feat(lua): PayKit umbrella for OpenResty / Kong / APISIX (closes #140)

.github/workflows/lua.yml

@@ -25,10 +25,10 @@ jobs:
         uses: actions/cache@v4
         with:
           path: lua/lua_modules
-          key: ${{ runner.os }}-luarocks-v2-${{ hashFiles('lua/mpp-dev-1.rockspec', 'lua/.luacov', 'lua/.luacheckrc') }}
+          key: ${{ runner.os }}-luarocks-v2-${{ hashFiles('lua/pay-kit-dev-1.rockspec', 'lua/.luacov', 'lua/.luacheckrc') }}
           restore-keys: ${{ runner.os }}-luarocks-v2-
 
-      - name: Install dev rocks (luacheck + luacov + luasocket + luasodium + luasec)
+      - name: Install dev rocks (luacheck + luacov + luasocket + luasodium + luasec + lua-resty-openssl + cjson)
         if: steps.cache-rocks.outputs.cache-hit != 'true'
         working-directory: lua
         run: |
@@ -39,16 +39,21 @@ jobs:
           luarocks --lua-version=5.1 install --tree lua_modules luasocket
           luarocks --lua-version=5.1 install --tree lua_modules luasodium
           luarocks --lua-version=5.1 install --tree lua_modules luasec OPENSSL_DIR=/usr
+          luarocks --lua-version=5.1 install --tree lua_modules lua-resty-openssl
+          luarocks --lua-version=5.1 install --tree lua_modules lua-cjson
 
-      - name: Validate rockspec
+      - name: Validate rockspecs
         working-directory: lua
-        run: luarocks --lua-version=5.1 lint mpp-dev-1.rockspec
+        run: |
+          luarocks --lua-version=5.1 lint pay-kit-dev-1.rockspec
+          luarocks --lua-version=5.1 lint kong-plugin-pay-kit-dev-1.rockspec
+          luarocks --lua-version=5.1 lint apisix-plugin-pay-kit-dev-1.rockspec
 
       - name: Lint
         working-directory: lua
         run: |
           eval "$(luarocks --lua-version=5.1 --tree lua_modules path)"
-          luacheck mpp/ tests/
+          luacheck pay_kit/ plugins/ tests/
 
       - name: Run tests with coverage
         working-directory: lua
@@ -61,7 +66,7 @@ jobs:
           luacov
           ./scripts/check_coverage.sh ../luacov.report.out 90
 
-      # Codex PR #103 P3: the coverage gate excludes mpp/methods/solana/ata
+      # Codex PR #103 P3: the coverage gate excludes pay_kit/solana/ata
       # because luacov disables LuaJIT trace recording and the on-curve check
       # becomes ~100x slower under coverage. Run the suite a second time
       # WITHOUT luacov so the protocol-critical ATA fixture spec
@@ -106,7 +111,7 @@ jobs:
         uses: actions/cache@v4
         with:
           path: lua/lua_modules
-          key: ${{ runner.os }}-luarocks-v2-${{ hashFiles('lua/mpp-dev-1.rockspec', 'lua/.luacov', 'lua/.luacheckrc') }}
+          key: ${{ runner.os }}-luarocks-v2-${{ hashFiles('lua/pay-kit-dev-1.rockspec', 'lua/.luacov', 'lua/.luacheckrc') }}
           restore-keys: ${{ runner.os }}-luarocks-v2-
 
       - name: Install runtime rocks
@@ -118,6 +123,8 @@ jobs:
           luarocks --lua-version=5.1 install --tree lua_modules luasocket
           luarocks --lua-version=5.1 install --tree lua_modules luasodium
           luarocks --lua-version=5.1 install --tree lua_modules luasec OPENSSL_DIR=/usr
+          luarocks --lua-version=5.1 install --tree lua_modules lua-resty-openssl
+          luarocks --lua-version=5.1 install --tree lua_modules lua-cjson
 
       - uses: actions/setup-node@v4
         with:
@@ -160,3 +167,21 @@ jobs:
           MPP_INTEROP_SERVERS: lua
           MPP_INTEROP_SCENARIOS: charge-basic,charge-split-ata
         run: pnpm exec vitest run test/e2e.test.ts --testNamePattern "rust client pays lua server"
+
+      # Dual-protocol proof: one e2e run drives MPP charge scenarios
+      # (typescript client) and x402 exact (rust-x402 client) against
+      # the same Lua adapter binary. Mirrors the ruby workflow's
+      # interop-ruby step. The dual-protocol Lua adapter at
+      # harness/lua-server/server.lua reads either MPP_INTEROP_* or
+      # X402_INTEROP_* env (or the PAY_KIT_INTEROP_PROTOCOL hint that
+      # the matrix stamps when both namespaces are populated against
+      # the same surfpool fixtures) and routes through resty.pay_kit.
+      - name: Run PayKit interop smoke (mpp charge + x402 exact)
+        working-directory: harness
+        env:
+          MPP_INTEROP_CLIENTS: typescript
+          MPP_INTEROP_SERVERS: lua,typescript
+          MPP_INTEROP_INTENTS: charge,x402-exact
+          X402_INTEROP_CLIENTS: rust-x402
+          X402_INTEROP_SERVERS: ""
+        run: pnpm exec vitest run test/e2e.test.ts --testNamePattern "lua" --testTimeout 180000