feat(v2): crypto 孤儿到账发现——OrphanScanner 扫链核对 + orphan_payments 落表告警(对账兜底)

internal/provider/crypto/crypto_test.go

@@ -238,3 +238,34 @@ func TestWarmRebuildsReservationsFromLoader(t *testing.T) {
 		t.Fatalf("超冷却窗的预留不应恢复, got %v", res)
 	}
 }
+
+// 孤儿到账发现:假 TronGrid 返回两笔确认到账,一笔匹配 known 期望金额(base+tail),
+// 一笔无主 → 仅后者报孤儿。
+func TestScanOrphansFlagsUnmatchedTransfer(t *testing.T) {
+	const addr = "TOrphanScanAddr00000000000000000000"
+	now := time.Date(2026, 7, 10, 12, 0, 0, 0, time.UTC)
+	// 假 TronGrid:to=addr 两笔确认到账。29990263 匹配 known(base 29990000 + tail 263);88880000 无主。
+	ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"data":[
+			{"transaction_id":"TX-MATCH","to":"` + addr + `","type":"Transfer","value":"29990263","block_timestamp":` + strconv.FormatInt(now.Add(-5*time.Minute).UnixMilli(), 10) + `},
+			{"transaction_id":"TX-ORPHAN","to":"` + addr + `","type":"Transfer","value":"88880000","block_timestamp":` + strconv.FormatInt(now.Add(-3*time.Minute).UnixMilli(), 10) + `}
+		]}`))
+	}))
+	defer ts.Close()
+
+	t.Setenv("CRY_ADDRESS", addr)
+	reg := accounts.New([]config.AccountConfig{{AccountID: "cry-1", Channel: "crypto", Enabled: true, CredentialEnvPrefix: "cry"}})
+	p := crypto.New(reg, crypto.WithBaseURL(ts.URL), crypto.WithHTTPClient(ts.Client()), crypto.WithNow(func() time.Time { return now }))
+
+	orphans, err := p.ScanOrphans(context.Background(), provider.OrphanScanRequest{
+		AccountID: "cry-1", Since: now.Add(-time.Hour),
+		Known: []provider.KnownAttempt{{AmountMinor: 29990000, ProviderRef: "CRYPTO-PAY-A-263"}}, // 期望 29990263
+	})
+	if err != nil {
+		t.Fatalf("scan: %v", err)
+	}
+	if len(orphans) != 1 || orphans[0].TxID != "TX-ORPHAN" || orphans[0].AmountMinor != 88880000 {
+		t.Fatalf("只应报 1 笔孤儿 TX-ORPHAN, got %+v", orphans)
+	}
+}