chore(cordis): sync Wavelet core/pkg/plugins after W1-W9

backend/plugins/domain/cap/plugin.go

@@ -77,6 +77,8 @@ func (p *Plugin) Apply(ctx *core.Context) error {
 		InvalidateRuntimeSettings()
 	})
 
+	core.Provide[contracts.CaptchaService](ctx, captchaService{})
+
 	// Register HTTP Routes
 	capGroup := ctx.Router().Group("/api/v1/cap")
 	{
@@ -85,6 +87,11 @@ func (p *Plugin) Apply(ctx *core.Context) error {
 		capGroup.POST("/redeem", Redeem)
 	}
 
+	legacy := ctx.Router().Group("/api/cap")
+	legacy.POST("/challenge", Challenge)
+	legacy.POST("/redeem", Redeem)
+	ctx.Router().RegisterWhitelist("/api/cap/challenge", "/api/cap/redeem")
+
 	// Register Settings Schemas
 	ctx.Settings().Register(extpoints.SettingSchema{
 		Key:         "cap.login_enabled",
@@ -103,3 +110,13 @@ func (p *Plugin) Apply(ctx *core.Context) error {
 
 	return nil
 }
+
+type captchaService struct{}
+
+func (captchaService) VerifyMiddleware(scope string) any {
+	return VerifyMiddleware(GetDefaultManager(), scope)
+}
+
+func (captchaService) ChallengeHandler() any { return Challenge }
+
+func (captchaService) RedeemHandler() any { return Redeem }

backend/plugins/domain/cap/plugin_captcha_contract_test.go

@@ -0,0 +1,52 @@
+// Copyright 2026 Arctel.net
+// SPDX-License-Identifier: Apache-2.0
+
+package cap
+
+import (
+	"context"
+	"testing"
+
+	"Wavelet/core"
+	"Wavelet/core/contracts"
+)
+
+func TestApplyProvidesCaptchaService(t *testing.T) {
+	ctx := core.NewContext(context.Background())
+	if err := New().Apply(ctx); err != nil {
+		t.Fatal(err)
+	}
+	svc, err := core.Inject[contracts.CaptchaService](ctx)
+	if err != nil || svc == nil {
+		t.Fatalf("Inject CaptchaService: svc=%v err=%v", svc, err)
+	}
+	if svc.ChallengeHandler() == nil || svc.RedeemHandler() == nil {
+		t.Fatal("handlers must be non-nil")
+	}
+	if svc.VerifyMiddleware("login") == nil {
+		t.Fatal("VerifyMiddleware(login) must be non-nil")
+	}
+}
+
+func TestApplyRegistersUnversionedCapRoutes(t *testing.T) {
+	ctx := core.NewContext(context.Background())
+	if err := New().Apply(ctx); err != nil {
+		t.Fatal(err)
+	}
+	want := map[string]bool{
+		"POST /api/v1/cap/challenge": false,
+		"POST /api/cap/challenge":    false,
+		"POST /api/cap/redeem":       false,
+	}
+	for _, rd := range ctx.Router().Routes() {
+		key := rd.Method + " " + rd.Path
+		if _, ok := want[key]; ok {
+			want[key] = true
+		}
+	}
+	for key, ok := range want {
+		if !ok {
+			t.Errorf("missing route %s", key)
+		}
+	}
+}