Agent Zero 7c8f2a2222 feat(permissions): ABAC integration, principals caching, cache version validation ...

- Integrate ABAC policies into apply_visibility_filter() (allow/deny with priority)
- Add field whitelist (ABAC_ALLOWED_FIELDS) for build_sql_condition() security
- Add request-level ContextVar for user principals (group_ids, role_id)
- Set principals in deps.py (session + bearer auth)
- Use ContextVar in visibility.py and permission_resolver.py (N+1 fix)
- Add version validation to get_cached_visible_ids() (cache strategy unification)
- Deactivate delegation route (parked — not integrated into resolve_permissions)
- Add 7 ABAC integration tests

All 70 tests pass (7 ABAC + 63 existing). No regressions.

2026-08-06 22:05:15 +02:00

..

__init__.py

T01: core infrastructure + auth + multi-tenant + RLS

2026-06-29 08:02:14 +02:00

conftest.py

Phase 5: Outbox DLQ, Monitoring, Consumer-Registry

2026-08-02 23:25:54 +02:00

test_abac_integration.py

feat(permissions): ABAC integration, principals caching, cache version validation

2026-08-06 22:05:15 +02:00

test_abac.py

P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00

test_agent_memory.py

test: Add 126 tests for Phase 5 plugins + fix 2 source bugs

2026-08-04 16:02:36 +02:00

test_agent_subtasks.py

test: Add 126 tests for Phase 5 plugins + fix 2 source bugs

2026-08-04 16:02:36 +02:00

test_ai_copilot.py

fix: close remaining security gaps, test fixes, frontend integration, event bus

2026-07-27 12:45:45 +02:00

test_ai_deploy.py

Phase 5.13: CI/CD deploy script with build/test/deploy/rollback

2026-07-23 22:39:14 +02:00

test_ai_health_check.py

Phase 5.12: API health check script for KI

2026-07-23 22:37:25 +02:00

test_ai_proactive.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_api_audit.py

feat(5.1): add API audit document covering all 158 UI functions across 24 categories

2026-07-23 20:41:45 +02:00

test_api_documentation.py

Phase 5.14: API documentation - OpenAPI tags, response models, examples, docs

2026-07-23 22:44:54 +02:00

test_api_tokens.py

Phase 5: AI/MCP Bearer-Auth + Delegationstoken + Audit

2026-08-03 14:06:55 +02:00

test_auth.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_backend_coverage_gaps.py

test(7.8): add backend test coverage gaps (currencies, sequences, system settings, contact folders, notifications, entity history, multi-tenant isolation)

2026-07-24 01:32:08 +02:00

test_backup_restore.py

Phase 5.15: Automated backup system with pg_dump, file backup, retention, restore, notifications

2026-07-23 22:48:19 +02:00

test_backup_service.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

test_calendar.py

Phase 1C: Frontend unified contact UI

2026-07-23 17:17:32 +02:00

test_commands.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_companies.py

Phase 1B: Unify plugins from company to contact

2026-07-23 17:18:38 +02:00

test_contacts.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

test_cross_tenant_security_v2.py

phase0: fix cross-plugin import, remove app.tenant_id, create cross-tenant v2 tests

2026-07-31 01:57:51 +02:00

test_cross_tenant_security.py

phase0: fix cross-plugin import, remove app.tenant_id, create cross-tenant v2 tests

2026-07-31 01:57:51 +02:00

test_cross_tenant_standalone.py

phase0: fix cross-plugin import, remove app.tenant_id, create cross-tenant v2 tests

2026-07-31 01:57:51 +02:00

test_custom_fields.py

feat(5.20): Custom Fields — plugin-defined fields in Contact UI

2026-07-23 23:35:35 +02:00

test_dashboard.py

Task 5.25: Dashboard-System — GET /api/v1/dashboard/widgets, DashboardWidgetLoader, DashboardGrid with drag-and-drop, 3 example widgets (RecentContacts, TasksSummary, CalendarUpcoming), updated Dashboard.tsx, i18n, 6 tests

2026-07-24 00:09:26 +02:00

test_dedup.py

Task 5.23: Deduplication / Merge — ContactMergeHistory model, dedup service, API routes (duplicates/merge/merge-history), DedupDialog frontend, i18n, 5 tests

2026-07-23 23:58:45 +02:00

test_dms_coverage.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_dms_errors.py

T04: DMS plugin backend — folders + files + preview + OnlyOffice + shares + search + bulk — 106 tests, 97.90% coverage

2026-06-29 20:48:58 +02:00

test_dms.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_entity_links.py

Phase 1B: Unify plugins from company to contact

2026-07-23 17:18:38 +02:00

test_entity_permissions.py

P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00

test_external_agent_api.py

test: Add 126 tests for Phase 5 plugins + fix 2 source bugs

2026-08-04 16:02:36 +02:00

test_graph_rag.py

test: Add 126 tests for Phase 5 plugins + fix 2 source bugs

2026-08-04 16:02:36 +02:00

test_health.py

T10: Monitoring, Performance, Documentation & Environment Config — 38 tests, ruff clean, docs OK

2026-07-01 23:15:35 +02:00

test_hooks.py

feat: Plugin-System Umbau — 6 Phasen komplett abgeschlossen

2026-07-26 23:15:34 +02:00

test_import_export.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

test_mail.py

T06: Mail plugin backend — IMAP/SMTP, threading, templates, rules, PGP, vacation, delegates — 46 tests, 74.56% coverage

2026-07-01 15:41:27 +02:00

test_manifest_validation.py

feat: Plugin-System Umbau — 6 Phasen komplett abgeschlossen

2026-07-26 23:15:34 +02:00

test_marketplace.py

test: Add 126 tests for Phase 5 plugins + fix 2 source bugs

2026-08-04 16:02:36 +02:00

test_mcp_client.py

feat: MCP Client plugin (Task 5.17) - integrate external MCP servers for AI agents

2026-07-23 23:02:07 +02:00

test_mcp_server.py

feat: MCP Server plugin (Task 5.16) - expose LeoCRM tools to external AI clients

2026-07-23 23:01:59 +02:00

test_monitoring.py

T10: Monitoring, Performance, Documentation & Environment Config — 38 tests, ruff clean, docs OK

2026-07-01 23:15:35 +02:00

test_no_legacy_tenant_var.py

gate: migration 0086, crm_migration BYPASSRLS, audit_log fix, CI test for app.tenant_id

2026-07-31 09:02:40 +02:00

test_notifications.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

test_outbox_phase5.py

Phase 5 (v2): Processing-Recovery, Retention-Cleanup, Replay-Delivery-Reset

2026-08-02 23:47:29 +02:00

test_outbox.py

Phase 7: Plugin-Gate, Event-Envelope, Pro-Handler Outbox-Verarbeitung

2026-08-03 15:20:06 +02:00

test_p1_6_dms_streaming.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_p1_7_permission_fixes.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_performance.py

T10: Monitoring, Performance, Documentation & Environment Config — 38 tests, ruff clean, docs OK

2026-07-01 23:15:35 +02:00

test_permission_performance.py

P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00

test_permission_system_live.py

fix(tests): adapt permission tests to new RBAC architecture

2026-08-06 14:51:49 +02:00

test_permissions.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

test_plugin_lifecycle.py

test: Phase 3 — Plugin lifecycle tests (14/14 passed)

2026-08-01 23:29:20 +02:00

test_plugins.py

fix(tests): remove deleted test_sample plugin, inline SamplePlugin definition

2026-08-06 14:30:15 +02:00

test_rbac_comprehensive.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_recurrence_unit.py

T05: Calendar plugin backend — appointments + tasks + kanban + ICS + resources + recurrence — 69 tests, 86.87% coverage

2026-06-30 01:12:33 +02:00

test_report_generator.py

Phase 5 Batch 5 Task 5.18: Report Generator PDF-Support & Druck-Funktionen

2026-07-23 23:22:33 +02:00

test_resilience.py

Phase 4: Circuit Breaker, DB Retry, Redis Graceful Degradation

2026-08-04 14:34:06 +02:00

test_rls_coverage.py

phase1: separate DB roles, RLS restoration, login on crm_auth

2026-07-31 02:05:16 +02:00

test_saved_filters.py

feat(5.22): Saved Searches / Smart Lists — reusable filters for list views

2026-07-23 23:44:50 +02:00

test_semver.py

feat: Plugin-System Umbau — 6 Phasen komplett abgeschlossen

2026-07-26 23:15:34 +02:00

test_tags.py

Phase 1B: Unify plugins from company to contact

2026-07-23 17:18:38 +02:00

test_tasks.py

feat(5.21): Tasks Plugin — activities with status, priority, due dates, ARQ reminders

2026-07-23 23:41:34 +02:00

test_tenant.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_unified_search.py

Security fixes: P0-P2 complete (22 fixes)

2026-07-25 21:03:46 +02:00

test_user_preferences.py

feat(5.2): add User Preferences API with full-stack implementation

2026-07-23 20:39:42 +02:00

test_user_service.py

fix: comprehensive system audit fixes (55+ issues)

2026-07-31 00:58:05 +02:00

test_versioning.py

feat: Plugin-System Umbau — 6 Phasen komplett abgeschlossen

2026-07-26 23:15:34 +02:00

test_workflows.py

chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

2026-06-29 17:43:56 +02:00

test_workspaces.py

Reparaturplan Fixes: Widget workspace_id check, total bug, context is_visible, permissions, fallbacks

2026-08-03 12:44:02 +02:00