cma-management

2 Commits

Include renames

Author SHA1 Message Date

Author	SHA1	Message	Date
wecom-fullstack	467472311d	feat(cma): audit write-side entity closure + entity-dimension data dictionary task dama-entity-isolation-sweep-20260923 (sections 2-2 4/5, merged by projectBot 2026-09-23 18:2x) 4) operation_logs write side: every audit write carries the account (no DDL, no column added) - new app/utils/oplog.py::log_op() single wrapper: sets detail.entity_id; scope=global for by-design non-entity writes (platform dict / role-level); scope=batch + OPLOG_BATCH_NO_ENTITY sentinel for cross-account batches; no context -> OPLOG_NO_ENTITY sentinel (never guess) - 16 remaining construction points converted (data/alert_rules/bi_reports/kpi_causality/ bot_bridge x2/budget_generate/driver_budget/kpis _log x3/templates _log x2/erp_sync); pre-4 state had 20 sites without entity_id, now 0 outside the wrapper - read side untouched (knowledge_service still user_id fallback); history not backfilled 5) docs/entity-dimension-data-dictionary.md: 8-table three-state registry (kpi_templates/driver_factor_templates/scenario_suggestions/bot_bridge_config = non-entity; kpi_subject_map = inherited via kpi_id; analysis_results/subjects = account dimension, legacy rows still NULL -> other task; operation_logs = non-entity column + detail.entity_id) Evidence: RED 2 failed/7 passed (reverted call sites) -> GREEN full 1428 passed; 9 new tests including two read-back rows; app md5 restore verified identical; no cross-account writes LOCAL commit only - push is gated (ahead contains the P1 entity-dim batch commit `fb4609b`)	2026-09-23 23:08:26 +08:00
wecom-fullstack	477515c453	fix(cma): 隔离扫尾 — kpi_alert_higher_better 拆账套 + tenant/switch 审计收口 ci/woodpecker/push/main Pipeline was canceled Details 任务 dama-entity-isolation-sweep-20260923（DAMA 独立回查漏项 / 任总 2026-09-23「按照建议执行」） ① 补漏同源全局键 kpi_alert_higher_better（system_configs，零 DDL） - deviation_engine: 新增 higher_better_key(entity_id)；get_higher_better_codes(db, entity_id) 改为只读本账套键、不回退旧全局键；未配置 → DEFAULT_HIGHER_BETTER（兜底，与原行为逐字一致） - budget.py: GET/PUT /alert-direction 挂 get_entity_id，只读写会话账套键；body entity_id 不信 - scripts/migrate_higher_better_key_entity_20260923.py: --check/--apply/--down + 库名保护 + 幂等 - 生产实况：库内该键 0 行 ⇒ 无原值可搬运（--apply 走 skip 零写入），e1 行为不变 ② kpi_visibility 口径裁定：角色级天然全局 = 非账套维度，不拆（关闭本项） - auth_middleware 注释 + docstring 登记「有意不做账套后缀」；口径字典 docs/global-config-keys-caliber-20260923.md（含 budget_mode/budget_driver_mode 评估结论） ③ tenant/switch 审计收口 - detail 显式 from_entity_id → to_entity_id + source + operator{id,username,name,role} - 审计失败不静默：同事务回滚 + AUDIT_WRITE_FAILED ERROR + HTTP 500（不留「改了但没审计」） - GET /current 无写路径不落审计；历史缺口不补写证据：新增/改写用例 17 条；全量 1397 passed（去新增文件 1380 + 17）；RED 态 8 failed	2026-09-23 18:29:52 +08:00

467472311d

feat(cma): audit write-side entity closure + entity-dimension data dictionary

task dama-entity-isolation-sweep-20260923 (sections 2-2 4/5, merged by projectBot 2026-09-23 18:2x)

4) operation_logs write side: every audit write carries the account (no DDL, no column added)

   - new app/utils/oplog.py::log_op() single wrapper: sets detail.entity_id; scope=global for

     by-design non-entity writes (platform dict / role-level); scope=batch + OPLOG_BATCH_NO_ENTITY

     sentinel for cross-account batches; no context -> OPLOG_NO_ENTITY sentinel (never guess)

   - 16 remaining construction points converted (data/alert_rules/bi_reports/kpi_causality/

     bot_bridge x2/budget_generate/driver_budget/kpis _log x3/templates _log x2/erp_sync);

     pre-4 state had 20 sites without entity_id, now 0 outside the wrapper

   - read side untouched (knowledge_service still user_id fallback); history not backfilled

5) docs/entity-dimension-data-dictionary.md: 8-table three-state registry

   (kpi_templates/driver_factor_templates/scenario_suggestions/bot_bridge_config = non-entity;

    kpi_subject_map = inherited via kpi_id; analysis_results/subjects = account dimension,

    legacy rows still NULL -> other task; operation_logs = non-entity column + detail.entity_id)

Evidence: RED 2 failed/7 passed (reverted call sites) -> GREEN full 1428 passed; 9 new tests

including two read-back rows; app md5 restore verified identical; no cross-account writes

LOCAL commit only - push is gated (ahead contains the P1 entity-dim batch commit fb4609b)

2026-09-23 23:08:26 +08:00

wecom-fullstack

477515c453

fix(cma): 隔离扫尾 — kpi_alert_higher_better 拆账套 + tenant/switch 审计收口

ci/woodpecker/push/main Pipeline was canceled

Details

任务 dama-entity-isolation-sweep-20260923（DAMA 独立回查漏项 / 任总 2026-09-23「按照建议执行」）

① 补漏同源全局键 kpi_alert_higher_better（system_configs，零 DDL）
   - deviation_engine: 新增 higher_better_key(entity_id)；get_higher_better_codes(db, entity_id)
     改为只读本账套键、不回退旧全局键；未配置 → DEFAULT_HIGHER_BETTER（兜底，与原行为逐字一致）
   - budget.py: GET/PUT /alert-direction 挂 get_entity_id，只读写会话账套键；body entity_id 不信
   - scripts/migrate_higher_better_key_entity_20260923.py: --check/--apply/--down + 库名保护 + 幂等
   - 生产实况：库内该键 0 行 ⇒ 无原值可搬运（--apply 走 skip 零写入），e1 行为不变

② kpi_visibility 口径裁定：角色级天然全局 = 非账套维度，不拆（关闭本项）
   - auth_middleware 注释 + docstring 登记「有意不做账套后缀」；口径字典
     docs/global-config-keys-caliber-20260923.md（含 budget_mode/budget_driver_mode 评估结论）

③ tenant/switch 审计收口
   - detail 显式 from_entity_id → to_entity_id + source + operator{id,username,name,role}
   - 审计失败不静默：同事务回滚 + AUDIT_WRITE_FAILED ERROR + HTTP 500（不留「改了但没审计」）
   - GET /current 无写路径不落审计；历史缺口不补写

证据：新增/改写用例 17 条；全量 1397 passed（去新增文件 1380 + 17）；RED 态 8 failed

2026-09-23 18:29:52 +08:00