feat(Sora): 直连生成并移除sora2api依赖

实现直连 Sora 客户端、媒体落地与清理策略\n更新网关与前端配置以支持 Sora 平台\n补齐单元测试与契约测试，新增 curl 测试脚本\n\n测试: go test ./... -tags=unit

backend/internal/service/sora_gateway_service_test.go

+//go:build unit
+
+package service
+
+import (
+	"context"
+	"testing"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/stretchr/testify/require"
+)
+
+type stubSoraClientForPoll struct {
+	imageStatus *SoraImageTaskStatus
+	videoStatus *SoraVideoTaskStatus
+	imageCalls  int
+	videoCalls  int
+}
+
+func (s *stubSoraClientForPoll) Enabled() bool { return true }
+func (s *stubSoraClientForPoll) UploadImage(ctx context.Context, account *Account, data []byte, filename string) (string, error) {
+	return "", nil
+}
+func (s *stubSoraClientForPoll) CreateImageTask(ctx context.Context, account *Account, req SoraImageRequest) (string, error) {
+	return "task-image", nil
+}
+func (s *stubSoraClientForPoll) CreateVideoTask(ctx context.Context, account *Account, req SoraVideoRequest) (string, error) {
+	return "task-video", nil
+}
+func (s *stubSoraClientForPoll) GetImageTask(ctx context.Context, account *Account, taskID string) (*SoraImageTaskStatus, error) {
+	s.imageCalls++
+	return s.imageStatus, nil
+}
+func (s *stubSoraClientForPoll) GetVideoTask(ctx context.Context, account *Account, taskID string) (*SoraVideoTaskStatus, error) {
+	s.videoCalls++
+	return s.videoStatus, nil
+}
+
+func TestSoraGatewayService_PollImageTaskCompleted(t *testing.T) {
+	client := &stubSoraClientForPoll{
+		imageStatus: &SoraImageTaskStatus{
+			Status: "completed",
+			URLs:   []string{"https://example.com/a.png"},
+		},
+	}
+	cfg := &config.Config{
+		Sora: config.SoraConfig{
+			Client: config.SoraClientConfig{
+				PollIntervalSeconds: 1,
+				MaxPollAttempts:     1,
+			},
+		},
+	}
+	service := NewSoraGatewayService(client, nil, nil, cfg)
+
+	urls, err := service.pollImageTask(context.Background(), nil, &Account{ID: 1}, "task", false)
+	require.NoError(t, err)
+	require.Equal(t, []string{"https://example.com/a.png"}, urls)
+	require.Equal(t, 1, client.imageCalls)
+}
+
+func TestSoraGatewayService_PollVideoTaskFailed(t *testing.T) {
+	client := &stubSoraClientForPoll{
+		videoStatus: &SoraVideoTaskStatus{
+			Status:   "failed",
+			ErrorMsg: "reject",
+		},
+	}
+	cfg := &config.Config{
+		Sora: config.SoraConfig{
+			Client: config.SoraClientConfig{
+				PollIntervalSeconds: 1,
+				MaxPollAttempts:     1,
+			},
+		},
+	}
+	service := NewSoraGatewayService(client, nil, nil, cfg)
+
+	urls, err := service.pollVideoTask(context.Background(), nil, &Account{ID: 1}, "task", false)
+	require.Error(t, err)
+	require.Empty(t, urls)
+	require.Contains(t, err.Error(), "reject")
+	require.Equal(t, 1, client.videoCalls)
+}
+
+func TestSoraGatewayService_BuildSoraMediaURLSigned(t *testing.T) {
+	cfg := &config.Config{
+		Gateway: config.GatewayConfig{
+			SoraMediaSigningKey:          "test-key",
+			SoraMediaSignedURLTTLSeconds: 600,
+		},
+	}
+	service := NewSoraGatewayService(nil, nil, nil, cfg)
+
+	url := service.buildSoraMediaURL("/image/2025/01/01/a.png", "")
+	require.Contains(t, url, "/sora/media-signed")
+	require.Contains(t, url, "expires=")
+	require.Contains(t, url, "sig=")
+}

backend/internal/service/sora_media_cleanup_service.go

+package service
+
+import (
+	"log"
+	"os"
+	"path/filepath"
+	"strings"
+	"sync"
+	"time"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/robfig/cron/v3"
+)
+
+var soraCleanupCronParser = cron.NewParser(cron.Minute | cron.Hour | cron.Dom | cron.Month | cron.Dow)
+
+// SoraMediaCleanupService 定期清理本地媒体文件
+type SoraMediaCleanupService struct {
+	storage *SoraMediaStorage
+	cfg     *config.Config
+
+	cron *cron.Cron
+
+	startOnce sync.Once
+	stopOnce  sync.Once
+}
+
+func NewSoraMediaCleanupService(storage *SoraMediaStorage, cfg *config.Config) *SoraMediaCleanupService {
+	return &SoraMediaCleanupService{
+		storage: storage,
+		cfg:     cfg,
+	}
+}
+
+func (s *SoraMediaCleanupService) Start() {
+	if s == nil || s.cfg == nil {
+		return
+	}
+	if !s.cfg.Sora.Storage.Cleanup.Enabled {
+		log.Printf("[SoraCleanup] not started (disabled)")
+		return
+	}
+	if s.storage == nil || !s.storage.Enabled() {
+		log.Printf("[SoraCleanup] not started (storage disabled)")
+		return
+	}
+
+	s.startOnce.Do(func() {
+		schedule := strings.TrimSpace(s.cfg.Sora.Storage.Cleanup.Schedule)
+		if schedule == "" {
+			log.Printf("[SoraCleanup] not started (empty schedule)")
+			return
+		}
+		loc := time.Local
+		if strings.TrimSpace(s.cfg.Timezone) != "" {
+			if parsed, err := time.LoadLocation(strings.TrimSpace(s.cfg.Timezone)); err == nil && parsed != nil {
+				loc = parsed
+			}
+		}
+		c := cron.New(cron.WithParser(soraCleanupCronParser), cron.WithLocation(loc))
+		if _, err := c.AddFunc(schedule, func() { s.runCleanup() }); err != nil {
+			log.Printf("[SoraCleanup] not started (invalid schedule=%q): %v", schedule, err)
+			return
+		}
+		s.cron = c
+		s.cron.Start()
+		log.Printf("[SoraCleanup] started (schedule=%q tz=%s)", schedule, loc.String())
+	})
+}
+
+func (s *SoraMediaCleanupService) Stop() {
+	if s == nil {
+		return
+	}
+	s.stopOnce.Do(func() {
+		if s.cron != nil {
+			ctx := s.cron.Stop()
+			select {
+			case <-ctx.Done():
+			case <-time.After(3 * time.Second):
+				log.Printf("[SoraCleanup] cron stop timed out")
+			}
+		}
+	})
+}
+
+func (s *SoraMediaCleanupService) runCleanup() {
+	retention := s.cfg.Sora.Storage.Cleanup.RetentionDays
+	if retention <= 0 {
+		log.Printf("[SoraCleanup] skipped (retention_days=%d)", retention)
+		return
+	}
+	cutoff := time.Now().AddDate(0, 0, -retention)
+	deleted := 0
+
+	roots := []string{s.storage.ImageRoot(), s.storage.VideoRoot()}
+	for _, root := range roots {
+		if root == "" {
+			continue
+		}
+		_ = filepath.Walk(root, func(p string, info os.FileInfo, err error) error {
+			if err != nil {
+				return nil
+			}
+			if info.IsDir() {
+				return nil
+			}
+			if info.ModTime().Before(cutoff) {
+				if rmErr := os.Remove(p); rmErr == nil {
+					deleted++
+				}
+			}
+			return nil
+		})
+	}
+	log.Printf("[SoraCleanup] cleanup finished, deleted=%d", deleted)
+}

backend/internal/service/sora_media_cleanup_service_test.go

+//go:build unit
+
+package service
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/stretchr/testify/require"
+)
+
+func TestSoraMediaCleanupService_RunCleanup(t *testing.T) {
+	tmpDir := t.TempDir()
+	cfg := &config.Config{
+		Sora: config.SoraConfig{
+			Storage: config.SoraStorageConfig{
+				Type:      "local",
+				LocalPath: tmpDir,
+				Cleanup: config.SoraStorageCleanupConfig{
+					Enabled:       true,
+					RetentionDays: 1,
+				},
+			},
+		},
+	}
+
+	storage := NewSoraMediaStorage(cfg)
+	require.NoError(t, storage.EnsureLocalDirs())
+
+	oldImage := filepath.Join(storage.ImageRoot(), "old.png")
+	newVideo := filepath.Join(storage.VideoRoot(), "new.mp4")
+	require.NoError(t, os.WriteFile(oldImage, []byte("old"), 0o644))
+	require.NoError(t, os.WriteFile(newVideo, []byte("new"), 0o644))
+
+	oldTime := time.Now().Add(-48 * time.Hour)
+	require.NoError(t, os.Chtimes(oldImage, oldTime, oldTime))
+
+	cleanup := NewSoraMediaCleanupService(storage, cfg)
+	cleanup.runCleanup()
+
+	require.NoFileExists(t, oldImage)
+	require.FileExists(t, newVideo)
+}

backend/internal/service/sora_media_storage.go

+package service
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"log"
+	"mime"
+	"net/http"
+	"net/url"
+	"os"
+	"path"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/google/uuid"
+)
+
+const (
+	soraStorageDefaultRoot = "/app/data/sora"
+)
+
+// SoraMediaStorage 负责下载并落地 Sora 媒体
+type SoraMediaStorage struct {
+	cfg                *config.Config
+	root               string
+	imageRoot          string
+	videoRoot          string
+	maxConcurrent      int
+	fallbackToUpstream bool
+	debug              bool
+	sem                chan struct{}
+	ready              bool
+}
+
+func NewSoraMediaStorage(cfg *config.Config) *SoraMediaStorage {
+	storage := &SoraMediaStorage{cfg: cfg}
+	storage.refreshConfig()
+	if storage.Enabled() {
+		if err := storage.EnsureLocalDirs(); err != nil {
+			log.Printf("[SoraStorage] 初始化失败: %v", err)
+		}
+	}
+	return storage
+}
+
+func (s *SoraMediaStorage) Enabled() bool {
+	if s == nil || s.cfg == nil {
+		return false
+	}
+	return strings.ToLower(strings.TrimSpace(s.cfg.Sora.Storage.Type)) == "local"
+}
+
+func (s *SoraMediaStorage) Root() string {
+	if s == nil {
+		return ""
+	}
+	return s.root
+}
+
+func (s *SoraMediaStorage) ImageRoot() string {
+	if s == nil {
+		return ""
+	}
+	return s.imageRoot
+}
+
+func (s *SoraMediaStorage) VideoRoot() string {
+	if s == nil {
+		return ""
+	}
+	return s.videoRoot
+}
+
+func (s *SoraMediaStorage) refreshConfig() {
+	if s == nil || s.cfg == nil {
+		return
+	}
+	root := strings.TrimSpace(s.cfg.Sora.Storage.LocalPath)
+	if root == "" {
+		root = soraStorageDefaultRoot
+	}
+	s.root = root
+	s.imageRoot = filepath.Join(root, "image")
+	s.videoRoot = filepath.Join(root, "video")
+
+	maxConcurrent := s.cfg.Sora.Storage.MaxConcurrentDownloads
+	if maxConcurrent <= 0 {
+		maxConcurrent = 4
+	}
+	s.maxConcurrent = maxConcurrent
+	s.fallbackToUpstream = s.cfg.Sora.Storage.FallbackToUpstream
+	s.debug = s.cfg.Sora.Storage.Debug
+	s.sem = make(chan struct{}, maxConcurrent)
+}
+
+// EnsureLocalDirs 创建并校验本地目录
+func (s *SoraMediaStorage) EnsureLocalDirs() error {
+	if s == nil || !s.Enabled() {
+		return nil
+	}
+	if err := os.MkdirAll(s.imageRoot, 0o755); err != nil {
+		return fmt.Errorf("create image dir: %w", err)
+	}
+	if err := os.MkdirAll(s.videoRoot, 0o755); err != nil {
+		return fmt.Errorf("create video dir: %w", err)
+	}
+	s.ready = true
+	return nil
+}
+
+// StoreFromURLs 下载并存储媒体，返回相对路径或回退 URL
+func (s *SoraMediaStorage) StoreFromURLs(ctx context.Context, mediaType string, urls []string) ([]string, error) {
+	if len(urls) == 0 {
+		return nil, nil
+	}
+	if s == nil || !s.Enabled() {
+		return urls, nil
+	}
+	if !s.ready {
+		if err := s.EnsureLocalDirs(); err != nil {
+			return nil, err
+		}
+	}
+	results := make([]string, 0, len(urls))
+	for _, raw := range urls {
+		relative, err := s.downloadAndStore(ctx, mediaType, raw)
+		if err != nil {
+			if s.fallbackToUpstream {
+				results = append(results, raw)
+				continue
+			}
+			return nil, err
+		}
+		results = append(results, relative)
+	}
+	return results, nil
+}
+
+func (s *SoraMediaStorage) downloadAndStore(ctx context.Context, mediaType, rawURL string) (string, error) {
+	if strings.TrimSpace(rawURL) == "" {
+		return "", errors.New("empty url")
+	}
+	root := s.imageRoot
+	if mediaType == "video" {
+		root = s.videoRoot
+	}
+	if root == "" {
+		return "", errors.New("storage root not configured")
+	}
+
+	retries := 3
+	for attempt := 1; attempt <= retries; attempt++ {
+		release, err := s.acquire(ctx)
+		if err != nil {
+			return "", err
+		}
+		relative, err := s.downloadOnce(ctx, root, mediaType, rawURL)
+		release()
+		if err == nil {
+			return relative, nil
+		}
+		if s.debug {
+			log.Printf("[SoraStorage] 下载失败(%d/%d): %s err=%v", attempt, retries, sanitizeSoraLogURL(rawURL), err)
+		}
+		if attempt < retries {
+			time.Sleep(time.Duration(attempt*attempt) * time.Second)
+			continue
+		}
+		return "", err
+	}
+	return "", errors.New("download retries exhausted")
+}
+
+func (s *SoraMediaStorage) downloadOnce(ctx context.Context, root, mediaType, rawURL string) (string, error) {
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, rawURL, nil)
+	if err != nil {
+		return "", err
+	}
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		return "", err
+	}
+	defer func() { _ = resp.Body.Close() }()
+
+	if resp.StatusCode != http.StatusOK {
+		body, _ := io.ReadAll(io.LimitReader(resp.Body, 2<<20))
+		return "", fmt.Errorf("download failed: %d %s", resp.StatusCode, string(body))
+	}
+
+	ext := fileExtFromURL(rawURL)
+	if ext == "" {
+		ext = fileExtFromContentType(resp.Header.Get("Content-Type"))
+	}
+	if ext == "" {
+		ext = ".bin"
+	}
+
+	datePath := time.Now().Format("2006/01/02")
+	destDir := filepath.Join(root, filepath.FromSlash(datePath))
+	if err := os.MkdirAll(destDir, 0o755); err != nil {
+		return "", err
+	}
+	filename := uuid.NewString() + ext
+	destPath := filepath.Join(destDir, filename)
+	out, err := os.Create(destPath)
+	if err != nil {
+		return "", err
+	}
+	defer func() { _ = out.Close() }()
+
+	if _, err := io.Copy(out, resp.Body); err != nil {
+		_ = os.Remove(destPath)
+		return "", err
+	}
+
+	relative := path.Join("/", mediaType, datePath, filename)
+	if s.debug {
+		log.Printf("[SoraStorage] 已落地 %s -> %s", sanitizeSoraLogURL(rawURL), relative)
+	}
+	return relative, nil
+}
+
+func (s *SoraMediaStorage) acquire(ctx context.Context) (func(), error) {
+	if s.sem == nil {
+		return func() {}, nil
+	}
+	select {
+	case s.sem <- struct{}{}:
+		return func() { <-s.sem }, nil
+	case <-ctx.Done():
+		return nil, ctx.Err()
+	}
+}
+
+func fileExtFromURL(raw string) string {
+	parsed, err := url.Parse(raw)
+	if err != nil {
+		return ""
+	}
+	ext := path.Ext(parsed.Path)
+	return strings.ToLower(ext)
+}
+
+func fileExtFromContentType(ct string) string {
+	if ct == "" {
+		return ""
+	}
+	if exts, err := mime.ExtensionsByType(ct); err == nil && len(exts) > 0 {
+		return strings.ToLower(exts[0])
+	}
+	return ""
+}

backend/internal/service/sora_media_storage_test.go

+//go:build unit
+
+package service
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"path/filepath"
+	"strings"
+	"testing"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/stretchr/testify/require"
+)
+
+func TestSoraMediaStorage_StoreFromURLs(t *testing.T) {
+	tmpDir := t.TempDir()
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "image/png")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write([]byte("data"))
+	}))
+	defer server.Close()
+
+	cfg := &config.Config{
+		Sora: config.SoraConfig{
+			Storage: config.SoraStorageConfig{
+				Type:                   "local",
+				LocalPath:              tmpDir,
+				MaxConcurrentDownloads: 1,
+			},
+		},
+	}
+
+	storage := NewSoraMediaStorage(cfg)
+	urls, err := storage.StoreFromURLs(context.Background(), "image", []string{server.URL + "/img.png"})
+	require.NoError(t, err)
+	require.Len(t, urls, 1)
+	require.True(t, strings.HasPrefix(urls[0], "/image/"))
+	require.True(t, strings.HasSuffix(urls[0], ".png"))
+
+	localPath := filepath.Join(tmpDir, filepath.FromSlash(strings.TrimPrefix(urls[0], "/")))
+	require.FileExists(t, localPath)
+}
+
+func TestSoraMediaStorage_FallbackToUpstream(t *testing.T) {
+	tmpDir := t.TempDir()
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusInternalServerError)
+	}))
+	defer server.Close()
+
+	cfg := &config.Config{
+		Sora: config.SoraConfig{
+			Storage: config.SoraStorageConfig{
+				Type:               "local",
+				LocalPath:          tmpDir,
+				FallbackToUpstream: true,
+			},
+		},
+	}
+
+	storage := NewSoraMediaStorage(cfg)
+	url := server.URL + "/broken.png"
+	urls, err := storage.StoreFromURLs(context.Background(), "image", []string{url})
+	require.NoError(t, err)
+	require.Equal(t, []string{url}, urls)
+}

backend/internal/service/sora_models.go

+package service
+
+import (
+	"strings"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/Wei-Shaw/sub2api/internal/pkg/openai"
+)
+
+// SoraModelConfig Sora 模型配置
+type SoraModelConfig struct {
+	Type        string
+	Width       int
+	Height      int
+	Orientation string
+	Frames      int
+	Model       string
+	Size        string
+	RequirePro  bool
+}
+
+var soraModelConfigs = map[string]SoraModelConfig{
+	"gpt-image": {
+		Type:   "image",
+		Width:  360,
+		Height: 360,
+	},
+	"gpt-image-landscape": {
+		Type:   "image",
+		Width:  540,
+		Height: 360,
+	},
+	"gpt-image-portrait": {
+		Type:   "image",
+		Width:  360,
+		Height: 540,
+	},
+	"sora2-landscape-10s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      300,
+		Model:       "sy_8",
+		Size:        "small",
+	},
+	"sora2-portrait-10s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      300,
+		Model:       "sy_8",
+		Size:        "small",
+	},
+	"sora2-landscape-15s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      450,
+		Model:       "sy_8",
+		Size:        "small",
+	},
+	"sora2-portrait-15s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      450,
+		Model:       "sy_8",
+		Size:        "small",
+	},
+	"sora2-landscape-25s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      750,
+		Model:       "sy_8",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2-portrait-25s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      750,
+		Model:       "sy_8",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-landscape-10s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      300,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-portrait-10s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      300,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-landscape-15s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      450,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-portrait-15s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      450,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-landscape-25s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      750,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-portrait-25s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      750,
+		Model:       "sy_ore",
+		Size:        "small",
+		RequirePro:  true,
+	},
+	"sora2pro-hd-landscape-10s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      300,
+		Model:       "sy_ore",
+		Size:        "large",
+		RequirePro:  true,
+	},
+	"sora2pro-hd-portrait-10s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      300,
+		Model:       "sy_ore",
+		Size:        "large",
+		RequirePro:  true,
+	},
+	"sora2pro-hd-landscape-15s": {
+		Type:        "video",
+		Orientation: "landscape",
+		Frames:      450,
+		Model:       "sy_ore",
+		Size:        "large",
+		RequirePro:  true,
+	},
+	"sora2pro-hd-portrait-15s": {
+		Type:        "video",
+		Orientation: "portrait",
+		Frames:      450,
+		Model:       "sy_ore",
+		Size:        "large",
+		RequirePro:  true,
+	},
+	"prompt-enhance-short-10s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-short-15s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-short-20s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-medium-10s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-medium-15s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-medium-20s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-long-10s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-long-15s": {
+		Type: "prompt_enhance",
+	},
+	"prompt-enhance-long-20s": {
+		Type: "prompt_enhance",
+	},
+}
+
+var soraModelIDs = []string{
+	"gpt-image",
+	"gpt-image-landscape",
+	"gpt-image-portrait",
+	"sora2-landscape-10s",
+	"sora2-portrait-10s",
+	"sora2-landscape-15s",
+	"sora2-portrait-15s",
+	"sora2-landscape-25s",
+	"sora2-portrait-25s",
+	"sora2pro-landscape-10s",
+	"sora2pro-portrait-10s",
+	"sora2pro-landscape-15s",
+	"sora2pro-portrait-15s",
+	"sora2pro-landscape-25s",
+	"sora2pro-portrait-25s",
+	"sora2pro-hd-landscape-10s",
+	"sora2pro-hd-portrait-10s",
+	"sora2pro-hd-landscape-15s",
+	"sora2pro-hd-portrait-15s",
+	"prompt-enhance-short-10s",
+	"prompt-enhance-short-15s",
+	"prompt-enhance-short-20s",
+	"prompt-enhance-medium-10s",
+	"prompt-enhance-medium-15s",
+	"prompt-enhance-medium-20s",
+	"prompt-enhance-long-10s",
+	"prompt-enhance-long-15s",
+	"prompt-enhance-long-20s",
+}
+
+// GetSoraModelConfig 返回 Sora 模型配置
+func GetSoraModelConfig(model string) (SoraModelConfig, bool) {
+	key := strings.ToLower(strings.TrimSpace(model))
+	cfg, ok := soraModelConfigs[key]
+	return cfg, ok
+}
+
+// DefaultSoraModels returns the default Sora model list.
+func DefaultSoraModels(cfg *config.Config) []openai.Model {
+	models := make([]openai.Model, 0, len(soraModelIDs))
+	for _, id := range soraModelIDs {
+		models = append(models, openai.Model{
+			ID:          id,
+			Object:      "model",
+			OwnedBy:     "openai",
+			Type:        "model",
+			DisplayName: id,
+		})
+	}
+	if cfg != nil && cfg.Gateway.SoraModelFilters.HidePromptEnhance {
+		filtered := models[:0]
+		for _, model := range models {
+			if strings.HasPrefix(strings.ToLower(model.ID), "prompt-enhance") {
+				continue
+			}
+			filtered = append(filtered, model)
+		}
+		models = filtered
+	}
+	return models
+}

backend/internal/service/token_refresh_service.go

@@ -63,16 +63,6 @@ func (s *TokenRefreshService) SetSoraAccountRepo(repo SoraAccountRepository) {
 	}
 }
 
-// SetSoraSyncService 设置 Sora2API 同步服务
-// 需要在 Start() 之前调用
-func (s *TokenRefreshService) SetSoraSyncService(svc *Sora2APISyncService) {
-	for _, refresher := range s.refreshers {
-		if openaiRefresher, ok := refresher.(*OpenAITokenRefresher); ok {
-			openaiRefresher.SetSoraSyncService(svc)
-		}
-	}
-}
-
 // Start 启动后台刷新服务
 func (s *TokenRefreshService) Start() {
 	if !s.cfg.Enabled {

backend/internal/service/token_refresher.go

@@ -86,7 +86,6 @@ type OpenAITokenRefresher struct {
 	openaiOAuthService *OpenAIOAuthService
 	accountRepo        AccountRepository
 	soraAccountRepo    SoraAccountRepository // Sora 扩展表仓储，用于双表同步
-	soraSyncService    *Sora2APISyncService  // Sora2API 同步服务
 }
 
 // NewOpenAITokenRefresher 创建 OpenAI token刷新器
@@ -104,11 +103,6 @@ func (r *OpenAITokenRefresher) SetSoraAccountRepo(repo SoraAccountRepository) {
 	r.soraAccountRepo = repo
 }
 
-// SetSoraSyncService 设置 Sora2API 同步服务
-func (r *OpenAITokenRefresher) SetSoraSyncService(svc *Sora2APISyncService) {
-	r.soraSyncService = svc
-}
-
 // CanRefresh 检查是否能处理此账号
 // 只处理 openai 平台的 oauth 类型账号
 func (r *OpenAITokenRefresher) CanRefresh(account *Account) bool {
@@ -151,17 +145,6 @@ func (r *OpenAITokenRefresher) Refresh(ctx context.Context, account *Account) (m
 		go r.syncLinkedSoraAccounts(context.Background(), account.ID, newCredentials)
 	}
 
-	// 如果是 Sora 平台账号，同步到 sora2api（不阻塞主流程）
-	if account.Platform == PlatformSora && r.soraSyncService != nil {
-		syncAccount := *account
-		syncAccount.Credentials = newCredentials
-		go func() {
-			if err := r.soraSyncService.SyncAccount(context.Background(), &syncAccount); err != nil {
-				log.Printf("[TokenSync] 同步 Sora2API 失败: account_id=%d err=%v", syncAccount.ID, err)
-			}
-		}()
-	}
-
 	return newCredentials, nil
 }
 
@@ -218,13 +201,6 @@ func (r *OpenAITokenRefresher) syncLinkedSoraAccounts(ctx context.Context, opena
 			}
 		}
 
-		// 2.3 同步到 sora2api（如果配置）
-		if r.soraSyncService != nil {
-			if err := r.soraSyncService.SyncAccount(ctx, &soraAccount); err != nil {
-				log.Printf("[TokenSync] 同步 sora2api 失败: account_id=%d err=%v", soraAccount.ID, err)
-			}
-		}
-
 		log.Printf("[TokenSync] 成功同步 Sora 账号 token: sora_account_id=%d openai_account_id=%d dual_table=%v",
 			soraAccount.ID, openaiAccountID, r.soraAccountRepo != nil)
 	}

backend/internal/service/wire.go

@@ -40,7 +40,6 @@ func ProvideEmailQueueService(emailService *EmailService) *EmailQueueService {
 func ProvideTokenRefreshService(
 	accountRepo AccountRepository,
 	soraAccountRepo SoraAccountRepository, // Sora 扩展表仓储，用于双表同步
-	soraSyncService *Sora2APISyncService,
 	oauthService *OAuthService,
 	openaiOAuthService *OpenAIOAuthService,
 	geminiOAuthService *GeminiOAuthService,
@@ -51,7 +50,6 @@ func ProvideTokenRefreshService(
 	svc := NewTokenRefreshService(accountRepo, oauthService, openaiOAuthService, geminiOAuthService, antigravityOAuthService, cacheInvalidator, cfg)
 	// 注入 Sora 账号扩展表仓储，用于 OpenAI Token 刷新时同步 sora_accounts 表
 	svc.SetSoraAccountRepo(soraAccountRepo)
-	svc.SetSoraSyncService(soraSyncService)
 	svc.Start()
 	return svc
 }
@@ -187,6 +185,18 @@ func ProvideOpsCleanupService(
 	return svc
 }
 
+// ProvideSoraMediaStorage 初始化 Sora 媒体存储
+func ProvideSoraMediaStorage(cfg *config.Config) *SoraMediaStorage {
+	return NewSoraMediaStorage(cfg)
+}
+
+// ProvideSoraMediaCleanupService 创建并启动 Sora 媒体清理服务
+func ProvideSoraMediaCleanupService(storage *SoraMediaStorage, cfg *config.Config) *SoraMediaCleanupService {
+	svc := NewSoraMediaCleanupService(storage, cfg)
+	svc.Start()
+	return svc
+}
+
 // ProvideOpsScheduledReportService creates and starts OpsScheduledReportService.
 func ProvideOpsScheduledReportService(
 	opsService *OpsService,
@@ -226,6 +236,10 @@ var ProviderSet = wire.NewSet(
 	NewBillingCacheService,
 	NewAdminService,
 	NewGatewayService,
+	ProvideSoraMediaStorage,
+	ProvideSoraMediaCleanupService,
+	NewSoraDirectClient,
+	wire.Bind(new(SoraClient), new(*SoraDirectClient)),
 	NewSoraGatewayService,
 	NewOpenAIGatewayService,
 	NewOAuthService,

build_image.sh

+#!/bin/bash
+# 本地构建镜像的快速脚本，避免在命令行反复输入构建参数。
+
+docker build -t sub2api:latest \
+    --build-arg GOPROXY=https://goproxy.cn,direct \
+    --build-arg GOSUMDB=sum.golang.google.cn \
+    -f Dockerfile \
+    .

deploy/Dockerfile

+# =============================================================================
+# Sub2API Multi-Stage Dockerfile
+# =============================================================================
+# Stage 1: Build frontend
+# Stage 2: Build Go backend with embedded frontend
+# Stage 3: Final minimal image
+# =============================================================================
+
+ARG NODE_IMAGE=node:24-alpine
+ARG GOLANG_IMAGE=golang:1.25.5-alpine
+ARG ALPINE_IMAGE=alpine:3.20
+ARG GOPROXY=https://goproxy.cn,direct
+ARG GOSUMDB=sum.golang.google.cn
+
+# -----------------------------------------------------------------------------
+# Stage 1: Frontend Builder
+# -----------------------------------------------------------------------------
+FROM ${NODE_IMAGE} AS frontend-builder
+
+WORKDIR /app/frontend
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# Install dependencies first (better caching)
+COPY frontend/package.json frontend/pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
+
+# Copy frontend source and build
+COPY frontend/ ./
+RUN pnpm run build
+
+# -----------------------------------------------------------------------------
+# Stage 2: Backend Builder
+# -----------------------------------------------------------------------------
+FROM ${GOLANG_IMAGE} AS backend-builder
+
+# Build arguments for version info (set by CI)
+ARG VERSION=docker
+ARG COMMIT=docker
+ARG DATE
+ARG GOPROXY
+ARG GOSUMDB
+
+ENV GOPROXY=${GOPROXY}
+ENV GOSUMDB=${GOSUMDB}
+
+# Install build dependencies
+RUN apk add --no-cache git ca-certificates tzdata
+
+WORKDIR /app/backend
+
+# Copy go mod files first (better caching)
+COPY backend/go.mod backend/go.sum ./
+RUN go mod download
+
+# Copy backend source first
+COPY backend/ ./
+
+# Copy frontend dist from previous stage (must be after backend copy to avoid being overwritten)
+COPY --from=frontend-builder /app/backend/internal/web/dist ./internal/web/dist
+
+# Build the binary (BuildType=release for CI builds, embed frontend)
+RUN CGO_ENABLED=0 GOOS=linux go build \
+    -tags embed \
+    -ldflags="-s -w -X main.Commit=${COMMIT} -X main.Date=${DATE:-$(date -u +%Y-%m-%dT%H:%M:%SZ)} -X main.BuildType=release" \
+    -o /app/sub2api \
+    ./cmd/server
+
+# -----------------------------------------------------------------------------
+# Stage 3: Final Runtime Image
+# -----------------------------------------------------------------------------
+FROM ${ALPINE_IMAGE}
+
+# Labels
+LABEL maintainer="Wei-Shaw <github.com/Wei-Shaw>"
+LABEL description="Sub2API - AI API Gateway Platform"
+LABEL org.opencontainers.image.source="https://github.com/Wei-Shaw/sub2api"
+
+# Install runtime dependencies
+RUN apk add --no-cache \
+    ca-certificates \
+    tzdata \
+    curl \
+    && rm -rf /var/cache/apk/*
+
+# Create non-root user
+RUN addgroup -g 1000 sub2api && \
+    adduser -u 1000 -G sub2api -s /bin/sh -D sub2api
+
+# Set working directory
+WORKDIR /app
+
+# Copy binary from builder
+COPY --from=backend-builder /app/sub2api /app/sub2api
+
+# Create data directory
+RUN mkdir -p /app/data && chown -R sub2api:sub2api /app
+
+# Switch to non-root user
+USER sub2api
+
+# Expose port (can be overridden by SERVER_PORT env var)
+EXPOSE 8080
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
+    CMD curl -f http://localhost:${SERVER_PORT:-8080}/health || exit 1
+
+# Run the application
+ENTRYPOINT ["/app/sub2api"]

deploy/config.example.yaml

@@ -249,32 +249,64 @@ gateway:
     #     name: "Custom Profile 2"
 
 # =============================================================================
-# Sora2API Configuration
-# Sora2API 配置
-# =============================================================================
-sora2api:
-  # Sora2API base URL
-  # Sora2API 服务地址
-  base_url: "http://127.0.0.1:8000"
-  # Sora2API API Key (for /v1/chat/completions and /v1/models)
-  # Sora2API API Key（用于生成/模型列表）
-  api_key: ""
-  # Admin username/password (for token sync)
-  # 管理口用户名/密码（用于 token 同步）
-  admin_username: "admin"
-  admin_password: "admin"
-  # Admin token cache ttl (seconds)
-  # 管理口 token 缓存时长（秒）
-  admin_token_ttl_seconds: 900
-  # Admin request timeout (seconds)
-  # 管理口请求超时（秒）
-  admin_timeout_seconds: 10
-  # Token import mode: at/offline
-  # Token 导入模式：at/offline
-  token_import_mode: "at"
-    #     cipher_suites: [4866, 4867, 4865, 49199, 49195, 49200, 49196]
-    #     curves: [29, 23, 24]
-    #     point_formats: [0]
+# Sora Direct Client Configuration
+# Sora 直连配置
+# =============================================================================
+sora:
+  client:
+    # Sora backend base URL
+    # Sora 上游 Base URL
+    base_url: "https://sora.chatgpt.com/backend"
+    # Request timeout (seconds)
+    # 请求超时（秒）
+    timeout_seconds: 120
+    # Max retries for upstream requests
+    # 上游请求最大重试次数
+    max_retries: 3
+    # Poll interval (seconds)
+    # 轮询间隔（秒）
+    poll_interval_seconds: 2
+    # Max poll attempts
+    # 最大轮询次数
+    max_poll_attempts: 600
+    # Enable debug logs for Sora upstream requests
+    # 启用 Sora 直连调试日志
+    debug: false
+    # Optional custom headers (key-value)
+    # 额外请求头（键值对）
+    headers: {}
+    # Default User-Agent for Sora requests
+    # Sora 默认 User-Agent
+    user_agent: "Sora/1.2026.007 (Android 15; 24122RKC7C; build 2600700)"
+    # Disable TLS fingerprint for Sora upstream
+    # 关闭 Sora 上游 TLS 指纹伪装
+    disable_tls_fingerprint: false
+  storage:
+    # Storage type (local only for now)
+    # 存储类型（首发仅支持 local）
+    type: "local"
+    # Local base path; empty uses /app/data/sora
+    # 本地存储基础路径；为空使用 /app/data/sora
+    local_path: ""
+    # Fallback to upstream URL when download fails
+    # 下载失败时回退到上游 URL
+    fallback_to_upstream: true
+    # Max concurrent downloads
+    # 并发下载上限
+    max_concurrent_downloads: 4
+    # Enable debug logs for media storage
+    # 启用媒体存储调试日志
+    debug: false
+    cleanup:
+      # Enable cleanup task
+      # 启用清理任务
+      enabled: true
+      # Retention days
+      # 保留天数
+      retention_days: 7
+      # Cron schedule
+      # Cron 调度表达式
+      schedule: "0 3 * * *"
 
 # =============================================================================
 # API Key Auth Cache Configuration

frontend/src/api/admin/index.ts

@@ -18,7 +18,6 @@ import geminiAPI from './gemini'
 import antigravityAPI from './antigravity'
 import userAttributesAPI from './userAttributes'
 import opsAPI from './ops'
-import modelsAPI from './models'
 
 /**
  * Unified admin API object for convenient access
@@ -38,8 +37,7 @@ export const adminAPI = {
   gemini: geminiAPI,
   antigravity: antigravityAPI,
   userAttributes: userAttributesAPI,
-  ops: opsAPI,
-  models: modelsAPI
+  ops: opsAPI
 }
 
 export {
@@ -57,8 +55,7 @@ export {
   geminiAPI,
   antigravityAPI,
   userAttributesAPI,
-  opsAPI,
-  modelsAPI
+  opsAPI
 }
 
 export default adminAPI

frontend/src/api/admin/models.ts

-import { apiClient } from '@/api/client'
-
-export async function getPlatformModels(platform: string): Promise<string[]> {
-  const { data } = await apiClient.get<string[]>('/admin/models', {
-    params: { platform }
-  })
-  return data
-}
-
-export const modelsAPI = {
-  getPlatformModels
-}
-
-export default modelsAPI

frontend/src/components/account/CreateAccountModal.vue

@@ -1501,9 +1501,9 @@
               </span>
             </div>
           </div>
-          <label class="switch">
-            <input type="checkbox" v-model="enableSoraOnOpenAIOAuth" />
-            <span class="slider"></span>
+          <label :class="['switch', { 'switch-active': enableSoraOnOpenAIOAuth }]">
+            <input type="checkbox" v-model="enableSoraOnOpenAIOAuth" class="sr-only" />
+            <span class="switch-thumb"></span>
           </label>
         </label>
       </div>

frontend/src/components/account/ModelWhitelistSelector.vue

@@ -45,19 +45,6 @@
             :placeholder="t('admin.accounts.searchModels')"
             @click.stop
           />
-          <div v-if="props.platform === 'sora'" class="mt-2 flex items-center gap-2 text-xs">
-            <span v-if="loadingSoraModels" class="text-gray-500">
-              {{ t('admin.accounts.soraModelsLoading') }}
-            </span>
-            <button
-              v-else-if="soraLoadError"
-              type="button"
-              class="text-primary-600 hover:underline dark:text-primary-400"
-              @click.stop="loadSoraModels"
-            >
-              {{ t('admin.accounts.soraModelsRetry') }}
-            </button>
-          </div>
         </div>
         <div class="max-h-52 overflow-auto">
           <button
@@ -133,13 +120,12 @@
 </template>
 
 <script setup lang="ts">
-import { ref, computed, watch } from 'vue'
+import { ref, computed } from 'vue'
 import { useI18n } from 'vue-i18n'
 import { useAppStore } from '@/stores/app'
 import ModelIcon from '@/components/common/ModelIcon.vue'
 import Icon from '@/components/icons/Icon.vue'
 import { allModels, getModelsByPlatform } from '@/composables/useModelWhitelist'
-import { adminAPI } from '@/api/admin'
 
 const { t } = useI18n()
 
@@ -158,15 +144,8 @@ const showDropdown = ref(false)
 const searchQuery = ref('')
 const customModel = ref('')
 const isComposing = ref(false)
-const soraModelOptions = ref<{ value: string; label: string }[]>([])
-const loadingSoraModels = ref(false)
-const soraLoadError = ref(false)
-
 const availableOptions = computed(() => {
   if (props.platform === 'sora') {
-    if (soraModelOptions.value.length > 0) {
-      return soraModelOptions.value
-    }
     return getModelsByPlatform('sora').map(m => ({ value: m, label: m }))
   }
   return allModels
@@ -213,9 +192,7 @@ const handleEnter = () => {
 }
 
 const fillRelated = () => {
-  const models = props.platform === 'sora' && soraModelOptions.value.length > 0
-    ? soraModelOptions.value.map(m => m.value)
-    : getModelsByPlatform(props.platform)
+  const models = getModelsByPlatform(props.platform)
   const newModels = [...props.modelValue]
   for (const model of models) {
     if (!newModels.includes(model)) newModels.push(model)
@@ -227,31 +204,4 @@ const clearAll = () => {
   emit('update:modelValue', [])
 }
 
-const loadSoraModels = async () => {
-  if (props.platform !== 'sora') {
-    soraModelOptions.value = []
-    return
-  }
-  if (loadingSoraModels.value) return
-  soraLoadError.value = false
-  loadingSoraModels.value = true
-  try {
-    const models = await adminAPI.models.getPlatformModels('sora')
-    soraModelOptions.value = (models || []).map((m) => ({ value: m, label: m }))
-  } catch (error) {
-    console.warn('加载 Sora 模型列表失败', error)
-    soraLoadError.value = true
-    appStore.showWarning(t('admin.accounts.soraModelsLoadFailed'))
-  } finally {
-    loadingSoraModels.value = false
-  }
-}
-
-watch(
-  () => props.platform,
-  () => {
-    loadSoraModels()
-  },
-  { immediate: true }
-)
 </script>

frontend/src/components/account/OAuthAuthorizationFlow.vue

@@ -416,6 +416,7 @@ import { useI18n } from 'vue-i18n'
 import { useClipboard } from '@/composables/useClipboard'
 import Icon from '@/components/icons/Icon.vue'
 import type { AddMethod, AuthInputMethod } from '@/composables/useAccountOAuth'
+import type { AccountPlatform } from '@/types'
 
 interface Props {
   addMethod: AddMethod
@@ -428,7 +429,7 @@ interface Props {
   allowMultiple?: boolean
   methodLabel?: string
   showCookieOption?: boolean // Whether to show cookie auto-auth option
-  platform?: 'anthropic' | 'openai' | 'gemini' | 'antigravity' // Platform type for different UI/text
+  platform?: AccountPlatform // Platform type for different UI/text
   showProjectId?: boolean // New prop to control project ID visibility
 }
 
@@ -455,11 +456,11 @@ const emit = defineEmits<{
 
 const { t } = useI18n()
 
-const isOpenAI = computed(() => props.platform === 'openai')
+const isOpenAI = computed(() => props.platform === 'openai' || props.platform === 'sora')
 
 // Get translation key based on platform
 const getOAuthKey = (key: string) => {
-  if (props.platform === 'openai') return `admin.accounts.oauth.openai.${key}`
+  if (props.platform === 'openai' || props.platform === 'sora') return `admin.accounts.oauth.openai.${key}`
   if (props.platform === 'gemini') return `admin.accounts.oauth.gemini.${key}`
   if (props.platform === 'antigravity') return `admin.accounts.oauth.antigravity.${key}`
   return `admin.accounts.oauth.${key}`
@@ -478,7 +479,7 @@ const oauthAuthCode = computed(() => t(getOAuthKey('authCode')))
 const oauthAuthCodePlaceholder = computed(() => t(getOAuthKey('authCodePlaceholder')))
 const oauthAuthCodeHint = computed(() => t(getOAuthKey('authCodeHint')))
 const oauthImportantNotice = computed(() => {
-  if (props.platform === 'openai') return t('admin.accounts.oauth.openai.importantNotice')
+  if (props.platform === 'openai' || props.platform === 'sora') return t('admin.accounts.oauth.openai.importantNotice')
   if (props.platform === 'antigravity') return t('admin.accounts.oauth.antigravity.importantNotice')
   return ''
 })
@@ -510,7 +511,7 @@ watch(inputMethod, (newVal) => {
 // Auto-extract code from callback URL (OpenAI/Gemini/Antigravity)
 // e.g., http://localhost:8085/callback?code=xxx...&state=...
 watch(authCodeInput, (newVal) => {
-  if (props.platform !== 'openai' && props.platform !== 'gemini' && props.platform !== 'antigravity') return
+  if (props.platform !== 'openai' && props.platform !== 'gemini' && props.platform !== 'antigravity' && props.platform !== 'sora') return
 
   const trimmed = newVal.trim()
   // Check if it looks like a URL with code parameter

frontend/src/composables/useModelWhitelist.ts

@@ -52,7 +52,7 @@ const geminiModels = [
   'gemini-3-pro-preview'
 ]
 
-// Sora (sora2api)
+// Sora
 const soraModels = [
   'gpt-image', 'gpt-image-landscape', 'gpt-image-portrait',
   'sora2-landscape-10s', 'sora2-portrait-10s',

frontend/src/views/admin/GroupsView.vue

@@ -1363,11 +1363,6 @@ const createForm = reactive({
   sora_image_price_540: null as number | null,
   sora_video_price_per_request: null as number | null,
   sora_video_price_per_request_hd: null as number | null,
-  // Sora 按次计费配置
-  sora_image_price_360: null as number | null,
-  sora_image_price_540: null as number | null,
-  sora_video_price_per_request: null as number | null,
-  sora_video_price_per_request_hd: null as number | null,
   // Claude Code 客户端限制（仅 anthropic 平台使用）
   claude_code_only: false,
   fallback_group_id: null as number | null,