Hermes CI Fix bab6137aa2 fix(cma): scope action-plan objective_id writes to session entity ...

create_plan/update_plan now validate Objective.entity_id ownership (404 on cross-entity, no partial row) and update_plan gets an explicit objective_id-vs-KR-derived priority rule. Adds 10 regression cases (batch3 bias: bidirectional + same-entity control + OKR decomposition read-side consequence).

2026-09-18 19:34:59 +08:00

..

api

fix(cma): scope action-plan objective_id writes to session entity

2026-09-18 19:34:59 +08:00

models

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

security

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00

services

feat(cma-report): 建账期初层 + 方向判定可信度 + 权益行科目集（M1/M2/M7，规则表 v1.1）

2026-09-16 01:17:09 +08:00

utils

fix(cma): entity isolation batch3 (cost abc write endpoints + allocations/stats reads + plan kr_id scope)

2026-09-18 18:42:38 +08:00

__init__.py

init: 管理会计OS初始代码

2026-05-28 17:32:22 +08:00

auth_middleware.py

fix(auth): unify site-wide 401/403 semantics (cma-auth-401-403-unify-20260915)

2026-09-15 17:00:52 +08:00

database.py

fix(cma): DDL 与启动剥离 —— 关闭启动 create_all + 部署链特权迁移步 (cma-create-all-minpriv-rootfix-20260916)

2026-09-16 06:53:28 +08:00

deps.py

fix(security): close unauthenticated CMA user API surface + audit tool (cma-api-auth-surface-audit-20260914)

2026-09-14 16:41:15 +08:00

main.py

feat(cma): treasury stage-1 MVP - migration, models, endpoints, rules, 2 pages

2026-09-15 20:02:56 +08:00

risk_levels.py

feat(bot-bridge): 新增会计科目写入端点 POST /api/cma/bot/subjects — 行级全量校验+按subject_code幂等UPSERT(dry_run/update_existing开关)+L3留痕, 绝不DELETE (dama-cma-subjects-write-endpoint-20260912)

2026-09-12 10:42:46 +08:00