Agent Zero 604a2b7648 Phase 2: Fix high-priority security and stability issues (H1-H7) ...

H1: Sanitize error endpoint context (strip tokens/passwords, limit depth/size)
H2: Rate limiter IP spoofing fix (trusted proxy CIDR check for X-Forwarded-For)
H3: CSRF middleware uses Redis singleton instead of per-request connection
H4: WebSocket origin verification added to both kommunikation and ai_ui_control
H5: Storage path traversal protection, get_url() returns relative URL not filesystem path
H6: Security headers middleware (HSTS, X-Content-Type-Options, X-Frame-Options, CSP, Referrer-Policy)
H7: Forward-repair migration 0045 for databases that ran original 0021/0027

Also: add trusted_proxy_cidrs to config, add verify_ws_origin to auth

2026-07-26 20:49:15 +02:00

..

0001_initial.py

T01: core infrastructure + auth + multi-tenant + RLS

2026-06-29 08:02:14 +02:00

0002_contacts_fts.py

T02: companies + contacts + import/export + N:M + soft-delete + GDPR + FTS

2026-06-29 08:02:15 +02:00

0003_plugin_system.py

T03: plugin system framework + lifecycle + migrations + event bus + DI

2026-06-29 08:02:15 +02:00

0004_ai_workflows.py

T09: KI-Copilot API + Hybrid Workflow Engine + LLM client + event-triggered workflows

2026-06-29 08:02:15 +02:00

0005_user_role_fk.py

Problem 1: Alembic migration 0005 — add role_id FK column to users table

2026-07-03 19:50:08 +00:00

0006_add_addresses.py

feat(core): add alembic migration for address fields

2026-07-04 00:15:24 +00:00

0007_currencies.py

feat(core): add alembic migration for currencies table

2026-07-04 00:21:43 +00:00

0008_tax_rates.py

feat(core): add alembic migration for tax_rates table

2026-07-04 00:23:15 +00:00

0009_sequences.py

feat(core): add alembic migration for sequences table

2026-07-04 00:24:18 +00:00

0010_system_settings.py

feat(core): add alembic migration for system_settings table

2026-07-04 00:25:39 +00:00

0011_attachments.py

feat(core): add alembic migration for attachments table

2026-07-04 00:29:12 +00:00

0012_soft_delete.py

feat(core): add alembic migration for soft-delete columns on core tables

2026-07-04 00:31:47 +00:00

0013_addresses.py

A: Migration 0013 — create addresses table, migrate data, drop old address columns

2026-07-04 01:32:12 +00:00

0014_currency_unique_fix.py

B2: Migration 0014 — drop global unique on currency.code, add tenant-scoped unique constraint

2026-07-04 01:32:13 +00:00

0015_rls_policies.py

Fix: 0015 RLS migration idempotent — DROP POLICY IF EXISTS before CREATE POLICY

2026-07-04 08:12:39 +00:00

0016_plugin_is_core.py

feat: Core Plugin system — is_core flag, topological sort dependency resolution, deactivation protection

2026-07-07 07:44:02 +02:00

0017_notification_preferences.py

feat: notification preferences system with plugin registry

2026-07-15 21:00:32 +02:00

0018_fix_notification_preferences_columns.py

fix: correct migration 0018 revision id

2026-07-15 21:19:08 +02:00

0019_rbac_groups.py

fix: migration 0019 - add missing updated_at and deleted_at columns to roles table

2026-07-15 22:18:48 +02:00

0020_notifications_updated_at.py

fix: make migration 0020 idempotent (check column exists)

2026-07-17 00:59:41 +02:00

0021_unified_contacts.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0022_contact_folders.py

feat: Kontakt-Ordner mit Drag&Drop Baum (wie KI-Chat Sidebar)

2026-07-20 01:33:44 +02:00

0023_theme_customization.py

Phase 0 Complete: Tasks 0.7-0.20

2026-07-23 08:42:26 +02:00

0024_heartbeat_config.py

Phase 0 Complete: Tasks 0.7-0.20

2026-07-23 08:42:26 +02:00

0025_entity_history.py

Phase 0 Complete: Tasks 0.7-0.20

2026-07-23 08:42:26 +02:00

0026_mail_salt_security.py

Phase 0 Complete: Tasks 0.7-0.20

2026-07-23 08:42:26 +02:00

0027_unify_company_to_contact.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0028_rls_force.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0028_user_preferences.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0029_saved_filters.py

feat(5.22): Saved Searches / Smart Lists — reusable filters for list views

2026-07-23 23:44:50 +02:00

0030_contact_merge_history.py

Task 5.23: Deduplication / Merge — ContactMergeHistory model, dedup service, API routes (duplicates/merge/merge-history), DedupDialog frontend, i18n, 5 tests

2026-07-23 23:58:45 +02:00

0031_permissions_soft_delete.py

fix: resolve menu duplicates, route prefix conflicts, API path bugs, permissions.deleted_at, remove test plugin from production

2026-07-24 08:19:45 +02:00

0032_user_profile_fields.py

fix: correct alembic revision ID in migration 0032

2026-07-24 17:24:47 +02:00

0033_bank_accounts.py

feat: Mini-Apps registry, Stammdaten backend persistence, bank accounts

2026-07-25 02:11:29 +02:00

0034_automation_config.py

fix: Replace automation stubs with real execution engine

2026-07-25 02:52:07 +02:00

0035_comm_search_index.py

fix: Chat search index, DMS group-share user_id, verify workflows and mail salt

2026-07-25 03:02:41 +02:00

0036_cross_tenant_fk.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0037_user_tenant_model.py

Fix: register plugin routes in create_app() not lifespan(); add status column to contacts migration 0039; add updated_at to user_tenants migration 0037

2026-07-26 00:42:31 +02:00

0038_dms_content_hash.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0039_contact_normalize.py

Fix: register plugin routes in create_app() not lifespan(); add status column to contacts migration 0039; add updated_at to user_tenants migration 0037

2026-07-26 00:42:31 +02:00

0040_outbox.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0041_custom_field_definitions.py

Phase 2: Tags UI, Custom Fields UI, Notifications Bell

2026-07-26 03:02:25 +02:00

0042_webhooks.py

Phase 4: Webhooks, Backup/Restore UI, Onboarding/Tutorial

2026-07-26 03:17:40 +02:00

0043_backups.py

Fix: Add updated_at and deleted_at columns to backups migration (TenantMixin)

2026-07-26 03:22:40 +02:00

0044_rls_repair_and_db_roles.py

Phase 1: Fix all critical release blockers (B1-B10)

2026-07-26 20:45:42 +02:00

0045_repair_contact_migration.py

Phase 2: Fix high-priority security and stability issues (H1-H7)

2026-07-26 20:49:15 +02:00