@vobs/payment 0.3.0 → 1.2.0

package/dist/wechat/index.js

@@ -0,0 +1,602 @@
+import { Wechatpay, Formatter, Rsa, Aes } from 'wechatpay-axios-plugin';
+
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// packages/payment/src/wechat/config.ts
+var _WechatConfig = class _WechatConfig {
+  constructor(options) {
+    this.validate(options);
+    this._options = { ...options };
+  }
+  /** 获取完整配置 */
+  get options() {
+    return this._options;
+  }
+  /** 商户号 */
+  get mchid() {
+    return this._options.mchid;
+  }
+  /** 应用 ID（公众号 / 小程序 / APP） */
+  get appid() {
+    return this._options.appid;
+  }
+  /** 商户 API 证书序列号 */
+  get serial() {
+    return this._options.serial;
+  }
+  /** APIv3 密钥（回调解密用） */
+  get apiv3Key() {
+    return this._options.apiv3Key;
+  }
+  /** 异步通知地址 */
+  get notifyUrl() {
+    return this._options.notifyUrl;
+  }
+  /** 更新配置（部分更新） */
+  update(patch) {
+    const merged = { ...this._options, ...patch };
+    this.validate(merged);
+    this._options = merged;
+  }
+  /** 替换配置 */
+  replace(options) {
+    this.validate(options);
+    this._options = { ...options };
+  }
+  validate(options) {
+    if (!options.mchid) {
+      throw new Error("WechatConfig: mchid \u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (!options.serial) {
+      throw new Error("WechatConfig: serial\uFF08\u5546\u6237 API \u8BC1\u4E66\u5E8F\u5217\u53F7\uFF09\u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (!options.privateKey) {
+      throw new Error("WechatConfig: privateKey\uFF08\u5546\u6237 API \u79C1\u94A5 PEM\uFF09\u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (!options.certs || Object.keys(options.certs).length === 0) {
+      throw new Error("WechatConfig: certs\uFF08\u5E73\u53F0\u8BC1\u4E66/\u5FAE\u4FE1\u652F\u4ED8\u516C\u94A5 {\u5E8F\u5217\u53F7: PEM}\uFF09\u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (!options.appid) {
+      throw new Error("WechatConfig: appid \u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (!options.apiv3Key) {
+      throw new Error("WechatConfig: apiv3Key \u4E0D\u80FD\u4E3A\u7A7A");
+    }
+    if (options.apiv3Key.length !== 32) {
+      throw new Error("WechatConfig: apiv3Key \u5FC5\u987B\u4E3A 32 \u5B57\u8282\u5B57\u7B26\u4E32");
+    }
+  }
+};
+__name(_WechatConfig, "WechatConfig");
+var WechatConfig = _WechatConfig;
+
+// packages/payment/src/wechat/client.ts
+var _WechatClient = class _WechatClient {
+  constructor(options) {
+    this._disposed = false;
+    this.config = new WechatConfig(options);
+    this._sdk = this.createSdk(options);
+  }
+  /** 获取底层 Wechatpay 实例（链式 API：client.sdk.v3.pay.transactions.jsapi.post(...)） */
+  get sdk() {
+    this.ensureActive();
+    return this._sdk;
+  }
+  /** 更新配置并重建 SDK 实例 */
+  updateConfig(patch) {
+    this.ensureActive();
+    this.config.update(patch);
+    this._sdk = this.createSdk(this.config.options);
+  }
+  /** 销毁客户端 */
+  dispose() {
+    this._disposed = true;
+    this._sdk = null;
+  }
+  createSdk(options) {
+    return new Wechatpay({
+      mchid: options.mchid,
+      serial: options.serial,
+      privateKey: options.privateKey,
+      certs: options.certs,
+      timeout: options.timeout ?? 5e3
+    });
+  }
+  ensureActive() {
+    if (this._disposed) {
+      throw new Error("WechatClient: \u5BA2\u6237\u7AEF\u5DF2\u9500\u6BC1");
+    }
+  }
+};
+__name(_WechatClient, "WechatClient");
+var WechatClient = _WechatClient;
+
+// packages/payment/src/wechat/response.ts
+var _WechatApiError = class _WechatApiError extends Error {
+  constructor(message, status, code) {
+    super(message);
+    this.name = "WechatApiError";
+    this.status = status;
+    this.code = code;
+  }
+};
+__name(_WechatApiError, "WechatApiError");
+var WechatApiError = _WechatApiError;
+function toWechatApiError(error) {
+  if (error instanceof WechatApiError) return error;
+  const axiosError = error;
+  const status = axiosError?.response?.status;
+  const bizCode = axiosError?.response?.data?.code;
+  const bizMessage = axiosError?.response?.data?.message;
+  if (status !== void 0) {
+    return new WechatApiError(
+      `\u5FAE\u4FE1\u652F\u4ED8\u63A5\u53E3\u8C03\u7528\u5931\u8D25: ${bizMessage ?? axiosError?.message ?? "\u672A\u77E5\u9519\u8BEF"} (${status}${bizCode ? `, ${bizCode}` : ""})`,
+      status,
+      bizCode ?? String(status)
+    );
+  }
+  return new WechatApiError(
+    `\u5FAE\u4FE1\u652F\u4ED8\u8BF7\u6C42\u5931\u8D25: ${axiosError?.message ?? "\u672A\u77E5\u9519\u8BEF"}${axiosError?.code ? ` (${axiosError.code})` : ""}`,
+    void 0,
+    axiosError?.code ?? "NETWORK_ERROR"
+  );
+}
+__name(toWechatApiError, "toWechatApiError");
+async function unwrapV3(promise) {
+  try {
+    return await promise;
+  } catch (error) {
+    throw toWechatApiError(error);
+  }
+}
+__name(unwrapV3, "unwrapV3");
+function createPayment(client) {
+  return {
+    /**
+     * 公众号 / 小程序支付下单（POST /v3/pay/transactions/jsapi）
+     * @param params 下单参数，openid 必填
+     * @returns 调起 wx.requestPayment 所需的签名参数
+     */
+    async jsapiPay(params) {
+      const { data } = await postTransaction(client, "jsapi", params);
+      return buildInvokeParams(client, data.prepay_id ?? "");
+    },
+    /**
+     * APP 支付下单（POST /v3/pay/transactions/app）
+     * @param params 下单参数
+     * @returns 传给客户端 SDK 调起微信支付的签名参数
+     */
+    async appPay(params) {
+      const { data } = await postTransaction(client, "app", params);
+      return buildInvokeParams(client, data.prepay_id ?? "");
+    },
+    /**
+     * Native 扫码支付下单（POST /v3/pay/transactions/native）
+     * @returns 二维码链接（前端渲染二维码，用户扫码支付）
+     */
+    async nativePay(params) {
+      const { data } = await postTransaction(client, "native", params);
+      if (!data.code_url) {
+        throw new Error("WechatClient: \u4E0B\u5355\u54CD\u5E94\u7F3A\u5C11 code_url");
+      }
+      return { codeUrl: data.code_url };
+    },
+    /**
+     * H5 支付下单（POST /v3/pay/transactions/h5）
+     * @param params 下单参数，payerClientIp 必填
+     * @returns 收银台跳转链接（302 重定向即可拉起微信支付）
+     */
+    async h5Pay(params) {
+      const body = buildTransactionBody(client, params);
+      body.scene_info = {
+        payer_client_ip: params.payerClientIp,
+        ...params.sceneInfo?.deviceType ? { device_type: params.sceneInfo.deviceType } : {}
+      };
+      const { data } = await unwrapV3(client.sdk.v3.pay.transactions.h5.post(body));
+      return { h5Url: data.h5_url };
+    },
+    /**
+     * 交易查询（GET /v3/pay/transactions/out-trade-no/{no} 或 .../id/{id}）
+     * @throws {WechatApiError} 订单不存在等失败（RESOURCE_NOT_EXISTS）
+     */
+    async query(params) {
+      const mchid = client.config.mchid;
+      const response = params.transactionId ? await unwrapV3(
+        client.sdk.client.request(
+          `/v3/pay/transactions/id/${encodeURIComponent(params.transactionId)}`,
+          "GET",
+          void 0,
+          { params: { mchid } }
+        )
+      ) : await unwrapV3(
+        client.sdk.client.request(
+          `/v3/pay/transactions/out-trade-no/${encodeURIComponent(params.outTradeNo ?? "")}`,
+          "GET",
+          void 0,
+          { params: { mchid } }
+        )
+      );
+      return mapTransaction(response.data);
+    }
+  };
+}
+__name(createPayment, "createPayment");
+async function postTransaction(client, chain, params) {
+  const body = buildTransactionBody(client, params);
+  return unwrapV3(client.sdk.v3.pay.transactions[chain].post(body));
+}
+__name(postTransaction, "postTransaction");
+function buildTransactionBody(client, params) {
+  const body = {
+    appid: client.config.appid,
+    mchid: client.config.mchid,
+    description: params.description,
+    out_trade_no: params.outTradeNo,
+    time_expire: params.timeExpire,
+    attach: params.attach,
+    goods_tag: params.goodsTag,
+    notify_url: client.config.notifyUrl,
+    amount: {
+      total: params.amount.total,
+      currency: params.amount.currency ?? "CNY"
+    }
+  };
+  if (params.openid) {
+    body.payer = { openid: params.openid };
+  }
+  for (const key of Object.keys(body)) {
+    if (body[key] === void 0) delete body[key];
+  }
+  return body;
+}
+__name(buildTransactionBody, "buildTransactionBody");
+function buildInvokeParams(client, prepayId) {
+  if (!prepayId) {
+    throw new Error("WechatClient: \u4E0B\u5355\u54CD\u5E94\u7F3A\u5C11 prepay_id");
+  }
+  const appId = client.config.appid;
+  const timeStamp = `${Formatter.timestamp()}`;
+  const nonceStr = Formatter.nonce(32);
+  const pkg = `prepay_id=${prepayId}`;
+  const message = `${appId}
+${timeStamp}
+${nonceStr}
+${pkg}
+`;
+  const paySign = Rsa.sign(message, client.config.options.privateKey);
+  return { appId, timeStamp, nonceStr, package: pkg, signType: "RSA", paySign };
+}
+__name(buildInvokeParams, "buildInvokeParams");
+function mapTransaction(data) {
+  return {
+    appid: data.appid,
+    mchid: data.mchid,
+    outTradeNo: data.out_trade_no,
+    transactionId: data.transaction_id,
+    tradeType: data.trade_type,
+    tradeState: data.trade_state,
+    tradeStateDesc: data.trade_state_desc,
+    bankType: data.bank_type,
+    attach: data.attach,
+    successTime: data.success_time,
+    total: data.amount?.total,
+    payerTotal: data.amount?.payer_total
+  };
+}
+__name(mapTransaction, "mapTransaction");
+function createNotifyHandler(client) {
+  return {
+    /**
+     * 验签异步通知
+     * @param headers 微信支付回调的 Wechatpay-* 系列 HTTP 头
+     * @param body 原始请求体字符串（必须是未解析的原文，不可先 JSON.parse 再序列化）
+     * @returns 验签是否通过
+     */
+    verify(headers, body) {
+      const publicKey = client.config.options.certs[headers.serial];
+      if (!publicKey) {
+        return false;
+      }
+      try {
+        const message = Formatter.response(headers.timestamp, headers.nonce, body);
+        return Rsa.verify(message, headers.signature, publicKey);
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * 解密通知 resource 字段（AES-256-GCM，apiv3Key）
+     * @param resource 回调 JSON 中的 resource 字段
+     */
+    decrypt(resource) {
+      const plaintext = Aes.AesGcm.decrypt(
+        resource.ciphertext,
+        client.config.apiv3Key,
+        resource.nonce,
+        resource.associatedData ?? ""
+      );
+      return JSON.parse(plaintext);
+    },
+    /**
+     * 校验解密后的通知与商户侧订单是否一致。
+     * 验签只保证通知来自微信支付，不保证与你的订单一致。
+     * @param payload 解密后的通知数据
+     * @param expected 商户侧期望值：outTradeNo 订单号、total 订单金额（分）
+     */
+    validate(payload, expected) {
+      const errors = [];
+      if (payload.mchid !== client.config.mchid) {
+        errors.push(`mchid \u4E0D\u5339\u914D: \u671F\u671B ${client.config.mchid}\uFF0C\u6536\u5230 ${payload.mchid}`);
+      }
+      if (expected?.outTradeNo && payload.outTradeNo !== expected.outTradeNo) {
+        errors.push(`out_trade_no \u4E0D\u5339\u914D: \u671F\u671B ${expected.outTradeNo}\uFF0C\u6536\u5230 ${payload.outTradeNo}`);
+      }
+      if (expected?.total !== void 0 && payload.amount?.total !== expected.total) {
+        errors.push(`amount.total \u4E0D\u5339\u914D: \u671F\u671B ${expected.total}\uFF0C\u6536\u5230 ${payload.amount?.total}`);
+      }
+      return { valid: errors.length === 0, errors };
+    },
+    /** 通知处理成功应答（HTTP 200/201，body 恰为 {"code":"SUCCESS"}） */
+    successResponse() {
+      return { code: "SUCCESS" };
+    },
+    /** 通知处理失败应答（微信会按衰减频率重发通知） */
+    failResponse(message) {
+      return { code: "FAIL", message: message ?? "\u5904\u7406\u5931\u8D25" };
+    }
+  };
+}
+__name(createNotifyHandler, "createNotifyHandler");
+
+// packages/payment/src/wechat/refund.ts
+function createRefund(client) {
+  return {
+    /**
+     * 申请退款（POST /v3/refund/domestic/refunds）
+     * @param params 退款参数（outTradeNo 与 transactionId 二选一）
+     * @throws {WechatApiError} 参数错误、余额不足、订单不可退等失败
+     */
+    async refund(params) {
+      const body = {
+        out_trade_no: params.outTradeNo,
+        transaction_id: params.transactionId,
+        out_refund_no: params.outRefundNo,
+        reason: params.reason,
+        notify_url: params.notifyUrl ?? client.config.notifyUrl,
+        funds_account: params.fundsAccount,
+        amount: {
+          refund: params.amount.refund,
+          total: params.amount.total,
+          currency: params.amount.currency ?? "CNY"
+        }
+      };
+      for (const key of Object.keys(body)) {
+        if (body[key] === void 0) delete body[key];
+      }
+      for (const key of Object.keys(body.amount)) {
+        if (body.amount[key] === void 0) delete body.amount[key];
+      }
+      const { data } = await unwrapV3(client.sdk.v3.refund.domestic.refunds.post(body));
+      return mapRefund(data);
+    },
+    /**
+     * 查询退款（GET /v3/refund/domestic/refunds/{out_refund_no | refund_id}）
+     * @throws {WechatApiError} 退款单不存在等失败
+     */
+    async queryRefund(params) {
+      const id = params.refundId ?? params.outRefundNo;
+      if (!id) {
+        throw new Error("WechatClient: queryRefund \u9700\u8981 outRefundNo \u6216 refundId");
+      }
+      const { data } = await unwrapV3(
+        client.sdk.client.request(`/v3/refund/domestic/refunds/${encodeURIComponent(id)}`, "GET")
+      );
+      return mapRefund(data);
+    }
+  };
+}
+__name(createRefund, "createRefund");
+function mapRefund(data) {
+  return {
+    refundId: data.refund_id,
+    outRefundNo: data.out_refund_no,
+    outTradeNo: data.out_trade_no,
+    transactionId: data.transaction_id,
+    status: data.status,
+    refundAmount: data.amount?.refund,
+    total: data.amount?.total,
+    userReceivedAmount: data.amount?.user_received_amount,
+    successTime: data.success_time,
+    reason: data.reason
+  };
+}
+__name(mapRefund, "mapRefund");
+
+// packages/reactivity/src/debug.ts
+var activeDebugHooks = null;
+function hasDebugHooks() {
+  return activeDebugHooks !== null;
+}
+__name(hasDebugHooks, "hasDebugHooks");
+function invokeDebug(name, ...args) {
+  return;
+}
+__name(invokeDebug, "invokeDebug");
+
+// packages/reactivity/src/owner.ts
+var currentOwner = null;
+function getCurrentOwner() {
+  return currentOwner;
+}
+__name(getCurrentOwner, "getCurrentOwner");
+
+// packages/reactivity/src/scheduler.ts
+var _Scheduler = class _Scheduler {
+  constructor() {
+    this.dirtyEffects = /* @__PURE__ */ new Set();
+    this.lowPriorityEffects = /* @__PURE__ */ new Set();
+    // flush 不可重入（flushing 标志保证），缓冲数组可在轮次间安全复用，避免每轮分配。
+    this.normalBuffer = [];
+    this.lowBuffer = [];
+    this.flushing = false;
+    this.scheduled = false;
+    this.batchDepth = 0;
+  }
+  schedule(effect2) {
+    if (effect2.disposed) return;
+    this.dirtyEffects.add(effect2);
+    this.lowPriorityEffects.delete(effect2);
+    this.ensureScheduled();
+  }
+  /** Queue an effect behind normal updates while preserving deterministic order. */
+  scheduleLow(effect2) {
+    if (effect2.disposed) return;
+    if (!this.dirtyEffects.has(effect2)) this.lowPriorityEffects.add(effect2);
+    this.ensureScheduled();
+  }
+  ensureScheduled() {
+    if (this.batchDepth === 0 && !this.flushing && !this.scheduled) {
+      this.scheduled = true;
+      queueMicrotask(() => {
+        this.scheduled = false;
+        this.flush();
+      });
+    }
+  }
+  remove(effect2) {
+    this.dirtyEffects.delete(effect2);
+    this.lowPriorityEffects.delete(effect2);
+  }
+  batch(fn) {
+    this.batchDepth++;
+    try {
+      return fn();
+    } finally {
+      this.batchDepth--;
+      if (this.batchDepth === 0) this.flush();
+    }
+  }
+  flush() {
+    if (this.flushing || this.batchDepth > 0) return;
+    this.flushing = true;
+    let rounds = 0;
+    let firstError;
+    let hasError = false;
+    try {
+      while (this.dirtyEffects.size > 0 || this.lowPriorityEffects.size > 0) {
+        if (++rounds > 100) {
+          this.dirtyEffects.clear();
+          this.lowPriorityEffects.clear();
+          throw new Error("Vobs: \u54CD\u5E94\u5F0F\u66F4\u65B0\u8D85\u8FC7 100 \u8F6E\uFF0C\u53EF\u80FD\u5B58\u5728\u5FAA\u73AF\u4F9D\u8D56");
+        }
+        this.collectRunnable(this.dirtyEffects, this.normalBuffer);
+        this.collectRunnable(this.lowPriorityEffects, this.lowBuffer);
+        sortEffects(this.normalBuffer);
+        sortEffects(this.lowBuffer);
+        for (const effect2 of this.normalBuffer) {
+          try {
+            effect2.run();
+          } catch (error) {
+            if (!hasError) {
+              firstError = error;
+              hasError = true;
+            }
+          }
+        }
+        for (const effect2 of this.lowBuffer) {
+          try {
+            effect2.run();
+          } catch (error) {
+            if (!hasError) {
+              firstError = error;
+              hasError = true;
+            }
+          }
+        }
+        this.normalBuffer.length = 0;
+        this.lowBuffer.length = 0;
+      }
+    } finally {
+      this.normalBuffer.length = 0;
+      this.lowBuffer.length = 0;
+      this.flushing = false;
+    }
+    if (hasError) throw firstError;
+  }
+  /** 收集未 disposed 的 effect 并清空源集合；run() 期间新调度的 effect 留给下一轮。 */
+  collectRunnable(source, target) {
+    for (const effect2 of source) {
+      if (!effect2.disposed) target.push(effect2);
+    }
+    source.clear();
+  }
+};
+__name(_Scheduler, "Scheduler");
+function sortEffects(effects) {
+  if (effects.length > 1) {
+    effects.sort((a, b) => b.depth - a.depth || a.order - b.order);
+  }
+}
+__name(sortEffects, "sortEffects");
+
+// packages/runtime/src/hmr.ts
+var globalTarget = globalThis;
+var hmrGlobal = globalTarget.__VOBS_HMR__ ?? { modules: /* @__PURE__ */ new Map() };
+globalTarget.__VOBS_HMR__ = hmrGlobal;
+
+// packages/vobs/src/context.ts
+var ownerProviders = /* @__PURE__ */ new WeakMap();
+function inject(key, fallback) {
+  const owner = getCurrentOwner();
+  const value = owner ? injectFromOwner(owner, key) : void 0;
+  return value === void 0 ? fallback : value;
+}
+__name(inject, "inject");
+function injectFromOwner(owner, key) {
+  let current = owner;
+  while (current) {
+    const providers = ownerProviders.get(current);
+    if (providers?.has(key)) return providers.get(key);
+    current = current.parent;
+  }
+  return void 0;
+}
+__name(injectFromOwner, "injectFromOwner");
+
+// packages/vobs/src/app.ts
+function createInjectionKey(description) {
+  return Symbol(description);
+}
+__name(createInjectionKey, "createInjectionKey");
+
+// packages/payment/src/wechat/plugin.ts
+var WECHAT_KEY = createInjectionKey("vobs.payment.wechat");
+function useWechat() {
+  const client = inject(WECHAT_KEY);
+  if (!client) {
+    throw new Error("Vobs Payment: \u627E\u4E0D\u5230 WechatClient\uFF0C\u8BF7\u5B89\u88C5 wechatPlugin");
+  }
+  return client;
+}
+__name(useWechat, "useWechat");
+function wechatPlugin(options) {
+  return {
+    name: "@vobs/payment/wechat",
+    version: "0.1.0",
+    install(context) {
+      if (!options.client && !options.config) {
+        throw new Error("Vobs Payment: wechatPlugin \u9700\u8981\u63D0\u4F9B config \u6216 client \u4E4B\u4E00");
+      }
+      const ownClient = !options.client;
+      const client = options.client ?? new WechatClient(options.config);
+      context.provide(WECHAT_KEY, client);
+      return ownClient ? () => client.dispose() : void 0;
+    }
+  };
+}
+__name(wechatPlugin, "wechatPlugin");
+
+export { WECHAT_KEY, WechatApiError, WechatClient, WechatConfig, createNotifyHandler, createPayment, createRefund, useWechat, wechatPlugin };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map