GetDBTimestamp returns a UNIX timestamp from database time. Falls back to application time on error.

GetHttpClientWithProxySettings returns a cached HTTP client for the proxy URL and channel transport settings. Default auto + 1 shard shares the same c

GetTwoFAByUserId 根据用户ID获取2FA设置

GetUserGroup gets group from Redis first, falls back to DB if needed

PublishUserAuthCache refreshes the current database state after a successful auth-sensitive transaction without touching the cached quota field.

getUserCacheKey returns the key for user cache

CountBillableToolCall is the single entry point for per-call tool billing counts. Built-in call types always count; custom function/tool_use names onl

DeleteToolPriceForTest removes an injected tool price and rebuilds the index. Tests only.

Error implements the error interface

GetAuthHeader get auth header

LockOrder 尝试对给定订单号加锁

NewOAuthError creates a new OAuth error with the given message key

NewOAuthErrorWithRaw creates a new OAuth error with raw error message for logging

RebuildToolPriceIndex rebuilds the lookup index from the current config. Called on init and after config updates. Not on the billing hot path.

UnlockOrder 释放给定订单号的锁

processHeaderOverride applies channel header overrides, with placeholder substitution. Supported placeholders: - {api_key}: resolved to the channel AP

BuildTieredTokenParams constructs billingexpr.TokenParams from a dto.Usage, normalizing P and C so they mean "tokens not separately priced by the expr

Keys returns keys with valid values. In Redis, it returns all matching keys.

RefundTaskQuota 统一的任务失败退款逻辑。 当异步任务失败时，将预扣的 quota 退还给用户（支持钱包和订阅），并退还令牌额度。 返回资金来源是否已成功退还；失败时保留 quota，供显式重试或人工对账。

UpdateWithStatus performs a conditional UPDATE guarded by fromStatus (CAS). Returns (true, nil) if this caller won the update, (false, nil) if another

UsedVars returns the set of identifier names referenced by an expression. The result is cached alongside the compiled program. Returns nil for empty i

UserSubject is the casbin subject string for a single user.

recordManageAuditFor 记录一条管理审计日志，日志归属于操作者；targetUserId 只表示被操作用户，用于在结构化参数中保留目标上下文。