feat(log): decouple log storage from ClickHouse with switchable logstore

- New internal/repository/logstore abstraction: exported domain interfaces
  (AccessLogStore/ObservabilityStore/UserAccessLogStore/StatusStore),
  config-driven provider (Active/Build/Migrating/SetConfigReader), GORM
  implementation for PostgreSQL/SQLite (incl. hourly rollups computed in
  real time, migration listers, PG partition maintenance), and a ClickHouse
  wrapper preserving the native batch path; repository facade delegates to
  logstore; import-lint test enforces apps never import analyticsrepo.
- ClickHouse is now optional: the log DB is either the main DB (postgres
  when database.enabled, else sqlite) or clickhouse; boot validation +
  first-run seed; log_database / log_db_migration are protected keys.
- New user task 切换日志数据库 (of_log_db_switch): freeze log writes,
  drain batch writers, copy all 6 raw log tables by id (preserving IDs)
  with target-partition pre-creation for PG, flip log_database on success,
  clear the freeze flag on failure.
- Per-store retention (log_retention_days_*) with expiry cleanup folded
  into the daily system_cleanup task; legacy database_auto_cleanup_* and
  of_database_auto_cleanup decommissioned.
- goose migrations: 6 log tables in PG (2 monthly-partitioned) + SQLite,
  retention config seeds, schedule cleanup; GET
  /api/v1/admin/status/log-database endpoint; frontend retention settings,
  switch-task UI and status badge; changelog and docs updated.

docs(plan): log database decoupling implementation plan

docs(design): log database decoupling design (ClickHouse optional)

internal/repository/analytics/access_log.go

@@ -38,6 +38,18 @@ func CountAccessLogs(ctx context.Context, filter AccessLogFilter) (uint64, error
 	return count, nil
 }
 
+// DeleteAllUserAccessLogs hard-deletes all user access logs via TRUNCATE.
+func DeleteAllUserAccessLogs(ctx context.Context) (int64, error) {
+	if err := userAccessLogConn(); err != nil {
+		return 0, err
+	}
+	outcome, err := truncateClickHouseTable(ctx, db.ChConn, analyticsmodel.UserAccessLog{}.TableName())
+	if err != nil {
+		return 0, err
+	}
+	return outcome.DeletedCount, nil
+}
+
 // ListAccessLogs returns paginated access logs and the total match count.
 func ListAccessLogs(ctx context.Context, filter AccessLogFilter, page, pageSize int) ([]analyticsmodel.UserAccessLog, uint64, error) {
 	clause, args, ok := buildUserAccessLogFilterClause(filter)

internal/repository/analytics/access_log_filter.go

@@ -6,21 +6,14 @@ package analytics
 import (
 	"fmt"
 	"strings"
-	"time"
+
+	analyticsmodel "github.com/Rain-kl/Wavelet/internal/model/analytics"
 )
 
 const userAccessLogFilterClauseCapacity = 4
 
 // AccessLogFilter scopes ClickHouse user access log queries.
-type AccessLogFilter struct {
-	// UserIDs filters by user IDs. nil means no user filter; an empty slice means no matches.
-	UserIDs []uint64
-	Path    string
-	// StartTime filters created_at >= StartTime when non-nil.
-	StartTime *time.Time
-	// EndTime filters created_at <= EndTime when non-nil.
-	EndTime *time.Time
-}
+type AccessLogFilter = analyticsmodel.AccessLogFilter
 
 func buildUserAccessLogFilterClause(filter AccessLogFilter) (string, []any, bool) {
 	if filter.UserIDs != nil && len(filter.UserIDs) == 0 {

internal/repository/analytics/access_log_stats.go

@@ -16,22 +16,13 @@ import (
 const hoursInDay = 24
 
 // DailyTrend is a single day's access count.
-type DailyTrend struct {
-	Date  string
-	Count uint64
-}
+type DailyTrend = analyticsmodel.DailyTrend
 
 // BrowserShare is a browser group's share of access logs.
-type BrowserShare struct {
-	Browser string
-	Count   uint64
-}
+type BrowserShare = analyticsmodel.BrowserShare
 
 // TopUser is an active user ranked by access count.
-type TopUser struct {
-	UserID uint64
-	Count  uint64
-}
+type TopUser = analyticsmodel.TopUser
 
 // GetDailyTrend returns per-day access counts for the last days days (inclusive of today).
 func GetDailyTrend(ctx context.Context, days int) ([]DailyTrend, error) {

internal/repository/analytics/clickhouse_stats.go

@@ -9,21 +9,12 @@ import (
 
 	"github.com/Rain-kl/Wavelet/internal/infra/config"
 	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
-	"github.com/Rain-kl/Wavelet/internal/infra/persistence/batchwriter"
+	analyticsmodel "github.com/Rain-kl/Wavelet/internal/model/analytics"
 )
 
 // ClickHouseOperationalStats summarizes ClickHouse merge/mutation pressure
 // and in-process batch writer queue health.
-type ClickHouseOperationalStats struct {
-	Database         string `json:"database"`
-	ActiveParts      int64  `json:"active_parts"`
-	TotalRows        int64  `json:"total_rows"`
-	PendingMutations int64  `json:"pending_mutations"`
-	AsyncInsertQueue int64  `json:"async_insert_queue"`
-	AsyncInsertBytes int64  `json:"async_insert_bytes"`
-	// BatchWriters reports in-process queue depth/drops/flush errors for CH writers.
-	BatchWriters []batchwriter.Stats `json:"batch_writers,omitempty"`
-}
+type ClickHouseOperationalStats = analyticsmodel.ClickHouseOperationalStats
 
 // GetClickHouseOperationalStats returns operational metrics for the configured database.
 func GetClickHouseOperationalStats(ctx context.Context) (*ClickHouseOperationalStats, error) {

internal/repository/analytics/node_access_log.go

@@ -15,10 +15,7 @@ import (
 )
 
 // NodeAccessLogRegionCount aggregates access log regions.
-type NodeAccessLogRegionCount struct {
-	Region string
-	Count  int64
-}
+type NodeAccessLogRegionCount = analyticsmodel.NodeAccessLogRegionCount
 
 func nodeAccessLogConn() (driver.Conn, error) {
 	if db.ChConn == nil {
@@ -151,28 +148,13 @@ ORDER BY count DESC, trimmed_region ASC`, tableName, clause)
 }
 
 // NodeAccessLogTrafficSummary is a window-level access log traffic summary.
-type NodeAccessLogTrafficSummary struct {
-	RequestCount  int64
-	ErrorCount    int64
-	UniqueIPCount int64
-	BytesSent     int64
-	RequestLength int64
-	NodeCount     int64
-}
+type NodeAccessLogTrafficSummary = analyticsmodel.NodeAccessLogTrafficSummary
 
 // NodeAccessLogValueCount is a grouped value count (status_code, host, ...).
-type NodeAccessLogValueCount struct {
-	Value string
-	Count int64
-}
+type NodeAccessLogValueCount = analyticsmodel.NodeAccessLogValueCount
 
 // NodeAccessLogNodeAggregate is per-node traffic over a window.
-type NodeAccessLogNodeAggregate struct {
-	NodeID        string
-	RequestCount  int64
-	ErrorCount    int64
-	UniqueIPCount int64
-}
+type NodeAccessLogNodeAggregate = analyticsmodel.NodeAccessLogNodeAggregate
 
 // TrafficSummaryNodeAccessLogs returns request/error/UV/bytes/node counts for the filter.
 func TrafficSummaryNodeAccessLogs(ctx context.Context, filter NodeAccessLogFilter) (NodeAccessLogTrafficSummary, error) {

internal/repository/analytics/node_access_log_filter.go

@@ -6,7 +6,8 @@ package analytics
 import (
 	"fmt"
 	"strings"
-	"time"
+
+	analyticsmodel "github.com/Rain-kl/Wavelet/internal/model/analytics"
 )
 
 const (
@@ -25,20 +26,7 @@ const (
 )
 
 // NodeAccessLogFilter scopes ClickHouse node access log queries.
-type NodeAccessLogFilter struct {
-	NodeID     string
-	RemoteAddr string
-	Host       string
-	// Hosts exact-matches any host (case-insensitive). Prefer over Host for multi-domain scopes.
-	Hosts     []string
-	Path      string
-	Since     time.Time
-	Until     time.Time
-	Page      int
-	PageSize  int
-	SortBy    string
-	SortOrder string
-}
+type NodeAccessLogFilter = analyticsmodel.NodeAccessLogFilter
 
 func buildNodeAccessLogFilterClause(filter NodeAccessLogFilter) (string, []any) {
 	parts := make([]string, 0, nodeAccessLogFilterClauseCapacity)

internal/repository/analytics/node_observability.go

@@ -211,33 +211,11 @@ func scanNodeObsFrpsRows(rows driver.Rows) ([]analyticsmodel.NodeObsFrps, error)
 	return result, nil
 }
 
-// NodeTrafficHourly is an hourly traffic rollup row.
-//
-// UniqueVisitorCount is always 0 when sourced from of_access_log_hourly
-// (true UV requires raw uniqExact on access logs).
-type NodeTrafficHourly struct {
-	NodeID             string
-	Hour               time.Time
-	RequestCount       int64
-	ErrorCount         int64
-	UniqueVisitorCount int64
-}
+// NodeTrafficHourly 为小时级流量汇总行（别名，定义见 model/analytics）。
+type NodeTrafficHourly = analyticsmodel.NodeTrafficHourly
 
-// NodeMetricHourly is an hourly metric snapshot aggregation row.
-//
-// Disk and host network counters are cumulative. Prefer pre-aggregated min/max
-// deltas from of_node_metric_capacity_hourly; raw fallback uses consecutive
-// lagInFrame samples per node (negative deltas after counter reset are dropped).
-type NodeMetricHourly struct {
-	Hour                      time.Time
-	AverageCPUUsagePercent    float64
-	AverageMemoryUsagePercent float64
-	NetworkRxBytes            int64
-	NetworkTxBytes            int64
-	DiskReadBytes             int64
-	DiskWriteBytes            int64
-	ReportedNodes             int
-}
+// NodeMetricHourly 为小时级指标聚合行（别名，定义见 model/analytics）。
+type NodeMetricHourly = analyticsmodel.NodeMetricHourly
 
 // ListNodeTrafficHourly returns hourly traffic from of_access_log_hourly (M5).
 // UniqueVisitorCount is always 0 here (UV requires raw uniqExact on access logs).

internal/repository/analytics/node_observability_filter.go

@@ -5,17 +5,14 @@ package analytics
 
 import (
 	"strings"
-	"time"
+
+	analyticsmodel "github.com/Rain-kl/Wavelet/internal/model/analytics"
 )
 
 const nodeObservabilityFilterClauseCapacity = 3
 
 // NodeObservabilityFilter scopes ClickHouse node observability queries.
-type NodeObservabilityFilter struct {
-	NodeID string
-	Since  time.Time
-	Limit  int
-}
+type NodeObservabilityFilter = analyticsmodel.NodeObservabilityFilter
 
 func buildNodeObservabilityFilterClause(filter NodeObservabilityFilter, sinceColumn string) (string, []any) {
 	parts := make([]string, 0, nodeObservabilityFilterClauseCapacity)