refactor(repository): 收敛 model/repository 分层为唯一持久化入口

将 OpenFlare 与平台业务的数据访问从 model 与 apps 直连迁入 repository，
model 仅保留实体与无 IO 规则；补充 code-check 架构守卫与开发规范。

internal/apps/openflare/proxy_route/build_helpers.go

@@ -11,7 +11,6 @@ import (
 	"strings"
 
 	"github.com/Rain-kl/Wavelet/internal/model"
-	"gorm.io/gorm"
 )
 
 type proxyRouteJSONFields struct {
@@ -141,38 +140,3 @@ func applyProxyRouteUpstreamType(ctx context.Context, route *model.ProxyRoute, u
 	}
 	return nil
 }
-
-func updateProxyRouteRecord(tx *gorm.DB, route *model.ProxyRoute) error {
-	return tx.Model(&model.ProxyRoute{}).Where("id = ?", route.ID).Updates(map[string]any{
-		"site_name": route.SiteName, "origin_id": route.OriginID, "origin_url": route.OriginURL,
-		"origin_host": route.OriginHost, "upstreams": route.Upstreams, "enabled": route.Enabled,
-		"enable_https": route.EnableHTTPS, "redirect_http": route.RedirectHTTP,
-		"limit_conn_per_server": route.LimitConnPerServer, "limit_conn_per_ip": route.LimitConnPerIP,
-		"limit_rate": route.LimitRate, "cache_enabled": route.CacheEnabled, "cache_policy": route.CachePolicy,
-		"cache_rules": route.CacheRules, "custom_headers": route.CustomHeaders,
-		"basic_auth_enabled": route.BasicAuthEnabled, "basic_auth_username": route.BasicAuthUsername,
-		"basic_auth_password": route.BasicAuthPassword,
-		"upstream_type":       route.UpstreamType, "tunnel_node_id": route.TunnelNodeID,
-		"tunnel_target_addr": route.TunnelTargetAddr, "tunnel_target_protocol": route.TunnelTargetProtocol,
-		"pages_project_id": route.PagesProjectID,
-	}).Error
-}
-
-func replaceZoneDomainRouteBindings(tx *gorm.DB, routeID uint, domainIDs []uint) error {
-	var requested []model.ZoneDomain
-	if err := tx.Where("id IN ?", domainIDs).Find(&requested).Error; err != nil {
-		return err
-	}
-	if len(requested) != len(domainIDs) {
-		return errors.New(errProxyRouteZoneDomainNotFound)
-	}
-	for _, domain := range requested {
-		if domain.ProxyRouteID != nil && *domain.ProxyRouteID != routeID {
-			return errors.New(errProxyRouteZoneDomainBound)
-		}
-	}
-	if err := tx.Model(&model.ZoneDomain{}).Where("proxy_route_id = ? AND id NOT IN ?", routeID, domainIDs).Update("proxy_route_id", nil).Error; err != nil {
-		return err
-	}
-	return tx.Model(&model.ZoneDomain{}).Where("id IN ?", domainIDs).Update("proxy_route_id", routeID).Error
-}

internal/apps/openflare/proxy_route/helpers.go

@@ -17,6 +17,8 @@ import (
 	"strings"
 	"unicode"
 
+	"github.com/Rain-kl/Wavelet/internal/repository"
+
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"gorm.io/gorm"
 )
@@ -195,7 +197,7 @@ func getOrCreateOriginByAddress(ctx context.Context, address string) (*model.Ori
 	if err := validateOriginAddress(normalizedAddress); err != nil {
 		return nil, err
 	}
-	existing, err := model.GetOriginByAddress(ctx, normalizedAddress)
+	existing, err := repository.GetOriginByAddress(ctx, normalizedAddress)
 	if err == nil {
 		return existing, nil
 	}
@@ -207,9 +209,9 @@ func getOrCreateOriginByAddress(ctx context.Context, address string) (*model.Ori
 		Address: normalizedAddress,
 		Remark:  "",
 	}
-	if err := model.CreateOriginRecord(ctx, origin); err != nil {
+	if err := repository.CreateOriginRecord(ctx, origin); err != nil {
 		if isUniqueConstraintError(err) {
-			return model.GetOriginByAddress(ctx, normalizedAddress)
+			return repository.GetOriginByAddress(ctx, normalizedAddress)
 		}
 		return nil, err
 	}
@@ -217,15 +219,15 @@ func getOrCreateOriginByAddress(ctx context.Context, address string) (*model.Ori
 }
 
 func lookupTLSCertificateByID(ctx context.Context, id uint) (*model.TLSCertificate, error) {
-	return model.GetTLSCertificateByID(ctx, id)
+	return repository.GetTLSCertificateByID(ctx, id)
 }
 
 func lookupTunnelNodeByID(ctx context.Context, id uint) (*model.OpenFlareNode, error) {
-	return model.GetOpenFlareNodeByID(ctx, id)
+	return repository.GetOpenFlareNodeByID(ctx, id)
 }
 
 func lookupPagesProjectByID(ctx context.Context, id uint) (*model.PagesProject, error) {
-	return model.GetPagesProjectByID(ctx, id)
+	return repository.GetPagesProjectByID(ctx, id)
 }
 
 func parseLeafCertificate(certPEM string) (*x509.Certificate, error) {
@@ -270,7 +272,7 @@ func loadProxyRouteZoneDomains(ctx context.Context, ids []uint) ([]model.ZoneDom
 		}
 		seen[id] = struct{}{}
 	}
-	domains, err := model.ListZoneDomainsByIDs(ctx, ids)
+	domains, err := repository.ListZoneDomainsByIDs(ctx, ids)
 	if err != nil {
 		return nil, errors.New(errProxyRouteZoneDomainNotFound)
 	}
@@ -285,7 +287,7 @@ func validateProxyRouteSiteName(siteName string) error {
 }
 
 func validateProxyRouteSiteNameUniqueness(ctx context.Context, route *model.ProxyRoute, siteName string) error {
-	routes, err := model.ListProxyRoutes(ctx)
+	routes, err := repository.ListProxyRoutes(ctx)
 	if err != nil {
 		return err
 	}

internal/apps/openflare/proxy_route/logics.go

@@ -10,10 +10,9 @@ import (
 	"strings"
 	"time"
 
-	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 	"gorm.io/gorm"
-	"gorm.io/gorm/clause"
 )
 
 // CustomHeaderInput 自定义响应头。
@@ -103,7 +102,7 @@ type ZoneDomainView struct {
 
 // ListProxyRoutes 列出全部代理规则。
 func ListProxyRoutes(ctx context.Context) ([]*View, error) {
-	routes, err := model.ListProxyRoutes(ctx)
+	routes, err := repository.ListProxyRoutes(ctx)
 	if err != nil {
 		return nil, err
 	}
@@ -112,7 +111,7 @@ func ListProxyRoutes(ctx context.Context) ([]*View, error) {
 
 // GetProxyRoute 获取代理规则详情。
 func GetProxyRoute(ctx context.Context, id uint) (*View, error) {
-	route, err := model.GetProxyRouteByID(ctx, id)
+	route, err := repository.GetProxyRouteByID(ctx, id)
 	if err != nil {
 		return nil, err
 	}
@@ -125,17 +124,17 @@ func CreateProxyRoute(ctx context.Context, input Input) (*View, error) {
 	if err != nil {
 		return nil, err
 	}
-	if err = db.DB(ctx).Transaction(func(tx *gorm.DB) error {
+	if err = repository.WithProxyRouteTx(ctx, func(tx *gorm.DB) error {
 		if err := lockPagesProjectsForRouteMutation(tx, 0, route); err != nil {
 			return err
 		}
-		if err := tx.Create(route).Error; err != nil {
+		if err := repository.CreateProxyRouteRecordTx(tx, route); err != nil {
 			return err
 		}
-		return replaceZoneDomainRouteBindings(tx, route.ID, input.ZoneDomainIDs)
+		return repository.ReplaceZoneDomainRouteBindingsTx(tx, route.ID, input.ZoneDomainIDs)
 	}); err != nil {
-		if isUniqueConstraintError(err) {
-			return nil, errors.New(errProxyRouteIdentityExists)
+		if mapped := mapProxyRoutePersistError(err); mapped != nil {
+			return nil, mapped
 		}
 		return nil, err
 	}
@@ -144,7 +143,7 @@ func CreateProxyRoute(ctx context.Context, input Input) (*View, error) {
 
 // UpdateProxyRoute 更新代理规则。
 func UpdateProxyRoute(ctx context.Context, id uint, input Input) (*View, error) {
-	route, err := model.GetProxyRouteByID(ctx, id)
+	route, err := repository.GetProxyRouteByID(ctx, id)
 	if err != nil {
 		return nil, err
 	}
@@ -153,23 +152,39 @@ func UpdateProxyRoute(ctx context.Context, id uint, input Input) (*View, error)
 	if err != nil {
 		return nil, err
 	}
-	if err = db.DB(ctx).Transaction(func(tx *gorm.DB) error {
+	if err = repository.WithProxyRouteTx(ctx, func(tx *gorm.DB) error {
 		if err := lockPagesProjectsForRouteMutation(tx, previousPagesProjectID, route); err != nil {
 			return err
 		}
-		if err := updateProxyRouteRecord(tx, route); err != nil {
+		if err := repository.UpdateProxyRouteRecordTx(tx, route); err != nil {
 			return err
 		}
-		return replaceZoneDomainRouteBindings(tx, route.ID, input.ZoneDomainIDs)
+		return repository.ReplaceZoneDomainRouteBindingsTx(tx, route.ID, input.ZoneDomainIDs)
 	}); err != nil {
-		if isUniqueConstraintError(err) {
-			return nil, errors.New(errProxyRouteIdentityExists)
+		if mapped := mapProxyRoutePersistError(err); mapped != nil {
+			return nil, mapped
 		}
 		return nil, err
 	}
 	return buildProxyRouteView(ctx, route)
 }
 
+func mapProxyRoutePersistError(err error) error {
+	if err == nil {
+		return nil
+	}
+	if isUniqueConstraintError(err) {
+		return errors.New(errProxyRouteIdentityExists)
+	}
+	if errors.Is(err, repository.ErrZoneDomainBoundToAnotherRoute) {
+		return errors.New(errProxyRouteZoneDomainBound)
+	}
+	if errors.Is(err, repository.ErrZoneDomainNotFound) {
+		return errors.New(errProxyRouteZoneDomainNotFound)
+	}
+	return nil
+}
+
 func pagesProjectIDForRoute(route *model.ProxyRoute) uint {
 	if route == nil || route.UpstreamType != proxyRouteUpstreamTypePages || route.PagesProjectID == nil {
 		return 0
@@ -189,8 +204,7 @@ func lockPagesProjectsForRouteMutation(tx *gorm.DB, previousProjectID uint, rout
 	sort.Slice(projectIDs, func(i int, j int) bool { return projectIDs[i] < projectIDs[j] })
 
 	for _, projectID := range projectIDs {
-		var project model.PagesProject
-		err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).First(&project, projectID).Error
+		project, err := repository.LockPagesProjectByIDTx(tx, projectID)
 		if errors.Is(err, gorm.ErrRecordNotFound) && projectID != nextProjectID {
 			continue
 		}
@@ -201,7 +215,7 @@ func lockPagesProjectsForRouteMutation(tx *gorm.DB, previousProjectID uint, rout
 			return err
 		}
 		if projectID == nextProjectID {
-			if err := validateLockedPagesRouteProject(&project); err != nil {
+			if err := validateLockedPagesRouteProject(project); err != nil {
 				return err
 			}
 		}
@@ -224,15 +238,10 @@ func validateLockedPagesRouteProject(project *model.PagesProject) error {
 
 // DeleteProxyRoute 删除代理规则。
 func DeleteProxyRoute(ctx context.Context, id uint) error {
-	if _, err := model.GetProxyRouteByID(ctx, id); err != nil {
+	if _, err := repository.GetProxyRouteByID(ctx, id); err != nil {
 		return err
 	}
-	return db.DB(ctx).Transaction(func(tx *gorm.DB) error {
-		if err := tx.Model(&model.ZoneDomain{}).Where("proxy_route_id = ?", id).Update("proxy_route_id", nil).Error; err != nil {
-			return err
-		}
-		return tx.Delete(&model.ProxyRoute{}, id).Error
-	})
+	return repository.DeleteProxyRouteAndUnbind(ctx, id)
 }
 
 func buildProxyRoute(ctx context.Context, route *model.ProxyRoute, input Input) (*model.ProxyRoute, []model.ZoneDomain, error) {
@@ -338,7 +347,7 @@ func buildProxyRouteView(ctx context.Context, route *model.ProxyRoute) (*View, e
 	if route == nil {
 		return nil, errors.New("proxy route is nil")
 	}
-	domains, err := model.ListZoneDomainsByRouteID(ctx, route.ID)
+	domains, err := repository.ListZoneDomainsByRouteID(ctx, route.ID)
 	if err != nil {
 		return nil, err
 	}

internal/apps/openflare/proxy_route/logics_test.go

@@ -9,6 +9,7 @@ import (
 
 	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 	"github.com/glebarez/sqlite"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
@@ -115,7 +116,7 @@ func TestPagesRouteLocksAndRevalidatesTargetProject(t *testing.T) {
 
 	require.NoError(t, db.DB(ctx).Delete(&model.PagesProject{}, project.ID).Error)
 	route := &model.ProxyRoute{UpstreamType: proxyRouteUpstreamTypePages, PagesProjectID: &project.ID}
-	err = db.DB(ctx).Transaction(func(tx *gorm.DB) error {
+	err = repository.WithProxyRouteTx(ctx, func(tx *gorm.DB) error {
 		return lockPagesProjectsForRouteMutation(tx, 0, route)
 	})
 	require.EqualError(t, err, errProxyRoutePagesNotFound)
@@ -128,7 +129,7 @@ func TestRouteCanMoveAwayFromAlreadyMissingPagesProject(t *testing.T) {
 	missingProjectID := uint(404)
 	route := &model.ProxyRoute{UpstreamType: "direct"}
 
-	err := db.DB(ctx).Transaction(func(tx *gorm.DB) error {
+	err := repository.WithProxyRouteTx(ctx, func(tx *gorm.DB) error {
 		return lockPagesProjectsForRouteMutation(tx, missingProjectID, route)
 	})
 	require.NoError(t, err)

internal/apps/openflare/proxy_route/origin_helpers.go

@@ -8,7 +8,8 @@ import (
 	"errors"
 	"strings"
 
-	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
+
 	"gorm.io/gorm"
 )
 
@@ -32,7 +33,7 @@ func resolveStructuredOriginInput(ctx context.Context, input Input) (string, *ui
 }
 
 func resolveOriginByID(ctx context.Context, scheme, port, uri string, originID uint) (string, *uint, error) {
-	origin, err := model.GetOriginByID(ctx, originID)
+	origin, err := repository.GetOriginByID(ctx, originID)
 	if err != nil {
 		return "", nil, errors.New(errProxyRouteOriginNotFound)
 	}
@@ -67,7 +68,7 @@ func resolveLegacyOriginInput(ctx context.Context, originURL string) (string, *u
 	if err != nil {
 		return "", nil, err
 	}
-	origin, findErr := model.GetOriginByAddress(ctx, address)
+	origin, findErr := repository.GetOriginByAddress(ctx, address)
 	if findErr == nil {
 		return originURL, &origin.ID, nil
 	}