Hermes CI Fix 1f7be6b5ae fix(cash): select cash-balance sync targets by explicit kpi_code whitelist ...

The voucher-import linkage branch picked write targets by kpi_name LIKE '%cash%' and wrote the monetary-fund ledger balance (yuan) into derived KPIs (F_OP_CFLOW / F_FCF / F_BEP_REVENUE_CASH / F_BEP_COVER_CASH). Replace with an explicit kpi_code whitelist plus a unit/caliber gate that refuses writes on mismatch and reports them via kpi_sync_skipped.

Read-only equivalence probe (real function + intercepted writes + rollback) before/after: before wrote 4 derived KPIs, after writes only F_CASH_SAFETY. tests: +9 new cases; pytest failure set identical to baseline (15/15 same ids).

2026-09-14 20:37:12 +08:00

..

__init__.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

action_plans.py

fix(security): 4端点补跨租户鉴权 — 实体1会话读实体2数据(200)→403 (cma-cross-entity-endpoints-auth-20260914)

2026-09-14 11:19:05 +08:00

ai_analysis.py

fix(security): ai_analysis多租户隔离缺口 + dashboard预警计数 + bot_kpis归属 + cost账套过滤 + kpis create白名单 (OpenCode审查20260907)

2026-09-07 10:22:24 +08:00

ai_suggestions.py

feat(r1-touch): 建议分级+决策类推送+应用前预览 (alert不推送/同title防轰炸/preview对比)

2026-08-31 09:07:54 +08:00

alert_rules.py

feat(alerts): 新增客户集中度预警规则 customer_concentration + 预测偏差规则启用/联动每日预警生成

2026-09-10 09:56:50 +08:00

alerts.py

fix(security): 4端点补跨租户鉴权 — 实体1会话读实体2数据(200)→403 (cma-cross-entity-endpoints-auth-20260914)

2026-09-14 11:19:05 +08:00

alignment.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

analysis_results.py

feat: 所有表单的部门/负责人改为下拉框(自动读取组织+用户数据)

2026-07-29 18:25:08 +08:00

audit_log.py

feat(bot-bridge): 新增智享通科目字典写入端点 POST /api/cma/bot/dict/zxt-account — 幂等UPSERT(JSON/CSV)+L3分级+audit留痕, 解除 ops 管道 API 迁移阻塞 (ops-cma-dict-write-endpoint-20260912)

2026-09-12 10:07:20 +08:00

auth.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

bi_reports.py

feat: 多租户隔离P2批2 — 预算/成本/费用/预警规则/BI报表加entity_id

2026-08-23 18:20:29 +08:00

bot_bridge_v2.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

bot_bridge.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

bot_iron_law.py

feat: Bot API L1-L4风险分级标注 + 操作审计日志

2026-08-28 00:31:31 +08:00

bot_kpis.py

fix(security): ai_analysis多租户隔离缺口 + dashboard预警计数 + bot_kpis归属 + cost账套过滤 + kpis create白名单 (OpenCode审查20260907)

2026-09-07 10:22:24 +08:00

bot_suggestions.py

feat(bot-tier): M1 Bot侧高危建议创建通道+目标值直写收口 (P0-②分层授权)

2026-09-03 18:08:27 +08:00

bsc_layers.py

feat: 账套模式全量接入 — 12个API entity_id统一走token解析链 + 前端登录选公司/切换器重签token

2026-08-11 11:29:39 +08:00

budget_generate.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

budget.py

fix(budget): 偏差检查同 KPI 多计划去重（deviation-check 补 db.flush）

2026-09-14 17:56:26 +08:00

cash_classify.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

cash_vouchers_json.py

fix(cash): 智享通凭证行级幂等键剔除派生period + period_conflict留痕 + 批内行序防吞行 (dama-zxt-idemkey-period-20260911)

2026-09-11 17:13:07 +08:00

cash.py

fix(cash): select cash-balance sync targets by explicit kpi_code whitelist

2026-09-14 20:37:12 +08:00

cashflow_structure.py

feat(cashflow): 按项目任务单复核修正——表名cashflow_statements+DoD兼容路径/菜单C组/角色收敛/术语0+验收脚本入库

2026-09-03 01:34:13 +08:00

cost.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

customer_dashboard.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

dashboard.py

feat(kpi): route all voucher_details consumers through single void-mark guard

2026-09-14 19:05:16 +08:00

data_classification.py

feat: 数据分类分级 — 重要数据标记+资产清单+CSV导出（8/20评估办法政策驱动）

2026-08-26 07:51:39 +08:00

data_quality.py

fix(security): retire check-governance + scope /reports/dupont to session entity

2026-09-14 12:09:04 +08:00

data.py

fix(data): 数据管理模块脱节修复 — Excel导入/sources端点 entity 隔离 + ERP直连通道诚实化(410) + 真实zxt链路展示

2026-09-08 11:19:38 +08:00

derivation_rules.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

deviation_push.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

driver_budget.py

feat: 驱动因子计划 — 模式切换+行业包+敏感性分析

2026-07-22 12:58:04 +08:00

entities.py

KPI通用化: bsc_layer_config表+API+企业选择器+企业CRUD

2026-07-19 10:07:46 +08:00

expenses.py

feat: 多租户隔离P2批2 — 预算/成本/费用/预警规则/BI报表加entity_id

2026-08-23 18:20:29 +08:00

growth_quality.py

feat: 账套模式全量接入 — 12个API entity_id统一走token解析链 + 前端登录选公司/切换器重签token

2026-08-11 11:29:39 +08:00

knowledge_articles.py

Revert "fix(knowledge): articles共享层语义对齐评审方案——entity_id=0系统共享(替代NULL) (entity-memory-partition 复核对齐)"

2026-09-03 23:09:58 +08:00

knowledge.py

feat(knowledge): 企业记忆分区——知识三表entity_id多租户隔离 (entity-memory-partition P1)

2026-09-03 23:00:15 +08:00

kpi_causality.py

feat: 因果链三层验证机制(P2) — 数据验证+人工确认+状态机

2026-08-27 15:51:19 +08:00

kpi_governance.py

feat: KPI治理规则2增加kpi_name必填校验 — 防空名KPI

2026-08-21 16:28:23 +08:00

kpis.py

fix(kpi): 阈值红黄绿读写/填写规则修复 — 统一解析器+红灯优先+建议可解析+前端校验+存量修正 (project-20260911-threshold-fix)

2026-09-11 17:25:24 +08:00

lead.py

feat: lead API加企微通知

2026-07-22 18:22:48 +08:00

maps.py

fix(maps): _auto_snapshot 补 entity_id 继承地图企业 — 修复 entity2 地图发布后版本行落 entity1 致版本列表为空 (project-20260908-map-versions-page)

2026-09-08 20:24:44 +08:00

notifications.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

objectives.py

feat: OpenCode执行层试点 — 补测试5个 + list_objectives隔离修复

2026-08-26 23:45:20 +08:00

okr_templates.py

feat(okr): OKR模板库 tags 多值标签 — 表结构+回填36模板+API过滤 (fullstack-okr-tags-20260911)

2026-09-11 19:33:52 +08:00

okr.py

feat(KR): 行动挂KR完成 — action_plans.kr_id字段+API+前端目标/KR选择+KR中文名自动填+地图krs端点

2026-08-27 12:50:30 +08:00

ontology.py

feat(KR): KR完整修复 — krs表打通+方向符号operator+权重自由输入

2026-08-27 10:59:56 +08:00

org.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

permissions.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

predict.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

products.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

reports.py

feat(kpi): route all voucher_details consumers through single void-mark guard

2026-09-14 19:05:16 +08:00

security.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

subjects.py

feat: 新30号准则P0 — 利润表五板块重构+费用分类打标

2026-07-21 23:41:40 +08:00

tax_compliance.py

fix: 写接口entity_id token优先（resolve_entity_for_request）+ 登录页用顶层entity_id

2026-08-11 11:32:30 +08:00

templates.py

feat: 数据治理4条规则 — 入库必检+元数据+编码规范+战略分级

2026-08-10 23:40:31 +08:00

tenant.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

thresholds.py

fix(kpi): suggest 保留历史默认口径 middle_best — 修复未知编码被误判为 higher_better（C_REBATE_RATE/BH_SALES_10 建议退化） (project-20260911-threshold-fix)

2026-09-11 17:27:12 +08:00

users.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

value_sources.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

verify.py

fix: auto-verify验证引擎4项缺陷修复 verify-fix (OKR幂等防重累加/entity_id多租户回填/period期间过滤/status done->completed)

2026-08-30 19:16:19 +08:00

versions.py

feat(maps): 战略地图版本管理完整实现（方案B）— versions API列表/详情/回滚带自动备份/备注 + MapVersions独立版本页 + 路由注册 + 版本弹窗接真实数据 (project-20260908-map-versions-page)

2026-09-08 20:11:59 +08:00

zero_based.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00