 Agent Zero
|
d9aed519f2
|
fix(i-c): BUG-024 behoben — Plugin-Detail-Endpoint GET /api/v1/plugins/{name} implementiert (Manifest-Metadaten + DB-Status, 404 für unbekannte); Beweistest test_plugin_detail.py 2/2 grün; Existenzprüfung vorher: Route fehlte komplett (bewiesen), Frontend-Nutzung niedrig aber API-Vollständigkeit hergestellt
|
2026-08-24 21:12:58 +02:00 |
|
|
Agent Zero
|
b9a6c06e85
|
docs(i-a): Stale-Status korrigiert — 13 Findings nachdokumentiert die bereits gefixt waren (ARCH-051/055/056/057/027 + BUG-085–092 D1-Suiten) mit Beweis-Referenzen auf Commits; ehrliche Dokumentationsbasis für Block I
|
2026-08-24 21:07:13 +02:00 |
|
|
Agent Zero
|
8386e99caa
|
docs(plan): Block I-H ergaenzt — Prozess- & Rest-Luecken aus Originalplan (F1-Restprozess Branch/Tag/Staging, F3-Gate-F Minimal-Plugin-Test, G3 dump.rdb + Downgrade-Entscheidung, E2/E4/E5 konkrete Gates); Block I ist jetzt vollstaendig abgeglichen gegen Originalplan F/G/S + alle Session-Funde
|
2026-08-24 21:02:43 +02:00 |
|
|
Agent Zero
|
7d9ae03bf1
|
docs(plan): Block I VOLLSTÄNDIG überarbeitet — alle Fehlerquellen einbezogen nach Abgleich von test-bugs.md (73 ⏳-Findings), Suite v2 Restzone (brach bei 77% ab), Blöcke F/G aus Originalplan, S-Tracks S1/S2/S3; Struktur: I-A Stale-Status → I-B Restzone messen → I-C Produktionsbugs → I-D Frontend → I-E Test-Hygiene Runde 2 → I-F Sicherheit/Compliance → I-G S-Tracks; Gate I = 7 konkrete Kriterien für keine bekannten Fehler
|
2026-08-24 20:42:40 +02:00 |
|
|
Agent Zero
|
36a03b9897
|
docs(plan): Block I ergaenzt — Keine bekannten Fehler mehr (I1 API-Verkabelung 12 Brueche, I2 Geister-Komponenten x6, I3 Test-Hygiene Runde 2 inkl. Mail-Mocking + Voll-Triage, I4 CI-Gate scharf schalten, I5 Credential-Rotation PFLICHT, I6 Kleinkram-Buendel, I7 Server-Kontext E2/E4/E5); Gate I: Voll-Suite gruen ohne Ausschuesse + api_contracts 0 echte Findings + 0 Geister + Credentials rotiert
|
2026-08-24 20:21:16 +02:00 |
|
|
Agent Zero
|
860db8d61e
|
security(e6): 7 echte Credentials aus docs/deploy-guide.md entfernt (Forgejo-Token, Coolify-Token, DB-Passwort, Redis-Passwort, SECRET_KEY, Admin-Passwort — durch Git-Historie kompromittiert); durch Secretstore-Referenzen ersetzt; Credential-Rotation-Anleitung mit konkreten Schritten für alle 7 Credentials ergänzt (SECRET_KEY zuletzt, invalidiert Sessions)
|
2026-08-24 14:06:56 +02:00 |
|
|
Agent Zero
|
81aea8c77f
|
feat(e3): Restore-Drill als lokalen End-to-End-Beweis implementiert — scripts/restore_drill.sh: Migrations-DB+Seed → pg_dump → frische DB → Restore → 12 Integritäts-Checks (Tabellen/Alembic/RLS-Parität, tenant-scoped contacts, audit_log, RLS fail-closed mit restricted NOSUPERUSER-NOBYPASSRLS-Rolle, Policy-Rollen-Bindung an crm_api); DRILL_EXIT=0; idempotent mit automatischem Cleanup
|
2026-08-24 14:03:57 +02:00 |
|
|
Agent Zero
|
46c909c226
|
feat(e1): AuditMiddleware als systematisches Safety-Net — alle erfolgreichen POST/PATCH/DELETE erzeugen Audit-Eintrag (Session-basierte user/tenant-Attribuierung, entity_type aus Pfad, source=middleware in changes); schließt Lücke von 349 mutierenden Endpoints in 59 Dateien ohne Audit; Skip-Liste auth/health/errors/audit/external; best-effort; Beweistest test_audit_middleware.py grün (POST ohne explizites log_audit → Audit-Zeile); Regressionssmoke 23/23 grün
|
2026-08-24 13:55:25 +02:00 |
|
|
Agent Zero
|
197b0d3bab
|
fix(e7): CI-Gate-Vorbereitung — ruff über app/ von 105 auf 0 Findings bereinigt; 8 echte F821-NameError-Produktionsbugs behoben (external_api stream_chat-Call-Signatur an stream_chat_comm angepasst, agent_runner uuid vor lokalem Import, automation/plugin UserTenant-Import, tasks delete-audit user_id, workflows/engine timedelta, unified_search/contracts Any); py311-kompatibles StepHandler-Alias statt type-Statement; E402/F841 bereinigt; Verifikation 85/89 grün (4 Failures = bekannter Vorbestand BUG-099)
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-24 13:36:17 +02:00 |
|
|
Agent Zero
|
3934aea6ef
|
docs(d6): Block D abgeschlossen — ai_copilot als deprecated markiert mit Abschaltplan (ARCH-059: Backend-only, 0 Frontend-Referenzen, Test geskippt → Migration wäre Verschwendung); ARCH-023 als verifiziertes No-Op dokumentiert (Plugin-Services registrieren sich selbst bei on_activate — bewusstes Design)
|
2026-08-24 12:50:17 +02:00 |
|
|
Agent Zero
|
5cc5a3fa6a
|
fix(d5): Marathon-Scanner-Triage — trace_api_contracts 859→218 (-75%, Router-Präfixe/Multi-Router/leere Pfade/Template-Literals gefixt), trace_plugins 27→0 (-100%, Inline-Manifest-Konvention erkannt); 371 HIGH-Fehlalarme eliminiert (OpenAPI-verifiziert); ~12 echte API-Bugs als Follow-up dokumentiert (ai/sessions ×5, policies ×4, mail ×4)
|
2026-08-24 12:43:41 +02:00 |
|
|
Agent Zero
|
c0e8e4ecfd
|
docs(d4): Security-Triage abgeschlossen — ARCH-027 verifiziert (SECRET_KEY-Fail bereits implementiert und strenger als gefordert), BUG-019 = 0 echte hardcoded Secrets (Entropie-Wert-Scan), BUG-020 = kein fixbares Finding (alle f-string-SQL-Interpolationen aus Whitelists/Config, kein User-Input-Fluss)
|
2026-08-24 11:02:50 +02:00 |
|
|
Agent Zero
|
c32e4bb34e
|
refactor(d3): ARCH-051 — 14 dict-body-Routes auf Pydantic-Schemas umgestellt (entity_permissions bulk ×2, guests invite, users menu-order, system_settings backup-config+dsar, knowledge ×3, self_improvement ×5); DSAR-Export F821-Bug behoben (datetime/timezone undefined → NameError beim GDPR-Export), Zeitstempel auf datetime.now(UTC); Validierung jetzt im Schema statt in Routen
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-24 10:55:22 +02:00 |
|
|
Agent Zero
|
ef90d57f0a
|
fix(d3): systemischer Permission-Resolver-Bug behoben — DMS/Mail get_entity_models-Overrides ergänzt (dms_file/dms_folder/file/mail_account fehlten im ENTITY_MODELS-Mapping → ValueError bei allen Entity-Freigaben zur Laufzeit); pgvector-Extension in conftest db_setup verankert; test_permissions 22/22 grün; Resolver-Auflösung aller 4 Typen direkt bewiesen
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-24 10:07:48 +02:00 |
|
|
Agent Zero
|
0768cfb29a
|
fix(d3): ARCH-055/056/057 — errors.py error.user_agent statt nicht existierendem userAgent (AttributeError zur Laufzeit); roles.py SYSTEM_PERMISSIONS aus CORE_PERMISSIONS abgeleitet (47 statt 36 Permissions, Drift behoben, category→system für Frontend-Gruppierung); registry._plugins→öffentliche API list_discovered()+get_plugin()
|
2026-08-24 08:28:35 +02:00 |
|
|
Agent Zero
|
56e401969e
|
docs(progress): D1 abgeschlossen — alle 9 Ziel-Suites grün, 3 Produktionsbugs behoben
|
2026-08-24 08:10:43 +02:00 |
|
|
Agent Zero
|
6d04206695
|
fix(d1): SystemSettings-Schema-Drift behoben — backup_interval/backup_retention_days/backup_destination Model-Spalten + Migration 0142 nachgezogen (10b1f83 hatte Schema/Service/Frontend erweitert ohne Model/Migration); Settings-API Create/Read wieder funktionsfähig; Fresh-DB-Kette 0001→0142 verifiziert
|
2026-08-24 08:06:19 +02:00 |
|
|
Agent Zero
|
f6e117b1c3
|
fix(d1): Calendar-Suite + ai_proactive repariert — conftest CalendarPlugin-Import wiederhergestellt (abbe7a1-Regression), CalendarContract-Zugriffe snake_case→PascalCase (context_tools, services ×2, mail/routes), 2 stale Rate-Limit-Tests auf zentrale check_rate_limit-Grenze umgestellt; test_calendar 34/34, ai_proactive-Failures behoben; Mail-Vorbestand dokumentiert
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-24 07:57:27 +02:00 |
|
|
Agent Zero
|
9d8da99026
|
fix(contacts): ContactCreate-Typ-Inferenz — Person-Payloads ohne explizites type werden nicht mehr als Firma abgelehnt (Regression aus BUG-008-Fix dada44c); test_companies 18/18, test_contacts 8/8 grün
|
2026-08-24 07:32:09 +02:00 |
|
|
Agent Zero
|
54066b05fd
|
docs(f3): plugin checklist + architecture requirements section in dev guide
|
2026-08-24 01:54:16 +02:00 |
|
|
Agent Zero
|
36636f5c25
|
docs(d2): utcnow family fixed, sqlite-001 results, handover notes for successor agent
|
2026-08-24 01:40:34 +02:00 |
|
|
Agent Zero
|
d89044d8f7
|
fix(d2): datetime.now(UTC) everywhere + SQLITE-001 automation tests on ephemeral postgres
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-24 01:22:42 +02:00 |
|
|
Agent Zero
|
5e0ffd91c2
|
docs: block C complete - C1-C8 implemented, gate C checks 4+5 proven, ghost components documented
|
2026-08-23 23:50:19 +02:00 |
|
|
Agent Zero
|
b8b8ef180a
|
fix(c8): shared TeamPanel component (arch-062) + curated icon map in SortableMenuItem (arch-063 OOM fix)
|
2026-08-23 23:44:43 +02:00 |
|
|
Agent Zero
|
cad7d084e8
|
feat(c7): dashboard widgets as plugin contributions + contact counts via contacts contract
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 23:36:36 +02:00 |
|
|
Agent Zero
|
dff97f5589
|
fix(c6): settings plugin pages permission-filtered, label-dedup hack removed
|
2026-08-23 22:46:03 +02:00 |
|
|
Agent Zero
|
9e84c400ed
|
fix(c5,arch-021): system dashboard nav entry only for system admins
|
2026-08-23 22:31:04 +02:00 |
|
|
Agent Zero
|
067fc132cb
|
feat(c4,arch-006): plugin route renderer enforces manifest permission via protected route
|
2026-08-23 22:24:43 +02:00 |
|
|
Agent Zero
|
b01b756a4a
|
fix(c3,arch-019): static chunk map for plugin components - production build loads plugin pages correctly
|
2026-08-23 22:14:45 +02:00 |
|
|
Agent Zero
|
4bce89aecb
|
fix(c2,arch-004): workspace visibleModuleKeys respects is_visible=false
|
2026-08-23 22:01:38 +02:00 |
|
|
Agent Zero
|
5e9be254e2
|
feat(c1): permission fields on frontend menu items and page routes + manifest migration for all plugins
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 21:59:22 +02:00 |
|
|
Agent Zero
|
8a76bfdba4
|
docs: block B complete - gate B passed all 5 checks
|
2026-08-23 21:46:21 +02:00 |
|
|
Agent Zero
|
d2434203c1
|
test(gate-b): new-plugin-without-core-changes + dependency blockade proofs
|
2026-08-23 21:44:01 +02:00 |
|
|
Agent Zero
|
ad7c763e59
|
fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 21:36:56 +02:00 |
|
|
Agent Zero
|
e3fb4728d7
|
refactor(b3): dynamic entity registry, custom_fields permissions decoupled from contacts, write perms generated from registry
|
2026-08-23 20:54:04 +02:00 |
|
|
Agent Zero
|
7467c01d38
|
refactor(b2): eliminate all cross-plugin imports - contracts for worker/agent_runner/workstream, declared dependency for wiki
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 20:29:09 +02:00 |
|
|
Agent Zero
|
4038b74025
|
docs: b1 progress - contacts domain plugin-owned
|
2026-08-23 20:20:31 +02:00 |
|
|
Agent Zero
|
5ad107ff83
|
refactor(b1): contacts domain fully plugin-owned - routes moved from core to contacts plugin with require_active_plugin guard
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 20:20:02 +02:00 |
|
|
Agent Zero
|
5cee78c54c
|
docs: block A complete - A2 deactivation cleanup results, Gate A passed
|
2026-08-23 19:34:49 +02:00 |
|
|
Agent Zero
|
32f63adc09
|
test(gate-a): block A completion proof - imports, lifecycle symmetry, activate-once, contract roundtrip
|
2026-08-23 19:31:33 +02:00 |
|
|
Agent Zero
|
c21634b323
|
fix(arch-a2): deactivation cleanup - container services, search provider, hook deregistration, notification sync, task state, activation order
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 19:24:12 +02:00 |
|
|
Agent Zero
|
73d2e109cd
|
docs: block a progress - arch-043/052/008/009 fixed and verified
|
2026-08-23 18:41:21 +02:00 |
|
|
Agent Zero
|
795307754f
|
fix(arch-008,arch-009): canonical 2-segment permission schema enforced; fix dead role wildcard patterns
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 18:35:50 +02:00 |
|
|
Agent Zero
|
17516d2783
|
fix(arch-043,arch-052): deterministic system tenant lookup; async-safe file metadata
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 16:39:09 +02:00 |
|
|
Agent Zero
|
ed8ee5cda1
|
docs: architecture repair progress - plan v3, session status, bug statuses
|
2026-08-23 16:11:01 +02:00 |
|
|
Agent Zero
|
90a367089d
|
fix(arch-038,arch-054): register_event_handlers hook in BasePlugin; entity model lookup matches registry shape
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-08-23 15:45:43 +02:00 |
|
|
Agent Zero
|
b04cda774b
|
fix(arch-014,arch-020): no contract lazy-resurrect after unregister; event bus dedupes handlers
Check Cross-Plugin Imports / check (push) Has been cancelled
Also fixes ARCH-029/041: none-check before attribute access in trigger dispatcher.
|
2026-08-23 15:30:12 +02:00 |
|
|
Agent Zero
|
982b4c9353
|
fix(arch-003): active-manifests available to every authenticated user
|
2026-08-23 15:09:39 +02:00 |
|
|
Agent Zero
|
1d6152fb82
|
fix(arch-001,arch-002): permissions before on_activate; activate once per process
|
2026-08-23 15:04:51 +02:00 |
|
|
Agent Zero
|
337d78ef53
|
merge: Block H - Agent platform kernel (tools/steps/blocks/tabs plugin-contributable)
|
2026-08-23 14:47:52 +02:00 |
|