OptionsOf returns m's conversion options, or empty defaults when m is nil.

RecordAuditLog captures safe request metadata only; raw URLs, query strings, credentials and response/request bodies must never enter this table.

UpdateUserAccessToken rotates a dashboard personal access token without writing a stale user snapshot back over concurrently updated fields.

UpdateWithStatus performs a conditional UPDATE guarded by fromStatus (CAS). Returns (true, nil) if this caller won the update, (false, nil) if another

settleTaskBillingOnComplete 任务完成时的统一计费调整。 返回 true 表示用量结算路径已接管最终计费；失败任务仅在返回 false 时补做全额退款。 优先级：1. tiered snapshot → 2. adaptor 调整 → 3. token 重算。 表达式求值

Compile performs upload-time syntax checks and compiles an ESM plugin once. All Sobek-specific module and runtime handling is intentionally kept here.

CountBillableToolCall is the single entry point for per-call tool billing counts. Built-in call types always count; custom function/tool_use names onl

DeleteToolPriceForTest removes an injected tool price and rebuilds the index. Tests only.

GetDBTimestamp returns a UNIX timestamp from database time. Falls back to application time on error.

GetHttpClientWithProxySettings returns a cached HTTP client for the proxy URL and channel transport settings. Default auto + 1 shard shares the same c

GetTwoFAByUserId 根据用户ID获取2FA设置

GetUserGroup gets group from Redis first, falls back to DB if needed

RecordConversionDiagnostics retains conversion losses for the consume log and emits one request-correlated warning per distinct diagnostic. The cap pr

getUserCacheKey returns the key for user cache

AccessTokenAudit also captures public reads and rejections before route-level authentication (for example, rate limiting). It does not grant authentic

BuildTieredTokenParams constructs billingexpr.TokenParams from a dto.Usage, normalizing P and C so they mean "tokens not separately priced by the expr

GetAuthHeader get auth header

--------------------------------------------------------------------------- Read accessors (hot path, must be fast) ----------------------------------

Keys returns keys with valid values. In Redis, it returns all matching keys.

LoadFromDB 从数据库加载配置

LockOrder 尝试对给定订单号加锁

MergeUsageNonZero overlays usage snapshots: a later non-zero field overwrites the current value, while a later zero value never erases an earlier posi

NewOAuthError creates a new OAuth error with the given message key

NewOAuthErrorWithRaw creates a new OAuth error with raw error message for logging

RebuildToolPriceIndex rebuilds the lookup index from the current config. Called on init and after config updates. Not on the billing hot path.

RefundTaskQuota 统一的任务失败退款逻辑。 当异步任务失败时，退还资金与令牌额度，并回减用户和渠道用量。 返回资金来源是否已成功退还；失败时保留 quota，供显式重试或人工对账。