| 标准类型      | Oracle          | MySQL 8.0       | 达梦 DM8        | KingbaseES V8   | 华为 GaussDB    | 备注                     |
|---------------|-----------------|-----------------|-----------------|-----------------|-----------------|--------------------------|
| 主键 ID       | NUMBER(19)      | BIGINT          | BIGINT          | BIGINT          | BIGINT          | 统一 64 位长整型         |
| 业务编码      | VARCHAR2(64)    | VARCHAR(64)     | VARCHAR(64)     | VARCHAR(64)     | VARCHAR(64)     | 字符集统一 UTF8MB4       |
| 长文本/纪要   | CLOB / NCLOB    | LONGTEXT        | CLOB            | TEXT            | TEXT            | 避免 CHAR/TEXT 混用      |
| 时间戳(带时区)| TIMESTAMP WITH TZ | TIMESTAMP(6)  | TIMESTAMP WITH TZ | TIMESTAMPTZ   | TIMESTAMPTZ     | 统一存储 UTC，应用层转换 |
| 枚举状态      | NUMBER(1)       | TINYINT         | SMALLINT        | SMALLINT        | SMALLINT        | 配合 CHECK 约束          |

graph LR
    A[应用网关] --> B{流量分发器}
    B -->|90%| C[旧库 Oracle]
    B -->|10%| D[新库 信创]
    D --> E[数据一致性比对服务]
    E -->|差异| F[人工复核/自动修复]
    C --> G[全量校验通过]
    D --> G
    G --> H[全量切换 100% 信创]

<plugin>
    <groupId>com.enterprise.db.migration</groupId>
    <artifactId>sql-dialect-transpiler-maven-plugin</artifactId>
    <version>1.0.0-SNAPSHOT</version>
    <configuration>
        <sourceDialect>ORACLE_19C</sourceDialect>
        <targetDialect>DAMENG_8</targetDialect>
        <ruleSet>enterprise-standard-ruleset.xml</ruleSet> <!-- 企业级规则集：禁用 DBMS_JOB、统一 UUID 生成等 -->
        <failOnError>true</failOnError>
        <outputDir>${project.build.directory}/migrated-sql</outputDir>
    </configuration>
    <executions>
        <execution>
            <phase>generate-sources</phase>
            <goals><goal>transpile</goal></goals>
        </execution>
    </executions>
</plugin>

-- 统一 Outbox 表结构 (全信创库通用 DDL)
CREATE TABLE sys_transaction_outbox (
    id              BIGINT PRIMARY KEY,           -- Snowflake ID
    aggregate_id    VARCHAR(64) NOT NULL,         -- 会议 ID / 纪要 ID
    aggregate_type  VARCHAR(32) NOT NULL,         -- MEETING / MINUTES / RESOLUTION
    event_type      VARCHAR(64) NOT NULL,         -- MEETING_CREATED / MINUTES_GENERATED
    payload         JSONB / TEXT NOT NULL,        -- 事件载荷 (信创库均支持 JSONB/TEXT)
    status          SMALLINT DEFAULT 0,           -- 0:INIT 1:PUBLISHED 2:FAILED
    retry_count     SMALLINT DEFAULT 0,
    created_at      TIMESTAMP(6) DEFAULT CURRENT_TIMESTAMP,
    published_at    TIMESTAMP(6),
    -- 索引优化：轮询发布器高效扫描
    INDEX idx_status_created (status, created_at)
) PARTITION BY RANGE (created_at) (
    PARTITION p202401 VALUES LESS THAN ('2024-02-01'),
    PARTITION p202402 VALUES LESS THAN ('2024-03-01'),
    PARTITION pmax  VALUES LESS THAN MAXVALUE
);

-- 业务事务内原子写入 (伪代码)
@Transactional
public void createMeeting(MeetingCmd cmd) {
    meetingRepo.save(meeting);                    // 1. 核心业务写入
    outboxRepo.save(OutboxEvent.builder()         // 2. 同一事务写 Outbox
        .aggregateId(meeting.getId())
        .eventType("MEETING_CREATED")
        .payload(toJson(cmd))
        .build());
    // 无需显式 Commit，Spring 托管事务边界
}

-- 发布器 (独立线程/调度任务，幂等发布)
@Scheduled(fixedDelay = 500)
public void publishOutbox() {
    List<OutboxEvent> events = outboxRepo.findTop100ByStatusOrderByCreatedAt(0);
    for (OutboxEvent e : events) {
        try {
            rocketMQTemplate.sendInTransaction("meeting-topic", e.getPayload(), e.getId());
            e.markPublished(); outboxRepo.save(e);
        } catch (Exception ex) {
            e.incrementRetry(); outboxRepo.save(e);
            if (e.getRetryCount() > 10) alertManualIntervention(e);
        }
    }
}

// 1. 租户上下文传递 (ThreadLocal / Reactor Context)
public class TenantContextHolder {
    private static final ThreadLocal<Long> TENANT_ID = new ThreadLocal<>();
    public static void set(Long id) { TENANT_ID.set(id); }
    public static Long get() { return TENANT_ID.get(); }
    public static void clear() { TENANT_ID.remove(); }
}

// 2. MyBatis-Plus 内部拦截器自动注入租户条件 + 部门数据权限
@Intercepts(@Signature(type = Executor.class, method = "query", args = {MappedStatement.class, Object.class, RowBounds.class, ResultHandler.class}))
public class MultiTenantSqlInterceptor implements Interceptor {
    @Override
    public Object intercept(Invocation invocation) throws Throwable {
        MappedStatement ms = (MappedStatement) invocation.getArgs()[0];
        // 仅拦截 SELECT / UPDATE / DELETE，排除系统表、定时任务表
        if (isBusinessTable(ms) && TenantContextHolder.get() != null) {
            BoundSql boundSql = ms.getBoundSql(invocation.getArgs()[1]);
            String originalSql = boundSql.getSql();
            // 解析 AST (JSQLParser) 注入 WHERE 条件，避免字符串拼接注入风险
            String rewrittenSql = SqlRewriter.injectTenantAndDeptFilter(
                originalSql, 
                TenantContextHolder.get(), 
                DataPermissionService.resolveDeptIds() // 动态查询用户可访问部门树
            );
            // 替换 BoundSql (反射修改私有字段)
            Field field = BoundSql.class.getDeclaredField("sql");
            field.setAccessible(true);
            field.set(boundSql, rewrittenSql);
        }
        return invocation.proceed();
    }
}

// 3. 动态权限表达式引擎 (支持 SpEL / MVEL)
@Component
public class DataPermissionService {
    public List<Long> resolveDeptIds() {
        // 从 Redis 缓存获取用户部门树，支持 "本部门及子部门"、"跨部门协作组" 等复杂模型
        return deptCache.getDeptTree(SecurityUtils.getUserId());
    }
}

-- 影子表结构同步 (Flyway 管理)
CREATE TABLE meeting_shadow_202407 LIKE meeting; -- 含索引、分区、注释
ALTER TABLE meeting_shadow_202407 COMMENT = '灰度影子表 v2.3 版本验证用';

-- 双写触发器 (应用层双写更可控，避免触发器性能抖动)
-- 应用代码:
meetingRepo.save(meeting); // 写主表
if (CanaryContext.isGray()) {
    shadowMeetingRepo.save(meeting); // 写影子表，捕获异常仅记录不抛出
}

-- 异步比对作业 (Flink SQL / Airflow DAG)
SELECT 
    'ROW_COUNT_MISMATCH' AS check_type,
    COUNT(*) AS main_cnt, 
    (SELECT COUNT(*) FROM meeting_shadow_202407) AS shadow_cnt
FROM meeting
WHERE meeting_date >= CURRENT_DATE - INTERVAL '1' DAY
HAVING main_cnt != shadow_cnt
UNION ALL
SELECT 
    'DATA_MISMATCH',
    m.meeting_id,
    m.version,
    s.version
FROM meeting m
JOIN meeting_shadow_202407 s ON m.meeting_id = s.meeting_id
WHERE m.version != s.version 
  OR m.status != s.status 
  OR m.content_hash != s.content_hash; -- 关键字段 Hash 比对

# canary-rollback-rules.yml (配置中心动态下发)
rules:
  - name: "core_api_error_rate"
    metric: "http_server_requests_seconds_count{status=~'5..',uri=~/meeting/.*}"
    threshold: "rate > 0.01" # 5xx 错误率 > 1%
    duration: "3m"
    action: "FULL_ROLLBACK"
    notify: ["oncall-sre", "pd-leader"]

  - name: "db_latency_p99"
    metric: "hikaricp_connection_usage_seconds_bucket{le='2.0'}"
    threshold: "quantile(0.99) > 2.0"
    duration: "5m"
    action: "PAUSE_TRAFFIC_INCREASE" # 暂停扩大灰度比例
    notify: ["dba-group"]

  - name: "data_consistency_drift"
    metric: "custom_outbox_data_mismatch_total"
    threshold: "value > 0"
    duration: "1m"
    action: "FULL_ROLLBACK"
    notify: ["architect-team"]

db-migration-assets/
├── dialect-rulesets/          # 方言转译规则集 (版本化)
│   ├── oracle-to-dm-v1.2.xml
│   └── oracle-to-kingbase-v1.0.xml
├── templates/                 # 标准化模版
│   ├── flyway-migration-template.sql
│   ├── outbox-table-ddl.sql
│   ├── rls-policy-template.sql
│   └── canary-rollback-rules.yml
├── runbooks/                  # 运维手册 (可执行)
│   ├── pre-check-checklist.md
│   ├── cutover-playbook.md
│   └── rollback-playbook.md
├── benchmarks/                # 性能基线库
│   ├── dm8-tpcc-2024Q3.md
│   └── kingbase-join-benchmark.md
└── incidents/                 # 事故复盘库 (脱敏)
    ├── INC-20240701-primary-key-conflict.md
    └── INC-20240815-rls-performance.md