@h-ai/payment 0.1.0-alpha5

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2026] [idealworld.group]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,137 @@
+# @h-ai/payment
+
+统一支付模块，支持微信支付、支付宝和 Stripe，提供 Provider 模式的后端支付处理与多端客户端调起能力。
+
+## 支持的 Provider
+
+| Provider | 支付场景                         |
+| -------- | -------------------------------- |
+| 微信支付 | JSAPI / H5 / App / Native (扫码) |
+| 支付宝   | JSAPI / H5 / App / Native        |
+| Stripe   | Checkout Session（国际支付）     |
+
+## 依赖
+
+- `@h-ai/audit` — 审计日志（支付操作自动审计），可选；已初始化时自动写入审计日志
+
+## 快速开始
+
+### Node.js 服务端
+
+```typescript
+import { payment } from '@h-ai/payment'
+
+// 初始化（会自动注册可用的 Provider）
+await payment.init({
+  wechat: { mchId: '...', apiV3Key: '...', serialNo: '...', privateKey: '...', appId: '...' },
+  alipay: { appId: '...', privateKey: '...', alipayPublicKey: '...' },
+})
+
+// 创建订单
+const result = await payment.createOrder('wechat', {
+  orderNo: 'ORD001',
+  amount: 100,
+  description: '测试商品',
+  tradeType: 'jsapi',
+  userId: 'openid-xxx',
+  notifyUrl: 'https://api.example.com/payment/notify/wechat',
+})
+
+// 查询订单
+const query = await payment.queryOrder('wechat', 'ORD001')
+
+await payment.close()
+```
+
+### 浏览器客户端
+
+```typescript
+import { invokePayment } from '@h-ai/payment/client'
+
+// 使用服务端返回的订单数据调起支付
+await invokePayment(orderData)
+```
+
+## API 契约
+
+通过 `@h-ai/payment/api` 导出端点定义，与 `@h-ai/api-client` 和 `@h-ai/kit` 配合使用：
+
+```typescript
+import { paymentEndpoints } from '@h-ai/payment/api'
+```
+
+## 配置
+
+```typescript
+await payment.init({
+  wechat: {
+    mchId: '商户号',
+    apiV3Key: 'API v3 密钥',
+    serialNo: '证书序列号',
+    privateKey: '私钥内容',
+    appId: '应用 ID',
+  },
+  alipay: {
+    appId: '应用 ID',
+    privateKey: '私钥',
+    alipayPublicKey: '支付宝公钥',
+    signType: 'RSA2', // 可选，默认 RSA2
+    sandbox: false, // 可选，默认 false
+  },
+  stripe: {
+    secretKey: 'sk_xxx',
+    webhookSecret: 'whsec_xxx',
+  },
+})
+```
+
+只配置需要的 Provider 即可，未配置的 Provider 不会注册。
+
+## 审计日志
+
+关键支付操作执行成功后会自动写入审计日志（依赖 `@h-ai/audit`），无需额外配置。审计写入失败仅输出 warn 日志，不影响支付操作。
+
+| 操作     | `action`         | 记录内容                                |
+| -------- | ---------------- | --------------------------------------- |
+| 创建订单 | `create_order`   | provider、amount、tradeType             |
+| 支付回调 | `payment_notify` | provider、transactionId、status、amount |
+| 退款     | `refund`         | provider、refundNo、amount              |
+| 关闭订单 | `close_order`    | provider                                |
+
+> 订单查询（`queryOrder`）为只读操作，不写审计日志。
+
+## 错误处理
+
+```typescript
+const result = await payment.createOrder('wechat', orderInput)
+if (!result.success) {
+  switch (result.error.code) {
+    case HaiPaymentError.PROVIDER_NOT_FOUND:
+      // Provider 未注册
+      break
+    case HaiPaymentError.CREATE_ORDER_FAILED:
+      // 创建订单失败
+      break
+  }
+}
+```
+
+常用错误码：
+
+| 错误码                                 | code              | 说明            |
+| -------------------------------------- | ----------------- | --------------- |
+| `HaiPaymentError.CREATE_ORDER_FAILED`  | `hai:payment:001` | 创建订单失败    |
+| `HaiPaymentError.NOT_INITIALIZED`      | `hai:payment:010` | 模块未初始化    |
+| `HaiPaymentError.PROVIDER_NOT_FOUND`   | `hai:payment:030` | Provider 未注册 |
+| `HaiPaymentError.NOTIFY_VERIFY_FAILED` | `hai:payment:050` | 回调验签失败    |
+| `HaiPaymentError.CONFIG_ERROR`         | `hai:payment:070` | 配置无效        |
+
+## 测试
+
+```bash
+pnpm --filter @h-ai/payment test
+```
+
+## License
+
+Apache-2.0

package/dist/api/index.d.ts

@@ -0,0 +1,211 @@
+import { z } from 'zod';
+
+/**
+ * @h-ai/payment/api — 支付 API 契约
+ *
+ * 定义支付相关的 API 端点契约（EndpointDef），
+ * 供服务端 kit.fromContract() 和客户端 api.call() 共享。
+ *
+ * @module payment-api
+ */
+
+/** 创建订单入参 Schema */
+declare const CreatePaymentOrderInputSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        wechat: "wechat";
+        alipay: "alipay";
+        stripe: "stripe";
+    }>;
+    amount: z.ZodNumber;
+    description: z.ZodString;
+    tradeType: z.ZodEnum<{
+        jsapi: "jsapi";
+        h5: "h5";
+        app: "app";
+        native: "native";
+        mini_program: "mini_program";
+    }>;
+    userId: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+/** 创建订单出参 Schema */
+declare const CreatePaymentOrderOutputSchema: z.ZodObject<{
+    provider: z.ZodString;
+    tradeType: z.ZodString;
+    clientParams: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    prepayId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** 查询订单出参 Schema */
+declare const QueryOrderOutputSchema: z.ZodObject<{
+    orderNo: z.ZodString;
+    transactionId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        pending: "pending";
+        paid: "paid";
+        closed: "closed";
+        refunded: "refunded";
+        failed: "failed";
+    }>;
+    amount: z.ZodNumber;
+    paidAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** 退款入参 Schema */
+declare const RefundInputSchema: z.ZodObject<{
+    provider: z.ZodString;
+    orderNo: z.ZodString;
+    refundNo: z.ZodString;
+    amount: z.ZodNumber;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** 退款出参 Schema */
+declare const RefundOutputSchema: z.ZodObject<{
+    refundNo: z.ZodString;
+    refundId: z.ZodString;
+    status: z.ZodEnum<{
+        success: "success";
+        failed: "failed";
+        processing: "processing";
+    }>;
+}, z.core.$strip>;
+type CreatePaymentOrderInput = z.infer<typeof CreatePaymentOrderInputSchema>;
+type CreatePaymentOrderOutput = z.infer<typeof CreatePaymentOrderOutputSchema>;
+type QueryOrderOutput = z.infer<typeof QueryOrderOutputSchema>;
+type RefundInput = z.infer<typeof RefundInputSchema>;
+type RefundOutput = z.infer<typeof RefundOutputSchema>;
+/**
+ * 支付 API 端点契约
+ */
+declare const paymentEndpoints: {
+    /** 创建支付订单 */
+    readonly createOrder: {
+        method: "POST";
+        path: string;
+        input: z.ZodObject<{
+            provider: z.ZodEnum<{
+                wechat: "wechat";
+                alipay: "alipay";
+                stripe: "stripe";
+            }>;
+            amount: z.ZodNumber;
+            description: z.ZodString;
+            tradeType: z.ZodEnum<{
+                jsapi: "jsapi";
+                h5: "h5";
+                app: "app";
+                native: "native";
+                mini_program: "mini_program";
+            }>;
+            userId: z.ZodOptional<z.ZodString>;
+            metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>;
+        output: z.ZodObject<{
+            provider: z.ZodString;
+            tradeType: z.ZodString;
+            clientParams: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            prepayId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        requireAuth: true;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+    /** 查询订单状态 */
+    readonly queryOrder: {
+        method: "GET";
+        path: string;
+        input: z.ZodObject<{
+            orderNo: z.ZodString;
+        }, z.core.$strip>;
+        output: z.ZodObject<{
+            orderNo: z.ZodString;
+            transactionId: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                pending: "pending";
+                paid: "paid";
+                closed: "closed";
+                refunded: "refunded";
+                failed: "failed";
+            }>;
+            amount: z.ZodNumber;
+            paidAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        requireAuth: true;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+    /** 微信支付回调 */
+    readonly notifyWechat: {
+        method: "POST";
+        path: string;
+        input: z.ZodObject<{}, z.core.$strip>;
+        output: z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>;
+        requireAuth: false;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+    /** 支付宝回调 */
+    readonly notifyAlipay: {
+        method: "POST";
+        path: string;
+        input: z.ZodObject<{}, z.core.$strip>;
+        output: z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>;
+        requireAuth: false;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+    /** Stripe Webhook */
+    readonly notifyStripe: {
+        method: "POST";
+        path: string;
+        input: z.ZodObject<{}, z.core.$strip>;
+        output: z.ZodObject<{
+            received: z.ZodBoolean;
+        }, z.core.$strip>;
+        requireAuth: false;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+    /** 发起退款 */
+    readonly refund: {
+        method: "POST";
+        path: string;
+        input: z.ZodObject<{
+            provider: z.ZodString;
+            orderNo: z.ZodString;
+            refundNo: z.ZodString;
+            amount: z.ZodNumber;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        output: z.ZodObject<{
+            refundNo: z.ZodString;
+            refundId: z.ZodString;
+            status: z.ZodEnum<{
+                success: "success";
+                failed: "failed";
+                processing: "processing";
+            }>;
+        }, z.core.$strip>;
+        requireAuth: true;
+        meta: {
+            summary: string;
+            tags: string[];
+        };
+    };
+};
+
+export { type CreatePaymentOrderInput, CreatePaymentOrderInputSchema, type CreatePaymentOrderOutput, CreatePaymentOrderOutputSchema, type QueryOrderOutput, QueryOrderOutputSchema, type RefundInput, RefundInputSchema, type RefundOutput, RefundOutputSchema, paymentEndpoints };

package/dist/api/index.js

@@ -0,0 +1,96 @@
+import { z } from 'zod';
+
+// src/api/payment-api-contract.ts
+var CreatePaymentOrderInputSchema = z.object({
+  provider: z.enum(["wechat", "alipay", "stripe"]),
+  amount: z.number().int().min(1),
+  description: z.string().min(1),
+  tradeType: z.enum(["jsapi", "h5", "app", "native", "mini_program"]),
+  userId: z.string().optional(),
+  metadata: z.record(z.string(), z.string()).optional()
+});
+var CreatePaymentOrderOutputSchema = z.object({
+  provider: z.string(),
+  tradeType: z.string(),
+  clientParams: z.record(z.string(), z.unknown()),
+  prepayId: z.string().optional()
+});
+var QueryOrderOutputSchema = z.object({
+  orderNo: z.string(),
+  transactionId: z.string().optional(),
+  status: z.enum(["pending", "paid", "closed", "refunded", "failed"]),
+  amount: z.number(),
+  paidAt: z.string().optional()
+});
+var RefundInputSchema = z.object({
+  provider: z.string(),
+  orderNo: z.string(),
+  refundNo: z.string(),
+  amount: z.number().int().min(1),
+  reason: z.string().optional()
+});
+var RefundOutputSchema = z.object({
+  refundNo: z.string(),
+  refundId: z.string(),
+  status: z.enum(["processing", "success", "failed"])
+});
+var paymentEndpoints = {
+  /** 创建支付订单 */
+  createOrder: {
+    method: "POST",
+    path: "/payment/create",
+    input: CreatePaymentOrderInputSchema,
+    output: CreatePaymentOrderOutputSchema,
+    requireAuth: true,
+    meta: { summary: "Create payment order", tags: ["payment"] }
+  },
+  /** 查询订单状态 */
+  queryOrder: {
+    method: "GET",
+    path: "/payment/query",
+    input: z.object({ orderNo: z.string() }),
+    output: QueryOrderOutputSchema,
+    requireAuth: true,
+    meta: { summary: "Query order status", tags: ["payment"] }
+  },
+  /** 微信支付回调 */
+  notifyWechat: {
+    method: "POST",
+    path: "/payment/notify/wechat",
+    input: z.object({}),
+    output: z.object({ code: z.string(), message: z.string() }),
+    requireAuth: false,
+    meta: { summary: "Wechat payment notification", tags: ["payment"] }
+  },
+  /** 支付宝回调 */
+  notifyAlipay: {
+    method: "POST",
+    path: "/payment/notify/alipay",
+    input: z.object({}),
+    output: z.object({ code: z.string(), message: z.string() }),
+    requireAuth: false,
+    meta: { summary: "Alipay payment notification", tags: ["payment"] }
+  },
+  /** Stripe Webhook */
+  notifyStripe: {
+    method: "POST",
+    path: "/payment/notify/stripe",
+    input: z.object({}),
+    output: z.object({ received: z.boolean() }),
+    requireAuth: false,
+    meta: { summary: "Stripe webhook", tags: ["payment"] }
+  },
+  /** 发起退款 */
+  refund: {
+    method: "POST",
+    path: "/payment/refund",
+    input: RefundInputSchema,
+    output: RefundOutputSchema,
+    requireAuth: true,
+    meta: { summary: "Request refund", tags: ["payment"] }
+  }
+};
+
+export { CreatePaymentOrderInputSchema, CreatePaymentOrderOutputSchema, QueryOrderOutputSchema, RefundInputSchema, RefundOutputSchema, paymentEndpoints };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/payment-api-contract.ts"],"names":[],"mappings":";;;AAcO,IAAM,6BAAA,GAAgC,EAAE,MAAA,CAAO;AAAA,EACpD,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,QAAA,EAAU,QAAQ,CAAC,CAAA;AAAA,EAC/C,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,IAAI,CAAC,CAAA;AAAA,EAC9B,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC7B,SAAA,EAAW,EAAE,IAAA,CAAK,CAAC,SAAS,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,cAAc,CAAC,CAAA;AAAA,EAClE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA;AAC7C,CAAC;AAGM,IAAM,8BAAA,GAAiC,EAAE,MAAA,CAAO;AAAA,EACrD,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,SAAA,EAAW,EAAE,MAAA,EAAO;AAAA,EACpB,YAAA,EAAc,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,SAAS,CAAA;AAAA,EAC9C,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACvB,CAAC;AAGM,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,OAAA,EAAS,EAAE,MAAA,EAAO;AAAA,EAClB,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACnC,MAAA,EAAQ,EAAE,IAAA,CAAK,CAAC,WAAW,MAAA,EAAQ,QAAA,EAAU,UAAA,EAAY,QAAQ,CAAC,CAAA;AAAA,EAClE,MAAA,EAAQ,EAAE,MAAA,EAAO;AAAA,EACjB,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACrB,CAAC;AAGM,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,OAAA,EAAS,EAAE,MAAA,EAAO;AAAA,EAClB,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,IAAI,CAAC,CAAA;AAAA,EAC9B,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACrB,CAAC;AAGM,IAAM,kBAAA,GAAqB,EAAE,MAAA,CAAO;AAAA,EACzC,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,YAAA,EAAc,SAAA,EAAW,QAAQ,CAAC;AACpD,CAAC;AAwBM,IAAM,gBAAA,GAAmB;AAAA;AAAA,EAE9B,WAAA,EAAa;AAAA,IACX,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,iBAAA;AAAA,IACN,KAAA,EAAO,6BAAA;AAAA,IACP,MAAA,EAAQ,8BAAA;AAAA,IACR,WAAA,EAAa,IAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,wBAAwB,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE,GAC7D;AAAA;AAAA,EAGA,UAAA,EAAY;AAAA,IACV,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,EAAE,MAAA,CAAO,EAAE,SAAS,CAAA,CAAE,MAAA,IAAU,CAAA;AAAA,IACvC,MAAA,EAAQ,sBAAA;AAAA,IACR,WAAA,EAAa,IAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,sBAAsB,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE,GAC3D;AAAA;AAAA,EAGA,YAAA,EAAc;AAAA,IACZ,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,wBAAA;AAAA,IACN,KAAA,EAAO,CAAA,CAAE,MAAA,CAAO,EAAE,CAAA;AAAA,IAClB,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,EAAG,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA;AAAA,IAC1D,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,+BAA+B,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE,GACpE;AAAA;AAAA,EAGA,YAAA,EAAc;AAAA,IACZ,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,wBAAA;AAAA,IACN,KAAA,EAAO,CAAA,CAAE,MAAA,CAAO,EAAE,CAAA;AAAA,IAClB,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,EAAG,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA;AAAA,IAC1D,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,+BAA+B,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE,GACpE;AAAA;AAAA,EAGA,YAAA,EAAc;AAAA,IACZ,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,wBAAA;AAAA,IACN,KAAA,EAAO,CAAA,CAAE,MAAA,CAAO,EAAE,CAAA;AAAA,IAClB,MAAA,EAAQ,EAAE,MAAA,CAAO,EAAE,UAAU,CAAA,CAAE,OAAA,IAAW,CAAA;AAAA,IAC1C,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,kBAAkB,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE,GACvD;AAAA;AAAA,EAGA,MAAA,EAAQ;AAAA,IACN,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,iBAAA;AAAA,IACN,KAAA,EAAO,iBAAA;AAAA,IACP,MAAA,EAAQ,kBAAA;AAAA,IACR,WAAA,EAAa,IAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,kBAAkB,IAAA,EAAM,CAAC,SAAS,CAAA;AAAE;AAEzD","file":"index.js","sourcesContent":["/**\n * @h-ai/payment/api — 支付 API 契约\n *\n * 定义支付相关的 API 端点契约（EndpointDef），\n * 供服务端 kit.fromContract() 和客户端 api.call() 共享。\n *\n * @module payment-api\n */\n\nimport { z } from 'zod'\n\n// ─── Schemas ───\n\n/** 创建订单入参 Schema */\nexport const CreatePaymentOrderInputSchema = z.object({\n  provider: z.enum(['wechat', 'alipay', 'stripe']),\n  amount: z.number().int().min(1),\n  description: z.string().min(1),\n  tradeType: z.enum(['jsapi', 'h5', 'app', 'native', 'mini_program']),\n  userId: z.string().optional(),\n  metadata: z.record(z.string(), z.string()).optional(),\n})\n\n/** 创建订单出参 Schema */\nexport const CreatePaymentOrderOutputSchema = z.object({\n  provider: z.string(),\n  tradeType: z.string(),\n  clientParams: z.record(z.string(), z.unknown()),\n  prepayId: z.string().optional(),\n})\n\n/** 查询订单出参 Schema */\nexport const QueryOrderOutputSchema = z.object({\n  orderNo: z.string(),\n  transactionId: z.string().optional(),\n  status: z.enum(['pending', 'paid', 'closed', 'refunded', 'failed']),\n  amount: z.number(),\n  paidAt: z.string().optional(),\n})\n\n/** 退款入参 Schema */\nexport const RefundInputSchema = z.object({\n  provider: z.string(),\n  orderNo: z.string(),\n  refundNo: z.string(),\n  amount: z.number().int().min(1),\n  reason: z.string().optional(),\n})\n\n/** 退款出参 Schema */\nexport const RefundOutputSchema = z.object({\n  refundNo: z.string(),\n  refundId: z.string(),\n  status: z.enum(['processing', 'success', 'failed']),\n})\n\n// ─── 推导类型 ───\n\nexport type CreatePaymentOrderInput = z.infer<typeof CreatePaymentOrderInputSchema>\nexport type CreatePaymentOrderOutput = z.infer<typeof CreatePaymentOrderOutputSchema>\nexport type QueryOrderOutput = z.infer<typeof QueryOrderOutputSchema>\nexport type RefundInput = z.infer<typeof RefundInputSchema>\nexport type RefundOutput = z.infer<typeof RefundOutputSchema>\n\n// ─── EndpointDef（内联定义，避免循环依赖） ───\n\ninterface EndpointDef<TInput, TOutput> {\n  method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH'\n  path: string\n  input: z.ZodType<TInput>\n  output: z.ZodType<TOutput>\n  requireAuth?: boolean\n  meta?: { summary?: string, tags?: string[] }\n}\n\n/**\n * 支付 API 端点契约\n */\nexport const paymentEndpoints = {\n  /** 创建支付订单 */\n  createOrder: {\n    method: 'POST',\n    path: '/payment/create',\n    input: CreatePaymentOrderInputSchema,\n    output: CreatePaymentOrderOutputSchema,\n    requireAuth: true,\n    meta: { summary: 'Create payment order', tags: ['payment'] },\n  } satisfies EndpointDef<CreatePaymentOrderInput, CreatePaymentOrderOutput>,\n\n  /** 查询订单状态 */\n  queryOrder: {\n    method: 'GET',\n    path: '/payment/query',\n    input: z.object({ orderNo: z.string() }),\n    output: QueryOrderOutputSchema,\n    requireAuth: true,\n    meta: { summary: 'Query order status', tags: ['payment'] },\n  } satisfies EndpointDef<{ orderNo: string }, QueryOrderOutput>,\n\n  /** 微信支付回调 */\n  notifyWechat: {\n    method: 'POST',\n    path: '/payment/notify/wechat',\n    input: z.object({}),\n    output: z.object({ code: z.string(), message: z.string() }),\n    requireAuth: false,\n    meta: { summary: 'Wechat payment notification', tags: ['payment'] },\n  } satisfies EndpointDef<Record<string, never>, { code: string, message: string }>,\n\n  /** 支付宝回调 */\n  notifyAlipay: {\n    method: 'POST',\n    path: '/payment/notify/alipay',\n    input: z.object({}),\n    output: z.object({ code: z.string(), message: z.string() }),\n    requireAuth: false,\n    meta: { summary: 'Alipay payment notification', tags: ['payment'] },\n  } satisfies EndpointDef<Record<string, never>, { code: string, message: string }>,\n\n  /** Stripe Webhook */\n  notifyStripe: {\n    method: 'POST',\n    path: '/payment/notify/stripe',\n    input: z.object({}),\n    output: z.object({ received: z.boolean() }),\n    requireAuth: false,\n    meta: { summary: 'Stripe webhook', tags: ['payment'] },\n  } satisfies EndpointDef<Record<string, never>, { received: boolean }>,\n\n  /** 发起退款 */\n  refund: {\n    method: 'POST',\n    path: '/payment/refund',\n    input: RefundInputSchema,\n    output: RefundOutputSchema,\n    requireAuth: true,\n    meta: { summary: 'Request refund', tags: ['payment'] },\n  } satisfies EndpointDef<RefundInput, RefundOutput>,\n} as const\n"]}