6 Commits

Author	SHA1	Message	Date
Agent Zero	2836d6083e	fix: add async_session_maker alias in db/__init__.py for plugin imports	2026-07-30 02:48:21 +02:00
Agent Zero	26bf8d3a31	P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check	2026-07-29 12:28:08 +02:00
Agent Zero	48647a58e0	sprint1: set_user_context + RLS policies on contacts + folder ACL migration 0051+0052	2026-07-29 01:30:25 +02:00
Leopoldadmin	02d5195c1c	feat(core): add SoftDeleteMixin to db base, TenantMixin inherits from it	2026-07-04 00:31:44 +00:00
leocrm-bot	a2452cc04b	chore: fix all ruff lint errors + format — 0 errors, 306 tests pass	2026-06-29 17:43:56 +02:00
leocrm-bot	3ab4925783	T01: core infrastructure + auth + multi-tenant + RLS ... - 10 models: tenants, users, user_tenants, roles, sessions, audit_log, deletion_log, notifications, password_reset_tokens, api_tokens - Session-based auth (Redis + PostgreSQL audit trail) - Multi-tenant with ORM-level filtering + PostgreSQL RLS (set_config) - RBAC with roles/permissions + field-level permissions - CSRF protection via Origin header validation - Auth rate limiting (Redis counters with TTL) - CORS with explicit origins (no wildcard) - Health endpoint (no auth required) - Notification service + audit log middleware - 29 tests, 26 ACs, all passing - Coverage: 62% (infrastructure modules pending coverage in later tasks)	2026-06-29 08:02:14 +02:00