fix(web): 同步主庫與 bot_configs，並補齊風控加固路徑

- 多處 UpdateConfig 後同步 bot_configs 快照與歷史來源
- 新人風控一鍵加固（post_risk_check_harden）納入全量同步
- 版本 3.105.0-rc5、CHANGELOG

Made-with: Cursor

Author: Ryan Mitchell

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 所有重要的專案更新都會記錄在此檔案中。
 
+## [3.105.0-rc5] - 2026-04-15
+
+### Fixed
+- **主庫 `app_config` 與 `bot_configs` 一致性**：除 **`PUT /api/bots/:id/strategy`** 外，補齊僅寫入主快照而未同步 Bot 文檔表的路徑——**創建/刪除 Bot、對沖組、批量 funding_carry、整體配置 JSON/YAML、AI 應用配置、新人風控一鍵加固、運行中風控持久化、開倉管理持久化** 等；刪除 Bot/組時 **`removeBotConfigSnapshotBestEffort`** 清理 `bot_configs` 行。
+
+---
+
 ## [3.105.0-rc4] - 2026-04-15
 
 ### Fixed

main.go

@@ -45,7 +45,7 @@ import (
 )
 
 // Version 应用版本号
-var Version = "3.105.0-rc4"
+var Version = "3.105.0-rc5"
 
 // capitalDataSourceAdapter 资金數據源适配器
 type capitalDataSourceAdapter struct {

web/api.go

@@ -6359,6 +6359,7 @@ func applyAIConfig(c *gin.Context) {
 		respondError(c, http.StatusInternalServerError, "error.apply_config_failed", err)
 		return
 	}
+	syncAllBotConfigSnapshotsFromMain(cfg, "post_ai_apply_config")
 	SetGlobalConfig(cfg)
 	if configHotReloader != nil {
 		_, _ = configHotReloader.UpdateConfig(cfg)

web/api_bot_config.go

@@ -3,6 +3,7 @@ package web
 import (
 	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"net/http"
 	"strings"
@@ -16,6 +17,9 @@ import (
 
 var botConfigManager *config.BotConfigManager
 
+// errBotConfigSnapshotNotFound deleteBotConfigUnified 在無可刪文檔時返回，供調用方忽略。
+var errBotConfigSnapshotNotFound = errors.New("bot config snapshot not found")
+
 // InitBotConfigManager 初始化 Bot 配置文件管理器（僅作無主庫時的後備；權威持久化為 bot_configs 表）
 func InitBotConfigManager(baseDir string) error {
 	var err error
@@ -113,19 +117,52 @@ func resolveBotConfigFileFromUnifiedOrMain(botID string) (*config.BotConfigFile,
 }
 
 // syncBotConfigSnapshotFromMainBot 將主配置中的單個 Bot 寫入 bot_configs（與 app_config 對齊）。
-// 用於僅調用 fileConfigManager.UpdateConfig 的路徑（如 PUT /api/bots/:id/strategy），避免主庫快照與 bot_configs 文檔不一致。
-func syncBotConfigSnapshotFromMainBot(botID string, bc *config.BotConfig) error {
+// 用於僅調用 fileConfigManager.UpdateConfig 的路徑，避免主庫快照與 bot_configs 文檔不一致。
+// historySource 寫入 bot_config_history.source，便於審計（如 put_bot_strategy、post_config_update）。
+func syncBotConfigSnapshotFromMainBot(botID string, bc *config.BotConfig, historySource string) error {
 	if bc == nil || !botConfigStorageReady() {
 		return nil
 	}
+	if historySource == "" {
+		historySource = "sync_bot_config_snapshot"
+	}
 	bf := config.ConvertFromBotConfig(*bc)
 	bf.UpdatedAt = time.Now().Format(time.RFC3339)
 	if prev, err := loadBotConfigUnified(botID); err == nil && prev != nil && prev.CreatedAt != "" {
 		bf.CreatedAt = prev.CreatedAt
 	} else if bc.CreatedAt != "" {
 		bf.CreatedAt = bc.CreatedAt
 	}
-	return saveBotConfigUnified(bf, "web", "put_bot_strategy")
+	return saveBotConfigUnified(bf, "web", historySource)
+}
+
+// syncAllBotConfigSnapshotsFromMain 將 app_config.Bots 逐條同步到 bot_configs（整份主配置替換、AI 應用等）。
+func syncAllBotConfigSnapshotsFromMain(cfg *config.Config, historySource string) {
+	if cfg == nil || !botConfigStorageReady() {
+		return
+	}
+	if historySource == "" {
+		historySource = "sync_all_bot_configs"
+	}
+	for i := range cfg.Bots {
+		id := cfg.Bots[i].ID
+		if id == "" {
+			id = config.GenerateBotID(cfg.Bots[i].Exchange, cfg.Bots[i].Symbol, cfg.Bots[i].GetMarketType())
+		}
+		if err := syncBotConfigSnapshotFromMainBot(id, &cfg.Bots[i], historySource); err != nil {
+			logger.Error("同步 bot_configs 失敗 bot_id=%s: %v", id, err)
+		}
+	}
+}
+
+// removeBotConfigSnapshotBestEffort 刪除 bot_configs 行（刪除 Bot 時調用）；無行則忽略。
+func removeBotConfigSnapshotBestEffort(botID string) {
+	if botID == "" || !botConfigStorageReady() {
+		return
+	}
+	if err := deleteBotConfigUnified(botID); err != nil && !errors.Is(err, errBotConfigSnapshotNotFound) {
+		logger.Warn("刪除 bot_configs 失敗 (%s): %v", botID, err)
+	}
 }
 
 func saveBotConfigUnified(bf *config.BotConfigFile, operator, source string) error {
@@ -169,7 +206,7 @@ func deleteBotConfigUnified(botID string) error {
 		deleted = true
 	}
 	if !deleted {
-		return fmt.Errorf("not found")
+		return errBotConfigSnapshotNotFound
 	}
 	return nil
 }

web/api_bot_risk_control.go

@@ -284,7 +284,10 @@ func persistBotRiskControlToConfig(botID string, rc config.BotRiskControl) error
 				cfg.Bots[i].OpenPositionControl.BotRiskControl = &config.BotRiskControl{}
 			}
 			*cfg.Bots[i].OpenPositionControl.BotRiskControl = rc
-			return fileConfigManager.UpdateConfig(cfg)
+			if err := fileConfigManager.UpdateConfig(cfg); err != nil {
+				return err
+			}
+			return syncBotConfigSnapshotFromMainBot(botID, &cfg.Bots[i], "put_bot_risk_control_running")
 		}
 	}
 	return nil
@@ -306,7 +309,10 @@ func persistGridRiskControlToConfig(botID string, grc config.GridRiskControl) er
 		}
 		if id == botID {
 			cfg.Bots[i].GridRiskControl = grc
-			return fileConfigManager.UpdateConfig(cfg)
+			if err := fileConfigManager.UpdateConfig(cfg); err != nil {
+				return err
+			}
+			return syncBotConfigSnapshotFromMainBot(botID, &cfg.Bots[i], "put_bot_risk_control_running")
 		}
 	}
 	return nil

web/api_bots.go

@@ -477,6 +477,12 @@ func postBotCreate(c *gin.Context) {
 		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
 		return
 	}
+	last := &cfg.Bots[len(cfg.Bots)-1]
+	if err := syncBotConfigSnapshotFromMainBot(botID, last, "post_bot_create"); err != nil {
+		logger.Error("同步 bot_configs 失敗 (post_bot_create %s): %v", botID, err)
+		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
+		return
+	}
 	c.JSON(http.StatusOK, gin.H{"ok": true, "bot_id": botID})
 }
 
@@ -622,13 +628,31 @@ func deleteBot(c *gin.Context) {
 		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
 		return
 	}
+	removeBotConfigSnapshotBestEffort(botID)
 	if botManagerProvider != nil {
 		_ = botManagerProvider.StopBot(botID)
 	}
 	logger.Info("✅ [Bot刪除] 已移除 %s", botID)
 	c.JSON(http.StatusOK, gin.H{"ok": true, "bot_id": botID})
 }
 
+// botCfgByID 在主配置快照中按 ID 查找 Bot（與 GenerateBotID 回退規則一致）。
+func botCfgByID(cfg *config.Config, botID string) *config.BotConfig {
+	if cfg == nil || botID == "" {
+		return nil
+	}
+	for i := range cfg.Bots {
+		id := cfg.Bots[i].ID
+		if id == "" {
+			id = config.GenerateBotID(cfg.Bots[i].Exchange, cfg.Bots[i].Symbol, cfg.Bots[i].GetMarketType())
+		}
+		if id == botID {
+			return &cfg.Bots[i]
+		}
+	}
+	return nil
+}
+
 // postBotStop 停止 Bot
 // POST /api/bots/:id/stop
 func postBotStop(c *gin.Context) {
@@ -1072,6 +1096,16 @@ func postBotGroupCreate(c *gin.Context) {
 		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
 		return
 	}
+	if err := syncBotConfigSnapshotFromMainBot(spotID, botCfgByID(cfg, spotID), "post_bot_group_create"); err != nil {
+		logger.Error("同步 bot_configs 失敗 (spot %s): %v", spotID, err)
+		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
+		return
+	}
+	if err := syncBotConfigSnapshotFromMainBot(futuresID, botCfgByID(cfg, futuresID), "post_bot_group_create"); err != nil {
+		logger.Error("同步 bot_configs 失敗 (futures %s): %v", futuresID, err)
+		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
+		return
+	}
 	c.JSON(http.StatusOK, gin.H{"ok": true, "group_id": groupID, "bot_ids": []string{futuresID, spotID}})
 }
 
@@ -1158,6 +1192,9 @@ func deleteBotGroup(c *gin.Context) {
 		respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
 		return
 	}
+	for _, id := range botIDsToRemove {
+		removeBotConfigSnapshotBestEffort(id)
+	}
 	c.JSON(http.StatusOK, gin.H{"ok": true, "group_id": groupID})
 }
 
@@ -1349,7 +1386,7 @@ func putBotStrategy(c *gin.Context) {
 		if id != botID {
 			continue
 		}
-		if err := syncBotConfigSnapshotFromMainBot(botID, &cfg.Bots[i]); err != nil {
+		if err := syncBotConfigSnapshotFromMainBot(botID, &cfg.Bots[i], "put_bot_strategy"); err != nil {
 			logger.Error("同步 bot_configs 失敗 (bot_id=%s): %v", botID, err)
 			respondError(c, http.StatusInternalServerError, "error.config_save_failed", err)
 			return

web/api_config.go

@@ -482,6 +482,8 @@ func updateConfigHandler(c *gin.Context) {
 		return
 	}
 
+	syncAllBotConfigSnapshotsFromMain(newConfig, "post_config_update")
+
 	// 尝試热更新
 	if configHotReloader != nil {
 		_, err := configHotReloader.UpdateConfig(newConfig)
@@ -585,6 +587,8 @@ func updateConfigYAMLHandler(c *gin.Context) {
 		return
 	}
 
+	syncAllBotConfigSnapshotsFromMain(newConfig, "post_config_update_yaml")
+
 	// 尝試热更新
 	if configHotReloader != nil {
 		_, _ = configHotReloader.UpdateConfig(newConfig)

web/api_funding_carry.go

@@ -109,6 +109,25 @@ func postBatchCreateFunding(c *gin.Context) {
 			respondError(c, http.StatusInternalServerError, "error.config_save_failed")
 			return
 		}
+		for _, sym := range created {
+			for i := range cfg.Bots {
+				b := &cfg.Bots[i]
+				if b.MarketType != config.MarketTypeFundingCarry {
+					continue
+				}
+				if !strings.EqualFold(b.Exchange, req.Exchange) || b.Symbol != sym {
+					continue
+				}
+				bid := b.ID
+				if bid == "" {
+					bid = config.GenerateBotID(b.Exchange, b.Symbol, b.GetMarketType())
+				}
+				if err := syncBotConfigSnapshotFromMainBot(bid, b, "post_funding_carry_batch"); err != nil {
+					logger.Error("同步 bot_configs 失敗 funding_carry %s: %v", bid, err)
+				}
+				break
+			}
+		}
 
 		if botManagerProvider != nil {
 			for _, bc := range cfg.Bots {

web/api_opening_control.go

@@ -288,6 +288,7 @@ func putOpeningControlConfig(c *gin.Context) {
 	}
 
 	persisted := false
+	var syncedBotID string
 	botIDQ := strings.TrimSpace(c.Query("bot_id"))
 	if botIDQ != "" {
 		for i := range cfg.Bots {
@@ -297,6 +298,10 @@ func putOpeningControlConfig(c *gin.Context) {
 				b.OpenPositionControl.MaxPositionLayers = req.MaxPositionLayers
 				b.OpenPositionControl.ScheduleRules = req.ScheduleRules
 				b.OpenPositionControl.PeriodicRule = req.PeriodicRule
+				syncedBotID = b.ID
+				if syncedBotID == "" {
+					syncedBotID = config.GenerateBotID(b.Exchange, b.Symbol, b.GetMarketType())
+				}
 				persisted = true
 				break
 			}
@@ -315,6 +320,10 @@ func putOpeningControlConfig(c *gin.Context) {
 				b.OpenPositionControl.MaxPositionLayers = req.MaxPositionLayers
 				b.OpenPositionControl.ScheduleRules = req.ScheduleRules
 				b.OpenPositionControl.PeriodicRule = req.PeriodicRule
+				syncedBotID = b.ID
+				if syncedBotID == "" {
+					syncedBotID = config.GenerateBotID(b.Exchange, b.Symbol, b.GetMarketType())
+				}
 				persisted = true
 				break
 			}
@@ -345,6 +354,12 @@ func putOpeningControlConfig(c *gin.Context) {
 	if persisted {
 		if err := fileConfigManager.UpdateConfig(cfg); err != nil {
 			logger.Warn("⚠️ [開倉管理] 配置持久化失敗: %v", err)
+		} else if syncedBotID != "" {
+			if b := botCfgByID(cfg, syncedBotID); b != nil {
+				if err := syncBotConfigSnapshotFromMainBot(syncedBotID, b, "put_opening_control"); err != nil {
+					logger.Warn("⚠️ [開倉管理] 同步 bot_configs 失敗 (%s): %v", syncedBotID, err)
+				}
+			}
 		}
 	} else if !ok {
 		respondError(c, http.StatusNotFound, "error.symbol_not_found")

web/api_risk_check.go

@@ -295,6 +295,8 @@ func applyNewbieSecurityConfig(c *gin.Context) {
 		return
 	}
 
+	syncAllBotConfigSnapshotsFromMain(&newConfig, "post_risk_check_harden")
+
 	// 热更新
 	if configHotReloader != nil {
 		configHotReloader.UpdateConfig(&newConfig)