Agent Zero b311ab7aa1 feat(L1-L3): Dokumente-Generator — Briefpapier+Block-System+Drag&Drop-Editor+Renderer ...

- Briefpapier (letterheads): Seiten-Setup (A4/A5/Letter, Ränder), Header/Footer-Blöcke, Wasserzeichen, Logo-Upload (DocumentAsset, data:-URI-only)
- Druckvorlagen (print_templates): Block-Komposition mit Briefpapier-Ref + entity_type
- Block-Registry (document_blocks.py): text/image/shape(line/rect/circle)/table/spacer/divider/placeholder/pagebreak + Modul-Beiträge via document_blocks()-Contract
- Renderer (document_renderer.py): Blocks→HTML→PDF via WeasyPrint (SSRF-Sandbox data:-URI-only), @page-Frame mit running header/footer, Placeholder-Beispiel-Defaults gegen StrictUndefined
- Contract-Beitrag contacts: document_placeholders/document_data (#359-Muster wie importexport_entities)
- 13 neue Endpoints in documents.py: Letterhead-CRUD, Template-CRUD, Assets, document-blocks, document-placeholders, preview (HTML), render (PDF)
- Migration: Plugin-SQL 0003 (idempotent) + Alembic 0143 (Dual-Path, RLS fail-closed crm_api)
- Frontend: api/documents.ts, Settings→Dokumente (settings_pages), BlockEditor (@dnd-kit Palette/Canvas/Config/Live-Preview-iframe), LetterheadEditor, PrintTemplateEditor, DocumentGenerationDialog (global, ContactDetailPage-Integration)
- i18n de/en, api-documentation.md, plugin-development-guide.md, PROGRESS.md

Verifikation: 32/32 neue Tests + 9/9 Regressionen, tsc exit 0, Build OK 2.79s, Alembic-Fresh-DB 0143 mit RLS bewiesen, ruff clean

2026-08-29 09:49:16 +02:00

..

0001_initial.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0002_contacts_fts.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0003_plugin_system.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0004_ai_workflows.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0005_user_role_fk.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0006_add_addresses.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0007_currencies.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0008_tax_rates.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0009_sequences.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0010_system_settings.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0011_attachments.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0012_soft_delete.py

feat(core): add alembic migration for soft-delete columns on core tables

2026-07-04 00:31:47 +00:00

0013_addresses.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0014_currency_unique_fix.py

B2: Migration 0014 — drop global unique on currency.code, add tenant-scoped unique constraint

2026-07-04 01:32:13 +00:00

0015_rls_policies.py

Fix: 0015 RLS migration idempotent — DROP POLICY IF EXISTS before CREATE POLICY

2026-07-04 08:12:39 +00:00

0016_plugin_is_core.py

feat: Core Plugin system — is_core flag, topological sort dependency resolution, deactivation protection

2026-07-07 07:44:02 +02:00

0017_notification_preferences.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0018_fix_notification_preferences_columns.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0019_rbac_groups.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0020_notifications_updated_at.py

fix: make migration 0020 idempotent (check column exists)

2026-07-17 00:59:41 +02:00

0021_unified_contacts.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0022_contact_folders.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0023_theme_customization.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0024_heartbeat_config.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0025_entity_history.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0026_mail_salt_security.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0027_unify_company_to_contact.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0028_rls_force.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0028_user_preferences.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0029_saved_filters.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0030_contact_merge_history.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0031_permissions_soft_delete.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0032_user_profile_fields.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0033_bank_accounts.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0034_automation_config.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0035_comm_search_index.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0036_cross_tenant_fk.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0037_user_tenant_model.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0038_dms_content_hash.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0039_contact_normalize.py

Fix: register plugin routes in create_app() not lifespan(); add status column to contacts migration 0039; add updated_at to user_tenants migration 0037

2026-07-26 00:42:31 +02:00

0040_outbox.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

0041_custom_field_definitions.py

Phase 2: Tags UI, Custom Fields UI, Notifications Bell

2026-07-26 03:02:25 +02:00

0042_webhooks.py

Phase 4: Webhooks, Backup/Restore UI, Onboarding/Tutorial

2026-07-26 03:17:40 +02:00

0043_backups.py

Fix: Add updated_at and deleted_at columns to backups migration (TenantMixin)

2026-07-26 03:22:40 +02:00

0044_rls_repair_and_db_roles.py

Fix: Migration 0044 down_revision must be 0043_backups not 0043

2026-07-26 21:41:23 +02:00

0045_repair_contact_migration.py

Phase 2: Fix high-priority security and stability issues (H1-H7)

2026-07-26 20:49:15 +02:00

0046_plugin_allowlist.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0047_saved_views.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0048_contact_folder_permissions.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0049_entity_permissions.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0050_owner_id_all_tables.py

sprint1: entity_permissions table + owned_mixin + universal permission service + API + migrations 0049+0050

2026-07-29 01:28:13 +02:00

0051_migrate_folder_acls.py

sprint1: set_user_context + RLS policies on contacts + folder ACL migration 0051+0052

2026-07-29 01:30:25 +02:00

0052_rls_contacts.py

sprint1: set_user_context + RLS policies on contacts + folder ACL migration 0051+0052

2026-07-29 01:30:25 +02:00

0053_mail_owner_id.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0054_plugin_owner_id.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0055_entity_policies.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0056_permission_templates.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0057_permission_delegations.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0058_resolution_strategy.py

fix: migration 0058 checkconstraint + all sprint 20-23 deployed

2026-07-29 03:10:26 +02:00

0059_guest_users.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0060_rls_contacts_secure.py

P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00

0061_db_roles_secure.py

fix: migration 0061 — remove non-existent tables from RLS list

2026-07-29 12:40:15 +02:00

0062_guest_invitations_secure.py

P1.6: secure guest invitation tokens (secrets.token_urlsafe + SHA-256 hash + one-time use + session revocation)

2026-07-29 12:30:00 +02:00

0063_notification_entity_fields.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0064_rls_all_tenant_tables.py

fix: guest_sessions Redis index for revocation + RLS on all tenant tables (migration 0064)

2026-07-29 12:46:50 +02:00

0065_consumer_inbox.py

fix: consumer_inbox table for outbox idempotency + tenant_plugin_activation table

2026-07-29 12:49:15 +02:00

0066_tenant_plugin_activation.py

fix: consumer_inbox table for outbox idempotency + tenant_plugin_activation table

2026-07-29 12:49:15 +02:00

0067_disable_rls_system_tables.py

fix: WeasyPrint URL fetcher + attachment improvements + webhook error propagation + WebSocket conversation check + RLS disabled on system tables (bootstrap fix)

2026-07-29 13:19:21 +02:00

0068_entity_permissions_deleted_at.py

fix: visibility.py Defense-in-Depth tenant_id filter + entity_permissions deleted_at migration + cross-tenant tests

2026-07-29 16:12:04 +02:00

0069_rls_tenant_isolation_only.py

phase1: RLS simplified to tenant isolation only + canAccess fallback removed + useUserPermissions hook + security kernel docs

2026-07-29 16:36:51 +02:00

0070_db_roles_separation.py

phase2: 4 DB roles (crm_migration/api/worker/auth) + docker-compose updated + GRANT USAGE + RLS verified with unprivileged role

2026-07-29 16:49:09 +02:00

0071_entity_attachments.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0072_workspaces.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0073_workspace_deleted_at.py

fix: add deleted_at to workspace tables (TenantMixin includes SoftDeleteMixin)

2026-07-29 18:38:06 +02:00

0074_workspace_users_timestamps.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0075_outbox_envelope.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0076_disable_rls_startup_tables.py

phase12: disable RLS on startup tables (system_settings, currencies, taxes, sequences, saved_filters, saved_views, webhooks)

2026-07-29 23:33:56 +02:00

0077_disable_rls_tax_rates.py

phase12: disable RLS on tax_rates (startup table)

2026-07-29 23:42:25 +02:00

0078_disable_rls_automation.py

phase12: disable RLS on automation tables (written at startup)

2026-07-30 00:06:43 +02:00

0079_disable_rls_system_tables.py

phase12: disable RLS on all system/auth/config tables for crm_api startup

2026-07-30 00:15:58 +02:00

0080_disable_rls_audit_sessions.py

phase12: disable RLS on audit_log and sessions (written during login)

2026-07-30 00:20:20 +02:00

0081_disable_rls_all_system_tables.py

phase12: disable RLS on all system/auth/config/plugin tables (final migration)

2026-07-30 00:47:43 +02:00

0082_add_sensitivity_to_custom_field_definitions.py

gate2: fix all migrations for fresh DB installation

2026-07-31 19:16:11 +02:00

0083_add_missing_deleted_at_columns.py

migration: add missing deleted_at columns to 9 TenantMixin tables (0083)

2026-07-30 10:16:26 +02:00

0084_rls_fail_closed_reactivate.py

fix: RLS fail-closed migration + per-tenant startup code

2026-07-31 01:31:41 +02:00

0085_restore_tenant_rls.py

chore: Delete all outdated plan files (Sanierungsplan, FIX-PLAN, UMBAU_PLAN, etc.)

2026-08-04 15:11:28 +02:00

0086_fix_global_tables_force_rls.py

gate: migration 0086, crm_migration BYPASSRLS, audit_log fix, CI test for app.tenant_id

2026-07-31 09:02:40 +02:00

0087_add_timestamps_to_password_reset_tokens.py

gate2: fix duplicate column/index in migrations for fresh DB installation

2026-07-31 18:20:09 +02:00

0088_auth_rls_policies.py

gate4: migration 0088 — auth RLS policies for password_reset_tokens and audit_log

2026-07-31 12:04:27 +02:00

0089_sessions_updated_at.py

gate2: migration 0089 — add updated_at to sessions table (model uses TimestampMixin but table was missing column)

2026-07-31 22:15:29 +02:00

0090_fix_legacy_tenant_policies.py

fix: legacy app.tenant_id policies on _old tables + seed_admin.py rewrite

2026-07-31 22:23:38 +02:00

0091_add_tenant_fk_constraints.py

feat: Phase 2 — Migration 0091: FK-Constraints für 74 Tenant-Tabellen

2026-08-01 23:04:15 +02:00

0092_outbox_dlq.py

Phase 5: Outbox DLQ, Monitoring, Consumer-Registry

2026-08-02 23:25:54 +02:00

0093_fix_files_size_bytes_bigint.py

Phase 1: Migrationsaudit + Forward-Migrationen 0093-0096

2026-08-03 13:29:16 +02:00

0094_fix_gin_indexes_and_plugins_dedup.py

Fix: Migration 0094 prueft Spalten-Existenz vor GIN-Index-Erstellung

2026-08-03 16:14:43 +02:00

0095_fix_guest_users_unique.py

Phase 1: Migrationsaudit + Forward-Migrationen 0093-0096

2026-08-03 13:29:16 +02:00

0096_workspace_tenant_integrity.py

Phase 1: Migrationsaudit + Forward-Migrationen 0093-0096

2026-08-03 13:29:16 +02:00

0097_fix_api_tokens_updated_at.py

Fix: Migration 0097 — api_tokens.updated_at Spalte hinzufuegen

2026-08-03 14:10:04 +02:00

0098_files_dedup_index.py

Phase 6: DMS & Attachments — Streaming, Deduplikation, API-Bereinigung

2026-08-03 14:21:43 +02:00

0099_add_created_at_indexes.py

Performance Optimierungen: Rate Limit, created_at Index, Keyset-Pagination

2026-08-03 19:18:09 +02:00

0100_restrict_delete_grants.py

Phase 1: Critical security fixes - 59 permissions, grants, RLS, mass-assignment, ownership, leaks, MIME

2026-08-03 22:32:03 +02:00

0101_enable_rls_critical_tables.py

Fix: Simplify migration 0101 — only disable RLS on auth tables

2026-08-03 23:14:26 +02:00

0102_add_owner_id_to_phase2_tables.py

Fix: Migration 0102 checks table existence before adding owner_id

2026-08-04 00:18:06 +02:00

0103_add_remaining_tenant_fk_cascade.py

Phase 3: WebSocket CSRF, SameSite=Lax, Tenant FK CASCADE

2026-08-04 09:27:10 +02:00

0104_add_embedding_and_audit_timestamps.py

fix: Migration 0104 — check table existence before ALTER, remove companies table

2026-08-04 22:42:25 +02:00

0105_fix_tags_owner_id_and_contacts_trigger.py

fix: 4 API bugs found by integration tests

2026-08-04 22:57:37 +02:00

0106_grant_notification_types_permissions.py

fix: Grant DELETE on notification_types to app DB roles (migration 0106)

2026-08-04 23:02:28 +02:00

0107_widen_notification_type_key.py

fix: Widen notification_types.type_key from VARCHAR(20) to VARCHAR(100) (migration 0107)

2026-08-04 23:24:39 +02:00

0108_enable_rls_for_all_tenant_tables.py

fix(migration): exclude login tables from RLS in 0108 — RLS blocks crm_auth login

2026-08-06 00:56:19 +02:00

0109_disable_rls_on_login_related_tables.py

fix(security): disable RLS on roles/permissions — blocks login (0109)

2026-08-06 01:05:33 +02:00

0110_add_password_salt_to_mail_accounts.py

fix(migrations): make 0110 safe for fresh installs

2026-08-06 23:14:29 +02:00

0111_enable_rls_remaining_tenant_tables.py

fix(security): Fix critical permission system issues

2026-08-06 11:32:14 +02:00

0112_migrate_legacy_roles_to_rbac.py

fix(migrations): Remove deleted_at references from migration 0112/0113

2026-08-06 11:36:38 +02:00

0113_migrate_guests_to_regular_users.py

fix(migrations): Remove deleted_at references from migration 0112/0113

2026-08-06 11:36:38 +02:00

0114_migrate_contact_folder_permissions_to_entity_permissions.py

fix(permissions): fix 10 high-priority permission system issues

2026-08-06 12:05:09 +02:00

0115_drop_redundant_db_roles.py

fix(security): 16 mittlere Probleme behoben (P18-P33)

2026-08-06 13:23:58 +02:00

0116_merge_deletion_log_into_entity_history.py

fix(security): 16 mittlere Probleme behoben (P18-P33)

2026-08-06 13:23:58 +02:00

0117_plugin_config_text_to_jsonb.py

fix(cleanup): resolve 9 low-priority issues (P34-P42)

2026-08-06 13:43:47 +02:00

0118_optimize_hnsw_params.py

feat(B-VEC): pgvector HNSW Optimierung — ef_construction=128, m=16, ef_search=40

2026-08-13 16:28:55 +02:00

0119_ai_provider_compliance_fields.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0120_notification_to_comm_system_channel.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0121_agent_run_steps.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0122_agent_definition_phase_f_fields.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0123_approval_requests.py

feat(F): F-PERM permissions, F-APPR approval, F-AIUSE metadata, F-TRANS transparency, F-DATA-POL data policy, F-OVERSIGHT decision record, F-DRY dry-run, F-AUDIT audit log

2026-08-17 16:57:50 +02:00

0124_unified_task_system.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0125_durable_workflow_run.py

feat(G): G-RUN/G-CTX/G-WAIT/G-HTTP/G-MAIL/G-CAL/G-DMS/G-SEARCH/G-AGENT/G-CRM/G-EVT/G-WEB — Durable WorkflowRun, 10 step handlers, resume/wait/lock/retry, SSRF protection, frontend step editor

2026-08-18 00:29:58 +02:00

0126_wiki_plugin.py

feat(H): H-WIKI/H-VER/H-LINK — Wiki plugin (articles, categories, versioning, entity links), migration 0126, 9 routes, 15 tests passing

2026-08-18 11:55:43 +02:00

0127_drop_tasks_contact_id_fk.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0128_ai_decision_records.py

fix: migration 0128 uses IF NOT EXISTS to avoid DuplicateTableError

2026-08-19 16:30:27 +02:00

0129_rls_for_missing_tables.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0130_add_backup_enabled.py

feat: punkt 6 (backup) — ARQ cron job, backup config in settings, backup-now trigger, backup history, migration 0130

2026-08-20 13:47:35 +02:00

0131_knowledge_extractions.py

feat: Phase H knowledge plugin — models, services (extract/ask/review), routes, plugin with event hooks, migration 0131, builds on graph_rag + llm_client + unified_search

2026-08-20 22:29:22 +02:00

0132_self_improvement_tables.py

feat(J): Phase J Self-Improvement Plugin — controlled improvement loop

2026-08-21 01:34:48 +02:00

0133_compliance_incidents.py

feat(K): Phase K EU Compliance — AI Registry, DPIA, Incident Register, Retention Admin, Tests, Doku

2026-08-21 01:58:46 +02:00

0134_notification_types_columns.py

fix(critical): migration 0134 — notification_types VARCHAR(20) too small, blocks ALL plugin activations

2026-08-21 02:39:00 +02:00

0135_fix_schema_drifts.py

fix: migration 0135 use CREATE TABLE IF NOT EXISTS + fix syntax error

2026-08-21 10:05:47 +02:00

0136_fix_rls_tenant_id.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0137_drop_ai_chat_tables.py

feat(UI-Overhaul-Phase2): AI Assistent in Kommunikation integriert

2026-08-21 13:34:54 +02:00

0138_tags_tree_structure.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0139_reports_folder_id.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0140_comm_conversation_folders.py

fix(gate-b): fresh-db install path - conditional guards on plugin-table migrations + dual-path convergence migrations

2026-08-23 21:36:56 +02:00

0141_fix_role_permission_patterns.py

fix(arch-008,arch-009): canonical 2-segment permission schema enforced; fix dead role wildcard patterns

2026-08-23 18:35:50 +02:00

0142_add_backup_config_columns.py

fix(d1): SystemSettings-Schema-Drift behoben — backup_interval/backup_retention_days/backup_destination Model-Spalten + Migration 0142 nachgezogen (10b1f83 hatte Schema/Service/Frontend erweitert ohne Model/Migration); Settings-API Create/Read wieder funktionsfähig; Fresh-DB-Kette 0001→0142 verifiziert

2026-08-24 08:06:19 +02:00

0143_documents_generator.py

feat(L1-L3): Dokumente-Generator — Briefpapier+Block-System+Drag&Drop-Editor+Renderer

2026-08-29 09:49:16 +02:00