feat(payment): 新增微信支付宝积分充值与对账

backend/internal/service/protocol_runtime_test.go

@@ -29,8 +29,9 @@ func TestPluginViewIncludesDocumentationForEveryOfficialProtocol(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	if len(plugins) != len(packages)+2 {
-		t.Fatalf("plugin views = %d, official packages plus workflow plugins = %d", len(plugins), len(packages)+2)
+	bundledCount := len(bundledWorkflowPluginManifests()) + len(bundledPaymentPluginManifests())
+	if len(plugins) != len(packages)+bundledCount {
+		t.Fatalf("plugin views = %d, official packages plus bundled plugins = %d", len(plugins), len(packages)+bundledCount)
 	}
 	for _, packagePath := range packages {
 		data, err := os.ReadFile(packagePath)
@@ -216,6 +217,32 @@ func TestPluginRuntimeDropsRemovedOfficialProtocol(t *testing.T) {
 	}
 }
 
+func TestPluginRuntimeRejectsPersistedUploadedPaymentProvider(t *testing.T) {
+	manifest := json.RawMessage(`{"apiVersion":"yingce.plugin/v1","id":"uploaded-payment-provider","version":"1.0.0","name":"Uploaded Payment Provider","author":"Test","enabled":true,"runtime":{"backend":"host:untrusted-payment"},"contributes":{"paymentProviders":[{"id":"untrusted-payment","label":"Untrusted Payment","icon":"brand:untrusted","checkoutMode":"redirect","expiryPolicy":{"defaultMinutes":30,"minMinutes":5,"maxMinutes":1440}}]}}`)
+	registryData, err := json.Marshal([]pluginRegistryRecord{{ID: "uploaded-payment-provider", Raw: manifest, Source: "uploaded"}})
+	if err != nil {
+		t.Fatal(err)
+	}
+	dataDir := t.TempDir()
+	if err := os.WriteFile(filepath.Join(dataDir, "plugin_registry.json"), registryData, 0o600); err != nil {
+		t.Fatal(err)
+	}
+	center, err := newPluginRuntime(dataDir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, plugin := range center.list() {
+		if plugin.Manifest.ID != "uploaded-payment-provider" {
+			continue
+		}
+		if plugin.Status != "invalid" || !strings.Contains(plugin.Error, "系统宿主适配器") {
+			t.Fatalf("persisted uploaded payment plugin = %#v", plugin)
+		}
+		return
+	}
+	t.Fatal("persisted uploaded payment plugin was not retained as invalid")
+}
+
 func TestAutoDLPluginPackageLoadsAsOfficialRuntime(t *testing.T) {
 	center, err := newPluginRuntime(t.TempDir())
 	if err != nil {