ClaimExternalAuthAssertion records a signed provider assertion as consumed. The assertion is HMACed before storage and the unique token_hash index mak

ConvOptions returns the request-scoped conversion options snapshot. Must never return nil.

CreateBodyStorage 根据数据大小创建合适的存储

DecodeLocalTaskID decodes a base64-encoded upstream operation name.

DecrementDiskFiles 减少磁盘文件计数

DoWorkerRequest 通过Worker发送请求

GetCheckinSetting 获取签到配置

GetCustomOAuthProviderById returns a custom OAuth provider by ID

GetDiskCacheThresholdBytes 获取磁盘缓存阈值（字节）

GetEffectiveDisplayName returns the admin-configured display name, or the literal "OIDC" when none has been set. Centralizing this fallback keeps the

GetImageFromUrl 获取图片的类型和base64编码的数据

GetOpenAIError 从动态错误类型中提取OpenAIError结构

GetOpenAIError 从动态错误类型中提取OpenAIError结构

GetUserAutoGroup 根据用户分组获取自动分组设置

GetUserSetting gets setting from Redis first, falls back to DB if needed

IncrementDiskFiles 增加磁盘文件计数

InitializeExternalIdentityClaims imports legacy Telegram bindings after the claim table is migrated. Existing duplicate ownership fails migration rath

InjectTieredBillingInfo overlays tiered billing fields onto an existing module-specific other map. Call this after GenerateTextOtherInfo / GenerateCla

IsDiskCacheEnabled 是否启用磁盘缓存

MaskSensitiveInfo masks sensitive information like URLs, IPs, and domain names in a string Example: http://example.com -> http://***.com https://api.t

NewOutboundJSONBody wraps the already-marshaled upstream request body into a BodyStorage. When disk cache is enabled and the payload exceeds the confi

NewSystemTaskProgressReporter returns a throttled progress callback bound to a running task. Handlers call it with (processed, total) as they iterate

Observe records one completed final image output when billable. outputIndex may be nil; when set and nonnegative it participates in dedup.

ObserveChannelAffinityUsageCacheByRelayFormat records usage cache stats with a stable rate mode derived from relay format.

ParseDashboardAccessToken distinguishes new-api dashboard JWTs from opaque credentials. A token carrying the dashboard issuer, audience and a known to

QuotaFromFloat converts a computed quota value to int, truncating toward zero, with saturation. Use for float products of prices, ratios, and user-con

QuotaRoundChecked is QuotaRound but also returns a non-nil *QuotaClamp when the value was clamped, so billing callers can audit it.

RefreshUserGroupCache writes the database-authoritative group into an existing user hash without changing the user's authentication version.

RefundMidjourneyQuota reverses every accounting element recorded for a billed legacy task.

Request parameter duration's unit is seconds

SessionCookieOriginGuard protects cookie-authenticated refresh/logout endpoints when secure cookie mode is enabled. In insecure local development mode

set index

--------------------------------------------------------------------------- SettleBilling — 后结算辅助函数 --------------------------------------------------

ShouldCopyUpstreamHeader checks whether a given upstream response header should be copied to the client response. It returns false for Content-Length

TryReserveTokenQuota atomically checks and deducts a token quota. Unlimited tokens skip the balance check but still update remain/used accounting.

UpdateUserUsedQuota adjusts accumulated usage without changing request count.

ValidateNumericCode 验证数字验证码格式