Agent Zero b231c2d0d3 feat(B-SENS): Sensitive Data Boundary + AI/Data Exposure Policy + AIProvider Compliance ...

B-SENS: app/core/sensitive_data.py (NEU) — zentrale Sensitive-Field-Verwaltung
- SENSITIVE_FIELDS dict für contact/user/mail_account/system_settings
- is_sensitive(), sanitize_dict(), register_sensitive_fields()
- Integration: errors.py (Log-Redaction), audit.py (Audit-Masking), export_service.py (Export-Filter), embedding.py (Index-Filter)

B-DATA-POL: AI/Data Exposure Policy
- DATA_EXPOSURE_POLICY: pro Entity+Field welche Systeme erlaubt (llm_context/search/embeddings/rag/agent_memory/export)
- filter_for_llm_context/search/embeddings/export/rag/agent_memory()

B-AIPROV-COMP: AIProvider Compliance Metadata
- Migration 0119: 7 neue Spalten an ai_providers (region, hosting_type, dpa_status, retention_policy, training_on_customer_data, transfer_notice, allowed_data_classes)
- llm_client.py: get_provider_compliance() + check_data_class_allowed()

B-PRIV-TEST: 76 Tests in test_sensitive_data.py — alle grün
- Sensitive Fields, Exposure Policy, Provider Compliance, Secrets-always-blocked
- Keine Regression: 39 LLM-Client Tests grün

2026-08-13 20:39:32 +02:00

..

__init__.py

fix(security): Fix critical permission system issues

2026-08-06 11:32:14 +02:00

addresses.py

sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models

2026-07-29 01:52:47 +02:00

ai_copilot.py

feat(B-RL): Rate-Limiting Konsistenz — zentrale Policies für Auth/AI/Upload/Webhook

2026-08-13 17:51:04 +02:00

api_tokens.py

Phase 5: AI/MCP Bearer-Auth + Delegationstoken + Audit

2026-08-03 14:06:55 +02:00

attachments.py

feat(B-RL): Rate-Limiting Konsistenz — zentrale Policies für Auth/AI/Upload/Webhook

2026-08-13 17:51:04 +02:00

audit.py

feat: phase 2 - migrate all route guards to require_permission (75 guards, 21 files)

2026-07-15 22:35:50 +02:00

auth.py

feat(B-RL): Rate-Limiting Konsistenz — zentrale Policies für Auth/AI/Upload/Webhook

2026-08-13 17:51:04 +02:00

backups.py

Phase 4: Webhooks, Backup/Restore UI, Onboarding/Tutorial

2026-07-26 03:17:40 +02:00

bank_accounts.py

sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models

2026-07-29 01:52:47 +02:00

companies.py

fix(tests): backend test suite - app version, DB roles, admin RBAC, companies route, field names, DeletionLog, ABAC, imports

2026-08-08 08:09:23 +02:00

contact_folder_permissions.py

feat: folder permissions (ACLs) - share folders with users/groups, inherit to subfolders, permission dialog UI

2026-07-28 23:58:19 +02:00

contact_folders.py

perf: Fix all 7 code analysis issues

2026-07-25 09:19:32 +02:00

contacts.py

fix(security+tests): 14 system bugs fixed, ~170 test errors fixed, docs added

2026-08-12 20:47:43 +02:00

currencies.py

feat: phase 2 - migrate all route guards to require_permission (75 guards, 21 files)

2026-07-15 22:35:50 +02:00

custom_field_definitions.py

Phase 2: Tags UI, Custom Fields UI, Notifications Bell

2026-07-26 03:02:25 +02:00

custom_fields.py

Phase 2: Tags UI, Custom Fields UI, Notifications Bell

2026-07-26 03:02:25 +02:00

dashboard.py

sprint3: dashboard counts per user + import owner_id + export visibility filter

2026-07-29 02:11:29 +02:00

delegations.py

A1: Permission-Checks fuer delegations, policies, permission_templates, ai_copilot

2026-08-03 21:42:11 +02:00

entity_history.py

Phase 0 Complete: Tasks 0.7-0.20

2026-07-23 08:42:26 +02:00

entity_permissions.py

Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME

2026-08-03 22:32:03 +02:00

errors.py

feat(B-SENS): Sensitive Data Boundary + AI/Data Exposure Policy + AIProvider Compliance

2026-08-13 20:39:32 +02:00

groups.py

Fix Bug 5: require groups:read permission for list_groups

2026-07-20 23:13:47 +00:00

guests.py

fix(security): Fix critical permission system issues

2026-08-06 11:32:14 +02:00

health.py

fix: /health/ready status mapping (up/down → ok/fail)

2026-07-29 23:25:56 +02:00

import_export.py

sprint3: dashboard counts per user + import owner_id + export visibility filter

2026-07-29 02:11:29 +02:00

metrics.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

notifications.py

sprint6+7: permission notifications + audit trail + notification entity filter + mail account permissions + migration 0053

2026-07-29 02:18:17 +02:00

outbox.py

Phase 5 (v2): Processing-Recovery, Retention-Cleanup, Replay-Delivery-Reset

2026-08-02 23:47:29 +02:00

owner_transfer.py

sprint10+11: AI permission filter + API token scopes + merge check + owner transfer service + auto-transfer on deactivation

2026-07-29 02:37:51 +02:00

permission_templates.py

A1: Permission-Checks fuer delegations, policies, permission_templates, ai_copilot

2026-08-03 21:42:11 +02:00

plugins.py

fix(security): 16 mittlere Probleme behoben (P18-P33)

2026-08-06 13:23:58 +02:00

policies.py

A1: Permission-Checks fuer delegations, policies, permission_templates, ai_copilot

2026-08-03 21:42:11 +02:00

roles.py

fix(security): 16 mittlere Probleme behoben (P18-P33)

2026-08-06 13:23:58 +02:00

saved_filters.py

sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models

2026-07-29 01:52:47 +02:00

saved_views.py

sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models

2026-07-29 01:52:47 +02:00

sequences.py

sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models

2026-07-29 01:52:47 +02:00

system_settings.py

Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME

2026-08-03 22:32:03 +02:00

taxes.py

feat: phase 2 - migrate all route guards to require_permission (75 guards, 21 files)

2026-07-15 22:35:50 +02:00

tenants.py

feat: phase 2 - migrate all route guards to require_permission (75 guards, 21 files)

2026-07-15 22:35:50 +02:00

user_preferences.py

feat(5.2): add User Preferences API with full-stack implementation

2026-07-23 20:39:42 +02:00

users.py

fix(permissions): fix 10 high-priority permission system issues

2026-08-06 12:05:09 +02:00

webhooks.py

feat(B-RL): Rate-Limiting Konsistenz — zentrale Policies für Auth/AI/Upload/Webhook

2026-08-13 17:51:04 +02:00

workflows.py

fix: workflow route remove is_system_admin param not accepted by service

2026-07-30 11:16:56 +02:00

workspaces.py

Reparaturplan Fixes: Widget workspace_id check, total bug, context is_visible, permissions, fallbacks

2026-08-03 12:44:02 +02:00