fix(clandes): 管理后台 current_window_cost/current_rpm 与实际不符

Cap'n Proto 路径下 session_window_* 从不被写入，GetCurrentWindowStartTime
退回"当前整点"预测，导致 current_window_cost 只覆盖 ≤1h 而非 5h，整点还会
归零；current_rpm 因从未调 IncrementAccountRPM 而恒为 0。

为 ratelimit_service 抽出一个无需响应头的 EnsurePredictedSessionWindow，
在 clandes ReportUsage 成功后对 Anthropic OAuth/SetupToken 账号持久化
hour-truncated 5h 窗口，并 bump RPM 计数器，令管理后台数据落到真实 5h
窗口上。公式与 UpdateSessionWindow 的 header-missing fallback 保持一致，
Phase 2（Cap'n Proto 透传真实 header）落地后会自然覆盖此预测。

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: StarryKira

backend/cmd/server/wire_gen.go

@@ -43,6 +43,7 @@ type ClandesClient struct {
 	billingCacheService *BillingCacheService
 	apiKeyService       *APIKeyService
 	subscriptionService *SubscriptionService
+	rateLimitService    *RateLimitService
 
 	closed    chan struct{}
 	closeOnce sync.Once
@@ -57,6 +58,7 @@ func NewClandesClient(
 	billingCacheService *BillingCacheService,
 	apiKeyService *APIKeyService,
 	subscriptionService *SubscriptionService,
+	rateLimitService *RateLimitService,
 ) *ClandesClient {
 	interval := time.Duration(reconnectInterval) * time.Second
 	if interval <= 0 {
@@ -70,6 +72,7 @@ func NewClandesClient(
 		billingCacheService: billingCacheService,
 		apiKeyService:       apiKeyService,
 		subscriptionService: subscriptionService,
+		rateLimitService:    rateLimitService,
 		reqCache:            newClandesRequestCache(),
 		closed:              make(chan struct{}),
 	}
@@ -407,7 +410,7 @@ func (c *ClandesClient) registerCallback(ctx context.Context) error {
 	defer c.mu.Unlock()
 
 	// Build the Router server
-	c.routerImpl = newClandesRouterImpl(c.reqCache, c.gatewayService, c.billingCacheService, c.apiKeyService, c.subscriptionService)
+	c.routerImpl = newClandesRouterImpl(c.reqCache, c.gatewayService, c.billingCacheService, c.apiKeyService, c.subscriptionService, c.rateLimitService)
 	routerClient := proto.Router_ServerToClient(c.routerImpl)
 
 	// Register with clandes

backend/internal/service/clandes_client.go

@@ -20,6 +20,7 @@ type clandesRouterImpl struct {
 	billingCacheService *BillingCacheService
 	apiKeyService       *APIKeyService
 	subscriptionService *SubscriptionService
+	rateLimitService    *RateLimitService
 }
 
 func newClandesRouterImpl(
@@ -28,13 +29,15 @@ func newClandesRouterImpl(
 	billingSvc *BillingCacheService,
 	apiKeySvc *APIKeyService,
 	subSvc *SubscriptionService,
+	rateLimitSvc *RateLimitService,
 ) *clandesRouterImpl {
 	return &clandesRouterImpl{
 		reqCache:            reqCache,
 		gatewayService:      gatewaySvc,
 		billingCacheService: billingSvc,
 		apiKeyService:       apiKeySvc,
 		subscriptionService: subSvc,
+		rateLimitService:    rateLimitSvc,
 	}
 }
 
@@ -271,6 +274,21 @@ func (r *clandesRouterImpl) ReportUsage(ctx context.Context, call proto.Router_r
 			r.subscriptionService.InvalidateSubCache(rctx.User.ID, *rctx.APIKey.GroupID)
 			_ = r.billingCacheService.InvalidateSubscription(bctx, rctx.User.ID, *rctx.APIKey.GroupID)
 		}
+
+		// Cap'n Proto path has no anthropic-ratelimit-unified-5h-* headers,
+		// so session_window_start/end never populate via UpdateSessionWindow.
+		// Persist a predicted 5h window and bump the per-minute RPM so the
+		// admin page's current_window_cost and current_rpm reflect reality.
+		if rctx.Account != nil && rctx.Account.IsAnthropicOAuthOrSetupToken() {
+			if r.rateLimitService != nil && rctx.Account.GetWindowCostLimit() > 0 {
+				r.rateLimitService.EnsurePredictedSessionWindow(bctx, rctx.Account)
+			}
+			if rctx.Account.GetBaseRPM() > 0 {
+				if err := r.gatewayService.IncrementAccountRPM(bctx, rctx.Account.ID); err != nil {
+					log.Warn("reportUsage: rpm increment failed", zap.Error(err))
+				}
+			}
+		}
 	}()
 
 	return nil

backend/internal/service/clandes_router.go

@@ -1101,6 +1101,31 @@ func (s *RateLimitService) handle529(ctx context.Context, account *Account) {
 	slog.Info("account_overloaded", "account_id", account.ID, "until", until)
 }
 
+// EnsurePredictedSessionWindow 在没有 Anthropic 响应头的情况下持久化一个预测的 5h 窗口。
+// 当窗口已存在且未过期时为 no-op。用于 clandes Cap'n Proto 路径等无法拿到
+// anthropic-ratelimit-unified-5h-* 响应头的调用方，否则 GetCurrentWindowStartTime
+// 会一直退回到"当前整点"预测，导致 current_window_cost 只覆盖不足 1 小时。
+// 预测公式与 UpdateSessionWindow 的 header-missing 回退分支保持一致。
+func (s *RateLimitService) EnsurePredictedSessionWindow(ctx context.Context, account *Account) {
+	if s == nil || s.accountRepo == nil || account == nil {
+		return
+	}
+	if account.SessionWindowEnd != nil && time.Now().Before(*account.SessionWindowEnd) {
+		return
+	}
+	now := time.Now()
+	start := time.Date(now.Year(), now.Month(), now.Day(), now.Hour(), 0, 0, 0, now.Location())
+	end := start.Add(5 * time.Hour)
+	if err := s.accountRepo.UpdateSessionWindow(ctx, account.ID, &start, &end, "allowed"); err != nil {
+		slog.Warn("predicted_session_window_update_failed", "account_id", account.ID, "error", err)
+		return
+	}
+	account.SessionWindowStart = &start
+	account.SessionWindowEnd = &end
+	account.SessionWindowStatus = "allowed"
+	slog.Info("predicted_session_window_initialized", "account_id", account.ID, "window_start", start, "window_end", end)
+}
+
 // UpdateSessionWindow 从成功响应更新5h窗口状态
 func (s *RateLimitService) UpdateSessionWindow(ctx context.Context, account *Account, headers http.Header) {
 	status := headers.Get("anthropic-ratelimit-unified-5h-status")

backend/internal/service/ratelimit_service.go

@@ -498,6 +498,7 @@ func ProvideClandesClient(
 	billingCacheSvc *BillingCacheService,
 	apiKeySvc *APIKeyService,
 	subscriptionSvc *SubscriptionService,
+	rateLimitSvc *RateLimitService,
 	accountRepo AccountRepository,
 ) *ClandesClient {
 	if !cfg.Clandes.Enabled {
@@ -512,6 +513,7 @@ func ProvideClandesClient(
 		billingCacheSvc,
 		apiKeySvc,
 		subscriptionSvc,
+		rateLimitSvc,
 	)
 
 	syncFn := func(ctx context.Context, c *ClandesClient) error {