feat: 实现订单支付功能模块

- 新增订单管理、支付回调、购买验证等核心服务
- 实现订单、订单项目的数据存储层和 API 接口
- 添加订单数据库迁移和 DTO 定义
- 更新 API 文档和路由配置
- 同步 3 个新规范到主规范库（订单管理、订单支付、套餐购买验证）
- 完成 OpenSpec 变更归档

Ultraworked with Sisyphus

internal/handler/admin/order.go

@@ -0,0 +1,109 @@
+package admin
+
+import (
+	"strconv"
+
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	orderService "github.com/break/junhong_cmp_fiber/internal/service/order"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
+	"github.com/break/junhong_cmp_fiber/pkg/errors"
+	"github.com/break/junhong_cmp_fiber/pkg/middleware"
+	"github.com/break/junhong_cmp_fiber/pkg/response"
+)
+
+type OrderHandler struct {
+	service *orderService.Service
+}
+
+func NewOrderHandler(service *orderService.Service) *OrderHandler {
+	return &OrderHandler{service: service}
+}
+
+func (h *OrderHandler) Create(c *fiber.Ctx) error {
+	var req dto.CreateOrderRequest
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+	shopID := middleware.GetShopIDFromContext(ctx)
+
+	if userType != constants.UserTypeAgent {
+		return errors.New(errors.CodeForbidden, "只有代理账号可以创建订单")
+	}
+
+	order, err := h.service.Create(ctx, &req, model.BuyerTypeAgent, shopID)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, order)
+}
+
+func (h *OrderHandler) Get(c *fiber.Ctx) error {
+	id, err := strconv.ParseUint(c.Params("id"), 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "无效的订单ID")
+	}
+
+	order, err := h.service.Get(c.UserContext(), uint(id))
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, order)
+}
+
+func (h *OrderHandler) List(c *fiber.Ctx) error {
+	var req dto.OrderListRequest
+	if err := c.QueryParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+	shopID := middleware.GetShopIDFromContext(ctx)
+
+	var buyerType string
+	var buyerID uint
+
+	if userType == constants.UserTypeAgent {
+		buyerType = model.BuyerTypeAgent
+		buyerID = shopID
+	} else {
+		buyerType = ""
+		buyerID = 0
+	}
+
+	orders, err := h.service.List(ctx, &req, buyerType, buyerID)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, orders)
+}
+
+func (h *OrderHandler) Cancel(c *fiber.Ctx) error {
+	id, err := strconv.ParseUint(c.Params("id"), 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "无效的订单ID")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+	shopID := middleware.GetShopIDFromContext(ctx)
+
+	if userType != constants.UserTypeAgent {
+		return errors.New(errors.CodeForbidden, "只有代理账号可以取消订单")
+	}
+
+	if err := h.service.Cancel(ctx, uint(id), model.BuyerTypeAgent, shopID); err != nil {
+		return err
+	}
+
+	return response.Success(c, nil)
+}

internal/handler/callback/payment.go

@@ -0,0 +1,60 @@
+package callback
+
+import (
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	orderService "github.com/break/junhong_cmp_fiber/internal/service/order"
+	"github.com/break/junhong_cmp_fiber/pkg/errors"
+	"github.com/break/junhong_cmp_fiber/pkg/response"
+)
+
+type PaymentHandler struct {
+	orderService *orderService.Service
+}
+
+func NewPaymentHandler(orderService *orderService.Service) *PaymentHandler {
+	return &PaymentHandler{orderService: orderService}
+}
+
+type WechatPayCallbackRequest struct {
+	OrderNo string `json:"order_no" xml:"out_trade_no"`
+}
+
+func (h *PaymentHandler) WechatPayCallback(c *fiber.Ctx) error {
+	var req WechatPayCallbackRequest
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	if req.OrderNo == "" {
+		return errors.New(errors.CodeInvalidParam, "订单号不能为空")
+	}
+
+	if err := h.orderService.HandlePaymentCallback(c.UserContext(), req.OrderNo, model.PaymentMethodWechat); err != nil {
+		return err
+	}
+
+	return response.Success(c, map[string]string{"return_code": "SUCCESS"})
+}
+
+type AlipayCallbackRequest struct {
+	OrderNo string `json:"out_trade_no" form:"out_trade_no"`
+}
+
+func (h *PaymentHandler) AlipayCallback(c *fiber.Ctx) error {
+	var req AlipayCallbackRequest
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	if req.OrderNo == "" {
+		return errors.New(errors.CodeInvalidParam, "订单号不能为空")
+	}
+
+	if err := h.orderService.HandlePaymentCallback(c.UserContext(), req.OrderNo, model.PaymentMethodAlipay); err != nil {
+		return err
+	}
+
+	return c.SendString("success")
+}

internal/handler/h5/order.go

@@ -0,0 +1,131 @@
+package h5
+
+import (
+	"strconv"
+
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	orderService "github.com/break/junhong_cmp_fiber/internal/service/order"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
+	"github.com/break/junhong_cmp_fiber/pkg/errors"
+	"github.com/break/junhong_cmp_fiber/pkg/middleware"
+	"github.com/break/junhong_cmp_fiber/pkg/response"
+)
+
+type OrderHandler struct {
+	service *orderService.Service
+}
+
+func NewOrderHandler(service *orderService.Service) *OrderHandler {
+	return &OrderHandler{service: service}
+}
+
+func (h *OrderHandler) Create(c *fiber.Ctx) error {
+	var req dto.CreateOrderRequest
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+
+	var buyerType string
+	var buyerID uint
+
+	switch userType {
+	case constants.UserTypeAgent:
+		buyerType = model.BuyerTypeAgent
+		buyerID = middleware.GetShopIDFromContext(ctx)
+	case constants.UserTypeEnterprise:
+		return errors.New(errors.CodeForbidden, "企业账号不支持在线购买")
+	case constants.UserTypePersonalCustomer:
+		buyerType = model.BuyerTypePersonal
+		buyerID = middleware.GetCustomerIDFromContext(ctx)
+	default:
+		return errors.New(errors.CodeForbidden, "不支持的用户类型")
+	}
+
+	order, err := h.service.Create(ctx, &req, buyerType, buyerID)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, order)
+}
+
+func (h *OrderHandler) Get(c *fiber.Ctx) error {
+	id, err := strconv.ParseUint(c.Params("id"), 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "无效的订单ID")
+	}
+
+	order, err := h.service.Get(c.UserContext(), uint(id))
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, order)
+}
+
+func (h *OrderHandler) List(c *fiber.Ctx) error {
+	var req dto.OrderListRequest
+	if err := c.QueryParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+
+	var buyerType string
+	var buyerID uint
+
+	switch userType {
+	case constants.UserTypeAgent:
+		buyerType = model.BuyerTypeAgent
+		buyerID = middleware.GetShopIDFromContext(ctx)
+	case constants.UserTypePersonalCustomer:
+		buyerType = model.BuyerTypePersonal
+		buyerID = middleware.GetCustomerIDFromContext(ctx)
+	default:
+		return errors.New(errors.CodeForbidden, "不支持的用户类型")
+	}
+
+	orders, err := h.service.List(ctx, &req, buyerType, buyerID)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, orders)
+}
+
+func (h *OrderHandler) WalletPay(c *fiber.Ctx) error {
+	id, err := strconv.ParseUint(c.Params("id"), 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "无效的订单ID")
+	}
+
+	ctx := c.UserContext()
+	userType := middleware.GetUserTypeFromContext(ctx)
+
+	var buyerType string
+	var buyerID uint
+
+	switch userType {
+	case constants.UserTypeAgent:
+		buyerType = model.BuyerTypeAgent
+		buyerID = middleware.GetShopIDFromContext(ctx)
+	case constants.UserTypePersonalCustomer:
+		buyerType = model.BuyerTypePersonal
+		buyerID = middleware.GetCustomerIDFromContext(ctx)
+	default:
+		return errors.New(errors.CodeForbidden, "不支持的用户类型")
+	}
+
+	if err := h.service.WalletPay(ctx, uint(id), buyerType, buyerID); err != nil {
+		return err
+	}
+
+	return response.Success(c, nil)
+}