@youidian/sdk 3.0.0

package/dist/server.d.ts

@@ -0,0 +1,385 @@
+/**
+ * Youidian Payment SDK - Server Module
+ * 用于服务端集成，包含签名、订单创建、回调解密等功能
+ */
+/**
+ * Order status response
+ */
+interface OrderStatus {
+    orderId: string;
+    status: "PENDING" | "PAID" | "CANCELLED" | "REFUNDED" | "FAILED";
+    paidAt?: string;
+    channelTransactionId?: string;
+}
+/**
+ * Order details response (full order information)
+ */
+interface OrderDetails {
+    orderId: string;
+    internalId: string;
+    status: "PENDING" | "PAID" | "CANCELLED" | "REFUNDED" | "FAILED";
+    amount: number;
+    currency: string;
+    description?: string;
+    paidAt?: string;
+    createdAt: string;
+    channel?: string;
+    product?: {
+        code: string;
+        type: string;
+        name: string;
+        description?: string;
+        entitlements: ProductEntitlements;
+        metadata?: ProductMetadata | null;
+    };
+}
+/**
+ * Product Entitlements
+ */
+interface ProductEntitlements {
+    [key: string]: any;
+}
+/**
+ * Product Price
+ */
+interface ProductPrice {
+    id: string;
+    currency: string;
+    amount: number;
+    displayAmount: string;
+    locale: string | null;
+    isDefault: boolean;
+}
+interface ProductSubscriptionPeriod {
+    value: number;
+    unit: "days" | "months" | "years";
+}
+interface ProductResetRule {
+    resetInterval: "month";
+}
+interface ProductMetadata {
+    subscriptionPeriod?: ProductSubscriptionPeriod;
+    expiringEntitlements?: string[];
+    resetEntitlements?: Record<string, ProductResetRule>;
+    autoAssignOnNewUser?: boolean;
+    trialDurationDays?: number;
+}
+/**
+ * Product Data
+ */
+interface Product {
+    id: string;
+    code: string;
+    type: string;
+    name: string;
+    description?: string;
+    entitlements: ProductEntitlements;
+    prices: ProductPrice[];
+    metadata?: ProductMetadata | null;
+}
+/**
+ * WeChat JSAPI Payment Parameters (for wx.requestPayment)
+ */
+interface WechatJsapiPayParams {
+    appId: string;
+    timeStamp: string;
+    nonceStr: string;
+    package: string;
+    signType: "RSA";
+    paySign: string;
+}
+/**
+ * Verified hosted login token payload.
+ */
+interface VerifiedLoginToken {
+    appId: string;
+    userId: string;
+    legacyCasdoorId?: string | null;
+    channel: string;
+    email?: string | null;
+    name?: string | null;
+    avatar?: string | null;
+    wechatOpenId?: string | null;
+    wechatUnionId?: string | null;
+    expiresAt: string;
+}
+/**
+ * SDK Client Options
+ */
+interface PaymentClientOptions {
+    /** Application ID (Required) */
+    appId: string;
+    /** Application Secret (Required for server-side operations) */
+    appSecret: string;
+    /**
+     * @deprecated Use apiUrl and checkoutUrl instead
+     * API Base URL (e.g. https://pay.youidian.com)
+     * If apiUrl or checkoutUrl is not provided, this will be used as fallback
+     * Default: https://pay.imgto.link
+     */
+    baseUrl?: string;
+    /**
+     * API server URL for backend requests (e.g. https://api.youidian.com)
+     * Default: https://pay-api.imgto.link
+     */
+    apiUrl?: string;
+    /**
+     * Checkout page URL for client-side payment (e.g. https://pay.youidian.com)
+     * Default: https://pay.imgto.link
+     */
+    checkoutUrl?: string;
+}
+/**
+ * Create Order Parameters
+ */
+interface CreateOrderParams {
+    productId?: string;
+    priceId?: string;
+    channel?: string;
+    userId: string;
+    returnUrl?: string;
+    metadata?: Record<string, any>;
+    merchantOrderId?: string;
+    openid?: string;
+    locale?: string;
+}
+/**
+ * Create WeChat Mini Program Order Parameters
+ */
+type CreateMiniProgramOrderParams = {
+    userId: string;
+    openid: string;
+    merchantOrderId?: string;
+    priceId: string;
+};
+/**
+ * Create Order Response
+ */
+interface CreateOrderResponse {
+    orderId: string;
+    internalId: string;
+    amount: number;
+    currency: string;
+    payParams: any;
+}
+/**
+ * Payment Callback Notification
+ */
+interface PaymentNotification {
+    iv: string;
+    encryptedData: string;
+    authTag: string;
+}
+/**
+ * Decrypted Payment Callback Data
+ */
+interface PaymentCallbackData {
+    orderId: string;
+    merchantOrderId?: string;
+    status: "PAID" | "CANCELLED" | "REFUNDED" | "FAILED";
+    amount: number;
+    currency: string;
+    paidAt: string;
+    channelTransactionId?: string;
+    metadata?: Record<string, any>;
+}
+/**
+ * Get Orders Parameters
+ */
+interface GetOrdersParams {
+    page?: number;
+    pageSize?: number;
+    userId?: string;
+    status?: "PENDING" | "PAID" | "CANCELLED" | "REFUNDED" | "FAILED";
+    startDate?: string;
+    endDate?: string;
+}
+/**
+ * Order List Item
+ */
+interface OrderListItem {
+    orderId: string;
+    internalId: string;
+    merchantUserId: string;
+    status: "PENDING" | "PAID" | "CANCELLED" | "REFUNDED" | "FAILED";
+    amount: number;
+    currency: string;
+    channel?: string;
+    paidAt?: string;
+    createdAt: string;
+}
+/**
+ * Get Orders Response
+ */
+interface GetOrdersResponse {
+    orders: OrderListItem[];
+    pagination: {
+        total: number;
+        page: number;
+        pageSize: number;
+        totalPages: number;
+    };
+}
+/**
+ * Entitlement Detail Item
+ */
+interface EntitlementDetailItem {
+    type: string;
+    current: number | boolean;
+    limit?: number;
+    expiresAt?: string | null;
+    resetInterval?: string | null;
+    nextResetAt?: string | null;
+    sourceKind?: string | null;
+}
+/**
+ * Entitlement Detail - returned by getEntitlementsDetail
+ */
+type EntitlementDetail = Record<string, EntitlementDetailItem>;
+/**
+ * Ensure User With Trial Response
+ */
+interface EnsureUserWithTrialResponse {
+    isNew: boolean;
+    trialAssigned: boolean;
+    trialProductCode?: string;
+    entitlements: EntitlementDetail;
+}
+/**
+ * Server-side Payment Client
+ * 服务端支付客户端，用于创建订单、查询状态、解密回调
+ */
+declare class PaymentClient {
+    private readonly appId;
+    private readonly appSecret;
+    private readonly apiUrl;
+    private readonly checkoutUrl;
+    constructor(options: PaymentClientOptions);
+    /**
+     * Generate SHA256 signature for the request
+     * Logic: SHA256(appId + appSecret + timestamp)
+     */
+    private generateSignature;
+    /**
+     * Internal request helper for Gateway API
+     */
+    private request;
+    /**
+     * Decrypts the callback notification payload using AES-256-GCM.
+     * @param notification - The encrypted notification from payment webhook
+     * @returns Decrypted payment callback data
+     */
+    decryptCallback(notification: PaymentNotification): PaymentCallbackData;
+    /**
+     * Fetch products for the configured app.
+     */
+    getProducts(options?: {
+        locale?: string;
+        currency?: string;
+    }): Promise<Product[]>;
+    /**
+     * Create a new order
+     * @param params - Order creation parameters
+     * @returns Order details with payment parameters
+     */
+    createOrder(params: CreateOrderParams): Promise<CreateOrderResponse>;
+    /**
+     * Create a WeChat Mini Program order (channel fixed to WECHAT_MINI)
+     * @param params - Mini program order parameters
+     * @returns Order details with payment parameters
+     */
+    createMiniProgramOrder(params: CreateMiniProgramOrderParams): Promise<CreateOrderResponse>;
+    /**
+     * Pay for an existing order
+     * @param orderId - The order ID to pay
+     * @param params - Payment parameters including channel
+     */
+    payOrder(orderId: string, params: {
+        channel: string;
+        returnUrl?: string;
+        openid?: string;
+        [key: string]: any;
+    }): Promise<CreateOrderResponse>;
+    /**
+     * Query order status
+     * @param orderId - The order ID to query
+     */
+    getOrderStatus(orderId: string): Promise<OrderStatus>;
+    /**
+     * Get order details (full order information)
+     * @param orderId - The order ID to query
+     */
+    getOrderDetails(orderId: string): Promise<OrderDetails>;
+    /**
+     * Get orders list with pagination
+     * @param params - Query parameters (pagination, filters)
+     * @returns Orders list and pagination info
+     */
+    getOrders(params?: GetOrdersParams): Promise<GetOrdersResponse>;
+    /**
+     * Get user entitlements in the legacy flat shape.
+     * @param userId - User ID
+     */
+    getEntitlements(userId: string): Promise<Record<string, any>>;
+    /**
+     * Get user entitlements with full details (type, expiry, reset config, source)
+     * @param userId - User ID
+     */
+    getEntitlementsDetail(userId: string): Promise<EntitlementDetail>;
+    /**
+     * Ensure user exists and auto-assign trial product if new user
+     * This should be called when user first logs in or registers
+     * @param userId - User ID
+     */
+    ensureUserWithTrial(userId: string): Promise<EnsureUserWithTrialResponse>;
+    /**
+     * Get a single entitlement value
+     * @param userId - User ID
+     * @param key - Entitlement key
+     */
+    getEntitlementValue(userId: string, key: string): Promise<any>;
+    /**
+     * Consume numeric entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to consume
+     */
+    consumeEntitlement(userId: string, key: string, amount: number, options?: {
+        idempotencyKey?: string;
+        metadata?: Record<string, any>;
+    }): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Add numeric entitlement (e.g. refund)
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param amount - Amount to add
+     */
+    addEntitlement(userId: string, key: string, amount: number): Promise<{
+        balance: number;
+    }>;
+    /**
+     * Toggle boolean entitlement
+     * @param userId - User ID
+     * @param key - Entitlement key
+     * @param enabled - Whether to enable
+     */
+    toggleEntitlement(userId: string, key: string, enabled: boolean): Promise<{
+        isEnabled: boolean;
+    }>;
+    /**
+     * Generate checkout URL for client-side payment
+     * @param productId - Product ID
+     * @param priceId - Price ID
+     * @returns Checkout page URL
+     */
+    getCheckoutUrl(productId: string, priceId: string): string;
+    /**
+     * Verify a hosted login token and return the normalized login profile.
+     * This request is signed with your app credentials and routed through the worker API.
+     */
+    verifyLoginToken(token: string): Promise<VerifiedLoginToken>;
+}
+
+export { type CreateMiniProgramOrderParams, type CreateOrderParams, type CreateOrderResponse, type EnsureUserWithTrialResponse, type EntitlementDetail, type EntitlementDetailItem, type GetOrdersParams, type GetOrdersResponse, type OrderDetails, type OrderListItem, type OrderStatus, type PaymentCallbackData, PaymentClient, type PaymentClientOptions, type PaymentNotification, type Product, type ProductEntitlements, type ProductMetadata, type ProductPrice, type ProductResetRule, type ProductSubscriptionPeriod, type VerifiedLoginToken, type WechatJsapiPayParams };

package/dist/server.js

@@ -0,0 +1,246 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/server.ts
+import crypto from "crypto";
+var PaymentClient = class {
+  // 用于生成 checkout URL
+  constructor(options) {
+    __publicField(this, "appId");
+    __publicField(this, "appSecret");
+    __publicField(this, "apiUrl");
+    // 用于 API 调用
+    __publicField(this, "checkoutUrl");
+    if (!options.appId) throw new Error("appId is required");
+    if (!options.appSecret) throw new Error("appSecret is required");
+    this.appId = options.appId;
+    this.appSecret = options.appSecret;
+    const apiUrl = options.apiUrl || options.baseUrl || "https://pay-api.imgto.link";
+    this.apiUrl = apiUrl.replace(/\/$/, "");
+    const checkoutUrl = options.checkoutUrl || options.baseUrl || "https://pay.imgto.link";
+    this.checkoutUrl = checkoutUrl.replace(/\/$/, "");
+  }
+  /**
+   * Generate SHA256 signature for the request
+   * Logic: SHA256(appId + appSecret + timestamp)
+   */
+  generateSignature(timestamp) {
+    const str = `${this.appId}${this.appSecret}${timestamp}`;
+    return crypto.createHash("sha256").update(str).digest("hex");
+  }
+  /**
+   * Internal request helper for Gateway API
+   */
+  async request(method, path, body) {
+    const timestamp = Date.now();
+    const signature = this.generateSignature(timestamp);
+    const url = `${this.apiUrl}/api/v1/gateway/${this.appId}${path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Pay-Timestamp": timestamp.toString(),
+      "X-Pay-Sign": signature
+    };
+    const options = {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    };
+    const response = await fetch(url, options);
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);
+    }
+    const json = await response.json();
+    if (json.error) {
+      throw new Error(`Payment API Error: ${json.error}`);
+    }
+    return json.data;
+  }
+  /**
+   * Decrypts the callback notification payload using AES-256-GCM.
+   * @param notification - The encrypted notification from payment webhook
+   * @returns Decrypted payment callback data
+   */
+  decryptCallback(notification) {
+    try {
+      const { iv, encryptedData, authTag } = notification;
+      const key = crypto.createHash("sha256").update(this.appSecret).digest();
+      const decipher = crypto.createDecipheriv(
+        "aes-256-gcm",
+        key,
+        Buffer.from(iv, "hex")
+      );
+      decipher.setAuthTag(Buffer.from(authTag, "hex"));
+      let decrypted = decipher.update(encryptedData, "hex", "utf8");
+      decrypted += decipher.final("utf8");
+      return JSON.parse(decrypted);
+    } catch (error) {
+      throw new Error(
+        "Failed to decrypt payment callback: Invalid secret or tampered data."
+      );
+    }
+  }
+  /**
+   * Fetch products for the configured app.
+   */
+  async getProducts(options) {
+    const params = new URLSearchParams();
+    if (options?.locale) params.append("locale", options.locale);
+    if (options?.currency) params.append("currency", options.currency);
+    const path = params.toString() ? `/products?${params.toString()}` : "/products";
+    return this.request("GET", path);
+  }
+  /**
+   * Create a new order
+   * @param params - Order creation parameters
+   * @returns Order details with payment parameters
+   */
+  async createOrder(params) {
+    return this.request("POST", "/orders", params);
+  }
+  /**
+   * Create a WeChat Mini Program order (channel fixed to WECHAT_MINI)
+   * @param params - Mini program order parameters
+   * @returns Order details with payment parameters
+   */
+  async createMiniProgramOrder(params) {
+    const { openid, ...rest } = params;
+    return this.request("POST", "/orders", {
+      ...rest,
+      channel: "WECHAT_MINI",
+      openid,
+      metadata: { openid }
+    });
+  }
+  /**
+   * Pay for an existing order
+   * @param orderId - The order ID to pay
+   * @param params - Payment parameters including channel
+   */
+  async payOrder(orderId, params) {
+    return this.request("POST", `/orders/${orderId}/pay`, params);
+  }
+  /**
+   * Query order status
+   * @param orderId - The order ID to query
+   */
+  async getOrderStatus(orderId) {
+    return this.request("GET", `/orders/${orderId}`);
+  }
+  /**
+   * Get order details (full order information)
+   * @param orderId - The order ID to query
+   */
+  async getOrderDetails(orderId) {
+    return this.request("GET", `/orders/${orderId}/details`);
+  }
+  /**
+   * Get orders list with pagination
+   * @param params - Query parameters (pagination, filters)
+   * @returns Orders list and pagination info
+   */
+  async getOrders(params) {
+    const queryParams = new URLSearchParams();
+    if (params?.page) queryParams.append("page", params.page.toString());
+    if (params?.pageSize)
+      queryParams.append("pageSize", params.pageSize.toString());
+    if (params?.userId) queryParams.append("userId", params.userId);
+    if (params?.status) queryParams.append("status", params.status);
+    if (params?.startDate) queryParams.append("startDate", params.startDate);
+    if (params?.endDate) queryParams.append("endDate", params.endDate);
+    const path = queryParams.toString() ? `/orders?${queryParams.toString()}` : "/orders";
+    return this.request("GET", path);
+  }
+  /**
+   * Get user entitlements in the legacy flat shape.
+   * @param userId - User ID
+   */
+  async getEntitlements(userId) {
+    return this.request("GET", `/users/${userId}/entitlements`);
+  }
+  /**
+   * Get user entitlements with full details (type, expiry, reset config, source)
+   * @param userId - User ID
+   */
+  async getEntitlementsDetail(userId) {
+    return this.request("GET", `/users/${userId}/entitlements/detail`);
+  }
+  /**
+   * Ensure user exists and auto-assign trial product if new user
+   * This should be called when user first logs in or registers
+   * @param userId - User ID
+   */
+  async ensureUserWithTrial(userId) {
+    return this.request("POST", `/users/${userId}/entitlements/bootstrap`, {});
+  }
+  /**
+   * Get a single entitlement value
+   * @param userId - User ID
+   * @param key - Entitlement key
+   */
+  async getEntitlementValue(userId, key) {
+    const entitlements = await this.getEntitlements(userId);
+    return entitlements[key] ?? null;
+  }
+  /**
+   * Consume numeric entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to consume
+   */
+  async consumeEntitlement(userId, key, amount, options) {
+    return this.request("POST", `/users/${userId}/entitlements/consume`, {
+      key,
+      amount,
+      ...options
+    });
+  }
+  /**
+   * Add numeric entitlement (e.g. refund)
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param amount - Amount to add
+   */
+  async addEntitlement(userId, key, amount) {
+    return this.request("POST", `/users/${userId}/entitlements/add`, {
+      key,
+      amount
+    });
+  }
+  /**
+   * Toggle boolean entitlement
+   * @param userId - User ID
+   * @param key - Entitlement key
+   * @param enabled - Whether to enable
+   */
+  async toggleEntitlement(userId, key, enabled) {
+    return this.request("POST", `/users/${userId}/entitlements/toggle`, {
+      key,
+      enabled
+    });
+  }
+  /**
+   * Generate checkout URL for client-side payment
+   * @param productId - Product ID
+   * @param priceId - Price ID
+   * @returns Checkout page URL
+   */
+  getCheckoutUrl(productId, priceId) {
+    return `${this.checkoutUrl}/checkout/${this.appId}/${productId}/${priceId}`;
+  }
+  /**
+   * Verify a hosted login token and return the normalized login profile.
+   * This request is signed with your app credentials and routed through the worker API.
+   */
+  async verifyLoginToken(token) {
+    if (!token?.trim()) {
+      throw new Error("login token is required");
+    }
+    return this.request("POST", "/login/tokens/verify", { token: token.trim() });
+  }
+};
+export {
+  PaymentClient
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\"\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n\torderId: string\n\tstatus: \"PENDING\" | \"PAID\" | \"CANCELLED\" | \"REFUNDED\" | \"FAILED\"\n\tpaidAt?: string\n\tchannelTransactionId?: string\n}\n\n/**\n * Order details response (full order information)\n */\nexport interface OrderDetails {\n\torderId: string\n\tinternalId: string\n\tstatus: \"PENDING\" | \"PAID\" | \"CANCELLED\" | \"REFUNDED\" | \"FAILED\"\n\tamount: number\n\tcurrency: string\n\tdescription?: string\n\tpaidAt?: string\n\tcreatedAt: string\n\tchannel?: string\n\tproduct?: {\n\t\tcode: string\n\t\ttype: string\n\t\tname: string\n\t\tdescription?: string\n\t\tentitlements: ProductEntitlements\n\t\tmetadata?: ProductMetadata | null\n\t}\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n\t[key: string]: any\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n\tid: string\n\tcurrency: string\n\tamount: number\n\tdisplayAmount: string\n\tlocale: string | null\n\tisDefault: boolean\n}\n\nexport interface ProductSubscriptionPeriod {\n\tvalue: number\n\tunit: \"days\" | \"months\" | \"years\"\n}\n\nexport interface ProductResetRule {\n\tresetInterval: \"month\"\n}\n\nexport interface ProductMetadata {\n\tsubscriptionPeriod?: ProductSubscriptionPeriod\n\texpiringEntitlements?: string[]\n\tresetEntitlements?: Record<string, ProductResetRule>\n\tautoAssignOnNewUser?: boolean\n\ttrialDurationDays?: number\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n\tid: string\n\tcode: string\n\ttype: string\n\tname: string\n\tdescription?: string\n\tentitlements: ProductEntitlements\n\tprices: ProductPrice[]\n\tmetadata?: ProductMetadata | null\n}\n\n/**\n * WeChat JSAPI Payment Parameters (for wx.requestPayment)\n */\nexport interface WechatJsapiPayParams {\n\tappId: string\n\ttimeStamp: string\n\tnonceStr: string\n\tpackage: string\n\tsignType: \"RSA\"\n\tpaySign: string\n}\n\n/**\n * Verified hosted login token payload.\n */\nexport interface VerifiedLoginToken {\n\tappId: string\n\tuserId: string\n\tlegacyCasdoorId?: string | null\n\tchannel: string\n\temail?: string | null\n\tname?: string | null\n\tavatar?: string | null\n\twechatOpenId?: string | null\n\twechatUnionId?: string | null\n\texpiresAt: string\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n\t/** Application ID (Required) */\n\tappId: string\n\t/** Application Secret (Required for server-side operations) */\n\tappSecret: string\n\n\t/**\n\t * @deprecated Use apiUrl and checkoutUrl instead\n\t * API Base URL (e.g. https://pay.youidian.com)\n\t * If apiUrl or checkoutUrl is not provided, this will be used as fallback\n\t * Default: https://pay.imgto.link\n\t */\n\tbaseUrl?: string\n\n\t/**\n\t * API server URL for backend requests (e.g. https://api.youidian.com)\n\t * Default: https://pay-api.imgto.link\n\t */\n\tapiUrl?: string\n\n\t/**\n\t * Checkout page URL for client-side payment (e.g. https://pay.youidian.com)\n\t * Default: https://pay.imgto.link\n\t */\n\tcheckoutUrl?: string\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n\tproductId?: string\n\tpriceId?: string\n\tchannel?: string\n\tuserId: string\n\treturnUrl?: string\n\tmetadata?: Record<string, any>\n\tmerchantOrderId?: string\n\topenid?: string\n\tlocale?: string\n}\n\n/**\n * Create WeChat Mini Program Order Parameters\n */\nexport type CreateMiniProgramOrderParams = {\n\tuserId: string\n\topenid: string\n\tmerchantOrderId?: string\n\tpriceId: string\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n\torderId: string\n\tinternalId: string\n\tamount: number\n\tcurrency: string\n\tpayParams: any\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n\tiv: string\n\tencryptedData: string\n\tauthTag: string\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n\torderId: string\n\tmerchantOrderId?: string\n\tstatus: \"PAID\" | \"CANCELLED\" | \"REFUNDED\" | \"FAILED\"\n\tamount: number\n\tcurrency: string\n\tpaidAt: string\n\tchannelTransactionId?: string\n\tmetadata?: Record<string, any>\n}\n\n/**\n * Get Orders Parameters\n */\nexport interface GetOrdersParams {\n\tpage?: number\n\tpageSize?: number\n\tuserId?: string\n\tstatus?: \"PENDING\" | \"PAID\" | \"CANCELLED\" | \"REFUNDED\" | \"FAILED\"\n\tstartDate?: string\n\tendDate?: string\n}\n\n/**\n * Order List Item\n */\nexport interface OrderListItem {\n\torderId: string\n\tinternalId: string\n\tmerchantUserId: string\n\tstatus: \"PENDING\" | \"PAID\" | \"CANCELLED\" | \"REFUNDED\" | \"FAILED\"\n\tamount: number\n\tcurrency: string\n\tchannel?: string\n\tpaidAt?: string\n\tcreatedAt: string\n}\n\n/**\n * Get Orders Response\n */\nexport interface GetOrdersResponse {\n\torders: OrderListItem[]\n\tpagination: {\n\t\ttotal: number\n\t\tpage: number\n\t\tpageSize: number\n\t\ttotalPages: number\n\t}\n}\n\n/**\n * Entitlement Detail Item\n */\nexport interface EntitlementDetailItem {\n\ttype: string\n\tcurrent: number | boolean\n\tlimit?: number\n\texpiresAt?: string | null\n\tresetInterval?: string | null\n\tnextResetAt?: string | null\n\tsourceKind?: string | null\n}\n\n/**\n * Entitlement Detail - returned by getEntitlementsDetail\n */\nexport type EntitlementDetail = Record<string, EntitlementDetailItem>\n\n/**\n * Ensure User With Trial Response\n */\nexport interface EnsureUserWithTrialResponse {\n\tisNew: boolean\n\ttrialAssigned: boolean\n\ttrialProductCode?: string\n\tentitlements: EntitlementDetail\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n\tprivate readonly appId: string\n\tprivate readonly appSecret: string\n\tprivate readonly apiUrl: string // 用于 API 调用\n\tprivate readonly checkoutUrl: string // 用于生成 checkout URL\n\n\tconstructor(options: PaymentClientOptions) {\n\t\tif (!options.appId) throw new Error(\"appId is required\")\n\t\tif (!options.appSecret) throw new Error(\"appSecret is required\")\n\n\t\tthis.appId = options.appId\n\t\tthis.appSecret = options.appSecret\n\n\t\t// apiUrl: 优先使用 apiUrl，其次 baseUrl，默认 https://pay-api.imgto.link\n\t\tconst apiUrl =\n\t\t\toptions.apiUrl || options.baseUrl || \"https://pay-api.imgto.link\"\n\t\tthis.apiUrl = apiUrl.replace(/\\/$/, \"\") // Remove trailing slash\n\n\t\t// checkoutUrl: 优先使用 checkoutUrl，其次 baseUrl，默认 https://pay.imgto.link\n\t\tconst checkoutUrl =\n\t\t\toptions.checkoutUrl || options.baseUrl || \"https://pay.imgto.link\"\n\t\tthis.checkoutUrl = checkoutUrl.replace(/\\/$/, \"\") // Remove trailing slash\n\t}\n\n\t/**\n\t * Generate SHA256 signature for the request\n\t * Logic: SHA256(appId + appSecret + timestamp)\n\t */\n\tprivate generateSignature(timestamp: number): string {\n\t\tconst str = `${this.appId}${this.appSecret}${timestamp}`\n\t\treturn crypto.createHash(\"sha256\").update(str).digest(\"hex\")\n\t}\n\n\t/**\n\t * Internal request helper for Gateway API\n\t */\n\tprivate async request<T>(\n\t\tmethod: string,\n\t\tpath: string,\n\t\tbody?: any,\n\t): Promise<T> {\n\t\tconst timestamp = Date.now()\n\t\tconst signature = this.generateSignature(timestamp)\n\n\t\tconst url = `${this.apiUrl}/api/v1/gateway/${this.appId}${path}`\n\n\t\tconst headers: HeadersInit = {\n\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\"X-Pay-Timestamp\": timestamp.toString(),\n\t\t\t\"X-Pay-Sign\": signature,\n\t\t}\n\n\t\tconst options: RequestInit = {\n\t\t\tmethod,\n\t\t\theaders,\n\t\t\tbody: body ? JSON.stringify(body) : undefined,\n\t\t}\n\n\t\tconst response = await fetch(url, options)\n\n\t\tif (!response.ok) {\n\t\t\tconst errorText = await response.text()\n\t\t\tthrow new Error(`Payment SDK Error (${response.status}): ${errorText}`)\n\t\t}\n\n\t\tconst json = await response.json()\n\t\tif (json.error) {\n\t\t\tthrow new Error(`Payment API Error: ${json.error}`)\n\t\t}\n\n\t\treturn json.data as T\n\t}\n\n\t/**\n\t * Decrypts the callback notification payload using AES-256-GCM.\n\t * @param notification - The encrypted notification from payment webhook\n\t * @returns Decrypted payment callback data\n\t */\n\tdecryptCallback(notification: PaymentNotification): PaymentCallbackData {\n\t\ttry {\n\t\t\tconst { iv, encryptedData, authTag } = notification\n\t\t\tconst key = crypto.createHash(\"sha256\").update(this.appSecret).digest()\n\t\t\tconst decipher = crypto.createDecipheriv(\n\t\t\t\t\"aes-256-gcm\",\n\t\t\t\tkey,\n\t\t\t\tBuffer.from(iv, \"hex\"),\n\t\t\t)\n\n\t\t\tdecipher.setAuthTag(Buffer.from(authTag, \"hex\"))\n\n\t\t\tlet decrypted = decipher.update(encryptedData, \"hex\", \"utf8\")\n\t\t\tdecrypted += decipher.final(\"utf8\")\n\n\t\t\treturn JSON.parse(decrypted)\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Failed to decrypt payment callback: Invalid secret or tampered data.\",\n\t\t\t)\n\t\t}\n\t}\n\n\t/**\n\t * Fetch products for the configured app.\n\t */\n\tasync getProducts(options?: {\n\t\tlocale?: string\n\t\tcurrency?: string\n\t}): Promise<Product[]> {\n\t\tconst params = new URLSearchParams()\n\t\tif (options?.locale) params.append(\"locale\", options.locale)\n\t\tif (options?.currency) params.append(\"currency\", options.currency)\n\n\t\tconst path = params.toString()\n\t\t\t? `/products?${params.toString()}`\n\t\t\t: \"/products\"\n\t\treturn this.request(\"GET\", path)\n\t}\n\n\t/**\n\t * Create a new order\n\t * @param params - Order creation parameters\n\t * @returns Order details with payment parameters\n\t */\n\tasync createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n\t\treturn this.request(\"POST\", \"/orders\", params)\n\t}\n\n\t/**\n\t * Create a WeChat Mini Program order (channel fixed to WECHAT_MINI)\n\t * @param params - Mini program order parameters\n\t * @returns Order details with payment parameters\n\t */\n\tasync createMiniProgramOrder(\n\t\tparams: CreateMiniProgramOrderParams,\n\t): Promise<CreateOrderResponse> {\n\t\tconst { openid, ...rest } = params\n\t\treturn this.request(\"POST\", \"/orders\", {\n\t\t\t...rest,\n\t\t\tchannel: \"WECHAT_MINI\",\n\t\t\topenid,\n\t\t\tmetadata: { openid },\n\t\t} satisfies CreateOrderParams)\n\t}\n\n\t/**\n\t * Pay for an existing order\n\t * @param orderId - The order ID to pay\n\t * @param params - Payment parameters including channel\n\t */\n\tasync payOrder(\n\t\torderId: string,\n\t\tparams: {\n\t\t\tchannel: string\n\t\t\treturnUrl?: string\n\t\t\topenid?: string\n\t\t\t[key: string]: any\n\t\t},\n\t): Promise<CreateOrderResponse> {\n\t\treturn this.request(\"POST\", `/orders/${orderId}/pay`, params)\n\t}\n\n\t/**\n\t * Query order status\n\t * @param orderId - The order ID to query\n\t */\n\tasync getOrderStatus(orderId: string): Promise<OrderStatus> {\n\t\treturn this.request(\"GET\", `/orders/${orderId}`)\n\t}\n\n\t/**\n\t * Get order details (full order information)\n\t * @param orderId - The order ID to query\n\t */\n\tasync getOrderDetails(orderId: string): Promise<OrderDetails> {\n\t\treturn this.request(\"GET\", `/orders/${orderId}/details`)\n\t}\n\n\t/**\n\t * Get orders list with pagination\n\t * @param params - Query parameters (pagination, filters)\n\t * @returns Orders list and pagination info\n\t */\n\tasync getOrders(params?: GetOrdersParams): Promise<GetOrdersResponse> {\n\t\tconst queryParams = new URLSearchParams()\n\t\tif (params?.page) queryParams.append(\"page\", params.page.toString())\n\t\tif (params?.pageSize)\n\t\t\tqueryParams.append(\"pageSize\", params.pageSize.toString())\n\t\tif (params?.userId) queryParams.append(\"userId\", params.userId)\n\t\tif (params?.status) queryParams.append(\"status\", params.status)\n\t\tif (params?.startDate) queryParams.append(\"startDate\", params.startDate)\n\t\tif (params?.endDate) queryParams.append(\"endDate\", params.endDate)\n\n\t\tconst path = queryParams.toString()\n\t\t\t? `/orders?${queryParams.toString()}`\n\t\t\t: \"/orders\"\n\t\treturn this.request<GetOrdersResponse>(\"GET\", path)\n\t}\n\n\t/**\n\t * Get user entitlements in the legacy flat shape.\n\t * @param userId - User ID\n\t */\n\tasync getEntitlements(userId: string): Promise<Record<string, any>> {\n\t\treturn this.request(\"GET\", `/users/${userId}/entitlements`)\n\t}\n\n\t/**\n\t * Get user entitlements with full details (type, expiry, reset config, source)\n\t * @param userId - User ID\n\t */\n\tasync getEntitlementsDetail(userId: string): Promise<EntitlementDetail> {\n\t\treturn this.request(\"GET\", `/users/${userId}/entitlements/detail`)\n\t}\n\n\t/**\n\t * Ensure user exists and auto-assign trial product if new user\n\t * This should be called when user first logs in or registers\n\t * @param userId - User ID\n\t */\n\tasync ensureUserWithTrial(\n\t\tuserId: string,\n\t): Promise<EnsureUserWithTrialResponse> {\n\t\treturn this.request(\"POST\", `/users/${userId}/entitlements/bootstrap`, {})\n\t}\n\n\t/**\n\t * Get a single entitlement value\n\t * @param userId - User ID\n\t * @param key - Entitlement key\n\t */\n\tasync getEntitlementValue(userId: string, key: string): Promise<any> {\n\t\tconst entitlements = await this.getEntitlements(userId)\n\t\treturn entitlements[key] ?? null\n\t}\n\n\t/**\n\t * Consume numeric entitlement\n\t * @param userId - User ID\n\t * @param key - Entitlement key\n\t * @param amount - Amount to consume\n\t */\n\tasync consumeEntitlement(\n\t\tuserId: string,\n\t\tkey: string,\n\t\tamount: number,\n\t\toptions?: {\n\t\t\tidempotencyKey?: string\n\t\t\tmetadata?: Record<string, any>\n\t\t},\n\t): Promise<{ balance: number }> {\n\t\treturn this.request(\"POST\", `/users/${userId}/entitlements/consume`, {\n\t\t\tkey,\n\t\t\tamount,\n\t\t\t...options,\n\t\t})\n\t}\n\n\t/**\n\t * Add numeric entitlement (e.g. refund)\n\t * @param userId - User ID\n\t * @param key - Entitlement key\n\t * @param amount - Amount to add\n\t */\n\tasync addEntitlement(\n\t\tuserId: string,\n\t\tkey: string,\n\t\tamount: number,\n\t): Promise<{ balance: number }> {\n\t\treturn this.request(\"POST\", `/users/${userId}/entitlements/add`, {\n\t\t\tkey,\n\t\t\tamount,\n\t\t})\n\t}\n\n\t/**\n\t * Toggle boolean entitlement\n\t * @param userId - User ID\n\t * @param key - Entitlement key\n\t * @param enabled - Whether to enable\n\t */\n\tasync toggleEntitlement(\n\t\tuserId: string,\n\t\tkey: string,\n\t\tenabled: boolean,\n\t): Promise<{ isEnabled: boolean }> {\n\t\t// Toggle endpoint expects POST with enabled flag\n\t\t// However, looking at list_dir, we have toggle/route.ts\n\t\t// I should verify its contract, but assuming standard toggle pattern:\n\t\treturn this.request(\"POST\", `/users/${userId}/entitlements/toggle`, {\n\t\t\tkey,\n\t\t\tenabled,\n\t\t})\n\t}\n\n\t/**\n\t * Generate checkout URL for client-side payment\n\t * @param productId - Product ID\n\t * @param priceId - Price ID\n\t * @returns Checkout page URL\n\t */\n\tgetCheckoutUrl(productId: string, priceId: string): string {\n\t\treturn `${this.checkoutUrl}/checkout/${this.appId}/${productId}/${priceId}`\n\t}\n\n\t/**\n\t * Verify a hosted login token and return the normalized login profile.\n\t * This request is signed with your app credentials and routed through the worker API.\n\t */\n\tasync verifyLoginToken(token: string): Promise<VerifiedLoginToken> {\n\t\tif (!token?.trim()) {\n\t\t\tthrow new Error(\"login token is required\")\n\t\t}\n\t\treturn this.request(\"POST\", \"/login/tokens/verify\", { token: token.trim() })\n\t}\n}\n"],"mappings":";;;;;AAKA,OAAO,YAAY;AAkRZ,IAAM,gBAAN,MAAoB;AAAA;AAAA,EAM1B,YAAY,SAA+B;AAL3C,wBAAiB;AACjB,wBAAiB;AACjB,wBAAiB;AACjB;AAAA,wBAAiB;AAGhB,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAE/D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AAGzB,UAAM,SACL,QAAQ,UAAU,QAAQ,WAAW;AACtC,SAAK,SAAS,OAAO,QAAQ,OAAO,EAAE;AAGtC,UAAM,cACL,QAAQ,eAAe,QAAQ,WAAW;AAC3C,SAAK,cAAc,YAAY,QAAQ,OAAO,EAAE;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACpD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QACb,QACA,MACA,MACa;AACb,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,MAAM,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE9D,UAAM,UAAuB;AAAA,MAC5B,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IACf;AAEA,UAAM,UAAuB;AAAA,MAC5B;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACrC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACjB,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IACvE;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACf,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACnD;AAEA,WAAO,KAAK;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACvE,QAAI;AACH,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,OAAO;AAAA,QACvB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACtB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC5B,SAAS,OAAO;AACf,YAAM,IAAI;AAAA,QACT;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACtB,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,OAAO,OAAO,SAAS,IAC1B,aAAa,OAAO,SAAS,CAAC,KAC9B;AACH,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AAC1E,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,uBACL,QAC+B;AAC/B,UAAM,EAAE,QAAQ,GAAG,KAAK,IAAI;AAC5B,WAAO,KAAK,QAAQ,QAAQ,WAAW;AAAA,MACtC,GAAG;AAAA,MACH,SAAS;AAAA,MACT;AAAA,MACA,UAAU,EAAE,OAAO;AAAA,IACpB,CAA6B;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SACL,SACA,QAM+B;AAC/B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AAC3D,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,SAAwC;AAC7D,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,UAAU;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,QAAsD;AACrE,UAAM,cAAc,IAAI,gBAAgB;AACxC,QAAI,QAAQ,KAAM,aAAY,OAAO,QAAQ,OAAO,KAAK,SAAS,CAAC;AACnE,QAAI,QAAQ;AACX,kBAAY,OAAO,YAAY,OAAO,SAAS,SAAS,CAAC;AAC1D,QAAI,QAAQ,OAAQ,aAAY,OAAO,UAAU,OAAO,MAAM;AAC9D,QAAI,QAAQ,OAAQ,aAAY,OAAO,UAAU,OAAO,MAAM;AAC9D,QAAI,QAAQ,UAAW,aAAY,OAAO,aAAa,OAAO,SAAS;AACvE,QAAI,QAAQ,QAAS,aAAY,OAAO,WAAW,OAAO,OAAO;AAEjE,UAAM,OAAO,YAAY,SAAS,IAC/B,WAAW,YAAY,SAAS,CAAC,KACjC;AACH,WAAO,KAAK,QAA2B,OAAO,IAAI;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,QAA8C;AACnE,WAAO,KAAK,QAAQ,OAAO,UAAU,MAAM,eAAe;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,sBAAsB,QAA4C;AACvE,WAAO,KAAK,QAAQ,OAAO,UAAU,MAAM,sBAAsB;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,oBACL,QACuC;AACvC,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,2BAA2B,CAAC,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,oBAAoB,QAAgB,KAA2B;AACpE,UAAM,eAAe,MAAM,KAAK,gBAAgB,MAAM;AACtD,WAAO,aAAa,GAAG,KAAK;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,mBACL,QACA,KACA,QACA,SAI+B;AAC/B,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,yBAAyB;AAAA,MACpE;AAAA,MACA;AAAA,MACA,GAAG;AAAA,IACJ,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eACL,QACA,KACA,QAC+B;AAC/B,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,qBAAqB;AAAA,MAChE;AAAA,MACA;AAAA,IACD,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBACL,QACA,KACA,SACkC;AAIlC,WAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM,wBAAwB;AAAA,MACnE;AAAA,MACA;AAAA,IACD,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AAC1D,WAAO,GAAG,KAAK,WAAW,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAiB,OAA4C;AAClE,QAAI,CAAC,OAAO,KAAK,GAAG;AACnB,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AACA,WAAO,KAAK,QAAQ,QAAQ,wBAAwB,EAAE,OAAO,MAAM,KAAK,EAAE,CAAC;AAAA,EAC5E;AACD;","names":[]}