refactor: 大规模模块拆分与代码精简，新增 ai-pipeline/data-contracts 独立 crate

- 新增 aether-ai-pipeline 和 aether-data-contracts crate，将 pipeline 逻辑与数据契约从 gateway 中解耦
- 重构 admin handlers：拆分单体模块为 auth/billing/endpoint/features/model/observability/provider/system 等独立子模块
- 合并 chat/cli 重复代码路径：精简 conversion、finalize、planner 中的 sync/chat/cli 分支
- 重构 scheduler/executor/data 层，引入 facade 模式降低模块间耦合
- 移除冗余的 intent 模块，将 plan_fallback/policy/stream_path/sync_path 迁移至 executor
- 前端适配：调整 admin API 调用和 provider 模型测试对话框

apps/aether-gateway/src/audit/admin.rs

@@ -91,7 +91,7 @@ pub(crate) fn emit_admin_audit(
             action,
             target_type,
             target_id = %target_id,
-            "admin mutation audit event"
+            "admin audit event"
         );
     } else {
         warn!(
@@ -111,7 +111,7 @@ pub(crate) fn emit_admin_audit(
             action,
             target_type,
             target_id = %target_id,
-            "admin mutation audit event"
+            "admin audit event"
         );
     }
 }

apps/aether-gateway/src/audit/http.rs

@@ -80,15 +80,13 @@ pub(crate) async fn get_request_candidate_trace(
     State(state): State<AppState>,
     Path(request_id): Path<String>,
     Query(query): Query<GetRequestCandidateTraceQuery>,
-) -> Result<
-    Json<crate::data::candidates::RequestCandidateTrace>,
-    axum::response::Response,
-> {
+) -> Result<Json<crate::data::candidates::RequestCandidateTrace>, axum::response::Response> {
     let attempted_only = query.attempted_only.unwrap_or(false);
     let trace = state
+        .data
         .read_request_candidate_trace(&request_id, attempted_only)
         .await
-        .map_err(IntoResponse::into_response)?;
+        .map_err(|err| GatewayError::Internal(err.to_string()).into_response())?;
 
     match trace {
         Some(trace) => Ok(Json(trace)),
@@ -108,15 +106,13 @@ pub(crate) async fn get_decision_trace(
     State(state): State<AppState>,
     Path(request_id): Path<String>,
     Query(query): Query<GetRequestCandidateTraceQuery>,
-) -> Result<
-    Json<crate::data::decision_trace::DecisionTrace>,
-    axum::response::Response,
-> {
+) -> Result<Json<crate::data::decision_trace::DecisionTrace>, axum::response::Response> {
     let attempted_only = query.attempted_only.unwrap_or(false);
     let trace = state
+        .data
         .read_decision_trace(&request_id, attempted_only)
         .await
-        .map_err(IntoResponse::into_response)?;
+        .map_err(|err| GatewayError::Internal(err.to_string()).into_response())?;
 
     match trace {
         Some(trace) => Ok(Json(trace)),
@@ -135,14 +131,12 @@ pub(crate) async fn get_decision_trace(
 pub(crate) async fn get_auth_api_key_snapshot(
     State(state): State<AppState>,
     Path((user_id, api_key_id)): Path<(String, String)>,
-) -> Result<
-    Json<crate::data::auth::GatewayAuthApiKeySnapshot>,
-    axum::response::Response,
-> {
+) -> Result<Json<crate::data::auth::GatewayAuthApiKeySnapshot>, axum::response::Response> {
     let snapshot = state
+        .data
         .read_auth_api_key_snapshot(&user_id, &api_key_id, current_unix_secs())
         .await
-        .map_err(IntoResponse::into_response)?;
+        .map_err(|err| GatewayError::Internal(err.to_string()).into_response())?;
 
     match snapshot {
         Some(snapshot) => Ok(Json(snapshot)),