完善数据库 SQL 约束与运维治理

2026-08-31 12:58:28 +08:00
parent 1ee7d17712
commit ad279049a0
12 changed files with 283 additions and 8 deletions
@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# 检查关键 SQL 防线是否仍存在；真实数据量下的执行计划需要在 MySQL 上单独验证。
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+MIGRATIONS_DIR="${ROOT_DIR}/backend/migrations"
+failures=()
+
+require_pattern() {
+  local file="$1" pattern="$2" name="$3"
+  if [[ ! -f "${ROOT_DIR}/${file}" ]]; then
+    failures+=("${name}: 文件不存在 ${file}")
+  elif ! grep -Fq -- "${pattern}" "${ROOT_DIR}/${file}"; then
+    failures+=("${name}: 缺少 ${pattern} (${file})")
+  fi
+}
+
+# 数据库运行时配置和参数脱敏不能被重构删除。
+require_pattern "backend/internal/config/config.go" "DATABASE_SLOW_QUERY_THRESHOLD_MS" "慢查询阈值配置"
+require_pattern "backend/internal/config/config.go" "DATABASE_MAX_OPEN_CONNS" "连接池上限配置"
+require_pattern "backend/internal/database/gorm_logger.go" "ParamsFilter" "SQL 参数脱敏"
+require_pattern "backend/internal/database/mysql.go" "SetMaxOpenConns" "连接池应用"
+
+# 当前财务仪表盘的时间范围聚合和索引是高频查询防线。
+require_pattern "backend/internal/modules/adminfinance/subquery.go" "settled_at >= ? AND scoped_order.settled_at <= ?" "结算聚合时间范围"
+require_pattern "backend/internal/modules/adminfinance/dashboard.go" "po.created_at >= ? AND po.created_at <= ?" "支付聚合时间范围"
+require_pattern "backend/migrations/000060_finance_dashboard_indexes.sql" "idx_admin_pickups_status_completed_at" "财务完成索引"
+require_pattern "backend/migrations/000060_finance_dashboard_indexes.sql" "idx_admin_pickups_status_cancelled_at" "财务取消索引"
+
+# 分页核心路径必须保留上限；配置型全量列表在运维文档中登记为白名单。
+require_pattern "backend/internal/modules/listing/public_query.go" "if pageSize > 50" "公开商品分页上限"
+require_pattern "backend/internal/modules/pickup/repository.go" "if pageSize > 100" "后台接单分页上限"
+
+# 已发布迁移只允许新增，不允许修改或删除历史文件。
+if changed_migrations="$(git -C "${ROOT_DIR}" diff --name-status HEAD -- backend/migrations)"; then
+  while read -r status file _; do
+    [[ -z "${status:-}" ]] && continue
+    if [[ "${status}" != "A" ]]; then
+      failures+=("历史迁移文件不可修改或删除: ${status} ${file}")
+    fi
+  done <<< "${changed_migrations}"
+else
+  failures+=("无法检查迁移文件变更")
+fi
+
+# 初始合并迁移没有 Down，其余迁移必须提供可回滚段。
+while IFS= read -r file; do
+  [[ "$(basename "${file}")" == "000001_init.sql" ]] && continue
+  if ! grep -Fq -- '-- +goose Up' "${file}" || ! grep -Fq -- '-- +goose Down' "${file}"; then
+    failures+=("迁移缺少 Goose Up/Down: ${file#"${ROOT_DIR}/"}")
+  fi
+done < <(find "${MIGRATIONS_DIR}" -maxdepth 1 -type f -name '*.sql' | sort)
+
+if (( ${#failures[@]} > 0 )); then
+  printf '[sql-guard] SQL 约束检查失败\n' >&2
+  printf '[sql-guard] %s\n' "${failures[@]}" >&2
+  exit 1
+fi
+
+printf '[sql-guard] SQL 约束检查通过\n'