refactor: 大规模模块拆分与重组，新增 aether-admin crate

- 新建独立 aether-admin crate 承载 admin 相关共享契约与纯辅助函数 - 拆分 ai_pipeline 下 kiro/private_envelope/conversion/planner 等大文件为子模块目录 - 重组 admin handlers 各业务域（billing/oauth/provider/system/users 等）为目录结构，移除 shared.rs/builders.rs 等反模式 - 移除 ai_pipeline runtime adapters 旧实现（claude/openai/gemini/kiro/vertex/antigravity 等），改由 provider transport 统一承载 - 移除 control_facade/execution_facade/auth_snapshot_facade 等冗余 facade 层 - 拆分 query/billing 与 query/monitoring 模块、state/runtime/payments 与 security 模块 - 扩展架构测试覆盖 admin_billing/admin_model/admin_users 等新模块 - 删除 docs/architecture/refactor-execution-plan.md 已完成的执行计划文档
2026-10-10 11:19:50 +08:00 · 2026-04-09 00:10:38 +08:00
parent 4fb9882b54
commit 4fc95adfb9
663 changed files with 48471 additions and 40232 deletions
@@ -0,0 +1,116 @@
+use super::super::{build_admin_users_bad_request_response, format_optional_datetime_iso8601};
+use super::support::{
+    admin_user_id_from_detail_path, build_admin_user_payload, find_admin_export_user,
+};
+use crate::handlers::admin::request::{AdminAppState, AdminRequestContext};
+use crate::handlers::admin::shared::{query_param_optional_bool, query_param_value};
+use crate::GatewayError;
+use axum::{
+    body::Body,
+    http,
+    response::{IntoResponse, Response},
+    Json,
+};
+use serde_json::json;
+use std::collections::BTreeMap;
+
+pub(in super::super) async fn build_admin_list_users_response(
+    state: &AdminAppState<'_>,
+    request_context: &AdminRequestContext<'_>,
+) -> Result<Response<Body>, GatewayError> {
+    let skip = query_param_value(request_context.query_string(), "skip")
+        .and_then(|value| value.parse::<usize>().ok())
+        .unwrap_or(0);
+    let limit = query_param_value(request_context.query_string(), "limit")
+        .and_then(|value| value.parse::<usize>().ok())
+        .unwrap_or(100)
+        .clamp(1, 1000);
+    let role = query_param_value(request_context.query_string(), "role")
+        .map(|value| value.trim().to_ascii_lowercase())
+        .filter(|value| !value.is_empty());
+    let is_active = query_param_optional_bool(request_context.query_string(), "is_active");
+
+    let paged_rows = state
+        .list_export_users_page(&aether_data::repository::users::UserExportListQuery {
+            skip,
+            limit,
+            role: role.clone(),
+            is_active,
+        })
+        .await?;
+    let user_ids = paged_rows
+        .iter()
+        .map(|row| row.id.clone())
+        .collect::<Vec<_>>();
+    let auth_by_user_id = state
+        .list_user_auth_by_ids(&user_ids)
+        .await?
+        .into_iter()
+        .map(|user| (user.id.clone(), user))
+        .collect::<BTreeMap<_, _>>();
+    let wallet_by_user_id = state
+        .list_wallet_snapshots_by_user_ids(&user_ids)
+        .await?
+        .into_iter()
+        .filter_map(|wallet| wallet.user_id.clone().map(|user_id| (user_id, wallet)))
+        .collect::<BTreeMap<_, _>>();
+
+    let mut payload = Vec::with_capacity(paged_rows.len());
+    for row in paged_rows {
+        let auth = auth_by_user_id.get(&row.id);
+        let unlimited = wallet_by_user_id
+            .get(&row.id)
+            .is_some_and(|wallet| wallet.limit_mode.eq_ignore_ascii_case("unlimited"));
+        payload.push(json!({
+            "id": row.id,
+            "email": row.email,
+            "username": row.username,
+            "role": row.role,
+            "allowed_providers": row.allowed_providers,
+            "allowed_api_formats": row.allowed_api_formats,
+            "allowed_models": row.allowed_models,
+            "rate_limit": row.rate_limit,
+            "unlimited": unlimited,
+            "is_active": row.is_active,
+            "created_at": format_optional_datetime_iso8601(auth.as_ref().and_then(|user| user.created_at)),
+            "updated_at": serde_json::Value::Null,
+            "last_login_at": format_optional_datetime_iso8601(
+                auth.as_ref().and_then(|user| user.last_login_at),
+            ),
+        }));
+    }
+
+    Ok(Json(payload).into_response())
+}
+
+pub(in super::super) async fn build_admin_get_user_response(
+    state: &AdminAppState<'_>,
+    request_context: &AdminRequestContext<'_>,
+) -> Result<Response<Body>, GatewayError> {
+    let Some(user_id) = admin_user_id_from_detail_path(request_context.path()) else {
+        return Ok(build_admin_users_bad_request_response("缺少 user_id"));
+    };
+    let Some(user) = state.find_user_auth_by_id(&user_id).await? else {
+        return Ok((
+            http::StatusCode::NOT_FOUND,
+            Json(json!({ "detail": "用户不存在" })),
+        )
+            .into_response());
+    };
+
+    let wallet = state
+        .find_wallet(aether_data::repository::wallet::WalletLookupKey::UserId(
+            &user_id,
+        ))
+        .await?;
+    let export_row = find_admin_export_user(state, &user_id).await?;
+    let unlimited = wallet
+        .as_ref()
+        .is_some_and(|wallet| wallet.limit_mode.eq_ignore_ascii_case("unlimited"));
+    Ok(Json(build_admin_user_payload(
+        &user,
+        export_row.as_ref().and_then(|row| row.rate_limit),
+        unlimited,
+    ))
+    .into_response())
+}