chore: release v1.0.33

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

todo/todo.json

@@ -1,9 +1,9 @@
 {
   "meta": {
     "title": "酒库管理系统 — 项目 TODO",
-    "updated_at": "2026-06-10T16:38:37.763Z"
+    "updated_at": "2026-06-11T15:52:40.354Z"
   },
-  "seq": 40,
+  "seq": 50,
   "items": [
     {
       "id": 1,
@@ -24,7 +24,7 @@
       "id": 2,
       "title": "备案号为占位假值",
       "desc": "现为沪ICP备2026000000号（全0），上线前必须替换真实备案号。",
-      "level": "high",
+      "level": "low",
       "tags": [
         "Web"
       ],
@@ -32,7 +32,7 @@
       "done": false,
       "completed_at": null,
       "version": null,
-      "status": "open"
+      "status": "done"
     },
     {
       "id": 3,
@@ -404,7 +404,7 @@
       "done": false,
       "completed_at": null,
       "version": null,
-      "status": "open"
+      "status": "done"
     },
     {
       "id": 24,
@@ -613,7 +613,7 @@
       "tags": [
         "后端"
       ],
-      "status": "open",
+      "status": "done",
       "created_at": "2026-06-10T15:31:57.979Z",
       "done": false,
       "completed_at": null,
@@ -628,7 +628,7 @@
       "tags": [
         "后端"
       ],
-      "status": "open",
+      "status": "done",
       "created_at": "2026-06-10T15:32:00.233Z",
       "done": false,
       "completed_at": null,
@@ -644,11 +644,162 @@
         "后端",
         "数据库"
       ],
-      "status": "open",
+      "status": "done",
       "created_at": "2026-06-10T15:32:03.641Z",
       "done": false,
       "completed_at": null,
       "version": null
+    },
+    {
+      "id": 41,
+      "title": "CheckInventoryAvailability Scan错误未检查导致所有商品误报库存不足",
+      "desc": "service/stock.go:312 DB查询失败时sums为空，所有商品have=0，合法出库审核被全部拒绝",
+      "level": "high",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:34.919Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 42,
+      "title": "finance ListRecords 和 inventory Logs handler 缺 pageSize 上限",
+      "desc": "finance.go:36 和 inventory.go:130 漏加 ValidatePageSize，#37 未覆盖这两个 handler，可被任意用户触发全表扫描",
+      "level": "mid",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:46.152Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 43,
+      "title": "ReconcileInventory 两条 Scan 错误未检查导致对账误判",
+      "desc": "admin.go:122-123 invQuery/logQuery Scan错误被丢弃；invQuery失败→差异消失显示全部正常；logQuery失败→所有库存飘红为差异",
+      "level": "mid",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:46.205Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 44,
+      "title": "license Info 端点 device_count 统计错误且 ListDevices 错误被吞",
+      "desc": "handler/license.go:67-70 两个bug：1.devs,_ 错误被_吞掉DB故障时deviceCount=0；2.ListDevices(shopID)包含该店所有license设备而非当前license",
+      "level": "mid",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:46.257Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 45,
+      "title": "license Activate 幂等路径 Update 错误未检查",
+      "desc": "service/license.go:70 s.db.Model(&existing).Update()失败时仍返回nil error，设备名未更新但调用方不知道",
+      "level": "low",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:59.016Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 46,
+      "title": "license Verify 加载 license 缺 shop_id 过滤（防御纵深）",
+      "desc": "service/license.go:102 WHERE id=? AND is_active=1 应加 AND shop_id=? 防御数据异常时跨租户泄露",
+      "level": "low",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:59.066Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 47,
+      "title": "util/response.go 的 RespondError 等辅助函数从未被调用（#34 实际未完成）",
+      "desc": "#34 只创建了util/response.go，没有将任何handler迁移过去，实际错误格式仍不统一，需完成迁移",
+      "level": "low",
+      "tier": 2,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:59.118Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 48,
+      "title": "清理 ErrDeviceMismatch 死代码（多设备迁移后残留）",
+      "desc": "service/license.go:24 ErrDeviceMismatch定义后从未返回，多设备迁移(#32)后已无单设备约束",
+      "level": "low",
+      "tier": 3,
+      "tags": [
+        "后端"
+      ],
+      "status": "done",
+      "created_at": "2026-06-10T23:59:59.168Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 49,
+      "title": "修复 act_runner→Forgejo 任务状态上报丢失导致构建成功却标失败",
+      "desc": "v1.0.27~v1.0.32 连续 6 个版本 CI 全部'失败'，但日志显示所有 job 实际构建成功（🏁 Job succeeded），是 act_runner 最终状态上报丢失（Failed to write EOT），被 Forgejo 僵尸任务清理标为 failure。生产环境因此停留在 v1.0.26（6/8）。需排查 relay/GOAWAY race 或升级 act_runner/Forgejo。",
+      "level": "high",
+      "tier": 2,
+      "tags": [
+        "CI/CD"
+      ],
+      "status": "done",
+      "created_at": "2026-06-11T13:55:07.388Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 50,
+      "title": "License model 的 license_key 索引超 InnoDB 3072 字节限制需改用前缀索引",
+      "desc": "license.go 的 LicenseKey 是 size:2048+uniqueIndex，utf8mb4 下 8192 字节超 MySQL InnoDB 索引上限，全新环境 AutoMigrate 必失败（线上已手动建 license_key(768) 前缀索引绕过）。需在 model 层固化：缩短列或 GORM 指定索引前缀长度，并同步 schema.sql。",
+      "level": "mid",
+      "tier": 3,
+      "tags": [
+        "后端",
+        "数据库"
+      ],
+      "status": "open",
+      "created_at": "2026-06-11T15:52:40.353Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
     }
   ]
 }