M4b：ai_provider 删除手术①-⑥——神识全面接管模型出口

- ① 后端删除 app/ai_provider/（38 文件，含 anthropic/openai 格式、billing、audio、embedding）、services/ai_provider_admin.py、core/config/model_config.py、tests/ai_provider/（21 文件）
- ② 连带退役 application/agent/（旧 Agent 循环/steer/follow-up/确认注册表）、application/skill_executor.py、app/skills/（python skills 孤儿）、endpoints/audio.py、application/imports.py（ProviderManager 消费方）；settings 端点收敛为生成偏好
- ③ runs.py 修剪：AgentRunRegistry/steer/follow-up/confirmations 端点退役，保留 list/get/events/cancel/stream；safety 确认改为直接落库裁决（pending→approved/denied）
- ④ 前端删除：models 页、ModelGatewayView、gateway.ts、GatewayPanel（玄关）、ModelGatewayPanel/ModelStrategyForm、audio.ts/useVoiceInput、网关类型与 mock；设置页收敛为外观/语言/通知
- ⑤ 配置收敛：config/models|providers|pricing.example.yaml 归档 shenshi/config/；.env.example 删 provider keys/MODEL_ENDPOINT_POOL/MODEL_CONFIG_PATH，收敛 SHENSHI_*
- ⑥ 验收：rg 审计灵台 Provider SDK import 与 ai_provider 引用归零；后端 528 passed（2 个预存失败经 HEAD 复跑验证与本手术无关）、前端 type-check+201 passed、神识 go vet+test、BFF 4 passed

backend/app/api/v1/endpoints/safety.py

@@ -1,16 +1,20 @@
 """安全 API（api-spec §16）。
 
-audit-events 按人物/枢过滤查询审计时间线；confirmations 的 approve/deny 负责
-高风险工具确认：通过 ConfirmationRegistry 更新工具确认状态唤醒 Agent 循环。
+audit-events 按人物/枢过滤查询审计时间线；confirmations 的 approve/deny 落库裁决
+高风险工具确认（pending → approved/denied），客户端随后以 confirmed=True 重新调用。
 """
 
 from __future__ import annotations
 
-from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
+from datetime import UTC, datetime
 
-from app.api.v1.deps import get_confirmation_registry, get_optional_tool_runtime
-from app.application.agent.confirmation import ConfirmationRegistry
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
+from sqlalchemy import select, update
+
+from app.api.v1.deps import get_optional_tool_runtime
 from app.application.tool_runtime.runtime import ToolRuntime
+from app.db.session import AsyncSessionLocal
+from app.models.safety import PendingConfirmationRecord
 from app.schemas.admin import AuditEntry
 from app.schemas.common import Page
 from app.schemas.safety import (
@@ -102,47 +106,22 @@ def _cancelled(confirmation_id: str) -> dict[str, str]:
 
 
 @router.post("/confirmations/{confirmation_id}/approve")
-async def approve(
-    confirmation_id: str,
-    registry: ConfirmationRegistry = Depends(get_confirmation_registry),
-) -> dict[str, bool | str]:
-    """批准工具执行。通过 ConfirmationRegistry 唤醒等待的 Agent 循环。"""
-    from sqlalchemy import select
-
-    from app.db.session import AsyncSessionLocal
-    from app.models.safety import PendingConfirmationRecord
-
-    async with AsyncSessionLocal() as session:
-        result = await session.execute(
-            select(PendingConfirmationRecord).where(PendingConfirmationRecord.id == confirmation_id)
-        )
-        record = result.scalar_one_or_none()
-        if record is None or record.run_id is None:
-            raise _not_found(confirmation_id)
-
-    # 更新 resolution 并唤醒进程内 Event
-    ok = await registry.resolve(
-        record.run_id,
-        approved=True,
-        confirmation_id=confirmation_id,
-    )
-    if not ok:
-        raise _not_found(confirmation_id)
-
+async def approve(confirmation_id: str) -> dict[str, bool | str]:
+    """批准工具执行：pending 记录落库为 approved，客户端以 confirmed=True 重新调用。"""
+    record = await _resolve_confirmation_record(confirmation_id, approved=True)
     return {"status": "resolved", "approved": True, "run_id": record.run_id}
 
 
 @router.post("/confirmations/{confirmation_id}/deny")
-async def deny(
-    confirmation_id: str,
-    registry: ConfirmationRegistry = Depends(get_confirmation_registry),
-) -> dict[str, str]:
-    """拒绝工具执行。通过 ConfirmationRegistry 通知 Agent 循环。"""
-    from sqlalchemy import select
+async def deny(confirmation_id: str) -> dict[str, str]:
+    """拒绝工具执行：pending 记录落库为 denied。"""
+    await _resolve_confirmation_record(confirmation_id, approved=False)
+    return {"status": "cancelled", "confirmation_id": confirmation_id}
 
-    from app.db.session import AsyncSessionLocal
-    from app.models.safety import PendingConfirmationRecord
 
+async def _resolve_confirmation_record(
+    confirmation_id: str, *, approved: bool
+) -> PendingConfirmationRecord:
     async with AsyncSessionLocal() as session:
         result = await session.execute(
             select(PendingConfirmationRecord).where(PendingConfirmationRecord.id == confirmation_id)
@@ -151,12 +130,20 @@ async def deny(
         if record is None or record.run_id is None:
             raise _not_found(confirmation_id)
 
-    ok = await registry.resolve(
-        record.run_id,
-        approved=False,
-        confirmation_id=confirmation_id,
-    )
-    if not ok:
-        raise _not_found(confirmation_id)
-
-    return {"status": "cancelled", "confirmation_id": confirmation_id}
+    async with AsyncSessionLocal() as session:
+        stmt = (
+            update(PendingConfirmationRecord)
+            .where(
+                PendingConfirmationRecord.id == confirmation_id,
+                PendingConfirmationRecord.status == "pending",
+            )
+            .values(
+                status="approved" if approved else "denied",
+                resolved_at=datetime.now(UTC),
+            )
+        )
+        updated = await session.execute(stmt)
+        await session.commit()
+        if updated.rowcount == 0:
+            raise _not_found(confirmation_id)
+    return record