GetQuotaDisplayType 返回额度展示类型

PinTaskPluginEndpoint decides shared-endpoint ownership without executing plugin code. Invalid or unidentifiable ordinary requests deliberately fall t

PrepareTaskPluginEndpoint normalizes a claimed shared request through the deterministic parser pinned before distribution. A shared-model request can

PublishUserAuthCache refreshes the current database state after a successful auth-sensitive transaction without touching the cached quota field.

SetReasoningEffort records the effort level a converter derived from a model-name suffix so downstream billing/logging can see it.

ApplyReasoningModelSuffix parses host-private reasoning suffixes from the origin and mapped model names, attaches the resulting intent to RelayInfo, a

Can reports whether the subject may perform the permission. A superuser role short-circuits to allow. Otherwise a per-user override wins, then the uni

ConsumeOperationProof accepts a proof at most once. The consumption commits before the caller performs its action; an action failure must not restore

ValidateAuthSessionWithTx rechecks the authoritative identity while holding the user/session locks until the caller's credential change or flow consum

转换模型名，减少渠道必须配置各种带参数模型

GetGeminiSettings 获取Gemini配置

GetHttpClient returns the general outbound client used by relay/provider integrations. Do not attach the SSRF-protected dialer here: provider base URL

GetHttpClientWithProxy returns the default client or a cached proxy-enabled client.

IncrementUserAuthVersionWithTx locks the user, publishes the next deny fence, then persists the version in the caller's transaction. Unscoped is inten

RequireSecurityProof validates a proof against the authenticated dashboard session and writes the shared proof error contract on failure.

ComputeTieredQuota runs the Expr from a frozen BillingSnapshot against actual token counts and returns the settlement result.

DecodePluginProtocolEventResult converts an exported JS value into the deliberately small semantic event contract. Unknown fields are rejected so plug

Error records a soft error. The stream continues processing. Can be called multiple times per chunk.

GetBillingModelName returns the effective pricing identity without changing either the client-visible model or the model sent to the selected channel.

Unregister removes a provider from the registry

WalletQuotaFromDecimalStrict converts wallet and top-up values within the JavaScript-safe integer range, which is also exactly representable by float6

writeUserSessionCache writes a bounded Session snapshot. Active snapshots must carry a deadline captured immediately before their authoritative databa

ApplyUpstreamBodyMetadata restores metadata that net/http cannot infer from a ReplayableBody. Callers must pass the original body because NewRequest h

CallPath invokes a function nested below an exported object. It is used for protocol hooks such as protocols.openai_responses.renderEvents.

Error implements the error interface