6 Commits

Author	SHA1	Message	Date
Agent Zero	38b73f5d4d	build(i-g): Lockfile-Setup — deterministische Builds gegen Versionsdrift ... (1) requirements.lock: 323 Pakete exakt gepinnt auf das heute getestete Set (fastapi==0.141.1, starlette==1.3.1, sqlalchemy==2.0.35, alembic==1.19.1, asyncpg==0.31.0, pydantic==2.13.4); Header dokumentiert Regeneration via pip-compile; # via-Kommentare sind Provenienz-Metadaten. (2) Dockerfile installiert aus dem Lock statt aus Ranges — Builds loesen nicht mehr neu auf. (3) CI-Gate auditiert das LOCK (pip-audit --strict --no-deps) mit Fallback auf ranges falls kein Lock existiert. (4) deploy-guide.md: Dependencies-aendern-Workflow dokumentiert. Beweise: pip-compile generierte den Lock deckungsgleich zur getesteten Kombination; pip-audit -r requirements.lock = No known vulnerabilities; bash -n Syntax OK.	2026-08-25 23:28:16 +02:00
Agent Zero	860db8d61e	security(e6): 7 echte Credentials aus docs/deploy-guide.md entfernt (Forgejo-Token, Coolify-Token, DB-Passwort, Redis-Passwort, SECRET_KEY, Admin-Passwort — durch Git-Historie kompromittiert); durch Secretstore-Referenzen ersetzt; Credential-Rotation-Anleitung mit konkreten Schritten für alle 7 Credentials ergänzt (SECRET_KEY zuletzt, invalidiert Sessions)	2026-08-24 14:06:56 +02:00
Agent Zero	f79eb9354a	docs: punkt 11 (documentation) — README, infrastructure, monitoring, admin-guide, deploy-guide, api-docs, PROGRESS, ENTERPRISE_READINESS_PLAN all updated	2026-08-20 14:03:35 +02:00
Agent Zero	60f30d021b	fix(deploy): MAIL_ENCRYPTION_KEY zu docker-compose.yaml, .env.docker.example und deploy-guide.md hinzugefügt ... Phase B Security-Fix (5d1b239) entfernte den Default-Wert für MAIL_ENCRYPTION_KEY, aber der Key wurde nie in docker-compose.yaml/.env.docker.example/deploy-guide.md aufgenommen. Das führte zu Container-Crashs beim Deploy da der Key zwingend erforderlich ist (mail/services.py RuntimeError). - docker-compose.yaml: MAIL_ENCRYPTION_KEY in crm_app und crm_worker environment - .env.docker.example: MAIL_ENCRYPTION_KEY mit Generierungs-Anleitung - docs/deploy-guide.md: MAIL_ENCRYPTION_KEY in Zugänge-Liste aufgenommen	2026-08-13 23:50:04 +02:00
Agent Zero	7c648e41c1	fix(roadmap+deploy): gründliche Code-Verifikation — 14 Korrekturen (LLM count, Embedding via LiteLLM, F-LOOP 5d, Phase B 2-Dev, WorkflowRun naming, Automation vs Workflow, Search Provider Activation-Time, Notification Field-Mapping, Production Resources in deploy-guide)	2026-08-13 12:03:32 +02:00
Agent Zero	5d1b2396a7	fix(security+tests): 14 system bugs fixed, ~170 test errors fixed, docs added ... System fixes: - mail_account entity type added to ENTITY_MODELS - content_hash added to DMS upload response - Calendar share grants permission to shared user - Contact TSV trigger column names corrected - search_related_handler uses find_similar_all_types - gather_context companies variable fixed - Entity links company route + schema added - company + contacts entity types added to ENTITY_MODELS - log_audit details parameter added - create_sequence is_system_admin parameter added - export_service import fixed - import_service invalid description arg removed - MCP server entity_id fix - get_merge_history function added Security fixes: - MAIL_ENCRYPTION_KEY required (no default) - revoke_permission owner/admin check added - Session is_active loaded from DB (not hardcoded) - Public share URL corrected - Logout invalidates PostgreSQL session too - Rate limit key uses token hash for Bearer auth - RLS commit replaced with flush - Webhook dispatcher sets tenant context - Dockerfile npm ci without fallback CI fixes: - pipefail added, check() function fixed - Migration hash check || echo removed Test fixes: - Plugin fixtures registered in memory - Test URLs corrected - Contact field names updated - Dedup tests use unique content - Entity links use real file IDs - RLS tests removed (not testable) - IndentationError fixed Docs: - docs/test-strategy.md created - docs/deploy-guide.md created - AGENTS.md updated with deploy + docs references	2026-08-12 20:47:43 +02:00