feat(M08-C): 补会员检索与员工概况

backend/src/orders/order-query-repository.ts

@@ -58,7 +58,8 @@ export class OrderQueryRepository {
       params.push(input.storeId);
     }
     const whereSql = where.join(' AND ');
-    const offset = (input.page - 1) * input.pageSize;
+    const pageSize = Math.max(1, Math.min(50, Math.trunc(input.pageSize)));
+    const offset = Math.max(0, (Math.trunc(input.page) - 1) * pageSize);
     const [counts] = await this.pool.execute<CountRow[]>(
       `SELECT COUNT(DISTINCT o.id) AS total
        FROM qipai_orders o
@@ -89,14 +90,14 @@ export class OrderQueryRepository {
         )
        WHERE ${whereSql}
        ORDER BY o.created_at DESC, o.id DESC
-       LIMIT ? OFFSET ?`,
-      [...params, input.pageSize, offset]
+       LIMIT ${pageSize} OFFSET ${offset}`,
+      params
     );
     return {
       items: rows.map(publicOrder),
       total: Number(counts[0]?.total ?? 0),
       page: input.page,
-      pageSize: input.pageSize
+      pageSize
     };
   }