3 commits

Author	SHA1	Message	Date
Adam Moussa	8d73e66a17	fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings ... - API-M2: Add comment for fail-loud auth config guard (already implemented) - API-M5: Add FluentValidation validators for VendorProposal, GeneratedPdf, and SimilarReference DTOs; move request records to Application DTOs - API-M7: Add AsNoTracking() to all read-only queries in ProposalService, LineItemService, AdminController, UsersController, FilesController - API-M9: Log stderr from dev PDF generation instead of returning to client - API-M10: Return generic "Authentication service unavailable" in auth callbacks instead of leaking Cognito/DevMode configuration state - API-M12: Enrich audit logging with before/after values for status changes, proposal edits, and line item operations using structured JSON - API-M13: Log previous role alongside new role on user role changes in both UsersController and Cognito-synced role updates in AuthController	2026-05-27 18:18:44 -04:00
Adam Moussa	f44caba906	Fix JSON enum serialization and audit log jsonb format ... Add JsonStringEnumConverter so string enum values (ServiceCategory, Priority, PricingMode, LineItemSource) deserialize correctly from frontend requests. Wrap AuditService detail strings in a JSON object to satisfy the Postgres jsonb column type. Relax global.json SDK version to match installed 8.0.1xx feature band.	2026-05-20 17:23:55 -04:00
Adam Moussa	d2e12d3940	Implement Backend API Core (Phase 1) ... Complete API layer with Clean Architecture: - Application DTOs (proposals, line items, customers, users, files, audit, dashboard) - Service interfaces (IProposalService, ILineItemService, ICustomerService, IAuditService, IS3Service, IJobPublisher) - FluentValidation validators for all create requests - Infrastructure service implementations (ProposalService, LineItemService, CustomerService, AuditService, S3Service, SqsJobPublisher, ProposalNumberGenerator) - Secrets Manager connection string resolver for RDS - API controllers: Proposals (CRUD + approve/send/revise), LineItems (CRUD + bulk), Customers, Users, Files (presigned upload/download), Admin (dashboard) - Middleware: GlobalExceptionHandler (ProblemDetails), ValidationFilter (FluentValidation pipeline) - CurrentUserService (Cognito JWT claims -> User entity, auto-provisioning) - Full DI configuration in Program.cs with Lambda hosting - Role-based authorization (dispatchers, admins, sysadmins) - CORS configured for proposals.seahaven.com + localhost	2026-05-16 18:49:48 -04:00