Hermes CI Fix 443a779ece fix(cma): DDL 与启动剥离 —— 关闭启动 create_all + 部署链特权迁移步 (cma-create-all-minpriv-rootfix-20260916) ...

根治 2026-09-16 发布中断（新增模型触发启动 create_all，cma_api 无 CREATE → 崩溃循环）：

- backend/app/database.py: 新增 CMA_AUTO_CREATE 开关（**默认关**），生产启动不再执行 DDL；
  运行库账号因此无需 CREATE（最小权限可保持）
- backend/scripts/db_migrate.py: 特权迁移步（--check/--apply/--rollback/--status）；
  幂等（checkfirst）+ journal 留痕 + 可回滚（dump 失败/表有数据即拒绝，fail-closed）；
  显式拒绝用应用运行账号 cma_api 执行
- deploy.sh: 新增 [4b] 结构迁移（**重启前**执行；失败即中止部署，后端旧码继续服务）
- backend/scripts/tests/db-migrate-sim-e2e.sh: 17 项 scratch 复现/验收（负控制复现 CREATE command denied）
- docs/db-migration-runbook.md: 运行手册（含 cma_api CREATE 回收步骤）

验收：scratch E2E 17/17；pytest 1113 passed/1 xfailed；生产 --check 缺失表 0 / 列级差异 0；
--apply 幂等空跑 created_new=0（journal 留痕）

2026-09-16 06:53:28 +08:00

..

_archive

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

backups

fix(kpi): 阈值红黄绿读写/填写规则修复 — 统一解析器+红灯优先+建议可解析+前端校验+存量修正 (project-20260911-threshold-fix)

2026-09-11 17:25:24 +08:00

sql

feat(cma): external input ledgers for M2 capability eval (tax/hr/licence)

2026-09-15 18:12:05 +08:00

templates

feat: 网银流水导入模板+现金流联动（财务数据通道P1）

2026-08-28 09:59:07 +08:00

tests

fix(cma): DDL 与启动剥离 —— 关闭启动 create_all + 部署链特权迁移步 (cma-create-all-minpriv-rootfix-20260916)

2026-09-16 06:53:28 +08:00

_do_all_tasks.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

_full_task.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

_run_all_tasks.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

_run_all.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

_run_task1_and_4.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

_task1_insert_source.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

_task4_create_template.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

_task14_complete.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

action_plan_weekly.py

fix: auto-verify cron残留缺陷修复+第三阶段接入 verify-cron-fix (auto_verify_cron 4项对齐verify.py: entity_id过滤/period过滤/OKR幂等/status completed; action_plan_weekly done->completed; action_plans创建自动生成auto_verify_rule)

2026-08-31 07:44:00 +08:00

ai_brief.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

alert_generator.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

analyze_erp_tables.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

audit_api_auth_surface.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

auto_verify_cron.py

fix: auto-verify cron残留缺陷修复+第三阶段接入 verify-cron-fix (auto_verify_cron 4项对齐verify.py: entity_id过滤/period过滤/OKR幂等/status completed; action_plan_weekly done->completed; action_plans创建自动生成auto_verify_rule)

2026-08-31 07:44:00 +08:00

backfill_okr_template_tags.py

feat(okr): OKR模板库 tags 多值标签 — 表结构+回填36模板+API过滤 (fullstack-okr-tags-20260911)

2026-09-11 19:33:52 +08:00

bot_bridge_push.py

feat: bot-bridge数据通道 — POST /kpi-result回填KPI+触发预警+MPM自动回填脚本

2026-08-10 23:56:14 +08:00

cdp_driver.py

chore(scripts): 提交分解弹窗E2E验证辅助脚本（cdp_driver + review）

2026-08-31 17:05:21 +08:00

clean_kpi_data_governance.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

cleanup_kpi_encoding.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

closed_loop_check.py

feat: 路线图R1决策建议一键落地+R2机会推送+R5预算闭环

2026-08-30 12:05:36 +08:00

cma_bot_bridge.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

collect_erp_schema_v2.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

collect_erp_schema.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

correlation-check.py

feat: 因果链三层验证机制(P2) — 数据验证+人工确认+状态机

2026-08-27 15:51:19 +08:00

daily_push.py

fix(daily-push): 补提交分企业推送 v2——daily-push-split 任务(11:45 .done)漏commit，阻塞CI deploy hook；.gitignore 忽略 *.bak-* (2026-09-03)

2026-09-03 18:15:05 +08:00

daily_sync.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

db_migrate.py

fix(cma): DDL 与启动剥离 —— 关闭启动 create_all + 部署链特权迁移步 (cma-create-all-minpriv-rootfix-20260916)

2026-09-16 06:53:28 +08:00

erp_daily_sync.sh

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

erp_data_source_config.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

erp_data_sync.py

fix: 移除ERP密码和API密钥硬编码，改为环境变量；erp-sync接口加鉴权

2026-06-05 07:51:20 +08:00

erp_p1_crm_prod.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

erp_sync.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

extend_erp_sync.py

fix: 移除ERP密码和API密钥硬编码，改为环境变量；erp-sync接口加鉴权

2026-06-05 07:51:20 +08:00

finance_bot.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

fix_erp_schema.py

chore(erp): 清理ERP_API_KEY硬编码默认值+任务脚本小调整（与本次待办跳转修复无关，单独成commit）

2026-08-31 15:33:07 +08:00

fix_kpi_governance.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

fix_threshold_data_20260911.py

fix(kpi): 阈值红黄绿读写/填写规则修复 — 统一解析器+红灯优先+建议可解析+前端校验+存量修正 (project-20260911-threshold-fix)

2026-09-11 17:25:24 +08:00

gen_voucher_import_template.py

feat: 网银流水导入模板+现金流联动（财务数据通道P1）

2026-08-28 09:59:07 +08:00

generate_kpi_sql.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

generate_report.py

feat: ChatBI自动报告生成—周报/月报/专项

2026-07-29 18:16:37 +08:00

import_cma_knowledge.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

import_product_sales.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

import_report_opening_balances.py

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

kpi_alert_attribution_backfill.py

fix(budget): attribution backfill computes in-process and previews on dry-run (yanxue-20260914-budget-p13p14-activation)

2026-09-14 17:25:49 +08:00

kpi_bep_deriver.py

fix(bep): pick target period by period-closed signal, sales threshold as fallback only

2026-09-12 20:08:31 +08:00

kpi_p0_optimization.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

kpi_p1_optimization.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

kpi_review_gate.py

docs(kpi): mark R7 gate thresholds as president-confirmed formal rule

2026-09-14 18:21:33 +08:00

kpi_value_collector.py

feat(kpi): route all voucher_details consumers through single void-mark guard

2026-09-14 19:05:16 +08:00

kpi_value_source_derive.py

feat(budget): activate P1 auto-collect + attribution subject mapping (yanxue-20260914-budget-p13p14-activation)

2026-09-14 17:19:49 +08:00

migrate_bot_bridge_v2.sql

feat: bot-bridge+verify合并 — API+数据库+验证引擎

2026-07-22 17:43:59 +08:00

migrate_causality_verification.py

feat: 因果链三层验证机制(P2) — 数据验证+人工确认+状态机

2026-08-27 15:51:19 +08:00

migrate_data_governance.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

migrate_ext_input_ledgers_20260915.py

feat(cma): external input ledgers for M2 capability eval (tax/hr/licence)

2026-09-15 18:12:05 +08:00

migrate_kpi_codes.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

migrate_krs_from_json.py

feat(KR): KR完整修复 — krs表打通+方向符号operator+权重自由输入

2026-08-27 10:59:56 +08:00

migrate_map_objectives.py

feat: 战略地图收尾 — 自动保存+导出+表迁移+因果链推荐

2026-07-14 17:32:22 +08:00

migrate_new30_standard.py

feat: 新30号准则P0 — 利润表五板块重构+费用分类打标

2026-07-21 23:41:40 +08:00

migrate_okr_templates_tags.py

feat(okr): OKR模板库 tags 多值标签 — 表结构+回填36模板+API过滤 (fullstack-okr-tags-20260911)

2026-09-11 19:33:52 +08:00

migrate_statutory_reports.py

feat: 财务报表助手—对外法定报表(三表合一+Excel导出)

2026-08-04 15:35:15 +08:00

migrate_verify_fix_20260830.py

fix: auto-verify验证引擎4项缺陷修复 verify-fix (OKR幂等防重累加/entity_id多租户回填/period期间过滤/status done->completed)

2026-08-30 19:16:19 +08:00

okr_review_reminder.py

fix(okr): 季度复盘提醒审计口径与失败感知加固 — dry_run/sent/failed/skipped 状态语义 + 失败本地留痕+中继告警+退出码契约(0/1/2) (fullstack-okr-reminder-hardening-20260911)

2026-09-12 01:03:31 +08:00

opportunity_detector.py

feat: 路线图R1决策建议一键落地+R2机会推送+R5预算闭环

2026-08-30 12:05:36 +08:00

query_cma_db.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

register_dupont_kpis.py

fix: 移除ERP密码和API密钥硬编码，改为环境变量；erp-sync接口加鉴权

2026-06-05 07:51:20 +08:00

reset_kpi_dict.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

run_alert_check.sh

feat: CMA P1+P2 Round1 — 成本法对比+杜邦分析+本量利

2026-07-16 16:39:24 +08:00

schema_check.py

chore: CI流程加固+Schema检查门禁

2026-08-28 07:18:54 +08:00

seed_cost_data.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

seed_finance_bot_kpis.py

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

seed_finance_data.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

seed_industry_packs.py

feat(okr): Phase2 - 行业扩展包12个+OKR模板库页面

2026-07-21 17:30:50 +08:00

seed_knowledge_articles.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

seed_manufacturing_pack.py

feat: OKR模板库改造 — 弹窗模板库联动+时间分解落库+制造业包6个

2026-08-11 00:11:25 +08:00

seed_nonfinance_budget.py

fix: 恢复5个被CI覆盖的前端文件+成本数据+预警定时器

2026-07-13 09:52:06 +08:00

seed_okr_templates.py

Phase 1: OKR模板 — 两步弹窗(O+KR结构) + 14个CMA模板 + okr_templates表 + API

2026-07-21 17:22:43 +08:00

seed_ontology_trilogy.sql

本体三支柱: 科目↔KPI↔OKR三层互联 + 追溯链API + OKR详情页签

2026-08-19 22:58:10 +08:00

seed_p2_causality.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

seed_p2_kpis.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

treasury_ddl.sql

feat(cma): treasury stage-1 MVP - migration, models, endpoints, rules, 2 pages

2026-09-15 20:02:56 +08:00

treasury_migrate.py

feat(cma): treasury stage-1 MVP - migration, models, endpoints, rules, 2 pages

2026-09-15 20:02:56 +08:00

treasury_seed_accounts.py

feat(cma): treasury stage-1 MVP - migration, models, endpoints, rules, 2 pages

2026-09-15 20:02:56 +08:00

verify_10reload_no_freeze_20260903.py

test(frontend): BUG-001验收脚本 3页面x10连刷无卡加载中 (入库留存,2026-09-03)

2026-09-03 18:41:44 +08:00

verify_alert_rules.py

fix: 战略地图P0修复 — KPI code统一+放开同层连线+数据迁移

2026-07-14 16:02:33 +08:00

verify_bep_collector_regression.py

feat(kpi): CMA保本点派生KPI F_BEP_REVENUE/COVER/GAP + 每日派生执行器 + 红黄绿静态阈值判定

2026-09-08 13:43:20 +08:00

verify_bep_threshold_fix.py

chore(verify): BEP 阈值验收脚本改动态断言(按数据归属实体登录)+历史快照归档加运行守卫 (concurrent-duplicate-session-and-stale-verify-script-20260912)

2026-09-12 20:35:20 +08:00

verify_bot_write_tiering_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_budget_versions_ui_browser.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_budget_versions_ui_fix.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_cashflow_direct_caliber.py

feat(kpi): 归集侧接作废/撤单标记过滤（voucher_void_marks）

2026-09-14 18:44:39 +08:00

verify_cashflow_structure.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_cashplan_alert_engine_fix.py

fix(alerts): F4b 展示口径与落库口径同源 — summary/suggestions/upcoming_7d 按快照批次 mode 过滤 + raw/excluded/batches 可见 (dama-cashplan-zombie-alert-cleanup-20260913)

2026-09-13 07:38:58 +08:00

verify_cost_research_dimension_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_customer_concentration_rule_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_dashboard_isolation.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_decompose_dialog_review.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_decompose_idempotent.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_ext_input_ledgers_e2e.py

feat(cma): external input ledgers for M2 capability eval (tax/hr/licence)

2026-09-15 18:12:05 +08:00

verify_forecast_deviation_rules_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_knowledge_partition_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_map_versions_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_opening_balance_live_20260916.py

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

verify_phase_c_fixed_entity_e2e.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_reclass_live_20260916.py

feat(cma-report): 资产负债表取数层重分类 R1~R12（调表不调账）

2026-09-16 00:38:01 +08:00

verify_suggestioncenter_unapplied_ui.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

verify_threshold_regression_20260911.py

fix(kpi): 阈值红黄绿读写/填写规则修复 — 统一解析器+红灯优先+建议可解析+前端校验+存量修正 (project-20260911-threshold-fix)

2026-09-11 17:25:24 +08:00

verify_zxt_vouchers_json.py

fix(cash): vouchers-json batch改为纯内容指纹(不含时间戳) — 快照每10分钟重推必须幂等命中

2026-09-06 16:47:25 +08:00