feat(ci): 迁移矩阵补 SQL Server 方言——sp_getapplock 会话锁与 mssql 服务容器

- migrate.go: dialectOf 映射 sqlserver/mssql;versionTableExists 用
  sys.objects 探测;acquireSessionLock 增加 sp_getapplock 会话锁
  (Exclusive/Session/LockTimeout=0,返回码>=0 视为获锁),release 对应
  sp_releaseapplock——并发首启 AutoMigrate 串行化与 MySQL/PG 同语义
- 集成测试: SQLServer case(TEST_SQLSERVER_DSN),建库/删库(SINGLE_USER
  回滚连接)/DSN database 参数/sys.objects 探测表
- ci.yml: migrate-matrix 挂 mssql 2022 容器(health 用 mssql-tools18
  sqlcmd -C -No),job 更名 MySQL/Postgres/SQLServer
- configexplorer: 补 restoreDSNPassword/isTextFormat/parseID 单测

Author: cuihairu

.github/workflows/ci.yml

@@ -290,13 +290,13 @@ jobs:
           fi
 
   migrate-matrix:
-    name: Migration Matrix (MySQL/Postgres)
+    name: Migration Matrix (MySQL/Postgres/SQLServer)
     # Phase 4 of docs/architecture/database-migration-strategy.md: the
-    # versioned migration executor must work on all three dialects. SQLite is
+    # versioned migration executor must work on all four dialects. SQLite is
     # covered by the unit tests in internal/svc/migrations_test.go; this job
-    # runs the integration-tagged matrix against real MySQL and Postgres
-    # servers (fresh DB → baseline + catch-up, concurrent first boot proving
-    # the session lock, idempotent second boot).
+    # runs the integration-tagged matrix against real MySQL, Postgres and
+    # SQL Server servers (fresh DB → baseline + catch-up, concurrent first
+    # boot proving the session lock, idempotent second boot).
     runs-on: ubuntu-latest
     timeout-minutes: 20
     needs: [test]
@@ -324,9 +324,22 @@ jobs:
           --health-interval 5s
           --health-timeout 5s
           --health-retries 20
+      mssql:
+        image: mcr.microsoft.com/mssql/server:2022-latest
+        env:
+          ACCEPT_EULA: "Y"
+          MSSQL_SA_PASSWORD: "YourStr0ngPassw0rd"
+        ports:
+          - 1433:1433
+        options: >-
+          --health-cmd "/opt/mssql-tools18/bin/sqlcmd -C -No -S 127.0.0.1 -U sa -P 'YourStr0ngPassw0rd' -Q 'SELECT 1'"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 30
     env:
       TEST_MYSQL_DSN: "root:root@tcp(127.0.0.1:3306)/"
       TEST_POSTGRES_DSN: "postgres://postgres:postgres@127.0.0.1:5432/postgres?sslmode=disable"
+      TEST_SQLSERVER_DSN: "sqlserver://sa:YourStr0ngPassw0rd@127.0.0.1:1433"
     steps:
       - timeout-minutes: 3
         uses: actions/checkout@v7

internal/api/configexplorer/service_test.go

@@ -52,3 +52,48 @@ func TestFormatOf(t *testing.T) {
 		}
 	}
 }
+
+func TestRestoreDSNPassword(t *testing.T) {
+	cases := []struct {
+		name, oldDSN, newDSN, want string
+	}{
+		{"keeps old host tail", "user:secret@tcp(db:3306)/x", "user:******@tcp(newdb:3307)/y", "user:secret@tcp(newdb:3307)/y"},
+		{"no at in old", "plain-dsn", "user:******@h/d", "plain-dsn"},
+		{"no at in new", "user:secret@h/d", "plain", "user:secret@h/d"},
+		{"old cred without colon", "user@h/d", "user:******@h2/d", "user@h/d"},
+		{"pg url", "postgres://u:p@h:5432/db", "postgres://u:******@h2:5432/db2", "postgres://u:p@h2:5432/db2"},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := restoreDSNPassword(tc.oldDSN, tc.newDSN); got != tc.want {
+				t.Fatalf("got %q, want %q", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestIsTextFormat(t *testing.T) {
+	text := []string{"json", "yaml", "csv", "ini", "xml", "lua", "python", "txt", "md", "toml", "properties", "plaintext"}
+	for _, f := range text {
+		if !isTextFormat(f) {
+			t.Errorf("isTextFormat(%q) = false, want true", f)
+		}
+	}
+	for _, f := range []string{"png", "xlsx", "bin", ""} {
+		if isTextFormat(f) {
+			t.Errorf("isTextFormat(%q) = true, want false", f)
+		}
+	}
+}
+
+func TestParseID(t *testing.T) {
+	if id, err := parseID("42"); err != nil || id != 42 {
+		t.Fatalf("parseID(42) = (%d, %v)", id, err)
+	}
+	if _, err := parseID("abc"); err == nil {
+		t.Fatal("parseID(abc) should fail")
+	}
+	if _, err := parseID("-1"); err == nil {
+		t.Fatal("parseID(-1) should fail")
+	}
+}

internal/db/migrate/migrate.go

@@ -59,6 +59,8 @@ func dialectOf(gormDialect string) string {
 		return "mysql"
 	case "postgres", "postgresql":
 		return "postgres"
+	case "sqlserver", "mssql":
+		return "sqlserver"
 	case "sqlite", "sqlite3":
 		return "sqlite3"
 	default:
@@ -72,6 +74,9 @@ const sessionLockDeadline = 60 * time.Second
 
 const mysqlMigrationLockName = "croupier_schema_migration"
 
+// Application-lock resource name for SQL Server (sp_getapplock).
+const sqlServerMigrationLockName = "croupier_schema_migration"
+
 // Advisory lock keys for Postgres (two int32 components). Chosen so they spell
 // "crou"+"pier" in ASCII; any stable constant pair works as long as every
 // process uses the same one.
@@ -85,7 +90,7 @@ const (
 // done. SQLite returns a no-op release because it is single-writer.
 func acquireSessionLock(ctx context.Context, sqlDB *sql.DB, gooseDialect string) (func(), error) {
 	switch gooseDialect {
-	case "mysql", "postgres":
+	case "mysql", "postgres", "sqlserver":
 	default:
 		return func() {}, nil
 	}
@@ -110,6 +115,17 @@ func acquireSessionLock(ctx context.Context, sqlDB *sql.DB, gooseDialect string)
 				return false, err
 			}
 			return ok, nil
+		case "sqlserver":
+			// sp_getapplock: session-scoped exclusive application lock on
+			// the bound connection. Return codes: 0 = granted, 1 = granted
+			// after wait; <0 = timeout/cancel/error. LockTimeout 0 →
+			// immediate, -1 when held elsewhere.
+			var code sql.NullInt32
+			query := "DECLARE @r int; EXEC @r = sp_getapplock @Resource = ?, @LockMode = 'Exclusive', @LockOwner = 'Session', @LockTimeout = 0; SELECT @r"
+			if err := conn.QueryRowContext(ctx, query, sqlServerMigrationLockName).Scan(&code); err != nil {
+				return false, err
+			}
+			return code.Valid && code.Int32 >= 0, nil
 		}
 		return false, nil
 	}
@@ -143,6 +159,8 @@ func acquireSessionLock(ctx context.Context, sqlDB *sql.DB, gooseDialect string)
 		case "postgres":
 			query := fmt.Sprintf("SELECT pg_advisory_unlock(%d, %d)", pgAdvisoryLockKey1, pgAdvisoryLockKey2)
 			_, _ = conn.ExecContext(context.Background(), query)
+		case "sqlserver":
+			_, _ = conn.ExecContext(context.Background(), "EXEC sp_releaseapplock @Resource = ?, @LockOwner = 'Session'", sqlServerMigrationLockName)
 		}
 		conn.Close()
 	}
@@ -253,6 +271,8 @@ func versionTableExists(ctx context.Context, sqlDB *sql.DB, gooseDialect string)
 		query = "SELECT COUNT(1) FROM sqlite_master WHERE type = 'table' AND name = '" + VersionTableName + "'"
 	case "postgres":
 		query = "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = current_schema() AND table_name = '" + VersionTableName + "'"
+	case "sqlserver":
+		query = "SELECT COUNT(1) FROM sys.objects WHERE type = 'U' AND name = '" + VersionTableName + "'"
 	default:
 		query = "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = DATABASE() AND table_name = '" + VersionTableName + "'"
 	}

internal/svc/migrations_integration_test.go

@@ -9,6 +9,7 @@
 //
 //	TEST_MYSQL_DSN="root:root@tcp(127.0.0.1:3306)/"
 //	TEST_POSTGRES_DSN="postgres://postgres:postgres@127.0.0.1:5432/postgres?sslmode=disable"
+//	TEST_SQLSERVER_DSN="sqlserver://sa:YourStr0ngPass@127.0.0.1:1433"
 //
 // Each run creates (and finally drops) a uniquely named throwaway database.
 package svc
@@ -26,6 +27,7 @@ import (
 	"github.com/cuihairu/croupier/internal/db/migrate"
 	gmysql "gorm.io/driver/mysql"
 	gpostgres "gorm.io/driver/postgres"
+	gsqlserver "gorm.io/driver/sqlserver"
 	"gorm.io/gorm"
 	"gorm.io/gorm/logger"
 )
@@ -48,6 +50,13 @@ func TestMigrationMatrix(t *testing.T) {
 		}
 		runMigrationMatrixCase(t, "postgres", dsn)
 	})
+	t.Run("SQLServer", func(t *testing.T) {
+		dsn := envOr("TEST_SQLSERVER_DSN", "")
+		if dsn == "" {
+			t.Skip("TEST_SQLSERVER_DSN not set")
+		}
+		runMigrationMatrixCase(t, "sqlserver", dsn)
+	})
 }
 
 func runMigrationMatrixCase(t *testing.T, dialect, adminDSN string) {
@@ -64,23 +73,29 @@ func runMigrationMatrixCase(t *testing.T, dialect, adminDSN string) {
 		open = func(dsn string) (*gorm.DB, error) {
 			return gorm.Open(gpostgres.Open(dsn), &gorm.Config{Logger: logger.Default.LogMode(logger.Silent)})
 		}
+	case "sqlserver":
+		open = func(dsn string) (*gorm.DB, error) {
+			return gorm.Open(gsqlserver.Open(dsn), &gorm.Config{Logger: logger.Default.LogMode(logger.Silent)})
+		}
 	}
 
 	admin, err := open(adminDSN)
 	if err != nil {
 		t.Fatalf("open admin connection: %v", err)
 	}
 	create := map[string]string{
-		"mysql":    fmt.Sprintf("CREATE DATABASE %s", dbName),
-		"postgres": fmt.Sprintf("CREATE DATABASE %s", dbName),
+		"mysql":     fmt.Sprintf("CREATE DATABASE %s", dbName),
+		"postgres":  fmt.Sprintf("CREATE DATABASE %s", dbName),
+		"sqlserver": fmt.Sprintf("CREATE DATABASE [%s]", dbName),
 	}[dialect]
 	if err := admin.Exec(create).Error; err != nil {
 		t.Fatalf("create throwaway database: %v", err)
 	}
 	t.Cleanup(func() {
 		drop := map[string]string{
-			"mysql":    fmt.Sprintf("DROP DATABASE IF EXISTS %s", dbName),
-			"postgres": fmt.Sprintf("DROP DATABASE IF EXISTS %s", dbName),
+			"mysql":     fmt.Sprintf("DROP DATABASE IF EXISTS %s", dbName),
+			"postgres":  fmt.Sprintf("DROP DATABASE IF EXISTS %s", dbName),
+			"sqlserver": fmt.Sprintf("IF DB_ID('%s') IS NOT NULL ALTER DATABASE [%s] SET SINGLE_USER WITH ROLLBACK IMMEDIATE; DROP DATABASE IF EXISTS [%s]", dbName, dbName, dbName),
 		}[dialect]
 		if err := admin.Exec(drop).Error; err != nil {
 			t.Logf("cleanup drop database: %v", err)
@@ -102,6 +117,16 @@ func runMigrationMatrixCase(t *testing.T, dialect, adminDSN string) {
 			u.Path = "/" + name
 			return u.String()
 		},
+		"sqlserver": func(dsn, name string) string {
+			u, err := url.Parse(dsn)
+			if err != nil {
+				t.Fatalf("parse sqlserver DSN: %v", err)
+			}
+			q := u.Query()
+			q.Set("database", name)
+			u.RawQuery = q.Encode()
+			return u.String()
+		},
 	}[dialect](adminDSN, dbName)
 
 	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Minute)
@@ -146,7 +171,7 @@ func runMigrationMatrixCase(t *testing.T, dialect, adminDSN string) {
 	if err != nil {
 		t.Fatalf("sql.DB: %v", err)
 	}
-	gormDialect := map[string]string{"mysql": "mysql", "postgres": "postgres"}[dialect]
+	gormDialect := map[string]string{"mysql": "mysql", "postgres": "postgres", "sqlserver": "sqlserver"}[dialect]
 	version, ok, err := migrate.CurrentVersion(ctx, sqlDB, gormDialect)
 	if err != nil {
 		t.Fatalf("CurrentVersion: %v", err)
@@ -158,8 +183,9 @@ func runMigrationMatrixCase(t *testing.T, dialect, adminDSN string) {
 	// Spot-check a baseline table exists (admins is a meta model).
 	var count int
 	adminTable := map[string]string{
-		"mysql":    "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = DATABASE() AND table_name = 'admins'",
-		"postgres": "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = current_schema() AND table_name = 'admins'",
+		"mysql":     "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = DATABASE() AND table_name = 'admins'",
+		"postgres":  "SELECT COUNT(1) FROM information_schema.tables WHERE table_schema = current_schema() AND table_name = 'admins'",
+		"sqlserver": "SELECT COUNT(1) FROM sys.objects WHERE type = 'U' AND name = 'admins'",
 	}[dialect]
 	if err := db.Raw(adminTable).Scan(&count).Error; err != nil {
 		t.Fatalf("probe admins table: %v", err)