@alipay/alipay-aipay 1.7.0 → 1.7.2

package/skill-pre/references/normal/json/release-channel.json

@@ -0,0 +1 @@
+{"channel":"pre"}

package/skill-pre/references/normal/rejection-guide.md

@@ -0,0 +1,41 @@
+# 拒绝引导话术
+
+> 本文件定义当用户咨询本 Skill 不支持的支付产品时的标准引导话术。
+> 本文件位于 `references/normal/`，文中的 `scripts/...` 路径相对本目录。
+
+---
+
+## 标准拒绝引导
+
+当用户提及以下不支持的产品时，使用 `json/customer-messages.json` 的 `product.unsupported`，传入用户实际产品名。必须执行：
+
+```bash
+node "<SKILL_DIR>/references/normal/scripts/runtime.mjs" integration-message product-unsupported --product-name "$PRODUCT_NAME" --agent-platform "<AGENT_PLATFORM>" --session-id "<SESSION_ID>"
+```
+
+支持范围、开放平台文档、传统支付集成 Skill 和商家平台链接只在消息目录维护；本文件不复制标准正文。
+
+---
+
+## 适用场景
+
+| 用户提及的产品 | 引导方式 |
+|---------------|----------|
+| 预授权支付 | 使用标准引导 |
+| 商家扣款 | 使用标准引导 |
+| 订单码支付 | 使用标准引导 |
+| 当面付 | 使用标准引导 |
+| 付款码 | 使用标准引导 |
+| JSAPI支付 | 使用标准引导 |
+
+> “网站支付”“手机网站支付”“H5支付”只是用户对网页场景的旧叫法，在本 Skill 中统一归为 **AI 网页应用收款**，不作为独立产品处理，也不使用拒绝话术。
+
+---
+
+## 调用位置
+
+本话术在以下位置被引用：
+- `SKILL.md` → 支持范围
+- `../integration/modules/product-decision.md` → 不支持的产品
+
+**重要**：如需修改对客文字或链接，只修改 `json/customer-messages.json` 与对应 `json/policy-rules.json` 官方 URL；本文件只维护适用语义。

package/skill-pre/references/normal/scripts/agent_platform.mjs

@@ -0,0 +1,43 @@
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const MAX_PLATFORM_LENGTH = 40;
+const ASCII_PLATFORM_RE = /^[a-z0-9.]{1,40}$/u;
+
+export function normalizeAgentPlatform(value) {
+  const normalizedInput = String(value || '').normalize('NFKC');
+  if (/\p{C}/u.test(normalizedInput)) return 'unknown';
+  const raw = normalizedInput.trim();
+  if (!raw || [...raw].length > MAX_PLATFORM_LENGTH || /[\\/:@?#%]/u.test(raw)) return 'unknown';
+
+  const normalized = raw.toLowerCase().replace(/[_\s-]/gu, '');
+  if (normalized === 'claude') return 'claudecode';
+  if (ASCII_PLATFORM_RE.test(normalized)) return normalized;
+  return /[\p{L}\p{M}\p{N}]/u.test(raw) ? raw : 'unknown';
+}
+
+// Consume host context before dispatch so Node runners and Shell children share it.
+export function applyAgentPlatform(args, env = process.env) {
+  const remaining = [];
+  let supplied = false;
+  for (let index = 0; index < args.length; index += 1) {
+    if (args[index] !== '--agent-platform') {
+      remaining.push(args[index]);
+      continue;
+    }
+    if (supplied) throw new Error('duplicate --agent-platform');
+    const value = args[++index];
+    if (value === undefined || value.startsWith('--')) throw new Error('missing --agent-platform value');
+    supplied = true;
+    env.ALIPAY_AIPAY_AGENT_PLATFORM = normalizeAgentPlatform(value);
+  }
+  return remaining;
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
+  if (process.argv[2] !== 'normalize' || process.argv.length !== 4) {
+    process.exitCode = 2;
+  } else {
+    process.stdout.write(normalizeAgentPlatform(process.argv[3]));
+  }
+}

package/skill-pre/references/normal/scripts/alipay_cli_env.mjs

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+
+import process from 'node:process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { checkCliEnvironment, isWindowsPlatform } from './platform_compat.mjs';
+
+export function runAlipayCliEnvCli(argv = process.argv) {
+  const mode = argv[2];
+  if (!['check', 'integration-check'].includes(mode) || argv.length !== 3) {
+    console.error('用法: node alipay_cli_env.mjs <check|integration-check>');
+    process.exitCode = 1;
+    return;
+  }
+
+  const windows = isWindowsPlatform();
+  const missing = checkCliEnvironment({
+    requireJq: !windows,
+    requireAlipayCli: !windows
+  });
+
+  if (missing.length === 0) {
+    console.log('CLI_ENV:READY');
+    return;
+  }
+
+  console.log('CLI_ENV:NEEDS_SETUP');
+  console.log(`CLI_ENV_MISSING=${missing.join(',')}`);
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  runAlipayCliEnvCli();
+}

package/skill-pre/references/normal/scripts/alipay_cli_env.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+
+set -u
+
+MODE="${1:-}"
+if [ "$MODE" != "check" ] && [ "$MODE" != "integration-check" ]; then
+  echo "用法: bash alipay_cli_env.sh <check|integration-check> [--product-type aipay|webpay|apppay]" >&2
+  exit 1
+fi
+shift
+
+case "${BASH_SOURCE[0]}" in
+  */*) SCRIPT_DIR="${BASH_SOURCE[0]%/*}" ;;
+  *) SCRIPT_DIR="." ;;
+esac
+# shellcheck source=/dev/null
+source "${SCRIPT_DIR}/common.sh"
+
+PRODUCT_TYPE=""
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --product-type)
+      [ "$#" -ge 2 ] || { echo "❌ 缺少参数值: $1" >&2; exit 1; }
+      PRODUCT_TYPE="$2"
+      shift 2
+      ;;
+    *)
+      echo "❌ 未知参数: $1" >&2
+      exit 1
+      ;;
+  esac
+done
+
+if [ -n "$PRODUCT_TYPE" ]; then
+  init_alipay_cli_product "$PRODUCT_TYPE" || exit 1
+else
+  unset PRODUCT
+fi
+
+MISSING=()
+command -v node >/dev/null 2>&1 || MISSING+=("node")
+if ! command -v jq >/dev/null 2>&1 \
+  || ! jq --version >/dev/null 2>&1 \
+  || ! jq -n -e --arg value ok '$value == "ok"' >/dev/null 2>&1; then
+  MISSING+=("jq")
+fi
+if ! command -v alipay-cli >/dev/null 2>&1 || ! alipay-cli version >/dev/null 2>&1; then
+  MISSING+=("alipay-cli")
+fi
+
+if [ "${#MISSING[@]}" -eq 0 ]; then
+  echo "CLI_ENV:READY"
+else
+  printf 'CLI_ENV:NEEDS_SETUP\nCLI_ENV_MISSING=%s\n' "$(IFS=,; echo "${MISSING[*]}")"
+fi

package/skill-pre/references/normal/scripts/alipay_cli_refresh.mjs

@@ -0,0 +1,129 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+
+const installUrl = 'https://opengw.alipay.com/alipaycli/install';
+const internalPrefix = 'ALIPAY_AIPAY_INTERNAL:';
+const refreshTimeoutMs = 60 * 1000;
+const verifyTimeoutMs = 5 * 1000;
+
+function refreshTimeoutBudget() {
+  if (process.env.ALIPAY_AIPAY_TEST_MODE !== '1') return refreshTimeoutMs;
+  const value = Number(process.env.ALIPAY_AIPAY_CLI_REFRESH_TEST_TIMEOUT_MS);
+  return Number.isInteger(value) && value >= 50 && value <= refreshTimeoutMs ? value : refreshTimeoutMs;
+}
+
+function cleanChildEnv(extra = {}) {
+  const env = { ...process.env, ...extra };
+  delete env.PLATFORM;
+  delete env.PLATFORM_ID;
+  delete env.PRODUCT;
+  delete env.ALIPAYCLI_BIZ_INFO;
+  return env;
+}
+
+function homeDir() {
+  const home = process.env.HOME || os.homedir();
+  if (typeof home !== 'string' || !path.isAbsolute(home) || home === path.parse(home).root) {
+    return '';
+  }
+  return home;
+}
+
+function isPermissionFailure(text = '') {
+  return /permission denied|operation not permitted|EACCES|EPERM|access denied/iu.test(text);
+}
+
+function isNetworkFailure(status, text = '') {
+  const networkCurlStatuses = new Set([5, 6, 7, 18, 28, 35, 52, 55, 56, 92]);
+  return networkCurlStatuses.has(Number(status)) ||
+    /could not resolve|failed to connect|connection (?:refused|reset)|timed? out|timeout|network|socket|tls|ssl|fetch failed|ENOTFOUND|ETIMEDOUT|ECONNRESET|ECONNREFUSED|EAI_AGAIN/iu.test(text);
+}
+
+function emit(kind) {
+  process.stderr.write(`${internalPrefix}ALIPAY_CLI_REFRESH=${kind}\n`);
+}
+
+function commandOutput(result) {
+  return `${result.stdout || ''}\n${result.stderr || ''}\n${result.error?.message || ''}`;
+}
+
+function verifyAlipayCli(binDir) {
+  const command = path.join(binDir, process.platform === 'win32' ? 'alipay-cli.cmd' : 'alipay-cli');
+  const result = spawnSync(command, ['version'], {
+    encoding: 'utf8',
+    env: cleanChildEnv({ PATH: `${binDir}${path.delimiter}${process.env.PATH || ''}` }),
+    shell: false,
+    stdio: 'ignore',
+    timeout: verifyTimeoutMs
+  });
+  return result.status === 0;
+}
+
+export function runAlipayCliRefreshCli(argv = process.argv) {
+  if (argv.length !== 3 || argv[2] !== 'refresh-alipay-cli') {
+    console.error('用法: node alipay_cli_refresh.mjs refresh-alipay-cli');
+    process.exitCode = 1;
+    return;
+  }
+
+  const home = homeDir();
+  if (!home) {
+    emit('FAILED');
+    return;
+  }
+
+  const binDir = path.join(home, '.local', 'bin');
+  try {
+    fs.mkdirSync(binDir, { recursive: true, mode: 0o755 });
+  } catch (error) {
+    emit(isPermissionFailure(error?.message || '') ? 'RETRY_WITH_LOCAL_FS_PERMISSION' : 'FAILED');
+    return;
+  }
+
+  const timeout = refreshTimeoutBudget();
+  const curl = spawnSync('curl', ['-fsSL', '--connect-timeout', '10', '--max-time', '60', installUrl], {
+    encoding: 'utf8',
+    env: cleanChildEnv(),
+    maxBuffer: 30 * 1024 * 1024,
+    shell: false,
+    timeout
+  });
+  if (curl.error || curl.status !== 0) {
+    const output = commandOutput(curl);
+    emit(isNetworkFailure(curl.status, output) ? 'RETRY_WITH_NETWORK' : 'FAILED');
+    return;
+  }
+
+  const installEnv = cleanChildEnv({
+    ALIPAY_CLI_BIN: binDir,
+    ALIPAY_CLI_SKIP_VERIFY: 'true',
+    PATH: `${binDir}${path.delimiter}${process.env.PATH || ''}`
+  });
+  const bash = spawnSync('bash', [], {
+    input: curl.stdout,
+    encoding: 'utf8',
+    env: installEnv,
+    maxBuffer: 30 * 1024 * 1024,
+    shell: false,
+    timeout
+  });
+  if (bash.error || bash.status !== 0) {
+    const output = commandOutput(bash);
+    if (isNetworkFailure(bash.status, output)) emit('RETRY_WITH_NETWORK');
+    else if (isPermissionFailure(output)) emit('RETRY_WITH_LOCAL_FS_PERMISSION');
+    else emit('FAILED');
+    return;
+  }
+
+  emit(verifyAlipayCli(binDir) ? 'READY' : 'VERIFY_FAILED');
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  runAlipayCliRefreshCli();
+}

package/skill-pre/references/normal/scripts/auth_runtime_runner.mjs

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import process from 'node:process';
+
+const internalPrefix = 'ALIPAY_AIPAY_INTERNAL:';
+const autoMismatchFlows = new Set(['SCOPE_MISMATCH', 'MCC_MISMATCH']);
+
+function runAuthScript(script, cwd, args, stdio) {
+  const result = spawnSync('bash', [script, ...args], {
+    cwd,
+    env: process.env,
+    encoding: stdio === 'pipe' ? 'utf8' : undefined,
+    stdio,
+    shell: false
+  });
+  if (result.error) throw result.error;
+  return result;
+}
+
+function authFlowValues(stderr) {
+  const prefix = `${internalPrefix}AUTH_FLOW:`;
+  return String(stderr || '')
+    .split(/\r?\n/u)
+    .filter((line) => line.startsWith(prefix))
+    .map((line) => line.slice(prefix.length));
+}
+
+function withoutIntermediateFlow(stderr, flow) {
+  const marker = `${internalPrefix}AUTH_FLOW:${flow}`;
+  const source = String(stderr || '');
+  return source.split(/\r?\n/u).filter((line) => line !== marker).join('\n');
+}
+
+export function runAuthRuntime(script, cwd, args) {
+  if (args[0] !== 'init') {
+    const result = runAuthScript(script, cwd, args, 'inherit');
+    return Number.isInteger(result.status) ? result.status : 1;
+  }
+
+  const initial = runAuthScript(script, cwd, args, 'pipe');
+  const initialStatus = Number.isInteger(initial.status) ? initial.status : 1;
+  const flows = authFlowValues(initial.stderr);
+  const flow = flows.length === 1 ? flows[0] : '';
+  const canAutoRecover = initialStatus === 1
+    && initial.signal === null
+    && autoMismatchFlows.has(flow)
+    && String(initial.stdout || '').trim() === '';
+
+  if (!canAutoRecover) {
+    process.stdout.write(initial.stdout || '');
+    process.stderr.write(initial.stderr || '');
+    return initialStatus;
+  }
+
+  process.stderr.write(withoutIntermediateFlow(initial.stderr, flow));
+  process.stderr.write(`${internalPrefix}AUTH_AUTO_MISMATCH=${flow}\n`);
+  const recovered = runAuthScript(script, cwd, ['mismatch', ...args.slice(1)], 'inherit');
+  return Number.isInteger(recovered.status) ? recovered.status : 1;
+}

package/skill-pre/references/normal/scripts/checklist_sections.mjs

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const scriptDir = path.dirname(fileURLToPath(import.meta.url));
+export const checklistPath = path.resolve(scriptDir, '../../integration/modules/checklist.md');
+const productTypes = new Set(['aipay', 'webpay', 'apppay']);
+const declarationPattern = /<!-- ALIPAY_AIPAY_CHECKLIST_PRODUCTS:([a-z,]+) -->\s*\n(## [^#\n].+)([\s\S]*?)(?=<!-- ALIPAY_AIPAY_CHECKLIST_PRODUCTS:|\s*$)/gu;
+
+function checklistDeclarations(source) {
+  const declarations = [];
+  const declaredHeadings = new Set();
+  for (const match of source.matchAll(declarationPattern)) {
+    const products = match[1].split(',');
+    const heading = match[2].slice(3).trim();
+    if (products.some((product) => !productTypes.has(product)) || declaredHeadings.has(heading)) {
+      throw new Error('checklist 产品声明非法或重复');
+    }
+    declaredHeadings.add(heading);
+    declarations.push({
+      products: new Set(products),
+      heading,
+      markdown: `${match[2]}${match[3]}`.trim()
+    });
+  }
+  const allHeadings = [...source.matchAll(/^## ([^#].+)$/gmu)].map((match) => match[1]);
+  if (allHeadings.length !== declarations.length || allHeadings.some((heading) => !declaredHeadings.has(heading))) {
+    throw new Error('checklist 存在未声明产品范围的章节');
+  }
+  return declarations;
+}
+
+export function checklistForProduct(productType, source = fs.readFileSync(checklistPath, 'utf8')) {
+  if (!productTypes.has(productType)) throw new Error('checklist product-type 非法');
+  const applicable = checklistDeclarations(source).filter(({ products }) => products.has(productType));
+  if (applicable.length === 0) throw new Error(`checklist 缺少 ${productType} 适用章节`);
+  return {
+    sections: applicable.map(({ heading }) => heading),
+    markdown: applicable.map(({ markdown }) => markdown).join('\n\n')
+  };
+}