fix: harden tenant auth and quality gates

2026-08-28 11:44:16 +08:00
parent c3bf8af3e6
commit 2744690f9f
51 changed files with 1750 additions and 466 deletions
@@ -36,6 +36,10 @@ export class PrismaService extends PrismaClient implements OnModuleDestroy {
    const poolMax = Number.isInteger(configuredPoolMax) && configuredPoolMax > 0
      ? configuredPoolMax
      : protocolLogRole ? 4 : outboxRole ? 6 : callbackRole ? 16 : workerRole ? 8 : 32;
+    const allowDevelopmentDefault = process.env.NODE_ENV === 'development' || process.env.NODE_ENV === 'test';
+    if (!databaseUrl && !allowDevelopmentDefault) {
+      throw new Error(`DATABASE_URL is required for CMPP process role ${processRole}`);
+    }
    const databasePool = new Pool({
      connectionString: databaseUrl
        ?? 'postgresql://cmpp:cmpp_password@localhost:5432/cmpp_platform?schema=public',