Agent Zero 4f970a11eb Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME

2026-08-03 22:32:03 +02:00

..

db

Statement Timeout: 30s -> 300s (5min) — nur echte Hänger abbrechen, normale Queries/Reports/Bulk laufen durch

2026-08-03 20:40:56 +02:00

__init__.py

T01: core infrastructure + auth + multi-tenant + RLS

2026-06-29 08:02:14 +02:00

api_token.py

Phase 5: AI/MCP Bearer-Auth + Delegationstoken + Audit

2026-08-03 14:06:55 +02:00

audit.py

T01: core infrastructure + auth + multi-tenant + RLS

2026-06-29 08:02:14 +02:00

auth.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

cache.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

delegation_token.py

Phase 5: AI/MCP Bearer-Auth + Delegationstoken + Audit

2026-08-03 14:06:55 +02:00

error_codes.py

feat: add forgejo_error_reporter plugin for automatic error reporting to Forgejo issues

2026-07-26 12:49:39 +02:00

event_bus.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

hooks.py

feat: Plugin-System Umbau — 6 Phasen komplett abgeschlossen

2026-07-26 23:15:34 +02:00

job_registry.py

perf: Fix all 7 code analysis issues

2026-07-25 09:19:32 +02:00

jobs.py

gate4: fix SMTP TLS mode for port 465 (implicit TLS instead of STARTTLS)

2026-07-31 11:37:11 +02:00

middleware.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

monitoring.py

fix: health check worker uses zcard instead of llen for arq sorted set queue

2026-07-19 02:25:42 +02:00

notifications.py

sprint6+7: permission notifications + audit trail + notification entity filter + mail account permissions + migration 0053

2026-07-29 02:18:17 +02:00

outbox.py

Phase 7: Plugin-Gate, Event-Envelope, Pro-Handler Outbox-Verarbeitung

2026-08-03 15:20:06 +02:00

pagination.py

Allgemeine Performance Optimierungen fuer 1M+ Datensaetze

2026-08-03 20:16:16 +02:00

permission_registry.py

Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME

2026-08-03 22:32:03 +02:00

permissions.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

plugin_error_handler.py

fix: keep __annotations__ in wrap_plugin_route — body params need ForwardRef resolution

2026-07-27 02:39:16 +02:00

rate_limit.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

redis.py

fix: add app/core/redis.py shim re-exporting get_redis from auth

2026-07-30 02:01:28 +02:00

seeds.py

C1: Add seeds.py — EUR currency, 19% and 7% tax rates, idempotent

2026-07-04 01:30:06 +00:00

service_container.py

T01: core infrastructure + auth + multi-tenant + RLS

2026-06-29 08:02:14 +02:00

state_machine.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

storage.py

Phase 2: Fix high-priority security and stability issues (H1-H7)

2026-07-26 20:49:15 +02:00

tenant.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

visibility.py

fix: visibility.py Defense-in-Depth tenant_id filter + entity_permissions deleted_at migration + cross-tenant tests

2026-07-29 16:12:04 +02:00

webhook_dispatcher.py

fix: WeasyPrint URL fetcher + attachment improvements + webhook error propagation + WebSocket conversation check + RLS disabled on system tables (bootstrap fix)

2026-07-29 13:19:21 +02:00

worker.py

Phase 5 (v2): Processing-Recovery, Retention-Cleanup, Replay-Delivery-Reset

2026-08-02 23:47:29 +02:00