refactor(repository): 收敛 model/repository 分层为唯一持久化入口

将 OpenFlare 与平台业务的数据访问从 model 与 apps 直连迁入 repository，
model 仅保留实体与无 IO 规则；补充 code-check 架构守卫与开发规范。

internal/repository/openflare_apply_log_test.go

@@ -0,0 +1,75 @@
+package repository
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"github.com/Rain-kl/Wavelet/internal/model"
+
+	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
+	"github.com/glebarez/sqlite"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"gorm.io/gorm"
+)
+
+func setupApplyLogModelTestDB(t *testing.T) func() {
+	t.Helper()
+
+	sqliteDB, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{
+		DisableForeignKeyConstraintWhenMigrating: true,
+	})
+	require.NoError(t, err)
+	require.NoError(t, sqliteDB.AutoMigrate(&model.OpenFlareApplyLog{}))
+
+	db.SetDB(sqliteDB)
+	return func() {
+		db.SetDB(nil)
+	}
+}
+
+func TestIsRepeatSuccessApplyLog(t *testing.T) {
+	latest := &model.OpenFlareApplyLog{
+		Version:  "20260615-001",
+		Checksum: "checksum-a",
+		Result:   "success",
+	}
+
+	assert.True(t, model.IsRepeatSuccessApplyLog(latest, "20260615-001", "checksum-a", "success"))
+	assert.False(t, model.IsRepeatSuccessApplyLog(latest, "20260615-002", "checksum-a", "success"))
+	assert.False(t, model.IsRepeatSuccessApplyLog(latest, "20260615-001", "checksum-b", "success"))
+	assert.False(t, model.IsRepeatSuccessApplyLog(latest, "20260615-001", "checksum-a", "failed"))
+	assert.False(t, model.IsRepeatSuccessApplyLog(nil, "20260615-001", "checksum-a", "success"))
+}
+
+func TestGetLatestOpenFlareApplyLogByNodeID(t *testing.T) {
+	cleanup := setupApplyLogModelTestDB(t)
+	defer cleanup()
+
+	ctx := context.Background()
+	now := time.Now().UTC()
+	require.NoError(t, db.DB(ctx).Create(&model.OpenFlareApplyLog{
+		NodeID:    "node-1",
+		Version:   "v1",
+		Result:    "success",
+		Checksum:  "checksum-1",
+		CreatedAt: now.Add(-time.Hour),
+	}).Error)
+	require.NoError(t, db.DB(ctx).Create(&model.OpenFlareApplyLog{
+		NodeID:    "node-1",
+		Version:   "v2",
+		Result:    "success",
+		Checksum:  "checksum-2",
+		CreatedAt: now,
+	}).Error)
+
+	latest, err := GetLatestOpenFlareApplyLogByNodeID(ctx, "node-1")
+	require.NoError(t, err)
+	require.NotNil(t, latest)
+	assert.Equal(t, "v2", latest.Version)
+
+	missing, err := GetLatestOpenFlareApplyLogByNodeID(ctx, "node-missing")
+	require.NoError(t, err)
+	assert.Nil(t, missing)
+}