feat(storage): 统一二进制对象存储与公开错误

新增 Aliyun OSS 与 S3 协议、通道内重试和按优先级跨通道切换，保留 server-main 兼容与环境 OSS 内存通道。

将请求及结果中的 Base64、Data URI、Buffer、multipart 和内联二进制统一对象化，生产路径不再写入本机静态目录，历史本地资源仅保留只读兼容。

引入 PublicErrorV1 并统一 API、异步查询、兼容协议和失败回调的安全错误输出，同时补充迁移、管理端、指标、OpenAPI 与本地模拟验收。

验证：go test ./... -count=1；go vet ./...；pnpm lint；pnpm test；pnpm build；pnpm openapi；tests/ci/migrations-test.sh。

apps/api/internal/httpapi/kling_compat.go

@@ -14,6 +14,7 @@ import (
 
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/auth"
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/clients"
+	"github.com/easyai/easyai-ai-gateway/apps/api/internal/publicerror"
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/store"
 )
 
@@ -191,10 +192,6 @@ func (s *Server) createKlingCompatTask(w http.ResponseWriter, r *http.Request, v
 		}
 		task, err = s.waitForCompatibilitySubmission(r, task)
 		if err != nil {
-			if wire := clients.ErrorWireResponse(err); wireResponseMatches(wire, targetProtocol) {
-				writeWireResponse(w, wire)
-				return
-			}
 			writeKlingCompatError(w, statusFromRunError(err), err.Error(), clients.ErrorCode(err))
 			return
 		}
@@ -667,7 +664,9 @@ func klingV1TaskData(task store.GatewayTask) map[string]any {
 		"created_at": task.CreatedAt.UnixMilli(), "updated_at": task.UpdatedAt.UnixMilli(),
 	}
 	if task.ErrorMessage != "" || task.Error != "" {
-		data["task_status_msg"] = firstNonEmpty(task.ErrorMessage, task.Error)
+		standard := publicTaskError(task)
+		data["task_status_msg"] = standard.Message
+		data["error"] = standard
 	}
 	if watermarkInfo, ok := task.Request["watermark_info"].(map[string]any); ok {
 		data["watermark_info"] = watermarkInfo
@@ -698,7 +697,9 @@ func klingV2TaskData(task store.GatewayTask) map[string]any {
 		"external_id": task.ExternalTaskID,
 	}
 	if message := firstNonEmpty(task.ErrorMessage, task.Error); message != "" {
-		data["message"] = message
+		standard := publicTaskError(task)
+		data["message"] = standard.Message
+		data["error"] = standard
 	}
 	if outputs := klingV2Outputs(task); len(outputs) > 0 {
 		data["outputs"] = outputs
@@ -827,14 +828,14 @@ func decodeKlingJSON(r *http.Request, target any) error {
 }
 
 func writeKlingCompatError(w http.ResponseWriter, status int, message string, code string) {
-	if strings.TrimSpace(code) == "" {
-		code = "invalid_request"
-	}
-	writeJSON(w, status, map[string]any{
-		"code":       klingCompatErrorCode(status),
-		"message":    message,
-		"request_id": "",
-		"error":      code,
+	standard := publicerror.FromFields(code, message, status, status == http.StatusRequestTimeout || status == http.StatusTooManyRequests || status >= 500)
+	publicerror.Observe(standard)
+	writeJSON(w, standard.HTTPStatus, map[string]any{
+		"code":         klingCompatErrorCode(standard.HTTPStatus),
+		"message":      standard.Message,
+		"request_id":   "",
+		"error":        standard.Code,
+		"public_error": standard,
 	})
 }