3 Commits

Include renames

Author	SHA1	Message	Date
Hermes CI Fix	d56ba24f31	feat: deps越权防护(query/header与token不一致403) + resolve_entity_for_request + 任务⑥开发规范沉淀	2026-08-11 11:30:08 +08:00
Hermes CI Fix	b31f9b80c4	feat: 账套模式后端 — token绑定entity_id + user_entities授权表 + 解析链倒置 ... - auth_middleware: create_token存JSON{user_id,entity_id}，旧int格式token强制下线 - models: 新增UserEntity授权表(user_id↔entity_id多对多,唯一约束) - database: init_db自动建表+存量用户×active企业默认授权(平滑迁移) - deps: get_entity_id解析链倒置 token优先 → Bot白名单(query/header校验entity active) → 默认1 - auth: login加entity_id+授权校验; 新增switch-entity/my-entities/登录页entities接口; register自动授权	2026-08-11 11:24:52 +08:00
Hermes CI Fix	e959c40b1c	feat: 多租户实时切换 — 前端拦截器统一entity_id + 后端get_entity_id依赖 + dashboard 6端点支持租户过滤 ... - 前端: api/index.ts拦截器自动附加X-Entity-Id header + entity_id query参数 - 后端: 新增app/deps.py的get_entity_id公共依赖(query→header→默认1) - dashboard.py: summary/kpis/finance-analysis/predict/my-kpis/my-dashboard全部支持entity_id - 解决: 42个页面仅13个传entity_id导致切换企业后数据混乱	2026-08-11 11:11:17 +08:00