菜单
NewebPay (藍新金流) deposit/儲值 flow: src/lib/server/deposit/newebpay.ts (createMPGRequest AES/SHA encryption, handleTradeNotify), src/pages/api/deposit/newebpay/{notify,return}.ts callbacks, Deposit model and DepositStatus transitions, DEPOSIT_RATIO credit conversion, src/pages/deposit pages.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Prisma schema, migrations, and the data-access layer: prisma/schema.prisma, prisma/migrations, pnpm db-migrate/db-generate/db-seed, src/lib/server/database/* (transaction, order, menu, cart, user, deposit, bonus), point vs credit balances, TransactionType, OrderStatus, MenuType, soft-delete isDeleted, fixed LIVE/RETAIL menus, optionSets Json fields.
Next.js pages-router UI: src/pages (admin/pos/order catch-all tab pages), src/components (admin, cart, menu, pos, form/field system, core), zustand store with _local/_session persistence (src/lib/client/store), trpc client types (MenuData, CartData, COM naming), image/R2 resources, Tailwind twData conventions.
Realtime + notifications: Pusher channels and PUSHER_EVENT enum (src/lib/common/pusher.ts), emitPusherEvent/emitPusherWebhook (src/lib/server/pusher.ts), EventListener.tsx react-query invalidation map, web push notifications/badges (src/lib/server/webpush.ts), Cronicle scheduled menu-publish notify (src/lib/server/cronicle.ts).
tRPC API layer and REST util endpoints: src/lib/trpc/api/* routers, src/lib/trpc/trpc.ts procedures (commonProcedure/userProcedure/staffProcedure/adminProcedure), rate limiting via meta, meal_token cookie auth, external AUTH_API login/AD sync, and src/pages/api/utils/* endpoints (recharge, sync-users, menu-publish-notify, complete-dishedup).
基于 SOC 职业分类
| name | deposit-newebpay |
| description | NewebPay (藍新金流) deposit/儲值 flow: src/lib/server/deposit/newebpay.ts (createMPGRequest AES/SHA encryption, handleTradeNotify), src/pages/api/deposit/newebpay/{notify,return}.ts callbacks, Deposit model and DepositStatus transitions, DEPOSIT_RATIO credit conversion, src/pages/deposit pages. |
deposit.create (tRPC, see server-api) → createDeposit makes a Deposit row (status PENDING, id = base36 timestamp + random) and createMPGRequest builds the MPG form: trade params AES-encrypted with NEWEBPAY_HASH_KEY/IV + SHA checksum (crypto-js).src/pages/deposit.tsx) auto-submits that form to ${NEWEBPAY_API_URL}/MPG/mpg_gateway.src/pages/api/deposit/newebpay/notify.ts — server-to-server, authoritative; decrypts and hands to handleTradeNotify → updateDeposit.src/pages/api/deposit/newebpay/return.ts — user browser redirect back to /deposit/[depositId].updateDeposit (src/lib/server/database/deposit.ts) is the ONLY place status transitions happen, inside one prisma transaction:
PENDING → SUCCESS: rechargeUserBalanceBase credits deposit.amount * DEPOSIT_RATIO as creditBalance (a DEPOSIT transaction linked via depositId).SUCCESS → REFUND: refundUserBalanceBase decrements credit.FAILED covers cancel/failure. Transitions also emit DEPOSIT_* pusher events (see realtime).getAndUpdateTradeInfo queries NewebPay's trade-info API for stuck PENDING deposits (used by deposit.get/admin refresh).updateDeposit; the status guard (PENDING precondition) is what makes the notify callback idempotent when NewebPay retries.DEPOSIT_MIN_AMOUNT/DEPOSIT_MAX_AMOUNT and DEPOSIT_RATIO live in settings (src/lib/common.ts); ratio is env-overridable, default 1.0.NEWEBPAY_*); the notify URL must be publicly reachable — local dev cannot receive callbacks, use the admin deposits tab's manual refresh (trade-info query) instead.