proposal-system/lambdas
Adam Moussa 80e36bfb9a Fix Phase 3 audit findings: polish, operational maturity, and remaining FIX items
Addresses 29 FIX-severity findings and accessibility/code-quality NITs
from the 2026-05-20 audit. Key changes:

- Add confirmation dialogs for Mark as Sent and Create Revision (FIX-17)
- Restrict S3 CORS from wildcard to specific origins (FIX-38)
- Add API Gateway throttling at 100 rps / 50 burst (FIX-39)
- Separate vendor upload from SQS extraction trigger (FIX-04/05)
- Copy TotalBidAmount on proposal revision (FIX-11)
- Add CI paths-ignore and concurrency group (FIX-47)
- Add post-deploy health check (FIX-46)
- Fix N+1 query, Guid.Empty FK, pagination bounds, role sync (FIX-01/02/07/09)
- Fix dashboard OOM, status transitions, audit error handling (FIX-03/06/12)
- Fix frontend date filters, error display, currency formatting (FIX-14/16/18-23)
- Remove AOSS dashboard public access, skip empty AI suggestions (FIX-41/45)
- Add aria-labels, document.title management, deduplicate constants
- Restrict CORS localhost to development, log invalid API key attempts

[skip deploy]
2026-05-20 19:35:13 -04:00
..
library-ingest Fix compliance violations: Lambda defaults, CI node-version, dead code 2026-05-18 18:28:31 -04:00
oss-index-creator Fix compliance violations: Lambda defaults, CI node-version, dead code 2026-05-18 18:28:31 -04:00
pdf-extract Fix compliance violations: Lambda defaults, CI node-version, dead code 2026-05-18 18:28:31 -04:00
pdf-generate Fix compliance violations: Lambda defaults, CI node-version, dead code 2026-05-18 18:28:31 -04:00
suggestions Fix Phase 3 audit findings: polish, operational maturity, and remaining FIX items 2026-05-20 19:35:13 -04:00