@alipay/alipay-aipay 1.0.0 → 1.0.2

package/skill/references/integration/modules/code-examples/php/1-/351/200/232/347/224/250/346/216/245/345/217/243//347/273/237/344/270/200/346/224/266/345/215/225/344/272/244/346/230/223/351/200/200/346/254/276/346/237/245/350/257/242/346/216/245/345/217/243/344/273/243/347/240/201/347/244/272/344/276/213.md

@@ -0,0 +1,65 @@
+# 统一收单交易退款查询接口 - PHP 示例
+
+## 请求示例
+
+```php
+<?php
+require_once __DIR__ . '/aop/AopClient.php';
+require_once __DIR__ . '/aop/request/AlipayTradeFastpayRefundQueryRequest.php';
+
+// 初始化 SDK（PHP 使用 PKCS#1 格式私钥，Java 使用 PKCS#8 格式，请勿混用）
+$aop = new AopClient();
+$aop->gatewayUrl = 'https://openapi.alipay.com/gateway.do';
+// 沙箱环境: $aop->gatewayUrl = 'https://openapi-sandbox.dl.alipaydev.com/gateway.do';
+$aop->appId = '<-- 请填写您的AppId，例如：20190xxxxxx -->';
+$aop->rsaPrivateKey = '<-- 请填写您的应用私钥（PKCS#1格式），例如：MIIE...（脱敏示例） -->';
+$aop->alipayrsaPublicKey = '<-- 请填写您的支付宝公钥，例如：MIIB...（脱敏示例） -->';
+$aop->format = 'json';
+$aop->postCharset = 'UTF-8';
+$aop->signType = 'RSA2';
+
+// 构造请求参数
+$request = new AlipayTradeFastpayRefundQueryRequest();
+$bizContent = [
+    'out_trade_no' => 'MERCHANT_ORDER_NO_PLACEHOLDER',     // 商户订单号
+    'out_request_no' => 'OUT_REQUEST_NO_PLACEHOLDER',          // 退款请求号，必填
+];
+$request->setBizContent(json_encode($bizContent, JSON_UNESCAPED_UNICODE));
+
+// 调用接口
+$response = $aop->execute($request);
+$responseApiName = str_replace('.', '_', $request->getApiMethodName()) . '_response';
+$result = $response->$responseApiName;
+
+if (!empty($result->code) && $result->code == '10000') {
+    // refund_status: REFUND_SUCCESS 表示退款成功
+    echo "退款状态: " . $result->refund_status . ", 退款金额: " . $result->refund_amount;
+} else {
+    echo "调用失败: " . $result->sub_code . " - " . $result->sub_msg;
+}
+```
+
+## 响应示例
+### 正常示例
+```json
+{
+    "code": "10000",
+    "msg": "Success",
+    "trade_no": "ALIPAY_TRADE_NO_PLACEHOLDER",
+    "out_trade_no": "MERCHANT_ORDER_NO_PLACEHOLDER",
+    "out_request_no": "OUT_REQUEST_NO_PLACEHOLDER",
+    "total_amount": "0.01",
+    "refund_amount": "0.01",
+    "refund_status": "REFUND_SUCCESS",
+    "gmt_refund_pay": "2014-11-27 15:45:57"
+}
+```
+### 异常示例
+```json
+{
+    "code": "20000",
+    "msg": "Service Currently Unavailable",
+    "sub_code": "isp.unknow-error",
+    "sub_msg": "系统繁忙"
+}
+```

package/skill/references/integration/modules/code-examples/php/2-/347/275/221/347/253/231/346/224/257/344/273/230//347/273/237/344/270/200/346/224/266/345/215/225/344/270/213/345/215/225/345/271/266/346/224/257/344/273/230/351/241/265/351/235/242/346/216/245/345/217/243/344/273/243/347/240/201/347/244/272/344/276/213.md

@@ -0,0 +1,56 @@
+# 统一收单下单并支付页面接口 - PHP 示例
+
+## 请求示例
+
+```php
+<?php
+require_once __DIR__ . '/aop/AopClient.php';
+require_once __DIR__ . '/aop/request/AlipayTradePagePayRequest.php';
+
+// 初始化 SDK（PHP 使用 PKCS#1 格式私钥，Java 使用 PKCS#8 格式，请勿混用）
+$aop = new AopClient();
+$aop->gatewayUrl = 'https://openapi.alipay.com/gateway.do';
+// 沙箱环境: $aop->gatewayUrl = 'https://openapi-sandbox.dl.alipaydev.com/gateway.do';
+$aop->appId = '<-- 请填写您的AppId，例如：20190xxxxxx -->';
+$aop->rsaPrivateKey = '<-- 请填写您的应用私钥（PKCS#1格式），例如：MIIE...（脱敏示例） -->';
+$aop->alipayrsaPublicKey = '<-- 请填写您的支付宝公钥，例如：MIIB...（脱敏示例） -->';
+$aop->format = 'json';
+$aop->postCharset = 'UTF-8';
+$aop->signType = 'RSA2';
+
+// 构造请求参数
+$request = new AlipayTradePagePayRequest();
+$request->setNotifyUrl('https://your-domain.com/notify');  // 异步通知地址
+$request->setReturnUrl('https://your-domain.com/return');  // 同步跳转地址
+
+$bizContent = [
+    'out_trade_no' => date('YmdHis') . mt_rand(1000, 9999),  // 商户订单号
+    'total_amount' => '0.01',                                // 订单总金额
+    'subject' => '测试商品',                                   // 订单标题
+    'product_code' => 'FAST_INSTANT_TRADE_PAY',              // 网站支付固定值
+];
+$request->setBizContent(json_encode($bizContent, JSON_UNESCAPED_UNICODE));
+
+// ⚠️ 网站支付必须使用 pageExecute()，不能使用 execute()
+// ⚠️ 必须使用 POST 模式：pageExecute($request, 'POST')
+$response = $aop->pageExecute($request, 'POST');
+
+// pageExecute 返回的是 HTML 表单字符串，前端需要渲染并自动提交
+echo $response;
+```
+
+> **⚠️ 关键注意事项：**
+> 1. 必须使用 `pageExecute()` 方法，不能使用 `execute()` 方法
+> 2. 必须使用 POST 模式：`$aop->pageExecute($request, 'POST')`
+> 3. 返回的 HTML 需要前端渲染并自动提交，禁止直接在服务端 redirect
+> 4. PHP 使用 PKCS#1 格式私钥，Java 使用 PKCS#8 格式，请勿混用
+
+## 响应示例
+### 正常示例
+```html
+<form name="punchout_form" method="post" action="https://openapi.alipay.com/gateway.do?charset=UTF-8&method=alipay.trade.page.pay&format=json&sign=SIGN_PLACEHOLDER&version=1.0&app_id=20190xxxxxx&sign_type=RSA2&timestamp=2014-07-24+03%3A07%3A50">
+<input type="hidden" name="biz_content" value="{&quot;out_trade_no&quot;:&quot;MERCHANT_ORDER_NO_PLACEHOLDER&quot;,&quot;total_amount&quot;:&quot;0.01&quot;,&quot;subject&quot;:&quot;测试商品&quot;,&quot;product_code&quot;:&quot;FAST_INSTANT_TRADE_PAY&quot;}">
+<input type="submit" value="立即支付" style="display:none" >
+</form>
+<script>document.forms[0].submit();</script>
+```

package/skill/references/integration/modules/code-examples/php/3-APP/346/224/257/344/273/230/APP/346/224/257/344/273/230/346/216/245/345/217/243/344/273/243/347/240/201/347/244/272/344/276/213.md

@@ -0,0 +1,107 @@
+# APP支付接口 - PHP 示例
+
+## 请求示例
+
+```php
+<?php
+require_once '../aop/AopClient.php';
+require_once '../aop/AopCertClient.php';
+require_once '../aop/AopCertification.php';
+require_once '../aop/AlipayConfig.php';
+require_once '../aop/request/AlipayTradeAppPayRequest.php';
+
+// 初始化SDK
+$alipayClient = new AopClient(getAlipayConfig());
+// 构造请求参数以调用接口
+$request = new AlipayTradeAppPayRequest();
+$model = array();
+
+// 设置商户订单号
+$model['out_trade_no'] = "MERCHANT_ORDER_NO_PLACEHOLDER";
+
+// 设置订单总金额
+$model['total_amount'] = "9.00";
+
+// 设置订单标题
+$model['subject'] = "大乐透";
+
+// 设置产品码
+$model['product_code'] = "QUICK_MSECURITY_PAY";
+
+// 设置订单包含的商品列表信息
+$goodsDetail = array();
+$goodsDetail0 = array();
+$goodsDetail0['goods_name'] = "ipad";
+$goodsDetail0['alipay_goods_id'] = "20010001";
+$goodsDetail0['quantity'] = 1;
+$goodsDetail0['price'] = "2000";
+$goodsDetail0['goods_id'] = "apple-01";
+$goodsDetail0['goods_category'] = "34543238";
+$goodsDetail0['categories_tree'] = "124868003|126232002|126252004";
+$goodsDetail0['show_url'] = "http://www.alipay.com/xxx.jpg";
+$goodsDetail[] = $goodsDetail0;
+$model['goods_detail'] = $goodsDetail;
+
+// 设置订单绝对超时时间
+$model['time_expire'] = "2016-12-31 10:05:00";
+
+// 设置业务扩展参数
+$extendParams = array();
+$extendParams['sys_service_provider_id'] = "<SYS_SERVICE_PROVIDER_ID>";
+$extendParams['hb_fq_seller_percent'] = "100";
+$extendParams['hb_fq_num'] = "3";
+$extendParams['industry_reflux_info'] = "{\"scene_code\":\"metro_tradeorder\",\"channel\":\"xxxx\",\"scene_data\":{\"asset_name\":\"ALIPAY\"}}";
+$extendParams['royalty_freeze'] = "true";
+$extendParams['card_type'] = "S0JP0000";
+$model['extend_params'] = $extendParams;
+
+// 设置公用回传参数
+$model['passback_params'] = "merchantBizType%3d3C%26merchantBizNo%3dMERCHANT_BIZ_NO_PLACEHOLDER";
+
+// 设置商户的原始订单号
+$model['merchant_order_no'] = "MERCHANT_ORDER_NO_PLACEHOLDER";
+
+// 设置外部指定买家
+$extUserInfo = array();
+$extUserInfo['cert_type'] = "IDENTITY_CARD";
+$extUserInfo['cert_no'] = "<CERT_NO>";
+$extUserInfo['mobile'] = "<MOBILE>";
+$extUserInfo['name'] = "李明";
+$extUserInfo['min_age'] = "18";
+$extUserInfo['need_check_info'] = "F";
+$extUserInfo['identity_hash'] = "<IDENTITY_HASH>";
+$model['ext_user_info'] = $extUserInfo;
+
+// 设置通知参数选项
+$queryOptions = array();
+$queryOptions[] = "hyb_amount";
+$queryOptions[] = "enterprise_pay_info";
+$model['query_options'] = $queryOptions;
+
+$request->setBizContent(json_encode($model,JSON_UNESCAPED_UNICODE));
+// 如果是第三方代调用模式，请设置app_auth_token（应用授权令牌）
+$orderStr = $alipayClient->sdkExecute($request, "<-- 请填写应用授权令牌 -->");
+echo $orderStr;
+
+function getAlipayConfig()
+{
+    $privateKey  = '<-- 请填写您的应用私钥，例如：MIIE...（脱敏示例） -->';
+    $alipayPublicKey = '<-- 请填写您的支付宝公钥，例如：MIIB...（脱敏示例） -->';
+    $alipayConfig = new AlipayConfig();
+    $alipayConfig->setServerUrl('https://openapi.alipay.com/gateway.do');
+    $alipayConfig->setAppId('<-- 请填写您的AppId，例如：20190xxxxxx -->');
+    $alipayConfig->setPrivateKey($privateKey);
+    $alipayConfig->setFormat('json');
+    $alipayConfig->setAlipayPublicKey($alipayPublicKey);
+    $alipayConfig->setCharset('UTF-8');
+    $alipayConfig->setSignType('RSA2');
+    return $alipayConfig;
+}
+```
+
+## 响应示例
+### 正常示例
+```
+app_id=20190xxxxxx&biz_content=%7B%22time_expire%22%3A%222016-12-31+10%3A05%3A00%22%2C%22extend_params%22%3A%22%22%2C%22query_options%22%3A%22%5B%5C%22hyb_amount%5C%22%2C%5C%22enterprise_pay_info%5C%22%5D%22%2C%22subject%22%3A%22%E5%A4%A7%E4%B9%90%E9%80%8F%22%2C%22product_code%22%3A%22QUICK_MSECURITY_PAY%22%2C%22body%22%3A%22Iphone6+16G%22%2C%22passback_params%22%3A%22merchantBizType%253d3C%2526merchantBizNo%253dMERCHANT_BIZ_NO_PLACEHOLDER%22%2C%22specified_channel%22%3A%22pcredit%22%2C%22goods_detail%22%3A%22%22%2C%22merchant_order_no%22%3A%22MERCHANT_ORDER_NO_PLACEHOLDER%22%2C%22enable_pay_channels%22%3A%22pcredit%2CmoneyFund%2CdebitCardExpress%22%2C%22out_trade_no%22%3A%22MERCHANT_ORDER_NO_PLACEHOLDER%22%2C%22ext_user_info%22%3A%22%22%2C%22total_amount%22%3A%229.00%22%2C%22timeout_express%22%3A%2290m%22%2C%22disable_pay_channels%22%3A%22pcredit%2CmoneyFund%2CdebitCardExpress%22%2C%22agreement_sign_params%22%3A%22%22%7D&charset=UTF-8&format=json&method=alipay.trade.app.pay&sign=SIGN_PLACEHOLDER&sign_type=RSA2&timestamp=2014-07-24+03%3A07%3A50&version=1.0
+```
+

package/skill/references/integration/modules/code-examples/php/4-/346/214/211/351/207/217/344/273/230/350/264/271/A2MPaymentDemo.php

@@ -0,0 +1,444 @@
+<?php
+/**
+ * A2M 智能收产品接入示例 - PHP 版本
+ * 
+ * 本文件演示完整的智能收产品接入流程：
+ * 1. 返回 402 Payment-Needed Header
+ * 2. 验证 Payment-Proof 支付凭证
+ * 3. 发送履约回执确认
+ * 4. 返回资源内容
+ * 
+ * 依赖安装：
+ * composer require alipay/alipay-sdk
+ */
+
+// ==================== 配置信息（实际使用时请从配置中心读取）====================
+define('ALIPAY_CONFIG', [
+    'appId' => '<APP_ID>',
+    'privateKey' => '<APP_PRIVATE_KEY>', // 请填写您的应用私钥（PKCS#1 格式）
+    'alipayPublicKey' => '<ALIPAY_PUBLIC_KEY>', // 请填写您的支付宝公钥
+    'gateway' => 'https://openapi.alipay.com/gateway.do',
+    'sellerId' => '<SELLER_ID_2088>', // 商户 ID（2088 格式）
+    'serviceId' => '<SERVICE_ID>', // 商户服务 ID
+    'merchantPrivateKey' => '<APP_PRIVATE_KEY>' // 请填写您的应用私钥（用于商家签名）
+]);
+
+define('RESOURCE_CONFIG', [
+    'path' => '/demo/a2m/resource',
+    'goodsName' => 'AI 生成内容服务'
+]);
+
+/**
+ * 初始化 SDK
+ */
+function initAlipayClient() {
+    require_once 'aop/AopClient.php';
+    require_once 'aop/AlipayConfig.php';
+    
+    $config = new AlipayConfig();
+    $config->setServerUrl(ALIPAY_CONFIG['gateway']);
+    $config->setAppId(ALIPAY_CONFIG['appId']);
+    $config->setPrivateKey(ALIPAY_CONFIG['privateKey']);
+    $config->setFormat('json');
+    $config->setAlipayPublicKey(ALIPAY_CONFIG['alipayPublicKey']);
+    $config->setCharset('UTF-8');
+    $config->setSignType('RSA2');
+    
+    return new AopClient($config);
+}
+
+/**
+ * 格式化支付宝时间戳：yyyy-MM-dd HH:mm:ss
+ */
+function formatAlipayTimestamp($timestamp = null) {
+    if ($timestamp === null) {
+        $timestamp = time();
+    }
+    return date('Y-m-d H:i:s', $timestamp);
+}
+
+/**
+ * 生成商家签名（seller_signature）
+ */
+function generateSellerSignature($params, $privateKey) {
+    // 1. 按 key 字典序排序
+    ksort($params);
+    
+    // 2. 拼接签名内容
+    $signContent = [];
+    foreach ($params as $key => $value) {
+        if ($value !== null && $value !== '') {
+            $signContent[] = "{$key}={$value}";
+        }
+    }
+    $signString = implode('&', $signContent);
+    
+    // 3. RSA2 签名
+    $privateKeyResource = openssl_pkey_get_private($privateKey);
+    openssl_sign($signString, $signature, $privateKeyResource, OPENSSL_ALGO_SHA256);
+    
+    return base64_encode($signature);
+}
+
+/**
+ * Base64URL 编码
+ */
+function base64UrlEncode($data) {
+    return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
+}
+
+/**
+ * Base64URL 解码
+ */
+function base64UrlDecode($data) {
+    $padding = strlen($data) % 4;
+    if ($padding) {
+        $data .= str_repeat('=', 4 - $padding);
+    }
+    return base64_decode(strtr($data, '-_', '+/'));
+}
+
+/**
+ * 发送 JSON 响应
+ */
+function jsonResponse($data, $statusCode = 200, $headers = []) {
+    http_response_code($statusCode);
+    header('Content-Type: application/json; charset=utf-8');
+    
+    foreach ($headers as $key => $value) {
+        header("{$key}: {$value}");
+    }
+    
+    echo json_encode($data, JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+// ==================== 智能收产品接入示例接口 ====================
+
+/**
+ * 智能收产品统一接口
+ * 
+ * 完整流程演示：
+ * 1. 不带 Payment-Proof Header：返回 HTTP 402 + Payment-Needed Header
+ * 2. 带 Payment-Proof Header：验证支付 → 自动履约 → 返回资源
+ */
+function handleResourceRequest() {
+    // 获取 Payment-Proof Header
+    $paymentProof = isset($_SERVER['HTTP_PAYMENT_PROOF']) ? $_SERVER['HTTP_PAYMENT_PROOF'] : null;
+    
+    // 场景 1：用户未支付，返回 402 + Payment-Needed Header
+    if (empty($paymentProof) || trim($paymentProof) === '') {
+        createPaymentRequiredResponse();
+        return;
+    }
+    
+    // 场景 2：用户已支付，验证 Payment-Proof 并返回资源
+    verifyPaymentAndDeliverResource($paymentProof);
+}
+
+/**
+ * 创建 402 支付请求响应
+ */
+function createPaymentRequiredResponse() {
+    try {
+        // 1. 构造订单信息
+        $outTradeNo = 'ORDER_' . time() . mt_rand(1000, 9999);
+        $amount = '0.01'; // 单位：元
+        $currency = 'CNY';
+        $resourceId = RESOURCE_CONFIG['path'];
+        $goodsName = RESOURCE_CONFIG['goodsName'];
+        
+        // 2. 计算支付截止时间（30 分钟后）
+        $payBefore = date('c', time() + 30 * 60); // ISO 8601 格式
+        
+        // 3. 生成商家签名
+        $sellerSignature = generateSellerSignature([
+            'amount' => $amount,
+            'currency' => $currency,
+            'goods_name' => $goodsName,
+            'out_trade_no' => $outTradeNo,
+            'pay_before' => $payBefore,
+            'resource_id' => $resourceId,
+            'seller_id' => ALIPAY_CONFIG['sellerId'],
+            'service_id' => ALIPAY_CONFIG['serviceId']
+        ], ALIPAY_CONFIG['merchantPrivateKey']);
+        
+        // 4. 构造 Payment-Needed Header 内容
+        $paymentNeeded = [
+            'protocol' => [
+                'out_trade_no' => $outTradeNo,
+                'amount' => $amount,
+                'currency' => $currency,
+                'resource_id' => $resourceId,
+                'pay_before' => $payBefore,
+                'seller_signature' => $sellerSignature,
+                'seller_sign_type' => 'RSA2',
+                'seller_unique_id' => ALIPAY_CONFIG['sellerId']
+            ],
+            'method' => [
+                'seller_name' => '测试商户',
+                'seller_id' => ALIPAY_CONFIG['sellerId'],
+                'seller_app_id' => ALIPAY_CONFIG['appId'],
+                'goods_name' => $goodsName,
+                'seller_unique_id_key' => 'seller_id',
+                'service_id' => ALIPAY_CONFIG['serviceId']
+            ]
+        ];
+        
+        // 5. Base64URL 编码
+        $paymentNeededEncoded = base64UrlEncode(json_encode($paymentNeeded, JSON_UNESCAPED_UNICODE));
+        
+        // 6. 构造 402 响应
+        $response = [
+            'code' => 'Payment-Needed',
+            'message' => '需要支付',
+            'out_trade_no' => $outTradeNo,
+            'amount' => $amount,
+            'currency' => $currency,
+            'goods_name' => $goodsName
+        ];
+        
+        error_log("创建支付订单成功：outTradeNo={$outTradeNo}, amount={$amount}");
+        
+        jsonResponse($response, 402, ['Payment-Needed' => $paymentNeededEncoded]);
+        
+    } catch (Exception $e) {
+        error_log('创建订单失败：' . $e->getMessage());
+        jsonResponse([
+            'code' => 'CREATE_ORDER_ERROR',
+            'message' => '创建订单失败：' . $e->getMessage()
+        ], 500);
+    }
+}
+
+/**
+ * 验证支付凭证并交付资源
+ */
+function verifyPaymentAndDeliverResource($paymentProof) {
+    try {
+        // 1. 从 Payment-Proof 中解析订单信息
+        $decodedProof = base64UrlDecode($paymentProof);
+        $proofJson = json_decode($decodedProof, true);
+        
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new Exception('Payment-Proof 解析失败：' . json_last_error_msg());
+        }
+        
+        // 从 protocol 层获取 payment_proof 和 trade_no
+        $paymentProofValue = null;
+        $tradeNo = null;
+        $clientSession = null;
+        
+        if (isset($proofJson['protocol'])) {
+            $paymentProofValue = $proofJson['protocol']['payment_proof'] ?? null;
+            $tradeNo = $proofJson['protocol']['trade_no'] ?? null;
+        }
+        
+        // 从 method 层获取 client_session
+        if (isset($proofJson['method'])) {
+            $clientSession = $proofJson['method']['client_session'] ?? null;
+        }
+        
+        // 校验必要字段
+        if (empty($paymentProofValue)) {
+            jsonResponse([
+                'code' => 'INVALID_PAYMENT_PROOF_FORMAT',
+                'message' => 'Payment-Proof 格式错误：缺少 payment_proof'
+            ], 400);
+        }
+        
+        if (empty($tradeNo)) {
+            jsonResponse([
+                'code' => 'INVALID_PAYMENT_PROOF_FORMAT',
+                'message' => 'Payment-Proof 格式错误：缺少 trade_no'
+            ], 400);
+        }
+        
+        // 2. 调用支付宝 API 验证支付凭证
+        $alipayClient = initAlipayClient();
+        $request = new \AlipayAipayAgentPaymentVerifyRequest();
+        
+        $model = [
+            'payment_proof' => $paymentProofValue,
+            'trade_no' => $tradeNo,
+            'client_session' => $clientSession
+        ];
+        
+        $request->setBizContent(json_encode($model, JSON_UNESCAPED_UNICODE));
+        $responseResult = $alipayClient->execute($request);
+        $responseApiName = str_replace('.', '_', $request->getApiMethodName()) . '_response';
+        $verifyResponse = $responseResult->$responseApiName;
+        
+        // 3. 验证失败，返回错误
+        if (empty($verifyResponse->code) || $verifyResponse->code !== '10000') {
+            error_log('支付凭证验证失败：' . ($verifyResponse->sub_msg ?? 'Unknown error'));
+            jsonResponse([
+                'code' => $verifyResponse->sub_code ?? 'VERIFY_FAILED',
+                'message' => $verifyResponse->sub_msg ?? '支付凭证验证失败'
+            ], 400);
+        }
+        
+        // 4. 验证成功，获取订单信息
+        $verifyTradeNo = $verifyResponse->trade_no ?? null;
+        $verifyOutTradeNo = $verifyResponse->out_trade_no ?? null;
+        $resourceId = $verifyResponse->resource_id ?? null;
+        $active = $verifyResponse->active ?? null;
+        
+        error_log("支付凭证验证成功：tradeNo={$verifyTradeNo}, outTradeNo={$verifyOutTradeNo}");
+        
+        // 5. 校验凭证有效性（active=true 表示凭证有效）
+        if ($active !== true) {
+            error_log("支付凭证无效或已过期：outTradeNo={$verifyOutTradeNo}");
+            jsonResponse([
+                'code' => 'INVALID_PAYMENT_PROOF',
+                'message' => '支付凭证无效或已过期'
+            ], 400);
+        }
+        
+        // 6. 【TODO】查询订单是否存在（以数据库为准）
+        // $order = $orderRepository->findByOutTradeNo($verifyOutTradeNo);
+        // if (!$order) {
+        //     jsonResponse([
+        //         'code' => 'ORDER_NOT_FOUND',
+        //         'message' => '订单不存在'
+        //     ], 404);
+        // }
+        
+        // 7. 【TODO】资源防串校验
+        // if ($resourceId !== $order->getResourceId()) {
+        //     jsonResponse([
+        //         'code' => 'RESOURCE_ID_MISMATCH',
+        //         'message' => '资源 ID 不匹配，可能存在资源串改风险'
+        //     ], 403);
+        // }
+        
+        // 8. 【TODO】履约防重放校验（数据库幂等控制）
+        // if ($order->getFulfillStatus() === 'FULFILLED') {
+        //     jsonResponse([
+        //         'code' => 'ALREADY_FULFILLED',
+        //         'message' => '订单已履约，不重复提供',
+        //         'already_fulfilled' => true
+        //     ], 200);
+        // }
+        
+        // 9. 执行业务逻辑，生成资源内容
+        $serviceResult = generateServiceResource($resourceId);
+        
+        // 10. 【TODO】履约记录落库（用于审计/售后/对账）
+        // $fulfillmentRecordRepository->save([...]);
+        
+        // 11. 【TODO】保存待确认履约状态
+        // 实际生产中建议先保存 $serviceResult 和 PENDING_CONFIRM 状态。
+        // fulfillment.confirm 成功后再标记 FULFILLED；如果确认失败，
+        // 允许同一笔 Payment-Proof 重试确认，避免误返回成功。
+        // $orderRepository->update($verifyOutTradeNo, [
+        //     'orderStatus' => 'PAID',
+        //     'fulfillStatus' => 'PENDING_CONFIRM',
+        //     'tradeNo' => $verifyTradeNo,
+        //     'serviceResult' => $serviceResult
+        // ]);
+
+        error_log("资源已生成，准备发送履约确认：outTradeNo={$verifyOutTradeNo}, tradeNo={$verifyTradeNo}");
+
+        // 12. 发送履约确认到支付宝，确认成功后才返回成功交付
+        if (!sendFulfillmentConfirm($verifyTradeNo)) {
+            jsonResponse([
+                'code' => 'FULFILLMENT_CONFIRM_FAILED',
+                'message' => '资源已生成但履约确认失败，请稍后使用同一 Payment-Proof 重试'
+            ], 502);
+        }
+
+        // 12.1 【TODO】履约确认成功后，再标记订单已履约
+        // $orderRepository->update($verifyOutTradeNo, [
+        //     'fulfillStatus' => 'FULFILLED',
+        //     'fulfilledAt' => date('c')
+        // ]);
+
+        error_log("履约确认成功：outTradeNo={$verifyOutTradeNo}, tradeNo={$verifyTradeNo}");
+        
+        // 13. 构造 Payment-Validation Header
+        $paymentValidation = [
+            'trade_no' => $verifyTradeNo,
+            'out_trade_no' => $verifyOutTradeNo,
+            'validated' => true,
+            'resource_id' => $resourceId
+        ];
+        
+        $paymentValidationEncoded = base64UrlEncode(json_encode($paymentValidation, JSON_UNESCAPED_UNICODE));
+        
+        // 14. 返回资源内容
+        jsonResponse([
+            'resource_id' => $resourceId,
+            'content' => $serviceResult,
+            'trade_no' => $verifyTradeNo,
+            'out_trade_no' => $verifyOutTradeNo,
+            'already_fulfilled' => false,
+            'fulfillment_confirmed' => true
+        ], 200, ['Payment-Validation' => $paymentValidationEncoded]);
+        
+    } catch (Exception $e) {
+        error_log('支付凭证验证异常：' . $e->getMessage());
+        jsonResponse([
+            'code' => 'VERIFY_FAILED',
+            'message' => '支付凭证验证失败：' . $e->getMessage()
+        ], 500);
+    }
+}
+
+/**
+ * 生成服务资源内容
+ */
+function generateServiceResource($resourceId) {
+    return json_encode([
+        'status' => 'success',
+        'service_type' => 'AI_CONTENT_GENERATION',
+        'resource_id' => $resourceId,
+        'content' => '这是 AI 生成的内容示例，可根据实际业务替换为任意数字服务内容',
+        'generated_at' => date('c')
+    ], JSON_UNESCAPED_UNICODE);
+}
+
+/**
+ * 发送履约确认
+ */
+function sendFulfillmentConfirm($tradeNo) {
+    try {
+        error_log("开始发送履约确认：tradeNo={$tradeNo}");
+        
+        $alipayClient = initAlipayClient();
+        $request = new \AlipayAipayAgentFulfillmentConfirmRequest();
+        
+        $request->setBizContent(json_encode([
+            'trade_no' => $tradeNo
+        ], JSON_UNESCAPED_UNICODE));
+        
+        $responseResult = $alipayClient->execute($request);
+        $responseApiName = str_replace('.', '_', $request->getApiMethodName()) . '_response';
+        $response = $responseResult->$responseApiName;
+        
+        if (!empty($response->code) && $response->code === '10000') {
+            error_log("履约确认成功：tradeNo={$tradeNo}");
+            return true;
+        } else {
+            error_log("履约确认失败：tradeNo={$tradeNo}, errorCode=" . 
+                ($response->sub_code ?? 'Unknown') . ", errorMsg=" . 
+                ($response->sub_msg ?? 'Unknown'));
+            return false;
+        }
+        
+    } catch (Exception $e) {
+        error_log("履约确认异常：tradeNo={$tradeNo}, error=" . $e->getMessage());
+        return false;
+    }
+}
+
+// ==================== 路由处理 ====================
+
+// 简单路由
+$requestUri = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
+if ($requestUri === RESOURCE_CONFIG['path'] && $_SERVER['REQUEST_METHOD'] === 'GET') {
+    handleResourceRequest();
+} else {
+    http_response_code(404);
+    echo json_encode(['code' => 'NOT_FOUND', 'message' => '接口不存在'], JSON_UNESCAPED_UNICODE);
+}