GMShop Edge

Digital goods, delivered from the edge.

简体中文 · English

GMShop Edge is a self-hosted, single-deployment, single-tenant digital-goods storefront for Cloudflare Workers or a Bun/Nitro Docker container. One deployment provides a responsive public shop, customer accounts, checkout and fulfillment, and a permission-driven administration console.

[!IMPORTANT] GMShop Edge is under active development. A built-in adapter means that its integration path is implemented; production use still requires deployer-owned provider credentials, backups, monitoring, and real-provider acceptance tests.

Core capabilities

• Sell stock products that atomically allocate encrypted preset text such as license keys, accounts, activation codes, or credentials.
• Synchronize upstream products from ACG 3.5.5 V4 Open API or Dujiao Next v1.3.1, then fulfill through an equal-priority account pool for each API source.
• Grant authorized, bounded access to private download files stored in R2.
• Dispatch automation products for deployments, scripts, resource provisioning, or build workflows, with none | optional | required artifact policies.
• Combine permanent, fixed-term, limited, unlimited, free, one-time, and customer-renewed entitlement policies without floating-point money.
• Support guest and registered checkout, private order lookup, coupons, refunds, after-sales handling, and operational retention.
• Keep one commerce identity model: registered ownership references Better Auth users directly, while guest orders use a verified checkout email until a matching verified account claims them. No shadow account or separate customer table is created.
• Deliver template-based transactional email through five @visulima/email providers—SMTP, Resend, Postmark, SendGrid, and Mailgun—plus the native Cloudflare Send Email binding. Email records retain delivery state while Queue/Cron provides bounded retries.
• Quote customer-selected fiat currencies from store-owned D1 exchange rates and pass one immutable quote to Stripe, GMpay, EPay, or another typed adapter.
• Configure email/password, social, OIDC, and Telegram authentication providers at runtime through Better Auth without rebuilding the Worker. Telegram web login supports both OIDC code callbacks and verified #tgAuthResult Widget fallback while storing the OIDC client secret separately from the Bot Token. Telegram Mini Apps use verified initData for automatic sign-up/sign-in, request full screen through @tma.js/sdk, and import a missing Telegram avatar. Telegram users can bind a verified email independently from setting a password.
• Synchronize a grammY webhook bot with localized shop commands and fixed Mini App buttons. Optional customer support maps each Telegram user to a Forum Topic, forwards messages in both directions without storing their content, trusts only current group administrators, and closes idle conversations.
• Protect /admin with dynamic multi-role RBAC, a non-removable root invariant, server-side permission checks, reauthentication, and audit records.
• Provide responsive light and dark themes, keyboard access, and two UI locales: English (en-US) and Simplified Chinese (zh-CN).
• Persist each user's preferred language for account and transactional email; guest orders retain the checkout locale as a notification fallback.

Every GMShop Edge capability listed above is part of the open-source project; there is no closed Pro or Enterprise tier.

Quoted ChatGPT upgrades

Migration 0050_gpt_upgrade.sql adds the fixed upgrade product and its private order ledger without renumbering existing products. The zero CNY list price is only a placeholder: start at https://redeem.laoshirenvip.com/upgrade, then open /upgrade/checkout?quote=TOKEN. Only web Plus / Pro subscriptions are eligible for Pro 100 / Pro 200 / Pro 500; Apple / Google store subscriptions are excluded.

The existing warehouse integration credential is reused. Checkout revalidates the quote server-side, permits one item/quantity one/no coupon, and charges the quoted amount without channel price overrides or surcharges. Quote tokens are encrypted; a transactional unique reservation prevents duplicate active orders. Paid delivery calls the redemption site idempotently and issues its fixed status link through the order page and normal delivery email. “Delivered” means the progress link was issued, not that the remote upgrade has already completed.

여기까지가 README 앞부분입니다. 나머지는 원문에서 읽을 수 있습니다. README 전문 보기 ↗