Hermes CI Fix a2fedd892a fix(cma): isolate KPI alignment tree by entity (project-20260918-alignment-entity-leak) ...

GET /api/cma/alignment/tree queried all active KPIs without entity_id filter,

so switching the three alignment modes showed other tenants' KPIs.

Add get_entity_id dependency and filter KPIDefinition by entity_id.

Three mode builders (_build_vertical_tree/_build_horizontal_tree/_build_bsc_chain) unchanged.

Auth semantics unchanged; cross-entity explicit entity_id still returns 403.

Test: tests/test_alignment_entity_isolation_20260918.py (3 modes x both directions, 403, 401).

2026-09-18 17:18:52 +08:00

..

__init__.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

action_plans.py

fix(security): 4端点补跨租户鉴权 — 实体1会话读实体2数据(200)→403 (cma-cross-entity-endpoints-auth-20260914)

2026-09-14 11:19:05 +08:00

ai_analysis.py

fix(security): ai_analysis多租户隔离缺口 + dashboard预警计数 + bot_kpis归属 + cost账套过滤 + kpis create白名单 (OpenCode审查20260907)

2026-09-07 10:22:24 +08:00

ai_suggestions.py

feat(r1-touch): 建议分级+决策类推送+应用前预览 (alert不推送/同title防轰炸/preview对比)

2026-08-31 09:07:54 +08:00

alert_rules.py

feat(alerts): 新增客户集中度预警规则 customer_concentration + 预测偏差规则启用/联动每日预警生成

2026-09-10 09:56:50 +08:00

alerts.py

fix(security): 4端点补跨租户鉴权 — 实体1会话读实体2数据(200)→403 (cma-cross-entity-endpoints-auth-20260914)

2026-09-14 11:19:05 +08:00

alignment.py

fix(cma): isolate KPI alignment tree by entity (project-20260918-alignment-entity-leak)

2026-09-18 17:18:52 +08:00

analysis_results.py

feat: 所有表单的部门/负责人改为下拉框(自动读取组织+用户数据)

2026-07-29 18:25:08 +08:00

audit_log.py

feat(bot-bridge): 新增智享通科目字典写入端点 POST /api/cma/bot/dict/zxt-account — 幂等UPSERT(JSON/CSV)+L3分级+audit留痕, 解除 ops 管道 API 迁移阻塞 (ops-cma-dict-write-endpoint-20260912)

2026-09-12 10:07:20 +08:00

auth.py

feat(cma): allow demo-status entity at login for demo account (yanxue-20260916-cma-demo-account)

2026-09-17 00:10:07 +08:00

bi_reports.py

feat: 多租户隔离P2批2 — 预算/成本/费用/预警规则/BI报表加entity_id

2026-08-23 18:20:29 +08:00

bot_bridge_v2.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

bot_bridge.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

bot_iron_law.py

feat: Bot API L1-L4风险分级标注 + 操作审计日志

2026-08-28 00:31:31 +08:00

bot_kpis.py

fix(kpi): single source of truth for REVERSE_INDICATORS + drop F_FACTORY_REBATE_RATE from reverse set

2026-09-15 17:48:56 +08:00

bot_suggestions.py

feat(bot-tier): M1 Bot侧高危建议创建通道+目标值直写收口 (P0-②分层授权)

2026-09-03 18:08:27 +08:00

bsc_layers.py

feat: 账套模式全量接入 — 12个API entity_id统一走token解析链 + 前端登录选公司/切换器重签token

2026-08-11 11:29:39 +08:00

budget_generate.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

budget.py

fix(budget): 偏差检查同 KPI 多计划去重（deviation-check 补 db.flush）

2026-09-14 17:56:26 +08:00

cash_classify.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

cash_vouchers_json.py

fix(cash): 智享通凭证行级幂等键剔除派生period + period_conflict留痕 + 批内行序防吞行 (dama-zxt-idemkey-period-20260911)

2026-09-11 17:13:07 +08:00

cash.py

fix(cash): select cash-balance sync targets by explicit kpi_code whitelist

2026-09-14 20:37:12 +08:00

cashflow_structure.py

feat(cma): 口径裁定 2026-09-17 落地（现金流投资=0 二维判定 / 预警单位+期间口径）

2026-09-18 00:34:04 +08:00

cost.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

customer_dashboard.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

dashboard.py

fix(cma): my-dashboard KPI period caliber (monthly period priority) + as-of/stale marks

2026-09-18 15:39:12 +08:00

data_classification.py

feat: 数据分类分级 — 重要数据标记+资产清单+CSV导出（8/20评估办法政策驱动）

2026-08-26 07:51:39 +08:00

data_quality.py

fix(security): retire check-governance + scope /reports/dupont to session entity

2026-09-14 12:09:04 +08:00

data.py

fix(data): 数据管理模块脱节修复 — Excel导入/sources端点 entity 隔离 + ERP直连通道诚实化(410) + 真实zxt链路展示

2026-09-08 11:19:38 +08:00

derivation_rules.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

deviation_push.py

fix(alerts): cash_plan 到期未收款预警引擎修复 — entity归属/KPI实体感知/余额快照批次/去重刷新/端点鉴权 (dama-cashplan-alert-engine-fix-20260913)

2026-09-13 00:37:10 +08:00

driver_budget.py

feat: 驱动因子计划 — 模式切换+行业包+敏感性分析

2026-07-22 12:58:04 +08:00

entities.py

KPI通用化: bsc_layer_config表+API+企业选择器+企业CRUD

2026-07-19 10:07:46 +08:00

expenses.py

feat: 多租户隔离P2批2 — 预算/成本/费用/预警规则/BI报表加entity_id

2026-08-23 18:20:29 +08:00

ext_input_ledgers.py

feat(cma): external input ledgers for M2 capability eval (tax/hr/licence)

2026-09-15 18:12:05 +08:00

growth_quality.py

feat: 账套模式全量接入 — 12个API entity_id统一走token解析链 + 前端登录选公司/切换器重签token

2026-08-11 11:29:39 +08:00

knowledge_articles.py

Revert "fix(knowledge): articles共享层语义对齐评审方案——entity_id=0系统共享(替代NULL) (entity-memory-partition 复核对齐)"

2026-09-03 23:09:58 +08:00

knowledge.py

feat(knowledge): 企业记忆分区——知识三表entity_id多租户隔离 (entity-memory-partition P1)

2026-09-03 23:00:15 +08:00

kpi_causality.py

feat: 因果链三层验证机制(P2) — 数据验证+人工确认+状态机

2026-08-27 15:51:19 +08:00

kpi_governance.py

feat: KPI治理规则2增加kpi_name必填校验 — 防空名KPI

2026-08-21 16:28:23 +08:00

kpis.py

fix(kpi): single source of truth for REVERSE_INDICATORS + drop F_FACTORY_REBATE_RATE from reverse set

2026-09-15 17:48:56 +08:00

lead.py

feat: lead API加企微通知

2026-07-22 18:22:48 +08:00

maps.py

fix(cma): KR 名称污染存量清理 + 透传点护栏 (cma-kr-name-pollution-cleanup-20260916)

2026-09-16 14:48:06 +08:00

notifications.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

objectives.py

feat: OpenCode执行层试点 — 补测试5个 + list_objectives隔离修复

2026-08-26 23:45:20 +08:00

okr_templates.py

fix(cma): KR 名称污染存量清理 + 透传点护栏 (cma-kr-name-pollution-cleanup-20260916)

2026-09-16 14:48:06 +08:00

okr.py

fix(cma): KR 名称污染存量清理 + 透传点护栏 (cma-kr-name-pollution-cleanup-20260916)

2026-09-16 14:48:06 +08:00

ontology.py

feat(KR): KR完整修复 — krs表打通+方向符号operator+权重自由输入

2026-08-27 10:59:56 +08:00

org.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

permissions.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

predict.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

products.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

reports.py

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

security.py

feat: P0/P1/P2全部功能 — 四层泳道/视角切换/KPI看板/预警/差异反打/预算/知识面板/回顾会/情景预测/Excel导入/角色权限

2026-07-12 17:46:08 +08:00

subjects.py

feat: 新30号准则P0 — 利润表五板块重构+费用分类打标

2026-07-21 23:41:40 +08:00

tax_compliance.py

fix: 写接口entity_id token优先（resolve_entity_for_request）+ 登录页用顶层entity_id

2026-08-11 11:32:30 +08:00

templates.py

feat: 数据治理4条规则 — 入库必检+元数据+编码规范+战略分级

2026-08-10 23:40:31 +08:00

tenant.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

thresholds.py

fix(kpi): suggest 保留历史默认口径 middle_best — 修复未知编码被误判为 higher_better（C_REBATE_RATE/BH_SALES_10 建议退化） (project-20260911-threshold-fix)

2026-09-11 17:27:12 +08:00

treasury.py

fix(cma): AU-001 day_cum_amount 返回日累计(day_total) 而非拆单累计

2026-09-16 14:56:57 +08:00

users.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

value_sources.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00

verify.py

fix: auto-verify验证引擎4项缺陷修复 verify-fix (OKR幂等防重累加/entity_id多租户回填/period期间过滤/status done->completed)

2026-08-30 19:16:19 +08:00

versions.py

feat(maps): 战略地图版本管理完整实现（方案B）— versions API列表/详情/回滚带自动备份/备注 + MapVersions独立版本页 + 路由注册 + 版本弹窗接真实数据 (project-20260908-map-versions-page)

2026-09-08 20:11:59 +08:00

zero_based.py

feat: 预算系统6项技术改进（告警归因/实际值自动归集/真零基/派生规则/告警路径统一/现金流分类）

2026-08-28 18:03:47 +08:00