增加数据库慢查询观测与索引防线并收窄打手拼单分页查询

2026-08-22 18:40:11 +08:00
parent 0dfe363d35
commit 1b8e02dd17
16 changed files with 221 additions and 7 deletions
@@ -0,0 +1,59 @@
+/**
+ * 数据库 SQL 约束检查。
+ * 该脚本检查关键防线是否被后续重构移除，不尝试替代 EXPLAIN 和生产监控。
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url))
+const BACKEND_ROOT = path.resolve(SCRIPT_DIR, '..')
+
+const checks: Array<{ name: string; file: string; patterns: string[] }> = [
+  {
+    name: '慢查询阈值配置',
+    file: path.join(BACKEND_ROOT, 'src/config/env-overrides.ts'),
+    patterns: ['DATABASE_SLOW_QUERY_THRESHOLD_MS', 'slowQueryThresholdMs'],
+  },
+  {
+    name: '慢查询日志与参数脱敏',
+    file: path.join(BACKEND_ROOT, 'src/db/client.ts'),
+    patterns: ['logSlowQuery', 'fingerprintSql', '参数值始终不写入日志'],
+  },
+  {
+    name: '高频 pending 查询索引',
+    file: path.join(BACKEND_ROOT, 'src/db/migrations/058_database_query_guardrails.sql'),
+    patterns: [
+      'idx_worker_cancel_requests_pending_worker_order',
+      'idx_worker_feedbacks_pending_worker_order',
+      'idx_work_order_events_order_type_id',
+    ],
+  },
+  {
+    name: '打手订单拼单查询限定当前页',
+    file: path.join(BACKEND_ROOT, 'src/repositories/worker-platform/work-order-share-repo.ts'),
+    patterns: ['workOrderIds: number[]', 'wos.work_order_id = ANY($2::bigint[])'],
+  },
+]
+
+const failures: string[] = []
+for (const check of checks) {
+  if (!fs.existsSync(check.file)) {
+    failures.push(`${check.name}: 文件不存在 ${check.file}`)
+    continue
+  }
+  const source = fs.readFileSync(check.file, 'utf8')
+  for (const pattern of check.patterns) {
+    if (!source.includes(pattern)) {
+      failures.push(`${check.name}: 缺少约束 ${pattern} (${check.file})`)
+    }
+  }
+}
+
+if (failures.length > 0) {
+  console.error('[sql-guard] SQL 约束检查失败')
+  for (const failure of failures) console.error(`[sql-guard] ${failure}`)
+  process.exitCode = 1
+} else {
+  console.info('[sql-guard] SQL 约束检查通过')
+}