Phase 0 Complete: Tasks 0.7-0.20

- 0.7: UI-Design-Richtlinien (docs/ui-design-guidelines.md, 535 lines)
- 0.8: Theme-Customization Backend (4 theme fields, migration 0023)
- 0.9: Theme-Customization Frontend (SettingsTheme.tsx, themeStore.ts, live preview)
- 0.10: RBAC-Audit (4 plugins secured, 53 routes with require_permission)
- 0.11: LiteLLM-Cleanup (llm_client.py migrated from httpx to litellm)
- 0.12: KI-Agent-Framework docs (plugin-development-guide.md, agent_capabilities field)
- 0.13: Heartbeat configurable (ProactiveSettings, migration 0024, frontend UI)
- 0.14: Unified Search Field-Level RBAC (resolve_permissions + filter_fields_by_permission)
- 0.15: Undo/History-System (EntityHistory model, service, routes, migration 0025, HistoryViewer)
- 0.16: Storage Backend (LocalStorage + S3Storage, DMS/attachments/mail updated)
- 0.17: Import/Export unified Contact fields (firstname, surname, email_1, phone_1)
- 0.18: .gitignore & Config-Cleanup (webui→frontend, python-jose removed, .env untracked)
- 0.19: Mail-Salt Security-Fix (per-account random salt, migration 0026)
- 0.20: AGPL replaced (PyMuPDF→pypdf, OnlyOffice→Collabora, LICENSE + THIRD_PARTY_LICENSES.md)

THIRD_PARTY_LICENSES.md

@@ -0,0 +1,74 @@
+# Third-Party Licenses
+
+This file lists all third-party software components used by LeoCRM,
+along with their respective licenses.
+
+## Backend Dependencies (Python)
+
+| Package | License | Usage |
+|---|---|---|
+| FastAPI | MIT | Web framework |
+| SQLAlchemy | MIT | ORM / database toolkit |
+| Alembic | MIT | Database migrations |
+| Pydantic | MIT | Data validation |
+| Pydantic Settings | MIT | Settings management |
+| asyncpg | Apache 2.0 | PostgreSQL async driver |
+| Redis (redis-py) | MIT | Redis client |
+| httpx | BSD-3-Clause | HTTP client |
+| LiteLLM | MIT | Unified LLM interface |
+| PydanticAI | MIT | AI agent framework |
+| pypdf | BSD-3-Clause | PDF text extraction |
+| python-docx | MIT | DOCX text extraction |
+| openpyxl | MIT | XLSX text extraction |
+| python-pptx | MIT | PPTX text extraction |
+| aiofiles | Apache 2.0 | Async file I/O |
+| minio | Apache 2.0 | S3-compatible storage client |
+| cryptography | Apache 2.0 | Encryption (Fernet, PBKDF2) |
+| bcrypt | Apache 2.0 | Password hashing |
+| nh3 | MIT | HTML sanitization |
+| python-multipart | Apache 2.0 | Multipart form parsing |
+| pgvector | PostgreSQL License | Vector similarity search |
+| APScheduler | MIT | Job scheduling |
+| websockets | BSD-3-Clause | WebSocket support |
+
+## Frontend Dependencies (Node.js)
+
+| Package | License | Usage |
+|---|---|---|
+| React | MIT | UI framework |
+| React Router | MIT | Client-side routing |
+| TanStack Query | MIT | Server state management |
+| TanStack Table | MIT | Table/data grid |
+| Zustand | MIT | State management |
+| Tailwind CSS | MIT | CSS framework |
+| lucide-react | ISC | Icon library |
+| date-fns | MIT | Date utilities |
+| react-i18next | MIT | Internationalization |
+| i18next | MIT | Internationalization core |
+| react-hook-form | MIT | Form management |
+| zod | MIT | Schema validation |
+| clsx | MIT | Class name utility |
+| Vite | MIT | Build tool |
+| Vitest | MIT | Test framework |
+
+## External Services
+
+| Service | License | Usage |
+|---|---|---|
+| Collabora Online | LGPL/MPL | Document editing (DMS) |
+| PostgreSQL | PostgreSQL License | Database |
+| Redis | BSD-3-Clause | Cache / sessions |
+
+## Replaced AGPL Components
+
+The following AGPL-licensed components have been replaced with permissively
+licensed alternatives to allow commercial use without copyleft obligations:
+
+| Original | License | Replacement | License |
+|---|---|---|---|
+| PyMuPDF (fitz) | AGPL-3.0 | pypdf | BSD-3-Clause |
+| OnlyOffice | AGPL-3.0 | Collabora Online | LGPL/MPL |
+
+---
+
+*This file is maintained manually and should be updated when dependencies change.*