v2.0.0: error-channel APIs, correctness fixes, and server hardening

BREAKING CHANGES:
- Guard interface: Guard(ctx Ctx) error; returning error short-circuits
  (subsequent guards and the method no longer execute)
- Wired[T]() (*T, error); New() may return error; failed wiring is sticky
- BindService/BindGuard/BindRoute return error; routes accept guards
  (guards receive merged query/form params as Ctx.State)
- registration panics after Start; Ctx.Ip honors X-Forwarded-For/X-Real-IP
- internal errors sanitized to fixed client messages

FIXES:
- int64 precision loss: /cell data decoded from raw JSON bytes and
  responses serialized with json.Number (no float64 round-trip)
- enum values range-checked before uint8 conversion (256 no longer
  truncates to 0 and slips through)
- logger: files failing name parsing are no longer deleted; log channel
  never blocks request goroutines; ConfigLogger is race-free;
  logWriterWorker unlock bug fixed
- stream writer panics recovered (process no longer crashes);
  streamDone closed exactly once
- generated Go client emits definitions for pointer-to-enum/struct fields
- anonymous structs rejected at registration; isPrivate safe on empty names
- removed dead Result.Id and RequestInfo.Type

ADDITIONS:
- graceful shutdown (Shutdown), StartOn, server timeouts by default
  (Read 60s/Idle 120s/Write off), SetTimeouts/SetMaxConcurrency
- big-int-safe JSON in the generated TS client (>2^53 as BigInt)
- example/ demo services and cmd/genexample artifact generator

route.go

@@ -14,6 +14,12 @@ import (
 // （如支付回调要求的纯文本 "success" 应答）。
 type RouteHandler func(ctx *RouteCtx) error
 
+// boundRoute 路由绑定的处理器与其 Guard
+type boundRoute struct {
+	handler RouteHandler
+	guards  []*any
+}
+
 // RouteCtx 自定义路由上下文：Data 合并了 URL 查询参数与 POST 表单参数（表单优先），
 // 支付回调等第三方以 form-urlencoded 回调的场景可直接 Param 取值。
 // Wildcard 为通配符路由（/prefix/*）匹配到的剩余路径（不含前导 "/"）。
@@ -32,12 +38,15 @@ func (c *RouteCtx) Param(name string) string {
 // BindRoute 注册自定义路由（方法大小写不敏感；path 精确匹配，或以 "/*" 结尾做前缀通配），
 // 用于 GET 直链、健康检查、支付回调等无法走 POST /cell RPC 的场景。
 //
+//   - guardList 为该路由绑定的 Guard，处理器前按注册顺序执行：
+//     Guard 收到的 Ctx.State 已合并 URL 查询与表单参数（token 放查询参数即可鉴权），
+//     返回 error 时短路——处理器不执行，error 走统一 Result 错误响应
 //   - path 必须以 "/" 开头；/cell 为 RPC 保留路径，不可注册
 //   - 通配符形式如 "/image/*"：匹配 "/image/a/b.png" 等任意子路径，
 //     匹配到的剩余路径（去掉前导 "/"，如 "a/b.png"）经 RouteCtx.Wildcard 取出
-//   - 同一 方法+路径 重复注册直接 panic
-//   - 与 BindService 一致，需在 Start 前完成注册（启动阶段单线程）
-func (f *Fun) BindRoute(method, path string, handler RouteHandler) {
+//   - Guard 依赖装配失败以 error 返回；非法参数与重复注册仍 panic
+//   - 须在 Start 前完成注册
+func (f *Fun) BindRoute(method, path string, handler RouteHandler, guardList ...Guard) error {
 	if handler == nil {
 		panic("fun: BindRoute handler cannot be nil")
 	}
@@ -51,6 +60,21 @@ func (f *Fun) BindRoute(method, path string, handler RouteHandler) {
 	if path == "/cell" || path == "/cell/*" {
 		panic("fun: /cell is reserved for RPC")
 	}
+
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	f.mustNotStarted("BindRoute")
+
+	br := boundRoute{handler: handler}
+	for _, guard := range guardList {
+		checkGuard(guard)
+		g, err := serviceGuardWired(guard, f)
+		if err != nil {
+			return fmt.Errorf("fun: wire route guard %T: %w", guard, err)
+		}
+		br.guards = append(br.guards, g)
+	}
+
 	if prefix, ok := strings.CutSuffix(path, "/*"); ok {
 		if prefix == "" || strings.HasSuffix(prefix, "/") {
 			panic(fmt.Sprintf("fun: BindRoute wildcard path %q invalid (no trailing '/' allowed before /*)", path))
@@ -60,19 +84,21 @@ func (f *Fun) BindRoute(method, path string, handler RouteHandler) {
 				panic(fmt.Sprintf("fun: route %s %s/* already bound", method, prefix))
 			}
 		}
-		f.wildcardRoutes[method] = append(f.wildcardRoutes[method], wildcardRoute{prefix: prefix, handler: handler})
-		return
+		f.wildcardRoutes[method] = append(f.wildcardRoutes[method], wildcardRoute{prefix: prefix, route: br})
+		return nil
 	}
 	key := method + " " + path
 	if _, exists := f.routes[key]; exists {
 		panic(fmt.Sprintf("fun: route %s already bound", key))
 	}
-	f.routes[key] = handler
+	f.routes[key] = br
+	return nil
 }
 
 // handleRoute 执行自定义路由：合并查询与表单参数（application/x-www-form-urlencoded），
-// 处理器返回 error 时按统一 Result 格式输出错误响应；wildcard 为通配路由匹配的剩余路径
-func (f *Fun) handleRoute(fastCtx *fasthttp.RequestCtx, handler RouteHandler, wildcard string) {
+// 先按序执行路由 Guard（State 即合并参数，token 放查询参数即可鉴权），
+// 任一 Guard 返回 error 则短路；处理器返回 error 时按统一 Result 格式输出错误响应
+func (f *Fun) handleRoute(fastCtx *fasthttp.RequestCtx, r boundRoute, wildcard string) {
 	data := map[string]string{}
 	fastCtx.QueryArgs().VisitAll(func(k, v []byte) {
 		data[string(k)] = string(v)
@@ -80,7 +106,14 @@ func (f *Fun) handleRoute(fastCtx *fasthttp.RequestCtx, handler RouteHandler, wi
 	fastCtx.PostArgs().VisitAll(func(k, v []byte) {
 		data[string(k)] = string(v)
 	})
-	if err := handler(&RouteCtx{RequestCtx: fastCtx, Data: data, Wildcard: wildcard}); err != nil {
-		(&Ctx{RequestCtx: fastCtx}).sendError(err)
+	ctx := &Ctx{RequestCtx: fastCtx, Ip: clientIP(fastCtx), State: data}
+	for _, g := range r.guards {
+		if err := (*g).(Guard).Guard(*ctx); err != nil {
+			ctx.sendError(err)
+			return
+		}
+	}
+	if err := r.handler(&RouteCtx{RequestCtx: fastCtx, Data: data, Wildcard: wildcard}); err != nil {
+		ctx.sendError(err)
 	}
 }