wecom-fullstackandHermes CI Fix a9dcbf22bc chore(security): 摘除 knowledge_service 硬编码默认 DeepSeek Key（缺 env 抛明确错误/503） ...

- knowledge_service: 移除 os.getenv 默认值占位，改 _require_deepseek_key() 必填，缺 env 抛 DeepSeekKeyMissing
- knowledge API: generate/{daily,weekly,monthly} 缺 Key 返回 503（可观测，不再静默走模板兜底）
- finance_bot / verify_zxt_vouchers_json / bot_bridge_push: 凭据改 env 优先（CMA_BOT_KEY_* / CMA_BOT_API_KEYS / CMA_BRIDGE_TOKEN），历史共享键仅作兼容期兜底并告警
- tests: 新增 5 例回归（缺 Key 服务层抛错、API 503；有 Key 正常 200）

(cherry picked from commit 859bd8276d7c5aad4bf10ee3399b6cccc188f064)

2026-10-18 16:31:52 +08:00

..

__init__.py

test: pytest测试框架 + API测试

2026-05-28 17:42:15 +08:00

conftest_path.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

conftest.py

test(cma): force production Redis off during tests (P1 token leak isolation)

2026-09-18 17:33:25 +08:00

test_action_plans.py

feat(KR): 行动挂KR完成 — action_plans.kr_id字段+API+前端目标/KR选择+KR中文名自动填+地图krs端点

2026-08-27 12:50:30 +08:00

test_actionplan_entity_write_and_okr_read_20260918.py

fix(cma): action plan entity_id on create + okr decomposition entity scope

2026-09-18 20:03:55 +08:00

test_actionplan_entity_write_residual_sites_20260918.py

fix(cma): action plan entity_id at the three residual construction sites

2026-09-18 20:12:46 +08:00

test_actionplan_overdue_filter_20260921.py

fix(action-plans): derive overdue filter in list endpoint (single source with stats)

2026-09-21 15:13:27 +08:00

test_ai_analysis.py

fix: 行动方案库统计卡片—补全API+overdue计算

2026-07-27 17:16:01 +08:00

test_ai_suggestion_kpi_attribution_residual_20260918.py

fix(cma): scope ai-suggestion action_plan and preview KPI to session entity

2026-09-18 21:04:30 +08:00

test_ai_suggestions.py

test(cma): clear 10 pre-existing baseline failures (cma-baseline-tests-cleanup-20260915)

2026-09-15 18:36:46 +08:00

test_alert_caliber_r1r4_20260919.py

fix(caliber): 流动/速动比率改「倍」口径 + 判定层同量纲直判（ASK-20260924-11 任总放行）

2026-09-25 10:39:18 +08:00

test_alert_caliber_r5_20260919.py

fix(alerts): enforce caliber ruling R5-supp (period linkage)

2026-09-19 11:12:31 +08:00

test_alert_caliber_r5_residual_20260919.py

fix(alerts): enforce caliber ruling R5-supp (period linkage)

2026-09-19 11:12:31 +08:00

test_alert_generator_entity_attribution_20260922.py

fix(caliber): 流动/速动比率改「倍」口径 + 判定层同量纲直判（ASK-20260924-11 任总放行）

2026-09-25 10:39:18 +08:00

test_alerts_pagination_stability_20260925.py

fix(alerts): deterministic tiebreaker for paginated alert list

2026-09-25 14:06:38 +08:00

test_alerts.py

fix: 行动方案库统计卡片—补全API+overdue计算

2026-07-27 17:16:01 +08:00

test_alignment_entity_isolation_20260918.py

fix(cma): 工作台跨实体污染治本 — 全局键拆账套 + 缺列收口 + 预警归属兜底

2026-09-22 11:06:02 +08:00

test_api_auth_surface_20260914.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

test_ask15_17_engine_and_entity_required_20260925.py

ASK-20260924-15/17: Bot 通道缺省账套→400 + 差异/趋势入口期间口径回落

2026-09-25 22:42:25 +08:00

test_auth_401_unification_20260915.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

test_auth.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

test_auto_verify_engine.py

fix: auto-verify验证引擎4项缺陷修复 verify-fix (OKR幂等防重累加/entity_id多租户回填/period期间过滤/status done->completed)

2026-08-30 19:16:19 +08:00

test_bep_expense_net_caliber.py

fix(bep-caliber): expense and profit sums use net (debit minus credit) under carry_forward=0

2026-10-02 11:22:38 +08:00

test_bep_rebate_actual_caliber.py

fix(cvp): O1 residue - e2 rebate_policy_pct 置 null（口径单一源 = bep_caliber）

2026-10-04 22:37:20 +08:00

test_bot_bridge.py

ASK-20260924-15/17: Bot 通道缺省账套→400 + 差异/趋势入口期间口径回落

2026-09-25 22:42:25 +08:00

test_bot_suggestion_channel.py

ASK-20260924-15/17: Bot 通道缺省账套→400 + 差异/趋势入口期间口径回落

2026-09-25 22:42:25 +08:00

test_bsc_okr_kpi_integration.py

feat(KR): KR完整修复 — krs表打通+方向符号operator+权重自由输入

2026-08-27 10:59:56 +08:00

test_budget_annual_row_residuals_r1r2r3_20261013.py

fix(budget): 年度行(budget_month=0)不回落 1 月 + 同族 R1/R2/R3

2026-10-13 03:41:39 +08:00

test_budget_sync_cashplan_annual_row_20261013.py

fix(budget): 年度行(budget_month=0)不回落 1 月 + 同族 R1/R2/R3

2026-10-13 03:41:39 +08:00

test_budget_tech_improve.py

fix(cma): 隔离扫尾 — kpi_alert_higher_better 拆账套 + tenant/switch 审计收口

2026-09-23 18:29:52 +08:00

test_budget.py

test(cma): clear 10 pre-existing baseline failures (cma-baseline-tests-cleanup-20260915)

2026-09-15 18:36:46 +08:00

test_caliber_rulings_20260917.py

fix(caliber): 流动/速动比率改「倍」口径 + 判定层同量纲直判（ASK-20260924-11 任总放行）

2026-09-25 10:39:18 +08:00

test_cash_kpi_sync_whitelist_20260914.py

fix(cash): select cash-balance sync targets by explicit kpi_code whitelist

2026-09-14 20:37:12 +08:00

test_cash_summary_snapshot_alignment_20260913.py

fix(alerts): F4b 展示口径与落库口径同源 — summary/suggestions/upcoming_7d 按快照批次 mode 过滤 + raw/excluded/batches 可见 (dama-cashplan-zombie-alert-cleanup-20260913)

2026-09-13 07:38:58 +08:00

test_cash_vouchers_json_idemkey.py

ASK-20260924-15/17: Bot 通道缺省账套→400 + 差异/趋势入口期间口径回落

2026-09-25 22:42:25 +08:00

test_cash.py

test(cma): clear 10 pre-existing baseline failures (cma-baseline-tests-cleanup-20260915)

2026-09-15 18:36:46 +08:00

test_cashflow_structure.py

feat(cashflow): 现金流量表结构分析——三大活动净额八类企业定性判定 (P1)

2026-09-03 01:22:46 +08:00

test_causality_verification.py

feat: 因果链三层验证机制(P2) — 数据验证+人工确认+状态机

2026-08-27 15:51:19 +08:00

test_coso_generate_actions_20260921.py

feat(action-plans): COSO 自检未通过条目一键生成改善行动（接通死按钮）

2026-09-23 01:03:19 +08:00

test_cost.py

feat(cost): 成本模型加研发归集维度 research_flag/project_type (cma-rd-dimension-20260905)

2026-09-05 09:10:35 +08:00

test_cross_entity_isolation_batch2_20260918.py

fix(cma): entity isolation batch2 (roll-forward/check-timeout/by-id/cost-abc)

2026-09-18 18:15:22 +08:00

test_cross_entity_isolation_batch3_20260918.py

fix(cma): scope action-plan KR enrichment to session entity (batch3 follow-up)

2026-09-18 19:03:49 +08:00

test_cross_entity_isolation_batch3_objective_id_20260918.py

fix(cma): scope action-plan objective_id writes to session entity

2026-09-18 19:34:59 +08:00

test_cross_entity_isolation_batch4_20260921.py

fix(cma): entity isolation batch4 (cash plan writes, budget ownership, read leaks, okr template)

2026-09-21 09:37:38 +08:00

test_cross_entity_isolation_batch5_20260921.py

fix(cma): entity isolation batch5 (budget writes, kpi objectives scope, quality logs join, growth-quality db source, expenses scope)

2026-09-21 10:36:02 +08:00

test_cross_entity_isolation_expenses_residual_20260921.py

fix(cma): entity scope for expenses resubmit + cumulative limit check

2026-09-21 14:56:43 +08:00

test_customer_concentration_rule.py

fix(cpa): sales bill-type whitelist for customer revenue caliber (P0)

2026-10-09 17:00:37 +08:00

test_dashboard.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_data_classification.py

feat: 数据分类分级 — 重要数据标记+资产清单+CSV导出（8/20评估办法政策驱动）

2026-08-26 07:51:39 +08:00

test_data_entity_isolation_20260908.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_data_quality.py

fix: 预算年度分解幂等加固+数据质量七规则测试

2026-08-30 10:27:01 +08:00

test_data.py

fix: 行动方案库统计卡片—补全API+overdue计算

2026-07-27 17:16:01 +08:00

test_dismiss_suggestion_entity_scope_20260918.py

fix(cma): scope ai-suggestion dismiss and target KPI to session entity

2026-09-18 20:33:39 +08:00

test_doc_center_20260924.py

test(docs-center): 金丝雀分类断言改「必备分类在场+相对顺序」（分类扩展不再留假红）

2026-10-13 07:48:18 +08:00

test_dq_rule_config_20260928.py

feat(data-quality): 规则配置可编辑入口 + 经营口径排除接线（ASK-20260928-05 尾项）

2026-09-29 13:00:48 +08:00

test_dupont_oob_window_ruling_20261005.py

fix(dupont): reject out-of-domain window + bidirectional clip + suffix discipline (R1-R4/M2)

2026-10-05 02:02:21 +08:00

test_dupont_period_options.py

fix(dupont): reject out-of-domain window + bidirectional clip + suffix discipline (R1-R4/M2)

2026-10-05 02:02:21 +08:00

test_entity_dimension_convergence_20260923.py

feat(entity-dim): 账套维度收口批 — subjects/analysis_results 加列 + 分析结论账套化 + 模板实例化构造点补账套

2026-09-23 21:39:24 +08:00

test_entity_isolation_sweep_20260923.py

feat(cma): audit write-side entity closure + entity-dimension data dictionary

2026-09-23 23:08:26 +08:00

test_expenses.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

test_ext_input_ledgers_20260915.py

feat(cma): external input ledgers for M2 capability eval (tax/hr/licence)

2026-09-15 18:12:05 +08:00

test_knowledge_deepseek_key_required.py

chore(security): 摘除 knowledge_service 硬编码默认 DeepSeek Key（缺 env 抛明确错误/503）

2026-10-18 16:31:52 +08:00

test_kpi_422_baseline.py

chore: 清理worktree验证测试文件

2026-08-26 06:53:25 +08:00

test_kpi_causality.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

test_kpi_forecast.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_kpi_review_gate_20260914.py

feat(kpi): auto_collect review gate (finance ruling 2026-09-14)

2026-09-14 18:12:38 +08:00

test_kpis.py

fix: 行动方案库统计卡片—补全API+overdue计算

2026-07-27 17:16:01 +08:00

test_kr_full_fix.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_kr_name_pollution_20260916.py

fix(maps): 覆写通道扩面清点——同契约调用点补基准（3 例静默降级 + 2 例新增失败）

2026-10-12 17:06:07 +08:00

test_map_concurrency_20261012.py

fix(maps): 战略地图写通道乐观并发 + 画布自动保存仅脏时写

2026-10-12 11:42:56 +08:00

test_map_objective_merge_20261012.py

feat(maps): 战略地图按 objective 粒度合并（granular 通道），不同 objective 并发不再互相 409

2026-10-13 11:37:24 +08:00

test_map_versions.py

fix(maps): 覆写通道扩面清点——同契约调用点补基准（3 例静默降级 + 2 例新增失败）

2026-10-12 17:06:07 +08:00

test_maps.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_multitenant_ai_20260907.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_notifications_pagination_stability_20260925.py

fix(notifications): deterministic tiebreaker for paginated notification log list

2026-09-25 16:34:52 +08:00

test_notifications.py

fix(cma): 工作台跨实体污染治本 — 全局键拆账套 + 缺列收口 + 预警归属兜底

2026-09-22 11:06:02 +08:00

test_org.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_period_caliber_actual_latest_20260926.py

fix(fetch-caliber): 取数层排除半年/预测伪期间 + subjects 响应补 entity_id

2026-09-26 02:42:04 +08:00

test_permissions.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_predict.py

fix(cma): entity isolation batch5 (budget writes, kpi objectives scope, quality logs join, growth-quality db source, expenses scope)

2026-09-21 10:36:02 +08:00

test_probe_cost.py

test: CMA自动化测试补覆盖 226→452用例, 覆盖率36%→60%

2026-08-20 06:57:24 +08:00

test_profit_summary_real_caliber_20261014.py

fix(dashboard): bep-card terms 分支补字段别名映射（修 289cc8f 引入的 e2 500）

2026-10-16 18:28:50 +08:00

test_profitability_indicators.py

feat(profitability): real ROI (op profit / invested capital), enable EVA, add RI

2026-10-03 02:10:47 +08:00

test_proforma_reports.py

feat(proforma): 预编报表（预算版三张报表）P2 — 预算vs实际vs差异，独立/proforma端点，复用budget_plans+报表模板，无预算行显式标注

2026-08-30 23:13:32 +08:00

test_read_side_entity_scope_gaps_20260918.py

fix(cma): scope read-side ai-suggestion detail/preview and map nodes

2026-09-18 20:23:53 +08:00

test_redis_token_isolation_20260918.py

test(cma): force production Redis off during tests (P1 token leak isolation)

2026-09-18 17:33:25 +08:00

test_report_reclass.py

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

test_reports.py

fix(reports): profit-summary 真实科目取数重建（去 KPI 比率倒推/硬编码 0.50 + 勾稽自检 + entity 隔离）

2026-10-14 23:14:41 +08:00

test_review_records_write_20261012.py

feat(kpi,review): KPI direction 列 + KPITarget 模型 + 复盘产出方入库（R1 收口）

2026-10-13 20:33:42 +08:00

test_risk_levels.py

ASK-20260924-15/17: Bot 通道缺省账套→400 + 差异/趋势入口期间口径回落

2026-09-25 22:42:25 +08:00

test_roadmap_r2r5.py

test(cma): clear 10 pre-existing baseline failures (cma-baseline-tests-cleanup-20260915)

2026-09-15 18:36:46 +08:00

test_security_knowledge_partition.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_security_multitenant.py

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

2026-09-14 17:39:53 +08:00

test_seven_flow_rules.py

test: 七流一致自检规则测试 — 7条自检规则+酣客/博海真实场景

2026-08-25 23:59:33 +08:00

test_tax_compliance.py

fix(cma): entity isolation batch5 (budget writes, kpi objectives scope, quality logs join, growth-quality db source, expenses scope)

2026-09-21 10:36:02 +08:00

test_threshold_parser_20260911.py

fix(kpi): 阈值红黄绿读写/填写规则修复 — 统一解析器+红灯优先+建议可解析+前端校验+存量修正 (project-20260911-threshold-fix)

2026-09-11 17:25:24 +08:00

test_threshold_parser.py

fix(kpi): suggest 保留历史默认口径 middle_best — 修复未知编码被误判为 higher_better（C_REBATE_RATE/BH_SALES_10 建议退化） (project-20260911-threshold-fix)

2026-09-11 17:27:12 +08:00

test_users.py

test: CMA自动化测试补覆盖 226→452用例, 覆盖率36%→60%

2026-08-20 06:57:24 +08:00

test_utils_calc.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_utils_more.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_utils_notifier.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

test_void_marker_consumers_20260914.py

feat(kpi): route all voucher_details consumers through single void-mark guard

2026-09-14 19:05:16 +08:00

test_void_marker_filter_20260914.py

feat(kpi): route all voucher_details consumers through single void-mark guard

2026-09-14 19:05:16 +08:00

test_workbench_entity_isolation_20260922.py

fix(cma): 工作台跨实体治本 · DAMA 回查收口 — 审计可归属 + 通知日志口径

2026-09-22 11:21:24 +08:00