neuroalpha 0.0.0-stage → 0.2.0

package/server/billing/yookassa.js

@@ -0,0 +1,132 @@
+import crypto from 'node:crypto';
+import { db, kvGet, kvSet } from '../db.js';
+import { PLANS, encryptSecret, decryptSecret, getUserById, publicUser } from '../auth/index.js';
+
+export function getBillingConfig() {
+  const saved = kvGet('yookassaConfig') || {};
+  const shopId = String(saved.shopId || process.env.YOOKASSA_SHOP_ID || '').trim();
+  const secretKey = decryptSecret(saved.secretKey || '') || String(process.env.YOOKASSA_SECRET_KEY || '').trim();
+  const sendReceipt = saved.sendReceipt !== undefined ? Boolean(saved.sendReceipt) : (process.env.YOOKASSA_RECEIPT === '1');
+  const vatCode = Number(saved.vatCode || process.env.YOOKASSA_VAT_CODE || 1);
+  return { shopId, secretKey, sendReceipt, vatCode, enabled: Boolean(shopId && secretKey) };
+}
+
+export function publicBillingConfig() {
+  const c = getBillingConfig();
+  return { shopId: c.shopId, hasSecret: Boolean(c.secretKey), sendReceipt: c.sendReceipt, vatCode: c.vatCode, enabled: c.enabled, plans: PLANS };
+}
+
+export function saveBillingConfig(input = {}) {
+  const prev = kvGet('yookassaConfig') || {};
+  const next = {
+    shopId: String(input.shopId ?? prev.shopId ?? '').trim(),
+    secretKey: input.clearSecret ? '' : (input.secretKey && String(input.secretKey).trim() ? encryptSecret(input.secretKey) : (prev.secretKey || '')),
+    sendReceipt: input.sendReceipt !== undefined ? Boolean(input.sendReceipt) : Boolean(prev.sendReceipt),
+    vatCode: Number(input.vatCode ?? prev.vatCode ?? 1) || 1,
+  };
+  kvSet('yookassaConfig', next);
+  return publicBillingConfig();
+}
+
+export async function createYookassaPayment({ user, plan, months = 1, returnOrigin = 'http://localhost:3000' }) {
+  if (!user) throw new Error('Войдите в аккаунт для оформления подписки');
+  const planObj = PLANS[plan];
+  if (!planObj || planObj.priceRub <= 0) throw new Error('Выберите платный тариф (Инвестор или Профи)');
+  const m = Math.max(1, Math.min(12, Math.floor(Number(months) || 1)));
+  const discount = m >= 12 ? 0.8 : m >= 3 ? 0.9 : 1;
+  const amountRub = Math.round(planObj.priceRub * m * discount);
+  const cfg = getBillingConfig();
+  if (!cfg.enabled) throw new Error('Платёжный шлюз ЮKassa ещё не настроен администратором (укажите Shop ID и секретный ключ)');
+
+  const description = `Подписка «${planObj.name}» на ${m} мес. (${user.email})`;
+  const payload = {
+    amount: { value: amountRub.toFixed(2), currency: 'RUB' },
+    capture: true,
+    confirmation: {
+      type: 'redirect',
+      return_url: `${returnOrigin.replace(/\/+$/, '')}/?payment_check=1`,
+    },
+    description,
+    metadata: { userId: String(user.id), plan, months: String(m) },
+  };
+  if (cfg.sendReceipt && user.email) {
+    payload.receipt = {
+      customer: { email: user.email },
+      items: [{
+        description: description.slice(0, 128),
+        quantity: '1.00',
+        amount: { value: amountRub.toFixed(2), currency: 'RUB' },
+        vat_code: cfg.vatCode,
+        payment_mode: 'full_payment',
+        payment_subject: 'service',
+      }],
+    };
+  }
+
+  const auth = Buffer.from(`${cfg.shopId}:${cfg.secretKey}`).toString('base64');
+  const r = await fetch('https://api.yookassa.ru/v3/payments', {
+    method: 'POST',
+    headers: {
+      Authorization: `Basic ${auth}`,
+      'Idempotence-Key': crypto.randomUUID(),
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify(payload),
+    signal: AbortSignal.timeout(20000),
+  });
+  const j = await r.json().catch(() => ({}));
+  if (!r.ok || !j.id) throw new Error(j.description || `Ошибка ЮKassa: HTTP ${r.status}`);
+
+  db.prepare(`INSERT OR REPLACE INTO payments (id, user_id, plan, months, amount_rub, status, created_at, raw)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(j.id, user.id, plan, m, amountRub, j.status || 'pending', Date.now(), JSON.stringify(j));
+
+  return {
+    paymentId: j.id,
+    status: j.status,
+    amountRub,
+    confirmationUrl: j.confirmation?.confirmation_url || null,
+  };
+}
+
+function applyPaidSubscription(payRow, remoteObj) {
+  if (!payRow || payRow.status === 'succeeded') return;
+  const u = getUserById(payRow.user_id);
+  if (!u) return;
+  const baseTs = u.plan === payRow.plan && u.plan_until > Date.now() ? u.plan_until : Date.now();
+  const nextUntil = baseTs + (Number(payRow.months) || 1) * 30 * 86400000;
+  db.prepare('UPDATE users SET plan = ?, plan_until = ? WHERE id = ?').run(payRow.plan, nextUntil, u.id);
+  db.prepare('UPDATE payments SET status = ?, paid_at = ?, raw = ? WHERE id = ?')
+    .run('succeeded', Date.now(), JSON.stringify(remoteObj || {}), payRow.id);
+}
+
+export async function verifyYookassaPayment(paymentId) {
+  const row = db.prepare('SELECT * FROM payments WHERE id = ?').get(String(paymentId));
+  if (!row) throw new Error('Платёж не найден');
+  if (row.status === 'succeeded') return { status: 'succeeded', user: publicUser(getUserById(row.user_id)) };
+  const cfg = getBillingConfig();
+  if (!cfg.enabled) throw new Error('ЮKassa не настроена');
+  const auth = Buffer.from(`${cfg.shopId}:${cfg.secretKey}`).toString('base64');
+  const r = await fetch(`https://api.yookassa.ru/v3/payments/${encodeURIComponent(row.id)}`, {
+    headers: { Authorization: `Basic ${auth}` },
+    signal: AbortSignal.timeout(15000),
+  });
+  const j = await r.json().catch(() => ({}));
+  if (!r.ok) throw new Error(j.description || `HTTP ${r.status}`);
+  if (j.status === 'succeeded' && j.paid) {
+    applyPaidSubscription(row, j);
+  } else if (j.status && j.status !== row.status) {
+    db.prepare('UPDATE payments SET status = ?, raw = ? WHERE id = ?').run(j.status, JSON.stringify(j), row.id);
+  }
+  return { status: j.status, user: publicUser(getUserById(row.user_id)) };
+}
+
+export async function verifyUserLatestPayment(userId) {
+  const row = db.prepare("SELECT * FROM payments WHERE user_id = ? AND status = 'pending' ORDER BY created_at DESC LIMIT 1").get(Number(userId));
+  if (!row) return { status: 'none', user: publicUser(getUserById(userId)) };
+  return verifyYookassaPayment(row.id);
+}
+
+export function listAllPayments(limit = 100) {
+  return db.prepare(`SELECT p.id, p.user_id, u.email, p.plan, p.months, p.amount_rub, p.status, p.created_at, p.paid_at
+    FROM payments p LEFT JOIN users u ON u.id = p.user_id ORDER BY p.created_at DESC LIMIT ?`).all(limit);
+}