fix app image pull check

.github/workflows/llm-code-review.yml

@@ -0,0 +1,25 @@
+name: LLM Code Review
+permissions:
+  contents: read
+  pull-requests: write
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+jobs:
+  llm-code-review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: fit2cloud/LLM-CodeReview-Action@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.FIT2CLOUDRD_LLM_CODE_REVIEW_TOKEN }}
+          OPENAI_API_KEY: ${{ secrets.ALIYUN_LLM_API_KEY }}
+          LANGUAGE: English
+          OPENAI_API_ENDPOINT: https://dashscope.aliyuncs.com/compatible-mode/v1
+          MODEL: qwen2.5-coder-3b-instruct
+          PROMPT: "Please check the following code differences for any irregularities, potential issues, or optimization suggestions, and provide your answers in English."
+          top_p: 1
+          temperature: 1
+          # max_tokens: 10000
+          MAX_PATCH_LENGTH: 10000 
+          IGNORE_PATTERNS: "/node_modules,*.md,/dist,/.github"
+          FILE_PATTERNS: "*.java,*.go,*.py,*.vue,*.ts,*.js,*.css,*.scss,*.html"

.github/workflows/sonarcloud-scan.yml

@@ -0,0 +1,21 @@
+name: SonarCloud Scan
+on:
+  push:
+    branches:
+      - dev
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  sonarcloud:
+    name: SonarCloud
+    if: github.repository == '1Panel-dev/1Panel'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUBTOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/sync2gitee.yml

@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Mirror the Github organization repos to Gitee.
-        uses: Yikun/hub-mirror-action@ba51c01b28a6c9f95a25d4f1bcf6af2a147c0e18 # master
+        uses: Yikun/hub-mirror-action@master
         with:
           src: 'github/1Panel-dev'
           dst: 'gitee/fit2cloud-feizhiyun'

.github/workflows/tyops-check.yml

@@ -0,0 +1,11 @@
+name: Typos Check
+on: pull_request
+jobs:
+  run:
+    name: Spell Check with Typos
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout Actions Repository
+      uses: actions/checkout@v2
+    - name: Check spelling
+      uses: crate-ci/typos@master

README.md

@@ -1,6 +1,9 @@
 <p align="center"><a href="https://1panel.pro"><img src="https://resource.1panel.pro/img/1panel-logo.png" alt="1Panel" width="300" /></a></p>
+
+<h3 align="center">The open-source VPS control panel with native AI agent support</h3>
+
 <p align="center">
-  Loved by a global community of <strong>2.5M+</strong> self-hosters.
+  Trusted by <strong>2,000,000+</strong> self-hosters worldwide
 </p>
 
 <p align="center">
@@ -9,6 +12,7 @@
 
 <p align="center">
   <a href="https://www.gnu.org/licenses/gpl-3.0.html"><img src="https://shields.io/github/license/1Panel-dev/1Panel?color=%231890FF" alt="License: GPL v3"></a>
+  <a href="https://app.codacy.com/gh/1Panel-dev/1Panel"><img src="https://app.codacy.com/project/badge/Grade/da67574fd82b473992781d1386b937ef" alt="Codacy"></a>
   <a href="https://discord.gg/bUpUqWqdRr"><img src="https://img.shields.io/discord/1318846410149335080?logo=discord&labelColor=%20%235462eb&logoColor=%20%23f5f5f5&color=%20%235462eb" alt="Discord"></a>
   <a href="https://github.com/1Panel-dev/1Panel/releases"><img src="https://img.shields.io/github/v/release/1Panel-dev/1Panel" alt="GitHub release"></a>
   <a href="https://github.com/1Panel-dev/1Panel"><img src="https://img.shields.io/github/stars/1Panel-dev/1Panel?color=%231890FF&style=flat-square" alt="Stars"></a>
@@ -21,7 +25,7 @@
   <a href="/docs/README.pt-br.md"><img alt="Português (Brasil)" src="https://img.shields.io/badge/Português (Brasil)-d9d9d9"></a>
   <a href="/docs/README.ar.md"><img alt="العربية" src="https://img.shields.io/badge/العربية-d9d9d9"></a>
   <a href="/docs/README.de.md"><img alt="Deutsch" src="https://img.shields.io/badge/Deutsch-d9d9d9"></a>
-  <a href="/docs/README.es-es.md"><img alt="Español" src="https://img.shields.io/badge/Español-d9d9d9"></a>
+  <a href="/docs/README.es.md"><img alt="Español" src="https://img.shields.io/badge/Español-d9d9d9"></a>
   <a href="/docs/README.fr.md"><img alt="français" src="https://img.shields.io/badge/français-d9d9d9"></a>
   <a href="/docs/README.ko.md"><img alt="한국어" src="https://img.shields.io/badge/한국어-d9d9d9"></a>
   <a href="/docs/README.id.md"><img alt="Bahasa Indonesia" src="https://img.shields.io/badge/Bahasa Indonesia-d9d9d9"></a>
@@ -29,36 +33,40 @@
   <a href="/docs/README.tr.md"><img alt="Türkçe" src="https://img.shields.io/badge/Türkçe-d9d9d9"></a>
   <a href="/docs/README.ru.md"><img alt="Русский" src="https://img.shields.io/badge/Русский-d9d9d9"></a>
   <a href="/docs/README.ms.md"><img alt="Bahasa Melayu" src="https://img.shields.io/badge/Bahasa Melayu-d9d9d9"></a>
-  <a href="/docs/README.fa.md"><img alt="Persian" src="https://img.shields.io/badge/%D9%81%D8%A7%D8%B1%D8%B3%DB%8C-d9d9d9"></a>
-  <a href="/docs/README.lo.md"><img alt="ພາສາລາວ" src="https://img.shields.io/badge/%E0%BA%9E%E0%BA%B2%E0%BA%AA%E0%BA%B2%E0%BA%A5%E0%BA%B2%E0%BA%A7-d9d9d9"></a>
 </p>
 
 ---
 
 ## What is 1Panel?
 
-1Panel is a modern, open-source Linux server management panel and a lightweight AI management platform. Through an intuitive web interface, it provides users with comprehensive, one-stop server management capabilities:
-- **AI Management**: Offers a unified management platform from bare metal to agents (Metal-to-Agent). It integrates an AI gateway, and Skills Hub, while supporting centralized management of agents and models.
-- **Efficient Visual Operations**: Easily manage Linux servers through a web-based GUI, streamlining tasks such as host monitoring, file management, database management, and container management.
-- **Rapid Website Deployment**: Deeply integrates with popular website builders like WordPress and Halo. It enables one-click domain binding and SSL certificate configuration, significantly lowering the barrier to website creation.
-- **Curated App Store**: Features a built-in store of high-quality open-source applications, providing one-click installation and upgrade services to effortlessly extend server capabilities.
-- **Enterprise-Grade Security**: Deploys applications based on container technology to effectively minimize vulnerability exposure. It also provides security features such as WAF and log auditing to ensure comprehensive server protection.
-- **One-Click Data Backup**: Supports one-click backup and restoration, and integrates with various cloud storage solutions to ensure data security and prevent loss.
+1Panel is a modern, open-source VPS control panel — and the only one with **native AI agent support**. Run Ollama models, deploy OpenClaw agents, and manage your entire server stack from one clean web interface. No CLI memorization required.
+
+👉 Watch the [2-minute introduction](https://www.youtube.com/watch?v=Jl_wqp-XA08)
 
 ## Why 1Panel?
 
 | | 1Panel | cPanel / Plesk | aaPanel | Webmin |
 |--|--------|----------------|---------|--------|
 | Free & open source | ✅ | ❌ | Partial | ✅ |
-| AI management | ✅ | ❌ | ❌ | ❌ |
+| Native AI agent runtime | ✅ | ❌ | ❌ | ❌ |
 | One-click app marketplace | ✅ 165+ apps | ❌ | ✅ | ❌ |
 | Modern UI (post-2020) | ✅ | ❌ | Partial | ❌ |
 | Docker / container management | ✅ | ❌ | ❌ | ❌ |
 | Active development | ✅ | ✅ | ✅ | Slow |
 
+## Key Features
+
+- **AI Agent Runtime**: Deploy Ollama LLMs, spin up OpenClaw personal agents, and monitor GPU utilization — all from the dashboard. No separate AI stack to manage.
+- **One-Click Website Deployment**: Launch production-ready websites with automatic domain binding, SSL provisioning, and Nginx config — zero manual setup.
+- **App Marketplace**: 165+ trusted open-source apps (Nextcloud, Bitwarden, Umami, NocoBase, and more) installed and updated with a single click.
+- **Docker & Container Management**: Create, start, stop, and inspect containers, images, networks, and volumes through a visual UI — no CLI juggling.
+- **Security Out of the Box**: Firewall rules, fail2ban, container isolation, WAF, and audit logs — configured and running from day one.
+- **Backup & Restore**: Schedule automated backups to AWS S3, Cloudflare R2, or local storage. Restore any snapshot in one click.
+
 ## Quick Start
 
-Prepare your Linux server and run the following script:
+> **Requirements:** Linux VPS (Debian / Ubuntu / CentOS / Rocky), 1 GB RAM, internet access.  
+> Takes ~60 seconds.
 
 ```bash
 bash -c "$(curl -sSL https://resource.1panel.pro/v2/quick_start.sh)"
@@ -73,20 +81,24 @@ Run `1pctl user-info` via SSH if you need to retrieve your access credentials.
 
 ## Pro Edition
 
-1Panel OSS is free forever. 1Panel Pro and Ent adds features built for teams and production workloads:
+1Panel OSS is free forever. Pro adds features built for teams and production workloads:
 
-| Feature | OSS | Pro | Ent |
-|---------|:---:|:---:|:---:|
-| One-click app installs | ✅ | ✅ | ✅ |
-| AI agents (OpenClaw) | 5 agent | Unlimited | ✅ |
-| WAF & advanced security | Basic | ✅ | ✅ |
-| Website tamper protection | ❌ | ✅ | ✅ |
-| Website uptime monitoring | ❌ | ✅ | ✅ |
-| Multi-node management | ❌ | ✅ | ✅ |
-| Custom logo & theme | ❌ | ✅ | ✅ |
-| KVM Web UI | ❌ | ❌ | ✅ |
-| AI Gateway | ❌ | ❌ | ✅ |
-| Priority support | ❌ | ❌ | ✅ |
+| Feature | OSS | Pro |
+|---------|:---:|:---:|
+| One-click app installs | ✅ | ✅ |
+| AI agents (OpenClaw) | 1 agent | Unlimited |
+| WAF & advanced security | Basic | ✅ |
+| Website tamper protection | ❌ | ✅ |
+| Website uptime monitoring | ❌ | ✅ |
+| Multi-node management | ❌ | ✅ |
+| Custom logo & theme | ❌ | ✅ |
+| Priority support | ❌ | ✅ |
+
+**From $80/year.** [Compare plans & start 30-day free trial →](https://1panel.pro/pricing)
+
+## Star History
+
+[![Star History Chart](https://api.star-history.com/svg?repos=1Panel-dev/1Panel&type=Date)](https://star-history.com/#1Panel-dev/1Panel&Date)
 
 ## Community & Support
 

agent/app/api/v2/agents.go

@@ -500,27 +500,6 @@ func (b *BaseApi) GetAgentAccountModels(c *gin.Context) {
 	helper.SuccessWithData(c, list)
 }
 
-// @Tags AI
-// @Summary Discover custom provider models
-// @Accept json
-// @Param request body dto.AgentAccountModelDiscoverReq true "request"
-// @Success 200 {array} dto.AgentAccountModel
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/accounts/models/discover [post]
-func (b *BaseApi) DiscoverAgentAccountModels(c *gin.Context) {
-	var req dto.AgentAccountModelDiscoverReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	list, err := agentService.DiscoverAccountModels(req)
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.SuccessWithData(c, list)
-}
-
 // @Tags AI
 // @Summary Create model account model
 // @Accept json
@@ -826,26 +805,6 @@ func (b *BaseApi) UpdateAgentFeishuConfig(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags AI
-// @Summary Switch to the bundled OpenClaw Feishu plugin
-// @Accept json
-// @Param request body dto.AgentFeishuSwitchReq true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/agents/channel/feishu/switch [post]
-func (b *BaseApi) SwitchAgentFeishuPlugin(c *gin.Context) {
-	var req dto.AgentFeishuSwitchReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := agentService.SwitchFeishuPlugin(req); err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags AI
 // @Summary Get Agent Telegram channel config
 // @Accept json
@@ -1398,88 +1357,6 @@ func (b *BaseApi) UninstallAgentSkill(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags AI
-// @Summary List OpenClaw plugins
-// @Accept json
-// @Param request body dto.AgentPluginsReq true "request"
-// @Success 200 {array} dto.AgentPluginItem
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/agents/plugins/list [post]
-func (b *BaseApi) ListAgentPlugins(c *gin.Context) {
-	var req dto.AgentPluginsReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := agentService.ListPlugins(req)
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags AI
-// @Summary Search OpenClaw plugins
-// @Accept json
-// @Param request body dto.AgentPluginSearchReq true "request"
-// @Success 200 {array} dto.AgentPluginSearchItem
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/agents/plugins/search [post]
-func (b *BaseApi) SearchAgentPlugins(c *gin.Context) {
-	var req dto.AgentPluginSearchReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := agentService.SearchPlugins(req)
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags AI
-// @Summary Install an OpenClaw marketplace plugin
-// @Accept json
-// @Param request body dto.AgentPluginMarketInstallReq true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/agents/plugins/install [post]
-func (b *BaseApi) InstallAgentMarketPlugin(c *gin.Context) {
-	var req dto.AgentPluginMarketInstallReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := agentService.InstallMarketPlugin(req); err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags AI
-// @Summary Operate an OpenClaw plugin
-// @Accept json
-// @Param request body dto.AgentPluginOperateReq true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/agents/plugins/operate [post]
-func (b *BaseApi) OperateAgentPlugin(c *gin.Context) {
-	var req dto.AgentPluginOperateReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := agentService.OperatePlugin(req); err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags AI
 // @Summary Login Agent Weixin channel
 // @Accept json

agent/app/api/v2/ai.go

@@ -72,6 +72,22 @@ func (b *BaseApi) CloseOllamaModel(c *gin.Context) {
 	helper.SuccessWithData(c, nil)
 }
 
+// @Tags AI
+// @Summary Sync Ollama model list
+// @Success 200 {array} dto.OllamaModelDropList
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /ai/ollama/model/sync [post]
+// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"同步 Ollama 模型列表","formatEN":"sync Ollama model list"}
+func (b *BaseApi) SyncOllamaModel(c *gin.Context) {
+	list, err := aiToolService.Sync()
+	if err != nil {
+		helper.BadRequest(c, err)
+		return
+	}
+	helper.SuccessWithData(c, list)
+}
+
 // @Tags AI
 // @Summary Page Ollama models
 // @Accept json
@@ -98,18 +114,6 @@ func (b *BaseApi) SearchOllamaModel(c *gin.Context) {
 	})
 }
 
-func (b *BaseApi) SyncOllamaModelAccount(c *gin.Context) {
-	var req dto.OllamaModelAccountSync
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := aiToolService.SyncAccount(req); err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags AI
 // @Summary Page Ollama models
 // @Accept json

agent/app/api/v2/ai_benchmark.go

@@ -1,16 +0,0 @@
-package v2
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/service"
-	"github.com/gin-gonic/gin"
-)
-
-func (b *BaseApi) AIBenchmarkSources(c *gin.Context) {
-	sources, err := service.AIBenchmarkSources(c.Query("kind"), c.Query("selected"))
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.SuccessWithData(c, sources)
-}

agent/app/api/v2/alert.go

@@ -2,17 +2,11 @@ package v2
 
 import (
 	"errors"
-	"net/http"
 	"net/url"
 	"strings"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/1Panel-dev/1Panel/agent/app/repo"
-	"github.com/1Panel-dev/1Panel/agent/constant"
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/1Panel-dev/1Panel/agent/i18n"
-	"github.com/1Panel-dev/1Panel/agent/utils/webhook_sender"
 	"github.com/gin-gonic/gin"
 )
 
@@ -293,43 +287,13 @@ func (b *BaseApi) PageAlertConfig(c *gin.Context) {
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /alert/config/update [post]
-// @x-panel-log {"bodyKeys":["displayName"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新告警配置 [displayName]","formatEN":"update alert config [displayName]"}
+// @x-panel-log {"bodyKeys":["id","displayName"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新告警配置 [id][displayName]","formatEN":"update alert config [id][displayName]"}
 func (b *BaseApi) UpdateAlertConfig(c *gin.Context) {
 	var req dto.AlertConfigUpdate
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
 	if err := alertService.UpdateAlertConfig(req, loadAuditUser(c)); err != nil {
-		switch {
-		case errors.Is(err, repo.ErrAlertConfigRevisionConflict):
-			helper.ErrorWithBusinessCode(c, http.StatusConflict, "ALERT_CONFIG_REVISION_CONFLICT", "ErrInvalidParams", err)
-		case errors.Is(err, repo.ErrAlertConfigRevisionRequired):
-			helper.ErrorWithBusinessCode(c, http.StatusConflict, "ALERT_CONFIG_REVISION_REQUIRED", "ErrInvalidParams", err)
-		default:
-			helper.InternalServer(c, err)
-		}
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Alert
-// @Summary Update alert config status
-// @Accept json
-// @Param request body dto.AlertConfigStatusUpdate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /alert/config/status [post]
-// @x-panel-log {"bodyKeys":["status"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新告警配置状态 [name][status]","formatEN":"update alert config status [name][status]"}
-func (b *BaseApi) UpdateAlertConfigStatus(c *gin.Context) {
-	var req dto.AlertConfigStatusUpdate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	name, err := alertService.UpdateAlertConfigStatus(req, loadAuditUser(c))
-	helper.SetOperationLogValues(c, map[string]string{"name": name})
-	if err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
@@ -355,14 +319,13 @@ func loadAuditUser(c *gin.Context) string {
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /alert/config/del [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除告警配置 [name]","formatEN":"delete alert config [name]"}
+// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除告警配置 [id]","formatEN":"delete alert config [id]"}
 func (b *BaseApi) DeleteAlertConfig(c *gin.Context) {
 	var req dto.DeleteRequest
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	name, err := alertService.DeleteAlertConfig(req.ID)
-	helper.SetOperationLogValues(c, map[string]string{"name": name})
+	err := alertService.DeleteAlertConfig(req.ID)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -383,29 +346,6 @@ func (b *BaseApi) TestAlertConfig(c *gin.Context) {
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	if req.Type == constant.Custom {
-		lang := strings.TrimSpace(c.GetHeader("Accept-Language"))
-		if lang == "" {
-			lang = i18n.GetLanguageFromDB()
-		}
-		result, err := alertService.TestCustomAlertConfig(req, lang)
-		if err != nil {
-			if global.LOG != nil {
-				global.LOG.Warnf("webhook test preparation failed: configID=%d error=%q", req.ID,
-					webhook_sender.DiagnosticText(err.Error(), webhook_sender.Request{
-						Format: webhook_sender.BodyJSON, Body: []byte(req.Config),
-					}))
-			}
-			result = dto.AlertConfigTestResult{Success: false}
-		}
-		result.Response = ""
-		result.Message = ""
-		if !result.Success {
-			result.Message = i18n.GetMsgByKeyAndLang(lang, "ErrWebhookTestFailed")
-		}
-		helper.SuccessWithData(c, result)
-		return
-	}
 	flag, err := alertService.TestAlertConfig(req)
 	if err != nil {
 		helper.InternalServer(c, err)

agent/app/api/v2/app.go

@@ -8,7 +8,6 @@ import (
 	"github.com/1Panel-dev/1Panel/agent/app/dto/request"
 	"github.com/1Panel-dev/1Panel/agent/i18n"
 	"github.com/1Panel-dev/1Panel/agent/utils/appicon"
-	"github.com/1Panel-dev/1Panel/agent/utils/mcpapi"
 	"github.com/gin-gonic/gin"
 )
 
@@ -161,25 +160,10 @@ func (b *BaseApi) GetAppDetailByID(c *gin.Context) {
 // @Router /apps/install [post]
 // @x-panel-log {"bodyKeys":["name"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"安装应用 [name]","formatEN":"Install app [name]"}
 func (b *BaseApi) InstallApp(c *gin.Context) {
-	mcpRequest, trustedMCP := mcpapi.Check(c.Request)
-	if mcpRequest && !trustedMCP {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
 	var req request.AppInstallCreate
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	if mcpRequest {
-		req.MCPPreserveWebsiteDir = true
-		if value, exists := req.Params["WEBSITE_DIR"]; exists {
-			directory, ok := value.(string)
-			if !ok || directory == "" || directory != settingService.GetWebsiteDir() {
-				c.AbortWithStatus(http.StatusForbidden)
-				return
-			}
-		}
-	}
 	install, err := appService.Install(req, true)
 	if err != nil {
 		helper.InternalServer(c, err)

agent/app/api/v2/app_install.go

@@ -1,11 +1,7 @@
 package v2
 
 import (
-	"net/http"
-
 	"github.com/1Panel-dev/1Panel/agent/app/dto/request"
-	"github.com/1Panel-dev/1Panel/agent/app/service"
-	"github.com/1Panel-dev/1Panel/agent/utils/mcpapi"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
@@ -340,25 +336,11 @@ func (b *BaseApi) UpdateAppConfig(c *gin.Context) {
 // @Security Timestamp
 // @Router /apps/installed/info/:appInstallId [get]
 func (b *BaseApi) GetAppInstallInfo(c *gin.Context) {
-	mcpRequest, trustedMCP := mcpapi.Check(c.Request)
-	if mcpRequest && !trustedMCP {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
 	appInstallId, err := helper.GetIntParamByKey(c, "appInstallId")
 	if err != nil {
 		helper.BadRequest(c, err)
 		return
 	}
-	if mcpRequest {
-		info, err := (&service.AppInstallService{}).GetAppInstallInfoForMCP(c.Request.Context(), appInstallId)
-		if err != nil {
-			helper.InternalServer(c, err)
-			return
-		}
-		helper.SuccessWithData(c, info)
-		return
-	}
 	info, err := appInstallService.GetAppInstallInfo(appInstallId)
 	if err != nil {
 		helper.InternalServer(c, err)

agent/app/api/v2/backup.go

@@ -413,15 +413,10 @@ func (b *BaseApi) Backup(c *gin.Context) {
 
 	switch req.Type {
 	case "app":
-		record, err := backupService.AppBackup(req)
-		if err != nil {
+		if _, err := backupService.AppBackup(req); err != nil {
 			helper.InternalServer(c, err)
 			return
 		}
-		if req.IsImmediate {
-			helper.SuccessWithData(c, record)
-			return
-		}
 	case "mysql", "mariadb", constant.AppMysqlCluster:
 		if err := backupService.MysqlBackup(req); err != nil {
 			helper.InternalServer(c, err)

agent/app/api/v2/container.go

@@ -28,7 +28,7 @@ func (b *BaseApi) SearchContainer(c *gin.Context) {
 		return
 	}
 
-	total, list, err := containerService.Page(c.Request.Context(), req)
+	total, list, err := containerService.Page(req)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -249,10 +249,9 @@ func (b *BaseApi) ListContainerByImage(c *gin.Context) {
 // @Success 200 {object} dto.ContainerStatus
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Param containersOnly query boolean false "Only count containers"
 // @Router /containers/status [get]
 func (b *BaseApi) LoadContainerStatus(c *gin.Context) {
-	data, err := containerService.LoadStatus(c.Request.Context(), c.Query("containersOnly") == "true")
+	data, err := containerService.LoadStatus()
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -416,14 +415,9 @@ func (b *BaseApi) LoadResourceLimit(c *gin.Context) {
 // @Success 200 {array} dto.ContainerListStats
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Param ids query string false "Comma-separated container IDs; omitted selects all containers"
 // @Router /containers/list/stats [get]
 func (b *BaseApi) ContainerListStats(c *gin.Context) {
-	var ids []string
-	if _, supplied := c.Request.URL.Query()["ids"]; supplied {
-		ids = strings.FieldsFunc(c.Query("ids"), func(r rune) bool { return r == ',' })
-	}
-	data, err := containerService.ContainerListStats(c.Request.Context(), ids)
+	data, err := containerService.ContainerListStats()
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -445,7 +439,7 @@ func (b *BaseApi) ContainerItemStats(c *gin.Context) {
 		return
 	}
 
-	data, err := containerService.ContainerItemStats(c.Request.Context(), req)
+	data, err := containerService.ContainerItemStats(req)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -887,26 +881,6 @@ func (b *BaseApi) ComposeUpdate(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags Container Compose
-// @Summary Pin compose
-// @Accept json
-// @Param request body dto.ComposePin true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /containers/compose/pin [post]
-func (b *BaseApi) ComposePin(c *gin.Context) {
-	var req dto.ComposePin
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := containerService.ComposePin(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags Container Compose
 // @Summary Load compose environment variables
 // @Accept json

agent/app/api/v2/container_image_check_update.go

@@ -1,43 +0,0 @@
-package v2
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/service"
-	"github.com/gin-gonic/gin"
-)
-
-func (b *BaseApi) GetContainerImageCheckUpdateStatus(c *gin.Context) {
-	status, err := service.GetContainerImageCheckUpdateStatus()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, status)
-}
-func (b *BaseApi) ContainerImageCheckUpdate(c *gin.Context) {
-	taskID, err := service.StartContainerImageCheckUpdate()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	status, err := service.GetContainerImageCheckUpdateStatus()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	status.TaskID = taskID
-	helper.SuccessWithData(c, status)
-}
-func (b *BaseApi) SetContainerImageCheckUpdateSchedule(c *gin.Context) {
-	var req struct {
-		Enabled *bool `json:"enabled" validate:"required"`
-	}
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := service.SetContainerImageCheckUpdateSchedule(*req.Enabled); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	b.GetContainerImageCheckUpdateStatus(c)
-}

agent/app/api/v2/database.go

@@ -2,12 +2,9 @@ package v2
 
 import (
 	"encoding/base64"
-	"net/http"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/1Panel-dev/1Panel/agent/app/service"
-	"github.com/1Panel-dev/1Panel/agent/utils/mcpapi"
 	"github.com/gin-gonic/gin"
 )
 
@@ -101,25 +98,11 @@ func (b *BaseApi) SearchDatabase(c *gin.Context) {
 // @Param type path string true "type"
 // @Router /databases/db/list/:type [get]
 func (b *BaseApi) ListDatabase(c *gin.Context) {
-	mcpRequest, trustedMCP := mcpapi.Check(c.Request)
-	if mcpRequest && !trustedMCP {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
 	dbType, err := helper.GetStrParamByKey(c, "type")
 	if err != nil {
 		helper.BadRequest(c, err)
 		return
 	}
-	if mcpRequest {
-		list, err := (&service.DatabaseService{}).ListForMCP(c.Request.Context(), dbType)
-		if err != nil {
-			helper.BadRequest(c, err)
-			return
-		}
-		helper.SuccessWithData(c, list)
-		return
-	}
 	list, err := databaseService.List(dbType)
 	if err != nil {
 		helper.InternalServer(c, err)

agent/app/api/v2/database_mysql.go

@@ -3,12 +3,9 @@ package v2
 import (
 	"context"
 	"encoding/base64"
-	"net/http"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/1Panel-dev/1Panel/agent/app/service"
-	"github.com/1Panel-dev/1Panel/agent/utils/mcpapi"
 	"github.com/gin-gonic/gin"
 )
 
@@ -22,11 +19,6 @@ import (
 // @Router /databases [post]
 // @x-panel-log {"bodyKeys":["name"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"创建 mysql 数据库 [name]","formatEN":"create mysql database [name]"}
 func (b *BaseApi) CreateMysql(c *gin.Context) {
-	mcpRequest, trustedMCP := mcpapi.Check(c.Request)
-	if mcpRequest && !trustedMCP {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
 	var req dto.MysqlDBCreate
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
@@ -40,16 +32,6 @@ func (b *BaseApi) CreateMysql(c *gin.Context) {
 		}
 		req.Password = string(password)
 	}
-	if mcpRequest {
-		created, err := (&service.MysqlService{}).CreateForMCP(c.Request.Context(), req)
-		if err != nil {
-			helper.InternalServer(c, err)
-			return
-		}
-		nodeID, _ := mcpapi.NodeID(c.Request)
-		helper.SuccessWithData(c, map[string]any{"id": created.ID, "database": created.MysqlName, "name": created.Name, "nodeId": nodeID})
-		return
-	}
 
 	if _, err := mysqlService.Create(context.Background(), req); err != nil {
 		helper.InternalServer(c, err)
@@ -59,40 +41,20 @@ func (b *BaseApi) CreateMysql(c *gin.Context) {
 }
 
 // @Tags Database Mysql
-// @Summary List mysql users
+// @Summary Bind user of mysql database
 // @Accept json
-// @Param request body dto.MysqlUserSearch true "request"
-// @Success 200 {array} dto.MysqlUser
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/users/search [post]
-func (b *BaseApi) ListMysqlUsers(c *gin.Context) {
-	var req dto.MysqlUserSearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := mysqlService.ListUsers(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Database Mysql
-// @Summary Create mysql user
-// @Accept json
-// @Param request body dto.MysqlUserCreate true "request"
+// @Param request body dto.BindUser true "request"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /databases/users [post]
-// @x-panel-log {"bodyKeys":["database","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"创建 mysql 数据库 [database] 用户 [username]@[host]","formatEN":"create mysql database [database] user [username]@[host]"}
-func (b *BaseApi) CreateMysqlUser(c *gin.Context) {
-	var req dto.MysqlUserCreate
+// @Router /databases/bind [post]
+// @x-panel-log {"bodyKeys":["database", "username"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"绑定 mysql 数据库名 [database] [username]","formatEN":"bind mysql database [database] [username]"}
+func (b *BaseApi) BindUser(c *gin.Context) {
+	var req dto.BindUser
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
+
 	if len(req.Password) != 0 {
 		password, err := base64.StdEncoding.DecodeString(req.Password)
 		if err != nil {
@@ -101,191 +63,8 @@ func (b *BaseApi) CreateMysqlUser(c *gin.Context) {
 		}
 		req.Password = string(password)
 	}
-	if err := mysqlService.CreateUser(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
 
-// @Tags Database Mysql
-// @Summary Delete mysql user
-// @Accept json
-// @Param request body dto.MysqlUserDelete true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/users/del [post]
-// @x-panel-log {"bodyKeys":["database","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除 mysql 数据库 [database] 用户 [username]@[host]","formatEN":"delete mysql database [database] user [username]@[host]"}
-func (b *BaseApi) DeleteMysqlUser(c *gin.Context) {
-	var req dto.MysqlUserDelete
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := mysqlService.DeleteUser(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Database Mysql
-// @Summary Update mysql user
-// @Accept json
-// @Param request body dto.MysqlUserUpdate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/users/update [post]
-// @x-panel-log {"bodyKeys":["database","username","host","newHost","description"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新 mysql 数据库 [database] 用户 [username] 访问权限 [host] => [newHost] 描述 [description]","formatEN":"update mysql database [database] user [username] access [host] => [newHost] description [description]"}
-func (b *BaseApi) UpdateMysqlUser(c *gin.Context) {
-	var req dto.MysqlUserUpdate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := mysqlService.UpdateUser(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Database Mysql
-// @Summary Change mysql user password
-// @Accept json
-// @Param request body dto.MysqlUserPassword true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/users/password [post]
-// @x-panel-log {"bodyKeys":["database","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新 mysql 数据库 [database] 用户 [username]@[host] 密码","formatEN":"update mysql database [database] user [username]@[host] password"}
-func (b *BaseApi) ChangeMysqlUserPassword(c *gin.Context) {
-	var req dto.MysqlUserPassword
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if len(req.Password) != 0 {
-		password, err := base64.StdEncoding.DecodeString(req.Password)
-		if err != nil {
-			helper.BadRequest(c, err)
-			return
-		}
-		req.Password = string(password)
-	}
-	if err := mysqlService.ChangeUserPassword(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Database Mysql
-// @Summary Save mysql user password locally
-// @Accept json
-// @Param request body dto.MysqlUserPassword true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/users/password/save [post]
-// @x-panel-log {"bodyKeys":["database","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"补充 mysql 数据库 [database] 用户 [username]@[host] 密码","formatEN":"save mysql database [database] user [username]@[host] password locally"}
-func (b *BaseApi) SaveMysqlUserPassword(c *gin.Context) {
-	var req dto.MysqlUserPassword
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if len(req.Password) != 0 {
-		password, err := base64.StdEncoding.DecodeString(req.Password)
-		if err != nil {
-			helper.BadRequest(c, err)
-			return
-		}
-		req.Password = string(password)
-	}
-	if err := mysqlService.SaveUserPassword(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Database Mysql
-// @Summary List mysql grants
-// @Accept json
-// @Param request body dto.MysqlUserSearch true "request"
-// @Success 200 {array} dto.MysqlGrant
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/grants/search [post]
-func (b *BaseApi) ListMysqlGrants(c *gin.Context) {
-	var req dto.MysqlUserSearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := mysqlService.ListGrants(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Database Mysql
-// @Summary List mysql grant summary
-// @Accept json
-// @Param request body dto.MysqlGrantSummarySearch true "request"
-// @Success 200 {object} map[string][]dto.MysqlUser
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/grants/summary [post]
-func (b *BaseApi) ListMysqlGrantSummary(c *gin.Context) {
-	var req dto.MysqlGrantSummarySearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := mysqlService.ListGrantSummary(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Database Mysql
-// @Summary Grant mysql user
-// @Accept json
-// @Param request body dto.MysqlGrantCreate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/grants [post]
-// @x-panel-log {"bodyKeys":["database","db","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"授权 mysql 数据库 [database] 用户 [username]@[host] 访问 [db]","formatEN":"grant mysql database [database] user [username]@[host] access to [db]"}
-func (b *BaseApi) GrantMysqlUser(c *gin.Context) {
-	var req dto.MysqlGrantCreate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := mysqlService.GrantUser(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Database Mysql
-// @Summary Revoke mysql grant
-// @Accept json
-// @Param request body dto.MysqlGrantDelete true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /databases/grants/del [post]
-// @x-panel-log {"bodyKeys":["database","db","username","host"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"取消 mysql 数据库 [database] 用户 [username]@[host] 对 [db] 的授权","formatEN":"revoke mysql database [database] user [username]@[host] access to [db]"}
-func (b *BaseApi) RevokeMysqlGrant(c *gin.Context) {
-	var req dto.MysqlGrantDelete
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := mysqlService.RevokeGrant(req); err != nil {
+	if err := mysqlService.BindUser(req); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
@@ -315,14 +94,14 @@ func (b *BaseApi) UpdateMysqlDescription(c *gin.Context) {
 }
 
 // @Tags Database Mysql
-// @Summary Change mysql root password
+// @Summary Change mysql password
 // @Accept json
 // @Param request body dto.ChangeDBInfo true "request"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /databases/change/password [post]
-// @x-panel-log {"bodyKeys":["database"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新数据库 [database] root 密码","formatEN":"Update database [database] root password"}
+// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"id","isList":false,"db":"database_mysqls","output_column":"name","output_value":"name"}],"formatZH":"更新数据库 [name] 密码","formatEN":"Update database [name] password"}
 func (b *BaseApi) ChangeMysqlPassword(c *gin.Context) {
 	var req dto.ChangeDBInfo
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
@@ -346,14 +125,14 @@ func (b *BaseApi) ChangeMysqlPassword(c *gin.Context) {
 }
 
 // @Tags Database Mysql
-// @Summary Change mysql root access
+// @Summary Change mysql access
 // @Accept json
 // @Param request body dto.ChangeDBInfo true "request"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /databases/change/access [post]
-// @x-panel-log {"bodyKeys":["database"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新数据库 [database] root 访问权限","formatEN":"Update database [database] root access"}
+// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"id","isList":false,"db":"database_mysqls","output_column":"name","output_value":"name"}],"formatZH":"更新数据库 [name] 访问权限","formatEN":"Update database [name] access"}
 func (b *BaseApi) ChangeMysqlAccess(c *gin.Context) {
 	var req dto.ChangeDBInfo
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
@@ -531,25 +310,11 @@ func (b *BaseApi) LoadRemoteAccess(c *gin.Context) {
 // @Security Timestamp
 // @Router /databases/status [post]
 func (b *BaseApi) LoadStatus(c *gin.Context) {
-	mcpRequest, trustedMCP := mcpapi.Check(c.Request)
-	if mcpRequest && !trustedMCP {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
 	var req dto.OperationWithNameAndType
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
 
-	if mcpRequest {
-		data, err := (&service.MysqlService{}).LoadStatusForMCP(c.Request.Context(), req)
-		if err != nil {
-			helper.InternalServer(c, err)
-			return
-		}
-		helper.SuccessWithData(c, data)
-		return
-	}
 	data, err := mysqlService.LoadStatus(req)
 	if err != nil {
 		helper.InternalServer(c, err)

agent/app/api/v2/database_redis.go

@@ -86,23 +86,17 @@ func (b *BaseApi) CheckHasCli(c *gin.Context) {
 
 // @Tags Database Redis
 // @Summary Install redis-cli
-// @Accept json
-// @Param request body dto.RedisCliInstall true "request"
-// @Success 200 {string} string
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /databases/redis/install/cli [post]
 func (b *BaseApi) InstallCli(c *gin.Context) {
-	var req dto.RedisCliInstall
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := redisService.InstallCli(req)
-	if err != nil {
+	if err := redisService.InstallCli(); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
-	helper.SuccessWithData(c, data)
+
+	helper.Success(c)
 }
 
 // @Tags Database Redis

agent/app/api/v2/entry.go

@@ -37,17 +37,14 @@ var (
 
 	cronjobService = service.NewICronjobService()
 
-	fileService               = service.NewIFileService()
-	fileHistoryService        = service.NewIFileHistoryService()
-	fileShareService          = service.NewIFileShareService()
-	sshService                = service.NewISSHService()
-	firewallService           = service.NewIFirewallService()
-	firewallSettingService    = service.NewIFirewallSettingService()
-	forwardingService         = service.NewIForwardingService()
-	dockerPortGuardService    = service.NewIDockerPortGuardService()
-	monitorService            = service.NewIMonitorService()
-	systemService             = service.NewISystemService()
-	runtimeDiagnosticsService = service.NewIRuntimeDiagnosticsService()
+	fileService        = service.NewIFileService()
+	fileHistoryService = service.NewIFileHistoryService()
+	fileShareService   = service.NewIFileShareService()
+	sshService         = service.NewISSHService()
+	firewallService    = service.NewIFirewallService()
+	iptablesService    = service.NewIIptablesService()
+	monitorService     = service.NewIMonitorService()
+	systemService      = service.NewISystemService()
 
 	deviceService   = service.NewIDeviceService()
 	fail2banService = service.NewIFail2BanService()
@@ -62,7 +59,6 @@ var (
 	websiteDnsAccountService  = service.NewIWebsiteDnsAccountService()
 	websiteSSLService         = service.NewIWebsiteSSLService()
 	websiteAcmeAccountService = service.NewIWebsiteAcmeAccountService()
-	websiteTemplateService    = service.NewIWebsiteTemplateService()
 
 	nginxService = service.NewINginxService()
 

agent/app/api/v2/file.go

@@ -12,9 +12,7 @@ import (
 	"path/filepath"
 	"strconv"
 	"strings"
-	"sync"
 	"syscall"
-	"time"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
@@ -30,86 +28,6 @@ import (
 	qrcode "github.com/skip2/go-qrcode"
 )
 
-var cancelledChunkUploads = struct {
-	sync.RWMutex
-	ids map[string]struct{}
-}{ids: make(map[string]struct{})}
-
-type chunkUploadLock struct {
-	mutex sync.Mutex
-	refs  int
-}
-
-var chunkUploadLocks = struct {
-	sync.Mutex
-	items map[string]*chunkUploadLock
-}{items: make(map[string]*chunkUploadLock)}
-
-type completedChunkUpload struct {
-	dstDir   string
-	filename string
-	fileSize int64
-}
-
-var completedChunkUploads = struct {
-	sync.RWMutex
-	items map[string]completedChunkUpload
-}{items: make(map[string]completedChunkUpload)}
-
-var activeChunkUploadTTL = 24 * time.Hour
-
-var (
-	errChunkUploadCancelled = errors.New("upload cancelled")
-	errInvalidChunkUpload   = errors.New("invalid chunk upload")
-)
-
-type activeChunkUpload struct {
-	upload    completedChunkUpload
-	expiresAt time.Time
-	timer     *time.Timer
-}
-
-var activeChunkUploads = struct {
-	sync.RWMutex
-	items map[string]activeChunkUpload
-}{items: make(map[string]activeChunkUpload)}
-
-type resumableUploadChunk struct {
-	UploadID   string
-	Filename   string
-	DstDir     string
-	ChunkIndex int
-	ChunkCount int
-	Offset     int64
-	FileSize   int64
-	Overwrite  bool
-}
-
-func invalidChunkUploadError(message string) error {
-	return fmt.Errorf("%w: %s", errInvalidChunkUpload, message)
-}
-
-func isRetryableChunkUploadError(err error) bool {
-	if err == nil {
-		return false
-	}
-	if errors.Is(err, errChunkUploadCancelled) ||
-		errors.Is(err, errInvalidChunkUpload) ||
-		errors.Is(err, os.ErrExist) ||
-		errors.Is(err, os.ErrPermission) ||
-		errors.Is(err, os.ErrInvalid) ||
-		errors.Is(err, syscall.ENOSPC) ||
-		errors.Is(err, syscall.EDQUOT) ||
-		errors.Is(err, syscall.EROFS) ||
-		errors.Is(err, syscall.EFBIG) ||
-		errors.Is(err, syscall.ENAMETOOLONG) ||
-		errors.Is(err, syscall.ENOTDIR) ||
-		errors.Is(err, syscall.EISDIR) {
-		return false
-	}
-	return true
-}
-
 // @Tags File
 // @Summary List files
 // @Accept json
@@ -549,7 +467,11 @@ func (b *BaseApi) UploadFiles(c *gin.Context) {
 			continue
 		}
 		dstInfo, statErr := os.Stat(dstFilename)
-		err = finalizeUploadedFile(tmpFilename, dstFilename, overwrite)
+		if overwrite {
+			_ = os.Remove(dstFilename)
+		}
+
+		err = os.Rename(tmpFilename, dstFilename)
 		if err != nil {
 			_ = os.Remove(tmpFilename)
 			e := fmt.Errorf("upload [%s] file failed, err: %v", file.Filename, err)
@@ -684,35 +606,10 @@ func (b *BaseApi) StopWget(c *gin.Context) {
 		return
 	}
 
-	if err := files.CancelDownload(req.Key); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
+	files.CancelDownload(req.Key)
 	helper.Success(c)
 }
 
-// @Tags File
-// @Summary Remove finished download progress records without deleting files
-// @Accept json
-// @Param request body request.FileProcessRemoveReq true "request"
-// @Success 200 {object} response.FileProcessKeys
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /files/wget/process/remove [post]
-// @x-panel-log {"bodyKeys":["keys"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"移除已结束下载记录 [keys]","formatEN":"Remove finished download records [keys]"}
-func (b *BaseApi) RemoveWgetRecords(c *gin.Context) {
-	var req request.FileProcessRemoveReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	keys, err := files.RemoveDownloadRecords(req.Keys)
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.SuccessWithData(c, response.FileProcessKeys{Keys: keys})
-}
-
 // @Tags File
 // @Summary Move file
 // @Accept json
@@ -734,26 +631,6 @@ func (b *BaseApi) MoveFile(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags File
-// @Summary Stop file move task
-// @Accept json
-// @Param request body request.FileMoveStopReq true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /files/move/stop [post]
-func (b *BaseApi) StopMoveFile(c *gin.Context) {
-	var req request.FileMoveStopReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := fileService.StopMvFile(req.TaskID); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags File
 // @Summary Download file
 // @Accept json
@@ -908,289 +785,6 @@ func (b *BaseApi) DepthDirSize(c *gin.Context) {
 	helper.SuccessWithData(c, res)
 }
 
-func lockChunkUpload(uploadID string) func() {
-	chunkUploadLocks.Lock()
-	lock, ok := chunkUploadLocks.items[uploadID]
-	if !ok {
-		lock = &chunkUploadLock{}
-		chunkUploadLocks.items[uploadID] = lock
-	}
-	lock.refs++
-	chunkUploadLocks.Unlock()
-
-	lock.mutex.Lock()
-	return func() {
-		lock.mutex.Unlock()
-		chunkUploadLocks.Lock()
-		lock.refs--
-		if lock.refs == 0 {
-			delete(chunkUploadLocks.items, uploadID)
-		}
-		chunkUploadLocks.Unlock()
-	}
-}
-
-func resumableUploadPartPath(dstDir, uploadID string) string {
-	return filepath.Join(dstDir, fmt.Sprintf(".1panel-upload-%s.part", uploadID))
-}
-
-func finalizeUploadedFile(tmpFile, dstFile string, overwrite bool) error {
-	if overwrite {
-		return os.Rename(tmpFile, dstFile)
-	}
-	if err := os.Link(tmpFile, dstFile); err != nil {
-		return err
-	}
-	if err := os.Remove(tmpFile); err != nil {
-		if rollbackErr := os.Remove(dstFile); rollbackErr != nil {
-			return fmt.Errorf("remove upload temporary file failed: %v, rollback destination failed: %w", err, rollbackErr)
-		}
-		return err
-	}
-	return nil
-}
-
-func registerActiveChunkUpload(uploadID string, upload completedChunkUpload) error {
-	activeChunkUploads.Lock()
-	defer activeChunkUploads.Unlock()
-	if active, ok := activeChunkUploads.items[uploadID]; ok {
-		if active.upload != upload {
-			return invalidChunkUploadError("upload ID is already used by another file")
-		}
-		active.timer.Stop()
-	}
-	expiresAt := time.Now().Add(activeChunkUploadTTL)
-	timer := time.AfterFunc(activeChunkUploadTTL, func() {
-		expireActiveChunkUpload(uploadID, expiresAt)
-	})
-	activeChunkUploads.items[uploadID] = activeChunkUpload{
-		upload:    upload,
-		expiresAt: expiresAt,
-		timer:     timer,
-	}
-	return nil
-}
-
-func loadActiveChunkUpload(uploadID string) (completedChunkUpload, bool) {
-	activeChunkUploads.RLock()
-	active, ok := activeChunkUploads.items[uploadID]
-	activeChunkUploads.RUnlock()
-	return active.upload, ok
-}
-
-func deleteActiveChunkUpload(uploadID string) {
-	activeChunkUploads.Lock()
-	if active, ok := activeChunkUploads.items[uploadID]; ok {
-		active.timer.Stop()
-	}
-	delete(activeChunkUploads.items, uploadID)
-	activeChunkUploads.Unlock()
-}
-
-func discardActiveChunkUpload(uploadID, partFile string) error {
-	deleteActiveChunkUpload(uploadID)
-	if err := os.Remove(partFile); err != nil && !os.IsNotExist(err) {
-		return fmt.Errorf("remove upload temporary file failed: %w", err)
-	}
-	return nil
-}
-
-func finalizeActiveChunkUpload(uploadID, partFile, dstFile string, overwrite bool) error {
-	if err := finalizeUploadedFile(partFile, dstFile, overwrite); err != nil {
-		if removeErr := discardActiveChunkUpload(uploadID, partFile); removeErr != nil {
-			return errors.Join(err, removeErr)
-		}
-		return err
-	}
-	return nil
-}
-
-func expireActiveChunkUpload(uploadID string, expiresAt time.Time) {
-	unlock := lockChunkUpload(uploadID)
-	defer unlock()
-	activeChunkUploads.Lock()
-	active, ok := activeChunkUploads.items[uploadID]
-	if !ok || !active.expiresAt.Equal(expiresAt) {
-		activeChunkUploads.Unlock()
-		return
-	}
-	delete(activeChunkUploads.items, uploadID)
-	activeChunkUploads.Unlock()
-	partFile := resumableUploadPartPath(active.upload.dstDir, uploadID)
-	if err := os.Remove(partFile); err != nil && !os.IsNotExist(err) {
-		global.LOG.Warnf("remove inactive upload part [%s] failed: %v", partFile, err)
-	}
-}
-
-func removeActiveResumableUploadPart(uploadID string) error {
-	unlock := lockChunkUpload(uploadID)
-	defer unlock()
-	upload, ok := loadActiveChunkUpload(uploadID)
-	if !ok {
-		return nil
-	}
-	err := os.Remove(resumableUploadPartPath(upload.dstDir, uploadID))
-	if err == nil || os.IsNotExist(err) {
-		deleteActiveChunkUpload(uploadID)
-		return nil
-	}
-	return err
-}
-
-func loadCompletedChunkUpload(uploadID string) (completedChunkUpload, bool) {
-	completedChunkUploads.RLock()
-	completed, ok := completedChunkUploads.items[uploadID]
-	completedChunkUploads.RUnlock()
-	return completed, ok
-}
-
-func markChunkUploadCompleted(uploadID string, completed completedChunkUpload) {
-	completedChunkUploads.Lock()
-	completedChunkUploads.items[uploadID] = completed
-	completedChunkUploads.Unlock()
-	time.AfterFunc(10*time.Minute, func() {
-		completedChunkUploads.Lock()
-		delete(completedChunkUploads.items, uploadID)
-		completedChunkUploads.Unlock()
-	})
-}
-
-func writeResumableUploadChunk(chunk resumableUploadChunk, chunkData []byte) error {
-	unlock := lockChunkUpload(chunk.UploadID)
-	defer unlock()
-	if chunkUploadCancelled(chunk.UploadID) {
-		return errChunkUploadCancelled
-	}
-	if chunk.UploadID == "" || filepath.Base(chunk.UploadID) != chunk.UploadID || strings.ContainsAny(chunk.UploadID, `/\`) {
-		return invalidChunkUploadError("invalid upload ID")
-	}
-	if chunk.Filename == "" || filepath.Base(chunk.Filename) != chunk.Filename || strings.ContainsAny(chunk.Filename, `/\`) {
-		return invalidChunkUploadError("invalid filename")
-	}
-	if strings.TrimSpace(chunk.DstDir) == "" {
-		return invalidChunkUploadError("upload destination is required")
-	}
-	dstDir := filepath.Clean(strings.TrimSpace(chunk.DstDir))
-
-	if chunk.ChunkCount <= 0 || chunk.ChunkIndex < 0 || chunk.ChunkIndex >= chunk.ChunkCount {
-		return invalidChunkUploadError("invalid chunk index")
-	}
-	if chunk.FileSize <= 0 || chunk.Offset < 0 || chunk.Offset > chunk.FileSize {
-		return invalidChunkUploadError("invalid upload offset")
-	}
-	chunkEnd := chunk.Offset + int64(len(chunkData))
-	if chunkEnd > chunk.FileSize {
-		return invalidChunkUploadError("chunk exceeds file size")
-	}
-	if chunk.ChunkIndex+1 == chunk.ChunkCount {
-		if chunkEnd != chunk.FileSize {
-			return invalidChunkUploadError("final chunk does not match file size")
-		}
-	} else if chunkEnd >= chunk.FileSize {
-		return invalidChunkUploadError("non-final chunk reaches file size")
-	}
-	if completed, ok := loadCompletedChunkUpload(chunk.UploadID); ok {
-		if completed.dstDir == dstDir && completed.filename == chunk.Filename && completed.fileSize == chunk.FileSize {
-			return nil
-		}
-		return invalidChunkUploadError("upload ID has already completed another file")
-	}
-	upload := completedChunkUpload{dstDir: dstDir, filename: chunk.Filename, fileSize: chunk.FileSize}
-	if err := registerActiveChunkUpload(chunk.UploadID, upload); err != nil {
-		return err
-	}
-
-	mode, err := files.GetParentMode(dstDir)
-	if err != nil {
-		return err
-	}
-	if err = os.MkdirAll(dstDir, mode); err != nil {
-		return err
-	}
-	dstDirInfo, err := os.Stat(dstDir)
-	if err != nil {
-		return err
-	}
-	if !dstDirInfo.IsDir() {
-		return invalidChunkUploadError(fmt.Sprintf("upload destination [%s] is not a directory", dstDir))
-	}
-
-	dstFile := filepath.Join(dstDir, chunk.Filename)
-	partFile := resumableUploadPartPath(dstDir, chunk.UploadID)
-	if dstFile == partFile {
-		return invalidChunkUploadError("filename conflicts with upload temporary file")
-	}
-	fileMode := dstDirInfo.Mode().Perm()
-	ownerInfo := dstDirInfo
-	if dstInfo, statErr := os.Stat(dstFile); statErr == nil {
-		if !chunk.Overwrite {
-			if err := discardActiveChunkUpload(chunk.UploadID, partFile); err != nil {
-				return errors.Join(os.ErrExist, err)
-			}
-			return os.ErrExist
-		}
-		fileMode = dstInfo.Mode().Perm()
-		ownerInfo = dstInfo
-	} else if !os.IsNotExist(statErr) {
-		return statErr
-	}
-
-	part, err := os.OpenFile(partFile, os.O_CREATE|os.O_RDWR, fileMode)
-	if err != nil {
-		return err
-	}
-	partClosed := false
-	defer func() {
-		if !partClosed {
-			_ = part.Close()
-		}
-	}()
-	if stat, statErr := part.Stat(); statErr != nil {
-		return statErr
-	} else if chunk.Offset > stat.Size() {
-		return invalidChunkUploadError(fmt.Sprintf("unexpected upload offset %d, current size is %d", chunk.Offset, stat.Size()))
-	} else if chunk.Offset < stat.Size() && chunkEnd > stat.Size() {
-		if err = part.Truncate(chunk.Offset); err != nil {
-			return err
-		}
-	}
-	if _, err = part.WriteAt(chunkData, chunk.Offset); err != nil {
-		return err
-	}
-
-	if chunk.ChunkIndex+1 != chunk.ChunkCount {
-		return nil
-	}
-	partInfo, err := part.Stat()
-	if err != nil {
-		return err
-	}
-	if partInfo.Size() != chunk.FileSize {
-		return invalidChunkUploadError(fmt.Sprintf("uploaded file size mismatch: expected %d, got %d", chunk.FileSize, partInfo.Size()))
-	}
-	if err = part.Close(); err != nil {
-		return err
-	}
-	partClosed = true
-	if err = os.Chmod(partFile, fileMode); err != nil {
-		return err
-	}
-	if stat, ok := ownerInfo.Sys().(*syscall.Stat_t); ok {
-		if err = os.Chown(partFile, int(stat.Uid), int(stat.Gid)); err != nil {
-			return err
-		}
-	}
-	if chunkUploadCancelled(chunk.UploadID) {
-		return errChunkUploadCancelled
-	}
-	if err = finalizeActiveChunkUpload(chunk.UploadID, partFile, dstFile, chunk.Overwrite); err != nil {
-		return err
-	}
-	markChunkUploadCompleted(chunk.UploadID, upload)
-	deleteActiveChunkUpload(chunk.UploadID)
-	return nil
-}
-
 func mergeChunks(fileName string, fileDir string, dstDir string, chunkCount int, overwrite bool) error {
 	defer func() {
 		_ = os.RemoveAll(fileDir)
@@ -1270,10 +864,6 @@ func (b *BaseApi) UploadChunkFiles(c *gin.Context) {
 		helper.BadRequest(c, err)
 		return
 	}
-	if chunkCount <= 0 || chunkIndex < 0 || chunkIndex >= chunkCount {
-		helper.BadRequest(c, errors.New("invalid chunk index"))
-		return
-	}
 	fileOp := files.NewFileOp()
 	tmpDir := path.Join(global.Dir.TmpDir, "upload")
 	if !fileOp.Stat(tmpDir) {
@@ -1283,30 +873,8 @@ func (b *BaseApi) UploadChunkFiles(c *gin.Context) {
 		}
 	}
 	filename := c.PostForm("filename")
-	if filename == "" || filepath.Base(filename) != filename || strings.ContainsAny(filename, `/\\`) {
-		helper.BadRequest(c, errors.New("invalid filename"))
-		return
-	}
-	uploadID := strings.TrimSpace(c.PostForm("uploadID"))
-	resumable := c.PostForm("fileSize") != "" || c.PostForm("offset") != ""
-	cancellable := uploadID != ""
-	if cancellable && (filepath.Base(uploadID) != uploadID || strings.ContainsAny(uploadID, `/\\`)) {
-		helper.BadRequest(c, errors.New("invalid upload ID"))
-		return
-	}
-	if resumable && !cancellable {
-		helper.BadRequest(c, errors.New("upload ID is required"))
-		return
-	}
-	if !cancellable {
-		uploadID = filename
-	}
-	fileDir := filepath.Join(tmpDir, uploadID)
-	if cancellable && chunkUploadCancelled(uploadID) {
-		helper.BadRequest(c, errChunkUploadCancelled)
-		return
-	}
-	if !resumable && chunkIndex == 0 {
+	fileDir := filepath.Join(tmpDir, filename)
+	if chunkIndex == 0 {
 		if fileOp.Stat(fileDir) {
 			_ = fileOp.DeleteDir(fileDir)
 		}
@@ -1315,68 +883,28 @@ func (b *BaseApi) UploadChunkFiles(c *gin.Context) {
 	filePath := filepath.Join(fileDir, filename)
 
 	defer func() {
-		if !resumable && err != nil {
-			_ = os.RemoveAll(fileDir)
+		if err != nil {
+			_ = os.Remove(fileDir)
 		}
 	}()
-	chunkData, err := io.ReadAll(uploadFile)
-	if err != nil {
-		helper.InternalServer(c, buserr.WithMap("ErrFileUpload", map[string]interface{}{"name": filename, "detail": err.Error()}, err))
-		return
-	}
-	if cancellable && chunkUploadCancelled(uploadID) {
-		err = errChunkUploadCancelled
-		helper.BadRequest(c, err)
-		return
-	}
-	if resumable {
-		offset, parseErr := strconv.ParseInt(c.PostForm("offset"), 10, 64)
-		if parseErr != nil {
-			helper.BadRequest(c, parseErr)
-			return
-		}
-		fileSize, parseErr := strconv.ParseInt(c.PostForm("fileSize"), 10, 64)
-		if parseErr != nil {
-			helper.BadRequest(c, parseErr)
-			return
-		}
-		overwrite := true
-		if ow := c.PostForm("overwrite"); ow != "" {
-			overwrite, _ = strconv.ParseBool(ow)
-		}
-		err = writeResumableUploadChunk(resumableUploadChunk{
-			UploadID:   uploadID,
-			Filename:   filename,
-			DstDir:     c.PostForm("path"),
-			ChunkIndex: chunkIndex,
-			ChunkCount: chunkCount,
-			Offset:     offset,
-			FileSize:   fileSize,
-			Overwrite:  overwrite,
-		}, chunkData)
-		if err != nil {
-			uploadErr := buserr.WithMap("ErrFileUpload", map[string]interface{}{"name": filename, "detail": err.Error()}, err)
-			helper.ErrorWithDetailAndData(c, http.StatusInternalServerError, "ErrInternalServer", uploadErr, gin.H{
-				"retryable": isRetryableChunkUploadError(err),
-			})
-			return
-		}
-		if chunkIndex+1 == chunkCount {
-			cancelledChunkUploads.Lock()
-			delete(cancelledChunkUploads.ids, uploadID)
-			cancelledChunkUploads.Unlock()
-		}
-		helper.SuccessWithData(c, true)
-		return
-	}
+	var (
+		emptyFile *os.File
+		chunkData []byte
+	)
 
-	emptyFile, err := os.Create(filePath)
+	emptyFile, err = os.Create(filePath)
 	if err != nil {
 		helper.BadRequest(c, err)
 		return
 	}
 	defer emptyFile.Close()
 
+	chunkData, err = io.ReadAll(uploadFile)
+	if err != nil {
+		helper.InternalServer(c, buserr.WithMap("ErrFileUpload", map[string]interface{}{"name": filename, "detail": err.Error()}, err))
+		return
+	}
+
 	chunkPath := filepath.Join(fileDir, fmt.Sprintf("%s.%d", filename, chunkIndex))
 	err = os.WriteFile(chunkPath, chunkData, constant.DirPerm)
 	if err != nil {
@@ -1394,54 +922,12 @@ func (b *BaseApi) UploadChunkFiles(c *gin.Context) {
 			helper.InternalServer(c, buserr.WithMap("ErrFileUpload", map[string]interface{}{"name": filename, "detail": err.Error()}, err))
 			return
 		}
-		if cancellable {
-			cancelledChunkUploads.Lock()
-			delete(cancelledChunkUploads.ids, uploadID)
-			cancelledChunkUploads.Unlock()
-		}
 		helper.SuccessWithData(c, true)
 	} else {
 		return
 	}
 }
 
-// StopChunkUpload removes temporary chunks left by a cancelled upload.
-func (b *BaseApi) StopChunkUpload(c *gin.Context) {
-	var req request.FileProcessReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	uploadID := strings.TrimSpace(req.Key)
-	if uploadID == "" || filepath.Base(uploadID) != uploadID || strings.ContainsAny(uploadID, `/\\`) {
-		helper.BadRequest(c, errors.New("invalid upload ID"))
-		return
-	}
-	cancelledChunkUploads.Lock()
-	cancelledChunkUploads.ids[uploadID] = struct{}{}
-	cancelledChunkUploads.Unlock()
-	time.AfterFunc(10*time.Minute, func() {
-		cancelledChunkUploads.Lock()
-		delete(cancelledChunkUploads.ids, uploadID)
-		cancelledChunkUploads.Unlock()
-	})
-	if err := os.RemoveAll(filepath.Join(global.Dir.TmpDir, "upload", uploadID)); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	if err := removeActiveResumableUploadPart(uploadID); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-func chunkUploadCancelled(uploadID string) bool {
-	cancelledChunkUploads.RLock()
-	_, ok := cancelledChunkUploads.ids[uploadID]
-	cancelledChunkUploads.RUnlock()
-	return ok
-}
-
 var wsUpgrade = websocket.Upgrader{
 	CheckOrigin: func(r *http.Request) bool {
 		return true

agent/app/api/v2/firewall.go

@@ -1,53 +1,26 @@
 package v2
 
 import (
-	"errors"
-	"github.com/1Panel-dev/1Panel/agent/buserr"
-	"net/http"
-
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
-
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/1Panel-dev/1Panel/agent/utils/docker"
-	"github.com/1Panel-dev/1Panel/agent/utils/firewall/filter"
 	"github.com/gin-gonic/gin"
 )
 
-func (b *BaseApi) UpdatePanelFirewallPort(c *gin.Context) {
-	if !global.IsMaster {
-		c.AbortWithStatus(http.StatusForbidden)
-		return
-	}
-	var request struct {
-		OldPort uint `json:"oldPort" validate:"required,min=1,max=65535"`
-		NewPort uint `json:"newPort" validate:"required,min=1,max=65535"`
-	}
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallService.UpdatePanelPort(c.Request.Context(), request.OldPort, request.NewPort); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags Firewall
 // @Summary Load firewall base info
 // @Accept json
 // @Param request body dto.OperationWithName true "request"
-// @Success 200 {object} dto.FirewallSubsystemStatus
+// @Success 200 {object} dto.FirewallBaseInfo
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/firewall/base [post]
 func (b *BaseApi) LoadFirewallBaseInfo(c *gin.Context) {
-	var request dto.OperationWithName
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+	var req dto.OperationWithName
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
 
-	data, err := firewallService.LoadBaseInfo(request.Name)
+	data, err := firewallService.LoadBaseInfo(req.Name)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -56,625 +29,311 @@ func (b *BaseApi) LoadFirewallBaseInfo(c *gin.Context) {
 	helper.SuccessWithData(c, data)
 }
 
+// @Tags Firewall
+// @Summary Page firewall rules
+// @Accept json
+// @Param request body dto.RuleSearch true "request"
+// @Success 200 {object} dto.PageResult
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/search [post]
+func (b *BaseApi) SearchFirewallRule(c *gin.Context) {
+	var req dto.RuleSearch
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	total, list, err := firewallService.SearchWithPage(req)
+	if err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+
+	helper.SuccessWithData(c, dto.PageResult{
+		Items: list,
+		Total: total,
+	})
+}
+
 // @Tags Firewall
 // @Summary Operate firewall
 // @Accept json
-// @Param request body dto.FirewallLifecycleOperation true "request"
-// @Success 200 {object} dto.FirewallLifecycleOperationResponse
+// @Param request body dto.FirewallOperation true "request"
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/firewall/operate [post]
 // @x-panel-log {"bodyKeys":["operation"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operation] 防火墙","formatEN":"[operation] firewall"}
 func (b *BaseApi) OperateFirewall(c *gin.Context) {
-	var request dto.FirewallLifecycleOperation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+	var req dto.FirewallOperation
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
 
-	result, err := firewallService.QueueFirewallOperation(request)
-	if err != nil {
+	if err := firewallService.OperateFirewall(req); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
 
-	helper.SuccessWithData(c, result)
+	helper.Success(c)
 }
 
 // @Tags Firewall
-// @Summary Load forwarding base info
+// @Summary Create group
 // @Accept json
-// @Success 200 {object} dto.FirewallSubsystemStatus
+// @Param request body dto.PortRuleOperate true "request"
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /hosts/firewall/forward/base [post]
-func (b *BaseApi) LoadForwardingBaseInfo(c *gin.Context) {
-	data, err := forwardingService.LoadBaseInfo(c.Request.Context())
-	if err != nil {
+// @Router /hosts/firewall/port [post]
+// @x-panel-log {"bodyKeys":["port","strategy"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"添加端口规则 [strategy] [port]","formatEN":"create port rules [strategy][port]"}
+func (b *BaseApi) OperatePortRule(c *gin.Context) {
+	var req dto.PortRuleOperate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.OperatePortRule(req, true); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
-	helper.SuccessWithData(c, data)
+	helper.Success(c)
+}
+
+// OperateForwardRule
+// @Tags Firewall
+// @Summary Operate forward rule
+// @Accept json
+// @Param request body dto.ForwardRuleOperate true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/forward [post]
+// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新端口转发规则","formatEN":"update port forward rules"}
+func (b *BaseApi) OperateForwardRule(c *gin.Context) {
+	var req dto.ForwardRuleOperate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.OperateForwardRule(req); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
 }
 
 // @Tags Firewall
-// @Summary Page forwarding rules
+// @Summary Operate Ip rule
 // @Accept json
-// @Param request body dto.ForwardRuleSearch true "request"
+// @Param request body dto.AddrRuleOperate true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/ip [post]
+// @x-panel-log {"bodyKeys":["strategy","address"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"添加 ip 规则 [strategy] [address]","formatEN":"create address rules [strategy][address]"}
+func (b *BaseApi) OperateIPRule(c *gin.Context) {
+	var req dto.AddrRuleOperate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.OperateAddressRule(req, true); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
+}
+
+// @Tags Firewall
+// @Summary Batch operate rule
+// @Accept json
+// @Param request body dto.BatchRuleOperate true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/batch [post]
+func (b *BaseApi) BatchOperateRule(c *gin.Context) {
+	var req dto.BatchRuleOperate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.BatchOperateRule(req); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
+}
+
+// @Tags Firewall
+// @Summary Update rule description
+// @Accept json
+// @Param request body dto.UpdateFirewallDescription true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/update/description [post]
+func (b *BaseApi) UpdateFirewallDescription(c *gin.Context) {
+	var req dto.UpdateFirewallDescription
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.UpdateDescription(req); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
+}
+
+// @Tags Firewall
+// @Summary Update port rule
+// @Accept json
+// @Param request body dto.PortRuleUpdate true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/update/port [post]
+func (b *BaseApi) UpdatePortRule(c *gin.Context) {
+	var req dto.PortRuleUpdate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.UpdatePortRule(req); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
+}
+
+// @Tags Firewall
+// @Summary Update Ip rule
+// @Accept json
+// @Param request body dto.AddrRuleUpdate true "request"
+// @Success 200
+// @Security ApiKeyAuth
+// @Security Timestamp
+// @Router /hosts/firewall/update/addr [post]
+func (b *BaseApi) UpdateAddrRule(c *gin.Context) {
+	var req dto.AddrRuleUpdate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
+		return
+	}
+
+	if err := firewallService.UpdateAddrRule(req); err != nil {
+		helper.InternalServer(c, err)
+		return
+	}
+	helper.Success(c)
+}
+
+// @Tags Firewall
+// @Summary search iptables filter rules
+// @Accept json
+// @Param request body dto.SearchPageWithType true "request"
 // @Success 200 {object} dto.PageResult
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /hosts/firewall/forward/search [post]
-func (b *BaseApi) SearchForwardingRules(c *gin.Context) {
-	var request dto.ForwardRuleSearch
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+// @Router /hosts/firewall/filter/rule/search [post]
+func (b *BaseApi) SearchFilterRules(c *gin.Context) {
+	var req dto.SearchPageWithType
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	total, items, err := forwardingService.SearchRules(c.Request.Context(), request)
+
+	total, list, err := iptablesService.Search(req)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
 
-	helper.SuccessWithData(c, dto.PageResult{Items: items, Total: total})
+	helper.SuccessWithData(c, dto.PageResult{
+		Items: list,
+		Total: total,
+	})
 }
 
 // @Tags Firewall
-// @Summary Operate forwarding rules
+// @Summary Operate iptables filter rule
 // @Accept json
-// @Param request body dto.ForwardRuleOperate true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
+// @Param request body dto.IptablesRuleOp true "request"
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /hosts/firewall/forward/operate [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新端口转发规则","formatEN":"update port forward rules"}
-func (b *BaseApi) OperateForwardingRules(c *gin.Context) {
-	var request dto.ForwardRuleOperate
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+// @Router /hosts/firewall/filter/rule/operate [post]
+// @x-panel-log {"bodyKeys":["operation","chain"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operation] filter规则到 [chain]","formatEN":"[operation] filter rule to [chain]"}
+func (b *BaseApi) OperateFilterRule(c *gin.Context) {
+	var req dto.IptablesRuleOp
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-
-	result, err := forwardingService.OperateRules(request)
-	if err != nil {
+	if err := iptablesService.OperateRule(req, true); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
-	helper.SuccessWithData(c, result)
+
+	helper.Success(c)
 }
 
 // @Tags Firewall
-// @Summary Enable forwarding
+// @Summary Batch operate iptables filter rules
 // @Accept json
-// @Param request body dto.FirewallInitializationTask true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
+// @Param request body dto.IptablesBatchOperate true "request"
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /hosts/firewall/forward/enable [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"初始化并启用端口转发","formatEN":"initialize and enable port forwarding"}
-func (b *BaseApi) EnableForwarding(c *gin.Context) {
-	var request dto.FirewallInitializationTask
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+// @Router /hosts/firewall/filter/rule/batch [post]
+func (b *BaseApi) BatchOperateFilterRule(c *gin.Context) {
+	var req dto.IptablesBatchOperate
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	result, err := forwardingService.QueueInitialization(request)
-	if err != nil {
+
+	if err := iptablesService.BatchOperate(req); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
-	helper.SuccessWithData(c, result)
+
+	helper.Success(c)
 }
 
 // @Tags Firewall
-// @Summary Apply/Unload/Init firewall filter chain
+// @Summary Apply/Unload/Init iptables filter
 // @Accept json
-// @Param request body dto.FilterChainOperation true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
+// @Param request body dto.IptablesOp true "request"
+// @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/firewall/filter/operate [post]
-// @x-panel-log {"bodyKeys":["operate"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operate] 防火墙过滤链","formatEN":"[operate] firewall filter chain"}
+// @x-panel-log {"bodyKeys":["operate"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operate] iptables filter 防火墙","formatEN":"[operate] iptables filter firewall"}
 func (b *BaseApi) OperateFilterChain(c *gin.Context) {
-	var request dto.FilterChainOperation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+	var req dto.IptablesOp
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	if request.Operate == "init-base" {
-		result, err := firewallService.QueueFilterChainInitialization(request)
-		if err != nil {
-			helper.InternalServer(c, err)
-			return
-		}
-		helper.SuccessWithData(c, result)
-		return
-	}
-	if err := firewallService.OperateFilterChain(request); err != nil {
+	if err := iptablesService.Operate(req); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
-	helper.SuccessWithData(c, dto.FilterChainOperationResponse{})
-}
 
-// @Tags Firewall
-// @Summary List unified firewall v2 rules
-// @Accept json
-// @Param request body dto.FirewallRuleInventory true "request"
-// @Success 200 {object} dto.FirewallRuleInventoryResponse
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/search [post]
-func (b *BaseApi) SearchFirewallRules(c *gin.Context) {
-	var request dto.FirewallRuleInventory
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	inventory, err := firewallService.Inventory(c.Request.Context(), request)
-	if err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, inventory)
-}
-
-// @Tags Firewall
-// @Summary Reset firewall rules
-// @Accept json
-// @Param request body dto.FirewallRuleReset true "request"
-// @Success 200 {object} dto.FirewallRuleResetResponse
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/reset [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"重置防火墙规则","formatEN":"reset firewall rules"}
-func (b *BaseApi) ResetFirewallRules(c *gin.Context) {
-	var request dto.FirewallRuleReset
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := firewallService.Reset(c.Request.Context(), request)
-	if err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Load one provider-native firewall object definition
-// @Accept json
-// @Param request body dto.FirewallNativeDetail true "request"
-// @Success 200 {string} string
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/native/detail [post]
-func (b *BaseApi) LoadFirewallNativeDetail(c *gin.Context) {
-	var request dto.FirewallNativeDetail
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	info, err := firewallService.LoadFirewallNativeDetail(c.Request.Context(), request)
-	if err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, info)
-}
-
-// @Tags Firewall
-// @Summary Queue firewall rule creation
-// @Description Creation and import return a taskID immediately; validation and execution results are written to the task log.
-// @Accept json
-// @Param request body dto.FirewallRuleCreate true "request"
-// @Success 200 {object} dto.FirewallRuleCreateResponse
-// @Failure 400 {object} dto.Response
-// @Failure 409 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"添加防火墙规则","formatEN":"create firewall rules"}
-func (b *BaseApi) CreateFirewallRules(c *gin.Context) {
-	var request dto.FirewallRuleCreate
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := firewallService.Create(c.Request.Context(), request)
-	if err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Queue firewall rule deletion
-// @Description Deletes non-whitelist rules by scope and instance key. Returns a taskID immediately; results are written to the task log.
-// @Accept json
-// @Param request body dto.FirewallRuleDelete true "request"
-// @Success 200 {object} dto.FirewallRuleDeleteResponse
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/delete [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除防火墙规则","formatEN":"delete firewall rules"}
-func (b *BaseApi) DeleteFirewallRules(c *gin.Context) {
-	var request dto.FirewallRuleDelete
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := firewallService.Delete(c.Request.Context(), request)
-	if err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Update a firewall rule
-// @Accept json
-// @Param request body dto.FirewallRuleUpdate true "request"
-// @Success 200
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/update [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新防火墙规则","formatEN":"update firewall rule"}
-func (b *BaseApi) UpdateFirewallRule(c *gin.Context) {
-	var request dto.FirewallRuleUpdate
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallService.Update(c.Request.Context(), request); err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
 	helper.Success(c)
 }
 
 // @Tags Firewall
-// @Summary Reorder a firewall rule
+// @Summary load chain status with name
 // @Accept json
-// @Param request body dto.FirewallRuleReorder true "request"
-// @Success 200
-// @Failure 400 {object} dto.Response
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/reorder [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"调整防火墙规则顺序","formatEN":"reorder firewall rule"}
-func (b *BaseApi) ReorderFirewallRule(c *gin.Context) {
-	var request dto.FirewallRuleReorder
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallService.Reorder(c.Request.Context(), request); err != nil {
-		handleFirewallRuleError(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-func handleFirewallRuleError(c *gin.Context, err error) {
-	var businessErr buserr.BusinessError
-	isBusinessError := errors.As(err, &businessErr)
-	switch {
-	case errors.Is(err, filter.ErrProtectedRule):
-		helper.ErrorWithBusinessCode(c, http.StatusBadRequest, "FW_LOCKOUT_RISK", "ErrInvalidParams", err)
-	case errors.Is(err, filter.ErrRuleStale):
-		helper.ErrorWithBusinessCode(c, http.StatusConflict, "FW_RULE_STALE", "ErrInvalidParams", err)
-	case errors.Is(err, filter.ErrUnsupportedScope), errors.Is(err, filter.ErrInvalidScope),
-		errors.Is(err, filter.ErrProviderUnavailable), errors.Is(err, filter.ErrAdapterUnavailable):
-		helper.ErrorWithBusinessCode(c, http.StatusBadRequest, "FW_SCOPE_UNSUPPORTED", "ErrInvalidParams", err)
-	case errors.Is(err, filter.ErrInvalidRule), errors.Is(err, filter.ErrRuleOperation):
-		helper.ErrorWithBusinessCode(c, http.StatusBadRequest, "FW_RULE_UNSUPPORTED", "ErrInvalidParams", err)
-	case isBusinessError && businessErr.Msg == "ErrRecordExist":
-		c.JSON(http.StatusOK, dto.Response{Code: http.StatusConflict, ErrorCode: "FW_RULE_DUPLICATE", Message: err.Error()})
-		c.Abort()
-	case isBusinessError && businessErr.Msg == "ErrFirewallRuleConflict":
-		c.JSON(http.StatusOK, dto.Response{Code: http.StatusConflict, ErrorCode: "FW_RULE_CONFLICT", Message: err.Error()})
-		c.Abort()
-	case isBusinessError && businessErr.Msg == "ErrInvalidParams":
-		c.JSON(http.StatusOK, dto.Response{Code: http.StatusBadRequest, ErrorCode: "FW_RULE_UNSUPPORTED", Message: err.Error()})
-		c.Abort()
-	default:
-		helper.ErrorWithBusinessCode(c, http.StatusInternalServerError, "FW_APPLY_FAILED", "ErrInternalServer", err)
-	}
-}
-
-// @Tags Firewall
-// @Summary Load firewall settings
-// @Success 200 {object} dto.FirewallSettings
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/settings [get]
-func (b *BaseApi) LoadFirewallSettings(c *gin.Context) {
-	data, err := firewallSettingService.Load(c.Request.Context())
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Firewall
-// @Summary Create firewall port whitelist rules
-// @Description Saves whitelist configuration and applies missing allowances; existing rules are not removed.
-// @Accept json
-// @Param request body dto.FirewallPortWhitelistCreate true "request"
+// @Param request body dto.OperationWithName true "request"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
-// @Router /hosts/firewall/settings/whitelist [post]
-// @x-panel-log {"bodyKeys":["rule"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"创建防火墙端口白名单","formatEN":"create firewall port whitelist"}
-func (b *BaseApi) CreateFirewallPortWhitelist(c *gin.Context) {
-	var request dto.FirewallPortWhitelistCreate
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
+// @Router /hosts/firewall/filter/chain/status [post]
+func (b *BaseApi) LoadChainStatus(c *gin.Context) {
+	var req dto.OperationWithName
+	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	if err := firewallSettingService.CreatePortWhitelist(c.Request.Context(), request); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
 
-// @Tags Firewall
-// @Summary Update firewall port whitelist rules
-// @Description Saves whitelist configuration and applies missing allowances; existing rules are not removed.
-// @Accept json
-// @Param request body dto.FirewallPortWhitelistUpdate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/settings/whitelist/update [post]
-// @x-panel-log {"bodyKeys":["oldRule","rule"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"编辑防火墙端口白名单","formatEN":"update firewall port whitelist"}
-func (b *BaseApi) UpdateFirewallPortWhitelist(c *gin.Context) {
-	var request dto.FirewallPortWhitelistUpdate
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallSettingService.UpdatePortWhitelist(c.Request.Context(), request); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Firewall
-// @Summary Delete firewall port whitelist rules
-// @Description Removes whitelist configuration; existing firewall rules are not removed.
-// @Accept json
-// @Param request body dto.FirewallPortWhitelistDelete true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/settings/whitelist/delete [post]
-// @x-panel-log {"bodyKeys":["rules"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除防火墙端口白名单","formatEN":"delete firewall port whitelist"}
-func (b *BaseApi) DeleteFirewallPortWhitelist(c *gin.Context) {
-	var request dto.FirewallPortWhitelistDelete
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallSettingService.DeletePortWhitelist(c.Request.Context(), request); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Firewall
-// @Summary Operate firewall backend
-// @Accept json
-// @Param request body dto.FirewallBackendOperation true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/settings/operate [post]
-// @x-panel-log {"bodyKeys":["subsystem","backend","operation"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"防火墙子系统 [subsystem] 后端 [operation] [backend]","formatEN":"[operation] firewall [subsystem] backend [backend]"}
-func (b *BaseApi) OperateFirewallBackend(c *gin.Context) {
-	var request dto.FirewallBackendOperation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if err := firewallSettingService.Operate(c.Request.Context(), request); err != nil {
-		var businessErr buserr.BusinessError
-		if errors.As(err, &businessErr) && businessErr.Msg == "ErrFirewallBackendCleanupRequired" {
-			c.JSON(http.StatusOK, dto.Response{Code: http.StatusConflict, ErrorCode: "FW_BACKEND_CLEANUP_REQUIRED", Message: err.Error()})
-			c.Abort()
-			return
-		}
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Firewall
-// @Summary List Docker port guard status and policies
-// @Success 200 {object} dto.DockerPortGuardList
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/docker/ports [get]
-func (b *BaseApi) ListDockerPortGuard(c *gin.Context) {
-	data, err := dockerPortGuardService.LoadOverview(c.Request.Context())
-	if err != nil {
-		handleDockerPortGuardError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Firewall
-// @Summary List Docker published ports
-// @Success 200 {array} dto.DockerPortGuardContainer
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/docker/endpoints [get]
-func (b *BaseApi) ListDockerPublishedPorts(c *gin.Context) {
-	data, err := dockerPortGuardService.LoadPublishedPorts(c.Request.Context())
-	if err != nil {
-		handleDockerPortGuardError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Firewall
-// @Summary Operate Docker port guard
-// @Accept json
-// @Param request body dto.DockerPortGuardOperation true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/docker/operate [post]
-// @x-panel-log {"bodyKeys":["operation"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operation] Docker 端口防护","formatEN":"[operation] Docker port guard"}
-func (b *BaseApi) OperateDockerPortGuard(c *gin.Context) {
-	var request dto.DockerPortGuardOperation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	if request.Operation == "initialize" {
-		result, err := dockerPortGuardService.QueueInitialization(request)
-		if err != nil {
-			handleDockerPortGuardError(c, err)
-			return
-		}
-		helper.SuccessWithData(c, result)
-		return
-	}
-	if err := dockerPortGuardService.Operate(c.Request.Context(), request); err != nil {
-		handleDockerPortGuardError(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Firewall
-// @Summary Delete Docker port guard policies
-// @Accept json
-// @Param request body dto.DockerPortGuardPolicyBatchDelete true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/docker/policies/delete/batch [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除 Docker 端口防护策略","formatEN":"delete Docker port guard policies"}
-func (b *BaseApi) DeleteDockerPortGuardPolicies(c *gin.Context) {
-	var request dto.DockerPortGuardPolicyBatchDelete
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := dockerPortGuardService.DeletePolicies(request)
-	if err != nil {
-		handleDockerPortGuardError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Batch upsert Docker port guard policies
-// @Accept json
-// @Param request body dto.DockerPortGuardPolicyBatch true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/docker/policies/batch [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"批量更新 Docker 端口防护策略","formatEN":"batch update Docker port guard policies"}
-func (b *BaseApi) UpsertDockerPortGuardPolicies(c *gin.Context) {
-	var request dto.DockerPortGuardPolicyBatch
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := dockerPortGuardService.UpsertPolicies(request)
-	if err != nil {
-		handleDockerPortGuardError(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-func handleDockerPortGuardError(c *gin.Context, err error) {
-	var businessErr buserr.BusinessError
-	if errors.As(err, &businessErr) {
-		code, errorCode := http.StatusInternalServerError, ""
-		switch businessErr.Msg {
-		case "ErrDockerIptablesChainUnavailable":
-			code, errorCode = http.StatusServiceUnavailable, "FW_DOCKER_IPTABLES_CHAIN_UNAVAILABLE"
-		case "ErrDockerNftablesChainUnavailable":
-			code, errorCode = http.StatusServiceUnavailable, "FW_DOCKER_NFTABLES_CHAIN_UNAVAILABLE"
-		case "ErrInvalidParams":
-			code, errorCode = http.StatusBadRequest, "FW_DOCKER_GUARD_INVALID"
-		case "ErrDockerFailed":
-			code, errorCode = http.StatusServiceUnavailable, "FW_DOCKER_UNAVAILABLE"
-		}
-		if errorCode != "" {
-			c.JSON(http.StatusOK, dto.Response{Code: code, ErrorCode: errorCode, Message: err.Error()})
-			c.Abort()
-			return
-		}
-	}
-	if errors.Is(err, docker.ErrUnavailable) {
-		helper.ErrorWithBusinessCode(c, http.StatusServiceUnavailable, "FW_DOCKER_UNAVAILABLE", "ErrDockerFailed", err)
-		return
-	}
-	helper.ErrorWithBusinessCode(c, http.StatusInternalServerError, "FW_DOCKER_GUARD_FAILED", "ErrInternalServer", err)
-}
-
-// @Tags Firewall
-// @Summary List firewall rule backups
-// @Param subsystem query string false "Firewall subsystem" Enums(system,forwarding,docker) default(system)
-// @Success 200 {object} dto.FirewallRuleBackups
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/rules/backups [get]
-func (b *BaseApi) ListFirewallRuleBackups(c *gin.Context) {
-	result, err := firewallService.ListRuleBackups(c.Request.Context(), c.DefaultQuery("subsystem", "system"))
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Initialize, repair or bind one firewall address family
-// @Accept json
-// @Param request body dto.FirewallFamilyOperation true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/family/operate [post]
-// @x-panel-log {"bodyKeys":["subsystem","family","operation"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"[operation] [subsystem] [family] 防火墙链","formatEN":"[operation] [subsystem] [family] firewall chains"}
-func (b *BaseApi) OperateFirewallFamily(c *gin.Context) {
-	var request dto.FirewallFamilyOperation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := firewallSettingService.OperateFamily(request)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
-}
-
-// @Tags Firewall
-// @Summary Update firewall IPv6 support
-// @Accept json
-// @Param request body dto.FirewallIPv6Operation true "request"
-// @Success 200 {object} dto.FilterChainOperationResponse
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/firewall/settings/ipv6 [post]
-// @x-panel-log {"bodyKeys":["status"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"设置防火墙 IPv6 支持为 [status]","formatEN":"Set firewall IPv6 support to [status]"}
-func (b *BaseApi) OperateFirewallIPv6(c *gin.Context) {
-	var request dto.FirewallIPv6Operation
-	if err := helper.CheckBindAndValidate(&request, c); err != nil {
-		return
-	}
-	result, err := firewallSettingService.OperateIPv6(request)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, result)
+	helper.SuccessWithData(c, iptablesService.LoadChainStatus(req))
 }

agent/app/api/v2/gpu.go

@@ -3,8 +3,9 @@ package v2
 import (
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/1Panel-dev/1Panel/agent/utils/ai_tools/accelerator"
+	"github.com/1Panel-dev/1Panel/agent/utils/ai_tools/gpu"
+	"github.com/1Panel-dev/1Panel/agent/utils/ai_tools/gpu/common"
+	"github.com/1Panel-dev/1Panel/agent/utils/ai_tools/xpu"
 	"github.com/gin-gonic/gin"
 )
 
@@ -16,20 +17,27 @@ import (
 // @Security Timestamp
 // @Router /ai/gpu/load [get]
 func (b *BaseApi) LoadGpuInfo(c *gin.Context) {
-	ok, client := accelerator.New()
+	ok, client := gpu.New()
 	if ok {
-		snapshot, err := client.Collect(c.Request.Context())
+		info, err := client.LoadGpuInfo()
 		if err != nil {
 			helper.BadRequest(c, err)
 			return
 		}
-		if warning := snapshot.Warning(); warning != nil {
-			global.LOG.Warnf("load realtime accelerator data partially failed, err: %v", warning)
-		}
-		helper.SuccessWithData(c, &snapshot.Info)
+		helper.SuccessWithData(c, info)
 		return
 	}
-	helper.SuccessWithData(c, &accelerator.Info{})
+	xpuOK, xpuClient := xpu.New()
+	if xpuOK {
+		info, err := xpuClient.LoadGpuInfo()
+		if err != nil {
+			helper.BadRequest(c, err)
+			return
+		}
+		helper.SuccessWithData(c, info)
+		return
+	}
+	helper.SuccessWithData(c, &common.GpuInfo{})
 }
 
 // @Tags AI

agent/app/api/v2/helper/helper.go

@@ -3,7 +3,6 @@ package helper
 import (
 	"compress/gzip"
 	"context"
-	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"net/http"
@@ -12,7 +11,6 @@ import (
 	"sync"
 
 	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/1Panel-dev/1Panel/agent/utils/mcpapi"
 	"gorm.io/gorm"
 
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
@@ -23,7 +21,6 @@ import (
 )
 
 func ErrorWithDetail(ctx *gin.Context, code int, msgKey string, err error) {
-	mcpapi.SetBusinessErrorHeader(ctx.Request, ctx.Writer.Header(), err)
 	res := dto.Response{
 		Code:    code,
 		Message: "",
@@ -33,28 +30,6 @@ func ErrorWithDetail(ctx *gin.Context, code int, msgKey string, err error) {
 	ctx.Abort()
 }
 
-func ErrorWithBusinessCode(ctx *gin.Context, code int, businessCode, msgKey string, err error) {
-	mcpapi.SetBusinessErrorHeader(ctx.Request, ctx.Writer.Header(), err)
-	res := dto.Response{
-		Code:      code,
-		ErrorCode: businessCode,
-		Message:   i18n.GetMsgWithDetail(msgKey, err.Error()),
-	}
-	ctx.JSON(http.StatusOK, res)
-	ctx.Abort()
-}
-
-func ErrorWithDetailAndData(ctx *gin.Context, code int, msgKey string, err error, data interface{}) {
-	mcpapi.SetBusinessErrorHeader(ctx.Request, ctx.Writer.Header(), err)
-	res := dto.Response{
-		Code: code,
-		Data: data,
-	}
-	res.Message = i18n.GetMsgWithDetail(msgKey, err.Error())
-	ctx.JSON(http.StatusOK, res)
-	ctx.Abort()
-}
-
 func InternalServer(ctx *gin.Context, err error) {
 	ErrorWithDetail(ctx, http.StatusInternalServerError, "ErrInternalServer", err)
 }
@@ -189,23 +164,3 @@ func GetParamInt32(paramName string, c *gin.Context) (int32, error) {
 	intNum, _ := strconv.Atoi(idParam)
 	return int32(intNum), nil
 }
-
-// SetOperationLogValues supplies server-resolved values to Core's operation log.
-// Call before writing the response. Only pass public audit fields, never credentials.
-func SetOperationLogValues(c *gin.Context, values map[string]string) {
-	const header = "X-Op-Resolved"
-	resolved := make(map[string]string)
-	if data, err := base64.RawURLEncoding.DecodeString(c.Writer.Header().Get(header)); err == nil {
-		_ = json.Unmarshal(data, &resolved)
-	}
-	if resolved == nil {
-		resolved = make(map[string]string)
-	}
-	for key, value := range values {
-		resolved[key] = value
-	}
-	data, err := json.Marshal(resolved)
-	if err == nil {
-		c.Header(header, base64.RawURLEncoding.EncodeToString(data))
-	}
-}

agent/app/api/v2/logs.go

@@ -2,7 +2,6 @@ package v2
 
 import (
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
 	"github.com/gin-gonic/gin"
 )
 
@@ -21,57 +20,3 @@ func (b *BaseApi) GetSystemFiles(c *gin.Context) {
 
 	helper.SuccessWithData(c, data)
 }
-
-// @Tags Logs
-// @Summary Get host system log status
-// @Produce json
-// @Success 200 {object} dto.SystemLogStatus
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /logs/system/status [get]
-func (b *BaseApi) GetSystemLogStatus(c *gin.Context) {
-	data, err := logService.GetSystemLogStatus()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Logs
-// @Summary Read host logs
-// @Accept json
-// @Param request body dto.SystemLogReq true "request"
-// @Produce json
-// @Success 200 {object} dto.SystemLogRes
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /logs/system/read [post]
-func (b *BaseApi) ReadSystemLog(c *gin.Context) {
-	var req dto.SystemLogReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := logService.ReadSystemLog(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags Logs
-// @Summary List running host services
-// @Produce json
-// @Success 200 {array} string
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /logs/system/services [get]
-func (b *BaseApi) ListRunningServices(c *gin.Context) {
-	data, err := logService.ListRunningServices()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}

agent/app/api/v2/mcp_server.go

@@ -23,27 +23,6 @@ func (b *BaseApi) PageMcpServers(c *gin.Context) {
 	helper.SuccessWithData(c, list)
 }
 
-// @Tags McpServer
-// @Summary Load mcp server detail
-// @Accept json
-// @Param request body request.McpServerDetail true "request"
-// @Success 200 {object} response.McpServerDTO
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/mcp/server/detail [post]
-func (b *BaseApi) LoadMcpServerDetail(c *gin.Context) {
-	var req request.McpServerDetail
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	res, err := mcpServerService.Detail(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, res)
-}
-
 // @Tags McpServer
 // @Summary Create mcp server
 // @Accept json
@@ -128,48 +107,6 @@ func (b *BaseApi) OperateMcpServer(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags McpServer
-// @Summary Sync mcp server status
-// @Accept json
-// @Param request body request.McpServerStatusSync true "request"
-// @Success 200 {array} response.McpServerStatusDTO
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/mcp/server/status/sync [post]
-func (b *BaseApi) SyncMcpServerStatus(c *gin.Context) {
-	var req request.McpServerStatusSync
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	res, err := mcpServerService.SyncStatus(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, res)
-}
-
-// @Tags McpServer
-// @Summary Test mcp server connection
-// @Accept json
-// @Param request body request.McpServerConnectionTest true "request"
-// @Success 200 {object} response.McpServerConnectionTestRes
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /ai/mcp/server/connection/test [post]
-func (b *BaseApi) TestMcpServerConnection(c *gin.Context) {
-	var req request.McpServerConnectionTest
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	res, err := mcpServerService.TestConnection(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, res)
-}
-
 // @Tags McpServer
 // @Summary Bind Domain for mcp server
 // @Accept json

agent/app/api/v2/monitor.go

@@ -1,9 +1,13 @@
 package v2
 
 import (
+	"sort"
+
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
 	"github.com/gin-gonic/gin"
+	"github.com/shirou/gopsutil/v4/disk"
+	"github.com/shirou/gopsutil/v4/net"
 )
 
 // @Tags Monitor
@@ -28,19 +32,14 @@ func (b *BaseApi) LoadMonitor(c *gin.Context) {
 }
 
 // @Tags Monitor
-// @Summary Clean host or GPU monitor data
-// @Param request body dto.MonitorClean true "request"
+// @Summary Clean monitor data
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/monitor/clean [post]
-// @x-panel-log {"bodyKeys":["type"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"清空 [type] 监控数据","formatEN":"clean [type] monitoring data"}
+// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"清空监控数据","formatEN":"clean monitor datas"}
 func (b *BaseApi) CleanMonitor(c *gin.Context) {
-	var req dto.MonitorClean
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := monitorService.CleanData(req.Type); err != nil {
+	if err := monitorService.CleanData(); err != nil {
 		helper.InternalServer(c, err)
 		return
 	}
@@ -92,7 +91,14 @@ func (b *BaseApi) UpdateMonitorSetting(c *gin.Context) {
 // @Security Timestamp
 // @Router /hosts/monitor/netoptions [get]
 func (b *BaseApi) GetNetworkOptions(c *gin.Context) {
-	helper.SuccessWithData(c, monitorService.LoadNetworkOptions())
+	netStat, _ := net.IOCounters(true)
+	var options []string
+	options = append(options, "all")
+	for _, net := range netStat {
+		options = append(options, net.Name)
+	}
+	sort.Strings(options)
+	helper.SuccessWithData(c, options)
 }
 
 // @Tags Monitor
@@ -102,5 +108,12 @@ func (b *BaseApi) GetNetworkOptions(c *gin.Context) {
 // @Security Timestamp
 // @Router /hosts/monitor/iooptions [get]
 func (b *BaseApi) GetIOOptions(c *gin.Context) {
-	helper.SuccessWithData(c, monitorService.LoadIOOptions())
+	diskStat, _ := disk.IOCounters()
+	var options []string
+	options = append(options, "all")
+	for _, net := range diskStat {
+		options = append(options, net.Name)
+	}
+	sort.Strings(options)
+	helper.SuccessWithData(c, options)
 }

agent/app/api/v2/monitor_vllm.go

@@ -1,45 +0,0 @@
-package v2
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/gin-gonic/gin"
-)
-
-func (b *BaseApi) LoadVLLMMonitor(c *gin.Context) {
-	var req dto.MonitorVLLMSearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := monitorService.LoadVLLMMonitorData(c.Request.Context(), req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-func (b *BaseApi) LoadVLLMCurrent(c *gin.Context) {
-	var req dto.MonitorVLLMCurrent
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	data, err := monitorService.LoadVLLMCurrent(c.Request.Context(), req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-func (b *BaseApi) CleanVLLMMonitor(c *gin.Context) {
-	var req dto.MonitorVLLMClean
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := monitorService.CleanVLLMMonitor(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}

agent/app/api/v2/quick_directory.go

@@ -1,84 +0,0 @@
-package v2
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/gin-gonic/gin"
-)
-
-// @Tags Dashboard
-// @Summary List quick directories
-// @Success 200 {array} model.QuickDirectory
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /dashboard/quick/directory [get]
-func (b *BaseApi) ListQuickDirectories(c *gin.Context) {
-	items, err := dashboardService.ListQuickDirectories()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, items)
-}
-
-// @Tags Dashboard
-// @Summary Create quick directory
-// @Accept json
-// @Param request body dto.QuickDirectoryCreate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /dashboard/quick/directory [post]
-func (b *BaseApi) CreateQuickDirectory(c *gin.Context) {
-	var req dto.QuickDirectoryCreate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	item, err := dashboardService.CreateQuickDirectory(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, item)
-}
-
-// @Tags Dashboard
-// @Summary Update quick directory
-// @Accept json
-// @Param request body dto.QuickDirectoryUpdate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /dashboard/quick/directory/update [post]
-func (b *BaseApi) UpdateQuickDirectory(c *gin.Context) {
-	var req dto.QuickDirectoryUpdate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	item, err := dashboardService.UpdateQuickDirectory(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, item)
-}
-
-// @Tags Dashboard
-// @Summary Delete quick directory
-// @Accept json
-// @Param request body dto.QuickDirectoryDelete true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /dashboard/quick/directory/del [post]
-func (b *BaseApi) DeleteQuickDirectory(c *gin.Context) {
-	var req dto.QuickDirectoryDelete
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := dashboardService.DeleteQuickDirectory(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}

agent/app/api/v2/runtime.go

@@ -61,14 +61,13 @@ func (b *BaseApi) CreateRuntime(c *gin.Context) {
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /runtimes/del [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除运行环境 [name]","formatEN":"Delete runtime [name]"}
+// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"删除运行环境 [id]","formatEN":"Delete runtime [id]"}
 func (b *BaseApi) DeleteRuntime(c *gin.Context) {
 	var req request.RuntimeDelete
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {
 		return
 	}
-	name, err := runtimeService.Delete(req)
-	helper.SetOperationLogValues(c, map[string]string{"name": name})
+	err := runtimeService.Delete(req)
 	if err != nil {
 		helper.InternalServer(c, err)
 		return
@@ -170,7 +169,7 @@ func (b *BaseApi) GetNodePackageRunScript(c *gin.Context) {
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /runtimes/operate [post]
-// @x-panel-log {"bodyKeys":["ID"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"ID","isList":false,"db":"runtimes","output_column":"name","output_value":"name"}],"formatZH":"操作运行环境 [name]","formatEN":"Operate runtime [name]"}
+// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"操作运行环境 [id]","formatEN":"Operate runtime [id]"}
 func (b *BaseApi) OperateRuntime(c *gin.Context) {
 	var req request.RuntimeOperate
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {

agent/app/api/v2/runtime_diagnostics.go

@@ -1,63 +0,0 @@
-package v2
-
-import (
-	"os"
-
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/gin-gonic/gin"
-)
-
-// @Tags RuntimeDiagnostics
-// @Summary Load runtime diagnostics summary
-// @Success 200 {object} dto.RuntimeDiagnosticsSummary
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/diagnostics/summary [get]
-func (b *BaseApi) LoadRuntimeDiagnosticsSummary(c *gin.Context) {
-	data, err := runtimeDiagnosticsService.Summary()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, data)
-}
-
-// @Tags RuntimeDiagnostics
-// @Summary Load grouped goroutine snapshot
-// @Success 200 {object} dto.RuntimeGoroutineSnapshot
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/diagnostics/goroutines [get]
-func (b *BaseApi) LoadRuntimeGoroutines(c *gin.Context) {
-	data, err := runtimeDiagnosticsService.Goroutines()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithDataGzipped(c, data)
-}
-
-// @Tags RuntimeDiagnostics
-// @Summary Capture runtime profile
-// @Param request body dto.RuntimeProfileCreate true "request"
-// @Success 200 {file} file
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/diagnostics/profiles [post]
-func (b *BaseApi) CreateRuntimeProfile(c *gin.Context) {
-	var req dto.RuntimeProfileCreate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	profile, err := runtimeDiagnosticsService.CreateProfile(req)
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	defer os.Remove(profile.Path)
-	c.Header("Content-Disposition", `attachment; filename="`+profile.Name+`"`)
-	c.Header("Content-Type", "application/octet-stream")
-	c.File(profile.Path)
-	c.Abort()
-}

agent/app/api/v2/ssh.go

@@ -83,7 +83,6 @@ func (b *BaseApi) CreateRootCert(c *gin.Context) {
 	}
 	if err := loadCertAfterDecrypt(&req); err != nil {
 		helper.BadRequest(c, err)
-		return
 	}
 	if err := sshService.CreateRootCert(req); err != nil {
 		helper.InternalServer(c, err)
@@ -108,7 +107,6 @@ func (b *BaseApi) EditRootCert(c *gin.Context) {
 	}
 	if err := loadCertAfterDecrypt(&req); err != nil {
 		helper.BadRequest(c, err)
-		return
 	}
 	if err := sshService.EditRootCert(req); err != nil {
 		helper.InternalServer(c, err)
@@ -226,21 +224,6 @@ func (b *BaseApi) ExportSSHLogs(c *gin.Context) {
 	helper.SuccessWithData(c, tmpFile)
 }
 
-// @Tags SSH
-// @Summary Clean host SSH logs
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/ssh/log/clean [post]
-// @x-panel-log {"bodyKeys":[],"paramKeys":[],"BeforeFunctions":[],"formatZH":"清空 SSH 登录日志","formatEN":"clean SSH login logs"}
-func (b *BaseApi) CleanSSHLogs(c *gin.Context) {
-	if err := sshService.CleanLog(); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags SSH
 // @Summary Load host SSH conf
 // @Accept json

agent/app/api/v2/terminal.go

@@ -1,14 +1,11 @@
 package v2
 
 import (
-	"crypto/sha256"
 	"encoding/base64"
-	"encoding/hex"
 	"encoding/json"
 	"fmt"
 	"net/http"
 	"strconv"
-	"strings"
 	"time"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
@@ -22,35 +19,29 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/gorilla/websocket"
 	"github.com/pkg/errors"
-	gossh "golang.org/x/crypto/ssh"
 )
 
 // @Tags Terminal
 // @Summary Ws local terminal
 // @Param command query string false "command"
-// @Param session query string false "session id to reattach"
-// @Param terminalPersistent query boolean false "allow recovery after an unexpected disconnect"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/terminal/local [get]
 func (b *BaseApi) WsLocalTerminal(c *gin.Context) {
-	b.runSSHSession(c, "local", loadLocalConn, c.DefaultQuery("command", ""))
+	b.runSSHSession(c, loadLocalConn, c.DefaultQuery("command", ""))
 }
 
 // @Tags Terminal
 // @Summary Ws host SSH
 // @Param id query integer false "id"
 // @Param command query string false "command"
-// @Param session query string false "session id to reattach"
-// @Param title query string false "session title shown in the session list"
-// @Param terminalPersistent query boolean false "allow recovery after an unexpected disconnect"
 // @Success 200
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /hosts/terminal/ssh [get]
 func (b *BaseApi) WsHostSSH(c *gin.Context) {
-	b.runSSHSession(c, "ssh", func() (*ssh.SSHClient, error) {
+	b.runSSHSession(c, func() (*ssh.SSHClient, error) {
 		hostID, _ := strconv.Atoi(c.DefaultQuery("id", "0"))
 		if hostID <= 0 {
 			return nil, errors.New("missing host id")
@@ -74,33 +65,26 @@ func (b *BaseApi) WsContainerTerminal(c *gin.Context) {
 		return
 	}
 	defer wsConn.Close()
-	identity, ok := loadTerminalIdentity(c)
-	if !ok {
-		_ = wshandleError(wsConn, errors.New("missing terminal identity"))
+
+	slave, err := loadContainerTerminalCommand(c)
+	if wshandleError(wsConn, err) {
+		return
+	}
+	defer slave.Close()
+
+	tty, err := terminal.NewLocalWsSession(cols, rows, wsConn, slave, false)
+	if wshandleError(wsConn, err) {
 		return
 	}
 
-	opts := terminal.SessionOptions{
-		Identity: identity,
-		Kind:     "container",
-		Target:   containerTerminalTarget(c),
-		Cols:     cols,
-		Rows:     rows,
-	}
-	if err := terminal.ServeCommand(wsConn, strings.TrimSpace(c.Query("session")), opts, func() (*terminal.LocalCommand, error) {
-		return loadContainerTerminalCommand(c)
-	}); err != nil {
-		_ = wshandleError(wsConn, err)
-	}
-}
+	quitChan := make(chan bool, 3)
+	tty.Start(quitChan)
+	go slave.Wait(quitChan)
 
-func containerTerminalTarget(c *gin.Context) string {
-	query := c.Request.URL.Query()
-	for _, key := range []string{"cols", "rows", "session", "terminalRevalidate"} {
-		query.Del(key)
-	}
-	sum := sha256.Sum256([]byte(query.Encode()))
-	return hex.EncodeToString(sum[:])
+	<-quitChan
+
+	global.LOG.Info("websocket finished")
+	closeTerminalConn(wsConn)
 }
 
 func prepareTerminalSession(c *gin.Context) (*websocket.Conn, int, int, bool) {
@@ -131,138 +115,32 @@ func prepareTerminalSession(c *gin.Context) (*websocket.Conn, int, int, bool) {
 	return wsConn, cols, rows, true
 }
 
-func (b *BaseApi) runSSHSession(c *gin.Context, kind string, connect func() (*ssh.SSHClient, error), command string) {
+func (b *BaseApi) runSSHSession(c *gin.Context, connect func() (*ssh.SSHClient, error), command string) {
 	wsConn, cols, rows, ok := prepareTerminalSession(c)
 	if !ok {
 		return
 	}
 	defer wsConn.Close()
-	identity, ok := loadTerminalIdentity(c)
-	if !ok {
-		_ = wshandleError(wsConn, errors.New("missing terminal identity"))
-		return
-	}
 
-	hostID := 0
-	if kind == "ssh" {
-		hostID, _ = strconv.Atoi(c.DefaultQuery("id", "0"))
+	client, clientErr := connect()
+	if wshandleError(wsConn, errors.WithMessage(clientErr, "failed to set up the connection. Please check the host information")) {
+		return
 	}
-	opts := terminal.SessionOptions{
-		Identity:   identity,
-		Kind:       kind,
-		Title:      sanitizeTerminalTitle(c.Query("title")),
-		Persistent: c.Query("terminalPersistent") == "true",
-		HostID:     uint(max(hostID, 0)),
-		Cols:       cols,
-		Rows:       rows,
-		InitCmd:    command,
-	}
-	err := terminal.Serve(wsConn, strings.TrimSpace(c.Query("session")), opts, func() (*gossh.Client, error) {
-		client, err := connect()
-		if err != nil {
-			return nil, errors.WithMessage(err, "failed to set up the connection. Please check the host information")
-		}
-		return client.Client, nil
-	})
-	if err != nil {
-		_ = wshandleError(wsConn, err)
-	}
-}
+	defer client.Close()
 
-// @Tags Terminal
-// @Summary List the caller's live terminal sessions
-// @Success 200 {array} terminal.Info
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/terminal/sessions/search [post]
-func (b *BaseApi) SearchTerminalSessions(c *gin.Context) {
-	identity, ok := loadTerminalIdentity(c)
-	if !ok {
-		helper.BadRequest(c, errors.New("missing terminal identity"))
+	sws, err := terminal.NewLogicSshWsSession(cols, rows, client.Client, wsConn, command)
+	if wshandleError(wsConn, err) {
 		return
 	}
-	helper.SuccessWithData(c, terminal.List(identity))
-}
+	defer sws.Close()
 
-// @Tags Terminal
-// @Summary Close a terminal session
-// @Accept json
-// @Param request body dto.TerminalSessionClose true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/terminal/sessions/close [post]
-func (b *BaseApi) CloseTerminalSession(c *gin.Context) {
-	var req dto.TerminalSessionClose
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	identity, ok := loadTerminalIdentity(c)
-	if !ok {
-		helper.BadRequest(c, errors.New("missing terminal identity"))
-		return
-	}
-	if err := terminal.CloseSession(req.ID, identity); err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	helper.Success(c)
-}
+	quitChan := make(chan bool, 3)
+	sws.Start(quitChan)
+	go sws.Wait(quitChan)
 
-// @Tags Terminal
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /hosts/terminal/sessions/closeAll [post]
-func (b *BaseApi) CloseAllTerminalSessions(c *gin.Context) {
-	identity, ok := loadTerminalIdentity(c)
-	if !ok {
-		helper.BadRequest(c, errors.New("missing terminal identity"))
-		return
-	}
-	terminal.Revoke("auth_session", identity.UserID, identity.AuthSessionID)
-	helper.Success(c)
-}
+	<-quitChan
 
-func (b *BaseApi) RevokeTerminalSessions(c *gin.Context) {
-	var req dto.TerminalSessionRevoke
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if (req.Scope == "auth_session" && (req.UserID == "" || req.AuthSessionID == "")) ||
-		(req.Scope == "user" && req.UserID == "") {
-		helper.BadRequest(c, errors.New("missing terminal revocation identity"))
-		return
-	}
-	terminal.Revoke(req.Scope, req.UserID, req.AuthSessionID)
-	helper.Success(c)
-}
-
-func loadTerminalIdentity(c *gin.Context) (terminal.Identity, bool) {
-	identity := terminal.Identity{
-		UserID:        strings.TrimSpace(c.GetHeader(terminal.HeaderUserID)),
-		AuthSessionID: strings.TrimSpace(c.GetHeader(terminal.HeaderAuthSessionID)),
-	}
-	if value := c.GetHeader(terminal.HeaderAuthLeaseUntil); value != "" {
-		millis, err := strconv.ParseInt(value, 10, 64)
-		if err != nil || millis <= 0 {
-			return terminal.Identity{}, false
-		}
-		identity.AuthLeaseUntil = time.UnixMilli(millis)
-		if maximum := time.Now().Add(90 * time.Second); identity.AuthLeaseUntil.After(maximum) {
-			identity.AuthLeaseUntil = maximum
-		}
-	}
-	return identity, identity.Valid()
-}
-
-// sanitizeTerminalTitle keeps the title a short single line.
-func sanitizeTerminalTitle(title string) string {
-	title = strings.Join(strings.Fields(title), " ")
-	if r := []rune(title); len(r) > 64 {
-		title = string(r[:64])
-	}
-	return title
+	closeTerminalConn(wsConn)
 }
 
 func closeTerminalConn(wsConn *websocket.Conn) {

agent/app/api/v2/terminal_capabilities.go

@@ -1,10 +0,0 @@
-package v2
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/gin-gonic/gin"
-)
-
-func (b *BaseApi) TerminalCapabilities(c *gin.Context) {
-	helper.SuccessWithData(c, gin.H{"apiKeyLeaseVersion": 1})
-}

agent/app/api/v2/website.go

@@ -402,7 +402,7 @@ func (b *BaseApi) ChangeDefaultServer(c *gin.Context) {
 // @Security ApiKeyAuth
 // @Security Timestamp
 // @Router /websites/php/version [post]
-// @x-panel-log {"bodyKeys":["websiteID"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"websiteID","isList":false,"db":"websites","output_column":"primary_domain","output_value":"domain"}],"formatZH":"php 版本变更 [domain]","formatEN":"php version update [domain]"}
+// @x-panel-log {"bodyKeys":["websiteId"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"websiteId","isList":false,"db":"websites","output_column":"primary_domain","output_value":"domain"}],"formatZH":"php 版本变更 [domain]","formatEN":"php version update [domain]"}
 func (b *BaseApi) ChangePHPVersion(c *gin.Context) {
 	var req request.WebsitePHPVersionReq
 	if err := helper.CheckBindAndValidate(&req, c); err != nil {

agent/app/api/v2/website_ca.go

@@ -1,16 +1,13 @@
 package v2
 
 import (
-	"io"
 	"net/http"
 	"net/url"
 	"strconv"
-	"strings"
 
 	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
 	"github.com/1Panel-dev/1Panel/agent/app/dto"
 	"github.com/1Panel-dev/1Panel/agent/app/dto/request"
-	"github.com/1Panel-dev/1Panel/agent/buserr"
 	"github.com/gin-gonic/gin"
 )
 
@@ -179,64 +176,3 @@ func (b *BaseApi) DownloadCAFile(c *gin.Context) {
 	c.Header("Content-Disposition", "attachment; filename*=utf-8''"+url.PathEscape(info.Name()))
 	http.ServeContent(c.Writer, c.Request, info.Name(), info.ModTime(), file)
 }
-
-// @Tags Website CA
-// @Summary Upload website CA archive
-// @Accept multipart/form-data
-// @Param file formData file true "ZIP containing ca.crt and ca.key"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/ca/upload [post]
-func (b *BaseApi) UploadWebsiteCA(c *gin.Context) {
-	c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 11<<20)
-	if err := c.Request.ParseMultipartForm(11 << 20); err != nil {
-		helper.InternalServer(c, buserr.New("ErrCAUpload"))
-		return
-	}
-	if c.Request.MultipartForm != nil {
-		defer c.Request.MultipartForm.RemoveAll()
-	}
-	file, err := c.FormFile("file")
-	if err != nil || file.Size > 10<<20 || !strings.HasSuffix(strings.ToLower(file.Filename), ".zip") {
-		helper.InternalServer(c, buserr.New("ErrCAUpload"))
-		return
-	}
-	stream, err := file.Open()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	defer stream.Close()
-	data, err := io.ReadAll(io.LimitReader(stream, (10<<20)+1))
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	if err = websiteCAService.Upload(file.Filename[:len(file.Filename)-len(".zip")], data); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website CA
-// @Summary Import website CA from PEM or server files
-// @Accept json
-// @Param request body request.WebsiteCAImport true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/ca/import [post]
-func (b *BaseApi) ImportWebsiteCA(c *gin.Context) {
-	c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 3<<20)
-	var req request.WebsiteCAImport
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteCAService.Import(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}

agent/app/api/v2/website_ssl.go

@@ -210,27 +210,6 @@ func (b *BaseApi) UpdateWebsiteSSL(c *gin.Context) {
 	helper.Success(c)
 }
 
-// @Tags Website SSL
-// @Summary Push ssl to nodes
-// @Accept json
-// @Param request body request.WebsiteSSLPush true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/ssl/push [post]
-// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"id","isList":false,"db":"website_ssls","output_column":"primary_domain","output_value":"domain"}],"formatZH":"推送证书到节点 [domain]","formatEN":"Push ssl to nodes [domain]"}
-func (b *BaseApi) PushWebsiteSSLToNode(c *gin.Context) {
-	var req request.WebsiteSSLPush
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteSSLService.PushToNode(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
 // @Tags Website SSL
 // @Summary Upload ssl
 // @Accept json
@@ -269,8 +248,6 @@ func (b *BaseApi) UploadSSLFile(c *gin.Context) {
 	var req request.WebsiteSSLFileUpload
 
 	req.Description = c.PostForm("description")
-	req.Nodes = c.PostForm("nodes")
-	req.PushNode, _ = strconv.ParseBool(c.PostForm("pushNode"))
 	sslID := c.PostForm("sslID")
 	if sslID != "" {
 		req.SSLID, _ = strconv.ParseUint(sslID, 10, 64)
@@ -306,8 +283,6 @@ func (b *BaseApi) UploadSSLFile(c *gin.Context) {
 		Certificate: string(certificateContent),
 		Description: req.Description,
 		SSLID:       uint(req.SSLID),
-		PushNode:    req.PushNode,
-		Nodes:       req.Nodes,
 	}
 
 	if err := websiteSSLService.Upload(uploadReq); err != nil {

agent/app/api/v2/website_template.go

@@ -1,259 +0,0 @@
-package v2
-
-import (
-	"io"
-
-	"github.com/1Panel-dev/1Panel/agent/app/api/v2/helper"
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
-	"github.com/1Panel-dev/1Panel/agent/app/dto/request"
-	"github.com/gin-gonic/gin"
-)
-
-// @Tags Website Template
-// @Summary Page website templates
-// @Accept json
-// @Param request body request.WebsiteTemplateSearch true "request"
-// @Success 200 {object} dto.PageResult
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/search [post]
-func (b *BaseApi) PageWebsiteTemplate(c *gin.Context) {
-	var req request.WebsiteTemplateSearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	total, templates, err := websiteTemplateService.PageTemplate(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, dto.PageResult{
-		Total: total,
-		Items: templates,
-	})
-}
-
-// @Tags Website Template
-// @Summary Create website template
-// @Accept json
-// @Param request body request.WebsiteTemplateCreate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates [post]
-// @x-panel-log {"bodyKeys":["name"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"创建网站模板 [name]","formatEN":"Create website template [name]"}
-func (b *BaseApi) CreateWebsiteTemplate(c *gin.Context) {
-	var req request.WebsiteTemplateCreate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteTemplateService.CreateTemplate(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website Template
-// @Summary Update website template
-// @Accept json
-// @Param request body request.WebsiteTemplateUpdate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/update [post]
-// @x-panel-log {"bodyKeys":["name"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"更新网站模板 [name]","formatEN":"Update website template [name]"}
-func (b *BaseApi) UpdateWebsiteTemplate(c *gin.Context) {
-	var req request.WebsiteTemplateUpdate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteTemplateService.UpdateTemplate(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website Template
-// @Summary Delete website template
-// @Accept json
-// @Param request body dto.OperateByID true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/del [post]
-// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"id","isList":false,"db":"website_templates","output_column":"name","output_value":"name"}],"formatZH":"删除网站模板 [name]","formatEN":"Delete website template [name]"}
-func (b *BaseApi) DeleteWebsiteTemplate(c *gin.Context) {
-	var req dto.OperateByID
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteTemplateService.DeleteTemplate(req.ID); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website Template
-// @Summary Get website template
-// @Accept json
-// @Param request body dto.OperateByID true "request"
-// @Success 200 {object} response.WebsiteTemplateDTO
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/get [post]
-func (b *BaseApi) GetWebsiteTemplate(c *gin.Context) {
-	var req dto.OperateByID
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	template, err := websiteTemplateService.GetTemplate(req.ID)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, template)
-}
-
-// @Tags Website Template
-// @Summary Upload website template zip
-// @Accept multipart/form-data
-// @Param file formData file true "file"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/upload [post]
-func (b *BaseApi) UploadTemplateZip(c *gin.Context) {
-	fileHeader, err := c.FormFile("file")
-	if err != nil {
-		helper.BadRequest(c, err)
-		return
-	}
-	file, err := fileHeader.Open()
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	defer file.Close()
-	content, err := io.ReadAll(file)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	filePath, variables, err := websiteTemplateService.SaveUploadZip(fileHeader.Filename, content)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, gin.H{"filePath": filePath, "variables": variables})
-}
-
-// @Tags Website Template
-// @Summary Preview website template
-// @Accept json
-// @Param request body request.WebsitePreviewReq true "request"
-// @Success 200 {object} response.WebsitePreviewDTO
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/preview [post]
-func (b *BaseApi) PreviewWebsiteTemplate(c *gin.Context) {
-	var req request.WebsitePreviewReq
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	preview, err := websiteTemplateService.Preview(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, preview)
-}
-
-// @Tags Website Template
-// @Summary Page website template outputs
-// @Accept json
-// @Param request body request.WebsiteTemplateOutputSearch true "request"
-// @Success 200 {object} dto.PageResult
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/outputs/search [post]
-func (b *BaseApi) PageWebsiteTemplateOutput(c *gin.Context) {
-	var req request.WebsiteTemplateOutputSearch
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	total, outputs, err := websiteTemplateService.PageOutput(req)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, dto.PageResult{
-		Total: total,
-		Items: outputs,
-	})
-}
-
-// @Tags Website Template
-// @Summary Create website template output
-// @Accept json
-// @Param request body request.WebsiteTemplateOutputCreate true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/outputs [post]
-// @x-panel-log {"bodyKeys":["name"],"paramKeys":[],"BeforeFunctions":[],"formatZH":"生成模板产物 [name]","formatEN":"Generate template output [name]"}
-func (b *BaseApi) CreateWebsiteTemplateOutput(c *gin.Context) {
-	var req request.WebsiteTemplateOutputCreate
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteTemplateService.CreateOutput(req); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website Template
-// @Summary Delete website template output
-// @Accept json
-// @Param request body dto.OperateByID true "request"
-// @Success 200
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/outputs/del [post]
-// @x-panel-log {"bodyKeys":["id"],"paramKeys":[],"BeforeFunctions":[{"input_column":"id","input_value":"id","isList":false,"db":"website_template_outputs","output_column":"name","output_value":"name"}],"formatZH":"删除模板产物 [name]","formatEN":"Delete template output [name]"}
-func (b *BaseApi) DeleteWebsiteTemplateOutput(c *gin.Context) {
-	var req dto.OperateByID
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	if err := websiteTemplateService.DeleteOutput(req.ID); err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.Success(c)
-}
-
-// @Tags Website Template
-// @Summary Get website template output
-// @Accept json
-// @Param request body dto.OperateByID true "request"
-// @Success 200 {object} response.WebsiteTemplateOutputDTO
-// @Security ApiKeyAuth
-// @Security Timestamp
-// @Router /websites/templates/outputs/get [post]
-func (b *BaseApi) GetWebsiteTemplateOutput(c *gin.Context) {
-	var req dto.OperateByID
-	if err := helper.CheckBindAndValidate(&req, c); err != nil {
-		return
-	}
-	output, err := websiteTemplateService.GetOutput(req.ID)
-	if err != nil {
-		helper.InternalServer(c, err)
-		return
-	}
-	helper.SuccessWithData(c, output)
-}

agent/app/dto/agents.go

@@ -3,31 +3,28 @@ package dto
 import "time"
 
 type AgentCreateReq struct {
-	Name              string   `json:"name" validate:"required"`
-	Remark            string   `json:"remark"`
-	AppVersion        string   `json:"appVersion" validate:"required"`
-	WebUIPort         int      `json:"webUIPort" validate:"required,min=1,max=65535"`
-	BridgePort        int      `json:"bridgePort"`
-	AllowedOrigins    []string `json:"allowedOrigins"`
-	AgentType         string   `json:"agentType" validate:"required,oneof=openclaw copaw hermes-agent deepseek-harness octop"`
-	AccessHost        string   `json:"accessHost"`
-	Model             string   `json:"model"`
-	AccountID         uint     `json:"accountId"`
-	Token             string   `json:"token"`
-	DashboardUsername string   `json:"dashboardUsername"`
-	DashboardPassword string   `json:"dashboardPassword"`
-	TaskID            string   `json:"taskID"`
-	Advanced          bool     `json:"advanced"`
-	ContainerName     string   `json:"containerName"`
-	AllowPort         bool     `json:"allowPort"`
-	SpecifyIP         string   `json:"specifyIP"`
-	RestartPolicy     string   `json:"restartPolicy"`
-	CpuQuota          float64  `json:"cpuQuota"`
-	MemoryLimit       float64  `json:"memoryLimit"`
-	MemoryUnit        string   `json:"memoryUnit"`
-	PullImage         bool     `json:"pullImage"`
-	EditCompose       bool     `json:"editCompose"`
-	DockerCompose     string   `json:"dockerCompose"`
+	Name           string   `json:"name" validate:"required"`
+	Remark         string   `json:"remark"`
+	AppVersion     string   `json:"appVersion" validate:"required"`
+	WebUIPort      int      `json:"webUIPort" validate:"required,min=1,max=65535"`
+	BridgePort     int      `json:"bridgePort"`
+	AllowedOrigins []string `json:"allowedOrigins"`
+	AgentType      string   `json:"agentType" validate:"required,oneof=openclaw copaw hermes-agent"`
+	Model          string   `json:"model"`
+	AccountID      uint     `json:"accountId"`
+	Token          string   `json:"token"`
+	TaskID         string   `json:"taskID"`
+	Advanced       bool     `json:"advanced"`
+	ContainerName  string   `json:"containerName"`
+	AllowPort      bool     `json:"allowPort"`
+	SpecifyIP      string   `json:"specifyIP"`
+	RestartPolicy  string   `json:"restartPolicy"`
+	CpuQuota       float64  `json:"cpuQuota"`
+	MemoryLimit    float64  `json:"memoryLimit"`
+	MemoryUnit     string   `json:"memoryUnit"`
+	PullImage      bool     `json:"pullImage"`
+	EditCompose    bool     `json:"editCompose"`
+	DockerCompose  string   `json:"dockerCompose"`
 }
 
 type AgentBatchInstallReq struct {
@@ -41,8 +38,6 @@ type AgentBatchInstallReq struct {
 	Model              string              `json:"model"`
 	AccountID          uint                `json:"accountId"`
 	Token              string              `json:"token"`
-	DashboardUsername  string              `json:"dashboardUsername"`
-	DashboardPassword  string              `json:"dashboardPassword"`
 	TaskID             string              `json:"taskID"`
 	Advanced           bool                `json:"advanced"`
 	ContainerName      string              `json:"containerName"`
@@ -111,7 +106,6 @@ type AgentBatchOperateResult struct {
 }
 
 type AgentItem struct {
-	AccessHost           string    `json:"accessHost"`
 	ID                   uint      `json:"id"`
 	Name                 string    `json:"name"`
 	Remark               string    `json:"remark"`
@@ -120,11 +114,11 @@ type AgentItem struct {
 	ProviderName         string    `json:"providerName"`
 	Model                string    `json:"model"`
 	APIType              string    `json:"apiType"`
+	MaxTokens            int       `json:"maxTokens"`
+	ContextWindow        int       `json:"contextWindow"`
 	BaseURL              string    `json:"baseUrl"`
 	APIKey               string    `json:"apiKey"`
 	Token                string    `json:"token"`
-	DashboardUsername    string    `json:"dashboardUsername"`
-	DashboardPassword    string    `json:"dashboardPassword"`
 	Status               string    `json:"status"`
 	Message              string    `json:"message"`
 	AppInstallID         uint      `json:"appInstallId"`
@@ -164,25 +158,16 @@ type AgentWebsiteBindReq struct {
 }
 
 type AgentModelConfigUpdateReq struct {
-	AgentID   uint                 `json:"agentId" validate:"required"`
-	AccountID uint                 `json:"accountId" validate:"required"`
-	Model     string               `json:"model" validate:"required"`
-	Fallbacks []string             `json:"fallbacks"`
-	Metadata  []AgentModelMetadata `json:"metadata" validate:"dive"`
+	AgentID   uint     `json:"agentId" validate:"required"`
+	AccountID uint     `json:"accountId" validate:"required"`
+	Model     string   `json:"model" validate:"required"`
+	Fallbacks []string `json:"fallbacks"`
 }
 
 type AgentModelConfig struct {
-	AccountID uint                 `json:"accountId"`
-	Model     string               `json:"model"`
-	Fallbacks []string             `json:"fallbacks"`
-	Metadata  []AgentModelMetadata `json:"metadata"`
-}
-
-type AgentModelMetadata struct {
-	Model         string `json:"model" validate:"required"`
-	InputMode     string `json:"inputMode" validate:"required,oneof=auto text image"`
-	ContextWindow int    `json:"contextWindow" validate:"min=0"`
-	MaxTokens     int    `json:"maxTokens" validate:"min=0"`
+	AccountID uint     `json:"accountId"`
+	Model     string   `json:"model"`
+	Fallbacks []string `json:"fallbacks"`
 }
 
 type AgentHermesChatSessionItem struct {
@@ -301,22 +286,19 @@ type AgentOverviewSnapshot struct {
 }
 
 type AgentAccountModel struct {
-	RecordID uint   `json:"recordId"`
-	ID       string `json:"id"`
-	Name     string `json:"name"`
+	RecordID      uint     `json:"recordId"`
+	ID            string   `json:"id"`
+	Name          string   `json:"name"`
+	ContextWindow int      `json:"contextWindow"`
+	MaxTokens     int      `json:"maxTokens"`
+	Reasoning     bool     `json:"reasoning"`
+	Input         []string `json:"input"`
 }
 
 type AgentAccountModelReq struct {
 	AccountID uint `json:"accountId" validate:"required"`
 }
 
-type AgentAccountModelDiscoverReq struct {
-	Provider string `json:"provider" validate:"required"`
-	BaseURL  string `json:"baseURL" validate:"required"`
-	APIKey   string `json:"apiKey" validate:"required"`
-	APIType  string `json:"apiType" validate:"required"`
-}
-
 type AgentAccountModelCreateReq struct {
 	AccountID uint              `json:"accountId" validate:"required"`
 	Model     AgentAccountModel `json:"model" validate:"required"`
@@ -333,40 +315,31 @@ type AgentAccountModelDeleteReq struct {
 }
 
 type AgentAccountCreateReq struct {
-	Provider             string              `json:"provider" validate:"required"`
-	Name                 string              `json:"name" validate:"required"`
-	APIKey               string              `json:"apiKey" validate:"required"`
-	RememberAPIKey       bool                `json:"rememberApiKey"`
-	BaseURL              string              `json:"baseURL"`
-	Models               []AgentAccountModel `json:"models"`
-	APIType              string              `json:"apiType" validate:"required"`
-	AuthMode             string              `json:"authMode"`
-	VerifyModel          string              `json:"verifyModel"`
-	ValidateAvailability *bool               `json:"validateAvailability"`
-	Remark               string              `json:"remark"`
+	Provider       string              `json:"provider" validate:"required"`
+	Name           string              `json:"name" validate:"required"`
+	APIKey         string              `json:"apiKey" validate:"required"`
+	RememberAPIKey bool                `json:"rememberApiKey"`
+	BaseURL        string              `json:"baseURL"`
+	Models         []AgentAccountModel `json:"models"`
+	APIType        string              `json:"apiType" validate:"required"`
+	Remark         string              `json:"remark"`
 }
 
 type AgentAccountUpdateReq struct {
-	ID                   uint   `json:"id" validate:"required"`
-	Name                 string `json:"name" validate:"required"`
-	APIKey               string `json:"apiKey" validate:"required"`
-	RememberAPIKey       bool   `json:"rememberApiKey"`
-	BaseURL              string `json:"baseURL"`
-	APIType              string `json:"apiType" validate:"required"`
-	AuthMode             string `json:"authMode"`
-	VerifyModel          string `json:"verifyModel"`
-	ValidateAvailability *bool  `json:"validateAvailability"`
-	Remark               string `json:"remark"`
-	SyncAgents           bool   `json:"syncAgents"`
+	ID             uint   `json:"id" validate:"required"`
+	Name           string `json:"name" validate:"required"`
+	APIKey         string `json:"apiKey" validate:"required"`
+	RememberAPIKey bool   `json:"rememberApiKey"`
+	BaseURL        string `json:"baseURL"`
+	APIType        string `json:"apiType" validate:"required"`
+	Remark         string `json:"remark"`
+	SyncAgents     bool   `json:"syncAgents"`
 }
 
 type AgentAccountVerifyReq struct {
 	Provider string `json:"provider" validate:"required"`
 	APIKey   string `json:"apiKey" validate:"required"`
 	BaseURL  string `json:"baseURL"`
-	APIType  string `json:"apiType" validate:"required"`
-	AuthMode string `json:"authMode"`
-	Model    string `json:"model"`
 }
 
 type AgentAccountDeleteReq struct {
@@ -376,8 +349,6 @@ type AgentAccountDeleteReq struct {
 type AgentAccountSearch struct {
 	PageInfo
 	Provider string `json:"provider"`
-	APIType  string `json:"apiType"`
-	TextOnly bool   `json:"textOnly"`
 	Name     string `json:"name"`
 }
 
@@ -386,7 +357,6 @@ type AgentAccountProviderCountReq struct {
 }
 
 type AgentAccountInfo struct {
-	AppInstallID    uint                `json:"appInstallId"`
 	ID              uint                `json:"id"`
 	MasterAccountID uint                `json:"masterAccountId"`
 	Provider        string              `json:"provider"`
@@ -397,89 +367,63 @@ type AgentAccountInfo struct {
 	BaseURL         string              `json:"baseUrl"`
 	Models          []AgentAccountModel `json:"models"`
 	APIType         string              `json:"apiType"`
-	AuthMode        string              `json:"authMode"`
-	VerifyModel     string              `json:"verifyModel"`
 	Verified        bool                `json:"verified"`
 	Remark          string              `json:"remark"`
 	CreatedAt       time.Time           `json:"createdAt"`
 }
 
 type ProviderModelInfo struct {
-	ID   string `json:"id"`
-	Name string `json:"name"`
-}
-
-type ProviderAPIInfo struct {
-	APIType                string              `json:"apiType"`
-	BaseURL                string              `json:"baseUrl"`
-	EditableBaseURL        bool                `json:"editableBaseUrl"`
-	SupportsModelDiscovery bool                `json:"supportsModelDiscovery"`
-	DefaultAuthMode        string              `json:"defaultAuthMode"`
-	AuthModes              []string            `json:"authModes"`
-	Models                 []ProviderModelInfo `json:"models"`
+	ID            string   `json:"id"`
+	Name          string   `json:"name"`
+	ContextWindow int      `json:"contextWindow"`
+	MaxTokens     int      `json:"maxTokens"`
+	Reasoning     bool     `json:"reasoning"`
+	Input         []string `json:"input"`
 }
 
 type ProviderInfo struct {
-	Sort           uint                `json:"-"`
-	Provider       string              `json:"provider"`
-	DisplayName    string              `json:"displayName"`
-	BaseURL        string              `json:"baseUrl"`
-	DefaultAPIType string              `json:"defaultApiType"`
-	APITypes       []ProviderAPIInfo   `json:"apiTypes"`
-	Models         []ProviderModelInfo `json:"models"`
+	Sort        uint                `json:"-"`
+	Provider    string              `json:"provider"`
+	DisplayName string              `json:"displayName"`
+	BaseURL     string              `json:"baseUrl"`
+	Models      []ProviderModelInfo `json:"models"`
 }
 
 type AgentFeishuConfigReq struct {
 	AgentID uint `json:"agentId" validate:"required"`
 }
 
-type AgentFeishuTransition struct {
-	Confirmed         bool   `json:"confirmed"`
-	Streaming         bool   `json:"streaming"`
-	GroupSessionScope string `json:"groupSessionScope"`
-	RequireMention    string `json:"requireMention"`
-}
-
-type AgentFeishuSwitchReq struct {
-	AgentID           uint   `json:"agentId" validate:"required"`
-	TaskID            string `json:"taskID" validate:"required"`
-	Streaming         bool   `json:"streaming"`
-	GroupSessionScope string `json:"groupSessionScope" validate:"required,oneof=group group_sender group_topic group_topic_sender"`
-	RequireMention    string `json:"requireMention" validate:"required,oneof=true false"`
-}
-
 type AgentFeishuConfigUpdateReq struct {
-	GroupSessionScope string           `json:"groupSessionScope" validate:"omitempty,oneof=group group_sender group_topic group_topic_sender"`
-	AgentID           uint             `json:"agentId" validate:"required"`
-	Enabled           bool             `json:"enabled"`
-	ThreadSession     bool             `json:"threadSession"`
-	ReplyMode         string           `json:"replyMode" validate:"required"`
-	Streaming         bool             `json:"streaming"`
-	RequireMention    string           `json:"requireMention" validate:"required,oneof=true false open"`
-	GroupPolicy       string           `json:"groupPolicy" validate:"required,oneof=open allowlist disabled"`
-	GroupAllowFrom    []string         `json:"groupAllowFrom"`
-	Domain            string           `json:"domain"`
-	ConnectionMode    string           `json:"connectionMode"`
-	Bots              []AgentFeishuBot `json:"bots" validate:"required,min=1"`
+	AgentID        uint             `json:"agentId" validate:"required"`
+	Enabled        bool             `json:"enabled"`
+	ThreadSession  bool             `json:"threadSession"`
+	ReplyMode      string           `json:"replyMode" validate:"required"`
+	Streaming      bool             `json:"streaming"`
+	RequireMention string           `json:"requireMention" validate:"required,oneof=true false open"`
+	GroupPolicy    string           `json:"groupPolicy" validate:"required,oneof=open allowlist disabled"`
+	GroupAllowFrom []string         `json:"groupAllowFrom"`
+	Domain         string           `json:"domain"`
+	ConnectionMode string           `json:"connectionMode"`
+	Bots           []AgentFeishuBot `json:"bots" validate:"required,min=1"`
+}
+
+type AgentFeishuPairingApproveReq struct {
+	AgentID     uint   `json:"agentId" validate:"required"`
+	PairingCode string `json:"pairingCode" validate:"required"`
 }
 
 type AgentFeishuConfig struct {
-	BuiltinManaged    bool             `json:"builtinManaged"`
-	LegacyConfigured  bool             `json:"legacyConfigured"`
-	GroupSessionScope string           `json:"groupSessionScope"`
-	BuiltinAvailable  bool             `json:"builtinAvailable"`
-	Legacy            bool             `json:"legacy"`
-	Enabled           bool             `json:"enabled"`
-	ThreadSession     bool             `json:"threadSession"`
-	ReplyMode         string           `json:"replyMode"`
-	Streaming         bool             `json:"streaming"`
-	RequireMention    string           `json:"requireMention"`
-	GroupPolicy       string           `json:"groupPolicy"`
-	GroupAllowFrom    []string         `json:"groupAllowFrom"`
-	Domain            string           `json:"domain"`
-	ConnectionMode    string           `json:"connectionMode"`
-	Bots              []AgentFeishuBot `json:"bots"`
-	Installed         bool             `json:"installed"`
+	Enabled        bool             `json:"enabled"`
+	ThreadSession  bool             `json:"threadSession"`
+	ReplyMode      string           `json:"replyMode"`
+	Streaming      bool             `json:"streaming"`
+	RequireMention string           `json:"requireMention"`
+	GroupPolicy    string           `json:"groupPolicy"`
+	GroupAllowFrom []string         `json:"groupAllowFrom"`
+	Domain         string           `json:"domain"`
+	ConnectionMode string           `json:"connectionMode"`
+	Bots           []AgentFeishuBot `json:"bots"`
+	Installed      bool             `json:"installed"`
 }
 
 type AgentTelegramConfigReq struct {
@@ -637,52 +581,6 @@ type AgentPluginStatus struct {
 	Upgradable     bool   `json:"upgradable"`
 }
 
-type AgentPluginsReq struct {
-	AgentID uint `json:"agentId" validate:"required"`
-}
-
-type AgentPluginSearchReq struct {
-	AgentID uint   `json:"agentId" validate:"required"`
-	Keyword string `json:"keyword" validate:"required,max=100"`
-	Limit   int    `json:"limit" validate:"omitempty,min=1,max=100"`
-}
-
-type AgentPluginMarketInstallReq struct {
-	AgentID uint   `json:"agentId" validate:"required"`
-	Package string `json:"package" validate:"required,max=200"`
-	Version string `json:"version" validate:"required,max=100"`
-	TaskID  string `json:"taskID" validate:"required"`
-}
-
-type AgentPluginOperateReq struct {
-	AgentID  uint   `json:"agentId" validate:"required"`
-	PluginID string `json:"pluginId" validate:"required,max=200"`
-	Operate  string `json:"operate" validate:"required,oneof=enable disable update uninstall"`
-	TaskID   string `json:"taskID" validate:"required"`
-}
-
-type AgentPluginItem struct {
-	ID      string `json:"id"`
-	Name    string `json:"name"`
-	Version string `json:"version"`
-	Origin  string `json:"origin"`
-	Enabled bool   `json:"enabled"`
-}
-
-type AgentPluginSearchItem struct {
-	Package          string   `json:"package"`
-	PluginID         string   `json:"pluginId"`
-	Name             string   `json:"name"`
-	Description      string   `json:"description"`
-	Version          string   `json:"version"`
-	Channel          string   `json:"channel"`
-	VerificationTier string   `json:"verificationTier"`
-	Categories       []string `json:"categories"`
-	Official         bool     `json:"official"`
-	Downloads        int64    `json:"downloads"`
-	Score            float64  `json:"score"`
-}
-
 type AgentDiscordConfigUpdateReq struct {
 	AgentID        uint              `json:"agentId" validate:"required"`
 	Enabled        bool              `json:"enabled"`
@@ -762,20 +660,16 @@ type AgentSecurityConfig struct {
 }
 
 type AgentOtherConfigUpdateReq struct {
-	AgentID           uint   `json:"agentId" validate:"required"`
-	UserTimezone      string `json:"userTimezone"`
-	BrowserEnabled    bool   `json:"browserEnabled"`
-	NPMRegistry       string `json:"npmRegistry"`
-	DashboardUsername string `json:"dashboardUsername"`
-	DashboardPassword string `json:"dashboardPassword"`
+	AgentID        uint   `json:"agentId" validate:"required"`
+	UserTimezone   string `json:"userTimezone" validate:"required"`
+	BrowserEnabled bool   `json:"browserEnabled"`
+	NPMRegistry    string `json:"npmRegistry" validate:"required"`
 }
 
 type AgentOtherConfig struct {
-	UserTimezone      string `json:"userTimezone"`
-	BrowserEnabled    bool   `json:"browserEnabled"`
-	NPMRegistry       string `json:"npmRegistry"`
-	DashboardUsername string `json:"dashboardUsername"`
-	DashboardPassword string `json:"dashboardPassword"`
+	UserTimezone   string `json:"userTimezone"`
+	BrowserEnabled bool   `json:"browserEnabled"`
+	NPMRegistry    string `json:"npmRegistry"`
 }
 
 type AgentConfigFileReq struct {

agent/app/dto/ai.go

@@ -14,17 +14,16 @@ type OllamaModelInfo struct {
 	CreatedAt time.Time `json:"createdAt"`
 }
 
+type OllamaModelDropList struct {
+	ID   uint   `json:"id"`
+	Name string `json:"name"`
+}
+
 type OllamaModelName struct {
 	Name   string `json:"name"`
 	TaskID string `json:"taskID"`
 }
 
-type OllamaModelAccountSync struct {
-	ID                      uint   `json:"id" validate:"required"`
-	ModelAccountBaseURLType string `json:"modelAccountBaseURLType" validate:"required,oneof=container localhost systemIP custom"`
-	ModelAccountBaseURL     string `json:"modelAccountBaseURL"`
-}
-
 type OllamaBindDomain struct {
 	Domain       string `json:"domain" validate:"required"`
 	AppInstallID uint   `json:"appInstallID" validate:"required"`

agent/app/dto/ai_benchmark.go

@@ -1,13 +0,0 @@
-package dto
-
-type AIBenchmarkSource struct {
-	ID        string   `json:"id"`
-	Kind      string   `json:"kind"`
-	Name      string   `json:"name"`
-	Status    string   `json:"status"`
-	BaseURL   string   `json:"baseUrl"`
-	Endpoint  string   `json:"endpoint"`
-	Models    []string `json:"models"`
-	Tokenizer string   `json:"tokenizer"`
-	Message   string   `json:"message"`
-}

agent/app/dto/alert.go

@@ -21,7 +21,6 @@ type AlertBase struct {
 }
 
 type PushAlert struct {
-	Result    string `json:"result,omitempty"`
 	TaskName  string `json:"taskName"`
 	AlertType string `json:"alertType"`
 	EntryID   uint   `json:"entryID"`
@@ -54,7 +53,6 @@ type AlertDTO struct {
 	Method         string    `json:"method"`
 	Title          string    `json:"title"`
 	Project        string    `json:"project"`
-	TaskName       string    `json:"taskName,omitempty"`
 	Status         string    `json:"status"`
 	SendCount      uint      `json:"sendCount"`
 	AdvancedParams string    `json:"advancedParams"`
@@ -115,10 +113,8 @@ type DiskDTO struct {
 
 type AlertLogSearch struct {
 	PageInfo
-	Count     uint      `json:"count"`
-	Status    string    `json:"status"`
-	StartTime time.Time `json:"startTime"`
-	EndTime   time.Time `json:"endTime"`
+	Count  uint   `json:"count"`
+	Status string `json:"status"`
 }
 
 type AlertLogDTO struct {
@@ -153,25 +149,16 @@ type AlertLog struct {
 }
 
 type AlertDetail struct {
-	LicenseId   string             `json:"licenseId"`
-	Type        string             `json:"type"`
-	SubType     string             `json:"subType"`
-	Title       string             `json:"title"`
-	Method      string             `json:"method"`
-	LicenseCode string             `json:"licenseCode"`
-	DeviceId    string             `json:"deviceId"`
-	Project     string             `json:"project"`
-	Params      []Param            `json:"params"`
-	Phone       string             `json:"phone"`
-	Task        *AlertTaskMetadata `json:"task,omitempty"`
-}
-
-type AlertTaskMetadata struct {
-	AlertID   uint   `json:"alertId"`
-	Type      string `json:"type"`
-	Quota     string `json:"quota"`
-	QuotaType string `json:"quotaType"`
-	Method    string `json:"method"`
+	LicenseId   string  `json:"licenseId"`
+	Type        string  `json:"type"`
+	SubType     string  `json:"subType"`
+	Title       string  `json:"title"`
+	Method      string  `json:"method"`
+	LicenseCode string  `json:"licenseCode"`
+	DeviceId    string  `json:"deviceId"`
+	Project     string  `json:"project"`
+	Params      []Param `json:"params"`
+	Phone       string  `json:"phone"`
 }
 
 type AlertRule struct {
@@ -306,19 +293,15 @@ type OfflineQueryRequest struct {
 }
 
 type AlertConfigUpdate struct {
-	ID          uint       `json:"id"`
-	Type        string     `json:"type"`
-	Title       string     `json:"title"`
-	Status      string     `json:"status"`
-	Config      string     `json:"config"`
-	DisplayName string     `json:"displayName"`
-	Revision    *time.Time `json:"revision"`
+	ID          uint   `json:"id"`
+	Type        string `json:"type"`
+	Title       string `json:"title"`
+	Status      string `json:"status"`
+	Config      string `json:"config"`
+	DisplayName string `json:"displayName"`
 }
 
 type AlertConfigTest struct {
-	ID          uint   `json:"id"`
-	Type        string `json:"type"`
-	Config      string `json:"config"`
 	Host        string `json:"host"`
 	Port        int    `json:"port"`
 	Sender      string `json:"sender"`

agent/app/dto/alert_webhook.go

@@ -1,80 +0,0 @@
-package dto
-
-const AlertCustomWebhookSchemaVersion = 1
-
-type AlertConfigStatusUpdate struct {
-	ID     uint   `json:"id" validate:"required"`
-	Status string `json:"status" validate:"required,oneof=Enable Disable"`
-}
-
-type AlertCustomWebhookSecretMutation struct {
-	Action string `json:"action,omitempty"`
-	Value  string `json:"value,omitempty"`
-}
-
-type AlertCustomWebhookURL struct {
-	AlertCustomWebhookSecretMutation
-	Configured bool   `json:"configured"`
-	Masked     string `json:"masked,omitempty"`
-}
-
-type AlertCustomWebhookBody struct {
-	Type     string                        `json:"type"`
-	Template string                        `json:"template,omitempty"`
-	Fields   []AlertCustomWebhookFormField `json:"fields,omitempty"`
-}
-
-type AlertCustomWebhookFormField struct {
-	Key   string `json:"key"`
-	Value string `json:"value"`
-}
-
-type AlertCustomWebhookHeader struct {
-	UID        string `json:"uid"`
-	Key        string `json:"key"`
-	Secret     bool   `json:"secret"`
-	Action     string `json:"action,omitempty"`
-	Value      string `json:"value,omitempty"`
-	Configured bool   `json:"configured,omitempty"`
-	Masked     string `json:"masked,omitempty"`
-}
-
-type AlertCustomWebhookConfig struct {
-	SchemaVersion int                        `json:"schemaVersion"`
-	State         string                     `json:"state,omitempty"`
-	DisplayName   string                     `json:"displayName"`
-	Preset        string                     `json:"preset"`
-	Method        string                     `json:"method"`
-	URL           AlertCustomWebhookURL      `json:"url"`
-	Body          AlertCustomWebhookBody     `json:"body"`
-	Headers       []AlertCustomWebhookHeader `json:"headers"`
-}
-
-type AlertCustomWebhookSecretConfig struct {
-	SchemaVersion int               `json:"schemaVersion"`
-	URL           string            `json:"url"`
-	Headers       map[string]string `json:"headers,omitempty"`
-}
-
-type AlertCustomWebhookResolvedConfig struct {
-	SchemaVersion int
-	DisplayName   string
-	Preset        string
-	Method        string
-	URL           string
-	Body          AlertCustomWebhookBody
-	Headers       []AlertCustomWebhookResolvedHeader
-}
-
-type AlertCustomWebhookResolvedHeader struct {
-	Key   string
-	Value string
-}
-
-type AlertConfigTestResult struct {
-	Success    bool   `json:"success"`
-	StatusCode int    `json:"statusCode,omitempty"`
-	Duration   int64  `json:"duration,omitempty"` // milliseconds
-	Message    string `json:"message,omitempty"`
-	Response   string `json:"response,omitempty"`
-}

agent/app/dto/app.go

@@ -2,7 +2,6 @@ package dto
 
 import (
 	"context"
-
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 	"github.com/1Panel-dev/1Panel/agent/app/task"
 )
@@ -43,11 +42,9 @@ type AppOssConfig struct {
 }
 
 type AppVersion struct {
-	FeishuLegacy     bool   `json:"feishuLegacy,omitempty"`
-	FeishuConfigured bool   `json:"feishuConfigured,omitempty"`
-	Version          string `json:"version"`
-	DetailId         uint   `json:"detailId"`
-	DockerCompose    string `json:"dockerCompose"`
+	Version       string `json:"version"`
+	DetailId      uint   `json:"detailId"`
+	DockerCompose string `json:"dockerCompose"`
 }
 
 type AppList struct {
@@ -135,8 +132,6 @@ type Locale struct {
 	Ko     string `json:"ko"`
 	Tr     string `json:"tr"`
 	Es     string `json:"es-es" yaml:"es-es"`
-	Fa     string `json:"fa"`
-	Lo     string `json:"lo"`
 }
 
 type AppForm struct {

agent/app/dto/backup.go

@@ -65,15 +65,14 @@ type UploadForRecover struct {
 }
 
 type CommonBackup struct {
-	Type        string   `json:"type" validate:"required,oneof=app mysql mariadb redis website postgresql mongodb mysql-cluster postgresql-cluster redis-cluster container compose"`
-	Name        string   `json:"name"`
-	DetailName  string   `json:"detailName"`
-	Secret      string   `json:"secret"`
-	IsImmediate bool     `json:"isImmediate"`
-	StopBefore  bool     `json:"stopBefore"`
-	TaskID      string   `json:"taskID"`
-	FileName    string   `json:"fileName"`
-	Args        []string `json:"args"`
+	Type       string   `json:"type" validate:"required,oneof=app mysql mariadb redis website postgresql mongodb mysql-cluster postgresql-cluster redis-cluster container compose"`
+	Name       string   `json:"name"`
+	DetailName string   `json:"detailName"`
+	Secret     string   `json:"secret"`
+	StopBefore bool     `json:"stopBefore"`
+	TaskID     string   `json:"taskID"`
+	FileName   string   `json:"fileName"`
+	Args       []string `json:"args"`
 
 	Description string `json:"description"`
 }

agent/app/dto/common_req.go

@@ -2,8 +2,7 @@ package dto
 
 type SearchWithPage struct {
 	PageInfo
-	Info            string `json:"info"`
-	ExcludeAppStore bool   `json:"excludeAppStore"`
+	Info string `json:"info"`
 }
 
 type SearchPageWithType struct {

agent/app/dto/common_res.go

@@ -6,10 +6,9 @@ type PageResult struct {
 }
 
 type Response struct {
-	Code      int         `json:"code"`
-	ErrorCode string      `json:"errorCode,omitempty"`
-	Message   string      `json:"message"`
-	Data      interface{} `json:"data"`
+	Code    int         `json:"code"`
+	Message string      `json:"message"`
+	Data    interface{} `json:"data"`
 }
 
 type Options struct {

agent/app/dto/container.go

@@ -21,16 +21,13 @@ type InspectReq struct {
 }
 
 type ContainerInfo struct {
-	LatestVersion string `json:"latestVersion"`
-	TargetImage   string `json:"targetImage"`
-	HasUpdate     bool   `json:"hasUpdate"`
-	ContainerID   string `json:"containerID"`
-	Name          string `json:"name"`
-	ImageId       string `json:"imageID"`
-	ImageName     string `json:"imageName"`
-	CreateTime    string `json:"createTime"`
-	State         string `json:"state"`
-	RunTime       string `json:"runTime"`
+	ContainerID string `json:"containerID"`
+	Name        string `json:"name"`
+	ImageId     string `json:"imageID"`
+	ImageName   string `json:"imageName"`
+	CreateTime  string `json:"createTime"`
+	State       string `json:"state"`
+	RunTime     string `json:"runTime"`
 
 	Network []string `json:"network"`
 	Ports   []string `json:"ports"`
@@ -137,15 +134,10 @@ type ExtraHost struct {
 	IP       string `json:"ip"`
 }
 type ContainerNetwork struct {
-	Network      string            `json:"network"`
-	Ipv4         string            `json:"ipv4"`
-	Ipv6         string            `json:"ipv6"`
-	MacAddr      string            `json:"macAddr"`
-	Links        []string          `json:"links"`
-	Aliases      []string          `json:"aliases"`
-	DriverOpts   map[string]string `json:"driverOpts"`
-	GwPriority   int               `json:"gwPriority"`
-	LinkLocalIPs []string          `json:"linkLocalIPs"`
+	Network string `json:"network"`
+	Ipv4    string `json:"ipv4"`
+	Ipv6    string `json:"ipv6"`
+	MacAddr string `json:"macAddr"`
 }
 
 type ContainerCreateByCommand struct {
@@ -174,8 +166,7 @@ type ContainerItemStats struct {
 	BuildCacheReclaimable int64 `json:"buildCacheReclaimable"`
 }
 type ContainerListStats struct {
-	ContainerID   string `json:"containerID"`
-	ContainerName string `json:"containerName"`
+	ContainerID string `json:"containerID"`
 
 	CPUTotalUsage uint64  `json:"cpuTotalUsage"`
 	SystemUsage   uint64  `json:"systemUsage"`
@@ -304,7 +295,6 @@ type ComposeInfo struct {
 	ConfigFile        string             `json:"configFile"`
 	Workdir           string             `json:"workdir"`
 	ComposeFileExists bool               `json:"composeFileExists"`
-	IsPinned          bool               `json:"isPinned"`
 	Path              string             `json:"path"`
 	Containers        []ComposeContainer `json:"containers"`
 	Env               string             `json:"env"`
@@ -319,7 +309,6 @@ type ComposeContainer struct {
 type ComposeCreate struct {
 	TaskID    string `json:"taskID"`
 	Name      string `json:"name"`
-	DirName   string `json:"dirName"`
 	From      string `json:"from" validate:"required,oneof=edit path template"`
 	File      string `json:"file"`
 	Path      string `json:"path"`
@@ -330,7 +319,7 @@ type ComposeCreate struct {
 type ComposeOperation struct {
 	Name      string `json:"name" validate:"required"`
 	Path      string `json:"path"`
-	Operation string `json:"operation" validate:"required,oneof=up start restart stop down delete rebuild"`
+	Operation string `json:"operation" validate:"required,oneof=up start restart stop down delete"`
 	WithFile  bool   `json:"withFile"`
 	Force     bool   `json:"force"`
 }
@@ -343,10 +332,6 @@ type ComposeUpdate struct {
 	Env        string `json:"env"`
 	ForcePull  bool   `json:"forcePull"`
 }
-type ComposePin struct {
-	Name     string `json:"name" validate:"required"`
-	IsPinned bool   `json:"isPinned"`
-}
 type ComposeLogClean struct {
 	Name       string `json:"name" validate:"required"`
 	Path       string `json:"path" validate:"required"`

agent/app/dto/cronjob.go

@@ -51,10 +51,9 @@ type CronjobOperate struct {
 	Secret            string `json:"secret"`
 	Args              string `json:"args"`
 
-	AlertCount       uint   `json:"alertCount"`
-	AlertTitle       string `json:"alertTitle"`
-	AlertMethod      string `json:"alertMethod"`
-	AlertTriggerMode string `json:"alertTriggerMode" validate:"omitempty,oneof=failed success both"`
+	AlertCount  uint   `json:"alertCount"`
+	AlertTitle  string `json:"alertTitle"`
+	AlertMethod string `json:"alertMethod"`
 
 	CleanLogConfig
 }
@@ -127,8 +126,7 @@ type CronjobInfo struct {
 	Secret           string `json:"secret"`
 	Args             string `json:"args"`
 
-	AlertCount       uint   `json:"alertCount"`
-	AlertTriggerMode string `json:"alertTriggerMode"`
+	AlertCount uint `json:"alertCount"`
 }
 
 type CronjobImport struct {
@@ -171,10 +169,9 @@ type CronjobTrans struct {
 	SourceAccounts  []string `json:"sourceAccounts"`
 	DownloadAccount string   `json:"downloadAccount"`
 
-	AlertCount       uint   `json:"alertCount"`
-	AlertTitle       string `json:"alertTitle"`
-	AlertMethod      string `json:"alertMethod"`
-	AlertTriggerMode string `json:"alertTriggerMode" validate:"omitempty,oneof=failed success both"`
+	AlertCount  uint   `json:"alertCount"`
+	AlertTitle  string `json:"alertTitle"`
+	AlertMethod string `json:"alertMethod"`
 }
 type TransHelper struct {
 	Name       string `json:"name"`
@@ -200,7 +197,6 @@ type SearchRecord struct {
 
 type Record struct {
 	ID         uint   `json:"id"`
-	CronjobID  uint   `json:"cronjobID"`
 	TaskID     string `json:"taskID"`
 	StartTime  string `json:"startTime"`
 	Records    string `json:"records"`

agent/app/dto/dashboard.go

@@ -31,27 +31,7 @@ type DashboardBase struct {
 }
 
 type ChangeQuicks struct {
-	Quicks []QuickVisibility `json:"quicks" validate:"required,dive"`
-}
-
-type QuickVisibility struct {
-	ID     uint `json:"id" validate:"required"`
-	IsShow bool `json:"isShow"`
-}
-
-type QuickDirectoryCreate struct {
-	Path  string `json:"path" validate:"required"`
-	Alias string `json:"alias"`
-}
-
-type QuickDirectoryDelete struct {
-	ID     uint `json:"id" validate:"required"`
-	Legacy bool `json:"legacy"`
-}
-
-type QuickDirectoryUpdate struct {
-	QuickDirectoryDelete
-	QuickDirectoryCreate
+	Quicks []QuickJump `json:"quicks"`
 }
 
 type QuickJump struct {
@@ -99,9 +79,8 @@ type NodeCurrent struct {
 }
 
 type DashboardCurrent struct {
-	Uptime          uint64      `json:"uptime"`
-	TimeSinceUptime string      `json:"timeSinceUptime"`
-	RunningTime     RunningTime `json:"runningTime"`
+	Uptime          uint64 `json:"uptime"`
+	TimeSinceUptime string `json:"timeSinceUptime"`
 
 	Procs uint64 `json:"procs"`
 
@@ -141,7 +120,6 @@ type DashboardCurrent struct {
 	NetBytesRecv uint64 `json:"netBytesRecv"`
 
 	GPUData []GPUInfo `json:"gpuData"`
-	NPUData []NPUInfo `json:"npuData"`
 	XPUData []XPUInfo `json:"xpuData"`
 
 	TopCPUItems []Process `json:"topCPUItems"`
@@ -150,13 +128,6 @@ type DashboardCurrent struct {
 	ShotTime time.Time `json:"shotTime"`
 }
 
-type RunningTime struct {
-	Days    uint64 `json:"days"`
-	Hours   uint64 `json:"hours"`
-	Minutes uint64 `json:"minutes"`
-	Seconds uint64 `json:"seconds"`
-}
-
 type AppLauncherSync struct {
 	Keys []string `json:"keys"`
 }
@@ -177,12 +148,8 @@ type DiskInfo struct {
 }
 
 type GPUInfo struct {
-	Type             string `json:"type"`
 	Index            uint   `json:"index"`
-	NPUIndex         uint   `json:"npuIndex"`
-	ChipIndex        uint   `json:"chipIndex"`
 	ProductName      string `json:"productName"`
-	BusID            string `json:"busID"`
 	GPUUtil          string `json:"gpuUtil"`
 	Temperature      string `json:"temperature"`
 	PerformanceState string `json:"performanceState"`
@@ -195,27 +162,6 @@ type GPUInfo struct {
 	FanSpeed         string `json:"fanSpeed"`
 }
 
-type NPUInfo struct {
-	Type           string `json:"type"`
-	Index          uint   `json:"index"`
-	NPUIndex       uint   `json:"npuIndex"`
-	ChipIndex      uint   `json:"chipIndex"`
-	ProductName    string `json:"productName"`
-	BusID          string `json:"busID"`
-	Health         string `json:"health"`
-	Temperature    string `json:"temperature"`
-	PowerDraw      string `json:"powerDraw"`
-	AICore         string `json:"aiCore"`
-	MemUsed        string `json:"memUsed"`
-	MemTotal       string `json:"memTotal"`
-	MemoryUsed     string `json:"memoryUsed"`
-	MemoryTotal    string `json:"memoryTotal"`
-	HBMUsed        string `json:"hbmUsed"`
-	HBMTotal       string `json:"hbmTotal"`
-	HugepagesUsed  string `json:"hugepagesUsed"`
-	HugepagesTotal string `json:"hugepagesTotal"`
-}
-
 type AppLauncher struct {
 	Key         string `json:"key"`
 	Type        string `json:"type"`
@@ -248,13 +194,11 @@ type LauncherOption struct {
 }
 
 type XPUInfo struct {
-	DeviceID      int    `json:"deviceID"`
-	DeviceName    string `json:"deviceName"`
-	PciBdfAddress string `json:"pciBdfAddress"`
-	Memory        string `json:"memory"`
-	Temperature   string `json:"temperature"`
-	GPUUtil       string `json:"gpuUtil"`
-	MemoryUsed    string `json:"memoryUsed"`
-	Power         string `json:"power"`
-	MemoryUtil    string `json:"memoryUtil"`
+	DeviceID    int    `json:"deviceID"`
+	DeviceName  string `json:"deviceName"`
+	Memory      string `json:"memory"`
+	Temperature string `json:"temperature"`
+	MemoryUsed  string `json:"memoryUsed"`
+	Power       string `json:"power"`
+	MemoryUtil  string `json:"memoryUtil"`
 }

agent/app/dto/database.go

@@ -22,10 +22,6 @@ type DBBaseInfo struct {
 	Port          int64  `json:"port"`
 }
 
-type RedisCliInstall struct {
-	TaskID string `json:"taskID" validate:"omitempty,uuid"`
-}
-
 // mysql
 type MysqlDBSearch struct {
 	PageInfo
@@ -64,84 +60,25 @@ type MysqlDBCreate struct {
 	Database    string `json:"database" validate:"required"`
 	Format      string `json:"format" validate:"required"`
 	Collation   string `json:"collation"`
-	Username    string `json:"username"`
-	Password    string `json:"password"`
+	Username    string `json:"username" validate:"required"`
+	Password    string `json:"password" validate:"required"`
 	Permission  string `json:"permission" validate:"required"`
 	Description string `json:"description"`
 }
 
-type MysqlUser struct {
-	Username    string `json:"username"`
-	Host        string `json:"host"`
-	Password    string `json:"password"`
-	Description string `json:"description"`
-	IsDelete    bool   `json:"isDelete"`
-}
-
-type MysqlGrant struct {
-	Database string `json:"database"`
-	Username string `json:"username"`
-	Host     string `json:"host"`
-}
-
-type MysqlGrantSummarySearch struct {
-	Database string   `json:"database" validate:"required"`
-	DBs      []string `json:"dbs" validate:"required"`
-}
-
-type MysqlUserSearch struct {
-	Database string `json:"database" validate:"required"`
-}
-
-type MysqlUserCreate struct {
-	Database    string   `json:"database" validate:"required"`
-	Username    string   `json:"username" validate:"required"`
-	Password    string   `json:"password" validate:"required"`
-	Host        string   `json:"host" validate:"required"`
-	Description string   `json:"description"`
-	DBs         []string `json:"dbs"`
-}
-
-type MysqlUserDelete struct {
-	Database string `json:"database" validate:"required"`
-	Username string `json:"username" validate:"required"`
-	Host     string `json:"host" validate:"required"`
-}
-
-type MysqlUserUpdate struct {
-	Database    string `json:"database" validate:"required"`
-	Username    string `json:"username" validate:"required"`
-	Host        string `json:"host" validate:"required"`
-	NewHost     string `json:"newHost" validate:"required"`
-	Description string `json:"description"`
-}
-
-type MysqlUserPassword struct {
-	Database string `json:"database" validate:"required"`
-	Username string `json:"username" validate:"required"`
-	Host     string `json:"host" validate:"required"`
-	Password string `json:"password" validate:"required"`
-}
-
-type MysqlGrantCreate struct {
-	Database string `json:"database" validate:"required"`
-	DB       string `json:"db" validate:"required"`
-	Username string `json:"username" validate:"required"`
-	Host     string `json:"host" validate:"required"`
-}
-
-type MysqlGrantDelete struct {
-	Database string `json:"database" validate:"required"`
-	DB       string `json:"db" validate:"required"`
-	Username string `json:"username" validate:"required"`
-	Host     string `json:"host" validate:"required"`
-}
-
 type MysqlFormatCollationOption struct {
 	Format     string   `json:"format"`
 	Collations []string `json:"collations"`
 }
 
+type BindUser struct {
+	Database   string `json:"database" validate:"required"`
+	DB         string `json:"db" validate:"required"`
+	Username   string `json:"username" validate:"required"`
+	Password   string `json:"password" validate:"required"`
+	Permission string `json:"permission" validate:"required"`
+}
+
 type MysqlLoadDB struct {
 	From     string `json:"from" validate:"required,oneof=local remote"`
 	Type     string `json:"type" validate:"required,oneof=mysql mariadb mysql-cluster"`

agent/app/dto/firewall.go

@@ -1,354 +1,113 @@
 package dto
 
-import (
-	"github.com/1Panel-dev/1Panel/agent/utils/firewall"
-	dockerfirewall "github.com/1Panel-dev/1Panel/agent/utils/firewall/docker_guard"
-	"github.com/1Panel-dev/1Panel/agent/utils/firewall/filter"
-	"github.com/1Panel-dev/1Panel/agent/utils/firewall/forwarding"
-)
-
-type FirewallSubsystemStatus struct {
-	IPv6Enabled     bool                        `json:"ipv6Enabled"`
-	Name            string                      `json:"name"`
-	Backend         string                      `json:"backend"`
-	ConflictBackend string                      `json:"conflictBackend,omitempty"`
-	IsExist         bool                        `json:"isExist"`
-	IsActive        bool                        `json:"isActive"`
-	IsInit          bool                        `json:"isInit"`
-	IsBind          bool                        `json:"isBind"`
-	Version         string                      `json:"version"`
-	PingStatus      string                      `json:"pingStatus"`
-	Message         string                      `json:"message,omitempty"`
-	Reason          string                      `json:"reason,omitempty"`
-	LifecycleTaskID string                      `json:"lifecycleTaskID,omitempty"`
-	IPv4            FirewallBackendFamilyStatus `json:"ipv4"`
-	IPv6            FirewallBackendFamilyStatus `json:"ipv6"`
+type FirewallBaseInfo struct {
+	Name       string `json:"name"`
+	IsExist    bool   `json:"isExist"`
+	IsActive   bool   `json:"isActive"`
+	IsInit     bool   `json:"isInit"`
+	IsBind     bool   `json:"isBind"`
+	Version    string `json:"version"`
+	PingStatus string `json:"pingStatus"`
 }
 
-type FirewallLifecycleOperation struct {
-	BackupFile        string `json:"backupFile,omitempty" validate:"omitempty,max=255"`
+type RuleSearch struct {
+	PageInfo
+	Info     string `json:"info"`
+	Status   string `json:"status"`
+	Strategy string `json:"strategy"`
+	Type     string `json:"type" validate:"required"`
+}
+
+type FirewallOperation struct {
 	Operation         string `json:"operation" validate:"required,oneof=start stop restart disableBanPing enableBanPing"`
 	WithDockerRestart bool   `json:"withDockerRestart"`
 }
 
-type FirewallLifecycleOperationResponse struct {
-	TaskID string `json:"taskID,omitempty"`
-	Queued bool   `json:"queued"`
+type PortRuleOperate struct {
+	ID        uint   `json:"id"`
+	Operation string `json:"operation" validate:"required,oneof=add remove"`
+	Chain     string `json:"chain"`
+	Address   string `json:"address"`
+	Port      string `json:"port" validate:"required"`
+	Protocol  string `json:"protocol" validate:"required,oneof=tcp udp tcp/udp"`
+	Strategy  string `json:"strategy" validate:"required,oneof=accept drop"`
+
+	Description string `json:"description"`
 }
 
-type FirewallBackendOption struct {
-	Name           string                      `json:"name"`
-	Installed      bool                        `json:"installed"`
-	Active         bool                        `json:"active"`
-	Initialized    bool                        `json:"initialized"`
-	Bound          bool                        `json:"bound"`
-	Supported      bool                        `json:"supported"`
-	SupportReason  string                      `json:"supportReason,omitempty"`
-	Implementation string                      `json:"implementation,omitempty"`
-	Message        string                      `json:"message,omitempty"`
-	IPv4           FirewallBackendFamilyStatus `json:"ipv4"`
-	IPv6           FirewallBackendFamilyStatus `json:"ipv6"`
+type ForwardRuleOperate struct {
+	ForceDelete bool `json:"forceDelete"`
+	Rules       []struct {
+		Operation  string `json:"operation" validate:"required,oneof=add remove"`
+		Num        string `json:"num"`
+		Protocol   string `json:"protocol" validate:"required,oneof=tcp udp tcp/udp"`
+		Interface  string `json:"interface"`
+		Port       string `json:"port" validate:"required"`
+		TargetIP   string `json:"targetIP"`
+		TargetPort string `json:"targetPort" validate:"required"`
+	} `json:"rules"`
 }
 
-type FirewallBackendFamilyStatus struct {
-	Partial      bool     `json:"partial"`
-	Available    bool     `json:"available"`
-	Initialized  bool     `json:"initialized"`
-	Bound        bool     `json:"bound"`
-	Reason       string   `json:"reason,omitempty"`
-	RAInterfaces []string `json:"raInterfaces,omitempty"`
+type UpdateFirewallDescription struct {
+	Type     string `json:"type"`
+	Chain    string `json:"chain"`
+	SrcIP    string `json:"srcIP"`
+	DstIP    string `json:"dstIP"`
+	SrcPort  string `json:"srcPort"`
+	DstPort  string `json:"dstPort"`
+	Protocol string `json:"protocol"`
+	Strategy string `json:"strategy" validate:"required,oneof=accept drop"`
+
+	Description string `json:"description"`
 }
 
-type FirewallBackendGroup struct {
-	Selected string                  `json:"selected"`
-	Current  string                  `json:"current,omitempty"`
-	Options  []FirewallBackendOption `json:"options"`
+type AddrRuleOperate struct {
+	ID        uint   `json:"id"`
+	Operation string `json:"operation" validate:"required,oneof=add remove"`
+	Address   string `json:"address"  validate:"required"`
+	Strategy  string `json:"strategy" validate:"required,oneof=accept drop"`
+
+	Description string `json:"description"`
 }
 
-type FirewallSettings struct {
-	IPv6Enabled   bool                   `json:"ipv6Enabled"`
-	System        FirewallBackendGroup   `json:"system"`
-	Forwarding    FirewallBackendGroup   `json:"forwarding"`
-	Docker        FirewallBackendGroup   `json:"docker"`
-	PingStatus    string                 `json:"pingStatus"`
-	PortWhitelist []filter.PortWhitelist `json:"portWhiteList"`
-	PanelPort     string                 `json:"panelPort"`
-	SSHPort       string                 `json:"sshPort"`
+type PortRuleUpdate struct {
+	OldRule PortRuleOperate `json:"oldRule"`
+	NewRule PortRuleOperate `json:"newRule"`
 }
 
-type FirewallPortWhitelistCreate struct {
-	Rule filter.PortWhitelist `json:"rule" validate:"required"`
+type AddrRuleUpdate struct {
+	OldRule AddrRuleOperate `json:"oldRule"`
+	NewRule AddrRuleOperate `json:"newRule"`
 }
 
-type FirewallPortWhitelistUpdate struct {
-	OldRule filter.PortWhitelist `json:"oldRule" validate:"required"`
-	Rule    filter.PortWhitelist `json:"rule" validate:"required"`
+type BatchRuleOperate struct {
+	Type  string            `json:"type" validate:"required"`
+	Rules []PortRuleOperate `json:"rules"`
 }
 
-type FirewallPortWhitelistDelete struct {
-	Rule *filter.PortWhitelist `json:"rule" validate:"required"`
+type IptablesOp struct {
+	Name    string `json:"name" validate:"required,oneof=1PANEL_INPUT 1PANEL_OUTPUT 1PANEL_BASIC"`
+	Operate string `json:"operate" validate:"required,oneof=init-base init-forward init-advance bind-base unbind-base bind unbind"`
 }
 
-type FirewallBackendOperation struct {
-	Subsystem string `json:"subsystem" validate:"required,oneof=system forwarding docker"`
-	Backend   string `json:"backend" validate:"required,oneof=firewalld ufw iptables nftables"`
-	Operation string `json:"operation" validate:"required,oneof=select initialize cleanup"`
+type IptablesRuleOp struct {
+	Operation   string `json:"operation" validate:"required,oneof=add remove"`
+	ID          uint   `json:"id"`
+	Chain       string `json:"chain" validate:"required,oneof=1PANEL_BASIC 1PANEL_BASIC_BEFORE 1PANEL_INPUT 1PANEL_OUTPUT"`
+	Protocol    string `json:"protocol"`
+	SrcIP       string `json:"srcIP"`
+	SrcPort     uint   `json:"srcPort"`
+	DstIP       string `json:"dstIP"`
+	DstPort     uint   `json:"dstPort"`
+	Strategy    string `json:"strategy" validate:"required,oneof=accept drop reject"`
+	Description string `json:"description"`
 }
 
-type FirewallIPv6Operation struct {
-	Status string `json:"status" validate:"required,oneof=Enable Disable"`
+type IptablesBatchOperate struct {
+	Rules []IptablesRuleOp `json:"rules"`
 }
 
-type FirewallFamilyOperation struct {
-	Subsystem string `json:"subsystem" validate:"required,oneof=system forwarding docker"`
-	Backend   string `json:"backend" validate:"required,oneof=iptables nftables"`
-	Family    string `json:"family" validate:"required,oneof=ipv4 ipv6"`
-	Operation string `json:"operation" validate:"required,oneof=initialize repair bind"`
-}
-
-type FilterChainOperation struct {
-	Name    string `json:"name" validate:"required,eq=1PANEL_BASIC"`
-	Operate string `json:"operate" validate:"required,oneof=init-base bind-base unbind-base"`
-	TaskID  string `json:"taskID,omitempty" validate:"omitempty,max=64"`
-}
-
-type FilterChainOperationResponse struct {
-	TaskID string `json:"taskID"`
-	Queued bool   `json:"queued"`
-}
-
-type FirewallInitializationTask struct {
-	BackupFile string `json:"backupFile,omitempty" validate:"omitempty,max=255"`
-	TaskID     string `json:"taskID,omitempty" validate:"omitempty,max=64"`
-}
-
-type FirewallSystemPort = firewall.SystemPort
-
-type FirewallRuleInventoryResponse struct {
-	IPv4Range filter.PositionRange   `json:"ipv4Range"`
-	IPv6Range filter.PositionRange   `json:"ipv6Range"`
-	Total     int64                  `json:"total"`
-	AllTotal  int64                  `json:"allTotal"`
-	Items     []filter.InventoryItem `json:"items"`
-	Notices   []filter.ScopeNotice   `json:"notices,omitempty"`
-}
-
-type FirewallRuleBackup struct {
-	Name       string          `json:"name"`
-	Provider   filter.Provider `json:"provider"`
-	RuleCount  int             `json:"ruleCount"`
-	ModifiedAt int64           `json:"modifiedAt"`
-}
-
-type FirewallRuleBackups struct {
-	Directory string               `json:"directory"`
-	Files     []FirewallRuleBackup `json:"files"`
-}
-
-type FirewallRuleResetResponse struct {
-	BackupPath string `json:"backupPath"`
-	Removed    int    `json:"removed"`
-	Disabled   bool   `json:"disabled"`
-}
-
-type FirewallRuleReset struct {
-	Subsystem         string          `json:"subsystem,omitempty" validate:"omitempty,oneof=system forwarding docker"`
-	Backup            *bool           `json:"backup,omitempty" default:"true"`
-	Provider          filter.Provider `json:"provider,omitempty" validate:"omitempty,oneof=firewalld ufw iptables nftables"`
-	WithDockerRestart bool            `json:"withDockerRestart"`
-}
-
-type FirewallRuleInventory struct {
-	PageInfo
-	Scope         filter.Scope    `json:"scope,omitempty"`
-	Scopes        []filter.Scope  `json:"scopes,omitempty" validate:"max=16"`
-	All           bool            `json:"all,omitempty"`
-	Info          string          `json:"info"`
-	Families      []filter.Family `json:"families,omitempty" validate:"omitempty,dive,oneof=ipv4 ipv6"`
-	Actions       []string        `json:"actions,omitempty" validate:"omitempty,dive,oneof=accept deny"`
-	ExcludeChains []string        `json:"excludeChains,omitempty" validate:"omitempty,dive,oneof=1PANEL_BASIC_BEFORE 1PANEL_BASIC 1PANEL_BASIC_AFTER"`
-}
-
-type FirewallNativeDetail struct {
-	Provider   filter.Provider   `json:"provider" validate:"required,oneof=firewalld ufw"`
-	NativeKind filter.NativeKind `json:"nativeKind" validate:"required,oneof=zone_service ufw_application"`
-	Name       string            `json:"name" validate:"required"`
-	Permanent  bool              `json:"permanent"`
-}
-
-type DockerPortGuardBase struct {
-	IPv6Enabled bool                        `json:"ipv6Enabled"`
-	Name        string                      `json:"name"`
-	Version     string                      `json:"version"`
-	IsExist     bool                        `json:"isExist"`
-	Initialized bool                        `json:"initialized"`
-	Bound       bool                        `json:"bound"`
-	IPv4        DockerPortGuardFamilyStatus `json:"ipv4"`
-	IPv6        DockerPortGuardFamilyStatus `json:"ipv6"`
-	Backend     string                      `json:"backend"`
-	Message     string                      `json:"message,omitempty"`
-}
-
-type DockerPortGuardFamilyStatus struct {
-	Partial     bool   `json:"partial"`
-	State       string `json:"state"`
-	Reason      string `json:"reason,omitempty"`
-	Initialized bool   `json:"initialized"`
-	Bound       bool   `json:"bound"`
-	Effective   bool   `json:"effective"`
-}
-
-type DockerPortGuardEndpoint struct {
-	Family           string   `json:"family"`
-	HostIP           string   `json:"hostIP"`
-	HostPort         uint16   `json:"hostPort"`
-	Protocol         string   `json:"protocol"`
-	ContainerID      string   `json:"containerID"`
-	ContainerName    string   `json:"containerName"`
-	ContainerState   string   `json:"containerState,omitempty"`
-	ContainerPort    uint16   `json:"containerPort"`
-	Compose          string   `json:"compose,omitempty"`
-	Application      string   `json:"application,omitempty"`
-	PolicyUUID       string   `json:"policyUUID,omitempty"`
-	Mode             string   `json:"mode,omitempty"`
-	Sources          []string `json:"sources"`
-	Effective        bool     `json:"effective"`
-	TrafficPath      string   `json:"trafficPath"`
-	ManagementTarget string   `json:"managementTarget"`
-	ManagementReason string   `json:"managementReason,omitempty"`
-}
-
-type DockerPortGuardPortGroup struct {
-	Key       string                    `json:"key"`
-	Label     string                    `json:"label"`
-	Endpoint  DockerPortGuardEndpoint   `json:"endpoint"`
-	Endpoints []DockerPortGuardEndpoint `json:"endpoints"`
-}
-
-type DockerPortGuardContainer struct {
-	Key         string                     `json:"key"`
-	Name        string                     `json:"name"`
-	Compose     string                     `json:"compose,omitempty"`
-	Application string                     `json:"application,omitempty"`
-	Endpoints   []DockerPortGuardEndpoint  `json:"endpoints"`
-	PortGroups  []DockerPortGuardPortGroup `json:"portGroups"`
-}
-
-type DockerPortGuardList struct {
-	Base           DockerPortGuardBase        `json:"base"`
-	Containers     []DockerPortGuardContainer `json:"containers"`
-	OrphanPolicies []DockerPortGuardEndpoint  `json:"orphanPolicies"`
-}
-
-type DockerPortGuardEndpointIdentity struct {
-	Family   string `json:"family" validate:"required,oneof=ipv4 ipv6"`
-	HostIP   string `json:"hostIP" validate:"required,max=45"`
-	HostPort uint16 `json:"hostPort" validate:"required,min=1"`
-	Protocol string `json:"protocol" validate:"required,oneof=tcp udp"`
-}
-
-type DockerPortGuardPolicyBatch struct {
-	Policies []DockerPortGuardPolicy `json:"policies" validate:"required,min=1,dive"`
-	Import   bool                    `json:"import"`
-}
-
-type DockerPortGuardPolicyBatchDelete struct {
-	UUIDs []string `json:"uuids" validate:"required,min=1,dive,required,max=64"`
-}
-
-type DockerPortGuardPolicy struct {
-	DockerPortGuardEndpointIdentity
-	Mode    string   `json:"mode" validate:"required,oneof=deny_sources allow_sources deny_all accept_sources accept_all"`
-	Sources []string `json:"sources" validate:"dive,required,max=64"`
-}
-
-type DockerPortGuardOperation struct {
-	BackupFile string `json:"backupFile,omitempty" validate:"omitempty,max=255"`
-	Operation  string `json:"operation" validate:"required,oneof=initialize bind unbind"`
-	TaskID     string `json:"taskID,omitempty" validate:"omitempty,max=64"`
-}
-
-type FirewallRuleCreateItem struct {
-	Raw         string              `json:"raw,omitempty"`
-	ParseStatus filter.ParseStatus  `json:"parseStatus,omitempty"`
-	Rule        filter.FirewallRule `json:"rule" validate:"required"`
-	SourceKind  string              `json:"sourceKind" validate:"omitempty,oneof=user imported"`
-}
-
-type FirewallRuleCreate struct {
-	BackupFile string                   `json:"backupFile,omitempty" validate:"omitempty,max=255"`
-	Initialize bool                     `json:"initialize"`
-	Items      []FirewallRuleCreateItem `json:"items" validate:"dive"`
-}
-
-type FirewallRuleCreateResponse struct {
-	TaskID    string                      `json:"taskID,omitempty"`
-	Queued    bool                        `json:"queued,omitempty"`
-	Succeeded int                         `json:"succeeded"`
-	Failed    int                         `json:"failed"`
-	Skipped   int                         `json:"skipped"`
-	Errors    []FirewallRuleCreateFailure `json:"errors,omitempty"`
-}
-
-type FirewallRuleCreateFailure struct {
-	Index  int                 `json:"index"`
-	Status string              `json:"status"`
-	Rule   filter.FirewallRule `json:"rule"`
-	Error  string              `json:"error,omitempty"`
-}
-
-type FirewallRuleDelete struct {
-	Targets []FirewallRuleDeleteItem `json:"targets" validate:"required,min=1,dive"`
-}
-
-type FirewallRuleDeleteItem struct {
-	FirewallRuleDeleteTarget
-	Observed filter.ObservedRule `json:"observed" validate:"required"`
-}
-
-type FirewallRuleDeleteTarget struct {
-	Scope       filter.Scope `json:"scope" validate:"required"`
-	InstanceKey string       `json:"instanceKey" validate:"required,max=128"`
-}
-
-type FirewallRuleDeleteResponse struct {
-	TaskID    string                      `json:"taskID,omitempty"`
-	Queued    bool                        `json:"queued,omitempty"`
-	Succeeded int                         `json:"succeeded"`
-	Failed    int                         `json:"failed"`
-	Errors    []FirewallRuleDeleteFailure `json:"errors,omitempty"`
-}
-
-type FirewallRuleDeleteFailure struct {
-	Index       int    `json:"index"`
-	InstanceKey string `json:"instanceKey"`
-	Error       string `json:"error"`
-}
-
-type FirewallRuleUpdate struct {
-	FirewallRuleDeleteTarget
-	Rule        *filter.FirewallRule `json:"rule,omitempty" validate:"required_without_all=Description OrderIndex Priority,excluded_with=Description OrderIndex Priority"`
-	Description *string              `json:"description,omitempty" validate:"excluded_with=Rule"`
-	OrderIndex  *int64               `json:"orderIndex,omitempty" validate:"excluded_with=Rule Priority"`
-	Priority    *int                 `json:"priority,omitempty" validate:"excluded_with=Rule OrderIndex"`
-}
-
-type FirewallRuleReorder struct {
-	FirewallRuleDeleteTarget
-	TargetPosition *int64 `json:"targetPosition"`
-	Priority       *int   `json:"priority"`
-}
-
-type FirewallRuleExportItem struct {
-	filter.FirewallRule
-	Raw         string             `json:"raw,omitempty"`
-	ParseStatus filter.ParseStatus `json:"parseStatus,omitempty"`
-}
-
-type FirewallSubsystemBackup struct {
-	Families   []string                        `json:"families,omitempty"`
-	Subsystem  string                          `json:"subsystem"`
-	Provider   filter.Provider                 `json:"provider"`
-	Forwarding []forwarding.Rule               `json:"forwarding"`
-	Docker     *dockerfirewall.PolicyInventory `json:"docker,omitempty"`
+type IptablesChainStatus struct {
+	IsBind          bool   `json:"isBind"`
+	DefaultStrategy string `json:"defaultStrategy"`
 }

agent/app/dto/forwarding.go

@@ -1,43 +0,0 @@
-package dto
-
-type ForwardRuleSearch struct {
-	PageInfo
-	All      bool   `json:"all,omitempty"`
-	Info     string `json:"info"`
-	Status   string `json:"status"`
-	Strategy string `json:"strategy"`
-}
-
-type ForwardRule struct {
-	ID       uint   `json:"id"`
-	Chain    string `json:"chain"`
-	Family   string `json:"family"`
-	Address  string `json:"address"`
-	Port     string `json:"port"`
-	Protocol string `json:"protocol"`
-	Strategy string `json:"strategy"`
-
-	Num        string `json:"num"`
-	TargetIP   string `json:"targetIP"`
-	TargetPort string `json:"targetPort"`
-	Interface  string `json:"interface"`
-
-	UsedStatus  string `json:"usedStatus"`
-	Description string `json:"description"`
-}
-
-type ForwardRuleOperate struct {
-	Import bool                   `json:"import"`
-	Rules  []ForwardRuleOperation `json:"rules" validate:"required,min=1,dive"`
-}
-
-type ForwardRuleOperation struct {
-	Operation  string `json:"operation" validate:"required,oneof=add remove"`
-	Num        string `json:"num"`
-	Family     string `json:"family" validate:"omitempty,oneof=ipv4 ipv6"`
-	Protocol   string `json:"protocol" validate:"required,oneof=tcp udp tcp/udp"`
-	Interface  string `json:"interface"`
-	Port       string `json:"port" validate:"required"`
-	TargetIP   string `json:"targetIP"`
-	TargetPort string `json:"targetPort" validate:"required"`
-}

agent/app/dto/logs.go

@@ -1,8 +1,6 @@
 package dto
 
 import (
-	"time"
-
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 )
 
@@ -16,37 +14,3 @@ type SearchTaskLogReq struct {
 type TaskDTO struct {
 	model.Task
 }
-
-type SystemLogReq struct {
-	PageSize  int       `json:"pageSize" validate:"omitempty,min=1,max=500"`
-	Cursor    string    `json:"cursor"`
-	StartTime time.Time `json:"startTime"`
-	EndTime   time.Time `json:"endTime"`
-	Keyword   string    `json:"keyword"`
-	Priority  string    `json:"priority"`
-	Service   string    `json:"service"`
-}
-
-type SystemLogRes struct {
-	Source     string          `json:"source"`
-	Items      []SystemLogItem `json:"items"`
-	HasMore    bool            `json:"hasMore"`
-	NextCursor string          `json:"nextCursor"`
-}
-
-type SystemLogStatus struct {
-	Source                 string `json:"source"`
-	Version                string `json:"version"`
-	KeywordFilterSupported bool   `json:"keywordFilterSupported"`
-	Message                string `json:"message"`
-}
-
-type SystemLogItem struct {
-	Timestamp int64  `json:"-"`
-	Cursor    string `json:"-"`
-	Time      string `json:"time"`
-	Priority  string `json:"priority"`
-	Service   string `json:"service"`
-	Message   string `json:"message"`
-	Raw       string `json:"raw"`
-}

agent/app/dto/monitor.go

@@ -1,11 +1,6 @@
 package dto
 
-import (
-	"encoding/json"
-	"time"
-
-	"github.com/1Panel-dev/1Panel/agent/app/model"
-)
+import "time"
 
 type MonitorSearch struct {
 	Param     string    `json:"param" validate:"required,oneof=all cpu memory load io network"`
@@ -31,92 +26,50 @@ type Process struct {
 }
 
 type MonitorSetting struct {
-	GPUMonitorStatus     string `json:"gpuMonitorStatus"`
-	GPUMonitorStoreDays  string `json:"gpuMonitorStoreDays"`
-	GPUMonitorInterval   string `json:"gpuMonitorInterval"`
-	VLLMMonitorStatus    string `json:"vllmMonitorStatus"`
-	VLLMMonitorStoreDays string `json:"vllmMonitorStoreDays"`
-	VLLMMonitorInterval  string `json:"vllmMonitorInterval"`
-	MonitorStatus        string `json:"monitorStatus"`
-	MonitorStoreDays     string `json:"monitorStoreDays"`
-	MonitorInterval      string `json:"monitorInterval"`
-	DefaultNetwork       string `json:"defaultNetwork"`
-	DefaultIO            string `json:"defaultIO"`
+	MonitorStatus    string `json:"monitorStatus"`
+	MonitorStoreDays string `json:"monitorStoreDays"`
+	MonitorInterval  string `json:"monitorInterval"`
+	DefaultNetwork   string `json:"defaultNetwork"`
+	DefaultIO        string `json:"defaultIO"`
 }
 
 type MonitorSettingUpdate struct {
-	Key   string `json:"key" validate:"required,oneof=MonitorStatus MonitorStoreDays MonitorInterval GPUMonitorStatus GPUMonitorStoreDays GPUMonitorInterval VLLMMonitorStatus VLLMMonitorStoreDays VLLMMonitorInterval DefaultNetwork DefaultIO"`
+	Key   string `json:"key" validate:"required,oneof=MonitorStatus MonitorStoreDays MonitorInterval DefaultNetwork DefaultIO"`
 	Value string `json:"value"`
 }
 
 type MonitorGPUOptions struct {
-	Supported bool           `json:"supported"`
 	GPUType   string         `json:"gpuType"`
 	ChartHide []GPUChartHide `json:"chartHide"`
 	Options   []string       `json:"options"`
 }
 type GPUChartHide struct {
-	DeviceID    string `json:"deviceID"`
-	Legacy      bool   `json:"legacy"`
 	ProductName string `json:"productName"`
-	Type        string `json:"type"`
 	Process     bool   `json:"process"`
 	GPU         bool   `json:"gpu"`
 	Memory      bool   `json:"memory"`
 	Power       bool   `json:"power"`
-	PowerLimit  bool   `json:"powerLimit"`
 	Temperature bool   `json:"temperature"`
 	Speed       bool   `json:"speed"`
 }
 type MonitorGPUSearch struct {
-	Aggregation string    `json:"aggregation" validate:"omitempty,oneof=avg max"`
-	DeviceID    string    `json:"deviceID"`
-	Legacy      bool      `json:"legacy"`
 	ProductName string    `json:"productName"`
 	StartTime   time.Time `json:"startTime"`
 	EndTime     time.Time `json:"endTime"`
 }
 type MonitorGPUData struct {
-	MemoryActivity     []*float64 `json:"memoryActivity"`
-	EncoderUtil        []*float64 `json:"encoderUtil"`
-	DecoderUtil        []*float64 `json:"decoderUtil"`
-	JPEGUtil           []*float64 `json:"jpegUtil"`
-	OFAUtil            []*float64 `json:"ofaUtil"`
-	MediaUtil          []*float64 `json:"mediaUtil"`
-	ComputeUtil        []*float64 `json:"computeUtil"`
-	CopyUtil           []*float64 `json:"copyUtil"`
-	HotspotTemperature []*float64 `json:"hotspotTemperature"`
-	FanRPM             []*float64 `json:"fanRPM"`
-	AICPUUtil          []*float64 `json:"aiCPUUtil"`
-	CtrlCPUUtil        []*float64 `json:"ctrlCPUUtil"`
-	DDRUsed            []*float64 `json:"ddrUsed"`
-	DDRTotal           []*float64 `json:"ddrTotal"`
-	HBMUsed            []*float64 `json:"hbmUsed"`
-	HBMTotal           []*float64 `json:"hbmTotal"`
-	DDRBandwidth       []*float64 `json:"ddrBandwidth"`
-	HBMBandwidth       []*float64 `json:"hbmBandwidth"`
-	MemoryBandwidth    []*float64 `json:"memoryBandwidth"`
-	MediaFrequency     []*float64 `json:"mediaFrequency"`
-	HugepagesUsed      []*float64 `json:"hugepagesUsed"`
-	HugepagesTotal     []*float64 `json:"hugepagesTotal"`
+	Date             []time.Time `json:"date"`
+	GPUValue         []float64   `json:"gpuValue"`
+	TemperatureValue []float64   `json:"temperatureValue"`
+	PowerTotal       []float64   `json:"powerTotal"`
+	PowerUsed        []float64   `json:"powerUsed"`
+	PowerPercent     []float64   `json:"powerPercent"`
+	MemoryTotal      []float64   `json:"memoryTotal"`
+	MemoryUsed       []float64   `json:"memoryUsed"`
+	MemoryPercent    []float64   `json:"memoryPercent"`
+	SpeedValue       []int       `json:"speedValue"`
 
-	BucketSeconds          int64       `json:"bucketSeconds"`
-	SampleCount            int64       `json:"sampleCount"`
-	MemoryTemperatureValue []*float64  `json:"memoryTemperatureValue"`
-	FrequencyValue         []*float64  `json:"frequencyValue"`
-	MemoryFrequencyValue   []*float64  `json:"memoryFrequencyValue"`
-	Date                   []time.Time `json:"date"`
-	GPUValue               []*float64  `json:"gpuValue"`
-	TemperatureValue       []*float64  `json:"temperatureValue"`
-	PowerTotal             []*float64  `json:"powerTotal"`
-	PowerUsed              []*float64  `json:"powerUsed"`
-	PowerPercent           []*float64  `json:"powerPercent"`
-	MemoryTotal            []*float64  `json:"memoryTotal"`
-	MemoryUsed             []*float64  `json:"memoryUsed"`
-	MemoryPercent          []*float64  `json:"memoryPercent"`
-	SpeedValue             []*float64  `json:"speedValue"`
-
-	ProcessCount []*float64     `json:"processCount"`
+	ProcessCount []int          `json:"processCount"`
 	GPUProcesses [][]GPUProcess `json:"gpuProcesses"`
 }
 
@@ -126,34 +79,3 @@ type GPUProcess struct {
 	ProcessName string `json:"processName"`
 	UsedMemory  string `json:"usedMemory"`
 }
-
-type MonitorVLLMSearch struct {
-	Group        string    `json:"group" validate:"omitempty,oneof=overview latency requests"`
-	AppInstallID uint      `json:"appInstallID" validate:"required"`
-	StartTime    time.Time `json:"startTime" validate:"required"`
-	EndTime      time.Time `json:"endTime" validate:"required"`
-	Aggregation  string    `json:"aggregation" validate:"omitempty,oneof=avg max"`
-}
-
-type MonitorVLLMData struct {
-	SampleCount   int64               `json:"sampleCount"`
-	BucketSeconds int64               `json:"bucketSeconds"`
-	Points        []model.MonitorVLLM `json:"points"`
-}
-
-type MonitorVLLMCurrent struct {
-	AppInstallID uint `json:"appInstallID" validate:"required"`
-}
-
-type MonitorVLLMCurrentData struct {
-	model.MonitorVLLM
-	Metrics map[string]json.RawMessage `json:"metrics,omitempty"`
-}
-
-type MonitorVLLMClean struct {
-	AppInstallID uint `json:"appInstallID" validate:"required"`
-}
-
-type MonitorClean struct {
-	Type string `json:"type" validate:"required,oneof=host gpu"`
-}

agent/app/dto/nginx.go

@@ -1,8 +1,6 @@
 package dto
 
 import (
-	"time"
-
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 	"github.com/1Panel-dev/1Panel/agent/utils/nginx/components"
 )
@@ -51,19 +49,13 @@ const (
 	CACHE      NginxKey = "cache"
 	HttpPer    NginxKey = "http-per"
 	ProxyCache NginxKey = "proxy-cache"
-	Brotli     NginxKey = "brotli"
 )
 
-// BrotliKeys are served from the panel-managed http.d file rather than
-// nginx.conf, because the module is optional: its directives must disappear
-// together with the module, otherwise nginx refuses to start.
-var BrotliKeys = []string{"brotli", "brotli_comp_level", "brotli_min_length", "brotli_types"}
-
 var ScopeKeyMap = map[NginxKey][]string{
 	Index:     {"index"},
 	LimitConn: {"limit_conn", "limit_rate", "limit_conn_zone"},
 	SSL:       {"ssl_certificate", "ssl_certificate_key"},
-	HttpPer:   {"server_names_hash_bucket_size", "client_header_buffer_size", "client_max_body_size", "keepalive_timeout", "gzip", "gzip_min_length", "gzip_comp_level", "gzip_types", "gzip_vary", "gzip_proxied"},
+	HttpPer:   {"server_names_hash_bucket_size", "client_header_buffer_size", "client_max_body_size", "keepalive_timeout", "gzip", "gzip_min_length", "gzip_comp_level"},
 }
 
 var StaticFileKeyMap = map[NginxKey]struct {
@@ -95,41 +87,9 @@ var LBAlgorithms = map[string]struct{}{"ip_hash": {}, "least_conn": {}}
 var RealIPKeys = map[string]struct{}{"X-Forwarded-For": {}, "X-Real-IP": {}, "CF-Connecting-IP": {}}
 
 type NginxModule struct {
-	Name      string             `json:"name"`
-	Custom    bool               `json:"custom,omitempty"`
-	Script    string             `json:"script"`
-	Packages  []string           `json:"packages"`
-	Params    string             `json:"params"`
-	Enable    bool               `json:"enable"`
-	BuildMode string             `json:"buildMode,omitempty"`
-	Provider  string             `json:"provider,omitempty"`
-	LoadOrder int                `json:"loadOrder,omitempty"`
-	Builds    []NginxModuleBuild `json:"builds,omitempty"`
-	LastError string             `json:"lastError,omitempty"`
-}
-
-type NginxModuleBuild struct {
-	Provider  string                `json:"provider"`
-	BuildMode string                `json:"buildMode"`
-	Status    string                `json:"status"`
-	Hash      string                `json:"hash"`
-	Target    NginxModuleTarget     `json:"target"`
-	Artifacts []NginxModuleArtifact `json:"artifacts,omitempty"`
-	Error     string                `json:"error,omitempty"`
-	BuiltAt   time.Time             `json:"builtAt,omitempty"`
-}
-
-type NginxModuleTarget struct {
-	Key              string `json:"key"`
-	OpenRestyVersion string `json:"openrestyVersion"`
-	Architecture     string `json:"architecture"`
-	Image            string `json:"image,omitempty"`
-	ImageDigest      string `json:"imageDigest,omitempty"`
-	BuilderDigest    string `json:"builderDigest,omitempty"`
-}
-
-type NginxModuleArtifact struct {
-	Name     string `json:"name"`
-	Path     string `json:"path"`
-	Checksum string `json:"checksum"`
+	Name     string   `json:"name"`
+	Script   string   `json:"script"`
+	Packages []string `json:"packages"`
+	Params   string   `json:"params"`
+	Enable   bool     `json:"enable"`
 }

agent/app/dto/request/app.go

@@ -23,12 +23,6 @@ type AppInstallCreate struct {
 	Services    map[string]string      `json:"services"`
 	TaskID      string                 `json:"taskID"`
 
-	SyncModelAccount        *bool  `json:"syncModelAccount"`
-	ModelAccountBaseURLType string `json:"modelAccountBaseURLType" validate:"omitempty,oneof=container localhost systemIP custom"`
-	ModelAccountBaseURL     string `json:"modelAccountBaseURL"`
-
-	MCPPreserveWebsiteDir bool `json:"-"`
-
 	AppContainerConfig
 	NodePushConfig
 }
@@ -56,10 +50,6 @@ type AppContainerConfig struct {
 	Type          string  `json:"type"`
 	SpecifyIP     string  `json:"specifyIP"`
 	RestartPolicy string  `json:"restartPolicy" validate:"omitempty,oneof=always unless-stopped no on-failure"`
-
-	KeepServiceName         bool `json:"-"`
-	SkipComposeCommonConfig bool `json:"-"`
-	UseLifecycleScripts     bool `json:"-"`
 }
 
 type AppInstalledSearch struct {
@@ -89,33 +79,28 @@ type AppBackupDelete struct {
 }
 
 type AppInstalledOperate struct {
-	FeishuTransition *dto.AgentFeishuTransition `json:"feishuTransition,omitempty"`
-	InstallId        uint                       `json:"installId" validate:"required"`
-	BackupId         uint                       `json:"backupId"`
-	DetailId         uint                       `json:"detailId"`
-	Operate          constant.AppOperate        `json:"operate" validate:"required"`
-	ForceDelete      bool                       `json:"forceDelete"`
-	DeleteBackup     bool                       `json:"deleteBackup"`
-	DeleteDB         bool                       `json:"deleteDB"`
-	Backup           bool                       `json:"backup"`
-	PullImage        bool                       `json:"pullImage"`
-	DockerCompose    string                     `json:"dockerCompose"`
-	TaskID           string                     `json:"taskID"`
-	DeleteImage      bool                       `json:"deleteImage"`
-	Favorite         bool                       `json:"favorite"`
-
-	UseLifecycleScripts bool `json:"-"`
+	InstallId     uint                `json:"installId" validate:"required"`
+	BackupId      uint                `json:"backupId"`
+	DetailId      uint                `json:"detailId"`
+	Operate       constant.AppOperate `json:"operate" validate:"required"`
+	ForceDelete   bool                `json:"forceDelete"`
+	DeleteBackup  bool                `json:"deleteBackup"`
+	DeleteDB      bool                `json:"deleteDB"`
+	Backup        bool                `json:"backup"`
+	PullImage     bool                `json:"pullImage"`
+	DockerCompose string              `json:"dockerCompose"`
+	TaskID        string              `json:"taskID"`
+	DeleteImage   bool                `json:"deleteImage"`
+	Favorite      bool                `json:"favorite"`
 }
 
 type AppInstallUpgrade struct {
-	FeishuTransition *dto.AgentFeishuTransition `json:"feishuTransition,omitempty"`
-	InstallID        uint                       `json:"installId"`
-	DetailID         uint                       `json:"detailId"`
-	Backup           bool                       `json:"backup"`
-	PullImage        bool                       `json:"pullImage"`
-	DeleteImage      bool                       `json:"deleteImage"`
-	DockerCompose    string                     `json:"dockerCompose"`
-	TaskID           string                     `json:"taskID"`
+	InstallID     uint   `json:"installId"`
+	DetailID      uint   `json:"detailId"`
+	Backup        bool   `json:"backup"`
+	PullImage     bool   `json:"pullImage"`
+	DockerCompose string `json:"dockerCompose"`
+	TaskID        string `json:"taskID"`
 }
 
 type AppInstallDelete struct {
@@ -125,17 +110,11 @@ type AppInstallDelete struct {
 	DeleteDB     bool   `json:"deleteDB"`
 	DeleteImage  bool   `json:"deleteImage"`
 	TaskID       string `json:"taskID"`
-
-	UseLifecycleScripts bool `json:"-"`
 }
 
 type AppInstalledUpdate struct {
-	SyncModelAccount        *bool                  `json:"syncModelAccount"`
-	ModelAccountBaseURLType string                 `json:"modelAccountBaseURLType" validate:"omitempty,oneof=container localhost systemIP custom"`
-	ModelAccountBaseURL     string                 `json:"modelAccountBaseURL"`
-	InstallId               uint                   `json:"installId" validate:"required"`
-	Params                  map[string]interface{} `json:"params" validate:"required"`
-	TaskID                  string                 `json:"-"`
+	InstallId uint                   `json:"installId" validate:"required"`
+	Params    map[string]interface{} `json:"params" validate:"required"`
 	AppContainerConfig
 }
 

agent/app/dto/request/file.go

@@ -122,7 +122,6 @@ type FileWget struct {
 	Name              string `json:"name" validate:"required"`
 	IgnoreCertificate bool   `json:"ignoreCertificate"`
 	UseProxy          bool   `json:"useProxy"`
-	UseServerFilename bool   `json:"useServerFilename"`
 }
 
 type FileMove struct {
@@ -132,11 +131,6 @@ type FileMove struct {
 	Name       string   `json:"name"`
 	Cover      bool     `json:"cover"`
 	CoverPaths []string `json:"coverPaths"`
-	TaskID     string   `json:"taskID"`
-}
-
-type FileMoveStopReq struct {
-	TaskID string `json:"taskID" validate:"required"`
 }
 
 type FileDownload struct {
@@ -159,10 +153,6 @@ type FileProcessReq struct {
 	Key string `json:"key"`
 }
 
-type FileProcessRemoveReq struct {
-	Keys []string `json:"keys" validate:"required,min=1,max=1000"`
-}
-
 type FileRoleUpdate struct {
 	Path  string `json:"path" validate:"required"`
 	User  string `json:"user" validate:"required"`

agent/app/dto/request/mcp_server.go

@@ -21,10 +21,6 @@ type McpServerCreate struct {
 	StreamableHttpPath string        `json:"streamableHttpPath"`
 	OutputTransport    string        `json:"outputTransport" validate:"required"`
 	Type               string        `json:"type" validate:"required"`
-	GatewayImage       string        `json:"gatewayImage"`
-	ProtocolVersion    string        `json:"protocolVersion"`
-	GatewayArgs        string        `json:"gatewayArgs" validate:"max=4096"`
-	TaskID             string        `json:"taskID"`
 }
 
 type McpServerUpdate struct {
@@ -36,23 +32,11 @@ type McpServerDelete struct {
 	ID uint `json:"id" validate:"required"`
 }
 
-type McpServerDetail struct {
-	ID uint `json:"id" validate:"required"`
-}
-
-type McpServerStatusSync struct {
-	IDs []uint `json:"ids"`
-}
-
 type McpServerOperate struct {
 	ID      uint   `json:"id" validate:"required"`
 	Operate string `json:"operate" validate:"required"`
 }
 
-type McpServerConnectionTest struct {
-	ID uint `json:"id" validate:"required"`
-}
-
 type McpBindDomain struct {
 	Domain string `json:"domain" validate:"required"`
 	SSLID  uint   `json:"sslID"`

agent/app/dto/request/nginx.go

@@ -114,22 +114,17 @@ type NginxRedirectUpdate struct {
 }
 
 type NginxBuildReq struct {
-	TaskID  string   `json:"taskID" validate:"required"`
-	Mirror  string   `json:"mirror" validate:"required"`
-	Modules []string `json:"modules"`
-	Force   bool     `json:"force"`
+	TaskID string `json:"taskID" validate:"required"`
+	Mirror string `json:"mirror"  validate:"required"`
 }
 
 type NginxModuleUpdate struct {
-	Operate   string `json:"operate" validate:"required,oneof=create delete update"`
-	Name      string `json:"name" validate:"required"`
-	Script    string `json:"script"`
-	Packages  string `json:"packages"`
-	Enable    bool   `json:"enable"`
-	Params    string `json:"params"`
-	BuildMode string `json:"buildMode" validate:"omitempty,oneof=dynamic static"`
-	Provider  string `json:"provider" validate:"omitempty,oneof=local prebuilt"`
-	LoadOrder int    `json:"loadOrder" validate:"omitempty,min=0,max=9999"`
+	Operate  string `json:"operate" validate:"required,oneof=create delete update"`
+	Name     string `json:"name" validate:"required"`
+	Script   string `json:"script"`
+	Packages string `json:"packages"`
+	Enable   bool   `json:"enable"`
+	Params   string `json:"params"`
 }
 
 type NginxOperateReq struct {

agent/app/dto/request/runtime.go

@@ -21,14 +21,13 @@ type RuntimeCreate struct {
 	Source      string `json:"source"`
 	CodeDir     string `json:"codeDir"`
 	Remark      string `json:"remark"`
-	TaskID      string `json:"taskID"`
 
 	Params map[string]interface{} `json:"params"`
 	NodeConfig
 }
 
 type NodeConfig struct {
-	Install      *bool         `json:"install"`
+	Install      bool          `json:"install"`
 	Clean        bool          `json:"clean"`
 	ExposedPorts []ExposedPort `json:"exposedPorts"`
 	Environments []Environment `json:"environments"`
@@ -43,14 +42,12 @@ type Environment struct {
 type Volume struct {
 	Source string `json:"source"`
 	Target string `json:"target"`
-	Mode   string `json:"mode"`
 }
 
 type ExposedPort struct {
 	HostPort      int    `json:"hostPort"`
 	ContainerPort int    `json:"containerPort"`
 	HostIP        string `json:"hostIP"`
-	Protocol      string `json:"protocol"`
 }
 
 type ExtraHost struct {
@@ -59,22 +56,19 @@ type ExtraHost struct {
 }
 
 type RuntimeDelete struct {
-	ID          uint   `json:"id"`
-	ForceDelete bool   `json:"forceDelete"`
-	DeleteImage bool   `json:"deleteImage"`
-	TaskID      string `json:"taskID"`
+	ID          uint `json:"id"`
+	ForceDelete bool `json:"forceDelete"`
 }
 
 type RuntimeUpdate struct {
-	AppDetailID uint   `json:"appDetailId"`
-	Name        string `json:"name"`
-	ID          uint   `json:"id"`
-	Image       string `json:"image"`
-	Version     string `json:"version"`
-	Rebuild     bool   `json:"rebuild"`
-	Source      string `json:"source"`
-	CodeDir     string `json:"codeDir"`
-	Remark      string `json:"remark"`
+	Name    string `json:"name"`
+	ID      uint   `json:"id"`
+	Image   string `json:"image"`
+	Version string `json:"version"`
+	Rebuild bool   `json:"rebuild"`
+	Source  string `json:"source"`
+	CodeDir string `json:"codeDir"`
+	Remark  string `json:"remark"`
 
 	Params map[string]interface{} `json:"params"`
 	NodeConfig

agent/app/dto/request/website.go

@@ -34,8 +34,6 @@ type WebsiteCreate struct {
 
 	SiteDir string `json:"siteDir"`
 
-	TemplateOutputID uint `json:"templateOutputID"`
-
 	RuntimeConfig
 	FtpConfig
 	DataBaseConfig

agent/app/dto/request/website_ssl.go

@@ -126,16 +126,6 @@ type WebsiteSSLUpload struct {
 	Type            string `json:"type" validate:"required,oneof=paste local"`
 	SSLID           uint   `json:"sslID"`
 	Description     string `json:"description"`
-	PushNode        bool   `json:"pushNode"`
-	Nodes           string `json:"nodes"`
-}
-
-type WebsiteSSLPush struct {
-	ID       uint   `json:"id" validate:"required"`
-	PushNode bool   `json:"pushNode"`
-	Nodes    string `json:"nodes"`
-	TaskID   string `json:"taskID" validate:"required"`
-	Sync     bool   `json:"sync"`
 }
 
 type WebsiteCASearch struct {
@@ -167,8 +157,6 @@ type WebsiteCAObtain struct {
 	Description string `json:"description"`
 	ExecShell   bool   `json:"execShell"`
 	Shell       string `json:"shell"`
-	PushNode    bool   `json:"pushNode"`
-	Nodes       string `json:"nodes"`
 }
 
 type WebsiteCARenew struct {
@@ -179,15 +167,4 @@ type WebsiteSSLFileUpload struct {
 	Type        string `json:"type"`
 	Description string `json:"description"`
 	SSLID       uint64 `json:"sslID"`
-	PushNode    bool   `json:"pushNode"`
-	Nodes       string `json:"nodes"`
-}
-
-type WebsiteCAImport struct {
-	Name            string `json:"name" validate:"required,max=128"`
-	Type            string `json:"type" validate:"required,oneof=paste local"`
-	Certificate     string `json:"certificate" validate:"required_if=Type paste"`
-	PrivateKey      string `json:"privateKey" validate:"required_if=Type paste"`
-	CertificatePath string `json:"certificatePath" validate:"required_if=Type local"`
-	PrivateKeyPath  string `json:"privateKeyPath" validate:"required_if=Type local"`
 }

agent/app/dto/request/website_template.go

@@ -1,46 +0,0 @@
-package request
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/dto"
-)
-
-type WebsiteTemplateSearch struct {
-	dto.PageInfo
-	Name string `json:"name"`
-	Type string `json:"type"`
-}
-
-type WebsiteTemplateCreate struct {
-	Name      string `json:"name" validate:"required"`
-	Type      string `json:"type" validate:"required,oneof=single multi"`
-	Content   string `json:"content"`
-	FilePath  string `json:"filePath"`
-	Variables string `json:"variables"`
-	Remark    string `json:"remark"`
-}
-
-type WebsiteTemplateUpdate struct {
-	ID        uint   `json:"id" validate:"required"`
-	Name      string `json:"name" validate:"required"`
-	Type      string `json:"type" validate:"required,oneof=single multi"`
-	Content   string `json:"content"`
-	FilePath  string `json:"filePath"`
-	Variables string `json:"variables"`
-	Remark    string `json:"remark"`
-}
-
-type WebsiteTemplateOutputSearch struct {
-	dto.PageInfo
-	TemplateID uint `json:"templateID"`
-}
-
-type WebsiteTemplateOutputCreate struct {
-	TemplateID     uint              `json:"templateID" validate:"required"`
-	Name           string            `json:"name" validate:"required"`
-	VariableValues map[string]string `json:"variableValues"`
-}
-
-type WebsitePreviewReq struct {
-	TemplateID     uint              `json:"templateID" validate:"required"`
-	VariableValues map[string]string `json:"variableValues"`
-}

agent/app/dto/response/app.go

@@ -50,21 +50,19 @@ type TagDTO struct {
 }
 
 type AppInstalledCheck struct {
-	ModelAccountBaseURLType string    `json:"modelAccountBaseURLType"`
-	ModelAccountBaseURL     string    `json:"modelAccountBaseURL"`
-	IsExist                 bool      `json:"isExist"`
-	Name                    string    `json:"name"`
-	App                     string    `json:"app"`
-	Version                 string    `json:"version"`
-	Status                  string    `json:"status"`
-	CreatedAt               time.Time `json:"createdAt"`
-	LastBackupAt            string    `json:"lastBackupAt"`
-	AppInstallID            uint      `json:"appInstallId"`
-	ContainerName           string    `json:"containerName"`
-	InstallPath             string    `json:"installPath"`
-	HttpPort                int       `json:"httpPort"`
-	HttpsPort               int       `json:"httpsPort"`
-	WebsiteDir              string    `json:"websiteDir"`
+	IsExist       bool      `json:"isExist"`
+	Name          string    `json:"name"`
+	App           string    `json:"app"`
+	Version       string    `json:"version"`
+	Status        string    `json:"status"`
+	CreatedAt     time.Time `json:"createdAt"`
+	LastBackupAt  string    `json:"lastBackupAt"`
+	AppInstallID  uint      `json:"appInstallId"`
+	ContainerName string    `json:"containerName"`
+	InstallPath   string    `json:"installPath"`
+	HttpPort      int       `json:"httpPort"`
+	HttpsPort     int       `json:"httpsPort"`
+	WebsiteDir    string    `json:"websiteDir"`
 }
 
 type AppDetailDTO struct {
@@ -106,36 +104,34 @@ type AppDetail struct {
 }
 
 type AppInstallDTO struct {
-	ID            uint                   `json:"id"`
-	Name          string                 `json:"name"`
-	AppID         uint                   `json:"appID"`
-	AppDetailID   uint                   `json:"appDetailID"`
-	Version       string                 `json:"version"`
-	Status        string                 `json:"status"`
-	Message       string                 `json:"message"`
-	HttpPort      int                    `json:"httpPort"`
-	HttpsPort     int                    `json:"httpsPort"`
-	Path          string                 `json:"path"`
-	CanUpdate     bool                   `json:"canUpdate"`
-	Icon          string                 `json:"icon"`
-	AppName       string                 `json:"appName"`
-	Ready         int                    `json:"ready"`
-	Total         int                    `json:"total"`
-	AppKey        string                 `json:"appKey"`
-	AppType       string                 `json:"appType"`
-	AppStatus     string                 `json:"appStatus"`
-	DockerCompose string                 `json:"dockerCompose"`
-	WebUI         string                 `json:"webUI"`
-	CreatedAt     time.Time              `json:"createdAt"`
-	Favorite      bool                   `json:"favorite"`
-	SortOrder     int                    `json:"sortOrder"`
-	App           AppDetail              `json:"app"`
-	Container     string                 `json:"container"`
-	IsEdit        bool                   `json:"isEdit"`
-	LinkDB        bool                   `json:"linkDB"`
-	ResourceKeys  []string               `json:"resourceKeys"`
-	ServiceName   string                 `json:"serviceName"`
-	Env           map[string]interface{} `json:"env"`
+	ID            uint      `json:"id"`
+	Name          string    `json:"name"`
+	AppID         uint      `json:"appID"`
+	AppDetailID   uint      `json:"appDetailID"`
+	Version       string    `json:"version"`
+	Status        string    `json:"status"`
+	Message       string    `json:"message"`
+	HttpPort      int       `json:"httpPort"`
+	HttpsPort     int       `json:"httpsPort"`
+	Path          string    `json:"path"`
+	CanUpdate     bool      `json:"canUpdate"`
+	Icon          string    `json:"icon"`
+	AppName       string    `json:"appName"`
+	Ready         int       `json:"ready"`
+	Total         int       `json:"total"`
+	AppKey        string    `json:"appKey"`
+	AppType       string    `json:"appType"`
+	AppStatus     string    `json:"appStatus"`
+	DockerCompose string    `json:"dockerCompose"`
+	WebUI         string    `json:"webUI"`
+	CreatedAt     time.Time `json:"createdAt"`
+	Favorite      bool      `json:"favorite"`
+	SortOrder     int       `json:"sortOrder"`
+	App           AppDetail `json:"app"`
+	Container     string    `json:"container"`
+	IsEdit        bool      `json:"isEdit"`
+	LinkDB        bool      `json:"linkDB"`
+	ServiceName   string    `json:"serviceName"`
 }
 
 type AppInstallInfo struct {
@@ -186,13 +182,7 @@ type AppParam struct {
 }
 
 type AppConfig struct {
-	AppKey                  string     `json:"appKey"`
-	Name                    string     `json:"name"`
-	HttpPort                int        `json:"httpPort"`
-	SyncModelAccount        bool       `json:"syncModelAccount"`
-	ModelAccountBaseURLType string     `json:"modelAccountBaseURLType"`
-	ModelAccountBaseURL     string     `json:"modelAccountBaseURL"`
-	Params                  []AppParam `json:"params"`
-	RawCompose              string     `json:"rawCompose"`
+	Params     []AppParam `json:"params"`
+	RawCompose string     `json:"rawCompose"`
 	request.AppContainerConfig
 }

agent/app/dto/response/mcp_server.go

@@ -16,12 +16,6 @@ type McpServerDTO struct {
 	Volumes      []request.Volume      `json:"volumes"`
 }
 
-type McpServerStatusDTO struct {
-	ID      uint   `json:"id"`
-	Status  string `json:"status"`
-	Message string `json:"message"`
-}
-
 type McpBindDomainRes struct {
 	Domain        string   `json:"domain"`
 	SSLID         uint     `json:"sslID"`
@@ -30,11 +24,3 @@ type McpBindDomainRes struct {
 	WebsiteID     uint     `json:"websiteID"`
 	ConnUrl       string   `json:"connUrl"`
 }
-
-type McpServerConnectionTestRes struct {
-	Success         bool   `json:"success"`
-	Endpoint        string `json:"endpoint"`
-	OutputTransport string `json:"outputTransport"`
-	ProtocolVersion string `json:"protocolVersion,omitempty"`
-	Message         string `json:"message"`
-}

agent/app/dto/response/nginx.go

@@ -17,17 +17,6 @@ type NginxParam struct {
 	Params []string `json:"params"`
 }
 
-// NginxBrotliRes carries the brotli settings together with where they live.
-// ManagedExternally is true when the user defined brotli by hand, in which
-// case the panel only reports the values and must not write its own copy.
-// ManagedUnavailable is true when the panel could not wire the managed
-// configuration into nginx.conf at all, so the reported values are inert.
-type NginxBrotliRes struct {
-	Params             []NginxParam `json:"params"`
-	ManagedExternally  bool         `json:"managedExternally"`
-	ManagedUnavailable bool         `json:"managedUnavailable"`
-}
-
 type NginxAuthRes struct {
 	Enable bool            `json:"enable"`
 	Items  []dto.NginxAuth `json:"items"`
@@ -80,25 +69,16 @@ type NginxProxyCache struct {
 }
 
 type NginxModule struct {
-	Name        string                    `json:"name"`
-	Custom      bool                      `json:"custom"`
-	Script      string                    `json:"script"`
-	Packages    string                    `json:"packages"`
-	Params      string                    `json:"params"`
-	Enable      bool                      `json:"enable"`
-	BuildMode   string                    `json:"buildMode"`
-	Provider    string                    `json:"provider"`
-	LoadOrder   int                       `json:"loadOrder"`
-	BuildStatus string                    `json:"buildStatus"`
-	LoadStatus  string                    `json:"loadStatus"`
-	Artifacts   []dto.NginxModuleArtifact `json:"artifacts"`
-	LastError   string                    `json:"lastError"`
+	Name     string `json:"name"`
+	Script   string `json:"script"`
+	Packages string `json:"packages"`
+	Params   string `json:"params"`
+	Enable   bool   `json:"enable"`
 }
 
 type NginxBuildConfig struct {
-	Mirror           string        `json:"mirror"`
-	DynamicSupported bool          `json:"dynamicSupported"`
-	Modules          []NginxModule `json:"modules"`
+	Mirror  string        `json:"mirror"`
+	Modules []NginxModule `json:"modules"`
 }
 
 type NginxConfigRes struct {

agent/app/dto/response/website_template.go

@@ -1,18 +0,0 @@
-package response
-
-import (
-	"github.com/1Panel-dev/1Panel/agent/app/model"
-)
-
-type WebsiteTemplateDTO struct {
-	model.WebsiteTemplate
-}
-
-type WebsiteTemplateOutputDTO struct {
-	model.WebsiteTemplateOutput
-	TemplateName string `json:"templateName"`
-}
-
-type WebsitePreviewDTO struct {
-	HTML string `json:"html"`
-}

agent/app/dto/runtime_diagnostics.go

@@ -1,30 +0,0 @@
-package dto
-
-import "time"
-
-type RuntimeDiagnosticsSummary struct {
-	RSS         uint64 `json:"rss"`
-	HeapAlloc   uint64 `json:"heapAlloc"`
-	HeapObjects uint64 `json:"heapObjects"`
-	Goroutines  int    `json:"goroutines"`
-}
-
-type RuntimeGoroutineGroup struct {
-	State string   `json:"state"`
-	Top   string   `json:"top"`
-	Count int      `json:"count"`
-	Stack []string `json:"stack"`
-}
-
-type RuntimeGoroutineSnapshot struct {
-	Total      int                     `json:"total"`
-	GroupCount int                     `json:"groupCount"`
-	Truncated  bool                    `json:"truncated"`
-	CapturedAt time.Time               `json:"capturedAt"`
-	Goroutines []RuntimeGoroutineGroup `json:"goroutines"`
-}
-
-type RuntimeProfileCreate struct {
-	Type     string `json:"type" validate:"required,oneof=cpu heap goroutine mutex block"`
-	Duration int    `json:"duration" validate:"omitempty,min=5,max=30"`
-}

agent/app/dto/setting.go

@@ -35,7 +35,7 @@ type SettingUpdate struct {
 }
 
 type AgentSettingUpdate struct {
-	Key   string `json:"key" validate:"required,oneof=SystemIP DockerSockPath FileRecycleBin"`
+	Key   string `json:"key" validate:"required,oneof=SystemIP DockerSockPath FileRecycleBin FirewallPortWhiteList"`
 	Value string `json:"value"`
 }
 

agent/app/dto/ssh.go

@@ -25,7 +25,7 @@ type RootCertOperate struct {
 	ID             uint   `json:"id"`
 	Name           string `json:"name"`
 	Mode           string `json:"mode"`
-	EncryptionMode string `json:"encryptionMode"`
+	EncryptionMode string `json:"encryptionMode" validate:"required,oneof=rsa ed25519 ecdsa dsa"`
 	PassPhrase     string `json:"passPhrase"`
 	PublicKey      string `json:"publicKey"`
 	PrivateKey     string `json:"privateKey"`

agent/app/dto/terminal.go

@@ -1,11 +0,0 @@
-package dto
-
-type TerminalSessionClose struct {
-	ID string `json:"id" validate:"required"`
-}
-
-type TerminalSessionRevoke struct {
-	Scope         string `json:"scope" validate:"required,oneof=auth_session user all"`
-	UserID        string `json:"userId"`
-	AuthSessionID string `json:"authSessionId"`
-}

agent/app/model/agent_account.go

@@ -2,14 +2,11 @@ package model
 
 type AgentAccount struct {
 	BaseModel
-	AppInstallID    uint   `json:"appInstallId"`
 	Provider        string `json:"provider"`
 	Name            string `json:"name"`
 	APIKey          string `json:"apiKey"`
 	BaseURL         string `json:"baseUrl"`
 	APIType         string `json:"apiType"`
-	AuthMode        string `json:"authMode"`
-	VerifyModel     string `json:"verifyModel"`
 	RememberAPIKey  bool   `json:"rememberApiKey"`
 	Verified        bool   `json:"verified"`
 	Remark          string `json:"remark"`

agent/app/model/agent_account_model.go

@@ -2,10 +2,14 @@ package model
 
 type AgentAccountModel struct {
 	BaseModel
-	AccountID uint   `json:"accountId" gorm:"index"`
-	Model     string `json:"model" gorm:"index"`
-	Name      string `json:"name"`
-	SortOrder int    `json:"sortOrder" gorm:"index"`
+	AccountID     uint   `json:"accountId" gorm:"index"`
+	Model         string `json:"model" gorm:"index"`
+	Name          string `json:"name"`
+	ContextWindow int    `json:"contextWindow"`
+	MaxTokens     int    `json:"maxTokens"`
+	Reasoning     bool   `json:"reasoning"`
+	Input         string `json:"input" gorm:"type:text"`
+	SortOrder     int    `json:"sortOrder" gorm:"index"`
 }
 
 func (AgentAccountModel) TableName() string {

agent/app/model/alert.go

@@ -1,12 +1,5 @@
 package model
 
-import (
-	"strings"
-
-	"github.com/google/uuid"
-	"gorm.io/gorm"
-)
-
 type Alert struct {
 	BaseModel
 
@@ -25,11 +18,10 @@ type Alert struct {
 
 type AlertTask struct {
 	BaseModel
-	Type          string `gorm:"type:varchar(64);not null" json:"type"`
-	Quota         string `gorm:"type:varchar(64)" json:"quota"`
-	QuotaType     string `gorm:"type:varchar(64)" json:"quotaType"`
-	Method        string `gorm:"type:varchar(128);not null;default:'sms'" json:"method"`
-	DeliveryLogID *uint  `gorm:"uniqueIndex" json:"-"`
+	Type      string `gorm:"type:varchar(64);not null" json:"type"`
+	Quota     string `gorm:"type:varchar(64)" json:"quota"`
+	QuotaType string `gorm:"type:varchar(64)" json:"quotaType"`
+	Method    string `gorm:"type:varchar(128);not null;default:'sms'" json:"method"`
 }
 
 type AlertLog struct {
@@ -49,21 +41,12 @@ type AlertLog struct {
 
 type AlertConfig struct {
 	BaseModel
-	UID          string `gorm:"type:varchar(64);not null;uniqueIndex" json:"uid"`
-	Type         string `gorm:"type:varchar(64);not null" json:"type"`
-	Title        string `gorm:"type:varchar(64);not null" json:"title"`
-	Status       string `gorm:"type:varchar(64);not null" json:"status"`
-	Config       string `gorm:"type:text;not null" json:"config"`
-	SecretConfig string `gorm:"type:text;not null;default:''" json:"-"`
-	CreateUser   string `gorm:"type:varchar(256)" json:"createUser"`
-	UpdateUser   string `gorm:"type:varchar(256)" json:"updateUser"`
-}
-
-func (a *AlertConfig) BeforeCreate(_ *gorm.DB) error {
-	if strings.TrimSpace(a.UID) == "" {
-		a.UID = uuid.NewString()
-	}
-	return nil
+	Type       string `gorm:"type:varchar(64);not null" json:"type"`
+	Title      string `gorm:"type:varchar(64);not null" json:"title"`
+	Status     string `gorm:"type:varchar(64);not null" json:"status"`
+	Config     string `gorm:"type:varchar(256);not null" json:"config"`
+	CreateUser string `gorm:"type:varchar(256)" json:"createUser"`
+	UpdateUser string `gorm:"type:varchar(256)" json:"updateUser"`
 }
 
 type LoginLog struct {

agent/app/model/app_install.go

@@ -28,10 +28,6 @@ type AppInstall struct {
 	Favorite      bool   `json:"favorite"`
 	SortOrder     int    `json:"sortOrder" gorm:"default:0"`
 
-	SyncModelAccount        bool   `json:"syncModelAccount"`
-	ModelAccountBaseURLType string `json:"modelAccountBaseURLType"`
-	ModelAccountBaseURL     string `json:"modelAccountBaseURL"`
-
 	App App `json:"app" gorm:"-:migration"`
 }
 

agent/app/model/app_launcher.go

@@ -5,13 +5,6 @@ type AppLauncher struct {
 	Key string `json:"key"`
 }
 
-type QuickDirectory struct {
-	BaseModel
-	Path   string `json:"path"`
-	Alias  string `json:"alias"`
-	Legacy bool   `json:"legacy" gorm:"-"`
-}
-
 type QuickJump struct {
 	BaseModel
 	Name      string `json:"name"`

agent/app/model/backup.go

@@ -31,5 +31,4 @@ type BackupRecord struct {
 	Status      string `json:"status"`
 	Message     string `json:"message"`
 	Description string `json:"description"`
-	Args        string `gorm:"not null;default:''" json:"args"`
 }

agent/app/model/compose_template.go

@@ -11,7 +11,6 @@ type ComposeTemplate struct {
 type Compose struct {
 	BaseModel
 
-	Name     string `json:"name"`
-	Path     string `json:"path"`
-	IsPinned bool   `json:"isPinned"`
+	Name string `json:"name"`
+	Path string `json:"path"`
 }

agent/app/model/container_image_check_update.go

@@ -1,20 +0,0 @@
-package model
-
-import "time"
-
-// ContainerImageCheckUpdate is a cache tied to the exact image used by a container.
-type ContainerImageCheckUpdate struct {
-	ContainerID   string    `gorm:"primaryKey" json:"containerID"`
-	ImageID       string    `json:"imageID"`
-	ImageName     string    `json:"imageName"`
-	LatestVersion string    `json:"latestVersion"`
-	TargetImage   string    `json:"targetImage"`
-	TargetImageID string    `json:"-"`
-	HasUpdate     bool      `gorm:"not null;default:false" json:"hasUpdate"`
-	CheckedAt     time.Time `json:"checkedAt"`
-	CheckStatus   string    `json:"checkStatus"`
-	CheckError    string    `json:"checkError"`
-}
-
-// TableName preserves the table created by the original migration.
-func (ContainerImageCheckUpdate) TableName() string { return "container_image_updates" }

agent/app/model/database_user.go

@@ -1,21 +0,0 @@
-package model
-
-type DatabaseUser struct {
-	BaseModel
-	Type        string `json:"type" gorm:"not null;uniqueIndex:idx_database_user"`
-	Database    string `json:"database" gorm:"not null;uniqueIndex:idx_database_user"`
-	Username    string `json:"username" gorm:"not null;uniqueIndex:idx_database_user"`
-	Host        string `json:"host" gorm:"uniqueIndex:idx_database_user"`
-	Password    string `json:"password"`
-	Description string `json:"description"`
-	IsDelete    bool   `json:"isDelete"`
-}
-
-type DatabaseUserGrant struct {
-	BaseModel
-	Type     string `json:"type" gorm:"not null;uniqueIndex:idx_database_user_grant"`
-	Database string `json:"database" gorm:"not null;uniqueIndex:idx_database_user_grant"`
-	DBName   string `json:"dbName" gorm:"not null;uniqueIndex:idx_database_user_grant"`
-	Username string `json:"username" gorm:"not null;uniqueIndex:idx_database_user_grant"`
-	Host     string `json:"host" gorm:"not null;uniqueIndex:idx_database_user_grant"`
-}

agent/app/model/firewall.go

@@ -0,0 +1,18 @@
+package model
+
+type Firewall struct {
+	BaseModel
+
+	Type    string `json:"type"`
+	Port    string `json:"port"`    // Deprecated
+	Address string `json:"address"` // Deprecated
+
+	Chain       string `json:"chain"`
+	Protocol    string `json:"protocol"`
+	SrcIP       string `json:"srcIP"`
+	SrcPort     string `json:"srcPort"`
+	DstIP       string `json:"dstIP"`
+	DstPort     string `json:"dstPort"`
+	Strategy    string `gorm:"not null" json:"strategy"`
+	Description string `json:"description"`
+}

agent/app/model/ftp.go

@@ -8,6 +8,4 @@ type Ftp struct {
 	Status      string `gorm:"not null" json:"status"`
 	Path        string `gorm:"not null" json:"path"`
 	Description string `gorm:"not null" json:"description"`
-	UID         uint   `gorm:"column:uid;not null;default:1000" json:"-"`
-	GID         uint   `gorm:"column:gid;not null;default:1000" json:"-"`
 }

agent/app/model/mcp_server.go

@@ -18,7 +18,4 @@ type McpServer struct {
 	StreamableHttpPath string `json:"streamableHttpPath"`
 	OutputTransport    string `json:"outputTransport"`
 	Type               string `json:"type"`
-	GatewayImage       string `json:"gatewayImage"`
-	ProtocolVersion    string `json:"protocolVersion"`
-	GatewayArgs        string `json:"gatewayArgs"`
 }

agent/app/model/monitor.go

@@ -1,7 +1,5 @@
 package model
 
-import "time"
-
 type MonitorBase struct {
 	BaseModel
 	Cpu         float64     `json:"cpu"`
@@ -35,88 +33,14 @@ type MonitorNetwork struct {
 }
 
 type MonitorGPU struct {
-	MemoryUtil         *float64 `json:"memoryUtil"`
-	MemoryActivity     *float64 `json:"memoryActivity"`
-	EncoderUtil        *float64 `json:"encoderUtil"`
-	DecoderUtil        *float64 `json:"decoderUtil"`
-	JPEGUtil           *float64 `json:"jpegUtil"`
-	OFAUtil            *float64 `json:"ofaUtil"`
-	MediaUtil          *float64 `json:"mediaUtil"`
-	ComputeUtil        *float64 `json:"computeUtil"`
-	CopyUtil           *float64 `json:"copyUtil"`
-	HotspotTemperature *float64 `json:"hotspotTemperature"`
-	FanRPM             *float64 `json:"fanRPM"`
-	AICPUUtil          *float64 `json:"aiCPUUtil"`
-	CtrlCPUUtil        *float64 `json:"ctrlCPUUtil"`
-	DDRUsed            *float64 `json:"ddrUsed"`
-	DDRTotal           *float64 `json:"ddrTotal"`
-	HBMUsed            *float64 `json:"hbmUsed"`
-	HBMTotal           *float64 `json:"hbmTotal"`
-	DDRBandwidth       *float64 `json:"ddrBandwidth"`
-	HBMBandwidth       *float64 `json:"hbmBandwidth"`
-	MemoryBandwidth    *float64 `json:"memoryBandwidth"`
-	MediaFrequency     *float64 `json:"mediaFrequency"`
-	HugepagesUsed      *float64 `json:"hugepagesUsed"`
-	HugepagesTotal     *float64 `json:"hugepagesTotal"`
-
-	MemoryTemperature *float64 `json:"memoryTemperature"`
-	DeviceID          string   `json:"deviceID"`
-	DeviceType        string   `json:"deviceType"`
-	ProcessStatus     string   `json:"processStatus"`
-	Frequency         *float64 `json:"frequency"`
-	MemoryFrequency   *float64 `json:"memoryFrequency"`
-	IntervalSeconds   int      `json:"intervalSeconds"`
 	BaseModel
-	ProductName   string   `json:"productName"`
-	GPUUtil       *float64 `json:"gpuUtil"`
-	Temperature   *float64 `json:"temperature"`
-	PowerDraw     *float64 `json:"powerDraw"`
-	MaxPowerLimit *float64 `json:"maxPowerLimit"`
-	MemUsed       *float64 `json:"memUsed"`
-	MemTotal      *float64 `json:"memTotal"`
-	FanSpeed      *float64 `json:"fanSpeed"`
-	Processes     string   `json:"processes"`
-}
-
-type MonitorVLLM struct {
-	ID                      uint               `json:"-" gorm:"primarykey;autoIncrement"`
-	CreatedAt               time.Time          `json:"createdAt"`
-	AppInstallID            uint               `json:"appInstallID"`
-	Status                  string             `json:"status"`
-	RawMetrics              string             `json:"-"`
-	HistogramDeltas         string             `json:"-"`
-	IntervalSeconds         float64            `json:"intervalSeconds" gorm:"-"`
-	SampleIntervalSeconds   int                `json:"-"`
-	RequestDeltas           string             `json:"-"`
-	CompletedRequests       *float64           `json:"completedRequests" gorm:"-"`
-	QueueTime               *float64           `json:"queueTime"`
-	AverageGenerationTokens *float64           `json:"averageGenerationTokens"`
-	PrefixCacheHitRate      *float64           `json:"prefixCacheHitRate"`
-	FinishReasons           map[string]float64 `json:"finishReasons" gorm:"-"`
-	PromptDistribution      map[string]float64 `json:"promptDistribution" gorm:"-"`
-	GenerationDistribution  map[string]float64 `json:"generationDistribution" gorm:"-"`
-
-	Running               *float64 `json:"running"`
-	Waiting               *float64 `json:"waiting"`
-	CacheUsage            *float64 `json:"cacheUsage"`
-	PromptThroughput      *float64 `json:"promptThroughput"`
-	GenerationThroughput  *float64 `json:"generationThroughput"`
-	RequestThroughput     *float64 `json:"requestThroughput"`
-	TimeToFirstToken      *float64 `json:"timeToFirstToken"`
-	TimePerOutputToken    *float64 `json:"timePerOutputToken"`
-	RequestLatency        *float64 `json:"requestLatency"`
-	PrefillTime           *float64 `json:"prefillTime"`
-	DecodeTime            *float64 `json:"decodeTime"`
-	TimeToFirstTokenP50   *float64 `json:"timeToFirstTokenP50"`
-	TimeToFirstTokenP90   *float64 `json:"timeToFirstTokenP90"`
-	TimeToFirstTokenP95   *float64 `json:"timeToFirstTokenP95"`
-	TimeToFirstTokenP99   *float64 `json:"timeToFirstTokenP99"`
-	TimePerOutputTokenP50 *float64 `json:"timePerOutputTokenP50"`
-	TimePerOutputTokenP90 *float64 `json:"timePerOutputTokenP90"`
-	TimePerOutputTokenP95 *float64 `json:"timePerOutputTokenP95"`
-	TimePerOutputTokenP99 *float64 `json:"timePerOutputTokenP99"`
-	RequestLatencyP50     *float64 `json:"requestLatencyP50"`
-	RequestLatencyP90     *float64 `json:"requestLatencyP90"`
-	RequestLatencyP95     *float64 `json:"requestLatencyP95"`
-	RequestLatencyP99     *float64 `json:"requestLatencyP99"`
+	ProductName   string  `json:"productName"`
+	GPUUtil       float64 `json:"gpuUtil"`
+	Temperature   float64 `json:"temperature"`
+	PowerDraw     float64 `json:"powerDraw"`
+	MaxPowerLimit float64 `json:"maxPowerLimit"`
+	MemUsed       float64 `json:"memUsed"`
+	MemTotal      float64 `json:"memTotal"`
+	FanSpeed      int     `json:"fanSpeed"`
+	Processes     string  `json:"processes"`
 }

agent/app/model/website_template.go

@@ -1,28 +0,0 @@
-package model
-
-type WebsiteTemplate struct {
-	BaseModel
-	Name      string `gorm:"not null" json:"name"`
-	Type      string `gorm:"not null" json:"type"` // single | multi
-	Content   string `gorm:"type:longtext" json:"content"`
-	FilePath  string `json:"filePath"`
-	Variables string `gorm:"type:text" json:"variables"`
-	Remark    string `json:"remark"`
-}
-
-func (w WebsiteTemplate) TableName() string {
-	return "website_templates"
-}
-
-type WebsiteTemplateOutput struct {
-	BaseModel
-	Name           string `gorm:"not null" json:"name"`
-	TemplateID     uint   `gorm:"not null" json:"templateID"`
-	TemplateType   string `json:"templateType"`
-	VariableValues string `gorm:"type:text" json:"variableValues"`
-	OutputPath     string `json:"outputPath"`
-}
-
-func (w WebsiteTemplateOutput) TableName() string {
-	return "website_template_outputs"
-}

agent/app/provider/catalog.go

@@ -1,261 +1,319 @@
 package provider
 
 import (
-	"fmt"
-	"net/url"
 	"strings"
 )
 
-type APIConfig struct {
-	APIType         string
-	BaseURL         string
-	EditableBaseURL bool
-	DiscoverModels  bool
-	DefaultAuthMode string
-	AuthModes       []string
-	Models          []Model
+type Model struct {
+	ID            string
+	Name          string
+	ContextWindow int
+	MaxTokens     int
+	Reasoning     bool
+	Input         []string
 }
 
-const (
-	AuthModeBearer  = "bearer"
-	AuthModeXAPIKey = "x-api-key"
-)
-
-type Model struct {
-	ID   string
-	Name string
+type RuntimeDefault struct {
+	APIType       string
+	ContextWindow int
+	MaxTokens     int
+	Input         []string
 }
 
 type Meta struct {
 	Key            string
 	DisplayName    string
-	DisplayNameKey string
 	Sort           uint
-	DefaultAPIType string
-	APIConfigs     []APIConfig
+	DefaultBaseURL string
 	EnvKey         string
+	Default        RuntimeDefault
 	Models         []Model
 }
 
 var catalog = map[string]Meta{
 	"custom": {
-		Key: "custom", DisplayName: "Custom", Sort: 10, DefaultAPIType: "openai-completions", EnvKey: "CUSTOM_API_KEY",
-		APIConfigs: editableAPIConfigs(true, "openai-completions", "openai-responses", "anthropic-messages", "openai-images", "dashscope-images", "openai-embeddings"),
+		Key:            "custom",
+		DisplayName:    "Custom",
+		Sort:           10,
+		DefaultBaseURL: "",
+		EnvKey:         "CUSTOM_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 128000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{},
 	},
 	"ollama": {
-		Key: "ollama", DisplayName: "Ollama", Sort: 15, DefaultAPIType: "openai-responses",
-		APIConfigs: editableAPIConfigs(false, "openai-responses", "openai-completions", "openai-embeddings"),
-	},
-	// llmman (https://github.com/llmmanorg/llmman): local runner with Ollama/OpenAI-compatible routes on 127.0.0.1:17434.
-	"llmman": {
-		Key: "llmman", DisplayName: "llmman", Sort: 16, DefaultAPIType: "openai-responses",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-responses", BaseURL: "http://127.0.0.1:17434/v1", EditableBaseURL: true},
-			{APIType: "openai-completions", BaseURL: "http://127.0.0.1:17434/v1", EditableBaseURL: true},
-			{APIType: "openai-embeddings", BaseURL: "http://127.0.0.1:17434/v1", EditableBaseURL: true},
+		Key:         "ollama",
+		DisplayName: "Ollama",
+		Sort:        15,
+		Default: RuntimeDefault{
+			APIType:       "openai-responses",
+			ContextWindow: 160000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
 		},
 	},
 	"vllm": {
-		Key: "vllm", DisplayName: "vLLM", Sort: 20, DefaultAPIType: "openai-completions", EnvKey: "VLLM_API_KEY",
-		APIConfigs: editableAPIConfigs(false, "openai-completions", "openai-responses", "anthropic-messages", "openai-images", "openai-embeddings"),
+		Key:            "vllm",
+		DisplayName:    "vLLM",
+		Sort:           20,
+		DefaultBaseURL: "",
+		EnvKey:         "VLLM_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 128000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{},
 	},
 	"deepseek": {
-		Key: "deepseek", DisplayName: "DeepSeek", Sort: 25, DefaultAPIType: "openai-completions", EnvKey: "DEEPSEEK_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://api.deepseek.com"},
-			{APIType: "openai-responses", BaseURL: "https://api.deepseek.com"},
-			anthropicAPIConfig("https://api.deepseek.com/anthropic", AuthModeXAPIKey),
-		},
-		Models: []Model{{ID: "deepseek-flash", Name: "deepseek-flash"}, {ID: "deepseek-v4-pro", Name: "deepseek-v4-pro"}},
-	},
-	"bailian-coding-plan": {
-		Key: "bailian-coding-plan", DisplayNameKey: "AIProviderBailianCodingPlan", Sort: 30, DefaultAPIType: "openai-completions", EnvKey: "QWEN_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://coding.dashscope.aliyuncs.com/v1"},
-			anthropicAPIConfig("https://coding.dashscope.aliyuncs.com/apps/anthropic", AuthModeBearer),
+		Key:            "deepseek",
+		DisplayName:    "DeepSeek",
+		Sort:           25,
+		DefaultBaseURL: "https://api.deepseek.com/v1",
+		EnvKey:         "DEEPSEEK_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 131072,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
 		},
 		Models: []Model{
-			{ID: "qwen3-coder-plus", Name: "Qwen3-Coder-Plus"},
-			{ID: "qwen3-max-2026-01-23", Name: "Qwen3-Max-2026-01-23"},
-			{ID: "qwen3-coder-next", Name: "Qwen3-Coder-Next"},
-			{ID: "glm-4.7", Name: "GLM-4.7"},
-			{ID: "kimi-k2.5", Name: "Kimi K2.5"},
-			{ID: "qwen3.5-plus", Name: "Qwen3.5-Plus"},
-			{ID: "glm-5", Name: "GLM-5"},
-			{ID: "qwen3.6-plus", Name: "Qwen3.6-Plus"},
-			{ID: "qwen3.7-plus", Name: "Qwen3.7-Plus"},
+			{ID: "deepseek/deepseek-v4-flash", Name: "deepseek-v4-flash"},
+			{ID: "deepseek/deepseek-v4-pro", Name: "deepseek-v4-pro"},
+		},
+	},
+	"bailian-coding-plan": {
+		Key:            "bailian-coding-plan",
+		DisplayName:    "阿里云百炼 Coding Plan",
+		Sort:           30,
+		DefaultBaseURL: "https://coding.dashscope.aliyuncs.com/v1",
+		EnvKey:         "QWEN_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 256000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "bailian-coding-plan/qwen3.5-plus", Name: "Qwen3.5-Plus", Reasoning: true},
+			{ID: "bailian-coding-plan/qwen3-max", Name: "Qwen3-Max", Reasoning: true},
+			{ID: "bailian-coding-plan/qwen3-coder-next", Name: "Qwen3-Coder-Next", Reasoning: true},
+			{ID: "bailian-coding-plan/qwen3-coder-plus", Name: "Qwen3-Coder-Plus", Reasoning: true},
+			{ID: "bailian-coding-plan/minimax-m2.5", Name: "MiniMax M2.5", Reasoning: true},
+			{ID: "bailian-coding-plan/glm-5", Name: "GLM-5", Reasoning: true},
+			{ID: "bailian-coding-plan/kimi-k2.5", Name: "Kimi-k2.5", Reasoning: true},
+			{ID: "bailian-coding-plan/glm-4.7", Name: "GLM-4.7", Reasoning: true},
 		},
 	},
 	"ark-coding-plan": {
-		Key: "ark-coding-plan", DisplayNameKey: "AIProviderArkCodingPlan", Sort: 35, DefaultAPIType: "openai-completions", EnvKey: "ARK_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://ark.cn-beijing.volces.com/api/coding/v3"},
-			anthropicAPIConfig("https://ark.cn-beijing.volces.com/api/coding", AuthModeBearer),
+		Key:            "ark-coding-plan",
+		DisplayName:    "方舟 Coding Plan",
+		Sort:           35,
+		DefaultBaseURL: "https://ark.cn-beijing.volces.com/api/coding/v3",
+		EnvKey:         "ARK_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 256000,
+			MaxTokens:     4096,
+			Input:         []string{"text"},
 		},
 		Models: []Model{
-			{ID: "ark-code-latest", Name: "Ark Coding Plan"}, {ID: "doubao-seed-code", Name: "Doubao Seed Code"},
-			{ID: "glm-4.7", Name: "GLM 4.7 Coding"}, {ID: "kimi-k2-thinking", Name: "Kimi K2 Thinking"},
-			{ID: "kimi-k2.5", Name: "Kimi K2.5 Coding"}, {ID: "doubao-seed-code-preview-251028", Name: "Doubao Seed Code Preview"},
+			{ID: "ark-coding-plan/ark-code-latest", Name: "Ark Coding Plan", ContextWindow: 256000, MaxTokens: 4096},
+			{ID: "ark-coding-plan/doubao-seed-code", Name: "Doubao Seed Code", ContextWindow: 256000, MaxTokens: 4096},
+			{ID: "ark-coding-plan/glm-4.7", Name: "GLM 4.7 Coding", ContextWindow: 200000, MaxTokens: 4096},
+			{ID: "ark-coding-plan/kimi-k2-thinking", Name: "Kimi K2 Thinking", ContextWindow: 256000, MaxTokens: 4096},
+			{ID: "ark-coding-plan/kimi-k2.5", Name: "Kimi K2.5 Coding", ContextWindow: 256000, MaxTokens: 4096},
+			{ID: "ark-coding-plan/doubao-seed-code-preview-251028", Name: "Doubao Seed Code Preview", ContextWindow: 256000, MaxTokens: 4096},
 		},
 	},
 	"zai": {
-		Key: "zai", DisplayName: "Z.ai", Sort: 40, DefaultAPIType: "openai-completions", EnvKey: "ZAI_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://open.bigmodel.cn/api/paas/v4", EditableBaseURL: true},
-			{APIType: "openai-images", BaseURL: "https://open.bigmodel.cn/api/paas/v4", EditableBaseURL: true},
+		Key:            "zai",
+		DisplayName:    "Z.ai",
+		Sort:           40,
+		DefaultBaseURL: "https://open.bigmodel.cn/api/paas/v4",
+		EnvKey:         "ZAI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 204800,
+			MaxTokens:     131072,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "zai/glm-5", Name: "GLM-5", Reasoning: true},
+			{ID: "zai/glm-4.7", Name: "GLM-4.7", Reasoning: true},
+			{ID: "zai/glm-4.7-flash", Name: "GLM-4.7-Flash", Reasoning: true},
+			{ID: "zai/glm-4.7-flashx", Name: "GLM-4.7-FlashX", Reasoning: true},
 		},
-		Models: []Model{{ID: "glm-5", Name: "GLM-5"}, {ID: "glm-4.7", Name: "GLM-4.7"}, {ID: "glm-4.7-flash", Name: "GLM-4.7-Flash"}, {ID: "glm-4.7-flashx", Name: "GLM-4.7-FlashX"}},
 	},
 	"minimax": {
-		Key: "minimax", DisplayName: "MiniMax (CN)", Sort: 45, DefaultAPIType: "anthropic-messages", EnvKey: "MINIMAX_API_KEY",
-		APIConfigs: []APIConfig{
-			anthropicAPIConfig("https://api.minimaxi.com/anthropic", AuthModeXAPIKey, AuthModeBearer),
-			{APIType: "openai-completions", BaseURL: "https://api.minimaxi.com/v1"},
-			{APIType: "minimax-images", BaseURL: "https://api.minimaxi.com"},
+		Key:            "minimax",
+		DisplayName:    "MiniMax (CN)",
+		Sort:           45,
+		DefaultBaseURL: "https://api.minimaxi.com/anthropic",
+		EnvKey:         "MINIMAX_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "anthropic-messages",
+			ContextWindow: 200000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "minimax/MiniMax-M2.7", Name: "MiniMax M2.7"},
+			{ID: "minimax/MiniMax-M2.7-highspeed", Name: "MiniMax M2.7 highspeed"},
+			{ID: "minimax/MiniMax-M2.5", Name: "MiniMax M2.5", Reasoning: true},
+			{ID: "minimax/MiniMax-M2.5-highspeed", Name: "MiniMax M2.5 highspeed"},
 		},
-		Models: []Model{{ID: "MiniMax-M3.1-Flash", Name: "MiniMax M3.1 Flash"}, {ID: "MiniMax-M3", Name: "MiniMax M3"}},
 	},
 	"xiaomi": {
-		Key: "xiaomi", DisplayName: "Xiaomi", Sort: 46, DefaultAPIType: "openai-completions", EnvKey: "XIAOMI_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://api.xiaomimimo.com/v1"},
-			{APIType: "openai-responses", BaseURL: "https://api.xiaomimimo.com/v1"},
-			anthropicAPIConfig("https://api.xiaomimimo.com/anthropic", AuthModeBearer),
+		Key:            "xiaomi",
+		DisplayName:    "Xiaomi",
+		Sort:           46,
+		DefaultBaseURL: "https://api.xiaomimimo.com/v1",
+		EnvKey:         "XIAOMI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 262144,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "xiaomi/mimo-v2-flash", Name: "Xiaomi MiMo V2 Flash", ContextWindow: 262144, MaxTokens: 8192, Input: []string{"text"}},
+			{ID: "xiaomi/mimo-v2-pro", Name: "Xiaomi MiMo V2 Pro", ContextWindow: 1048576, MaxTokens: 32000, Reasoning: true, Input: []string{"text"}},
+			{ID: "xiaomi/mimo-v2-omni", Name: "Xiaomi MiMo V2 Omni", ContextWindow: 262144, MaxTokens: 32000, Reasoning: true, Input: []string{"text", "image"}},
 		},
-		Models: []Model{{ID: "mimo-v2.5", Name: "Xiaomi MiMo V2.5"}, {ID: "mimo-v2.5-pro", Name: "Xiaomi MiMo V2.5 Pro"}},
 	},
 	"kimi": {
-		Key: "kimi", DisplayName: "Kimi (CN)", Sort: 50, DefaultAPIType: "openai-completions", EnvKey: "KIMI_API_KEY",
-		APIConfigs: []APIConfig{{APIType: "openai-completions", BaseURL: "https://api.moonshot.cn/v1"}},
-		Models:     []Model{{ID: "kimi-k2.5", Name: "Kimi K2.5"}, {ID: "kimi-k2-0905-preview", Name: "Kimi K2 0905 Preview"}, {ID: "kimi-k2-thinking", Name: "Kimi K2 Thinking"}},
+		Key:            "kimi",
+		DisplayName:    "Kimi (CN)",
+		Sort:           50,
+		DefaultBaseURL: "https://api.moonshot.cn/v1",
+		EnvKey:         "KIMI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 256000,
+			MaxTokens:     8192,
+			Input:         []string{"text", "image"},
+		},
+		Models: []Model{
+			{ID: "kimi/kimi-k2.5", Name: "Kimi K2.5", Reasoning: true},
+			{ID: "kimi/kimi-k2-0905-preview", Name: "Kimi K2 0905 Preview"},
+			{ID: "kimi/kimi-k2-thinking", Name: "Kimi K2 Thinking", Reasoning: true},
+		},
 	},
 	"kimi-coding": {
-		Key: "kimi-coding", DisplayName: "Kimi Coding", Sort: 51, DefaultAPIType: "anthropic-messages", EnvKey: "KIMI_API_KEY",
-		APIConfigs: []APIConfig{anthropicAPIConfig("https://api.kimi.com/coding/", AuthModeXAPIKey)},
-		Models:     []Model{{ID: "kimi-code", Name: "Kimi Code"}, {ID: "k2p5", Name: "Kimi K2.5"}},
+		Key:            "kimi-coding",
+		DisplayName:    "Kimi Coding",
+		Sort:           51,
+		DefaultBaseURL: "https://api.kimi.com/coding/",
+		EnvKey:         "KIMI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "anthropic-messages",
+			ContextWindow: 262144,
+			MaxTokens:     32768,
+			Input:         []string{"text", "image"},
+		},
+		Models: []Model{
+			{ID: "kimi-coding/kimi-code", Name: "Kimi Code", ContextWindow: 262144, MaxTokens: 32768, Reasoning: true, Input: []string{"text", "image"}},
+			{ID: "kimi-coding/k2p5", Name: "Kimi K2.5", ContextWindow: 262144, MaxTokens: 32768, Reasoning: true, Input: []string{"text", "image"}},
+		},
 	},
 	"openai": {
-		Key: "openai", DisplayName: "OpenAI", Sort: 55, DefaultAPIType: "openai-responses", EnvKey: "OPENAI_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-responses", BaseURL: "https://api.openai.com/v1"},
-			{APIType: "openai-completions", BaseURL: "https://api.openai.com/v1"},
-			{APIType: "openai-images", BaseURL: "https://api.openai.com/v1"},
-			{APIType: "openai-embeddings", BaseURL: "https://api.openai.com/v1", Models: []Model{
-				{ID: "text-embedding-3-small", Name: "text-embedding-3-small"},
-				{ID: "text-embedding-3-large", Name: "text-embedding-3-large"},
-			}},
+		Key:            "openai",
+		DisplayName:    "OpenAI",
+		Sort:           55,
+		DefaultBaseURL: "https://api.openai.com/v1",
+		EnvKey:         "OPENAI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-responses",
+			ContextWindow: 272000,
+			MaxTokens:     128000,
+			Input:         []string{"text", "image"},
+		},
+		Models: []Model{
+			{ID: "openai/gpt-5.4", Name: "gpt-5.4", ContextWindow: 272000, MaxTokens: 128000, Reasoning: true, Input: []string{"text", "image"}},
+			{ID: "openai/gpt-5.4-pro", Name: "gpt-5.4-pro", ContextWindow: 1050000, MaxTokens: 128000, Reasoning: true, Input: []string{"text", "image"}},
+			{ID: "openai/gpt-5.4-mini", Name: "gpt-5.4-mini", ContextWindow: 400000, MaxTokens: 128000, Reasoning: true, Input: []string{"text", "image"}},
+			{ID: "openai/gpt-5.4-nano", Name: "gpt-5.4-nano", ContextWindow: 400000, MaxTokens: 128000, Reasoning: true, Input: []string{"text", "image"}},
 		},
-		Models: []Model{{ID: "gpt-5.4", Name: "gpt-5.4"}, {ID: "gpt-5.4-pro", Name: "gpt-5.4-pro"}, {ID: "gpt-5.4-mini", Name: "gpt-5.4-mini"}, {ID: "gpt-5.4-nano", Name: "gpt-5.4-nano"}},
 	},
 	"openrouter": {
-		Key: "openrouter", DisplayName: "OpenRouter", Sort: 56, DefaultAPIType: "openai-completions", EnvKey: "OPENROUTER_API_KEY",
-		APIConfigs: []APIConfig{
-			{APIType: "openai-completions", BaseURL: "https://openrouter.ai/api/v1"},
-			{APIType: "openrouter-images", BaseURL: "https://openrouter.ai"},
+		Key:            "openrouter",
+		DisplayName:    "OpenRouter",
+		Sort:           56,
+		DefaultBaseURL: "https://openrouter.ai/api/v1",
+		EnvKey:         "OPENROUTER_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 128000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "openrouter/free", Name: "openrouter/free"},
+			{ID: "openrouter/auto", Name: "openrouter/auto"},
 		},
-		Models: []Model{{ID: "openrouter/free", Name: "openrouter/free"}, {ID: "openrouter/auto", Name: "openrouter/auto"}},
 	},
 	"anthropic": {
-		Key: "anthropic", DisplayName: "Anthropic", Sort: 60, DefaultAPIType: "anthropic-messages", EnvKey: "ANTHROPIC_API_KEY",
-		APIConfigs: []APIConfig{anthropicAPIConfig("https://api.anthropic.com", AuthModeXAPIKey)},
-		Models:     []Model{{ID: "claude-sonnet-4-6", Name: "Claude Sonnet 4.6"}, {ID: "claude-opus-4-6", Name: "Claude Opus 4.6"}, {ID: "claude-opus-4-5", Name: "Claude Opus 4.5"}, {ID: "claude-sonnet-4-5", Name: "Claude Sonnet 4.5"}, {ID: "claude-haiku-4-5", Name: "Claude Haiku 4.5"}},
+		Key:            "anthropic",
+		DisplayName:    "Anthropic",
+		Sort:           60,
+		DefaultBaseURL: "https://api.anthropic.com",
+		EnvKey:         "ANTHROPIC_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "anthropic-messages",
+			ContextWindow: 256000,
+			MaxTokens:     8192,
+			Input:         []string{"text", "image"},
+		},
+		Models: []Model{
+			{ID: "anthropic/claude-sonnet-4-6", Name: "Claude Sonnet 4.6", Reasoning: true},
+			{ID: "anthropic/claude-opus-4-6", Name: "Claude Opus 4.6", Reasoning: true},
+			{ID: "anthropic/claude-opus-4-5", Name: "Claude Opus 4.5"},
+			{ID: "anthropic/claude-sonnet-4-5", Name: "Claude Sonnet 4.5"},
+			{ID: "anthropic/claude-haiku-4-5", Name: "Claude Haiku 4.5"},
+		},
 	},
 	"gemini": {
-		Key: "gemini", DisplayName: "Gemini", Sort: 65, DefaultAPIType: "gemini-generate-content", EnvKey: "GEMINI_API_KEY",
-		APIConfigs: []APIConfig{{APIType: "gemini-generate-content", BaseURL: "https://generativelanguage.googleapis.com"}},
-		Models:     []Model{{ID: "gemini-3-flash-preview", Name: "Gemini 3 Flash Preview"}, {ID: "gemini-flash-latest", Name: "Gemini Flash Latest"}, {ID: "gemini-3-pro-preview", Name: "Gemini 3 Pro Preview"}},
+		Key:            "gemini",
+		DisplayName:    "Gemini",
+		Sort:           65,
+		DefaultBaseURL: "https://generativelanguage.googleapis.com",
+		EnvKey:         "GEMINI_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 256000,
+			MaxTokens:     8192,
+			Input:         []string{"text", "image"},
+		},
+		Models: []Model{
+			{ID: "google/gemini-3-flash-preview", Name: "Gemini 3 Flash Preview", Reasoning: true},
+			{ID: "google/gemini-flash-latest", Name: "Gemini Flash Latest"},
+			{ID: "google/gemini-3-pro-preview", Name: "Gemini 3 Pro Preview", Reasoning: true},
+		},
 	},
 	"moonshot": {
-		Key: "moonshot", DisplayName: "Moonshot (Global)", Sort: 70, DefaultAPIType: "openai-completions", EnvKey: "MOONSHOT_API_KEY",
-		APIConfigs: []APIConfig{{APIType: "openai-completions", BaseURL: "https://api.moonshot.ai/v1"}},
-		Models:     []Model{{ID: "kimi-k2.5", Name: "Kimi K2.5"}, {ID: "kimi-k2-0905-preview", Name: "Kimi K2 0905 Preview"}, {ID: "kimi-k2-thinking", Name: "Kimi K2 Thinking"}},
-	},
-	"bailian": {
-		Key: "bailian", DisplayNameKey: "AIProviderBailian", Sort: 31, DefaultAPIType: "openai-completions", EnvKey: "DASHSCOPE_API_KEY",
-		APIConfigs: []APIConfig{
-			{
-				APIType: "openai-completions", BaseURL: "https://dashscope.aliyuncs.com/compatible-mode/v1",
-				DiscoverModels: true,
-				Models:         []Model{{ID: "qwen3.7-plus", Name: "qwen3.7-plus"}, {ID: "qwen3.6-plus", Name: "qwen3.6-plus"}, {ID: "qwen3.6-flash", Name: "qwen3.6-flash"}},
-			},
-			{
-				APIType: "openai-responses", BaseURL: "https://dashscope.aliyuncs.com/compatible-mode/v1",
-				DiscoverModels: true,
-				Models:         []Model{{ID: "qwen3.7-plus", Name: "qwen3.7-plus"}, {ID: "qwen3.6-plus", Name: "qwen3.6-plus"}, {ID: "qwen3.6-flash", Name: "qwen3.6-flash"}},
-			},
-			{
-				APIType: "anthropic-messages", BaseURL: "https://dashscope.aliyuncs.com/apps/anthropic",
-				DefaultAuthMode: AuthModeBearer,
-				AuthModes:       []string{AuthModeBearer},
-				Models:          []Model{{ID: "qwen3.7-plus", Name: "qwen3.7-plus"}, {ID: "qwen3.6-plus", Name: "qwen3.6-plus"}, {ID: "qwen3.6-flash", Name: "qwen3.6-flash"}},
-			},
-			{
-				APIType: "dashscope-images", BaseURL: "https://dashscope.aliyuncs.com",
-				Models: []Model{
-					{ID: "qwen-image-2.0-pro", Name: "qwen-image-2.0-pro"},
-					{ID: "qwen-image-2.0", Name: "qwen-image-2.0"},
-					{ID: "wan2.7-image-pro", Name: "wan2.7-image-pro"},
-					{ID: "wan2.7-image", Name: "wan2.7-image"},
-				},
-			},
+		Key:            "moonshot",
+		DisplayName:    "Moonshot (Global)",
+		Sort:           70,
+		DefaultBaseURL: "https://api.moonshot.ai/v1",
+		EnvKey:         "MOONSHOT_API_KEY",
+		Default: RuntimeDefault{
+			APIType:       "openai-completions",
+			ContextWindow: 256000,
+			MaxTokens:     8192,
+			Input:         []string{"text"},
+		},
+		Models: []Model{
+			{ID: "moonshot/kimi-k2.5", Name: "Kimi K2.5", Reasoning: true},
+			{ID: "moonshot/kimi-k2-0905-preview", Name: "Kimi K2 0905 Preview"},
+			{ID: "moonshot/kimi-k2-thinking", Name: "Kimi K2 Thinking", Reasoning: true},
 		},
 	},
-	"ark": {
-		Key: "ark", DisplayNameKey: "AIProviderArk", Sort: 36, DefaultAPIType: "openai-completions", EnvKey: "ARK_API_KEY",
-		APIConfigs: []APIConfig{
-			{
-				APIType: "openai-completions", BaseURL: "https://ark.cn-beijing.volces.com/api/v3",
-				DiscoverModels: true,
-				Models:         []Model{{ID: "doubao-seed-2-0-pro-260215", Name: "doubao-seed-2-0-pro-260215"}, {ID: "doubao-seed-2-0-lite-260215", Name: "doubao-seed-2-0-lite-260215"}},
-			},
-			{
-				APIType: "openai-responses", BaseURL: "https://ark.cn-beijing.volces.com/api/v3",
-				DiscoverModels: true,
-				Models:         []Model{{ID: "doubao-seed-2-0-pro-260215", Name: "doubao-seed-2-0-pro-260215"}, {ID: "doubao-seed-2-0-lite-260215", Name: "doubao-seed-2-0-lite-260215"}},
-			},
-			{
-				APIType: "openai-images", BaseURL: "https://ark.cn-beijing.volces.com/api/v3",
-				Models: []Model{
-					{ID: "doubao-seedream-5-0-260128", Name: "doubao-seedream-5-0-260128"},
-					{ID: "doubao-seedream-5-0-lite-260128", Name: "doubao-seedream-5-0-lite-260128"},
-					{ID: "doubao-seedream-4-5-251128", Name: "doubao-seedream-4-5-251128"},
-				},
-			},
-		},
-	},
-}
-
-func editableAPIConfigs(discoverModels bool, apiTypes ...string) []APIConfig {
-	configs := make([]APIConfig, 0, len(apiTypes))
-	for _, apiType := range apiTypes {
-		if apiType == "anthropic-messages" {
-			config := anthropicAPIConfig("", AuthModeXAPIKey, AuthModeBearer)
-			config.EditableBaseURL = true
-			configs = append(configs, config)
-			continue
-		}
-		configs = append(configs, APIConfig{
-			APIType:         apiType,
-			EditableBaseURL: true,
-			DiscoverModels:  discoverModels && (apiType == "openai-completions" || apiType == "openai-responses"),
-		})
-	}
-	return configs
-}
-
-func anthropicAPIConfig(baseURL, defaultAuthMode string, additionalAuthModes ...string) APIConfig {
-	authModes := []string{defaultAuthMode}
-	for _, authMode := range additionalAuthModes {
-		if authMode != defaultAuthMode {
-			authModes = append(authModes, authMode)
-		}
-	}
-	return APIConfig{
-		APIType:         "anthropic-messages",
-		BaseURL:         baseURL,
-		DefaultAuthMode: defaultAuthMode,
-		AuthModes:       authModes,
-	}
 }
 
 func Get(key string) (Meta, bool) {
@@ -274,148 +332,12 @@ func All() map[string]Meta {
 	return result
 }
 
-func FindAPIConfig(key, apiType string) (APIConfig, bool) {
-	meta, ok := catalog[key]
-	if !ok {
-		return APIConfig{}, false
-	}
-	target := strings.TrimSpace(apiType)
-	if target == "" {
-		target = meta.DefaultAPIType
-	}
-	for _, config := range meta.APIConfigs {
-		if config.APIType == target {
-			config.AuthModes = append([]string(nil), config.AuthModes...)
-			config.Models = append([]Model(nil), config.Models...)
-			return config, true
-		}
-	}
-	return APIConfig{}, false
-}
-
-func DefaultModels(key, apiType string) []Model {
-	meta, ok := catalog[key]
-	if !ok {
-		return nil
-	}
-	target := strings.TrimSpace(apiType)
-	if target == "" {
-		target = meta.DefaultAPIType
-	}
-	for _, config := range meta.APIConfigs {
-		if config.APIType != target {
-			continue
-		}
-		if len(config.Models) > 0 {
-			return append([]Model(nil), config.Models...)
-		}
-		if IsImageAPIType(config.APIType) || IsEmbeddingAPIType(config.APIType) {
-			return nil
-		}
-		break
-	}
-	return append([]Model(nil), meta.Models...)
-}
-
-func ResolveAuthMode(provider, apiType, requested string) (string, error) {
-	config, ok := FindAPIConfig(provider, apiType)
-	if !ok {
-		return "", fmt.Errorf("provider %s does not support api type %s", provider, apiType)
-	}
-	if config.APIType != "anthropic-messages" {
-		return "", nil
-	}
-	authMode := strings.TrimSpace(requested)
-	if authMode == "" {
-		authMode = config.DefaultAuthMode
-	}
-	for _, allowed := range config.AuthModes {
-		if authMode == allowed {
-			return authMode, nil
-		}
-	}
-	return "", fmt.Errorf("provider %s does not support auth mode %s", provider, authMode)
-}
-
 func DefaultBaseURL(key string) (string, bool) {
-	config, ok := FindAPIConfig(key, "")
-	if !ok || strings.TrimSpace(config.BaseURL) == "" {
+	meta, ok := catalog[key]
+	if !ok || strings.TrimSpace(meta.DefaultBaseURL) == "" {
 		return "", false
 	}
-	return config.BaseURL, true
-}
-
-func DefaultAPIType(key string) string {
-	meta, ok := catalog[key]
-	if !ok || strings.TrimSpace(meta.DefaultAPIType) == "" {
-		return "openai-completions"
-	}
-	return meta.DefaultAPIType
-}
-
-func ResolveBaseURL(key, apiType, requested string) (string, error) {
-	config, ok := FindAPIConfig(key, apiType)
-	if !ok {
-		return "", fmt.Errorf("provider %s does not support api type %s", key, apiType)
-	}
-	if !config.EditableBaseURL {
-		return strings.TrimRight(config.BaseURL, "/"), nil
-	}
-	baseURL := strings.TrimSpace(requested)
-	if baseURL == "" {
-		baseURL = config.BaseURL
-	}
-	if baseURL == "" {
-		return "", fmt.Errorf("base url is required")
-	}
-	parsed, err := url.Parse(baseURL)
-	if err != nil || parsed.Scheme == "" || parsed.Host == "" {
-		return "", fmt.Errorf("invalid base url")
-	}
-	if key == "custom" && (IsImageAPIType(config.APIType) || IsEmbeddingAPIType(config.APIType)) {
-		return baseURL, nil
-	}
-	parsed.Path = normalizeEndpointPath(config.APIType, parsed.Path)
-	parsed.RawQuery = ""
-	parsed.Fragment = ""
-	return strings.TrimRight(parsed.String(), "/"), nil
-}
-
-func normalizeEndpointPath(apiType, value string) string {
-	if IsImageAPIType(apiType) {
-		return strings.TrimRight(value, "/")
-	}
-	path := strings.TrimRight(value, "/")
-	suffixes := []string{}
-	switch apiType {
-	case "openai-completions":
-		suffixes = []string{"/chat/completions"}
-	case "openai-responses":
-		suffixes = []string{"/responses"}
-	case "anthropic-messages":
-		suffixes = []string{"/v1/messages", "/messages"}
-	case "openai-embeddings":
-		suffixes = []string{"/v1/embeddings", "/embeddings"}
-	}
-	for _, suffix := range suffixes {
-		if strings.HasSuffix(strings.ToLower(path), suffix) {
-			return path[:len(path)-len(suffix)]
-		}
-	}
-	return path
-}
-
-func IsEmbeddingAPIType(apiType string) bool {
-	return apiType == "openai-embeddings"
-}
-
-func IsImageAPIType(apiType string) bool {
-	switch apiType {
-	case "openai-images", "dashscope-images", "minimax-images", "openrouter-images":
-		return true
-	default:
-		return false
-	}
+	return meta.DefaultBaseURL, true
 }
 
 func EnvKey(key string) string {
@@ -428,62 +350,89 @@ func EnvKey(key string) string {
 
 func DisplayName(key string) string {
 	meta, ok := catalog[key]
-	if !ok || strings.TrimSpace(meta.DisplayName) == "" {
+	if !ok {
+		return key
+	}
+	if strings.TrimSpace(meta.DisplayName) == "" {
 		return key
 	}
 	return meta.DisplayName
 }
 
-func DisplayNameKey(key string) string {
-	meta, ok := catalog[key]
+func FindModel(key, modelID string) (Model, bool) {
+	meta, ok := Get(key)
 	if !ok {
-		return ""
+		return Model{}, false
 	}
-	return meta.DisplayNameKey
-}
-
-func NormalizeModelID(provider, modelID string) string {
-	target := strings.TrimLeft(strings.TrimSpace(modelID), "/")
-	for _, prefix := range legacyModelPrefixes[provider] {
-		legacyPrefix := prefix + "/"
-		if !strings.HasPrefix(target, legacyPrefix) {
-			continue
-		}
-		candidate := strings.TrimSpace(strings.TrimPrefix(target, legacyPrefix))
-		if candidate != "" {
-			return candidate
+	for _, item := range meta.Models {
+		if item.ID == modelID {
+			return item, true
 		}
 	}
-	return target
-}
-
-var legacyModelPrefixes = map[string][]string{
-	"custom":              {"custom"},
-	"vllm":                {"custom"},
-	"ollama":              {"ollama"},
-	"llmman":              {"llmman"},
-	"deepseek":            {"deepseek"},
-	"bailian-coding-plan": {"bailian-coding-plan"},
-	"ark-coding-plan":     {"ark-coding-plan"},
-	"zai":                 {"zai"},
-	"minimax":             {"minimax"},
-	"xiaomi":              {"xiaomi"},
-	"kimi":                {"kimi", "moonshot"},
-	"kimi-coding":         {"kimi-coding"},
-	"openai":              {"openai"},
-	"anthropic":           {"anthropic"},
-	"gemini":              {"google", "gemini"},
-	"moonshot":            {"moonshot"},
+	return Model{}, false
 }
 
 func cloneMeta(meta Meta) Meta {
 	clone := meta
-	clone.APIConfigs = make([]APIConfig, len(meta.APIConfigs))
-	for index, config := range meta.APIConfigs {
-		clone.APIConfigs[index] = config
-		clone.APIConfigs[index].AuthModes = append([]string(nil), config.AuthModes...)
-		clone.APIConfigs[index].Models = append([]Model(nil), config.Models...)
+	if len(meta.Default.Input) > 0 {
+		clone.Default.Input = make([]string, len(meta.Default.Input))
+		copy(clone.Default.Input, meta.Default.Input)
+	}
+	if len(meta.Models) > 0 {
+		clone.Models = make([]Model, len(meta.Models))
+		for i, item := range meta.Models {
+			clone.Models[i] = normalizeModel(meta, item)
+		}
 	}
-	clone.Models = append([]Model(nil), meta.Models...)
 	return clone
 }
+
+func normalizeModel(meta Meta, model Model) Model {
+	clone := model
+	clone.ID = strings.TrimSpace(clone.ID)
+	clone.Name = strings.TrimSpace(clone.Name)
+	if clone.Name == "" {
+		clone.Name = clone.ID
+	}
+	if clone.MaxTokens <= 0 {
+		clone.MaxTokens = meta.Default.MaxTokens
+	}
+	if clone.ContextWindow <= 0 {
+		clone.ContextWindow = meta.Default.ContextWindow
+	}
+	if len(clone.Input) == 0 && len(meta.Default.Input) > 0 {
+		clone.Input = make([]string, len(meta.Default.Input))
+		copy(clone.Input, meta.Default.Input)
+	}
+	return clone
+}
+
+func ResolveRuntimeParams(provider, apiType string, maxTokens, contextWindow int) (string, int, int) {
+	defaultAPIType := "openai-completions"
+	defaultMaxTokens := 8192
+	defaultContextWindow := 256000
+	if meta, ok := Get(provider); ok {
+		if meta.Default.APIType != "" {
+			defaultAPIType = meta.Default.APIType
+		}
+		if meta.Default.MaxTokens > 0 {
+			defaultMaxTokens = meta.Default.MaxTokens
+		}
+		if meta.Default.ContextWindow > 0 {
+			defaultContextWindow = meta.Default.ContextWindow
+		}
+	}
+	resolvedAPI := apiType
+	if strings.TrimSpace(apiType) == "" {
+		resolvedAPI = defaultAPIType
+	}
+	resolvedMaxTokens := defaultMaxTokens
+	resolvedContextWindow := defaultContextWindow
+	if maxTokens > 0 {
+		resolvedMaxTokens = maxTokens
+	}
+	if contextWindow > 0 {
+		resolvedContextWindow = contextWindow
+	}
+	return resolvedAPI, resolvedMaxTokens, resolvedContextWindow
+}

agent/app/provider/discover.go

@@ -1,74 +0,0 @@
-package provider
-
-import (
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"strconv"
-	"strings"
-)
-
-func DiscoverModels(baseURL, apiKey string) ([]string, error) {
-	req, err := http.NewRequest(http.MethodGet, buildModelDiscoveryURL(baseURL), nil)
-	if err != nil {
-		return nil, err
-	}
-	req.Header.Set("Authorization", "Bearer "+apiKey)
-	resp, err := (&http.Client{Timeout: defaultVerifyTimeout}).Do(req)
-	if err != nil {
-		return nil, err
-	}
-	defer resp.Body.Close()
-	if resp.StatusCode >= http.StatusBadRequest {
-		return nil, fmt.Errorf("request failed: %s", resp.Status)
-	}
-	var payload struct {
-		Data []struct {
-			ID string `json:"id"`
-		} `json:"data"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&payload); err != nil {
-		return nil, err
-	}
-	models := make([]string, 0, len(payload.Data))
-	seen := make(map[string]struct{}, len(payload.Data))
-	for _, item := range payload.Data {
-		id := strings.TrimSpace(item.ID)
-		if id == "" {
-			continue
-		}
-		if _, ok := seen[id]; ok {
-			continue
-		}
-		seen[id] = struct{}{}
-		models = append(models, id)
-	}
-	if len(models) == 0 {
-		return nil, fmt.Errorf("no models found")
-	}
-	return models, nil
-}
-
-func buildModelDiscoveryURL(baseURL string) string {
-	base := strings.TrimRight(strings.TrimSpace(baseURL), "/")
-	for _, apiType := range []string{"openai-completions", "openai-responses", "anthropic-messages"} {
-		base = normalizeEndpointPath(apiType, base)
-	}
-	switch {
-	case strings.HasSuffix(base, "/models"):
-		return base
-	case hasAPIVersionSuffix(base):
-		return base + "/models"
-	default:
-		return base + "/v1/models"
-	}
-}
-
-func hasAPIVersionSuffix(value string) bool {
-	segment := value[strings.LastIndex(value, "/")+1:]
-	if len(segment) < 2 || segment[0] != 'v' {
-		return false
-	}
-	_, err := strconv.Atoi(segment[1:])
-	return err == nil
-}

agent/app/provider/minimax_test.go

@@ -1,100 +0,0 @@
-package provider
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"reflect"
-	"strings"
-	"testing"
-)
-
-func TestMiniMaxCatalog(t *testing.T) {
-	meta, ok := Get("minimax")
-	if !ok || !reflect.DeepEqual(meta.Models, []Model{{ID: "MiniMax-M3.1-Flash", Name: "MiniMax M3.1 Flash"}, {ID: "MiniMax-M3", Name: "MiniMax M3"}}) {
-		t.Fatalf("unexpected MiniMax models: %+v", meta.Models)
-	}
-	if meta.DefaultAPIType != "anthropic-messages" {
-		t.Fatalf("changed default protocol: %s", meta.DefaultAPIType)
-	}
-	for _, provider := range All() {
-		for _, model := range provider.Models {
-			if strings.Contains(strings.ToLower(model.ID), "minimax") && model.ID != "MiniMax-M3.1-Flash" && model.ID != "MiniMax-M3" {
-				t.Errorf("legacy suggestion in %s: %s", provider.Key, model.ID)
-			}
-		}
-	}
-}
-
-func TestMiniMaxVerificationRequests(t *testing.T) {
-	for _, region := range []string{"https://api.minimaxi.com", "https://api.minimax.io"} {
-		for _, protocol := range []string{"anthropic-messages", "openai-completions"} {
-			for _, auth := range []string{AuthModeXAPIKey, AuthModeBearer} {
-				for _, model := range []string{"MiniMax-M3.1-Flash", "MiniMax-M3", "MiniMax-M2.7", "MiniMax-M2.7-highspeed", "custom-model"} {
-					t.Run(region+"/"+protocol+"/"+auth+"/"+model, func(t *testing.T) {
-						base, endpoint := region+"/v1", "/chat/completions"
-						if protocol == "anthropic-messages" {
-							base, endpoint = region+"/anthropic", "/v1/messages"
-						}
-						built := BuildVerifyRequest("minimax", protocol, auth, base, "test-key", model)
-						if built.URL != base+endpoint {
-							t.Fatalf("URL = %s", built.URL)
-						}
-						var captured map[string]interface{}
-						server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-							if r.Method != http.MethodPost || r.URL.Path != strings.TrimPrefix(base, region)+endpoint {
-								t.Errorf("unexpected request: %s %s", r.Method, r.URL.Path)
-							}
-							if protocol == "anthropic-messages" && auth == AuthModeXAPIKey {
-								if r.Header.Get("x-api-key") != "test-key" || r.Header.Get("Authorization") != "" {
-									t.Error("incorrect API key authentication")
-								}
-							} else if r.Header.Get("Authorization") != "Bearer test-key" {
-								t.Error("incorrect bearer authentication")
-							}
-							if err := json.NewDecoder(r.Body).Decode(&captured); err != nil {
-								t.Error(err)
-							}
-							w.WriteHeader(http.StatusOK)
-						}))
-						defer server.Close()
-						if err := VerifyAccount("minimax", protocol, auth, server.URL+strings.TrimPrefix(base, region), "test-key", model); err != nil {
-							t.Fatal(err)
-						}
-						if captured["model"] != model || captured["stream"] != false || captured["max_tokens"] != float64(defaultVerifyMaxTokens) {
-							t.Fatalf("unexpected serialized body: %#v", captured)
-						}
-						if model == "MiniMax-M3.1-Flash" {
-							if protocol == "anthropic-messages" {
-								if !reflect.DeepEqual(captured["thinking"], map[string]interface{}{"type": "adaptive"}) || !reflect.DeepEqual(captured["output_config"], map[string]interface{}{"effort": "max"}) || captured["reasoning_effort"] != nil {
-									t.Fatalf("invalid Anthropic Flash reasoning: %#v", captured)
-								}
-							} else if captured["reasoning_effort"] != "max" || captured["thinking"] != nil || captured["output_config"] != nil {
-								t.Fatalf("invalid OpenAI Flash reasoning: %#v", captured)
-							}
-						} else if captured["reasoning_effort"] != nil || captured["thinking"] != nil || captured["output_config"] != nil {
-							t.Fatalf("changed legacy/custom reasoning: %#v", captured)
-						}
-					})
-				}
-			}
-		}
-	}
-}
-
-func TestMiniMaxExplicitGatewayAndCustomModels(t *testing.T) {
-	for _, provider := range []string{"bailian-coding-plan", "custom", "openrouter"} {
-		for _, protocol := range []string{"openai-completions", "anthropic-messages"} {
-			for _, model := range []string{"MiniMax-M2.5", "MiniMax-M3.1-Flash", "my-custom-model"} {
-				request := BuildVerifyRequest(provider, protocol, AuthModeBearer, "https://example.test/v1", "test-key", model)
-				var body map[string]interface{}
-				if err := json.Unmarshal(request.Body, &body); err != nil {
-					t.Fatal(err)
-				}
-				if body["model"] != model || body["reasoning_effort"] != nil || body["output_config"] != nil || body["thinking"] != nil {
-					t.Fatalf("changed explicit %s request: %#v", provider, body)
-				}
-			}
-		}
-	}
-}

agent/app/provider/openclaw.go

@@ -15,52 +15,72 @@ type OpenClawProviderPatch struct {
 	AuthHeader   bool
 }
 
-func BuildOpenClawProviderPatch(provider, modelName, apiType, authMode, baseURL, apiKey string) (*OpenClawProviderPatch, error) {
+func BuildOpenClawProviderPatch(provider, modelName, apiType, baseURL, apiKey string) (*OpenClawProviderPatch, error) {
 	if modelName == "" {
 		return nil, fmt.Errorf("model is required")
 	}
-	resolvedAPIType := apiType
-	if _, ok := FindAPIConfig(provider, resolvedAPIType); !ok {
-		resolvedAPIType = DefaultAPIType(provider)
-	}
-	if IsImageAPIType(resolvedAPIType) || IsEmbeddingAPIType(resolvedAPIType) {
-		return nil, fmt.Errorf("api type %s does not support text generation", resolvedAPIType)
-	}
-	resolvedAuthMode, err := ResolveAuthMode(provider, resolvedAPIType, authMode)
-	if err != nil {
-		return nil, err
-	}
-	usesBearer := resolvedAuthMode == AuthModeBearer
-	modelID := NormalizeModelID(provider, modelName)
-	providerKey := provider
-	preserveQualifiedModel := false
+	resolvedAPIType, _, _ := ResolveRuntimeParams(provider, apiType, 0, 0)
+	modelID := resolveOpenClawModelID(provider, modelName)
 	switch provider {
+	case "deepseek":
+		return newOpenClawProviderPatch(modelName, "deepseek", modelID, apiKey, baseURL, "openai-completions", false), nil
 	case "gemini":
-		providerKey = "google"
-		resolvedAPIType = "google-generative-ai"
-		usesBearer = false
+		return newOpenClawProviderPatch("google/"+modelID, "google", modelID, apiKey, baseURL, resolvedAPIType, false), nil
 	case "moonshot", "kimi":
-		providerKey = "moonshot"
-		resolvedAPIType = "openai-completions"
-		usesBearer = false
-	case "ollama", "llmman":
-		apiKey = provider
-		usesBearer = false
-	case "openai", "openrouter", "anthropic":
-		preserveQualifiedModel = strings.Contains(modelName, "/")
+		return buildMoonshotProviderPatch(provider, modelName, modelID, baseURL, apiKey), nil
+	case "bailian-coding-plan":
+		return newOpenClawProviderPatch("bailian-coding-plan/"+modelID, "bailian-coding-plan", modelID, apiKey, baseURL, "openai-completions", false), nil
+	case "ark-coding-plan":
+		return newOpenClawProviderPatch("ark-coding-plan/"+modelID, "ark-coding-plan", modelID, apiKey, baseURL, "openai-completions", false), nil
+	case "minimax":
+		return newOpenClawProviderPatch("minimax/"+modelID, "minimax", modelID, apiKey, baseURL, "anthropic-messages", true), nil
+	case "xiaomi":
+		return newOpenClawProviderPatch("xiaomi/"+modelID, "xiaomi", modelID, apiKey, baseURL, "openai-completions", false), nil
+	case "custom", "vllm":
+		return newOpenClawProviderPatch(provider+"/"+modelID, provider, modelID, apiKey, baseURL, resolvedAPIType, false), nil
+	case "ollama":
+		return newOpenClawProviderPatch(modelName, "ollama", modelID, "ollama", baseURL, resolvedAPIType, false), nil
+	case "kimi-coding":
+		return newOpenClawProviderPatch(modelName, "kimi-coding", modelID, apiKey, baseURL, "anthropic-messages", false), nil
+	case "zai":
+		return newOpenClawProviderPatch("zai/"+modelID, "zai", modelID, apiKey, baseURL, "openai-completions", false), nil
+	default:
+		return newOpenClawProviderPatch(modelName, provider, modelID, apiKey, baseURL, resolvedAPIType, false), nil
 	}
+}
 
-	primaryModel := providerKey + "/" + modelID
-	if preserveQualifiedModel {
-		primaryModel = modelName
+func buildMoonshotProviderPatch(provider, modelName, modelID, baseURL, apiKey string) *OpenClawProviderPatch {
+	providerKey := provider
+	primaryModel := modelName
+	if provider == "kimi" {
+		providerKey = "moonshot"
+		primaryModel = "moonshot/" + modelID
 	}
+	return newOpenClawProviderPatch(primaryModel, providerKey, modelID, apiKey, baseURL, "openai-completions", false)
+}
+
+func newOpenClawProviderPatch(primaryModel, providerKey, modelID, apiKey, baseURL, apiType string, authHeader bool) *OpenClawProviderPatch {
 	return &OpenClawProviderPatch{
 		PrimaryModel: primaryModel,
 		ProviderKey:  providerKey,
 		ModelID:      modelID,
 		APIKey:       apiKey,
 		BaseURL:      baseURL,
-		APIType:      resolvedAPIType,
-		AuthHeader:   usesBearer,
-	}, nil
+		APIType:      apiType,
+		AuthHeader:   authHeader,
+	}
+}
+
+func resolveOpenClawModelID(provider, modelName string) string {
+	if provider == "custom" || provider == "vllm" {
+		target := strings.TrimLeft(modelName, "/")
+		if parts := strings.SplitN(target, "/", 2); len(parts) == 2 && parts[0] == "custom" {
+			return strings.TrimLeft(parts[1], "/")
+		}
+		return target
+	}
+	if parts := strings.SplitN(modelName, "/", 2); len(parts) == 2 {
+		return parts[1]
+	}
+	return modelName
 }

agent/app/provider/verify.go

@@ -3,9 +3,7 @@ package provider
 import (
 	"bytes"
 	"encoding/json"
-	"errors"
 	"fmt"
-	"io"
 	"net/http"
 	"strings"
 	"time"
@@ -20,167 +18,160 @@ type VerifyRequest struct {
 	Body    []byte
 }
 
-type verifyErrorResponse struct {
-	Error struct {
-		Message string `json:"message"`
-	} `json:"error"`
-	Message string `json:"message"`
-}
-
 const (
-	defaultVerifyTimeout   = 30 * time.Second
-	defaultVerifyMaxTokens = 16
+	defaultVerifyTimeout = 30 * time.Second
 )
 
-func SkipVerification(provider string) bool {
-	switch provider {
-	case "vllm", "ollama", "llmman", "kimi-coding":
+func SkipVerification(key string) bool {
+	switch key {
+	case "custom", "vllm", "ollama", "kimi-coding":
 		return true
 	default:
 		return false
 	}
 }
 
-func VerifyAccount(provider, apiType, authMode, baseURL, apiKey, model string) error {
-	req := BuildVerifyRequest(provider, apiType, authMode, baseURL, apiKey, model)
-	httpReq, err := http.NewRequest(req.Method, req.URL, bytes.NewReader(req.Body))
+func VerifyAccount(provider, baseURL, apiKey string) error {
+	req := BuildVerifyRequest(provider, baseURL, apiKey)
+	var body *bytes.Buffer
+	if len(req.Body) > 0 {
+		body = bytes.NewBuffer(req.Body)
+	} else {
+		body = bytes.NewBuffer(nil)
+	}
+	httpReq, err := http.NewRequest(req.Method, req.URL, body)
 	if err != nil {
 		return err
 	}
 	for key, value := range req.Headers {
 		httpReq.Header.Set(key, value)
 	}
-	httpReq.Header.Set("Accept", "application/json")
-	resp, err := (&http.Client{Timeout: defaultVerifyTimeout}).Do(httpReq)
+	resp, err := (&http.Client{Timeout: verifyTimeout()}).Do(httpReq)
 	if err != nil {
 		return buserr.WithErr("ErrAgentAccountUnavailable", err)
 	}
 	defer resp.Body.Close()
-	if resp.StatusCode < http.StatusOK || resp.StatusCode >= http.StatusMultipleChoices {
-		body, readErr := io.ReadAll(io.LimitReader(resp.Body, 1024*1024))
-		if readErr != nil {
-			return buserr.WithErr("ErrAgentAccountUnavailable", readErr)
-		}
-		return buserr.WithErr("ErrAgentAccountUnavailable", errors.New(verifyHTTPError(resp.StatusCode, body)))
+	if resp.StatusCode >= 400 {
+		return buserr.WithErr("ErrAgentAccountUnavailable", fmt.Errorf("verify failed: %s", resp.Status))
 	}
 	return nil
 }
 
-func BuildVerifyRequest(provider, apiType, authMode, baseURL, apiKey, model string) VerifyRequest {
-	baseURL = strings.TrimSpace(baseURL)
-	if provider != "custom" || !IsImageAPIType(apiType) {
-		baseURL = strings.TrimRight(baseURL, "/")
-	}
-	headers := map[string]string{"Content-Type": "application/json"}
-	request := VerifyRequest{Method: http.MethodPost, Headers: headers}
+func verifyTimeout() time.Duration {
+	return defaultVerifyTimeout
+}
 
-	if provider == "gemini" {
-		request.URL = baseURL + "/v1beta/models/" + strings.TrimSpace(model) + ":generateContent"
-		headers["x-goog-api-key"] = apiKey
-		request.Body = mustJSON(map[string]interface{}{
-			"contents": []map[string]interface{}{{"parts": []map[string]string{{"text": "test"}}}},
-		})
-		return request
-	}
+func BuildVerifyRequest(provider, baseURL, apiKey string) VerifyRequest {
+	base := strings.TrimRight(strings.TrimSpace(baseURL), "/")
+	headers := map[string]string{}
+	request := VerifyRequest{Method: http.MethodGet, Headers: headers}
 
-	switch apiType {
-	case "openai-embeddings":
-		request.URL = embeddingVerifyURL(baseURL)
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{"model": model, "input": "ping"})
-	case "openai-images":
-		request.URL = imageVerifyURL(provider, baseURL, "/images/generations")
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{"model": model, "prompt": "test", "n": 1, "response_format": "url"})
-	case "dashscope-images":
-		request.URL = imageVerifyURL(provider, baseURL, "/api/v1/services/aigc/multimodal-generation/generation")
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{
-			"model": model,
-			"input": map[string]interface{}{"messages": []map[string]interface{}{
-				{"role": "user", "content": []map[string]string{{"text": "test"}}},
-			}},
-			"parameters": map[string]interface{}{"n": 1},
-		})
-	case "minimax-images":
-		request.URL = imageVerifyURL(provider, baseURL, "/v1/image_generation")
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{"model": model, "prompt": "test", "n": 1, "response_format": "url"})
-	case "openrouter-images":
-		request.URL = imageVerifyURL(provider, baseURL, "/api/v1/images")
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{"model": model, "prompt": "test", "n": 1, "response_format": "url"})
-	case "anthropic-messages":
-		request.URL = baseURL + "/v1/messages"
-		if authMode == AuthModeBearer {
-			headers["Authorization"] = "Bearer " + apiKey
-		} else {
-			headers["x-api-key"] = apiKey
-		}
+	switch provider {
+	case "anthropic", "kimi-coding":
+		headers["x-api-key"] = apiKey
 		headers["anthropic-version"] = "2023-06-01"
-		body := map[string]interface{}{
-			"model": model, "max_tokens": defaultVerifyMaxTokens, "stream": false,
-			"messages": []map[string]interface{}{{"role": "user", "content": []map[string]string{{"type": "text", "text": "test"}}}},
+		if strings.Contains(base, "/v1") {
+			request.URL = base + "/models"
+		} else {
+			request.URL = base + "/v1/models"
 		}
-		if provider == "minimax" && model == "MiniMax-M3.1-Flash" {
-			body["thinking"] = map[string]string{"type": "adaptive"}
-			body["output_config"] = map[string]string{"effort": "max"}
+	case "gemini":
+		request.Method = http.MethodPost
+		if strings.Contains(base, "/v1beta") {
+			request.URL = base + "/models/gemini-3-flash-preview:generateContent"
+		} else {
+			request.URL = base + "/v1beta/models/gemini-3-flash-preview:generateContent"
+		}
+		headers["x-goog-api-key"] = apiKey
+		headers["Content-Type"] = "application/json"
+		request.Body = mustJSON(map[string]interface{}{
+			"contents": []map[string]interface{}{{
+				"parts": []map[string]string{{
+					"text": "Explain how AI works in a few words",
+				}},
+			}},
+		})
+	case "zai":
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		request.URL = base + "/models"
+	case "bailian-coding-plan":
+		request.Method = http.MethodPost
+		if !strings.Contains(base, "/v1") {
+			base = base + "/v1"
+		}
+		request.URL = base + "/chat/completions"
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		headers["Content-Type"] = "application/json"
+		request.Body = mustJSON(map[string]interface{}{
+			"model":      "qwen3.5-plus",
+			"messages":   []map[string]string{{"role": "user", "content": "test"}},
+			"max_tokens": 1,
+		})
+	case "ark-coding-plan":
+		request.Method = http.MethodPost
+		if !strings.Contains(base, "/api/coding/v3") {
+			base = "https://ark.cn-beijing.volces.com/api/coding/v3"
+		}
+		request.URL = base + "/chat/completions"
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		headers["Content-Type"] = "application/json"
+		request.Body = mustJSON(map[string]interface{}{
+			"model":      "ark-code-latest",
+			"messages":   []map[string]string{{"role": "user", "content": "test"}},
+			"max_tokens": 1,
+		})
+	case "minimax":
+		request.Method = http.MethodPost
+		headers["x-api-key"] = apiKey
+		headers["anthropic-version"] = "2023-06-01"
+		headers["Content-Type"] = "application/json"
+		if strings.Contains(base, "/v1") {
+			request.URL = base + "/messages"
+		} else {
+			request.URL = base + "/v1/messages"
+		}
+		request.Body = mustJSON(map[string]interface{}{
+			"model":      "MiniMax-M2.5",
+			"max_tokens": 1,
+			"messages": []map[string]interface{}{{
+				"role": "user",
+				"content": []map[string]string{{
+					"type": "text",
+					"text": "test",
+				}},
+			}},
+		})
+	case "xiaomi":
+		request.Method = http.MethodPost
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		headers["Content-Type"] = "application/json"
+		if !strings.Contains(base, "/v1") {
+			base = base + "/v1"
+		}
+		request.URL = base + "/chat/completions"
+		request.Body = mustJSON(map[string]interface{}{
+			"model":      "mimo-v2-flash",
+			"max_tokens": 1,
+			"messages":   []map[string]string{{"role": "user", "content": "test"}},
+		})
+	case "openrouter":
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		if strings.Contains(base, "/v1") {
+			request.URL = base + "/key"
+		} else {
+			request.URL = base + "/v1/key"
 		}
-		request.Body = mustJSON(body)
-	case "openai-responses":
-		request.URL = baseURL + "/responses"
-		headers["Authorization"] = "Bearer " + apiKey
-		request.Body = mustJSON(map[string]interface{}{"model": model, "input": "test", "max_output_tokens": defaultVerifyMaxTokens, "stream": false})
 	default:
-		request.URL = baseURL + "/chat/completions"
-		if (provider != "ollama" && provider != "llmman") || strings.TrimSpace(apiKey) != "" {
-			headers["Authorization"] = "Bearer " + apiKey
+		headers["Authorization"] = fmt.Sprintf("Bearer %s", apiKey)
+		if strings.Contains(base, "/v1") {
+			request.URL = base + "/models"
+		} else {
+			request.URL = base + "/v1/models"
 		}
-		body := map[string]interface{}{
-			"model": model, "messages": []map[string]string{{"role": "user", "content": "test"}}, "max_tokens": defaultVerifyMaxTokens, "stream": false,
-		}
-		if provider == "minimax" && model == "MiniMax-M3.1-Flash" {
-			body["reasoning_effort"] = "max"
-		}
-		request.Body = mustJSON(body)
 	}
 	return request
 }
 
-func embeddingVerifyURL(baseURL string) string {
-	lowerBaseURL := strings.ToLower(baseURL)
-	if strings.HasSuffix(lowerBaseURL, "/embeddings") {
-		return baseURL
-	}
-	if strings.HasSuffix(lowerBaseURL, "/v1") {
-		return baseURL + "/embeddings"
-	}
-	return baseURL + "/v1/embeddings"
-}
-
-func imageVerifyURL(provider, baseURL, endpoint string) string {
-	if provider == "custom" || strings.HasSuffix(strings.ToLower(baseURL), endpoint) {
-		return baseURL
-	}
-	return baseURL + endpoint
-}
-
-func verifyHTTPError(statusCode int, body []byte) string {
-	message := strings.TrimSpace(string(body))
-	var payload verifyErrorResponse
-	if err := json.Unmarshal(body, &payload); err == nil {
-		if value := strings.TrimSpace(payload.Error.Message); value != "" {
-			message = value
-		} else if value := strings.TrimSpace(payload.Message); value != "" {
-			message = value
-		}
-	}
-	if message == "" {
-		return fmt.Sprintf("validation request returned status %d", statusCode)
-	}
-	return message
-}
-
 func mustJSON(value interface{}) []byte {
 	payload, err := json.Marshal(value)
 	if err != nil {

agent/app/repo/agent_account.go

@@ -4,7 +4,6 @@ import (
 	"strings"
 
 	"github.com/1Panel-dev/1Panel/agent/app/model"
-	"github.com/1Panel-dev/1Panel/agent/global"
 	"gorm.io/gorm"
 )
 
@@ -18,8 +17,7 @@ type IAgentAccountRepo interface {
 	Save(account *model.AgentAccount) error
 	DeleteByID(id uint) error
 	List(opts ...DBOption) ([]model.AgentAccount, error)
-	CountTextByProviders(providers []string) (map[string]int64, error)
-	SaveLocal(account *model.AgentAccount, models []model.AgentAccountModel) error
+	CountByProviders(providers []string) (map[string]int64, error)
 }
 
 func NewIAgentAccountRepo() IAgentAccountRepo {
@@ -69,7 +67,7 @@ func (a AgentAccountRepo) List(opts ...DBOption) ([]model.AgentAccount, error) {
 	return accounts, nil
 }
 
-func (a AgentAccountRepo) CountTextByProviders(providers []string) (map[string]int64, error) {
+func (a AgentAccountRepo) CountByProviders(providers []string) (map[string]int64, error) {
 	normalizedProviders := normalizeProviders(providers)
 	counts := make(map[string]int64, len(normalizedProviders))
 	for _, provider := range normalizedProviders {
@@ -88,7 +86,6 @@ func (a AgentAccountRepo) CountTextByProviders(providers []string) (map[string]i
 		Model(&model.AgentAccount{}).
 		Select("provider, COUNT(*) as count").
 		Where("provider IN ?", normalizedProviders).
-		Scopes(WithTextAPIType()).
 		Group("provider").
 		Scan(&rows).Error; err != nil {
 		return nil, err
@@ -99,25 +96,6 @@ func (a AgentAccountRepo) CountTextByProviders(providers []string) (map[string]i
 	return counts, nil
 }
 
-func (a AgentAccountRepo) SaveLocal(account *model.AgentAccount, models []model.AgentAccountModel) error {
-	return global.DB.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Save(account).Error; err != nil {
-			return err
-		}
-		if err := tx.Where("account_id = ?", account.ID).Delete(&model.AgentAccountModel{}).Error; err != nil {
-			return err
-		}
-		if len(models) == 0 {
-			return nil
-		}
-		for i := range models {
-			models[i].AccountID = account.ID
-			models[i].SortOrder = i + 1
-		}
-		return tx.Create(&models).Error
-	})
-}
-
 func normalizeProviders(providers []string) []string {
 	seen := make(map[string]struct{}, len(providers))
 	result := make([]string, 0, len(providers))

agent/app/repo/ai.go

@@ -1,8 +1,6 @@
 package repo
 
 import (
-	"context"
-
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 	"github.com/1Panel-dev/1Panel/agent/global"
 )
@@ -16,7 +14,6 @@ type IAiRepo interface {
 	Create(cronjob *model.OllamaModel) error
 	Update(id uint, vars map[string]interface{}) error
 	Delete(opts ...DBOption) error
-	DeleteAll(ctx context.Context) error
 }
 
 func NewIAiRepo() IAiRepo {
@@ -70,7 +67,3 @@ func (u *AiRepo) Delete(opts ...DBOption) error {
 	}
 	return db.Delete(&model.OllamaModel{}).Error
 }
-
-func (u *AiRepo) DeleteAll(ctx context.Context) error {
-	return getTx(ctx).Where("1 = 1").Delete(&model.OllamaModel{}).Error
-}

agent/app/repo/alert.go

@@ -1,30 +1,20 @@
 package repo
 
 import (
-	"encoding/base64"
 	"encoding/json"
-	"errors"
-	"fmt"
-	"strconv"
 	"strings"
-	"time"
 
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 	"github.com/1Panel-dev/1Panel/agent/constant"
 	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/google/uuid"
 	"google.golang.org/genproto/googleapis/type/date"
 	"gorm.io/gorm"
-	"gorm.io/gorm/clause"
+	"strconv"
+	"time"
 )
 
 type AlertRepo struct{}
 
-var (
-	ErrAlertConfigRevisionConflict = errors.New("alert config revision conflict")
-	ErrAlertConfigRevisionRequired = errors.New("alert config revision is required")
-)
-
 type IAlertRepo interface {
 	WithByType(alertType string) DBOption
 	WithByStatusIn(status []string) DBOption
@@ -34,7 +24,6 @@ type IAlertRepo interface {
 	WithByCreateAt(date *date.Date) DBOption
 	WithByLicenseId(licenseId string) DBOption
 	WithByRecordId(recordId uint) DBOption
-	WithByDeliveryLogID(logID uint) DBOption
 	WithByAlertMethodContainsConfigID(id uint) DBOption
 	WithByMethodConfigIDs(ids []uint) DBOption
 
@@ -56,8 +45,6 @@ type IAlertRepo interface {
 	CleanAlertLogs() error
 
 	CreateAlertTask(alertTaskBase *model.AlertTask) error
-	CreatePendingAlertTask(logID, alertID uint, alertTask *model.AlertTask) (bool, error)
-	FinalizePendingAlertTask(logID uint, succeeded bool, message string, fallback *model.AlertTask) (bool, error)
 	DeleteAlertTask(opts ...DBOption) error
 	GetAlertTask(opts ...DBOption) (model.AlertTask, error)
 	LoadTaskCount(alertType string, project string, method string) (uint, uint, error)
@@ -68,7 +55,6 @@ type IAlertRepo interface {
 	GetConfigById(id uint) (model.AlertConfig, error)
 	AlertConfigList(opts ...DBOption) ([]model.AlertConfig, error)
 	UpdateAlertConfig(maps map[string]interface{}, opts ...DBOption) error
-	UpdateAlertConfigWithRevision(maps map[string]interface{}, revision *time.Time, opts ...DBOption) error
 	CreateAlertConfig(config *model.AlertConfig) error
 	DeleteAlertConfig(opts ...DBOption) error
 
@@ -237,78 +223,13 @@ func (a *AlertRepo) DeleteLog(opts ...DBOption) error {
 }
 
 func (a *AlertRepo) CleanAlertLogs() error {
-	return global.AlertDB.Where("status <> ?", constant.AlertPushing).Delete(&model.AlertLog{}).Error
+	return global.AlertDB.Where("1 = 1").Delete(&model.AlertLog{}).Error
 }
 
 func (a *AlertRepo) CreateAlertTask(alertTaskBase *model.AlertTask) error {
 	return global.AlertDB.Model(&model.AlertTask{}).Create(&alertTaskBase).Error
 }
 
-func (a *AlertRepo) CreatePendingAlertTask(logID, alertID uint, alertTask *model.AlertTask) (bool, error) {
-	if alertTask == nil {
-		return false, fmt.Errorf("pending alert task is required")
-	}
-	created := false
-	err := global.AlertDB.Transaction(func(tx *gorm.DB) error {
-		var log model.AlertLog
-		if err := tx.Where("id = ? AND status = ?", logID, constant.AlertPushing).First(&log).Error; err != nil {
-			return err
-		}
-		if log.AlertId != alertID || log.Type != alertTask.Type || log.Method != alertTask.Method {
-			return fmt.Errorf("pending alert task does not match delivery log %d", logID)
-		}
-		alertTask.DeliveryLogID = &logID
-		result := tx.Clauses(clause.OnConflict{
-			Columns:   []clause.Column{{Name: "delivery_log_id"}},
-			DoNothing: true,
-		}).Create(alertTask)
-		if result.Error != nil {
-			return result.Error
-		}
-		created = result.RowsAffected > 0
-		return nil
-	})
-	return created, err
-}
-
-func (a *AlertRepo) FinalizePendingAlertTask(logID uint, succeeded bool, message string, fallback *model.AlertTask) (bool, error) {
-	finalized := false
-	err := global.AlertDB.Transaction(func(tx *gorm.DB) error {
-		status := constant.AlertError
-		if succeeded {
-			status = constant.AlertSuccess
-			message = ""
-		}
-		result := tx.Model(&model.AlertLog{}).
-			Where("id = ? AND status = ?", logID, constant.AlertPushing).
-			Updates(map[string]interface{}{"status": status, "message": message})
-		if result.Error != nil {
-			return result.Error
-		}
-		if result.RowsAffected == 0 {
-			return nil
-		}
-		finalized = true
-		if !succeeded {
-			return tx.Where("delivery_log_id = ?", logID).Delete(&model.AlertTask{}).Error
-		}
-
-		var count int64
-		if err := tx.Model(&model.AlertTask{}).Where("delivery_log_id = ?", logID).Count(&count).Error; err != nil {
-			return err
-		}
-		if count > 0 {
-			return nil
-		}
-		if fallback == nil {
-			return fmt.Errorf("pending alert task metadata is unavailable for delivery log %d", logID)
-		}
-		fallback.DeliveryLogID = &logID
-		return tx.Create(fallback).Error
-	})
-	return finalized, err
-}
-
 func (a *AlertRepo) DeleteAlertTask(opts ...DBOption) error {
 	db, _ := getAlertDB(opts...)
 	return db.Delete(&model.AlertTask{}).Error
@@ -389,23 +310,7 @@ func (a *AlertRepo) UpdateAlertConfig(maps map[string]interface{}, opts ...DBOpt
 	return db.Model(&model.AlertConfig{}).Updates(maps).Error
 }
 
-func (a *AlertRepo) UpdateAlertConfigWithRevision(maps map[string]interface{}, revision *time.Time, opts ...DBOption) error {
-	if revision == nil {
-		return a.UpdateAlertConfig(maps, opts...)
-	}
-	db, _ := getAlertDB(opts...)
-	result := db.Model(&model.AlertConfig{}).Where("updated_at = ?", *revision).Updates(maps)
-	if result.Error != nil {
-		return result.Error
-	}
-	if result.RowsAffected == 0 {
-		return ErrAlertConfigRevisionConflict
-	}
-	return nil
-}
-
 func (a *AlertRepo) CreateAlertConfig(config *model.AlertConfig) error {
-	ensureAlertConfigUID(config)
 	return global.AlertDB.Model(&model.AlertConfig{}).Create(config).Error
 }
 
@@ -433,12 +338,6 @@ func (a *AlertRepo) WithByTypeNotIn(types []string) DBOption {
 	}
 }
 
-func (a *AlertRepo) WithByDeliveryLogID(logID uint) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("delivery_log_id = ?", logID)
-	}
-}
-
 func (a *AlertRepo) PageAlertConfig(page, size int, opts ...DBOption) (int64, []model.AlertConfig, error) {
 	var configs []model.AlertConfig
 	db := global.AlertDB.Model(&model.AlertConfig{})
@@ -479,44 +378,26 @@ func (a *AlertRepo) SyncAll(data []model.AlertConfig) error {
 		return err
 	}
 
-	oldConfigMap := make(map[string]model.AlertConfig)
-	oldConfigByUID := make(map[string]model.AlertConfig)
+	oldConfigMap := make(map[string]uint)
 	oldConfigByType := make(map[string][]model.AlertConfig)
 	oldConfigByKey := make(map[string][]model.AlertConfig)
 	consumedConfigIDs := make(map[uint]struct{})
 	for _, item := range oldConfigs {
-		if strings.TrimSpace(item.UID) != "" {
-			oldConfigByUID[item.UID] = item
-		}
 		if singletonTypes[item.Type] {
-			oldConfigMap[item.Type] = item
+			oldConfigMap[item.Type] = item.ID
 			continue
 		}
 		oldConfigByType[item.Type] = append(oldConfigByType[item.Type], item)
 		oldConfigByKey[alertConfigSyncKey(item)] = append(oldConfigByKey[alertConfigSyncKey(item)], item)
 	}
 	for _, item := range data {
-		if uid := strings.TrimSpace(item.UID); uid != "" {
-			if matched, ok := oldConfigByUID[uid]; ok && matched.Type != item.Type {
-				tx.Rollback()
-				return fmt.Errorf("alert config UID %q belongs to type %q, not %q", uid, matched.Type, item.Type)
-			}
-		}
 		if singletonTypes[item.Type] {
-			if matched, ok := oldConfigMap[item.Type]; ok {
-				if err := inheritAlertConfigSyncState(&item, matched); err != nil {
-					tx.Rollback()
-					return err
-				}
+			if val, ok := oldConfigMap[item.Type]; ok {
+				item.ID = val
 				delete(oldConfigMap, item.Type)
 				consumedConfigIDs[item.ID] = struct{}{}
 			} else {
 				item.ID = 0
-				ensureAlertConfigUID(&item)
-				if err := validateAlertConfigSyncSecret(&item); err != nil {
-					tx.Rollback()
-					return err
-				}
 			}
 			if item.ID == 0 {
 				if err := tx.Create(&item).Error; err != nil {
@@ -530,31 +411,9 @@ func (a *AlertRepo) SyncAll(data []model.AlertConfig) error {
 			continue
 		}
 
-		if strings.TrimSpace(item.UID) != "" {
-			if matched, ok := oldConfigByUID[item.UID]; ok {
-				delete(oldConfigByUID, item.UID)
-				if err := inheritAlertConfigSyncState(&item, matched); err != nil {
-					tx.Rollback()
-					return err
-				}
-				consumedConfigIDs[item.ID] = struct{}{}
-				if err := tx.Save(&item).Error; err != nil {
-					tx.Rollback()
-					return err
-				}
-				deleteAlertConfigByID(oldConfigByType, matched.ID)
-				deleteAlertConfigByID(oldConfigByKey, matched.ID)
-				continue
-			}
-		}
-
 		key := alertConfigSyncKey(item)
 		if matched, ok := popAlertConfigByKey(oldConfigByKey, key); ok {
-			delete(oldConfigByUID, matched.UID)
-			if err := inheritAlertConfigSyncState(&item, matched); err != nil {
-				tx.Rollback()
-				return err
-			}
+			item.ID = matched.ID
 			consumedConfigIDs[item.ID] = struct{}{}
 			if err := tx.Save(&item).Error; err != nil {
 				tx.Rollback()
@@ -565,12 +424,7 @@ func (a *AlertRepo) SyncAll(data []model.AlertConfig) error {
 		}
 
 		if matched, ok := popUnusedAlertConfigByType(oldConfigByType, usedConfigIDs, item.Type); ok {
-			delete(oldConfigByUID, matched.UID)
-			deleteAlertConfigByID(oldConfigByKey, matched.ID)
-			if err := inheritAlertConfigSyncState(&item, matched); err != nil {
-				tx.Rollback()
-				return err
-			}
+			item.ID = matched.ID
 			consumedConfigIDs[item.ID] = struct{}{}
 			if err := tx.Save(&item).Error; err != nil {
 				tx.Rollback()
@@ -580,11 +434,6 @@ func (a *AlertRepo) SyncAll(data []model.AlertConfig) error {
 		}
 
 		item.ID = 0
-		ensureAlertConfigUID(&item)
-		if err := validateAlertConfigSyncSecret(&item); err != nil {
-			tx.Rollback()
-			return err
-		}
 		if err := tx.Create(&item).Error; err != nil {
 			tx.Rollback()
 			return err
@@ -609,63 +458,6 @@ func (a *AlertRepo) SyncAll(data []model.AlertConfig) error {
 	return nil
 }
 
-func ensureAlertConfigUID(config *model.AlertConfig) {
-	if config != nil && strings.TrimSpace(config.UID) == "" {
-		config.UID = uuid.NewString()
-	}
-}
-
-func inheritAlertConfigSyncState(incoming *model.AlertConfig, existing model.AlertConfig) error {
-	if incoming.Type != existing.Type {
-		return fmt.Errorf("alert config UID %q belongs to type %q, not %q", incoming.UID, existing.Type, incoming.Type)
-	}
-	preserveExistingCustom := incoming.Type == constant.Custom &&
-		existing.Status == constant.AlertDisable &&
-		incoming.Title == existing.Title &&
-		incoming.Status == existing.Status &&
-		incoming.Config == existing.Config &&
-		(incoming.SecretConfig == "" || incoming.SecretConfig == existing.SecretConfig)
-	incoming.ID = existing.ID
-	if strings.TrimSpace(incoming.UID) == "" {
-		incoming.UID = existing.UID
-	}
-	if incoming.Type == constant.Custom && incoming.SecretConfig == "" {
-		incoming.SecretConfig = existing.SecretConfig
-	}
-	if preserveExistingCustom {
-		return nil
-	}
-	return validateAlertConfigSyncSecret(incoming)
-}
-
-func validateAlertConfigSyncSecret(incoming *model.AlertConfig) error {
-	if incoming.Type != constant.Custom {
-		incoming.SecretConfig = ""
-		return nil
-	}
-	if strings.TrimSpace(incoming.SecretConfig) == "" {
-		return fmt.Errorf("custom webhook sync secret is missing")
-	}
-	var version struct {
-		SchemaVersion int `json:"schemaVersion"`
-	}
-	if err := json.Unmarshal([]byte(incoming.Config), &version); err != nil || version.SchemaVersion != 1 {
-		return fmt.Errorf("custom webhook sync config must use schemaVersion 1")
-	}
-	secret := incoming.SecretConfig
-	for _, prefix := range []string{"core:v1:", "agent:v1:"} {
-		if !strings.HasPrefix(secret, prefix) {
-			continue
-		}
-		ciphertext, err := base64.StdEncoding.DecodeString(strings.TrimPrefix(secret, prefix))
-		if err != nil || len(ciphertext) < 32 || len(ciphertext)%16 != 0 {
-			return fmt.Errorf("custom webhook sync secret envelope is invalid")
-		}
-		return nil
-	}
-	return fmt.Errorf("custom webhook sync secret must use a versioned envelope")
-}
-
 func loadUsedAlertConfigIDs(tx *gorm.DB) (map[uint]struct{}, error) {
 	var alerts []model.Alert
 	if err := tx.Select("method").Find(&alerts).Error; err != nil {

agent/app/repo/app_install_resource.go

@@ -15,7 +15,6 @@ type IAppInstallResourceRpo interface {
 	WithAppInstallId(appInstallId uint) DBOption
 	WithLinkId(linkId uint) DBOption
 	WithResourceId(resourceId uint) DBOption
-	WithResourceIds(resourceIds []uint) DBOption
 	GetBy(opts ...DBOption) ([]model.AppInstallResource, error)
 	GetFirst(opts ...DBOption) (model.AppInstallResource, error)
 	Create(ctx context.Context, resource *model.AppInstallResource) error
@@ -45,12 +44,6 @@ func (a AppInstallResourceRpo) WithResourceId(resourceId uint) DBOption {
 	}
 }
 
-func (a AppInstallResourceRpo) WithResourceIds(resourceIds []uint) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		return db.Where("resource_id IN ?", resourceIds)
-	}
-}
-
 func (a AppInstallResourceRpo) GetBy(opts ...DBOption) ([]model.AppInstallResource, error) {
 	db := global.DB.Model(&model.AppInstallResource{})
 	var resources []model.AppInstallResource

agent/app/repo/app_launcher.go

@@ -3,7 +3,6 @@ package repo
 import (
 	"github.com/1Panel-dev/1Panel/agent/app/model"
 	"github.com/1Panel-dev/1Panel/agent/global"
-	"gorm.io/gorm"
 )
 
 type LauncherRepo struct{}
@@ -18,11 +17,6 @@ type ILauncherRepo interface {
 	GetQuickJump(opts ...DBOption) (model.QuickJump, error)
 	ListQuickJump(withAll bool) []model.QuickJump
 	UpdateQuicks(quicks []model.QuickJump) error
-	ListQuickDirectories() ([]model.QuickDirectory, error)
-	CountQuickDirectories() (int64, error)
-	CreateQuickDirectory(item *model.QuickDirectory) error
-	UpdateQuickDirectory(item *model.QuickDirectory) error
-	DeleteQuickDirectory(id uint, legacy bool) error
 }
 
 func NewILauncherRepo() ILauncherRepo {
@@ -101,73 +95,13 @@ func (u *LauncherRepo) UpdateQuicks(quicks []model.QuickJump) error {
 	for _, item := range quicks {
 		if err := tx.Model(&model.QuickJump{}).Where("id = ?", item.ID).Updates(map[string]interface{}{
 			"is_show": item.IsShow,
+			"detail":  item.Detail,
+			"alias":   item.Alias,
 		}).Error; err != nil {
 			tx.Rollback()
 			return err
 		}
 	}
-	return tx.Commit().Error
-}
-
-// Legacy entries remain in the overview configuration until explicitly deleted.
-func legacyQuickDirectories(db *gorm.DB) *gorm.DB {
-	return db.Model(&model.QuickJump{}).Where("name = ? AND is_show = ? AND detail <> ?", "File", true, "")
-}
-
-func (u *LauncherRepo) ListQuickDirectories() ([]model.QuickDirectory, error) {
-	items := make([]model.QuickDirectory, 0)
-	if err := global.DB.Order("id ASC").Find(&items).Error; err != nil {
-		return nil, err
-	}
-	var quicks []model.QuickJump
-	if err := legacyQuickDirectories(global.DB).Order("id ASC").Find(&quicks).Error; err != nil {
-		return nil, err
-	}
-	for _, quick := range quicks {
-		items = append(items, model.QuickDirectory{BaseModel: quick.BaseModel, Path: quick.Detail, Alias: quick.Alias, Legacy: true})
-	}
-	return items, nil
-}
-func (u *LauncherRepo) CountQuickDirectories() (int64, error) {
-	var count, legacyCount int64
-	if err := global.DB.Model(&model.QuickDirectory{}).Count(&count).Error; err != nil {
-		return 0, err
-	}
-	if err := legacyQuickDirectories(global.DB).Count(&legacyCount).Error; err != nil {
-		return 0, err
-	}
-	return count + legacyCount, nil
-}
-func (u *LauncherRepo) CreateQuickDirectory(item *model.QuickDirectory) error {
-	return global.DB.Create(item).Error
-}
-func (u *LauncherRepo) UpdateQuickDirectory(item *model.QuickDirectory) error {
-	var result *gorm.DB
-	if item.Legacy {
-		result = legacyQuickDirectories(global.DB).Where("id = ?", item.ID).Updates(map[string]interface{}{"detail": item.Path, "alias": item.Alias})
-	} else {
-		result = global.DB.Model(&model.QuickDirectory{}).Where("id = ?", item.ID).Updates(map[string]interface{}{"path": item.Path, "alias": item.Alias})
-	}
-	if result.Error != nil {
-		return result.Error
-	}
-	if result.RowsAffected == 0 {
-		return gorm.ErrRecordNotFound
-	}
-	return nil
-}
-func (u *LauncherRepo) DeleteQuickDirectory(id uint, legacy bool) error {
-	var result *gorm.DB
-	if legacy {
-		result = legacyQuickDirectories(global.DB).Where("id = ?", id).Updates(map[string]interface{}{"detail": nil, "alias": nil})
-	} else {
-		result = global.DB.Delete(&model.QuickDirectory{}, id)
-	}
-	if result.Error != nil {
-		return result.Error
-	}
-	if result.RowsAffected == 0 {
-		return gorm.ErrRecordNotFound
-	}
+	tx.Commit()
 	return nil
 }

agent/app/repo/common.go

@@ -49,12 +49,6 @@ func WithByName(name string) DBOption {
 	}
 }
 
-func WithByPath(path string) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("path = ?", path)
-	}
-}
-
 func WithByAddr(addr string) DBOption {
 	return func(g *gorm.DB) *gorm.DB {
 		return g.Where("addr = ?", addr)
@@ -100,18 +94,6 @@ func WithByProvider(provider string) DBOption {
 	}
 }
 
-func WithByAPIType(apiType string) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("api_type = ?", apiType)
-	}
-}
-
-func WithTextAPIType() DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("api_type NOT LIKE ? AND api_type <> ?", "%-images", "openai-embeddings")
-	}
-}
-
 func WithByModel(model string) DBOption {
 	return func(g *gorm.DB) *gorm.DB {
 		if len(model) == 0 {

agent/app/repo/database_user.go

@@ -1,121 +0,0 @@
-package repo
-
-import (
-	"context"
-	"fmt"
-
-	"github.com/1Panel-dev/1Panel/agent/app/model"
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"github.com/1Panel-dev/1Panel/agent/utils/encrypt"
-	"gorm.io/gorm"
-)
-
-type DatabaseUserRepo struct{}
-
-type IDatabaseUserRepo interface {
-	Get(opts ...DBOption) (model.DatabaseUser, error)
-	List(opts ...DBOption) ([]model.DatabaseUser, error)
-	Save(user *model.DatabaseUser) error
-	Delete(opts ...DBOption) error
-	DeleteBy(ctx context.Context, opts ...DBOption) error
-	Update(vars map[string]interface{}, opts ...DBOption) error
-	WithByDatabase(database string) DBOption
-	WithByUser(username, host string) DBOption
-	WithByUserList(users [][2]string) DBOption
-}
-
-func NewIDatabaseUserRepo() IDatabaseUserRepo {
-	return &DatabaseUserRepo{}
-}
-
-func (u *DatabaseUserRepo) Get(opts ...DBOption) (model.DatabaseUser, error) {
-	var user model.DatabaseUser
-	db := global.DB.Model(&model.DatabaseUser{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	if err := db.First(&user).Error; err != nil {
-		return user, err
-	}
-	password, err := encrypt.StringDecrypt(user.Password)
-	if err != nil {
-		global.LOG.Errorf("decrypt database user %s password failed, err: %v", user.Username, err)
-	}
-	user.Password = password
-	return user, nil
-}
-
-func (u *DatabaseUserRepo) List(opts ...DBOption) ([]model.DatabaseUser, error) {
-	var users []model.DatabaseUser
-	db := global.DB.Model(&model.DatabaseUser{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	if err := db.Find(&users).Error; err != nil {
-		return users, err
-	}
-	for i := 0; i < len(users); i++ {
-		password, err := encrypt.StringDecrypt(users[i].Password)
-		if err != nil {
-			global.LOG.Errorf("decrypt database user %s password failed, err: %v", users[i].Username, err)
-		}
-		users[i].Password = password
-	}
-	return users, nil
-}
-
-func (u *DatabaseUserRepo) Save(user *model.DatabaseUser) error {
-	if len(user.Password) != 0 {
-		password, err := encrypt.StringEncrypt(user.Password)
-		if err != nil {
-			return fmt.Errorf("encrypt database user %s password failed, err: %v", user.Username, err)
-		}
-		user.Password = password
-	}
-	return global.DB.Save(user).Error
-}
-
-func (u *DatabaseUserRepo) Delete(opts ...DBOption) error {
-	db := global.DB
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	return db.Delete(&model.DatabaseUser{}).Error
-}
-
-func (u *DatabaseUserRepo) DeleteBy(ctx context.Context, opts ...DBOption) error {
-	return getTx(ctx, opts...).Delete(&model.DatabaseUser{}).Error
-}
-
-func (u *DatabaseUserRepo) Update(vars map[string]interface{}, opts ...DBOption) error {
-	db := global.DB.Model(&model.DatabaseUser{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	return db.Updates(vars).Error
-}
-
-func (u *DatabaseUserRepo) WithByDatabase(database string) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("database = ?", database)
-	}
-}
-
-func (u *DatabaseUserRepo) WithByUser(username, host string) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		return g.Where("username = ? AND host = ?", username, host)
-	}
-}
-
-func (u *DatabaseUserRepo) WithByUserList(users [][2]string) DBOption {
-	return func(g *gorm.DB) *gorm.DB {
-		if len(users) == 0 {
-			return g.Where("1 = 0")
-		}
-		values := make([][]interface{}, 0, len(users))
-		for _, user := range users {
-			values = append(values, []interface{}{user[0], user[1]})
-		}
-		return g.Where("(username, host) IN ?", values)
-	}
-}

agent/app/repo/database_user_grant.go

@@ -1,109 +0,0 @@
-package repo
-
-import (
-	"context"
-
-	"github.com/1Panel-dev/1Panel/agent/app/model"
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"gorm.io/gorm"
-)
-
-type DatabaseUserGrantRepo struct{}
-
-type IDatabaseUserGrantRepo interface {
-	Get(opts ...DBOption) (model.DatabaseUserGrant, error)
-	List(opts ...DBOption) ([]model.DatabaseUserGrant, error)
-	Save(grant *model.DatabaseUserGrant) error
-	Replace(dbType, database string, grants []model.DatabaseUserGrant) error
-	Delete(opts ...DBOption) error
-	DeleteBy(ctx context.Context, opts ...DBOption) error
-	Update(vars map[string]interface{}, opts ...DBOption) error
-	WithByDatabase(database string) DBOption
-	WithByDBName(dbName string) DBOption
-	WithByDBNames(dbNames []string) DBOption
-	WithByUser(username, host string) DBOption
-}
-
-func (u *DatabaseUserGrantRepo) Get(opts ...DBOption) (model.DatabaseUserGrant, error) {
-	var grant model.DatabaseUserGrant
-	db := global.DB.Model(&model.DatabaseUserGrant{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	err := db.First(&grant).Error
-	return grant, err
-}
-
-func NewIDatabaseUserGrantRepo() IDatabaseUserGrantRepo {
-	return &DatabaseUserGrantRepo{}
-}
-
-func (u *DatabaseUserGrantRepo) List(opts ...DBOption) ([]model.DatabaseUserGrant, error) {
-	var grants []model.DatabaseUserGrant
-	db := global.DB.Model(&model.DatabaseUserGrant{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	err := db.Find(&grants).Error
-	return grants, err
-}
-
-func (u *DatabaseUserGrantRepo) Save(grant *model.DatabaseUserGrant) error {
-	return global.DB.Save(grant).Error
-}
-
-func (u *DatabaseUserGrantRepo) Replace(dbType, database string, grants []model.DatabaseUserGrant) error {
-	return global.DB.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Where("`type` = ? AND database = ?", dbType, database).Delete(&model.DatabaseUserGrant{}).Error; err != nil {
-			return err
-		}
-		if len(grants) != 0 {
-			return tx.Create(&grants).Error
-		}
-		return nil
-	})
-}
-
-func (u *DatabaseUserGrantRepo) Delete(opts ...DBOption) error {
-	db := global.DB
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	return db.Delete(&model.DatabaseUserGrant{}).Error
-}
-
-func (u *DatabaseUserGrantRepo) DeleteBy(ctx context.Context, opts ...DBOption) error {
-	return getTx(ctx, opts...).Delete(&model.DatabaseUserGrant{}).Error
-}
-
-func (u *DatabaseUserGrantRepo) Update(vars map[string]interface{}, opts ...DBOption) error {
-	db := global.DB.Model(&model.DatabaseUserGrant{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	return db.Updates(vars).Error
-}
-
-func (u *DatabaseUserGrantRepo) WithByDatabase(database string) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		return db.Where("database = ?", database)
-	}
-}
-
-func (u *DatabaseUserGrantRepo) WithByDBName(dbName string) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		return db.Where("db_name = ?", dbName)
-	}
-}
-
-func (u *DatabaseUserGrantRepo) WithByDBNames(dbNames []string) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		return db.Where("db_name IN ?", dbNames)
-	}
-}
-
-func (u *DatabaseUserGrantRepo) WithByUser(username, host string) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		return db.Where("username = ? AND host = ?", username, host)
-	}
-}

agent/app/repo/host.go

@@ -22,6 +22,11 @@ type IHostRepo interface {
 	WithByPort(port uint) DBOption
 	WithByUser(user string) DBOption
 
+	GetFirewallRecord(opts ...DBOption) (model.Firewall, error)
+	ListFirewallRecord(opts ...DBOption) ([]model.Firewall, error)
+	SaveFirewallRecord(firewall *model.Firewall) error
+	DeleteFirewallRecordByID(id uint) error
+
 	SyncCert(data []model.RootCert) error
 	GetCert(opts ...DBOption) (model.RootCert, error)
 	PageCert(limit, offset int, opts ...DBOption) (int64, []model.RootCert, error)
@@ -29,6 +34,8 @@ type IHostRepo interface {
 	SaveCert(cert *model.RootCert) error
 	UpdateCert(id uint, vars map[string]interface{}) error
 	DeleteCert(opts ...DBOption) error
+
+	WithByChain(chain string) DBOption
 }
 
 func NewIHostRepo() IHostRepo {
@@ -109,6 +116,65 @@ func (h *HostRepo) Delete(opts ...DBOption) error {
 	return db.Delete(&model.Host{}).Error
 }
 
+func (h *HostRepo) GetFirewallRecord(opts ...DBOption) (model.Firewall, error) {
+	var firewall model.Firewall
+	db := global.DB
+	for _, opt := range opts {
+		db = opt(db)
+	}
+	err := db.First(&firewall).Error
+	return firewall, err
+}
+
+func (h *HostRepo) ListFirewallRecord(opts ...DBOption) ([]model.Firewall, error) {
+	var firewalls []model.Firewall
+	db := global.DB
+	for _, opt := range opts {
+		db = opt(db)
+	}
+	if err := global.DB.Find(&firewalls).Error; err != nil {
+		return firewalls, nil
+	}
+	return firewalls, nil
+}
+
+func (h *HostRepo) SaveFirewallRecord(firewall *model.Firewall) error {
+	if firewall.ID != 0 {
+		return global.DB.Save(firewall).Error
+	}
+	var data model.Firewall
+	switch firewall.Type {
+	case "port":
+		_ = global.DB.Where("type = ? AND dst_port = ? AND protocol = ? AND src_ip = ? AND strategy = ?", "port",
+			firewall.DstPort,
+			firewall.Protocol,
+			firewall.SrcIP,
+			firewall.Strategy,
+		).First(&data).Error
+	case "ip":
+		_ = global.DB.Where("type = ? AND src_ip = ? AND strategy = ?", "address", firewall.SrcIP, firewall.Strategy).First(&data)
+	default:
+		_ = global.DB.Where("type = ? AND chain = ? AND src_port = ? AND dst_port = ? AND protocol = ? AND src_ip = ? AND dst_ip = ? AND strategy = ?",
+			firewall.Type,
+			firewall.Chain,
+			firewall.SrcPort,
+			firewall.DstPort,
+			firewall.Protocol,
+			firewall.SrcIP,
+			firewall.DstIP,
+			firewall.Strategy,
+		).First(&data).Error
+	}
+	if data.ID != 0 {
+		firewall.ID = data.ID
+	}
+	return global.DB.Save(firewall).Error
+}
+
+func (h *HostRepo) DeleteFirewallRecordByID(id uint) error {
+	return global.DB.Where("id = ?", id).Delete(&model.Firewall{}).Error
+}
+
 func (u *HostRepo) GetCert(opts ...DBOption) (model.RootCert, error) {
 	var cert model.RootCert
 	db := global.DB
@@ -187,3 +253,9 @@ func (u *HostRepo) SyncCert(data []model.RootCert) error {
 	tx.Commit()
 	return nil
 }
+
+func (u *HostRepo) WithByChain(chain string) DBOption {
+	return func(g *gorm.DB) *gorm.DB {
+		return g.Where("chain = ?", chain)
+	}
+}

agent/app/repo/monitor.go

@@ -1,8 +1,6 @@
 package repo
 
 import (
-	"fmt"
-	"strings"
 	"time"
 
 	"github.com/1Panel-dev/1Panel/agent/app/model"
@@ -12,25 +10,11 @@ import (
 
 type MonitorRepo struct{}
 
-type GPUHistoryPoint struct {
-	model.MonitorGPU
-	Bucket        int64
-	PowerPercent  *float64
-	MemoryPercent *float64
-	ProcessCount  *float64
-}
-
 type IMonitorRepo interface {
-	CleanHost() error
-	CleanGPU() error
 	GetBase(opts ...DBOption) ([]model.MonitorBase, error)
-	CountGPU(opts ...DBOption) (int64, error)
-	GetGPUHistory(start time.Time, bucketSeconds int64, aggregation string, opts ...DBOption) ([]GPUHistoryPoint, error)
-	GetGPUDevices() ([]model.MonitorGPU, error)
+	GetGPU(opts ...DBOption) ([]model.MonitorGPU, error)
 	GetIO(opts ...DBOption) ([]model.MonitorIO, error)
 	GetNetwork(opts ...DBOption) ([]model.MonitorNetwork, error)
-	GetIONames() ([]string, error)
-	GetNetworkNames() ([]string, error)
 
 	CreateMonitorBase(model model.MonitorBase) error
 	BatchCreateMonitorGPU(list []model.MonitorGPU) error
@@ -41,26 +25,13 @@ type IMonitorRepo interface {
 	DelMonitorIO(timeForDelete time.Time) error
 	DelMonitorNet(timeForDelete time.Time) error
 
-	WithByGPUDevice(deviceID, name string, legacy bool) DBOption
+	WithByProductName(name string) DBOption
 }
 
 func NewIMonitorRepo() IMonitorRepo {
 	return &MonitorRepo{}
 }
 
-func (s *MonitorRepo) CleanHost() error {
-	for _, item := range []interface{}{&model.MonitorBase{}, &model.MonitorIO{}, &model.MonitorNetwork{}} {
-		if err := global.MonitorDB.Where("1 = 1").Delete(item).Error; err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-func (s *MonitorRepo) CleanGPU() error {
-	return global.GPUMonitorDB.Where("1 = 1").Delete(&model.MonitorGPU{}).Error
-}
-
 func (u *MonitorRepo) GetBase(opts ...DBOption) ([]model.MonitorBase, error) {
 	var data []model.MonitorBase
 	db := global.MonitorDB
@@ -88,25 +59,20 @@ func (u *MonitorRepo) GetNetwork(opts ...DBOption) ([]model.MonitorNetwork, erro
 	err := db.Find(&data).Error
 	return data, err
 }
-func (u *MonitorRepo) GetIONames() ([]string, error) {
-	var names []string
-	err := global.MonitorDB.Model(&model.MonitorIO{}).Distinct().Pluck("name", &names).Error
-	return names, err
-}
-
-func (u *MonitorRepo) GetNetworkNames() ([]string, error) {
-	var names []string
-	err := global.MonitorDB.Model(&model.MonitorNetwork{}).Distinct().Pluck("name", &names).Error
-	return names, err
+func (u *MonitorRepo) GetGPU(opts ...DBOption) ([]model.MonitorGPU, error) {
+	var data []model.MonitorGPU
+	db := global.GPUMonitorDB
+	for _, opt := range opts {
+		db = opt(db)
+	}
+	err := db.Find(&data).Error
+	return data, err
 }
 
 func (u *MonitorRepo) CreateMonitorBase(model model.MonitorBase) error {
 	return global.MonitorDB.Create(&model).Error
 }
 func (s *MonitorRepo) BatchCreateMonitorGPU(list []model.MonitorGPU) error {
-	if len(list) == 0 {
-		return nil
-	}
 	return global.GPUMonitorDB.CreateInBatches(&list, len(list)).Error
 }
 func (u *MonitorRepo) BatchCreateMonitorIO(ioList []model.MonitorIO) error {
@@ -128,67 +94,8 @@ func (s *MonitorRepo) DelMonitorGPU(timeForDelete time.Time) error {
 	return global.GPUMonitorDB.Where("created_at < ?", timeForDelete).Delete(&model.MonitorGPU{}).Error
 }
 
-func (u *MonitorRepo) GetGPUDevices() ([]model.MonitorGPU, error) {
-	var data []model.MonitorGPU
-	err := global.GPUMonitorDB.Model(&model.MonitorGPU{}).Select("device_id, product_name, device_type").Group("device_id, product_name, device_type").Order("product_name, device_id").Find(&data).Error
-	return data, err
-}
-
-func (u *MonitorRepo) WithByGPUDevice(deviceID, name string, legacy bool) DBOption {
-	return func(db *gorm.DB) *gorm.DB {
-		if deviceID != "" {
-			return db.Where("device_id = ?", deviceID)
-		}
-		db = db.Where("product_name = ?", name)
-		if legacy {
-			db = db.Where("device_id IS NULL OR device_id = ''")
-		}
-		return db
+func (s *MonitorRepo) WithByProductName(name string) DBOption {
+	return func(g *gorm.DB) *gorm.DB {
+		return g.Where("product_name = ?", name)
 	}
 }
-
-func (u *MonitorRepo) CountGPU(opts ...DBOption) (int64, error) {
-	db := global.GPUMonitorDB.Model(&model.MonitorGPU{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	var count int64
-	err := db.Count(&count).Error
-	return count, err
-}
-
-func (u *MonitorRepo) GetGPUHistory(start time.Time, bucketSeconds int64, aggregation string, opts ...DBOption) ([]GPUHistoryPoint, error) {
-	db := global.GPUMonitorDB.Model(&model.MonitorGPU{})
-	for _, opt := range opts {
-		db = opt(db)
-	}
-	expressions := []string{
-		"CASE WHEN max_power_limit > 0 THEN 100.0 * power_draw / max_power_limit END",
-		"CASE WHEN mem_total > 0 AND mem_used IS NOT NULL THEN 100.0 * mem_used / mem_total ELSE memory_util END",
-		"CASE WHEN (process_status = 'ok' OR process_status IS NULL OR process_status = '') AND json_valid(processes) THEN CASE WHEN json_type(processes) = 'array' THEN json_array_length(processes) END END",
-	}
-	aliases := []string{"power_percent", "memory_percent", "process_count"}
-	columns := []string{"*"}
-	if bucketSeconds > 0 {
-		operation := "AVG"
-		if aggregation == "max" {
-			operation = "MAX"
-		}
-		columns = []string{fmt.Sprintf("(CAST(strftime('%%s', created_at) AS INTEGER) - %d) / %d AS bucket", start.Unix(), bucketSeconds)}
-		for _, column := range []string{"memory_activity", "encoder_util", "decoder_util", "jpeg_util", "ofa_util", "media_util", "compute_util", "copy_util", "hotspot_temperature", "fan_rpm", "ai_cpu_util", "ctrl_cpu_util", "ddr_used", "ddr_total", "hbm_used", "hbm_total", "ddr_bandwidth", "hbm_bandwidth", "memory_bandwidth", "media_frequency", "hugepages_used", "hugepages_total", "gpu_util", "temperature", "memory_temperature", "power_draw", "max_power_limit", "mem_used", "mem_total", "frequency", "memory_frequency", "fan_speed"} {
-			columns = append(columns, operation+"("+column+") AS "+column)
-		}
-		for i := range expressions {
-			expressions[i] = operation + "(" + expressions[i] + ")"
-		}
-		db = db.Group("bucket").Order("bucket ASC")
-	} else {
-		db = db.Order("created_at ASC, id ASC")
-	}
-	for i, expression := range expressions {
-		columns = append(columns, expression+" AS "+aliases[i])
-	}
-	var data []GPUHistoryPoint
-	err := db.Select(strings.Join(columns, ", ")).Scan(&data).Error
-	return data, err
-}

agent/app/repo/monitor_vllm.go

@@ -1,132 +0,0 @@
-package repo
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"strings"
-	"time"
-
-	"github.com/1Panel-dev/1Panel/agent/app/model"
-	"github.com/1Panel-dev/1Panel/agent/global"
-	"gorm.io/gorm"
-)
-
-type VLLMMonitorRepo struct{}
-
-type VLLMHistoryPoint struct {
-	model.MonitorVLLM
-	Bucket            int64
-	CompletedRequests *float64
-}
-
-func (r *VLLMMonitorRepo) Create(point *model.MonitorVLLM) error {
-	return global.VLLMMonitorDB.Create(point).Error
-}
-
-func (r *VLLMMonitorRepo) Latest(id uint) (model.MonitorVLLM, error) {
-	var point model.MonitorVLLM
-	db := global.VLLMMonitorDB.Where("app_install_id = ?", id)
-	err := db.Order("created_at DESC, id DESC").First(&point).Error
-	if errors.Is(err, gorm.ErrRecordNotFound) {
-		return point, nil
-	}
-	return point, err
-}
-
-func (r *VLLMMonitorRepo) CleanTarget(id uint) error {
-	return global.VLLMMonitorDB.Where("app_install_id = ?", id).Delete(&model.MonitorVLLM{}).Error
-}
-
-func (r *VLLMMonitorRepo) DeleteBefore(before time.Time) error {
-	return global.VLLMMonitorDB.Where("created_at < ?", before).Delete(&model.MonitorVLLM{}).Error
-}
-
-func (r *VLLMMonitorRepo) Count(ctx context.Context, id uint, start, end time.Time) (int64, error) {
-	var count int64
-	db := global.VLLMMonitorDB.WithContext(ctx).Model(&model.MonitorVLLM{}).Where("app_install_id = ? AND created_at >= ? AND created_at <= ?", id, start, end)
-	err := db.Count(&count).Error
-	return count, err
-}
-
-func (r *VLLMMonitorRepo) History(ctx context.Context, id uint, start, end time.Time, seconds int64, aggregation, group string) ([]VLLMHistoryPoint, error) {
-	db := global.VLLMMonitorDB.WithContext(ctx).Model(&model.MonitorVLLM{}).Where("app_install_id = ? AND created_at >= ? AND created_at <= ?", id, start, end)
-	var metrics []string
-	if group == "" || group == "overview" {
-		metrics = append(metrics, "running", "waiting", "cache_usage", "prompt_throughput", "generation_throughput", "request_throughput")
-		if seconds <= 0 || aggregation == "max" {
-			metrics = append(metrics, "prefix_cache_hit_rate")
-		}
-	}
-	if seconds <= 0 || aggregation == "max" {
-		if group == "" || group == "latency" {
-			metrics = append(metrics, "queue_time", "time_to_first_token", "time_per_output_token", "request_latency", "prefill_time", "decode_time", "time_to_first_token_p50", "time_to_first_token_p90", "time_to_first_token_p95", "time_to_first_token_p99", "time_per_output_token_p50", "time_per_output_token_p90", "time_per_output_token_p95", "time_per_output_token_p99", "request_latency_p50", "request_latency_p90", "request_latency_p95", "request_latency_p99")
-		}
-		if group == "" || group == "requests" {
-			metrics = append(metrics, "average_generation_tokens")
-		}
-	}
-	var columns []string
-	if seconds > 0 {
-		operation := "AVG"
-		if aggregation == "max" {
-			operation = "MAX"
-		}
-		columns = []string{fmt.Sprintf("(CAST(strftime('%%s', created_at) AS INTEGER) - %d) / %d AS bucket", start.Unix(), seconds)}
-		for _, column := range metrics {
-			columns = append(columns, operation+"("+column+") AS "+column)
-		}
-		db = db.Group("bucket").Order("bucket ASC")
-	} else {
-		columns = append([]string{"id", "created_at", "app_install_id", "status", "sample_interval_seconds"}, metrics...)
-		if group == "" || group == "requests" {
-			columns = append(columns, "histogram_deltas", "request_deltas")
-		}
-		db = db.Order("created_at ASC, id ASC")
-	}
-	if group == "" || group == "overview" {
-		count := "CASE WHEN json_valid(request_deltas) THEN CASE WHEN json_extract(request_deltas, '$.seconds') > 0 THEN ROUND(request_throughput * json_extract(request_deltas, '$.seconds')) END END"
-		if seconds > 0 {
-			count = "SUM(" + count + ")"
-		}
-		columns = append(columns, count+" AS completed_requests")
-	}
-	var points []VLLMHistoryPoint
-	err := db.Select(strings.Join(columns, ", ")).Scan(&points).Error
-	return points, err
-}
-
-func (r *VLLMMonitorRepo) WalkDeltas(ctx context.Context, id uint, start, end time.Time, seconds int64, aggregation, group string, visit func(int64, string, string) error) error {
-	histograms, requests := "''", "''"
-	if group == "" || group == "requests" || (group == "latency" && aggregation != "max") {
-		histograms = "COALESCE(histogram_deltas, '')"
-	}
-	if group == "" || group == "requests" || (group == "overview" && aggregation != "max") {
-		requests = "COALESCE(request_deltas, '')"
-	}
-	if histograms == "''" && requests == "''" {
-		return ctx.Err()
-	}
-	bucket := fmt.Sprintf("(CAST(strftime('%%s', created_at) AS INTEGER) - %d) / %d", start.Unix(), seconds)
-	rows, err := global.VLLMMonitorDB.WithContext(ctx).Model(&model.MonitorVLLM{}).
-		Where("app_install_id = ? AND created_at >= ? AND created_at <= ?", id, start, end).
-		Select(bucket + ", " + histograms + ", " + requests).Rows()
-	if err != nil {
-		return err
-	}
-	defer rows.Close()
-	for rows.Next() {
-		if err := ctx.Err(); err != nil {
-			return err
-		}
-		var index int64
-		var histograms, requests string
-		if err := rows.Scan(&index, &histograms, &requests); err != nil {
-			return err
-		}
-		if err := visit(index, histograms, requests); err != nil {
-			return err
-		}
-	}
-	return rows.Err()
-}