Keysat
aec2b7775b
Fixes from the 2026-06-12 full-eval (P0 + two P1s); code-only, no schema change. Without these the "private CRM" premise was breachable on the LAN: - P0: the /assets/ route joined the request path onto FRONTEND_DIR without normalizing '..' (get_path/urlparse pass it through), so an unauthenticated GET /assets/../../data/crm.db read any file the process could — the LP DB, the JWT signing secret (-> admin-token forgery), the Gmail key. Add a realpath containment check that 404s anything resolving outside FRONTEND_ROOT. - P1: the LP-outreach drafter built its redaction Boundary with no ner_fn, so unknown people/firms in raw email bodies reached Claude in the clear. Pass the local-Qwen NER backstop (ner_fn=_ner_local), matching architect_grounding; fails closed via the existing scrub_unavailable path if the local model is down. - P1: get-by-id handlers leaked soft-deleted records by direct ID. Add deleted_at IS NULL to every get-by-id path — contacts, organizations, opportunities, lp_profiles — and to the nested related-data sub-selects in the contact/opportunity detail payloads, matching the list-handler convention. Bumps the package to v0.1.0:74 (utils.ts + versions/v0.1.0.74.ts + graph). Full report in EVALUATION.md; remaining P2/P3 triaged in AGENTS.md Current state.
49 lines
3.7 KiB
TypeScript
49 lines
3.7 KiB
TypeScript
// Informational constants shared across the startos/ modules.
|
||
// The authoritative id, title and version for the package come
|
||
// from manifest/index.ts (id, title) and versions/ (version).
|
||
export const PACKAGE_ID = 'ten-database'
|
||
export const PACKAGE_TITLE = 'Ten31 Database'
|
||
// ExVer form of the current 0.4 wrapper release (upstream 0.1.0, wrapper rev 44).
|
||
// * 0.3.5 wrapper: 0.1.0.38 (legacy, aarch64)
|
||
// * First 0.4: 0.1.0:39 (shipped seed snapshot for migration)
|
||
// * Cleanup: 0.1.0:40 (seed removed + multi-threaded server + abuser auto-ban)
|
||
// * 0.1.0:41 (frontend persists auth across refreshes)
|
||
// * 0.1.0:42 (Gmail integration) / 0.1.0:43 (Gmail POST-body hotfix)
|
||
// * 0.1.0:44 (Phase-0 ingest + MCP server in image; build-index action)
|
||
// * 0.1.0:45 (Phase-1 thesis system; dual approval; merge review; in-app index)
|
||
// * 0.1.0:46 (packaging fix: ship full backend so migrations run + endpoints work)
|
||
// * 0.1.0:47 (soft-delete instead of hard-delete; source-count diagnostics)
|
||
// * 0.1.0:48 (entity model: investors vs people; fixes double-count)
|
||
// * 0.1.0:49 (Architect: Claude thesis generation + Thesis Workshop screen)
|
||
// * 0.1.0:50 (Set Anthropic API Key UI action — no terminal needed)
|
||
// * 0.1.0:51 (entity-resolution fix: people double-count + duplicate queue)
|
||
// * 0.1.0:52 (grid/contacts unification: contact_id link + grid as front door)
|
||
// * 0.1.0:53 (seed v5 thesis into the Architect Workshop)
|
||
// * 0.1.0:54 (unification polish: LinkedIn in grid inline contact editor)
|
||
// * 0.1.0:55 (Architect grounding boundary: redaction/re-hydration privacy gate)
|
||
// * 0.1.0:56 (Thesis Workshop redesign: edit/choose/delete + approve-as-current)
|
||
// * 0.1.0:57 (redaction fix: magnitude regex no longer eats the word after an amount)
|
||
// * 0.1.0:58 (seed 5 Architect positioning framings into the Workshop as candidate options)
|
||
// * 0.1.0:59 (Email Capture admin panel + matched email into the grounding corpus)
|
||
// * 0.1.0:60 (Email Capture: single-mailbox enroll field for testing)
|
||
// * 0.1.0:61 (Email Capture: live backfill progress + auto-refresh)
|
||
// * 0.1.0:62 (fix backfill crash on no-Reply-To emails; Sync now retries errored mailboxes)
|
||
// * 0.1.0:63 (System Status: storage usage — DB, attachments, backups, disk free)
|
||
// * 0.1.0:64 (email-activity agent: propose->review->approve grid notes; sync ~15 min)
|
||
// * 0.1.0:65 (Email Capture: per-mailbox captured/matched counts)
|
||
// * 0.1.0:66 (LP Objections page: UI trigger for the Architect grounding pass)
|
||
// * 0.1.0:67 (remove LP Objections page — generic/unverifiable; pivot to proactive outreach)
|
||
// * 0.1.0:68 (Outreach Draft Assistant — tailored LP drafts via thesis + redaction boundary)
|
||
// * 0.1.0:69 (follow-up radar — deterministic "needs attention" list + one-click draft)
|
||
// * 0.1.0:70 (outreach voice upgrade — per-user voice from own emails + transparency; active-thread context)
|
||
// * 0.1.0:71 (voice by-purpose larger sample + Tier-B: create Gmail draft w/ in-thread reply)
|
||
// * 0.1.0:72 (stage v2.0 reserve-asset thesis spine as Workshop candidates)
|
||
// * 0.1.0:73 (replace old settlement spine with v2.0 reserve-asset spine across Architect + outreach prompts, seed constants, and docs; promote v2.0 to the working approved spine + soft-retire old settlement nodes, reversibly, node-level only)
|
||
// * Current: 0.1.0:74 (security/privacy hardening — full-eval P0+2×P1: close /assets/ path traversal, add NER backstop to the outreach redaction boundary, filter deleted_at on get-by-id)
|
||
export const PACKAGE_VERSION = '0.1.0:74'
|
||
|
||
export const DATA_MOUNT_PATH = '/data'
|
||
export const WEB_PORT = 8080
|
||
export const IMAGE_ID = 'main'
|
||
export const VOLUME_ID = 'main'
|