<?php

/**
 * 支付、订单分账、余额分账、自助结算的 HTTP 接收层参考，PHP 7.4+。
 * 下载另存为 NotificationReceiver.php，与 OpenApiClient.php 一起 require。
 * 本函数不发送请求，不代替你方业务核验、事务、去重和版本控制。
 * $handleBusiness 必须在核验及可靠处理完成后明确返回 true；重复或旧版本安全忽略后也返回 true。
 * 返回 false、未返回或抛异常均不确认通知，避免业务未处理就停止通知。
 */
function receiveOpenNotification(
    string $raw,
    OpenApiClient $client,
    callable $handleBusiness,
    string $platformPublicKey = ''
): array {
    try {
        $payload = json_decode($raw, true, 512, JSON_THROW_ON_ERROR);
    } catch (Throwable $e) {
        return ['http_status' => 400, 'body' => 'FAIL'];
    }
    if (!is_array($payload) || !isset($payload['notify_id'])
        || !is_string($payload['notify_id']) || trim($payload['notify_id']) === '') {
        return ['http_status' => 400, 'body' => 'FAIL'];
    }
    try {
        $verified = $client->verifyNotification($payload, $platformPublicKey);
    } catch (Throwable $e) {
        $verified = false;
    }
    if (!$verified) {
        return ['http_status' => 401, 'body' => 'FAIL'];
    }
    try {
        if ($handleBusiness($payload) !== true) {
            return ['http_status' => 503, 'body' => 'FAIL'];
        }
    } catch (Throwable $e) {
        return ['http_status' => 503, 'body' => 'FAIL'];
    }
    return ['http_status' => 200, 'body' => 'SUCCESS'];
}