refactor: 大规模模块拆分与重组，新增 aether-admin crate

- 新建独立 aether-admin crate 承载 admin 相关共享契约与纯辅助函数
- 拆分 ai_pipeline 下 kiro/private_envelope/conversion/planner 等大文件为子模块目录
- 重组 admin handlers 各业务域（billing/oauth/provider/system/users 等）为目录结构，移除 shared.rs/builders.rs 等反模式
- 移除 ai_pipeline runtime adapters 旧实现（claude/openai/gemini/kiro/vertex/antigravity 等），改由 provider transport 统一承载
- 移除 control_facade/execution_facade/auth_snapshot_facade 等冗余 facade 层
- 拆分 query/billing 与 query/monitoring 模块、state/runtime/payments 与 security 模块
- 扩展架构测试覆盖 admin_billing/admin_model/admin_users 等新模块
- 删除 docs/architecture/refactor-execution-plan.md 已完成的执行计划文档

apps/aether-gateway/src/handlers/admin/provider/pool/runtime/keys.rs

@@ -0,0 +1,54 @@
+use aether_data::redis::RedisKeyspace;
+
+pub(super) fn pool_sticky_pattern(keyspace: &RedisKeyspace, provider_id: &str) -> String {
+    keyspace.key(&format!("ap:{provider_id}:sticky:*"))
+}
+
+pub(super) fn pool_lru_key(keyspace: &RedisKeyspace, provider_id: &str) -> String {
+    keyspace.key(&format!("ap:{provider_id}:lru"))
+}
+
+pub(super) fn pool_cooldown_key(
+    keyspace: &RedisKeyspace,
+    provider_id: &str,
+    key_id: &str,
+) -> String {
+    keyspace.key(&format!("ap:{provider_id}:cooldown:{key_id}"))
+}
+
+pub(super) fn pool_cooldown_index_key(keyspace: &RedisKeyspace, provider_id: &str) -> String {
+    keyspace.key(&format!("ap:{provider_id}:cooldown_idx"))
+}
+
+pub(super) fn pool_cost_key(keyspace: &RedisKeyspace, provider_id: &str, key_id: &str) -> String {
+    keyspace.key(&format!("ap:{provider_id}:cost:{key_id}"))
+}
+
+pub(super) fn parse_pool_cost_member(member: &str) -> u64 {
+    member
+        .rsplit_once(':')
+        .and_then(|(_, suffix)| suffix.parse::<u64>().ok())
+        .unwrap_or(0)
+}
+
+pub(super) fn pool_cooldown_keys(
+    keyspace: &RedisKeyspace,
+    provider_id: &str,
+    key_ids: &[String],
+) -> Vec<String> {
+    key_ids
+        .iter()
+        .map(|key_id| pool_cooldown_key(keyspace, provider_id, key_id))
+        .collect()
+}
+
+pub(super) fn pool_cost_keys(
+    keyspace: &RedisKeyspace,
+    provider_id: &str,
+    key_ids: &[String],
+) -> Vec<String> {
+    key_ids
+        .iter()
+        .map(|key_id| pool_cost_key(keyspace, provider_id, key_id))
+        .collect()
+}

apps/aether-gateway/src/handlers/admin/provider/pool/runtime/mod.rs

@@ -0,0 +1,13 @@
+mod keys;
+mod mutations;
+mod reads;
+mod status;
+
+pub(crate) use self::mutations::{
+    clear_admin_provider_pool_cooldown, reset_admin_provider_pool_cost,
+};
+pub(crate) use self::reads::{
+    read_admin_provider_pool_cooldown_count, read_admin_provider_pool_cooldown_counts,
+    read_admin_provider_pool_cooldown_key_ids, read_admin_provider_pool_runtime_state,
+};
+pub(crate) use self::status::build_admin_provider_pool_status_payload;

apps/aether-gateway/src/handlers/admin/provider/pool/runtime/mutations.rs

@@ -0,0 +1,39 @@
+use super::keys::{pool_cooldown_index_key, pool_cooldown_key};
+use crate::handlers::admin::request::AdminAppState;
+use tracing::warn;
+
+pub(crate) async fn clear_admin_provider_pool_cooldown(
+    state: &AdminAppState<'_>,
+    provider_id: &str,
+    key_id: &str,
+) {
+    let Some(runner) = state.redis_kv_runner() else {
+        return;
+    };
+    let Ok(mut connection) = runner.client().get_multiplexed_async_connection().await else {
+        warn!("gateway admin provider pool: failed to connect redis to clear cooldown for key {key_id}");
+        return;
+    };
+    let keyspace = runner.keyspace().clone();
+    let _: Result<(), _> = redis::pipe()
+        .cmd("DEL")
+        .arg(pool_cooldown_key(&keyspace, provider_id, key_id))
+        .ignore()
+        .cmd("SREM")
+        .arg(pool_cooldown_index_key(&keyspace, provider_id))
+        .arg(key_id)
+        .ignore()
+        .query_async(&mut connection)
+        .await;
+}
+
+pub(crate) async fn reset_admin_provider_pool_cost(
+    state: &AdminAppState<'_>,
+    provider_id: &str,
+    key_id: &str,
+) {
+    let Some(runner) = state.redis_kv_runner() else {
+        return;
+    };
+    let _ = runner.del(&format!("ap:{provider_id}:cost:{key_id}")).await;
+}

apps/aether-gateway/src/handlers/admin/provider/pool/runtime/reads.rs

@@ -1,41 +1,16 @@
-use super::config::admin_provider_pool_config;
+use super::keys::{
+    parse_pool_cost_member, pool_cooldown_index_key, pool_cooldown_keys, pool_cost_keys,
+    pool_lru_key, pool_sticky_pattern,
+};
 use crate::handlers::admin::provider::shared::support::{
     AdminProviderPoolConfig, AdminProviderPoolRuntimeState, ADMIN_PROVIDER_POOL_SCAN_BATCH,
 };
-use crate::{AppState, GatewayError};
-use aether_data::redis::{RedisKeyspace, RedisKvRunner};
-use serde_json::json;
+use crate::GatewayError;
+use aether_data::redis::RedisKvRunner;
 use std::collections::BTreeMap;
 use std::time::{SystemTime, UNIX_EPOCH};
 use tracing::warn;
 
-fn pool_sticky_pattern(keyspace: &RedisKeyspace, provider_id: &str) -> String {
-    keyspace.key(&format!("ap:{provider_id}:sticky:*"))
-}
-
-fn pool_lru_key(keyspace: &RedisKeyspace, provider_id: &str) -> String {
-    keyspace.key(&format!("ap:{provider_id}:lru"))
-}
-
-fn pool_cooldown_key(keyspace: &RedisKeyspace, provider_id: &str, key_id: &str) -> String {
-    keyspace.key(&format!("ap:{provider_id}:cooldown:{key_id}"))
-}
-
-fn pool_cooldown_index_key(keyspace: &RedisKeyspace, provider_id: &str) -> String {
-    keyspace.key(&format!("ap:{provider_id}:cooldown_idx"))
-}
-
-fn pool_cost_key(keyspace: &RedisKeyspace, provider_id: &str, key_id: &str) -> String {
-    keyspace.key(&format!("ap:{provider_id}:cost:{key_id}"))
-}
-
-fn parse_pool_cost_member(member: &str) -> u64 {
-    member
-        .rsplit_once(':')
-        .and_then(|(_, suffix)| suffix.parse::<u64>().ok())
-        .unwrap_or(0)
-}
-
 async fn scan_redis_keys(
     connection: &mut redis::aio::MultiplexedConnection,
     pattern: &str,
@@ -61,24 +36,6 @@ async fn scan_redis_keys(
     Ok(keys)
 }
 
-fn pool_cooldown_keys(
-    keyspace: &RedisKeyspace,
-    provider_id: &str,
-    key_ids: &[String],
-) -> Vec<String> {
-    key_ids
-        .iter()
-        .map(|key_id| pool_cooldown_key(keyspace, provider_id, key_id))
-        .collect()
-}
-
-fn pool_cost_keys(keyspace: &RedisKeyspace, provider_id: &str, key_ids: &[String]) -> Vec<String> {
-    key_ids
-        .iter()
-        .map(|key_id| pool_cost_key(keyspace, provider_id, key_id))
-        .collect()
-}
-
 pub(crate) async fn read_admin_provider_pool_cooldown_counts(
     runner: &RedisKvRunner,
     provider_ids: &[String],
@@ -304,106 +261,3 @@ pub(crate) async fn read_admin_provider_pool_cooldown_key_ids(
         .await
         .unwrap_or_default()
 }
-
-pub(crate) async fn build_admin_provider_pool_status_payload(
-    state: &AppState,
-    provider_id: &str,
-) -> Option<serde_json::Value> {
-    if !state.has_provider_catalog_data_reader() {
-        return None;
-    }
-
-    let provider = state
-        .read_provider_catalog_providers_by_ids(&[provider_id.to_string()])
-        .await
-        .ok()
-        .and_then(|mut providers| providers.drain(..).next())?;
-    let Some(pool_config) = admin_provider_pool_config(&provider) else {
-        return Some(json!({
-            "provider_id": provider.id,
-            "provider_name": provider.name,
-            "pool_enabled": false,
-            "total_keys": 0,
-            "total_sticky_sessions": 0,
-            "keys": [],
-        }));
-    };
-
-    let keys = state
-        .list_provider_catalog_keys_by_provider_ids(std::slice::from_ref(&provider.id))
-        .await
-        .ok()
-        .unwrap_or_default();
-    let key_ids = keys.iter().map(|key| key.id.clone()).collect::<Vec<_>>();
-    let runtime = match state.redis_kv_runner() {
-        Some(runner) => {
-            read_admin_provider_pool_runtime_state(&runner, &provider.id, &key_ids, pool_config)
-                .await
-        }
-        None => AdminProviderPoolRuntimeState::default(),
-    };
-    let key_payloads = keys
-        .into_iter()
-        .map(|key| {
-            let cooldown_reason = runtime.cooldown_reason_by_key.get(&key.id).cloned();
-            json!({
-                "key_id": key.id,
-                "key_name": key.name,
-                "is_active": key.is_active,
-                "cooldown_reason": cooldown_reason,
-                "cooldown_ttl_seconds": cooldown_reason
-                    .as_ref()
-                    .and_then(|_| runtime.cooldown_ttl_by_key.get(&key.id).copied()),
-                "cost_window_usage": runtime.cost_window_usage_by_key.get(&key.id).copied().unwrap_or(0),
-                "cost_limit": pool_config.cost_limit_per_key_tokens,
-                "sticky_sessions": runtime.sticky_sessions_by_key.get(&key.id).copied().unwrap_or(0),
-                "lru_score": runtime.lru_score_by_key.get(&key.id).copied(),
-            })
-        })
-        .collect::<Vec<_>>();
-
-    Some(json!({
-        "provider_id": provider.id,
-        "provider_name": provider.name,
-        "pool_enabled": true,
-        "total_keys": key_payloads.len(),
-        "total_sticky_sessions": runtime.total_sticky_sessions,
-        "keys": key_payloads,
-    }))
-}
-
-pub(crate) async fn clear_admin_provider_pool_cooldown(
-    state: &AppState,
-    provider_id: &str,
-    key_id: &str,
-) {
-    let Some(runner) = state.redis_kv_runner() else {
-        return;
-    };
-    let Ok(mut connection) = runner.client().get_multiplexed_async_connection().await else {
-        warn!("gateway admin provider pool: failed to connect redis to clear cooldown for key {key_id}");
-        return;
-    };
-    let keyspace = runner.keyspace().clone();
-    let _: Result<(), _> = redis::pipe()
-        .cmd("DEL")
-        .arg(pool_cooldown_key(&keyspace, provider_id, key_id))
-        .ignore()
-        .cmd("SREM")
-        .arg(pool_cooldown_index_key(&keyspace, provider_id))
-        .arg(key_id)
-        .ignore()
-        .query_async(&mut connection)
-        .await;
-}
-
-pub(crate) async fn reset_admin_provider_pool_cost(
-    state: &AppState,
-    provider_id: &str,
-    key_id: &str,
-) {
-    let Some(runner) = state.redis_kv_runner() else {
-        return;
-    };
-    let _ = runner.del(&format!("ap:{provider_id}:cost:{key_id}")).await;
-}

apps/aether-gateway/src/handlers/admin/provider/pool/runtime/status.rs

@@ -0,0 +1,72 @@
+use super::reads::read_admin_provider_pool_runtime_state;
+use crate::handlers::admin::provider::pool::config::admin_provider_pool_config;
+use crate::handlers::admin::provider::shared::support::AdminProviderPoolRuntimeState;
+use crate::handlers::admin::request::AdminAppState;
+use serde_json::json;
+
+pub(crate) async fn build_admin_provider_pool_status_payload(
+    state: &AdminAppState<'_>,
+    provider_id: &str,
+) -> Option<serde_json::Value> {
+    if !state.has_provider_catalog_data_reader() {
+        return None;
+    }
+
+    let provider = state
+        .read_provider_catalog_providers_by_ids(&[provider_id.to_string()])
+        .await
+        .ok()
+        .and_then(|mut providers| providers.drain(..).next())?;
+    let Some(pool_config) = admin_provider_pool_config(&provider) else {
+        return Some(json!({
+            "provider_id": provider.id,
+            "provider_name": provider.name,
+            "pool_enabled": false,
+            "total_keys": 0,
+            "total_sticky_sessions": 0,
+            "keys": [],
+        }));
+    };
+
+    let keys = state
+        .list_provider_catalog_keys_by_provider_ids(std::slice::from_ref(&provider.id))
+        .await
+        .ok()
+        .unwrap_or_default();
+    let key_ids = keys.iter().map(|key| key.id.clone()).collect::<Vec<_>>();
+    let runtime = match state.redis_kv_runner() {
+        Some(runner) => {
+            read_admin_provider_pool_runtime_state(&runner, &provider.id, &key_ids, pool_config)
+                .await
+        }
+        None => AdminProviderPoolRuntimeState::default(),
+    };
+    let key_payloads = keys
+        .into_iter()
+        .map(|key| {
+            let cooldown_reason = runtime.cooldown_reason_by_key.get(&key.id).cloned();
+            json!({
+                "key_id": key.id,
+                "key_name": key.name,
+                "is_active": key.is_active,
+                "cooldown_reason": cooldown_reason,
+                "cooldown_ttl_seconds": cooldown_reason
+                    .as_ref()
+                    .and_then(|_| runtime.cooldown_ttl_by_key.get(&key.id).copied()),
+                "cost_window_usage": runtime.cost_window_usage_by_key.get(&key.id).copied().unwrap_or(0),
+                "cost_limit": pool_config.cost_limit_per_key_tokens,
+                "sticky_sessions": runtime.sticky_sessions_by_key.get(&key.id).copied().unwrap_or(0),
+                "lru_score": runtime.lru_score_by_key.get(&key.id).copied(),
+            })
+        })
+        .collect::<Vec<_>>();
+
+    Some(json!({
+        "provider_id": provider.id,
+        "provider_name": provider.name,
+        "pool_enabled": true,
+        "total_keys": key_payloads.len(),
+        "total_sticky_sessions": runtime.total_sticky_sessions,
+        "keys": key_payloads,
+    }))
+}