 Agent Zero
|
ba0c4af42f
|
fix: ContactsList canAccess fallback + ContactFolderTree error handling with toast
|
2026-07-30 02:56:40 +02:00 |
|
|
Agent Zero
|
2836d6083e
|
fix: add async_session_maker alias in db/__init__.py for plugin imports
|
2026-07-30 02:48:21 +02:00 |
|
|
Agent Zero
|
88bcbfa9a8
|
fix: add app/core/redis.py shim re-exporting get_redis from auth
|
2026-07-30 02:01:28 +02:00 |
|
|
Agent Zero
|
25e70cf749
|
fix: canAccess + isModuleVisible fallback while permissions loading (contacts + settings link)
|
2026-07-30 01:53:30 +02:00 |
|
|
Agent Zero
|
c5f0ef9d4d
|
fix: canAccess returns true while permissions are loading
|
2026-07-30 01:44:50 +02:00 |
|
|
Agent Zero
|
49c8b740e4
|
fix: system admin bypasses workspace filter in sidebar
|
2026-07-30 01:25:29 +02:00 |
|
|
Agent Zero
|
8d5f272ba5
|
fix: deploy.py RLS exclude list reduced to 35 system tables only
|
2026-07-30 01:00:59 +02:00 |
|
|
Agent Zero
|
7f872b8bfc
|
fix: deploy.py exclude system tables from RLS enforcement
|
2026-07-30 00:51:16 +02:00 |
|
|
Agent Zero
|
d4ffbeca50
|
phase12: disable RLS on all system/auth/config/plugin tables (final migration)
|
2026-07-30 00:47:43 +02:00 |
|
|
Agent Zero
|
8833444dcb
|
phase12: disable RLS on audit_log and sessions (written during login)
|
2026-07-30 00:20:20 +02:00 |
|
|
Agent Zero
|
02af9ebaa2
|
phase12: disable RLS on all system/auth/config tables for crm_api startup
|
2026-07-30 00:15:58 +02:00 |
|
|
Agent Zero
|
42d004c2c9
|
phase12: disable RLS on automation tables (written at startup)
|
2026-07-30 00:06:43 +02:00 |
|
|
Agent Zero
|
0d7602db3a
|
phase12: disable RLS on tax_rates (startup table)
|
2026-07-29 23:42:25 +02:00 |
|
|
Agent Zero
|
1611b2450e
|
phase12: disable RLS on startup tables (system_settings, currencies, taxes, sequences, saved_filters, saved_views, webhooks)
|
2026-07-29 23:33:56 +02:00 |
|
|
Agent Zero
|
ee4b0de144
|
fix: /health/ready status mapping (up/down → ok/fail)
|
2026-07-29 23:25:56 +02:00 |
|
|
Agent Zero
|
32db1498ba
|
fix: /health/ready dict handling
|
2026-07-29 23:23:52 +02:00 |
|
|
Agent Zero
|
3e9cfbef8a
|
phase11: /health/live + /health/ready endpoints + monitoring docs + Prometheus metrics docs
|
2026-07-29 23:22:29 +02:00 |
|
|
Agent Zero
|
3eeeeb6173
|
phase10: CI erweitert (Ruff, Cross-Tenant Test, Dependency Scan, Container Smoke Test, npm ci strict) + 15 total gates
|
2026-07-29 23:20:03 +02:00 |
|
|
Agent Zero
|
5088b4a735
|
phase9: migration test script + .gitignore cleanup + CI alembic migration gate
|
2026-07-29 23:17:03 +02:00 |
|
|
Agent Zero
|
a2c3f797f2
|
phase8: report generation isolated in worker (ARQ background job) + async endpoint + DMS output
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 23:10:50 +02:00 |
|
|
Agent Zero
|
4e2c888505
|
phase7: command pattern infrastructure (CommandHandler, UnitOfWork, RequestContext) + example CreateContactCommand
|
2026-07-29 23:00:38 +02:00 |
|
|
Agent Zero
|
54c275580f
|
phase6: standardized event envelope (aggregate_type, aggregate_id, occurred_at, correlation_id, schema_version) + outbox_deliveries table
|
2026-07-29 22:50:27 +02:00 |
|
|
Agent Zero
|
0fb0ca9925
|
phase5: workspace management UI in Settings → Rechte → Workspaces
|
2026-07-29 22:22:37 +02:00 |
|
|
Agent Zero
|
fca7191269
|
phase5: workspace frontend — API hooks, useWorkspace hook, WorkspaceSwitcher, Sidebar workspace filter
|
2026-07-29 22:12:23 +02:00 |
|
|
Agent Zero
|
bd50a85483
|
fix: add created_at/updated_at to workspace_users (TenantMixin inherits TimestampMixin)
|
2026-07-29 18:40:09 +02:00 |
|
|
Agent Zero
|
8094b6d13f
|
fix: add deleted_at to workspace tables (TenantMixin includes SoftDeleteMixin)
|
2026-07-29 18:38:06 +02:00 |
|
|
Agent Zero
|
f1c025f2ef
|
fix: workspaces router prefix /api/v1/workspaces
|
2026-07-29 18:36:40 +02:00 |
|
|
Agent Zero
|
2423053477
|
phase5: workspace backend — models, service, routes, migration 0072
|
2026-07-29 18:32:35 +02:00 |
|
|
Agent Zero
|
5e29b50bcc
|
fix: storage.load() → storage.read() for attachment download
|
2026-07-29 17:55:33 +02:00 |
|
|
Agent Zero
|
8322adb73f
|
phase4: entity_attachments table + DMS unified storage + attachment service rewritten + download via DMS
|
2026-07-29 17:52:55 +02:00 |
|
|
Agent Zero
|
481125e29e
|
phase3: plugin routes static only (no dynamic registration) + require_active_plugin Redis cache + cache invalidation on activate/deactivate
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 17:40:40 +02:00 |
|
|
Agent Zero
|
840795b5b9
|
phase2: 4 DB roles (crm_migration/api/worker/auth) + docker-compose updated + GRANT USAGE + RLS verified with unprivileged role
|
2026-07-29 16:49:09 +02:00 |
|
|
Agent Zero
|
8da803156e
|
phase1: RLS simplified to tenant isolation only + canAccess fallback removed + useUserPermissions hook + security kernel docs
|
2026-07-29 16:36:51 +02:00 |
|
|
Agent Zero
|
66fd387301
|
phase0a: 8/8 cross-tenant security tests passing — visibility defense-in-depth, RLS, entity permissions all verified
|
2026-07-29 16:19:55 +02:00 |
|
|
Agent Zero
|
0448962d08
|
fix: visibility.py Defense-in-Depth tenant_id filter + entity_permissions deleted_at migration + cross-tenant tests
|
2026-07-29 16:12:04 +02:00 |
|
|
Agent Zero
|
f1a2484055
|
fix: WeasyPrint URL fetcher + attachment improvements + webhook error propagation + WebSocket conversation check + RLS disabled on system tables (bootstrap fix)
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 13:19:21 +02:00 |
|
|
Agent Zero
|
9bd6936d17
|
ci: CI/CD pipeline with 10 quality gates + Forgejo Actions workflow
|
2026-07-29 13:05:14 +02:00 |
|
|
Agent Zero
|
648d8d89d6
|
fix: outbox consumer_inbox idempotency logic + tenant_plugin_activation per-tenant check
|
2026-07-29 13:02:33 +02:00 |
|
|
Agent Zero
|
0f4e51c4b3
|
fix: consumer_inbox table for outbox idempotency + tenant_plugin_activation table
|
2026-07-29 12:49:15 +02:00 |
|
|
Agent Zero
|
fd1a170f31
|
fix: plugin duplicate route registration + prestart.sh Python instead of psql + SMTP in docker-compose
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 12:48:25 +02:00 |
|
|
Agent Zero
|
de53bcff25
|
fix: guest_sessions Redis index for revocation + RLS on all tenant tables (migration 0064)
|
2026-07-29 12:46:50 +02:00 |
|
|
Agent Zero
|
bfd4ff8dd5
|
fix: migration 0061 — remove non-existent tables from RLS list
|
2026-07-29 12:40:15 +02:00 |
|
|
Agent Zero
|
e1d522c6a2
|
fix: missing notification entity_type/entity_id migration (0063)
|
2026-07-29 12:35:44 +02:00 |
|
|
Agent Zero
|
8dacb739bd
|
P1 fixes: outbox no_handlers, HTML sanitization, WebSocket plugin check, fail-closed plugin gate, plugin admin-only
|
2026-07-29 12:33:46 +02:00 |
|
|
Agent Zero
|
8539a6402c
|
P1.6: secure guest invitation tokens (secrets.token_urlsafe + SHA-256 hash + one-time use + session revocation)
|
2026-07-29 12:30:00 +02:00 |
|
|
Agent Zero
|
26bf8d3a31
|
P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 12:28:08 +02:00 |
|
|
Agent Zero
|
81ae5b7cb6
|
fix: redis cache invalidation in permission service + permission check in entity_permissions route + upsert cache invalidation + remove TopBar quick-create
|
2026-07-29 10:45:45 +02:00 |
|
|
Agent Zero
|
0cebd23e3b
|
fix: remove TopBar quick-create button + canAccess fallback in ContactDetail + ContactDetailPage + ContactsList + duplicate import fix
|
2026-07-29 10:33:31 +02:00 |
|
|
Agent Zero
|
9be0cd0909
|
hotfix: add useAuthStore import to Sidebar.tsx
|
2026-07-29 10:17:52 +02:00 |
|
|
Agent Zero
|
14a1073c92
|
hotfix: sidebar + topbar canAccess fallback — show all items for system_admin or empty permissions
|
2026-07-29 10:17:03 +02:00 |
|