GetSessionAuthIdentity returns only identities backed by a live dashboard session. PAT-authenticated requests intentionally fail this check.

ApplyReasoningModelSuffix parses host-private reasoning suffixes from the origin and mapped model names, attaches the resulting intent to RelayInfo, a

Can reports whether the subject may perform the permission. A superuser role short-circuits to allow. Otherwise a per-user override wins, then the uni

GetGeminiSettings 获取Gemini配置

GetHttpClient returns the general outbound client used by relay/provider integrations. Do not attach the SSRF-protected dialer here: provider base URL

GetHttpClientWithProxy returns the default client or a cached proxy-enabled client.

ComputeTieredQuota runs the Expr from a frozen BillingSnapshot against actual token counts and returns the settlement result.

DecodePluginProtocolEventResult converts an exported JS value into the deliberately small semantic event contract. Unknown fields are rejected so plug

Error records a soft error. The stream continues processing. Can be called multiple times per chunk.

转换模型名，减少渠道必须配置各种带参数模型

GetAuthFlow validates a flow without consuming it. Callers must still use ConsumeAuthFlow with all identity-bound fields before performing the action.

GetBillingModelName returns the effective pricing identity without changing either the client-visible model or the model sent to the selected channel.

IncrementUserAuthVersionWithTx locks the user, publishes the next deny fence, then persists the version in the caller's transaction. Unscoped is inten

writeUserSessionCache writes a bounded Session snapshot. Active snapshots must carry a deadline captured immediately before their authoritative databa

ApplyUpstreamBodyMetadata restores metadata that net/http cannot infer from a ReplayableBody. Callers must pass the original body because NewRequest h

CallPath invokes a function nested below an exported object. It is used for protocol hooks such as protocols.openai_responses.renderEvents.

Error implements the error interface

OptionsOf returns m's conversion options, or empty defaults when m is nil.

UpdateWithStatus performs a conditional UPDATE guarded by fromStatus (CAS). Returns (true, nil) if this caller won the update, (false, nil) if another

WalletQuotaFromDecimalStrict converts wallet and top-up values within the JavaScript-safe integer range, which is also exactly representable by float6

settleTaskBillingOnComplete 任务完成时的统一计费调整。 返回 true 表示用量结算路径已接管最终计费；失败任务仅在返回 false 时补做全额退款。 优先级：1. tiered snapshot → 2. adaptor 调整 → 3. token 重算。 表达式求值

Compile performs upload-time syntax checks and compiles an ESM plugin once. All Sobek-specific module and runtime handling is intentionally kept here.

CountBillableToolCall is the single entry point for per-call tool billing counts. Built-in call types always count; custom function/tool_use names onl

DeleteToolPriceForTest removes an injected tool price and rebuilds the index. Tests only.

GetDBTimestamp returns a UNIX timestamp from database time. Falls back to application time on error.

GetHttpClientWithProxySettings returns a cached HTTP client for the proxy URL and channel transport settings. Default auto + 1 shard shares the same c