升级托管后端内核到 CLIProxyAPI v7.0.3

- 将 resources/backend/source 同步到 CLIProxyAPI v7.0.3 /v7，合入 Home、Redis、协议复用与响应翻译更新。
- 迁移并保留 CodexCliPlus 的 GPT-only 路由、Secret Broker、prompt_cache_retention、用量日志、管理 API、原子写入和镜像存储改装。
- 更新 Go 依赖覆盖、示例配置、backend/windows fallback 资源与 source/windows manifest，继续以 ccp-core.exe 作为托管可执行文件。
- 更新 .NET 后端发布元数据、构建日期、包内可执行文件 SHA 和 BuildTool 资产流程断言。
- 补充和更新 Go 与 .NET 测试断言以覆盖 v7 module path、Home 请求日志、禁用文件存储、WebSocket 复用和版本解析。

Author: C4AL

resources/backend/backend-source-manifest.json

@@ -1,20 +1,69 @@
 {
   "component": "CLIProxyAPI",
   "sourceUrl": "https://github.com/router-for-me/CLIProxyAPI",
-  "version": "6.10.9",
-  "releaseTag": "v6.10.9",
-  "sourceCommit": "785b00c3127eea6aa207f1207ead8a2aa93690a3",
+  "version": "7.0.3",
+  "releaseTag": "v7.0.3",
+  "releaseUrl": "https://github.com/router-for-me/CLIProxyAPI/releases/tag/v7.0.3",
+  "archiveUrl": "https://github.com/router-for-me/CLIProxyAPI/releases/download/v7.0.3/CLIProxyAPI_7.0.3_windows_amd64.zip",
+  "archiveSha256": "65f1657a900b50cbcbe14526b4a59753141b18e3b8f09a691648fc50ca601660",
+  "archiveAssetName": "CLIProxyAPI_7.0.3_windows_amd64.zip",
+  "sourceCommit": "bd8c05a830a36b2e5181bb5c8596a2c8d85c3dbc",
   "sourceRoot": "resources/backend/source",
   "buildKind": "repo-source",
-  "compatibilityPatchVersion": "codexcliplus-2026.05.07",
+  "compatibilityPatchVersion": "codexcliplus-2026.05.12",
   "goVersion": "go1.26.2",
+  "managedExecutableSha256": "711a79280e415e9b1d8d131b1388c2861bb2f3587b8a4ba22b51fb0f9fbde72c",
   "generatedArtifact": {
     "fileName": "ccp-core.exe",
     "runtime": "win-x64",
-    "sha256": "f17d22d4fb7df11c84b06b1fe2123e45561bdc6f14226a3f3cffa344491d4023",
-    "size": 25098240
+    "sha256": "711a79280e415e9b1d8d131b1388c2861bb2f3587b8a4ba22b51fb0f9fbde72c",
+    "size": 28566016
   },
-  "upgradedAtUtc": "2026-05-07T06:21:00Z",
+  "upgradedAtUtc": "2026-05-12T14:02:00Z",
+  "dependencyOverrides": [
+    {
+      "module": "github.com/jackc/pgx/v5",
+      "from": "5.7.6",
+      "to": "5.9.2",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "github.com/cloudflare/circl",
+      "from": "1.6.1",
+      "to": "1.6.3",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "github.com/go-git/go-git/v6",
+      "from": "6.0.0-20251009132922-75a182125145",
+      "to": "6.0.0-alpha.2",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "golang.org/x/crypto",
+      "from": "0.45.0",
+      "to": "0.50.0",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "golang.org/x/net",
+      "from": "0.47.0",
+      "to": "0.53.0",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "golang.org/x/sys",
+      "from": "0.38.0",
+      "to": "0.43.0",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    },
+    {
+      "module": "golang.org/x/text",
+      "from": "0.31.0",
+      "to": "0.36.0",
+      "reason": "preserve CodexCliPlus vulnerability remediation floor"
+    }
+  ],
   "notes": [
     "Normal build output is generated from resources/backend/source.",
     "The upstream archive entry cli-proxy-api.exe remains an input name only; CodexCliPlus packages ccp-core.exe.",

resources/backend/source/cmd/fetch_antigravity_models/main.go

@@ -25,11 +25,11 @@ import (
 	"strings"
 	"time"
 
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/logging"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/misc"
-	sdkauth "github.com/router-for-me/CLIProxyAPI/v6/sdk/auth"
-	coreauth "github.com/router-for-me/CLIProxyAPI/v6/sdk/cliproxy/auth"
-	"github.com/router-for-me/CLIProxyAPI/v6/sdk/proxyutil"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/logging"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/misc"
+	sdkauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/auth"
+	coreauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/auth"
+	"github.com/router-for-me/CLIProxyAPI/v7/sdk/proxyutil"
 	log "github.com/sirupsen/logrus"
 	"github.com/tidwall/gjson"
 )

resources/backend/source/cmd/server/main.go

@@ -10,29 +10,32 @@ import (
 	"fmt"
 	"io"
 	"io/fs"
+	"net"
 	"net/url"
 	"os"
 	"path/filepath"
+	"strconv"
 	"strings"
 	"time"
 
 	"github.com/joho/godotenv"
-	configaccess "github.com/router-for-me/CLIProxyAPI/v6/internal/access/config_access"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/buildinfo"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/cmd"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/logging"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/managementasset"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/misc"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/redisqueue"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/registry"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/store"
-	_ "github.com/router-for-me/CLIProxyAPI/v6/internal/translator"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/tui"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/usage"
-	"github.com/router-for-me/CLIProxyAPI/v6/internal/util"
-	sdkAuth "github.com/router-for-me/CLIProxyAPI/v6/sdk/auth"
-	coreauth "github.com/router-for-me/CLIProxyAPI/v6/sdk/cliproxy/auth"
+	configaccess "github.com/router-for-me/CLIProxyAPI/v7/internal/access/config_access"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/buildinfo"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/cmd"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/config"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/home"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/logging"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/managementasset"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/misc"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/redisqueue"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/registry"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/store"
+	_ "github.com/router-for-me/CLIProxyAPI/v7/internal/translator"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/tui"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/usage"
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/util"
+	sdkAuth "github.com/router-for-me/CLIProxyAPI/v7/sdk/auth"
+	coreauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/auth"
 	log "github.com/sirupsen/logrus"
 )
 
@@ -71,6 +74,8 @@ func main() {
 	var vertexImportPrefix string
 	var configPath string
 	var password string
+	var homeAddr string
+	var homePassword string
 	var tuiMode bool
 	var standalone bool
 	var localModel bool
@@ -89,6 +94,8 @@ func main() {
 	flag.StringVar(&vertexImport, "vertex-import", "", "Import Vertex service account key JSON file")
 	flag.StringVar(&vertexImportPrefix, "vertex-import-prefix", "", "Prefix for Vertex model namespacing (use with -vertex-import)")
 	flag.StringVar(&password, "password", "", "")
+	flag.StringVar(&homeAddr, "home", "", "Home control plane address in host:port format (loads config from home and skips local config file)")
+	flag.StringVar(&homePassword, "home-password", "", "Home control plane password (Redis AUTH)")
 	flag.BoolVar(&tuiMode, "tui", false, "Start with terminal management UI")
 	flag.BoolVar(&standalone, "standalone", false, "In TUI mode, start an embedded local server")
 	flag.BoolVar(&localModel, "local-model", false, "Use embedded model catalog only, skip remote model fetching")
@@ -127,6 +134,7 @@ func main() {
 	var err error
 	var cfg *config.Config
 	var isCloudDeploy bool
+	var configLoadedFromHome bool
 	var (
 		usePostgresStore     bool
 		pgStoreDSN           string
@@ -237,7 +245,68 @@ func main() {
 	// Determine and load the configuration file.
 	// Prefer the Postgres store when configured, otherwise fallback to git or local files.
 	var configFilePath string
-	if usePostgresStore {
+	if strings.TrimSpace(homeAddr) != "" {
+		configLoadedFromHome = true
+		trimmedHomePassword := strings.TrimSpace(homePassword)
+		host, portStr, errSplit := net.SplitHostPort(strings.TrimSpace(homeAddr))
+		if errSplit != nil {
+			log.Errorf("invalid -home address %q (expected host:port): %v", homeAddr, errSplit)
+			return
+		}
+		host = strings.TrimSpace(host)
+		if host == "" {
+			log.Errorf("invalid -home address %q: host is empty", homeAddr)
+			return
+		}
+		port, errPort := strconv.Atoi(strings.TrimSpace(portStr))
+		if errPort != nil || port <= 0 {
+			log.Errorf("invalid -home address %q: invalid port %q", homeAddr, portStr)
+			return
+		}
+
+		homeCfg := config.HomeConfig{
+			Enabled:  true,
+			Host:     host,
+			Port:     port,
+			Password: trimmedHomePassword,
+		}
+		homeClient := home.New(homeCfg)
+		defer homeClient.Close()
+
+		ctxHome, cancelHome := context.WithTimeout(context.Background(), 30*time.Second)
+		raw, errGetConfig := homeClient.GetConfig(ctxHome)
+		cancelHome()
+		if errGetConfig != nil {
+			log.Errorf("failed to fetch config from home: %v", errGetConfig)
+			return
+		}
+
+		parsed, errParseConfig := config.ParseConfigBytes(raw)
+		if errParseConfig != nil {
+			log.Errorf("failed to parse config payload from home: %v", errParseConfig)
+			return
+		}
+		if parsed == nil {
+			parsed = &config.Config{}
+		}
+		parsed.Home = homeCfg
+		parsed.Port = 8317 // Default to 8317 for home mode, can be overridden by home config
+		parsed.UsageStatisticsEnabled = true
+		cfg = parsed
+
+		// Keep a non-empty config path for downstream components (log paths, management assets, etc),
+		// but do not require the file to exist when loading config from home.
+		if strings.TrimSpace(configPath) != "" {
+			configFilePath = configPath
+		} else {
+			configFilePath = filepath.Join(wd, "config.yaml")
+		}
+
+		// Local stores are intentionally disabled when config is loaded from home.
+		usePostgresStore = false
+		useObjectStore = false
+		useGitStore = false
+	} else if usePostgresStore {
 		if pgStoreLocalPath == "" {
 			pgStoreLocalPath = wd
 		}
@@ -401,21 +470,25 @@ func main() {
 	// In cloud deploy mode, check if we have a valid configuration
 	var configFileExists bool
 	if isCloudDeploy {
-		if info, errStat := os.Stat(configFilePath); errStat != nil {
-			// Don't mislead: API server will not start until configuration is provided.
-			log.Info("Cloud deploy mode: No configuration file detected; standing by for configuration")
-			configFileExists = false
-		} else if info.IsDir() {
-			log.Info("Cloud deploy mode: Config path is a directory; standing by for configuration")
-			configFileExists = false
-		} else if cfg.Port == 0 {
-			// LoadConfigOptional returns empty config when file is empty or invalid.
-			// Config file exists but is empty or invalid; treat as missing config
-			log.Info("Cloud deploy mode: Configuration file is empty or invalid; standing by for valid configuration")
-			configFileExists = false
+		if configLoadedFromHome && cfg != nil {
+			configFileExists = cfg.Port != 0
 		} else {
-			log.Info("Cloud deploy mode: Configuration file detected; starting service")
-			configFileExists = true
+			if info, errStat := os.Stat(configFilePath); errStat != nil {
+				// Don't mislead: API server will not start until configuration is provided.
+				log.Info("Cloud deploy mode: No configuration file detected; standing by for configuration")
+				configFileExists = false
+			} else if info.IsDir() {
+				log.Info("Cloud deploy mode: Config path is a directory; standing by for configuration")
+				configFileExists = false
+			} else if cfg.Port == 0 {
+				// LoadConfigOptional returns empty config when file is empty or invalid.
+				// Config file exists but is empty or invalid; treat as missing config
+				log.Info("Cloud deploy mode: Configuration file is empty or invalid; standing by for valid configuration")
+				configFileExists = false
+			} else {
+				log.Info("Cloud deploy mode: Configuration file detected; starting service")
+				configFileExists = true
+			}
 		}
 	}
 	usage.SetStatisticsEnabled(cfg.UsageStatisticsEnabled)
@@ -488,8 +561,11 @@ func main() {
 			if standalone {
 				// Standalone mode: start an embedded local server and connect TUI client to it.
 				managementasset.StartAutoUpdater(context.Background(), configFilePath)
-				if !localModel {
+				misc.StartAntigravityVersionUpdater(context.Background())
+				if !localModel && !cfg.Home.Enabled {
 					registry.StartModelsUpdater(context.Background())
+				} else if cfg.Home.Enabled {
+					log.Info("Home mode: remote model updates disabled")
 				}
 				hook := tui.NewLogHook(2000)
 				hook.SetFormatter(&logging.LogFormatter{})
@@ -563,8 +639,11 @@ func main() {
 		} else {
 			// Start the main proxy service
 			managementasset.StartAutoUpdater(context.Background(), configFilePath)
-			if !localModel {
+			misc.StartAntigravityVersionUpdater(context.Background())
+			if !localModel && !cfg.Home.Enabled {
 				registry.StartModelsUpdater(context.Background())
+			} else if cfg.Home.Enabled {
+				log.Info("Home mode: remote model updates disabled")
 			}
 			cmd.StartService(cfg, configFilePath, password)
 		}

resources/backend/source/config.example.yaml

@@ -11,6 +11,13 @@ tls:
   cert: ""
   key: ""
 
+# Optional "home" control plane integration over Redis protocol.
+home:
+  enabled: false
+  host: "127.0.0.1"
+  port: 6379
+  password: ""
+
 # Management API settings
 remote-management:
   # Whether to allow remote (non-localhost) management access.
@@ -67,6 +74,7 @@ error-logs-max-files: 10
 usage-statistics-enabled: false
 
 # How long (in seconds) Redis usage queue items are retained in memory for the RESP interface (LPOP/RPOP).
+# Note: the in-process Redis RESP usage output is disabled when home.enabled is true.
 # Default: 60. Max: 3600.
 redis-usage-queue-retention-seconds: 60
 
@@ -149,6 +157,7 @@ nonstream-keepalive-interval: 0
 # gemini-api-key:
 #   - api-key: "AIzaSy...01"
 #     prefix: "test" # optional: require calls like "test/gemini-3-pro-preview" to target this credential
+#     disable-cooling: false # optional: per-auth override for auth/model cooldown scheduling
 #     base-url: "https://generativelanguage.googleapis.com"
 #     headers:
 #       X-Custom-Header: "custom-value"
@@ -168,6 +177,7 @@ nonstream-keepalive-interval: 0
 # codex-api-key:
 #   - api-key: "sk-atSM..."
 #     prefix: "test" # optional: require calls like "test/gpt-5-codex" to target this credential
+#     disable-cooling: false # optional: per-auth override for auth/model cooldown scheduling
 #     base-url: "https://www.example.com" # use the custom codex API endpoint
 #     headers:
 #       X-Custom-Header: "custom-value"
@@ -187,6 +197,7 @@ nonstream-keepalive-interval: 0
 #   - api-key: "sk-atSM..." # use the official claude API key, no need to set the base url
 #   - api-key: "sk-atSM..."
 #     prefix: "test" # optional: require calls like "test/claude-sonnet-latest" to target this credential
+#     disable-cooling: false # optional: per-auth override for auth/model cooldown scheduling
 #     base-url: "https://www.example.com" # use the custom claude API endpoint
 #     headers:
 #       X-Custom-Header: "custom-value"
@@ -242,6 +253,7 @@ nonstream-keepalive-interval: 0
 #     disabled: false # optional: set to true to disable this provider without removing it
 #     prefix: "test" # optional: require calls like "test/kimi-k2" to target this provider's credentials
 #     base-url: "https://openrouter.ai/api/v1" # The base URL of the provider.
+#     disable-cooling: false # optional: per-provider override for auth/model cooldown scheduling
 #     headers:
 #       X-Custom-Header: "custom-value"
 #     api-key-entries:

resources/backend/source/go.mod

@@ -1,4 +1,4 @@
-module github.com/router-for-me/CLIProxyAPI/v6
+module github.com/router-for-me/CLIProxyAPI/v7
 
 go 1.26.0
 
@@ -33,6 +33,12 @@ require (
 
 require github.com/rogpeppe/go-internal v1.14.1 // indirect
 
+require (
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/redis/go-redis/v9 v9.19.0 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
+)
+
 require (
 	cloud.google.com/go/compute/metadata v0.3.0 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect