@xiashe/sdk 0.1.28 → 0.1.30

package/alipayWallet.mjs

@@ -12,6 +12,7 @@ const SENSITIVE_USER_OUTPUT = /payment[-_ ]?proof|payment[-_ ]?needed|seller_sig
 const DEFAULT_STATE_DIR = path.join(os.homedir(), '.xiashe', 'alipay-402');
 const OFFICIAL_MEDIA_EXTENSIONS = new Set(['.png', '.jpg', '.jpeg', '.webp']);
 const MAX_OFFICIAL_MEDIA_BYTES = 8 * 1024 * 1024;
+const OUT_SHAKE_NO_PATTERN = /^[A-Za-z0-9_-]{32}$/;
 const SAFE_OFFICIAL_FAILURE_CODES = new Set([
   'TRADE_PROGRESS_FAILED',
   'PAYMENT_NEEDED_REJECTED',
@@ -203,6 +204,20 @@ function normalizeResourceUrl(value) {
   return url.toString();
 }
 
+/**
+ * Alipay support may call this a "business order number", but the 402 status
+ * API accepts it only when it has the 32-character outShakeNo shape accepted
+ * by the official client. This is a query credential, not a merchant out_trade_no and never a
+ * Payment-Proof or fulfillment acknowledgement credential.
+ */
+function normalizeOutShakeNo(value) {
+  const outShakeNo = String(value || '').trim();
+  if (!OUT_SHAKE_NO_PATTERN.test(outShakeNo)) {
+    throw new AlipayWalletError('ALIPAY_OUT_SHAKE_NO_INVALID', '业务单号不是有效的支付宝 AI付查询凭证。');
+  }
+  return outShakeNo;
+}
+
 function normalizeIntentSummary(value) {
   const summary = safeText(value, 180);
   if (!summary) {
@@ -327,7 +342,7 @@ function queryCredentialFromOutput(output) {
   const outShakeNo = output.match(/(?:["']?out[\s_-]*shake[\s_-]*no["']?|外部(?:摇一摇)?编号)\s*[":：=]\s*["']?([A-Za-z0-9_-]{8,128})/i)?.[1] || null;
   // An outShakeNo is the preferred 402 status-query credential, but only its
   // documented 32-character AI Pay form may select that query path.
-  const validOutShakeNo = outShakeNo && outShakeNo.length === 32 && outShakeNo.slice(10, 14) === '8282';
+  const validOutShakeNo = outShakeNo && OUT_SHAKE_NO_PATTERN.test(outShakeNo);
   return validOutShakeNo
     ? { type: 'out_shake_no', value: outShakeNo }
     : tradeNo
@@ -343,9 +358,13 @@ function paymentStatusFromOutput(stdout, stderr) {
   // Treat an explicit unsuccessful result as failed so callers retain the
   // normalized failure category instead of misleadingly reporting an unknown
   // wallet state.
-  const failed = /支付失败|交易失败|payment\s+failed|"success"\s*:\s*false|"errorCode"\s*:/i.test(output);
+  // A successful status-query transport can still include the protected
+  // resource's safe ALIPAY_VERIFY_* response. That is a merchant-side proof
+  // verification failure, not an unknown wallet state.
+  const merchantDiagnostic = safeMerchantDiagnosticCode(stdout, stderr);
+  const failed = Boolean(merchantDiagnostic) || /支付失败|交易失败|payment\s+failed|"success"\s*:\s*false|"errorCode"\s*:/i.test(output);
   return {
-    status: completed ? 'completed' : pending ? 'pending_confirmation' : failed ? 'failed' : 'unknown',
+    status: failed ? 'failed' : completed ? 'completed' : pending ? 'pending_confirmation' : 'unknown',
     credential: queryCredentialFromOutput(output),
     diagnostic: safeDiagnostic(output)
   };
@@ -379,6 +398,7 @@ async function officialWalletMedia(stdout, stderr) {
 
 function walletFailureCode(stdout, stderr, exitCode) {
   const output = `${stdout}\n${stderr}`;
+  if (safeMerchantDiagnosticCode(stdout, stderr)) return 'merchant_payment_proof_verification_failed';
   if (/TRADE_PROGRESS_FAILED/i.test(output)) return 'wallet_trade_progress_failed';
   if (/payment[_ -]?needed[_ -]?rejected|账单.*(?:被拒绝|拒绝)|bill.*(?:rejected|denied)/i.test(output)) return 'payment_needed_rejected';
   if (/余额不足|insufficient\s+balance/i.test(output)) return 'insufficient_balance';
@@ -501,7 +521,9 @@ function paymentFailureDiagnosis(failureCode, stdout, stderr) {
 
 function paymentFailureUserVisible(diagnosis) {
   const lines = [
-    diagnosis.code === 'wallet_query_credential_missing'
+    diagnosis.stage === 'merchant_payment_proof_verification'
+      ? '商家未能验证本次支付宝付款凭证，尚未授予付费 Skill 权益。'
+      : diagnosis.code === 'wallet_query_credential_missing'
       ? '支付宝钱包未返回可继续查询的交易凭据，当前付款状态无法确认。'
       : '支付宝付款未创建可确认交易。',
     `诊断代码：${diagnosis.code}`,
@@ -525,6 +547,9 @@ function paymentMessage(status) {
 }
 
 function paymentFailureMessage(failureCode) {
+  if (failureCode === 'merchant_payment_proof_verification_failed') {
+    return '商家未能验证支付宝付款凭证，未授予付费 Skill 权益；请勿重放旧凭证或重复付款。';
+  }
   if (failureCode === 'wallet_query_credential_missing') {
     return '支付宝钱包返回待确认，但未返回可继续查询的交易凭据。无法确认是否已付款，因此不会授予付费 Skill 权益；请勿再次付款。';
   }
@@ -684,10 +709,11 @@ function publicPaymentResult(state, status, diagnostic, options = {}) {
     ...(failed && diagnosis ? { userVisible: paymentFailureUserVisible(diagnosis), diagnosis } : {}),
     ...(!failed && options.userVisible ? { userVisible: options.userVisible } : {}),
     ...(options.officialMedia ? { officialMedia: options.officialMedia } : {}),
+    ...(options.queryCredentialSource ? { queryCredentialSource: options.queryCredentialSource } : {}),
     ...(status === 'pending_confirmation'
       ? { confirmation: { source: 'official_alipay_wallet', surface: 'app_or_official_media', required: true } }
       : { confirmation: { source: 'official_alipay_wallet', required: false } }),
-    ...(commandFailed ? { failureCode } : {})
+    ...(failed ? { failureCode } : {})
   };
 }
 
@@ -821,11 +847,25 @@ export async function payAlipay402Resource(input, options = {}) {
   });
 }
 
-/** Queries an existing local payment attempt using the official query credential. */
+/**
+ * Queries an existing local payment attempt using its official query
+ * credential. Alipay support can also provide a valid outShakeNo (often
+ * called a business order number); that one read-only query does not create
+ * local state, initiate a payment, or acknowledge fulfillment.
+ */
 export async function queryAlipay402Resource(input, options = {}) {
   const resourceUrl = normalizeResourceUrl(input?.resourceUrl);
-  const state = await readPaymentState(resourceUrl, options);
-  if (!state?.queryCredential?.value) {
+  const suppliedOutShakeNo = input?.outShakeNo || input?.businessNo
+    ? normalizeOutShakeNo(input?.outShakeNo || input?.businessNo)
+    : null;
+  if (input?.outShakeNo && input?.businessNo && normalizeOutShakeNo(input.outShakeNo) !== normalizeOutShakeNo(input.businessNo)) {
+    throw new AlipayWalletError('ALIPAY_OUT_SHAKE_NO_CONFLICT', '提供的支付宝查询业务单号不一致。');
+  }
+  const persistedState = await readPaymentState(resourceUrl, options);
+  const queryCredential = suppliedOutShakeNo
+    ? { type: 'out_shake_no', value: suppliedOutShakeNo }
+    : persistedState?.queryCredential;
+  if (!queryCredential?.value) {
     return {
       ok: false,
       status: 'no_active_payment',
@@ -836,9 +876,20 @@ export async function queryAlipay402Resource(input, options = {}) {
       diagnostic: 'payment_state_not_found'
     };
   }
-  const queryArg = state.queryCredential.type === 'out_shake_no'
-    ? ['--out-shake-no', state.queryCredential.value]
-    : ['-t', state.queryCredential.value];
+  const state = persistedState || {
+    version: 1,
+    resourceUrl,
+    resourceDigest: digest(resourceUrl),
+    sessionId: null,
+    paymentNeededPath: null,
+    queryCredential: null,
+    status: 'querying',
+    createdAt: new Date().toISOString(),
+    updatedAt: new Date().toISOString()
+  };
+  const queryArg = queryCredential.type === 'out_shake_no'
+    ? ['--out-shake-no', queryCredential.value]
+    : ['-t', queryCredential.value];
   const walletInvocation = await runOfficialCli([
     '402-query-payment-status',
     ...queryArg,
@@ -851,20 +902,24 @@ export async function queryAlipay402Resource(input, options = {}) {
   const officialMedia = ['pending_confirmation', 'completed'].includes(status)
     ? await officialWalletMedia(walletInvocation.stdout, walletInvocation.stderr)
     : null;
-  state.status = status;
-  state.queryCredential = result.credential || state.queryCredential;
-  state.lastFailureCode = failed ? walletFailureCode(walletInvocation.stdout, walletInvocation.stderr, walletInvocation.exitCode) : null;
-  state.lastDiagnosis = failed
-    ? paymentFailureDiagnosis(state.lastFailureCode, walletInvocation.stdout, walletInvocation.stderr)
-    : null;
-  state.lastWalletDiagnostic = result.diagnostic;
-  state.updatedAt = new Date().toISOString();
-  await writePaymentState(state, options);
-  if (status === 'completed') {
+  const failureCode = failed ? walletFailureCode(walletInvocation.stdout, walletInvocation.stderr, walletInvocation.exitCode) : undefined;
+  if (persistedState) {
+    state.status = status;
+    // A support-supplied outShakeNo is used only for this invocation. Never
+    // replace or persist a local query credential with it.
+    state.queryCredential = suppliedOutShakeNo ? state.queryCredential : result.credential || state.queryCredential;
+    state.lastFailureCode = failureCode ?? null;
+    state.lastDiagnosis = failed
+      ? paymentFailureDiagnosis(failureCode, walletInvocation.stdout, walletInvocation.stderr)
+      : null;
+    state.lastWalletDiagnostic = result.diagnostic;
+    state.updatedAt = new Date().toISOString();
+    await writePaymentState(state, options);
+  }
+  if (status === 'completed' && persistedState) {
     const { paymentNeededPath } = statePaths(resourceUrl, options);
     await rm(paymentNeededPath, { force: true });
   }
-  const failureCode = failed ? state.lastFailureCode : undefined;
   return publicPaymentResult(state, status, result.diagnostic, {
     commandFailed: failed,
     failureCode,
@@ -872,7 +927,8 @@ export async function queryAlipay402Resource(input, options = {}) {
     userVisible: ['pending_confirmation', 'completed'].includes(status)
       ? userVisibleWalletOutput(walletInvocation.stdout, walletInvocation.stderr)
       : null,
-    officialMedia
+    officialMedia,
+    ...(suppliedOutShakeNo ? { queryCredentialSource: 'supplied_out_shake_no' } : {})
   });
 }
 

package/index.mjs

@@ -6,7 +6,7 @@ import path from 'node:path';
 import { ConvexHttpClient } from 'convex/browser';
 import { anyApi as api } from 'convex/server';
 
-export const VERSION = '0.1.27';
+export const VERSION = '0.1.30';
 
 export const DEFAULTS = {
   cn: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/sdk",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "type": "module",
   "main": "index.mjs",
   "exports": {