DaydreamCodingandClaude Sonnet 5 bdf7ead157 feat(spark-shadow): OpenAI Spark 链接型影子账号 ...

背景:gpt-5.3-codex-spark 使用独立于 codex 全局(5h/7d)的配额窗口(数据源是
/wham/usage 响应体的 codex_bengalfox,而非 codex 全局用的 x-codex-* 响应头),且
只能挂在已完成 OAuth 授权的 OpenAI 账号下复用其登录态,不能作为独立账号单独接入。
为此新增“链接型影子账号”(spark shadow account):影子账号本身不持有任何凭据,
通过 parent_account_id 指向母账号,凭据/token/代理透传自母账号并共享母账号的刷新
周期,仅在配额维度(quota_dimension=spark)和用量窗口上与母账号完全独立调度、互不
连坐。

实现:
- 数据模型:migration 154(+154a)给 accounts 表加 parent_account_id /
  quota_dimension 列 + 4 条约束(维度合法 / parent⟺非 global 维度一致 / 禁自指 /
  FK)+ 2 个 CONCURRENTLY 索引(母账号索引 + 每母账号至多一个影子的唯一索引)。
- 创建:POST /api/v1/admin/accounts/:id/shadow(CreateShadow)—— 一母一影(唯一
  索引兜底并发竞态),继承母账号 proxy/分组/并发/优先级(显式传参可覆盖),默认
  model_mapping 恒等映射到 spark(拒绝非 spark 模型),母账号必须是真实的 OpenAI
  OAuth 账号(非影子)。
- 凭据透传:resolveCredentialAccount 把影子解析回母账号,GetAccessToken / 请求头
  / WS 三条路径统一走此函数;影子自身 Credentials 恒为空(仅允许写 model_mapping),
  凭据写入的汇聚点 persistAccountCredentials 对影子早返 no-op,防止误写。
- 调度:parentHealthyForShadow 只看母账号是否仍是 OpenAI OAuth + 凭据/传输是否
  可用(active、token 未过期、未处于 401/刷新失败/传输故障导致的临时不可调度冷却),
  刻意不看母账号的 global 限流窗口——两条 429 道互不连坐。
- 用量:影子的 codex_5h/7d 走 OpenAIQuotaService.QueryUsage(/wham/usage 的
  codex_bengalfox),与母账号走的 WSv2 探测(/responses 头)完全独立的数据源、
  刷新节流与 staleness 判定。
- 备份:ExportData 显式排除影子账号(影子不持凭据,通用凭据型导入强制
  credentials 非空、无法表达父子链接),按 skipped_shadows 计数提示前端。
- 前端:账号操作菜单新增“创建 Spark 影子”入口,影子行展示回填的母账号信息
  (邮箱 / plan / 隐私模式 / 订阅到期 / chatgpt_account_id),批量操作自动跳过
  影子账号。

说明:migrations 目录用完整文件名(而非纯数字前缀)标识迁移,故本次新增的
154_account_spark_shadow.sql / 154a_..._notx.sql 与已有的
154_add_ops_system_logs_api_key_id.sql 按序号共存,与目录里 145/151 已有的
先例一致。

测试:新增约 20 个测试文件,覆盖 handler(CreateShadow 校验 / 母账号信息回填)、
repository(影子 round-trip / 一母一影唯一索引 / 迁移 schema)、service(凭据
透传三路径 / 调度母健康门 / 用量窗口来源与刷新节流 / CRS 母账号不变量 / 各类
早返与 fail-closed 场景)及前端组件(账号列表 / 操作菜单 / 用量重置)。

验证(镜像 CI;golangci-lint 首次全量分析耗时过长被跳过,其余全部实测):
- gofmt -l:干净
- go build ./... / go vet ./...:通过
- go test ./... -count=1:全绿(全部包 ok,含 internal/service、
  internal/repository、migrations)
- go test -tags integration ./internal/repository/... ./internal/service/...
  (真实 Postgres,testcontainers):全绿,含迁移幂等性
  (TestMigrationsRunner_IsIdempotent_AndSchemaIsUpToDate)与影子相关全部用例
- pnpm lint:check / pnpm typecheck / pnpm build(真实 vite 构建)/
  pnpm vitest run:全绿(124 文件 760 用例)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-01 12:21:45 +08:00

..

admin

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

dto

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

quotaview

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

announcement_handler.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_handler.go

fix: return 404 instead of 403 for unauthorized key access to prevent ID oracle (CWE-204)

2026-06-02 00:46:50 +08:00

auth_current_user_test.go

fix(profile): stabilize identity binding management

2026-04-22 13:19:28 +08:00

auth_dingtalk_client_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_client.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_oauth_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_oauth.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

auth_email_oauth_test.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

auth_email_oauth.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

auth_handler.go

feat(auth): 透传验证码邮件语言偏好

2026-05-20 13:25:45 +08:00

auth_linuxdo_oauth_test.go

feat: fix OAuth email completion flow

2026-06-30 01:11:51 +08:00

auth_linuxdo_oauth.go

feat: fix OAuth email completion flow

2026-06-30 01:11:51 +08:00

auth_oauth_logout_test.go

fix(auth): harden pending oauth and backend mode flows

2026-04-22 12:30:00 +08:00

auth_oauth_pending_flow_test.go

fix(auth): enforce email bind suffix whitelist

2026-06-19 21:17:45 +08:00

auth_oauth_pending_flow.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

auth_oauth_test_helpers_test.go

fix(oidc): harden verified-email fast path

2026-05-21 15:19:29 +08:00

auth_oidc_oauth_test.go

fix(oidc): harden verified-email fast path

2026-05-21 15:19:29 +08:00

auth_oidc_oauth.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

auth_session_revocation_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

auth_wechat_oauth_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

auth_wechat_oauth.go

fix(auth): apply promo codes to oauth signups

2026-06-11 18:55:27 +08:00

available_channel_handler_test.go

feat(channels): themed model popover + group-badge with rate, subscription & exclusivity

2026-04-21 21:44:34 +08:00

available_channel_handler.go

feat(channels): themed model popover + group-badge with rate, subscription & exclusivity

2026-04-21 21:44:34 +08:00

channel_monitor_user_handler.go

feat(channel-monitor): add feature switch settings + fix extra_models save

2026-04-21 00:21:29 +08:00

concurrency_error_response_test.go

fix: classify concurrency acquire failures

2026-05-28 10:03:41 +00:00

concurrency_error_response.go

fix: move user wait queue accounting off hot path

2026-06-16 11:41:54 +08:00

content_moderation_helper.go

feat(risk-control): add content moderation audit

2026-05-07 09:14:47 +08:00

endpoint_test.go

Add OpenAI embeddings gateway

2026-05-28 19:39:52 +08:00

endpoint.go

feat: add grok subscription support

2026-06-26 10:36:09 +08:00

failover_loop_test.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

failover_loop.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

gateway_handler_billing_error_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

gateway_handler_chat_completions.go

fix: return 404 model_not_found instead of 503 when no account supports the model

2026-06-26 15:38:06 +08:00

gateway_handler_error_fallback_test.go

fix: avoid double-writing error frame on non-stream upstream errors

2026-06-09 22:46:06 +08:00

gateway_handler_intercept_test.go

fix(gateway): intercept max_tokens=1 haiku probes for streaming requests too

2026-06-11 20:46:47 +08:00

gateway_handler_responses.go

fix: return 404 model_not_found instead of 503 when no account supports the model

2026-06-26 15:38:06 +08:00

gateway_handler_stream_failover_test.go

增加测试

2026-03-15 16:21:49 +08:00

gateway_handler_warmup_intercept_unit_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

gateway_handler.go

Merge pull request #3310 from heathermhuang/codex/grok-subscription-support

2026-06-26 15:41:52 +08:00

gateway_helper_backoff_test.go

test: 为代码审核修复添加详细单元测试（7个测试文件，50+测试用例）

2026-02-07 22:14:07 +08:00

gateway_helper_fastpath_test.go

feat: cleanup stale concurrency slots on startup

2026-03-09 19:55:18 +08:00

gateway_helper_hotpath_test.go

fix: move user wait queue accounting off hot path

2026-06-16 11:41:54 +08:00

gateway_helper_test.go

fix(并发): 修复 wrapReleaseOnDone goroutine 泄露问题

2026-01-06 20:31:40 +08:00

gateway_helper.go

fix: move user wait queue accounting off hot path

2026-06-16 11:41:54 +08:00

gateway_models_test.go

feat(group): 支持自定义 /v1/models 模型列表

2026-05-27 18:00:45 +08:00

gemini_cli_session_test.go

fix(gateway): harden digest logging and align antigravity ops

2026-02-07 17:12:15 +08:00

gemini_v1beta_handler_test.go

fix(handler): fallback known gemini models on v1beta 404

2026-04-01 02:20:13 +08:00

gemini_v1beta_handler.go

fix: return 404 model_not_found instead of 503 when no account supports the model

2026-06-26 15:38:06 +08:00

handler.go

feat: add grok subscription support

2026-06-26 10:36:09 +08:00

idempotency_helper_test.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

idempotency_helper.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

image_concurrency_limiter_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

image_concurrency_limiter.go

feat: add OpenAI image generation controls

2026-05-05 03:26:54 +08:00

logging.go

chore(logging): 完成后端日志审计与结构化迁移

2026-02-12 19:01:09 +08:00

no_account_error_test.go

fix: return 404 model_not_found instead of 503 when no account supports the model

2026-06-26 15:38:06 +08:00

no_account_error.go

fix: repair CI build & lint regressions on main

2026-06-26 16:06:01 +08:00

openai_chat_completions.go

fix(openai): preserve quota platform in usage billing

2026-06-28 11:13:09 +08:00

openai_embeddings.go

fix(openai): preserve quota platform in usage billing

2026-06-28 11:13:09 +08:00

openai_gateway_compact_log_test.go

fix(openai): bump codex CLI version from 0.104.0 to 0.125.0

2026-04-25 05:26:33 +00:00

openai_gateway_count_tokens.go

Bridge OpenAI count_tokens to responses input_tokens

2026-06-26 17:59:26 +08:00

openai_gateway_cyber_test.go

feat(openai): cyber_policy 硬阻断全链路透传、审计与计费

2026-06-12 01:47:01 +08:00

openai_gateway_endpoint_normalization_test.go

refactor: migrate all handlers to shared endpoint normalization middleware

2026-03-15 22:13:42 +08:00

openai_gateway_handler_test.go

fix: allow grok messages compatibility

2026-06-29 18:33:37 +08:00

openai_gateway_handler.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

openai_gateway_usage_context_test.go

Preserve usage request context

2026-05-28 22:44:25 +08:00

openai_images_controls_test.go

feat: add OpenAI image generation controls

2026-05-05 03:26:54 +08:00

openai_images_failover_test.go

test: fix grok oauth validation suite

2026-06-26 10:36:09 +08:00

openai_images.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

openai_quota_platform_contract_test.go

fix(openai): preserve quota platform in usage billing

2026-06-28 11:13:09 +08:00

openai_stream_validation_test.go

fix: validate stream field type

2026-06-03 14:18:12 +08:00

openai_stream_validation.go

fix: validate stream field type

2026-06-03 14:18:12 +08:00

ops_error_logger_attribution_test.go

feat(ops): 错误日志 key 归因与早退字段补全

2026-06-05 14:00:57 +08:00

ops_error_logger_cyber_test.go

feat(openai): cyber_policy 硬阻断全链路透传、审计与计费

2026-06-12 01:47:01 +08:00

ops_error_logger_test.go

feat(ops): 错误日志 key 归因与早退字段补全

2026-06-05 14:00:57 +08:00

ops_error_logger.go

feat(openai): cyber_policy 硬阻断全链路透传、审计与计费

2026-06-12 01:47:01 +08:00

page_handler_test.go

Fix image billing size normalization

2026-05-12 15:21:31 +08:00

page_handler.go

Add admin compliance acknowledgement gate

2026-06-10 14:16:51 +08:00

payment_handler_resume_test.go

fix(payment): 区分退款 pending 并收敛匿名查单

2026-06-30 10:00:48 +08:00

payment_handler.go

fix(payment): 区分退款 pending 并收敛匿名查单

2026-06-30 10:00:48 +08:00

payment_webhook_handler_test.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

payment_webhook_handler.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

redeem_handler.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

request_body_limit_test.go

perf(后端): 完成性能优化与连接池配置

2025-12-31 08:50:12 +08:00

request_body_limit.go

perf(后端): 完成性能优化与连接池配置

2025-12-31 08:50:12 +08:00

setting_handler_public_test.go

feat(settings): support dual-mode wechat oauth defaults

2026-04-21 20:36:10 +08:00

setting_handler.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

stream_error_event_test.go

style: fix lint errors in response.failed SSE writer

2026-05-25 18:16:46 +08:00

stream_error_event.go

style: fix lint errors in response.failed SSE writer

2026-05-25 18:16:46 +08:00

subscription_handler.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

totp_handler.go

feat(auth): 透传验证码邮件语言偏好

2026-05-20 13:25:45 +08:00

usage_handler_daily_test.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

usage_handler_request_type_test.go

feat: align user usage analytics with admin

2026-06-30 15:31:28 +08:00

usage_handler_sort_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

usage_handler.go

feat: align user usage analytics with admin

2026-06-30 15:31:28 +08:00

usage_record_submit_task_test.go

Preserve usage request context

2026-05-28 22:44:25 +08:00

user_handler_test.go

feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况

2026-05-30 17:52:18 +08:00

user_handler.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

user_msg_queue_helper.go

feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速

2026-03-03 01:05:11 +08:00

user_platform_quotas_handler_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

wire.go

feat: add grok subscription support

2026-06-26 10:36:09 +08:00