Agent Zero
7fbbe420bd
Check Cross-Plugin Imports / check (push) Has been cancelled
CRITICAL: - Fix SQL injection in prestart.sh (parameterized query) - Fix secret key validation (always validate, not just production) - Fix workspace model partial index bug (func.text -> text) - Fix HealthResponse schema (add checks field) - Fix Tenant import in permissions.py (NameError on every auth request) - Fix README tech stack (React instead of Alpine.js) - Delete broken test_cross_tenant_security_v2.py - Add fail-closed RLS migration 0084 (48 tenant tables) HIGH: - Add GeneralRateLimitMiddleware for all API routes - Add file type blocklist for DMS and attachment uploads - Fix guest auth: Pydantic schema, tenant_slug required, CSRF bypass - Fix CSRF bypass path matching (in -> endswith) - Add worker healthcheck in docker-compose.yml - Add ARQ max_tries=3 for job retries - Fix 28 bare pass in mail services (-> logger.debug) - Fix print() -> logger in main.py and ai_assistant - Fix duplicate email handling (catch IntegrityError -> 409) - Add session revocation (invalidate_all_user_sessions) - Add resource limits to all containers - Fix CORS default (localhost -> production domain) - Fix SameSite=Lax -> Strict - Fix Redis password visibility in healthcheck - Fix npm vulnerabilities (19 -> 9) - Fix Sidebar OOM (wildcard lucide import -> curated ICON_MAP) MEDIUM: - Localize ErrorBoundary to German - Wire Mail.tsx save/delete filter to API - Document system_notif plugin (no routes needed) - Fix datetime.utcnow() -> datetime.now(UTC) - Pin litellm version (>=1.0,<2.0) - Move CSRF token from sessionStorage to in-memory - Fix restore_backup error handling and transaction - Fix Dms.tsx useEffect cleanup - Add skip-to-content link for accessibility - Add selectinload imports to 3 services - Add .env.example missing variables - Fix AppShell/TopBar/Sidebar test mocks NEW TESTS: - test_guest_auth.py (6 tests) - test_user_service.py (8 tests) - test_backup_service.py (5 tests) NEW SCHEMAS: - saved_filter, saved_view, user_preference, workspace, entity_policy Tests: 22/22 PASSED
59 lines
792 B
Plaintext
59 lines
792 B
Plaintext
# LeoCRM v1.0 - Production Dependencies
|
|
|
|
# Web framework
|
|
fastapi>=0.111.0,<0.116
|
|
uvicorn[standard]>=0.29.0
|
|
python-multipart>=0.0.7
|
|
httpx>=0.27
|
|
|
|
# Database / ORM
|
|
sqlalchemy==2.0.35
|
|
alembic>=1.13
|
|
asyncpg>=0.29
|
|
|
|
# Validation / Settings
|
|
pydantic>=2.5
|
|
pydantic-settings>=2.1
|
|
email-validator>=2.0
|
|
|
|
# Auth
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.0.1
|
|
cryptography>=42.0
|
|
|
|
# Redis / Job Queue
|
|
redis>=5.0
|
|
arq>=0.25
|
|
croniter>=2.0
|
|
|
|
# File I/O
|
|
aiofiles>=23.2
|
|
|
|
# Email (IMAP/SMTP)
|
|
aioimaplib>=1.0
|
|
aiosmtplib>=3.0
|
|
pgpy>=0.6
|
|
|
|
# HTML sanitization
|
|
nh3>=0.2
|
|
|
|
# Templates (optional)
|
|
jinja2>=3.1
|
|
greenlet>=3.0
|
|
openpyxl>=3.1
|
|
|
|
# PDF generation
|
|
weasyprint>=62.0
|
|
|
|
# Monitoring
|
|
prometheus-client>=0.20
|
|
structlog>=24.0
|
|
litellm>=1.0,<2.0
|
|
|
|
# AI / Search
|
|
pgvector>=0.3.0
|
|
pypdf>=1.24.0
|
|
python-docx>=1.1.0
|
|
python-pptx>=0.6.23
|
|
minio
|