新功能(#102 ): 新增邀请记录接口并删除旧邀请销售接口

Co-authored-by: multica-agent <github@multica.ai>
配置(#98 ): 扩展文件上传 Content-Type 白名单支持图片
2026-05-27 22:50:16 -07:00 · 2026-05-27 19:50:51 -07:00 · 2026-05-27 10:32:28 -07:00 · 2026-05-27 08:07:16 -07:00 · 2026-05-27 07:13:05 -07:00
30 changed files with 1172 additions and 288 deletions
@@ -149,7 +149,7 @@ type (
 		ExpiredAt       int64   `json:"expired_at"`
 		Upload          int64   `json:"upload"`
 		Download        int64   `json:"download"`
-		SpeedLimit      *int64  `json:"speed_limit,omitempty"`
+		SpeedLimit      *int64  `json:"speed_limit,omitempty" validate:"omitempty,gte=0"`
 		TrafficLimit    *string `json:"traffic_limit,omitempty"`
 	}
 	GetUserLoginLogsRequest {
@@ -201,21 +201,22 @@ type (
 		GrowthRate     string `json:"growth_rate"`
 		PaidGrowthRate string `json:"paid_growth_rate"`
 	}
-	GetInviteSalesRequest {
+	GetInviteRecordsRequest {
 		Page      int   `form:"page"`
 		Size      int   `form:"size"`
 		StartTime int64 `form:"start_time"`
 		EndTime   int64 `form:"end_time"`
 	}
-	InvitedUserSale {
-		Amount      float64 `json:"amount"`
-		UpdatedAt   int64   `json:"updated_at"`
-		UserHash    string  `json:"user_hash"`
-		ProductName string  `json:"product_name"`
+	InviteRecord {
+		Role      string `json:"role"`
+		PeerHash  string `json:"peer_hash"`
+		GiftDays  int64  `json:"gift_days"`
+		OrderNo   string `json:"order_no"`
+		CreatedAt int64  `json:"created_at"`
 	}
-	GetInviteSalesResponse {
-		Total int64             `json:"total"`
-		List  []InvitedUserSale `json:"list"`
+	GetInviteRecordsResponse {
+		Total int64          `json:"total"`
+		List  []InviteRecord `json:"list"`
 	}
 	GetSubscribeStatusRequest {
 		Email string `form:"email" json:"email" validate:"omitempty,email"`
@@ -397,9 +398,9 @@ service ppanel {
 	@handler GetAgentRealtime
 	get /agent_realtime (GetAgentRealtimeRequest) returns (GetAgentRealtimeResponse)

-	@doc "Get Invite Sales"
-	@handler GetInviteSales
-	get /invite_sales (GetInviteSalesRequest) returns (GetInviteSalesResponse)
+	@doc "Get Invite Records"
+	@handler GetInviteRecords
+	get /invite_records (GetInviteRecordsRequest) returns (GetInviteRecordsResponse)

 	@doc "Get Subscribe Status"
 	@handler GetSubscribeStatus
@@ -424,4 +425,3 @@ service ppanel {
 	@handler DeviceWsConnect
 	get /device_ws_connect
 }
-
@@ -128,6 +128,10 @@ curl -X PUT 'https://bucket.s3.ap-east-1.amazonaws.com/...' \
 说明：

 - `Content-Type` 需和 `init` 返回的 `headers.Content-Type` 一致
+- 允许的 `Content-Type` 由服务端 `S3.AllowedContentTypes` 配置控制，默认包含：
+  - 压缩包：`application/zip`、`application/x-zip-compressed`、`application/gzip`、`application/x-gzip`
+  - 通用文件：`application/octet-stream`、`text/plain`、`application/json`
+  - 图片：`image/jpeg`、`image/jpg`、`image/png`、`image/webp`、`image/gif`、`image/heic`、`image/heif`、`image/bmp`
 - `upload_url` 有过期时间，通常 300 秒
 - 成功时 S3 常见返回 `200` 或 `204`

@@ -164,11 +168,13 @@ curl -X POST 'https://tapi.hifast.biz/v1/public/file/upload/complete' \
 - 如果请求带了 `X-App-Id`，就按现有逻辑验签
 - 如果没有 `X-App-Id`，仍按旧逻辑放行
 - 如果要给该接口加签，签名时必须对原始 multipart body 计算 `BODY_SHA256`
+- 允许的 `Content-Type` 与预签名三段式一致；multipart 文件字段未显式携带 `Content-Type` 时，服务端会基于文件内容嗅探常见类型。

 ## 常见错误码

 - `200`: 成功
 - `400`: 参数错误
+- `400 content_type is not allowed`: 文件 `Content-Type` 不在 `S3.AllowedContentTypes` 白名单内
 - `40008`: 缺少签名头
 - `40009`: 签名已过期
 - `40010`: 签名无效
@@ -74,7 +74,7 @@ S3:
  UsePathStyle: false
  PresignExpireSeconds: 300
  MaxUploadSize: 104857600
-  AllowedContentTypes: "application/zip,application/x-zip-compressed,application/gzip,application/x-gzip,application/octet-stream,text/plain,application/json"
+  AllowedContentTypes: "application/zip,application/x-zip-compressed,application/gzip,application/x-gzip,application/octet-stream,text/plain,application/json,image/jpeg,image/jpg,image/png,image/webp,image/gif,image/heic,image/heif,image/bmp"

 device:
  enable: true # 开启设备加密通信
@@ -53,6 +53,7 @@ require (
 )

 require (
+	github.com/DATA-DOG/go-sqlmock v1.5.2
 	github.com/Masterminds/sprig/v3 v3.3.0
 	github.com/aws/aws-sdk-go-v2 v1.41.7
 	github.com/aws/aws-sdk-go-v2/config v1.32.17
@@ -8,6 +8,8 @@ filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4
 github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 h1:L/gRVlceqvL25UVaW/CKtUDjefjrs0SPonmDGUVOYP0=
 github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=
+github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU=
 github.com/GUAIK-ORG/go-snowflake v0.0.0-20200116064823-220c4260e85f h1:RDkg3pyE1qGbBpRWmvSN9RNZC5nUrOaEPiEpEb8y2f0=
 github.com/GUAIK-ORG/go-snowflake v0.0.0-20200116064823-220c4260e85f/go.mod h1:zA7AF9RTfpluCfz0omI4t5KCMaWHUMicsZoMccnaT44=
 github.com/Masterminds/goutils v1.1.1 h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
@@ -264,6 +266,7 @@ github.com/json-iterator/go v1.1.10/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/
 github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
+github.com/kisielk/sqlstruct v0.0.0-20201105191214-5f3e10d3ab46/go.mod h1:yyMNCyc/Ib3bDTKd379tNMpB/7/H5TjM2Y9QJ5THLbE=
 github.com/klauspost/compress v1.17.7 h1:ehO88t2UGzQK66LMdE8tibEd1ErmzZjNEqWkjLAKQQg=
 github.com/klauspost/compress v1.17.7/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
 github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
@@ -1,5 +1,35 @@
-- Purpose: Rollback user-level speed limit overrides from user_subscribe
+SET @traffic_limit_exists = (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'user_subscribe'
+    AND COLUMN_NAME = 'traffic_limit'
+);

-ALTER TABLE `user_subscribe`
-  DROP COLUMN IF EXISTS `traffic_limit`,
-  DROP COLUMN IF EXISTS `speed_limit`;
+SET @traffic_limit_sql = IF(
+  @traffic_limit_exists = 1,
+  'ALTER TABLE `user_subscribe` DROP COLUMN `traffic_limit`',
+  'SELECT 1'
+);
+
+PREPARE traffic_limit_stmt FROM @traffic_limit_sql;
+EXECUTE traffic_limit_stmt;
+DEALLOCATE PREPARE traffic_limit_stmt;
+
+SET @speed_limit_exists = (
+  SELECT COUNT(*)
+  FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'user_subscribe'
+    AND COLUMN_NAME = 'speed_limit'
+);
+
+SET @speed_limit_sql = IF(
+  @speed_limit_exists = 1,
+  'ALTER TABLE `user_subscribe` DROP COLUMN `speed_limit`',
+  'SELECT 1'
+);
+
+PREPARE speed_limit_stmt FROM @speed_limit_sql;
+EXECUTE speed_limit_stmt;
+DEALLOCATE PREPARE speed_limit_stmt;
@@ -1,6 +1,4 @@
-- Purpose: Add user-level speed limit overrides to user_subscribe
-
-SET @column_exists = (
+SET @speed_limit_exists = (
  SELECT COUNT(*)
  FROM INFORMATION_SCHEMA.COLUMNS
  WHERE TABLE_SCHEMA = DATABASE()
@@ -8,17 +6,17 @@ SET @column_exists = (
    AND COLUMN_NAME = 'speed_limit'
 );

-SET @sql = IF(
-  @column_exists = 0,
-  'ALTER TABLE `user_subscribe` ADD COLUMN `speed_limit` int NOT NULL DEFAULT 0 COMMENT ''User-level speed limit override (Mbps, 0=use plan default)'' AFTER `upload`',
-  'SELECT ''Column speed_limit already exists in user_subscribe table'''
+SET @speed_limit_sql = IF(
+  @speed_limit_exists = 0,
+  'ALTER TABLE `user_subscribe` ADD COLUMN `speed_limit` BIGINT NOT NULL DEFAULT 0 COMMENT ''User-level speed limit override (Mbps), 0 uses plan-level'' AFTER `upload`',
+  'SELECT 1'
 );

-PREPARE stmt FROM @sql;
-EXECUTE stmt;
-DEALLOCATE PREPARE stmt;
+PREPARE speed_limit_stmt FROM @speed_limit_sql;
+EXECUTE speed_limit_stmt;
+DEALLOCATE PREPARE speed_limit_stmt;

-SET @column_exists = (
+SET @traffic_limit_exists = (
  SELECT COUNT(*)
  FROM INFORMATION_SCHEMA.COLUMNS
  WHERE TABLE_SCHEMA = DATABASE()
@@ -26,12 +24,12 @@ SET @column_exists = (
    AND COLUMN_NAME = 'traffic_limit'
 );

-SET @sql = IF(
-  @column_exists = 0,
-  'ALTER TABLE `user_subscribe` ADD COLUMN `traffic_limit` text DEFAULT NULL COMMENT ''User-level traffic limit rules override (JSON, NULL=use plan default)'' AFTER `speed_limit`',
-  'SELECT ''Column traffic_limit already exists in user_subscribe table'''
+SET @traffic_limit_sql = IF(
+  @traffic_limit_exists = 0,
+  'ALTER TABLE `user_subscribe` ADD COLUMN `traffic_limit` TEXT DEFAULT NULL COMMENT ''User-level traffic limit override (JSON), NULL uses plan-level'' AFTER `speed_limit`',
+  'SELECT 1'
 );

-PREPARE stmt FROM @sql;
-EXECUTE stmt;
-DEALLOCATE PREPARE stmt;
+PREPARE traffic_limit_stmt FROM @traffic_limit_sql;
+EXECUTE traffic_limit_stmt;
+DEALLOCATE PREPARE traffic_limit_stmt;
@@ -58,7 +58,7 @@ type S3Config struct {
 	UsePathStyle         bool   `yaml:"UsePathStyle" default:"false"`
 	PresignExpireSeconds int64  `yaml:"PresignExpireSeconds" default:"300"`
 	MaxUploadSize        int64  `yaml:"MaxUploadSize" default:"104857600"`
-	AllowedContentTypes  string `yaml:"AllowedContentTypes" default:"application/zip,application/x-zip-compressed,application/gzip,application/x-gzip,application/octet-stream,text/plain,application/json"`
+	AllowedContentTypes  string `yaml:"AllowedContentTypes" default:"application/zip,application/x-zip-compressed,application/gzip,application/x-gzip,application/octet-stream,text/plain,application/json,image/jpeg,image/jpg,image/png,image/webp,image/gif,image/heic,image/heif,image/bmp"`
 }

 type RedisConfig struct {
@@ -0,0 +1,25 @@
+package invite
+
+import (
+	"github.com/gin-gonic/gin"
+	"github.com/perfect-panel/server/internal/logic/admin/invite"
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/internal/types"
+	"github.com/perfect-panel/server/pkg/result"
+)
+
+// Get invite manage list
+func GetInviteManageListHandler(svcCtx *svc.ServiceContext) func(c *gin.Context) {
+	return func(c *gin.Context) {
+		var req types.GetInviteManageListRequest
+		_ = c.ShouldBind(&req)
+		if err := svcCtx.Validate(&req); err != nil {
+			result.ParamErrorResult(c, err)
+			return
+		}
+
+		l := invite.NewGetInviteManageListLogic(c.Request.Context(), svcCtx)
+		resp, err := l.GetInviteManageList(&req)
+		result.HttpResult(c, resp, err)
+	}
+}
@@ -1,6 +1,9 @@
 package user

 import (
+	"encoding/json"
+	"errors"
+
 	"github.com/gin-gonic/gin"
 	"github.com/perfect-panel/server/internal/logic/admin/user"
 	"github.com/perfect-panel/server/internal/svc"
@@ -18,9 +21,25 @@ func UpdateUserSubscribeHandler(svcCtx *svc.ServiceContext) func(c *gin.Context)
 			result.ParamErrorResult(c, validateErr)
 			return
 		}
+		if err := validateUpdateUserSubscribeTrafficLimit(&req); err != nil {
+			result.ParamErrorResult(c, err)
+			return
+		}

 		l := user.NewUpdateUserSubscribeLogic(c.Request.Context(), svcCtx)
 		err := l.UpdateUserSubscribe(&req)
 		result.HttpResult(c, nil, err)
 	}
 }
+
+func validateUpdateUserSubscribeTrafficLimit(req *types.UpdateUserSubscribeRequest) error {
+	if req.TrafficLimit == nil || *req.TrafficLimit == "" {
+		return nil
+	}
+
+	var rules []types.TrafficLimit
+	if err := json.Unmarshal([]byte(*req.TrafficLimit), &rules); err != nil {
+		return errors.New("traffic_limit must be a valid JSON array")
+	}
+	return nil
+}
@@ -0,0 +1,59 @@
+package user
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/pkg/xerr"
+)
+
+func TestUpdateUserSubscribeHandlerRejectsInvalidLimits(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	tests := []struct {
+		name string
+		body string
+	}{
+		{
+			name: "negative speed limit",
+			body: `{"user_subscribe_id":1,"subscribe_id":1,"traffic":0,"expired_at":4102444800000,"upload":0,"download":0,"speed_limit":-1}`,
+		},
+		{
+			name: "invalid traffic limit json",
+			body: `{"user_subscribe_id":1,"subscribe_id":1,"traffic":0,"expired_at":4102444800000,"upload":0,"download":0,"traffic_limit":"not-json"}`,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			router := gin.New()
+			router.PUT("/v1/admin/user/subscribe", UpdateUserSubscribeHandler(&svc.ServiceContext{}))
+
+			req := httptest.NewRequest(http.MethodPut, "/v1/admin/user/subscribe", bytes.NewBufferString(tt.body))
+			req.Header.Set("Content-Type", "application/json")
+			rec := httptest.NewRecorder()
+
+			router.ServeHTTP(rec, req)
+
+			if rec.Code != http.StatusOK {
+				t.Fatalf("expected HTTP 200, got %d", rec.Code)
+			}
+
+			var resp struct {
+				Code uint32 `json:"code"`
+				Msg  string `json:"msg"`
+			}
+			if err := json.Unmarshal(rec.Body.Bytes(), &resp); err != nil {
+				t.Fatalf("unmarshal response: %v", err)
+			}
+			if resp.Code != xerr.InvalidParams {
+				t.Fatalf("expected code %d, got %d (%s)", xerr.InvalidParams, resp.Code, resp.Msg)
+			}
+		})
+	}
+}
@@ -8,10 +8,10 @@ import (
 	"github.com/perfect-panel/server/pkg/result"
 )

-// Get invite sales data
-func GetInviteSalesHandler(svcCtx *svc.ServiceContext) func(c *gin.Context) {
+// Get invite gift records
+func GetInviteRecordsHandler(svcCtx *svc.ServiceContext) func(c *gin.Context) {
 	return func(c *gin.Context) {
-		var req types.GetInviteSalesRequest
+		var req types.GetInviteRecordsRequest
 		if err := c.ShouldBind(&req); err != nil {
 			result.ParamErrorResult(c, err)
 			return
@@ -23,8 +23,8 @@ func GetInviteSalesHandler(svcCtx *svc.ServiceContext) func(c *gin.Context) {
 			return
 		}

-		l := user.NewGetInviteSalesLogic(c.Request.Context(), svcCtx)
-		resp, err := l.GetInviteSales(&req)
+		l := user.NewGetInviteRecordsLogic(c.Request.Context(), svcCtx)
+		resp, err := l.GetInviteRecords(&req)
 		result.HttpResult(c, resp, err)
 	}
 }
@@ -13,6 +13,7 @@ import (
 	adminCoupon "github.com/perfect-panel/server/internal/handler/admin/coupon"
 	adminDocument "github.com/perfect-panel/server/internal/handler/admin/document"
 	adminGroup "github.com/perfect-panel/server/internal/handler/admin/group"
+	adminInvite "github.com/perfect-panel/server/internal/handler/admin/invite"
 	adminLog "github.com/perfect-panel/server/internal/handler/admin/log"
 	adminMarketing "github.com/perfect-panel/server/internal/handler/admin/marketing"
 	adminOrder "github.com/perfect-panel/server/internal/handler/admin/order"
@@ -194,6 +195,14 @@ func RegisterHandlers(router *gin.Engine, serverCtx *svc.ServiceContext) {
 		adminDocumentGroupRouter.GET("/list", adminDocument.GetDocumentListHandler(serverCtx))
 	}

+	adminInviteGroupRouter := router.Group("/v1/admin/invite")
+	adminInviteGroupRouter.Use(middleware.AuthMiddleware(serverCtx))
+
+	{
+		// Get invite manage list
+		adminInviteGroupRouter.GET("/list", adminInvite.GetInviteManageListHandler(serverCtx))
+	}
+
 	adminGroupGroupRouter := router.Group("/v1/admin/group")
 	adminGroupGroupRouter.Use(middleware.AuthMiddleware(serverCtx))

@@ -1109,9 +1118,8 @@ func RegisterHandlers(router *gin.Engine, serverCtx *svc.ServiceContext) {
 		// Query User Info
 		publicUserGroupRouter.GET("/info", publicUser.QueryUserInfoHandler(serverCtx))

-		// Get Invite Sales
-		publicUserGroupRouter.GET("/invite_sales", publicUser.GetInviteSalesHandler(serverCtx))
-		publicUserGroupRouter.GET("/invite/sales", publicUser.GetInviteSalesHandler(serverCtx)) // alias: backward-compat
+		// Get Invite Records
+		publicUserGroupRouter.GET("/invite_records", publicUser.GetInviteRecordsHandler(serverCtx))

 		// Get User Invite Stats
 		publicUserGroupRouter.GET("/invite_stats", publicUser.GetUserInviteStatsHandler(serverCtx))
@@ -0,0 +1,203 @@
+package invite
+
+import (
+	"context"
+
+	modellog "github.com/perfect-panel/server/internal/model/log"
+	"github.com/perfect-panel/server/pkg/xerr"
+	"github.com/pkg/errors"
+	"gorm.io/gorm"
+)
+
+type Benefits struct {
+	OrderCount        int64
+	HasPurchased      bool
+	InviterCommission int64
+	InviterGiftDays   int64
+	InviteeGiftDays   int64
+}
+
+type InviteRelation struct {
+	InviteeId int64
+	InviterId int64
+}
+
+type paidOrderRow struct {
+	UserId  int64  `gorm:"column:user_id"`
+	OrderNo string `gorm:"column:order_no"`
+}
+
+type systemLogRow struct {
+	ObjectID int64  `gorm:"column:object_id"`
+	Content  string `gorm:"column:content"`
+}
+
+func NormalizePage(page, size int) (int, int) {
+	if page < 1 {
+		page = 1
+	}
+	if size < 1 {
+		size = 10
+	}
+	if size > 100 {
+		size = 100
+	}
+	return page, size
+}
+
+func QueryBenefits(ctx context.Context, db *gorm.DB, relations []InviteRelation) (map[int64]Benefits, error) {
+	result := make(map[int64]Benefits, len(relations))
+	if len(relations) == 0 {
+		return result, nil
+	}
+
+	inviteeIds := make([]int64, 0, len(relations))
+	inviteeToInviter := make(map[int64]int64, len(relations))
+	for _, relation := range relations {
+		inviteeIds = append(inviteeIds, relation.InviteeId)
+		inviteeToInviter[relation.InviteeId] = relation.InviterId
+		result[relation.InviteeId] = Benefits{}
+	}
+
+	var orderCounts []struct {
+		UserId int64 `gorm:"column:user_id"`
+		Cnt    int64 `gorm:"column:cnt"`
+	}
+	if err := db.WithContext(ctx).
+		Table("`order`").
+		Select("user_id, COUNT(*) as cnt").
+		Where("user_id IN ? AND status IN ?", inviteeIds, []int{2, 5}).
+		Group("user_id").
+		Scan(&orderCounts).Error; err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "count invitee paid orders failed: %v", err)
+	}
+	for _, row := range orderCounts {
+		benefit := result[row.UserId]
+		benefit.OrderCount = row.Cnt
+		benefit.HasPurchased = row.Cnt > 0
+		result[row.UserId] = benefit
+	}
+
+	var paidOrders []paidOrderRow
+	if err := db.WithContext(ctx).
+		Table("`order`").
+		Select("user_id, order_no").
+		Where("user_id IN ? AND status IN ?", inviteeIds, []int{2, 5}).
+		Scan(&paidOrders).Error; err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query invitee paid orders failed: %v", err)
+	}
+	if len(paidOrders) == 0 {
+		return result, nil
+	}
+
+	orderNos := make([]string, 0, len(paidOrders))
+	orderToInvitee := make(map[string]int64, len(paidOrders))
+	inviterIds := make([]int64, 0, len(relations))
+	inviteeAndInviterSet := make(map[int64]struct{}, len(relations)*2)
+	for _, order := range paidOrders {
+		orderNos = append(orderNos, order.OrderNo)
+		orderToInvitee[order.OrderNo] = order.UserId
+	}
+	for _, relation := range relations {
+		inviterIds = append(inviterIds, relation.InviterId)
+		inviteeAndInviterSet[relation.InviteeId] = struct{}{}
+		inviteeAndInviterSet[relation.InviterId] = struct{}{}
+	}
+	inviteeAndInviterIds := make([]int64, 0, len(inviteeAndInviterSet))
+	for userId := range inviteeAndInviterSet {
+		inviteeAndInviterIds = append(inviteeAndInviterIds, userId)
+	}
+
+	if err := fillCommissionBenefits(ctx, db, result, orderToInvitee, inviteeToInviter, orderNos, inviterIds); err != nil {
+		return nil, err
+	}
+	if err := fillGiftBenefits(ctx, db, result, orderToInvitee, inviteeToInviter, orderNos, inviteeAndInviterIds); err != nil {
+		return nil, err
+	}
+
+	return result, nil
+}
+
+func fillCommissionBenefits(ctx context.Context, db *gorm.DB, benefits map[int64]Benefits, orderToInvitee map[string]int64, inviteeToInviter map[int64]int64, orderNos []string, inviterIds []int64) error {
+	var rows []systemLogRow
+	if err := db.WithContext(ctx).
+		Table("system_logs").
+		Select("object_id, content").
+		Where("type = ? AND object_id IN ? AND JSON_UNQUOTE(JSON_EXTRACT(content, '$.order_no')) IN ? AND JSON_EXTRACT(content, '$.type') IN ?", modellog.TypeCommission.Uint8(), inviterIds, orderNos, []int{int(modellog.CommissionTypePurchase), int(modellog.CommissionTypeRenewal)}).
+		Scan(&rows).Error; err != nil {
+		return errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query invite commission logs failed: %v", err)
+	}
+	for _, row := range rows {
+		content := modellog.Commission{}
+		if err := content.Unmarshal([]byte(row.Content)); err != nil {
+			continue
+		}
+		inviteeId, ok := orderToInvitee[content.OrderNo]
+		if !ok || inviteeToInviter[inviteeId] != row.ObjectID {
+			continue
+		}
+		benefit := benefits[inviteeId]
+		benefit.InviterCommission += content.Amount
+		benefits[inviteeId] = benefit
+	}
+	return nil
+}
+
+func fillGiftBenefits(ctx context.Context, db *gorm.DB, benefits map[int64]Benefits, orderToInvitee map[string]int64, inviteeToInviter map[int64]int64, orderNos []string, userIds []int64) error {
+	var rows []systemLogRow
+	if err := db.WithContext(ctx).
+		Table("system_logs").
+		Select("object_id, content").
+		Where("type = ? AND object_id IN ? AND JSON_UNQUOTE(JSON_EXTRACT(content, '$.order_no')) IN ?", modellog.TypeGift.Uint8(), userIds, orderNos).
+		Scan(&rows).Error; err != nil {
+		return errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query invite gift logs failed: %v", err)
+	}
+	for _, row := range rows {
+		content := modellog.Gift{}
+		if err := content.Unmarshal([]byte(row.Content)); err != nil {
+			continue
+		}
+		if content.Type != modellog.GiftTypeIncrease {
+			continue
+		}
+		inviteeId, ok := orderToInvitee[content.OrderNo]
+		if !ok {
+			continue
+		}
+		benefit := benefits[inviteeId]
+		switch row.ObjectID {
+		case inviteeToInviter[inviteeId]:
+			benefit.InviterGiftDays += content.Amount
+		case inviteeId:
+			benefit.InviteeGiftDays += content.Amount
+		default:
+			continue
+		}
+		benefits[inviteeId] = benefit
+	}
+	return nil
+}
+
+func QueryIdentifiers(ctx context.Context, db *gorm.DB, userIds []int64) (map[int64]string, error) {
+	identifiers := make(map[int64]string, len(userIds))
+	if len(userIds) == 0 {
+		return identifiers, nil
+	}
+
+	type identifierRow struct {
+		UserId     int64  `gorm:"column:user_id"`
+		Identifier string `gorm:"column:identifier"`
+	}
+	var rows []identifierRow
+	if err := db.WithContext(ctx).
+		Table("user_auth_methods uam").
+		Select("uam.user_id, uam.auth_identifier as identifier").
+		Joins("JOIN (SELECT user_id, MIN(id) AS id FROM user_auth_methods WHERE user_id IN ? GROUP BY user_id) first_uam ON first_uam.id = uam.id", userIds).
+		Scan(&rows).Error; err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query user identifiers failed: %v", err)
+	}
+	for _, row := range rows {
+		identifiers[row.UserId] = row.Identifier
+	}
+	return identifiers, nil
+}
@@ -0,0 +1,117 @@
+package invite
+
+import (
+	"context"
+
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/internal/types"
+	"github.com/perfect-panel/server/pkg/logger"
+	"github.com/perfect-panel/server/pkg/xerr"
+	"github.com/pkg/errors"
+	"gorm.io/gorm"
+)
+
+type GetInviteManageListLogic struct {
+	logger.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+func NewGetInviteManageListLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetInviteManageListLogic {
+	return &GetInviteManageListLogic{
+		Logger: logger.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GetInviteManageListLogic) GetInviteManageList(req *types.GetInviteManageListRequest) (resp *types.GetInviteManageListResponse, err error) {
+	req.Page, req.Size = NormalizePage(req.Page, req.Size)
+
+	type inviteRow struct {
+		InviteeId     int64  `gorm:"column:invitee_id"`
+		InviteeAvatar string `gorm:"column:invitee_avatar"`
+		InviteeEnable bool   `gorm:"column:invitee_enable"`
+		InvitedAt     int64  `gorm:"column:invited_at"`
+		InviterId     int64  `gorm:"column:inviter_id"`
+	}
+
+	baseQuery := applyInviteManageFilters(l.svcCtx.DB.WithContext(l.ctx).
+		Table("user invitee").
+		Where("invitee.referer_id > 0 AND invitee.deleted_at IS NULL"), req)
+
+	var total int64
+	if err = baseQuery.Count(&total).Error; err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "count invite manage records failed: %v", err)
+	}
+
+	var rows []inviteRow
+	if err = applyInviteManageFilters(l.svcCtx.DB.WithContext(l.ctx).
+		Table("user invitee").
+		Select("invitee.id as invitee_id, invitee.avatar as invitee_avatar, invitee.enable as invitee_enable, UNIX_TIMESTAMP(invitee.created_at) as invited_at, invitee.referer_id as inviter_id").
+		Where("invitee.referer_id > 0 AND invitee.deleted_at IS NULL"), req).
+		Order("invitee.created_at DESC").
+		Limit(req.Size).
+		Offset((req.Page - 1) * req.Size).
+		Scan(&rows).Error; err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query invite manage records failed: %v", err)
+	}
+
+	relations := make([]InviteRelation, 0, len(rows))
+	userIds := make([]int64, 0, len(rows)*2)
+	for _, row := range rows {
+		relations = append(relations, InviteRelation{InviteeId: row.InviteeId, InviterId: row.InviterId})
+		userIds = append(userIds, row.InviteeId, row.InviterId)
+	}
+
+	benefits, err := QueryBenefits(l.ctx, l.svcCtx.DB, relations)
+	if err != nil {
+		return nil, err
+	}
+	identifiers, err := QueryIdentifiers(l.ctx, l.svcCtx.DB, userIds)
+	if err != nil {
+		return nil, err
+	}
+
+	list := make([]types.InviteManageRecord, 0, len(rows))
+	for _, row := range rows {
+		benefit := benefits[row.InviteeId]
+		list = append(list, types.InviteManageRecord{
+			InviterId:         row.InviterId,
+			InviterIdentifier: identifiers[row.InviterId],
+			InviteeId:         row.InviteeId,
+			InviteeIdentifier: identifiers[row.InviteeId],
+			InviteeAvatar:     row.InviteeAvatar,
+			InviteeEnable:     row.InviteeEnable,
+			InvitedAt:         row.InvitedAt,
+			OrderCount:        benefit.OrderCount,
+			HasPurchased:      benefit.HasPurchased,
+			InviterCommission: benefit.InviterCommission,
+			InviterGiftDays:   benefit.InviterGiftDays,
+			InviteeGiftDays:   benefit.InviteeGiftDays,
+		})
+	}
+
+	return &types.GetInviteManageListResponse{
+		Total: total,
+		List:  list,
+	}, nil
+}
+
+func applyInviteManageFilters(db *gorm.DB, req *types.GetInviteManageListRequest) *gorm.DB {
+	if req.InviterId > 0 {
+		db = db.Where("invitee.referer_id = ?", req.InviterId)
+	}
+	if req.InviteeId > 0 {
+		db = db.Where("invitee.id = ?", req.InviteeId)
+	}
+	if req.Search != "" {
+		search := "%" + req.Search + "%"
+		db = db.Where(
+			"(EXISTS (SELECT 1 FROM user_auth_methods inviter_auth WHERE inviter_auth.user_id = invitee.referer_id AND inviter_auth.auth_identifier LIKE ?) OR EXISTS (SELECT 1 FROM user_auth_methods invitee_auth WHERE invitee_auth.user_id = invitee.id AND invitee_auth.auth_identifier LIKE ?))",
+			search,
+			search,
+		)
+	}
+	return db
+}
@@ -3,11 +3,13 @@ package user
 import (
 	"context"

+	adminInvite "github.com/perfect-panel/server/internal/logic/admin/invite"
 	"github.com/perfect-panel/server/internal/svc"
 	"github.com/perfect-panel/server/internal/types"
 	"github.com/perfect-panel/server/pkg/logger"
 	"github.com/perfect-panel/server/pkg/xerr"
 	"github.com/pkg/errors"
+	"gorm.io/gorm"
 )

 type GetAdminUserInviteListLogic struct {
@@ -25,15 +27,7 @@ func NewGetAdminUserInviteListLogic(ctx context.Context, svcCtx *svc.ServiceCont
 }

 func (l *GetAdminUserInviteListLogic) GetAdminUserInviteList(req *types.GetAdminUserInviteListRequest) (resp *types.GetAdminUserInviteListResponse, err error) {
-	if req.Page < 1 {
-		req.Page = 1
-	}
-	if req.Size < 1 {
-		req.Size = 10
-	}
-	if req.Size > 100 {
-		req.Size = 100
-	}
+	req.Page, req.Size = adminInvite.NormalizePage(req.Page, req.Size)

 	type InvitedUser struct {
 		Id         int64  `gorm:"column:id"`
@@ -44,19 +38,19 @@ func (l *GetAdminUserInviteListLogic) GetAdminUserInviteList(req *types.GetAdmin
 	}

 	var total int64
-	baseQuery := l.svcCtx.DB.WithContext(l.ctx).
+	baseQuery := applyAdminUserInviteFilters(l.svcCtx.DB.WithContext(l.ctx).
 		Table("user u").
-		Where("u.referer_id = ? AND u.deleted_at IS NULL", req.UserId)
+		Where("u.referer_id = ? AND u.deleted_at IS NULL", req.UserId), req)

 	if err = baseQuery.Count(&total).Error; err != nil {
 		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "count invited users failed: %v", err)
 	}

 	var rows []InvitedUser
-	err = l.svcCtx.DB.WithContext(l.ctx).
+	err = applyAdminUserInviteFilters(l.svcCtx.DB.WithContext(l.ctx).
 		Table("user u").
 		Select("u.id, u.avatar, u.enable, UNIX_TIMESTAMP(u.created_at) as created_at, COALESCE((SELECT uam.auth_identifier FROM user_auth_methods uam WHERE uam.user_id = u.id ORDER BY uam.id ASC LIMIT 1), '') as identifier").
-		Where("u.referer_id = ? AND u.deleted_at IS NULL", req.UserId).
+		Where("u.referer_id = ? AND u.deleted_at IS NULL", req.UserId), req).
 		Order("u.created_at DESC").
 		Limit(req.Size).
 		Offset((req.Page - 1) * req.Size).
@@ -65,14 +59,29 @@ func (l *GetAdminUserInviteListLogic) GetAdminUserInviteList(req *types.GetAdmin
 		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query invited users failed: %v", err)
 	}

+	relations := make([]adminInvite.InviteRelation, 0, len(rows))
+	for _, r := range rows {
+		relations = append(relations, adminInvite.InviteRelation{InviteeId: r.Id, InviterId: req.UserId})
+	}
+	benefits, err := adminInvite.QueryBenefits(l.ctx, l.svcCtx.DB, relations)
+	if err != nil {
+		return nil, err
+	}
+
 	list := make([]types.AdminInvitedUser, 0, len(rows))
 	for _, r := range rows {
+		benefit := benefits[r.Id]
 		list = append(list, types.AdminInvitedUser{
-			Id:         r.Id,
-			Avatar:     r.Avatar,
-			Identifier: r.Identifier,
-			Enable:     r.Enable,
-			CreatedAt:  r.CreatedAt,
+			Id:                r.Id,
+			Avatar:            r.Avatar,
+			Identifier:        r.Identifier,
+			Enable:            r.Enable,
+			CreatedAt:         r.CreatedAt,
+			OrderCount:        benefit.OrderCount,
+			HasPurchased:      benefit.HasPurchased,
+			InviterCommission: benefit.InviterCommission,
+			InviterGiftDays:   benefit.InviterGiftDays,
+			InviteeGiftDays:   benefit.InviteeGiftDays,
 		})
 	}

@@ -81,3 +90,16 @@ func (l *GetAdminUserInviteListLogic) GetAdminUserInviteList(req *types.GetAdmin
 		List:  list,
 	}, nil
 }
+
+func applyAdminUserInviteFilters(db *gorm.DB, req *types.GetAdminUserInviteListRequest) *gorm.DB {
+	if req.Search != "" {
+		db = db.Where("EXISTS (SELECT 1 FROM user_auth_methods uam WHERE uam.user_id = u.id AND uam.auth_identifier LIKE ?)", "%"+req.Search+"%")
+	}
+	if req.Enable != nil {
+		db = db.Where("u.enable = ?", *req.Enable)
+	}
+	if req.UserIdSearch > 0 {
+		db = db.Where("u.id = ?", req.UserIdSearch)
+	}
+	return db
+}
@@ -2,6 +2,7 @@ package user

 import (
 	"context"
+	"encoding/json"

 	"github.com/perfect-panel/server/internal/model/group"
 	"github.com/perfect-panel/server/internal/svc"
@@ -36,6 +37,13 @@ func (l *GetUserSubscribeByIdLogic) GetUserSubscribeById(req *types.GetUserSubsc
 	}
 	var subscribeDetails types.UserSubscribeDetail
 	tool.DeepCopy(&subscribeDetails, sub)
+	subscribeDetails.SpeedLimit = sub.SpeedLimit
+	if sub.TrafficLimit != nil && *sub.TrafficLimit != "" {
+		_ = json.Unmarshal([]byte(*sub.TrafficLimit), &subscribeDetails.TrafficLimit)
+	}
+	if sub.Subscribe != nil {
+		subscribeDetails.PlanSpeedLimit = sub.Subscribe.SpeedLimit
+	}

 	// 填充分组名
 	if sub.NodeGroupId > 0 {
@@ -47,7 +55,17 @@ func (l *GetUserSubscribeByIdLogic) GetUserSubscribeById(req *types.GetUserSubsc

 	// Calculate speed limit status
 	if sub.Subscribe != nil && sub.Status == 1 {
-		result := speedlimit.Calculate(l.ctx, l.svcCtx.DB, sub.UserId, sub.Id, sub.Subscribe.SpeedLimit, sub.Subscribe.TrafficLimit)
+		baseSpeed := sub.Subscribe.SpeedLimit
+		if sub.SpeedLimit > 0 {
+			baseSpeed = sub.SpeedLimit
+		}
+
+		trafficLimit := sub.Subscribe.TrafficLimit
+		if sub.TrafficLimit != nil && *sub.TrafficLimit != "" {
+			trafficLimit = *sub.TrafficLimit
+		}
+
+		result := speedlimit.Calculate(l.ctx, l.svcCtx.DB, sub.UserId, sub.Id, baseSpeed, trafficLimit)
 		subscribeDetails.EffectiveSpeed = result.EffectiveSpeed
 		subscribeDetails.IsThrottled = result.IsThrottled
 		subscribeDetails.ThrottleRule = result.ThrottleRule
@@ -39,22 +39,32 @@ func (l *UpdateUserSubscribeLogic) UpdateUserSubscribe(req *types.UpdateUserSubs
 	} else {
 		userSub.Status = 1
 	}
+	speedLimit := userSub.SpeedLimit
+	if req.SpeedLimit != nil {
+		speedLimit = *req.SpeedLimit
+	}
+	trafficLimit := userSub.TrafficLimit
+	if req.TrafficLimit != nil {
+		trafficLimit = req.TrafficLimit
+	}

 	err = l.svcCtx.UserModel.UpdateSubscribe(l.ctx, &user.Subscribe{
-		Id:          userSub.Id,
-		UserId:      userSub.UserId,
-		OrderId:     userSub.OrderId,
-		SubscribeId: req.SubscribeId,
-		StartTime:   userSub.StartTime,
-		ExpireTime:  time.UnixMilli(req.ExpiredAt),
-		Traffic:     req.Traffic,
-		Download:    req.Download,
-		Upload:      req.Upload,
-		Token:       userSub.Token,
-		UUID:        userSub.UUID,
-		Status:      userSub.Status,
-		NodeGroupId: userSub.NodeGroupId,
-		GroupLocked: userSub.GroupLocked,
+		Id:           userSub.Id,
+		UserId:       userSub.UserId,
+		OrderId:      userSub.OrderId,
+		SubscribeId:  req.SubscribeId,
+		StartTime:    userSub.StartTime,
+		ExpireTime:   time.UnixMilli(req.ExpiredAt),
+		Traffic:      req.Traffic,
+		Download:     req.Download,
+		Upload:       req.Upload,
+		SpeedLimit:   speedLimit,
+		TrafficLimit: trafficLimit,
+		Token:        userSub.Token,
+		UUID:         userSub.UUID,
+		Status:       userSub.Status,
+		NodeGroupId:  userSub.NodeGroupId,
+		GroupLocked:  userSub.GroupLocked,
 	})

 	if err != nil {
@@ -80,7 +80,7 @@ func validateInitRequest(svcCtx *svc.ServiceContext, bizType, fileName, contentT
 	allowed := allowedContentTypeSet(svcCtx.Config.S3.AllowedContentTypes)
 	if len(allowed) > 0 {
 		if _, ok := allowed[strings.ToLower(strings.TrimSpace(contentType))]; !ok {
-			return errors.Wrapf(xerr.NewErrCode(xerr.InvalidParams), "content_type is not allowed")
+			return errors.Wrapf(xerr.NewErrCodeMsg(xerr.InvalidParams, "content_type is not allowed"), "content_type is not allowed")
 		}
 	}
 	return nil
@@ -0,0 +1,91 @@
+package file
+
+import (
+	"mime/multipart"
+	"strings"
+	"testing"
+
+	"github.com/perfect-panel/server/internal/config"
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/pkg/storage"
+)
+
+const testAllowedContentTypes = "application/zip,application/x-zip-compressed,application/gzip,application/x-gzip,application/octet-stream,text/plain,application/json,image/jpeg,image/jpg,image/png,image/webp,image/gif,image/heic,image/heif,image/bmp"
+
+type testMultipartFile struct {
+	*strings.Reader
+}
+
+func (testMultipartFile) Close() error {
+	return nil
+}
+
+func TestValidateInitRequestAllowedContentTypes(t *testing.T) {
+	svcCtx := &svc.ServiceContext{
+		Config: config.Config{
+			S3: config.S3Config{
+				Enable:              true,
+				MaxUploadSize:       1024,
+				AllowedContentTypes: testAllowedContentTypes,
+			},
+		},
+		S3Store: &storage.S3Store{},
+	}
+
+	tests := []struct {
+		name        string
+		contentType string
+		wantErr     bool
+	}{
+		{name: "allow jpeg", contentType: "image/jpeg"},
+		{name: "allow png", contentType: "image/png"},
+		{name: "allow webp", contentType: "image/webp"},
+		{name: "reject unknown", contentType: "application/x-sh", wantErr: true},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := validateInitRequest(svcCtx, "app-package", "demo.bin", tt.contentType, 10)
+			if tt.wantErr {
+				if err == nil {
+					t.Fatal("expected error, got nil")
+				}
+				if !strings.Contains(err.Error(), "content_type is not allowed") {
+					t.Fatalf("expected content type error, got %v", err)
+				}
+				return
+			}
+			if err != nil {
+				t.Fatalf("expected nil error, got %v", err)
+			}
+		})
+	}
+}
+
+func TestSniffContentTypeDetectsCommonImages(t *testing.T) {
+	tests := []struct {
+		name string
+		data string
+		want string
+	}{
+		{name: "jpeg", data: "\xff\xd8\xff\xe0\x00\x10JFIF\x00\x01\x01", want: "image/jpeg"},
+		{name: "png", data: "\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR", want: "image/png"},
+		{name: "webp", data: "RIFF\x1a\x00\x00\x00WEBPVP8 \x0e\x00\x00\x00", want: "image/webp"},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			file := testMultipartFile{Reader: strings.NewReader(tt.data)}
+			got, err := sniffContentType(&multipart.FileHeader{}, file)
+			if err != nil {
+				t.Fatalf("expected nil error, got %v", err)
+			}
+			if got != tt.want {
+				t.Fatalf("expected %q, got %q", tt.want, got)
+			}
+			if pos, err := file.Seek(0, 1); err != nil || pos != 0 {
+				t.Fatalf("expected reader reset to start, pos=%d err=%v", pos, err)
+			}
+		})
+	}
+}
@@ -0,0 +1,198 @@
+package user
+
+import (
+	"context"
+	"encoding/json"
+
+	logmodel "github.com/perfect-panel/server/internal/model/log"
+	ordermodel "github.com/perfect-panel/server/internal/model/order"
+	"github.com/perfect-panel/server/internal/model/user"
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/internal/types"
+	"github.com/perfect-panel/server/pkg/constant"
+	"github.com/perfect-panel/server/pkg/hash"
+	"github.com/perfect-panel/server/pkg/logger"
+	"github.com/perfect-panel/server/pkg/xerr"
+	"github.com/pkg/errors"
+)
+
+const (
+	inviteRecordRoleInviter = "inviter"
+	inviteRecordRoleInvitee = "invitee"
+)
+
+type GetInviteRecordsLogic struct {
+	logger.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+type inviteRecordLog struct {
+	Id        int64  `gorm:"column:id"`
+	ObjectId  int64  `gorm:"column:object_id"`
+	Content   string `gorm:"column:content"`
+	CreatedAt int64  `gorm:"column:created_at"`
+}
+
+type inviteGiftContent struct {
+	OrderNo string `json:"order_no"`
+	Amount  int64  `json:"amount"`
+}
+
+type parsedInviteRecordLog struct {
+	log     inviteRecordLog
+	content inviteGiftContent
+}
+
+type inviteOrderUser struct {
+	OrderNo string `gorm:"column:order_no"`
+	UserId  int64  `gorm:"column:user_id"`
+}
+
+// Get invite gift records
+func NewGetInviteRecordsLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetInviteRecordsLogic {
+	return &GetInviteRecordsLogic{
+		Logger: logger.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GetInviteRecordsLogic) GetInviteRecords(req *types.GetInviteRecordsRequest) (resp *types.GetInviteRecordsResponse, err error) {
+	u, ok := l.ctx.Value(constant.CtxKeyUser).(*user.User)
+	if !ok {
+		l.Errorw("[GetInviteRecords] user not found in context")
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.InvalidAccess), "Invalid Access")
+	}
+
+	normalizeInviteRecordsPagination(req)
+
+	query := l.svcCtx.DB.WithContext(l.ctx).
+		Table("system_logs").
+		Where("type = ? AND object_id = ?", logmodel.TypeGift.Uint8(), u.Id).
+		Where("JSON_VALID(content) = 1").
+		Where("JSON_UNQUOTE(JSON_EXTRACT(content, '$.remark')) = ?", "邀请赠送")
+	if req.StartTime > 0 {
+		query = query.Where("created_at >= FROM_UNIXTIME(?)", req.StartTime)
+	}
+	if req.EndTime > 0 {
+		query = query.Where("created_at <= FROM_UNIXTIME(?)", req.EndTime)
+	}
+
+	var total int64
+	if err = query.Count(&total).Error; err != nil {
+		l.Errorw("[GetInviteRecords] count logs failed",
+			logger.Field("error", err.Error()),
+			logger.Field("user_id", u.Id))
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "count logs failed: %v", err.Error())
+	}
+
+	var logs []inviteRecordLog
+	if err = query.
+		Select("id, object_id, content, CAST(UNIX_TIMESTAMP(created_at) * 1000 AS SIGNED) AS created_at").
+		Order("created_at DESC, id DESC").
+		Limit(req.Size).
+		Offset((req.Page - 1) * req.Size).
+		Scan(&logs).Error; err != nil {
+		l.Errorw("[GetInviteRecords] query logs failed",
+			logger.Field("error", err.Error()),
+			logger.Field("user_id", u.Id))
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query logs failed: %v", err.Error())
+	}
+
+	parsedLogs, orderNos := l.parseInviteRecordContents(logs)
+	if len(logs) == 0 || len(parsedLogs) == 0 {
+		return &types.GetInviteRecordsResponse{Total: total, List: []types.InviteRecord{}}, nil
+	}
+
+	orders, err := l.queryInviteRecordOrders(orderNos)
+	if err != nil {
+		l.Errorw("[GetInviteRecords] query orders failed",
+			logger.Field("error", err.Error()),
+			logger.Field("user_id", u.Id))
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError), "query orders failed: %v", err.Error())
+	}
+
+	list := make([]types.InviteRecord, 0, len(parsedLogs))
+	for _, parsed := range parsedLogs {
+		content := parsed.content
+		logItem := parsed.log
+		record := types.InviteRecord{
+			Role:      inviteRecordRoleInviter,
+			GiftDays:  content.Amount,
+			OrderNo:   content.OrderNo,
+			CreatedAt: logItem.CreatedAt,
+		}
+
+		if orderInfo, ok := orders[content.OrderNo]; ok {
+			peerId := orderInfo.UserId
+			if orderInfo.UserId == u.Id {
+				record.Role = inviteRecordRoleInvitee
+				peerId = u.RefererId
+			}
+			if peerId > 0 {
+				record.PeerHash = hash.InvitePeerHash(peerId)
+			}
+		}
+
+		list = append(list, record)
+	}
+
+	return &types.GetInviteRecordsResponse{
+		Total: total,
+		List:  list,
+	}, nil
+}
+
+func normalizeInviteRecordsPagination(req *types.GetInviteRecordsRequest) {
+	if req.Page < 1 {
+		req.Page = 1
+	}
+	if req.Size < 1 {
+		req.Size = 10
+	}
+	if req.Size > 100 {
+		req.Size = 100
+	}
+}
+
+func (l *GetInviteRecordsLogic) parseInviteRecordContents(logs []inviteRecordLog) ([]parsedInviteRecordLog, []string) {
+	parsedLogs := make([]parsedInviteRecordLog, 0, len(logs))
+	orderNos := make([]string, 0, len(logs))
+	for _, logItem := range logs {
+		var content inviteGiftContent
+		if err := json.Unmarshal([]byte(logItem.Content), &content); err != nil {
+			l.Infow("[GetInviteRecords] parse content failed",
+				logger.Field("error", err.Error()),
+				logger.Field("log_id", logItem.Id))
+			continue
+		}
+		parsedLogs = append(parsedLogs, parsedInviteRecordLog{log: logItem, content: content})
+		if content.OrderNo != "" {
+			orderNos = append(orderNos, content.OrderNo)
+		}
+	}
+	return parsedLogs, orderNos
+}
+
+func (l *GetInviteRecordsLogic) queryInviteRecordOrders(orderNos []string) (map[string]inviteOrderUser, error) {
+	orders := make(map[string]inviteOrderUser, len(orderNos))
+	if len(orderNos) == 0 {
+		return orders, nil
+	}
+
+	var orderData []inviteOrderUser
+	err := l.svcCtx.DB.WithContext(l.ctx).
+		Model(&ordermodel.Order{}).
+		Select("order_no, user_id").
+		Where("order_no IN ?", orderNos).
+		Scan(&orderData).Error
+	if err != nil {
+		return nil, err
+	}
+
+	for _, item := range orderData {
+		orders[item.OrderNo] = item
+	}
+	return orders, nil
+}
@@ -0,0 +1,157 @@
+package user
+
+import (
+	"context"
+	"fmt"
+	"strings"
+	"testing"
+
+	"github.com/DATA-DOG/go-sqlmock"
+	modeluser "github.com/perfect-panel/server/internal/model/user"
+	"github.com/perfect-panel/server/internal/svc"
+	"github.com/perfect-panel/server/internal/types"
+	"github.com/perfect-panel/server/pkg/constant"
+	"github.com/perfect-panel/server/pkg/hash"
+	"gorm.io/driver/mysql"
+	"gorm.io/gorm"
+)
+
+func TestGetInviteRecordsInviter(t *testing.T) {
+	svcCtx, mock, cleanup := newInviteRecordsTestSvc(t)
+	defer cleanup()
+
+	mock.ExpectQuery("count(*)").
+		WithArgs(34, int64(100), "邀请赠送").
+		WillReturnRows(sqlmock.NewRows([]string{"count"}).AddRow(1))
+	mock.ExpectQuery("SELECT id, object_id, content").
+		WithArgs(34, int64(100), "邀请赠送", 10).
+		WillReturnRows(sqlmock.NewRows([]string{"id", "object_id", "content", "created_at"}).
+			AddRow(1, 100, `{"order_no":"order-1","amount":7,"remark":"邀请赠送"}`, 1779934580000))
+	mock.ExpectQuery("SELECT order_no, user_id FROM `order`").
+		WithArgs("order-1").
+		WillReturnRows(sqlmock.NewRows([]string{"order_no", "user_id"}).AddRow("order-1", 200))
+
+	resp, err := NewGetInviteRecordsLogic(inviteRecordsContext(100, 0), svcCtx).GetInviteRecords(&types.GetInviteRecordsRequest{Page: 1, Size: 10})
+	if err != nil {
+		t.Fatalf("GetInviteRecords returned error: %v", err)
+	}
+	assertInviteRecordResponse(t, resp, types.InviteRecord{
+		Role:      inviteRecordRoleInviter,
+		PeerHash:  hash.InvitePeerHash(200),
+		GiftDays:  7,
+		OrderNo:   "order-1",
+		CreatedAt: 1779934580000,
+	})
+	assertInviteRecordsExpectations(t, mock)
+}
+
+func TestGetInviteRecordsInvitee(t *testing.T) {
+	svcCtx, mock, cleanup := newInviteRecordsTestSvc(t)
+	defer cleanup()
+
+	mock.ExpectQuery("count(*)").
+		WithArgs(34, int64(200), "邀请赠送").
+		WillReturnRows(sqlmock.NewRows([]string{"count"}).AddRow(1))
+	mock.ExpectQuery("SELECT id, object_id, content").
+		WithArgs(34, int64(200), "邀请赠送", 10).
+		WillReturnRows(sqlmock.NewRows([]string{"id", "object_id", "content", "created_at"}).
+			AddRow(2, 200, `{"order_no":"order-2","amount":7,"remark":"邀请赠送"}`, 1779934590000))
+	mock.ExpectQuery("SELECT order_no, user_id FROM `order`").
+		WithArgs("order-2").
+		WillReturnRows(sqlmock.NewRows([]string{"order_no", "user_id"}).AddRow("order-2", 200))
+
+	resp, err := NewGetInviteRecordsLogic(inviteRecordsContext(200, 100), svcCtx).GetInviteRecords(&types.GetInviteRecordsRequest{Page: 1, Size: 10})
+	if err != nil {
+		t.Fatalf("GetInviteRecords returned error: %v", err)
+	}
+	assertInviteRecordResponse(t, resp, types.InviteRecord{
+		Role:      inviteRecordRoleInvitee,
+		PeerHash:  hash.InvitePeerHash(100),
+		GiftDays:  7,
+		OrderNo:   "order-2",
+		CreatedAt: 1779934590000,
+	})
+	assertInviteRecordsExpectations(t, mock)
+}
+
+func TestGetInviteRecordsMissingOrderReturnsDirtyRecord(t *testing.T) {
+	svcCtx, mock, cleanup := newInviteRecordsTestSvc(t)
+	defer cleanup()
+
+	mock.ExpectQuery("count(*)").
+		WithArgs(34, int64(100), "邀请赠送").
+		WillReturnRows(sqlmock.NewRows([]string{"count"}).AddRow(1))
+	mock.ExpectQuery("SELECT id, object_id, content").
+		WithArgs(34, int64(100), "邀请赠送", 10).
+		WillReturnRows(sqlmock.NewRows([]string{"id", "object_id", "content", "created_at"}).
+			AddRow(3, 100, `{"order_no":"missing-order","amount":7,"remark":"邀请赠送"}`, 1779934600000))
+	mock.ExpectQuery("SELECT order_no, user_id FROM `order`").
+		WithArgs("missing-order").
+		WillReturnRows(sqlmock.NewRows([]string{"order_no", "user_id"}))
+
+	resp, err := NewGetInviteRecordsLogic(inviteRecordsContext(100, 0), svcCtx).GetInviteRecords(&types.GetInviteRecordsRequest{Page: 1, Size: 10})
+	if err != nil {
+		t.Fatalf("GetInviteRecords returned error: %v", err)
+	}
+	assertInviteRecordResponse(t, resp, types.InviteRecord{
+		Role:      inviteRecordRoleInviter,
+		GiftDays:  7,
+		OrderNo:   "missing-order",
+		CreatedAt: 1779934600000,
+	})
+	assertInviteRecordsExpectations(t, mock)
+}
+
+func newInviteRecordsTestSvc(t *testing.T) (*svc.ServiceContext, sqlmock.Sqlmock, func()) {
+	t.Helper()
+
+	sqlDB, mock, err := sqlmock.New(sqlmock.QueryMatcherOption(sqlmock.QueryMatcherFunc(func(expectedSQL, actualSQL string) error {
+		if strings.Contains(actualSQL, expectedSQL) {
+			return nil
+		}
+		return fmt.Errorf("actual sql %q does not contain %q", actualSQL, expectedSQL)
+	})))
+	if err != nil {
+		t.Fatalf("create sqlmock: %v", err)
+	}
+
+	db, err := gorm.Open(mysql.New(mysql.Config{Conn: sqlDB, SkipInitializeWithVersion: true}), &gorm.Config{})
+	if err != nil {
+		_ = sqlDB.Close()
+		t.Fatalf("open gorm db: %v", err)
+	}
+
+	return &svc.ServiceContext{DB: db}, mock, func() {
+		_ = sqlDB.Close()
+	}
+}
+
+func inviteRecordsContext(userId, refererId int64) context.Context {
+	return context.WithValue(context.Background(), constant.CtxKeyUser, &modeluser.User{
+		Id:        userId,
+		RefererId: refererId,
+	})
+}
+
+func assertInviteRecordResponse(t *testing.T, resp *types.GetInviteRecordsResponse, want types.InviteRecord) {
+	t.Helper()
+	if resp == nil {
+		t.Fatal("response is nil")
+	}
+	if resp.Total != 1 {
+		t.Fatalf("Total = %d, want 1", resp.Total)
+	}
+	if len(resp.List) != 1 {
+		t.Fatalf("len(List) = %d, want 1", len(resp.List))
+	}
+	if got := resp.List[0]; got != want {
+		t.Fatalf("record = %+v, want %+v", got, want)
+	}
+}
+
+func assertInviteRecordsExpectations(t *testing.T, mock sqlmock.Sqlmock) {
+	t.Helper()
+	if err := mock.ExpectationsWereMet(); err != nil {
+		t.Fatalf("unmet sql expectations: %v", err)
+	}
+}
@@ -1,145 +0,0 @@
-package user
-
-import (
-	"context"
-	"fmt"
-	"hash/fnv"
-	"strconv"
-
-	"github.com/perfect-panel/server/internal/model/user"
-	"github.com/perfect-panel/server/internal/svc"
-	"github.com/perfect-panel/server/internal/types"
-	"github.com/perfect-panel/server/pkg/constant"
-	"github.com/perfect-panel/server/pkg/logger"
-	"github.com/perfect-panel/server/pkg/xerr"
-	"github.com/pkg/errors"
-)
-
-type GetInviteSalesLogic struct {
-	logger.Logger
-	ctx    context.Context
-	svcCtx *svc.ServiceContext
-}
-
-func NewGetInviteSalesLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetInviteSalesLogic {
-	return &GetInviteSalesLogic{
-		Logger: logger.WithContext(ctx),
-		ctx:    ctx,
-		svcCtx: svcCtx,
-	}
-}
-
-func (l *GetInviteSalesLogic) GetInviteSales(req *types.GetInviteSalesRequest) (resp *types.GetInviteSalesResponse, err error) {
-	// 1. Get current user
-	u, ok := l.ctx.Value(constant.CtxKeyUser).(*user.User)
-	if !ok {
-		l.Errorw("[GetInviteSales] user not found in context")
-		return nil, errors.Wrapf(xerr.NewErrCode(xerr.InvalidAccess), "Invalid Access")
-	}
-	userId := u.Id
-
-	// 2. Count total sales
-	var totalSales int64
-	db := l.svcCtx.DB.WithContext(l.ctx).
-		Table("`order` o").
-		Joins("JOIN user u ON o.user_id = u.id").
-		Where("u.referer_id = ? AND o.status IN ?", userId, []int{2, 5})
-
-	if req.StartTime > 0 {
-		db = db.Where("o.updated_at >= FROM_UNIXTIME(?)", req.StartTime)
-	}
-	if req.EndTime > 0 {
-		db = db.Where("o.updated_at <= FROM_UNIXTIME(?)", req.EndTime)
-	}
-
-	err = db.Count(&totalSales).Error
-	if err != nil {
-		l.Errorw("[GetInviteSales] count sales failed",
-			logger.Field("error", err.Error()),
-			logger.Field("user_id", userId))
-		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError),
-			"count sales failed: %v", err.Error())
-	}
-
-	// 3. Pagination
-	if req.Page < 1 {
-		req.Page = 1
-	}
-	if req.Size < 1 {
-		req.Size = 10
-	}
-	if req.Size > 100 {
-		req.Size = 100
-	}
-	offset := (req.Page - 1) * req.Size
-
-	// 4. Get sales data
-	type OrderWithUser struct {
-		Amount      int64  `gorm:"column:amount"`
-		UpdatedAt   int64  `gorm:"column:updated_at"`
-		UserId      int64  `gorm:"column:user_id"`
-		ProductName string `gorm:"column:product_name"`
-		Quantity    int64  `gorm:"column:quantity"`
-	}
-
-	var orderData []OrderWithUser
-	query := l.svcCtx.DB.WithContext(l.ctx).
-		Table("`order` o").
-		Select("o.amount, CAST(UNIX_TIMESTAMP(o.updated_at) * 1000 AS SIGNED) as updated_at, u.id as user_id, s.name as product_name, o.quantity").
-		Joins("JOIN user u ON o.user_id = u.id").
-		Joins("LEFT JOIN subscribe s ON o.subscribe_id = s.id").
-		Where("u.referer_id = ? AND o.status IN ?", userId, []int{2, 5}) // status 2: Active, 5: Finished
-
-	if req.StartTime > 0 {
-		query = query.Where("o.updated_at >= FROM_UNIXTIME(?)", req.StartTime)
-	}
-	if req.EndTime > 0 {
-		query = query.Where("o.updated_at <= FROM_UNIXTIME(?)", req.EndTime)
-	}
-
-	err = query.Order("o.updated_at DESC").
-		Limit(req.Size).
-		Offset(offset).
-		Scan(&orderData).Error
-	if err != nil {
-		l.Errorw("[GetInviteSales] query sales failed",
-			logger.Field("error", err.Error()),
-			logger.Field("user_id", userId))
-		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DatabaseQueryError),
-			"query sales failed: %v", err.Error())
-	}
-
-	// 5. Get sales list
-	const HashSalt = "ppanel_invite_sales_v1" // Fixed Key
-	var list []types.InvitedUserSale
-	for _, order := range orderData {
-		// Calculate unique numeric hash (FNV-64a)
-		h := fnv.New64a()
-		h.Write([]byte(HashSalt))
-		h.Write([]byte(strconv.FormatInt(order.UserId, 10)))
-		// Truncate to 10 digits using modulo 10^10
-		hashVal := h.Sum64() % 10000000000
-		userHashStr := fmt.Sprintf("%010d", hashVal)
-
-		// Format product name: prefer subscribe name, fallback to quantity-based label
-		productName := order.ProductName
-		if productName == "" {
-			productName = fmt.Sprintf("%d天VPN服务", order.Quantity)
-			if order.Quantity <= 0 {
-				productName = "VPN服务"
-			}
-		}
-
-		list = append(list, types.InvitedUserSale{
-			Amount:      float64(order.Amount) / 100.0, // Convert cents to dollars
-			UpdatedAt:   order.UpdatedAt,
-			UserHash:    userHashStr,
-			ProductName: productName,
-		})
-	}
-
-	return &types.GetInviteSalesResponse{
-		Total: totalSales,
-		List:  list,
-	}, nil
-}
@@ -307,14 +307,24 @@ func (l *GetServerUserListLogic) canUseExpiredNodeGroup(userSub *user.Subscribe,

 // calculateEffectiveSpeedLimit 计算用户的实际限速值（考虑按量限速规则）
 func (l *GetServerUserListLogic) calculateEffectiveSpeedLimit(sub *subscribe.Subscribe, userSub *user.Subscribe) int64 {
+	baseSpeed := sub.SpeedLimit
+	if userSub.SpeedLimit > 0 {
+		baseSpeed = userSub.SpeedLimit
+	}
+
+	trafficLimit := sub.TrafficLimit
+	if userSub.TrafficLimit != nil && *userSub.TrafficLimit != "" {
+		trafficLimit = *userSub.TrafficLimit
+	}
+
 	result := speedlimit.CalculateWithCache(
 		l.ctx.Request.Context(),
 		l.svcCtx.Redis,
 		l.svcCtx.DB,
 		userSub.UserId,
 		userSub.Id,
-		sub.SpeedLimit,
-		sub.TrafficLimit,
+		baseSpeed,
+		trafficLimit,
 		30*time.Second,
 	)
 	return result.EffectiveSpeed
@@ -23,25 +23,27 @@ const (
 )

 type SubscribeDetails struct {
-	Id          int64                `gorm:"primarykey"`
-	UserId      int64                `gorm:"index:idx_user_id;not null;comment:User ID"`
-	User        *User                `gorm:"foreignKey:UserId;references:Id"`
-	OrderId     int64                `gorm:"index:idx_order_id;not null;comment:Order ID"`
-	SubscribeId int64                `gorm:"index:idx_subscribe_id;not null;comment:Subscription ID"`
-	Subscribe   *subscribe.Subscribe `gorm:"foreignKey:SubscribeId;references:Id"`
-	NodeGroupId int64                `gorm:"index:idx_node_group_id;not null;default:0;comment:Node Group ID (single ID)"`
-	StartTime   time.Time            `gorm:"default:CURRENT_TIMESTAMP(3);not null;comment:Subscription Start Time"`
-	ExpireTime  time.Time            `gorm:"default:NULL;comment:Subscription Expire Time"`
-	FinishedAt  *time.Time           `gorm:"default:NULL;comment:Finished Time"`
-	Traffic     int64                `gorm:"default:0;comment:Traffic"`
-	Download    int64                `gorm:"default:0;comment:Download Traffic"`
-	Upload      int64                `gorm:"default:0;comment:Upload Traffic"`
-	Token       string               `gorm:"index:idx_token;unique;type:varchar(255);default:'';comment:Token"`
-	UUID        string               `gorm:"type:varchar(255);unique;index:idx_uuid;default:'';comment:UUID"`
-	Status      uint8                `gorm:"type:tinyint(1);default:0;comment:Subscription Status: 0: Pending 1: Active 2: Finished 3: Expired; 4: Cancelled"`
-	Note        string               `gorm:"type:varchar(500);default:'';comment:User note for subscription"`
-	CreatedAt   time.Time            `gorm:"<-:create;comment:Creation Time"`
-	UpdatedAt   time.Time            `gorm:"comment:Update Time"`
+	Id           int64                `gorm:"primarykey"`
+	UserId       int64                `gorm:"index:idx_user_id;not null;comment:User ID"`
+	User         *User                `gorm:"foreignKey:UserId;references:Id"`
+	OrderId      int64                `gorm:"index:idx_order_id;not null;comment:Order ID"`
+	SubscribeId  int64                `gorm:"index:idx_subscribe_id;not null;comment:Subscription ID"`
+	Subscribe    *subscribe.Subscribe `gorm:"foreignKey:SubscribeId;references:Id"`
+	NodeGroupId  int64                `gorm:"index:idx_node_group_id;not null;default:0;comment:Node Group ID (single ID)"`
+	StartTime    time.Time            `gorm:"default:CURRENT_TIMESTAMP(3);not null;comment:Subscription Start Time"`
+	ExpireTime   time.Time            `gorm:"default:NULL;comment:Subscription Expire Time"`
+	FinishedAt   *time.Time           `gorm:"default:NULL;comment:Finished Time"`
+	Traffic      int64                `gorm:"default:0;comment:Traffic"`
+	Download     int64                `gorm:"default:0;comment:Download Traffic"`
+	Upload       int64                `gorm:"default:0;comment:Upload Traffic"`
+	SpeedLimit   int64                `gorm:"default:0;comment:User-level speed limit override (Mbps), 0 uses plan-level"`
+	TrafficLimit *string              `gorm:"type:text;default:null;comment:User-level traffic limit override (JSON), NULL uses plan-level"`
+	Token        string               `gorm:"index:idx_token;unique;type:varchar(255);default:'';comment:Token"`
+	UUID         string               `gorm:"type:varchar(255);unique;index:idx_uuid;default:'';comment:UUID"`
+	Status       uint8                `gorm:"type:tinyint(1);default:0;comment:Subscription Status: 0: Pending 1: Active 2: Finished 3: Expired; 4: Cancelled"`
+	Note         string               `gorm:"type:varchar(500);default:'';comment:User note for subscription"`
+	CreatedAt    time.Time            `gorm:"<-:create;comment:Creation Time"`
+	UpdatedAt    time.Time            `gorm:"comment:Update Time"`
 }

 type SubscribeLogFilterParams struct {
@@ -101,10 +101,10 @@ type Subscribe struct {
 	Traffic         int64      `gorm:"default:0;comment:Traffic"`
 	Download        int64      `gorm:"default:0;comment:Download Traffic"`
 	Upload          int64      `gorm:"default:0;comment:Upload Traffic"`
-	SpeedLimit      int64      `gorm:"default:0;comment:User-level speed limit override (Mbps, 0=use plan default)"`
-	TrafficLimit    string     `gorm:"type:text;default:null;comment:User-level traffic limit rules override (JSON)"`
 	ExpiredDownload int64      `gorm:"default:0;comment:Expired period download traffic (bytes)"`
 	ExpiredUpload   int64      `gorm:"default:0;comment:Expired period upload traffic (bytes)"`
+	SpeedLimit      int64      `gorm:"default:0;comment:User-level speed limit override (Mbps), 0 uses plan-level"`
+	TrafficLimit    *string    `gorm:"type:text;default:null;comment:User-level traffic limit override (JSON), NULL uses plan-level"`
 	Token           string     `gorm:"index:idx_token;unique;type:varchar(255);default:'';comment:Token"`
 	UUID            string     `gorm:"type:varchar(255);unique;index:idx_uuid;default:'';comment:UUID"`
 	Status          uint8      `gorm:"type:tinyint(1);default:0;comment:Subscription Status: 0: Pending 1: Active 2: Finished 3: Expired 4: Deducted 5: stopped"`
@@ -1327,16 +1327,16 @@ type GetGroupHistoryResponse struct {
 	List  []GroupHistory `json:"list"`
 }

-type GetInviteSalesRequest struct {
+type GetInviteRecordsRequest struct {
 	Page      int   `form:"page"`
 	Size      int   `form:"size"`
 	StartTime int64 `form:"start_time"`
 	EndTime   int64 `form:"end_time"`
 }

-type GetInviteSalesResponse struct {
-	Total int64             `json:"total"`
-	List  []InvitedUserSale `json:"list"`
+type GetInviteRecordsResponse struct {
+	Total int64          `json:"total"`
+	List  []InviteRecord `json:"list"`
 }

 type GetLoginLogRequest struct {
@@ -1768,11 +1768,12 @@ type InviteConfig struct {
 	GiftDays           int64 `json:"gift_days"`
 }

-type InvitedUserSale struct {
-	Amount      float64 `json:"amount"`
-	UpdatedAt   int64   `json:"updated_at"`
-	UserHash    string  `json:"user_hash"`
-	ProductName string  `json:"product_name"`
+type InviteRecord struct {
+	Role      string `json:"role"`
+	PeerHash  string `json:"peer_hash"`
+	GiftDays  int64  `json:"gift_days"`
+	OrderNo   string `json:"order_no"`
+	CreatedAt int64  `json:"created_at"`
 }

 type KickOfflineRequest struct {
@@ -3442,7 +3443,7 @@ type UpdateUserSubscribeRequest struct {
 	ExpiredAt       int64   `json:"expired_at"`
 	Upload          int64   `json:"upload"`
 	Download        int64   `json:"download"`
-	SpeedLimit      *int64  `json:"speed_limit,omitempty"`
+	SpeedLimit      *int64  `json:"speed_limit,omitempty" validate:"omitempty,gte=0"`
 	TrafficLimit    *string `json:"traffic_limit,omitempty"`
 }

@@ -3800,17 +3801,25 @@ type GetAdminUserInviteStatsResponse struct {
 }

 type GetAdminUserInviteListRequest struct {
-	UserId int64 `form:"user_id" validate:"required"`
-	Page   int   `form:"page"`
-	Size   int   `form:"size"`
+	UserId       int64  `form:"user_id" validate:"required"`
+	Page         int    `form:"page"`
+	Size         int    `form:"size"`
+	Search       string `form:"search"`
+	Enable       *int   `form:"enable"`
+	UserIdSearch int64  `form:"user_id_search"`
 }

 type AdminInvitedUser struct {
-	Id         int64  `json:"id"`
-	Avatar     string `json:"avatar"`
-	Identifier string `json:"identifier"`
-	Enable     bool   `json:"enable"`
-	CreatedAt  int64  `json:"created_at"`
+	Id                int64  `json:"id"`
+	Avatar            string `json:"avatar"`
+	Identifier        string `json:"identifier"`
+	Enable            bool   `json:"enable"`
+	CreatedAt         int64  `json:"created_at"`
+	OrderCount        int64  `json:"order_count"`
+	HasPurchased      bool   `json:"has_purchased"`
+	InviterCommission int64  `json:"inviter_commission"`
+	InviterGiftDays   int64  `json:"inviter_gift_days"`
+	InviteeGiftDays   int64  `json:"invitee_gift_days"`
 }

 type GetAdminUserInviteListResponse struct {
@@ -3818,6 +3827,34 @@ type GetAdminUserInviteListResponse struct {
 	List  []AdminInvitedUser `json:"list"`
 }

+type GetInviteManageListRequest struct {
+	Page      int    `form:"page"`
+	Size      int    `form:"size"`
+	Search    string `form:"search"`
+	InviterId int64  `form:"inviter_id"`
+	InviteeId int64  `form:"invitee_id"`
+}
+
+type InviteManageRecord struct {
+	InviterId         int64  `json:"inviter_id"`
+	InviterIdentifier string `json:"inviter_identifier"`
+	InviteeId         int64  `json:"invitee_id"`
+	InviteeIdentifier string `json:"invitee_identifier"`
+	InviteeAvatar     string `json:"invitee_avatar"`
+	InviteeEnable     bool   `json:"invitee_enable"`
+	InvitedAt         int64  `json:"invited_at"`
+	OrderCount        int64  `json:"order_count"`
+	HasPurchased      bool   `json:"has_purchased"`
+	InviterCommission int64  `json:"inviter_commission"`
+	InviterGiftDays   int64  `json:"inviter_gift_days"`
+	InviteeGiftDays   int64  `json:"invitee_gift_days"`
+}
+
+type GetInviteManageListResponse struct {
+	Total int64                `json:"total"`
+	List  []InviteManageRecord `json:"list"`
+}
+
 type GetLogMessageRawRequest struct {
 	Id int64 `form:"id" validate:"required"`
 }
@@ -3,15 +3,26 @@ package hash
 import (
 	"crypto/md5"
 	"fmt"
+	"hash/fnv"
+	"strconv"

 	"github.com/spaolacci/murmur3"
 )

+const invitePeerHashSalt = "ppanel_invite_" + "sales_v1"
+
 // Hash returns the hash value of data.
 func Hash(data []byte) uint64 {
 	return murmur3.Sum64(data)
 }

+func InvitePeerHash(userId int64) string {
+	h := fnv.New64a()
+	_, _ = h.Write([]byte(invitePeerHashSalt))
+	_, _ = h.Write([]byte(strconv.FormatInt(userId, 10)))
+	return fmt.Sprintf("%010d", h.Sum64()%10000000000)
+}
+
 // Md5 returns the md5 bytes of data.
 func Md5(data []byte) []byte {
 	digest := md5.New()
@@ -1183,15 +1183,15 @@
        ]
      }
    },
-    "/v1/public/user/invite_sales": {
+    "/v1/public/user/invite_records": {
      "get": {
-        "summary": "Get Invite Sales",
-        "operationId": "GetInviteSales",
+        "summary": "Get Invite Records",
+        "operationId": "GetInviteRecords",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
-              "$ref": "#/definitions/GetInviteSalesResponse"
+              "$ref": "#/definitions/GetInviteRecordsResponse"
            }
          }
        },
@@ -3166,7 +3166,7 @@
        "connection_records"
      ]
    },
-    "GetInviteSalesRequest": {
+    "GetInviteRecordsRequest": {
      "type": "object",
      "properties": {
        "page": {
@@ -3186,7 +3186,7 @@
          "format": "int64"
        }
      },
-      "title": "GetInviteSalesRequest",
+      "title": "GetInviteRecordsRequest",
      "required": [
        "page",
        "size",
@@ -3194,7 +3194,7 @@
        "end_time"
      ]
    },
-    "GetInviteSalesResponse": {
+    "GetInviteRecordsResponse": {
      "type": "object",
      "properties": {
        "total": {
@@ -3204,11 +3204,11 @@
        "list": {
          "type": "array",
          "items": {
-            "$ref": "#/definitions/InvitedUserSale"
+            "$ref": "#/definitions/InviteRecord"
          }
        }
      },
-      "title": "GetInviteSalesResponse",
+      "title": "GetInviteRecordsResponse",
      "required": [
        "total",
        "list"
@@ -3558,30 +3558,34 @@
        "gift_days"
      ]
    },
-    "InvitedUserSale": {
+    "InviteRecord": {
      "type": "object",
      "properties": {
-        "amount": {
-          "type": "number",
-          "format": "double"
+        "role": {
+          "type": "string"
        },
-        "updated_at": {
+        "peer_hash": {
+          "type": "string"
+        },
+        "gift_days": {
          "type": "integer",
          "format": "int64"
        },
-        "user_hash": {
+        "order_no": {
          "type": "string"
        },
-        "product_name": {
-          "type": "string"
+        "created_at": {
+          "type": "integer",
+          "format": "int64"
        }
      },
-      "title": "InvitedUserSale",
+      "title": "InviteRecord",
      "required": [
-        "amount",
-        "updated_at",
-        "user_hash",
-        "product_name"
+        "role",
+        "peer_hash",
+        "gift_days",
+        "order_no",
+        "created_at"
      ]
    },
    "MessageLog": {
Author	SHA1	Message	Date
shanshanzhong147	197fed7d12	新功能(#102 ): 新增邀请记录接口并删除旧邀请销售接口 Build docker and publish / build (20.15.1) (push) Failing after 10m56s Details Build docker and publish / build (20.15.1) (pull_request) Successful in 8m50s Details Co-authored-by: multica-agent <github@multica.ai>	2026-05-27 22:50:16 -07:00
shanshanzhong147	f452f80100	配置(#98 ): 扩展文件上传 Content-Type 白名单支持图片 Build docker and publish / build (20.15.1) (push) Failing after 9m55s Details Build docker and publish / build (20.15.1) (pull_request) Successful in 8m7s Details - 在 etc/ppanel.yaml 与 internal/config/config.go 的 S3.AllowedContentTypes 新增 image/jpeg,image/jpg,image/png,image/webp,image/gif,image/heic,image/heif,image/bmp - 保留原 zip/gzip/text/json/octet-stream - validateInitRequest 在拒绝时携带 content_type is not allowed 业务消息 - 新增 internal/logic/public/file/common_test.go，覆盖允许/拒绝及无 Content-Type 嗅探 - doc/tapi-file-upload-zh.md 同步允许类型列表与错误码说明 Co-authored-by: multica-agent <github@multica.ai>	2026-05-27 19:50:51 -07:00
shanshanzhong147	1022160ff8	新功能(#89 ): 增强邀请列表接口 + 新增全局邀请管理接口 Build docker and publish / build (20.15.1) (push) Failing after 9m30s Details Build docker and publish / build (20.15.1) (pull_request) Successful in 7m48s Details P01: GET /v1/admin/user/invite/list 增加 search/enable/user_id_search 筛选参数，响应新增 order_count/has_purchased/inviter_commission/ inviter_gift_days/invitee_gift_days 权益字段。 P02: 新增 GET /v1/admin/invite/list 全局邀请管理接口，支持按邀请人/被邀请人筛选和搜索，返回邀请关系及权益聚合数据。共用 QueryBenefits 批量查询防 N+1，分页上限 100。 Co-authored-by: multica-agent <github@multica.ai>	2026-05-27 10:32:28 -07:00
shanshanzhong147	82eff47f38	新功能(#69 ): 用户级限速覆盖 — 数据层 + 核心逻辑 + 管理接口 Build docker and publish / build (20.15.1) (push) Failing after 8m52s Details Build docker and publish / build (20.15.1) (pull_request) Successful in 7m51s Details - 新增 migration 02153: user_subscribe 表添加 speed_limit、traffic_limit 列（幂等） - model 层 Subscribe/SubscribeDetails 新增用户级限速字段（*string 类型支持 nil 回退） - server 用户列表和管理员详情接口支持用户级限速覆盖优先级计算 - 更新管理员订阅更新接口支持写入/清除用户级限速 Co-authored-by: multica-agent <github@multica.ai>	2026-05-27 08:07:16 -07:00
shanshanzhong147	d351b50066	修复(#71 ): 管理员订阅限速接口拒绝负数限速和非法 traffic_limit Build docker and publish / build (20.15.1) (push) Failing after 8m50s Details Build docker and publish / build (20.15.1) (pull_request) Successful in 7m56s Details - SpeedLimit 加 validate:"gte=0" 校验 - TrafficLimit 加 JSON 格式校验 - 新增单测覆盖负数限速和非法 JSON 场景 Co-authored-by: multica-agent <github@multica.ai>	2026-05-27 07:13:05 -07:00