soul/app/api/miniprogram/pay/notify/route.ts

/**
 * 小程序支付回调通知处理
 * 微信支付成功后会调用此接口
 * 
 * 分销规则：
 * - 约90%给分发者（可在system_config配置）
 * - 一级分销，只算直接推荐人
 */

import { NextResponse } from 'next/server'
import crypto from 'crypto'
import { query, getConfig } from '@/lib/db'

const WECHAT_PAY_CONFIG = {
  appId: 'wxb8bbb2b10dec74aa',
  mchId: '1318592501',
  mchKey: 'wx3e31b068be59ddc131b068be59ddc2',
}

// 默认分成比例（90%给推广者）
const DEFAULT_DISTRIBUTOR_SHARE = 0.9

// 生成签名
function generateSign(params: Record<string, string>, key: string): string {
  const sortedKeys = Object.keys(params).sort()
  const signString = sortedKeys
    .filter((k) => params[k] && k !== 'sign')
    .map((k) => `${k}=${params[k]}`)
    .join('&')

  const signWithKey = `${signString}&key=${key}`
  return crypto.createHash('md5').update(signWithKey, 'utf8').digest('hex').toUpperCase()
}

// 验证签名
function verifySign(params: Record<string, string>, key: string): boolean {
  const receivedSign = params.sign
  if (!receivedSign) return false

  const data = { ...params }
  delete data.sign

  const calculatedSign = generateSign(data, key)
  return receivedSign === calculatedSign
}

// XML转对象
function xmlToDict(xml: string): Record<string, string> {
  const result: Record<string, string> = {}
  const regex = /<(\w+)><!\[CDATA\[(.*?)\]\]><\/\1>/g
  let match
  while ((match = regex.exec(xml)) !== null) {
    result[match[1]] = match[2]
  }
  const simpleRegex = /<(\w+)>([^<]*)<\/\1>/g
  while ((match = simpleRegex.exec(xml)) !== null) {
    if (!result[match[1]]) {
      result[match[1]] = match[2]
    }
  }
  return result
}

// 成功响应
const SUCCESS_RESPONSE = `<xml>
  <return_code><![CDATA[SUCCESS]]></return_code>
  <return_msg><![CDATA[OK]]></return_msg>
</xml>`

// 失败响应
const FAIL_RESPONSE = `<xml>
  <return_code><![CDATA[FAIL]]></return_code>
  <return_msg><![CDATA[ERROR]]></return_msg>
</xml>`

/**
 * POST - 接收微信支付回调
 */
export async function POST(request: Request) {
  try {
    const xmlData = await request.text()
    console.log('[PayNotify] 收到支付回调')

    const data = xmlToDict(xmlData)

    // 验证签名
    if (!verifySign(data, WECHAT_PAY_CONFIG.mchKey)) {
      console.error('[PayNotify] 签名验证失败')
      return new Response(FAIL_RESPONSE, {
        headers: { 'Content-Type': 'application/xml' }
      })
    }

    // 检查支付结果
    if (data.return_code !== 'SUCCESS' || data.result_code !== 'SUCCESS') {
      console.log('[PayNotify] 支付未成功:', data.err_code, data.err_code_des)
      return new Response(SUCCESS_RESPONSE, {
        headers: { 'Content-Type': 'application/xml' }
      })
    }

    const orderSn = data.out_trade_no
    const transactionId = data.transaction_id
    const totalFee = parseInt(data.total_fee || '0', 10)
    const totalAmount = totalFee / 100 // 转为元
    const openId = data.openid

    console.log('[PayNotify] 支付成功:', {
      orderSn,
      transactionId,
      totalFee,
      openId: openId?.slice(0, 10) + '...',
    })

    // 解析附加数据
    let attach: Record<string, string> = {}
    if (data.attach) {
      try {
        attach = JSON.parse(data.attach)
      } catch (e) {
        // 忽略解析错误
      }
    }

    const { productType, productId, userId } = attach

    // 1. 更新订单状态为已支付
    try {
      await query(`
        UPDATE orders 
        SET status = 'paid', 
            transaction_id = ?,
            pay_time = CURRENT_TIMESTAMP
        WHERE order_sn = ? AND status = 'pending'
      `, [transactionId, orderSn])
      console.log('[PayNotify] 订单状态已更新:', orderSn)
    } catch (e) {
      console.error('[PayNotify] 更新订单状态失败:', e)
    }

    // 2. 获取用户信息
    let buyerUserId = userId
    if (!buyerUserId && openId) {
      try {
        const users = await query('SELECT id FROM users WHERE open_id = ?', [openId]) as any[]
        if (users.length > 0) {
          buyerUserId = users[0].id
        }
      } catch (e) {
        console.error('[PayNotify] 获取用户信息失败:', e)
      }
    }

    // 3. 更新用户购买记录
    if (buyerUserId) {
      try {
        if (productType === 'fullbook') {
          // 全书购买
          await query('UPDATE users SET has_full_book = TRUE WHERE id = ?', [buyerUserId])
          console.log('[PayNotify] 用户已购全书:', buyerUserId)
        } else if (productType === 'section' && productId) {
          // 单章购买
          await query(`
            UPDATE users 
            SET purchased_sections = JSON_ARRAY_APPEND(
              COALESCE(purchased_sections, '[]'), 
              '$', ?
            ) 
            WHERE id = ? AND NOT JSON_CONTAINS(COALESCE(purchased_sections, '[]'), ?)
          `, [productId, buyerUserId, JSON.stringify(productId)])
          console.log('[PayNotify] 用户已购章节:', buyerUserId, productId)
        }
      } catch (e) {
        console.error('[PayNotify] 更新用户购买记录失败:', e)
      }

      // 4. 处理分销佣金（90%给推广者）
      await processReferralCommission(buyerUserId, totalAmount, orderSn)
    }
    
    console.log('[PayNotify] 订单处理完成:', {
      orderSn,
      productType,
      productId,
      userId: buyerUserId,
    })

    // 返回成功响应给微信
    return new Response(SUCCESS_RESPONSE, {
      headers: { 'Content-Type': 'application/xml' }
    })

  } catch (error) {
    console.error('[PayNotify] 处理回调失败:', error)
    return new Response(FAIL_RESPONSE, {
      headers: { 'Content-Type': 'application/xml' }
    })
  }
}

/**
 * 处理分销佣金
 * 规则：约90%给分发者（一级分销）
 */
async function processReferralCommission(buyerUserId: string, amount: number, orderSn: string) {
  try {
    // 获取分成配置
    let distributorShare = DEFAULT_DISTRIBUTOR_SHARE
    try {
      const config = await getConfig('referral_config')
      if (config?.distributorShare) {
        distributorShare = config.distributorShare / 100
      }
    } catch (e) { /* 使用默认配置 */ }

    // 查找有效的推广绑定关系
    const bindings = await query(`
      SELECT rb.id, rb.referrer_id, rb.referee_id, rb.expiry_date, rb.status
      FROM referral_bindings rb
      WHERE rb.referee_id = ? 
        AND rb.status = 'active'
        AND rb.expiry_date > NOW()
      ORDER BY rb.binding_date DESC
      LIMIT 1
    `, [buyerUserId]) as any[]

    if (bindings.length === 0) {
      console.log('[PayNotify] 用户无有效推广绑定，跳过分佣:', buyerUserId)
      return
    }

    const binding = bindings[0]
    const referrerId = binding.referrer_id

    // 计算佣金（90%）
    const commission = Math.round(amount * distributorShare * 100) / 100
    
    console.log('[PayNotify] 处理分佣:', {
      referrerId,
      buyerUserId,
      amount,
      commission,
      shareRate: `${distributorShare * 100}%`
    })

    // 更新推广者的待结算收益
    await query(`
      UPDATE users 
      SET pending_earnings = pending_earnings + ?
      WHERE id = ?
    `, [commission, referrerId])

    // 更新绑定记录状态为已转化
    await query(`
      UPDATE referral_bindings 
      SET status = 'converted',
          conversion_date = CURRENT_TIMESTAMP,
          commission_amount = ?,
          order_id = (SELECT id FROM orders WHERE order_sn = ? LIMIT 1)
      WHERE id = ?
    `, [commission, orderSn, binding.id])

    console.log('[PayNotify] 分佣完成: 推广者', referrerId, '获得', commission, '元')

  } catch (error) {
    console.error('[PayNotify] 处理分佣失败:', error)
    // 分佣失败不影响主流程
  }
}