feat(cache): 开启缓存默认仅缓存标准静态资源

路由缓存策略新增 static（内置扩展名，不含 HTML）与 all；
存量 url 规范为 all。OpenResty 渲染与代理路由 UI 同步。

internal/apps/openflare/proxy_route/helpers.go

@@ -25,7 +25,9 @@ var proxyHeaderKeyPattern = regexp.MustCompile(`^[A-Za-z0-9_-]+$`)
 var proxyRouteLimitRatePattern = regexp.MustCompile(`^\d+[kKmM]?$`)
 
 const (
-	proxyRouteCachePolicyURL        = "url"
+	proxyRouteCachePolicyStatic     = "static"
+	proxyRouteCachePolicyAll        = "all"
+	proxyRouteCachePolicyURL        = "url" // legacy alias of all
 	proxyRouteCachePolicySuffix     = "suffix"
 	proxyRouteCachePolicyPathPrefix = "path_prefix"
 	proxyRouteCachePolicyPathExact  = "path_exact"
@@ -438,11 +440,18 @@ func normalizeCachePolicy(enabled bool, raw string) string {
 	if !enabled {
 		return ""
 	}
-	policy := strings.TrimSpace(raw)
-	if policy == "" {
-		return proxyRouteCachePolicyURL
+	policy := strings.TrimSpace(strings.ToLower(raw))
+	switch policy {
+	case "", proxyRouteCachePolicyStatic:
+		return proxyRouteCachePolicyStatic
+	case proxyRouteCachePolicyURL, proxyRouteCachePolicyAll:
+		// Legacy url is normalized to all (full GET allow after security bypass).
+		return proxyRouteCachePolicyAll
+	case proxyRouteCachePolicySuffix, proxyRouteCachePolicyPathPrefix, proxyRouteCachePolicyPathExact:
+		return policy
+	default:
+		return policy
 	}
-	return policy
 }
 
 func normalizeCacheRules(enabled bool, rawPolicy string, rules []string) ([]string, error) {
@@ -451,7 +460,7 @@ func normalizeCacheRules(enabled bool, rawPolicy string, rules []string) ([]stri
 	}
 	policy := normalizeCachePolicy(enabled, rawPolicy)
 	switch policy {
-	case proxyRouteCachePolicyURL:
+	case proxyRouteCachePolicyStatic, proxyRouteCachePolicyAll, proxyRouteCachePolicyURL:
 		return []string{}, nil
 	case proxyRouteCachePolicySuffix:
 		return normalizeCacheSuffixRules(rules)

internal/apps/openflare/proxy_route/logics_test.go

@@ -80,3 +80,23 @@ func TestCreateProxyRouteHTTPSRequiresCoveringCertificate(t *testing.T) {
 	_, err := CreateProxyRoute(ctx, Input{SiteName: "api", ZoneDomainIDs: []uint{domain.ID}, OriginURL: "http://origin.example.com:8080", EnableHTTPS: true})
 	require.EqualError(t, err, errProxyRouteCertRequired)
 }
+
+func TestNormalizeCachePolicyDefaultsAndLegacy(t *testing.T) {
+	assert.Equal(t, "", normalizeCachePolicy(false, "static"))
+	assert.Equal(t, proxyRouteCachePolicyStatic, normalizeCachePolicy(true, ""))
+	assert.Equal(t, proxyRouteCachePolicyStatic, normalizeCachePolicy(true, "static"))
+	assert.Equal(t, proxyRouteCachePolicyAll, normalizeCachePolicy(true, "url"))
+	assert.Equal(t, proxyRouteCachePolicyAll, normalizeCachePolicy(true, "all"))
+	assert.Equal(t, proxyRouteCachePolicySuffix, normalizeCachePolicy(true, "suffix"))
+
+	rules, err := normalizeCacheRules(true, "url", []string{"css"})
+	require.NoError(t, err)
+	assert.Empty(t, rules)
+
+	rules, err = normalizeCacheRules(true, "static", nil)
+	require.NoError(t, err)
+	assert.Empty(t, rules)
+
+	_, err = normalizeCacheRules(true, "suffix", nil)
+	require.Error(t, err)
+}