HandleGroupRatio checks for "auto_group" in the context and updates the group ratio and relayInfo.UsingGroup if present

IncrementFailedAttempts 增加失败尝试次数

Insert 创建新的供应商记录

IsDiskCacheAvailable 检查是否可以创建新的磁盘缓存

IsLocked 检查账户是否被锁定

Items 返回 Set 中所有元素组成的切片 注意：由于 map 的无序性，返回的切片元素顺序是随机的

LocalLogPreview limits log-only content unless debug logging is enabled.

LogJson 仅供测试使用 only for test

ModelListRoute returns the explicitly configured OpenAI Models discovery route. Template routes that merely happen to match /v1/models are not discove

ModelPriceHelperPerCall 按次/按量计费的 PriceHelper (MJ、Task)

NewSSRFProtectionFromFetchSetting builds an SSRFProtection from persisted fetch_setting values.

--------------------------------------------------------------------------- Constructors -------------------------------------------------------------

NormalizeOrigin validates and canonicalizes a browser origin. Only an exact scheme/host/effective-port match is meaningful; paths and wildcards are no

ParseProxyURLRuntime validates and normalizes a proxy URL for runtime use. The boolean result reports whether a legacy path, query, or fragment was re

QuotaFromFloatChecked is QuotaFromFloat but also returns a non-nil *QuotaClamp when the value was clamped, so billing callers can audit it.

RecordOperationAuditLog 记录管理/高危操作审计日志（type=LogTypeManage）。 logUserId 为日志归属者，管理审计日志应归属实际操作者；目标资源/用户放入 action params。username 内部按 logUserId 查询。content 为

RefreshPricing 强制立即重新计算与定价相关的缓存。 该方法用于需要最新数据的内部管理 API， 因此会绕过默认的 1 分钟延迟刷新。

RequireSecurityProof validates a proof against the authenticated dashboard session and writes the shared proof error contract on failure.

RevokeUserSessionByRefreshHash is used when logout is authenticated only by the HttpOnly refresh cookie. Possession of a SID alone is insufficient. Th

RoleSubject is the casbin subject string for a role.

RotateUserSessionRefresh atomically rotates HMAC digests. The UPDATE itself is a compare-and-swap so SQLite, where lockForUpdate is intentionally a no

SetUserAuthVersionFence publishes a fail-closed version before a restrictive database update. Pending fences expire only after every pre-existing user

SupportsPathForModel reports whether any route matches requestPath and model.

TaskBulkUpdateByID performs an unconditional bulk UPDATE by primary key IDs. WARNING: This function has NO CAS (Compare-And-Swap) guard — it will over

UpdatePasskeyAssertionState persists only fields produced by a successful assertion. Registration identity (credential ID, public key, AAGUID, transpo

ValidateBackupCodeAndUpdateUsage 验证备用码并更新使用记录

ValidateResolvedIP validates a domain's resolved IP immediately before dialing it.

ValidateToolPricesJSON validates an operator-supplied complete price map. A numeric zero is valid and intentionally disables the matching rule.

ValidateURLWithFetchSetting 使用FetchSetting配置验证URL

applyUpstreamContentLength populates req.ContentLength when the upstream body is wrapped in a BodyStorage (see relay/common/outbound_body.go). net/ht

auditOperatorInfo 从上下文构建操作者身份信息（管理员 id/用户名/角色）。

buildAlphaSearchRequestBody returns RawBody unchanged unless the model was mapped, in which case only the "model" field is rewritten so unknown fields