4 Commits

Include renames

Author	SHA1	Message	Date
feeeei	73aabc861c	build: 取消 gosec G703/G704 全局排除，生产代码逐点 nolint、测试文件按路径豁免；DEV_GUIDE 同步 golangci-lint v2.13	2026-08-24 12:21:06 +08:00
bestony	324a491671	feat: extend Server-Timing to authenticated user web APIs ... Mirror the Admin UI Server-Timing opt-in for user-facing pages so authenticated callers can inspect total/app/db/redis/deps metrics on session, profile, keys, usage, payment, and related user APIs. - Collect when X-User-UI-Request=1 or path is on the user allowlist - Emit for non-admin only on allowlisted paths (header is not auth) - Exclude payment public/webhook surfaces - Mark matching SPA requests and allow the new CORS request header	2026-07-15 00:23:27 +08:00
bestonyandmultica-agent	966afd1b4b	fix: preserve instrumented client contracts ... Co-authored-by: multica-agent <github@multica.ai>	2026-07-14 01:29:30 +08:00
bestonyandmultica-agent	54d228dda5	feat(admin): add opt-in server timing metrics ... Co-authored-by: multica-agent <github@multica.ai>	2026-07-14 01:29:30 +08:00