fb98e06cec
docs: 155 Architektur-Fehler (ARCH-001 bis ARCH-155) durch systematisches Code-Review dokumentiert
2026-08-22 22:41:57 +02:00
daaa88a53d
docs: 137 Architektur-Fehler (ARCH-001 bis ARCH-137) durch systematisches Code-Review dokumentiert
2026-08-22 22:40:59 +02:00
880dd6408c
docs: 127 Architektur-Fehler (ARCH-001 bis ARCH-127) durch systematisches Code-Review dokumentiert
2026-08-22 22:40:21 +02:00
dc699bee86
docs: 117 Architektur-Fehler (ARCH-001 bis ARCH-117) durch systematisches Code-Review dokumentiert
2026-08-22 22:39:53 +02:00
e5c8b7beba
docs: 104 Architektur-Fehler (ARCH-001 bis ARCH-104) durch systematisches Code-Review dokumentiert
2026-08-22 22:39:22 +02:00
a0477ddac0
docs: 93 Architektur-Fehler (ARCH-001 bis ARCH-093) durch systematisches Code-Review dokumentiert
2026-08-22 22:38:41 +02:00
51265c29be
docs: 84 Architektur-Fehler (ARCH-001 bis ARCH-084) durch systematisches Code-Review dokumentiert
2026-08-22 22:37:56 +02:00
d43cd45aac
docs: 70 Architektur-Fehler (ARCH-001 bis ARCH-070) durch systematisches Code-Review dokumentiert
2026-08-22 22:35:11 +02:00
f7f8a302f8
docs: 64 Architektur-Fehler (ARCH-001 bis ARCH-064) durch systematisches Code-Review dokumentiert
2026-08-22 22:34:39 +02:00
624699bf8d
docs: 59 Architektur-Fehler (ARCH-001 bis ARCH-059) durch systematisches Code-Review dokumentiert
2026-08-22 22:34:11 +02:00
7d80e09226
docs: 28 Architektur-Fehler (ARCH-001 bis ARCH-028) durch Code-Review dokumentiert
2026-08-22 22:31:49 +02:00
85af047bca
docs: Bug-Status aktualisiert — 30 Bugs gefixt/kein Bug, 26 offen
2026-08-22 07:39:59 +02:00
f6c67a9b6c
docs: Bug-Status aktualisiert — 22 Bugs gefixt/kein Bug, rest offen
2026-08-22 07:22:35 +02:00
57f4f3daca
docs: BUG-082 bis BUG-100 — Alle Einzeln-Tests abgeschlossen: 23 unused components, 1 unused hook, 5 missing indexes, pytest Failures einzeln dokumentiert (test_phase_h_wiki 27, test_backend_coverage_gaps 26, test_companies 17, test_calendar 22, test_ai_proactive 31, test_api_tokens 13, test_abac 10, etc.)
2026-08-22 01:01:44 +02:00
c19b08e068
docs: BUG-079 (14 pip-audit vulnerabilities), BUG-080 (7 unused frontend components), BUG-081 (9 frontend god objects)
2026-08-21 23:40:46 +02:00
79c3c84681
docs: BUG-073 bis BUG-078 (Marathon: 5 broken imports, 859 API contract issues, 323 store issues, 70 hook issues, 27 plugin issues, 3 function issues)
2026-08-21 23:35:21 +02:00
baf4af26b2
docs: BUG-073 bis BUG-078 (Marathon: 5 broken imports, 859 API contract issues, 323 store issues, 70 hook issues, 27 plugin issues, 3 function issues)
2026-08-21 23:35:13 +02:00
05043b123a
docs: BUG-067 bis BUG-072 (pytest Failures, Field-Level Permissions, Dead Code, npm vulnerabilities, Merge API, Workflow Instance)
2026-08-21 23:27:42 +02:00
2e17066031
docs: BUG-058 bis BUG-066 (WebSocket 403, DMS Preview/Upload, Calendar Recurring/ICS, Missing Indexes, N+1, Custom Field not saved)
2026-08-21 23:20:49 +02:00
3caa08c460
docs: BUG-038 (Audit-Log fehlt für tag/task/wiki/mail/calendar), BUG-039 (entity-links API Pfad)
2026-08-21 22:37:47 +02:00
3e3fadac71
docs: BUG-027 bis BUG-037 (Mail Send, Calendar entry_type, Notifications, User DELETE 500, Role/Group PATCH, Custom Field, Entity Permissions, System Settings, User Preferences, Workflow Instances 500, Compliance 500)
2026-08-21 22:25:34 +02:00
4581264935
docs: BUG-026 (Contact mit 1000 Zeichen String schlägt fehl) — Alle Tests abgeschlossen, 26 Bugs total (5 gefixt, 21 offen)
2026-08-21 22:16:09 +02:00
f6d9fc8124
docs: BUG-024 (Plugin Detail Route fehlt), BUG-025 (Workflow Execute/Instances API-Pfade falsch)
2026-08-21 22:15:28 +02:00
47b74dfa8c
docs: BUG-017 bis BUG-023 (Architektur: Core-to-Plugin, God Objects, Hardcoded Secrets, SQL Injection, i18n, npm vulnerabilities, Sync I/O)
2026-08-21 22:09:04 +02:00
e3e913f4fb
docs: BUG-014 (Tags Assign 500), BUG-015 (6 Cross-Plugin Import violations), BUG-016 (Search 6.34s Performance)
2026-08-21 22:08:10 +02:00
5998127f86
docs: BUG-011 (Playwright localhost statt Produktion), BUG-012 (helpers.ts Mock-Daten), BUG-013 (ContactsList data-testid fehlt)
2026-08-21 22:04:35 +02:00
b107d25fc2
docs: BUG-008 (contacts empty body 201), BUG-009 (contact-folders id=None), BUG-010 (attachments 500 statt 404)
2026-08-21 21:58:20 +02:00
063e41e995
docs: Test-Plan erweitert auf 85 Kategorien (+30 Architektur-Fehler-Tests: Circular Deps, Dead Code, Layer Violations, God Objects, Duplikate, Tenant-Isolation, Indexes, N+1, Error-Handling, Validierung, Hardcoded, Type Hints, Async/Sync, Audit, Soft-Delete, SQL Injection, CSRF, Rate-Limit, Error-Boundaries, i18n, Constraints, Orphans, Trigger, Plugin Lifecycle, Migrationen, Response-Formate, OpenAPI, Dependencies, Query-Performance)
2026-08-21 21:51:46 +02:00
00edc43e5c
docs: Test-Plan Kategorie 55 — Architektur-Compliance Tests (Cross-Plugin Imports, Contracts, Plugin-Isolation, Model/Service/Route Dependencies, Hooks, Worker, Middleware, Manifests, DB-Architektur, Frontend-Architektur)
2026-08-21 21:44:26 +02:00
1f8c4d5177
docs: Architektur- & Drift-Prüfung abgeschlossen — BUG-006 (cross-plugin imports), BUG-007 (schema drift check), Production Safety Rules aktualisiert (volle Tests erlaubt)
2026-08-21 21:40:17 +02:00
c48513349e
docs: Test-Plan erweitert auf 54 Kategorien (+Tenant Provisioning, Contract Testing, Regression, Exploratory, Cross-Browser, Data Truncation, API Versioning, Test Pyramid, Negative Testing, Sanity, Production Safety, Test Environment)
2026-08-21 21:36:23 +02:00
d16bd388b1
docs: Test-Plan erweitert auf 42 Kategorien (Edge Cases, Concurrency, Error Handling, File Upload, Session, Data Consistency, Accessibility, API Docs, Infrastructure, Monitoring, Deployment)
2026-08-21 21:33:21 +02:00
11b45cffac
docs: Test-Plan erweitert (31 Kategorien) + Bug-Sammel-Datei — keine Fixes während Testens
2026-08-21 21:28:11 +02:00
ceb972d771
docs: Kompletter Test-Plan — 11 Kategorien, 480+ API Tests, Plugin-Verbindungen, Rechte-System, Security
2026-08-21 21:21:33 +02:00
b3dea611b4
docs: update 6 stale files + delete 17 obsolete audit/plan files
...
Updated:
- README.md: 23 → 25 Plugins (self_improvement, knowledge)
- PROGRESS.md: Phase A-K done (261/261), Alembic 0136, 2174 Tests
- PLATFORM_ROADMAP.md: Phase I, J, K marked as DONE
- docs/api-documentation.md: 303 → 554+ endpoints
- docs/test-strategy.md: ~500 → 2174 Tests, create_all description updated
- docs/INSTALL.md: Alembic-Head 0090 → 0136
Deleted (17 obsolete files):
- Root: ARCHITECTURE_PLAN.md, COMPLETE_SYSTEM_AUDIT.md, COMPLETE_VERNETZUNGS_AUDIT.md, ENTERPRISE_READINESS_PLAN.md, ROADMAP_VERIFICATION.md, SYSTEM_AUDIT.md, TEST_PLAN.md
- docs/: audit-consolidated-errors.md, audit-fix-plan.md, audit-tracker.md, full-audit-errors.md, architecture-cleanup-plan.md, schema-authority.md, api-audit.md, phase-gate-review-g.md, phase-gate-review-h.md, arch-f-review.md
2026-08-21 10:40:22 +02:00
e59db34a6d
feat(K): Phase K EU Compliance — AI Registry, DPIA, Incident Register, Retention Admin, Tests, Doku
...
- K-REG: GET /api/v1/compliance/ai-registry — lists all agents with ai_use_case_metadata
- K-DPIA: GET /api/v1/compliance/dpia-template — pre-filled DPIA template export
- K-INC: ComplianceIncident model, Migration 0133 (RLS), CRUD routes (admin-only)
- K-RET: GET/PATCH /api/v1/compliance/retention-policies — 5 policies editable
- K-COMP-TEST: 12/12 integration tests pass
- K-DOC: docs/compliance.md — Betriebsdoku
- Frontend: ComplianceTab.tsx in SettingsAI.tsx (new tab)
- 13 files created/modified
2026-08-21 01:58:46 +02:00
f79eb9354a
docs: punkt 11 (documentation) — README, infrastructure, monitoring, admin-guide, deploy-guide, api-docs, PROGRESS, ENTERPRISE_READINESS_PLAN all updated
2026-08-20 14:03:35 +02:00
1631b0cd1f
docs: punkt 9 (incident response) — runbook with 7 scenarios, post-mortem template
2026-08-20 13:53:57 +02:00
c2ddf34c53
docs(reviews): Phase-Gate-Review G + H — both PASSED (6/7 each, E2E deferred to Phase I)
2026-08-19 00:02:15 +02:00
240a49321d
docs(H): H-DOC — API documentation updated with Phase H Knowledge endpoints (wiki, sources, evidence, extraction, lifecycle, ask, review)
2026-08-18 23:20:20 +02:00
59f05de621
feat(G): G-WORK/G-HUMAN-DEC/G-UI-TEMPL/G-DOC — workflow workstream, decision guard, template gallery (3 templates), API docs, 43 tests passing
2026-08-18 11:11:50 +02:00
c90c58945a
docs(arch-f): ARCH-F Architecture Review — 10 criteria checked, ✅ PASSED, 2 findings (Agent Loop approval gap, contact_id FK redundant), Phase G clearance granted
2026-08-18 00:16:46 +02:00
df57cd389d
docs(audit): update audit-consolidated-errors.md with verified status (2026-08-17) — P0 all fixed, P1 ~32 fixed, P2 ~35 fixed + 15 intentional
2026-08-17 22:27:00 +02:00
680557087e
feat(F): F-TEST + F-DOC + F-UI-TRIG — Phase F complete!
...
- F-TEST: tests/test_phase_f_agents.py (1425 lines, 45 tests, all pass) — ReAct Loop, Permissions, Approvals, Skills, Context Builder, Data Policy, Transparency, Workstream, Budget
- F-DOC: docs/api-documentation.md (Phase F endpoints), docs/plugin-development-guide.md (Agent chapter 32), docs/test-strategy.md (Phase F test conventions)
- F-UI-TRIG: trigger_dispatcher dispatches agents on ui.*/context.* events (already implemented in F-PROACTIVE)
- Bug fix: approval.py metadata reserved attribute renamed to request_metadata
- PROGRESS.md: Phase F marked done, ~155/223 tasks done (70%)
2026-08-17 19:36:42 +02:00
da9be1e2f2
feat(B): complete remaining B-Tasks — B-SCHEMA, B-VEC-BATCH, B-VEC-TEST, B-WS-TEST
...
- B-SCHEMA: docs/schema-authority.md (Core→Alembic, Plugin→Plugin-Migration, Runtime→non-authoritative)
- B-VEC-BATCH: llm_embed already supports batch via litellm.aembedding (verified by test)
- B-VEC-TEST: tests/test_vector_performance.py (HNSW/IVFFlat latency, ef_search tradeoff, batch verification)
- B-WS-TEST: tests/test_ws_helpers.py already has 20+ tests (auth, origin, error, dispatch, cleanup, heartbeat, pub/sub)
- PROGRESS.md: Phase B marked done, ~114/223 tasks done
2026-08-17 16:02:17 +02:00
abbe7a18fc
fix(audit): P0-P3 audit fixes — 838 ruff errors → 0, 30 F821 bugs fixed, 118 files changed
...
- P0: hooks.py 3-tuple fix, trigger_dispatcher Contract, contacts/plugin unregister_actions_by_owner
- P0: 5 test files — check_permission mocks removed, hardcoded DB credential → env var
- P1: attachment_service DmsFile via Contract helper, restore_registry/history_hooks dedup
- P1: mail/plugin restore unregister, mcp_client datetime.now(UTC), saved_views/filters patterns
- P1: ProtectedRoute fail-closed, 13 test assertion fixes (bcrypt, DB-URLs, SECRET_KEYs)
- P2: deprecated notifications → post_system_message (3 files), forgejo Base, report_generator lazy import
- P2: webhooks permissions, deps.py/roles.py plugin perms removed, import_export default
- P2: address/tags/entity_links patterns removed, worker.py Contract-Umgehungen fixed
- P2: 28 frontend TODOs (hardcoded constants, deprecated notification API)
- P3: dead code, duplicates, deprecated imports, private attr, __import__ inline
- P3: 8 frontend TODOs (LucideIcons, inline styles, XSS, i18n)
- ruff: 838 → 0 (612 auto-fix + 246 manual + 27 F821 regression fix)
- F821: 30 → 0 (AutomationDefinition, DmsFile, user_id, Path, Any, String)
- Contract-Umgehungen: 2 neue gefunden (worker.py:169, worker.py:280) und gefixt
2026-08-16 01:17:18 +02:00
3d9b76cea4
feat(E): Unified Search — 24 Tasks complete
...
Check Cross-Plugin Imports / check (push) Has been cancelled
- SPIKE-E: FTS+Vector+Permission benchmark on 10k records (all <30ms)
- E-PROV: supports_fts/vector/rag/graph capability flags on all providers
- E-FTS/VEC: All 11 providers refactored to BaseSearchProvider with permission filtering
- E-PERM: Over-fetch strategy for vector+permission (15x faster than ANY() filter)
- E-FUSE: rrf_fusion_multi() for N-way RRF over FTS+Vector+RAG+Graph
- E-LLM: Query understanding cleaned up to use central llm_complete()
- E-CHUNK: Document chunking module + document_chunks table with HNSW index
- E-EMB: Chunk embedding ARQ jobs (index_file_chunks, reindex_chunks)
- E-RAG: RAG retrieval via FileSearchProvider.search_rag()
- E-GRAPH: GraphRAG BFS traversal via GraphRAGSearchProvider.search_graph()
- E-IX-EVT: Auto-indexing via outbox events + delete/cleanup handlers
- E-IX-RE: Batch reindex with progress tracking + reindex_all job
- E-DATA-LIFE: Lifecycle module (remove/rebuild/restore/correct) + API endpoints
- E-K-MEM: AgentMemorySearchProvider
- E-P-AI: AIChatSearchProvider
- E-P-WF: WorkflowSearchProvider
- E-P-COMM: ConversationSearchProvider verified (already on BaseSearchProvider)
- E-API: Filter params (date_from/to, tags, sort) + /facets endpoint
- E-TOOL: unified_search AI tool registered in ToolRegistry
- E-MCP: Search tool in MCP server with normal RBAC/tenant checks
- E-UI-CMD: CommandPalette (Cmd+K) with debounced search + recent searches
- E-UI-FAC: SearchFacets, SearchResultCard, SavedSearches components
- E-TEST: 40 new tests in test_unified_search_phase_e.py (105 total green)
- E-DOC: api-documentation.md, plugin-development-guide.md, test-strategy.md updated
105 tests passing, TypeScript clean.
2026-08-14 01:34:58 +02:00
60f30d021b
fix(deploy): MAIL_ENCRYPTION_KEY zu docker-compose.yaml, .env.docker.example und deploy-guide.md hinzugefügt
...
Phase B Security-Fix (5d1b239
2026-08-13 23:50:04 +02:00
a4d0f0c35d
feat(D): Phase D — Undo/Restore komplett implementiert
...
Check Cross-Plugin Imports / check (push) Has been cancelled
- D-GEN: RestoreRegistry mit RestoreConfig (model_class, restore_permission, excluded_fields, special_handler)
- D-HOOK: history_hooks.py mit register_history_hooks() für after_create/update/delete
- D-CORE: Company create+update record_history in companies.py
- D-PLUG: Task/Calendar/DMS record_history in services/routes
- D-SOFT: Alle registrierten Entitäten haben deleted_at + un-delete via Registry
- D-MAIL: Mail special_handler (IMAP Trash-Move, Folder-Verify) + record_history in delete/move
- D-TRASH: GET /entity-history/trash (filterbar, paginiert) + Frontend Trash.tsx
- D-TOAST: UndoToast.tsx (5s Auto-Dismiss, useUndoToast Hook)
- D-HIST-UI: HistoryPanel.tsx (Timeline, Diff-View, Restore-Button)
- D-BULK: POST /entity-history/bulk-restore mit partial_success Semantik
- D-RET: POST /entity-history/retention/archive (GDPR hard-delete >90 Tage)
- D-TEST: 26 Tests in test_restore_registry.py, alle grün
- D-DOC: test-strategy.md + security_kernel.md aktualisiert
Backend: 10 Dateien, Frontend: 7 Dateien, Tests: 1 Datei, Docs: 3 Dateien
26/26 Tests passed, TSC 0 errors, App import 492 routes
2026-08-13 23:08:29 +02:00
e7ae0ad5ce
feat(C.5): Modularer Import/Export — Shared Helpers, Preview/Mapping, Background Jobs, Partial-Failure
...
C5-BASE: app/services/import_export_helpers.py (NEU, 352 Zeilen)
- parse_csv/json/xlsx, write_csv/json/xlsx, map_fields, suggest_mapping
- validate_row, build_error_report, build_import_result, detect_format
C5-PREVIEW: POST /import/preview + POST /import/validate
- Preview gibt erste 10 Zeilen + Spalten + Mapping-Vorschlag
- Validate gibt Fehler-Report ohne Import
C5-JOB: app/services/import_export_jobs.py (NEU, 165 Zeilen)
- ARQ Background Job für Files >1000 Zeilen
- Job-Status: pending/processing/completed/partial_success/failed
- GET /import/status/{job_id} — Status + Progress + Fehler-Report
- Partial-Failure: try/except pro Zeile, fehlerhafte gesammelt, erfolgreiche committet
C5-CONTACT+C5-COMPANY: Handler auf Shared Helpers umgestellt
C5-UI: ImportWizard.tsx (5 Steps: Upload→Preview→Validation→Review→Result)
C5-TEST: 45 Tests in test_import_export.py — alle grün
C5-DOC: Plugin-Dev-Guide Kapitel 31 (Import/Export Handler)
2026-08-13 22:43:33 +02:00
Agent Zero