T

Hermes CI Fix 40d522cd34 fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

- Login.vue: no prefilled default creds; no anonymous entity enumeration on mount

- deploy.sh: readiness polling (0.5s/30s cap) replaces fixed sleep 3; login smoke reads same-source 600 secret file, missing file = explicit abort

- 19 verify/check/gen_report scripts: shared _admin_creds() loader (CMA_ADMIN_ENV -> ops .secrets -> profile copy); no hardcoded creds

- tests: single TEST_USER_PASSWORD fixture constant; docs: pointer to 600 secret file; removed 4 legacy .bak + pycache residue

2026-09-14 17:39:53 +08:00

.woodpecker

chore: CI流程加固+Schema检查门禁

2026-08-28 07:18:54 +08:00

architecture

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

backend

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

backups

fix: 预算数据修正 — 删除v1.0错误分解记录, 修正v2.0 F_REVENUE为真实H2预测(75-120万/月,原367万错误)

2026-08-25 18:19:48 +08:00

docs

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

frontend

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

scripts

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

.gitignore

chore: ignore cma.db/cma_import.db 根目录SQLite产物 (防 CI deploy hook 被未跟踪文件误挡)

2026-09-07 10:23:23 +08:00

AGENTS.md

chore(docs): 提交项目级 AGENTS.md 与既有验收记录 (cashflow-structure 部署前置)

2026-09-03 01:22:46 +08:00

ARCHITECTURE.md

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

CHANGELOG.md

docs: 项目规范文档+需求文档+CHANGELOG

2026-05-28 17:33:38 +08:00

check_cma_detail.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

check_cma.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

check_raw.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

check.sh

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

deploy.sh

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

fullstack-learn

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

gen_report.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

menu-evaluation-report.md

refactor: 菜单按PDCA五组重组 — 规划与目标/执行与控制/监控与评价/复盘与改进/系统与支持

2026-07-16 17:49:29 +08:00

README.md

ci: 验证Git Hooks自动部署

2026-07-12 17:32:05 +08:00

README.txt

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

start-dev.sh

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

test_plan.md

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_report.pdf

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

TICKETS.md

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

README.md

管理会计OS

P0/P1/P2全功能已提交，CI/CD自动构建中 CI/CD: Woodpecker自动构建部署 CI验证: Sun Jul 12 05:13:08 PM CST 2026 webhook测试: 17:13:27 CI验证完成 17:15:10 CI最终验证: 17:16:24 CI全链路验证通过 ✅ woodpecker重启验证 gitea重启后验证 CI最终验证 17:19 最终测试 17:20:06 hash验证 Git Hooks自动部署验证 17:32