fix: v1.0 发版准备步骤 0-1

步骤 0 清理仓库残留:
- git rm 旧版 release zip (v0.8.0, v0.8.1)
- git rm --cached 旧 docs 计划文件
- CI runner 从 ubuntu-latest 改为 macos-latest

步骤 1 修正已知问题:
- GUI 凭证 bug: api.py 从 DEFAULT_SECRETS_FILE 改为 DEFAULT_USER_SECRETS_FILE
- requirements.txt 注释更新
- README.md run_report 路径对齐到实际路径
- 测试文件同步更新 mock 目标

Author: Astro-Han

.github/workflows/unittest.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   unittest:
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4

README.md

@@ -157,14 +157,16 @@ python3 scripts/repair_coin_cap.py
 |------|------|
 | `<data_root>/.quantclass_sync/status/` | 同步状态（SQLite + JSON） |
 | `<data_root>/<product>/timestamp.txt` | 每个产品上次同步到哪天 |
-| `log/run_report_*.json` | 每次运行的报告 |
+| `<data_root>/.quantclass_sync/log/run_report_*.json` | 每次运行的报告 |
 
 想看最近一次运行报告：
 
 ```bash
-ls -t log/run_report_* | head -1 | xargs cat
+ls -t <data_root>/.quantclass_sync/log/run_report_* | head -1 | xargs cat
 ```
 
+把 `<data_root>` 替换成你在 setup 时填的数据目录。
+
 ### 缓存
 
 临时缓存在 `<project_root>/../.cache/quantclass/`，跑完自动清理，不用管。
@@ -184,7 +186,7 @@ ls -t log/run_report_* | head -1 | xargs cat
 **怎么看运行报告？**
 
 ```bash
-ls -t log/run_report_* | head -1 | xargs cat
+ls -t <data_root>/.quantclass_sync/log/run_report_* | head -1 | xargs cat
 ```
 
 ---

docs/plans/2026-02-11-update-catchup-to-latest-design.md

@@ -17,8 +17,8 @@
 from ..constants import (
     DEFAULT_API_BASE,
     DEFAULT_CATALOG_FILE,
-    DEFAULT_SECRETS_FILE,
     DEFAULT_USER_CONFIG_FILE,
+    DEFAULT_USER_SECRETS_FILE,
     DEFAULT_WORK_DIR,
     EXIT_CODE_SUCCESS,
     PRODUCT_MODE_EXPLICIT_LIST,
@@ -337,7 +337,7 @@ def _run_sync(self, user_config: object, data_root: Path) -> None:
 
         try:
             config_file = DEFAULT_USER_CONFIG_FILE.resolve()
-            secrets_file = DEFAULT_SECRETS_FILE.resolve()
+            secrets_file = DEFAULT_USER_SECRETS_FILE.resolve()
 
             # 解析凭证（CLI 来源为空，走文件或环境变量）
             api_key, hid, credential_source = resolve_credentials_for_update(

docs/plans/2026-02-11-update-catchup-to-latest-implementation-plan.md

@@ -3,5 +3,5 @@ typer>=0.12.0
 pydantic>=2.0.0
 rich>=13.0.0
 pandas>=2.0.0
-# GUI 可选依赖（仅 gui 命令需要，CLI 用户可不安装）
+# GUI 依赖（CLI 用户可不安装，但推荐完整安装）
 pywebview>=5.0

quantclass_sync_internal/gui/api.py

@@ -217,7 +217,7 @@ def fake_run_update(**kwargs):
             patch(f"{_API_MOD}.resolve_credentials_for_update", return_value=("test-key", "test-hid", "env")),
             patch(f"{_API_MOD}.report_dir_path", return_value=Path(self.tmp_dir) / "log"),
             patch(f"{_API_MOD}.get_latest_run_summary", return_value=None),
-            patch(f"{_API_MOD}.DEFAULT_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
+            patch(f"{_API_MOD}.DEFAULT_USER_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
             patch(f"{_API_MOD}.DEFAULT_CATALOG_FILE", Path(self.tmp_dir) / "catalog.json"),
             patch(f"{_API_MOD}.DEFAULT_WORK_DIR", Path(self.tmp_dir) / "work"),
             patch(f"{_API_MOD}.DEFAULT_API_BASE", "https://fake.api"),
@@ -309,7 +309,7 @@ def test_start_sync_no_credentials(self):
             patch(f"{_API_MOD}.load_user_config_or_raise", return_value=self.mock_config),
             patch(f"{_API_MOD}.load_catalog_or_raise", return_value=["product-a"]),
             patch(f"{_API_MOD}.resolve_credentials_for_update", return_value=("", "", "")),
-            patch(f"{_API_MOD}.DEFAULT_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
+            patch(f"{_API_MOD}.DEFAULT_USER_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
             patch(f"{_API_MOD}.DEFAULT_CATALOG_FILE", Path(self.tmp_dir) / "catalog.json"),
             patch(f"{_API_MOD}.DEFAULT_WORK_DIR", Path(self.tmp_dir) / "work"),
             patch(f"{_API_MOD}.DEFAULT_API_BASE", "https://fake.api"),
@@ -369,7 +369,7 @@ def fake_run_update(progress_callback=None, **kwargs):
             patch(f"{_API_MOD}.resolve_credentials_for_update", return_value=("key", "hid", "env")),
             patch(f"{_API_MOD}.report_dir_path", return_value=Path(self.tmp_dir) / "log"),
             patch(f"{_API_MOD}.get_latest_run_summary", return_value=None),
-            patch(f"{_API_MOD}.DEFAULT_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
+            patch(f"{_API_MOD}.DEFAULT_USER_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
             patch(f"{_API_MOD}.DEFAULT_CATALOG_FILE", Path(self.tmp_dir) / "catalog.json"),
             patch(f"{_API_MOD}.DEFAULT_WORK_DIR", Path(self.tmp_dir) / "work"),
             patch(f"{_API_MOD}.DEFAULT_API_BASE", "https://fake.api"),
@@ -486,7 +486,7 @@ def fake_run_update(progress_callback=None, **kwargs):
             patch(f"{_API_MOD}.resolve_credentials_for_update", return_value=("key", "hid", "env")),
             patch(f"{_API_MOD}.report_dir_path", return_value=Path(self.tmp_dir) / "log"),
             patch(f"{_API_MOD}.get_latest_run_summary", return_value=None),
-            patch(f"{_API_MOD}.DEFAULT_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
+            patch(f"{_API_MOD}.DEFAULT_USER_SECRETS_FILE", Path(self.tmp_dir) / "secrets.env"),
             patch(f"{_API_MOD}.DEFAULT_CATALOG_FILE", Path(self.tmp_dir) / "catalog.json"),
             patch(f"{_API_MOD}.DEFAULT_WORK_DIR", Path(self.tmp_dir) / "work"),
             patch(f"{_API_MOD}.DEFAULT_API_BASE", "https://fake.api"),