!loc || loc.module !== 'locationPicker') return null;
+  const lat = Number(loc.latlng?.lat);
+  const lng = Number(loc.latlng?.lng);
+  if (!Number.isFinite(lat) || !Number.isFinite(lng)) return null;
+
+  let name = loc.poiname?.trim() || undefined;
+  const address = loc.poiaddress?.trim() || undefined;
+  if (name === '我的位置' && address) name = address;
+
+  return {
+    latitude: lat,
+    longitude: lng,
+    address,
+    name,
+    cityname: loc.cityname?.trim() || undefined,
+  };
+}

apps/h5-partner/src/pages/CenterPage.tsx

@@ -219,6 +219,15 @@ export default function CenterPage({ variant = 'primary', roleLabel }: CenterPag
                   <span className="material-symbols-outlined text-muted">chevron_right</span>
                 </div>
               </Link>
+              <Link to="/center/proxy-orders" className="partner-menu-item">
+                <div className="partner-menu-item-left">
+                  <div className="partner-menu-icon">
+                    <span className="material-symbols-outlined">receipt_long</span>
+                  </div>
+                  <span className="body-md" style={{ fontSize: 16 }}>代下单列表</span>
+                </div>
+                <span className="material-symbols-outlined text-muted">chevron_right</span>
+              </Link>
               <Link to="/stores?audit=pending" className="partner-menu-item">
                 <div className="partner-menu-item-left">
                   <div className="partner-menu-icon">

apps/h5-partner/src/pages/LoginPage.tsx

@@ -1,14 +1,24 @@
-import { useRef, useState, type RefObject } from 'react';
-import { Link, useNavigate } from 'react-router-dom';
+import { useEffect, useRef, useState, type RefObject } from 'react';
+import { Link, useNavigate, useSearchParams } from 'react-router-dom';
+import { isWxAuthorizeEnabled } from '@dukang/shared-types';
+import { WECHAT_INAPP_REQUIRED_MSG } from '@dukang/weixin-sdk';
 import {
   getLastPhone,
   getPartnerProfile,
+  hasPartnerWxSession,
   request,
   saveRememberedSession,
   type PartnerSessionPayload,
 } from '../lib/api';
 import { usePartnerSession } from '../contexts/PartnerSessionContext';
 import { partnerHomePath } from '../lib/partnerAccess';
+import {
+  bindPartnerWechatAfterSmsLogin,
+  fetchClientConfig,
+  loginPartnerWithWechat,
+} from '../lib/wechat-auth';
+import { toastError } from '../lib/toast';
+import { isWechatEnv } from '../lib/weixin';
 
 const REMEMBER_PHONE_KEY = 'partner_remember_phone';
 const REMEMBER_FLAG_KEY = 'partner_remember_account';
@@ -39,6 +49,11 @@ function AgreementCheckbox({
   );
 }
 
+function maskPhone(phone: string) {
+  if (phone.length < 7) return phone;
+  return `${phone.slice(0, 3)} **** ${phone.slice(-4)}`;
+}
+
 function loadRememberedPhone(): { phone: string; remember: boolean } {
   try {
     const remember = localStorage.getItem(REMEMBER_FLAG_KEY) === '1';
@@ -60,9 +75,19 @@ function formatPartnerError(e: unknown): string {
   return text;
 }
 
+function formatWechatError(e: unknown): string {
+  const text = e instanceof Error ? e.message : '微信登录失败';
+  if (text.includes('首次登录') || text.includes('手机验证码')) {
+    return '该微信尚未绑定合伙人账号，请先使用手机验证码登录，登录后将自动关联微信';
+  }
+  return text;
+}
+
 export default function LoginPage() {
   const navigate = useNavigate();
   const { applySession, refresh, account } = usePartnerSession();
+  const [params] = useSearchParams();
+  const quick = params.get('quick') === '1';
   const savedProfile = getPartnerProfile();
   const remembered = loadRememberedPhone();
   const [phone, setPhone] = useState(remembered.phone || getLastPhone());
@@ -70,13 +95,27 @@ export default function LoginPage() {
   const [rememberAccount, setRememberAccount] = useState(remembered.remember);
   const [agreed, setAgreed] = useState(false);
   const [loading, setLoading] = useState(false);
+  const [wxLoading, setWxLoading] = useState(false);
   const [msg, setMsg] = useState('');
   const [codeCooldown, setCodeCooldown] = useState(0);
+  const [wxAuthorize, setWxAuthorize] = useState(false);
   const agreementRef = useRef<HTMLLabelElement>(null);
 
+  useEffect(() => {
+    fetchClientConfig()
+      .then((config) => setWxAuthorize(isWxAuthorizeEnabled(config)))
+      .catch(() => setWxAuthorize(false));
+  }, []);
+
+  const quickName = savedProfile?.name ?? '城市合伙人';
+  const quickCompany = savedProfile?.companyName ?? '';
+  const quickPhone = savedProfile?.phone || phone;
+
   function ensureAgreed() {
     if (!agreed) {
-      setMsg('请先勾选并同意用户协议');
+      const tip = '请先勾选并同意用户协议';
+      setMsg(tip);
+      toastError(tip);
       agreementRef.current?.scrollIntoView({ behavior: 'smooth', block: 'center' });
       return false;
     }
@@ -140,6 +179,11 @@ export default function LoginPage() {
       saveRememberedSession(data);
       applySession(data);
       persistRememberAccount(phone);
+      if (isWechatEnv() && wxAuthorize) {
+        setMsg('登录成功，正在关联微信…');
+        await bindPartnerWechatAfterSmsLogin();
+        return;
+      }
       await finishLoginNavigate();
     } catch (e) {
       setMsg(formatPartnerError(e));
@@ -148,6 +192,119 @@ export default function LoginPage() {
     }
   }
 
+  async function wechatLogin() {
+    if (!ensureAgreed()) return;
+    setMsg('');
+    if (!isWechatEnv()) {
+      setMsg(WECHAT_INAPP_REQUIRED_MSG);
+      toastError(WECHAT_INAPP_REQUIRED_MSG);
+      return;
+    }
+    setWxLoading(true);
+    try {
+      // 直接发起 OAuth；未绑定账号由后端返回「请先短信登录」提示
+      const session = await loginPartnerWithWechat();
+      if (session) {
+        applySession(session);
+        await finishLoginNavigate();
+        return;
+      }
+      if (session === null) {
+        const tip = '微信授权暂未开启，请使用验证码登录';
+        setMsg(tip);
+        toastError(tip);
+      }
+      // session === undefined：已跳转微信授权页
+    } catch (e) {
+      const tip = formatWechatError(e);
+      setMsg(tip);
+      toastError(tip);
+    } finally {
+      setWxLoading(false);
+    }
+  }
+
+  if (quick) {
+    const canWechatQuick =
+      wxAuthorize &&
+      isWechatEnv() &&
+      hasPartnerWxSession() &&
+      !!savedProfile &&
+      savedProfile.hasWechat === true;
+
+    return (
+      <div className="partner-auth-page partner-auth-page--quick">
+        <header className="partner-auth-brand">
+          <div className="partner-quick-avatar" style={{ width: 120, height: 120, margin: '0 auto 16px' }}>
+            <span className="material-symbols-outlined" style={{ fontSize: 48 }}>wine_bar</span>
+          </div>
+          <h1 className="partner-auth-title" style={{ fontSize: 20 }}>杜康好客</h1>
+          <p className="partner-auth-subtitle" style={{ fontSize: 12, letterSpacing: '0.2em', textTransform: 'uppercase' }}>城市合伙人端</p>
+        </header>
+
+        <section className="partner-glass-card">
+          <div className="partner-quick-badge">已识别账号</div>
+          <div className="partner-quick-avatar">
+            <span className="material-symbols-outlined">person</span>
+          </div>
+          <div style={{ textAlign: 'center' }}>
+            <h2 className="headline-md">
+              {quickName}
+              {quickCompany ? (
+                <span className="text-muted body-md" style={{ fontWeight: 400 }}> ({quickCompany})</span>
+              ) : null}
+            </h2>
+            <p className="text-muted body-md" style={{ letterSpacing: '0.1em', marginTop: 4 }}>
+              {quickPhone ? maskPhone(quickPhone) : '暂无已保存账号'}
+            </p>
+          </div>
+        </section>
+
+        <nav style={{ width: '100%', maxWidth: 384, marginTop: 16 }}>
+          {msg && <p className="partner-auth-msg" style={{ color: 'var(--color-error, #d33)', fontSize: 13, textAlign: 'center', marginBottom: 12 }}>{msg}</p>}
+          <AgreementCheckbox
+            agreed={agreed}
+            onChange={setAgreed}
+            inputRef={agreementRef}
+          />
+          {canWechatQuick ? (
+            <button
+              type="button"
+              className="partner-btn-primary"
+              style={{ marginTop: 16 }}
+              disabled={wxLoading}
+              onClick={() => void wechatLogin()}
+            >
+              <span className="material-symbols-outlined">chat</span>
+              <span>{wxLoading ? '登录中...' : '微信一键登录'}</span>
+            </button>
+          ) : (
+            <p className="partner-auth-msg" style={{ textAlign: 'center', marginTop: 12, marginBottom: 12 }}>
+              {wxAuthorize && !isWechatEnv()
+                ? '请在微信内打开以使用一键登录'
+                : '请使用验证码登录并绑定微信后，即可 7 天内免登录'}
+            </p>
+          )}
+          {!canWechatQuick && (
+            <Link to="/login" className="partner-btn-primary" style={{ display: 'block', textAlign: 'center', textDecoration: 'none', marginTop: 12 }}>
+              验证码登录
+            </Link>
+          )}
+          <Link to="/login" className="partner-btn-ghost" style={{ display: 'block', marginTop: 12 }}>切换账号</Link>
+        </nav>
+
+        <footer className="partner-auth-footer">
+          <div style={{ display: 'flex', alignItems: 'center', gap: 6 }}>
+            <span className="material-symbols-outlined">verified_user</span>
+            <span className="label-md" style={{ fontSize: 10, letterSpacing: '0.1em', textTransform: 'uppercase' }}>
+              {canWechatQuick ? '微信验证 · 7 天内免登录' : 'Secured by Dukang Heritage'}
+            </span>
+          </div>
+        </footer>
+      </div>
+    );
+  }
+
   return (
     <div className="partner-auth-page">
       <div className="partner-auth-brand">
@@ -214,12 +371,34 @@ export default function LoginPage() {
             <span>{loading ? '登录中...' : '登录'}</span>
             {!loading && <span className="material-symbols-outlined">arrow_forward</span>}
           </button>
+
+          {wxAuthorize && (
+            <>
+              <div className="partner-auth-divider"><span>其他登录方式</span></div>
+              <button type="button" className="partner-btn-wechat" onClick={() => void wechatLogin()} disabled={wxLoading}>
+                <svg viewBox="0 0 24 24" fill="#07C160" aria-hidden>
+                  <path d="M8.25 4.5C4.52 4.5 1.5 7.04 1.5 10.17c0 1.78.98 3.37 2.5 4.48l-.63 1.88 2.19-1.09c.84.24 1.74.38 2.69.38.25 0 .5 0 .75-.03-.16-.53-.25-1.09-.25-1.66 0-3.13 3.02-5.67 6.75-5.67.57 0 1.13.06 1.66.17C15.17 6.13 12 4.5 8.25 4.5zm10.5 6.33c-3.11 0-5.62 2.12-5.62 4.73 0 2.61 2.51 4.73 5.62 4.73.79 0 1.54-.14 2.24-.38l1.83.91-.53-1.57c1.27-.92 2.08-2.25 2.08-3.73 0-2.61-2.51-4.73-5.62-4.73z" />
+                </svg>
+                <span>{wxLoading ? '跳转授权中...' : '微信一键登录'}</span>
+              </button>
+              {msg && (
+                <p className="partner-auth-msg" style={{ color: 'var(--color-error, #d33)', fontSize: 13, textAlign: 'center' }}>
+                  {msg}
+                </p>
+              )}
+            </>
+          )}
+
           <p className="partner-auth-msg" style={{ textAlign: 'center' }}>
-            手机号验证成功后，7 天内无需再次输入验证码
+            请在微信内打开；首次请先用验证码登录，成功后将自动关联微信，之后可一键登录
           </p>
         </div>
       </main>
 
+      {hasPartnerWxSession() && savedProfile?.hasWechat && (
+        <Link to="/login?quick=1" className="partner-link">微信快捷登录</Link>
+      )}
+
       <footer className="partner-auth-footer">
         <div style={{ display: 'flex', alignItems: 'center', gap: 6 }}>
           <span className="material-symbols-outlined">verified_user</span>

apps/h5-partner/src/pages/ProxyOrderDetailPage.tsx

@@ -0,0 +1,232 @@
+import { useEffect, useState } from 'react';
+import { useNavigate, useParams } from 'react-router-dom';
+import PageHeader from '@dukang/shared-ui/PageHeader';
+import type { PartnerProxyOrderListItem } from '@dukang/shared-types';
+import { request } from '../lib/api';
+import {
+  proxyOrderPayLabel,
+  proxyOrderStatusColor,
+  proxyOrderStatusLabel,
+} from '../lib/proxyOrderStatus';
+import { toastError, toastSuccess } from '../lib/toast';
+
+function fmtMoney(n: number) {
+  return n.toLocaleString('zh-CN', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+}
+
+function fmtTime(value: string | undefined) {
+  if (!value) return '—';
+  const d = new Date(value);
+  if (Number.isNaN(d.getTime())) return value;
+  const pad = (n: number) => String(n).padStart(2, '0');
+  return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+}
+
+function deliveryLabel(order: PartnerProxyOrderListItem) {
+  const t = String(order.deliveryType || '').toUpperCase();
+  if (t === 'ON_SITE_PICKUP') return '现场提货';
+  if (t === 'CROSS_CITY') return '跨城配送';
+  if (t === 'LOCAL') return '同城配送';
+  return '代下单';
+}
+
+type TrackNode = {
+  time?: string;
+  status?: string;
+  description?: string;
+};
+
+type TrackResult = {
+  nodes?: TrackNode[];
+  trackingNo?: string | null;
+  provider?: string | null;
+  manualQueryUrl?: string | null;
+};
+
+export default function ProxyOrderDetailPage() {
+  const { id } = useParams();
+  const navigate = useNavigate();
+  const [order, setOrder] = useState<PartnerProxyOrderListItem | null>(null);
+  const [error, setError] = useState('');
+  const [track, setTrack] = useState<TrackResult | null>(null);
+  const [trackError, setTrackError] = useState('');
+  const [paying, setPaying] = useState(false);
+
+  useEffect(() => {
+    document.title = '代下单详情';
+  }, []);
+
+  useEffect(() => {
+    if (!id) return;
+    void request<PartnerProxyOrderListItem>('PARTNER_H5', `/partner/proxy-orders/${id}`)
+      .then(setOrder)
+      .catch((e) => setError(e instanceof Error ? e.message : '加载失败'));
+  }, [id]);
+
+  useEffect(() => {
+    if (!id || !order) return;
+    const dt = String(order.deliveryType || '').toUpperCase();
+    if (dt === 'ON_SITE_PICKUP' || order.payStatus !== 'PAID') {
+      setTrack(null);
+      return;
+    }
+    void request<TrackResult>('PARTNER_H5', `/partner/proxy-orders/${id}/track`, { silent: true })
+      .then(setTrack)
+      .catch((e) => setTrackError(e instanceof Error ? e.message : '物流暂不可用'));
+  }, [id, order]);
+
+  async function continuePay() {
+    if (!id) return;
+    setPaying(true);
+    try {
+      await request('PARTNER_H5', `/partner/proxy-orders/${id}/pay/mock-confirm`, {
+        method: 'POST',
+        body: '{}',
+        silent: true,
+      });
+      toastSuccess('支付成功');
+      const refreshed = await request<PartnerProxyOrderListItem>(
+        'PARTNER_H5',
+        `/partner/proxy-orders/${id}`,
+      );
+      setOrder(refreshed);
+    } catch (e) {
+      toastError(e instanceof Error ? e.message : '支付失败');
+    } finally {
+      setPaying(false);
+    }
+  }
+
+  const img = order?.imageResource?.url || '';
+  const isOnSite = String(order?.deliveryType || '').toUpperCase() === 'ON_SITE_PICKUP';
+
+  return (
+    <div className="page-no-tab partner-orders-page">
+      <PageHeader title="代下单详情" onBack={() => navigate('/center/proxy-orders')} />
+
+      {error && (
+        <p className="partner-form-error" role="alert" style={{ margin: '16px 20px' }}>
+          {error}
+        </p>
+      )}
+
+      {!order && !error && <p className="label-md text-muted" style={{ margin: 20 }}>加载中…</p>}
+
+      {order && (
+        <div style={{ padding: '0 16px 32px' }}>
+          <div className="partner-order-card" style={{ pointerEvents: 'none' }}>
+            <div className="partner-order-card-top">
+              <span className="label-md text-muted">NO. {order.orderNo}</span>
+              <span
+                className="label-md"
+                style={{ color: proxyOrderStatusColor(order.status), fontWeight: 600 }}
+              >
+                {proxyOrderStatusLabel(order.status)}
+              </span>
+            </div>
+            <div className="partner-order-product">
+              <div
+                className="partner-order-product-img"
+                style={{
+                  display: 'flex',
+                  alignItems: 'center',
+                  justifyContent: 'center',
+                  overflow: 'hidden',
+                  background: img ? `center/cover no-repeat url(${img})` : undefined,
+                }}
+              >
+                {!img && <span className="material-symbols-outlined text-muted">liquor</span>}
+              </div>
+              <div style={{ flex: 1, minWidth: 0 }}>
+                <h3 className="headline-md">{order.productName || '杜康好酒'}</h3>
+                {order.productSpec && (
+                  <p className="label-md text-muted" style={{ marginTop: 4 }}>
+                    {order.productSpec}
+                  </p>
+                )}
+                <p className="body-md" style={{ marginTop: 8 }}>
+                  ×{order.quantity} · ¥{fmtMoney(Number(order.payAmount || 0))}
+                </p>
+                <p className="label-md text-muted" style={{ marginTop: 4 }}>
+                  权益 ¥{fmtMoney(Number(order.benefitAmount || 0))}
+                </p>
+              </div>
+            </div>
+          </div>
+
+          <section className="partner-form-card" style={{ marginTop: 12 }}>
+            <h3 className="headline-md" style={{ marginBottom: 12 }}>客户信息</h3>
+            <p className="body-md">姓名：{order.receiverName || '—'}</p>
+            <p className="body-md" style={{ marginTop: 8 }}>手机：{order.receiverPhone || '—'}</p>
+            <p className="body-md" style={{ marginTop: 8 }}>
+              地址：{order.receiverAddress || (isOnSite ? '现场提货' : '—')}
+            </p>
+          </section>
+
+          <section className="partner-form-card" style={{ marginTop: 12 }}>
+            <h3 className="headline-md" style={{ marginBottom: 12 }}>订单信息</h3>
+            <p className="body-md">配送方式：{deliveryLabel(order)}</p>
+            <p className="body-md" style={{ marginTop: 8 }}>下单时间：{fmtTime(order.createdAt)}</p>
+            <p className="body-md" style={{ marginTop: 8 }}>
+              支付状态：{proxyOrderPayLabel(order.payStatus)}
+            </p>
+            <p className="body-md" style={{ marginTop: 8 }}>
+              订单状态：{proxyOrderStatusLabel(order.status)}
+            </p>
+          </section>
+
+          {order.payStatus === 'UNPAID' || order.status === 'PENDING_PAY' ? (
+            <button
+              type="button"
+              className="btn btn-primary btn-block"
+              style={{ marginTop: 16 }}
+              disabled={paying}
+              onClick={() => void continuePay()}
+            >
+              {paying ? '处理中…' : '继续支付（模拟）'}
+            </button>
+          ) : null}
+
+          {!isOnSite && order.payStatus === 'PAID' ? (
+            <section className="partner-form-card" style={{ marginTop: 12 }}>
+              <h3 className="headline-md" style={{ marginBottom: 12 }}>物流信息</h3>
+              {trackError ? (
+                <p className="label-md text-muted">{trackError}</p>
+              ) : !track ? (
+                <p className="label-md text-muted">加载物流…</p>
+              ) : (
+                <>
+                  {track.trackingNo ? (
+                    <p className="body-md" style={{ marginBottom: 8 }}>
+                      运单号：{track.trackingNo}
+                      {track.provider ? `（${track.provider}）` : ''}
+                    </p>
+                  ) : null}
+                  {track.manualQueryUrl ? (
+                    <p className="body-md" style={{ marginBottom: 8 }}>
+                      <a href={track.manualQueryUrl} target="_blank" rel="noreferrer">
+                        查看物流官网
+                      </a>
+                    </p>
+                  ) : null}
+                  {(track.nodes ?? []).length === 0 ? (
+                    <p className="label-md text-muted">暂无物流轨迹（待总部发货后更新）</p>
+                  ) : (
+                    <ul style={{ paddingLeft: 18, margin: 0 }}>
+                      {(track.nodes ?? []).map((n, i) => (
+                        <li key={`${n.time}-${i}`} className="body-md" style={{ marginBottom: 8 }}>
+                          <div className="label-md text-muted">{fmtTime(n.time)}</div>
+                          <div>{n.description || n.status || '—'}</div>
+                        </li>
+                      ))}
+                    </ul>
+                  )}
+                </>
+              )}
+            </section>
+          ) : null}
+        </div>
+      )}
+    </div>
+  );
+}

apps/h5-partner/src/pages/ProxyOrderListPage.tsx

@@ -0,0 +1,149 @@
+import { useCallback, useEffect, useState, type FormEvent } from 'react';
+import { Link, useNavigate } from 'react-router-dom';
+import PageHeader from '@dukang/shared-ui/PageHeader';
+import PullToRefresh from '@dukang/shared-ui/PullToRefresh';
+import type { PartnerProxyOrderListItem, PartnerProxyOrderListResponse } from '@dukang/shared-types';
+import { isLoggedIn, request } from '../lib/api';
+import {
+  proxyOrderStatusColor,
+  proxyOrderStatusLabel,
+} from '../lib/proxyOrderStatus';
+
+function fmtMoney(n: number) {
+  return n.toLocaleString('zh-CN', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+}
+
+function fmtTime(value: string | undefined) {
+  if (!value) return '—';
+  const d = new Date(value);
+  if (Number.isNaN(d.getTime())) return value;
+  const pad = (n: number) => String(n).padStart(2, '0');
+  return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+}
+
+function deliveryLabel(item: PartnerProxyOrderListItem) {
+  const t = String(item.deliveryType || '').toUpperCase();
+  if (t === 'ON_SITE_PICKUP') return '现场提货';
+  if (t === 'CROSS_CITY') return '跨城配送';
+  if (t === 'LOCAL') return '同城配送';
+  return '线下代下单';
+}
+
+function coverUrl(item: PartnerProxyOrderListItem) {
+  return item.imageResource?.url || '';
+}
+
+export default function ProxyOrderListPage() {
+  const navigate = useNavigate();
+  const [list, setList] = useState<PartnerProxyOrderListItem[]>([]);
+  const [total, setTotal] = useState(0);
+  const [keyword, setKeyword] = useState('');
+  const [q, setQ] = useState('');
+  const [loading, setLoading] = useState(true);
+
+  const loadList = useCallback(() => {
+    if (!isLoggedIn()) {
+      navigate('/login');
+      return Promise.resolve();
+    }
+    setLoading(true);
+    const params = new URLSearchParams({ page: '1', pageSize: '50' });
+    if (q.trim()) params.set('keyword', q.trim());
+    return request<PartnerProxyOrderListResponse>('PARTNER_H5', `/partner/proxy-orders?${params}`)
+      .then((res) => {
+        setList(Array.isArray(res.list) ? res.list : []);
+        setTotal(Number(res.total) || 0);
+      })
+      .catch(() => {
+        setList([]);
+        setTotal(0);
+      })
+      .finally(() => setLoading(false));
+  }, [navigate, q]);
+
+  useEffect(() => {
+    document.title = '代下单列表';
+  }, []);
+
+  useEffect(() => {
+    void loadList();
+  }, [loadList]);
+
+  function submitSearch(e: FormEvent) {
+    e.preventDefault();
+    setQ(keyword.trim());
+  }
+
+  return (
+    <PullToRefresh onRefresh={loadList} className="page-no-tab partner-orders-page">
+      <PageHeader title="代下单列表" onBack={() => navigate('/center')} />
+
+      <div style={{ padding: '0 20px 12px' }}>
+        <form className="partner-search" onSubmit={submitSearch}>
+          <span className="material-symbols-outlined">search</span>
+          <input
+            placeholder="订单号 / 手机号 / 姓名 / 商品"
+            value={keyword}
+            onChange={(e) => setKeyword(e.target.value)}
+          />
+        </form>
+        <p className="label-md text-muted" style={{ marginTop: 8 }}>
+          {loading ? '加载中…' : `共 ${total} 笔代下单`}
+        </p>
+      </div>
+
+      <div style={{ padding: '0 16px 24px' }}>
+        {!loading && list.length === 0 && <div className="empty">暂无代下单记录</div>}
+
+        {list.map((o) => {
+          const orderId = String(o.id);
+          const img = coverUrl(o);
+          return (
+            <Link key={orderId} to={`/center/proxy-orders/${orderId}`} className="partner-order-card" style={{ marginBottom: 12 }}>
+              <div className="partner-order-card-top">
+                <span className="label-md text-muted">NO. {o.orderNo}</span>
+                <span
+                  className="label-md"
+                  style={{ color: proxyOrderStatusColor(o.status), fontWeight: 600 }}
+                >
+                  {proxyOrderStatusLabel(o.status)}
+                </span>
+              </div>
+              <div className="partner-order-product">
+                <div
+                  className="partner-order-product-img"
+                  style={{
+                    display: 'flex',
+                    alignItems: 'center',
+                    justifyContent: 'center',
+                    overflow: 'hidden',
+                    background: img ? `center/cover no-repeat url(${img})` : undefined,
+                  }}
+                >
+                  {!img && <span className="material-symbols-outlined text-muted">liquor</span>}
+                </div>
+                <div style={{ flex: 1, minWidth: 0 }}>
+                  <h3 className="headline-md line-2-clamp">{o.productName || '杜康好酒'}</h3>
+                  <p className="text-variant body-md" style={{ marginTop: 4 }}>
+                    ×{o.quantity} · ¥{fmtMoney(Number(o.payAmount || 0))}
+                  </p>
+                  <p className="label-md text-muted" style={{ marginTop: 4 }}>
+                    {deliveryLabel(o)} · {fmtTime(o.createdAt)}
+                  </p>
+                </div>
+              </div>
+              <div className="partner-order-address">
+                <span className="material-symbols-outlined" style={{ fontSize: 18 }}>person</span>
+                <p className="line-2-clamp">
+                  {o.receiverName || '客户'}
+                  {o.receiverPhone ? ` · ${o.receiverPhone}` : ''}
+                  {o.receiverAddress ? ` · ${o.receiverAddress}` : ''}
+                </p>
+              </div>
+            </Link>
+          );
+        })}
+      </div>
+    </PullToRefresh>
+  );
+}

apps/h5-partner/src/pages/ProxyOrderPage.tsx

@@ -1,48 +1,112 @@
-import { useEffect, useMemo, useState } from 'react';
+import { useEffect, useMemo, useRef, useState } from 'react';
 import { useNavigate, useSearchParams } from 'react-router-dom';
+import QRCode from 'qrcode';
 import PageHeader from '@dukang/shared-ui/PageHeader';
+import { invokeWechatPay } from '@dukang/weixin-sdk';
 import ChinaRegionPicker from '../components/ChinaRegionPicker';
-import { request } from '../lib/api';
+import { getToken, request } from '../lib/api';
 import { formatRegionLabel, parseRegionCodes } from '../lib/china-region';
+import {
+  clearProxyOrderDraft,
+  loadProxyOrderDraft,
+  saveProxyOrderDraft,
+  type ProxyOrderDraft,
+} from '../lib/proxyOrderDraft';
 import { toastError, toastSuccess } from '../lib/toast';
+import { isWechatEnv } from '../lib/weixin';
+import { fetchPartnerProfile, partnerHasWechatBinding } from '../lib/wechat-auth';
 import type {
   PartnerProxyDeliveryMode,
   PartnerProxyOrderCreateRequest,
   PartnerProxyOrderOptions,
   PartnerProxyOrderPreviewResult,
+  ProxyOrderCreateResponse,
+  ProxyOrderPayResponse,
+  ProxyPayMethod,
 } from '@dukang/shared-types';
 
 function fmtMoney(n: number) {
   return n.toLocaleString('zh-CN', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
 }
 
+function initialDraft(): ProxyOrderDraft {
+  return (
+    loadProxyOrderDraft() ?? {
+      phone: '',
+      receiverName: '',
+      regionCodes: [],
+      addressDetail: '',
+      productId: '',
+      quantity: 2,
+      promoCodeId: '',
+      deliveryMode: 'ADDRESS',
+      autoReceive: false,
+    }
+  );
+}
+
 export default function ProxyOrderPage() {
   const navigate = useNavigate();
   const [searchParams] = useSearchParams();
+  const draft0 = useMemo(() => initialDraft(), []);
   const [options, setOptions] = useState<PartnerProxyOrderOptions | null>(null);
   const [loadingOptions, setLoadingOptions] = useState(true);
-  const [phone, setPhone] = useState('');
-  const [customerSmsCode, setCustomerSmsCode] = useState('');
-  const [partnerSmsCode, setPartnerSmsCode] = useState('');
-  const [receiverName, setReceiverName] = useState('');
-  const [regionCodes, setRegionCodes] = useState<string[]>([]);
-  const [addressDetail, setAddressDetail] = useState('');
-  const [productId, setProductId] = useState('');
-  const [quantity, setQuantity] = useState(2);
-  const [promoCodeId, setPromoCodeId] = useState('');
-  const [deliveryMode, setDeliveryMode] = useState<PartnerProxyDeliveryMode>('ADDRESS');
-  const [autoReceive, setAutoReceive] = useState(false);
-  const [confirmStep, setConfirmStep] = useState(false);
+  const [phone, setPhone] = useState(draft0.phone);
+  const [receiverName, setReceiverName] = useState(draft0.receiverName);
+  const [regionCodes, setRegionCodes] = useState<string[]>(draft0.regionCodes);
+  const [addressDetail, setAddressDetail] = useState(draft0.addressDetail);
+  const [productId, setProductId] = useState(draft0.productId);
+  const [quantity, setQuantity] = useState(draft0.quantity);
+  const [promoCodeId, setPromoCodeId] = useState(draft0.promoCodeId);
+  const [deliveryMode, setDeliveryMode] = useState<PartnerProxyDeliveryMode>(draft0.deliveryMode);
+  const [autoReceive, setAutoReceive] = useState(draft0.autoReceive);
   const [preview, setPreview] = useState<PartnerProxyOrderPreviewResult | null>(null);
   const [previewLoading, setPreviewLoading] = useState(false);
-  const [customerCooldown, setCustomerCooldown] = useState(0);
-  const [partnerCooldown, setPartnerCooldown] = useState(0);
   const [submitting, setSubmitting] = useState(false);
   const [msg, setMsg] = useState('');
+  const [step, setStep] = useState<'form' | 'pay'>('form');
+  const [created, setCreated] = useState<ProxyOrderCreateResponse | null>(null);
+  const [payMethod, setPayMethod] = useState<ProxyPayMethod>('NATIVE');
+  const [codeUrl, setCodeUrl] = useState<string | null>(null);
+  const [qrDataUrl, setQrDataUrl] = useState<string | null>(null);
+  const [paying, setPaying] = useState(false);
+  const pollRef = useRef<number | null>(null);
 
   const region = useMemo(() => parseRegionCodes(regionCodes), [regionCodes]);
   const regionLabel = region ? formatRegionLabel(region) : '';
 
+  function stopPoll() {
+    if (pollRef.current != null) {
+      window.clearInterval(pollRef.current);
+      pollRef.current = null;
+    }
+  }
+
+  useEffect(() => () => stopPoll(), []);
+
+  useEffect(() => {
+    if (!codeUrl) {
+      setQrDataUrl(null);
+      return;
+    }
+    void QRCode.toDataURL(codeUrl, { width: 220, margin: 1 }).then(setQrDataUrl).catch(() => setQrDataUrl(null));
+  }, [codeUrl]);
+
+  function persistDraft(overrides?: Partial<ProxyOrderDraft>) {
+    saveProxyOrderDraft({
+      phone,
+      receiverName,
+      regionCodes,
+      addressDetail,
+      productId,
+      quantity,
+      promoCodeId,
+      deliveryMode,
+      autoReceive,
+      ...overrides,
+    });
+  }
+
   useEffect(() => {
     request<PartnerProxyOrderOptions>('PARTNER_H5', '/partner/proxy-orders/options')
       .then((data) => {
@@ -53,6 +117,7 @@ export default function ProxyOrderPage() {
         const fromQuery = searchParams.get('productId');
         if (fromQuery && data.products.some((p) => p.id === fromQuery)) {
           setProductId(fromQuery);
+          persistDraft({ productId: fromQuery });
         } else if (data.products[0] && !productId) {
           setProductId(data.products[0].id);
         }
@@ -64,9 +129,28 @@ export default function ProxyOrderPage() {
 
   useEffect(() => {
     const fromQuery = searchParams.get('productId');
-    if (fromQuery) setProductId(fromQuery);
+    if (fromQuery) {
+      setProductId(fromQuery);
+      persistDraft({ productId: fromQuery });
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps -- only sync productId from URL
   }, [searchParams]);
 
+  useEffect(() => {
+    persistDraft();
+    // eslint-disable-next-line react-hooks/exhaustive-deps -- keep draft in sync for product-picker roundtrip
+  }, [
+    phone,
+    receiverName,
+    regionCodes,
+    addressDetail,
+    productId,
+    quantity,
+    promoCodeId,
+    deliveryMode,
+    autoReceive,
+  ]);
+
   useEffect(() => {
     if (!productId || quantity < 1) {
       setPreview(null);
@@ -92,64 +176,10 @@ export default function ProxyOrderPage() {
     return () => clearTimeout(timer);
   }, [productId, quantity, deliveryMode, region?.city, region?.district]);
 
-  function startCooldown(setter: (n: number | ((s: number) => number)) => void) {
-    setter(60);
-    const timer = setInterval(() => {
-      setter((s) => {
-        if (s <= 1) {
-          clearInterval(timer);
-          return 0;
-        }
-        return s - 1;
-      });
-    }, 1000);
-  }
-
-  async function sendCustomerSms() {
-    setMsg('');
-    if (!/^1\d{10}$/.test(phone.trim())) {
-      setMsg('请输入有效手机号');
-      return;
-    }
-    try {
-      const res = await request<{ maskedPhone: string }>(
-        'PARTNER_H5',
-        '/partner/proxy-orders/send-customer-sms',
-        {
-          method: 'POST',
-          body: JSON.stringify({ phone: phone.trim() }),
-          silent: true,
-        },
-      );
-      setMsg(`客户验证码已发送至 ${res.maskedPhone}`);
-      startCooldown(setCustomerCooldown);
-    } catch (e) {
-      setMsg(e instanceof Error ? e.message : '发送失败');
-    }
-  }
-
-  async function sendPartnerSms() {
-    setMsg('');
-    try {
-      const res = await request<{ maskedPhone: string }>(
-        'PARTNER_H5',
-        '/partner/proxy-orders/send-partner-sms',
-        { method: 'POST', body: '{}', silent: true },
-      );
-      setMsg(`确认验证码已发送至合伙人手机 ${res.maskedPhone}`);
-      startCooldown(setPartnerCooldown);
-    } catch (e) {
-      setMsg(e instanceof Error ? e.message : '发送失败');
-    }
-  }
-
   function validateForm(): string | null {
     if (!/^1\d{10}$/.test(phone.trim())) return '请输入有效手机号';
-    if (!customerSmsCode.trim()) return '请输入客户验证码';
     if (!productId) return '请选择商品';
-    if (deliveryMode !== 'ADDRESS') {
-      // 现场提货不需要地址与门店
-    } else {
+    if (deliveryMode === 'ADDRESS') {
       if (!region?.province || !region?.city || !region?.district) return '请选择省市区';
       if (!addressDetail.trim()) return '请填写详细地址';
       if (!autoReceive) return '配送到址须勾选同意自动收货';
@@ -158,16 +188,80 @@ export default function ProxyOrderPage() {
     return null;
   }
 
-  async function openConfirmStep() {
+  function startPoll(orderId: string) {
+    stopPoll();
+    pollRef.current = window.setInterval(() => {
+      void request<{ payStatus: string; orderNo: string }>(
+        'PARTNER_H5',
+        `/partner/proxy-orders/${orderId}/pay-status`,
+        { silent: true },
+      )
+        .then((st) => {
+          if (st.payStatus === 'PAID') {
+            stopPoll();
+            toastSuccess(`支付成功：${st.orderNo}`);
+            clearProxyOrderDraft();
+            navigate(`/center/proxy-orders/${orderId}`, { replace: true });
+          }
+        })
+        .catch(() => undefined);
+    }, 2000);
+  }
+
+  async function startPay(orderId: string, method: ProxyPayMethod) {
+    setPaying(true);
     setMsg('');
-    const err = validateForm();
-    if (err) {
-      setMsg(err);
-      return;
+    try {
+      if (method === 'JSAPI') {
+        if (!isWechatEnv()) {
+          throw new Error('请在微信内打开合伙人端以使用微信代付');
+        }
+        const profile = await fetchPartnerProfile();
+        if (!partnerHasWechatBinding(profile)) {
+          throw new Error('请先绑定微信后再代付');
+        }
+      }
+
+      const pay = await request<ProxyOrderPayResponse>(
+        'PARTNER_H5',
+        `/partner/proxy-orders/${orderId}/pay`,
+        {
+          method: 'POST',
+          body: JSON.stringify({ payMethod: method }),
+          silent: true,
+        },
+      );
+
+      if (pay.mode === 'mock') {
+        toastSuccess('支付成功');
+        clearProxyOrderDraft();
+        navigate(`/center/proxy-orders/${orderId}`, { replace: true });
+        return;
+      }
+
+      if (pay.mode === 'native' && pay.codeUrl) {
+        setCodeUrl(pay.codeUrl);
+        startPoll(orderId);
+        return;
+      }
+
+      if (pay.mode === 'jsapi' && pay.prepay) {
+        await invokeWechatPay(pay.prepay, {
+          apiBase: '/api/v1',
+          clientApp: 'PARTNER_H5',
+          getAccessToken: getToken,
+          platform: 'wechat-h5',
+        });
+        startPoll(orderId);
+        return;
+      }
+
+      throw new Error('支付发起失败');
+    } catch (e) {
+      setMsg(e instanceof Error ? e.message : '支付失败');
+    } finally {
+      setPaying(false);
     }
-    setConfirmStep(true);
-    setPartnerSmsCode('');
-    await sendPartnerSms();
   }
 
   async function submit() {
@@ -177,15 +271,9 @@ export default function ProxyOrderPage() {
       setMsg(err);
       return;
     }
-    if (!partnerSmsCode.trim()) {
-      setMsg('请输入合伙人确认验证码');
-      return;
-    }
 
     const payload: PartnerProxyOrderCreateRequest = {
       phone: phone.trim(),
-      customerSmsCode: customerSmsCode.trim(),
-      partnerSmsCode: partnerSmsCode.trim(),
       deliveryMode,
       autoReceive: deliveryMode === 'ADDRESS' ? true : undefined,
       receiverName: receiverName.trim() || undefined,
@@ -200,13 +288,16 @@ export default function ProxyOrderPage() {
 
     setSubmitting(true);
     try {
-      const order = await request<{ id: string; orderNo: string }>('PARTNER_H5', '/partner/proxy-orders', {
+      const order = await request<ProxyOrderCreateResponse>('PARTNER_H5', '/partner/proxy-orders', {
         method: 'POST',
         body: JSON.stringify(payload),
         silent: true,
       });
-      toastSuccess(`代下单成功：${order.orderNo}`);
-      navigate(`/orders/${order.id}`);
+      clearProxyOrderDraft();
+      setCreated(order);
+      setStep('pay');
+      setCodeUrl(null);
+      await startPay(order.id, payMethod);
     } catch (e) {
       setMsg(e instanceof Error ? e.message : '下单失败');
     } finally {
@@ -214,6 +305,25 @@ export default function ProxyOrderPage() {
     }
   }
 
+  async function handleMockConfirm() {
+    if (!created) return;
+    setPaying(true);
+    try {
+      await request('PARTNER_H5', `/partner/proxy-orders/${created.id}/pay/mock-confirm`, {
+        method: 'POST',
+        body: '{}',
+        silent: true,
+      });
+      stopPoll();
+      toastSuccess('支付成功');
+      navigate(`/center/proxy-orders/${created.id}`, { replace: true });
+    } catch (e) {
+      setMsg(e instanceof Error ? e.message : '模拟支付失败');
+    } finally {
+      setPaying(false);
+    }
+  }
+
   const selectedProduct = options?.products.find((p) => p.id === productId);
   const deliveryLabel =
     preview?.deliveryType === 'ON_SITE_PICKUP'
@@ -224,43 +334,108 @@ export default function ProxyOrderPage() {
 
   return (
     <div className="page partner-proxy-order-page">
-      <PageHeader title="代下单" onBack={() => navigate(-1)} />
+      <PageHeader title={step === 'pay' ? '代下单支付' : '代下单'} onBack={() => navigate(-1)} />
 
       <main className="partner-form-card" style={{ margin: '0 16px 24px' }}>
-        {loadingOptions ? (
+        {step === 'pay' && created ? (
+          <>
+            <p className="body-md">
+              订单 {created.orderNo} · 应付 ¥{fmtMoney(created.payAmount)}
+            </p>
+            <p className="label-md text-muted" style={{ marginTop: 8 }}>
+              {created.deliveryType === 'ON_SITE_PICKUP'
+                ? '支付成功后进入现场提货闭环'
+                : '支付成功后进入待发货，由总部履约'}
+            </p>
+
+            <section className="partner-form-section" style={{ marginTop: 16 }}>
+              <label className="partner-form-label">支付方式</label>
+              <div className="partner-proxy-mode-tabs">
+                <button
+                  type="button"
+                  className={`partner-proxy-mode-tab${payMethod === 'NATIVE' ? ' is-active' : ''}`}
+                  onClick={() => {
+                    setPayMethod('NATIVE');
+                    void startPay(created.id, 'NATIVE');
+                  }}
+                >
+                  收款码
+                </button>
+                <button
+                  type="button"
+                  className={`partner-proxy-mode-tab${payMethod === 'JSAPI' ? ' is-active' : ''}`}
+                  onClick={() => {
+                    setPayMethod('JSAPI');
+                    void startPay(created.id, 'JSAPI');
+                  }}
+                >
+                  微信代付
+                </button>
+              </div>
+            </section>
+
+            {payMethod === 'NATIVE' ? (
+              <div style={{ textAlign: 'center', marginTop: 16 }}>
+                {qrDataUrl ? (
+                  <img src={qrDataUrl} alt="收款码" width={220} height={220} style={{ margin: '0 auto' }} />
+                ) : (
+                  <p className="label-md text-muted">{paying ? '生成收款码中…' : '暂无收款码'}</p>
+                )}
+                <p className="label-md text-muted" style={{ marginTop: 8 }}>
+                  请使用微信扫码支付
+                </p>
+                <button
+                  type="button"
+                  className="btn btn-primary btn-block"
+                  style={{ marginTop: 16 }}
+                  disabled={paying}
+                  onClick={() => void handleMockConfirm()}
+                >
+                  {paying ? '处理中…' : '模拟支付成功'}
+                </button>
+              </div>
+            ) : (
+              <div style={{ marginTop: 16 }}>
+                <p className="label-md text-muted">将调起微信支付（本地 Mock 可能直接入账）</p>
+                <button
+                  type="button"
+                  className="btn btn-primary btn-block"
+                  style={{ marginTop: 12 }}
+                  disabled={paying}
+                  onClick={() => void startPay(created.id, 'JSAPI')}
+                >
+                  {paying ? '支付中…' : '重新调起微信代付'}
+                </button>
+                <button
+                  type="button"
+                  className="btn btn-block"
+                  style={{ marginTop: 8 }}
+                  disabled={paying}
+                  onClick={() => void handleMockConfirm()}
+                >
+                  模拟支付成功
+                </button>
+              </div>
+            )}
+
+            {msg ? (
+              <p className="partner-form-error" role="alert" style={{ marginTop: 12 }}>
+                {msg}
+              </p>
+            ) : null}
+          </>
+        ) : loadingOptions ? (
           <p className="label-md text-muted">加载商品…</p>
         ) : (
           <>
             <section className="partner-form-section">
               <label className="partner-form-label">用户手机号</label>
-              <div className="partner-input-row">
-                <div className="partner-input-wrap" style={{ flex: 1 }}>
-                  <input
-                    className="partner-input"
-                    placeholder="11 位手机号"
-                    value={phone}
-                    onChange={(e) => setPhone(e.target.value.replace(/\D/g, '').slice(0, 11))}
-                  />
-                </div>
-                <button
-                  type="button"
-                  className="btn btn-secondary"
-                  disabled={customerCooldown > 0}
-                  onClick={() => void sendCustomerSms()}
-                >
-                  {customerCooldown > 0 ? `${customerCooldown}s` : '获取验证码'}
-                </button>
-              </div>
-            </section>
-
-            <section className="partner-form-section">
-              <label className="partner-form-label">客户验证码</label>
               <div className="partner-input-wrap">
                 <input
                   className="partner-input"
-                  placeholder="发至客户手机"
-                  value={customerSmsCode}
-                  onChange={(e) => setCustomerSmsCode(e.target.value.replace(/\D/g, '').slice(0, 6))}
+                  placeholder="11 位手机号"
+                  value={phone}
+                  onChange={(e) => setPhone(e.target.value.replace(/\D/g, '').slice(0, 11))}
                 />
               </div>
             </section>
@@ -270,11 +445,12 @@ export default function ProxyOrderPage() {
               <button
                 type="button"
                 className="partner-proxy-product-picker"
-                onClick={() =>
+                onClick={() => {
+                  persistDraft();
                   navigate(
                     `/proxy-order/products${productId ? `?selected=${encodeURIComponent(productId)}` : ''}`,
-                  )
-                }
+                  );
+                }}
               >
                 {selectedProduct ? (
                   <>
@@ -389,11 +565,36 @@ export default function ProxyOrderPage() {
                     checked={autoReceive}
                     onChange={(e) => setAutoReceive(e.target.checked)}
                   />
-                  <span>同意自动收货（线下代下单提交后视为已送达并发放权益）</span>
+                  <span>同意自动收货（配送到址必选）</span>
                 </label>
               </>
             ) : null}
 
+            <section className="partner-form-section">
+              <label className="partner-form-label">支付方式</label>
+              <div className="partner-proxy-mode-tabs">
+                <button
+                  type="button"
+                  className={`partner-proxy-mode-tab${payMethod === 'NATIVE' ? ' is-active' : ''}`}
+                  onClick={() => setPayMethod('NATIVE')}
+                >
+                  收款码
+                </button>
+                <button
+                  type="button"
+                  className={`partner-proxy-mode-tab${payMethod === 'JSAPI' ? ' is-active' : ''}`}
+                  onClick={() => setPayMethod('JSAPI')}
+                >
+                  微信代付
+                </button>
+              </div>
+              <p className="label-md text-muted" style={{ marginTop: 8, lineHeight: 1.5 }}>
+                {payMethod === 'NATIVE'
+                  ? '提交后展示商家收款码，客户或现场扫码支付'
+                  : '提交后在微信内由您代客户完成支付（需已绑定微信）'}
+              </p>
+            </section>
+
             <section className="partner-proxy-fee-card">
               <h3 className="headline-md">费用明细</h3>
               {previewLoading ? (
@@ -428,73 +629,24 @@ export default function ProxyOrderPage() {
               )}
             </section>
 
-            {confirmStep ? (
-              <section className="partner-form-section partner-proxy-confirm">
-                <label className="partner-form-label">合伙人确认验证码</label>
-                <p className="label-md text-muted" style={{ marginBottom: 8 }}>
-                  确认线下已收款后，将向您的登录手机号发送验证码
-                </p>
-                <div className="partner-input-row">
-                  <div className="partner-input-wrap" style={{ flex: 1 }}>
-                    <input
-                      className="partner-input"
-                      placeholder="发至合伙人手机"
-                      value={partnerSmsCode}
-                      onChange={(e) => setPartnerSmsCode(e.target.value.replace(/\D/g, '').slice(0, 6))}
-                    />
-                  </div>
-                  <button
-                    type="button"
-                    className="btn btn-secondary"
-                    disabled={partnerCooldown > 0}
-                    onClick={() => void sendPartnerSms()}
-                  >
-                    {partnerCooldown > 0 ? `${partnerCooldown}s` : '重新发送'}
-                  </button>
-                </div>
-              </section>
-            ) : null}
-
             {msg ? (
               <p className="partner-form-error" role="alert">
                 {msg}
               </p>
             ) : null}
 
-            {!confirmStep ? (
-              <button
-                type="button"
-                className="btn btn-primary btn-block"
-                disabled={!preview}
-                onClick={() => void openConfirmStep()}
-                style={{ marginTop: 16 }}
-              >
-                确认代下单
-              </button>
-            ) : (
-              <div style={{ display: 'flex', gap: 8, marginTop: 16 }}>
-                <button
-                  type="button"
-                  className="btn btn-secondary"
-                  style={{ flex: 1 }}
-                  onClick={() => setConfirmStep(false)}
-                >
-                  返回修改
-                </button>
-                <button
-                  type="button"
-                  className="btn btn-primary"
-                  style={{ flex: 1 }}
-                  disabled={submitting || !preview}
-                  onClick={() => void submit()}
-                >
-                  {submitting ? '提交中…' : '验证并提交'}
-                </button>
-              </div>
-            )}
+            <button
+              type="button"
+              className="btn btn-primary btn-block"
+              disabled={submitting || paying || !preview}
+              onClick={() => void submit()}
+              style={{ marginTop: 16 }}
+            >
+              {submitting || paying ? '处理中…' : '提交并支付'}
+            </button>
 
             <p className="label-md text-muted" style={{ marginTop: 12, lineHeight: 1.5 }}>
-              线下已收款确认后，将自动创建/关联用户，订单标记为代下单并直接完成，同时发放对应权益。客户订单列表会显示您的姓名。
+              提交后进入在线支付；支付成功后发放权益。配送单将进入待发货由总部履约，现场提货走自提闭环。
             </p>
           </>
         )}

apps/h5-partner/src/pages/StoreCreatePage.tsx

@@ -13,8 +13,6 @@ import { resolveRegionBinding } from '../lib/china-region';
 
 import { checkStorePhoneAvailable } from '../lib/storePhone';
 
-import { formatStoreCoords, locateStorePosition } from '../lib/storeLocate';
-
 import { fetchPartnerCities, type OpenCityOption } from '../lib/upload';
 
 import { usePartnerSession } from '../contexts/PartnerSessionContext';
@@ -101,8 +99,6 @@ export default function StoreCreatePage() {
 
   const [categoryTree, setCategoryTree] = useState<StoreCategoryNode[]>([]);
 
-  const [locating, setLocating] = useState(false);
-
   const [mapPickerOpen, setMapPickerOpen] = useState(false);
 
   const draftSaveDisabledRef = useRef(false);
@@ -662,31 +658,6 @@ export default function StoreCreatePage() {
               <textarea rows={2} placeholder="请输入详细门牌号" value={form.address} onChange={(e) => patchForm({ address: e.target.value })} />
 
               <div style={{ display: 'flex', alignItems: 'center', gap: 8, marginTop: 8, flexWrap: 'wrap' }}>
-                <button
-                  type="button"
-                  className="partner-btn-outline"
-                  style={{ padding: '8px 12px', fontSize: 13 }}
-                  disabled={locating}
-                  onClick={() => {
-                    void (async () => {
-                      setLocating(true);
-                      try {
-                        const pos = await locateStorePosition();
-                        patchForm({
-                          latitude: String(pos.latitude),
-                          longitude: String(pos.longitude),
-                        });
-                        toastSuccess('已获取当前坐标');
-                      } catch (e) {
-                        toastError(e instanceof Error ? e.message : '定位失败');
-                      } finally {
-                        setLocating(false);
-                      }
-                    })();
-                  }}
-                >
-                  {locating ? '定位中…' : '获取当前位置'}
-                </button>
                 <button
                   type="button"
                   className="partner-btn-outline"
@@ -696,11 +667,12 @@ export default function StoreCreatePage() {
                   地图选点
                 </button>
                 <span className="label-md text-muted">
-                  {formatStoreCoords(form.latitude, form.longitude)
-                    ? `坐标：${formatStoreCoords(form.latitude, form.longitude)}`
-                    : '未定位（可定位或地图选点）'}
+                  {form.latitude.trim() && form.longitude.trim() ? '已选点' : '未选点'}
                 </span>
               </div>
+              {/* 经纬度仅内存/提交用，界面不展示 */}
+              <input type="hidden" name="latitude" value={form.latitude} readOnly />
+              <input type="hidden" name="longitude" value={form.longitude} readOnly />
 
             </div>
 
@@ -1164,9 +1136,7 @@ export default function StoreCreatePage() {
             longitude: String(loc.longitude),
             ...(loc.address && !form.address.trim() ? { address: loc.address } : {}),
           });
-          toastSuccess(
-            `已选点 ${loc.latitude.toFixed(6)}, ${loc.longitude.toFixed(6)}${loc.name ? `（${loc.name}）` : ''}`,
-          );
+          toastSuccess(loc.name ? `已选定：${loc.name}` : '位置已选定');
         }}
       />
 

apps/h5-partner/src/pages/StoreDetailPage.tsx

@@ -6,7 +6,6 @@ import { toastError, toastSuccess } from '../lib/toast';
 import { usePartnerSession } from '../contexts/PartnerSessionContext';
 import { canManagePartnerStore } from '../lib/partnerAccess';
 import { normalizeStringArray, patchEnvPhotoAt } from '../lib/storeDraft';
-import { formatStoreCoords, locateStorePosition } from '../lib/storeLocate';
 import OssUploadField from '../components/OssUploadField';
 import TencentLocPickerOverlay from '../components/TencentLocPickerOverlay';
 import {
@@ -55,7 +54,6 @@ export default function StoreDetailPage() {
   const [statusSaving, setStatusSaving] = useState(false);
   const [saving, setSaving] = useState(false);
   const [mediaSaving, setMediaSaving] = useState(false);
-  const [locating, setLocating] = useState(false);
   const [mapPickerOpen, setMapPickerOpen] = useState(false);
   const [actionError, setActionError] = useState('');
   const [closeConfirmOpen, setCloseConfirmOpen] = useState(false);
@@ -346,35 +344,6 @@ export default function StoreDetailPage() {
             <textarea disabled={readOnly} rows={2} value={form.address} onChange={(e) => setForm({ ...form, address: e.target.value })} />
             {!readOnly ? (
               <div style={{ display: 'flex', alignItems: 'center', gap: 8, marginTop: 8, flexWrap: 'wrap' }}>
-                <button
-                  type="button"
-                  className="partner-btn-outline"
-                  style={{ padding: '8px 12px', fontSize: 13 }}
-                  disabled={locating}
-                  onClick={() => {
-                    void (async () => {
-                      setLocating(true);
-                      setActionError('');
-                      try {
-                        const pos = await locateStorePosition();
-                        setForm((prev) => ({
-                          ...prev,
-                          latitude: String(pos.latitude),
-                          longitude: String(pos.longitude),
-                        }));
-                        toastSuccess('已获取当前坐标');
-                      } catch (e) {
-                        const msg = e instanceof Error ? e.message : '定位失败';
-                        setActionError(msg);
-                        toastError(msg);
-                      } finally {
-                        setLocating(false);
-                      }
-                    })();
-                  }}
-                >
-                  {locating ? '定位中…' : '获取当前位置'}
-                </button>
                 <button
                   type="button"
                   className="partner-btn-outline"
@@ -384,16 +353,12 @@ export default function StoreDetailPage() {
                   地图选点
                 </button>
                 <span className="label-md text-muted">
-                  {formatStoreCoords(form.latitude, form.longitude)
-                    ? `坐标：${formatStoreCoords(form.latitude, form.longitude)}`
-                    : '未定位'}
+                  {form.latitude.trim() && form.longitude.trim() ? '已选点' : '未选点'}
                 </span>
               </div>
-            ) : formatStoreCoords(form.latitude, form.longitude) ? (
-              <p className="label-md text-muted" style={{ marginTop: 6 }}>
-                坐标：{formatStoreCoords(form.latitude, form.longitude)}
-              </p>
             ) : null}
+            <input type="hidden" name="latitude" value={form.latitude} readOnly />
+            <input type="hidden" name="longitude" value={form.longitude} readOnly />
           </div>
           <div className="partner-field">
             <label>门店简介</label>
@@ -523,9 +488,7 @@ export default function StoreDetailPage() {
             longitude: String(loc.longitude),
             ...(loc.address && !prev.address.trim() ? { address: loc.address } : {}),
           }));
-          toastSuccess(
-            `已选点 ${loc.latitude.toFixed(6)}, ${loc.longitude.toFixed(6)}${loc.name ? `（${loc.name}）` : ''}`,
-          );
+          toastSuccess(loc.name ? `已选定：${loc.name}` : '位置已选定');
         }}
       />
     </div>

apps/h5-shop/public/MP_verify_ayPJ4CQqbUcec3jX.txt

@@ -0,0 +1 @@
+ayPJ4CQqbUcec3jX

apps/h5-shop/src/components/AuthGate.tsx

@@ -1,4 +1,5 @@
 import { Navigate, useLocation } from 'react-router-dom';
+import { getStoreProfile, hasShopWxSession } from '../lib/api';
 import { useStoreSession } from '../contexts/StoreSessionContext';
 
 const PUBLIC_PATHS = new Set(['/login', '/legal/user-agreement', '/legal/privacy-policy']);
@@ -25,6 +26,10 @@ export default function AuthGate({ children }: { children: React.ReactNode }) {
   }
 
   if (!authenticated && !PUBLIC_PATHS.has(location.pathname)) {
+    const profile = getStoreProfile();
+    if (profile && hasShopWxSession() && location.pathname !== '/login') {
+      return <Navigate to="/login?quick=1" replace state={{ from: location }} />;
+    }
     return <Navigate to="/login" replace state={{ from: location }} />;
   }
 

apps/h5-shop/src/contexts/StoreSessionContext.tsx

@@ -7,6 +7,8 @@ import {
   useState,
   type ReactNode,
 } from 'react';
+import { stripOAuthParamsFromLocation } from '@dukang/weixin-sdk';
+import { isWxAuthorizeEnabled } from '@dukang/shared-types';
 import {
   clearAuth,
   ensureSession,
@@ -14,6 +16,15 @@ import {
   type ShopSessionPayload,
   type StoreSessionStore,
 } from '../lib/api';
+import {
+  fetchClientConfig,
+  handleShopWechatCallback,
+  handleShopWechatLoginResult,
+  isShopWechatUnboundError,
+  SHOP_WX_NEED_PHONE_LOGIN_MSG,
+  stashShopWechatLoginHint,
+} from '../lib/wechat-auth';
+import { isWechatEnv } from '../lib/weixin';
 
 type StoreSessionContextValue = {
   ready: boolean;
@@ -26,6 +37,12 @@ type StoreSessionContextValue = {
 
 const StoreSessionContext = createContext<StoreSessionContextValue | null>(null);
 
+function deriveSelectStore(session: ShopSessionPayload, nextStore: StoreSessionStore | null) {
+  const storeId = nextStore?.storeId || session.selectedStoreId || '';
+  const stores = session.stores ?? nextStore?.stores ?? [];
+  return stores.length > 1 && !storeId;
+}
+
 export function StoreSessionProvider({ children }: { children: ReactNode }) {
   const [ready, setReady] = useState(false);
   const [authenticated, setAuthenticated] = useState(false);
@@ -43,9 +60,7 @@ export function StoreSessionProvider({ children }: { children: ReactNode }) {
         }
       : null;
     setStore(nextStore);
-    const storeId = nextStore?.storeId || session.selectedStoreId || '';
-    const stores = session.stores ?? nextStore?.stores ?? [];
-    setNeedsSelectStore(stores.length > 1 && !storeId);
+    setNeedsSelectStore(deriveSelectStore(session, nextStore));
   }, []);
 
   const resetSession = useCallback(() => {
@@ -59,6 +74,27 @@ export function StoreSessionProvider({ children }: { children: ReactNode }) {
     let cancelled = false;
     (async () => {
       try {
+        const params = new URLSearchParams(window.location.search);
+        if (isWechatEnv() && params.get('code')) {
+          try {
+            const config = await fetchClientConfig();
+            if (isWxAuthorizeEnabled(config)) {
+              const result = await handleShopWechatCallback();
+              if (result && !cancelled) {
+                const session = handleShopWechatLoginResult(result);
+                if (session) applySession(session);
+              }
+              stripOAuthParamsFromLocation();
+            }
+          } catch (e) {
+            const raw = e instanceof Error ? e.message : '';
+            if (isShopWechatUnboundError(raw)) {
+              stashShopWechatLoginHint(SHOP_WX_NEED_PHONE_LOGIN_MSG);
+            }
+            stripOAuthParamsFromLocation();
+          }
+        }
+
         const result = await ensureSession();
         if (cancelled) return;
         setAuthenticated(result.authenticated);
@@ -73,7 +109,7 @@ export function StoreSessionProvider({ children }: { children: ReactNode }) {
     return () => {
       cancelled = true;
     };
-  }, [resetSession]);
+  }, [applySession, resetSession]);
 
   const value = useMemo(
     () => ({ ready, authenticated, needsSelectStore, store, applySession, resetSession }),

apps/h5-shop/src/lib/wechat-auth.ts

@@ -15,6 +15,40 @@ export type ShopAccountProfile = {
   store?: { name: string };
 };
 
+/** 微信未绑定门店账号时的登录提示 */
+export const SHOP_WX_NEED_PHONE_LOGIN_MSG = '请先用手机号登录';
+
+const SHOP_WX_LOGIN_HINT_KEY = 'shop_wx_login_hint';
+
+export function isShopWechatUnboundError(message: string): boolean {
+  return message.includes('首次登录') || message.includes('手机验证码') || message.includes('请先用手机号');
+}
+
+export function formatShopWechatError(e: unknown): string {
+  const text = e instanceof Error ? e.message : '微信登录失败';
+  if (isShopWechatUnboundError(text)) return SHOP_WX_NEED_PHONE_LOGIN_MSG;
+  return text;
+}
+
+/** OAuth 在启动层失败时暂存提示，供登录页展示 */
+export function stashShopWechatLoginHint(message: string): void {
+  try {
+    sessionStorage.setItem(SHOP_WX_LOGIN_HINT_KEY, message);
+  } catch {
+    /* ignore */
+  }
+}
+
+export function consumeShopWechatLoginHint(): string | null {
+  try {
+    const hint = sessionStorage.getItem(SHOP_WX_LOGIN_HINT_KEY);
+    if (hint) sessionStorage.removeItem(SHOP_WX_LOGIN_HINT_KEY);
+    return hint;
+  } catch {
+    return null;
+  }
+}
+
 export async function fetchClientConfig(): Promise<ClientRuntimeConfig> {
   return request<ClientRuntimeConfig>('SHOP_H5', '/common/client-config');
 }

apps/h5-shop/src/pages/LoginPage.tsx

@@ -1,14 +1,33 @@
-import { useRef, useState, type RefObject } from 'react';
-import { Link, useNavigate } from 'react-router-dom';
+import { useEffect, useRef, useState, type RefObject } from 'react';
+import { Link, useNavigate, useSearchParams } from 'react-router-dom';
 import AppImage from '@dukang/shared-ui/AppImage';
+import { isWxAuthorizeEnabled } from '@dukang/shared-types';
+import { stripOAuthParamsFromLocation } from '@dukang/weixin-sdk';
 import { useStoreSession } from '../contexts/StoreSessionContext';
 import {
   getLastPhone,
+  getStoreProfile,
+  hasShopWxSession,
   request,
   saveRememberedSession,
   type ShopSessionPayload,
 } from '../lib/api';
 import { routeAfterShopLogin } from './SelectStorePage';
+import {
+  bindShopWechatAfterSmsLogin,
+  consumeShopWechatLoginHint,
+  fetchClientConfig,
+  formatShopWechatError,
+  handleShopWechatCallback,
+  handleShopWechatLoginResult,
+  loginShopWithWechat,
+} from '../lib/wechat-auth';
+import { isWechatEnv } from '../lib/weixin';
+
+function maskPhone(phone: string) {
+  if (phone.length < 7) return phone;
+  return `${phone.slice(0, 3)} **** ${phone.slice(-4)}`;
+}
 
 function ShopAgreementCheckbox({
   agreed,
@@ -43,14 +62,49 @@ function ShopAgreementCheckbox({
 export default function LoginPage() {
   const navigate = useNavigate();
   const { applySession } = useStoreSession();
+  const [params, setSearchParams] = useSearchParams();
+  const quick = params.get('quick') === '1';
+  const savedProfile = getStoreProfile();
   const [phone, setPhone] = useState(getLastPhone());
   const [code, setCode] = useState('');
   const [agreed, setAgreed] = useState(false);
   const [loading, setLoading] = useState(false);
-  const [msg, setMsg] = useState('');
+  const [wxLoading, setWxLoading] = useState(false);
+  const [msg, setMsg] = useState(() => consumeShopWechatLoginHint() ?? '');
   const [codeCooldown, setCodeCooldown] = useState(0);
+  const [wxAuthorize, setWxAuthorize] = useState(false);
   const agreementRef = useRef<HTMLLabelElement>(null);
 
+  useEffect(() => {
+    fetchClientConfig()
+      .then((config) => setWxAuthorize(isWxAuthorizeEnabled(config)))
+      .catch(() => setWxAuthorize(false));
+  }, []);
+
+  useEffect(() => {
+    const hint = consumeShopWechatLoginHint();
+    if (hint) setMsg(hint);
+  }, []);
+
+  useEffect(() => {
+    if (!isWechatEnv() || !wxAuthorize || !params.get('code')) return;
+    void handleShopWechatCallback()
+      .then((result) => {
+        if (!result) return;
+        const session = handleShopWechatLoginResult(result);
+        if (session) {
+          applySession(session);
+          stripOAuthParamsFromLocation();
+          setSearchParams({}, { replace: true });
+          routeAfterShopLogin(session, navigate);
+        }
+      })
+      .catch((e) => setMsg(formatShopWechatError(e)));
+  }, [applySession, navigate, params, setSearchParams, wxAuthorize]);
+
+  const quickStoreName = savedProfile?.storeName ?? '门店管理中心';
+  const quickPhone = savedProfile?.phone || phone;
+
   function ensureAgreed() {
     if (!agreed) {
       setMsg('请先阅读并同意用户协议');
@@ -95,6 +149,11 @@ export default function LoginPage() {
       });
       saveRememberedSession(data);
       applySession(data);
+      if (isWechatEnv() && wxAuthorize) {
+        setMsg('登录成功，正在关联微信…');
+        await bindShopWechatAfterSmsLogin();
+        return;
+      }
       routeAfterShopLogin(data, navigate);
     } catch (e) {
       setMsg(e instanceof Error ? e.message : '登录失败');
@@ -103,6 +162,103 @@ export default function LoginPage() {
     }
   }
 
+  async function wechatLogin() {
+    if (!ensureAgreed()) return;
+    setMsg('');
+    if (!isWechatEnv()) {
+      setMsg('请在微信内打开以使用微信一键登录');
+      return;
+    }
+    setWxLoading(true);
+    try {
+      const session = await loginShopWithWechat();
+      if (session) {
+        applySession(session);
+        routeAfterShopLogin(session, navigate);
+      }
+    } catch (e) {
+      setMsg(formatShopWechatError(e));
+    } finally {
+      setWxLoading(false);
+    }
+  }
+
+  if (quick) {
+    const canWechatQuick = wxAuthorize && isWechatEnv() && hasShopWxSession() && !!savedProfile;
+
+    return (
+      <div className="shop-quick-login-page">
+        <header className="shop-quick-header">
+          <AppImage src="/logo.png" alt="杜康好客" wrapperClassName="shop-quick-logo" fit="contain" />
+          <h1 className="shop-quick-welcome">欢迎回来</h1>
+          <div className="shop-quick-welcome-line" />
+        </header>
+
+        <section className="shop-quick-store-card">
+          <div className="shop-quick-store-inner">
+            <div className="shop-quick-store-icon">
+              <span className="material-symbols-outlined shop-fill-icon">storefront</span>
+            </div>
+            <div>
+              <h2 className="shop-quick-store-name">{quickStoreName}</h2>
+              <p className="shop-quick-store-phone">{maskPhone(quickPhone)}</p>
+            </div>
+            <span className="shop-quick-verified">
+              <span className="material-symbols-outlined shop-fill-icon" style={{ fontSize: 14 }}>verified_user</span>
+              认证门店
+            </span>
+            <div className="shop-quick-switch">
+              <Link to="/login">
+                <span className="material-symbols-outlined" style={{ fontSize: 18 }}>sync</span>
+                切换账号
+              </Link>
+            </div>
+          </div>
+        </section>
+
+        <div className="shop-quick-actions">
+          {msg && <p className="shop-login-msg">{msg}</p>}
+          <ShopAgreementCheckbox
+            agreed={agreed}
+            onChange={setAgreed}
+            labelRef={agreementRef}
+          />
+          {canWechatQuick ? (
+            <button
+              type="button"
+              className="shop-quick-login-btn shop-quick-login-btn--wechat"
+              disabled={wxLoading}
+              onClick={() => void wechatLogin()}
+            >
+              <span className="material-symbols-outlined">chat</span>
+              <span>{wxLoading ? '登录中...' : '微信一键登录'}</span>
+            </button>
+          ) : (
+            <p className="shop-login-msg" style={{ textAlign: 'center' }}>
+              {wxAuthorize && !isWechatEnv()
+                ? '请在微信内打开以使用一键登录'
+                : '请使用验证码登录并绑定微信后，即可 7 天内免登录'}
+            </p>
+          )}
+          {!canWechatQuick && (
+            <Link to="/login" className="shop-quick-login-btn" style={{ textAlign: 'center', textDecoration: 'none' }}>
+              验证码登录
+            </Link>
+          )}
+          <div className="shop-quick-secure">
+            <span className="material-symbols-outlined" style={{ fontSize: 16 }}>lock</span>
+            <span>{canWechatQuick ? '微信验证 · 7 天内免登录' : '加密环境安全登录中'}</span>
+          </div>
+        </div>
+
+        <footer className="shop-quick-footer">
+          <p className="shop-login-footer-brand">SECURED BY DUKANG HERITAGE</p>
+          <p style={{ fontSize: 10, fontFamily: 'var(--font-label)' }}>© 2024 杜康酒业门店管理系统</p>
+        </footer>
+      </div>
+    );
+  }
+
   return (
     <div className="shop-login-page">
       <header className="shop-login-hero">
@@ -172,8 +328,29 @@ export default function LoginPage() {
             <span>{loading ? '登录中...' : '登录'}</span>
             {!loading && <span className="material-symbols-outlined">arrow_forward</span>}
           </button>
+
+          {wxAuthorize && (
+            <>
+              <div className="shop-login-divider">
+                <span className="shop-login-divider-line" />
+                <span className="shop-login-divider-text">或者</span>
+                <span className="shop-login-divider-line" />
+              </div>
+
+              <button
+                type="button"
+                className="shop-login-wechat"
+                disabled={wxLoading}
+                onClick={() => void wechatLogin()}
+              >
+                <span className="material-symbols-outlined">chat</span>
+                <span>{wxLoading ? '登录中...' : '微信一键登录'}</span>
+              </button>
+            </>
+          )}
+
           <p className="shop-login-msg" style={{ textAlign: 'center', marginTop: 12 }}>
-            手机号验证成功后，7 天内无需再次输入验证码
+            手机号验证成功后，7 天内无需再次输入验证码；微信内登录将自动关联微信
           </p>
         </div>
       </main>
@@ -183,6 +360,11 @@ export default function LoginPage() {
         <span className="material-symbols-outlined shop-fill-icon" style={{ opacity: 0.3, fontSize: 20, color: 'var(--color-outline)' }}>
           security
         </span>
+        {hasShopWxSession() && savedProfile && (
+          <p style={{ marginTop: 16, textAlign: 'center' }}>
+            <Link to="/login?quick=1" className="text-primary body-md">微信快捷登录</Link>
+          </p>
+        )}
       </footer>
     </div>
   );

apps/mini-user/src/app.tsx

@@ -1,13 +1,66 @@
 import './lib/text-encoding-polyfill';
-import { PropsWithChildren } from 'react';
+import { PropsWithChildren, useRef } from 'react';
+import Taro, { useDidShow } from '@tarojs/taro';
 import WechatShareBootstrap from './components/WechatShareBootstrap';
 import { patchTaroH5Hooks } from './lib/patch-taro-h5-hooks';
+import { handleWechatOrderConfirmShow } from './lib/wechat-order-confirm';
 import './app.css';
 
 // H5：在首屏 page hooks 执行前，把 Taro.useDidShow 等绑到与 createReactApp 同一份 runtime
 patchTaroH5Hooks();
 
 function App({ children }: PropsWithChildren) {
+  const handlingRef = useRef(false);
+
+  useDidShow((options?: {
+    referrerInfo?: {
+      appId?: string;
+      extraData?: { status?: string; errormsg?: string; req_extradata?: Record<string, string> };
+    };
+  }) => {
+    if (process.env.TARO_ENV !== 'weapp') return;
+    if (handlingRef.current) return;
+
+    const referrerInfo =
+      options?.referrerInfo ||
+      (typeof Taro.getEnterOptionsSync === 'function'
+        ? (
+            Taro.getEnterOptionsSync() as {
+              referrerInfo?: {
+                appId?: string;
+                extraData?: {
+                  status?: string;
+                  errormsg?: string;
+                  req_extradata?: Record<string, string>;
+                };
+              };
+            }
+          ).referrerInfo
+        : undefined);
+    if (!referrerInfo?.appId) return;
+
+    handlingRef.current = true;
+    void handleWechatOrderConfirmShow({ referrerInfo })
+      .then((result) => {
+        if (result.redirectUrl) {
+          Taro.redirectTo({ url: result.redirectUrl }).catch(() => {
+            Taro.reLaunch({ url: result.redirectUrl! });
+          });
+          return;
+        }
+        if (!result.handled || !result.orderId) return;
+        const pages = Taro.getCurrentPages();
+        const cur = pages[pages.length - 1] as { route?: string } | undefined;
+        const route = cur?.route || '';
+        if (route.includes('pickup-receive')) {
+          Taro.redirectTo({ url: '/pages/orders/index?tab=all' }).catch(() => {});
+        }
+      })
+      .finally(() => {
+        handlingRef.current = false;
+      });
+  });
+
   return (
     <>
       <WechatShareBootstrap />

apps/mini-user/src/lib/api.ts

@@ -1,6 +1,7 @@
 import Taro from '@tarojs/taro';
 import { ClientApp } from '@dukang/shared-types';
 import { forceReloadAfterAccountMerge } from './auth-nav';
+import { resetStoresSessionBootstrap } from './stores-session';
 
 function resolveApiBase(): string {
   const origin =
@@ -56,6 +57,8 @@ export function isLoggedIn(): boolean {
 
 export function logout() {
   clearAuth();
+  // 主动退出才重置门店「当次登录」会话；401 清 token 不要打断门店筛选
+  resetStoresSessionBootstrap();
   Taro.reLaunch({ url: '/pages/home/index' });
 }
 

apps/mini-user/src/lib/stores-session.ts

@@ -0,0 +1,135 @@
+/**
+ * 门店列表「当次登录」会话 —— 用 Taro Storage 持久化，
+ * 避免模块多实例 / globalThis 不可靠导致切 tab 后当成首次进入。
+ * 仅 logout 时 clear。
+ */
+
+import Taro from '@tarojs/taro';
+
+export type StoresSessionRegion = {
+  province: string;
+  city: string;
+  district: string;
+};
+
+export type StoresSessionCategory = {
+  parentId: string;
+  parentName: string;
+  childId: string;
+  childName: string;
+};
+
+export type StoresListCache = {
+  cityKey: string;
+  cityCode: string;
+  listRegion: StoresSessionRegion;
+  items: unknown[];
+  filterRegion: StoresSessionRegion;
+  keyword: string;
+  keywordInput: string;
+  category: StoresSessionCategory;
+};
+
+type StoresSession = {
+  bootstrapped: boolean;
+  cache: StoresListCache | null;
+};
+
+const STORAGE_KEY = 'dukang_stores_session_v1';
+
+let memory: StoresSession | null = null;
+
+function emptySession(): StoresSession {
+  return { bootstrapped: false, cache: null };
+}
+
+function readSession(): StoresSession {
+  if (memory) return memory;
+  try {
+    const raw = Taro.getStorageSync(STORAGE_KEY);
+    if (!raw) {
+      memory = emptySession();
+      return memory;
+    }
+    const parsed = (typeof raw === 'string' ? JSON.parse(raw) : raw) as Partial<StoresSession>;
+    memory = {
+      bootstrapped: !!parsed.bootstrapped,
+      cache: (parsed.cache as StoresListCache | null) ?? null,
+    };
+    return memory;
+  } catch {
+    memory = emptySession();
+    return memory;
+  }
+}
+
+function writeSession(next: StoresSession) {
+  memory = next;
+  try {
+    Taro.setStorageSync(STORAGE_KEY, JSON.stringify(next));
+  } catch {
+    /* ignore quota */
+  }
+}
+
+export function isStoresSessionBootstrapped(): boolean {
+  return readSession().bootstrapped;
+}
+
+export function markStoresSessionBootstrapped(): void {
+  const cur = readSession();
+  writeSession({ ...cur, bootstrapped: true });
+}
+
+export function getStoresListCache(): StoresListCache | null {
+  return readSession().cache;
+}
+
+export function setStoresListCache(cache: StoresListCache | null): void {
+  const cur = readSession();
+  writeSession({ ...cur, bootstrapped: true, cache });
+}
+
+export function patchStoresFilterCache(
+  patch: Partial<
+    Pick<StoresListCache, 'filterRegion' | 'keyword' | 'keywordInput' | 'category'>
+  >,
+): void {
+  const cur = readSession();
+  if (!cur.cache) {
+    // 列表尚未写入时也要记下用户筛选，避免切回丢失
+    writeSession({
+      bootstrapped: true,
+      cache: {
+        cityKey: '',
+        cityCode: '',
+        listRegion: patch.filterRegion ?? { province: '', city: '', district: '' },
+        items: [],
+        filterRegion: patch.filterRegion ?? { province: '', city: '', district: '' },
+        keyword: patch.keyword ?? '',
+        keywordInput: patch.keywordInput ?? '',
+        category: patch.category ?? {
+          parentId: '',
+          parentName: '',
+          childId: '',
+          childName: '',
+        },
+      },
+    });
+    return;
+  }
+  writeSession({
+    ...cur,
+    bootstrapped: true,
+    cache: { ...cur.cache, ...patch },
+  });
+}
+
+export function resetStoresSessionBootstrap(): void {
+  memory = emptySession();
+  try {
+    Taro.removeStorageSync(STORAGE_KEY);
+  } catch {
+    /* ignore */
+  }
+}

apps/mini-user/src/lib/wechat-order-confirm.ts

@@ -0,0 +1,299 @@
+import Taro from '@tarojs/taro';
+import { request, toast } from './api';
+import { fetchClientConfig } from './pay-wechat';
+
+/** 微信确认收货组件来源 AppId（官方固定） */
+export const WECHAT_ORDER_CONFIRM_APPID = 'wx1183b055aeec94d1';
+
+const PENDING_KEY = 'pending_wechat_order_confirm';
+
+export type WechatConfirmPayload = {
+  merchantId?: string | null;
+  merchantTradeNo?: string | null;
+  transactionId?: string | null;
+};
+
+type PendingConfirm = {
+  orderId: string;
+  redirectUrl?: string;
+};
+
+type OpenBusinessViewOptions = {
+  businessType: string;
+  extraData: Record<string, string>;
+  success?: () => void;
+  fail?: (err: { errMsg?: string }) => void;
+  complete?: () => void;
+};
+
+type MiniWx = {
+  openBusinessView?: (opts: OpenBusinessViewOptions) => void;
+};
+
+/**
+ * 取小程序原生 wx.openBusinessView。
+ * 官方兼容写法：`if (wx.openBusinessView) { ... }`（不要用 canIUse 挡业务组件）。
+ * Taro 未封装该 API；模块作用域下可能读不到全局 wx，需多重回退。
+ */
+function getOpenBusinessView(): ((opts: OpenBusinessViewOptions) => void) | null {
+  if (process.env.TARO_ENV !== 'weapp') return null;
+
+  const candidates: Array<MiniWx | null | undefined> = [];
+
+  try {
+    // eslint-disable-next-line no-undef
+    if (typeof wx !== 'undefined') candidates.push(wx as MiniWx);
+  } catch {
+    /* ignore */
+  }
+
+  const g = globalThis as typeof globalThis & { wx?: MiniWx };
+  candidates.push(g.wx);
+
+  try {
+    // 跳出 bundler 模块作用域，读微信运行时全局
+    const fromRuntime = new Function(
+      'return typeof wx !== "undefined" ? wx : null',
+    )() as MiniWx | null;
+    candidates.push(fromRuntime);
+  } catch {
+    /* ignore */
+  }
+
+  for (const api of candidates) {
+    if (api && typeof api.openBusinessView === 'function') {
+      return api.openBusinessView.bind(api);
+    }
+  }
+
+  return null;
+}
+
+export function savePendingWechatOrderConfirm(pending: PendingConfirm) {
+  Taro.setStorageSync(PENDING_KEY, JSON.stringify(pending));
+}
+
+export function takePendingWechatOrderConfirm(): PendingConfirm | null {
+  try {
+    const raw = Taro.getStorageSync(PENDING_KEY);
+    if (!raw) return null;
+    Taro.removeStorageSync(PENDING_KEY);
+    return typeof raw === 'string' ? (JSON.parse(raw) as PendingConfirm) : (raw as PendingConfirm);
+  } catch {
+    Taro.removeStorageSync(PENDING_KEY);
+    return null;
+  }
+}
+
+function normalizePayload(payload?: WechatConfirmPayload | null): WechatConfirmPayload {
+  return {
+    merchantId: payload?.merchantId?.trim() || undefined,
+    merchantTradeNo: payload?.merchantTradeNo?.trim() || undefined,
+    transactionId: payload?.transactionId?.trim() || undefined,
+  };
+}
+
+async function resolveConfirmPayload(
+  orderId: string,
+  hint?: WechatConfirmPayload | null,
+): Promise<WechatConfirmPayload> {
+  const fromHint = normalizePayload(hint);
+  if (fromHint.transactionId || (fromHint.merchantId && fromHint.merchantTradeNo)) {
+    return fromHint;
+  }
+
+  const order = await request<{
+    orderNo?: string;
+    payExternalNo?: string | null;
+    payment?: { externalNo?: string | null } | null;
+    wechatConfirm?: WechatConfirmPayload | null;
+  }>(`/trade/orders/${orderId}`);
+
+  const fromApi = normalizePayload(order.wechatConfirm);
+  if (fromApi.transactionId || (fromApi.merchantId && fromApi.merchantTradeNo)) {
+    return fromApi;
+  }
+
+  const transactionId =
+    order.payExternalNo?.trim() || order.payment?.externalNo?.trim() || undefined;
+  return normalizePayload({
+    transactionId,
+    merchantTradeNo: order.orderNo,
+    merchantId: fromApi.merchantId,
+  });
+}
+
+/**
+ * 拉起微信「确认收货」半屏组件。
+ * @see https://developers.weixin.qq.com/miniprogram/dev/platform-capabilities/business-capabilities/order-shipping/order-shipping-half.html
+ */
+export function openWechatOrderConfirm(opts: {
+  orderId: string;
+  payload: WechatConfirmPayload;
+  redirectUrl?: string;
+}): Promise<'opened' | 'unsupported' | 'missing_pay_ref'> {
+  const open = getOpenBusinessView();
+  if (!open) {
+    console.warn('[wechat-order-confirm] openBusinessView unavailable', {
+      taroEnv: process.env.TARO_ENV,
+    });
+    return Promise.resolve('unsupported');
+  }
+
+  const payload = normalizePayload(opts.payload);
+  const transactionId = payload.transactionId;
+  const merchantId = payload.merchantId;
+  const merchantTradeNo = payload.merchantTradeNo;
+  if (!transactionId && !(merchantId && merchantTradeNo)) {
+    console.warn('[wechat-order-confirm] missing pay ref', payload);
+    return Promise.resolve('missing_pay_ref');
+  }
+
+  const extraData: Record<string, string> = {};
+  if (transactionId) extraData.transaction_id = transactionId;
+  if (merchantId) extraData.merchant_id = merchantId;
+  if (merchantTradeNo) extraData.merchant_trade_no = merchantTradeNo;
+
+  savePendingWechatOrderConfirm({
+    orderId: opts.orderId,
+    redirectUrl: opts.redirectUrl,
+  });
+
+  return new Promise((resolve) => {
+    let settled = false;
+    const done = (mode: 'opened' | 'unsupported' | 'missing_pay_ref') => {
+      if (settled) return;
+      settled = true;
+      resolve(mode);
+    };
+
+    try {
+      open({
+        businessType: 'weappOrderConfirm',
+        extraData,
+        success: () => done('opened'),
+        fail: (err) => {
+          Taro.removeStorageSync(PENDING_KEY);
+          console.error('[wechat-order-confirm] openBusinessView fail', err, extraData);
+          toast(err?.errMsg || '无法打开微信确认收货，请稍后重试');
+          done('unsupported');
+        },
+      });
+    } catch (err) {
+      Taro.removeStorageSync(PENDING_KEY);
+      console.error('[wechat-order-confirm] openBusinessView throw', err);
+      toast('无法打开微信确认收货组件');
+      done('unsupported');
+    }
+  });
+}
+
+type ReferrerExtra = {
+  status?: string;
+  errormsg?: string;
+  req_extradata?: Record<string, string>;
+};
+
+/**
+ * 处理确认收货组件回跳（App/页面 onShow）。
+ * 成功则调用后端同步订单，并返回是否已处理。
+ */
+export async function handleWechatOrderConfirmShow(options?: {
+  referrerInfo?: { appId?: string; extraData?: ReferrerExtra };
+}): Promise<{ handled: boolean; orderId?: string; redirectUrl?: string }> {
+  const info = options?.referrerInfo;
+  if (!info?.appId || info.appId !== WECHAT_ORDER_CONFIRM_APPID) {
+    return { handled: false };
+  }
+
+  const pending = takePendingWechatOrderConfirm();
+  const status = info.extraData?.status;
+  if (status === 'cancel') {
+    toast('已取消确认收货');
+    return { handled: true, orderId: pending?.orderId };
+  }
+  if (status === 'fail') {
+    toast(info.extraData?.errormsg || '微信确认收货失败');
+    return { handled: true, orderId: pending?.orderId };
+  }
+  if (status !== 'success' || !pending?.orderId) {
+    return { handled: true };
+  }
+
+  try {
+    await request(`/trade/orders/${pending.orderId}/confirm-receive`, {
+      method: 'POST',
+      data: { source: 'WECHAT_COMPONENT' },
+    });
+    toast('确认收货成功', 'success');
+    return {
+      handled: true,
+      orderId: pending.orderId,
+      redirectUrl: pending.redirectUrl,
+    };
+  } catch (e) {
+    toast(e instanceof Error ? e.message : '同步订单失败');
+    return { handled: true, orderId: pending.orderId };
+  }
+}
+
+async function confirmLocally(opts: {
+  orderId: string;
+  onSitePickup?: boolean;
+  onLocalSuccess?: () => void | Promise<void>;
+}): Promise<'local'> {
+  await request(`/trade/orders/${opts.orderId}/confirm-receive`, {
+    method: 'POST',
+    data: {
+      onSitePickup: !!opts.onSitePickup,
+      source: 'USER',
+    },
+  });
+  await opts.onLocalSuccess?.();
+  return 'local';
+}
+
+/**
+ * 统一入口：
+ * - 小程序 + 真实支付：必须拉起 weappOrderConfirm，禁止静默降级
+ * - Mock / H5：本地确认
+ */
+export async function confirmOrderReceive(opts: {
+  orderId: string;
+  wechatConfirm?: WechatConfirmPayload | null;
+  onSitePickup?: boolean;
+  redirectUrl?: string;
+  onLocalSuccess?: () => void | Promise<void>;
+}): Promise<'wechat' | 'local'> {
+  const isWeapp = process.env.TARO_ENV === 'weapp';
+
+  if (!isWeapp) {
+    return confirmLocally(opts);
+  }
+
+  let mockPay = false;
+  try {
+    const cfg = await fetchClientConfig();
+    mockPay = !!cfg.mockPay;
+  } catch {
+    mockPay = false;
+  }
+
+  if (mockPay) {
+    return confirmLocally(opts);
+  }
+
+  const payload = await resolveConfirmPayload(opts.orderId, opts.wechatConfirm);
+  const mode = await openWechatOrderConfirm({
+    orderId: opts.orderId,
+    payload,
+    redirectUrl: opts.redirectUrl,
+  });
+
+  if (mode === 'opened') return 'wechat';
+
+  if (mode === 'missing_pay_ref') {
+    throw new Error('缺少微信支付单号，无法打开确认收货组件');
+  }
+  throw new Error('当前环境无法打开微信确认收货组件，请用微信最新版打开小程序后重试');
+}

apps/mini-user/src/pages/benefit/index.tsx

@@ -1,5 +1,5 @@
 import { useCallback, useMemo, useState } from 'react';
-import { View, Text } from '@tarojs/components';
+import { View, Text, Image } from '@tarojs/components';
 import Taro, { useDidShow, usePullDownRefresh, useShareAppMessage, useShareTimeline } from '@tarojs/taro';
 import PageShell from '../../components/PageShell';
 import ShareNavButton from '../../components/ShareNavButton';
@@ -13,6 +13,7 @@ import {
   DEFAULT_SHARE_TITLE,
   toWeappShareMessage,
 } from '../../lib/wechat-share';
+import iconBenefit from '../../assets/tabbar/benefit-active.png';
 
 type BenefitSummary = {
   totalBalance: number;
@@ -153,7 +154,7 @@ export default function BenefitPage() {
                 </View>
               </View>
               <View className="benefit-hero-logo">
-                <Text>康</Text>
+                <Image className="benefit-hero-logo-img" src={iconBenefit} mode="aspectFit" />
               </View>
             </View>
             <View

apps/mini-user/src/pages/home/index.tsx

@@ -38,8 +38,8 @@ type MiniHomeConfig = {
 
 const AROMA_TABS = [
   { key: 'QINGXIANG', label: '清香型' },
-  { key: 'NONGXIANG', label: '浓香型' },
   { key: 'JIANGXIANG', label: '酱香型' },
+  { key: 'NONGXIANG', label: '浓香型' },
 ] as const;
 
 export default function HomePage() {
@@ -111,21 +111,6 @@ export default function HomePage() {
     })();
   });
 
-  const availableAromas = useMemo(
-    () =>
-      AROMA_TABS.filter((item) =>
-        products.some((product) => product.aromaType === item.key),
-      ),
-    [products],
-  );
-
-  useEffect(() => {
-    if (loading || availableAromas.length === 0) return;
-    if (!availableAromas.some((item) => item.key === tab)) {
-      setTab(availableAromas[0].key);
-    }
-  }, [availableAromas, loading, tab]);
-
   function openProductDetail(id: string) {
     Taro.navigateTo({ url: `/pages/product-detail/index?id=${id}` });
   }
@@ -187,7 +172,7 @@ export default function HomePage() {
 
       <View className="home-aroma-nav">
         <View className="home-aroma-tabs">
-          {availableAromas.map((t) => (
+          {AROMA_TABS.map((t) => (
             <Text
               key={t.key}
               className={`home-aroma-tab${tab === t.key ? ' home-aroma-tab--active' : ''}`}
@@ -205,6 +190,9 @@ export default function HomePage() {
         {!loading && products.length === 0 ? (
           <View className="home-empty">当前城市暂无在售商品</View>
         ) : null}
+        {!loading && products.length > 0 && filtered.length === 0 ? (
+          <View className="home-empty">该香型暂未上线</View>
+        ) : null}
         {!loading &&
           filtered.map((p) => {
             const thumb = getProductMainImage(p);

apps/mini-user/src/pages/mine/index.tsx

@@ -23,24 +23,33 @@ import {
 } from '../../lib/mini-wechat-profile';
 import { isLoggedIn, logout, request, toast, type UserProfile } from '../../lib/api';
 import { isWechatEnv } from '../../lib/weixin';
+import { maskPhone } from '../../lib/phone';
 import {
   DEFAULT_SHARE_DESC,
   DEFAULT_SHARE_TITLE,
   toWeappShareMessage,
 } from '../../lib/wechat-share';
+import iconPendingPay from '../../assets/icons/待付款.png';
+import iconPaid from '../../assets/icons/已付款.png';
+import iconCompleted from '../../assets/icons/已完成.png';
+import iconAddress from '../../assets/icons/地址管理.png';
+import iconStores from '../../assets/icons/可用门店.png';
+import iconCs from '../../assets/icons/联系客服.png';
+import iconQualification from '../../assets/icons/资质公示.png';
+import iconAbout from '../../assets/icons/关于我们.png';
 
 const ORDER_SHORTCUTS = [
-  { tab: 'pending_pay', icon: '付', label: '待付款' },
-  { tab: 'paid', icon: '包', label: '已付款' },
-  { tab: 'completed', icon: '成', label: '已完成' },
+  { tab: 'pending_pay', icon: iconPendingPay, label: '待付款' },
+  { tab: 'paid', icon: iconPaid, label: '已付款' },
+  { tab: 'completed', icon: iconCompleted, label: '已完成' },
 ] as const;
 
 const SERVICES = [
-  { icon: '址', label: '地址管理', url: '/pages/addresses/index' },
-  { icon: '店', label: '可用门店', tab: '/pages/stores/index' },
-  { icon: '服', label: '联系客服', url: '/pages/customer-service/index' },
-  { icon: '资', label: '资质公示', action: 'qualification' as const },
-  { icon: '关', label: '关于我们', action: 'about' as const },
+  { icon: iconAddress, label: '地址管理', url: '/pages/addresses/index' },
+  { icon: iconStores, label: '可用门店', tab: '/pages/stores/index' },
+  { icon: iconCs, label: '联系客服', url: '/pages/customer-service/index' },
+  { icon: iconQualification, label: '资质公示', action: 'qualification' as const },
+  { icon: iconAbout, label: '关于我们', action: 'about' as const },
 ] as const;
 
 const isWeapp = process.env.TARO_ENV === 'weapp';
@@ -341,13 +350,15 @@ export default function MinePage() {
   const nickname = display.nickname || '用户';
   const needProfileFill = isWeapp && needsWxProfileFill(display);
   const avatarProfileReady = isWeapp ? !needProfileFill : hasWechat;
-  const memberLabel = needProfileFill
-    ? '点击头像完善资料'
-    : isWeapp || hasWechat
-      ? '好客会员'
-      : canWxAuth
+  const maskedPhone = profile?.phone ? maskPhone(String(profile.phone)) : '';
+  // 昵称下优先展示脱敏手机号；无手机号时再提示完善资料/授权
+  const memberLabel =
+    maskedPhone ||
+    (needProfileFill
+      ? '点击头像完善资料'
+      : !isWeapp && !hasWechat && canWxAuth
         ? '点击头像授权'
-        : '好客会员';
+        : '未绑定手机');
   const avatarClickable = isWeapp || (!hasWechat && canWxAuth);
   const previewAvatar = draftAvatarUrl || display.avatarUrl;
 
@@ -455,7 +466,7 @@ export default function MinePage() {
                   }
                 >
                   <View className="mine-order-icon">
-                    <Text>{item.icon}</Text>
+                    <Image className="mine-order-icon-img" src={item.icon} mode="aspectFit" />
                   </View>
                   {count > 0 ? (
                     <Text className="mine-order-badge">{count > 99 ? '99+' : count}</Text>
@@ -479,7 +490,7 @@ export default function MinePage() {
                 onClick={() => handleService(item)}
               >
                 <View className="mine-service-icon">
-                  <Text>{item.icon}</Text>
+                  <Image className="mine-service-icon-img" src={item.icon} mode="aspectFit" />
                 </View>
                 <Text className="mine-service-label">{item.label}</Text>
               </View>

apps/mini-user/src/pages/order-detail/index.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useMemo, useState } from 'react';
 import { View, Text } from '@tarojs/components';
-import Taro, { useRouter, useShareAppMessage, useShareTimeline } from '@tarojs/taro';
+import Taro, { useDidShow, useRouter, useShareAppMessage, useShareTimeline } from '@tarojs/taro';
 import PageShell from '../../components/PageShell';
 import SubPageHeader from '../../components/SubPageHeader';
 import ShareNavButton from '../../components/ShareNavButton';
@@ -9,6 +9,7 @@ import ContactCsButton from '../../components/ContactCsButton';
 import { request, toast } from '../../lib/api';
 import { buildPayUrl } from '../../lib/checkout-nav';
 import { maskPhone } from '../../lib/phone';
+import { confirmOrderReceive, type WechatConfirmPayload } from '../../lib/wechat-order-confirm';
 import {
   DEFAULT_SHARE_DESC,
   DEFAULT_SHARE_TITLE,
@@ -43,6 +44,7 @@ type OrderDetail = {
   isProxyOrder?: boolean;
   proxyPartnerName?: string | null;
   items?: OrderItem[];
+  wechatConfirm?: WechatConfirmPayload | null;
 };
 
 const STATUS_LABELS: Record<string, string> = {
@@ -82,6 +84,14 @@ export default function OrderDetailPage() {
       .catch((e) => toast(e instanceof Error ? e.message : '加载失败'));
   }, [orderId]);
 
+  useDidShow(() => {
+    if (!orderId) return;
+    // 从微信确认收货组件返回后刷新
+    request<OrderDetail>(`/trade/orders/${orderId}`)
+      .then(setOrder)
+      .catch(() => {});
+  });
+
   const isReship = !!order?.originOrderId;
   const isProxy = !!order && (order.isProxyOrder || order.orderType === 'PROXY');
   const canPay = !!order && order.status === 'PENDING_PAY' && !isReship;
@@ -127,7 +137,9 @@ export default function OrderDetailPage() {
 
     const { confirm } = await Taro.showModal({
       title: '确认收货？',
-      content: '请确认已收到商品。确认后订单将完成，好客权益可正常使用。',
+      content: isWeapp
+        ? '将打开微信确认收货，完成后订单即完结，无需再点服务通知。'
+        : '请确认已收到商品。确认后订单将完成，好客权益可正常使用。',
       confirmText: '确认收货',
       cancelText: '再想想',
     });
@@ -135,12 +147,19 @@ export default function OrderDetailPage() {
 
     setConfirming(true);
     try {
-      const updated = await request<OrderDetail>(`/trade/orders/${order.id}/confirm-receive`, {
-        method: 'POST',
-        data: {},
+      const mode = await confirmOrderReceive({
+        orderId: order.id,
+        wechatConfirm: order.wechatConfirm,
+        onLocalSuccess: async () => {
+          const updated = await request<OrderDetail>(`/trade/orders/${order.id}`);
+          setOrder(updated);
+          toast('已确认收货');
+        },
       });
-      setOrder(updated);
-      toast('已确认收货');
+      if (mode === 'wechat') {
+        // 回跳后由 App.onShow / 本页 useDidShow 处理
+        return;
+      }
     } catch (e) {
       toast(e instanceof Error ? e.message : '确认收货失败');
     } finally {

apps/mini-user/src/pages/orders/index.tsx

@@ -1,6 +1,6 @@
 import { useCallback, useEffect, useState } from 'react';
 import { View, Text, Image } from '@tarojs/components';
-import Taro, { usePullDownRefresh, useRouter } from '@tarojs/taro';
+import Taro, { useDidShow, usePullDownRefresh, useRouter } from '@tarojs/taro';
 import PageShell from '../../components/PageShell';
 import SubPageHeader from '../../components/SubPageHeader';
 import { request, toast } from '../../lib/api';
@@ -15,10 +15,16 @@ const TABS = [
   { key: 'completed', label: '已完成' },
 ] as const;
 
+/** 兼容历史链接 tab=done */
+function normalizeOrdersTab(raw?: string): string {
+  if (!raw) return 'all';
+  if (raw === 'done') return 'completed';
+  return TABS.some((t) => t.key === raw) ? raw : 'all';
+}
+
 function orderStatusLabel(tab: string, status?: string): string {
-  if (tab !== 'all') {
-    return TABS.find((t) => t.key === tab)?.label || status || '';
-  }
+  const tabLabel = TABS.find((t) => t.key === tab)?.label;
+  if (tab !== 'all' && tabLabel) return tabLabel;
   if (!status) return '';
   return ORDER_STATUS_LABELS[status] || status;
 }
@@ -47,8 +53,7 @@ type OrderRow = {
 
 export default function OrdersPage() {
   const router = useRouter();
-  const initialTab = (router.params.tab as string) || 'all';
-  const [tab, setTab] = useState(initialTab);
+  const [tab, setTab] = useState(() => normalizeOrdersTab(router.params.tab as string));
   const [orders, setOrders] = useState<OrderRow[]>([]);
   const [loading, setLoading] = useState(true);
 
@@ -72,6 +77,12 @@ export default function OrdersPage() {
     void loadOrders();
   }, [loadOrders]);
 
+  useDidShow(() => {
+    const next = normalizeOrdersTab(router.params.tab as string);
+    if (next !== tab) setTab(next);
+    else void loadOrders();
+  });
+
   usePullDownRefresh(() => {
     void loadOrders().finally(() => Taro.stopPullDownRefresh());
   });

apps/mini-user/src/pages/pickup-receive/index.tsx

@@ -5,6 +5,9 @@ import PageShell from '../../components/PageShell';
 import SubPageHeader from '../../components/SubPageHeader';
 import { request, toast } from '../../lib/api';
 import { getProductMainImage } from '../../lib/product-images';
+import { confirmOrderReceive, type WechatConfirmPayload } from '../../lib/wechat-order-confirm';
+
+const isWeapp = process.env.TARO_ENV === 'weapp';
 
 type OrderDetail = {
   id: string;
@@ -20,10 +23,19 @@ type OrderDetail = {
     mainImageUrl?: string | null;
     carouselUrls?: string[] | null;
   };
+  items?: Array<{
+    productName?: string;
+    productSpec?: string;
+    productImage?: string;
+    quantity?: number;
+  }>;
   imageUrl?: string | null;
   mainImageUrl?: string | null;
+  wechatConfirm?: WechatConfirmPayload | null;
 };
 
+const ORDERS_ALL_URL = '/pages/orders/index?tab=all';
+
 export default function PickupReceivePage() {
   const router = useRouter();
   const orderId = router.params.id ?? router.params.orderId ?? '';
@@ -45,17 +57,33 @@ export default function PickupReceivePage() {
   });
 
   async function confirmReceive() {
-    if (!orderId || submitting) return;
+    if (!orderId || !order || submitting) return;
+
+    if (isWeapp) {
+      const { confirm } = await Taro.showModal({
+        title: '确认收货？',
+        content: '将打开微信确认收货，完成后订单即完结，无需再点服务通知。',
+        confirmText: '确认收货',
+        cancelText: '再想想',
+      });
+      if (!confirm) return;
+    }
+
     setSubmitting(true);
     try {
-      await request(`/trade/orders/${orderId}/confirm-receive`, {
-        method: 'POST',
-        data: {},
+      const mode = await confirmOrderReceive({
+        orderId,
+        wechatConfirm: order.wechatConfirm,
+        onSitePickup: true,
+        redirectUrl: ORDERS_ALL_URL,
+        onLocalSuccess: async () => {
+          toast('确认收货成功', 'success');
+          setTimeout(() => {
+            Taro.redirectTo({ url: ORDERS_ALL_URL });
+          }, 500);
+        },
       });
-      toast('确认收货成功', 'success');
-      setTimeout(() => {
-        Taro.redirectTo({ url: '/pages/orders/index?tab=done' });
-      }, 500);
+      if (mode === 'wechat') return;
     } catch (e) {
       toast(e instanceof Error ? e.message : '确认失败');
     } finally {
@@ -63,9 +91,11 @@ export default function PickupReceivePage() {
     }
   }
 
-  const name = order?.productName || order?.product?.name || '商品';
-  const spec = order?.productSpec || order?.product?.spec;
+  const item = order?.items?.[0];
+  const name = item?.productName || order?.productName || order?.product?.name || '商品';
+  const spec = item?.productSpec || order?.productSpec || order?.product?.spec;
   const image =
+    (item?.productImage || '').trim() ||
     order?.mainImageUrl ||
     order?.imageUrl ||
     (order?.product ? getProductMainImage(order.product) : '') ||

apps/mini-user/src/pages/stores/index.tsx

@@ -1,4 +1,4 @@
-import { useCallback, useEffect, useMemo, useState } from 'react';
+import { useEffect, useMemo, useRef, useState } from 'react';
 import { View, Text, Image, Input } from '@tarojs/components';
 import Taro, { useDidShow, usePullDownRefresh, useShareAppMessage, useShareTimeline } from '@tarojs/taro';
 import PageShell from '../../components/PageShell';
@@ -28,6 +28,13 @@ import {
 import { FALLBACK_CITY_CODE } from '../../lib/product-images';
 import { formatDistanceMeters } from '../../lib/geo';
 import { request, toast } from '../../lib/api';
+import {
+  getStoresListCache,
+  isStoresSessionBootstrapped,
+  markStoresSessionBootstrapped,
+  patchStoresFilterCache,
+  setStoresListCache,
+} from '../../lib/stores-session';
 import {
   DEFAULT_SHARE_DESC,
   DEFAULT_SHARE_TITLE,
@@ -55,20 +62,49 @@ type Store = {
   distanceMeters?: number | null;
 };
 
+function makeCityKey(region: Pick<RegionSelection, 'province' | 'city'>): string {
+  return `${region.province}|${region.city}`;
+}
+
+/**
+ * 定位城市若未开城，接口会 fallback 到郑州 cityCode；
+ * 筛选器必须与真实拉取城市一致，否则列表被客户端滤空。
+ */
+function regionForCatalogFetch(resolved: {
+  openCity: boolean;
+  cityCode?: string;
+  region: RegionSelection;
+}): { cityCode: string; region: RegionSelection } {
+  const cityCode = getCityCodeForCatalog(resolved);
+  if (resolved.openCity && resolved.cityCode) {
+    return { cityCode, region: toCityWideRegion(resolved.region) };
+  }
+  return { cityCode: FALLBACK_CITY_CODE, region: toCityWideRegion(DEFAULT_REGION) };
+}
+
 export default function StoresPage() {
-  const [stores, setStores] = useState<Store[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [keywordInput, setKeywordInput] = useState('');
-  const [keyword, setKeyword] = useState('');
-  const [region, setRegion] = useState<RegionSelection>(DEFAULT_REGION);
+  const cached = getStoresListCache();
+  const [stores, setStores] = useState<Store[]>(() => (cached?.items as Store[] | undefined) ?? []);
+  const [loading, setLoading] = useState(() => !cached && !isStoresSessionBootstrapped());
+  const [keywordInput, setKeywordInput] = useState(() => cached?.keywordInput ?? '');
+  const [keyword, setKeyword] = useState(() => cached?.keyword ?? '');
+  const [region, setRegion] = useState<RegionSelection>(
+    () => cached?.filterRegion ?? cached?.listRegion ?? DEFAULT_REGION,
+  );
   const [regionOpen, setRegionOpen] = useState(false);
-  const [category, setCategory] = useState<CategorySelection>(EMPTY_CATEGORY);
+  const [category, setCategory] = useState<CategorySelection>(
+    () => cached?.category ?? EMPTY_CATEGORY,
+  );
   const [categoryOpen, setCategoryOpen] = useState(false);
   const [categoryTree, setCategoryTree] = useState<StoreCategoryNode[]>([]);
-  const [cityCode, setCityCode] = useState<string>(FALLBACK_CITY_CODE);
-  const [userCoords, setUserCoords] = useState<UserCoords | null>(() => readCachedUserCoords());
+  const [locating, setLocating] = useState(false);
+  const fetchCityKeyRef = useRef<string | null>(cached?.cityKey ?? null);
+  const fetchSeqRef = useRef(0);
+  const regionRef = useRef(region);
+  regionRef.current = region;
   const regionLabel = formatRegionLabel(region);
   const categoryLabel = formatCategoryLabel(category);
+  const showBootLoading = loading && stores.length === 0;
 
   const childIdsByParent = useMemo(() => {
     const map = new Map<string, string[]>();
@@ -81,13 +117,91 @@ export default function StoresPage() {
     return map;
   }, [categoryTree]);
 
+  async function fetchStores(
+    nextCode: string,
+    coords: UserCoords | null,
+    cityKey: string,
+    listRegion: RegionSelection,
+    /** 写入会话的筛选器；默认保留用户当前选择 */
+    filterRegion: RegionSelection = regionRef.current,
+  ) {
+    const seq = ++fetchSeqRef.current;
+    const qs = new URLSearchParams();
+    if (nextCode) qs.set('cityCode', nextCode);
+    if (coords) {
+      qs.set('lat', String(coords.latitude));
+      qs.set('lng', String(coords.longitude));
+    }
+    const path = qs.toString() ? `/stores?${qs}` : '/stores';
+    try {
+      const list = await request<Store[]>(path);
+      if (seq !== fetchSeqRef.current) return;
+      const items = Array.isArray(list) ? list : [];
+      setStores(items);
+      fetchCityKeyRef.current = cityKey;
+      const prev = getStoresListCache();
+      setStoresListCache({
+        cityKey,
+        cityCode: nextCode,
+        listRegion: toCityWideRegion(listRegion),
+        items,
+        filterRegion,
+        keyword: prev?.keyword ?? keyword,
+        keywordInput: prev?.keywordInput ?? keywordInput,
+        category: prev?.category ?? category,
+      });
+    } catch (e) {
+      if (seq !== fetchSeqRef.current) return;
+      toast(e instanceof Error ? e.message : '加载失败');
+    } finally {
+      if (seq === fetchSeqRef.current) setLoading(false);
+    }
+  }
+
+  /**
+   * 首次进入：弹窗 + 定位 + 拉列表。
+   * 同次再切回：只同步 tab 选中态，不改筛选、不拉接口、不 setState。
+   */
   useDidShow(() => {
     syncTabBarSelected(1);
-    void resolveUserCity().then((resolved) => {
-      setRegion(toCityWideRegion(resolved.region));
-      setCityCode(getCityCodeForCatalog(resolved));
-      setUserCoords(readCachedUserCoords());
-    });
+
+    if (isStoresSessionBootstrapped()) {
+      return;
+    }
+    markStoresSessionBootstrapped();
+
+    void (async () => {
+      const { confirm } = await Taro.showModal({
+        title: '获取当前位置',
+        content: '是否允许获取当前位置来搜索附近门店？拒绝后将按默认城市展示，可下拉刷新重新定位。',
+        confirmText: '允许',
+        cancelText: '暂不',
+      }).catch(() => ({ confirm: false, cancel: true }));
+
+      if (confirm) {
+        setLoading(true);
+        const resolved = await resolveUserCity(true);
+        const { cityCode, region: nextRegion } = regionForCatalogFetch(resolved);
+        const nextCityKey = makeCityKey(nextRegion);
+        setRegion(nextRegion);
+        regionRef.current = nextRegion;
+        await fetchStores(
+          cityCode,
+          readCachedUserCoords(),
+          nextCityKey,
+          nextRegion,
+          nextRegion,
+        );
+        return;
+      }
+
+      const nextRegion = toCityWideRegion(DEFAULT_REGION);
+      const nextCityKey = makeCityKey(nextRegion);
+      setRegion(nextRegion);
+      regionRef.current = nextRegion;
+      setLoading(true);
+      await fetchStores(FALLBACK_CITY_CODE, null, nextCityKey, nextRegion, nextRegion);
+    })();
   });
 
   useEffect(() => {
@@ -96,49 +210,29 @@ export default function StoresPage() {
       .catch(() => setCategoryTree([]));
   }, []);
 
-  const loadStores = useCallback(() => {
-    setLoading(true);
-    const qs = new URLSearchParams();
-    if (cityCode) qs.set('cityCode', cityCode);
-    const coords = userCoords ?? readCachedUserCoords();
-    if (coords) {
-      qs.set('lat', String(coords.latitude));
-      qs.set('lng', String(coords.longitude));
-    }
-    const path = qs.toString() ? `/stores?${qs}` : '/stores';
-    return request<Store[]>(path)
-      .then((list) => setStores(Array.isArray(list) ? list : []))
-      .catch((e) => toast(e instanceof Error ? e.message : '加载失败'))
-      .finally(() => setLoading(false));
-  }, [cityCode, userCoords]);
-
-  useEffect(() => {
-    void loadStores();
-  }, [loadStores]);
-
   usePullDownRefresh(() => {
     void (async () => {
       try {
         const resolved = await resolveUserCity(true);
-        setRegion(toCityWideRegion(resolved.region));
-        const nextCode = getCityCodeForCatalog(resolved);
-        setCityCode(nextCode);
-        const coords = readCachedUserCoords();
-        setUserCoords(coords);
-        setLoading(true);
-        const qs = new URLSearchParams();
-        if (nextCode) qs.set('cityCode', nextCode);
-        if (coords) {
-          qs.set('lat', String(coords.latitude));
-          qs.set('lng', String(coords.longitude));
+        const { cityCode, region: nextRegion } = regionForCatalogFetch(resolved);
+        const nextCityKey = makeCityKey(nextRegion);
+        setRegion(nextRegion);
+        regionRef.current = nextRegion;
+        if (fetchCityKeyRef.current !== nextCityKey) {
+          setStores([]);
+          setLoading(true);
         }
-        const path = qs.toString() ? `/stores?${qs}` : '/stores';
-        const list = await request<Store[]>(path);
-        setStores(Array.isArray(list) ? list : []);
+        await fetchStores(
+          cityCode,
+          readCachedUserCoords(),
+          nextCityKey,
+          nextRegion,
+          nextRegion,
+        );
       } catch (e) {
         toast(e instanceof Error ? e.message : '加载失败');
-      } finally {
         setLoading(false);
+      } finally {
         Taro.stopPullDownRefresh();
       }
     })();
@@ -165,7 +259,9 @@ export default function StoresPage() {
   });
 
   function applySearch() {
-    setKeyword(keywordInput.trim());
+    const next = keywordInput.trim();
+    setKeyword(next);
+    patchStoresFilterCache({ keyword: next, keywordInput });
   }
 
   function resetFilters() {
@@ -173,6 +269,49 @@ export default function StoresPage() {
     setKeyword('');
     setCategory(EMPTY_CATEGORY);
     setRegion(DEFAULT_REGION);
+    regionRef.current = DEFAULT_REGION;
+    patchStoresFilterCache({
+      keyword: '',
+      keywordInput: '',
+      category: EMPTY_CATEGORY,
+      filterRegion: DEFAULT_REGION,
+    });
+  }
+
+  async function locateToUserRegion() {
+    if (locating) return;
+    const { confirm } = await Taro.showModal({
+      title: '获取当前位置',
+      content: '是否允许获取当前位置，并将筛选定位到您所在的城市与区县？',
+      confirmText: '允许',
+      cancelText: '暂不',
+    }).catch(() => ({ confirm: false, cancel: true }));
+    if (!confirm) return;
+
+    setLocating(true);
+    setLoading(true);
+    try {
+      const resolved = await resolveUserCity(true);
+      // 筛选器用真实省市+区县；拉数仍按开城 cityCode（未开城则郑州）
+      const filterRegion = resolved.region;
+      const { cityCode, region: listRegion } = regionForCatalogFetch(resolved);
+      const nextCityKey = makeCityKey(listRegion);
+      setRegion(filterRegion);
+      regionRef.current = filterRegion;
+      await fetchStores(
+        cityCode,
+        readCachedUserCoords(),
+        nextCityKey,
+        listRegion,
+        filterRegion,
+      );
+      toast(`已定位到${formatRegionLabel(filterRegion)}`, 'success');
+    } catch (e) {
+      toast(e instanceof Error ? e.message : '定位失败');
+      setLoading(false);
+    } finally {
+      setLocating(false);
+    }
   }
 
   function formatHours(store: Store) {
@@ -226,16 +365,32 @@ export default function StoresPage() {
             <Text className="store-filter-chip-text">{categoryLabel}</Text>
             <Text className="store-filter-chip-arrow">▾</Text>
           </View>
-          <Text className="store-filter-reset" onClick={resetFilters}>
-            重置
-          </Text>
+          <View
+            className="store-filter-icon-btn"
+            onClick={resetFilters}
+            aria-label="重置筛选"
+          >
+            {/* 小程序 View 伪元素不稳定，用 Text 保证真机可见 */}
+            <Text className="store-filter-icon-glyph">↺</Text>
+          </View>
+          <View
+            className={`store-filter-icon-btn${locating ? ' store-filter-icon-btn--busy' : ''}`}
+            onClick={() => {
+              void locateToUserRegion();
+            }}
+            aria-label="获取当前位置"
+          >
+            <Text className="store-filter-icon-glyph">⌖</Text>
+          </View>
         </View>
       </View>
 
       <View className="store-list">
-        {loading ? <View className="u-empty">加载中…</View> : null}
-        {!loading && filtered.length === 0 ? <View className="u-empty">暂无营业中门店</View> : null}
-        {!loading &&
+        {showBootLoading ? <View className="u-empty">加载中…</View> : null}
+        {!showBootLoading && filtered.length === 0 ? (
+          <View className="u-empty">暂无营业中门店</View>
+        ) : null}
+        {!showBootLoading &&
           filtered.map((s) => (
             <View
               key={s.id}
@@ -282,14 +437,21 @@ export default function StoresPage() {
         value={region}
         levels={3}
         onClose={() => setRegionOpen(false)}
-        onConfirm={(next) => setRegion(next)}
+        onConfirm={(next) => {
+          setRegion(next);
+          regionRef.current = next;
+          patchStoresFilterCache({ filterRegion: next });
+        }}
       />
       <CategoryPicker
         open={categoryOpen}
         tree={categoryTree}
         value={category}
         onClose={() => setCategoryOpen(false)}
-        onConfirm={(next) => setCategory(next)}
+        onConfirm={(next) => {
+          setCategory(next);
+          patchStoresFilterCache({ category: next });
+        }}
       />
     </PageShell>
   );

apps/mini-user/src/styles/benefit.css

@@ -126,6 +126,13 @@
   color: var(--color-heritage-red);
   font-weight: 700;
   font-size: 18px;
+  overflow: hidden;
+}
+
+.benefit-hero-logo-img {
+  width: 28px;
+  height: 28px;
+  display: block;
 }
 
 .benefit-hero-cta {

apps/mini-user/src/styles/mine.css

@@ -255,16 +255,18 @@
 .mine-order-icon {
   width: 36px;
   height: 36px;
-  border-radius: 10px;
-  background: rgba(166, 29, 36, 0.08);
   display: flex;
   align-items: center;
   justify-content: center;
-  color: var(--color-heritage-red);
-  font-size: 16px;
   margin-bottom: 4px;
 }
 
+.mine-order-icon-img {
+  width: 28px;
+  height: 28px;
+  display: block;
+}
+
 .mine-order-badge {
   position: absolute;
   top: 2px;
@@ -300,18 +302,20 @@
 }
 
 .mine-service-icon {
-  width: 32px;
-  height: 32px;
-  border-radius: 8px;
-  background: var(--color-surface-container-low);
+  width: 36px;
+  height: 36px;
   display: flex;
   align-items: center;
   justify-content: center;
-  color: var(--color-heritage-red);
-  font-size: 14px;
   margin-bottom: 4px;
 }
 
+.mine-service-icon-img {
+  width: 28px;
+  height: 28px;
+  display: block;
+}
+
 .mine-service-label {
   font-size: 11px;
   color: var(--color-on-surface);

apps/mini-user/src/styles/stores.css

@@ -116,15 +116,27 @@
   color: var(--color-subtle-gray);
 }
 
-.store-filter-reset {
+.store-filter-icon-btn {
   flex-shrink: 0;
+  width: 36px;
   height: 36px;
-  padding: 0 10px;
+  border-radius: var(--radius-md);
+  background: var(--color-surface-container-low);
   display: flex;
   align-items: center;
   justify-content: center;
-  font-size: 13px;
-  font-weight: 600;
+  color: var(--color-heritage-red);
+  box-sizing: border-box;
+}
+
+.store-filter-icon-btn--busy {
+  opacity: 0.5;
+}
+
+.store-filter-icon-glyph {
+  font-size: 18px;
+  line-height: 1;
+  font-weight: 700;
   color: var(--color-heritage-red);
 }
 

apps/mini-user/types/global.d.ts

@@ -14,6 +14,14 @@ declare const definePageConfig: (config: Record<string, unknown>) => Record<stri
 
 declare const TARO_APP_API_ORIGIN: string;
 
+/** 微信小程序全局（Taro 未封装的 API 如 openBusinessView 需直接调用） */
+declare const wx: {
+  openBusinessView?: (opts: Record<string, unknown>) => void;
+  canIUse?: (schema: string) => boolean;
+  requestPayment?: (opts: Record<string, unknown>) => void;
+  [key: string]: unknown;
+};
+
 declare namespace NodeJS {
   interface ProcessEnv {
     TARO_ENV: 'weapp' | 'h5' | string;

deploy/bootstrap-staging.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# 在生产机上初始化 Staging 目录（同机双栈，一次性）
+# 用法（SSH 到服务器后）:
+#   APP_ROOT=/opt/dukang bash /opt/dukang/deploy/bootstrap-staging.sh
+# 或本机:
+#   ssh root@host 'bash -s' < deploy/bootstrap-staging.sh
+set -euo pipefail
+
+PROD_ROOT="${PROD_ROOT:-/opt/dukang}"
+STAGING_ROOT="${STAGING_ROOT:-/opt/dukang-staging}"
+GIT_REMOTE_URL="${GIT_REMOTE_URL:-}"
+GIT_BRANCH="${GIT_BRANCH:-dev}"
+
+if [[ -d "$STAGING_ROOT/.git" ]]; then
+  echo "==> 已存在 $STAGING_ROOT，跳过 clone"
+else
+  if [[ -z "$GIT_REMOTE_URL" ]]; then
+    if [[ -d "$PROD_ROOT/.git" ]]; then
+      GIT_REMOTE_URL="$(git -C "$PROD_ROOT" remote get-url origin)"
+    else
+      echo "错误: 请设置 GIT_REMOTE_URL，或确保 $PROD_ROOT 为 git 仓库" >&2
+      exit 1
+    fi
+  fi
+  echo "==> clone $GIT_REMOTE_URL → $STAGING_ROOT (branch $GIT_BRANCH)"
+  git clone --branch "$GIT_BRANCH" "$GIT_REMOTE_URL" "$STAGING_ROOT"
+fi
+
+mkdir -p "$STAGING_ROOT/server/dukang-api"
+if [[ ! -f "$STAGING_ROOT/server/dukang-api/.env.staging" ]]; then
+  if [[ -f "$STAGING_ROOT/server/dukang-api/.env.staging.example" ]]; then
+    cp "$STAGING_ROOT/server/dukang-api/.env.staging.example" \
+      "$STAGING_ROOT/server/dukang-api/.env.staging"
+    echo "==> 已生成 .env.staging（请编辑 DATABASE_URL / Redis / 微信后 sync 或本机改）"
+  else
+    echo "WARN: 无 .env.staging.example，请手动创建 .env.staging"
+  fi
+fi
+
+echo "==> 下一步:"
+echo "  1. 创建 RDS 库 dukang_staging，填好 $STAGING_ROOT/server/dukang-api/.env.staging"
+echo "  2. DNS: api-test/user-test/shop-test/partner-test/admin-test.dukanghaoke.com → 本机"
+echo "  3. 启用 nginx: ln -sf $STAGING_ROOT/deploy/nginx-dukang-staging.conf /etc/nginx/sites-enabled/"
+echo "     nginx -t && systemctl reload nginx（证书需含 *-test SAN）"
+echo "  4. 本机发版: bash deploy/deploy-staging.sh -- --seed --accept-data-loss"
+echo "==> bootstrap 完成"

deploy/deploy-prod.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+# 发生产环境：分支默认 main → /opt/dukang（8090–8094）
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+echo "==> 即将发往 PRODUCTION（main → /opt/dukang）"
+exec bash "$SCRIPT_DIR/deploy.sh" --env production "$@"

deploy/deploy-staging.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+# 发测试环境：分支默认 dev → /opt/dukang-staging（8190–8194）
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+exec bash "$SCRIPT_DIR/deploy.sh" --env staging "$@"

deploy/deploy.env.example

@@ -4,8 +4,14 @@ DEPLOY_USER=root
 DEPLOY_PORT=22
 # DEPLOY_SSH_KEY=~/.ssh/id_rsa
 
+# 同机双栈目录
+PROD_APP_ROOT=/opt/dukang
+STAGING_APP_ROOT=/opt/dukang-staging
+# 兼容旧字段（未指定 --env 时可能用到）
 APP_ROOT=/opt/dukang
+
 # 生产仓库（SSH）
 GIT_REPO_URL=git@git.yqidian.com:jacy/dukang.git
 GIT_REMOTE=origin
-GIT_BRANCH=dev
+# 默认分支已由 --env 决定：staging→dev，production→main
+# GIT_BRANCH=dev

deploy/deploy.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# 本地执行：SSH 到服务器拉代码并发布
+# 本地执行：SSH 到服务器拉代码并发布（支持 staging / production 同机双栈）
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
@@ -9,33 +9,35 @@ DEPLOY_HOST=""
 DEPLOY_USER="root"
 DEPLOY_PORT="22"
 DEPLOY_SSH_KEY=""
-APP_ROOT="/opt/dukang"
+APP_ROOT=""
 GIT_REMOTE="origin"
-GIT_BRANCH="dev"
+GIT_BRANCH=""
+DUKANG_DEPLOY_ENV=""
 
 CHECK_ONLY=false
 RELEASE_ARGS=()
 
 usage() {
   cat <<'EOF'
-用法: deploy/deploy.sh [选项] [-- 远程 release 参数]
+用法: deploy/deploy.sh --env staging|production [选项] [-- 远程 release 参数]
 
 环境配置: deploy/deploy.env（可复制 deploy.env.example）
 
 选项:
+  --env ENV           staging（测试）| production（生产）【必填，或用 deploy-staging/prod.sh】
   --host HOST         服务器地址（覆盖 deploy.env）
   --user USER         SSH 用户，默认 root
   --port PORT         SSH 端口，默认 22
   --key PATH          SSH 私钥路径
-  --branch BRANCH     发布分支，默认 dev
+  --branch BRANCH     发布分支（staging 默认 dev，production 默认 main）
   --check             仅 SSH 连接并查看 PM2 / 端口状态
   -h, --help          显示帮助
 
 示例:
-  ./deploy/deploy.sh
-  ./deploy/deploy.sh --branch main
-  ./deploy/deploy.sh -- --skip-db
-  ./deploy/deploy.sh -- --seed --accept-data-loss
+  ./deploy/deploy-staging.sh -- --skip-db
+  ./deploy/deploy-prod.sh -- --skip-db
+  ./deploy/deploy.sh --env staging --branch dev -- --skip-db
+  ./deploy/deploy.sh --env production --branch main -- --skip-db
 EOF
 }
 
@@ -46,13 +48,19 @@ load_env() {
   fi
 }
 
+load_env
+
+# CLI 覆盖 deploy.env（须在 load_env 之后解析）
+CLI_ENV=""
+CLI_BRANCH=""
 while [[ $# -gt 0 ]]; do
   case "$1" in
+    --env) CLI_ENV="$2"; shift 2 ;;
     --host) DEPLOY_HOST="$2"; shift 2 ;;
     --user) DEPLOY_USER="$2"; shift 2 ;;
     --port) DEPLOY_PORT="$2"; shift 2 ;;
     --key) DEPLOY_SSH_KEY="$2"; shift 2 ;;
-    --branch) GIT_BRANCH="$2"; shift 2 ;;
+    --branch) CLI_BRANCH="$2"; shift 2 ;;
     --check) CHECK_ONLY=true; shift ;;
     -h|--help) usage; exit 0 ;;
     --)
@@ -64,7 +72,51 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
-load_env
+if [[ -n "$CLI_ENV" ]]; then
+  DUKANG_DEPLOY_ENV="$CLI_ENV"
+fi
+
+# 兼容旧调用：未传 --env 时，若 GIT_BRANCH=main 视为生产，否则 staging
+if [[ -z "$DUKANG_DEPLOY_ENV" ]]; then
+  if [[ "${CLI_BRANCH:-${GIT_BRANCH:-}}" == "main" || "${CLI_BRANCH:-${GIT_BRANCH:-}}" == "master" ]]; then
+    DUKANG_DEPLOY_ENV=production
+  else
+    DUKANG_DEPLOY_ENV=staging
+    echo "WARN: 未指定 --env，默认按 staging 发测试环境。生产请用 --env production 或 deploy-prod.sh" >&2
+  fi
+fi
+
+case "$DUKANG_DEPLOY_ENV" in
+  staging|stage|test) DUKANG_DEPLOY_ENV=staging ;;
+  production|prod) DUKANG_DEPLOY_ENV=production ;;
+  *)
+    echo "错误: --env 须为 staging 或 production" >&2
+    exit 1
+    ;;
+esac
+
+if [[ "$DUKANG_DEPLOY_ENV" == "staging" ]]; then
+  APP_ROOT="${STAGING_APP_ROOT:-${APP_ROOT:-/opt/dukang-staging}}"
+  # 若 deploy.env 里 APP_ROOT 仍是生产路径，staging 强制用 STAGING_APP_ROOT 或默认
+  if [[ -n "${STAGING_APP_ROOT:-}" ]]; then
+    APP_ROOT="$STAGING_APP_ROOT"
+  elif [[ "$APP_ROOT" == "/opt/dukang" ]]; then
+    APP_ROOT="/opt/dukang-staging"
+  fi
+  # 测试固定默认 dev；CLI --branch 优先，忽略 deploy.env 里误配的 main
+  GIT_BRANCH="${CLI_BRANCH:-dev}"
+  PORT_GREP='819[0-4]'
+else
+  APP_ROOT="${PROD_APP_ROOT:-${APP_ROOT:-/opt/dukang}}"
+  if [[ -n "${PROD_APP_ROOT:-}" ]]; then
+    APP_ROOT="$PROD_APP_ROOT"
+  elif [[ "$APP_ROOT" == "/opt/dukang-staging" ]]; then
+    APP_ROOT="/opt/dukang"
+  fi
+  # 生产固定默认 main；CLI --branch 优先，忽略 deploy.env 里误配的 dev
+  GIT_BRANCH="${CLI_BRANCH:-main}"
+  PORT_GREP='809[0-4]'
+fi
 
 if [[ -z "$DEPLOY_HOST" ]]; then
   echo "错误: 未配置 DEPLOY_HOST。请创建 deploy/deploy.env 或使用 --host" >&2
@@ -82,8 +134,8 @@ run_remote() {
 }
 
 if [[ "$CHECK_ONLY" == true ]]; then
-  echo "==> 检查 $TARGET"
-  run_remote "pm2 list; ss -tlnp | grep -E '809[0-3]' || true"
+  echo "==> 检查 $TARGET ($DUKANG_DEPLOY_ENV)"
+  run_remote "pm2 list; ss -tlnp | grep -E '$PORT_GREP' || true"
   exit 0
 fi
 
@@ -92,7 +144,7 @@ if [[ ${#RELEASE_ARGS[@]} -gt 0 ]]; then
   REMOTE_RELEASE_ARGS="${RELEASE_ARGS[*]}"
 fi
 
-echo "==> 发布到 $TARGET ($GIT_BRANCH)"
+echo "==> 发布到 $TARGET  env=$DUKANG_DEPLOY_ENV  branch=$GIT_BRANCH  root=$APP_ROOT"
 
 run_remote bash -s <<EOF
 set -euo pipefail
@@ -100,26 +152,28 @@ APP_ROOT="$APP_ROOT"
 GIT_REMOTE="$GIT_REMOTE"
 GIT_BRANCH="$GIT_BRANCH"
 RELEASE_ARGS="$REMOTE_RELEASE_ARGS"
+DUKANG_DEPLOY_ENV="$DUKANG_DEPLOY_ENV"
 export DEPLOY_TRIGGER=manual
 export APP_ROOT
+export DUKANG_DEPLOY_ENV
 
 cd "\$APP_ROOT"
 
 if [[ ! -d .git ]]; then
-  echo "错误: \$APP_ROOT 不是 git 仓库" >&2
+  echo "错误: \$APP_ROOT 不是 git 仓库。请先 clone 到该目录（staging 建议 /opt/dukang-staging）" >&2
   exit 1
 fi
 
+echo "==> 拉取代码"
+git fetch "\$GIT_REMOTE"
+git checkout "\$GIT_BRANCH"
+git pull --ff-only "\$GIT_REMOTE" "\$GIT_BRANCH"
+
 if [[ -n "\$RELEASE_ARGS" ]]; then
-  echo "==> 拉取代码"
-  git fetch "\$GIT_REMOTE"
-  git checkout "\$GIT_BRANCH"
-  git pull --ff-only "\$GIT_REMOTE" "\$GIT_BRANCH"
   bash deploy/remote-release.sh \$RELEASE_ARGS
 else
-  echo "==> 拉取代码并发布（auto-release）"
-  bash deploy/auto-release.sh
+  bash deploy/remote-release.sh --skip-db
 fi
 EOF
 
-echo "==> 本地发布命令已完成"
+echo "==> 本地发布命令已完成 ($DUKANG_DEPLOY_ENV)"

deploy/ecosystem.config.cjs

@@ -1,5 +1,5 @@
 /** PM2 ecosystem — 杜康好客生产部署 */
-const APP_ROOT = '/opt/dukang';
+const APP_ROOT = process.env.APP_ROOT || '/opt/dukang';
 
 module.exports = {
   apps: [
@@ -11,6 +11,7 @@ module.exports = {
       exec_mode: 'fork',
       env: {
         NODE_ENV: 'production',
+        APP_ENV: 'production',
         PORT: 8090,
       },
     },
@@ -62,6 +63,7 @@ module.exports = {
       exec_mode: 'fork',
       env: {
         NODE_ENV: 'production',
+        APP_ENV: 'production',
       },
     },
   ],

deploy/ecosystem.staging.config.cjs

@@ -0,0 +1,55 @@
+/** PM2 ecosystem — 杜康好客 Staging（同机双栈，端口 8190–8194） */
+const APP_ROOT = process.env.APP_ROOT || '/opt/dukang-staging';
+
+module.exports = {
+  apps: [
+    {
+      name: 'dukang-stg-api',
+      cwd: `${APP_ROOT}/server/dukang-api`,
+      script: 'dist/main.js',
+      instances: 1,
+      exec_mode: 'fork',
+      env: {
+        NODE_ENV: 'production',
+        APP_ENV: 'staging',
+        PORT: 8190,
+      },
+    },
+    {
+      name: 'dukang-stg-h5-user',
+      cwd: `${APP_ROOT}/apps/mini-user`,
+      script: 'npx',
+      args: 'serve dist -l 8191 -c serve.json',
+      interpreter: 'none',
+      instances: 1,
+      exec_mode: 'fork',
+    },
+    {
+      name: 'dukang-stg-h5-shop',
+      cwd: `${APP_ROOT}/apps/h5-shop`,
+      script: 'npx',
+      args: 'serve -s dist -l 8192',
+      interpreter: 'none',
+      instances: 1,
+      exec_mode: 'fork',
+    },
+    {
+      name: 'dukang-stg-h5-partner',
+      cwd: `${APP_ROOT}/apps/h5-partner`,
+      script: 'npx',
+      args: 'serve -s dist -l 8193',
+      interpreter: 'none',
+      instances: 1,
+      exec_mode: 'fork',
+    },
+    {
+      name: 'dukang-stg-admin-web',
+      cwd: `${APP_ROOT}/apps/admin-web`,
+      script: 'npx',
+      args: 'serve -s dist -l 8194',
+      interpreter: 'none',
+      instances: 1,
+      exec_mode: 'fork',
+    },
+  ],
+};

deploy/nginx-dukang-staging.conf

@@ -0,0 +1,195 @@
+# 杜康好客 — Staging（测试）*-test.dukanghaoke.com → 8190–8194
+# 证书：可与生产共用 user.dukanghaoke.com 证书（SAN 含 *-test），或单独申请
+# 启用：ln -sf /opt/dukang-staging/deploy/nginx-dukang-staging.conf /etc/nginx/sites-enabled/
+#       nginx -t && systemctl reload nginx
+
+# HTTP → HTTPS
+server {
+    listen 80;
+    server_name user-test.dukanghaoke.com shop-test.dukanghaoke.com partner-test.dukanghaoke.com admin-test.dukanghaoke.com api-test.dukanghaoke.com;
+
+    location ^~ /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+        default_type "text/plain";
+    }
+
+    include /opt/dukang-staging/deploy/nginx-mp-verify-staging.conf;
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+# api-test.dukanghaoke.com → 8190
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name api-test.dukanghaoke.com;
+
+    ssl_certificate /etc/letsencrypt/live/user.dukanghaoke.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/user.dukanghaoke.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 50m;
+
+    location / {
+        proxy_pass http://127.0.0.1:8190;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+    }
+}
+
+# user-test.dukanghaoke.com → 8191
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name user-test.dukanghaoke.com;
+
+    ssl_certificate /etc/letsencrypt/live/user.dukanghaoke.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/user.dukanghaoke.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 50m;
+
+    include /opt/dukang-staging/deploy/nginx-mp-verify-staging.conf;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:8190;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8191;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+
+# shop-test.dukanghaoke.com → 8192
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name shop-test.dukanghaoke.com;
+
+    ssl_certificate /etc/letsencrypt/live/user.dukanghaoke.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/user.dukanghaoke.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 50m;
+
+    include /opt/dukang-staging/deploy/nginx-mp-verify-staging.conf;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:8190;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8192;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+
+# partner-test.dukanghaoke.com → 8193
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name partner-test.dukanghaoke.com;
+
+    ssl_certificate /etc/letsencrypt/live/user.dukanghaoke.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/user.dukanghaoke.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 50m;
+
+    include /opt/dukang-staging/deploy/nginx-mp-verify-staging.conf;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:8190;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8193;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+
+# admin-test.dukanghaoke.com → 8194
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name admin-test.dukanghaoke.com;
+
+    ssl_certificate /etc/letsencrypt/live/user.dukanghaoke.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/user.dukanghaoke.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 50m;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:8190;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8194;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}

deploy/nginx-dukanghaoke.conf

@@ -9,6 +9,8 @@ server {
         default_type "text/plain";
     }
 
+    include /opt/dukang/deploy/nginx-mp-verify.conf;
+
     location / {
         return 301 https://$host$request_uri;
     }
@@ -53,6 +55,8 @@ server {
 
     client_max_body_size 50m;
 
+    include /opt/dukang/deploy/nginx-mp-verify.conf;
+
     location /api/ {
         proxy_pass http://127.0.0.1:8090;
         proxy_http_version 1.1;
@@ -89,6 +93,8 @@ server {
 
     client_max_body_size 50m;
 
+    include /opt/dukang/deploy/nginx-mp-verify.conf;
+
     location /api/ {
         proxy_pass http://127.0.0.1:8090;
         proxy_http_version 1.1;
@@ -125,6 +131,8 @@ server {
 
     client_max_body_size 50m;
 
+    include /opt/dukang/deploy/nginx-mp-verify.conf;
+
     location /api/ {
         proxy_pass http://127.0.0.1:8090;
         proxy_http_version 1.1;

deploy/nginx-mp-verify-staging.conf

@@ -0,0 +1,8 @@
+# 微信 JS 安全域名校验文件（Staging）
+# 文件放在 /opt/dukang-staging/public/MP_verify_*.txt
+location ~ ^/MP_verify_.*\.txt$ {
+    root /opt/dukang-staging/public;
+    default_type text/plain;
+    charset utf-8;
+    access_log off;
+}

deploy/nginx-mp-verify.conf

@@ -0,0 +1,8 @@
+# 微信 JS 安全域名校验文件（根目录直出，勿走 SPA）
+# 文件放在 /opt/dukang/public/MP_verify_*.txt
+location ~ ^/MP_verify_.*\.txt$ {
+    root /opt/dukang/public;
+    default_type text/plain;
+    charset utf-8;
+    access_log off;
+}

deploy/public/MP_verify_ayPJ4CQqbUcec3jX.txt

@@ -0,0 +1 @@
+ayPJ4CQqbUcec3jX

deploy/remote-release.sh

@@ -1,9 +1,50 @@
 #!/usr/bin/env bash
-# 在服务器上执行：拉取后的常规发版（不覆盖 .env.production、默认不 seed）
+# 在服务器上执行：拉取后的常规发版（不覆盖 env 文件、默认不 seed）
+# 通过 DUKANG_DEPLOY_ENV=staging|production 区分同机双栈
 set -euo pipefail
 
-APP_ROOT="${APP_ROOT:-/opt/dukang}"
+DUKANG_DEPLOY_ENV="${DUKANG_DEPLOY_ENV:-production}"
+case "$DUKANG_DEPLOY_ENV" in
+  staging|stage|test) DUKANG_DEPLOY_ENV=staging ;;
+  production|prod) DUKANG_DEPLOY_ENV=production ;;
+  *)
+    echo "错误: DUKANG_DEPLOY_ENV 须为 staging 或 production，当前=$DUKANG_DEPLOY_ENV" >&2
+    exit 1
+    ;;
+esac
+
+if [[ "$DUKANG_DEPLOY_ENV" == "staging" ]]; then
+  APP_ROOT="${APP_ROOT:-/opt/dukang-staging}"
+  ENV_FILE_NAME=".env.staging"
+  ECOSYSTEM_FILE="ecosystem.staging.config.cjs"
+  VITE_API_DEFAULT="https://api-test.dukanghaoke.com"
+  API_PORT=8190
+  USER_PORT=8191
+  PORT_GREP='819[0-4]'
+  PM2_API=dukang-stg-api
+  PM2_USER=dukang-stg-h5-user
+  PM2_SHOP=dukang-stg-h5-shop
+  PM2_PARTNER=dukang-stg-h5-partner
+  PM2_ADMIN=dukang-stg-admin-web
+else
+  APP_ROOT="${APP_ROOT:-/opt/dukang}"
+  ENV_FILE_NAME=".env.production"
+  ECOSYSTEM_FILE="ecosystem.config.cjs"
+  VITE_API_DEFAULT="https://api.dukanghaoke.com"
+  API_PORT=8090
+  USER_PORT=8091
+  PORT_GREP='809[0-4]'
+  PM2_API=dukang-api
+  PM2_USER=dukang-h5-user
+  PM2_SHOP=dukang-h5-shop
+  PM2_PARTNER=dukang-h5-partner
+  PM2_ADMIN=dukang-admin-web
+fi
+
 DEPLOY_DIR="$APP_ROOT/deploy"
+export APP_ROOT
+export APP_ENV="$DUKANG_DEPLOY_ENV"
+export DUKANG_ENV_FILE="$ENV_FILE_NAME"
 
 SKIP_BUILD=false
 SKIP_DB=false
@@ -11,9 +52,11 @@ RUN_SEED=false
 DB_PUSH_ACCEPT_DATA_LOSS=false
 
 usage() {
-  cat <<'EOF'
+  cat <<EOF
 用法: remote-release.sh [选项]
 
+环境: DUKANG_DEPLOY_ENV=${DUKANG_DEPLOY_ENV}  APP_ROOT=${APP_ROOT}  env=${ENV_FILE_NAME}
+
   --skip-build              跳过 pnpm build（仅重启 PM2）
   --skip-db                 跳过 Prisma generate / db push
   --seed                    执行 prisma:seed（默认不执行）
@@ -36,6 +79,8 @@ done
 
 cd "$APP_ROOT"
 
+echo "==> 发版环境: $DUKANG_DEPLOY_ENV ($APP_ROOT)"
+
 echo "==> 1. 启用 pnpm"
 corepack enable 2>/dev/null || true
 corepack prepare pnpm@11.2.2 --activate 2>/dev/null || true
@@ -47,15 +92,16 @@ export NODE_OPTIONS="${NODE_OPTIONS:---max-old-space-size=8192}"
 export TARO_H5_PUBLIC_PATH="${TARO_H5_PUBLIC_PATH:-/user/}"
 export TARO_H5_ROUTER_BASENAME="${TARO_H5_ROUTER_BASENAME:-/user}"
 # C 端 H5 编译期注入的 API origin（勿落到 localhost）
-export VITE_API_TARGET="${VITE_API_TARGET:-https://api.dukanghaoke.com}"
+export VITE_API_TARGET="${VITE_API_TARGET:-$VITE_API_DEFAULT}"
+export VITE_APP_ENV="$DUKANG_DEPLOY_ENV"
 pnpm approve-builds --all 2>/dev/null || true
 pnpm install --frozen-lockfile 2>/dev/null || pnpm install
 
 if [[ "$SKIP_DB" == false ]]; then
-  echo "==> 3. 数据库 schema 同步（构建前，读取 .env.production）"
+  echo "==> 3. 数据库 schema 同步（构建前，读取 $ENV_FILE_NAME）"
   cd "$APP_ROOT/server/dukang-api"
-  if [[ ! -f .env.production ]]; then
-    echo "错误: 未找到 server/dukang-api/.env.production" >&2
+  if [[ ! -f "$ENV_FILE_NAME" ]]; then
+    echo "错误: 未找到 server/dukang-api/$ENV_FILE_NAME" >&2
     exit 1
   fi
   node scripts/with-api-env.cjs pnpm prisma:generate
@@ -94,31 +140,30 @@ else
   fi
 fi
 
-echo "==> 5. 重启 PM2"
-if pm2 describe dukang-api &>/dev/null; then
-  # delete+start 以确保 cwd 从 h5-user 切到 mini-user
-  pm2 delete dukang-h5-user 2>/dev/null || true
-  pm2 start "$DEPLOY_DIR/ecosystem.config.cjs" --only dukang-h5-user
-  pm2 restart dukang-api dukang-h5-shop dukang-h5-partner dukang-admin-web 2>/dev/null \
-    || pm2 restart dukang-api dukang-h5-shop dukang-h5-partner
+echo "==> 5. 重启 PM2 ($ECOSYSTEM_FILE)"
+if pm2 describe "$PM2_API" &>/dev/null; then
+  pm2 delete "$PM2_USER" 2>/dev/null || true
+  pm2 start "$DEPLOY_DIR/$ECOSYSTEM_FILE" --only "$PM2_USER"
+  pm2 restart "$PM2_API" "$PM2_SHOP" "$PM2_PARTNER" "$PM2_ADMIN" 2>/dev/null \
+    || pm2 restart "$PM2_API" "$PM2_SHOP" "$PM2_PARTNER"
 else
-  pm2 start "$DEPLOY_DIR/ecosystem.config.cjs"
+  pm2 start "$DEPLOY_DIR/$ECOSYSTEM_FILE"
 fi
 pm2 save
 
 echo "==> 6. 健康检查"
 sleep 2
 pm2 list
-ss -tlnp | grep -E '809[0-4]' || true
-curl -sf -o /dev/null -w "mini-user(h5): %{http_code}\n" http://127.0.0.1:8091/ || echo "mini-user(h5): FAIL"
-curl -sf -o /dev/null -w "api: %{http_code}\n" http://127.0.0.1:8090/api/v1/health 2>/dev/null \
-  || curl -sf -o /dev/null -w "api: %{http_code}\n" http://127.0.0.1:8090/ \
+ss -tlnp | grep -E "$PORT_GREP" || true
+curl -sf -o /dev/null -w "mini-user(h5): %{http_code}\n" "http://127.0.0.1:${USER_PORT}/" || echo "mini-user(h5): FAIL"
+curl -sf -o /dev/null -w "api: %{http_code}\n" "http://127.0.0.1:${API_PORT}/api/v1/health" 2>/dev/null \
+  || curl -sf -o /dev/null -w "api: %{http_code}\n" "http://127.0.0.1:${API_PORT}/" \
   || echo "api: FAIL"
 
 echo "==> 7. 记录系统版本"
 cd "$APP_ROOT/server/dukang-api"
-APP_ROOT="$APP_ROOT" DEPLOY_TRIGGER="${DEPLOY_TRIGGER:-manual}" \
+APP_ROOT="$APP_ROOT" DEPLOY_TRIGGER="${DEPLOY_TRIGGER:-manual}" DUKANG_ENV_FILE="$ENV_FILE_NAME" \
   node scripts/with-api-env.cjs node scripts/record-system-version.cjs \
   || echo "WARN: system_version 写入失败"
 
-echo "==> 发版完成"
+echo "==> 发版完成 ($DUKANG_DEPLOY_ENV)"

deploy/sync-api-env.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
-# 同步 API 生产环境变量到服务器 .env.production
-# 用法: deploy/sync-api-env.sh [production]
+# 同步 API 环境变量到服务器
+# 用法: deploy/sync-api-env.sh staging|production
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
@@ -12,16 +12,31 @@ DEPLOY_USER="root"
 DEPLOY_PORT="22"
 DEPLOY_SSH_KEY=""
 APP_ROOT="/opt/dukang"
+STAGING_APP_ROOT="/opt/dukang-staging"
+PROD_APP_ROOT="/opt/dukang"
 
-TARGET="${1:-production}"
+TARGET="${1:-}"
 case "$TARGET" in
-  production|prod) SRC_ENV="$REPO_ROOT/server/dukang-api/.env.production" ;;
+  staging|stage|test)
+    TARGET=staging
+    SRC_ENV="$REPO_ROOT/server/dukang-api/.env.staging"
+    REMOTE_NAME=".env.staging"
+    PM2_NAME=dukang-stg-api
+    HEALTH_PORT=8190
+    ;;
+  production|prod)
+    TARGET=production
+    SRC_ENV="$REPO_ROOT/server/dukang-api/.env.production"
+    REMOTE_NAME=".env.production"
+    PM2_NAME=dukang-api
+    HEALTH_PORT=8090
+    ;;
   development|dev)
-    echo "错误: development 仅用于本地开发，请使用 .env / .env.development，不同步到服务器" >&2
+    echo "错误: development 仅用于本地开发，请使用 .env，不同步到服务器" >&2
     exit 1
     ;;
   *)
-    echo "用法: $0 [production]" >&2
+    echo "用法: $0 staging|production" >&2
     exit 1
     ;;
 esac
@@ -31,8 +46,14 @@ if [[ -f "$ENV_FILE" ]]; then
   source "$ENV_FILE"
 fi
 
+if [[ "$TARGET" == "staging" ]]; then
+  APP_ROOT="${STAGING_APP_ROOT:-/opt/dukang-staging}"
+else
+  APP_ROOT="${PROD_APP_ROOT:-/opt/dukang}"
+fi
+
 if [[ ! -f "$SRC_ENV" ]]; then
-  echo "错误: 未找到 $SRC_ENV（可从 .env.production.example 复制）" >&2
+  echo "错误: 未找到 $SRC_ENV（可从 ${SRC_ENV}.example 复制）" >&2
   exit 1
 fi
 
@@ -46,7 +67,8 @@ SCP_OPTS=(-o "StrictHostKeyChecking=accept-new" -P "$DEPLOY_PORT")
 [[ -n "$DEPLOY_SSH_KEY" ]] && SSH_OPTS+=(-i "$DEPLOY_SSH_KEY") && SCP_OPTS+=(-i "$DEPLOY_SSH_KEY")
 REMOTE="${DEPLOY_USER}@${DEPLOY_HOST}"
 
-echo "==> 同步 production 环境到 $REMOTE:$APP_ROOT/server/dukang-api/.env.production"
-scp "${SCP_OPTS[@]}" "$SRC_ENV" "$REMOTE:$APP_ROOT/server/dukang-api/.env.production"
-ssh "${SSH_OPTS[@]}" "$REMOTE" "pm2 restart dukang-api && sleep 2 && curl -sf -o /dev/null -w 'api-health:%{http_code}\n' http://127.0.0.1:8090/api/v1/health"
+echo "==> 同步 $TARGET 环境到 $REMOTE:$APP_ROOT/server/dukang-api/$REMOTE_NAME"
+scp "${SCP_OPTS[@]}" "$SRC_ENV" "$REMOTE:$APP_ROOT/server/dukang-api/$REMOTE_NAME"
+ssh "${SSH_OPTS[@]}" "$REMOTE" \
+  "pm2 restart $PM2_NAME && sleep 2 && curl -sf -o /dev/null -w 'api-health:%{http_code}\n' http://127.0.0.1:${HEALTH_PORT}/api/v1/health"
 echo "==> 完成"

packages/shared-types/src/config.ts

@@ -21,8 +21,13 @@ export interface AppConfig {
   aliyunSmsProxyOrderTemplateCode: string;
   aliyunSmsAccessKeyId: string;
   aliyunSmsAccessKeySecret: string;
-  /** 腾讯位置服务 Key（逆地理编码） */
+  /** 腾讯位置服务 Key（逆地理编码 / 地点搜索） */
   tencentLbsKey: string;
+  /**
+   * 腾讯位置服务 SecretKey（SK）
+   * 控制台开启 WebServiceAPI 签名校验后生成；仅服务端签名用，勿下发前端
+   */
+  tencentLbsSecretKey: string;
   /** C 端 H5 落地页（推广码二维码链接前缀） */
   userH5Url: string;
 }
@@ -127,6 +132,7 @@ export function loadAppConfig(env?: Record<string, string | undefined>): AppConf
     aliyunSmsAccessKeyId: e.ALIYUN_SMS_ACCESS_KEY_ID ?? e.OSS_ACCESS_KEY_ID ?? '',
     aliyunSmsAccessKeySecret: e.ALIYUN_SMS_ACCESS_KEY_SECRET ?? e.OSS_ACCESS_KEY_SECRET ?? '',
     tencentLbsKey: e.TENCENT_LBS_KEY ?? '',
+    tencentLbsSecretKey: e.TENCENT_LBS_SECRET_KEY ?? '',
     userH5Url: (e.USER_H5_URL || DEFAULT_USER_H5_URL).replace(/\/$/, ''),
   };
   return {

packages/shared-types/src/hq-permissions.ts

@@ -36,7 +36,7 @@ export const HQ_PERMISSION_CATALOG = [
 
 export type HqPermissionKey = (typeof HQ_PERMISSION_CATALOG)[number]['key'];
 
-/** 危险操作：角色默认与超管自动权限均不含，需在权限分配中显式勾选 */
+/** 危险操作：非超管角色默认不含，需在权限分配中显式勾选；超管默认拥有 */
 export const HQ_DANGEROUS_PERMISSION_KEYS = [
   'users_delete',
   'orders_delete',

packages/shared-types/src/trade.ts

@@ -1,3 +1,5 @@
+import type { WechatJsapiPrepayParams } from './wechat';
+
 export interface OrderDto {
   id: string;
   orderNo: string;
@@ -27,11 +29,41 @@ export interface OrderPreviewResult {
   deliveryType: 'LOCAL' | 'CROSS_CITY';
 }
 
+export type ProxyPayMethod = 'NATIVE' | 'JSAPI';
+
 export interface PayOrderResult {
-  mode?: 'jsapi' | 'mock';
+  mode?: 'jsapi' | 'mock' | 'native';
   orderId?: string;
+  codeUrl?: string;
+  prepay?: WechatJsapiPrepayParams;
+  payExpireAt?: string | null;
 }
 
+export type ProxyOrderPayRequest = {
+  payMethod: ProxyPayMethod;
+};
+
+export type ProxyOrderPayResponse = {
+  mode: 'jsapi' | 'mock' | 'native';
+  orderId: string;
+  orderNo?: string;
+  codeUrl?: string;
+  prepay?: WechatJsapiPrepayParams;
+  payExpireAt?: string | null;
+};
+
+export type ProxyOrderCreateResponse = {
+  id: string;
+  orderNo: string;
+  status: string;
+  payStatus: string;
+  payAmount: number;
+  benefitAmount: number;
+  deliveryType: string;
+  payExpireAt: string | null;
+  proxyPartnerName?: string | null;
+};
+
 export interface DeliveryDto {
   provider?: string;
   shippingAt?: string;
@@ -96,8 +128,6 @@ export type PartnerProxyOrderPreviewResult = {
 
 export type PartnerProxyOrderCreateRequest = {
   phone: string;
-  customerSmsCode: string;
-  partnerSmsCode: string;
   deliveryMode: PartnerProxyDeliveryMode;
   /** 地址配送时必须为 true */
   autoReceive?: boolean;
@@ -111,3 +141,35 @@ export type PartnerProxyOrderCreateRequest = {
   quantity: number;
   promoCodeId?: string;
 };
+
+/** 合伙人代下单列表项（与 OrderDto 兼容，附带收货信息） */
+export type PartnerProxyOrderListItem = OrderDto & {
+  receiverName?: string | null;
+  receiverPhone?: string | null;
+  receiverAddress?: string | null;
+  deliveryType?: string | null;
+  productSpec?: string | null;
+  imageResource?: { url?: string } | null;
+};
+
+export type PartnerProxyOrderListResponse = {
+  list: PartnerProxyOrderListItem[];
+  total: number;
+  page: number;
+  pageSize: number;
+};
+
+/** 总部代下单（在线支付后发权益） */
+export type HqProxyOrderCreateRequest = {
+  phone: string;
+  deliveryMode: PartnerProxyDeliveryMode;
+  autoReceive?: boolean;
+  receiverName?: string;
+  province?: string;
+  city?: string;
+  district?: string;
+  addressDetail?: string;
+  productId: string;
+  quantity: number;
+  promoCodeId?: string;
+};

pnpm-lock.yaml

@@ -35,6 +35,12 @@ importers:
       dayjs:
         specifier: ^1.11.13
         version: 1.11.21
+      echarts:
+        specifier: ^6.1.0
+        version: 6.1.0
+      echarts-for-react:
+        specifier: ^3.0.6
+        version: 3.0.6(echarts@6.1.0)(react@18.3.1)
       element-china-area-data:
         specifier: ^6.1.0
         version: 6.1.0
@@ -78,6 +84,9 @@ importers:
       element-china-area-data:
         specifier: ^6.1.0
         version: 6.1.0
+      qrcode:
+        specifier: ^1.5.4
+        version: 1.5.4
       react:
         specifier: ^18.3.1
         version: 18.3.1
@@ -88,6 +97,9 @@ importers:
         specifier: ^6.26.0
         version: 6.30.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
     devDependencies:
+      '@types/qrcode':
+        specifier: ^1.5.6
+        version: 1.5.6
       '@types/react':
         specifier: ^18.3.3
         version: 18.3.31
@@ -3579,6 +3591,15 @@ packages:
   ecdsa-sig-formatter@1.0.11:
     resolution: {integrity: sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==}
 
+  echarts-for-react@3.0.6:
+    resolution: {integrity: sha512-4zqLgTGWS3JvkQDXjzkR1k1CHRdpd6by0988TWMJgnvDytegWLbeP/VNZmMa+0VJx2eD7Y632bi2JquXDgiGJg==}
+    peerDependencies:
+      echarts: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0
+      react: ^15.0.0 || >=16.0.0
+
+  echarts@6.1.0:
+    resolution: {integrity: sha512-q0yaFPggC9FUdsWH4blavRWFmxdrIodbkoKNAjJudAI6CA9gNPxHtV2RcZNEepZVlk4yvBYkOkbk6HIVpIyHZA==}
+
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
@@ -5835,6 +5856,9 @@ packages:
     resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
     engines: {node: '>=14'}
 
+  size-sensor@1.0.3:
+    resolution: {integrity: sha512-+k9mJ2/rQMiRmQUcjn+qznch260leIXY8r4FyYKKyRBO/s5UoeMAHGkCJyE1R/4wrIhTJONfyloY55SkE7ve3A==}
+
   slash@3.0.0:
     resolution: {integrity: sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==}
     engines: {node: '>=8'}
@@ -6189,6 +6213,9 @@ packages:
   tslib@1.14.1:
     resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==}
 
+  tslib@2.3.0:
+    resolution: {integrity: sha512-N82ooyxVNm6h1riLCoyS9e3fuJ3AMG2zIZs2Gd1ATcSFjSA23Q0fzjjZeh0jbJvWVDZ0cJT8yaNNaaXHzueNjg==}
+
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
@@ -6597,6 +6624,9 @@ packages:
   yup@1.7.1:
     resolution: {integrity: sha512-GKHFX2nXul2/4Dtfxhozv701jLQHdf6J34YDh2cEkpqoo8le5Mg6/LrdseVLrFarmFygZTlfIhHx/QKfb/QWXw==}
 
+  zrender@6.1.0:
+    resolution: {integrity: sha512-oEGMDB6pOP2S6OwRR4PdVv610zrjnA3Bh+JnSG12fYJlBKjtNAoEb5fSUoCOOINlH96I2fU38/A2UpRKs67xYQ==}
+
 snapshots:
 
   '@alicloud/credentials@2.4.5':
@@ -10333,6 +10363,18 @@ snapshots:
     dependencies:
       safe-buffer: 5.2.1
 
+  echarts-for-react@3.0.6(echarts@6.1.0)(react@18.3.1):
+    dependencies:
+      echarts: 6.1.0
+      fast-deep-equal: 3.1.3
+      react: 18.3.1
+      size-sensor: 1.0.3
+
+  echarts@6.1.0:
+    dependencies:
+      tslib: 2.3.0
+      zrender: 6.1.0
+
   ee-first@1.1.1: {}
 
   electron-to-chromium@1.5.380: {}
@@ -12806,6 +12848,8 @@ snapshots:
 
   signal-exit@4.1.0: {}
 
+  size-sensor@1.0.3: {}
+
   slash@3.0.0: {}
 
   slice-ansi@4.0.0:
@@ -13170,6 +13214,8 @@ snapshots:
 
   tslib@1.14.1: {}
 
+  tslib@2.3.0: {}
+
   tslib@2.8.1: {}
 
   tunnel-agent@0.6.0:
@@ -13665,3 +13711,7 @@ snapshots:
       tiny-case: 1.0.3
       toposort: 2.0.2
       type-fest: 2.19.0
+
+  zrender@6.1.0:
+    dependencies:
+      tslib: 2.3.0

server/dukang-api/.env.example

@@ -55,14 +55,19 @@ WX_API_V3_KEY=
 # 微信平台公钥证书 PEM（生产环境必填，用于回调验签；开发可暂留空）
 WX_PLATFORM_CERT=
 WX_PAY_NOTIFY_URL=https://api.dukanghaoke.com/api/v1/callbacks/wechat/pay
+# 小程序消息推送（发货管理确认收货/结算事件）：后台 URL 填下方地址，数据格式建议 JSON，加密方式建议安全模式
+# https://api.dukanghaoke.com/api/v1/callbacks/wechat/message
+WX_MINI_MSG_TOKEN=
+WX_MINI_MSG_AES_KEY=
 
 # 企业微信智能机器人总开关（Bot 实例在 HQ「企微机器人」模块创建）
 WECOM_AIBOT_ENABLED=false
 
 # 腾讯位置服务（地理编码 / 逆地理 / 地点搜索选点，服务端调用）
-# 控制台须开启 WebServiceAPI；服务端调用建议 Key 不设域名白名单，或改用 IP 白名单
-# （浏览器内嵌官方选点组件已弃用，避免 mapapi.qq.com / formatted_addresses 崩溃）
+# 控制台须开启 WebServiceAPI；推荐开启「签名校验」并配置下方 SK（服务端自动附 sig）
+# 未开签名校验时可只填 KEY；SK 勿下发前端
 TENCENT_LBS_KEY=
+TENCENT_LBS_SECRET_KEY=
 
 # 阿里云 OSS（ali-oss@6.x；凭证齐全时直传，缺失则服务端报错）
 # RAM 用户需具备 PutObject 权限；可在控制台 Bucket 授权策略中为该 RAM UID 授予读写

server/dukang-api/.env.production.example

@@ -1,12 +1,14 @@
 # 生产环境（真实第三方，关闭 Mock）
-# 用途：服务器 runtime 配置；bash deploy/sync-api-env.sh production 同步到远端 .env.production
+# 用途：服务器 /opt/dukang；bash deploy/sync-api-env.sh production
 # 本地开发请使用 .env（从 .env.example 复制），勿与生产混用
+# 测试环境请使用 .env.staging（从 .env.staging.example 复制）
 
+APP_ENV=production
 NODE_ENV=production
 
 # 生产：阿里云 RDS（密码中的 @ ! 需 URL 编码为 %40 %21）
 DATABASE_URL="mysql://dukangadmin:CHANGE_ME@rm-xxxxxxxx.mysql.rds.aliyuncs.com:3306/dukang_prod?charset=utf8mb4"
-REDIS_URL="redis://localhost:6379"
+REDIS_URL="redis://localhost:6379/0"
 JWT_SECRET="CHANGE_ME-strong-random-secret"
 JWT_EXPIRES_IN="7d"
 PORT=8090
@@ -42,6 +44,9 @@ WX_MCH_PRIVATE_KEY=
 WX_API_V3_KEY=
 WX_PLATFORM_CERT=
 WX_PAY_NOTIFY_URL=https://api.dukanghaoke.com/api/v1/callbacks/wechat/pay
+# 消息推送 URL: https://api.dukanghaoke.com/api/v1/callbacks/wechat/message
+WX_MINI_MSG_TOKEN=
+WX_MINI_MSG_AES_KEY=
 
 # 企业微信机器人总开关（实例在 HQ 企微机器人模块维护）
 WECOM_AIBOT_ENABLED=false

server/dukang-api/.env.staging.example

@@ -0,0 +1,67 @@
+# Staging / 测试环境（同机双栈，正式微信 AppId + 全 Mock）
+# 用途：服务器 /opt/dukang-staging；sync: bash deploy/sync-api-env.sh staging
+# 域名：api-test / user-test / shop-test / partner-test / admin-test.dukanghaoke.com
+# 本地开发请用 .env，勿与本文件混用
+
+APP_ENV=staging
+NODE_ENV=production
+
+# 独立库（与生产 dukang_prod 隔离；可同 RDS 实例）
+DATABASE_URL="mysql://dukangadmin:CHANGE_ME@rm-xxxxxxxx.mysql.rds.aliyuncs.com:3306/dukang_staging?charset=utf8mb4"
+# 建议用 Redis DB 1，与生产 DB 0 隔离
+REDIS_URL="redis://localhost:6379/1"
+JWT_SECRET="CHANGE_ME-staging-secret-different-from-prod"
+JWT_EXPIRES_IN="7d"
+PORT=8190
+
+# 全 Mock：不发真实短信、不扣真实微信支付
+MOCK_SMS=true
+MOCK_PAY=true
+MOCK_DELIVERY_AUTO=true
+MOCK_WECHAT=true
+AUTO_APPROVE_STORE=true
+
+ALIYUN_SMS_SIGN_NAME=
+ALIYUN_SMS_TEMPLATE_CODE=
+ALIYUN_SMS_TEMPLATE_CONFIRM_REDEEM=
+ALIYUN_SMS_TEMPLATE_PROXY_ORDER=
+ALIYUN_SMS_ACCESS_KEY_ID=
+ALIYUN_SMS_ACCESS_KEY_SECRET=
+
+TRUST_PROXY=true
+
+# C 端 H5（测试域）
+USER_H5_URL=https://user-test.dukanghaoke.com/user
+
+# 正式号配置可与生产相同，但 Mock 打开后不走真实支付
+WX_APP_ID=
+WX_APP_SECRET=
+WX_MINI_APP_ID=
+WX_MINI_APP_SECRET=
+WX_MINI_PROMO_PAGE=pages/home/index
+# WX_MINI_ENV_VERSION=trial
+WX_MCH_ID=
+WX_MCH_SERIAL_NO=
+WX_MCH_PRIVATE_KEY=
+WX_API_V3_KEY=
+WX_PLATFORM_CERT=
+WX_PAY_NOTIFY_URL=https://api-test.dukanghaoke.com/api/v1/callbacks/wechat/pay
+WX_MINI_MSG_TOKEN=
+WX_MINI_MSG_AES_KEY=
+
+WECOM_AIBOT_ENABLED=false
+
+OSS_ACCESS_KEY_ID=
+OSS_ACCESS_KEY_SECRET=
+OSS_BUCKET=dukang-dev
+OSS_REGION=oss-cn-beijing
+OSS_CDN_BASE=https://dukang-dev.oss-cn-beijing.aliyuncs.com
+OSS_UPLOAD_PREFIX=staging/uploads
+OSS_UPLOAD_EXPIRE_SECONDS=900
+OSS_MAX_UPLOAD_BYTES=10485760
+
+COURIER_PROVIDER=xiaofeixia
+XIAOFEIXIA_API_URL=https://beta.51xiaoju.cn/app/api/interface.do
+XIAOFEIXIA_MCH_ID=
+XIAOFEIXIA_API_KEY=
+XIAOFEIXIA_SIGN_TYPE=MD5

server/dukang-api/package.json

@@ -13,6 +13,7 @@
     "prisma:validate": "prisma validate",
     "prisma:seed": "ts-node --transpile-only prisma/seed-v31.ts",
     "prisma:seed-finance": "ts-node --transpile-only prisma/seed-finance-mock.ts",
+    "prisma:seed-stats": "ts-node --transpile-only prisma/seed-stats-mock.ts",
     "prisma:migrate-city-partner": "ts-node --transpile-only prisma/migrate-city-partner.ts",
     "prisma:seed-legacy": "ts-node --transpile-only prisma/seed-prev1.ts",
     "prisma:upsert-super-admin": "ts-node --transpile-only scripts/upsert-super-admin.ts",

server/dukang-api/prisma/schema.prisma

@@ -593,18 +593,35 @@ model CommonProductItem {
   status          ProductStatus @default(DRAFT)
   sortOrder       Int           @default(0) @map("sort_order")
   allowOnSitePickup Boolean     @default(false) @map("allow_on_site_pickup")
+  /// Online test: only listed phones can see/buy when enabled
+  visibilityWhitelistEnabled Boolean @default(false) @map("visibility_whitelist_enabled")
   coverResourceId BigInt?       @map("cover_resource_id") @db.UnsignedBigInt
   detailContent   Json?         @map("detail_content")
   createdAt       DateTime      @default(now()) @map("created_at") @db.DateTime(3)
   updatedAt       DateTime      @updatedAt @map("updated_at") @db.DateTime(3)
 
-  coverResource CommonResource? @relation("ProductCover", fields: [coverResourceId], references: [id], onDelete: SetNull)
-  orders        Order[]
+  coverResource     CommonResource?                 @relation("ProductCover", fields: [coverResourceId], references: [id], onDelete: SetNull)
+  orders            Order[]
+  visibilityPhones  CommonProductVisibilityPhone[]
 
   @@index([status, aromaType])
   @@map("common_product_item")
 }
 
+/// Product visibility whitelist phones (match by bound phone)
+model CommonProductVisibilityPhone {
+  id        BigInt   @id @default(autoincrement()) @db.UnsignedBigInt
+  productId BigInt   @map("product_id") @db.UnsignedBigInt
+  phone     String   @db.VarChar(20)
+  createdAt DateTime @default(now()) @map("created_at") @db.DateTime(3)
+
+  product CommonProductItem @relation(fields: [productId], references: [id], onDelete: Cascade)
+
+  @@unique([productId, phone])
+  @@index([phone])
+  @@map("common_product_visibility_phone")
+}
+
 model CommonProductDetailTemplate {
   id                        BigInt               @id @default(autoincrement()) @db.UnsignedBigInt
   code                      String               @unique @db.VarChar(32)

server/dukang-api/prisma/seed-stats-mock.ts

@@ -0,0 +1,489 @@
+/**
+ * 概览页统计 Mock（用户/订单/合伙人/门店/核销，幂等可重复跑）
+ * 用法：cd server/dukang-api && pnpm prisma:seed-stats
+ */
+import { PrismaClient, type OrderStatus, type PayStatus } from '@prisma/client';
+import { createHash, randomBytes } from 'crypto';
+
+const prisma = new PrismaClient();
+
+const USER_PREFIX = 'STAT';
+const ORDER_PREFIX = 'STAT';
+const COUPON_PREFIX = 'STATCPN';
+const REDEEM_PREFIX = 'STATRD';
+const STORE_NAME_PREFIX = 'STAT门店';
+const PARTNER_PHONE_PREFIX = '13788';
+
+const PROMO_CODES = [
+  { code: 'STAT_A', name: '统计演示·品鉴会A', scene: 'EVENT' as const },
+  { code: 'STAT_B', name: '统计演示·线下提货B', scene: 'OFFLINE_PICKUP' as const },
+  { code: 'STAT_C', name: '统计演示·线上渠道C', scene: 'ONLINE_LINK' as const },
+];
+
+const CITY_DEFS = [
+  { code: '410100', name: '郑州市', province: '河南省', district: '金水区' },
+  { code: '410300', name: '洛阳市', province: '河南省', district: '涧西区' },
+];
+
+function startOfDay(d: Date) {
+  return new Date(d.getFullYear(), d.getMonth(), d.getDate(), 0, 0, 0, 0);
+}
+
+function qrcodeIdFor(code: string) {
+  return createHash('sha256').update(`stats-mock:${code}`).digest('hex');
+}
+
+function mulberry32(seed: number) {
+  return () => {
+    let t = (seed += 0x6d2b79f5);
+    t = Math.imul(t ^ (t >>> 15), t | 1);
+    t ^= t + Math.imul(t ^ (t >>> 7), t | 61);
+    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+  };
+}
+
+async function cleanup() {
+  console.log('Cleaning previous STAT* mock...');
+
+  const redeemIds = (
+    await prisma.redeemRecord.findMany({
+      where: { redeemNo: { startsWith: REDEEM_PREFIX } },
+      select: { id: true },
+    })
+  ).map((r) => r.id);
+  if (redeemIds.length) {
+    await prisma.redeemRecordAllocation.deleteMany({
+      where: { redeemRecordId: { in: redeemIds } },
+    });
+    await prisma.storeRating.deleteMany({ where: { redeemRecordId: { in: redeemIds } } });
+    await prisma.storePayout.deleteMany({ where: { redeemRecordId: { in: redeemIds } } });
+    await prisma.redeemPendingRecord.deleteMany({
+      where: { redeemRecordId: { in: redeemIds } },
+    });
+    await prisma.redeemRecord.deleteMany({ where: { id: { in: redeemIds } } });
+  }
+
+  await prisma.benefitCoupon.deleteMany({
+    where: { couponNo: { startsWith: COUPON_PREFIX } },
+  });
+
+  const statOrders = await prisma.order.findMany({
+    where: { orderNo: { startsWith: ORDER_PREFIX } },
+    select: { id: true },
+  });
+  const orderIds = statOrders.map((o) => o.id);
+  if (orderIds.length) {
+    await prisma.benefitCoupon.deleteMany({ where: { orderId: { in: orderIds } } });
+    await prisma.orderDelivery.deleteMany({ where: { orderId: { in: orderIds } } });
+    await prisma.userInvoice.deleteMany({ where: { orderId: { in: orderIds } } });
+    await prisma.order.deleteMany({ where: { id: { in: orderIds } } });
+  }
+
+  const statUsers = await prisma.user.findMany({
+    where: { userNo: { startsWith: USER_PREFIX } },
+    select: { id: true },
+  });
+  const userIds = statUsers.map((u) => u.id);
+  if (userIds.length) {
+    await prisma.userPromoAttribution.deleteMany({ where: { userId: { in: userIds } } });
+    await prisma.userCityPreference.deleteMany({ where: { userId: { in: userIds } } });
+    await prisma.userAddress.deleteMany({ where: { userId: { in: userIds } } });
+    await prisma.benefitCoupon.deleteMany({ where: { userId: { in: userIds } } });
+    await prisma.user.deleteMany({ where: { id: { in: userIds } } });
+  }
+
+  await prisma.commonPromoCode.deleteMany({
+    where: { code: { in: PROMO_CODES.map((p) => p.code) } },
+  });
+
+  const statStores = await prisma.store.findMany({
+    where: { name: { startsWith: STORE_NAME_PREFIX } },
+    select: { id: true },
+  });
+  const storeIds = statStores.map((s) => s.id);
+  if (storeIds.length) {
+    await prisma.storeAccountStore.deleteMany({ where: { storeId: { in: storeIds } } });
+    await prisma.storeBill.deleteMany({ where: { storeId: { in: storeIds } } });
+    await prisma.store.deleteMany({ where: { id: { in: storeIds } } });
+  }
+
+  const statPartners = await prisma.partnerAccount.findMany({
+    where: { phone: { startsWith: PARTNER_PHONE_PREFIX } },
+    select: { id: true },
+  });
+  const partnerIds = statPartners.map((p) => p.id);
+  if (partnerIds.length) {
+    await prisma.partnerBill.deleteMany({ where: { partnerAccountId: { in: partnerIds } } });
+    await prisma.partnerAccount.deleteMany({
+      where: { OR: [{ id: { in: partnerIds } }, { parentAccountId: { in: partnerIds } }] },
+    });
+  }
+}
+
+async function ensureCities() {
+  const cities = [];
+  for (const def of CITY_DEFS) {
+    const city = await prisma.commonCity.upsert({
+      where: { code: def.code },
+      create: {
+        code: def.code,
+        name: def.name,
+        province: def.province,
+        status: 'ACTIVE',
+      },
+      update: {
+        name: def.name,
+        province: def.province,
+        status: 'ACTIVE',
+      },
+    });
+    cities.push({ ...city, district: def.district });
+  }
+  return cities;
+}
+
+async function main() {
+  console.log('Seeding stats mock (users/orders/partners/stores/redeems)...');
+  await cleanup();
+
+  const cities = await ensureCities();
+  const product = await prisma.commonProductItem.findFirst({
+    orderBy: { id: 'asc' },
+    select: {
+      id: true,
+      barcode69: true,
+      name: true,
+      spec: true,
+      price: true,
+    },
+  });
+  if (!product) throw new Error('没有商品，请先 pnpm prisma:seed');
+
+  const category = await prisma.commonStoreCategory.findFirst({ orderBy: { id: 'asc' } });
+
+  const promos = [];
+  for (const def of PROMO_CODES) {
+    const promo = await prisma.commonPromoCode.create({
+      data: {
+        code: def.code,
+        name: def.name,
+        scene: def.scene,
+        qrcodeId: qrcodeIdFor(def.code),
+        status: 'ACTIVE',
+        scanCount: 0,
+        orderCount: 0,
+      },
+    });
+    promos.push(promo);
+  }
+
+  const rand = mulberry32(20260731);
+  const today = startOfDay(new Date());
+
+  // ── 城市合伙人 + 门店（近 30 天分散创建） ──
+  const createdPartners: Array<{
+    id: bigint;
+    cityId: bigint;
+    city: (typeof cities)[0];
+  }> = [];
+  const createdStores: Array<{
+    id: bigint;
+    cityId: bigint;
+    partnerAccountId: bigint;
+    settlementRate: number;
+  }> = [];
+
+  for (let i = 0; i < cities.length; i++) {
+    const city = cities[i];
+    // 每城 2 个主合伙人
+    for (let j = 0; j < 2; j++) {
+      const dayOffset = Math.floor(rand() * 28);
+      const createdAt = new Date(today);
+      createdAt.setDate(createdAt.getDate() - dayOffset);
+      createdAt.setHours(9, 0, 0, 0);
+      const phone = `${PARTNER_PHONE_PREFIX}${String(i * 10 + j + 1).padStart(5, '0')}`;
+      const partner = await prisma.partnerAccount.create({
+        data: {
+          phone,
+          name: `${city.name}统计合伙人${j + 1}`,
+          companyName: `STAT${city.name}合伙人${j + 1}`,
+          isPrimary: 1,
+          status: 'ACTIVE',
+          cityId: city.id,
+          scopeType: 'CITY_WIDE',
+          bindingStatus: 'ACTIVE',
+          orderCommissionRate: 0,
+          redeemCommissionRate: 0.03,
+          bankAccountName: `${city.name}统计合伙人${j + 1}`,
+          bankAccountNo: `622202${String(1000000000 + i * 10 + j)}`,
+          bankBranch: `${city.name}工商银行`,
+          createdAt,
+          updatedAt: createdAt,
+        },
+      });
+      createdPartners.push({ id: partner.id, cityId: city.id, city });
+
+      // 每位合伙人 3~5 家门店
+      const storeN = 3 + Math.floor(rand() * 3);
+      for (let k = 0; k < storeN; k++) {
+        const sDay = Math.floor(rand() * Math.max(1, dayOffset + 1));
+        const sCreated = new Date(today);
+        sCreated.setDate(sCreated.getDate() - sDay);
+        sCreated.setHours(11, Math.floor(rand() * 40), 0, 0);
+        const rate = 0.6;
+        const store = await prisma.store.create({
+          data: {
+            cityId: city.id,
+            partnerAccountId: partner.id,
+            categoryId: category?.id,
+            name: `${STORE_NAME_PREFIX}-${city.name}-${j + 1}-${k + 1}`,
+            phone: `1399${String(100000 + i * 100 + j * 10 + k).slice(-7)}`,
+            province: city.province,
+            cityName: city.name,
+            district: city.district,
+            address: `统计路${k + 1}号`,
+            settlementRate: rate,
+            status: 'OPEN',
+            auditStatus: 'APPROVED',
+            openTime: '10:00',
+            closeTime: '22:00',
+            createdAt: sCreated,
+            updatedAt: sCreated,
+          },
+        });
+        createdStores.push({
+          id: store.id,
+          cityId: city.id,
+          partnerAccountId: partner.id,
+          settlementRate: rate,
+        });
+      }
+    }
+  }
+
+  // ── 用户 + 订单 ──
+  const userCount = 100;
+  const createdUsers: Array<{
+    id: bigint;
+    cityId: bigint;
+    city: (typeof cities)[0];
+    promoId: bigint | null;
+    phone: string;
+  }> = [];
+  const paidOrders: Array<{
+    id: bigint;
+    userId: bigint;
+    cityId: bigint;
+    payAmount: number;
+    productName: string;
+  }> = [];
+
+  for (let i = 0; i < userCount; i++) {
+    const dayOffset = Math.floor(rand() * 30);
+    const createdAt = new Date(today);
+    createdAt.setDate(createdAt.getDate() - dayOffset);
+    createdAt.setHours(8 + Math.floor(rand() * 12), Math.floor(rand() * 60), 0, 0);
+
+    const city = cities[Math.floor(rand() * cities.length)];
+    const promo = rand() < 0.7 ? promos[Math.floor(rand() * promos.length)] : null;
+    const seq = String(i + 1).padStart(4, '0');
+    const phone = `13888${String(10000 + i).slice(-5)}`;
+
+    const user = await prisma.user.create({
+      data: {
+        userNo: `${USER_PREFIX}${seq}`,
+        phone,
+        phoneVerifiedAt: createdAt,
+        nickname: `统计用户${seq}`,
+        deviceKey: `stat-device-${seq}-${randomBytes(4).toString('hex')}`,
+        sourceType: promo ? 'PROMO_CODE' : 'ORGANIC',
+        sourceRefId: promo?.id ?? null,
+        sourceLabel: promo?.name ?? null,
+        createdAt,
+        updatedAt: createdAt,
+        cityPreference: {
+          create: {
+            selectedCityCode: city.code,
+            selectedDistrict: city.district,
+            locateCityCode: city.code,
+            locateDistrict: city.district,
+            updatedAt: createdAt,
+          },
+        },
+        ...(promo
+          ? {
+              promoTouch: {
+                create: {
+                  promoCodeId: promo.id,
+                  channelName: promo.name,
+                  firstTouchAt: createdAt,
+                },
+              },
+            }
+          : {}),
+      },
+    });
+
+    createdUsers.push({
+      id: user.id,
+      cityId: city.id,
+      city,
+      promoId: promo?.id ?? null,
+      phone,
+    });
+  }
+
+  const statuses: Array<{ status: OrderStatus; payStatus: PayStatus }> = [
+    { status: 'COMPLETED', payStatus: 'PAID' },
+    { status: 'COMPLETED', payStatus: 'PAID' },
+    { status: 'PENDING_SHIP', payStatus: 'PAID' },
+    { status: 'SHIPPING', payStatus: 'PAID' },
+    { status: 'PENDING_PAY', payStatus: 'UNPAID' },
+    { status: 'CANCELLED', payStatus: 'UNPAID' },
+  ];
+
+  let orderCount = 0;
+  const promoOrderInc = new Map<string, number>();
+
+  for (const u of createdUsers) {
+    const n = 1 + Math.floor(rand() * 3);
+    for (let j = 0; j < n; j++) {
+      const dayOffset = Math.floor(rand() * 30);
+      const createdAt = new Date(today);
+      createdAt.setDate(createdAt.getDate() - dayOffset);
+      createdAt.setHours(10 + Math.floor(rand() * 10), Math.floor(rand() * 60), 0, 0);
+
+      const qty = 2 + Math.floor(rand() * 3);
+      const unit = Number(product.price);
+      const listAmount = unit * qty;
+      const st = statuses[Math.floor(rand() * statuses.length)];
+      const paid = st.payStatus === 'PAID';
+      orderCount += 1;
+      const orderNo = `${ORDER_PREFIX}${String(orderCount).padStart(6, '0')}`;
+
+      const order = await prisma.order.create({
+        data: {
+          orderNo,
+          userId: u.id,
+          cityId: u.cityId,
+          promoCodeId: u.promoId,
+          channelSource: u.promoId ? 'STATS_MOCK' : null,
+          status: st.status,
+          payStatus: st.payStatus,
+          deliveryType: 'LOCAL',
+          productId: product.id,
+          barcode69: product.barcode69,
+          productName: product.name,
+          productSpec: product.spec,
+          quantity: qty,
+          listUnitPrice: unit,
+          listAmount,
+          productAmount: listAmount,
+          payAmount: listAmount,
+          benefitAmount: listAmount,
+          receiverName: `统计用户`,
+          receiverPhone: u.phone,
+          receiverAddress: `${u.city.name}${u.city.district}统计路1号`,
+          receiverProvince: u.city.province,
+          receiverCity: u.city.name,
+          receiverDistrict: u.city.district,
+          paidAt: paid ? createdAt : null,
+          completedAt: st.status === 'COMPLETED' ? createdAt : null,
+          cancelledAt: st.status === 'CANCELLED' ? createdAt : null,
+          createdAt,
+          updatedAt: createdAt,
+        },
+      });
+
+      if (paid) {
+        paidOrders.push({
+          id: order.id,
+          userId: u.id,
+          cityId: u.cityId,
+          payAmount: listAmount,
+          productName: product.name,
+        });
+      }
+
+      if (u.promoId) {
+        const key = u.promoId.toString();
+        promoOrderInc.set(key, (promoOrderInc.get(key) ?? 0) + 1);
+      }
+    }
+  }
+
+  for (const [id, inc] of promoOrderInc) {
+    await prisma.commonPromoCode.update({
+      where: { id: BigInt(id) },
+      data: { orderCount: { increment: inc }, scanCount: { increment: Math.floor(inc * 1.5) } },
+    });
+  }
+
+  // ── 权益券 + 核销（约 80 笔，分散近 30 天） ──
+  const storesByCity = new Map<string, typeof createdStores>();
+  for (const s of createdStores) {
+    const key = s.cityId.toString();
+    const list = storesByCity.get(key) ?? [];
+    list.push(s);
+    storesByCity.set(key, list);
+  }
+
+  let redeemCount = 0;
+  const redeemTarget = Math.min(80, paidOrders.length);
+  for (let i = 0; i < redeemTarget; i++) {
+    const order = paidOrders[i];
+    const cityStores = storesByCity.get(order.cityId.toString()) ?? createdStores;
+    if (!cityStores.length) continue;
+    const store = cityStores[Math.floor(rand() * cityStores.length)];
+
+    const dayOffset = Math.floor(rand() * 30);
+    const createdAt = new Date(today);
+    createdAt.setDate(createdAt.getDate() - dayOffset);
+    createdAt.setHours(14 + Math.floor(rand() * 6), Math.floor(rand() * 60), 0, 0);
+
+    const amount = Math.round((40 + rand() * 200) * 100) / 100;
+    const settleAmount = Math.round(amount * store.settlementRate * 100) / 100;
+
+    const coupon = await prisma.benefitCoupon.create({
+      data: {
+        couponNo: `${COUPON_PREFIX}${String(i + 1).padStart(5, '0')}`,
+        userId: order.userId,
+        orderId: order.id,
+        totalAmount: order.payAmount,
+        usedAmount: amount,
+        balance: Math.max(0, order.payAmount - amount),
+        status: amount >= order.payAmount ? 'USED_UP' : 'ACTIVE',
+        sourceProduct: order.productName,
+        createdAt,
+        updatedAt: createdAt,
+      },
+    });
+
+    redeemCount += 1;
+    await prisma.redeemRecord.create({
+      data: {
+        redeemNo: `${REDEEM_PREFIX}${String(redeemCount).padStart(5, '0')}`,
+        userId: order.userId,
+        couponId: coupon.id,
+        storeId: store.id,
+        amount,
+        settleAmount,
+        createdAt,
+      },
+    });
+  }
+
+  console.log(
+    `Done: cities=${cities.length}, promos=${promos.length}, partners=${createdPartners.length}, ` +
+      `stores=${createdStores.length}, users=${createdUsers.length}, orders=${orderCount}, redeems=${redeemCount}`,
+  );
+}
+
+main()
+  .catch((e) => {
+    console.error(e);
+    process.exit(1);
+  })
+  .finally(async () => {
+    await prisma.$disconnect();
+  });

server/dukang-api/scripts/gen-staging-env-from-prod.cjs

@@ -0,0 +1,123 @@
+const fs = require('fs');
+const path = require('path');
+
+const apiRoot = path.join(__dirname, '..');
+const prod = fs.readFileSync(path.join(apiRoot, '.env.production'), 'utf8');
+const map = new Map();
+for (const line of prod.split(/\r?\n/)) {
+  const m = line.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
+  if (m) map.set(m[1], m[2]);
+}
+
+function unq(v) {
+  if (!v) return '';
+  if (
+    (v.startsWith('"') && v.endsWith('"')) ||
+    (v.startsWith("'") && v.endsWith("'"))
+  ) {
+    return v.slice(1, -1);
+  }
+  return v;
+}
+
+function q(v) {
+  return JSON.stringify(String(v ?? ''));
+}
+
+const db = unq(map.get('DATABASE_URL') || '');
+if (!db.includes('dukang_prod')) {
+  console.error('prod DATABASE_URL unexpected, refuse to rewrite');
+  process.exit(1);
+}
+const stagingDb = db.replace('/dukang_prod', '/dukang_staging');
+const jwt = `${unq(map.get('JWT_SECRET') || 'prod')}-staging`;
+
+const fixed = {
+  APP_ENV: 'staging',
+  NODE_ENV: 'production',
+  DATABASE_URL: stagingDb,
+  REDIS_URL: 'redis://localhost:6379/1',
+  JWT_SECRET: jwt,
+  JWT_EXPIRES_IN: unq(map.get('JWT_EXPIRES_IN') || '7d'),
+  PORT: '8190',
+  MOCK_SMS: 'true',
+  MOCK_PAY: 'true',
+  MOCK_DELIVERY_AUTO: 'true',
+  MOCK_WECHAT: 'true',
+  AUTO_APPROVE_STORE: 'true',
+  TRUST_PROXY: 'true',
+  USER_H5_URL: 'https://user-test.dukanghaoke.com/user',
+  WX_PAY_NOTIFY_URL: 'https://api-test.dukanghaoke.com/api/v1/callbacks/wechat/pay',
+  OSS_UPLOAD_PREFIX: 'staging/uploads',
+  WECOM_AIBOT_ENABLED: 'false',
+};
+
+const preferFromProd = [
+  'ALIYUN_SMS_SIGN_NAME',
+  'ALIYUN_SMS_TEMPLATE_CODE',
+  'ALIYUN_SMS_TEMPLATE_CONFIRM_REDEEM',
+  'ALIYUN_SMS_TEMPLATE_PROXY_ORDER',
+  'ALIYUN_SMS_ACCESS_KEY_ID',
+  'ALIYUN_SMS_ACCESS_KEY_SECRET',
+  'WX_APP_ID',
+  'WX_APP_SECRET',
+  'WX_MINI_APP_ID',
+  'WX_MINI_APP_SECRET',
+  'WX_MINI_PROMO_PAGE',
+  'WX_MCH_ID',
+  'WX_MCH_SERIAL_NO',
+  'WX_MCH_PRIVATE_KEY',
+  'WX_API_V3_KEY',
+  'WX_PLATFORM_CERT',
+  'WX_MINI_MSG_TOKEN',
+  'WX_MINI_MSG_AES_KEY',
+  'OSS_ACCESS_KEY_ID',
+  'OSS_ACCESS_KEY_SECRET',
+  'OSS_BUCKET',
+  'OSS_REGION',
+  'OSS_CDN_BASE',
+  'OSS_ENDPOINT',
+  'OSS_UPLOAD_EXPIRE_SECONDS',
+  'OSS_MAX_UPLOAD_BYTES',
+  'COURIER_PROVIDER',
+  'XIAOFEIXIA_API_URL',
+  'XIAOFEIXIA_MCH_ID',
+  'XIAOFEIXIA_API_KEY',
+  'XIAOFEIXIA_SIGN_TYPE',
+  'SHIP_FROM_NAME',
+  'SHIP_FROM_MOBILE',
+  'SHIP_FROM_ADDRESS',
+  'SHIP_FROM_ADDRESS_DETAIL',
+  'SHIP_FROM_LNG',
+  'SHIP_FROM_LAT',
+  'TENCENT_LBS_KEY',
+  'TENCENT_LBS_SECRET_KEY',
+  'DEPLOY_WEBHOOK_URL',
+  'DEPLOY_WEBHOOK_SECRET',
+];
+
+const out = [
+  '# Generated from .env.production for staging (full Mock + *-test domains)',
+  '# Do not commit. Sync: bash deploy/sync-api-env.sh staging',
+  '',
+];
+
+for (const [k, v] of Object.entries(fixed)) {
+  out.push(`${k}=${q(v)}`);
+}
+out.push('');
+for (const k of preferFromProd) {
+  if (map.has(k) && !(k in fixed)) {
+    out.push(`${k}=${q(unq(map.get(k)))}`);
+  }
+}
+
+const skip = new Set([...Object.keys(fixed), ...preferFromProd]);
+for (const [k, raw] of map.entries()) {
+  if (skip.has(k)) continue;
+  out.push(`${k}=${q(unq(raw))}`);
+}
+
+fs.writeFileSync(path.join(apiRoot, '.env.staging'), `${out.join('\n')}\n`);
+const host = (stagingDb.match(/@([^/:]+)/) || [])[1] || '?';
+console.log(`ok db=dukang_staging host=${host} redis=/1 mocks=on`);

server/dukang-api/scripts/point-staging-to-rds.cjs

@@ -0,0 +1,27 @@
+const fs = require('fs');
+const path = require('path');
+
+const apiRoot = path.join(__dirname, '..');
+const prod = fs.readFileSync(path.join(apiRoot, '.env.production'), 'utf8');
+const m = prod.match(/^DATABASE_URL=(.*)$/m);
+if (!m) throw new Error('no prod DATABASE_URL');
+let url = m[1].trim();
+if (
+  (url.startsWith('"') && url.endsWith('"')) ||
+  (url.startsWith("'") && url.endsWith("'"))
+) {
+  url = url.slice(1, -1);
+}
+if (!url.includes('/dukang_prod')) throw new Error('unexpected prod url');
+const stg = url.replace('/dukang_prod', '/dukang_staging');
+
+const envPath = path.join(apiRoot, '.env.staging');
+let t = fs.readFileSync(envPath, 'utf8');
+if (!/^DATABASE_URL=/m.test(t)) {
+  t = `DATABASE_URL=\n${t}`;
+}
+t = t.replace(/^DATABASE_URL=.*$/m, `DATABASE_URL=${JSON.stringify(stg)}`);
+fs.writeFileSync(envPath, t);
+
+const u = new URL(stg);
+console.log(`ok ${u.hostname}:${u.port || 3306}${u.pathname}`);

server/dukang-api/scripts/with-api-env.cjs

@@ -4,7 +4,8 @@ const { existsSync } = require('fs');
 const { resolve } = require('path');
 
 const apiRoot = resolve(__dirname, '..');
-const envFile = process.env.DUKANG_ENV_FILE ?? '.env.production';
+const envFile = process.env.DUKANG_ENV_FILE
+  ?? (process.env.APP_ENV === 'staging' ? '.env.staging' : '.env.production');
 const envPath = resolve(apiRoot, envFile);
 
 if (!existsSync(envPath)) {

server/dukang-api/src/callbacks/callbacks.module.ts

@@ -4,10 +4,16 @@ import { TradeModule } from '../modules/trade/trade.module';
 import { PrismaModule } from '../common/prisma/prisma.module';
 import { WechatPayCallbackController } from './wechat-pay.controller';
 import { WechatRefundCallbackController } from './wechat-refund.controller';
+import { WechatMessageCallbackController } from './wechat-message.controller';
 import { DeliveryCallbackController } from './delivery-track.controller';
 
 @Module({
   imports: [IntegrationsModule, TradeModule, PrismaModule],
-  controllers: [WechatPayCallbackController, WechatRefundCallbackController, DeliveryCallbackController],
+  controllers: [
+    WechatPayCallbackController,
+    WechatRefundCallbackController,
+    WechatMessageCallbackController,
+    DeliveryCallbackController,
+  ],
 })
 export class CallbacksModule {}

server/dukang-api/src/callbacks/wechat-message.controller.ts

@@ -0,0 +1,118 @@
+import {
+  Controller,
+  Get,
+  HttpStatus,
+  Logger,
+  Post,
+  Query,
+  Req,
+  Res,
+} from '@nestjs/common';
+import type { Request, Response } from 'express';
+import {
+  decryptWechatEncrypt,
+  normalizeTradeManageEvent,
+  parseWechatPushBody,
+  verifyWechatMsgSignature,
+  verifyWechatUrlSignature,
+} from '../integrations/wechat/wechat-msg-crypto.util';
+import { WechatTradeManageService } from '../integrations/wechat/wechat-trade-manage.service';
+
+/**
+ * 小程序消息推送（发货信息管理事件）。
+ * 后台配置 URL：https://{host}/api/v1/callbacks/wechat/message
+ * 需配置 WX_MINI_MSG_TOKEN；安全模式另需 WX_MINI_MSG_AES_KEY。
+ */
+@Controller('callbacks/wechat')
+export class WechatMessageCallbackController {
+  private readonly logger = new Logger(WechatMessageCallbackController.name);
+
+  constructor(private readonly tradeManage: WechatTradeManageService) {}
+
+  @Get('message')
+  verify(
+    @Query('signature') signature: string,
+    @Query('timestamp') timestamp: string,
+    @Query('nonce') nonce: string,
+    @Query('echostr') echostr: string,
+    @Res() res: Response,
+  ) {
+    const token = (process.env.WX_MINI_MSG_TOKEN || '').trim();
+    if (!token) {
+      this.logger.error('WX_MINI_MSG_TOKEN 未配置，无法完成消息推送 URL 验证');
+      return res.status(HttpStatus.SERVICE_UNAVAILABLE).send('msg token not configured');
+    }
+    if (!verifyWechatUrlSignature(token, timestamp, nonce, signature)) {
+      this.logger.warn('wechat message URL verify failed');
+      return res.status(HttpStatus.FORBIDDEN).send('invalid signature');
+    }
+    return res.status(HttpStatus.OK).send(echostr ?? '');
+  }
+
+  @Post('message')
+  async receive(
+    @Req() req: Request & { rawBody?: Buffer },
+    @Query('signature') signature: string,
+    @Query('timestamp') timestamp: string,
+    @Query('nonce') nonce: string,
+    @Query('msg_signature') msgSignature: string,
+    @Query('encrypt_type') encryptType: string,
+    @Res() res: Response,
+  ) {
+    const token = (process.env.WX_MINI_MSG_TOKEN || '').trim();
+    if (!token) {
+      return res.status(HttpStatus.SERVICE_UNAVAILABLE).send('msg token not configured');
+    }
+
+    try {
+      const raw =
+        req.rawBody?.toString('utf8') ??
+        (typeof req.body === 'string'
+          ? req.body
+          : Buffer.isBuffer(req.body)
+            ? req.body.toString('utf8')
+            : JSON.stringify(req.body ?? {}));
+
+      let body = parseWechatPushBody(raw);
+      const encrypt = typeof body.Encrypt === 'string' ? body.Encrypt : undefined;
+      const secure = encryptType === 'aes' || !!encrypt;
+
+      if (secure) {
+        if (!encrypt) {
+          return res.status(HttpStatus.BAD_REQUEST).send('missing Encrypt');
+        }
+        const aesKey = (process.env.WX_MINI_MSG_AES_KEY || '').trim();
+        if (!aesKey) {
+          this.logger.error('安全模式推送但未配置 WX_MINI_MSG_AES_KEY');
+          return res.status(HttpStatus.SERVICE_UNAVAILABLE).send('aes key not configured');
+        }
+        if (
+          !verifyWechatMsgSignature(token, timestamp, nonce, encrypt, msgSignature || String(body.MsgSignature || ''))
+        ) {
+          return res.status(HttpStatus.FORBIDDEN).send('invalid msg_signature');
+        }
+        const appId = (process.env.WX_MINI_APP_ID || process.env.WX_APP_ID || '').trim();
+        const plain = decryptWechatEncrypt(encrypt, aesKey, appId || undefined);
+        body = parseWechatPushBody(plain);
+      } else if (!verifyWechatUrlSignature(token, timestamp, nonce, signature)) {
+        return res.status(HttpStatus.FORBIDDEN).send('invalid signature');
+      }
+
+      // 云托管探活
+      if (String(body.action || '') === 'CheckContainerPath') {
+        return res.status(HttpStatus.OK).send('success');
+      }
+
+      const evt = normalizeTradeManageEvent(body);
+      if (evt.event) {
+        await this.tradeManage.handleEvent(evt);
+      }
+      return res.status(HttpStatus.OK).send('success');
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      this.logger.error(`wechat message push failed: ${message}`);
+      // 仍回 success，避免微信疯狂重试；错误已记日志
+      return res.status(HttpStatus.OK).send('success');
+    }
+  }
+}

server/dukang-api/src/common/guards/hq-permission.guard.ts

@@ -7,6 +7,7 @@ import {
 } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import {
+  HQ_DANGEROUS_PERMISSION_KEYS,
   HQ_ROLE_DEFAULT_PERMISSIONS,
   expandHqPermissionKeys,
   hasAnySystemSettingsPermission,
@@ -43,8 +44,12 @@ export class HqPermissionsResolver {
     const userKeys = userRows.map((r) => r.permissionKey);
 
     if (account.adminRole === 'SUPER_ADMIN') {
-      // 超管默认拥有业务/管理权限，但不含危险操作；危险权限需按用户显式勾选
-      return expandHqPermissionKeys([...hqBasePermissionKeys(), ...userKeys]);
+      // 超管含危险操作（删用户/订单/城市）；其他角色仍需在权限分配中显式勾选
+      return expandHqPermissionKeys([
+        ...hqBasePermissionKeys(),
+        ...HQ_DANGEROUS_PERMISSION_KEYS,
+        ...userKeys,
+      ]);
     }
 
     const roleRows = await this.prisma.hqRolePermission.findMany({

server/dukang-api/src/common/hq-operation/hq-operation.constants.ts

@@ -22,6 +22,8 @@ export const HqOperationAction = {
   ORDER_SHIP: 'ORDER_SHIP',
   ORDER_STATUS_DEBUG: 'ORDER_STATUS_DEBUG',
   ORDER_BATCH_DELETE: 'ORDER_BATCH_DELETE',
+  ORDER_DELETE: 'ORDER_DELETE',
+  ORDER_PROXY_CREATE: 'ORDER_PROXY_CREATE',
   STORE_CREATE: 'STORE_CREATE',
   STORE_UPDATE: 'STORE_UPDATE',
   STORE_STATUS: 'STORE_STATUS',
@@ -122,6 +124,8 @@ export const HQ_OPERATION_ACTION_LABELS: Record<string, string> = {
   [HqOperationAction.ORDER_SHIP]: '订单发货',
   [HqOperationAction.ORDER_STATUS_DEBUG]: '订单状态调试',
   [HqOperationAction.ORDER_BATCH_DELETE]: '批量删除订单',
+  [HqOperationAction.ORDER_DELETE]: '删除订单',
+  [HqOperationAction.ORDER_PROXY_CREATE]: '总部代下单',
   [HqOperationAction.STORE_CREATE]: '新增门店',
   [HqOperationAction.STORE_UPDATE]: '编辑门店',
   [HqOperationAction.STORE_STATUS]: '变更门店状态',

server/dukang-api/src/common/system-config/system-config.registry.ts

@@ -77,6 +77,25 @@ export const SYSTEM_CONFIG_FIELDS: SystemConfigFieldMeta[] = [
   { key: 'WX_API_V3_KEY', label: 'APIv3 密钥', group: G.wechat, type: 'password', secret: true, requiresRestart: true },
   { key: 'WX_PLATFORM_CERT', label: '微信平台公钥证书', group: G.wechat, type: 'textarea', secret: true, requiresRestart: true },
   { key: 'WX_PAY_NOTIFY_URL', label: '支付回调 URL', group: G.wechat, type: 'string', requiresRestart: false },
+  {
+    key: 'WX_MINI_MSG_TOKEN',
+    label: '小程序消息推送 Token',
+    group: G.wechat,
+    type: 'password',
+    secret: true,
+    requiresRestart: true,
+    description:
+      '小程序后台「开发-开发管理-消息推送」Token；回调 URL=/api/v1/callbacks/wechat/message',
+  },
+  {
+    key: 'WX_MINI_MSG_AES_KEY',
+    label: '小程序消息推送 EncodingAESKey',
+    group: G.wechat,
+    type: 'password',
+    secret: true,
+    requiresRestart: true,
+    description: '消息推送安全模式 EncodingAESKey（43 位）；明文模式可留空',
+  },
 
   {
     key: 'MINI_HOME_BANNERS',
@@ -107,7 +126,25 @@ export const SYSTEM_CONFIG_FIELDS: SystemConfigFieldMeta[] = [
   { key: 'OSS_MAX_UPLOAD_BYTES', label: '单文件上限(字节)', group: G.oss, type: 'number', requiresRestart: false },
 
   { key: 'USER_H5_URL', label: 'C 端 H5 落地页', group: G.app, type: 'string', requiresRestart: false },
-  { key: 'TENCENT_LBS_KEY', label: '腾讯位置服务 Key（须开 WebServiceAPI；服务端地点搜索/地理编码）', group: G.app, type: 'password', secret: true, requiresRestart: false },
+  {
+    key: 'TENCENT_LBS_KEY',
+    label: '腾讯位置服务 Key',
+    group: G.app,
+    type: 'password',
+    secret: true,
+    requiresRestart: false,
+    description: '须开启 WebServiceAPI；服务端地理编码/地点搜索与前端选点组件共用',
+  },
+  {
+    key: 'TENCENT_LBS_SECRET_KEY',
+    label: '腾讯位置服务 SecretKey（SK）',
+    group: G.app,
+    type: 'password',
+    secret: true,
+    requiresRestart: false,
+    description:
+      '控制台开启 WebServiceAPI「签名校验」后生成；仅服务端计算 sig，勿泄露。配置后接口请求自动附带签名',
+  },
 
   { key: 'DEPLOY_WEBHOOK_URL', label: '发布 Webhook URL', group: G.deploy, type: 'string', requiresRestart: false },
   { key: 'DEPLOY_WEBHOOK_SECRET', label: '发布 Webhook Secret', group: G.deploy, type: 'password', secret: true, requiresRestart: false },

server/dukang-api/src/integrations/integrations.module.ts

@@ -12,6 +12,8 @@ import { WechatApiProvider } from './wechat/wechat.api.provider';
 import { WechatDisabledProvider } from './wechat/wechat.disabled.provider';
 import { WechatMockProvider } from './wechat/wechat.mock.provider';
 import { WechatRouterProvider } from './wechat/wechat.router.provider';
+import { WechatOrderShippingService } from './wechat/wechat-order-shipping.service';
+import { WechatTradeManageService } from './wechat/wechat-trade-manage.service';
 import { OssAliyunProvider } from './oss/oss.aliyun.provider';
 import { TencentLbsProvider } from './map/tencent-lbs.provider';
 import {
@@ -38,6 +40,8 @@ import { DELIVERY_QUEUE } from '../jobs/jobs.constants';
     WechatMockProvider,
     WechatRouterProvider,
     { provide: WECHAT_PROVIDER, useExisting: WechatRouterProvider },
+    WechatOrderShippingService,
+    WechatTradeManageService,
     PayMockProvider,
     PayWechatProvider,
     PayRouterProvider,
@@ -55,6 +59,8 @@ import { DELIVERY_QUEUE } from '../jobs/jobs.constants';
     PAY_PROVIDER,
     DELIVERY_PROVIDER,
     WECHAT_PROVIDER,
+    WechatOrderShippingService,
+    WechatTradeManageService,
     OSS_PROVIDER,
     MAP_PROVIDER,
     TencentLbsProvider,

server/dukang-api/src/integrations/map/tencent-lbs.provider.ts

@@ -2,6 +2,7 @@ import { Injectable, Logger } from '@nestjs/common';
 import { loadAppConfig } from '@dukang/shared-types';
 import { PrismaService } from '../../common/prisma/prisma.module';
 import type { WechatActorRef } from '../wechat/wechat-log.util';
+import { buildTencentLbsRequestUrl } from './tencent-lbs.sign';
 
 export type ReverseGeocodeResult = {
   province: string;
@@ -54,11 +55,22 @@ export class TencentLbsProvider {
 
   constructor(private readonly prisma: PrismaService) {}
 
-  /** 每次读取，避免构造时缓存、以及系统设置热更新后仍用旧 Key */
+  /** 每次读取，避免构造时缓存、以及系统设置热更新后仍用旧 Key/SK */
   private getLbsKey() {
     return (loadAppConfig().tencentLbsKey || '').trim();
   }
 
+  private getLbsSecretKey() {
+    return (loadAppConfig().tencentLbsSecretKey || '').trim();
+  }
+
+  private lbsUrl(path: string, params: Record<string, string>) {
+    return buildTencentLbsRequestUrl(path, params, {
+      key: this.getLbsKey(),
+      secretKey: this.getLbsSecretKey(),
+    });
+  }
+
   isEnabled() {
     return !!this.getLbsKey();
   }
@@ -91,12 +103,10 @@ export class TencentLbsProvider {
       return null;
     }
 
-    const url = new URL('https://apis.map.qq.com/ws/geocoder/v1/');
-    url.searchParams.set('address', trimmed);
-    url.searchParams.set('key', this.getLbsKey());
+    const url = this.lbsUrl('/ws/geocoder/v1', { address: trimmed });
 
     try {
-      const res = await fetch(url.toString());
+      const res = await fetch(url);
       const data = (await res.json()) as {
         status?: number;
         message?: string;
@@ -169,14 +179,13 @@ export class TencentLbsProvider {
       return null;
     }
 
-    const location = `${latitude},${longitude}`;
-    const url = new URL('https://apis.map.qq.com/ws/geocoder/v1/');
-    url.searchParams.set('location', location);
-    url.searchParams.set('key', this.getLbsKey());
-    url.searchParams.set('get_poi', '0');
+    const url = this.lbsUrl('/ws/geocoder/v1', {
+      location: `${latitude},${longitude}`,
+      get_poi: '0',
+    });
 
     try {
-      const res = await fetch(url.toString());
+      const res = await fetch(url);
       const data = (await res.json()) as {
         status?: number;
         message?: string;
@@ -265,25 +274,25 @@ export class TencentLbsProvider {
       return { items: [], error: 'TENCENT_LBS_KEY 未配置' };
     }
 
-    const url = new URL('https://apis.map.qq.com/ws/place/v1/suggestion');
-    url.searchParams.set('keyword', trimmed.slice(0, 64));
-    url.searchParams.set('key', this.getLbsKey());
-    url.searchParams.set('policy', '1');
-    url.searchParams.set('page_index', '1');
-    url.searchParams.set('page_size', '20');
+    const params: Record<string, string> = {
+      keyword: trimmed.slice(0, 64),
+      policy: '1',
+      page_index: '1',
+      page_size: '20',
+    };
     const region = options?.region?.trim();
-    if (region) url.searchParams.set('region', region);
+    if (region) params.region = region;
     if (
       options?.latitude != null &&
       options?.longitude != null &&
       Number.isFinite(options.latitude) &&
       Number.isFinite(options.longitude)
     ) {
-      url.searchParams.set('location', `${options.latitude},${options.longitude}`);
+      params.location = `${options.latitude},${options.longitude}`;
     }
 
     try {
-      const res = await fetch(url.toString());
+      const res = await fetch(this.lbsUrl('/ws/place/v1/suggestion', params));
       const data = (await res.json()) as {
         status?: number;
         message?: string;
@@ -315,14 +324,14 @@ export class TencentLbsProvider {
     }
 
     const radius = Math.min(5000, Math.max(200, Math.round(radiusMeters)));
-    const url = new URL('https://apis.map.qq.com/ws/place/v1/explore');
-    url.searchParams.set('boundary', `nearby(${latitude},${longitude},${radius})`);
-    url.searchParams.set('policy', '1');
-    url.searchParams.set('page_size', '20');
-    url.searchParams.set('key', this.getLbsKey());
+    const url = this.lbsUrl('/ws/place/v1/explore', {
+      boundary: `nearby(${latitude},${longitude},${radius})`,
+      policy: '1',
+      page_size: '20',
+    });
 
     try {
-      const res = await fetch(url.toString());
+      const res = await fetch(url);
       const data = (await res.json()) as {
         status?: number;
         message?: string;
@@ -352,13 +361,13 @@ export class TencentLbsProvider {
       return { item: null, error: 'TENCENT_LBS_KEY 未配置' };
     }
 
-    const url = new URL('https://apis.map.qq.com/ws/geocoder/v1/');
-    url.searchParams.set('location', `${latitude},${longitude}`);
-    url.searchParams.set('key', this.getLbsKey());
-    url.searchParams.set('get_poi', '1');
+    const url = this.lbsUrl('/ws/geocoder/v1', {
+      location: `${latitude},${longitude}`,
+      get_poi: '1',
+    });
 
     try {
-      const res = await fetch(url.toString());
+      const res = await fetch(url);
       const data = (await res.json()) as {
         status?: number;
         message?: string;

server/dukang-api/src/integrations/map/tencent-lbs.sign.ts

@@ -0,0 +1,39 @@
+import { createHash } from 'node:crypto';
+
+const LBS_HOST = 'https://apis.map.qq.com';
+
+/**
+ * 腾讯位置服务 WebServiceAPI（GET）签名 URL。
+ * 控制台开启 SN/签名校验后须附带 sig；SecretKey 仅服务端使用。
+ *
+ * sig = md5(请求路径 + "?" + 按参数名升序的原始 query + SK)
+ * @see https://lbs.qq.com/FAQ/server_faq.html
+ */
+export function buildTencentLbsRequestUrl(
+  path: string,
+  params: Record<string, string>,
+  options: { key: string; secretKey?: string },
+): string {
+  const key = options.key.trim();
+  if (!key) {
+    throw new Error('TENCENT_LBS_KEY 未配置');
+  }
+
+  const pathname = (path.startsWith('/') ? path : `/${path}`).replace(/\/+$/, '') || '/';
+  const all: Record<string, string> = { ...params, key };
+  const sortedKeys = Object.keys(all).sort();
+  const rawQuery = sortedKeys.map((k) => `${k}=${all[k]}`).join('&');
+
+  const search = new URLSearchParams();
+  for (const k of sortedKeys) {
+    search.set(k, all[k]);
+  }
+
+  const sk = options.secretKey?.trim();
+  if (sk) {
+    const sig = createHash('md5').update(`${pathname}?${rawQuery}${sk}`).digest('hex');
+    search.set('sig', sig);
+  }
+
+  return `${LBS_HOST}${pathname}?${search.toString()}`;
+}

server/dukang-api/src/integrations/pay/pay.interface.ts

@@ -1,9 +1,17 @@
 import type { WechatJsapiPrepayParams } from '@dukang/shared-types';
 
+export type PayMethod = 'JSAPI' | 'NATIVE';
+
 export type PayOrderResult =
   | { mode: 'mock'; externalNo: string }
-  | { mode: 'jsapi'; prepay: WechatJsapiPrepayParams };
+  | { mode: 'jsapi'; prepay: WechatJsapiPrepayParams }
+  | { mode: 'native'; codeUrl: string; externalNo: string };
 
 export interface IPayProvider {
-  payOrder(orderId: bigint, openId?: string, platform?: 'h5' | 'mini'): Promise<PayOrderResult>;
+  payOrder(
+    orderId: bigint,
+    openId?: string,
+    platform?: 'h5' | 'mini',
+    payMethod?: PayMethod,
+  ): Promise<PayOrderResult>;
 }

server/dukang-api/src/integrations/pay/pay.mock.provider.ts

@@ -1,13 +1,30 @@
 import { Injectable } from '@nestjs/common';
 import { loadAppConfig } from '@dukang/shared-types';
-import type { IPayProvider, PayOrderResult } from './pay.interface';
+import { PrismaService } from '../../common/prisma/prisma.module';
+import type { IPayProvider, PayMethod, PayOrderResult } from './pay.interface';
 
 @Injectable()
 export class PayMockProvider implements IPayProvider {
-  async payOrder(_orderId: bigint, _openId?: string, _platform?: 'h5' | 'mini'): Promise<PayOrderResult> {
+  constructor(private readonly prisma: PrismaService) {}
+
+  async payOrder(
+    orderId: bigint,
+    _openId?: string,
+    _platform?: 'h5' | 'mini',
+    payMethod: PayMethod = 'JSAPI',
+  ): Promise<PayOrderResult> {
     if (!loadAppConfig().mockPay) {
       throw new Error('Real WeChat pay requires PayWechatProvider');
     }
+    if (payMethod === 'NATIVE') {
+      const order = await this.prisma.order.findUnique({ where: { id: orderId } });
+      const orderNo = order?.orderNo ?? orderId.toString();
+      return {
+        mode: 'native',
+        codeUrl: `mock://wechat-pay/native?orderNo=${encodeURIComponent(orderNo)}`,
+        externalNo: `MOCK-NATIVE-${Date.now()}`,
+      };
+    }
     return { mode: 'mock', externalNo: `MOCK-${Date.now()}` };
   }
 }

server/dukang-api/src/integrations/pay/pay.router.provider.ts

@@ -1,10 +1,10 @@
 import { Injectable } from '@nestjs/common';
 import { loadAppConfig } from '@dukang/shared-types';
-import type { IPayProvider, PayOrderResult } from './pay.interface';
+import type { IPayProvider, PayMethod, PayOrderResult } from './pay.interface';
 import { PayMockProvider } from './pay.mock.provider';
 import { PayWechatProvider } from './pay.wechat.provider';
 
-/** 按当前 process.env 动态选择 Mock / 微信 JSAPI 支付 */
+/** 按当前 process.env 动态选择 Mock / 微信支付 */
 @Injectable()
 export class PayRouterProvider implements IPayProvider {
   constructor(
@@ -16,7 +16,12 @@ export class PayRouterProvider implements IPayProvider {
     return loadAppConfig().mockPay ? this.mock : this.wechat;
   }
 
-  payOrder(orderId: bigint, openId?: string, platform?: 'h5' | 'mini'): Promise<PayOrderResult> {
-    return this.resolve().payOrder(orderId, openId, platform);
+  payOrder(
+    orderId: bigint,
+    openId?: string,
+    platform?: 'h5' | 'mini',
+    payMethod?: PayMethod,
+  ): Promise<PayOrderResult> {
+    return this.resolve().payOrder(orderId, openId, platform, payMethod);
   }
 }

server/dukang-api/src/integrations/pay/pay.wechat.provider.ts

@@ -3,7 +3,7 @@ import { loadAppConfig } from '@dukang/shared-types';
 import { PrismaService } from '../../common/prisma/prisma.module';
 import { WECHAT_PROVIDER } from '../integrations.constants';
 import type { IWechatProvider } from '../wechat/wechat.interface';
-import type { IPayProvider, PayOrderResult } from './pay.interface';
+import type { IPayProvider, PayMethod, PayOrderResult } from './pay.interface';
 
 @Injectable()
 export class PayWechatProvider implements IPayProvider {
@@ -14,28 +14,60 @@ export class PayWechatProvider implements IPayProvider {
     @Inject(WECHAT_PROVIDER) private readonly wechat: IWechatProvider,
   ) {}
 
-  async payOrder(orderId: bigint, openId?: string, platform: 'h5' | 'mini' = 'h5'): Promise<PayOrderResult> {
+  async payOrder(
+    orderId: bigint,
+    openId?: string,
+    platform: 'h5' | 'mini' = 'h5',
+    payMethod: PayMethod = 'JSAPI',
+  ): Promise<PayOrderResult> {
     if (loadAppConfig().mockPay) {
+      if (payMethod === 'NATIVE') {
+        const order = await this.prisma.order.findUnique({ where: { id: orderId } });
+        const orderNo = order?.orderNo ?? orderId.toString();
+        return {
+          mode: 'native',
+          codeUrl: `mock://wechat-pay/native?orderNo=${encodeURIComponent(orderNo)}`,
+          externalNo: `MOCK-NATIVE-${Date.now()}`,
+        };
+      }
       return { mode: 'mock', externalNo: `MOCK-${Date.now()}` };
     }
     if (!this.wechat.isPayEnabled()) {
       throw new Error('微信支付未配置：请关闭 MOCK_PAY 并配置 WX_MCH_ID 等商户参数');
     }
-    if (!openId) {
-      throw new Error('微信支付需要用户 openId，请先完成微信授权登录');
-    }
 
     const order = await this.prisma.order.findUnique({ where: { id: orderId } });
     if (!order) throw new Error('订单不存在');
 
     const amountFen = Math.round(Number(order.payAmount) * 100);
+    const notifyUrl = process.env.WX_PAY_NOTIFY_URL ?? '';
+
+    if (payMethod === 'NATIVE') {
+      this.logger.log(`create NATIVE prepay order=${order.orderNo} mchid=${this.wechat.getMchId()}`);
+      const { codeUrl } = await this.wechat.createNativePrepay({
+        orderNo: order.orderNo,
+        description: `杜康好客订单 ${order.orderNo}`,
+        amountFen,
+        notifyUrl,
+      });
+      return {
+        mode: 'native',
+        codeUrl,
+        externalNo: `NATIVE-${order.orderNo}`,
+      };
+    }
+
+    if (!openId) {
+      throw new Error('微信支付需要用户 openId，请先完成微信授权登录');
+    }
+
     this.logger.log(`create JSAPI prepay order=${order.orderNo} mchid=${this.wechat.getMchId()} platform=${platform}`);
     const prepay = await this.wechat.createJsapiPrepay({
       orderNo: order.orderNo,
       description: `杜康好客订单 ${order.orderNo}`,
       amountFen,
       openId,
-      notifyUrl: process.env.WX_PAY_NOTIFY_URL ?? '',
+      notifyUrl,
       platform,
     });
     return { mode: 'jsapi', prepay };

server/dukang-api/src/integrations/wechat/wechat-msg-crypto.util.ts

@@ -0,0 +1,158 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from 'crypto';
+
+/** 微信消息推送：Token/timestamp/nonce[/Encrypt] 字典序拼接后 SHA1 */
+export function wechatMsgSha1(...parts: string[]): string {
+  return createHash('sha1').update([...parts].sort().join('')).digest('hex');
+}
+
+export function verifyWechatUrlSignature(
+  token: string,
+  timestamp: string,
+  nonce: string,
+  signature: string,
+): boolean {
+  if (!token || !timestamp || !nonce || !signature) return false;
+  return wechatMsgSha1(token, timestamp, nonce) === signature;
+}
+
+export function verifyWechatMsgSignature(
+  token: string,
+  timestamp: string,
+  nonce: string,
+  encrypt: string,
+  msgSignature: string,
+): boolean {
+  if (!token || !timestamp || !nonce || !encrypt || !msgSignature) return false;
+  return wechatMsgSha1(token, timestamp, nonce, encrypt) === msgSignature;
+}
+
+function decodeAesKey(encodingAESKey: string): Buffer {
+  const key = Buffer.from(`${encodingAESKey.trim()}=`, 'base64');
+  if (key.length !== 32) {
+    throw new Error(`EncodingAESKey 无效（解码后应为 32 字节，实际 ${key.length}）`);
+  }
+  return key;
+}
+
+/**
+ * 解密微信安全模式 Encrypt 字段。
+ * FullStr = random(16) + msg_len(4 BE) + msg + appid
+ */
+export function decryptWechatEncrypt(
+  encryptBase64: string,
+  encodingAESKey: string,
+  expectedAppId?: string,
+): string {
+  const aesKey = decodeAesKey(encodingAESKey);
+  const iv = aesKey.subarray(0, 16);
+  const decipher = createDecipheriv('aes-256-cbc', aesKey, iv);
+  const decrypted = Buffer.concat([
+    decipher.update(Buffer.from(encryptBase64, 'base64')),
+    decipher.final(),
+  ]);
+  if (decrypted.length < 20) {
+    throw new Error('解密结果过短');
+  }
+  const msgLen = decrypted.readUInt32BE(16);
+  const msgStart = 20;
+  const msgEnd = msgStart + msgLen;
+  if (msgEnd > decrypted.length) {
+    throw new Error('解密消息长度非法');
+  }
+  const msg = decrypted.subarray(msgStart, msgEnd).toString('utf8');
+  const appId = decrypted.subarray(msgEnd).toString('utf8');
+  if (expectedAppId && appId && appId !== expectedAppId) {
+    throw new Error(`appid 不匹配: got=${appId}`);
+  }
+  return msg;
+}
+
+/** 加密回包（一般回复 success 明文即可，此函数供需要加密回包时使用） */
+export function encryptWechatReply(
+  plain: string,
+  encodingAESKey: string,
+  appId: string,
+): string {
+  const aesKey = decodeAesKey(encodingAESKey);
+  const iv = aesKey.subarray(0, 16);
+  const random = randomBytes(16);
+  const msg = Buffer.from(plain, 'utf8');
+  const msgLen = Buffer.alloc(4);
+  msgLen.writeUInt32BE(msg.length, 0);
+  const full = Buffer.concat([random, msgLen, msg, Buffer.from(appId, 'utf8')]);
+  const cipher = createCipheriv('aes-256-cbc', aesKey, iv);
+  return Buffer.concat([cipher.update(full), cipher.final()]).toString('base64');
+}
+
+/** 简易 XML 标签提取（微信推送字段无嵌套结构） */
+export function parseSimpleXml(xml: string): Record<string, string> {
+  const out: Record<string, string> = {};
+  const re = /<([A-Za-z0-9_]+)>(?:<!\[CDATA\[([\s\S]*?)\]\]>|([^<]*))<\/\1>/g;
+  let m: RegExpExecArray | null;
+  while ((m = re.exec(xml))) {
+    out[m[1]] = (m[2] ?? m[3] ?? '').trim();
+  }
+  return out;
+}
+
+export function parseWechatPushBody(raw: string): Record<string, unknown> {
+  const trimmed = raw.trim();
+  if (!trimmed) return {};
+  if (trimmed.startsWith('{')) {
+    return JSON.parse(trimmed) as Record<string, unknown>;
+  }
+  return parseSimpleXml(trimmed);
+}
+
+export type WechatTradeManageEvent = {
+  event: string;
+  toUserName?: string;
+  fromUserName?: string;
+  createTime?: number;
+  transactionId?: string;
+  merchantId?: string;
+  subMerchantId?: string;
+  merchantTradeNo?: string;
+  payTime?: number;
+  shippedTime?: number;
+  estimatedSettlementTime?: number;
+  /** 1 手动确认；2 自动确认（结算推送才有） */
+  confirmReceiveMethod?: number;
+  confirmReceiveTime?: number;
+  settlementTime?: number;
+  msg?: string;
+  raw: Record<string, unknown>;
+};
+
+function num(v: unknown): number | undefined {
+  if (v == null || v === '') return undefined;
+  const n = typeof v === 'number' ? v : Number(v);
+  return Number.isFinite(n) ? n : undefined;
+}
+
+function str(v: unknown): string | undefined {
+  if (v == null) return undefined;
+  const s = String(v).trim();
+  return s || undefined;
+}
+
+export function normalizeTradeManageEvent(body: Record<string, unknown>): WechatTradeManageEvent {
+  return {
+    event: str(body.Event ?? body.event) || '',
+    toUserName: str(body.ToUserName),
+    fromUserName: str(body.FromUserName),
+    createTime: num(body.CreateTime),
+    transactionId: str(body.transaction_id),
+    merchantId: str(body.merchant_id),
+    subMerchantId: str(body.sub_merchant_id),
+    merchantTradeNo: str(body.merchant_trade_no),
+    payTime: num(body.pay_time),
+    shippedTime: num(body.shipped_time),
+    estimatedSettlementTime: num(body.estimated_settlement_time),
+    confirmReceiveMethod: num(body.confirm_receive_method),
+    confirmReceiveTime: num(body.confirm_receive_time),
+    settlementTime: num(body.settlement_time),
+    msg: str(body.msg),
+    raw: body,
+  };
+}

server/dukang-api/src/integrations/wechat/wechat-order-shipping.service.ts

@@ -0,0 +1,310 @@
+import { Inject, Injectable, Logger, BadRequestException } from '@nestjs/common';
+import { loadAppConfig } from '@dukang/shared-types';
+import { PrismaService } from '../../common/prisma/prisma.module';
+import { WECHAT_PROVIDER } from '../integrations.constants';
+import type { IWechatProvider } from './wechat.interface';
+import {
+  formatWechatUploadTime,
+  maskReceiverPhone,
+  resolveExpressCompanyId,
+} from './wechat-order-shipping.util';
+
+/** 微信要求支付成功后约 1 分钟才入库，过早调用会返回 10060001 */
+const MIN_PAID_AGE_MS = 65_000;
+/** 10060001 / 系统繁忙时的重试间隔 */
+const RETRY_DELAY_MS = 60_000;
+const MAX_ATTEMPTS = 5;
+const RETRYABLE_ERRCODES = new Set([10060001, -1, 10060012, 10060019]);
+/** 微信 order_state：3 确认收货；4 交易完成 */
+const WECHAT_CONFIRMED_STATES = new Set([3, 4]);
+
+function sleep(ms: number) {
+  return new Promise<void>((resolve) => setTimeout(resolve, ms));
+}
+
+/**
+ * 小程序发货信息管理：订单发货/自提后向微信录入发货信息，解冻交易资金。
+ * @see https://developers.weixin.qq.com/miniprogram/dev/platform-capabilities/business-capabilities/order-shipping/order-shipping.html
+ */
+@Injectable()
+export class WechatOrderShippingService {
+  private readonly logger = new Logger(WechatOrderShippingService.name);
+
+  constructor(
+    private readonly prisma: PrismaService,
+    @Inject(WECHAT_PROVIDER) private readonly wechat: IWechatProvider,
+  ) {}
+
+  /** 供 C 端拉起微信确认收货组件 */
+  buildConfirmPayload(order: {
+    orderNo: string;
+    payStatus: string;
+    payExternalNo: string | null;
+  }): {
+    merchantId?: string;
+    merchantTradeNo: string;
+    transactionId?: string;
+  } | null {
+    if (order.payStatus !== 'PAID') return null;
+    const mchId = this.wechat.getMchId()?.trim() || undefined;
+    const transactionId = order.payExternalNo?.trim() || undefined;
+    if (!transactionId && !mchId) return null;
+    return {
+      merchantId: mchId,
+      merchantTradeNo: order.orderNo,
+      transactionId,
+    };
+  }
+
+  /**
+   * 校验用户已通过微信确认收货组件完成确认（或订单已结算）。
+   * Mock 支付环境跳过。
+   */
+  async assertWechatUserConfirmed(orderId: bigint): Promise<void> {
+    const cfg = loadAppConfig();
+    if (cfg.mockPay) return;
+    if (!this.wechat.isPayEnabled() && this.wechat.isMock()) return;
+
+    const order = await this.prisma.order.findUnique({
+      where: { id: orderId },
+      select: { orderNo: true, payExternalNo: true },
+    });
+    if (!order) throw new BadRequestException('订单不存在');
+
+    const transactionId = order.payExternalNo?.trim();
+    const mchId = this.wechat.getMchId()?.trim();
+    if (!transactionId && !(mchId && order.orderNo)) {
+      throw new BadRequestException('缺少微信支付单号，无法校验微信确认收货');
+    }
+
+    const result = await this.wechat.getOrderShippingInfo({
+      transactionId: transactionId || undefined,
+      mchId: transactionId ? undefined : mchId,
+      outTradeNo: transactionId ? undefined : order.orderNo,
+    });
+    if (result.errcode && result.errcode !== 0) {
+      this.logger.warn(
+        `get_order for confirm failed order=${order.orderNo} ${result.errcode} ${result.errmsg}`,
+      );
+      throw new BadRequestException(
+        result.errmsg || '查询微信订单状态失败，请稍后重试',
+      );
+    }
+    if (result.orderState == null || !WECHAT_CONFIRMED_STATES.has(result.orderState)) {
+      throw new BadRequestException(
+        '请先在微信确认收货组件中完成确认（勿仅点服务通知外的按钮）',
+      );
+    }
+  }
+
+  /** 异步安全上报：按 paidAt 等待入库窗口，失败可重试，不阻断主履约流程 */
+  uploadForOrderSafe(orderId: bigint) {
+    void this.scheduleAndUpload(orderId).catch((err) => {
+      const msg = err instanceof Error ? err.message : String(err);
+      this.logger.error(`upload shipping info failed order=${orderId}: ${msg}`);
+    });
+  }
+
+  private async scheduleAndUpload(orderId: bigint) {
+    const paidAtRow = await this.prisma.order.findUnique({
+      where: { id: orderId },
+      select: { paidAt: true, orderNo: true },
+    });
+    if (!paidAtRow?.paidAt) {
+      await this.uploadForOrder(orderId);
+      return;
+    }
+
+    const ageMs = Date.now() - paidAtRow.paidAt.getTime();
+    const waitMs = Math.max(0, MIN_PAID_AGE_MS - ageMs);
+    if (waitMs > 0) {
+      this.logger.log(
+        `WeChat upload_shipping_info wait ${waitMs}ms for pay入库 order=${paidAtRow.orderNo}`,
+      );
+      await sleep(waitMs);
+    }
+
+    for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+      const result = await this.uploadForOrder(orderId);
+      if (!result || result.skipped || result.ok) return;
+
+      const retryable = result.errcode != null && RETRYABLE_ERRCODES.has(result.errcode);
+      if (!retryable || attempt >= MAX_ATTEMPTS) return;
+
+      this.logger.warn(
+        `WeChat upload_shipping_info retry ${attempt}/${MAX_ATTEMPTS} ` +
+          `order=${paidAtRow.orderNo} errcode=${result.errcode} in ${RETRY_DELAY_MS}ms`,
+      );
+      await sleep(RETRY_DELAY_MS);
+    }
+  }
+
+  async uploadForOrder(
+    orderId: bigint,
+  ): Promise<{ skipped?: string; ok?: boolean; errcode?: number } | void> {
+    const cfg = loadAppConfig();
+    if (cfg.mockPay) {
+      return { skipped: 'MOCK_PAY' };
+    }
+    if (!this.wechat.isPayEnabled() && this.wechat.isMock()) {
+      return { skipped: 'MOCK_WECHAT' };
+    }
+
+    const order = await this.prisma.order.findUnique({
+      where: { id: orderId },
+      include: {
+        delivery: true,
+        user: { select: { wxOpenId: true } },
+      },
+    });
+    if (!order) return { skipped: 'ORDER_NOT_FOUND' };
+    if (order.payStatus !== 'PAID') return { skipped: 'NOT_PAID' };
+
+    const openId = order.user?.wxOpenId?.trim();
+    if (!openId) return { skipped: 'NO_OPENID' };
+
+    const transactionId = order.payExternalNo?.trim();
+    const mchId = this.wechat.getMchId()?.trim();
+    if (!transactionId && !(mchId && order.orderNo)) {
+      return { skipped: 'NO_PAY_REF' };
+    }
+
+    // 已成功上报则跳过（幂等）
+    const existed = await this.prisma.logThirdParty.findFirst({
+      where: {
+        provider: 'WECHAT_PAY',
+        scene: 'UPLOAD_SHIPPING',
+        refType: 'ORDER',
+        refId: orderId,
+        status: 'SUCCESS',
+      },
+    });
+    if (existed) return { skipped: 'ALREADY_UPLOADED' };
+
+    const logisticsType = this.resolveLogisticsType(order.deliveryType, order.delivery);
+    const trackingNo = order.delivery?.trackingNo?.trim() || undefined;
+    let expressCompany = resolveExpressCompanyId(order.delivery?.logisticsCompany);
+
+    if (logisticsType === 1 && trackingNo && !expressCompany) {
+      try {
+        const list = await this.wechat.getDeliveryList();
+        expressCompany = resolveExpressCompanyId(order.delivery?.logisticsCompany, list);
+      } catch (err) {
+        this.logger.warn(
+          `get_delivery_list failed: ${err instanceof Error ? err.message : String(err)}`,
+        );
+      }
+    }
+
+    // 快递模式缺运力 ID 时降级为同城，避免接口硬失败
+    let finalLogisticsType = logisticsType;
+    if (finalLogisticsType === 1 && (!trackingNo || !expressCompany)) {
+      finalLogisticsType = 2;
+    }
+
+    const itemDesc = `${order.productName}${order.productSpec ? `（${order.productSpec}）` : ''}*${order.quantity}`
+      .replace(/\s+/g, ' ')
+      .slice(0, 120);
+
+    const shippingItem: {
+      trackingNo?: string;
+      expressCompany?: string;
+      itemDesc: string;
+      contact?: { receiverContact: string };
+    } = { itemDesc };
+
+    if (finalLogisticsType === 1) {
+      shippingItem.trackingNo = trackingNo;
+      shippingItem.expressCompany = expressCompany;
+      if (expressCompany === 'SF') {
+        shippingItem.contact = {
+          receiverContact: maskReceiverPhone(order.receiverPhone),
+        };
+      }
+    } else if (trackingNo) {
+      // 同城也可附带运单信息
+      shippingItem.trackingNo = trackingNo;
+      if (expressCompany) shippingItem.expressCompany = expressCompany;
+    }
+
+    const input = {
+      orderNumberType: (transactionId ? 2 : 1) as 1 | 2,
+      transactionId: transactionId || undefined,
+      mchId: transactionId ? undefined : mchId,
+      outTradeNo: transactionId ? undefined : order.orderNo,
+      logisticsType: finalLogisticsType,
+      deliveryMode: 1 as const,
+      shippingList: [shippingItem],
+      uploadTime: formatWechatUploadTime(),
+      payerOpenId: openId,
+    };
+
+    const requestUrl = 'https://api.weixin.qq.com/wxa/sec/order/upload_shipping_info';
+    try {
+      const result = await this.wechat.uploadShippingInfo(input);
+      const ok = result.errcode === 0;
+      await this.prisma.logThirdParty.create({
+        data: {
+          provider: 'WECHAT_PAY',
+          scene: 'UPLOAD_SHIPPING',
+          refType: 'ORDER',
+          refId: orderId,
+          requestUrl,
+          requestBody: {
+            orderNo: order.orderNo,
+            logisticsType: finalLogisticsType,
+            trackingNo: shippingItem.trackingNo,
+            expressCompany: shippingItem.expressCompany,
+            orderNumberType: input.orderNumberType,
+            transactionId: transactionId || undefined,
+            outTradeNo: input.outTradeNo,
+            payerOpenId: openId,
+          },
+          responseBody: { errcode: result.errcode, errmsg: result.errmsg },
+          externalNo: transactionId || order.orderNo,
+          status: ok ? 'SUCCESS' : 'FAILED',
+          errorMessage: ok ? undefined : `${result.errcode}:${result.errmsg}`.slice(0, 512),
+        },
+      });
+      if (!ok) {
+        this.logger.warn(
+          `WeChat upload_shipping_info order=${order.orderNo} ${result.errcode} ${result.errmsg}`,
+        );
+        return { ok: false, errcode: result.errcode };
+      }
+      this.logger.log(`WeChat upload_shipping_info ok order=${order.orderNo}`);
+      return { ok: true };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      await this.prisma.logThirdParty.create({
+        data: {
+          provider: 'WECHAT_PAY',
+          scene: 'UPLOAD_SHIPPING',
+          refType: 'ORDER',
+          refId: orderId,
+          requestUrl,
+          requestBody: {
+            orderNo: order.orderNo,
+            orderNumberType: input.orderNumberType,
+            transactionId: transactionId || undefined,
+          },
+          status: 'FAILED',
+          errorMessage: message.slice(0, 512),
+          externalNo: transactionId || order.orderNo,
+        },
+      });
+      throw err;
+    }
+  }
+
+  private resolveLogisticsType(
+    deliveryType: string,
+    delivery: { trackingNo: string | null; logisticsCompany: string | null; provider: string } | null,
+  ): 1 | 2 | 4 {
+    if (deliveryType === 'ON_SITE_PICKUP') return 4;
+    if (deliveryType === 'LOCAL') return 2;
+    // CROSS_CITY：有运单走快递，否则同城兜底
+    if (delivery?.trackingNo?.trim()) return 1;
+    return 2;
+  }
+}

server/dukang-api/src/integrations/wechat/wechat-order-shipping.util.ts

@@ -0,0 +1,74 @@
+/** 常见快递公司名称 → 微信运力 ID（get_delivery_list 的 delivery_id） */
+const STATIC_EXPRESS_MAP: Array<{ id: string; aliases: string[] }> = [
+  { id: 'SF', aliases: ['sf', '顺丰', '顺丰速运', '顺丰快递'] },
+  { id: 'STO', aliases: ['sto', '申通', '申通快递'] },
+  { id: 'YTO', aliases: ['yto', '圆通', '圆通速递', '圆通快递'] },
+  { id: 'ZTO', aliases: ['zto', '中通', '中通快递'] },
+  { id: 'YD', aliases: ['yd', '韵达', '韵达速递', '韵达快递'] },
+  { id: 'HTKY', aliases: ['htky', '百世', '百世快递', '汇通'] },
+  { id: 'EMS', aliases: ['ems', '邮政', '中国邮政', '邮政快递'] },
+  { id: 'JD', aliases: ['jd', '京东', '京东快递', '京东物流'] },
+  { id: 'JTSD', aliases: ['jtsd', 'jt', '极兔', '极兔速递', '极兔快递'] },
+  { id: 'UC', aliases: ['uc', '优速', '优速快递'] },
+  { id: 'DBL', aliases: ['dbl', '德邦', '德邦快递', '德邦物流'] },
+  { id: 'ANE', aliases: ['ane', '安能', '安能物流'] },
+];
+
+export function maskReceiverPhone(phone: string): string {
+  const digits = phone.replace(/\D/g, '');
+  if (digits.length >= 7) {
+    return `${digits.slice(0, 3)}****${digits.slice(-4)}`;
+  }
+  return phone.trim();
+}
+
+/** RFC3339 +08:00，微信发货录入 upload_time 要求 */
+export function formatWechatUploadTime(date = new Date()): string {
+  const fmt = new Intl.DateTimeFormat('en-CA', {
+    timeZone: 'Asia/Shanghai',
+    year: 'numeric',
+    month: '2-digit',
+    day: '2-digit',
+    hour: '2-digit',
+    minute: '2-digit',
+    second: '2-digit',
+    hour12: false,
+  });
+  const parts = Object.fromEntries(fmt.formatToParts(date).map((p) => [p.type, p.value]));
+  const ms = String(date.getMilliseconds()).padStart(3, '0');
+  return `${parts.year}-${parts.month}-${parts.day}T${parts.hour}:${parts.minute}:${parts.second}.${ms}+08:00`;
+}
+
+export function resolveExpressCompanyId(
+  logisticsCompany: string | null | undefined,
+  deliveryList?: Array<{ deliveryId: string; deliveryName: string }>,
+): string | undefined {
+  const raw = (logisticsCompany || '').trim();
+  if (!raw) return undefined;
+
+  const upper = raw.toUpperCase();
+  // 已是运力 ID
+  if (/^[A-Z0-9_()-]{2,32}$/.test(upper) && !/[\u4e00-\u9fff]/.test(raw)) {
+    return upper;
+  }
+
+  const lower = raw.toLowerCase();
+  for (const row of STATIC_EXPRESS_MAP) {
+    if (row.aliases.some((a) => lower.includes(a.toLowerCase()) || a === raw)) {
+      return row.id;
+    }
+  }
+
+  if (deliveryList?.length) {
+    const hit = deliveryList.find(
+      (d) =>
+        d.deliveryId.toUpperCase() === upper ||
+        d.deliveryName === raw ||
+        d.deliveryName.includes(raw) ||
+        raw.includes(d.deliveryName),
+    );
+    if (hit) return hit.deliveryId;
+  }
+
+  return undefined;
+}