辅助函数

HasCheckedInToday 检查用户今天是否已签到

IncrementFailedAttempts 增加失败尝试次数

InsertWithTx inserts a new user within an existing transaction. This is used for OAuth registration where user creation and binding need to be atomic.

InvalidateCache clears the compiled-expression cache. Called when billing rules are updated.

InvalidateUserCache is the exported version of invalidateUserCache. 供 controller 等上层包在用户状态变更（如禁用、删除、角色变更）后主动清理缓存。

IsCustomProvider checks if a provider is a custom provider

IsDisk 是否是磁盘存储

IsIPAccessAllowed 检查IP是否允许访问

IsPrefillGroupNameDuplicated 检查组名称是否重复（排除自身 ID）

IsProviderRegistered checks if a provider is registered

IsProviderUserIdTaken checks if a provider user ID is already bound to any user

IsRunningInContainer detects if the application is running inside a container

IsSlugTaken checks if a slug is already taken by another provider Returns true on DB errors (fail-closed) to prevent slug conflicts

IsSupported checks if a language code is supported

IsUserIDTaken checks if the provider user ID is already associated with an account

IsVendorNameDuplicated 检查供应商名称是否重复（排除自身 ID）

JsonRawMessageToString returns JSON strings as their decoded value and other JSON values as raw text.

ListDeployments retrieves a list of deployments with optional filtering

ListWaffoPancakeCatalog queries Pancake's GraphQL `stores` for the merchant's stores + onetime products. A successful call also proves the supplied cr

LoadCustomProviders loads all custom OAuth providers from the database

NewClientWithConfig creates a new IO.NET API client with custom configuration

NewEnterpriseClient creates a new IO.NET API client targeting the enterprise API base URL.

NewGenericOAuthProvider creates a new generic OAuth provider from config

NormalizeBackupCode 标准化备用码格式

NormalizeBillingPreference clamps the billing preference to valid values.

ParseAcceptLanguage parses the Accept-Language header and returns the preferred language

ParseExprVersion extracts the version tag and body from an expression string. Format: "v1:tier(...)" → version=1, body="tier(...)". No prefix defaults

PermissionsForRole returns the permissions whose DefaultRoles include roleKey.

QuotaFromDecimalChecked is QuotaFromDecimal but also returns a non-nil *QuotaClamp when the value was clamped, so billing callers can audit it.

RebuildToolPriceIndex rebuilds the lookup index from the current config. Called on init and after config updates. Not on the billing hot path.

Refund 退还所有预扣费额度（资金来源 + 令牌），幂等安全。 通过 gopool 异步执行。如果已经结算或退款则不做任何操作。

RegisterOrUpdateCustomProvider registers or updates a single custom provider

RegisterSystemTaskHandler registers a handler keyed by its Type(). It must be called before StartSystemTaskRunner (or any time, since the runner snaps