@youidian/pay-sdk 1.0.0

package/dist/index.mjs

@@ -0,0 +1,314 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/client.ts
+var PaymentUI = class {
+  constructor() {
+    __publicField(this, "iframe", null);
+    __publicField(this, "modal", null);
+    __publicField(this, "messageHandler", null);
+  }
+  /**
+   * Opens the payment checkout page in an iframe modal.
+   * @param checkoutUrl - The checkout page URL
+   * @param options - UI options
+   */
+  openPayment(checkoutUrl, options) {
+    if (typeof document === "undefined") return;
+    if (this.modal) return;
+    let finalUrl = checkoutUrl;
+    if (options?.locale) {
+      try {
+        const url = new URL(checkoutUrl);
+        if (!url.pathname.startsWith(`/${options.locale}/`)) {
+          url.pathname = `/${options.locale}${url.pathname}`;
+          finalUrl = url.toString();
+        }
+      } catch (_e) {
+        if (!checkoutUrl.startsWith(`/${options.locale}/`)) {
+          finalUrl = `/${options.locale}${checkoutUrl.startsWith("/") ? "" : "/"}${checkoutUrl}`;
+        }
+      }
+    }
+    this.modal = document.createElement("div");
+    Object.assign(this.modal.style, {
+      position: "fixed",
+      top: "0",
+      left: "0",
+      width: "100%",
+      height: "100%",
+      backgroundColor: "rgba(0,0,0,0.5)",
+      display: "flex",
+      alignItems: "center",
+      justifyContent: "center",
+      zIndex: "9999",
+      transition: "opacity 0.3s ease"
+    });
+    const container = document.createElement("div");
+    Object.assign(container.style, {
+      width: "450px",
+      height: "min(600px, 90vh)",
+      backgroundColor: "#fff",
+      borderRadius: "20px",
+      overflow: "hidden",
+      position: "relative",
+      boxShadow: "0 25px 50px -12px rgba(0,0,0,0.25)"
+    });
+    const closeBtn = document.createElement("button");
+    closeBtn.innerHTML = "\xD7";
+    Object.assign(closeBtn.style, {
+      position: "absolute",
+      right: "15px",
+      top: "10px",
+      fontSize: "24px",
+      border: "none",
+      background: "none",
+      cursor: "pointer",
+      color: "#999",
+      zIndex: "1"
+    });
+    closeBtn.onclick = () => {
+      this.close();
+      options?.onCancel?.();
+    };
+    this.iframe = document.createElement("iframe");
+    this.iframe.src = finalUrl;
+    Object.assign(this.iframe.style, {
+      width: "100%",
+      height: "100%",
+      border: "none"
+    });
+    container.appendChild(closeBtn);
+    container.appendChild(this.iframe);
+    this.modal.appendChild(container);
+    document.body.appendChild(this.modal);
+    this.messageHandler = (event) => {
+      if (options?.allowedOrigin && options.allowedOrigin !== "*") {
+        if (event.origin !== options.allowedOrigin) {
+          return;
+        }
+      }
+      const data = event.data;
+      if (!data || typeof data !== "object" || !data.type) {
+        return;
+      }
+      switch (data.type) {
+        case "PAYMENT_SUCCESS":
+          options?.onSuccess?.(data.orderId);
+          setTimeout(() => this.close(), 2e3);
+          break;
+        case "PAYMENT_CANCELLED":
+          options?.onCancel?.(data.orderId);
+          break;
+        case "PAYMENT_RESIZE":
+          if (data.height && container) {
+            const maxHeight = window.innerHeight * 0.9;
+            const newHeight = Math.min(data.height, maxHeight);
+            container.style.height = `${newHeight}px`;
+          }
+          break;
+        case "PAYMENT_CLOSE":
+          this.close();
+          options?.onClose?.();
+          break;
+      }
+    };
+    window.addEventListener("message", this.messageHandler);
+  }
+  /**
+   * Close the payment modal
+   */
+  close() {
+    if (typeof window === "undefined") return;
+    if (this.messageHandler) {
+      window.removeEventListener("message", this.messageHandler);
+      this.messageHandler = null;
+    }
+    if (this.modal && this.modal.parentNode) {
+      this.modal.parentNode.removeChild(this.modal);
+    }
+    this.modal = null;
+    this.iframe = null;
+  }
+  /**
+   * Poll order status from integrator's API endpoint
+   * @param statusUrl - The integrator's API endpoint to check order status
+   * @param options - Polling options
+   * @returns Promise that resolves when order is paid or rejects on timeout/failure
+   */
+  async pollOrderStatus(statusUrl, options) {
+    const interval = options?.interval || 3e3;
+    const timeout = options?.timeout || 3e5;
+    const startTime = Date.now();
+    return new Promise((resolve, reject) => {
+      const poll = async () => {
+        try {
+          const response = await fetch(statusUrl);
+          if (!response.ok) {
+            throw new Error(`Status check failed: ${response.status}`);
+          }
+          const status = await response.json();
+          options?.onStatusChange?.(status);
+          if (status.status === "PAID") {
+            resolve(status);
+            return;
+          }
+          if (status.status === "CANCELLED" || status.status === "FAILED") {
+            reject(new Error(`Order ${status.status.toLowerCase()}`));
+            return;
+          }
+          if (Date.now() - startTime > timeout) {
+            reject(new Error("Polling timeout"));
+            return;
+          }
+          setTimeout(poll, interval);
+        } catch (error) {
+          if (Date.now() - startTime > timeout) {
+            reject(error);
+            return;
+          }
+          setTimeout(poll, interval);
+        }
+      };
+      poll();
+    });
+  }
+};
+function createPaymentUI() {
+  return new PaymentUI();
+}
+
+// src/server.ts
+import crypto from "crypto";
+var PaymentClient = class {
+  constructor(options) {
+    __publicField(this, "appId");
+    __publicField(this, "appSecret");
+    __publicField(this, "baseUrl");
+    if (!options.appId) throw new Error("appId is required");
+    if (!options.appSecret) throw new Error("appSecret is required");
+    if (!options.baseUrl) throw new Error("baseUrl is required");
+    this.appId = options.appId;
+    this.appSecret = options.appSecret;
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+  }
+  /**
+   * Generate SHA256 signature for the request
+   * Logic: SHA256(appId + appSecret + timestamp)
+   */
+  generateSignature(timestamp) {
+    const str = `${this.appId}${this.appSecret}${timestamp}`;
+    return crypto.createHash("sha256").update(str).digest("hex");
+  }
+  /**
+   * Internal request helper for Gateway API
+   */
+  async request(method, path, body) {
+    const timestamp = Date.now();
+    const signature = this.generateSignature(timestamp);
+    const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Pay-Timestamp": timestamp.toString(),
+      "X-Pay-Sign": signature
+    };
+    const options = {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    };
+    const response = await fetch(url, options);
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);
+    }
+    const json = await response.json();
+    if (json.error) {
+      throw new Error(`Payment API Error: ${json.error}`);
+    }
+    return json.data;
+  }
+  /**
+   * Decrypts the callback notification payload using AES-256-GCM.
+   * @param notification - The encrypted notification from payment webhook
+   * @returns Decrypted payment callback data
+   */
+  decryptCallback(notification) {
+    try {
+      const { iv, encryptedData, authTag } = notification;
+      const key = crypto.createHash("sha256").update(this.appSecret).digest();
+      const decipher = crypto.createDecipheriv(
+        "aes-256-gcm",
+        key,
+        Buffer.from(iv, "hex")
+      );
+      decipher.setAuthTag(Buffer.from(authTag, "hex"));
+      let decrypted = decipher.update(encryptedData, "hex", "utf8");
+      decrypted += decipher.final("utf8");
+      return JSON.parse(decrypted);
+    } catch (error) {
+      throw new Error("Failed to decrypt payment callback: Invalid secret or tampered data.");
+    }
+  }
+  /**
+   * Fetch products for the configured app.
+   */
+  async getProducts(options) {
+    const params = new URLSearchParams();
+    params.append("appId", this.appId);
+    if (options?.locale) params.append("locale", options.locale);
+    if (options?.currency) params.append("currency", options.currency);
+    const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        "Accept": "application/json"
+      }
+    });
+    if (!res.ok) {
+      throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);
+    }
+    const json = await res.json();
+    return json.data?.products || [];
+  }
+  /**
+   * Create a new order
+   * @param params - Order creation parameters
+   * @returns Order details with payment parameters
+   */
+  async createOrder(params) {
+    return this.request("POST", "/orders", params);
+  }
+  /**
+   * Pay for an existing order
+   * @param orderId - The order ID to pay
+   * @param params - Payment parameters including channel
+   */
+  async payOrder(orderId, params) {
+    return this.request("POST", `/orders/${orderId}/pay`, params);
+  }
+  /**
+   * Query order status
+   * @param orderId - The order ID to query
+   */
+  async getOrderStatus(orderId) {
+    return this.request("GET", `/orders/${orderId}`);
+  }
+  /**
+   * Generate checkout URL for client-side payment
+   * @param productId - Product ID
+   * @param priceId - Price ID
+   * @returns Checkout page URL
+   */
+  getCheckoutUrl(productId, priceId) {
+    return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;
+  }
+};
+export {
+  PaymentClient,
+  PaymentUI,
+  createPaymentUI
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts","../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Client Module\n * 用于浏览器端集成，包含支付弹窗、状态轮询等功能\n * 不依赖 Node.js crypto 模块\n */\n\n/**\n * Payment event types from checkout pages\n */\nexport type PaymentEventType = 'PAYMENT_SUCCESS' | 'PAYMENT_CANCELLED' | 'PAYMENT_CLOSE' | 'PAYMENT_RESIZE';\n\n/**\n * Payment event data from postMessage\n */\nexport interface PaymentEventData {\n    type: PaymentEventType;\n    orderId?: string;\n    height?: number;\n}\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Payment UI Options\n */\nexport interface PaymentUIOptions {\n    locale?: string;\n    onSuccess?: (orderId?: string) => void;\n    onCancel?: (orderId?: string) => void;\n    onClose?: () => void;\n    /** Origin to validate postMessage (defaults to '*', set for security) */\n    allowedOrigin?: string;\n}\n\n/**\n * Poll Options\n */\nexport interface PollOptions {\n    /** Polling interval in ms (default: 3000) */\n    interval?: number;\n    /** Timeout in ms (default: 300000 = 5 minutes) */\n    timeout?: number;\n    /** Callback on each status check */\n    onStatusChange?: (status: OrderStatus) => void;\n}\n\n/**\n * Client-side Payment UI Helper\n * 浏览器端支付 UI 辅助类，用于弹出支付窗口和轮询订单状态\n */\nexport class PaymentUI {\n    private iframe: HTMLIFrameElement | null = null;\n    private modal: HTMLDivElement | null = null;\n    private messageHandler: ((event: MessageEvent) => void) | null = null;\n\n    /**\n     * Opens the payment checkout page in an iframe modal.\n     * @param checkoutUrl - The checkout page URL\n     * @param options - UI options\n     */\n    openPayment(checkoutUrl: string, options?: PaymentUIOptions) {\n        if (typeof document === 'undefined') return; // Server-side guard\n        if (this.modal) return; // Prevent multiple modals\n\n        let finalUrl = checkoutUrl;\n        if (options?.locale) {\n            try {\n                const url = new URL(checkoutUrl);\n                if (!url.pathname.startsWith(`/${options.locale}/`)) {\n                    url.pathname = `/${options.locale}${url.pathname}`;\n                    finalUrl = url.toString();\n                }\n            } catch (_e) {\n                // Fallback if URL is relative or invalid\n                if (!checkoutUrl.startsWith(`/${options.locale}/`)) {\n                    finalUrl = `/${options.locale}${checkoutUrl.startsWith('/') ? '' : '/'}${checkoutUrl}`;\n                }\n            }\n        }\n\n        // Create Modal Overlay\n        this.modal = document.createElement('div');\n        Object.assign(this.modal.style, {\n            position: 'fixed',\n            top: '0',\n            left: '0',\n            width: '100%',\n            height: '100%',\n            backgroundColor: 'rgba(0,0,0,0.5)',\n            display: 'flex',\n            alignItems: 'center',\n            justifyContent: 'center',\n            zIndex: '9999',\n            transition: 'opacity 0.3s ease'\n        });\n\n        // Create Container\n        const container = document.createElement('div');\n        Object.assign(container.style, {\n            width: '450px',\n            height: 'min(600px, 90vh)',\n            backgroundColor: '#fff',\n            borderRadius: '20px',\n            overflow: 'hidden',\n            position: 'relative',\n            boxShadow: '0 25px 50px -12px rgba(0,0,0,0.25)'\n        });\n\n        // Create Close Button\n        const closeBtn = document.createElement('button');\n        closeBtn.innerHTML = '×';\n        Object.assign(closeBtn.style, {\n            position: 'absolute',\n            right: '15px',\n            top: '10px',\n            fontSize: '24px',\n            border: 'none',\n            background: 'none',\n            cursor: 'pointer',\n            color: '#999',\n            zIndex: '1'\n        });\n        closeBtn.onclick = () => {\n            this.close();\n            options?.onCancel?.();\n        };\n\n        // Create Iframe\n        this.iframe = document.createElement('iframe');\n        this.iframe.src = finalUrl;\n        Object.assign(this.iframe.style, {\n            width: '100%',\n            height: '100%',\n            border: 'none'\n        });\n\n        container.appendChild(closeBtn);\n        container.appendChild(this.iframe);\n        this.modal.appendChild(container);\n        document.body.appendChild(this.modal);\n\n        // Listen for messages from checkout page\n        this.messageHandler = (event: MessageEvent) => {\n            // Validate origin if specified\n            if (options?.allowedOrigin && options.allowedOrigin !== '*') {\n                if (event.origin !== options.allowedOrigin) {\n                    return;\n                }\n            }\n\n            const data = event.data as PaymentEventData;\n\n            if (!data || typeof data !== 'object' || !data.type) {\n                return;\n            }\n\n            switch (data.type) {\n                case 'PAYMENT_SUCCESS':\n                    options?.onSuccess?.(data.orderId);\n                    // Auto-close after success callback\n                    setTimeout(() => this.close(), 2000);\n                    break;\n                case 'PAYMENT_CANCELLED':\n                    options?.onCancel?.(data.orderId);\n                    break;\n                case 'PAYMENT_RESIZE':\n                    if (data.height && container) {\n                        // Limit max height to 90% of viewport\n                        const maxHeight = window.innerHeight * 0.9;\n                        const newHeight = Math.min(data.height, maxHeight);\n                        container.style.height = `${newHeight}px`;\n                    }\n                    break;\n                case 'PAYMENT_CLOSE':\n                    this.close();\n                    options?.onClose?.();\n                    break;\n            }\n        };\n        window.addEventListener('message', this.messageHandler);\n    }\n\n    /**\n     * Close the payment modal\n     */\n    close() {\n        if (typeof window === 'undefined') return;\n\n        if (this.messageHandler) {\n            window.removeEventListener('message', this.messageHandler);\n            this.messageHandler = null;\n        }\n        if (this.modal && this.modal.parentNode) {\n            this.modal.parentNode.removeChild(this.modal);\n        }\n        this.modal = null;\n        this.iframe = null;\n    }\n\n    /**\n     * Poll order status from integrator's API endpoint\n     * @param statusUrl - The integrator's API endpoint to check order status\n     * @param options - Polling options\n     * @returns Promise that resolves when order is paid or rejects on timeout/failure\n     */\n    async pollOrderStatus(statusUrl: string, options?: PollOptions): Promise<OrderStatus> {\n        const interval = options?.interval || 3000;\n        const timeout = options?.timeout || 300000;\n        const startTime = Date.now();\n\n        return new Promise((resolve, reject) => {\n            const poll = async () => {\n                try {\n                    const response = await fetch(statusUrl);\n                    if (!response.ok) {\n                        throw new Error(`Status check failed: ${response.status}`);\n                    }\n\n                    const status: OrderStatus = await response.json();\n                    options?.onStatusChange?.(status);\n\n                    if (status.status === 'PAID') {\n                        resolve(status);\n                        return;\n                    }\n\n                    if (status.status === 'CANCELLED' || status.status === 'FAILED') {\n                        reject(new Error(`Order ${status.status.toLowerCase()}`));\n                        return;\n                    }\n\n                    // Check timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(new Error('Polling timeout'));\n                        return;\n                    }\n\n                    // Continue polling\n                    setTimeout(poll, interval);\n                } catch (error) {\n                    // On network error, continue polling unless timeout\n                    if (Date.now() - startTime > timeout) {\n                        reject(error);\n                        return;\n                    }\n                    setTimeout(poll, interval);\n                }\n            };\n\n            poll();\n        });\n    }\n}\n\n/**\n * Convenience function to create a PaymentUI instance\n */\nexport function createPaymentUI(): PaymentUI {\n    return new PaymentUI();\n}\n","/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;AA0DO,IAAM,YAAN,MAAgB;AAAA,EAAhB;AACH,wBAAQ,UAAmC;AAC3C,wBAAQ,SAA+B;AACvC,wBAAQ,kBAAyD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjE,YAAY,aAAqB,SAA4B;AACzD,QAAI,OAAO,aAAa,YAAa;AACrC,QAAI,KAAK,MAAO;AAEhB,QAAI,WAAW;AACf,QAAI,SAAS,QAAQ;AACjB,UAAI;AACA,cAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,YAAI,CAAC,IAAI,SAAS,WAAW,IAAI,QAAQ,MAAM,GAAG,GAAG;AACjD,cAAI,WAAW,IAAI,QAAQ,MAAM,GAAG,IAAI,QAAQ;AAChD,qBAAW,IAAI,SAAS;AAAA,QAC5B;AAAA,MACJ,SAAS,IAAI;AAET,YAAI,CAAC,YAAY,WAAW,IAAI,QAAQ,MAAM,GAAG,GAAG;AAChD,qBAAW,IAAI,QAAQ,MAAM,GAAG,YAAY,WAAW,GAAG,IAAI,KAAK,GAAG,GAAG,WAAW;AAAA,QACxF;AAAA,MACJ;AAAA,IACJ;AAGA,SAAK,QAAQ,SAAS,cAAc,KAAK;AACzC,WAAO,OAAO,KAAK,MAAM,OAAO;AAAA,MAC5B,UAAU;AAAA,MACV,KAAK;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY;AAAA,IAChB,CAAC;AAGD,UAAM,YAAY,SAAS,cAAc,KAAK;AAC9C,WAAO,OAAO,UAAU,OAAO;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,UAAU;AAAA,MACV,UAAU;AAAA,MACV,WAAW;AAAA,IACf,CAAC;AAGD,UAAM,WAAW,SAAS,cAAc,QAAQ;AAChD,aAAS,YAAY;AACrB,WAAO,OAAO,SAAS,OAAO;AAAA,MAC1B,UAAU;AAAA,MACV,OAAO;AAAA,MACP,KAAK;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ;AAAA,IACZ,CAAC;AACD,aAAS,UAAU,MAAM;AACrB,WAAK,MAAM;AACX,eAAS,WAAW;AAAA,IACxB;AAGA,SAAK,SAAS,SAAS,cAAc,QAAQ;AAC7C,SAAK,OAAO,MAAM;AAClB,WAAO,OAAO,KAAK,OAAO,OAAO;AAAA,MAC7B,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,IACZ,CAAC;AAED,cAAU,YAAY,QAAQ;AAC9B,cAAU,YAAY,KAAK,MAAM;AACjC,SAAK,MAAM,YAAY,SAAS;AAChC,aAAS,KAAK,YAAY,KAAK,KAAK;AAGpC,SAAK,iBAAiB,CAAC,UAAwB;AAE3C,UAAI,SAAS,iBAAiB,QAAQ,kBAAkB,KAAK;AACzD,YAAI,MAAM,WAAW,QAAQ,eAAe;AACxC;AAAA,QACJ;AAAA,MACJ;AAEA,YAAM,OAAO,MAAM;AAEnB,UAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM;AACjD;AAAA,MACJ;AAEA,cAAQ,KAAK,MAAM;AAAA,QACf,KAAK;AACD,mBAAS,YAAY,KAAK,OAAO;AAEjC,qBAAW,MAAM,KAAK,MAAM,GAAG,GAAI;AACnC;AAAA,QACJ,KAAK;AACD,mBAAS,WAAW,KAAK,OAAO;AAChC;AAAA,QACJ,KAAK;AACD,cAAI,KAAK,UAAU,WAAW;AAE1B,kBAAM,YAAY,OAAO,cAAc;AACvC,kBAAM,YAAY,KAAK,IAAI,KAAK,QAAQ,SAAS;AACjD,sBAAU,MAAM,SAAS,GAAG,SAAS;AAAA,UACzC;AACA;AAAA,QACJ,KAAK;AACD,eAAK,MAAM;AACX,mBAAS,UAAU;AACnB;AAAA,MACR;AAAA,IACJ;AACA,WAAO,iBAAiB,WAAW,KAAK,cAAc;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ;AACJ,QAAI,OAAO,WAAW,YAAa;AAEnC,QAAI,KAAK,gBAAgB;AACrB,aAAO,oBAAoB,WAAW,KAAK,cAAc;AACzD,WAAK,iBAAiB;AAAA,IAC1B;AACA,QAAI,KAAK,SAAS,KAAK,MAAM,YAAY;AACrC,WAAK,MAAM,WAAW,YAAY,KAAK,KAAK;AAAA,IAChD;AACA,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAAgB,WAAmB,SAA6C;AAClF,UAAM,WAAW,SAAS,YAAY;AACtC,UAAM,UAAU,SAAS,WAAW;AACpC,UAAM,YAAY,KAAK,IAAI;AAE3B,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,YAAM,OAAO,YAAY;AACrB,YAAI;AACA,gBAAM,WAAW,MAAM,MAAM,SAAS;AACtC,cAAI,CAAC,SAAS,IAAI;AACd,kBAAM,IAAI,MAAM,wBAAwB,SAAS,MAAM,EAAE;AAAA,UAC7D;AAEA,gBAAM,SAAsB,MAAM,SAAS,KAAK;AAChD,mBAAS,iBAAiB,MAAM;AAEhC,cAAI,OAAO,WAAW,QAAQ;AAC1B,oBAAQ,MAAM;AACd;AAAA,UACJ;AAEA,cAAI,OAAO,WAAW,eAAe,OAAO,WAAW,UAAU;AAC7D,mBAAO,IAAI,MAAM,SAAS,OAAO,OAAO,YAAY,CAAC,EAAE,CAAC;AACxD;AAAA,UACJ;AAGA,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,IAAI,MAAM,iBAAiB,CAAC;AACnC;AAAA,UACJ;AAGA,qBAAW,MAAM,QAAQ;AAAA,QAC7B,SAAS,OAAO;AAEZ,cAAI,KAAK,IAAI,IAAI,YAAY,SAAS;AAClC,mBAAO,KAAK;AACZ;AAAA,UACJ;AACA,qBAAW,MAAM,QAAQ;AAAA,QAC7B;AAAA,MACJ;AAEA,WAAK;AAAA,IACT,CAAC;AAAA,EACL;AACJ;AAKO,SAAS,kBAA6B;AACzC,SAAO,IAAI,UAAU;AACzB;;;ACtQA,OAAO,YAAY;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":[]}

package/dist/server.d.mts

@@ -0,0 +1,160 @@
+/**
+ * Youidian Payment SDK - Server Module
+ * 用于服务端集成，包含签名、订单创建、回调解密等功能
+ */
+/**
+ * Order status response
+ */
+interface OrderStatus {
+    orderId: string;
+    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';
+    paidAt?: string;
+    channelTransactionId?: string;
+}
+/**
+ * Product Entitlements
+ */
+interface ProductEntitlements {
+    [key: string]: any;
+}
+/**
+ * Product Price
+ */
+interface ProductPrice {
+    id: string;
+    currency: string;
+    amount: number;
+    displayAmount: string;
+    locale: string | null;
+    isDefault: boolean;
+}
+/**
+ * Product Data
+ */
+interface Product {
+    id: string;
+    code: string;
+    type: string;
+    name: string;
+    description?: string;
+    entitlements: ProductEntitlements;
+    prices: ProductPrice[];
+}
+/**
+ * SDK Client Options
+ */
+interface PaymentClientOptions {
+    /** Application ID (Required) */
+    appId: string;
+    /** Application Secret (Required for server-side operations) */
+    appSecret: string;
+    /** API Base URL (e.g. https://pay.youidian.com) */
+    baseUrl: string;
+}
+/**
+ * Create Order Parameters
+ */
+interface CreateOrderParams {
+    productId?: string;
+    priceId?: string;
+    channel?: string;
+    userId: string;
+    returnUrl?: string;
+    metadata?: Record<string, any>;
+    merchantOrderId?: string;
+    openid?: string;
+}
+/**
+ * Create Order Response
+ */
+interface CreateOrderResponse {
+    orderId: string;
+    internalId: string;
+    amount: number;
+    currency: string;
+    payParams: any;
+}
+/**
+ * Payment Callback Notification
+ */
+interface PaymentNotification {
+    iv: string;
+    encryptedData: string;
+    authTag: string;
+}
+/**
+ * Decrypted Payment Callback Data
+ */
+interface PaymentCallbackData {
+    orderId: string;
+    merchantOrderId?: string;
+    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';
+    amount: number;
+    currency: string;
+    paidAt: string;
+    channelTransactionId?: string;
+    metadata?: Record<string, any>;
+}
+/**
+ * Server-side Payment Client
+ * 服务端支付客户端，用于创建订单、查询状态、解密回调
+ */
+declare class PaymentClient {
+    private appId;
+    private appSecret;
+    private baseUrl;
+    constructor(options: PaymentClientOptions);
+    /**
+     * Generate SHA256 signature for the request
+     * Logic: SHA256(appId + appSecret + timestamp)
+     */
+    private generateSignature;
+    /**
+     * Internal request helper for Gateway API
+     */
+    private request;
+    /**
+     * Decrypts the callback notification payload using AES-256-GCM.
+     * @param notification - The encrypted notification from payment webhook
+     * @returns Decrypted payment callback data
+     */
+    decryptCallback(notification: PaymentNotification): PaymentCallbackData;
+    /**
+     * Fetch products for the configured app.
+     */
+    getProducts(options?: {
+        locale?: string;
+        currency?: string;
+    }): Promise<Product[]>;
+    /**
+     * Create a new order
+     * @param params - Order creation parameters
+     * @returns Order details with payment parameters
+     */
+    createOrder(params: CreateOrderParams): Promise<CreateOrderResponse>;
+    /**
+     * Pay for an existing order
+     * @param orderId - The order ID to pay
+     * @param params - Payment parameters including channel
+     */
+    payOrder(orderId: string, params: {
+        channel: string;
+        returnUrl?: string;
+        openid?: string;
+        [key: string]: any;
+    }): Promise<CreateOrderResponse>;
+    /**
+     * Query order status
+     * @param orderId - The order ID to query
+     */
+    getOrderStatus(orderId: string): Promise<OrderStatus>;
+    /**
+     * Generate checkout URL for client-side payment
+     * @param productId - Product ID
+     * @param priceId - Price ID
+     * @returns Checkout page URL
+     */
+    getCheckoutUrl(productId: string, priceId: string): string;
+}
+
+export { type CreateOrderParams, type CreateOrderResponse, type OrderStatus, type PaymentCallbackData, PaymentClient, type PaymentClientOptions, type PaymentNotification, type Product, type ProductEntitlements, type ProductPrice };

package/dist/server.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Youidian Payment SDK - Server Module
+ * 用于服务端集成，包含签名、订单创建、回调解密等功能
+ */
+/**
+ * Order status response
+ */
+interface OrderStatus {
+    orderId: string;
+    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';
+    paidAt?: string;
+    channelTransactionId?: string;
+}
+/**
+ * Product Entitlements
+ */
+interface ProductEntitlements {
+    [key: string]: any;
+}
+/**
+ * Product Price
+ */
+interface ProductPrice {
+    id: string;
+    currency: string;
+    amount: number;
+    displayAmount: string;
+    locale: string | null;
+    isDefault: boolean;
+}
+/**
+ * Product Data
+ */
+interface Product {
+    id: string;
+    code: string;
+    type: string;
+    name: string;
+    description?: string;
+    entitlements: ProductEntitlements;
+    prices: ProductPrice[];
+}
+/**
+ * SDK Client Options
+ */
+interface PaymentClientOptions {
+    /** Application ID (Required) */
+    appId: string;
+    /** Application Secret (Required for server-side operations) */
+    appSecret: string;
+    /** API Base URL (e.g. https://pay.youidian.com) */
+    baseUrl: string;
+}
+/**
+ * Create Order Parameters
+ */
+interface CreateOrderParams {
+    productId?: string;
+    priceId?: string;
+    channel?: string;
+    userId: string;
+    returnUrl?: string;
+    metadata?: Record<string, any>;
+    merchantOrderId?: string;
+    openid?: string;
+}
+/**
+ * Create Order Response
+ */
+interface CreateOrderResponse {
+    orderId: string;
+    internalId: string;
+    amount: number;
+    currency: string;
+    payParams: any;
+}
+/**
+ * Payment Callback Notification
+ */
+interface PaymentNotification {
+    iv: string;
+    encryptedData: string;
+    authTag: string;
+}
+/**
+ * Decrypted Payment Callback Data
+ */
+interface PaymentCallbackData {
+    orderId: string;
+    merchantOrderId?: string;
+    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';
+    amount: number;
+    currency: string;
+    paidAt: string;
+    channelTransactionId?: string;
+    metadata?: Record<string, any>;
+}
+/**
+ * Server-side Payment Client
+ * 服务端支付客户端，用于创建订单、查询状态、解密回调
+ */
+declare class PaymentClient {
+    private appId;
+    private appSecret;
+    private baseUrl;
+    constructor(options: PaymentClientOptions);
+    /**
+     * Generate SHA256 signature for the request
+     * Logic: SHA256(appId + appSecret + timestamp)
+     */
+    private generateSignature;
+    /**
+     * Internal request helper for Gateway API
+     */
+    private request;
+    /**
+     * Decrypts the callback notification payload using AES-256-GCM.
+     * @param notification - The encrypted notification from payment webhook
+     * @returns Decrypted payment callback data
+     */
+    decryptCallback(notification: PaymentNotification): PaymentCallbackData;
+    /**
+     * Fetch products for the configured app.
+     */
+    getProducts(options?: {
+        locale?: string;
+        currency?: string;
+    }): Promise<Product[]>;
+    /**
+     * Create a new order
+     * @param params - Order creation parameters
+     * @returns Order details with payment parameters
+     */
+    createOrder(params: CreateOrderParams): Promise<CreateOrderResponse>;
+    /**
+     * Pay for an existing order
+     * @param orderId - The order ID to pay
+     * @param params - Payment parameters including channel
+     */
+    payOrder(orderId: string, params: {
+        channel: string;
+        returnUrl?: string;
+        openid?: string;
+        [key: string]: any;
+    }): Promise<CreateOrderResponse>;
+    /**
+     * Query order status
+     * @param orderId - The order ID to query
+     */
+    getOrderStatus(orderId: string): Promise<OrderStatus>;
+    /**
+     * Generate checkout URL for client-side payment
+     * @param productId - Product ID
+     * @param priceId - Price ID
+     * @returns Checkout page URL
+     */
+    getCheckoutUrl(productId: string, priceId: string): string;
+}
+
+export { type CreateOrderParams, type CreateOrderResponse, type OrderStatus, type PaymentCallbackData, PaymentClient, type PaymentClientOptions, type PaymentNotification, type Product, type ProductEntitlements, type ProductPrice };