Hermes CI Fix
9b61c48051
fix: OpenCode审查16条修复 — 战略地图隔离/安全/逻辑漏洞
安全:
- ⑦ update_map 字段白名单(禁entity_id篡改, status限值域)
- ⑧ objectives 全端点补entity校验(原括号错位导致隔离失效) + update白名单
- ⑨ strategic_map_versions 加entity_id列+回填, list/snapshot/rollback过滤
- ⑩ get_map_review KPI查询加entity(同编码跨企业混入)
- ⑪ _sync_map_objectives 强制继承地图entity
逻辑:
- ③ MapCanvas 自动保存 currentMap.value 解包(30s自动保存修复)
- ④ 乐观锁字段 version_num→version 对齐
- ⑤ 红黄绿灯: 越低越好型反向 + 负值修正 + 月目标优先
- ⑥ review 补 action_plan_summary 字段
验证: 跨企业写目标404✓ entity_id注入被拒✓ pytest 531 passed✓
2026-08-26 23:25:44 +08:00
..
2026-05-28 17:32:22 +08:00
2026-08-23 17:43:39 +08:00
2026-05-28 17:32:22 +08:00
2026-08-25 00:55:50 +08:00
2026-08-23 17:43:39 +08:00
2026-05-28 17:32:22 +08:00
2026-07-29 18:25:08 +08:00
2026-08-11 11:34:14 +08:00
2026-08-23 18:20:29 +08:00
2026-08-10 23:56:14 +08:00
2026-08-25 20:27:19 +08:00
2026-07-26 16:44:22 +08:00
2026-08-23 17:53:37 +08:00
2026-08-11 11:29:39 +08:00
2026-07-12 17:46:08 +08:00
2026-08-26 22:43:46 +08:00
2026-08-14 22:07:02 +08:00
2026-08-23 18:20:29 +08:00
2026-07-12 17:46:08 +08:00
2026-08-26 21:40:00 +08:00
2026-07-12 17:46:08 +08:00
2026-08-26 07:51:39 +08:00
2026-07-22 12:06:52 +08:00
2026-08-23 17:53:37 +08:00
2026-07-12 17:46:08 +08:00
2026-07-22 12:58:04 +08:00
2026-07-19 10:07:46 +08:00
2026-08-23 18:20:29 +08:00
2026-08-11 11:29:39 +08:00
2026-07-12 17:46:08 +08:00
2026-07-16 17:30:35 +08:00
2026-08-23 17:43:39 +08:00
2026-08-21 16:28:23 +08:00
2026-08-26 22:34:23 +08:00
2026-07-22 18:22:48 +08:00
2026-08-26 23:25:44 +08:00
2026-05-28 17:32:22 +08:00
2026-08-26 23:25:44 +08:00
2026-08-21 16:49:11 +08:00
2026-08-23 17:53:37 +08:00
2026-08-23 17:53:37 +08:00
2026-05-28 17:32:22 +08:00
2026-05-28 17:32:22 +08:00
2026-08-26 22:38:37 +08:00
2026-08-25 00:25:11 +08:00
2026-08-18 09:54:56 +08:00
2026-07-12 17:46:08 +08:00
2026-07-21 23:41:40 +08:00
2026-08-11 11:32:30 +08:00
2026-08-10 23:40:31 +08:00
2026-08-07 17:42:26 +08:00
2026-05-28 17:32:22 +08:00
2026-05-28 17:32:22 +08:00
2026-08-10 23:15:19 +08:00
2026-08-26 23:25:44 +08:00