Phase 0 Complete: Tasks 0.7-0.20

- 0.7: UI-Design-Richtlinien (docs/ui-design-guidelines.md, 535 lines) - 0.8: Theme-Customization Backend (4 theme fields, migration 0023) - 0.9: Theme-Customization Frontend (SettingsTheme.tsx, themeStore.ts, live preview) - 0.10: RBAC-Audit (4 plugins secured, 53 routes with require_permission) - 0.11: LiteLLM-Cleanup (llm_client.py migrated from httpx to litellm) - 0.12: KI-Agent-Framework docs (plugin-development-guide.md, agent_capabilities field) - 0.13: Heartbeat configurable (ProactiveSettings, migration 0024, frontend UI) - 0.14: Unified Search Field-Level RBAC (resolve_permissions + filter_fields_by_permission) - 0.15: Undo/History-System (EntityHistory model, service, routes, migration 0025, HistoryViewer) - 0.16: Storage Backend (LocalStorage + S3Storage, DMS/attachments/mail updated) - 0.17: Import/Export unified Contact fields (firstname, surname, email_1, phone_1) - 0.18: .gitignore & Config-Cleanup (webui→frontend, python-jose removed, .env untracked) - 0.19: Mail-Salt Security-Fix (per-account random salt, migration 0026) - 0.20: AGPL replaced (PyMuPDF→pypdf, OnlyOffice→Collabora, LICENSE + THIRD_PARTY_LICENSES.md)
2026-07-23 08:42:26 +02:00
parent 3d06cb2353
commit ec81940178
65 changed files with 3061 additions and 277 deletions
@@ -0,0 +1,26 @@
+"""Theme customization — add theme fields to system_settings.
+
+Revision ID: 0023
+Revises: 0022_contact_folders
+Create Date: 2026-07-23
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0023_theme_customization"
+down_revision = "0022_contact_folders"
+
+
+def upgrade():
+    op.add_column("system_settings", sa.Column("theme_primary_color", sa.String(20), nullable=False, server_default="#2563eb"))
+    op.add_column("system_settings", sa.Column("theme_accent_color", sa.String(20), nullable=False, server_default="#d946ef"))
+    op.add_column("system_settings", sa.Column("theme_font_family", sa.String(100), nullable=False, server_default="Inter"))
+    op.add_column("system_settings", sa.Column("theme_border_radius", sa.String(20), nullable=False, server_default="0.5rem"))
+
+
+def downgrade():
+    op.drop_column("system_settings", "theme_border_radius")
+    op.drop_column("system_settings", "theme_font_family")
+    op.drop_column("system_settings", "theme_accent_color")
+    op.drop_column("system_settings", "theme_primary_color")
@@ -0,0 +1,24 @@
+"""Heartbeat configuration — add heartbeat fields to ai_proactive_settings.
+
+Revision ID: 0024
+Revises: 0023_theme_customization
+Create Date: 2026-07-23
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0024_heartbeat_config"
+down_revision = "0023_theme_customization"
+
+
+def upgrade():
+    op.add_column("ai_proactive_settings", sa.Column("heartbeat_enabled", sa.Boolean(), nullable=False, server_default=sa.text("true")))
+    op.add_column("ai_proactive_settings", sa.Column("heartbeat_interval_seconds", sa.Integer(), nullable=False, server_default=sa.text("300")))
+    op.add_column("ai_proactive_settings", sa.Column("heartbeat_target_room", sa.String(200), nullable=False, server_default="Live KI"))
+
+
+def downgrade():
+    op.drop_column("ai_proactive_settings", "heartbeat_target_room")
+    op.drop_column("ai_proactive_settings", "heartbeat_interval_seconds")
+    op.drop_column("ai_proactive_settings", "heartbeat_enabled")
@@ -0,0 +1,57 @@
+"""Entity history table for undo/restore functionality.
+
+Revision ID: 0025_entity_history
+Revises: 0024_heartbeat_config
+Create Date: 2026-07-23
+"""
+
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+revision: str = "0025_entity_history"
+down_revision: Union[str, None] = "0024_heartbeat_config"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "entity_history",
+        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
+        sa.Column("tenant_id", postgresql.UUID(as_uuid=True), sa.ForeignKey("tenants.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("user_id", postgresql.UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="SET NULL"), nullable=True),
+        sa.Column("entity_type", sa.String(50), nullable=False),
+        sa.Column("entity_id", postgresql.UUID(as_uuid=True), nullable=False),
+        sa.Column("action", sa.String(20), nullable=False),
+        sa.Column("snapshot_before", postgresql.JSONB, nullable=True),
+        sa.Column("snapshot_after", postgresql.JSONB, nullable=True),
+        sa.Column("changes", postgresql.JSONB, nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+        sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True),
+    )
+    op.create_index("ix_entity_history_tenant_id", "entity_history", ["tenant_id"])
+    op.create_index("ix_entity_history_entity_type", "entity_history", ["entity_type"])
+    op.create_index("ix_entity_history_entity_id", "entity_history", ["entity_id"])
+    op.create_index("ix_entity_history_user_id", "entity_history", ["user_id"])
+    op.create_index("ix_entity_history_created_at", "entity_history", ["created_at"])
+    op.create_index(
+        "ix_entity_history_tenant_entity",
+        "entity_history",
+        ["tenant_id", "entity_type", "entity_id", "created_at"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("ix_entity_history_tenant_entity", table_name="entity_history")
+    op.drop_index("ix_entity_history_created_at", table_name="entity_history")
+    op.drop_index("ix_entity_history_user_id", table_name="entity_history")
+    op.drop_index("ix_entity_history_entity_id", table_name="entity_history")
+    op.drop_index("ix_entity_history_entity_type", table_name="entity_history")
+    op.drop_index("ix_entity_history_tenant_id", table_name="entity_history")
+    op.drop_table("entity_history")
@@ -0,0 +1,24 @@
+"""Mail salt security fix — add password_salt column to mail_accounts.
+
+Revision ID: 0026
+Revises: 0025_entity_history
+Create Date: 2026-07-23
+
+Existing accounts get an empty salt and will use the legacy hardcoded salt
+for backward compatibility. New accounts and password changes will use
+per-account random salts.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0026_mail_salt_security"
+down_revision = "0025_entity_history"
+
+
+def upgrade():
+    op.add_column("mail_accounts", sa.Column("password_salt", sa.String(64), nullable=False, server_default=""))
+
+
+def downgrade():
+    op.drop_column("mail_accounts", "password_salt")