iven 9dd6095e77 fix: P0/P1 安全与质量缺陷修复 — 10 项 QA 审查问题解决 ...

P0 安全修复:
- tenant_rls: SQL 拼接改为参数化查询防止注入
- follow_up_service: UUID SQL 拼接改为参数化原生查询
- RLS 策略: 新迁移移除空字符串绕过条件
- SSE 消息推送: token 键名 'token' → 'access_token' 修复
- rate_limit: 登录端点 Redis 不可达时 fail-close

P1 质量修复:
- 小程序缓存清理: preservedKeys 补全认证键名
- 小程序 token 刷新: 失败时清除所有认证数据
- 小程序 401: redirectTo → reLaunch 兼容 tabBar
- 集成测试: 信号量限制并行数据库创建(4个)
- change_password: 乐观锁 version 硬编码 → 动态递增

测试: 516 全部通过 (含 153 集成测试)

2026-04-28 00:57:41 +08:00

..

lib.rs

fix: P0/P1 安全与质量缺陷修复 — 10 项 QA 审查问题解决

2026-04-28 00:57:41 +08:00

m20260410_000001_create_tenant.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260411_000002_create_users.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260411_000003_create_user_credentials.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260411_000004_create_user_tokens.rs

feat(db): add auth schema migrations (10 tables)

2026-04-11 02:03:23 +08:00

m20260411_000005_create_roles.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260411_000006_create_permissions.rs

feat(db): add auth schema migrations (10 tables)

2026-04-11 02:03:23 +08:00

m20260411_000007_create_role_permissions.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260411_000008_create_user_roles.rs

fix(db): resolve migration bugs preventing fresh database initialization

2026-04-12 16:58:47 +08:00

m20260411_000009_create_organizations.rs

feat(db): add auth schema migrations (10 tables)

2026-04-11 02:03:23 +08:00

m20260411_000010_create_departments.rs

feat(db): add auth schema migrations (10 tables)

2026-04-11 02:03:23 +08:00

m20260411_000011_create_positions.rs

feat(db): add auth schema migrations (10 tables)

2026-04-11 02:03:23 +08:00

m20260412_000012_create_dictionaries.rs

feat(config): add system configuration module (Phase 3)

2026-04-11 08:09:19 +08:00

m20260412_000013_create_dictionary_items.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000014_create_menus.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000015_create_menu_roles.rs

feat(config): add system configuration module (Phase 3)

2026-04-11 08:09:19 +08:00

m20260412_000016_create_settings.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000017_create_numbering_rules.rs

feat(config): add system configuration module (Phase 3)

2026-04-11 08:09:19 +08:00

m20260412_000018_create_process_definitions.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000019_create_process_instances.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000020_create_tokens.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000021_create_tasks.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260412_000022_create_process_variables.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260413_000023_create_message_templates.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260413_000024_create_messages.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260413_000025_create_message_subscriptions.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260413_000026_create_audit_logs.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260414_000027_fix_unique_indexes_soft_delete.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260414_000028_add_standard_fields_to_tokens.rs

fix(security): resolve audit findings and compilation errors (Phase 6)

2026-04-11 12:49:45 +08:00

m20260414_000029_add_standard_fields_to_process_variables.rs

fix(security): resolve audit findings and compilation errors (Phase 6)

2026-04-11 12:49:45 +08:00

m20260414_000032_fix_settings_unique_index_null.rs

feat(plugin): 集成 WASM 插件系统到主服务并修复链路问题

2026-04-15 23:32:02 +08:00

m20260415_000030_add_version_to_message_tables.rs

fix(message): resolve Phase 5-6 audit findings

2026-04-11 14:16:45 +08:00

m20260416_000031_create_domain_events.rs

chore: apply cargo fmt across workspace and update docs

2026-04-15 00:49:20 +08:00

m20260417_000033_create_plugins.rs

feat(plugin): 集成 WASM 插件系统到主服务并修复链路问题

2026-04-15 23:32:02 +08:00

m20260417_000034_seed_plugin_permissions.rs

feat(plugin): 集成 WASM 插件系统到主服务并修复链路问题

2026-04-15 23:32:02 +08:00

m20260418_000035_pg_trgm_and_entity_columns.rs

feat(db): 添加 pg_trgm 扩展 + plugin_entity_columns 元数据表

2026-04-17 10:08:09 +08:00

m20260418_000036_add_data_scope_to_role_permissions.rs

feat(db): role_permissions 添加 data_scope 列

2026-04-17 10:32:12 +08:00

m20260419_000037_create_user_departments.rs

feat(auth,plugin): Q3 行级数据权限 — user_departments 表 + JWT 注入 department_ids + data_scope 接线

2026-04-17 21:42:40 +08:00

m20260419_000038_fix_crm_permission_codes.rs

fix(用户管理): 修复用户列表页面加载失败问题

2026-04-19 08:46:28 +08:00

m20260419_000039_entity_registry_columns.rs

feat(plugin): P1 跨插件数据引用系统 — 后端 Phase 1-3

2026-04-19 00:49:00 +08:00

m20260419_000040_plugin_market.rs

feat(plugin): P2-P4 插件平台演进 — 通用服务 + 质量保障 + 市场

2026-04-19 12:16:24 +08:00

m20260419_000041_plugin_user_views.rs

feat(plugin): P1-P4 审计修复 — 第三批 (配置变更通知 + 自定义视图)

2026-04-19 18:25:03 +08:00

m20260423_000042_create_health_tables.rs

fix(health): 修复审计发现的 10 个 CRITICAL 问题

2026-04-23 23:25:53 +08:00

m20260423_000043_create_wechat_users.rs

fix(miniprogram+auth): 二次审计修复 — 3 HIGH + 2 MEDIUM

2026-04-24 08:05:58 +08:00

m20260423_000044_create_articles.rs

feat(health+miniprogram): 预约/报告/随访/资讯/家庭管理 — Chunk 4-6

2026-04-24 00:58:40 +08:00

m20260424_000045_health_indexes.rs

feat(health): 身份证号 AES-256-GCM 加密 + HMAC 索引 + 字段级脱敏

2026-04-25 00:21:49 +08:00

m20260424_000046_health_constraints_fix.rs

fix(health): 四次审计修复 — 6 CRITICAL + 8 HIGH + 4 MEDIUM

2026-04-24 07:50:14 +08:00

m20260424_000047_health_index_fix.rs

fix(health): 精准审计修复 6 个真实问题 — 安全/一致性/性能

2026-04-24 08:36:22 +08:00

m20260425_00050_add_doctor_name_column.rs

fix(health): 全链路流通性验证修复

2026-04-25 11:31:54 +08:00

m20260425_000048_add_patient_id_number_hash.rs

fix(health): 穷尽审计修复 — 权限同步/编译错误/前端bug/审计日志

2026-04-25 08:58:58 +08:00

m20260425_000049_widen_patient_id_number.rs

fix: QA 第二轮修复 — PatientDetail 重构/测试覆盖/id_number 列宽/小程序 URL 规范化

2026-04-25 10:22:44 +08:00

m20260425_000051_dialysis_and_lab_enhance.rs

feat(health): V2 血透专科数据模型 — dialysis_record + lab_report 审阅流程

2026-04-25 13:45:11 +08:00

m20260425_000052_create_ai_tables.rs

feat(db): 添加 ai_prompts / ai_analysis_results / ai_usage_logs 迁移

2026-04-25 13:51:50 +08:00

m20260425_000053_create_points_tables.rs

feat(health): 积分商城后端完整实现 (Chunk 2 V2 迭代)

2026-04-25 16:51:38 +08:00

m20260425_000054_create_daily_monitoring.rs

feat(health): 日常监测后端 + 积分商城 PC 管理页面 (Chunk 3 V2 迭代)

2026-04-25 17:24:32 +08:00

m20260425_000055_points_checkin_standard_fields.rs

fix(health): 穷尽审计修复 — 3 CRITICAL + 3 HIGH + 2 MEDIUM

2026-04-25 19:44:46 +08:00

m20260426_000056_create_diagnosis.rs

feat(health): Phase 1 业务改进 — 诊断编码/统计API/体征表合并/积分修复

2026-04-26 00:54:56 +08:00

m20260426_000057_rename_points_transaction_type_column.rs

feat(health): Phase 1 业务改进 — 诊断编码/统计API/体征表合并/积分修复

2026-04-26 00:54:56 +08:00

m20260426_000058_merge_daily_monitoring_into_vital_signs.rs

feat(health): Phase 1 业务改进 — 诊断编码/统计API/体征表合并/积分修复

2026-04-26 00:54:56 +08:00

m20260426_000059_seed_menus.rs

feat(config): 菜单动态化改造 — 侧边栏从后端 API 加载

2026-04-26 01:55:01 +08:00

m20260426_000060_create_critical_value_thresholds.rs

feat(health): P0 平台基座回顾 — 7项上线前必修

2026-04-26 03:37:31 +08:00

m20260426_000061_create_consent.rs

feat(health): P0 平台基座回顾 — 7项上线前必修

2026-04-26 03:37:31 +08:00

m20260426_000073_create_device_readings.rs

docs: 修正测试策略 spec 的事实性错误

2026-04-27 00:21:02 +08:00

m20260426_000074_create_vital_signs_hourly.rs

docs: 修正测试策略 spec 的事实性错误

2026-04-27 00:21:02 +08:00

m20260426_000075_create_patient_devices.rs

docs: 修正测试策略 spec 的事实性错误

2026-04-27 00:21:02 +08:00

m20260426_000076_create_alert_rules.rs

docs: 修正测试策略 spec 的事实性错误

2026-04-27 00:21:02 +08:00

m20260426_000077_create_alerts.rs

fix(core): 迁移修复 + 配置调整

2026-04-28 00:20:11 +08:00

m20260427_000062_create_tenant_crypto_keys.rs

docs: 修正测试策略 spec 的事实性错误

2026-04-27 00:21:02 +08:00

m20260427_000063_content_management.rs

feat(health): patient_service 集成 PiiCrypto — 电话/过敏史/病史加密

2026-04-26 10:37:52 +08:00

m20260427_000064_add_patient_pii_fields.rs

feat(health): patient entity PII 伴生字段 + content_management 编译修复

2026-04-26 10:27:58 +08:00

m20260427_000065_add_consultation_message_key_version.rs

feat(health): consultation_message + follow_up_record PII 加密

2026-04-26 12:17:49 +08:00

m20260427_000066_add_follow_up_record_key_version.rs

feat(health): consultation_message + follow_up_record PII 加密

2026-04-26 12:17:49 +08:00

m20260427_000067_add_family_member_pii_fields.rs

feat(health): family_member + doctor_profile PII 加密

2026-04-26 12:23:10 +08:00

m20260427_000068_add_doctor_profile_pii_fields.rs

feat(health): family_member + doctor_profile PII 加密

2026-04-26 12:23:10 +08:00

m20260427_000069_add_dialysis_record_key_version.rs

feat(health): dialysis/lab_report/diagnosis PII 加密

2026-04-26 12:35:27 +08:00

m20260427_000070_add_lab_report_key_version.rs

feat(health): dialysis/lab_report/diagnosis PII 加密

2026-04-26 12:35:27 +08:00

m20260427_000071_add_diagnosis_key_version.rs

feat(health): dialysis/lab_report/diagnosis PII 加密

2026-04-26 12:35:27 +08:00

m20260427_000072_widen_encrypted_phone_columns.rs

test(health): PII 加密集成测试 + 性能基准 + 编译修复

2026-04-26 13:10:53 +08:00

m20260427_000078_normalize_follow_up_types.rs

fix(core): 迁移修复 + 配置调整

2026-04-28 00:20:11 +08:00

m20260427_000079_add_vital_signs_fields.rs

feat(health): 体征增加体温/SpO2/血糖类型字段

2026-04-27 11:31:40 +08:00

m20260427_000080_create_medication_record.rs

feat(health): 用药记录实体 — CRUD 全栈

2026-04-27 11:45:49 +08:00

m20260427_000081_create_dialysis_prescription.rs

feat(db): 注册透析处方迁移 + AI Prompt 种子数据（4 个默认模板）

2026-04-27 12:50:16 +08:00

m20260427_000082_seed_ai_prompts.rs

fix(core): 迁移修复 + 配置调整

2026-04-28 00:20:11 +08:00

m20260427_000083_create_follow_up_template.rs

feat(health): 随访模板系统 — follow_up_template + template_field 全栈

2026-04-27 14:40:28 +08:00

m20260427_000084_domain_events_cleanup.rs

fix(db): 修复迁移 084/085 SQL 语法 + RLS 动态表名查询

2026-04-27 18:52:03 +08:00

m20260427_000085_processed_events.rs

fix(db): 修复迁移 084/085 SQL 语法 + RLS 动态表名查询

2026-04-27 18:52:03 +08:00

m20260427_000086_enable_rls_all_tables.rs

fix(db): 修复迁移 084/085 SQL 语法 + RLS 动态表名查询

2026-04-27 18:52:03 +08:00

m20260427_000087_audit_logs_hash_chain.rs

feat(core): 审计日志哈希链 — prev_hash + record_hash + 完整性验证

2026-04-27 19:38:39 +08:00

m20260428_000088_rls_policy_strict.rs

fix: P0/P1 安全与质量缺陷修复 — 10 项 QA 审查问题解决

2026-04-28 00:57:41 +08:00