@alipay/alipay-aipay 1.7.0 → 1.7.2

package/skill-pre/references/normal/scripts/onboarding_recovery_runner.mjs

@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { isAffirmativeReply } from './interaction_reply.mjs';
+
+const internalPrefix = 'ALIPAY_AIPAY_INTERNAL:';
+const scriptDir = path.dirname(fileURLToPath(import.meta.url));
+const onboardingScriptsDir = path.resolve(scriptDir, '../../onboarding/modules/scripts');
+
+function parseArgs(argv) {
+  const command = argv[2];
+  const args = {};
+  for (let index = 3; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (!token.startsWith('--')) throw new Error(`未知参数 ${token}`);
+    const value = argv[index + 1];
+    if (value === undefined || value.startsWith('--')) throw new Error(`参数 ${token} 缺少取值`);
+    const name = token.slice(2);
+    if (Object.prototype.hasOwnProperty.call(args, name)) throw new Error(`参数 ${token} 重复`);
+    args[name] = value;
+    index += 1;
+  }
+  return { command, args };
+}
+
+function required(args, name) {
+  const value = args[name];
+  if (typeof value !== 'string' || !value) throw new Error(`缺少参数 --${name}`);
+  return value;
+}
+
+function assertRegisteredReply(args, kind) {
+  required(args, 'input-id');
+  if (!isAffirmativeReply(required(args, 'reply'))) {
+    process.stderr.write(`${internalPrefix}RECOVERY_INPUT_REJECTED=${kind}\n`);
+    process.exitCode = 2;
+    return false;
+  }
+  return true;
+}
+
+function runScript(scriptName, argv, env = process.env) {
+  const result = spawnSync('bash', [path.join(onboardingScriptsDir, scriptName), ...argv], {
+    cwd: onboardingScriptsDir,
+    env,
+    encoding: 'utf8',
+    maxBuffer: 4 * 1024 * 1024
+  });
+  if (result.stdout) process.stdout.write(result.stdout);
+  if (result.stderr) process.stderr.write(result.stderr);
+  if (result.error) throw result.error;
+  process.exitCode = result.status === null ? 1 : result.status;
+}
+
+function runAuthConfirm(args) {
+  if (!assertRegisteredReply(args, 'AUTH_PENDING')) return;
+  const context = [
+    ['scope', required(args, 'scope')],
+    ['sales-code', required(args, 'sales-code')],
+    ['mcc-code', required(args, 'mcc-code')],
+    ['product-name', required(args, 'product-name')],
+    ['mcc-name', required(args, 'mcc-name')],
+    ['mcc-context-receipt', required(args, 'mcc-context-receipt')]
+  ].flatMap(([name, value]) => [`--${name}`, value]);
+  runScript('auth.sh', ['confirm', ...context]);
+}
+
+function runApplicationKeyRecovery(args) {
+  if (!assertRegisteredReply(args, 'APPLICATION_KEY_PENDING')) return;
+  const mode = required(args, 'mode');
+  const productType = required(args, 'product-type');
+  if (!['aipay', 'webpay', 'apppay'].includes(productType)) {
+    throw new Error('product-type 仅支持 aipay、webpay 或 apppay');
+  }
+  if (!['verify-key', 'verify-key-and-audit'].includes(mode)) {
+    throw new Error('mode 仅支持 verify-key 或 verify-key-and-audit');
+  }
+  const argv = [mode, '--product-type', productType, required(args, 'app-id')];
+  if (args['public-key'] !== undefined) argv.push(args['public-key']);
+  runScript('app.sh', argv, { ...process.env, ALIPAY_AIPAY_RECOVERY_QUERY_ONCE: '1' });
+}
+
+export function runOnboardingRecoveryCli(argv = process.argv) {
+  const { command, args } = parseArgs(argv);
+  if (command === 'auth-confirm') return runAuthConfirm(args);
+  if (command === 'application-key') return runApplicationKeyRecovery(args);
+  throw new Error('用法: onboarding_recovery_runner.mjs <auth-confirm|application-key> --reply <明确完成表达> --input-id <本地用户输入幂等键> ...');
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    runOnboardingRecoveryCli();
+  } catch (error) {
+    process.stderr.write(`${internalPrefix}RECOVERY_RUNNER_ERROR=${String(error?.message || error).replace(/[\r\n]/gu, ' ')}\n`);
+    process.exitCode = 1;
+  }
+}

package/skill-pre/references/normal/scripts/open_official_url.sh

@@ -0,0 +1,205 @@
+#!/bin/bash
+
+set -u
+
+KIND="${1:-}"
+IFS= read -r URL || URL=""
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+POLICY_FILE="${SCRIPT_DIR}/../json/policy-rules.json"
+
+case "$KIND" in authorization|public-key-confirmation) ;; *) echo "OPEN_FAILED"; exit 1 ;; esac
+command -v node >/dev/null 2>&1 || { echo "OPEN_FAILED"; exit 1; }
+[ -f "$POLICY_FILE" ] || { echo "OPEN_FAILED"; exit 1; }
+
+if ! node -e '
+const fs = require("node:fs");
+const [kind, raw, policyFile] = process.argv.slice(1);
+const policy = JSON.parse(fs.readFileSync(policyFile, "utf8"));
+if (/[\u0000-\u0020\u007f`()\[\]<>|]/.test(raw)) process.exit(1);
+let url;
+try { url = new URL(raw); } catch { process.exit(1); }
+const allowed = policy.temporaryUrlAllowlist[kind === "authorization" ? "authorization" : "publicKeyConfirmation"];
+if (!allowed || url.protocol !== "https:" || url.hostname !== allowed.host || url.pathname !== allowed.path || url.username || url.password || url.port || url.hash) process.exit(1);
+if (kind === "authorization") {
+  const required = allowed.requiredQueryParams;
+  const optional = allowed.optionalQueryParams;
+  const allowedKeys = new Set([...required, ...optional]);
+  if ([...url.searchParams.keys()].some((key) => !allowedKeys.has(key))) process.exit(1);
+  for (const key of required) {
+    if (url.searchParams.getAll(key).length !== 1 || !url.searchParams.get(key)) process.exit(1);
+  }
+  for (const key of optional) {
+    if (url.searchParams.getAll(key).length > 1) process.exit(1);
+  }
+  if (!policy.authorizationProducts.some((product) => product.salesCode === url.searchParams.get("productCode"))) process.exit(1);
+  if (!/^A\d{4}_B\d{4}$/.test(url.searchParams.get("mccCode"))) process.exit(1);
+  if (/[\r\n]/.test(url.searchParams.get("deviceCode"))) process.exit(1);
+  if (url.searchParams.has("platform") && (!url.searchParams.get("platform") || /[\r\n]/.test(url.searchParams.get("platform")))) process.exit(1);
+} else {
+  const required = allowed.requiredQueryParams || ["keyConfirmToken"];
+  const optional = allowed.optionalQueryParams || [];
+  const allowedKeys = new Set([...required, ...optional]);
+  if ([...url.searchParams.keys()].some((key) => !allowedKeys.has(key))) process.exit(1);
+  for (const key of required) {
+    if (url.searchParams.getAll(key).length !== 1 || !url.searchParams.get(key)) process.exit(1);
+  }
+  for (const key of optional) {
+    if (url.searchParams.getAll(key).length > 1) process.exit(1);
+  }
+  if (/[\r\n]/.test(url.searchParams.get("keyConfirmToken"))) process.exit(1);
+}
+' "$KIND" "$URL" "$POLICY_FILE"; then
+  echo "OPEN_FAILED"
+  exit 1
+fi
+
+OS_NAME="$(uname -s 2>/dev/null || true)"
+OPEN_ERROR_KIND_REPORTED=false
+OPEN_TIMEOUT_MS=3000
+if [ "${ALIPAY_AIPAY_TEST_MODE:-}" = 1 ] && [[ "${ALIPAY_AIPAY_OPEN_TIMEOUT_MS:-}" =~ ^[1-9][0-9]*$ ]]; then
+  OPEN_TIMEOUT_MS="$ALIPAY_AIPAY_OPEN_TIMEOUT_MS"
+fi
+
+emit_internal() { printf 'ALIPAY_AIPAY_INTERNAL:%s\n' "$*" >&2; }
+emit_open_error_kind() {
+  if [ "$OPEN_ERROR_KIND_REPORTED" != true ]; then
+    emit_internal "OPEN_ERROR_KIND=$1"
+    OPEN_ERROR_KIND_REPORTED=true
+  fi
+}
+
+diagnose_failed_open() {
+  [ "$1" = macos-open ] && [ -f "$2" ] || return 0
+  grep -qiE 'NSOSStatusErrorDomain|kLSExecutableIncorrectFormat|-10661' "$2" || return 0
+  emit_open_error_kind "MACOS_LAUNCHSERVICES"
+  grep -q -- '-10661' "$2" && emit_internal "OPEN_ERROR_CODE=-10661"
+}
+
+run_open_command() {
+  local KIND="$1" ERROR_FILE OPEN_RC OPEN_TIMEOUT_SENTINEL
+  shift
+  ERROR_FILE=$(mktemp "${TMPDIR:-/tmp}/alipay-aipay-open.XXXXXX" 2>/dev/null || true)
+  OPEN_TIMEOUT_SENTINEL="ALIPAY_AIPAY_OPEN_TIMEOUT_${$}_${RANDOM:-0}"
+  node -e '
+const { spawn } = require("node:child_process");
+const [timeoutSentinel, timeout, command, ...args] = process.argv.slice(1);
+const child = spawn(command, args, {
+  detached: true,
+  stdio: ["ignore", "ignore", "pipe"],
+});
+
+let stderr = "";
+let finished = false;
+let timedOut = false;
+const outputLimit = 64 * 1024;
+const appendStderr = (chunk) => {
+  stderr += chunk.toString("utf8");
+  if (stderr.length > outputLimit) stderr = stderr.slice(-outputLimit);
+};
+const finish = (code, includeTimeoutSentinel = false) => {
+  if (finished) return;
+  finished = true;
+  clearTimeout(timeoutTimer);
+  const output = `${stderr}${includeTimeoutSentinel ? `${timeoutSentinel}\n` : ""}`;
+  if (output) process.stderr.write(output, () => process.exit(code));
+  else process.exit(code);
+};
+const killGroup = (signal) => {
+  if (!child.pid) return;
+  try { process.kill(-child.pid, signal); } catch {}
+};
+
+child.stderr.on("data", appendStderr);
+child.once("error", () => finish(125));
+child.once("close", (status) => {
+  if (!timedOut) finish(Number.isInteger(status) ? status : 125);
+});
+
+const timeoutTimer = setTimeout(() => {
+  timedOut = true;
+  killGroup("SIGTERM");
+  setTimeout(() => {
+    killGroup("SIGKILL");
+    finish(124, true);
+  }, 100);
+}, Number(timeout));
+
+if (!Number.isFinite(Number(timeout)) || Number(timeout) <= 0) {
+  finish(125);
+}
+' "$OPEN_TIMEOUT_SENTINEL" "$OPEN_TIMEOUT_MS" "$@" >/dev/null 2>"${ERROR_FILE:-/dev/null}"
+  OPEN_RC=$?
+  if [ "$OPEN_RC" -eq 124 ] && [ -n "$ERROR_FILE" ] && grep -Fqx -- "$OPEN_TIMEOUT_SENTINEL" "$ERROR_FILE"; then
+    emit_open_error_kind "OPENER_TIMEOUT"
+  elif [ "$OPEN_RC" -ne 0 ] && [ -n "$ERROR_FILE" ]; then
+    diagnose_failed_open "$KIND" "$ERROR_FILE"
+  fi
+  [ -z "$ERROR_FILE" ] || rm -f "$ERROR_FILE" 2>/dev/null || true
+  return "$OPEN_RC"
+}
+
+open_with_unix_fallbacks() {
+  local TRIED=false
+  command -v xdg-open >/dev/null 2>&1 && { TRIED=true; run_open_command xdg-open xdg-open "$URL" && return 0; }
+  command -v gio >/dev/null 2>&1 && { TRIED=true; run_open_command gio gio open "$URL" && return 0; }
+  command -v sensible-browser >/dev/null 2>&1 && { TRIED=true; run_open_command sensible-browser sensible-browser "$URL" && return 0; }
+  if [ "$TRIED" != true ]; then
+    emit_open_error_kind "GUI_UNAVAILABLE"
+    return 2
+  fi
+  if [ -z "${DISPLAY:-}" ] && [ -z "${WAYLAND_DISPLAY:-}" ] && [ -z "${MIR_SOCKET:-}" ]; then
+    emit_open_error_kind "GUI_UNAVAILABLE"
+  else emit_open_error_kind "OPENER_FAILED"; fi
+  return 1
+}
+
+open_url() {
+  local OPEN_BIN TRIED
+  case "$OS_NAME" in
+    Darwin)
+      TRIED=false
+      OPEN_BIN="$(command -v open 2>/dev/null || true)"
+      if [ -n "$OPEN_BIN" ]; then
+        TRIED=true
+        run_open_command "macos-open" "$OPEN_BIN" "$URL" && return 0
+      fi
+      if command -v osascript >/dev/null 2>&1; then
+        TRIED=true
+        run_open_command osascript osascript \
+          -e 'on run argv' -e 'open location (item 1 of argv)' -e 'end run' \
+          "$URL" && return 0
+      fi
+      if [ "$TRIED" = true ]; then
+        emit_open_error_kind "OPENER_FAILED"
+        return 1
+      fi
+      emit_open_error_kind "GUI_UNAVAILABLE"
+      return 2
+      ;;
+    Linux|FreeBSD|NetBSD|OpenBSD|DragonFly|SunOS|AIX)
+      open_with_unix_fallbacks; return $?
+      ;;
+    MINGW*|MSYS*|CYGWIN*)
+      if command -v powershell.exe >/dev/null 2>&1; then
+        env "ALIPAY_AIPAY_OPEN_URL=$URL" powershell.exe -NoProfile -NonInteractive -Command \
+          'Start-Process -FilePath $env:ALIPAY_AIPAY_OPEN_URL' >/dev/null 2>&1 && return 0
+        emit_open_error_kind "OPENER_FAILED"
+        return 1
+      fi
+      emit_open_error_kind "GUI_UNAVAILABLE"
+      return 2
+      ;;
+    *)
+      emit_open_error_kind "GUI_UNAVAILABLE"
+      return 2
+      ;;
+  esac
+}
+
+open_url
+OPEN_RC=$?
+case "$OPEN_RC" in
+  0) echo "OPENED" ;;
+  2) echo "GUI_UNAVAILABLE" ;;
+  *) echo "OPEN_FAILED" ;;
+esac

package/skill-pre/references/normal/scripts/platform_compat.mjs

@@ -0,0 +1,42 @@
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import process from 'node:process';
+
+export function runtimePlatform(env = process.env) {
+  const testPlatform = env.ALIPAY_AIPAY_TEST_MODE === '1' ? env.ALIPAY_AIPAY_TEST_PLATFORM : '';
+  return ['darwin', 'linux', 'win32'].includes(testPlatform) ? testPlatform : process.platform;
+}
+
+export function isWindowsPlatform(env = process.env) {
+  return runtimePlatform(env) === 'win32';
+}
+
+export function commandRuns(command, args = [], options = {}) {
+  const result = spawnSync(command, args, {
+    encoding: 'utf8',
+    stdio: 'ignore',
+    shell: false,
+    env: options.env || process.env
+  });
+  return result.status === 0;
+}
+
+export function currentNodeAvailable(env = process.env) {
+  return Boolean(process.execPath && fs.existsSync(process.execPath));
+}
+
+export function checkCliEnvironment(options = {}) {
+  const env = options.env || process.env;
+  const requireJq = options.requireJq ?? !isWindowsPlatform(env);
+  const requireAlipayCli = options.requireAlipayCli ?? true;
+  const missing = [];
+
+  if (!currentNodeAvailable(env)) missing.push('node');
+  if (requireJq && (
+    !commandRuns('jq', ['--version'], { env }) ||
+    !commandRuns('jq', ['-n', '-e', '--arg', 'value', 'ok', '$value == "ok"'], { env })
+  )) missing.push('jq');
+  if (requireAlipayCli && !commandRuns('alipay-cli', ['version'], { env })) missing.push('alipay-cli');
+
+  return missing;
+}

package/skill-pre/references/normal/scripts/preview_runtime.mjs

@@ -0,0 +1,151 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { spawnSync } from 'node:child_process';
+import { renderMessage } from './render_customer_message.mjs';
+import { runtimePlatform } from './platform_compat.mjs';
+import { setConversationConsent } from './telemetry.mjs';
+
+const pagePath = fileURLToPath(new URL('../../onboarding/assets/keygen.html', import.meta.url));
+const internalPrefix = 'ALIPAY_AIPAY_INTERNAL:';
+const inheritedEnvironmentKeys = Object.freeze([
+  'HOME',
+  'USERPROFILE',
+  'TMPDIR',
+  'TEMP',
+  'TMP',
+  'LANG',
+  'LC_ALL',
+  'LC_CTYPE',
+  'DISPLAY',
+  'WAYLAND_DISPLAY',
+  'DBUS_SESSION_BUS_ADDRESS',
+  'XDG_CURRENT_DESKTOP',
+  'XDG_SESSION_TYPE',
+  'XDG_RUNTIME_DIR'
+]);
+
+function deliver(messageId, variant = 'DEFAULT') {
+  const body = renderMessage(messageId, variant, {});
+  if (!body.trim()) throw new Error('预发版消息正文为空');
+  process.stdout.write(`${body}\n`);
+  process.stderr.write(`${internalPrefix}CUSTOMER_MESSAGE_DELIVERY_REQUIRED=${messageId}\n`);
+}
+
+function safeEnvironmentValue(value) {
+  return typeof value === 'string' && !value.includes('\0') ? value : undefined;
+}
+
+function openerEnvironment(platform, source) {
+  const env = {};
+  for (const key of inheritedEnvironmentKeys) {
+    const value = safeEnvironmentValue(source[key]);
+    if (value !== undefined) env[key] = value;
+  }
+  if (platform === 'darwin') env.PATH = '/usr/bin:/bin:/usr/sbin:/sbin';
+  if (platform === 'linux') env.PATH = '/usr/bin:/bin';
+  return env;
+}
+
+function windowsPowerShell(source) {
+  const candidate = safeEnvironmentValue(source.SystemRoot) || safeEnvironmentValue(source.WINDIR) || 'C:\\Windows';
+  const root = path.win32.normalize(candidate).replace(/[\\/]+$/u, '');
+  if (!/^[A-Za-z]:\\Windows$/iu.test(root)) return null;
+  return {
+    command: path.win32.join(root, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe'),
+    root
+  };
+}
+
+// This helper opens only the bundled, static page. It never generates or reads keys.
+export function openLocalKeygen({ platform = runtimePlatform(), env = process.env, spawn = spawnSync } = {}) {
+  try {
+    if (!fs.lstatSync(pagePath).isFile() || fs.realpathSync(pagePath) !== path.resolve(pagePath)) return 'OPEN_FAILED';
+    if (platform === 'linux' && !env.DISPLAY && !env.WAYLAND_DISPLAY) return 'GUI_UNAVAILABLE';
+    const url = pathToFileURL(pagePath).href;
+    let command;
+    let args;
+    if (platform === 'darwin') {
+      command = '/usr/bin/open';
+      args = [url];
+    } else if (platform === 'linux') {
+      command = '/usr/bin/xdg-open';
+      args = [url];
+    } else if (platform === 'win32') {
+      const powershell = windowsPowerShell(env);
+      if (!powershell) return 'OPEN_FAILED';
+      command = powershell.command;
+      // Pass the URL as data through the child's environment, never as shell code.
+      args = ['-NoProfile', '-NonInteractive', '-Command', "$ErrorActionPreference='Stop'; Start-Process -FilePath $env:ALIPAY_AIPAY_PRE_KEYGEN_URL"];
+      const childEnv = openerEnvironment(platform, env);
+      childEnv.SystemRoot = powershell.root;
+      childEnv.WINDIR = powershell.root;
+      childEnv.PATH = `${powershell.root}\\System32;${powershell.root}\\System32\\WindowsPowerShell\\v1.0`;
+      childEnv.ALIPAY_AIPAY_PRE_KEYGEN_URL = url;
+      const result = spawn(command, args, {
+        env: childEnv,
+        shell: false,
+        stdio: 'ignore',
+        timeout: 10000,
+        windowsHide: true
+      });
+      return result.status === 0 && !result.error ? 'OPEN_REQUESTED' : 'OPEN_FAILED';
+    } else {
+      return 'GUI_UNAVAILABLE';
+    }
+    const childEnv = openerEnvironment(platform, env);
+    childEnv.ALIPAY_AIPAY_PRE_KEYGEN_URL = url;
+    const result = spawn(command, args, {
+      env: childEnv,
+      shell: false,
+      stdio: 'ignore',
+      timeout: 10000,
+      windowsHide: true
+    });
+    return result.status === 0 && !result.error ? 'OPEN_REQUESTED' : 'OPEN_FAILED';
+  } catch {
+    return 'OPEN_FAILED';
+  }
+}
+
+export function runPreviewCli(argv = process.argv) {
+  const action = argv[2];
+  if (action === 'consent') {
+    const args = new Map();
+    for (let i = 3; i < argv.length; i += 2) {
+      if (!['--reply', '--input-id'].includes(argv[i]) || args.has(argv[i]) || typeof argv[i + 1] !== 'string') {
+        throw new Error('preview consent 只接受 --reply 与 --input-id');
+      }
+      args.set(argv[i], argv[i + 1]);
+    }
+    if (!args.get('--input-id')) throw new Error('preview consent 缺少 --input-id');
+    // A generic business confirmation (1/OK/继续) is not consent to collection.
+    const reply = (args.get('--reply') || '').trim().replace(/[。！!]+$/u, '');
+    const decision = reply === '确认' ? 'GRANTED' : reply === '仅使用服务' ? 'DENIED' : null;
+    if (!decision) {
+      process.stderr.write(`${internalPrefix}PREVIEW_DECISION=UNCONFIRMED\n`);
+      return;
+    }
+    const saved = setConversationConsent({ decision, inputId: args.get('--input-id') });
+    // Respect the current persisted choice on retries of an earlier reply.
+    const effective = saved?.decision || 'UNAVAILABLE';
+    const serviceOnly = effective === 'DENIED' || (effective !== 'GRANTED' && decision === 'DENIED');
+    process.stderr.write(`${internalPrefix}PREVIEW_DECISION=${serviceOnly ? 'SERVICE_ONLY' : 'CONFIRMED'}\n`);
+    process.stderr.write(`${internalPrefix}CONVERSATION_CONSENT=${effective}\n`);
+    return;
+  }
+  if (argv.length !== 3 || !['notice', 'key-options', 'open-keygen', 'key-tool-fallback'].includes(action)) {
+    throw new Error('用法: runtime.mjs preview <notice|key-options|open-keygen|key-tool-fallback>');
+  }
+  if (action === 'notice') return deliver('preview.notice');
+  if (action === 'key-options') return deliver('application.key.methods');
+  if (action === 'key-tool-fallback') return deliver('application.key.local.fallback');
+  const outcome = openLocalKeygen();
+  process.stderr.write(`${internalPrefix}LOCAL_KEYGEN_OPEN=${outcome}\n`);
+  deliver(outcome === 'OPEN_REQUESTED' ? 'application.key.local.opened' : 'application.key.local.fallback');
+}
+
+export function runManualKeyToolCli(argv = process.argv) {
+  if (argv.length !== 2) throw new Error('预发版 key-tool 仅提供手动下载安装引导，不接受下载目录');
+  deliver('application.key.tool.manual');
+}

package/skill-pre/references/normal/scripts/project_route_inspector.sh

@@ -0,0 +1,132 @@
+#!/bin/bash
+
+set -u
+
+MODE="${1:-}"
+PRODUCT_TYPE=""
+PROJECT_PATH=""
+PROJECT_SELECTION=""
+
+prepare_new_project() {
+  local project_path="$1"
+  case "$project_path" in /*) ;; *) echo "ROUTE_INSPECT_ERROR:projectPath 必须是绝对路径" >&2; exit 2 ;; esac
+  if [ -L "$project_path" ] || { [ -e "$project_path" ] && { [ ! -d "$project_path" ] || [ -n "$(find "$project_path" -mindepth 1 -maxdepth 1 -print -quit 2>/dev/null)" ]; }; }; then
+    echo "ROUTE_INSPECT_ERROR:NEW_PROJECT 路径必须尚不存在或为空且不能是符号链接" >&2
+    exit 2
+  fi
+  jq -n '{projectSelection:"NEW_PROJECT",projectOrigin:"NEW_PROJECT",projectOriginLabel:"本轮新建项目",preparationStatus:"READY"}'
+}
+
+case "$MODE" in
+  prepare-new)
+    [ "$#" -eq 2 ] || { echo "ROUTE_INSPECT_ERROR:用法 project_route_inspector.sh prepare-new <projectPath>" >&2; exit 2; }
+    prepare_new_project "$2"
+    exit 0
+    ;;
+  scan)
+    [ "$#" -eq 4 ] || { echo "ROUTE_INSPECT_ERROR:用法 project_route_inspector.sh scan <productType> <projectPath> <projectSelection>" >&2; exit 2; }
+    PRODUCT_TYPE="$2"
+    PROJECT_PATH="$3"
+    PROJECT_SELECTION="$4"
+    ;;
+  *)
+    echo "ROUTE_INSPECT_ERROR:用法 project_route_inspector.sh prepare-new <projectPath> 或 scan <productType> <projectPath> <projectSelection>" >&2
+    exit 2
+    ;;
+esac
+
+case "$PRODUCT_TYPE" in aipay|webpay|apppay) ;; *) echo "ROUTE_INSPECT_ERROR:productType 非法" >&2; exit 2 ;; esac
+case "$PROJECT_SELECTION" in CURRENT_PROJECT|OTHER_PROJECT|PREPARED_NEW_PROJECT) ;; *) echo "ROUTE_INSPECT_ERROR:projectSelection 非法" >&2; exit 2 ;; esac
+case "$PROJECT_PATH" in /*) ;; *) echo "ROUTE_INSPECT_ERROR:projectPath 必须是绝对路径" >&2; exit 2 ;; esac
+
+[ -d "$PROJECT_PATH" ] && [ -r "$PROJECT_PATH" ] || { echo "ROUTE_INSPECT_ERROR:项目路径不可访问" >&2; exit 2; }
+
+if [ "$PROJECT_SELECTION" = "PREPARED_NEW_PROJECT" ]; then
+  PROJECT_ORIGIN="NEW_PROJECT"
+  PROJECT_ORIGIN_LABEL="本轮新建项目"
+else
+  PROJECT_ORIGIN="EXISTING_PROJECT"
+  PROJECT_ORIGIN_LABEL="现有项目"
+fi
+
+scan() {
+  local pattern="$1"
+  local file
+  while IFS= read -r -d '' file; do
+    if grep -En "$pattern" "$file" 2>/dev/null | grep -Ev '^[0-9]+:[[:space:]]*(//|#|\*|<!--)' | head -n 1 | grep -q .; then
+      printf '%s\n' "$file"
+      return 0
+    fi
+  done < <(find "$PROJECT_PATH" -type d \( \
+    -name .git -o -name .hg -o -name .svn -o -name .cache -o -name .gradle -o -name .idea -o \
+    -name .next -o -name .nuxt -o -name .pytest_cache -o -name .tox -o -name .Trash -o -name .venv -o \
+    -name Library -o -name __pycache__ -o -name build -o -name coverage -o -name dist -o -name node_modules -o -name target -o -name vendor \
+  \) -prune -o -type f \( -name '*.java' -o -name '*.kt' -o -name '*.js' -o -name '*.mjs' -o -name '*.cjs' -o -name '*.ts' -o -name '*.tsx' -o -name '*.py' -o -name '*.php' -o -name '*.cs' \) -print0)
+}
+
+webpay_marker='alipay\.trade\.page\.pay|AlipayTradePagePay(Request|Model|Response)'
+apppay_marker='alipay\.trade\.app\.pay|AlipayTradeAppPay(Request|Model|Response)'
+trade_query_marker='alipay\.trade\.query|AlipayTradeQuery(Request|Model|Response)|alipay_trade_query_response'
+trade_refund_marker='alipay\.trade\.refund|AlipayTradeRefund(Request|Model|Response)|alipay_trade_refund_response'
+trade_refund_query_marker='alipay\.trade\.fastpay\.refund\.query|AlipayTradeFastpayRefundQuery(Request|Model|Response)|alipay_trade_fastpay_refund_query_response'
+trade_close_marker='alipay\.trade\.close|AlipayTradeClose(Request|Model|Response)|alipay_trade_close_response'
+trade_notify_marker='notify_url|notifyUrl|NotifyUrl|setNotifyUrl|异步通知'
+aipay_payment_needed_marker='Payment-Needed'
+aipay_payment_proof_marker='Payment-Proof'
+aipay_payment_validation_marker='Payment-Validation'
+aipay_payment_verify_marker='alipay\.aipay\.agent\.payment\.verify|AlipayAipayAgentPaymentVerify(Request|Model|Response)|alipay_aipay_agent_payment_verify_response'
+aipay_fulfillment_confirm_marker='alipay\.aipay\.agent\.fulfillment\.confirm|AlipayAipayAgentFulfillmentConfirm(Request|Model|Response)|alipay_aipay_agent_fulfillment_confirm_response'
+aipay_marker="$aipay_payment_needed_marker|$aipay_payment_proof_marker|$aipay_payment_verify_marker|$aipay_fulfillment_confirm_marker"
+
+target_marker=""
+other_products=""
+case "$PRODUCT_TYPE" in
+  aipay) target_marker="$aipay_marker" ;;
+  webpay) target_marker="$webpay_marker" ;;
+  apppay) target_marker="$apppay_marker" ;;
+esac
+
+[ -z "$(scan "$webpay_marker")" ] || [ "$PRODUCT_TYPE" = "webpay" ] || other_products="${other_products}AI 网页应用收款,"
+[ -z "$(scan "$apppay_marker")" ] || [ "$PRODUCT_TYPE" = "apppay" ] || other_products="${other_products}AI 移动应用收款,"
+[ -z "$(scan "$aipay_marker")" ] || [ "$PRODUCT_TYPE" = "aipay" ] || other_products="${other_products}AI 按量付费,"
+other_products="${other_products%,}"
+[ -n "$other_products" ] || other_products="无"
+
+if [ -z "$(scan "$target_marker")" ]; then
+  if [ "$other_products" = "无" ]; then
+    status="NO_PAYMENT"
+    if [ "$PROJECT_SELECTION" = "PREPARED_NEW_PROJECT" ]; then
+      evidence="固定检查器扫描本轮已初始化的新项目，未发现目标产品或其他受支持支付代码"
+    else
+      evidence="固定检查器未发现目标产品或其他受支持支付代码"
+    fi
+  else status="OTHER_PRODUCT_ONLY"; evidence="固定检查器只发现其他受支持支付产品代码"; fi
+else
+  if [ "$PRODUCT_TYPE" = "aipay" ]; then
+    required_patterns=("$aipay_payment_needed_marker" "$aipay_payment_proof_marker" "$aipay_payment_verify_marker" "$aipay_fulfillment_confirm_marker" "$aipay_payment_validation_marker")
+  elif [ "$PRODUCT_TYPE" = "webpay" ]; then
+    required_patterns=("$webpay_marker" "$trade_query_marker" "$trade_refund_marker" "$trade_refund_query_marker" "$trade_close_marker" "$trade_notify_marker")
+  else
+    required_patterns=("$apppay_marker" "$trade_query_marker" "$trade_refund_marker" "$trade_refund_query_marker" "$trade_close_marker" "$trade_notify_marker")
+  fi
+  missing=()
+  for pattern in "${required_patterns[@]}"; do
+    [ -n "$(scan "$pattern")" ] || missing+=("$pattern")
+  done
+  if [ "${#missing[@]}" -eq 0 ]; then
+    status="TARGET_PARTIAL"
+    evidence="固定检查器逐项发现目标产品入口及全部核心接口标记，但静态扫描不能证明配置、安全、测试和 checklist 完成；必须进入 Integration 验证分支"
+  else
+    status="TARGET_PARTIAL"
+    evidence="固定检查器发现目标产品代码，但至少一个核心接口标记缺失；不得按完整集成路由"
+  fi
+fi
+
+jq -n \
+  --arg selection "$PROJECT_SELECTION" \
+  --arg origin "$PROJECT_ORIGIN" \
+  --arg originLabel "$PROJECT_ORIGIN_LABEL" \
+  --arg status "$status" \
+  --arg evidence "$evidence" \
+  --arg others "$other_products" \
+  '{projectSelection:$selection,projectOrigin:$origin,projectOriginLabel:$originLabel,integrationStatus:$status,evidence:$evidence,otherProducts:$others}'