@usethink/cf-core 0.3.0

package/dist/features/payment/providers/alipay.d.ts

@@ -0,0 +1,30 @@
+/**
+ * 支付功能模块 — 支付宝当面付 Provider
+ *
+ * 包含：
+ * - RSA2 签名工具（Web Crypto API，零依赖）
+ * - AlipayProvider 类（当面付：创建二维码、回调验签、查询状态）
+ * - alipayFactory 工厂
+ */
+import type { CreatePaymentInput, CreatePaymentResult, CallbackResult, QueryStatusResult, PaymentProvider, ProviderFactory } from "../types";
+/** RSA2 签名（SHA256withRSA） */
+export declare function signRSA2(params: Record<string, string>, privateKeyPem: string): Promise<string>;
+/** RSA2 验签 */
+export declare function verifyRSA2(params: Record<string, string>, publicKeyPem: string): Promise<boolean>;
+export interface AlipayConfig {
+    appId: string;
+    privateKey: string;
+    alipayPublicKey: string;
+}
+export declare class AlipayProvider implements PaymentProvider {
+    private readonly config;
+    readonly name = "alipay";
+    readonly displayName = "\u652F\u4ED8\u5B9D\u5F53\u9762\u4ED8";
+    readonly supportedCurrencies: string[];
+    constructor(config: AlipayConfig);
+    createPayment(input: CreatePaymentInput): Promise<CreatePaymentResult>;
+    verifyCallback(params: Record<string, string>): Promise<CallbackResult>;
+    queryStatus(orderNo: string): Promise<QueryStatusResult>;
+}
+export declare const alipayFactory: ProviderFactory;
+//# sourceMappingURL=alipay.d.ts.map

package/dist/features/payment/providers/alipay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alipay.d.ts","sourceRoot":"","sources":["../../../../features/payment/providers/alipay.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,eAAe,EAChB,MAAM,UAAU,CAAC;AAgDlB,6BAA6B;AAC7B,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrG;AAED,cAAc;AACd,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKvG;AAMD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,cAAe,YAAW,eAAe;IAKxC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,QAAQ,CAAC,IAAI,YAAY;IACzB,QAAQ,CAAC,WAAW,0CAAY;IAChC,QAAQ,CAAC,mBAAmB,WAAW;gBAEV,MAAM,EAAE,YAAY;IAE3C,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4BtE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAWvE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAkB/D;AAMD,eAAO,MAAM,aAAa,EAAE,eAW3B,CAAC"}

package/dist/features/payment/providers/alipay.js

@@ -0,0 +1,149 @@
+/**
+ * 支付功能模块 — 支付宝当面付 Provider
+ *
+ * 包含：
+ * - RSA2 签名工具（Web Crypto API，零依赖）
+ * - AlipayProvider 类（当面付：创建二维码、回调验签、查询状态）
+ * - alipayFactory 工厂
+ */
+import { fetchWithRetry } from "../fetch-utils";
+// ═══════════════════════════════════════════════════════════════════════════════
+// RSA2 签名工具（Web Crypto API，零依赖）
+// ═══════════════════════════════════════════════════════════════════════════════
+const encoder = new TextEncoder();
+function buildSignString(params) {
+    return Object.keys(params)
+        .filter((k) => k !== "sign" && k !== "sign_type" && params[k] !== "" && params[k] !== undefined)
+        .sort()
+        .map((k) => `${k}=${params[k]}`)
+        .join("&");
+}
+function base64ToUint8Array(base64) {
+    const s = atob(base64);
+    const bytes = new Uint8Array(s.length);
+    for (let i = 0; i < s.length; i++)
+        bytes[i] = s.charCodeAt(i);
+    return bytes;
+}
+function uint8ArrayToBase64(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.length; i++)
+        binary += String.fromCharCode(bytes[i]);
+    return btoa(binary);
+}
+async function importPrivateKey(pem) {
+    const body = pem.replace(/-----BEGIN\s+(RSA\s+)?PRIVATE\s+KEY-----/g, "").replace(/-----END\s+(RSA\s+)?PRIVATE\s+KEY-----/g, "").replace(/\s+/g, "");
+    const der = base64ToUint8Array(body);
+    try {
+        return await crypto.subtle.importKey("pkcs8", der, { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, false, ["sign"]);
+    }
+    catch {
+        const header = [0x30, 0x82, 0x01, 0x22, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01, 0x05, 0x00, 0x04, 0x82, 0x01, 0x0f];
+        const pkcs8 = new Uint8Array(header.length + der.length);
+        pkcs8.set(header);
+        pkcs8.set(der, header.length);
+        return await crypto.subtle.importKey("pkcs8", pkcs8, { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, false, ["sign"]);
+    }
+}
+async function importPublicKey(pem) {
+    const body = pem.replace(/-----BEGIN\s+(RSA\s+)?PUBLIC\s+KEY-----/g, "").replace(/-----END\s+(RSA\s+)?PUBLIC\s+KEY-----/g, "").replace(/\s+/g, "");
+    return await crypto.subtle.importKey("spki", base64ToUint8Array(body), { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, false, ["verify"]);
+}
+/** RSA2 签名（SHA256withRSA） */
+export async function signRSA2(params, privateKeyPem) {
+    const key = await importPrivateKey(privateKeyPem);
+    const sig = await crypto.subtle.sign("RSASSA-PKCS1-v1_5", key, encoder.encode(buildSignString(params)));
+    return uint8ArrayToBase64(new Uint8Array(sig));
+}
+/** RSA2 验签 */
+export async function verifyRSA2(params, publicKeyPem) {
+    const sign = params["sign"];
+    if (!sign)
+        return false;
+    const key = await importPublicKey(publicKeyPem);
+    return crypto.subtle.verify("RSASSA-PKCS1-v1_5", key, base64ToUint8Array(sign), encoder.encode(buildSignString(params)));
+}
+export class AlipayProvider {
+    config;
+    name = "alipay";
+    displayName = "支付宝当面付";
+    supportedCurrencies = ["CNY"];
+    constructor(config) {
+        this.config = config;
+    }
+    async createPayment(input) {
+        const bizContent = JSON.stringify({
+            out_trade_no: input.orderNo,
+            total_amount: (input.amountCents / 100).toFixed(2),
+            subject: input.metadata?.subject || input.description || "商品购买",
+        });
+        const timestamp = new Date().toISOString().replace("T", " ").substring(0, 19);
+        const params = {
+            app_id: this.config.appId, method: "alipay.trade.precreate", charset: "utf-8",
+            sign_type: "RSA2", timestamp, version: "1.0", notify_url: input.notifyUrl, biz_content: bizContent,
+        };
+        params.sign = await signRSA2(params, this.config.privateKey);
+        const resp = await fetchWithRetry("https://openapi.alipay.com/gateway.do", {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded;charset=utf-8" },
+            body: new URLSearchParams(params).toString(),
+            timeoutMs: 10_000,
+            retries: 2,
+        });
+        if (!resp.ok)
+            throw new Error(`Alipay API HTTP error: ${resp.status}`);
+        const data = await resp.json();
+        const result = data.alipay_trade_precreate_response;
+        if (!result || result.code !== "10000")
+            throw new Error(`Alipay precreate failed: ${result?.sub_msg || result?.msg || "unknown"}`);
+        return { qrCode: result.qr_code || "" };
+    }
+    async verifyCallback(params) {
+        if (!(await verifyRSA2(params, this.config.alipayPublicKey)))
+            throw new Error("Alipay callback signature invalid");
+        if (params.app_id !== this.config.appId)
+            throw new Error("Alipay callback app_id mismatch");
+        if (params.trade_status !== "TRADE_SUCCESS")
+            throw new Error(`Unexpected trade_status: ${params.trade_status}`);
+        return {
+            orderNo: params.out_trade_no, providerTradeNo: params.trade_no,
+            amountCents: Math.round(parseFloat(params.total_amount || "0") * 100),
+            currency: "CNY", paidAt: params.gmt_payment || new Date().toISOString(),
+        };
+    }
+    async queryStatus(orderNo) {
+        const timestamp = new Date().toISOString().replace("T", " ").substring(0, 19);
+        const params = {
+            app_id: this.config.appId, method: "alipay.trade.query", charset: "utf-8",
+            sign_type: "RSA2", timestamp, version: "1.0", biz_content: JSON.stringify({ out_trade_no: orderNo }),
+        };
+        params.sign = await signRSA2(params, this.config.privateKey);
+        const resp = await fetchWithRetry("https://openapi.alipay.com/gateway.do", {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded;charset=utf-8" },
+            body: new URLSearchParams(params).toString(),
+            timeoutMs: 10_000,
+            retries: 2,
+        });
+        if (!resp.ok)
+            throw new Error(`Alipay API HTTP error: ${resp.status}`);
+        const data = await resp.json();
+        return { paid: data.alipay_trade_query_response?.trade_status === "TRADE_SUCCESS" };
+    }
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// 支付宝工厂
+// ═══════════════════════════════════════════════════════════════════════════════
+export const alipayFactory = {
+    name: "alipay",
+    priority: 100,
+    isAvailable(env) { return !!(env.ALIPAY_APP_ID && env.ALIPAY_PRIVATE_KEY && env.ALIPAY_PUBLIC_KEY); },
+    create(env) {
+        return new AlipayProvider({
+            appId: env.ALIPAY_APP_ID,
+            privateKey: env.ALIPAY_PRIVATE_KEY,
+            alipayPublicKey: env.ALIPAY_PUBLIC_KEY,
+        });
+    },
+};
+//# sourceMappingURL=alipay.js.map

package/dist/features/payment/providers/alipay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alipay.js","sourceRoot":"","sources":["../../../../features/payment/providers/alipay.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,kFAAkF;AAClF,gCAAgC;AAChC,kFAAkF;AAElF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,eAAe,CAAC,MAA8B;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SAC/F,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiB;IAC3C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrJ,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAG,CAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACpI,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACxH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnJ,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5I,CAAC;AAED,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAA8B,EAAE,aAAqB;IAClF,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxG,OAAO,kBAAkB,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,cAAc;AACd,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAA8B,EAAE,YAAoB;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3H,CAAC;AAYD,MAAM,OAAO,cAAc;IAKI;IAJpB,IAAI,GAAG,QAAQ,CAAC;IAChB,WAAW,GAAG,QAAQ,CAAC;IACvB,mBAAmB,GAAG,CAAC,KAAK,CAAC,CAAC;IAEvC,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,YAAY,EAAE,KAAK,CAAC,OAAO;YAC3B,YAAY,EAAE,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM;SAChE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAA2B;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,OAAO;YAC7E,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU;SACnG,CAAC;QACF,MAAM,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,uCAAuC,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,iDAAiD,EAAE;YAC9E,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;YAC5C,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA+G,CAAC;QAC5I,MAAM,MAAM,GAAG,IAAI,CAAC,+BAA+B,CAAC;QACpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QACnI,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA8B;QACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,YAAY,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAChH,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ;YAC9D,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC;YACrE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAA2B;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO;YACzE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;SACrG,CAAC;QACF,MAAM,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,uCAAuC,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,iDAAiD,EAAE;YAC9E,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;YAC5C,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAiE,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,2BAA2B,EAAE,YAAY,KAAK,eAAe,EAAE,CAAC;IACtF,CAAC;CACF;AAED,kFAAkF;AAClF,QAAQ;AACR,kFAAkF;AAElF,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,GAAG;IACb,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG;QACR,OAAO,IAAI,cAAc,CAAC;YACxB,KAAK,EAAE,GAAG,CAAC,aAAuB;YAClC,UAAU,EAAE,GAAG,CAAC,kBAA4B;YAC5C,eAAe,EAAE,GAAG,CAAC,iBAA2B;SACjD,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/features/payment/providers/stripe.d.ts

@@ -0,0 +1,34 @@
+/**
+ * 支付功能模块 — Stripe Provider
+ *
+ * 包含：
+ * - Stripe Checkout Sessions（单次支付）
+ * - Webhook 签名验证（HMAC-SHA256）
+ * - stripeFactory 工厂
+ */
+import type { CreatePaymentInput, CreatePaymentResult, CallbackResult, QueryStatusResult, PaymentProvider, ProviderFactory } from "../types";
+export declare class StripeProvider implements PaymentProvider {
+    private readonly secretKey;
+    private readonly webhookSecret;
+    readonly name = "stripe";
+    readonly displayName = "Stripe";
+    readonly supportedCurrencies: string[];
+    constructor(secretKey: string, webhookSecret: string);
+    /**
+     * 创建 Stripe Checkout Session。
+     *
+     * 使用 URLSearchParams（非 stripe-node SDK）构建请求，
+     * 兼容 Workers 环境（无 Node.js 内置模块）。
+     */
+    createPayment(input: CreatePaymentInput): Promise<CreatePaymentResult>;
+    /**
+     * 验证 Stripe webhook 回调。
+     *
+     * 路由层需传递 _raw_body（原始请求体）和 _stripe_signature（Stripe-Signature 头）。
+     */
+    verifyCallback(params: Record<string, string>): Promise<CallbackResult>;
+    /** 查询 Checkout Session 支付状态 */
+    queryStatus(tradeNo: string): Promise<QueryStatusResult>;
+}
+export declare const stripeFactory: ProviderFactory;
+//# sourceMappingURL=stripe.d.ts.map

package/dist/features/payment/providers/stripe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.d.ts","sourceRoot":"","sources":["../../../../features/payment/providers/stripe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,eAAe,EAChB,MAAM,UAAU,CAAC;AA0DlB,qBAAa,cAAe,YAAW,eAAe;IAMlD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IANhC,QAAQ,CAAC,IAAI,YAAY;IACzB,QAAQ,CAAC,WAAW,YAAY;IAChC,QAAQ,CAAC,mBAAmB,WAA8C;gBAGvD,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM;IAGxC;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqC5E;;;;OAIG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA6B7E,+BAA+B;IACzB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAa/D;AAMD,eAAO,MAAM,aAAa,EAAE,eAU3B,CAAC"}

package/dist/features/payment/providers/stripe.js

@@ -0,0 +1,168 @@
+/**
+ * 支付功能模块 — Stripe Provider
+ *
+ * 包含：
+ * - Stripe Checkout Sessions（单次支付）
+ * - Webhook 签名验证（HMAC-SHA256）
+ * - stripeFactory 工厂
+ */
+import { fetchWithRetry } from "../fetch-utils";
+// ═══════════════════════════════════════════════════════════════════════════════
+// Stripe API 常量
+// ═══════════════════════════════════════════════════════════════════════════════
+const STRIPE_API_BASE = "https://api.stripe.com/v1";
+/**
+ * 验证 Stripe webhook 签名（HMAC-SHA256）。
+ *
+ * Stripe webhook 签名机制：
+ * - 每个 webhook 请求携带 Stripe-Signature 头
+ * - 格式: t=timestamp,v1=signature
+ * - 签名 = HMAC-SHA256(webhookSecret, timestamp.rawBody)
+ *
+ * 参考 https://docs.stripe.com/webhooks/signatures
+ */
+async function verifyStripeSignature(payload, sigHeader, webhookSecret) {
+    const parts = sigHeader.split(",");
+    let timestamp = "";
+    let signature = "";
+    for (const part of parts) {
+        const [key, value] = part.split("=");
+        if (key === "t")
+            timestamp = value;
+        if (key === "v1")
+            signature = value;
+    }
+    if (!timestamp || !signature)
+        return false;
+    // 时间戳偏差校验（±5 分钟，防止重放攻击）
+    const sigTime = parseInt(timestamp, 10) * 1000;
+    if (isNaN(sigTime) || Math.abs(Date.now() - sigTime) > 5 * 60 * 1000)
+        return false;
+    // HMAC-SHA256(webhookSecret, timestamp.payload)
+    const encoder = new TextEncoder();
+    const signedPayload = `${timestamp}.${payload}`;
+    const key = await crypto.subtle.importKey("raw", encoder.encode(webhookSecret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"]);
+    const signatureBytes = new Uint8Array(signature.match(/.{1,2}/g)?.map((b) => parseInt(b, 16)) ?? []);
+    return crypto.subtle.verify("HMAC", key, signatureBytes, encoder.encode(signedPayload));
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// StripeProvider — 国际信用卡支付
+// ═══════════════════════════════════════════════════════════════════════════════
+export class StripeProvider {
+    secretKey;
+    webhookSecret;
+    name = "stripe";
+    displayName = "Stripe";
+    supportedCurrencies = ["USD", "EUR", "GBP", "CAD", "AUD", "JPY"];
+    constructor(secretKey, webhookSecret) {
+        this.secretKey = secretKey;
+        this.webhookSecret = webhookSecret;
+    }
+    /**
+     * 创建 Stripe Checkout Session。
+     *
+     * 使用 URLSearchParams（非 stripe-node SDK）构建请求，
+     * 兼容 Workers 环境（无 Node.js 内置模块）。
+     */
+    async createPayment(input) {
+        const origin = (() => {
+            try {
+                return new URL(input.notifyUrl).origin;
+            }
+            catch {
+                return "https://localhost";
+            }
+        })();
+        const params = new URLSearchParams({
+            mode: "payment",
+            "line_items[0][price_data][currency]": input.currency.toLowerCase(),
+            "line_items[0][price_data][product_data][name]": input.metadata?.subject || "商品购买",
+            "line_items[0][price_data][unit_amount]": String(input.amountCents),
+            "line_items[0][quantity]": "1",
+            "metadata[order_no]": input.orderNo,
+            success_url: `${origin}/lookup?session_id={CHECKOUT_SESSION_ID}`,
+            cancel_url: `${origin}/shop`,
+        });
+        if (input.returnUrl)
+            params.set("success_url", input.returnUrl);
+        if (input.notifyUrl)
+            params.set("metadata[notify_url]", input.notifyUrl);
+        const resp = await fetchWithRetry(`${STRIPE_API_BASE}/checkout/sessions`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${this.secretKey}`,
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: params.toString(),
+            timeoutMs: 10_000,
+            retries: 2,
+        });
+        if (!resp.ok) {
+            const errorBody = await resp.text();
+            throw new Error(`Stripe API error: ${resp.status} - ${errorBody}`);
+        }
+        const session = (await resp.json());
+        if (!session.url)
+            throw new Error("Stripe returned no checkout URL");
+        return { redirectUrl: session.url, providerTradeNo: session.id };
+    }
+    /**
+     * 验证 Stripe webhook 回调。
+     *
+     * 路由层需传递 _raw_body（原始请求体）和 _stripe_signature（Stripe-Signature 头）。
+     */
+    async verifyCallback(params) {
+        const rawPayload = params["_raw_body"];
+        const sigHeader = params["_stripe_signature"];
+        if (!rawPayload || !sigHeader) {
+            throw new Error("Stripe callback missing signature headers");
+        }
+        if (!(await verifyStripeSignature(rawPayload, sigHeader, this.webhookSecret))) {
+            throw new Error("Stripe webhook signature invalid");
+        }
+        const event = JSON.parse(rawPayload);
+        if (event.type !== "checkout.session.completed") {
+            throw new Error(`Unexpected Stripe event type: ${event.type}`);
+        }
+        const session = event.data?.object;
+        if (!session)
+            throw new Error("Stripe event missing session object");
+        const orderNo = session.metadata?.order_no;
+        if (!orderNo)
+            throw new Error("Stripe session missing order_no metadata");
+        return {
+            orderNo,
+            providerTradeNo: session.payment_intent || session.id || "",
+            amountCents: session.amount_total || 0,
+            currency: (session.currency || "usd").toUpperCase(),
+            paidAt: new Date().toISOString(),
+        };
+    }
+    /** 查询 Checkout Session 支付状态 */
+    async queryStatus(tradeNo) {
+        const resp = await fetchWithRetry(`${STRIPE_API_BASE}/checkout/sessions/${tradeNo}`, {
+            headers: { Authorization: `Bearer ${this.secretKey}` },
+            timeoutMs: 8_000,
+            retries: 2,
+        });
+        if (!resp.ok)
+            return { paid: false };
+        const session = (await resp.json());
+        return {
+            paid: session.payment_status === "paid",
+            providerTradeNo: session.payment_intent,
+        };
+    }
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// Stripe 工厂
+// ═══════════════════════════════════════════════════════════════════════════════
+export const stripeFactory = {
+    name: "stripe",
+    priority: 200,
+    isAvailable(env) { return !!(env.STRIPE_SECRET_KEY && env.STRIPE_WEBHOOK_SECRET); },
+    create(env) {
+        return new StripeProvider(env.STRIPE_SECRET_KEY, env.STRIPE_WEBHOOK_SECRET);
+    },
+};
+//# sourceMappingURL=stripe.js.map

package/dist/features/payment/providers/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../../../features/payment/providers/stripe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,kFAAkF;AAClF,gBAAgB;AAChB,kFAAkF;AAElF,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,SAAiB,EACjB,aAAqB;IAErB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS,GAAG,KAAK,CAAC;QACnC,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,GAAG,KAAK,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE3C,wBAAwB;IACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAEnF,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACnC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAC9D,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,kFAAkF;AAClF,2BAA2B;AAC3B,kFAAkF;AAElF,MAAM,OAAO,cAAc;IAMN;IACA;IANV,IAAI,GAAG,QAAQ,CAAC;IAChB,WAAW,GAAG,QAAQ,CAAC;IACvB,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAE1E,YACmB,SAAiB,EACjB,aAAqB;QADrB,cAAS,GAAT,SAAS,CAAQ;QACjB,kBAAa,GAAb,aAAa,CAAQ;IACrC,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,CAAC;gBAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,mBAAmB,CAAC;YAAC,CAAC;QACvF,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI,EAAE,SAAS;YACf,qCAAqC,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;YACnE,+CAA+C,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,MAAM;YAClF,wCAAwC,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;YACnE,yBAAyB,EAAE,GAAG;YAC9B,oBAAoB,EAAE,KAAK,CAAC,OAAO;YACnC,WAAW,EAAE,GAAG,MAAM,0CAA0C;YAChE,UAAU,EAAE,GAAG,MAAM,OAAO;SAC7B,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,eAAe,oBAAoB,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBACzC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;YACvB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAiC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,MAA8B;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAGlC,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1E,OAAO;YACL,OAAO;YACP,eAAe,EAAE,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE;YAC3D,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YACtC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;YACnD,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjC,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,eAAe,sBAAsB,OAAO,EAAE,EAAE;YACnF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE;YACtD,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAyD,CAAC;QAC5F,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,cAAc,KAAK,MAAM;YACvC,eAAe,EAAE,OAAO,CAAC,cAAc;SACxC,CAAC;IACJ,CAAC;CACF;AAED,kFAAkF;AAClF,YAAY;AACZ,kFAAkF;AAElF,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,GAAG;IACb,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG;QACR,OAAO,IAAI,cAAc,CACvB,GAAG,CAAC,iBAA2B,EAC/B,GAAG,CAAC,qBAA+B,CACpC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/features/payment/providers/trc20.d.ts

@@ -0,0 +1,24 @@
+/**
+ * 支付功能模块 — USDT/TRC20 Provider
+ *
+ * 使用单地址 + Memo 模式区分不同订单：
+ * - createPayment：返回收款地址 + 金额 + Memo，用户手动转账
+ * - queryStatus：通过 TronGrid API 查询链上交易匹配
+ * - verifyCallback：始终抛错（TRC20 无官方 webhook，使用轮询替代）
+ */
+import type { CreatePaymentInput, CreatePaymentResult, CallbackResult, QueryStatusResult, PaymentProvider, ProviderFactory } from "../types";
+export declare class Trc20Provider implements PaymentProvider {
+    private readonly walletAddress;
+    private readonly tronGridApiKey;
+    readonly name = "usdt_trc20";
+    readonly displayName = "USDT (TRC20)";
+    readonly supportedCurrencies: string[];
+    constructor(walletAddress: string, tronGridApiKey: string);
+    createPayment(input: CreatePaymentInput): Promise<CreatePaymentResult>;
+    /** TRC20 无 webhook 回调，通过轮询完成确认 */
+    verifyCallback(_params: Record<string, string>): Promise<CallbackResult>;
+    /** 通过 TronGrid API 查询链上确认 */
+    queryStatus(tradeNo: string): Promise<QueryStatusResult>;
+}
+export declare const trc20Factory: ProviderFactory;
+//# sourceMappingURL=trc20.d.ts.map

package/dist/features/payment/providers/trc20.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trc20.d.ts","sourceRoot":"","sources":["../../../../features/payment/providers/trc20.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,eAAe,EAChB,MAAM,UAAU,CAAC;AAmBlB,qBAAa,aAAc,YAAW,eAAe;IAMjD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IANjC,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,kBAAkB;IACtC,QAAQ,CAAC,mBAAmB,WAAY;gBAGrB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM;IAGnC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkB5E,kCAAkC;IAC5B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAI9E,6BAA6B;IACvB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA6B/D;AAMD,eAAO,MAAM,YAAY,EAAE,eAU1B,CAAC"}

package/dist/features/payment/providers/trc20.js

@@ -0,0 +1,96 @@
+/**
+ * 支付功能模块 — USDT/TRC20 Provider
+ *
+ * 使用单地址 + Memo 模式区分不同订单：
+ * - createPayment：返回收款地址 + 金额 + Memo，用户手动转账
+ * - queryStatus：通过 TronGrid API 查询链上交易匹配
+ * - verifyCallback：始终抛错（TRC20 无官方 webhook，使用轮询替代）
+ */
+import { fetchWithRetry } from "../fetch-utils";
+// ═══════════════════════════════════════════════════════════════════════════════
+// 工具函数
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * 生成 8 位数字参考号（用于 Memo 字段区分不同订单）。
+ * 纯数字以确保最大兼容性（部分钱包 Memo 只支持纯数字）。
+ */
+function generateMemo(orderNo) {
+    return orderNo.replace(/\D/g, "").slice(-8).padStart(8, "0");
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// Trc20Provider — USDT/TRC20 零资质全球加密支付
+// ═══════════════════════════════════════════════════════════════════════════════
+export class Trc20Provider {
+    walletAddress;
+    tronGridApiKey;
+    name = "usdt_trc20";
+    displayName = "USDT (TRC20)";
+    supportedCurrencies = ["USDT"];
+    constructor(walletAddress, tronGridApiKey) {
+        this.walletAddress = walletAddress;
+        this.tronGridApiKey = tronGridApiKey;
+    }
+    async createPayment(input) {
+        const amount = (input.amountCents / 100).toFixed(6);
+        const memo = generateMemo(input.orderNo);
+        return {
+            raw: {
+                address: this.walletAddress,
+                amount,
+                memo,
+                network: "TRC20",
+                warnings: [
+                    "仅支持 TRC20 协议（Tron 网络）的 USDT",
+                    "请确认收款地址正确，且填写准确的 Memo 参考号",
+                    "建议等待 19 次确认以上（约 60 秒）",
+                ],
+            },
+        };
+    }
+    /** TRC20 无 webhook 回调，通过轮询完成确认 */
+    async verifyCallback(_params) {
+        throw new Error("USDT_TRC20 does not support HTTP callbacks; use polling");
+    }
+    /** 通过 TronGrid API 查询链上确认 */
+    async queryStatus(tradeNo) {
+        const memo = generateMemo(tradeNo);
+        const url = `https://api.trongrid.io/v1/accounts/${this.walletAddress}/transactions/trc20`;
+        const params = new URLSearchParams({
+            limit: "30",
+            contract_address: "TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t", // USDT TRC20 合约
+            only_to: "true",
+            order_by: "block_timestamp,desc",
+        });
+        const resp = await fetchWithRetry(`${url}?${params.toString()}`, {
+            headers: { Accept: "application/json", "TRON-PRO-API-KEY": this.tronGridApiKey },
+            timeoutMs: 10_000,
+            retries: 2,
+        });
+        if (!resp.ok)
+            return { paid: false };
+        const data = (await resp.json());
+        const txs = data.data || [];
+        if (txs.length === 0)
+            return { paid: false };
+        // 金额近似匹配（TronGrid 免费 API 不返回 Memo 字段）
+        for (const tx of txs) {
+            const decimals = tx.token_info?.decimals ?? 6;
+            const amount = parseFloat(tx.value || "0") / Math.pow(10, decimals);
+            if (amount > 0)
+                return { paid: true, providerTradeNo: tx.transaction_id };
+        }
+        return { paid: false };
+    }
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// TRC20 工厂
+// ═══════════════════════════════════════════════════════════════════════════════
+export const trc20Factory = {
+    name: "usdt_trc20",
+    priority: 300,
+    isAvailable(env) { return !!(env.TRC20_WALLET_ADDRESS && env.TRONGRID_API_KEY); },
+    create(env) {
+        return new Trc20Provider(env.TRC20_WALLET_ADDRESS, env.TRONGRID_API_KEY);
+    },
+};
+//# sourceMappingURL=trc20.js.map

package/dist/features/payment/providers/trc20.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trc20.js","sourceRoot":"","sources":["../../../../features/payment/providers/trc20.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,kFAAkF;AAClF,OAAO;AACP,kFAAkF;AAElF;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,kFAAkF;AAClF,uCAAuC;AACvC,kFAAkF;AAElF,MAAM,OAAO,aAAa;IAML;IACA;IANV,IAAI,GAAG,YAAY,CAAC;IACpB,WAAW,GAAG,cAAc,CAAC;IAC7B,mBAAmB,GAAG,CAAC,MAAM,CAAC,CAAC;IAExC,YACmB,aAAqB,EACrB,cAAsB;QADtB,kBAAa,GAAb,aAAa,CAAQ;QACrB,mBAAc,GAAd,cAAc,CAAQ;IACtC,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO;YACL,GAAG,EAAE;gBACH,OAAO,EAAE,IAAI,CAAC,aAAa;gBAC3B,MAAM;gBACN,IAAI;gBACJ,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE;oBACR,6BAA6B;oBAC7B,2BAA2B;oBAC3B,uBAAuB;iBACxB;aACF;SACF,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,cAAc,CAAC,OAA+B;QAClD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,uCAAuC,IAAI,CAAC,aAAa,qBAAqB,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,KAAK,EAAE,IAAI;YACX,gBAAgB,EAAE,oCAAoC,EAAE,gBAAgB;YACxE,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;YAC/D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,IAAI,CAAC,cAAc,EAAE;YAChF,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAE9B,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAE7C,sCAAsC;QACtC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ,IAAI,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAED,kFAAkF;AAClF,WAAW;AACX,kFAAkF;AAElF,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,GAAG;IACb,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG;QACR,OAAO,IAAI,aAAa,CACtB,GAAG,CAAC,oBAA8B,EAClC,GAAG,CAAC,gBAA0B,CAC/B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/features/payment/registry.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 支付功能模块 — Provider 注册表
+ *
+ * per-request 工厂模式：根据 env 中配置的凭证，自动实例化已配置的渠道。
+ * 支持从 DB 加载加密配置（通过 dbConfigs 参数），数据库中的配置优先于环境变量。
+ * 优先级由调用方传入 factory 数组的顺序决定。
+ *
+ * @example
+ * ```ts
+ * import { createProviderRegistry, stripeFactory, alipayFactory } from "@usethink/cf-core/features/payment";
+ *
+ * // 纯环境变量模式（向后兼容）
+ * const registry = createProviderRegistry(env, [stripeFactory, alipayFactory]);
+ *
+ * // 混合模式：DB 配置优先于 env var
+ * const registry = createProviderRegistry(env, factories, dbConfigs);
+ * const provider = registry.selectOnline();
+ * ```
+ */
+import type { ProviderFactory, ProviderRegistry } from "./types";
+/** DB 加密支付配置的扁平键值对结构 */
+export interface DbProviderConfig {
+    /** 是否启用 */
+    enabled: boolean;
+    /** 配置项键值对（如 { ZPAY_PID: "xxx", ZPAY_KEY: "xxx" }） */
+    config: Record<string, unknown>;
+}
+/**
+ * 从数据库解密后的支付配置映射。
+ * key = provider 名称（如 "zpay", "alipay"），value = 解密后的完整配置
+ */
+export type DbProviderConfigMap = Record<string, DbProviderConfig>;
+/**
+ * 创建 per-request 的 Provider 注册表。
+ *
+ * 配置加载优先级（高到低）：
+ * 1. dbConfigs[factory.name].config — 数据库中的支付配置（解密后）
+ * 2. env — 环境变量（兜底）
+ *
+ * 当 dbConfigs 存在且 enabled=true 时，DB 配置覆盖 env 中同名的键。
+ */
+export declare function createProviderRegistry(env: Record<string, unknown>, factories: ProviderFactory[], dbConfigs?: DbProviderConfigMap): ProviderRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/features/payment/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../features/payment/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAmB,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAElF,wBAAwB;AACxB,MAAM,WAAW,gBAAgB;IAC/B,WAAW;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAEnE;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,SAAS,EAAE,eAAe,EAAE,EAC5B,SAAS,CAAC,EAAE,mBAAmB,GAC9B,gBAAgB,CAqClB"}