订单状态与物流助手

// Express.js - POST /api/ai/chatimport express from 'express';const app = express();app.use(express.json()); app.post('/api/ai/chat', async (req, res) => {  const response = await fetch('https://api.modelriver.com/v1/ai/async', {    method: 'POST',    headers: {      'Authorization': `Bearer ${process.env.MR_API_KEY}`,      'Content-Type': 'application/json',    },    body: JSON.stringify({      workflow: 'order_triage_workflow',      messages: [{ role: 'user', content: req.body.message }],      inputs: { customer_id: req.body.customer_id },    }),  });  const data = await response.json();  // Return the one-time ws_token so the frontend can stream the reply.  res.json({ ws_token: data.ws_token, channel_id: data.channel_id });}); app.listen(3000);

import { useState } from 'react';import { useModelRiver } from '@modelriver/client/react'; export function TemplateChat() {  const [input, setInput] = useState('');  const { connect, response, error, status } = useModelRiver({    baseUrl: 'wss://api.modelriver.com/socket',    persist: true,  });   const handleSend = async () => {    // 1. Your backend starts the order_triage_workflow workflow and returns a one-time ws_token.    const res = await fetch('/api/ai/chat', {      method: 'POST',      headers: { 'Content-Type': 'application/json' },      body: JSON.stringify({ message: input }),    });    const { ws_token, channel_id } = await res.json();     // 2. Connect to ModelRiver's stream. The reply arrives in real time.    connect({ wsToken: ws_token, channelId: channel_id });    setInput('');  };   return (    <div>      <input value={input} onChange={(e) => setInput(e.target.value)}             disabled={status === 'loading'} placeholder="Type your request..." />      <button onClick={handleSend} disabled={!input || status === 'loading'}>Send</button>      {status === 'loading' && <p>Working on it...</p>}      {response && (        <div>          <p>{response.content}</p>          {response.data && <pre>{JSON.stringify(response.data, null, 2)}</pre>}        </div>      )}      {error && <p>{error}</p>}    </div>  );}

// Express.js - POST /webhooks/modelriverimport express from 'express';import crypto from 'node:crypto'; const app = express();app.use(express.json({ verify: (req, _res, buf) => { req.rawBody = buf; } })); app.post('/webhooks/modelriver', async (req, res) => {  // 1. Verify the HMAC signature. Reject missing, non-string, or  // length-mismatched signatures before comparing bytes.  const signature = req.headers['mr-signature'];  const secret = process.env.MR_WEBHOOK_SECRET;  const expected = crypto    .createHmac('sha256', secret)    .update(req.rawBody)    .digest('hex');  if (    typeof signature !== 'string' ||    signature.length !== expected.length ||    !crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected))  ) {    return res.status(401).send('Invalid signature');  }   const event = req.body;   // 2. The AI step finished. Enrich it with your own data (order, policy, ...).  const enriched = { ...event.ai_response, checked_at: new Date().toISOString() };  await saveEvent(event.channel_id, enriched); // your database   // 3. Send the enriched result back so the reply streams to the customer.  if (event.callback_url && event.callback_required) {    await fetch(event.callback_url, {      method: 'POST',      headers: {        'Authorization': `Bearer ${process.env.MR_API_KEY}`,        'Content-Type': 'application/json',      },      body: JSON.stringify({ data: enriched }),    });  }   res.status(200).send('ok');}); app.listen(3000);

// Supabase Edge Function - webhooks/modelriver// Deploy with: supabase functions deploy webhooks-modelriverimport { serve } from 'https://deno.land/[email protected]/http/server.ts';import { createClient } from 'https://esm.sh/@supabase/supabase-js@2'; const supabase = createClient(  Deno.env.get('SUPABASE_URL')!,  Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!); async function verifySignature(raw: string, signature: string | null): Promise<boolean> {  if (!signature) return false;  const key = await crypto.subtle.importKey(    'raw',    new TextEncoder().encode(Deno.env.get('MR_WEBHOOK_SECRET')!),    { name: 'HMAC', hash: 'SHA-256' },    false,    ['sign']  );  const digest = new Uint8Array(    await crypto.subtle.sign('HMAC', key, new TextEncoder().encode(raw))  );  const expected = [...digest]    .map((byte) => byte.toString(16).padStart(2, '0'))    .join('');  if (signature.length !== expected.length) return false;  const a = new TextEncoder().encode(signature);  const b = new TextEncoder().encode(expected);  let diff = 0;  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];  return diff === 0;} serve(async (req) => {  // 1. Verify the HMAC signature over the raw body before parsing the event.  const raw = await req.text();  if (!(await verifySignature(raw, req.headers.get('mr-signature')))) {    return new Response('Invalid signature', { status: 401 });  }  const event = JSON.parse(raw);   // 2. Store the AI step result in Postgres.  const { error } = await supabase.from('ai_content').insert({    channel_id: event.channel_id,    payload: event.ai_response,    status: 'ai_generated',  });  if (error) return new Response(error.message, { status: 500 });   // 3. Send the result back so the reply streams to the customer.  if (event.callback_url && event.callback_required) {    await fetch(event.callback_url, {      method: 'POST',      headers: {        Authorization: `Bearer ${Deno.env.get('MR_API_KEY')}`,        'Content-Type': 'application/json',      },      body: JSON.stringify({ data: event.ai_response }),    });  }   return new Response('ok');});