Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
41 lines
936 B
Python
41 lines
936 B
Python
"""
|
|
GT 2.0 Tenant Backend Models
|
|
|
|
Database models for tenant-specific data with perfect isolation.
|
|
Each tenant has their own SQLite database with these models.
|
|
"""
|
|
|
|
from .agent import Agent # Complete migration - only Agent class
|
|
from .conversation import Conversation
|
|
from .message import Message
|
|
from .document import Document, RAGDataset, DatasetDocument, DocumentChunk
|
|
from .user_session import UserSession
|
|
from .workflow import (
|
|
Workflow,
|
|
WorkflowExecution,
|
|
WorkflowTrigger,
|
|
WorkflowSession,
|
|
WorkflowMessage,
|
|
WorkflowStatus,
|
|
TriggerType,
|
|
InteractionMode
|
|
)
|
|
|
|
__all__ = [
|
|
"Agent",
|
|
"Conversation",
|
|
"Message",
|
|
"Document",
|
|
"RAGDataset",
|
|
"DatasetDocument",
|
|
"DocumentChunk",
|
|
"UserSession",
|
|
"Workflow",
|
|
"WorkflowExecution",
|
|
"WorkflowTrigger",
|
|
"WorkflowSession",
|
|
"WorkflowMessage",
|
|
"WorkflowStatus",
|
|
"TriggerType",
|
|
"InteractionMode",
|
|
] |