Commit Graph

218 Commits

Author SHA1 Message Date
Leopoldadmin 74284b3359 feat(core): add address fields to Company model 2026-07-04 00:15:22 +00:00
Leopoldadmin 997d60138a Fix route: use model_fields_set to pass _UNSET when role_id not sent, None when explicitly null 2026-07-03 20:43:55 +00:00
Leopoldadmin d7691b3d70 Fix role_id sentinel bug: use _UNSET sentinel so None explicitly clears FK, missing param leaves unchanged 2026-07-03 20:43:00 +00:00
Leopoldadmin 792f0a464d Problem 3/4: Add GET /api/v1/roles/permissions endpoint returning system + plugin permissions 2026-07-03 19:50:47 +00:00
Leopoldadmin 762aac832f Problem 1: Pass role_id through users route create/update, include in responses 2026-07-03 19:49:48 +00:00
Leopoldadmin 8a2468ee7d Problem 1: Add role_id support to user_service create/update/_user_to_dict 2026-07-03 19:49:03 +00:00
Leopoldadmin 6986fcfaae Problem 1: Add role_id to UserCreate/UserUpdate/UserResponse schemas 2026-07-03 19:48:48 +00:00
Leopoldadmin 530cfd485f Problem 1: Add role_id FK column to User model (references roles.id, nullable, ondelete SET NULL) 2026-07-03 19:48:39 +00:00
Leopoldadmin 5138590277 fix(plugin): add version comparison and migration run on version mismatch
Bug 6: install() and activate() now compare the plugin's manifest
version with the stored DB version. If they differ, migrations are
re-run to bring the schema up to date and the DB version field is
updated. This ensures that updating a plugin with a new manifest
version triggers the migration runner automatically.
2026-07-03 16:56:30 +00:00
Leopoldadmin f9508d17de fix(plugin): add GET and PATCH /api/v1/plugins/{name}/config endpoints
Bug 4: Plugin config field existed but had no API endpoints. Added
GET /api/v1/plugins/{name}/config to retrieve config as JSON and
PATCH /api/v1/plugins/{name}/config to update it. Uses PluginConfigUpdate
Pydantic model for request validation.
2026-07-03 16:49:57 +00:00
Leopoldadmin cbeed4b26d fix(plugin): convert dependency errors to HTTPException 400, add config API
Bug 3: install_plugin() and activate_plugin() now catch dependency-related
ValueErrors and raise HTTPException 400 with the error detail.

Bug 4: Added get_plugin_config() and update_plugin_config() methods to
the service layer for the plugin config API endpoints.
2026-07-03 16:48:10 +00:00
Leopoldadmin 826cf69c9a fix(plugin): add dependency resolution and permission soft-check
Bug 3: install() and activate() now verify that declared dependencies
are installed/active before proceeding. Raises ValueError which the
service layer converts to HTTPException 400.

Bug 5: activate() now performs a soft permission check — logs warnings
for declared permissions not found in any discovered plugin.
2026-07-03 16:45:49 +00:00
Leopoldadmin 94a5bf105c fix(plugin): track routes by object identity to prevent cross-plugin removal
Bug 2: deactivate() removed routes by path-matching, which caused
routes from other plugins sharing the same prefix (e.g. /api/v1/dms)
to be removed when deactivating one plugin. Now tracks actual route
objects by identity in _mounted_routes and removes only those specific
objects during deactivation.
2026-07-03 16:25:31 +00:00
Leopoldadmin 18a0861a96 fix(plugin): discover MailPlugin in builtins __init__
Bug 1: MailPlugin was missing from imports and __all__, preventing
the plugin registry from discovering the mail plugin at startup.
2026-07-03 16:19:04 +00:00
Leopoldadmin 812ccdeaf0 fix: add missing display_name to PluginModel creation in lifespan
The PluginModel.display_name column is NOT NULL but was not set when
auto-installing builtin plugins during app startup, causing IntegrityError.
Fix mirrors the pattern used in registry.install().
2026-07-03 00:12:43 +00:00
leocrm-bot 36ac1d0df9 fix: register plugin routes in create_app BEFORE SPA catch-all
- Plugin routes now registered in create_app (sync context) before SPA catch-all
- Previously plugin routes were added in lifespan (async) AFTER SPA catch-all
- FastAPI matches routes in registration order — catch-all was shadowing plugin routes
- Fixes: Calendar/Mail/DMS/Tags/Permissions returning 404 despite being in OpenAPI
2026-07-02 14:37:30 +02:00
leocrm-bot 07bf6ce445 fix: auto-install discovered builtin plugins on startup — create DB records, run migrations, activate, register routes
- Lifespan creates PluginModel records for discovered plugins if missing
- Runs plugin migrations automatically
- Activates plugins and registers routes in FastAPI
- Fixes: Calendar/Mail/DMS/Tags/Permissions 404 after restart
2026-07-02 13:32:48 +02:00
leocrm-bot 5dc4d6d4c0 fix: activate plugins on startup + register routes + seed admin script
- lifespan: load active plugins from DB, call on_activate, register routes
- Fixes: Calendar/Mail/DMS/Tags/Permissions routes returning 404
- scripts/seed_admin.py: creates default tenant + admin user
2026-07-02 13:02:38 +02:00
leocrm-bot f477efc366 fix: serve frontend in production — multi-stage Dockerfile with Node build + StaticFiles mount
- Dockerfile: add Node.js frontend build stage (vite build)
- Dockerfile: copy frontend/dist into runtime image
- app/main.py: mount /assets static files + SPA catch-all fallback
- app/main.py: serve index.html for all non-API routes
- Fixes: https://crm.media-on.de/ returning 404 (frontend not served)
2026-07-02 09:55:50 +02:00
leocrm-bot 4c7f09c518 chore: ruff lint auto-fix — 9 errors fixed (import sorting, unused imports)
- I001: import block sorting in main.py, routes/__init__.py, companies.py, conftest.py, check_indexes.py
- F401: unused imports removed (asyncio, UTC, datetime, AsyncSession)
- 6 ASYNC240/230 warnings remain (os.path.exists in async, open() in test) — minor, non-blocking
2026-07-02 00:20:15 +02:00
leocrm-bot 69e91fd5d0 T10: Monitoring, Performance, Documentation & Environment Config — 38 tests, ruff clean, docs OK
- Extended health endpoint: DB+Redis+Storage+Worker checks with degraded status
- Prometheus metrics endpoint: admin-only, text/plain format
- Metrics: http_requests_total, db_pool_connections, arq_jobs_total
- Structured JSON logging (structlog): timestamp, level, method, path, status, duration_ms, tenant_id
- Performance: page_size max 100 enforced (422), streaming CSV export (StreamingResponse)
- Scripts: seed_perf_data.py, check_indexes.py
- Docs: admin-guide.md (Deploy, Backup, Restore, Env-Vars, Troubleshooting), api-overview.md
- README updated: prod setup, API section, env profiles, admin-guide link
- .env.example: added SECRET_KEY, STORAGE_PATH, SMTP_* vars
- 38 new tests, full regression 564/564 pass (0 failures)
- Ruff: all checks passed
2026-07-01 23:15:35 +02:00
leocrm-bot f646c597dc T06: Mail plugin backend — IMAP/SMTP, threading, templates, rules, PGP, vacation, delegates — 46 tests, 74.56% coverage
- 14 SQLAlchemy models (mail_accounts, mail_folders, mails, attachments, labels, rules, templates, signatures, etc.)
- AES-256 encrypted credential storage
- IMAP sync service (ARQ-ready, sync trigger endpoint)
- SMTP send/reply/forward service
- Mail rule engine (condition matching → move/label/flag/forward)
- Vacation auto-reply with dedup (vacation_sent_log)
- PGP integration (key import, encrypt/decrypt, contact public keys)
- Shared mailboxes with delegate access + send permissions
- HTML sanitization (nh3)
- Full-text search (ILIKE fallback, tsvector-ready)
- Thread grouping via References/In-Reply-To headers
- Template variable substitution
- Contact/company auto-linking from email addresses
- Calendar event creation from mail
- 46 tests covering all 40 acceptance criteria
- Ruff lint clean, format clean
- Full regression: 527 tests pass (0 failures)
2026-07-01 15:41:27 +02:00
leocrm-bot 7fbeeda678 T05: Calendar plugin backend — appointments + tasks + kanban + ICS + resources + recurrence — 69 tests, 86.87% coverage 2026-06-30 01:12:33 +02:00
leocrm-bot fdb41dade1 T04: DMS plugin backend — folders + files + preview + OnlyOffice + shares + search + bulk — 106 tests, 97.90% coverage 2026-06-29 20:48:58 +02:00
leocrm-bot a2452cc04b chore: fix all ruff lint errors + format — 0 errors, 306 tests pass 2026-06-29 17:43:56 +02:00
leocrm-bot 5d1850768a T11: tags plugin + permissions plugin + entity links backend — 68 tests, 66.61% coverage 2026-06-29 14:01:24 +02:00
leocrm-bot 851e7999ba T09: KI-Copilot API + Hybrid Workflow Engine + LLM client + event-triggered workflows
- KI-Copilot: NL query → proposed actions, execute with RBAC, history, audit logging
- LLM client: mock mode (no API key) + OpenAI-compatible mode (AI_MODEL/AI_API_KEY)
- Action mapper: NL intent → API calls (create/update/delete/search company/contact)
- Workflow engine: step types (action/approval/notification/condition), JSONB steps
- Workflow lifecycle: pending → in_progress → completed/rejected/cancelled
- Event-triggered workflows: event bus → auto-start instances
- Code-engine workflows: onboarding on user.created event
- Approval timeout: auto-reject after configured hours
- 5 new tenant-scoped tables with RLS: ai_conversations, ai_messages, workflows, workflow_instances, workflow_step_history
- Migration 0004: all tables + RLS policies + tenant_id + indexes
- 238 tests pass (30 AC + 105 coverage + 103 existing), 84.12% T09 module coverage
- MissingGreenlet fix: safe accessor helpers for async ORM attribute access
2026-06-29 08:02:15 +02:00
leocrm-bot 9678344f0e T03: plugin system framework + lifecycle + migrations + event bus + DI
- Plugin registry with discover/install/activate/deactivate/uninstall lifecycle
- PluginManifest Pydantic v2 schema (name, version, dependencies, routes, events, migrations)
- BasePlugin abstract class with lifecycle hooks (on_install/activate/deactivate/uninstall)
- Migration runner with tenant_id validator (rejects tables without tenant_id)
- Event bus integration: register/unregister listeners on activate/deactivate
- Service container DI: plugins receive db, cache, event_bus, storage, notifications
- Idempotent operations (activate active=200, deactivate inactive=200)
- UI registry for frontend component registration
- 47 new tests (14 ACs + 33 unit tests), 103 total tests pass
- Migration 0003: plugins + plugin_migrations tables
- Coverage: 85.92% for plugin modules
2026-06-29 08:02:15 +02:00
leocrm-bot dd16940bb2 T02: companies + contacts + import/export + N:M + soft-delete + GDPR + FTS
- Company CRUD with soft-delete, FTS search (tsvector + GIN), filter, pagination
- Contact CRUD with N:M company linking via company_contacts
- CSV/XLSX export, CSV import with dry-run preview
- GDPR hard-delete with deletion_log
- Audit log on all mutations
- 27 new tests (24 ACs), 56 total tests pass
- Migration 0002: contacts, company_contacts, FTS search_tsv
- Fixed T01 tests: POST→201, PATCH→PUT compatibility
2026-06-29 08:02:15 +02:00
leocrm-bot 3ab4925783 T01: core infrastructure + auth + multi-tenant + RLS
- 10 models: tenants, users, user_tenants, roles, sessions, audit_log, deletion_log, notifications, password_reset_tokens, api_tokens
- Session-based auth (Redis + PostgreSQL audit trail)
- Multi-tenant with ORM-level filtering + PostgreSQL RLS (set_config)
- RBAC with roles/permissions + field-level permissions
- CSRF protection via Origin header validation
- Auth rate limiting (Redis counters with TTL)
- CORS with explicit origins (no wildcard)
- Health endpoint (no auth required)
- Notification service + audit log middleware
- 29 tests, 26 ACs, all passing
- Coverage: 62% (infrastructure modules pending coverage in later tasks)
2026-06-29 08:02:14 +02:00
leocrm-bot d8f46abe0b chore: clean main for new system architecture
- Old code archived on archive/legacy-v0 and feat/T1-auth
- Main contains only requirements and analysis docs
- UI Prototype: https://webspace.media-on.de/leocrm-prototype-x7k2p9/
- Ready for Phase 2: Architecture design
2026-06-29 08:02:14 +02:00
leocrm-bot b122ce443b Initial commit: LeoCRM - Flask CRM with auth, companies, contacts 2026-06-29 08:02:14 +02:00
Agent Zero b5f7a220fe chore(quality): apply ruff autofixes and formatting (223 fixes, regression-free: 118/118 tests pass) 2026-06-29 08:01:45 +02:00
Leopoldadmin 7104335334 Upload app/webui/js/store.js 2026-06-29 08:01:45 +02:00
Leopoldadmin d5b6ec3090 Upload app/webui/js/components/notifications.js 2026-06-29 08:01:45 +02:00
Leopoldadmin c7a0b795fc Upload app/webui/js/auth.js 2026-06-29 08:01:45 +02:00
Leopoldadmin be1b473b46 Upload app/webui/js/api.js 2026-06-29 08:01:45 +02:00
Leopoldadmin 8d6f496d14 Upload app/webui/css/app.css 2026-06-29 08:01:45 +02:00
Leopoldadmin 6a340f8131 Upload app/webui/components/deal-kanban.js 2026-06-29 08:01:45 +02:00
Leopoldadmin 498152d4a3 Upload app/webui/components/dashboard-kpis.js 2026-06-29 08:01:45 +02:00
Leopoldadmin 7a3e23704b Upload app/webui/components/app-shell.js 2026-06-29 08:01:45 +02:00
Leopoldadmin ff61126595 Upload app/webui/components/activity-list.js 2026-06-29 08:01:45 +02:00
Leopoldadmin 8b9a77290e Upload app/webui/components/account-list.js 2026-06-29 08:01:45 +02:00
Leopoldadmin 525d86002c Upload app/services/user_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin 7024575c9a Upload app/services/tag_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin 8b3febe1a7 Upload app/services/note_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin 2b9bd76a78 Upload app/services/deal_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin 8d904c316b Upload app/services/dashboard_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin 26fe49490d Upload app/services/contact_service.py 2026-06-29 08:01:45 +02:00
Leopoldadmin f9a4ae2a00 Upload app/services/auth_service.py 2026-06-29 08:01:45 +02:00