refactor!: 迁移至 samber/do 依赖注入与三层架构

依赖注入：
- 移除 google/wire（含 wire.go/wire_gen.go 与全部 ProviderSet），
  改用 samber/do v2 单注入器 + 双入口惰性构建
- 贡献模型替代命令式注册：路由 routes:、命令 commands:、
  任务 jobs: 前缀经 internal/registry 收集与校验
- 构造函数统一 func NewXxx(i do.Injector) (T, error)

三层架构：
- 补全用例层：每个 biz.XxxRepo 配 XxxUsecase，
  service/command/job 表现层只依赖用例，不再直接引用仓储

路由与文档：
- route/http.go 按域拆为声明式 Endpoint 贡献，
  Endpoint 承载登录白名单与端点限流语义
- 调试模式下提供 OpenAPI 3.1 文档：/openapi.json 与 /docs（Scalar），
  从 validate 标签生成

目录与依赖：
- internal/http/{middleware,request,rule} 拍平至 internal/*
- CLI 命令拆至 internal/command
- 日志轮转 timberjack 换为 libtnb/logrotate
- 升级 validator/cron/sessions/gormstore/sqlite/securecookie
- 数据库迁移保持 gormigrate 不变

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cmd/cli/main.go

@@ -1,21 +1,36 @@
 package main
 
 import (
+	"errors"
+	"fmt"
 	"os"
 	_ "time/tzdata"
+
+	"github.com/samber/do/v2"
+
+	"github.com/acepanel/panel/v3/internal/app"
+	"github.com/acepanel/panel/v3/internal/injector"
 )
 
 func main() {
-	if os.Geteuid() != 0 {
-		panic("panel must run as root")
-	}
-
-	cli, err := initCli()
-	if err != nil {
-		panic(err)
-	}
-
-	if err = cli.Run(); err != nil {
-		panic(err)
+	if err := run(); err != nil {
+		_, _ = fmt.Fprintln(os.Stderr, "Error:", err)
+		os.Exit(1)
 	}
 }
+
+func run() error {
+	if os.Geteuid() != 0 {
+		return errors.New("panel must run as root")
+	}
+
+	inj := injector.New()
+	defer func() { _ = inj.Shutdown() }()
+
+	cli, err := do.Invoke[*app.Cli](inj)
+	if err != nil {
+		return err
+	}
+
+	return cli.Run()
+}

cmd/cli/wire.go

@@ -1,19 +0,0 @@
-//go:build wireinject
-
-package main
-
-import (
-	"github.com/google/wire"
-
-	"github.com/acepanel/panel/v3/internal/app"
-	"github.com/acepanel/panel/v3/internal/apps"
-	"github.com/acepanel/panel/v3/internal/bootstrap"
-	"github.com/acepanel/panel/v3/internal/data"
-	"github.com/acepanel/panel/v3/internal/route"
-	"github.com/acepanel/panel/v3/internal/service"
-)
-
-// initCli init command line.
-func initCli() (*app.Cli, error) {
-	panic(wire.Build(bootstrap.ProviderSet, route.ProviderSet, service.ProviderSet, data.ProviderSet, apps.ProviderSet, app.NewCli))
-}

cmd/cli/wire_gen.go

@@ -1,119 +0,0 @@
-// Code generated by Wire. DO NOT EDIT.
-
-//go:generate go run -mod=mod github.com/google/wire/cmd/wire
-//go:build !wireinject
-// +build !wireinject
-
-package main
-
-import (
-	"github.com/acepanel/panel/v3/internal/app"
-	"github.com/acepanel/panel/v3/internal/apps/apache"
-	"github.com/acepanel/panel/v3/internal/apps/clickhouse"
-	"github.com/acepanel/panel/v3/internal/apps/codeserver"
-	"github.com/acepanel/panel/v3/internal/apps/docker"
-	"github.com/acepanel/panel/v3/internal/apps/elasticsearch"
-	"github.com/acepanel/panel/v3/internal/apps/fail2ban"
-	"github.com/acepanel/panel/v3/internal/apps/frp"
-	"github.com/acepanel/panel/v3/internal/apps/gitea"
-	"github.com/acepanel/panel/v3/internal/apps/grafana"
-	"github.com/acepanel/panel/v3/internal/apps/kafka"
-	"github.com/acepanel/panel/v3/internal/apps/mariadb"
-	"github.com/acepanel/panel/v3/internal/apps/memcached"
-	"github.com/acepanel/panel/v3/internal/apps/minio"
-	"github.com/acepanel/panel/v3/internal/apps/mongodb"
-	"github.com/acepanel/panel/v3/internal/apps/mysql"
-	"github.com/acepanel/panel/v3/internal/apps/nginx"
-	"github.com/acepanel/panel/v3/internal/apps/openresty"
-	"github.com/acepanel/panel/v3/internal/apps/opensearch"
-	"github.com/acepanel/panel/v3/internal/apps/percona"
-	"github.com/acepanel/panel/v3/internal/apps/phpmyadmin"
-	"github.com/acepanel/panel/v3/internal/apps/podman"
-	"github.com/acepanel/panel/v3/internal/apps/postgresql"
-	"github.com/acepanel/panel/v3/internal/apps/prometheus"
-	"github.com/acepanel/panel/v3/internal/apps/pureftpd"
-	"github.com/acepanel/panel/v3/internal/apps/redis"
-	"github.com/acepanel/panel/v3/internal/apps/rocketmq"
-	"github.com/acepanel/panel/v3/internal/apps/rsync"
-	"github.com/acepanel/panel/v3/internal/apps/s3fs"
-	"github.com/acepanel/panel/v3/internal/apps/supervisor"
-	"github.com/acepanel/panel/v3/internal/apps/valkey"
-	"github.com/acepanel/panel/v3/internal/bootstrap"
-	"github.com/acepanel/panel/v3/internal/data"
-	"github.com/acepanel/panel/v3/internal/route"
-	"github.com/acepanel/panel/v3/internal/service"
-)
-
-import (
-	_ "time/tzdata"
-)
-
-// Injectors from wire.go:
-
-// initCli init command line.
-func initCli() (*app.Cli, error) {
-	config, err := bootstrap.NewConf()
-	if err != nil {
-		return nil, err
-	}
-	locale, err := bootstrap.NewT(config)
-	if err != nil {
-		return nil, err
-	}
-	db, err := bootstrap.NewDB(config)
-	if err != nil {
-		return nil, err
-	}
-	logger := bootstrap.NewLog(config)
-	cacheRepo := data.NewCacheRepo(db)
-	taskRunner := bootstrap.NewRunner(db, logger)
-	taskRepo := data.NewTaskRepo(locale, db, logger, taskRunner)
-	appRepo := data.NewAppRepo(locale, config, db, logger, cacheRepo, taskRepo)
-	userRepo := data.NewUserRepo(locale, db, logger)
-	userPasskeyRepo := data.NewUserPasskeyRepo(db)
-	settingRepo := data.NewSettingRepo(locale, db, logger, config, taskRepo)
-	databaseServerRepo := data.NewDatabaseServerRepo(locale, db, logger)
-	databaseUserRepo := data.NewDatabaseUserRepo(locale, db, logger, databaseServerRepo)
-	databaseRepo := data.NewDatabaseRepo(locale, db, logger, databaseServerRepo, databaseUserRepo)
-	certRepo := data.NewCertRepo(locale, db, logger, settingRepo)
-	certAccountRepo := data.NewCertAccountRepo(locale, db, userRepo, logger)
-	websiteRepo := data.NewWebsiteRepo(locale, db, logger, cacheRepo, databaseRepo, databaseServerRepo, databaseUserRepo, certRepo, certAccountRepo, settingRepo)
-	backupRepo := data.NewBackupRepo(locale, config, db, logger, settingRepo, websiteRepo)
-	cliService := service.NewCliService(locale, config, db, appRepo, cacheRepo, userRepo, userPasskeyRepo, settingRepo, backupRepo, websiteRepo, databaseServerRepo, certRepo, certAccountRepo)
-	cli := route.NewCli(locale, cliService)
-	command := bootstrap.NewCli(locale, cli)
-	gormigrate := bootstrap.NewMigrate(db)
-	apacheApp := apache.NewApp(locale)
-	clickhouseApp := clickhouse.NewApp(locale, settingRepo, databaseServerRepo)
-	codeserverApp := codeserver.NewApp()
-	dockerApp := docker.NewApp()
-	elasticsearchApp := elasticsearch.NewApp(locale)
-	fail2banApp := fail2ban.NewApp(locale, websiteRepo)
-	frpApp := frp.NewApp()
-	giteaApp := gitea.NewApp()
-	grafanaApp := grafana.NewApp(locale)
-	kafkaApp := kafka.NewApp(locale)
-	mariadbApp := mariadb.NewApp(locale, settingRepo, databaseServerRepo)
-	memcachedApp := memcached.NewApp(locale)
-	minioApp := minio.NewApp()
-	mongodbApp := mongodb.NewApp(locale, settingRepo, databaseServerRepo)
-	mysqlApp := mysql.NewApp(locale, settingRepo, databaseServerRepo)
-	nginxApp := nginx.NewApp(locale)
-	openrestyApp := openresty.NewApp(locale)
-	opensearchApp := opensearch.NewApp(locale)
-	perconaApp := percona.NewApp(locale, settingRepo, databaseServerRepo)
-	phpmyadminApp := phpmyadmin.NewApp(locale)
-	podmanApp := podman.NewApp()
-	postgresqlApp := postgresql.NewApp(locale, settingRepo, databaseServerRepo)
-	prometheusApp := prometheus.NewApp(locale, config, taskRepo)
-	pureftpdApp := pureftpd.NewApp(locale)
-	redisApp := redis.NewApp(locale, databaseServerRepo)
-	rocketmqApp := rocketmq.NewApp(locale)
-	rsyncApp := rsync.NewApp(locale)
-	s3fsApp := s3fs.NewApp(locale)
-	supervisorApp := supervisor.NewApp(locale)
-	valkeyApp := valkey.NewApp(locale, databaseServerRepo)
-	loader := bootstrap.NewLoader(apacheApp, clickhouseApp, codeserverApp, dockerApp, elasticsearchApp, fail2banApp, frpApp, giteaApp, grafanaApp, kafkaApp, mariadbApp, memcachedApp, minioApp, mongodbApp, mysqlApp, nginxApp, openrestyApp, opensearchApp, perconaApp, phpmyadminApp, podmanApp, postgresqlApp, prometheusApp, pureftpdApp, redisApp, rocketmqApp, rsyncApp, s3fsApp, supervisorApp, valkeyApp)
-	appCli := app.NewCli(command, gormigrate, loader)
-	return appCli, nil
-}