@youidian/pay-sdk 1.0.0 → 1.0.2

package/dist/index.js

@@ -1,43 +1,7 @@
-"use strict";
-var __create = Object.create;
 var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 
-// src/index.ts
-var src_exports = {};
-__export(src_exports, {
-  PaymentClient: () => PaymentClient,
-  PaymentUI: () => PaymentUI,
-  createPaymentUI: () => createPaymentUI
-});
-module.exports = __toCommonJS(src_exports);
-
 // src/client.ts
 var PaymentUI = class {
   constructor() {
@@ -47,23 +11,32 @@ var PaymentUI = class {
   }
   /**
    * Opens the payment checkout page in an iframe modal.
-   * @param checkoutUrl - The checkout page URL
+   * @param urlOrParams - The checkout page URL or payment parameters
    * @param options - UI options
    */
-  openPayment(checkoutUrl, options) {
+  openPayment(urlOrParams, options) {
     if (typeof document === "undefined") return;
     if (this.modal) return;
+    let checkoutUrl;
+    if (typeof urlOrParams === "string") {
+      checkoutUrl = urlOrParams;
+    } else {
+      const { appId, productId, priceId, baseUrl = "https://pay.imgto.link" } = urlOrParams;
+      checkoutUrl = `${baseUrl.replace(/\/$/, "")}/checkout/${appId}/${productId}/${priceId}`;
+    }
     let finalUrl = checkoutUrl;
     if (options?.locale) {
       try {
         const url = new URL(checkoutUrl);
-        if (!url.pathname.startsWith(`/${options.locale}/`)) {
-          url.pathname = `/${options.locale}${url.pathname}`;
+        const localePrefix = `/${options.locale}`;
+        if (!url.pathname.startsWith(`${localePrefix}/`) && url.pathname !== localePrefix) {
+          url.pathname = `${localePrefix}${url.pathname}`;
           finalUrl = url.toString();
         }
       } catch (_e) {
-        if (!checkoutUrl.startsWith(`/${options.locale}/`)) {
-          finalUrl = `/${options.locale}${checkoutUrl.startsWith("/") ? "" : "/"}${checkoutUrl}`;
+        const localePrefix = `/${options.locale}`;
+        if (!checkoutUrl.startsWith(`${localePrefix}/`) && checkoutUrl !== localePrefix) {
+          finalUrl = `${localePrefix}${checkoutUrl.startsWith("/") ? "" : "/"}${checkoutUrl}`;
         }
       }
     }
@@ -216,7 +189,7 @@ function createPaymentUI() {
 }
 
 // src/server.ts
-var import_crypto = __toESM(require("crypto"));
+import crypto from "crypto";
 var PaymentClient = class {
   constructor(options) {
     __publicField(this, "appId");
@@ -235,7 +208,7 @@ var PaymentClient = class {
    */
   generateSignature(timestamp) {
     const str = `${this.appId}${this.appSecret}${timestamp}`;
-    return import_crypto.default.createHash("sha256").update(str).digest("hex");
+    return crypto.createHash("sha256").update(str).digest("hex");
   }
   /**
    * Internal request helper for Gateway API
@@ -273,8 +246,8 @@ var PaymentClient = class {
   decryptCallback(notification) {
     try {
       const { iv, encryptedData, authTag } = notification;
-      const key = import_crypto.default.createHash("sha256").update(this.appSecret).digest();
-      const decipher = import_crypto.default.createDecipheriv(
+      const key = crypto.createHash("sha256").update(this.appSecret).digest();
+      const decipher = crypto.createDecipheriv(
         "aes-256-gcm",
         key,
         Buffer.from(iv, "hex")
@@ -332,6 +305,49 @@ var PaymentClient = class {
   async getOrderStatus(orderId) {
     return this.request("GET", `/orders/${orderId}`);
   }
+  /**
+   * Get all entitlements for a user
+   * @param userId - User ID
+   */
+  async getEntitlements(userId) {
+    return this.request("GET", `/users/${userId}/entitlements`);
+  }
+  /**
+   * Get a single entitlement value
+   * @param userId - User ID
+   * @param key - Entitlement key
+   */
+  async getEntitlementValue(userId, key) {
+    const entitlements = await this.getEntitlements(userId);
+    return entitlements[key];
+  }
+  /**
+   * Consume numeric entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to consume
+   */
+  async consumeEntitlement(userId, key, amount) {
+    return this.request("POST", `/users/${userId}/entitlements/consume`, { key, amount });
+  }
+  /**
+   * Add numeric entitlement (e.g. refund)
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to add
+   */
+  async addEntitlement(userId, key, amount) {
+    return this.request("POST", `/users/${userId}/entitlements/add`, { key, amount });
+  }
+  /**
+   * Toggle boolean entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param enabled - Whether to enable
+   */
+  async toggleEntitlement(userId, key, enabled) {
+    return this.request("POST", `/users/${userId}/entitlements/toggle`, { key, enabled });
+  }
   /**
    * Generate checkout URL for client-side payment
    * @param productId - Product ID
@@ -342,10 +358,9 @@ var PaymentClient = class {
     return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;
   }
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   PaymentClient,
   PaymentUI,
   createPaymentUI
-});
+};
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/client.ts","../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK\n * 统一支付集成 SDK\n * \n * @packageDocumentation\n * \n * @example\n * // 服务端使用\n * import { PaymentClient } from '@youidian/pay-sdk/server';\n * \n * const client = new PaymentClient({\n *     appId: 'your-app-id',\n *     appSecret: 'your-app-secret',\n *     baseUrl: 'https://pay.youidian.com'\n * });\n * \n * // 创建订单\n * const order = await client.createOrder({\n *     productId: 'xxx',\n *     priceId: 'xxx',\n *     userId: 'user-123'\n * });\n * \n * @example\n * // 客户端使用\n * import { PaymentUI } from '@youidian/pay-sdk/client';\n * \n * const ui = new PaymentUI();\n * ui.openPayment('https://pay.youidian.com/checkout/...', {\n *     onSuccess: (orderId) => console.log('支付成功', orderId),\n *     onCancel: () => console.log('支付取消')\n * });\n */\n\n// Re-export client module (browser-safe)\nexport { PaymentUI, createPaymentUI } from './client';\nexport type {\n    PaymentEventType,\n    PaymentEventData,\n    PaymentUIOptions,\n    PollOptions,\n    OrderStatus as ClientOrderStatus\n} from './client';\n\n// Re-export server module (Node.js only)\nexport { PaymentClient } from './server';\nexport type {\n    PaymentClientOptions,\n    CreateOrderParams,\n    CreateOrderResponse,\n    PaymentNotification,\n    PaymentCallbackData,\n    Product,\n    ProductPrice,\n    ProductEntitlements,\n    OrderStatus\n} from './server';\n","/**\n * Youidian Payment SDK - Client Module\n * 用于浏览器端集成，包含支付弹窗、状态轮询等功能\n * 不依赖 Node.js crypto 模块\n */\n\n/**\n * Payment event types from checkout pages\n */\nexport type PaymentEventType = 'PAYMENT_SUCCESS' | 'PAYMENT_CANCELLED' | 'PAYMENT_CLOSE' | 'PAYMENT_RESIZE';\n\n/**\n * Payment event data from postMessage\n */\nexport interface PaymentEventData {\n    type: PaymentEventType;\n    orderId?: string;\n    height?: number;\n}\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Payment UI Options\n */\nexport interface PaymentUIOptions {\n    locale?: string;\n    onSuccess?: (orderId?: string) => void;\n    onCancel?: (orderId?: string) => void;\n    onClose?: () => void;\n    /** Origin to validate postMessage (defaults to '*', set for security) */\n    allowedOrigin?: string;\n}\n\n/**\n * Poll Options\n */\nexport interface PollOptions {\n    /** Polling interval in ms (default: 3000) */\n    interval?: number;\n    /** Timeout in ms (default: 300000 = 5 minutes) */\n    timeout?: number;\n    /** Callback on each status check */\n    onStatusChange?: (status: OrderStatus) => void;\n}\n\n/**\n * Client-side Payment UI Helper\n * 浏览器端支付 UI 辅助类，用于弹出支付窗口和轮询订单状态\n */\nexport class PaymentUI {\n    private iframe: HTMLIFrameElement | null = null;\n    private modal: HTMLDivElement | null = null;\n    private messageHandler: ((event: MessageEvent) => void) | null = null;\n\n    /**\n     * Opens the payment checkout page in an iframe modal.\n     * @param checkoutUrl - The checkout page URL\n     * @param options - UI options\n     */\n    openPayment(checkoutUrl: string, options?: PaymentUIOptions) {\n        if (typeof document === 'undefined') return; // Server-side guard\n        if (this.modal) return; // Prevent multiple modals\n\n        let finalUrl = checkoutUrl;\n        if (options?.locale) {\n            try {\n                const url = new URL(checkoutUrl);\n                if (!url.pathname.startsWith(`/${options.locale}/`)) {\n                    url.pathname = `/${options.locale}${url.pathname}`;\n                    finalUrl = url.toString();\n                }\n            } catch (_e) {\n                // Fallback if URL is relative or invalid\n                if (!checkoutUrl.startsWith(`/${options.locale}/`)) {\n                    finalUrl = `/${options.locale}${checkoutUrl.startsWith('/') ? '' : '/'}${checkoutUrl}`;\n                }\n            }\n        }\n\n        // Create Modal Overlay\n        this.modal = document.createElement('div');\n        Object.assign(this.modal.style, {\n            position: 'fixed',\n            top: '0',\n            left: '0',\n            width: '100%',\n            height: '100%',\n            backgroundColor: 'rgba(0,0,0,0.5)',\n            display: 'flex',\n            alignItems: 'center',\n            justifyContent: 'center',\n            zIndex: '9999',\n            transition: 'opacity 0.3s ease'\n        });\n\n        // Create Container\n        const container = document.createElement('div');\n        Object.assign(container.style, {\n            width: '450px',\n            height: 'min(600px, 90vh)',\n            backgroundColor: '#fff',\n            borderRadius: '20px',\n            overflow: 'hidden',\n            position: 'relative',\n            boxShadow: '0 25px 50px -12px rgba(0,0,0,0.25)'\n        });\n\n        // Create Close Button\n        const closeBtn = document.createElement('button');\n        closeBtn.innerHTML = '×';\n        Object.assign(closeBtn.style, {\n            position: 'absolute',\n            right: '15px',\n            top: '10px',\n            fontSize: '24px',\n            border: 'none',\n            background: 'none',\n            cursor: 'pointer',\n            color: '#999',\n            zIndex: '1'\n        });\n        closeBtn.onclick = () => {\n            this.close();\n            options?.onCancel?.();\n        };\n\n        // Create Iframe\n        this.iframe = document.createElement('iframe');\n        this.iframe.src = finalUrl;\n        Object.assign(this.iframe.style, {\n            width: '100%',\n            height: '100%',\n            border: 'none'\n        });\n\n        container.appendChild(closeBtn);\n        container.appendChild(this.iframe);\n        this.modal.appendChild(container);\n        document.body.appendChild(this.modal);\n\n        // Listen for messages from checkout page\n        this.messageHandler = (event: MessageEvent) => {\n            // Validate origin if specified\n            if (options?.allowedOrigin && options.allowedOrigin !== '*') {\n                if (event.origin !== options.allowedOrigin) {\n                    return;\n                }\n            }\n\n            const data = event.data as PaymentEventData;\n\n            if (!data || typeof data !== 'object' || !data.type) {\n                return;\n            }\n\n            switch (data.type) {\n                case 'PAYMENT_SUCCESS':\n                    options?.onSuccess?.(data.orderId);\n                    // Auto-close after success callback\n                    setTimeout(() => this.close(), 2000);\n                    break;\n                case 'PAYMENT_CANCELLED':\n                    options?.onCancel?.(data.orderId);\n                    break;\n                case 'PAYMENT_RESIZE':\n                    if (data.height && container) {\n                        // Limit max height to 90% of viewport\n                        const maxHeight = window.innerHeight * 0.9;\n                        const newHeight = Math.min(data.height, maxHeight);\n                        container.style.height = `${newHeight}px`;\n                    }\n                    break;\n                case 'PAYMENT_CLOSE':\n                    this.close();\n                    options?.onClose?.();\n                    break;\n            }\n        };\n        window.addEventListener('message', this.messageHandler);\n    }\n\n    /**\n     * Close the payment modal\n     */\n    close() {\n        if (typeof window === 'undefined') return;\n\n        if (this.messageHandler) {\n            window.removeEventListener('message', this.messageHandler);\n            this.messageHandler = null;\n        }\n        if (this.modal && this.modal.parentNode) {\n            this.modal.parentNode.removeChild(this.modal);\n        }\n        this.modal = null;\n        this.iframe = null;\n    }\n\n    /**\n     * Poll order status from integrator's API endpoint\n     * @param statusUrl - The integrator's API endpoint to check order status\n     * @param options - Polling options\n     * @returns Promise that resolves when order is paid or rejects on timeout/failure\n     */\n    async pollOrderStatus(statusUrl: string, options?: PollOptions): Promise<OrderStatus> {\n        const interval = options?.interval || 3000;\n        const timeout = options?.timeout || 300000;\n        const startTime = Date.now();\n\n        return new Promise((resolve, reject) => {\n            const poll = async () => {\n                try {\n                    const response = await fetch(statusUrl);\n                    if (!response.ok) {\n                        throw new Error(`Status check failed: ${response.status}`);\n                    }\n\n                    const status: OrderStatus = await response.json();\n                    options?.onStatusChange?.(status);\n\n                    if (status.status === 'PAID') {\n                        resolve(status);\n                        return;\n                    }\n\n                    if (status.status === 'CANCELLED' || status.status === 'FAILED') {\n                        reject(new Error(`Order ${status.status.toLowerCase()}`));\n                        return;\n                    }\n\n                    // Check timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(new Error('Polling timeout'));\n                        return;\n                    }\n\n                    // Continue polling\n                    setTimeout(poll, interval);\n                } catch (error) {\n                    // On network error, continue polling unless timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(error);\n                        return;\n                    }\n                    setTimeout(poll, interval);\n                }\n            };\n\n            poll();\n        });\n    }\n}\n\n/**\n * Convenience function to create a PaymentUI instance\n */\nexport function createPaymentUI(): PaymentUI {\n    return new PaymentUI();\n}\n","/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC0DO,IAAM,YAAN,MAAgB;AAAA,EAAhB;AACH,wBAAQ,UAAmC;AAC3C,wBAAQ,SAA+B;AACvC,wBAAQ,kBAAyD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjE,YAAY,aAAqB,SAA4B;AACzD,QAAI,OAAO,aAAa,YAAa;AACrC,QAAI,KAAK,MAAO;AAEhB,QAAI,WAAW;AACf,QAAI,SAAS,QAAQ;AACjB,UAAI;AACA,cAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,YAAI,CAAC,IAAI,SAAS,WAAW,IAAI,QAAQ,MAAM,GAAG,GAAG;AACjD,cAAI,WAAW,IAAI,QAAQ,MAAM,GAAG,IAAI,QAAQ;AAChD,qBAAW,IAAI,SAAS;AAAA,QAC5B;AAAA,MACJ,SAAS,IAAI;AAET,YAAI,CAAC,YAAY,WAAW,IAAI,QAAQ,MAAM,GAAG,GAAG;AAChD,qBAAW,IAAI,QAAQ,MAAM,GAAG,YAAY,WAAW,GAAG,IAAI,KAAK,GAAG,GAAG,WAAW;AAAA,QACxF;AAAA,MACJ;AAAA,IACJ;AAGA,SAAK,QAAQ,SAAS,cAAc,KAAK;AACzC,WAAO,OAAO,KAAK,MAAM,OAAO;AAAA,MAC5B,UAAU;AAAA,MACV,KAAK;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY;AAAA,IAChB,CAAC;AAGD,UAAM,YAAY,SAAS,cAAc,KAAK;AAC9C,WAAO,OAAO,UAAU,OAAO;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,UAAU;AAAA,MACV,UAAU;AAAA,MACV,WAAW;AAAA,IACf,CAAC;AAGD,UAAM,WAAW,SAAS,cAAc,QAAQ;AAChD,aAAS,YAAY;AACrB,WAAO,OAAO,SAAS,OAAO;AAAA,MAC1B,UAAU;AAAA,MACV,OAAO;AAAA,MACP,KAAK;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ;AAAA,IACZ,CAAC;AACD,aAAS,UAAU,MAAM;AACrB,WAAK,MAAM;AACX,eAAS,WAAW;AAAA,IACxB;AAGA,SAAK,SAAS,SAAS,cAAc,QAAQ;AAC7C,SAAK,OAAO,MAAM;AAClB,WAAO,OAAO,KAAK,OAAO,OAAO;AAAA,MAC7B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,IACZ,CAAC;AAED,cAAU,YAAY,QAAQ;AAC9B,cAAU,YAAY,KAAK,MAAM;AACjC,SAAK,MAAM,YAAY,SAAS;AAChC,aAAS,KAAK,YAAY,KAAK,KAAK;AAGpC,SAAK,iBAAiB,CAAC,UAAwB;AAE3C,UAAI,SAAS,iBAAiB,QAAQ,kBAAkB,KAAK;AACzD,YAAI,MAAM,WAAW,QAAQ,eAAe;AACxC;AAAA,QACJ;AAAA,MACJ;AAEA,YAAM,OAAO,MAAM;AAEnB,UAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM;AACjD;AAAA,MACJ;AAEA,cAAQ,KAAK,MAAM;AAAA,QACf,KAAK;AACD,mBAAS,YAAY,KAAK,OAAO;AAEjC,qBAAW,MAAM,KAAK,MAAM,GAAG,GAAI;AACnC;AAAA,QACJ,KAAK;AACD,mBAAS,WAAW,KAAK,OAAO;AAChC;AAAA,QACJ,KAAK;AACD,cAAI,KAAK,UAAU,WAAW;AAE1B,kBAAM,YAAY,OAAO,cAAc;AACvC,kBAAM,YAAY,KAAK,IAAI,KAAK,QAAQ,SAAS;AACjD,sBAAU,MAAM,SAAS,GAAG,SAAS;AAAA,UACzC;AACA;AAAA,QACJ,KAAK;AACD,eAAK,MAAM;AACX,mBAAS,UAAU;AACnB;AAAA,MACR;AAAA,IACJ;AACA,WAAO,iBAAiB,WAAW,KAAK,cAAc;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ;AACJ,QAAI,OAAO,WAAW,YAAa;AAEnC,QAAI,KAAK,gBAAgB;AACrB,aAAO,oBAAoB,WAAW,KAAK,cAAc;AACzD,WAAK,iBAAiB;AAAA,IAC1B;AACA,QAAI,KAAK,SAAS,KAAK,MAAM,YAAY;AACrC,WAAK,MAAM,WAAW,YAAY,KAAK,KAAK;AAAA,IAChD;AACA,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAAgB,WAAmB,SAA6C;AAClF,UAAM,WAAW,SAAS,YAAY;AACtC,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,YAAM,OAAO,YAAY;AACrB,YAAI;AACA,gBAAM,WAAW,MAAM,MAAM,SAAS;AACtC,cAAI,CAAC,SAAS,IAAI;AACd,kBAAM,IAAI,MAAM,wBAAwB,SAAS,MAAM,EAAE;AAAA,UAC7D;AAEA,gBAAM,SAAsB,MAAM,SAAS,KAAK;AAChD,mBAAS,iBAAiB,MAAM;AAEhC,cAAI,OAAO,WAAW,QAAQ;AAC1B,oBAAQ,MAAM;AACd;AAAA,UACJ;AAEA,cAAI,OAAO,WAAW,eAAe,OAAO,WAAW,UAAU;AAC7D,mBAAO,IAAI,MAAM,SAAS,OAAO,OAAO,YAAY,CAAC,EAAE,CAAC;AACxD;AAAA,UACJ;AAGA,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,IAAI,MAAM,iBAAiB,CAAC;AACnC;AAAA,UACJ;AAGA,qBAAW,MAAM,QAAQ;AAAA,QAC7B,SAAS,OAAO;AAEZ,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,KAAK;AACZ;AAAA,UACJ;AACA,qBAAW,MAAM,QAAQ;AAAA,QAC7B;AAAA,MACJ;AAEA,WAAK;AAAA,IACT,CAAC;AAAA,EACL;AACJ;AAKO,SAAS,kBAA6B;AACzC,SAAO,IAAI,UAAU;AACzB;;;ACtQA,oBAAmB;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,cAAAA,QAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":["crypto"]}
+{"version":3,"sources":["../src/client.ts","../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Client Module\n * 用于浏览器端集成，包含支付弹窗、状态轮询等功能\n * 不依赖 Node.js crypto 模块\n */\n\n/**\n * Payment event types from checkout pages\n */\nexport type PaymentEventType = 'PAYMENT_SUCCESS' | 'PAYMENT_CANCELLED' | 'PAYMENT_CLOSE' | 'PAYMENT_RESIZE';\n\n/**\n * Payment event data from postMessage\n */\nexport interface PaymentEventData {\n    type: PaymentEventType;\n    orderId?: string;\n    height?: number;\n}\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Payment UI Options\n */\nexport interface PaymentUIOptions {\n    locale?: string;\n    onSuccess?: (orderId?: string) => void;\n    onCancel?: (orderId?: string) => void;\n    onClose?: () => void;\n    /** Origin to validate postMessage (defaults to '*', set for security) */\n    allowedOrigin?: string;\n}\n\n/**\n * Poll Options\n */\nexport interface PollOptions {\n    /** Polling interval in ms (default: 3000) */\n    interval?: number;\n    /** Timeout in ms (default: 300000 = 5 minutes) */\n    timeout?: number;\n    /** Callback on each status check */\n    onStatusChange?: (status: OrderStatus) => void;\n}\n\n/**\n * Client-side Payment UI Helper\n * 浏览器端支付 UI 辅助类，用于弹出支付窗口和轮询订单状态\n */\n/**\n * Params for opening payment directly without manual URL construction\n */\nexport interface PaymentParams {\n    appId: string;\n    productId: string;\n    priceId: string;\n    /** Defaults to https://pay.imgto.link */\n    baseUrl?: string;\n}\n\n/**\n * Client-side Payment UI Helper\n * 浏览器端支付 UI 辅助类，用于弹出支付窗口和轮询订单状态\n */\nexport class PaymentUI {\n    private iframe: HTMLIFrameElement | null = null;\n    private modal: HTMLDivElement | null = null;\n    private messageHandler: ((event: MessageEvent) => void) | null = null;\n\n    /**\n     * Opens the payment checkout page in an iframe modal.\n     * @param urlOrParams - The checkout page URL or payment parameters\n     * @param options - UI options\n     */\n    openPayment(urlOrParams: string | PaymentParams, options?: PaymentUIOptions) {\n        if (typeof document === 'undefined') return; // Server-side guard\n        if (this.modal) return; // Prevent multiple modals\n\n        let checkoutUrl: string;\n        if (typeof urlOrParams === 'string') {\n            checkoutUrl = urlOrParams;\n        } else {\n            const { appId, productId, priceId, baseUrl = \"https://pay.imgto.link\" } = urlOrParams;\n            checkoutUrl = `${baseUrl.replace(/\\/$/, '')}/checkout/${appId}/${productId}/${priceId}`;\n        }\n\n        let finalUrl = checkoutUrl;\n        if (options?.locale) {\n            try {\n                const url = new URL(checkoutUrl);\n                // Check if path already starts with /locale/ or is exactly /locale\n                const localePrefix = `/${options.locale}`;\n                if (!url.pathname.startsWith(`${localePrefix}/`) && url.pathname !== localePrefix) {\n                    url.pathname = `${localePrefix}${url.pathname}`;\n                    finalUrl = url.toString();\n                }\n            } catch (_e) {\n                // Fallback if URL is relative or invalid\n                const localePrefix = `/${options.locale}`;\n                if (!checkoutUrl.startsWith(`${localePrefix}/`) && checkoutUrl !== localePrefix) {\n                    finalUrl = `${localePrefix}${checkoutUrl.startsWith('/') ? '' : '/'}${checkoutUrl}`;\n                }\n            }\n        }\n\n        // Create Modal Overlay\n        this.modal = document.createElement('div');\n        Object.assign(this.modal.style, {\n            position: 'fixed',\n            top: '0',\n            left: '0',\n            width: '100%',\n            height: '100%',\n            backgroundColor: 'rgba(0,0,0,0.5)',\n            display: 'flex',\n            alignItems: 'center',\n            justifyContent: 'center',\n            zIndex: '9999',\n            transition: 'opacity 0.3s ease'\n        });\n\n        // Create Container\n        const container = document.createElement('div');\n        Object.assign(container.style, {\n            width: '450px',\n            height: 'min(600px, 90vh)',\n            backgroundColor: '#fff',\n            borderRadius: '20px',\n            overflow: 'hidden',\n            position: 'relative',\n            boxShadow: '0 25px 50px -12px rgba(0,0,0,0.25)'\n        });\n\n        // Create Close Button\n        const closeBtn = document.createElement('button');\n        closeBtn.innerHTML = '×';\n        Object.assign(closeBtn.style, {\n            position: 'absolute',\n            right: '15px',\n            top: '10px',\n            fontSize: '24px',\n            border: 'none',\n            background: 'none',\n            cursor: 'pointer',\n            color: '#999',\n            zIndex: '1'\n        });\n        closeBtn.onclick = () => {\n            this.close();\n            options?.onCancel?.();\n        };\n\n        // Create Iframe\n        this.iframe = document.createElement('iframe');\n        this.iframe.src = finalUrl;\n        Object.assign(this.iframe.style, {\n            width: '100%',\n            height: '100%',\n            border: 'none'\n        });\n\n        container.appendChild(closeBtn);\n        container.appendChild(this.iframe);\n        this.modal.appendChild(container);\n        document.body.appendChild(this.modal);\n\n        // Listen for messages from checkout page\n        this.messageHandler = (event: MessageEvent) => {\n            // Validate origin if specified\n            if (options?.allowedOrigin && options.allowedOrigin !== '*') {\n                if (event.origin !== options.allowedOrigin) {\n                    return;\n                }\n            }\n\n            const data = event.data as PaymentEventData;\n\n            if (!data || typeof data !== 'object' || !data.type) {\n                return;\n            }\n\n            switch (data.type) {\n                case 'PAYMENT_SUCCESS':\n                    options?.onSuccess?.(data.orderId);\n                    // Auto-close after success callback\n                    setTimeout(() => this.close(), 2000);\n                    break;\n                case 'PAYMENT_CANCELLED':\n                    options?.onCancel?.(data.orderId);\n                    break;\n                case 'PAYMENT_RESIZE':\n                    if (data.height && container) {\n                        // Limit max height to 90% of viewport\n                        const maxHeight = window.innerHeight * 0.9;\n                        const newHeight = Math.min(data.height, maxHeight);\n                        container.style.height = `${newHeight}px`;\n                    }\n                    break;\n                case 'PAYMENT_CLOSE':\n                    this.close();\n                    options?.onClose?.();\n                    break;\n            }\n        };\n        window.addEventListener('message', this.messageHandler);\n    }\n\n    /**\n     * Close the payment modal\n     */\n    close() {\n        if (typeof window === 'undefined') return;\n\n        if (this.messageHandler) {\n            window.removeEventListener('message', this.messageHandler);\n            this.messageHandler = null;\n        }\n        if (this.modal && this.modal.parentNode) {\n            this.modal.parentNode.removeChild(this.modal);\n        }\n        this.modal = null;\n        this.iframe = null;\n    }\n\n    /**\n     * Poll order status from integrator's API endpoint\n     * @param statusUrl - The integrator's API endpoint to check order status\n     * @param options - Polling options\n     * @returns Promise that resolves when order is paid or rejects on timeout/failure\n     */\n    async pollOrderStatus(statusUrl: string, options?: PollOptions): Promise<OrderStatus> {\n        const interval = options?.interval || 3000;\n        const timeout = options?.timeout || 300000;\n        const startTime = Date.now();\n\n        return new Promise((resolve, reject) => {\n            const poll = async () => {\n                try {\n                    const response = await fetch(statusUrl);\n                    if (!response.ok) {\n                        throw new Error(`Status check failed: ${response.status}`);\n                    }\n\n                    const status: OrderStatus = await response.json();\n                    options?.onStatusChange?.(status);\n\n                    if (status.status === 'PAID') {\n                        resolve(status);\n                        return;\n                    }\n\n                    if (status.status === 'CANCELLED' || status.status === 'FAILED') {\n                        reject(new Error(`Order ${status.status.toLowerCase()}`));\n                        return;\n                    }\n\n                    // Check timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(new Error('Polling timeout'));\n                        return;\n                    }\n\n                    // Continue polling\n                    setTimeout(poll, interval);\n                } catch (error) {\n                    // On network error, continue polling unless timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(error);\n                        return;\n                    }\n                    setTimeout(poll, interval);\n                }\n            };\n\n            poll();\n        });\n    }\n}\n\n/**\n * Convenience function to create a PaymentUI instance\n */\nexport function createPaymentUI(): PaymentUI {\n    return new PaymentUI();\n}\n","/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Get all entitlements for a user\n     * @param userId - User ID\n     */\n    async getEntitlements(userId: string): Promise<Record<string, any>> {\n        return this.request(\"GET\", `/users/${userId}/entitlements`);\n    }\n\n    /**\n     * Get a single entitlement value\n     * @param userId - User ID\n     * @param key - Entitlement key\n     */\n    async getEntitlementValue(userId: string, key: string): Promise<any> {\n        const entitlements = await this.getEntitlements(userId);\n        return entitlements[key];\n    }\n\n    /**\n     * Consume numeric entitlement\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param amount - Amount to consume\n     */\n    async consumeEntitlement(userId: string, key: string, amount: number): Promise<{ balance: number }> {\n        return this.request(\"POST\", `/users/${userId}/entitlements/consume`, { key, amount });\n    }\n\n    /**\n     * Add numeric entitlement (e.g. refund)\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param amount - Amount to add\n     */\n    async addEntitlement(userId: string, key: string, amount: number): Promise<{ balance: number }> {\n        return this.request(\"POST\", `/users/${userId}/entitlements/add`, { key, amount });\n    }\n\n    /**\n     * Toggle boolean entitlement\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param enabled - Whether to enable\n     */\n    async toggleEntitlement(userId: string, key: string, enabled: boolean): Promise<{ isEnabled: boolean }> {\n        // Toggle endpoint expects POST with enabled flag\n        // However, looking at list_dir, we have toggle/route.ts\n        // I should verify its contract, but assuming standard toggle pattern:\n        return this.request(\"POST\", `/users/${userId}/entitlements/toggle`, { key, enabled });\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;AAyEO,IAAM,YAAN,MAAgB;AAAA,EAAhB;AACH,wBAAQ,UAAmC;AAC3C,wBAAQ,SAA+B;AACvC,wBAAQ,kBAAyD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjE,YAAY,aAAqC,SAA4B;AACzE,QAAI,OAAO,aAAa,YAAa;AACrC,QAAI,KAAK,MAAO;AAEhB,QAAI;AACJ,QAAI,OAAO,gBAAgB,UAAU;AACjC,oBAAc;AAAA,IAClB,OAAO;AACH,YAAM,EAAE,OAAO,WAAW,SAAS,UAAU,yBAAyB,IAAI;AAC1E,oBAAc,GAAG,QAAQ,QAAQ,OAAO,EAAE,CAAC,aAAa,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,IACzF;AAEA,QAAI,WAAW;AACf,QAAI,SAAS,QAAQ;AACjB,UAAI;AACA,cAAM,MAAM,IAAI,IAAI,WAAW;AAE/B,cAAM,eAAe,IAAI,QAAQ,MAAM;AACvC,YAAI,CAAC,IAAI,SAAS,WAAW,GAAG,YAAY,GAAG,KAAK,IAAI,aAAa,cAAc;AAC/E,cAAI,WAAW,GAAG,YAAY,GAAG,IAAI,QAAQ;AAC7C,qBAAW,IAAI,SAAS;AAAA,QAC5B;AAAA,MACJ,SAAS,IAAI;AAET,cAAM,eAAe,IAAI,QAAQ,MAAM;AACvC,YAAI,CAAC,YAAY,WAAW,GAAG,YAAY,GAAG,KAAK,gBAAgB,cAAc;AAC7E,qBAAW,GAAG,YAAY,GAAG,YAAY,WAAW,GAAG,IAAI,KAAK,GAAG,GAAG,WAAW;AAAA,QACrF;AAAA,MACJ;AAAA,IACJ;AAGA,SAAK,QAAQ,SAAS,cAAc,KAAK;AACzC,WAAO,OAAO,KAAK,MAAM,OAAO;AAAA,MAC5B,UAAU;AAAA,MACV,KAAK;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY;AAAA,IAChB,CAAC;AAGD,UAAM,YAAY,SAAS,cAAc,KAAK;AAC9C,WAAO,OAAO,UAAU,OAAO;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,UAAU;AAAA,MACV,UAAU;AAAA,MACV,WAAW;AAAA,IACf,CAAC;AAGD,UAAM,WAAW,SAAS,cAAc,QAAQ;AAChD,aAAS,YAAY;AACrB,WAAO,OAAO,SAAS,OAAO;AAAA,MAC1B,UAAU;AAAA,MACV,OAAO;AAAA,MACP,KAAK;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ;AAAA,IACZ,CAAC;AACD,aAAS,UAAU,MAAM;AACrB,WAAK,MAAM;AACX,eAAS,WAAW;AAAA,IACxB;AAGA,SAAK,SAAS,SAAS,cAAc,QAAQ;AAC7C,SAAK,OAAO,MAAM;AAClB,WAAO,OAAO,KAAK,OAAO,OAAO;AAAA,MAC7B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,IACZ,CAAC;AAED,cAAU,YAAY,QAAQ;AAC9B,cAAU,YAAY,KAAK,MAAM;AACjC,SAAK,MAAM,YAAY,SAAS;AAChC,aAAS,KAAK,YAAY,KAAK,KAAK;AAGpC,SAAK,iBAAiB,CAAC,UAAwB;AAE3C,UAAI,SAAS,iBAAiB,QAAQ,kBAAkB,KAAK;AACzD,YAAI,MAAM,WAAW,QAAQ,eAAe;AACxC;AAAA,QACJ;AAAA,MACJ;AAEA,YAAM,OAAO,MAAM;AAEnB,UAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM;AACjD;AAAA,MACJ;AAEA,cAAQ,KAAK,MAAM;AAAA,QACf,KAAK;AACD,mBAAS,YAAY,KAAK,OAAO;AAEjC,qBAAW,MAAM,KAAK,MAAM,GAAG,GAAI;AACnC;AAAA,QACJ,KAAK;AACD,mBAAS,WAAW,KAAK,OAAO;AAChC;AAAA,QACJ,KAAK;AACD,cAAI,KAAK,UAAU,WAAW;AAE1B,kBAAM,YAAY,OAAO,cAAc;AACvC,kBAAM,YAAY,KAAK,IAAI,KAAK,QAAQ,SAAS;AACjD,sBAAU,MAAM,SAAS,GAAG,SAAS;AAAA,UACzC;AACA;AAAA,QACJ,KAAK;AACD,eAAK,MAAM;AACX,mBAAS,UAAU;AACnB;AAAA,MACR;AAAA,IACJ;AACA,WAAO,iBAAiB,WAAW,KAAK,cAAc;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ;AACJ,QAAI,OAAO,WAAW,YAAa;AAEnC,QAAI,KAAK,gBAAgB;AACrB,aAAO,oBAAoB,WAAW,KAAK,cAAc;AACzD,WAAK,iBAAiB;AAAA,IAC1B;AACA,QAAI,KAAK,SAAS,KAAK,MAAM,YAAY;AACrC,WAAK,MAAM,WAAW,YAAY,KAAK,KAAK;AAAA,IAChD;AACA,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAAgB,WAAmB,SAA6C;AAClF,UAAM,WAAW,SAAS,YAAY;AACtC,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,YAAM,OAAO,YAAY;AACrB,YAAI;AACA,gBAAM,WAAW,MAAM,MAAM,SAAS;AACtC,cAAI,CAAC,SAAS,IAAI;AACd,kBAAM,IAAI,MAAM,wBAAwB,SAAS,MAAM,EAAE;AAAA,UAC7D;AAEA,gBAAM,SAAsB,MAAM,SAAS,KAAK;AAChD,mBAAS,iBAAiB,MAAM;AAEhC,cAAI,OAAO,WAAW,QAAQ;AAC1B,oBAAQ,MAAM;AACd;AAAA,UACJ;AAEA,cAAI,OAAO,WAAW,eAAe,OAAO,WAAW,UAAU;AAC7D,mBAAO,IAAI,MAAM,SAAS,OAAO,OAAO,YAAY,CAAC,EAAE,CAAC;AACxD;AAAA,UACJ;AAGA,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,IAAI,MAAM,iBAAiB,CAAC;AACnC;AAAA,UACJ;AAGA,qBAAW,MAAM,QAAQ;AAAA,QAC7B,SAAS,OAAO;AAEZ,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,KAAK;AACZ;AAAA,UACJ;AACA,qBAAW,MAAM,QAAQ;AAAA,QAC7B;AAAA,MACJ;AAEA,WAAK;AAAA,IACT,CAAC;AAAA,EACL;AACJ;AAKO,SAAS,kBAA6B;AACzC,SAAO,IAAI,UAAU;AACzB;;;AChSA,OAAO,YAAY;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,QAA8C;AAChE,WAAO,KAAK,QAAQ,OAAO,UAAU,MAAM,eAAe;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,oBAAoB,QAAgB,KAA2B;AACjE,UAAM,eAAe,MAAM,KAAK,gBAAgB,MAAM;AACtD,WAAO,aAAa,GAAG;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,mBAAmB,QAAgB,KAAa,QAA8C;AAChG,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,yBAAyB,EAAE,KAAK,OAAO,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eAAe,QAAgB,KAAa,QAA8C;AAC5F,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,qBAAqB,EAAE,KAAK,OAAO,CAAC;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAkB,QAAgB,KAAa,SAAmD;AAIpG,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,wBAAwB,EAAE,KAAK,QAAQ,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":[]}

package/dist/{server.mjs → server.cjs}

@@ -1,9 +1,41 @@
+"use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 
 // src/server.ts
-import crypto from "crypto";
+var server_exports = {};
+__export(server_exports, {
+  PaymentClient: () => PaymentClient
+});
+module.exports = __toCommonJS(server_exports);
+var import_crypto = __toESM(require("crypto"), 1);
 var PaymentClient = class {
   constructor(options) {
     __publicField(this, "appId");
@@ -22,7 +54,7 @@ var PaymentClient = class {
    */
   generateSignature(timestamp) {
     const str = `${this.appId}${this.appSecret}${timestamp}`;
-    return crypto.createHash("sha256").update(str).digest("hex");
+    return import_crypto.default.createHash("sha256").update(str).digest("hex");
   }
   /**
    * Internal request helper for Gateway API
@@ -60,8 +92,8 @@ var PaymentClient = class {
   decryptCallback(notification) {
     try {
       const { iv, encryptedData, authTag } = notification;
-      const key = crypto.createHash("sha256").update(this.appSecret).digest();
-      const decipher = crypto.createDecipheriv(
+      const key = import_crypto.default.createHash("sha256").update(this.appSecret).digest();
+      const decipher = import_crypto.default.createDecipheriv(
         "aes-256-gcm",
         key,
         Buffer.from(iv, "hex")
@@ -119,6 +151,49 @@ var PaymentClient = class {
   async getOrderStatus(orderId) {
     return this.request("GET", `/orders/${orderId}`);
   }
+  /**
+   * Get all entitlements for a user
+   * @param userId - User ID
+   */
+  async getEntitlements(userId) {
+    return this.request("GET", `/users/${userId}/entitlements`);
+  }
+  /**
+   * Get a single entitlement value
+   * @param userId - User ID
+   * @param key - Entitlement key
+   */
+  async getEntitlementValue(userId, key) {
+    const entitlements = await this.getEntitlements(userId);
+    return entitlements[key];
+  }
+  /**
+   * Consume numeric entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to consume
+   */
+  async consumeEntitlement(userId, key, amount) {
+    return this.request("POST", `/users/${userId}/entitlements/consume`, { key, amount });
+  }
+  /**
+   * Add numeric entitlement (e.g. refund)
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to add
+   */
+  async addEntitlement(userId, key, amount) {
+    return this.request("POST", `/users/${userId}/entitlements/add`, { key, amount });
+  }
+  /**
+   * Toggle boolean entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param enabled - Whether to enable
+   */
+  async toggleEntitlement(userId, key, enabled) {
+    return this.request("POST", `/users/${userId}/entitlements/toggle`, { key, enabled });
+  }
   /**
    * Generate checkout URL for client-side payment
    * @param productId - Product ID
@@ -129,7 +204,8 @@ var PaymentClient = class {
     return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;
   }
 };
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   PaymentClient
-};
-//# sourceMappingURL=server.mjs.map
+});
+//# sourceMappingURL=server.cjs.map

package/dist/{server.mjs.map → server.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;AAKA,OAAO,YAAY;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Get all entitlements for a user\n     * @param userId - User ID\n     */\n    async getEntitlements(userId: string): Promise<Record<string, any>> {\n        return this.request(\"GET\", `/users/${userId}/entitlements`);\n    }\n\n    /**\n     * Get a single entitlement value\n     * @param userId - User ID\n     * @param key - Entitlement key\n     */\n    async getEntitlementValue(userId: string, key: string): Promise<any> {\n        const entitlements = await this.getEntitlements(userId);\n        return entitlements[key];\n    }\n\n    /**\n     * Consume numeric entitlement\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param amount - Amount to consume\n     */\n    async consumeEntitlement(userId: string, key: string, amount: number): Promise<{ balance: number }> {\n        return this.request(\"POST\", `/users/${userId}/entitlements/consume`, { key, amount });\n    }\n\n    /**\n     * Add numeric entitlement (e.g. refund)\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param amount - Amount to add\n     */\n    async addEntitlement(userId: string, key: string, amount: number): Promise<{ balance: number }> {\n        return this.request(\"POST\", `/users/${userId}/entitlements/add`, { key, amount });\n    }\n\n    /**\n     * Toggle boolean entitlement\n     * @param userId - User ID\n     * @param key - Entitlement key\n     * @param enabled - Whether to enable\n     */\n    async toggleEntitlement(userId: string, key: string, enabled: boolean): Promise<{ isEnabled: boolean }> {\n        // Toggle endpoint expects POST with enabled flag\n        // However, looking at list_dir, we have toggle/route.ts\n        // I should verify its contract, but assuming standard toggle pattern:\n        return this.request(\"POST\", `/users/${userId}/entitlements/toggle`, { key, enabled });\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,oBAAmB;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,cAAAA,QAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,QAA8C;AAChE,WAAO,KAAK,QAAQ,OAAO,UAAU,MAAM,eAAe;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,oBAAoB,QAAgB,KAA2B;AACjE,UAAM,eAAe,MAAM,KAAK,gBAAgB,MAAM;AACtD,WAAO,aAAa,GAAG;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,mBAAmB,QAAgB,KAAa,QAA8C;AAChG,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,yBAAyB,EAAE,KAAK,OAAO,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eAAe,QAAgB,KAAa,QAA8C;AAC5F,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,qBAAqB,EAAE,KAAK,OAAO,CAAC;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAkB,QAAgB,KAAa,SAAmD;AAIpG,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,wBAAwB,EAAE,KAAK,QAAQ,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":["crypto"]}

package/dist/{server.d.mts → server.d.cts}

@@ -148,6 +148,44 @@ declare class PaymentClient {
      * @param orderId - The order ID to query
      */
     getOrderStatus(orderId: string): Promise<OrderStatus>;
+    /**
+     * Get all entitlements for a user
+     * @param userId - User ID
+     */
+    getEntitlements(userId: string): Promise<Record<string, any>>;
+    /**
+     * Get a single entitlement value
+     * @param userId - User ID
+     * @param key - Entitlement key
+     */
+    getEntitlementValue(userId: string, key: string): Promise<any>;
+    /**
+     * Consume numeric entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to consume
+     */
+    consumeEntitlement(userId: string, key: string, amount: number): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Add numeric entitlement (e.g. refund)
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to add
+     */
+    addEntitlement(userId: string, key: string, amount: number): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Toggle boolean entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param enabled - Whether to enable
+     */
+    toggleEntitlement(userId: string, key: string, enabled: boolean): Promise<{
+        isEnabled: boolean;
+    }>;
     /**
      * Generate checkout URL for client-side payment
      * @param productId - Product ID

package/dist/server.d.ts

@@ -148,6 +148,44 @@ declare class PaymentClient {
      * @param orderId - The order ID to query
      */
     getOrderStatus(orderId: string): Promise<OrderStatus>;
+    /**
+     * Get all entitlements for a user
+     * @param userId - User ID
+     */
+    getEntitlements(userId: string): Promise<Record<string, any>>;
+    /**
+     * Get a single entitlement value
+     * @param userId - User ID
+     * @param key - Entitlement key
+     */
+    getEntitlementValue(userId: string, key: string): Promise<any>;
+    /**
+     * Consume numeric entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to consume
+     */
+    consumeEntitlement(userId: string, key: string, amount: number): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Add numeric entitlement (e.g. refund)
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to add
+     */
+    addEntitlement(userId: string, key: string, amount: number): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Toggle boolean entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param enabled - Whether to enable
+     */
+    toggleEntitlement(userId: string, key: string, enabled: boolean): Promise<{
+        isEnabled: boolean;
+    }>;
     /**
      * Generate checkout URL for client-side payment
      * @param productId - Product ID