汇付支付集成

汇付聚合支付、托管支付、余额支付、前端收银台、通知与本地沙箱接入副驾驶

Huifu

@huifu

What This Skill Does

AI assistant for integrating Huifu (汇付) payment services, covering first-time onboarding, legacy system upgrades, aggregated payments, hosted payments, Douyin direct connection, split-pay queries, checkout-js, local sandbox testing, PHP/Java/Python SDKs, signature verification, async notifications, merchant onboarding, channel permissions, FAQ troubleshooting, go-live checks, and version upgrade prompts.

Replaces manually reading scattered Huifu documentation and debugging integration issues by providing a structured, scenario-driven assistant that selects relevant references and outputs actionable cards.

When to Use It

  • First-time integration of Huifu payment, needing to decide between aggregated, hosted, or checkout-js
  • Adding Huifu payment to an existing order system with payment, callback, or refund code
  • Debugging request parameters, response fields, error messages, or code snippets during Huifu integration
  • Troubleshooting merchant onboarding, channel permissions, webhook failures, refund/reconciliation/withdrawal/invoice issues
  • Running local sandbox tests before formal integration, including report validation and fault injection
  • Performing go-live checks or version upgrade assessments for Huifu payment integration

Install

$ openclaw skills install @huifu/huifu-pay-integration

汇付支付集成

汇付官方资料的版权与使用边界见 references/shared-copyright-notice.md。

执行流程

  1. 根据用户目标和现有项目确定产品线、目标接口及技术栈。首次接入先做产品选择;存量项目只改相关链路;字段或报错问题直接进入目标接口,不强制重做接入向导。
  2. 按下表读取目标页。单字段查目标章节即可;完整 DTO、完整响应、嵌套字段或同名字段核对必须联读完整字段目录的对应接口与方向。代码任务再补语言 adapter 和公共 SDK 矩阵,不规定资料数量、不默认加载整份目录。
  3. 字段输出区分合同定位路径、实际 JSON/解码路径、类型、长度、Y/N/C、枚举与条件。不把官网展示分组当成 wire key;只有官方明确“方便文档展示”或目录已记录接入方裁决时才移除。String(JSON) 按父路径逐层编码/解码,示例不作默认值。
  4. 仅追问会影响当前接口选择或实际调用的缺口;继续不依赖回答的工作。字段、SDK差异或未知通知协议标记 [需要官方确认],附官方来源,争议部分留 TODO/配置;不编造协议,也不要求先取得官方答复才能开发。

商户进件、图片、业务开通、商户详情及申请状态交接给 $huifu-merchant-onboarding。余额支付的交易、付款关系、试算和短信属于本 Skill。

交易报错先按支付接口排障;任务包含商户进件、业务开通、配置变更,或明确要求联合排查时,再联用进件 Skill。

进件审核通过不代表业务或支付渠道已开通。任务要求核对业务开通、商户或渠道状态再接支付时,联用进件 Skill 确认前置并交接支付;前置已确认且只实现支付时,只加载支付 Skill。

精确路由

场景按需读取的 reference
首次接入、产品线不明references/shared-overview.md;需要接入判断时补 references/copilot-onboarding.md
存量系统接入references/copilot-existing-system.md、references/copilot-solution-selection.md
聚合支付快速接入references/aggregation-quickstart.md、references/aggregation-customer-preparation.md
聚合下单参数或代码references/aggregation-order.md,按语言选择 references/aggregation-java-adapter.md、references/aggregation-php-adapter.md 或 references/aggregation-python-adapter.md,再按 trade_type 补微信/支付宝/银联分册
聚合交易查询references/aggregation-query-payment-query.md
返回码、公共编码或术语references/aggregation-error-codes.md、references/aggregation-common-params.md;具体字段仍补对应原子接口页
聚合关单references/aggregation-query-trade-close.md
聚合对账references/aggregation-query-reconciliation.md
聚合退款或退款查询references/aggregation-refund.md,查询时补 references/aggregation-refund-query.md
余额支付整体接入references/balancepay-overview.md、references/balancepay-field-contracts.md,代码任务补余额支付语言 adapter
余额支付下单references/balancepay-pay.md、references/balancepay-field-contracts.md,按语言补余额支付 adapter
余额支付查询references/balancepay-query.md,代码任务补余额支付语言 adapter
余额支付退款references/balancepay-refund.md、references/balancepay-field-contracts.md,代码任务补余额支付语言 adapter
余额支付退款查询references/balancepay-refund-query.md,代码任务补余额支付语言 adapter
手续费试算references/balancepay-fee-calc.md,代码任务补余额支付语言 adapter
付款关系提交references/balancepay-pay-relation.md、references/balancepay-field-contracts.md
余额支付短信验证码references/balancepay-sms.md、references/balancepay-sdk-matrix.md,代码任务补余额支付语言 adapter
余额支付 SDK 或代码references/balancepay-sdk-matrix.md,按语言选择 references/balancepay-java-adapter.md、references/balancepay-php-adapter.md 或 references/balancepay-python-adapter.md,再补目标原子页与完整字段目录
托管支付快速接入references/hostingpay-quickstart.md、references/hostingpay-customer-preparation.md
托管预下单references/hostingpay-preorder.md,再按端形态补一个原子文档
抖音直连、pre_order_type=4references/hostingpay-preorder.md、references/hostingpay-preorder-douyin-direct.md
拆单支付查询、splitpay/queryreferences/hostingpay-query.md、references/hostingpay-query-splitpay.md;完整字段按完整目录路由
交易分账明细、trade/trans/split/queryreferences/trade-split-detail-query.md;代码任务再补对应 Java/PHP/Python adapter
托管退款references/hostingpay-refund.md;完整字段按完整目录路由,Java setter 问题补 references/hostingpay-faq.md
托管普通交易查询references/hostingpay-query.md、references/hostingpay-query-payment-status-query.md
托管交易关单references/hostingpay-query.md、references/hostingpay-query-trade-close.md
托管退款查询references/hostingpay-refund.md、references/hostingpay-refund-query.md;完整字段按完整目录路由
托管对账references/hostingpay-query.md、references/hostingpay-query-reconciliation.md
checkout-js 已完成服务端前置references/checkout-js.md、references/checkout-js-callback-and-confirmation.md、references/hostingpay-async-webhook.md
checkout-js 前置未确认references/checkout-js-create-preorder-contract.md;缺口留待配置,先实现明确部分
支付通知、重复通知、幂等references/shared-async-notify.md、references/copilot-troubleshooting-playbooks.md
控台 Webhook 验签references/shared-webhook-signing.md
Java / PHP / Python SDK先读 references/shared-server-sdk-matrix.md;再按语言与产品线精确选择 references/aggregation-java-adapter.md、references/hostingpay-java-adapter.md、references/aggregation-php-adapter.md、references/hostingpay-php-adapter.md、references/aggregation-python-adapter.md 或 references/hostingpay-python-adapter.md
请求头和 skill_sourcereferences/shared-request-header-policy.md
DTO/Controller 字段保留references/shared-request-field-preservation.md
完整 DTO、完整响应、嵌套字段或同名字段核对对应原子接口页、references/payment-complete-field-catalog.md;代码任务再补语言 adapter
appid/openid、支付路由、对账或资金运营 FAQreferences/payment-operations-faq.md、references/copilot-troubleshooting-playbooks.md
本地沙箱references/shared-local-sandbox.md,再补通知、查询或上线检查
上线前检查references/copilot-go-live-checklist.md、references/copilot-existing-system.md
版本与升级references/skill-version-policy.md

需要暂停的操作

接口或实体不明确时只暂停依赖该选择的业务实现,问一个最关键问题;SDK安装、安全初始化及接口骨架可继续。缺真实环境、密钥或商户配置时使用服务端配置占位,不称为已可联调;真实调用前必须取得对应配置与授权。

遇到明确非法输入、验签失败、凭据泄露或未经授权的真实操作,停止受影响操作并说明原因;需要提示时用 🔴 CHECKPOINT · HARD STOP。不要为了生成代码要求用户证明既有环境已安全;代码本身应包含必要的启动校验。

支付终态与通知

  • 同步受理、跳转地址、浏览器回跳及前端 callback 均不代表支付终态;校验业务状态后才更新订单。
  • 通知先验签,校验金额、商户号、订单号与状态,再幂等更新;通知缺失时查单补偿,不伪造成功。
  • 接口 notify_url 与控台 Webhook 的签名位置和 ACK 不混用;聚合下单同一通知地址承接正扫/反扫两套参数。验签后按通知 resp_data.trans_type 与已匹配原订单的 trade_type 核对并选择合同,不从通知读取未声明的 trade_type;缺失或冲突时通过原交易/查询核对。
  • 抖音直连只明确了 resp_data 外层,编码、签名位置和 ACK 尚未确认;不套用通用托管 Controller。

请求、凭据与来源头

  • 保留调用方的日期、流水、金额、角色ID和原交易定位键;缺失或非法报错,不重写,扩展不能覆盖已声明字段。细节见 references/shared-request-field-preservation.md。
  • 私钥与敏感资料使用服务端安全配置和脱敏示例;不得进入前端、日志或仓库。
  • 按当前请求实际加载并参与生成的 Skill 集合取值:仅本 Skill 使用 hfps/1.4.0;两个 Skill 都参与当前请求时使用 hfps/1.4.0;hfms/1.0.5。顺序固定为支付、进件,用一个英文分号且不加空格;仅安装未参与的不计入。显式合同值原样透传,不追加 sys_id。
  • Java调试在初始化及任何请求前全局关闭,不能并发临时切换。PHP官方 BsPayDemo/loader.php 与 Composer/BsPayConfig.php 会启用敏感调试日志:在加载任何 SDK 文件前固定 DEBUG=false,启动拒绝已启用DEBUG的进程;生成安全loader骨架不需先索取配置证明。

官方 SDK-only 传输规则

当前证据:Lightning Java 1.0.6、通用 Java 3.0.41、PHP 2.0.31、Python 2.0.28(2026-10-08核验)。Java/PHP/Python真实请求都必须使用对应官方 SDK;不得为了“规避 TLS”或缺示例改写HTTP/签验客户端。缺专属Request先核对官方通用入口,仍无证据则报告能力缺口。构造器、具体路由和初始化读取公共矩阵及语言adapter。

通用Java/Python保持默认TLS;Lightning1.0.6存在信任所有证书/主机名的实现,PHP2.0.31关闭peer校验,作为非阻断开发提醒保留。继续官方SDK,不声称风险已修复,不自动修改SDK,也不新增关闭校验设置。

交付口径

直接回答当前问题,列出实际读取的 references;代码交付说明适用接口、配置缺口、字段/通知处理和验证结果,未实现部分明确留 TODO。费率试算按接口合同实现,商务费率、准入及生产定责转人工。

本地沙箱只证明协议、状态机和幂等闭环,不能证明真实权限、费率、资金或生产准入。冻结r1–r4证据不重算,差异与使用入口见 references/shared-local-sandbox.md。

当前版本

项目口径
Skill 版本1.4.0
支付来源2026-10-10,24 API / 2,930字段路径
版本与升级references/skill-version-policy.md

Top skills in this category

GitHub

@byungkyu

GitHub API integration with managed OAuth. Access repositories, issues, pull requests, commits, branches, and users. Use this skill when users want to interact with GitHub repositories, manage issues and PRs, search code, or automate workflows. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a GitHub connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a GitHub action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with GitHub examples; they add no GitHub capability - GitHub is itself an event source, so its own events are in `references/github/triggers.md`, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

4719k

google-slides

@byungkyu

Google Slides API integration with managed OAuth. Create presentations, add slides, insert content, and manage slide formatting. Use this skill when users want to interact with Google Slides. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Google Slides connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Google Slides action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Google Slides examples; they add no Google Slides capability - Google Slides is not an event source, a trigger cannot read Google Slides data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

3420k

google-workspace-admin

@byungkyu

Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for users, groups, organizational units, roles, and domain settings. Only connect with a least-privileged Google admin account, restrict OAuth scopes to the specific resources needed, and revoke the connection after use. All write operations require explicit user approval showing the exact HTTP method, endpoint path, and target resource identifier before execution. Use this skill only when users need Google Workspace administration. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Google Workspace Admin connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Google Workspace Admin action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Google Workspace Admin examples; they add no Google Workspace Admin capability - Google Workspace Admin is not an event source, a trigger cannot read Google Workspace Admin data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

2119k

Linear

@byungkyu

Linear API integration with managed OAuth. Query and manage issues, projects, teams, cycles, and labels using GraphQL. Use this skill when users name Linear explicitly or ask about their Linear issues, cycles, projects, or teams — for example "create a Linear issue for this bug", "what is in my current cycle", "move ENG-412 to done". Not for GitHub issues, Jira, or generic task lists, and not for planning work that is not tracked in Linear. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key. Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Linear connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Linear action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Linear examples; they add no Linear capability - Linear is itself an event source, so its own events are in `references/linear/triggers.md`, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

1815k

google-play

@byungkyu

Google Play Developer API (Android Publisher) integration with managed OAuth. Manage apps, subscriptions, in-app purchases, and reviews. Use this skill when users want to interact with Google Play Console programmatically. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Google Play connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Google Play action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Google Play examples; they add no Google Play capability - Google Play is not an event source, a trigger cannot read Google Play data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

1218k