@drdoc-com/pi-drdoc 1.0.2 → 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +16 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -60,11 +60,18 @@ Example:
|
|
|
60
60
|
/drdoc_login https://drdoc.com demo password "" 1
|
|
61
61
|
```
|
|
62
62
|
|
|
63
|
-
And signout/
|
|
63
|
+
And signout/logout:
|
|
64
64
|
```bash
|
|
65
65
|
/drdoc_logout
|
|
66
66
|
```
|
|
67
67
|
|
|
68
|
+
### Pi Agent Tool Calling
|
|
69
|
+
|
|
70
|
+
Example:
|
|
71
|
+
```
|
|
72
|
+
Suche im Dr.DOC Archiv "rec" alle Rechnungen von Firma Amazon aus diesem Jahr.
|
|
73
|
+
```
|
|
74
|
+
|
|
68
75
|
## Configuration
|
|
69
76
|
|
|
70
77
|
The plugin utilizes configuration options supplied by the Dr.DOC client or environment variables.
|
|
@@ -81,6 +88,14 @@ The plugin utilizes configuration options supplied by the Dr.DOC client or envir
|
|
|
81
88
|
|
|
82
89
|
---
|
|
83
90
|
|
|
91
|
+
### Security Notes
|
|
92
|
+
* Pi Agent is designed as a **personal** AI agent. Users must operate their own private Pi Agent instance rather than using an instance hosted on the Dr.DOC Web Server.
|
|
93
|
+
* Credential Persistence (/drdoc_login): When using the Dr.DOC AI Chat with Pi configured as the AI endpoint (via `@drdoc-com/pi-openai-api-wrapper`), the `/drdoc_login` command *MUST NOT* be executed. Authentication credentials within the Pi Agent instance are persistent and could potentially be exposed to other users sharing the same instance.
|
|
94
|
+
* Dedicated Service Account: Use a dedicated Dr.DOC user account with limited permissions (e.g. *Datensatzspezifische Berechtigungen*) based on the principle of least privilege (*"need-to-know"*) specifically for AI tasks and the `/drdoc_login` command.
|
|
95
|
+
* Containerized Deployment: Whenever possible, run Pi Agent inside an isolated container environment (e.g., Docker, Podman) to ensure process isolation and security boundaries.
|
|
96
|
+
|
|
97
|
+
---
|
|
98
|
+
|
|
84
99
|
## License
|
|
85
100
|
|
|
86
101
|
This project is licensed under the Apache License 2.0.
|