@xiashe/sdk 0.1.22 → 0.1.23

package/alipayWallet.mjs

@@ -480,7 +480,7 @@ async function fetchPaymentNeeded(resourceUrl, options = {}) {
     if (!paymentNeeded) {
       throw new AlipayWalletError('ALIPAY_RESOURCE_PAYMENT_NEEDED_MISSING', '支付资源未返回有效的支付宝付款请求。');
     }
-    return { paymentNeeded };
+    return { paymentNeeded, responseStatus: response.status };
   } catch (error) {
     if (error instanceof AlipayWalletError) throw error;
     if (error?.name === 'AbortError') {
@@ -492,6 +492,96 @@ async function fetchPaymentNeeded(resourceUrl, options = {}) {
   }
 }
 
+/**
+ * Validate only the public shape of a 402 bill in memory. This is deliberately
+ * not a wallet call and never returns the bill, its signature, or any payment
+ * credentials to the caller.
+ */
+function validatePaymentNeededShape(paymentNeeded) {
+  let bill;
+  try {
+    bill = JSON.parse(Buffer.from(String(paymentNeeded), 'base64url').toString('utf8'));
+  } catch {
+    return {
+      ok: false,
+      checks: [{ id: 'payment_needed_encoding', ok: false }]
+    };
+  }
+  const protocol = bill?.protocol && typeof bill.protocol === 'object' ? bill.protocol : {};
+  const method = bill?.method && typeof bill.method === 'object' ? bill.method : {};
+  const sellerId = safeText(protocol.seller_unique_id, 80);
+  const methodSellerId = safeText(method.seller_id, 80);
+  const amount = safeText(protocol.amount, 32);
+  const payBefore = safeText(protocol.pay_before, 80);
+  const checks = [
+    {
+      id: 'payment_needed_encoding',
+      ok: true
+    },
+    {
+      id: 'protocol_fields',
+      ok: Boolean(
+        safeText(protocol.out_trade_no, 200) &&
+        /^\d+(?:\.\d{1,2})?$/.test(amount) && Number(amount) > 0 &&
+        safeText(protocol.currency, 16).toUpperCase() === 'CNY' &&
+        safeText(protocol.resource_id, 1_000) &&
+        payBefore && Number.isFinite(Date.parse(payBefore)) &&
+        safeText(protocol.seller_signature, 8_000) &&
+        safeText(protocol.seller_sign_type, 32).toUpperCase() === 'RSA2' &&
+        /^2088\d{8,}$/.test(sellerId)
+      )
+    },
+    {
+      id: 'merchant_fields',
+      ok: Boolean(
+        safeText(method.seller_name, 160) &&
+        /^2088\d{8,}$/.test(methodSellerId) &&
+        safeText(method.seller_app_id, 80) &&
+        safeText(method.goods_name, 160) &&
+        safeText(method.seller_unique_id_key, 80) === 'seller_id' &&
+        safeText(method.service_id, 160)
+      )
+    },
+    {
+      id: 'seller_identity_consistency',
+      ok: Boolean(sellerId && sellerId === methodSellerId)
+    }
+  ];
+  return { ok: checks.every((check) => check.ok), checks };
+}
+
+/**
+ * Read-only seller-resource preflight. It proves that this exact resource
+ * produces a structurally valid 402 bill, but never opens the wallet or
+ * attempts to create a trade.
+ */
+export async function preflightAlipay402Resource(input, options = {}) {
+  const resourceUrl = normalizeResourceUrl(input?.resourceUrl);
+  const resource = await fetchPaymentNeeded(resourceUrl, options);
+  if (resource.alreadyPaid) {
+    return {
+      ok: true,
+      status: 'resource_already_available',
+      provider: 'alipay-agent-payment',
+      walletInvoked: false,
+      message: '该资源已可访问，无需再次创建付款账单。',
+      checks: [{ id: 'resource_access', ok: true }]
+    };
+  }
+  const validation = validatePaymentNeededShape(resource.paymentNeeded);
+  return {
+    ok: validation.ok,
+    status: validation.ok ? 'payment_needed_ready' : 'payment_needed_invalid',
+    provider: 'alipay-agent-payment',
+    walletInvoked: false,
+    resourceStatus: resource.responseStatus,
+    message: validation.ok
+      ? '虾舍已为该资源签发结构有效的支付宝 402 账单；尚未调用钱包或创建交易。'
+      : '虾舍资源返回了 402，但账单结构不符合支付宝 AI收要求；未调用钱包。',
+    checks: validation.checks
+  };
+}
+
 function publicPaymentResult(state, status, diagnostic, options = {}) {
   const commandFailed = options.commandFailed === true;
   const failureCode = options.failureCode || 'official_cli_nonzero_exit';
@@ -505,6 +595,7 @@ function publicPaymentResult(state, status, diagnostic, options = {}) {
     walletInvoked: true,
     message: failed ? paymentFailureMessage(failureCode) : paymentMessage(status),
     diagnostic,
+    ...(options.merchantResource ? { merchantResource: options.merchantResource } : {}),
     ...(failed && diagnosis ? { userVisible: paymentFailureUserVisible(diagnosis), diagnosis } : {}),
     ...(!failed && options.userVisible ? { userVisible: options.userVisible } : {}),
     ...(options.officialMedia ? { officialMedia: options.officialMedia } : {}),
@@ -566,6 +657,11 @@ export async function payAlipay402Resource(input, options = {}) {
     return publicPaymentResult(state, 'completed', 'resource_already_available');
   }
 
+  const billValidation = validatePaymentNeededShape(resource.paymentNeeded);
+  if (!billValidation.ok) {
+    throw new AlipayWalletError('ALIPAY_PAYMENT_NEEDED_INVALID', '虾舍返回的支付宝付款账单结构无效；未调用钱包或创建交易。');
+  }
+
   const paths = statePaths(resourceUrl, options);
   await ensurePrivateDirectory(paths.directory);
   await writePrivateFile(paths.paymentNeededPath, resource.paymentNeeded);
@@ -576,6 +672,10 @@ export async function payAlipay402Resource(input, options = {}) {
     sessionId: randomUUID(),
     paymentNeededPath: paths.paymentNeededPath,
     queryCredential: null,
+    merchantResource: {
+      paymentNeededReceived: true,
+      billShapeValidated: true
+    },
     status: 'started',
     createdAt: new Date().toISOString(),
     updatedAt: new Date().toISOString()
@@ -618,7 +718,8 @@ export async function payAlipay402Resource(input, options = {}) {
     userVisible: ['pending_confirmation', 'completed'].includes(status)
       ? userVisibleWalletOutput(walletInvocation.stdout, walletInvocation.stderr)
       : null,
-    officialMedia
+    officialMedia,
+    merchantResource: state.merchantResource
   });
 }
 
@@ -701,6 +802,7 @@ export async function diagnoseAlipay402Resource(input, options = {}) {
     walletInvoked: state.status !== 'started',
     queryAvailable: Boolean(state.queryCredential?.value),
     diagnostic: state.lastWalletDiagnostic || 'payment_state_recorded',
+    merchantResource: state.merchantResource || null,
     ...(state.lastFailureCode ? { failureCode: state.lastFailureCode } : {}),
     ...(state.lastDiagnosis ? {
       diagnosis: state.lastDiagnosis,

package/index.mjs

@@ -6,7 +6,7 @@ import path from 'node:path';
 import { ConvexHttpClient } from 'convex/browser';
 import { anyApi as api } from 'convex/server';
 
-export const VERSION = '0.1.22';
+export const VERSION = '0.1.23';
 
 export const DEFAULTS = {
   cn: {
@@ -1362,6 +1362,7 @@ export {
   AlipayWalletError,
   checkAlipayWallet,
   getAlipayWalletBridgeInfo,
+  preflightAlipay402Resource,
   payAlipay402Resource,
   queryAlipay402Resource,
   diagnoseAlipay402Resource

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/sdk",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "type": "module",
   "main": "index.mjs",
   "exports": {