feat: 增加真实采购任务安全模式 (#98)

admin/repository/mysql_db_integration_test.go

@@ -232,6 +232,60 @@ func TestMySQLMigrate_V4形状错误不记版本(t *testing.T) {
 	}
 }
 
+func TestMySQLMigrate_V4升级V5且断点重跑(t *testing.T) {
+	db := openMySQLMigrationTestDB(t)
+	defer db.Close()
+	cleanMySQLTestSchema(t, db)
+	defer cleanMySQLTestSchema(t, db)
+	prepareMySQLV4(t, db)
+	// 模拟全部 DDL 已完成但版本尚未记录。
+	if err := migrateMySQLV5(db); err != nil {
+		t.Fatal(err)
+	}
+	if err := MigrateMySQL(db); err != nil {
+		t.Fatal(err)
+	}
+	if err := MigrateMySQL(db); err != nil {
+		t.Fatalf("v5 重跑失败: %v", err)
+	}
+	var versions int
+	if err := db.QueryRow(`SELECT COUNT(*) FROM schema_migrations WHERE version=5`).Scan(&versions); err != nil || versions != 1 {
+		t.Fatalf("v5=%d err=%v", versions, err)
+	}
+	now := "2026-08-10T00:00:00Z"
+	mustExec(t, db, `INSERT INTO tasks(task_id,task_type,status,pdd_goods_url,created_at,updated_at) VALUES('OLD','collect','pending','https://example.invalid',?,?)`, now, now)
+	var mode string
+	if err := db.QueryRow(`SELECT execution_mode FROM tasks WHERE task_id='OLD'`).Scan(&mode); err != nil || mode != "dry_run" {
+		t.Fatalf("历史/缺省任务模式=%q err=%v", mode, err)
+	}
+	if _, err := db.Exec(`UPDATE tasks SET execution_mode='invalid' WHERE task_id='OLD'`); err == nil {
+		t.Fatal("执行模式 CHECK 必须拒绝非法值")
+	}
+	if _, err := db.Exec(`UPDATE tasks SET execution_mode='live' WHERE task_id='OLD'`); err == nil {
+		t.Fatal("缺少确认审计的 live 必须被拒绝")
+	}
+	if _, err := db.Exec(`UPDATE tasks SET live_confirmed_by='U',live_confirmed_at=? WHERE task_id='OLD'`, now); err == nil {
+		t.Fatal("dry_run 不得携带 live 确认审计")
+	}
+}
+
+func TestMySQLMigrate_V5形状错误不记版本(t *testing.T) {
+	db := openMySQLMigrationTestDB(t)
+	defer db.Close()
+	cleanMySQLTestSchema(t, db)
+	defer cleanMySQLTestSchema(t, db)
+	prepareMySQLV4(t, db)
+	mustExec(t, db, `ALTER TABLE tasks ADD COLUMN execution_mode VARCHAR(8) NOT NULL DEFAULT 'dry_run'`)
+	if err := MigrateMySQL(db); err == nil {
+		t.Fatal("错误 execution_mode 形状必须阻止 v5")
+	}
+	var count int
+	db.QueryRow(`SELECT COUNT(*) FROM schema_migrations WHERE version=5`).Scan(&count)
+	if count != 0 {
+		t.Fatal("v5 自检失败不得记录版本")
+	}
+}
+
 func openMySQLMigrationTestDB(t *testing.T) *sql.DB {
 	t.Helper()
 	if os.Getenv("CMAUTOBUY_MYSQL_TEST") != "1" {
@@ -263,6 +317,16 @@ func prepareMySQLV2(t *testing.T, db *sql.DB) {
 	mustExec(t, db, `INSERT INTO schema_migrations(version,applied_at) VALUES (1,'2026-08-10T00:00:00Z'),(2,'2026-08-10T00:00:00Z')`)
 }
 
+func prepareMySQLV4(t *testing.T, db *sql.DB) {
+	t.Helper()
+	prepareMySQLV2(t, db)
+	if err := migrateMySQLV3(db); err != nil {
+		t.Fatal(err)
+	}
+	mustExec(t, db, mysqlSchemaV4Decisions)
+	mustExec(t, db, `INSERT INTO schema_migrations(version,applied_at) VALUES (3,'2026-08-10T00:00:00Z'),(4,'2026-08-10T00:00:00Z')`)
+}
+
 func mustExec(t *testing.T, db *sql.DB, query string, args ...any) {
 	t.Helper()
 	if _, err := db.Exec(query, args...); err != nil {