修复退款复核与发布安全边界

补齐退款人工复核、刷新恢复、会话隔离和旧冷备导入兼容
强化真实微信退款对账开关、重复环境变量和生产发布门禁
优化公开作品资产授权查询并保持实时撤销语义
统一后台微信渠道、退款追回流水和画布正式资源测试契约
补齐生成与素材侧栏回归测试

scripts/deploy/production-api-deploy.sh

@@ -149,6 +149,7 @@ path = Path(sys.argv[1])
 key = sys.argv[2]
 if not path.exists():
     raise SystemExit(0)
+matched_value = None
 for raw_line in path.read_text(encoding="utf-8").splitlines():
     line = raw_line.strip()
     if not line or line.startswith("#") or "=" not in line:
@@ -158,8 +159,9 @@ for raw_line in path.read_text(encoding="utf-8").splitlines():
         value = value.strip()
         if len(value) >= 2 and value[0] == value[-1] and value[0] in ("\"", "'\''"):
             value = value[1:-1]
-        print(value)
-        raise SystemExit(0)
+        matched_value = value
+if matched_value is not None:
+    print(matched_value)
 '
 
   if [[ -r "${file_path}" ]]; then
@@ -297,6 +299,7 @@ ensure_runtime_env_and_dirs() {
   ensure_env_value "${api_env_file}" "GENARRATIVE_WALLET_REFUND_OUTBOX_BATCH_SIZE" "100"
   ensure_env_value "${api_env_file}" "GENARRATIVE_WALLET_REFUND_OUTBOX_FLUSH_INTERVAL_MS" "1000"
   ensure_env_value "${api_env_file}" "GENARRATIVE_WALLET_REFUND_OUTBOX_MAX_BYTES" "67108864"
+  ensure_env_value "${api_env_file}" "WECHAT_PAY_REFUND_RECONCILIATION_ENABLED" "true"
   ensure_env_value_migrates_old_default "${api_env_file}" "GENARRATIVE_EXTERNAL_GENERATION_WORKER_LEASE_SECONDS" "3600" "600"
   ensure_env_value "${api_env_file}" "GENARRATIVE_EXTERNAL_GENERATION_WORKER_JOB_TIMEOUT_SECONDS" "900"
   ensure_env_value "${api_env_file}" "GENARRATIVE_EXTERNAL_GENERATION_WORKER_LONG_JOB_TIMEOUT_SECONDS" "1800"
@@ -317,6 +320,20 @@ ensure_runtime_env_and_dirs() {
   fi
 }
 
+validate_real_wechat_pay_refund_reconciliation() {
+  local api_env_file="$1"
+  local pay_enabled pay_provider reconciliation_enabled
+
+  pay_enabled="$(read_env_value "${api_env_file}" "WECHAT_PAY_ENABLED" | tr '[:upper:]' '[:lower:]')"
+  pay_provider="$(read_env_value "${api_env_file}" "WECHAT_PAY_PROVIDER" | tr '[:upper:]' '[:lower:]')"
+  reconciliation_enabled="$(read_env_value "${api_env_file}" "WECHAT_PAY_REFUND_RECONCILIATION_ENABLED" | tr '[:upper:]' '[:lower:]')"
+  if [[ "${pay_enabled}" == "true" && "${pay_provider}" == "real" && "${reconciliation_enabled}" != "true" ]]; then
+    echo "[production-api-deploy] 真实微信支付必须设置 WECHAT_PAY_REFUND_RECONCILIATION_ENABLED=true: ${api_env_file}" >&2
+    exit 1
+  fi
+  echo "[production-api-deploy] 微信退款 reconciliation 配置已复核: enabled=${reconciliation_enabled:-unset}, real_pay=$([[ "${pay_enabled}" == "true" && "${pay_provider}" == "real" ]] && printf true || printf false)"
+}
+
 ensure_worker_runtime_env_defaults() {
   local worker_env_file="$1"
 
@@ -1110,6 +1127,7 @@ if [[ -n "${SPACETIME_SERVER_URL}" ]]; then
 fi
 
 ensure_runtime_env_and_dirs "${API_ENV_FILE}"
+validate_real_wechat_pay_refund_reconciliation "${API_ENV_FILE}"
 ensure_worker_runtime_env_defaults "${WORKER_ENV_FILE}"
 migrate_legacy_editor_generation_pricing_override "${CURRENT_LINK}"