GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/tenant-backend/app/models/__init__.py

@@ -0,0 +1,41 @@
+"""
+GT 2.0 Tenant Backend Models
+
+Database models for tenant-specific data with perfect isolation.
+Each tenant has their own SQLite database with these models.
+"""
+
+from .agent import Agent  # Complete migration - only Agent class
+from .conversation import Conversation
+from .message import Message
+from .document import Document, RAGDataset, DatasetDocument, DocumentChunk
+from .user_session import UserSession
+from .workflow import (
+    Workflow, 
+    WorkflowExecution, 
+    WorkflowTrigger, 
+    WorkflowSession, 
+    WorkflowMessage,
+    WorkflowStatus,
+    TriggerType,
+    InteractionMode
+)
+
+__all__ = [
+    "Agent",
+    "Conversation",
+    "Message", 
+    "Document",
+    "RAGDataset",
+    "DatasetDocument",
+    "DocumentChunk",
+    "UserSession",
+    "Workflow",
+    "WorkflowExecution", 
+    "WorkflowTrigger", 
+    "WorkflowSession", 
+    "WorkflowMessage",
+    "WorkflowStatus",
+    "TriggerType",
+    "InteractionMode",
+]