feat(system-settings): add user token limit configuration section (#5678)

5d943281 · RedwindA · GitHub · 0b2cf43e · 5d943281 · 5d943281
Commit 5d943281 authored Jun 24, 2026 by RedwindA Committed by GitHub Jun 24, 2026
10 changed files
--- a/web/default/src/features/system-settings/request-limits/token-limit-section.tsx
+++ b/web/default/src/features/system-settings/request-limits/token-limit-section.tsx
+/*
+Copyright (C) 2023-2026 QuantumNous
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+For commercial licensing, please contact support@quantumnous.com
+*/
+import { zodResolver } from '@hookform/resolvers/zod'
+import { useEffect } from 'react'
+import { useForm } from 'react-hook-form'
+import { useTranslation } from 'react-i18next'
+import * as z from 'zod'
+import {
+  Form,
+  FormControl,
+  FormDescription,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from '@/components/ui/form'
+import { Input } from '@/components/ui/input'
+import { SettingsForm } from '../components/settings-form-layout'
+import { SettingsPageFormActions } from '../components/settings-page-context'
+import { SettingsSection } from '../components/settings-section'
+import { useUpdateOption } from '../hooks/use-update-option'
+const tokenLimitSchema = z.object({
+  token_setting: z.object({
+    max_user_tokens: z.number().min(1),
+  }),
+})
+type TokenLimitFormValues = z.output<typeof tokenLimitSchema>
+type TokenLimitFormInput = z.input<typeof tokenLimitSchema>
+type NormalizedTokenLimitValues = {
+  'token_setting.max_user_tokens': number
+}
+type TokenLimitSectionProps = {
+  defaultValues: NormalizedTokenLimitValues
+}
+const buildFormDefaults = (
+  defaults: TokenLimitSectionProps['defaultValues']
+): TokenLimitFormInput => ({
+  token_setting: {
+    max_user_tokens: defaults['token_setting.max_user_tokens'],
+  },
+})
+const normalizeFormValues = (
+  values: TokenLimitFormValues
+): NormalizedTokenLimitValues => ({
+  'token_setting.max_user_tokens': values.token_setting.max_user_tokens,
+})
+export function TokenLimitSection({ defaultValues }: TokenLimitSectionProps) {
+  const { t } = useTranslation()
+  const updateOption = useUpdateOption()
+  const form = useForm<TokenLimitFormInput, unknown, TokenLimitFormValues>({
+    resolver: zodResolver(tokenLimitSchema),
+    mode: 'onChange',
+    defaultValues: buildFormDefaults(defaultValues),
+  })
+  useEffect(() => {
+    form.reset(buildFormDefaults(defaultValues))
+  }, [defaultValues, form])
+  const onSubmit = async (values: TokenLimitFormValues) => {
+    const key = 'token_setting.max_user_tokens' as const
+    const normalized = normalizeFormValues(values)
+    const value = normalized[key]
+    if (value !== defaultValues[key]) {
+      await updateOption.mutateAsync({ key, value })
+    }
+  }
+  return (
+    <SettingsSection title={t('Token Limits')}>
+      <Form {...form}>
+        <SettingsForm onSubmit={form.handleSubmit(onSubmit)}>
+          <SettingsPageFormActions
+            onSave={form.handleSubmit(onSubmit)}
+            isSaving={updateOption.isPending}
+            saveLabel='Save token limits'
+          />
+          <FormField
+            control={form.control}
+            name='token_setting.max_user_tokens'
+            render={({ field }) => (
+              <FormItem>
+                <FormLabel>{t('Maximum tokens per user')}</FormLabel>
+                <FormControl>
+                  <Input
+                    type='number'
+                    min={1}
+                    step={1}
+                    {...field}
+                    onChange={(e) =>
+                      field.onChange(Number.parseInt(e.target.value) || 1)
+                    }
+                  />
+                </FormControl>
+                <FormDescription>
+                  {t(
+                    'Maximum number of tokens each user can create. Default 1000. Setting too large may affect performance.'
+                  )}
+                </FormDescription>
+                <FormMessage />
+              </FormItem>
+            )}
+          />
+        </SettingsForm>
+      </Form>
+    </SettingsSection>
+  )
+}
--- a/web/default/src/features/system-settings/security/index.tsx
+++ b/web/default/src/features/system-settings/security/index.tsx
@@ -41,6 +41,7 @@ const defaultSecuritySettings: SecuritySettings = {
  'fetch_setting.ip_list': [],
  'fetch_setting.allowed_ports': [],
  'fetch_setting.apply_ip_filter_for_domain': false,
+  'token_setting.max_user_tokens': 1000,
 }
 export function SecuritySettings() {

--- a/web/default/src/features/system-settings/security/section-registry.tsx
+++ b/web/default/src/features/system-settings/security/section-registry.tsx
@@ -19,6 +19,7 @@ For commercial licensing, please contact support@quantumnous.com
 import { RateLimitSection } from '../request-limits/rate-limit-section'
 import { SensitiveWordsSection } from '../request-limits/sensitive-words-section'
 import { SSRFSection } from '../request-limits/ssrf-section'
+import { TokenLimitSection } from '../request-limits/token-limit-section'
 import type { SecuritySettings } from '../types'
 import { createSectionRegistry } from '../utils/section-registry'
@@ -77,6 +78,18 @@ const SECURITY_SECTIONS = [
      />
    ),
  },
+  {
+    id: 'token-limits',
+    titleKey: 'Token Limits',
+    build: (settings: SecuritySettings) => (
+      <TokenLimitSection
+        defaultValues={{
+          'token_setting.max_user_tokens':
+            settings['token_setting.max_user_tokens'],
+        }}
+      />
+    ),
+  },
 ] as const
 export type SecuritySectionId = (typeof SECURITY_SECTIONS)[number]['id']

--- a/web/default/src/features/system-settings/types.ts
+++ b/web/default/src/features/system-settings/types.ts
@@ -378,6 +378,7 @@ export type SecuritySettings = {
  'fetch_setting.ip_list': string[]
  'fetch_setting.allowed_ports': number[]
  'fetch_setting.apply_ip_filter_for_domain': boolean
+  'token_setting.max_user_tokens': number
 }
 export type UpstreamChannel = {

--- a/web/default/src/i18n/locales/en.json
+++ b/web/default/src/i18n/locales/en.json
@@ -370,6 +370,7 @@
    "API Key disabled successfully": "API Key disabled successfully",
    "API Key enabled successfully": "API Key enabled successfully",
    "API key from the provider": "API key from the provider",
+    "API key is loading, please try again in a moment": "API key is loading, please try again in a moment",
    "API key is required": "API key is required",
    "API Key mode (does not support batch creation)": "API Key mode (does not support batch creation)",
    "API Key mode: use APIKey|Region": "API Key mode: use APIKey|Region",
@@ -1701,6 +1702,7 @@
    "Failed to copy keys": "Failed to copy keys",
    "Failed to copy model names": "Failed to copy model names",
    "Failed to copy to clipboard": "Failed to copy to clipboard",
+    "Failed to create account": "Failed to create account",
    "Failed to create API key": "Failed to create API key",
    "Failed to create channel": "Failed to create channel",
    "Failed to create deployment": "Failed to create deployment",
@@ -1753,6 +1755,8 @@
    "Failed to load key status": "Failed to load key status",
    "Failed to load logs": "Failed to load logs",
    "Failed to load Passkey status": "Failed to load Passkey status",
+    "Failed to load playground groups": "Failed to load playground groups",
+    "Failed to load playground models": "Failed to load playground models",
    "Failed to load profile": "Failed to load profile",
    "Failed to load redemption codes": "Failed to load redemption codes",
    "Failed to load setup data": "Failed to load setup data",
@@ -1779,7 +1783,9 @@
    "Failed to search API keys": "Failed to search API keys",
    "Failed to search redemption codes": "Failed to search redemption codes",
    "Failed to search users": "Failed to search users",
+    "Failed to send reset email": "Failed to send reset email",
    "Failed to send verification code": "Failed to send verification code",
+    "Failed to send verification email": "Failed to send verification email",
    "Failed to set tag": "Failed to set tag",
    "Failed to setup 2FA": "Failed to setup 2FA",
    "Failed to start {{provider}} login": "Failed to start {{provider}} login",
@@ -1822,6 +1828,7 @@
    "Fee": "Fee",
    "Fee Amount": "Fee Amount",
    "Fetch available models for:": "Fetch available models for:",
+    "Fetch available models from upstream": "Fetch available models from upstream",
    "Fetch from Upstream": "Fetch from Upstream",
    "Fetch Models": "Fetch Models",
    "Fetched {{count}} model(s) from upstream": "Fetched {{count}} model(s) from upstream",
@@ -2445,10 +2452,12 @@
    "Maximum 500 characters. Supports Markdown and HTML.": "Maximum 500 characters. Supports Markdown and HTML.",
    "Maximum check-in quota": "Maximum check-in quota",
    "Maximum input window": "Maximum input window",
+    "Maximum number of tokens each user can create. Default 1000. Setting too large may affect performance.": "Maximum number of tokens each user can create. Default 1000. Setting too large may affect performance.",
    "Maximum number of tokens in the response": "Maximum number of tokens in the response",
    "Maximum quota amount awarded for check-in": "Maximum quota amount awarded for check-in",
    "Maximum tokens including hidden reasoning tokens": "Maximum tokens including hidden reasoning tokens",
    "Maximum tokens per response": "Maximum tokens per response",
+    "Maximum tokens per user": "Maximum tokens per user",
    "maxRequests ≥ 0, maxSuccess ≥ 1, both ≤ 2,147,483,647": "maxRequests ≥ 0, maxSuccess ≥ 1, both ≤ 2,147,483,647",
    "May be used for training by upstream provider": "May be used for training by upstream provider",
    "Media pricing": "Media pricing",
@@ -2517,7 +2526,9 @@
    "Model Mapping (JSON)": "Model Mapping (JSON)",
    "Model Mapping must be a JSON object like": "Model Mapping must be a JSON object like",
    "Model mapping must be a JSON object with string values": "Model mapping must be a JSON object with string values",
+    "Model mapping must be a valid JSON object": "Model mapping must be a valid JSON object",
    "Model mapping must be valid JSON": "Model mapping must be valid JSON",
+    "Model mapping must be valid JSON format": "Model mapping must be valid JSON format",
    "Model mapping values must be strings": "Model mapping values must be strings",
    "Model name": "Model name",
    "Model Name": "Model Name",
@@ -2748,6 +2759,7 @@
    "No missing models found.": "No missing models found.",
    "No model found.": "No model found.",
    "No model mappings configured. Click \"Add Mapping\" to get started.": "No model mappings configured. Click \"Add Mapping\" to get started.",
+    "No model price changes to save": "No model price changes to save",
    "No models available": "No models available",
    "No models available in this category": "No models available in this category",
    "No models available. Create your first model to get started.": "No models available. Create your first model to get started.",
@@ -2760,6 +2772,7 @@
    "No models match the selected filters": "No models match the selected filters",
    "No models match your current filters.": "No models match your current filters.",
    "No models match your search": "No models match your search",
+    "No models matched your search.": "No models matched your search.",
    "No models selected": "No models selected",
    "No models to add": "No models to add",
    "No models to copy": "No models to copy",
@@ -3072,6 +3085,7 @@
    "Password Login": "Password Login",
    "Password must be at least 8 characters": "Password must be at least 8 characters",
    "Password must be at least 8 characters long": "Password must be at least 8 characters long",
+    "Password must be between 8 and 20 characters": "Password must be between 8 and 20 characters",
    "Password Registration": "Password Registration",
    "Password reset and copied to clipboard: {{password}}": "Password reset and copied to clipboard: {{password}}",
    "Password reset: {{password}}": "Password reset: {{password}}",
@@ -3323,6 +3337,7 @@
    "Prompt Details": "Prompt Details",
    "Prompt price ($/1M tokens)": "Prompt price ($/1M tokens)",
    "Proprietary": "Proprietary",
+    "Protect login and registration with Cloudflare Turnstile": "Protect login and registration with Cloudflare Turnstile",
    "Provide a JSON object where each key maps to an endpoint definition.": "Provide a JSON object where each key maps to an endpoint definition.",
    "Provide a valid URL starting with http:// or https://": "Provide a valid URL starting with http:// or https://",
    "Provide Markdown, HTML, or an external URL for the privacy policy": "Provide Markdown, HTML, or an external URL for the privacy policy",
@@ -3860,6 +3875,7 @@
    "Send a request": "Send a request",
    "Send code": "Send code",
    "Send email alerts when a user falls below this quota": "Send email alerts when a user falls below this quota",
+    "Send reset email": "Send reset email",
    "Sending...": "Sending...",
    "Sensitive Words": "Sensitive Words",
    "Sent the API key to FluentRead.": "Sent the API key to FluentRead.",
@@ -4240,6 +4256,7 @@
    "This action cannot be undone.": "This action cannot be undone.",
    "This action cannot be undone. This will permanently delete your account and remove all your data from our servers.": "This action cannot be undone. This will permanently delete your account and remove all your data from our servers.",
    "This action will permanently remove 2FA protection from your account.": "This action will permanently remove 2FA protection from your account.",
+    "This channel has no configured models.": "This channel has no configured models.",
    "This channel is not an Ollama channel.": "This channel is not an Ollama channel.",
    "This channel type does not support fetching models": "This channel type does not support fetching models",
    "This channel type requires additional configuration": "This channel type requires additional configuration",
@@ -4326,6 +4343,7 @@
    "Token Endpoint (Optional)": "Token Endpoint (Optional)",
    "Token estimator": "Token estimator",
    "Token group": "Token group",
+    "Token Limits": "Token Limits",
    "Token management": "Token management",
    "Token Management": "Token Management",
    "Token Mgmt": "Token Mgmt",
@@ -4524,6 +4542,7 @@
    "Updated system setting {{key}}": "Updated system setting {{key}}",
    "Updated user {{username}} (ID: {{id}})": "Updated user {{username}} (ID: {{id}})",
    "Updating all channel balances. This may take a while. Please refresh to see results.": "Updating all channel balances. This may take a while. Please refresh to see results.",
+    "Updating...": "Updating...",
    "Upgrade Group": "Upgrade Group",
    "Upgrade plaintext SMTP connection with STARTTLS before authentication": "Upgrade plaintext SMTP connection with STARTTLS before authentication",
    "Upload": "Upload",
@@ -4728,6 +4747,7 @@
    "Visual Parameter Override": "Visual Parameter Override",
    "VolcEngine": "VolcEngine",
    "vs. previous": "vs. previous",
+    "Waffo": "Waffo",
    "Waffo Aggregator Gateway": "Waffo Aggregator Gateway",
    "Waffo Pancake Dashboard": "Waffo Pancake Dashboard",
    "Waffo Pancake MoR": "Waffo Pancake MoR",

--- a/web/default/src/i18n/locales/fr.json
+++ b/web/default/src/i18n/locales/fr.json
--- a/web/default/src/i18n/locales/ja.json
+++ b/web/default/src/i18n/locales/ja.json
--- a/web/default/src/i18n/locales/ru.json
+++ b/web/default/src/i18n/locales/ru.json
--- a/web/default/src/i18n/locales/vi.json
+++ b/web/default/src/i18n/locales/vi.json
--- a/web/default/src/i18n/locales/zh.json
+++ b/web/default/src/i18n/locales/zh.json
@@ -370,6 +370,7 @@
    "API Key disabled successfully": "API 密钥禁用成功",
    "API Key enabled successfully": "API 密钥启用成功",
    "API key from the provider": "来自提供商的 API 密钥",
+    "API key is loading, please try again in a moment": "API 密钥正在加载，请稍后再试",
    "API key is required": "需要 API 密钥",
    "API Key mode (does not support batch creation)": "API Key 模式（不支持批量创建）",
    "API Key mode: use APIKey|Region": "API Key 模式：使用 APIKey|Region",
@@ -1701,6 +1702,7 @@
    "Failed to copy keys": "复制密钥失败",
    "Failed to copy model names": "复制模型名称失败",
    "Failed to copy to clipboard": "复制到剪贴板失败",
+    "Failed to create account": "创建账户失败",
    "Failed to create API key": "创建API密钥失败",
    "Failed to create channel": "创建渠道失败",
    "Failed to create deployment": "创建部署失败",
@@ -1753,6 +1755,8 @@
    "Failed to load key status": "加载密钥状态失败",
    "Failed to load logs": "加载日志失败",
    "Failed to load Passkey status": "加载 Passkey 状态失败",
+    "Failed to load playground groups": "加载 playground 分组失败",
+    "Failed to load playground models": "加载 playground 模型失败",
    "Failed to load profile": "加载个人资料失败",
    "Failed to load redemption codes": "加载兑换码失败",
    "Failed to load setup data": "无法加载设置数据",
@@ -1779,7 +1783,9 @@
    "Failed to search API keys": "搜索 API 密钥失败",
    "Failed to search redemption codes": "搜索兑换码失败",
    "Failed to search users": "搜索用户失败",
+    "Failed to send reset email": "发送重置邮件失败",
    "Failed to send verification code": "发送验证码失败",
+    "Failed to send verification email": "发送验证邮件失败",
    "Failed to set tag": "设置标签失败",
    "Failed to setup 2FA": "设置 2FA 失败",
    "Failed to start {{provider}} login": "启动 {{provider}} 登录失败",
@@ -1822,6 +1828,7 @@
    "Fee": "扣费",
    "Fee Amount": "扣费金额",
    "Fetch available models for:": "获取可用模型：",
+    "Fetch available models from upstream": "从上游获取可用模型",
    "Fetch from Upstream": "从上游获取",
    "Fetch Models": "获取模型",
    "Fetched {{count}} model(s) from upstream": "从上游获取了 {{count}} 个模型",
@@ -2445,10 +2452,12 @@
    "Maximum 500 characters. Supports Markdown and HTML.": "最多 500 个字符。支持 Markdown 和 HTML。",
    "Maximum check-in quota": "签到最大额度",
    "Maximum input window": "最大输入窗口",
+    "Maximum number of tokens each user can create. Default 1000. Setting too large may affect performance.": "每个用户可创建的最大令牌数量。默认 1000。设置过大可能会影响性能。",
    "Maximum number of tokens in the response": "响应中最大 token 数",
    "Maximum quota amount awarded for check-in": "签到奖励的最大额度",
    "Maximum tokens including hidden reasoning tokens": "最大 token 数（含隐藏的推理 token）",
    "Maximum tokens per response": "单次响应最大 token 数",
+    "Maximum tokens per user": "每个用户的最大令牌数",
    "maxRequests ≥ 0, maxSuccess ≥ 1, both ≤ 2,147,483,647": "maxRequests ≥ 0, maxSuccess ≥ 1，两者均 ≤ 2,147,483,647",
    "May be used for training by upstream provider": "可能被上游提供商用于训练",
    "Media pricing": "媒体定价",
@@ -2517,7 +2526,9 @@
    "Model Mapping (JSON)": "模型映射 (JSON)",
    "Model Mapping must be a JSON object like": "模型映射必须是如下所示的 JSON 对象",
    "Model mapping must be a JSON object with string values": "模型映射必须是值为字符串的 JSON 对象",
+    "Model mapping must be a valid JSON object": "模型映射必须是有效的 JSON 对象",
    "Model mapping must be valid JSON": "模型映射必须是有效的 JSON",
+    "Model mapping must be valid JSON format": "模型映射必须是有效的 JSON 格式",
    "Model mapping values must be strings": "模型映射的值必须是字符串",
    "Model name": "模型名称",
    "Model Name": "模型名称",
@@ -2748,6 +2759,7 @@
    "No missing models found.": "未找到缺失的模型。",
    "No model found.": "未找到模型。",
    "No model mappings configured. Click \"Add Mapping\" to get started.": "未配置模型映射。点击“添加映射”即可开始使用。",
+    "No model price changes to save": "没有模型价格变更需要保存",
    "No models available": "没有可用的模型",
    "No models available in this category": "该分类下没有可用模型",
    "No models available. Create your first model to get started.": "没有可用的模型。创建您的第一个模型即可开始使用。",
@@ -2760,6 +2772,7 @@
    "No models match the selected filters": "没有匹配筛选条件的模型",
    "No models match your current filters.": "没有模型匹配您当前的筛选条件。",
    "No models match your search": "没有匹配的模型",
+    "No models matched your search.": "没有匹配搜索的模型",
    "No models selected": "未选择模型",
    "No models to add": "无待新增模型",
    "No models to copy": "没有模型可复制",
@@ -3072,6 +3085,7 @@
    "Password Login": "密码登录",
    "Password must be at least 8 characters": "密码必须至少 8 个字符",
    "Password must be at least 8 characters long": "密码必须至少 8 个字符长",
+    "Password must be between 8 and 20 characters": "密码长度必须在 8 到 20 个字符之间",
    "Password Registration": "密码注册",
    "Password reset and copied to clipboard: {{password}}": "密码已重置并复制到剪贴板：{{password}}",
    "Password reset: {{password}}": "密码已重置：{{password}}",
@@ -3323,6 +3337,7 @@
    "Prompt Details": "提示词详情",
    "Prompt price ($/1M tokens)": "提示词价格（美元/100 万 token）",
    "Proprietary": "商业闭源",
+    "Protect login and registration with Cloudflare Turnstile": "使用 Cloudflare Turnstile 保护登录和注册",
    "Provide a JSON object where each key maps to an endpoint definition.": "提供一个 JSON 对象，其中每个键映射到一个端点定义。",
    "Provide a valid URL starting with http:// or https://": "请提供以 http:// 或 https:// 开头的有效 URL",
    "Provide Markdown, HTML, or an external URL for the privacy policy": "提供 Markdown、HTML 或外部 URL 作为隐私政策",
@@ -3860,6 +3875,7 @@
    "Send a request": "发送请求",
    "Send code": "发送验证码",
    "Send email alerts when a user falls below this quota": "当用户低于此配额时发送电子邮件警报",
+    "Send reset email": "发送重置邮件",
    "Sending...": "发送中...",
    "Sensitive Words": "敏感词",
    "Sent the API key to FluentRead.": "API 密钥已发送至 FluentRead。",
@@ -4240,6 +4256,7 @@
    "This action cannot be undone.": "此操作无法撤消。",
    "This action cannot be undone. This will permanently delete your account and remove all your data from our servers.": "此操作无法撤消。这将永久删除您的账户并从我们的服务器中移除您的所有数据。",
    "This action will permanently remove 2FA protection from your account.": "此操作将永久移除您账户的 2FA 保护。",
+    "This channel has no configured models.": "该渠道没有配置模型。",
    "This channel is not an Ollama channel.": "该渠道不是 Ollama 渠道。",
    "This channel type does not support fetching models": "此渠道类型不支持获取模型",
    "This channel type requires additional configuration": "此渠道类型需要填写额外配置",
@@ -4326,6 +4343,7 @@
    "Token Endpoint (Optional)": "Token 端点（可选）",
    "Token estimator": "Token 估算器",
    "Token group": "令牌分组",
+    "Token Limits": "令牌限制",
    "Token management": "令牌管理",
    "Token Management": "令牌管理",
    "Token Mgmt": "令牌管理",
@@ -4524,6 +4542,7 @@
    "Updated system setting {{key}}": "修改系统设置 {{key}}",
    "Updated user {{username}} (ID: {{id}})": "更新用户 {{username}}（ID: {{id}}）",
    "Updating all channel balances. This may take a while. Please refresh to see results.": "正在更新所有渠道余额。这可能需要一段时间。请刷新以查看结果。",
+    "Updating...": "更新中...",
    "Upgrade Group": "升级分组",
    "Upgrade plaintext SMTP connection with STARTTLS before authentication": "在身份验证前使用 STARTTLS 升级明文 SMTP 连接",
    "Upload": "上传",
@@ -4728,6 +4747,7 @@
    "Visual Parameter Override": "可视化参数覆盖",
    "VolcEngine": "火山方舟",
    "vs. previous": "相较上期",
+    "Waffo": "Waffo",
    "Waffo Aggregator Gateway": "Waffo 聚合网关",
    "Waffo Pancake Dashboard": "Waffo Pancake 控制台",
    "Waffo Pancake MoR": "Waffo Pancake MoR",