chore: bump version to 3.2.2

Co-authored-by: Codex <noreply@openai.com>
fix(frontend): grade model success rate colors
2026-11-07 00:05:49 +00:00 · 2026-08-14 00:43:13 +08:00 · 2026-08-14 00:42:20 +08:00 · 2026-08-14 00:39:59 +08:00 · 2026-08-14 00:39:50 +08:00 · 2026-08-14 00:13:58 +08:00
27 changed files with 424 additions and 477 deletions
@@ -101,12 +101,8 @@ impl ObservabilityRepository for PgObservabilityRepository {
        observed_at: DateTime<Utc>,
    ) -> StoreResult<DashboardObservation> {
        let filter = UsageRecordFilter::default();
-        let account_usage_range = ObservabilityRange::new(
-            range.end - TimeDelta::hours(ACCOUNT_USAGE_TIMELINE_HOURS),
-            range.end,
-        )?;
        let account_usage_query =
-            ProviderAccountUsageQuery::recent(account_usage_range, DASHBOARD_ACCOUNT_LIMIT)?
+            ProviderAccountUsageQuery::recent(range, DASHBOARD_ACCOUNT_LIMIT)?
                .with_hourly_request_buckets()?;
        let recent_query = UsageRecordQuery {
            range,
@@ -52,9 +52,12 @@ pub(crate) async fn provider_account_usage(
    }
    statement.push(
        " group by pa.id, pa.provider_kind, pa.authentication_kind, pa.name, pa.email,
-                   pa.plan_type
-          order by max(mr.started_at) desc nulls last, pa.name, pa.id limit ",
+                   pa.plan_type",
    );
+    if query.account_ids.is_none() {
+        statement.push(" having count(mr.id) > 0");
+    }
+    statement.push(" order by max(mr.started_at) desc nulls last, pa.name, pa.id limit ");
    statement.push_bind(i64::from(query.limit));
    let rows = statement
        .build()
@@ -97,22 +97,59 @@ impl PgAdminAccountStore {
            .iter()
            .map(|window| window.account_id.clone())
            .collect::<Vec<_>>();
-        sqlx::query(ACCOUNT_USAGE_BY_WINDOWS_SQL)
-            .bind(account_ids)
-            .bind(keys)
-            .bind(starts)
-            .bind(ends)
-            .fetch_all(&self.pool)
-            .await
-            .map_err(|_| {
-                admin_store_error(
-                    ENTITY,
-                    postgres_unavailable("load provider account quota window usage"),
-                )
-            })?
+        let (usage_rows, model_rows, model_cost_rows) = futures::try_join!(
+            sqlx::query(ACCOUNT_USAGE_BY_WINDOWS_SQL)
+                .bind(account_ids.clone())
+                .bind(keys.clone())
+                .bind(starts.clone())
+                .bind(ends.clone())
+                .fetch_all(&self.pool),
+            sqlx::query(ACCOUNT_USAGE_MODELS_BY_WINDOWS_SQL)
+                .bind(account_ids.clone())
+                .bind(keys.clone())
+                .bind(starts.clone())
+                .bind(ends.clone())
+                .fetch_all(&self.pool),
+            sqlx::query(ACCOUNT_USAGE_MODEL_COSTS_BY_WINDOWS_SQL)
+                .bind(account_ids)
+                .bind(keys)
+                .bind(starts)
+                .bind(ends)
+                .fetch_all(&self.pool),
+        )
+        .map_err(|_| {
+            admin_store_error(
+                ENTITY,
+                postgres_unavailable("load provider account quota window usage"),
+            )
+        })?;
+        let mut model_costs = BTreeMap::<(String, String, String), Vec<AccountCost>>::new();
+        for row in &model_cost_rows {
+            let (key, cost) = admin_account_usage_window_model_cost(row)?;
+            model_costs.entry(key).or_default().push(cost);
+        }
+        let mut models_by_window = BTreeMap::<(String, String), Vec<AccountModelUsage>>::new();
+        for row in &model_rows {
+            let ((account_id, window_key, model), mut usage) =
+                admin_account_usage_window_model(row)?;
+            usage.costs = model_costs
+                .remove(&(account_id.clone(), window_key.clone(), model))
+                .unwrap_or_default();
+            models_by_window
+                .entry((account_id, window_key))
+                .or_default()
+                .push(usage);
+        }
+        let mut results = usage_rows
            .iter()
            .map(admin_account_usage_window)
-            .collect()
+            .collect::<AdminStoreResult<Vec<_>>>()?;
+        for result in &mut results {
+            result.usage.models = models_by_window
+                .remove(&(result.account_id.clone(), result.key.clone()))
+                .unwrap_or_default();
+        }
+        Ok(results)
    }

    async fn required_scope(
@@ -276,6 +276,69 @@ pub(crate) fn admin_account_usage_window(
    })
 }

+pub(crate) fn admin_account_usage_window_model(
+    row: &sqlx::postgres::PgRow,
+) -> AdminStoreResult<((String, String, String), AccountModelUsage)> {
+    let account_id: String = window_usage_value(row, "account_id")?;
+    let window_key: String = window_usage_value(row, "window_key")?;
+    let model: String = window_usage_value(row, "model")?;
+    let provider_reported_count = window_usage_count(row, "provider_reported_count")?;
+    let calculated_count = window_usage_count(row, "calculated_count")?;
+    let unavailable_count = window_usage_count(row, "unavailable_count")?;
+    Ok((
+        (account_id, window_key, model.clone()),
+        AccountModelUsage {
+            model,
+            request_count: window_usage_count(row, "request_count")?,
+            success_count: window_usage_count(row, "success_count")?,
+            input_tokens: optional_window_usage_count(row, "input_tokens")?,
+            output_tokens: optional_window_usage_count(row, "output_tokens")?,
+            cached_tokens: optional_window_usage_count(row, "cached_tokens")?,
+            cache_write_tokens: optional_window_usage_count(row, "cache_write_tokens")?,
+            reasoning_tokens: optional_window_usage_count(row, "reasoning_tokens")?,
+            image_input_tokens: optional_window_usage_count(row, "image_input_tokens")?,
+            image_output_tokens: optional_window_usage_count(row, "image_output_tokens")?,
+            image_request_count: window_usage_count(row, "image_request_count")?,
+            image_request_failed_count: window_usage_count(row, "image_request_failed_count")?,
+            total_tokens: optional_window_usage_count(row, "total_tokens")?,
+            cost_coverage: AdminCostCoverage {
+                provider_reported_count,
+                calculated_count,
+                partial_count: 0,
+                unavailable_count,
+                not_billable_count: 0,
+            },
+            costs: Vec::new(),
+            last_used_at: window_usage_value(row, "last_used_at")?,
+        },
+    ))
+}
+
+pub(crate) fn admin_account_usage_window_model_cost(
+    row: &sqlx::postgres::PgRow,
+) -> AdminStoreResult<((String, String, String), AccountCost)> {
+    let key = (
+        window_usage_value(row, "account_id")?,
+        window_usage_value(row, "window_key")?,
+        window_usage_value(row, "model")?,
+    );
+    let amount = window_usage_value::<String>(row, "amount")?;
+    let amount = AdminDecimalAmount::from_str(&amount).map_err(|_| {
+        AdminStoreError::new(
+            AdminStoreErrorKind::Invalid,
+            ENTITY,
+            "persisted account model cost is invalid",
+        )
+    })?;
+    Ok((
+        key,
+        AccountCost {
+            currency: window_usage_value(row, "cost_currency")?,
+            amount,
+        },
+    ))
+}
+
 pub(crate) fn window_usage_count(
    row: &sqlx::postgres::PgRow,
    column: &'static str,
@@ -51,6 +51,74 @@ pub(crate) const ACCOUNT_USAGE_BY_WINDOWS_SQL: &str = "with requested_windows as
      group by requested.account_id, requested.window_key
      order by requested.account_id, requested.window_key";

+pub(crate) const ACCOUNT_USAGE_MODELS_BY_WINDOWS_SQL: &str = "with requested_windows as (
+         select *
+         from unnest($1::text[], $2::text[], $3::timestamptz[], $4::timestamptz[])
+           as requested(account_id, window_key, window_start, window_end)
+     )
+     select requested.account_id,
+            requested.window_key,
+            coalesce(mr.upstream_model_id, mr.requested_model_id) as model,
+            count(mr.id)::bigint as request_count,
+            count(mr.id) filter (where mr.outcome = 'succeeded')::bigint as success_count,
+            sum(mr.input_tokens)::bigint as input_tokens,
+            sum(mr.output_tokens)::bigint as output_tokens,
+            sum(mr.cached_tokens)::bigint as cached_tokens,
+            sum(mr.cache_write_tokens)::bigint as cache_write_tokens,
+            sum(mr.reasoning_tokens)::bigint as reasoning_tokens,
+            sum(mr.image_input_tokens)::bigint as image_input_tokens,
+            sum(mr.image_output_tokens)::bigint as image_output_tokens,
+            count(mr.id) filter (where mr.image_generation_succeeded is true)::bigint
+              as image_request_count,
+            count(mr.id) filter (where mr.image_generation_succeeded is false)::bigint
+              as image_request_failed_count,
+            coalesce(sum(coalesce(
+              mr.total_tokens,
+              coalesce(mr.input_tokens, 0) + coalesce(mr.output_tokens, 0)
+            )), 0)::bigint as total_tokens,
+            count(mr.id) filter (where mr.cost_source = 'provider_reported')::bigint
+              as provider_reported_count,
+            count(mr.id) filter (where mr.cost_source = 'calculated')::bigint
+              as calculated_count,
+            count(mr.id) filter (where mr.cost_source = 'unavailable')::bigint
+              as unavailable_count,
+            max(mr.started_at) as last_used_at
+       from requested_windows requested
+       join model_requests mr
+         on mr.provider_account_ref = requested.account_id
+        and mr.started_at >= requested.window_start
+        and mr.started_at < requested.window_end
+        and mr.outcome = 'succeeded'
+        and mr.downstream_committed_at is not null
+        and mr.client_status_code between 200 and 399
+      group by requested.account_id, requested.window_key,
+               coalesce(mr.upstream_model_id, mr.requested_model_id)
+      order by requested.account_id, requested.window_key, request_count desc, model";
+
+pub(crate) const ACCOUNT_USAGE_MODEL_COSTS_BY_WINDOWS_SQL: &str = "with requested_windows as (
+         select *
+         from unnest($1::text[], $2::text[], $3::timestamptz[], $4::timestamptz[])
+           as requested(account_id, window_key, window_start, window_end)
+     )
+     select requested.account_id,
+            requested.window_key,
+            coalesce(mr.upstream_model_id, mr.requested_model_id) as model,
+            mr.cost_currency,
+            sum(mr.cost_amount)::text as amount
+       from requested_windows requested
+       join model_requests mr
+         on mr.provider_account_ref = requested.account_id
+        and mr.started_at >= requested.window_start
+        and mr.started_at < requested.window_end
+        and mr.outcome = 'succeeded'
+        and mr.downstream_committed_at is not null
+        and mr.client_status_code between 200 and 399
+        and mr.cost_amount is not null
+        and mr.cost_currency is not null
+      group by requested.account_id, requested.window_key,
+               coalesce(mr.upstream_model_id, mr.requested_model_id), mr.cost_currency
+      order by requested.account_id, requested.window_key, model, mr.cost_currency";
+
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct ProviderAccountAdminScope {
    pub provider_kind: String,
@@ -433,7 +433,7 @@ async fn admin_observability_adapter_preserves_utc_queries_metrics_costs_and_det
    assert_eq!(dashboard.attempts.costs[0].amount.as_str(), "1.25");
    assert_eq!(dashboard.provider_accounts.total, 1);
    assert_eq!(dashboard.account_usage[0].request_count, 1);
-    assert_eq!(dashboard.account_usage[0].request_buckets.len(), 24);
+    assert_eq!(dashboard.account_usage[0].request_buckets.len(), 2);
    assert_eq!(
        dashboard.account_usage[0]
            .request_buckets
@@ -714,7 +714,7 @@ async fn dashboard_summary_totals_include_history_outside_selected_range() {
        .expect("seed observability facts");
    sqlx::query(
        "update model_requests
-         set started_at = $1 - interval '2 days'
+         set started_at = $1 - interval '2 hours'
         where id = 'req_observe_success'",
    )
    .bind(now)
@@ -730,6 +730,18 @@ async fn dashboard_summary_totals_include_history_outside_selected_range() {
        .await
        .expect("dashboard summary");
    assert_eq!(dashboard.requests.request_count, 2);
+    assert!(dashboard.account_usage.is_empty());
+
+    let explicit_account_usage = repository
+        .provider_account_usage(
+            ProviderAccountUsageQuery::for_accounts(range, vec!["acct_observe".to_owned()])
+                .expect("account usage query"),
+        )
+        .await
+        .expect("provider account usage");
+    assert_eq!(explicit_account_usage.len(), 1);
+    assert_eq!(explicit_account_usage[0].request_count, 0);
+
    assert_eq!(
        (
            dashboard.totals.request_count,
@@ -813,7 +825,7 @@ async fn observability_queries_preserve_request_account_cost_and_diagnostic_fact
    );
    assert_eq!(dashboard.provider_accounts.total, 1);
    assert_eq!(dashboard.account_usage[0].request_count, 1);
-    assert_eq!(dashboard.account_usage[0].request_buckets.len(), 24);
+    assert_eq!(dashboard.account_usage[0].request_buckets.len(), 2);
    assert_eq!(
        dashboard.account_usage[0]
            .request_buckets
@@ -656,9 +656,9 @@ async fn terminal_admin_quota_window_usage_prefers_provider_total_and_falls_back
            request_id: "req_quota_window_recent",
            account_id: "acct_quota_window",
            provider_kind: "openai",
-            model: "gpt-window",
+            model: "gpt-window-recent",
            total_tokens: 10,
-            cost_amount: "0",
+            cost_amount: "1.25",
            started_at: now - TimeDelta::minutes(30),
        },
    )
@@ -670,9 +670,9 @@ async fn terminal_admin_quota_window_usage_prefers_provider_total_and_falls_back
            request_id: "req_quota_window_older",
            account_id: "acct_quota_window",
            provider_kind: "openai",
-            model: "gpt-window",
+            model: "gpt-window-older",
            total_tokens: 20,
-            cost_amount: "0",
+            cost_amount: "2.50",
            started_at: now - TimeDelta::hours(6),
        },
    )
@@ -723,8 +723,26 @@ async fn terminal_admin_quota_window_usage_prefers_provider_total_and_falls_back

    assert_eq!(usage[0].key, "long");
    assert_eq!(usage[0].usage.total_tokens, Some(720));
+    assert_eq!(usage[0].usage.models.len(), 2);
+    assert_eq!(
+        usage[0]
+            .usage
+            .models
+            .iter()
+            .map(|model| (model.model.as_str(), model.total_tokens))
+            .collect::<Vec<_>>(),
+        [
+            ("gpt-window-older", Some(20)),
+            ("gpt-window-recent", Some(700)),
+        ],
+    );
+    assert_eq!(usage[0].usage.models[0].costs[0].amount.as_str(), "2.5");
+    assert_eq!(usage[0].usage.models[1].costs[0].amount.as_str(), "1.25");
    assert_eq!(usage[1].key, "short");
    assert_eq!(usage[1].usage.total_tokens, Some(700));
+    assert_eq!(usage[1].usage.models.len(), 1);
+    assert_eq!(usage[1].usage.models[0].model, "gpt-window-recent");
+    assert_eq!(usage[1].usage.models[0].total_tokens, Some(700));

    database.close().await;
 }
@@ -1,8 +1 @@
-5f79e74c9a7a7366c39cd1afe43175eff6c44afe9217c0f26f33f173bd40c781  0001_initial.sql
-f4168f7e23d42cf9d37096339e931b0e0c823f7a8dbfc6580a04f096c4c3d8e3  0002_provider_accounts_nullable_upstream_user_id.sql
-4163f61183d9e90f1368c08f614040d6a1a0048de3886a77dd708ce21430b2d0  0003_backfill_openai_access_token_expiry.sql
-b41bb3be5a84b95852158d82267456f8415811a1137025581eefd1c96c0882d1  0004_normalize_account_state_facts.sql
-00ef40c9cd404a09afe916262e894eec361039a60a93d6c46e6c96104b1346b9  0005_account_groups.sql
-73846775d2c533fc17dc12164efd9ce6beaa99e2a67a064589ebadd50cd9b349  0006_account_group_color.sql
-4e3a367b1bf75de82e7706127080627e0bb8f190b4d3bbc69be954de38eb1ead  0007_account_group_color_alpha.sql
-3f07a905e7413f0be519825a10c73effb392df4e6069a5df7901bcd0ec2ff1af  0008_provider_account_scheduling.sql
+bebf8c786b08ca3b2852d542d8d88049034a1fb566cc6efcc958dd3fc97241af  0001_initial.sql
@@ -51,7 +51,6 @@ create table client_api_keys (
  id text primary key,
  name text not null,
  label text,
-  provider_kind text not null,
  key text not null unique,
  enabled boolean not null default true,
  max_concurrency bigint not null default 0,
@@ -62,9 +61,6 @@ create table client_api_keys (
  constraint client_api_keys_key_ck check (
    key ~ '^sk_[A-Za-z0-9_-]{43}$'
  ),
-  constraint client_api_keys_provider_kind_ck check (
-    provider_kind ~ '^[a-z][a-z0-9]*(-[a-z0-9]+)*$'
-  ),
  constraint client_api_keys_limits_ck check (
    max_concurrency >= 0
    and requests_per_minute >= 0
@@ -120,7 +116,7 @@ create table provider_accounts (
  provider_kind text not null,
  name text not null,
  email text,
-  upstream_user_id text not null,
+  upstream_user_id text,
  upstream_account_id text,
  plan_type text,
  authentication_kind text not null,
@@ -130,14 +126,20 @@ create table provider_accounts (
  access_token_expires_at timestamptz,
  next_refresh_at timestamptz,
  enabled boolean not null default true,
-  availability text not null default 'unknown',
+  credential_state text not null default 'unknown',
  provider_quota_json jsonb,
-  quota_limit_reached boolean not null default false,
  last_error_message text,
-  availability_observed_at timestamptz not null,
+  credential_observed_at timestamptz not null,
  quota_observed_at timestamptz,
  created_at timestamptz not null,
  updated_at timestamptz not null,
+  quota_access_state text not null default 'unknown',
+  quota_evidence text,
+  quota_access_observed_at timestamptz,
+  quota_reset_at timestamptz,
+  last_error_reason text,
+  concurrency_limit bigint,
+  weight smallint not null default 1,
  constraint provider_accounts_revision_ck check (credential_revision > 0),
  constraint provider_accounts_authentication_kind_ck check (
    authentication_kind ~ '^[a-z][a-z0-9_]{0,63}$'
@@ -153,25 +155,61 @@ create table provider_accounts (
      and octet_length(provider_quota_json::text) <= 131072
    )
  ),
-  constraint provider_accounts_quota_observation_ck check (
-    (provider_quota_json is null) = (quota_observed_at is null)
-  ),
  constraint provider_accounts_refresh_ck check (
    has_refresh_token or next_refresh_at is null
  ),
-  constraint provider_accounts_availability_ck check (
-    availability in (
-      'unknown',
-      'ready',
-      'quota_exhausted',
-      'expired',
-      'banned',
-      'invalid'
+  constraint provider_accounts_credential_state_ck check (
+    credential_state in ('unknown', 'ready', 'expired', 'banned', 'invalid')
+  ),
+  constraint provider_accounts_quota_access_state_ck check (
+    quota_access_state in ('unknown', 'allowed', 'exhausted')
+  ),
+  constraint provider_accounts_quota_evidence_ck check (
+    quota_evidence is null
+    or quota_evidence in (
+      'provider_denied',
+      'account_limit_reached',
+      'usage_limit_reached',
+      'payment_required'
    )
  ),
+  constraint provider_accounts_quota_fact_ck check (
+    (quota_access_state = 'unknown' and quota_evidence is null and quota_reset_at is null)
+    or (
+      quota_access_state = 'allowed'
+      and quota_evidence is null
+      and quota_access_observed_at is not null
+      and quota_reset_at is null
+    )
+    or (
+      quota_access_state = 'exhausted'
+      and quota_evidence is not null
+      and quota_access_observed_at is not null
+    )
+  ),
+  constraint provider_accounts_quota_observation_ck check (
+    (provider_quota_json is null) = (quota_observed_at is null)
+  ),
+  constraint provider_accounts_error_reason_ck check (
+    last_error_reason is null
+    or last_error_reason in (
+      'account_unverified',
+      'access_token_expired',
+      'credential_expired',
+      'credential_invalid',
+      'account_banned'
+    )
+  ),
+  constraint provider_accounts_concurrency_limit_ck check (
+    concurrency_limit is null or concurrency_limit between 1 and 4294967295
+  ),
+  constraint provider_accounts_weight_ck check (
+    weight between 1 and 100
+  ),
  constraint provider_accounts_time_ck check (
    created_at <= updated_at
-    and availability_observed_at <= updated_at
+    and credential_observed_at <= updated_at
+    and (quota_access_observed_at is null or quota_access_observed_at <= updated_at)
    and (quota_observed_at is null or quota_observed_at <= updated_at)
  )
 );
@@ -184,8 +222,10 @@ create unique index provider_accounts_upstream_identity_uq
  );
 create index provider_accounts_runtime_idx
  on provider_accounts (provider_kind, enabled, id);
-create index provider_accounts_availability_idx
-  on provider_accounts (availability, id);
+create index provider_accounts_credential_state_idx
+  on provider_accounts (credential_state, id);
+create index provider_accounts_quota_access_idx
+  on provider_accounts (quota_access_state, quota_reset_at, id);
 create index provider_accounts_access_expiry_idx
  on provider_accounts (access_token_expires_at, id);
 create index provider_accounts_refresh_due_idx
@@ -195,6 +235,76 @@ create index provider_accounts_email_idx
  on provider_accounts (provider_kind, lower(email))
  where email is not null;

+-- 与 Provider 无关的账号组，以及账号和客户端 API 密钥的组成员关系。
+create table account_groups (
+  id text primary key,
+  name text not null,
+  description text,
+  enabled boolean not null default true,
+  created_at timestamptz not null,
+  updated_at timestamptz not null,
+  color text not null,
+  constraint account_groups_id_ck check (
+    id ~ '^grp_[0-9a-f]{32}$'
+  ),
+  constraint account_groups_name_ck check (
+    char_length(btrim(name)) between 1 and 100
+    and name = btrim(name)
+    and name !~ '[[:cntrl:]]'
+  ),
+  constraint account_groups_description_ck check (
+    description is null or (
+      octet_length(description) <= 4096
+      and description !~ '[[:cntrl:]]'
+    )
+  ),
+  constraint account_groups_time_ck check (
+    created_at <= updated_at
+  ),
+  constraint account_groups_color_ck check (color ~ '^#[0-9A-F]{8}$')
+);
+
+create unique index account_groups_name_uq
+  on account_groups (lower(name));
+create index account_groups_list_idx
+  on account_groups (enabled, created_at desc, id desc);
+
+create table account_group_accounts (
+  account_group_id text not null,
+  provider_account_id text not null,
+  created_at timestamptz not null,
+  primary key (account_group_id, provider_account_id),
+  constraint account_group_accounts_group_fk foreign key (account_group_id)
+    references account_groups (id)
+    on update restrict
+    on delete cascade,
+  constraint account_group_accounts_account_fk foreign key (provider_account_id)
+    references provider_accounts (id)
+    on update restrict
+    on delete cascade
+);
+
+create index account_group_accounts_account_idx
+  on account_group_accounts (provider_account_id, account_group_id);
+
+create table client_api_key_groups (
+  client_api_key_id text not null,
+  account_group_id text not null,
+  created_at timestamptz not null,
+  primary key (client_api_key_id, account_group_id),
+  constraint client_api_key_groups_key_fk foreign key (client_api_key_id)
+    references client_api_keys (id)
+    on update restrict
+    on delete cascade,
+  constraint client_api_key_groups_group_fk foreign key (account_group_id)
+    references account_groups (id)
+    on update restrict
+    on delete restrict
+);
+
+create index client_api_key_groups_group_idx
+  on client_api_key_groups (account_group_id, client_api_key_id);
+
 -- 模型请求、上游尝试、用量、计费与结果。
 create table model_requests (
  id text primary key,
@@ -263,6 +373,9 @@ create table model_requests (
  started_at timestamptz not null,
  deadline_at timestamptz not null,
  completed_at timestamptz,
+  routing_scope text not null,
+  routing_group_refs text[] not null default '{}',
+  routing_group_names_snapshot jsonb not null default '[]'::jsonb,
  constraint model_requests_client_ref_ck check (
    client_api_key_id is null or client_api_key_id = client_api_key_ref
  ),
@@ -332,6 +445,26 @@ create table model_requests (
      and service_tier !~ '[[:cntrl:]]'
    )
  ),
+  constraint model_requests_routing_scope_ck check (
+    routing_scope in ('legacy_provider', 'all', 'groups')
+  ),
+  constraint model_requests_routing_group_names_ck check (
+    jsonb_typeof(routing_group_names_snapshot) = 'array'
+    and (
+      (
+        routing_scope in ('legacy_provider', 'all')
+        and cardinality(routing_group_refs) = 0
+        and jsonb_array_length(routing_group_names_snapshot) = 0
+      )
+      or (
+        routing_scope = 'groups'
+        and cardinality(routing_group_refs) > 0
+        and array_position(routing_group_refs, null) is null
+        and jsonb_array_length(routing_group_names_snapshot)
+          = cardinality(routing_group_refs)
+      )
+    )
+  ),
  constraint model_requests_cost_ck check (
    cost_source in ('provider_reported', 'calculated', 'unavailable')
    and (
@@ -425,6 +558,8 @@ create index model_requests_running_deadline_idx
 create index model_requests_retention_idx
  on model_requests (completed_at)
  where outcome <> 'running';
+create index model_requests_routing_group_refs_idx
+  on model_requests using gin (routing_group_refs);

 -- 运行期警告与错误事件。
 create table ops_events (
@@ -1,3 +0,0 @@
-- Initial OAuth exchange requires an id_token, but its ChatGPT user claim is optional.
-alter table provider_accounts
-  alter column upstream_user_id drop not null;
@@ -1,70 +0,0 @@
-- Direct OpenAI OAuth imports between 3.1.15 and 3.1.16 persisted JWT access
-- tokens but accidentally omitted their derived expiry. Recover only future,
-- standard JWT expiries; malformed/opaque tokens remain unchanged so this
-- one-shot repair never fabricates a credential lifetime or refresh schedule.
-
-create function _cpr_openai_access_token_expiry(access_token text)
-returns timestamptz
-language plpgsql
-immutable
-strict
-as $$
-declare
-  payload text;
-  claims jsonb;
-  epoch_seconds bigint;
-begin
-  if access_token !~ '^[^.]+[.][^.]+[.][^.]+$' then
-    return null;
-  end if;
-
-  payload := split_part(access_token, '.', 2);
-  payload := rpad(
-    translate(payload, '-_', '+/'),
-    ((length(payload) + 3) / 4) * 4,
-    '='
-  );
-  claims := convert_from(decode(payload, 'base64'), 'UTF8')::jsonb;
-  if jsonb_typeof(claims -> 'exp') <> 'number' then
-    return null;
-  end if;
-
-  epoch_seconds := (claims ->> 'exp')::bigint;
-  return to_timestamp(epoch_seconds::double precision);
-exception
-  when others then
-    return null;
-end;
-$$;
-
-with candidates as (
-  select
-    account.id,
-    clock_timestamp() as observed_at,
-    _cpr_openai_access_token_expiry(
-      account.provider_credentials_json ->> 'access_token'
-    ) as access_token_expires_at
-  from provider_accounts as account
-  where account.provider_kind = 'openai'
-    and account.authentication_kind = 'oauth'
-    and account.has_refresh_token
-    and account.access_token_expires_at is null
-    and account.next_refresh_at is null
-    and account.availability not in ('expired', 'invalid', 'banned')
-    and jsonb_typeof(account.provider_credentials_json -> 'access_token') = 'string'
-)
-update provider_accounts as account
-set
-  access_token_expires_at = candidates.access_token_expires_at,
-  updated_at = greatest(account.updated_at, candidates.observed_at)
-from candidates
-where account.id = candidates.id
-  and candidates.access_token_expires_at > candidates.observed_at
-  and account.provider_kind = 'openai'
-  and account.authentication_kind = 'oauth'
-  and account.has_refresh_token
-  and account.access_token_expires_at is null
-  and account.next_refresh_at is null
-  and account.availability not in ('expired', 'invalid', 'banned');
-
-drop function _cpr_openai_access_token_expiry(text);
@@ -1,165 +0,0 @@
-- Separate credential identity facts from quota access facts. The public account
-- status remains derived at read time because Redis cooldowns and reset times are
-- time-dependent.
-
-alter table provider_accounts
-  rename column availability to credential_state;
-
-alter table provider_accounts
-  rename column availability_observed_at to credential_observed_at;
-
-alter table provider_accounts
-  drop constraint provider_accounts_availability_ck;
-
-alter table provider_accounts
-  add constraint provider_accounts_credential_state_ck check (
-    credential_state in ('unknown', 'ready', 'expired', 'banned', 'invalid')
-  ) not valid;
-
-alter table provider_accounts
-  add column quota_access_state text not null default 'unknown',
-  add column quota_evidence text,
-  add column quota_access_observed_at timestamptz,
-  add column quota_reset_at timestamptz,
-  add column last_error_reason text;
-
-alter table provider_accounts
-  drop constraint provider_accounts_quota_observation_ck;
-
-- Old quota_exhausted credential states are quota facts. Re-derive OpenAI quota
-- access from the raw authoritative response and never trust the old percentage-
-- derived quota_limit_reached boolean.
-update provider_accounts
-set
-  quota_access_state = case
-    when provider_kind = 'openai'
-      and provider_quota_json #>> '{rate_limit,allowed}' = 'true'
-      then 'allowed'
-    when provider_kind = 'openai'
-      and (
-        provider_quota_json #>> '{rate_limit,allowed}' = 'false'
-        or (
-          coalesce(provider_quota_json #>> '{rate_limit,allowed}', '') <> 'true'
-          and (
-            provider_quota_json #>> '{rate_limit,limit_reached}' = 'true'
-            or provider_quota_json #>> '{rate_limit,primary_window,limit_reached}' = 'true'
-          )
-        )
-      )
-      then 'exhausted'
-    when provider_kind = 'xai' and credential_state = 'quota_exhausted'
-      then 'exhausted'
-    when provider_quota_json is not null then 'unknown'
-    else 'unknown'
-  end,
-  quota_evidence = case
-    when provider_kind = 'openai'
-      and provider_quota_json #>> '{rate_limit,allowed}' = 'false'
-      then 'provider_denied'
-    when provider_kind = 'openai'
-      and coalesce(provider_quota_json #>> '{rate_limit,allowed}', '') <> 'true'
-      and (
-        provider_quota_json #>> '{rate_limit,limit_reached}' = 'true'
-        or provider_quota_json #>> '{rate_limit,primary_window,limit_reached}' = 'true'
-      )
-      then 'account_limit_reached'
-    when provider_kind = 'xai' and credential_state = 'quota_exhausted'
-      then 'usage_limit_reached'
-    else null
-  end,
-  quota_access_observed_at = case
-    when provider_kind = 'openai' and provider_quota_json is not null
-      then quota_observed_at
-    when provider_kind = 'xai' and credential_state = 'quota_exhausted'
-      then credential_observed_at
-    else null
-  end,
-  quota_reset_at = case
-    when provider_kind = 'openai'
-      and jsonb_typeof(provider_quota_json #> '{rate_limit,primary_window,reset_at}') = 'number'
-      then to_timestamp((provider_quota_json #>> '{rate_limit,primary_window,reset_at}')::double precision)
-    else null
-  end,
-  credential_state = case
-    when credential_state = 'quota_exhausted' and upstream_user_id is not null then 'ready'
-    when credential_state = 'quota_exhausted' then 'unknown'
-    else credential_state
-  end,
-  last_error_reason = case credential_state
-    when 'unknown' then 'account_unverified'
-    when 'expired' then 'credential_expired'
-    when 'invalid' then 'credential_invalid'
-    when 'banned' then 'account_banned'
-    else null
-  end,
-  last_error_message = case
-    when credential_state in ('unknown', 'expired', 'invalid', 'banned') then last_error_message
-    else null
-  end;
-
-alter table provider_accounts
-  validate constraint provider_accounts_credential_state_ck;
-
-alter table provider_accounts
-  add constraint provider_accounts_quota_access_state_ck check (
-    quota_access_state in ('unknown', 'allowed', 'exhausted')
-  ),
-  add constraint provider_accounts_quota_evidence_ck check (
-    quota_evidence is null
-    or quota_evidence in (
-      'provider_denied',
-      'account_limit_reached',
-      'usage_limit_reached',
-      'payment_required'
-    )
-  ),
-  add constraint provider_accounts_quota_fact_ck check (
-    (quota_access_state = 'unknown' and quota_evidence is null and quota_reset_at is null)
-    or (
-      quota_access_state = 'allowed'
-      and quota_evidence is null
-      and quota_access_observed_at is not null
-      and quota_reset_at is null
-    )
-    or (
-      quota_access_state = 'exhausted'
-      and quota_evidence is not null
-      and quota_access_observed_at is not null
-    )
-  ),
-  add constraint provider_accounts_quota_observation_ck check (
-    (provider_quota_json is null) = (quota_observed_at is null)
-  ),
-  add constraint provider_accounts_error_reason_ck check (
-    last_error_reason is null
-    or last_error_reason in (
-      'account_unverified',
-      'access_token_expired',
-      'credential_expired',
-      'credential_invalid',
-      'account_banned'
-    )
-  );
-
-drop index provider_accounts_availability_idx;
-create index provider_accounts_credential_state_idx
-  on provider_accounts (credential_state, id);
-create index provider_accounts_quota_access_idx
-  on provider_accounts (quota_access_state, quota_reset_at, id);
-
-alter table provider_accounts
-  drop column quota_limit_reached;
-
-alter table provider_accounts
-  rename constraint provider_accounts_time_ck to provider_accounts_time_ck_old;
-
-alter table provider_accounts
-  drop constraint provider_accounts_time_ck_old;
-
-alter table provider_accounts
-  add constraint provider_accounts_time_ck check (
-    created_at <= updated_at
-    and credential_observed_at <= updated_at
-    and (quota_access_observed_at is null or quota_access_observed_at <= updated_at)
-    and (quota_observed_at is null or quota_observed_at <= updated_at)
-  );
@@ -1,135 +0,0 @@
-- Account groups are provider-neutral account sets. Existing provider-scoped
-- keys are placed in ordinary migration groups before their provider column is
-- removed, preserving their pre-upgrade account scope.
-
-create table account_groups (
-  id text primary key,
-  name text not null,
-  description text,
-  enabled boolean not null default true,
-  created_at timestamptz not null,
-  updated_at timestamptz not null,
-  constraint account_groups_id_ck check (
-    id ~ '^grp_[0-9a-f]{32}$'
-  ),
-  constraint account_groups_name_ck check (
-    char_length(btrim(name)) between 1 and 100
-    and name = btrim(name)
-    and name !~ '[[:cntrl:]]'
-  ),
-  constraint account_groups_description_ck check (
-    description is null or (
-      octet_length(description) <= 4096
-      and description !~ '[[:cntrl:]]'
-    )
-  ),
-  constraint account_groups_time_ck check (
-    created_at <= updated_at
-  )
-);
-
-create unique index account_groups_name_uq
-  on account_groups (lower(name));
-
-create index account_groups_list_idx
-  on account_groups (enabled, created_at desc, id desc);
-
-create table account_group_accounts (
-  account_group_id text not null,
-  provider_account_id text not null,
-  created_at timestamptz not null,
-  primary key (account_group_id, provider_account_id),
-  constraint account_group_accounts_group_fk foreign key (account_group_id)
-    references account_groups (id)
-    on update restrict
-    on delete cascade,
-  constraint account_group_accounts_account_fk foreign key (provider_account_id)
-    references provider_accounts (id)
-    on update restrict
-    on delete cascade
-);
-
-create index account_group_accounts_account_idx
-  on account_group_accounts (provider_account_id, account_group_id);
-
-create table client_api_key_groups (
-  client_api_key_id text not null,
-  account_group_id text not null,
-  created_at timestamptz not null,
-  primary key (client_api_key_id, account_group_id),
-  constraint client_api_key_groups_key_fk foreign key (client_api_key_id)
-    references client_api_keys (id)
-    on update restrict
-    on delete cascade,
-  constraint client_api_key_groups_group_fk foreign key (account_group_id)
-    references account_groups (id)
-    on update restrict
-    on delete restrict
-);
-
-create index client_api_key_groups_group_idx
-  on client_api_key_groups (account_group_id, client_api_key_id);
-
-with provider_kinds as (
-  select provider_kind from provider_accounts
-  union
-  select provider_kind from client_api_keys
-)
-insert into account_groups (id, name, description, enabled, created_at, updated_at)
-select
-  'grp_' || md5('codex-proxy-rs:migration-group:' || provider_kind),
-  '迁移池-' || provider_kind,
-  '升级时按原 Provider 权限自动生成',
-  true,
-  now(),
-  now()
-from provider_kinds;
-
-insert into account_group_accounts (account_group_id, provider_account_id, created_at)
-select
-  'grp_' || md5('codex-proxy-rs:migration-group:' || provider_kind),
-  id,
-  clock_timestamp()
-from provider_accounts;
-
-insert into client_api_key_groups (client_api_key_id, account_group_id, created_at)
-select
-  id,
-  'grp_' || md5('codex-proxy-rs:migration-group:' || provider_kind),
-  clock_timestamp()
-from client_api_keys;
-
-alter table model_requests
-  add column routing_scope text not null default 'legacy_provider',
-  add column routing_group_refs text[] not null default '{}',
-  add column routing_group_names_snapshot jsonb not null default '[]'::jsonb,
-  add constraint model_requests_routing_scope_ck check (
-    routing_scope in ('legacy_provider', 'all', 'groups')
-  ),
-  add constraint model_requests_routing_group_names_ck check (
-    jsonb_typeof(routing_group_names_snapshot) = 'array'
-    and (
-      (
-        routing_scope in ('legacy_provider', 'all')
-        and cardinality(routing_group_refs) = 0
-        and jsonb_array_length(routing_group_names_snapshot) = 0
-      )
-      or (
-        routing_scope = 'groups'
-        and cardinality(routing_group_refs) > 0
-        and array_position(routing_group_refs, null) is null
-        and jsonb_array_length(routing_group_names_snapshot)
-          = cardinality(routing_group_refs)
-      )
-    )
-  );
-
-create index model_requests_routing_group_refs_idx
-  on model_requests using gin (routing_group_refs);
-
-alter table model_requests
-  alter column routing_scope drop default;
-
-alter table client_api_keys
-  drop constraint client_api_keys_provider_kind_ck,
-  drop column provider_kind;
@@ -1,9 +0,0 @@
-alter table account_groups
-  add column color text;
-
-update account_groups
-set color = '#2563EB';
-
-alter table account_groups
-  alter column color set not null,
-  add constraint account_groups_color_ck check (color ~ '^#[0-9A-F]{6}$');
@@ -1,8 +0,0 @@
-alter table account_groups
-  drop constraint account_groups_color_ck;
-
-update account_groups
-set color = color || 'FF';
-
-alter table account_groups
-  add constraint account_groups_color_ck check (color ~ '^#[0-9A-F]{8}$');
@@ -1,7 +0,0 @@
-alter table provider_accounts
-  add column concurrency_limit bigint,
-  add column weight smallint not null default 1,
-  add constraint provider_accounts_concurrency_limit_ck
-    check (concurrency_limit is null or concurrency_limit between 1 and 4294967295),
-  add constraint provider_accounts_weight_ck
-    check (weight between 1 and 100);
@@ -10,6 +10,7 @@ const props = withDefaults(
    variant?: ButtonVariant
    size?: ButtonSize
    loading?: boolean
+    spinIconOnLoading?: boolean
    disabled?: boolean
    active?: boolean
    iconOnly?: boolean
@@ -21,6 +22,7 @@ const props = withDefaults(
    variant: 'primary',
    size: 'default',
    loading: false,
+    spinIconOnLoading: false,
    disabled: false,
    active: false,
    iconOnly: false,
@@ -123,25 +125,24 @@ const loadingIconClasses = computed(() => [
    :title="title || (iconOnly ? label : undefined)"
    :aria-busy="loading"
  >
-    <span v-if="$slots.icon" :class="loadingIconClasses" aria-hidden="true">
-      <slot name="icon" />
-    </span>
    <span
-      v-else-if="loading && !iconOnly"
-      class="inline-grid shrink-0 place-items-center leading-none"
+      v-if="loading && !spinIconOnLoading"
+      :class="loadingIconClasses"
      :style="loadingIndicatorStyle"
      aria-hidden="true"
    >
      <LoaderCircle
        :size="loadingIconSize[size]"
-        class="block origin-center animate-spin will-change-transform motion-reduce:animate-none"
      />
    </span>
+    <span v-else-if="$slots.icon" :class="loadingIconClasses" aria-hidden="true">
+      <slot name="icon" />
+    </span>
    <span v-if="!iconOnly && $slots.default" :class="labelClasses">
      <slot />
    </span>
    <span
-      v-if="iconOnly && !$slots.icon"
+      v-if="iconOnly && !$slots.icon && (!loading || spinIconOnLoading)"
      :class="loadingIconClasses"
      aria-hidden="true"
    >
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import type { AccountRow } from '../constants'
+import { modelSuccessRateTextClass } from '../constants'

 defineProps<{
  account: AccountRow
@@ -62,7 +63,7 @@ defineProps<{
      </div>

      <div
-        class="grid grid-cols-[1.5fr_0.7fr_0.8fr_1fr_1fr_1fr_1fr_1fr_1.4fr] gap-3 pb-2 text-[11px] font-heavy text-(--cp-text-secondary) shadow-[inset_0_-1px_0_var(--cp-divider-subtle)]"
+        class="grid grid-cols-[1.5fr_0.7fr_0.8fr_1fr_1fr_1fr_1fr_1fr_1.2fr] gap-3 pb-2 text-[11px] font-heavy text-(--cp-text-secondary) shadow-[inset_0_-1px_0_var(--cp-divider-subtle)]"
      >
        <span>模型</span>
        <span>调用</span>
@@ -84,11 +85,13 @@ defineProps<{
        <div
          v-for="model in account.usage.models"
          :key="model.model"
-          class="grid grid-cols-[1.5fr_0.7fr_0.8fr_1fr_1fr_1fr_1fr_1fr_1.4fr] gap-3 pt-3 text-[12px] font-emphasis text-(--cp-text-primary)"
+          class="grid grid-cols-[1.5fr_0.7fr_0.8fr_1fr_1fr_1fr_1fr_1fr_1.2fr] gap-3 pt-3 text-[12px] font-emphasis text-(--cp-text-primary)"
        >
          <span class="truncate">{{ model.model }}</span>
          <span>{{ model.requestCountDisplay }}</span>
-          <span class="text-(--cp-warning-text)">{{ model.successRateDisplay }}</span>
+          <span :class="modelSuccessRateTextClass(model.successRate)">
+            {{ model.successRateDisplay }}
+          </span>
          <span>{{ model.inputTokensDisplay }}</span>
          <span>{{ model.outputTokensDisplay }}</span>
          <span>{{ model.cachedTokensDisplay }}</span>
@@ -94,8 +94,8 @@ export const accountColumns = [
    flex: 1,
    width: '112px',
    minWidth: '112px',
-    headerClass: '!pl-8',
-    cellClass: `${relaxedCellClass} !pl-8`,
+    align: 'center' as const,
+    cellClass: relaxedCellClass,
  },
  {
    key: 'lastUsedAt',
@@ -121,8 +121,8 @@ export const accountColumns = [
  {
    key: 'actions',
    label: '操作',
-    width: '110px',
-    minWidth: '110px',
+    width: '120px',
+    minWidth: '120px',
  },
 ] satisfies BaseTableColumn<AccountRow>[]

@@ -211,6 +211,18 @@ export function quotaWindowPercentTextClass(window: AccountQuotaWindow) {
  return 'text-(--cp-success-text)'
 }

+export function modelSuccessRateTextClass(successRate: number | null) {
+  if (successRate === null)
+    return 'text-(--cp-text-muted)'
+  if (successRate >= 99.5)
+    return 'text-(--cp-success-text)'
+  if (successRate >= 98)
+    return 'text-(--cp-normal-text)'
+  if (successRate >= 95)
+    return 'text-(--cp-warning-text)'
+  return 'text-(--cp-danger-text)'
+}
+
 function compareQuotaWindows(left: AccountQuotaWindow, right: AccountQuotaWindow) {
  const groupDifference = groupOrder(left) - groupOrder(right)
  if (groupDifference !== 0)
@@ -262,9 +262,9 @@ const {
          </template>

          <template #groups="{ row }">
-            <AccountGroupMarks
-              :groups="row.groups"
-            />
+            <div class="flex w-full justify-center">
+              <AccountGroupMarks :groups="row.groups" />
+            </div>
          </template>

          <template #lastUsedAt="{ row }">
@@ -9,8 +9,8 @@ defineProps<{
 </script>

 <template>
-  <div class="grid gap-1.5">
-    <div v-if="apiKey.routingScope === 'all'" class="flex items-center gap-2">
+  <div class="grid w-full justify-items-center gap-1.5">
+    <div v-if="apiKey.routingScope === 'all'" class="flex items-center justify-center gap-2">
      <span class="inline-flex h-6 items-center rounded-lg bg-(--cp-warning-bg) px-2 text-[11px] font-bold text-(--cp-warning-text)">
        全部账号权限
      </span>
@@ -19,7 +19,7 @@ export const apiKeyColumns = [
    minWidth: '112px',
    align: 'center' as const,
  },
-  { key: 'scope', label: '分组', width: '112px', minWidth: '112px' },
+  { key: 'scope', label: '分组', width: '112px', minWidth: '112px', align: 'center' as const },
  {
    key: 'createdAtDisplay',
    label: '创建时间',
@@ -348,7 +348,7 @@ function accountUsageItem(item: DashboardSummary['accountUsage'][number]) {
    planType: item.planType,
    tokens: item.tokens,
    lastUsed: item.lastUsed,
-    metricLabel: usesDailyRequests ? '次数' : 'Token',
+    metricLabel: usesDailyRequests ? '次数' : '今日 Token',
    metricValue: usesDailyRequests
      ? requestCount > 0 ? usageWindow.localUsage?.requestCountDisplay : '—'
      : item.tokens,
@@ -46,6 +46,7 @@ const {
          class="text-(--cp-normal)"
          size="md"
          label="刷新概览"
+          spin-icon-on-loading
          :loading="loading || refreshing"
          :disabled="loading || refreshing"
          @click="refresh"
@@ -69,6 +69,7 @@ function showDetail(record: Awaited<ReturnType<typeof getOpsErrors>>['items'][nu
          variant="ghost"
          size="md"
          label="刷新错误明细"
+          spin-icon-on-loading
          :loading="refreshing"
          :disabled="loading || refreshing"
          @click="refresh"
@@ -32,6 +32,7 @@ const search = defineModel<string>('search', { required: true })
        variant="ghost"
        size="md"
        label="刷新使用记录"
+        spin-icon-on-loading
        :loading="refreshing"
        :disabled="loading || refreshing"
        @click="emit('refresh')"
@@ -1 +1 @@
-version: "3.2.0"
+version: "3.2.2"
Author	SHA1	Message	Date
ZyyandCodex	6074cff68c	chore: bump version to 3.2.2 Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:43:13 +08:00
ZyyandCodex	6ab8e7d0a6	fix(frontend): grade model success rate colors Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:42:20 +08:00
ZyyandCodex	17f9ef8915	fix(observability): omit inactive accounts from daily usage Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:39:59 +08:00
ZyyandCodex	15e0a28bd0	fix(frontend): refine refresh loading and group alignment Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:39:50 +08:00
ZyyandCodex	58bc438992	chore: bump version to 3.2.1 Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:13:58 +08:00
ZyyandCodex	b04616f59f	refactor(migrations): squash schema into initial baseline Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:13:09 +08:00
ZyyandCodex	82ba4fcbba	fix(observability): align dashboard and quota window usage Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:11:56 +08:00
ZyyandCodex	819f428ac3	fix(frontend): align loading and daily usage display Co-authored-by: Codex <noreply@openai.com>	2026-08-14 00:10:13 +08:00