DaydreamCodingandClaude Opus 4.8
819fda34d9
将 codex_cli_only 客户端识别从「单一 strict 开关 + 固定 OR 头集合」重构为 可逐项管理的引擎指纹信号列表，加固整条判定链，并补齐账号级 app-server 控制、 对齐前端设置文案。 判定链（每步可短路）： - 账号未开 codex_cli_only → 不限制；gateway.force_codex_cli → 旁路放行 - 全局黑名单命中（OR 宽 deny）→ 立即拒 - 身份候选：官方 UA（strict，仅前缀）/ 官方 originator（OR）/ 全局白名单（双因子 AND） / 全局 app-server 开关 OR 账号 app-server 开关；均不命中 → 拒 - 版本门（仅官方候选）：UA 须可解析引擎版本，再校验 [min,max] 区间 - 引擎指纹 AND 硬门：按信号列表逐条勾选 AND、每条行内变体 OR；无 Required 信号 → 放行 引擎指纹信号列表（唯一真源） - 新增 openai.EngineFingerprintSignal 类型 + EvaluateEngineFingerprint 求值器 （勾选 AND / 行内变体 OR / 无勾选 → 放行） - CodexRestrictionPolicy 增 EngineFingerprintSignals；信号列表单一决定是否启用指纹门， 不再保留独立「要求引擎指纹」总开关（与「信号全不选」语义重复） - 新设置键 codex_cli_only_engine_fingerprint_signals（默认只勾 x-codex- 前缀）； 旧 body 指纹开关幂等迁移并入信号列表；wire 接线 - 黑/白名单自由条目、命名预设、版本区间 全局设置管线 - gateway 缺 settingService（仅测试/误配可达）时指纹门回退默认种子信号、失败关闭， 不再因零值 policy（nil 信号）失败开放 账号级 Codex app-server（替换已失效的 ClaudeCode 放行机制） - account.IsCodexCLIOnlyAppServerAllowed() 读 extra.codex_cli_only_allow_app_server， 仅在 codex_cli_only 开启时生效；候选身份门「全局 OR 账号」，与旧系统双层控制对齐 - 移除已无入口的 claude_code 预设机制（allowedClientRegistry / MatchAllowedClients / 账号 GetCodexCLIOnlyAllowedClients / reason）；白名单 AllowedClientEntry / IsAllowedClientMatch 保留 门加固（反伪 + 写入校验） - 官方 UA 访问门改 strict：IsCodexOfficialClientRequestStrict 仅前缀匹配，收窄「浏览器前缀 + 中段 codex token」伪造面（strict 仍保留 Codex 家族前缀与 UA 尾部兜底，故对「任意前缀 + 官方尾部 (name;ver)」仍放行——与 UA 可伪造、真正反伪靠引擎指纹门的设计一致） - 官方客户端识别扩展：新增 codex-tui/、codex_vscode_copilot/ 前缀 + UA 尾部 (name;ver) 兜底 （恢复 CODEX_INTERNAL_ORIGINATOR_OVERRIDE 的真实 client，如 cccc→codex-tui），originator 改 精确集。该识别经 IsCodexOfficialClientByHeaders 被 passthrough 复用，故透传的官方判定一并 修正（codex-tui 等不再被误改写 UA）——非「行为不变」，属有意修正 - 白名单写入校验 ValidateCodexWhitelistEntriesJSON + AllowedClientEntry.IsWhitelistable： 双因子 AND 条目须可命中（非空 originator + 非空 ua_contains），拒绝写入会静默失效的死规则； 黑名单（OR 宽 deny，允许 originator-only）不受约束 管理端 / 前端 - handler / DTO / settings_view / 契约测试；gateway 接入判定链 - 信号列表编辑器（替换 body 开关）、api 类型、SettingsView；无勾选给常驻警告 - Create/Edit/Bulk 三弹窗「Codex Only」下新增 app-server 开关（OR 合并全局） - 文案：UA/Originator → User-Agent/Originator；黑/白名单重命名为 User-Agent/Originator 黑/白名单； 「允许 App Server 第三方客户端」→「Codex app-server」+ 简介示例；i18n zh/en 同步 - 移除死代码 HasCodex*Fingerprint helper 测试：引擎指纹求值器 / 账号 app-server（OR 语义）/ detector（含 N1 strict、失败关闭）/ 白名单写入校验 / BulkEdit spec 等；后端 build + service/openai/admin 单测全绿，前端 vue-tsc + vitest 全绿。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
505 lines
27 KiB
Go
505 lines
27 KiB
Go
package dto
|
||
|
||
import (
|
||
"encoding/json"
|
||
"strings"
|
||
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
)
|
||
|
||
// CustomMenuItem represents a user-configured custom menu entry.
|
||
type CustomMenuItem struct {
|
||
ID string `json:"id"`
|
||
Label string `json:"label"`
|
||
IconSVG string `json:"icon_svg"`
|
||
URL string `json:"url"`
|
||
PageSlug string `json:"page_slug,omitempty"`
|
||
Visibility string `json:"visibility"` // "user" or "admin"
|
||
SortOrder int `json:"sort_order"`
|
||
}
|
||
|
||
// CustomEndpoint represents an admin-configured API endpoint for quick copy.
|
||
type CustomEndpoint struct {
|
||
Name string `json:"name"`
|
||
Endpoint string `json:"endpoint"`
|
||
Description string `json:"description"`
|
||
}
|
||
|
||
// SystemSettings represents the admin settings API response payload.
|
||
type SystemSettings struct {
|
||
RegistrationEnabled bool `json:"registration_enabled"`
|
||
EmailVerifyEnabled bool `json:"email_verify_enabled"`
|
||
RegistrationEmailSuffixWhitelist []string `json:"registration_email_suffix_whitelist"`
|
||
PromoCodeEnabled bool `json:"promo_code_enabled"`
|
||
PasswordResetEnabled bool `json:"password_reset_enabled"`
|
||
FrontendURL string `json:"frontend_url"`
|
||
InvitationCodeEnabled bool `json:"invitation_code_enabled"`
|
||
TotpEnabled bool `json:"totp_enabled"` // TOTP 双因素认证
|
||
TotpEncryptionKeyConfigured bool `json:"totp_encryption_key_configured"` // TOTP 加密密钥是否已配置
|
||
LoginAgreementEnabled bool `json:"login_agreement_enabled"`
|
||
LoginAgreementMode string `json:"login_agreement_mode"`
|
||
LoginAgreementUpdatedAt string `json:"login_agreement_updated_at"`
|
||
LoginAgreementDocuments []LoginAgreementDocument `json:"login_agreement_documents"`
|
||
|
||
SMTPHost string `json:"smtp_host"`
|
||
SMTPPort int `json:"smtp_port"`
|
||
SMTPUsername string `json:"smtp_username"`
|
||
SMTPPasswordConfigured bool `json:"smtp_password_configured"`
|
||
SMTPFrom string `json:"smtp_from_email"`
|
||
SMTPFromName string `json:"smtp_from_name"`
|
||
SMTPUseTLS bool `json:"smtp_use_tls"`
|
||
|
||
TurnstileEnabled bool `json:"turnstile_enabled"`
|
||
TurnstileSiteKey string `json:"turnstile_site_key"`
|
||
TurnstileSecretKeyConfigured bool `json:"turnstile_secret_key_configured"`
|
||
APIKeyACLTrustForwardedIP bool `json:"api_key_acl_trust_forwarded_ip"`
|
||
|
||
LinuxDoConnectEnabled bool `json:"linuxdo_connect_enabled"`
|
||
LinuxDoConnectClientID string `json:"linuxdo_connect_client_id"`
|
||
LinuxDoConnectClientSecretConfigured bool `json:"linuxdo_connect_client_secret_configured"`
|
||
LinuxDoConnectRedirectURL string `json:"linuxdo_connect_redirect_url"`
|
||
|
||
DingTalkConnectEnabled bool `json:"dingtalk_connect_enabled"`
|
||
DingTalkConnectClientID string `json:"dingtalk_connect_client_id"`
|
||
DingTalkConnectClientSecretConfigured bool `json:"dingtalk_connect_client_secret_configured"`
|
||
DingTalkConnectRedirectURL string `json:"dingtalk_connect_redirect_url"`
|
||
DingTalkConnectCorpRestrictionPolicy string `json:"dingtalk_connect_corp_restriction_policy"`
|
||
DingTalkConnectInternalCorpID string `json:"dingtalk_connect_internal_corp_id"`
|
||
DingTalkConnectBypassRegistration bool `json:"dingtalk_connect_bypass_registration"`
|
||
DingTalkConnectSyncCorpEmail bool `json:"dingtalk_connect_sync_corp_email"`
|
||
DingTalkConnectSyncDisplayName bool `json:"dingtalk_connect_sync_display_name"`
|
||
DingTalkConnectSyncDept bool `json:"dingtalk_connect_sync_dept"`
|
||
DingTalkConnectSyncCorpEmailAttrKey string `json:"dingtalk_connect_sync_corp_email_attr_key"`
|
||
DingTalkConnectSyncDisplayNameAttrKey string `json:"dingtalk_connect_sync_display_name_attr_key"`
|
||
DingTalkConnectSyncDeptAttrKey string `json:"dingtalk_connect_sync_dept_attr_key"`
|
||
DingTalkConnectSyncCorpEmailAttrName string `json:"dingtalk_connect_sync_corp_email_attr_name"`
|
||
DingTalkConnectSyncDisplayNameAttrName string `json:"dingtalk_connect_sync_display_name_attr_name"`
|
||
DingTalkConnectSyncDeptAttrName string `json:"dingtalk_connect_sync_dept_attr_name"`
|
||
|
||
WeChatConnectEnabled bool `json:"wechat_connect_enabled"`
|
||
WeChatConnectAppID string `json:"wechat_connect_app_id"`
|
||
WeChatConnectAppSecretConfigured bool `json:"wechat_connect_app_secret_configured"`
|
||
WeChatConnectOpenAppID string `json:"wechat_connect_open_app_id"`
|
||
WeChatConnectOpenAppSecretConfigured bool `json:"wechat_connect_open_app_secret_configured"`
|
||
WeChatConnectMPAppID string `json:"wechat_connect_mp_app_id"`
|
||
WeChatConnectMPAppSecretConfigured bool `json:"wechat_connect_mp_app_secret_configured"`
|
||
WeChatConnectMobileAppID string `json:"wechat_connect_mobile_app_id"`
|
||
WeChatConnectMobileAppSecretConfigured bool `json:"wechat_connect_mobile_app_secret_configured"`
|
||
WeChatConnectOpenEnabled bool `json:"wechat_connect_open_enabled"`
|
||
WeChatConnectMPEnabled bool `json:"wechat_connect_mp_enabled"`
|
||
WeChatConnectMobileEnabled bool `json:"wechat_connect_mobile_enabled"`
|
||
WeChatConnectMode string `json:"wechat_connect_mode"`
|
||
WeChatConnectScopes string `json:"wechat_connect_scopes"`
|
||
WeChatConnectRedirectURL string `json:"wechat_connect_redirect_url"`
|
||
WeChatConnectFrontendRedirectURL string `json:"wechat_connect_frontend_redirect_url"`
|
||
|
||
OIDCConnectEnabled bool `json:"oidc_connect_enabled"`
|
||
OIDCConnectProviderName string `json:"oidc_connect_provider_name"`
|
||
OIDCConnectClientID string `json:"oidc_connect_client_id"`
|
||
OIDCConnectClientSecretConfigured bool `json:"oidc_connect_client_secret_configured"`
|
||
OIDCConnectIssuerURL string `json:"oidc_connect_issuer_url"`
|
||
OIDCConnectDiscoveryURL string `json:"oidc_connect_discovery_url"`
|
||
OIDCConnectAuthorizeURL string `json:"oidc_connect_authorize_url"`
|
||
OIDCConnectTokenURL string `json:"oidc_connect_token_url"`
|
||
OIDCConnectUserInfoURL string `json:"oidc_connect_userinfo_url"`
|
||
OIDCConnectJWKSURL string `json:"oidc_connect_jwks_url"`
|
||
OIDCConnectScopes string `json:"oidc_connect_scopes"`
|
||
OIDCConnectRedirectURL string `json:"oidc_connect_redirect_url"`
|
||
OIDCConnectFrontendRedirectURL string `json:"oidc_connect_frontend_redirect_url"`
|
||
OIDCConnectTokenAuthMethod string `json:"oidc_connect_token_auth_method"`
|
||
OIDCConnectUsePKCE bool `json:"oidc_connect_use_pkce"`
|
||
OIDCConnectValidateIDToken bool `json:"oidc_connect_validate_id_token"`
|
||
OIDCConnectAllowedSigningAlgs string `json:"oidc_connect_allowed_signing_algs"`
|
||
OIDCConnectClockSkewSeconds int `json:"oidc_connect_clock_skew_seconds"`
|
||
OIDCConnectRequireEmailVerified bool `json:"oidc_connect_require_email_verified"`
|
||
OIDCConnectUserInfoEmailPath string `json:"oidc_connect_userinfo_email_path"`
|
||
OIDCConnectUserInfoIDPath string `json:"oidc_connect_userinfo_id_path"`
|
||
OIDCConnectUserInfoUsernamePath string `json:"oidc_connect_userinfo_username_path"`
|
||
|
||
GitHubOAuthEnabled bool `json:"github_oauth_enabled"`
|
||
GitHubOAuthClientID string `json:"github_oauth_client_id"`
|
||
GitHubOAuthClientSecretConfigured bool `json:"github_oauth_client_secret_configured"`
|
||
GitHubOAuthRedirectURL string `json:"github_oauth_redirect_url"`
|
||
GitHubOAuthFrontendRedirectURL string `json:"github_oauth_frontend_redirect_url"`
|
||
GoogleOAuthEnabled bool `json:"google_oauth_enabled"`
|
||
GoogleOAuthClientID string `json:"google_oauth_client_id"`
|
||
GoogleOAuthClientSecretConfigured bool `json:"google_oauth_client_secret_configured"`
|
||
GoogleOAuthRedirectURL string `json:"google_oauth_redirect_url"`
|
||
GoogleOAuthFrontendRedirectURL string `json:"google_oauth_frontend_redirect_url"`
|
||
|
||
SiteName string `json:"site_name"`
|
||
SiteLogo string `json:"site_logo"`
|
||
SiteSubtitle string `json:"site_subtitle"`
|
||
APIBaseURL string `json:"api_base_url"`
|
||
ContactInfo string `json:"contact_info"`
|
||
DocURL string `json:"doc_url"`
|
||
HomeContent string `json:"home_content"`
|
||
HideCcsImportButton bool `json:"hide_ccs_import_button"`
|
||
PurchaseSubscriptionEnabled bool `json:"purchase_subscription_enabled"`
|
||
PurchaseSubscriptionURL string `json:"purchase_subscription_url"`
|
||
TableDefaultPageSize int `json:"table_default_page_size"`
|
||
TablePageSizeOptions []int `json:"table_page_size_options"`
|
||
CustomMenuItems []CustomMenuItem `json:"custom_menu_items"`
|
||
CustomEndpoints []CustomEndpoint `json:"custom_endpoints"`
|
||
|
||
DefaultConcurrency int `json:"default_concurrency"`
|
||
DefaultBalance float64 `json:"default_balance"`
|
||
AffiliateRebateRate float64 `json:"affiliate_rebate_rate"`
|
||
AffiliateRebateFreezeHours int `json:"affiliate_rebate_freeze_hours"`
|
||
AffiliateRebateDurationDays int `json:"affiliate_rebate_duration_days"`
|
||
AffiliateRebatePerInviteeCap float64 `json:"affiliate_rebate_per_invitee_cap"`
|
||
DefaultUserRPMLimit int `json:"default_user_rpm_limit"`
|
||
DefaultSubscriptions []DefaultSubscriptionSetting `json:"default_subscriptions"`
|
||
|
||
// Model fallback configuration
|
||
EnableModelFallback bool `json:"enable_model_fallback"`
|
||
FallbackModelAnthropic string `json:"fallback_model_anthropic"`
|
||
FallbackModelOpenAI string `json:"fallback_model_openai"`
|
||
FallbackModelGemini string `json:"fallback_model_gemini"`
|
||
FallbackModelAntigravity string `json:"fallback_model_antigravity"`
|
||
|
||
// Identity patch configuration (Claude -> Gemini)
|
||
EnableIdentityPatch bool `json:"enable_identity_patch"`
|
||
IdentityPatchPrompt string `json:"identity_patch_prompt"`
|
||
|
||
// Ops monitoring (vNext)
|
||
OpsMonitoringEnabled bool `json:"ops_monitoring_enabled"`
|
||
OpsRealtimeMonitoringEnabled bool `json:"ops_realtime_monitoring_enabled"`
|
||
OpsQueryModeDefault string `json:"ops_query_mode_default"`
|
||
OpsMetricsIntervalSeconds int `json:"ops_metrics_interval_seconds"`
|
||
|
||
MinClaudeCodeVersion string `json:"min_claude_code_version"`
|
||
MaxClaudeCodeVersion string `json:"max_claude_code_version"`
|
||
|
||
// 分组隔离
|
||
AllowUngroupedKeyScheduling bool `json:"allow_ungrouped_key_scheduling"`
|
||
|
||
// Backend Mode
|
||
BackendModeEnabled bool `json:"backend_mode_enabled"`
|
||
|
||
// Gateway forwarding behavior
|
||
EnableFingerprintUnification bool `json:"enable_fingerprint_unification"`
|
||
EnableMetadataPassthrough bool `json:"enable_metadata_passthrough"`
|
||
EnableCCHSigning bool `json:"enable_cch_signing"`
|
||
EnableClaudeOAuthSystemPromptInjection bool `json:"enable_claude_oauth_system_prompt_injection"`
|
||
ClaudeOAuthSystemPrompt string `json:"claude_oauth_system_prompt"`
|
||
ClaudeOAuthSystemPromptBlocks string `json:"claude_oauth_system_prompt_blocks"`
|
||
EnableAnthropicCacheTTL1hInjection bool `json:"enable_anthropic_cache_ttl_1h_injection"`
|
||
RewriteMessageCacheControl bool `json:"rewrite_message_cache_control"`
|
||
AntigravityUserAgentVersion string `json:"antigravity_user_agent_version"`
|
||
OpenAICodexUserAgent string `json:"openai_codex_user_agent"`
|
||
|
||
// codex_cli_only 加固
|
||
MinCodexVersion string `json:"min_codex_version"`
|
||
MaxCodexVersion string `json:"max_codex_version"`
|
||
CodexCLIOnlyBlacklist string `json:"codex_cli_only_blacklist"`
|
||
CodexCLIOnlyWhitelist string `json:"codex_cli_only_whitelist"`
|
||
CodexCLIOnlyAllowAppServerClients bool `json:"codex_cli_only_allow_app_server_clients"`
|
||
CodexCLIOnlyEngineFingerprintSignals string `json:"codex_cli_only_engine_fingerprint_signals"`
|
||
|
||
// Web Search Emulation
|
||
WebSearchEmulationEnabled bool `json:"web_search_emulation_enabled"`
|
||
|
||
// Payment visible method routing
|
||
PaymentVisibleMethodAlipaySource string `json:"payment_visible_method_alipay_source"`
|
||
PaymentVisibleMethodWxpaySource string `json:"payment_visible_method_wxpay_source"`
|
||
PaymentVisibleMethodAlipayEnabled bool `json:"payment_visible_method_alipay_enabled"`
|
||
PaymentVisibleMethodWxpayEnabled bool `json:"payment_visible_method_wxpay_enabled"`
|
||
|
||
// OpenAI account scheduling
|
||
OpenAIAdvancedSchedulerEnabled bool `json:"openai_advanced_scheduler_enabled"`
|
||
|
||
// Payment configuration
|
||
PaymentEnabled bool `json:"payment_enabled"`
|
||
PaymentMinAmount float64 `json:"payment_min_amount"`
|
||
PaymentMaxAmount float64 `json:"payment_max_amount"`
|
||
PaymentDailyLimit float64 `json:"payment_daily_limit"`
|
||
PaymentOrderTimeoutMin int `json:"payment_order_timeout_minutes"`
|
||
PaymentMaxPendingOrders int `json:"payment_max_pending_orders"`
|
||
PaymentEnabledTypes []string `json:"payment_enabled_types"`
|
||
PaymentBalanceDisabled bool `json:"payment_balance_disabled"`
|
||
PaymentBalanceRechargeMultiplier float64 `json:"payment_balance_recharge_multiplier"`
|
||
PaymentRechargeFeeRate float64 `json:"payment_recharge_fee_rate"`
|
||
PaymentLoadBalanceStrat string `json:"payment_load_balance_strategy"`
|
||
PaymentProductNamePrefix string `json:"payment_product_name_prefix"`
|
||
PaymentProductNameSuffix string `json:"payment_product_name_suffix"`
|
||
PaymentHelpImageURL string `json:"payment_help_image_url"`
|
||
PaymentHelpText string `json:"payment_help_text"`
|
||
|
||
// Cancel rate limit
|
||
PaymentCancelRateLimitEnabled bool `json:"payment_cancel_rate_limit_enabled"`
|
||
PaymentCancelRateLimitMax int `json:"payment_cancel_rate_limit_max"`
|
||
PaymentCancelRateLimitWindow int `json:"payment_cancel_rate_limit_window"`
|
||
PaymentCancelRateLimitUnit string `json:"payment_cancel_rate_limit_unit"`
|
||
PaymentCancelRateLimitMode string `json:"payment_cancel_rate_limit_window_mode"`
|
||
|
||
// Force Alipay mobile clients to use QR code payment instead of mobile redirect
|
||
PaymentAlipayForceQRCode bool `json:"payment_alipay_force_qrcode"`
|
||
|
||
// 余额、订阅到期与账号限额通知
|
||
BalanceLowNotifyEnabled bool `json:"balance_low_notify_enabled"`
|
||
BalanceLowNotifyThreshold float64 `json:"balance_low_notify_threshold"`
|
||
BalanceLowNotifyRechargeURL string `json:"balance_low_notify_recharge_url"`
|
||
SubscriptionExpiryNotifyEnabled bool `json:"subscription_expiry_notify_enabled"`
|
||
AccountQuotaNotifyEnabled bool `json:"account_quota_notify_enabled"`
|
||
AccountQuotaNotifyEmails []NotifyEmailEntry `json:"account_quota_notify_emails"`
|
||
|
||
// Channel Monitor feature switch
|
||
ChannelMonitorEnabled bool `json:"channel_monitor_enabled"`
|
||
ChannelMonitorDefaultIntervalSeconds int `json:"channel_monitor_default_interval_seconds"`
|
||
|
||
// Available Channels feature switch (user-facing aggregate view)
|
||
AvailableChannelsEnabled bool `json:"available_channels_enabled"`
|
||
|
||
// 风控中心功能开关
|
||
RiskControlEnabled bool `json:"risk_control_enabled"`
|
||
|
||
// cyber 会话屏蔽开关 + TTL
|
||
CyberSessionBlockEnabled bool `json:"cyber_session_block_enabled"`
|
||
CyberSessionBlockTTLSeconds int `json:"cyber_session_block_ttl_seconds"`
|
||
|
||
// Affiliate (邀请返利) feature switch
|
||
AffiliateEnabled bool `json:"affiliate_enabled"`
|
||
|
||
// OpenAI fast/flex policy
|
||
OpenAIFastPolicySettings *OpenAIFastPolicySettings `json:"openai_fast_policy_settings,omitempty"`
|
||
|
||
// 系统全局默认平台配额（key = platform，nil/缺省 = 不限制）
|
||
DefaultPlatformQuotas map[string]*service.DefaultPlatformQuotaSetting `json:"default_platform_quotas,omitempty"`
|
||
|
||
// 允许终端用户在用量页查看自己的失败请求
|
||
AllowUserViewErrorRequests bool `json:"allow_user_view_error_requests"`
|
||
}
|
||
|
||
type DefaultSubscriptionSetting struct {
|
||
GroupID int64 `json:"group_id"`
|
||
ValidityDays int `json:"validity_days"`
|
||
}
|
||
|
||
type PublicSettings struct {
|
||
RegistrationEnabled bool `json:"registration_enabled"`
|
||
EmailVerifyEnabled bool `json:"email_verify_enabled"`
|
||
ForceEmailOnThirdPartySignup bool `json:"force_email_on_third_party_signup"`
|
||
RegistrationEmailSuffixWhitelist []string `json:"registration_email_suffix_whitelist"`
|
||
PromoCodeEnabled bool `json:"promo_code_enabled"`
|
||
PasswordResetEnabled bool `json:"password_reset_enabled"`
|
||
InvitationCodeEnabled bool `json:"invitation_code_enabled"`
|
||
TotpEnabled bool `json:"totp_enabled"` // TOTP 双因素认证
|
||
LoginAgreementEnabled bool `json:"login_agreement_enabled"`
|
||
LoginAgreementMode string `json:"login_agreement_mode"`
|
||
LoginAgreementUpdatedAt string `json:"login_agreement_updated_at"`
|
||
LoginAgreementRevision string `json:"login_agreement_revision"`
|
||
LoginAgreementDocuments []LoginAgreementDocument `json:"login_agreement_documents"`
|
||
TurnstileEnabled bool `json:"turnstile_enabled"`
|
||
TurnstileSiteKey string `json:"turnstile_site_key"`
|
||
SiteName string `json:"site_name"`
|
||
SiteLogo string `json:"site_logo"`
|
||
SiteSubtitle string `json:"site_subtitle"`
|
||
APIBaseURL string `json:"api_base_url"`
|
||
ContactInfo string `json:"contact_info"`
|
||
DocURL string `json:"doc_url"`
|
||
HomeContent string `json:"home_content"`
|
||
HideCcsImportButton bool `json:"hide_ccs_import_button"`
|
||
PurchaseSubscriptionEnabled bool `json:"purchase_subscription_enabled"`
|
||
PurchaseSubscriptionURL string `json:"purchase_subscription_url"`
|
||
TableDefaultPageSize int `json:"table_default_page_size"`
|
||
TablePageSizeOptions []int `json:"table_page_size_options"`
|
||
CustomMenuItems []CustomMenuItem `json:"custom_menu_items"`
|
||
CustomEndpoints []CustomEndpoint `json:"custom_endpoints"`
|
||
DingTalkOAuthEnabled bool `json:"dingtalk_oauth_enabled"`
|
||
LinuxDoOAuthEnabled bool `json:"linuxdo_oauth_enabled"`
|
||
WeChatOAuthEnabled bool `json:"wechat_oauth_enabled"`
|
||
WeChatOAuthOpenEnabled bool `json:"wechat_oauth_open_enabled"`
|
||
WeChatOAuthMPEnabled bool `json:"wechat_oauth_mp_enabled"`
|
||
WeChatOAuthMobileEnabled bool `json:"wechat_oauth_mobile_enabled"`
|
||
OIDCOAuthEnabled bool `json:"oidc_oauth_enabled"`
|
||
OIDCOAuthProviderName string `json:"oidc_oauth_provider_name"`
|
||
GitHubOAuthEnabled bool `json:"github_oauth_enabled"`
|
||
GoogleOAuthEnabled bool `json:"google_oauth_enabled"`
|
||
SoraClientEnabled bool `json:"sora_client_enabled"`
|
||
BackendModeEnabled bool `json:"backend_mode_enabled"`
|
||
PaymentEnabled bool `json:"payment_enabled"`
|
||
Version string `json:"version"`
|
||
BalanceLowNotifyEnabled bool `json:"balance_low_notify_enabled"`
|
||
AccountQuotaNotifyEnabled bool `json:"account_quota_notify_enabled"`
|
||
BalanceLowNotifyThreshold float64 `json:"balance_low_notify_threshold"`
|
||
BalanceLowNotifyRechargeURL string `json:"balance_low_notify_recharge_url"`
|
||
|
||
ChannelMonitorEnabled bool `json:"channel_monitor_enabled"`
|
||
ChannelMonitorDefaultIntervalSeconds int `json:"channel_monitor_default_interval_seconds"`
|
||
|
||
AvailableChannelsEnabled bool `json:"available_channels_enabled"`
|
||
|
||
AffiliateEnabled bool `json:"affiliate_enabled"`
|
||
|
||
RiskControlEnabled bool `json:"risk_control_enabled"`
|
||
|
||
AllowUserViewErrorRequests bool `json:"allow_user_view_error_requests"`
|
||
}
|
||
|
||
type LoginAgreementDocument struct {
|
||
ID string `json:"id"`
|
||
Title string `json:"title"`
|
||
ContentMD string `json:"content_md"`
|
||
}
|
||
|
||
// OverloadCooldownSettings 529过载冷却配置 DTO
|
||
type OverloadCooldownSettings struct {
|
||
Enabled bool `json:"enabled"`
|
||
CooldownMinutes int `json:"cooldown_minutes"`
|
||
}
|
||
|
||
// RateLimit429CooldownSettings 429默认回避配置 DTO
|
||
type RateLimit429CooldownSettings struct {
|
||
Enabled bool `json:"enabled"`
|
||
CooldownSeconds int `json:"cooldown_seconds"`
|
||
}
|
||
|
||
// StreamTimeoutSettings 流超时处理配置 DTO
|
||
type StreamTimeoutSettings struct {
|
||
Enabled bool `json:"enabled"`
|
||
Action string `json:"action"`
|
||
TempUnschedMinutes int `json:"temp_unsched_minutes"`
|
||
ThresholdCount int `json:"threshold_count"`
|
||
ThresholdWindowMinutes int `json:"threshold_window_minutes"`
|
||
}
|
||
|
||
// RectifierSettings 请求整流器配置 DTO
|
||
type RectifierSettings struct {
|
||
Enabled bool `json:"enabled"`
|
||
ThinkingSignatureEnabled bool `json:"thinking_signature_enabled"`
|
||
ThinkingBudgetEnabled bool `json:"thinking_budget_enabled"`
|
||
APIKeySignatureEnabled bool `json:"apikey_signature_enabled"`
|
||
APIKeySignaturePatterns []string `json:"apikey_signature_patterns"`
|
||
}
|
||
|
||
// BetaPolicyRule Beta 策略规则 DTO
|
||
type BetaPolicyRule struct {
|
||
BetaToken string `json:"beta_token"`
|
||
Action string `json:"action"`
|
||
Scope string `json:"scope"`
|
||
ErrorMessage string `json:"error_message,omitempty"`
|
||
ModelWhitelist []string `json:"model_whitelist,omitempty"`
|
||
FallbackAction string `json:"fallback_action,omitempty"`
|
||
FallbackErrorMessage string `json:"fallback_error_message,omitempty"`
|
||
}
|
||
|
||
// BetaPolicySettings Beta 策略配置 DTO
|
||
type BetaPolicySettings struct {
|
||
Rules []BetaPolicyRule `json:"rules"`
|
||
}
|
||
|
||
// OpenAIFastPolicyRule OpenAI fast/flex 策略规则 DTO
|
||
type OpenAIFastPolicyRule struct {
|
||
ServiceTier string `json:"service_tier"`
|
||
Action string `json:"action"`
|
||
Scope string `json:"scope"`
|
||
ErrorMessage string `json:"error_message,omitempty"`
|
||
ModelWhitelist []string `json:"model_whitelist,omitempty"`
|
||
FallbackAction string `json:"fallback_action,omitempty"`
|
||
FallbackErrorMessage string `json:"fallback_error_message,omitempty"`
|
||
}
|
||
|
||
// OpenAIFastPolicySettings OpenAI fast 策略配置 DTO
|
||
type OpenAIFastPolicySettings struct {
|
||
Rules []OpenAIFastPolicyRule `json:"rules"`
|
||
}
|
||
|
||
// EmailTemplateEventOption 描述可编辑的通知邮件事件。
|
||
type EmailTemplateEventOption struct {
|
||
Value string `json:"value"`
|
||
Label string `json:"label,omitempty"`
|
||
Description string `json:"description,omitempty"`
|
||
Category string `json:"category,omitempty"`
|
||
Optional bool `json:"optional,omitempty"`
|
||
}
|
||
|
||
// EmailTemplateSummary is shown in the admin email template list.
|
||
type EmailTemplateSummary struct {
|
||
Event string `json:"event"`
|
||
Locale string `json:"locale"`
|
||
Subject string `json:"subject"`
|
||
IsCustom bool `json:"is_custom,omitempty"`
|
||
UpdatedAt string `json:"updated_at,omitempty"`
|
||
}
|
||
|
||
// EmailTemplateListResponse is returned by GET /admin/settings/email-templates.
|
||
type EmailTemplateListResponse struct {
|
||
Events []EmailTemplateEventOption `json:"events"`
|
||
Locales []string `json:"locales"`
|
||
Templates []EmailTemplateSummary `json:"templates,omitempty"`
|
||
Placeholders []string `json:"placeholders,omitempty"`
|
||
}
|
||
|
||
// EmailTemplateDetail is returned for a specific event/locale template.
|
||
type EmailTemplateDetail struct {
|
||
Event string `json:"event"`
|
||
Locale string `json:"locale"`
|
||
Subject string `json:"subject"`
|
||
HTML string `json:"html"`
|
||
IsCustom bool `json:"is_custom,omitempty"`
|
||
UpdatedAt string `json:"updated_at,omitempty"`
|
||
Placeholders []string `json:"placeholders,omitempty"`
|
||
}
|
||
|
||
// UpdateEmailTemplateRequest updates a template override.
|
||
type UpdateEmailTemplateRequest struct {
|
||
Subject string `json:"subject"`
|
||
HTML string `json:"html"`
|
||
}
|
||
|
||
// PreviewEmailTemplateRequest previews a template without saving it.
|
||
type PreviewEmailTemplateRequest struct {
|
||
Event string `json:"event"`
|
||
Locale string `json:"locale"`
|
||
Subject string `json:"subject"`
|
||
HTML string `json:"html"`
|
||
Variables map[string]string `json:"variables,omitempty"`
|
||
}
|
||
|
||
// EmailTemplatePreviewResponse is the rendered preview payload.
|
||
type EmailTemplatePreviewResponse struct {
|
||
Subject string `json:"subject"`
|
||
HTML string `json:"html"`
|
||
}
|
||
|
||
// ParseCustomMenuItems parses a JSON string into a slice of CustomMenuItem.
|
||
// Returns empty slice on empty/invalid input.
|
||
func ParseCustomMenuItems(raw string) []CustomMenuItem {
|
||
raw = strings.TrimSpace(raw)
|
||
if raw == "" || raw == "[]" {
|
||
return []CustomMenuItem{}
|
||
}
|
||
var items []CustomMenuItem
|
||
if err := json.Unmarshal([]byte(raw), &items); err != nil {
|
||
return []CustomMenuItem{}
|
||
}
|
||
return items
|
||
}
|
||
|
||
// ParseUserVisibleMenuItems parses custom menu items and filters out admin-only entries.
|
||
func ParseUserVisibleMenuItems(raw string) []CustomMenuItem {
|
||
items := ParseCustomMenuItems(raw)
|
||
filtered := make([]CustomMenuItem, 0, len(items))
|
||
for _, item := range items {
|
||
if item.Visibility != "admin" {
|
||
filtered = append(filtered, item)
|
||
}
|
||
}
|
||
return filtered
|
||
}
|
||
|
||
// ParseCustomEndpoints parses a JSON string into a slice of CustomEndpoint.
|
||
// Returns empty slice on empty/invalid input.
|
||
func ParseCustomEndpoints(raw string) []CustomEndpoint {
|
||
raw = strings.TrimSpace(raw)
|
||
if raw == "" || raw == "[]" {
|
||
return []CustomEndpoint{}
|
||
}
|
||
var items []CustomEndpoint
|
||
if err := json.Unmarshal([]byte(raw), &items); err != nil {
|
||
return []CustomEndpoint{}
|
||
}
|
||
return items
|
||
}
|