refactor(core): align with cordis spatiotemporal composability architecture

- Purify core micro-kernel by removing context hardcoded helpers and reverse dependencies
- Eliminate init() side effects in infra plugins with reversible lifecycle disposal
- Completely isolate plugins by removing cross-plugin imports and using core/contracts
- Introduce TaskService and RiskControlService contracts for unified cross-plugin APIs
- Regenerate Swagger documentation and update developer guide matrix
- Achieve 0 violations in check_cordis_architecture.sh and 100% test pass

backend/plugins/domain/auth/repository.go

@@ -5,14 +5,64 @@ package auth
 
 import (
 	"context"
+	"sync"
 
-	db "Wavelet/plugins/infra/database"
+	"gorm.io/gorm"
+
+	"Wavelet/core"
+	"Wavelet/core/contracts"
 )
 
+var (
+	dbMu     sync.RWMutex
+	dbSvc    contracts.DBService
+	cacheMu  sync.RWMutex
+	cacheSvc contracts.CacheService
+)
+
+func setDBService(s contracts.DBService) {
+	dbMu.Lock()
+	defer dbMu.Unlock()
+	dbSvc = s
+}
+
+func setCacheService(s contracts.CacheService) {
+	cacheMu.Lock()
+	defer cacheMu.Unlock()
+	cacheSvc = s
+}
+
+func getDB(ctx context.Context) *gorm.DB {
+	if c, ok := ctx.(*core.Context); ok && c != nil {
+		if s, err := core.Inject[contracts.DBService](c); err == nil && s != nil {
+			return s.DB(ctx)
+		}
+	}
+	dbMu.RLock()
+	s := dbSvc
+	dbMu.RUnlock()
+	if s != nil {
+		return s.DB(ctx)
+	}
+	return nil
+}
+
+func getCache(ctx context.Context) contracts.CacheService {
+	if c, ok := ctx.(*core.Context); ok && c != nil {
+		if s, err := core.Inject[contracts.CacheService](c); err == nil && s != nil {
+			return s
+		}
+	}
+	cacheMu.RLock()
+	s := cacheSvc
+	cacheMu.RUnlock()
+	return s
+}
+
 // GetAuthSourceByID 根据 ID 获取认证源
 func GetAuthSourceByID(ctx context.Context, id uint64) (*AuthSource, error) {
 	var src AuthSource
-	if err := db.DB(ctx).First(&src, id).Error; err != nil {
+	if err := getDB(ctx).First(&src, id).Error; err != nil {
 		return nil, err
 	}
 	return &src, nil
@@ -21,7 +71,7 @@ func GetAuthSourceByID(ctx context.Context, id uint64) (*AuthSource, error) {
 // GetAuthSourceByName 根据名称获取认证源
 func GetAuthSourceByName(ctx context.Context, name string) (*AuthSource, error) {
 	var src AuthSource
-	if err := db.DB(ctx).Where("name = ?", name).First(&src).Error; err != nil {
+	if err := getDB(ctx).Where("name = ?", name).First(&src).Error; err != nil {
 		return nil, err
 	}
 	return &src, nil
@@ -30,7 +80,7 @@ func GetAuthSourceByName(ctx context.Context, name string) (*AuthSource, error)
 // ListActiveAuthSources 获取所有启用的认证源
 func ListActiveAuthSources(ctx context.Context) ([]AuthSource, error) {
 	var sources []AuthSource
-	if err := db.DB(ctx).Where("is_active = ?", true).Order("id ASC").Find(&sources).Error; err != nil {
+	if err := getDB(ctx).Where("is_active = ?", true).Order("id ASC").Find(&sources).Error; err != nil {
 		return nil, err
 	}
 	return sources, nil
@@ -49,7 +99,7 @@ func GetAuthSourceByNameCached(ctx context.Context, name string) (*AuthSource, e
 // FindExternalAccount 查询指定认证源的外部账号绑定
 func FindExternalAccount(ctx context.Context, authSourceID uint64, externalID string) (*ExternalAccount, error) {
 	var account ExternalAccount
-	if err := db.DB(ctx).Where("auth_source_id = ? AND external_id = ?", authSourceID, externalID).First(&account).Error; err != nil {
+	if err := getDB(ctx).Where("auth_source_id = ? AND external_id = ?", authSourceID, externalID).First(&account).Error; err != nil {
 		return nil, err
 	}
 	return &account, nil
@@ -57,13 +107,13 @@ func FindExternalAccount(ctx context.Context, authSourceID uint64, externalID st
 
 // BindExternalAccount 绑定外部账号
 func BindExternalAccount(ctx context.Context, account *ExternalAccount) error {
-	return db.DB(ctx).Create(account).Error
+	return getDB(ctx).Create(account).Error
 }
 
 // ListExternalAccountsByUserID 获取用户绑定的所有外部账号
 func ListExternalAccountsByUserID(ctx context.Context, userID uint64) ([]ExternalAccount, error) {
 	var accounts []ExternalAccount
-	if err := db.DB(ctx).Where("user_id = ?", userID).Find(&accounts).Error; err != nil {
+	if err := getDB(ctx).Where("user_id = ?", userID).Find(&accounts).Error; err != nil {
 		return nil, err
 	}
 	return accounts, nil
@@ -71,5 +121,5 @@ func ListExternalAccountsByUserID(ctx context.Context, userID uint64) ([]Externa
 
 // UnbindExternalAccount 解绑外部账号
 func UnbindExternalAccount(ctx context.Context, id uint64, userID uint64) error {
-	return db.DB(ctx).Where("id = ? AND user_id = ?", id, userID).Delete(&ExternalAccount{}).Error
+	return getDB(ctx).Where("id = ? AND user_id = ?", id, userID).Delete(&ExternalAccount{}).Error
 }