'data'

app/lib/zpayStatus.ts

@@ -0,0 +1,68 @@
+/**
+ * ZPAY 订单状态直接查询（兜底）
+ * salonapi 不可用时，前端直接向 zpayz.cn 查询，保证本地支付能检测到
+ */
+/** 与 salonapi 保持一致，用于直接查询 zpay 兜底 */
+const ZPAY_PID = process.env.ZPAY_PID || process.env.NEXT_PUBLIC_ZPAY_PID || "2025121809351743";
+const ZPAY_KEY = process.env.ZPAY_KEY || process.env.NEXT_PUBLIC_ZPAY_KEY || "tpEi7wWIWI2kXiYVTpIG6j7it0mjVW89";
+const ZPAY_QUERY_URL =
+  process.env.ZPAY_QUERY_URL || process.env.NEXT_PUBLIC_ZPAY_QUERY_URL || "https://zpayz.cn/api.php";
+const ZPAY_QUERY_TIMEOUT_MS = Number(
+  process.env.ZPAY_QUERY_TIMEOUT_MS || 5000
+);
+
+export type ZPayStatusResult = {
+  ok: boolean;
+  paid: boolean;
+  status?: string;
+  money?: string;
+  error?: string;
+  url: string;
+};
+
+export async function queryZPayOrderStatus(
+  orderId: string,
+  timeoutMs = ZPAY_QUERY_TIMEOUT_MS
+): Promise<ZPayStatusResult | null> {
+  const normalizedOrderId = orderId.trim();
+  if (!normalizedOrderId || !ZPAY_PID || !ZPAY_KEY) {
+    return null;
+  }
+
+  const url = new URL(ZPAY_QUERY_URL);
+  url.searchParams.set("act", "order");
+  url.searchParams.set("pid", ZPAY_PID);
+  url.searchParams.set("key", ZPAY_KEY);
+  url.searchParams.set("out_trade_no", normalizedOrderId);
+
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    const res = await fetch(url.toString(), {
+      cache: "no-store",
+      signal: controller.signal,
+    }).finally(() => clearTimeout(timeout));
+    const data = await res.json().catch(() => ({}));
+    const code = String(data?.code ?? "").trim();
+    const status = String(data?.status ?? "").trim();
+
+    return {
+      ok: res.ok,
+      paid: res.ok && code === "1" && status === "1",
+      status,
+      money: String(data?.money ?? "").trim() || undefined,
+      url: url.toString(),
+      error:
+        res.ok && code === "1"
+          ? undefined
+          : String(data?.msg || `status=${res.status}`),
+    };
+  } catch (error) {
+    return {
+      ok: false,
+      paid: false,
+      url: url.toString(),
+      error: error instanceof Error ? error.message : String(error),
+    };
+  }
+}