GetUserSessionCached validates cached state first and falls back to the database on a miss or Redis read failure. A deny tombstone never falls back.

OptionsOf returns m's conversion options, or empty defaults when m is nil.

Update subscription used amount by delta (positive consume more, negative refund).

RechargeEpay 原子完成易支付订单：订单行锁、状态校验、成功更新与用户额度增加 在同一个事务内完成，因此同一订单的并发/重复回调（包括多实例部署下）最多充值一次。 alreadyDone=true 表示订单此前已完成，本次为幂等重复回调。 进程内的 LockOrder 只是优化，正确性由本

attachQuotaSaturation records the request's quota clamp (if any) onto the consume log's other.admin_info and emits a request-correlated backend audit

creditTopUpQuota atomically enforces the wallet ceiling while adding quota. Keeping the predicate and increment in one UPDATE prevents two concurrent

setupLogin creates a server-controlled login Session and returns the shared authentication bundle used by every login method.

syncCreditUserQuotaCache 在授信事务（充值/兑换等）提交后同步把增量补进缓存 余额。预扣以缓存值为准（存在期间），授信不能绕过它，否则新到账的额度在 缓存过期前不可用；缓存未命中无需处理，下次读取会从已提交的数据库余额水合。

AdvanceCurrentSessionToUserVersion is used when the security mutation and AuthVersion increment were committed in the same transaction (for example, a

ClaimExternalIdentityWithTx atomically claims a provider subject for one user. Repeating the exact mapping is idempotent; every competing subject or u

Complete a subscription order (idempotent). Creates a UserSubscription snapshot from the plan. expectedPaymentProvider guards against cross-gateway ca

ConsumeAuthFlow atomically validates and consumes a flow. Optional match fields are enforced when non-zero so tokens cannot cross purposes or users.

EnsureClaudeConvertInfo lazily creates and returns the mutable OpenAI→Claude stream conversion state. For non-nil receivers, the same instance must be

GetRequestAutoGroups resolves the ordered Auto groups for the current token. The absence of the context value means that the token inherits the comple

GetTools 获取工具列表

MatchPathForModel returns the first route whose IncomingPath and Models match. An empty Models list is a catch-all fallback for that incoming path.

MigrateRetiredFrontendOptions normalizes options that belonged to the removed dashboard frontend. Each legacy console setting is migrated in its own t

PrepareTieredBillingForSelectedGroup refreshes routing-dependent billing state before an upstream attempt. An existing session reserves any higher est

QuotaRound converts a float64 quota value to int using half-away-from-zero rounding with int32 saturation. Every tiered billing path (pre-consume, set

RemoveDisabledFields 从请求 JSON 数据中移除渠道设置中禁用的字段 service_tier: 服务层级字段，可能导致额外计费（OpenAI、Claude、Responses API 支持） inference_geo: Claude 数据驻留推理区域字段（仅 Claude