9 commits

Author	SHA1	Message	Date
Arthur Bassi	05dd262e80	fix(work-orders): derive Past Due from DueDate instead of ScheduledDate ... Past Due must track the deadline (Due Date), not Schedule On. Keep dueDate and scheduledDate PATCH mutations independent so rescheduling alone does not clear Past Due.	2026-08-13 13:28:25 -03:00
Arthur Bassi	de0f6da8fb	fix(work-orders): scope legacy GET GetComments by account [SH-221] ... Pass ClaimsPrincipal into GetCommentsAsync and filter via GetAllForAccountAsync so account-scoped callers cannot enumerate cross-tenant comments. ADR + cross-account tests updated.	2026-08-11 15:18:29 -03:00
Arthur Bassi	3c090e2757	fix(work-orders): scope comments and completion-doc by account [SH-221] ... Close the remaining SH-221 bypass: board/legacy comments and completion-doc now enforce server-derived account scope, authorize before blob storage, and cover cross-account regressions.	2026-08-11 14:52:02 -03:00
Arthur Bassi	1edcf479ae	fix(work-orders): apply account scope across create and reads [SH-221] ... Stamp WorkOrder.AccountId on all create paths and filter board/list/search/detail by server-derived account claims so scoped callers cannot cross accounts. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-11 10:45:37 -03:00
Arthur Bassi	ea2dedf579	!fix(work-orders): fail-closed media account scope with org_scope claim [SH-221]	2026-08-06 10:26:04 -03:00
Arthur Bassi	fdc315d8fe	!feat(work-orders): enforce media account scope and AddMedia freshness [SH-221]	2026-08-06 09:47:34 -03:00
Arthur Bassi	e572786b1c	~docs(work-orders): demote ADR 0001 to Proposed pending CODEOWNERS [SH-116]	2026-08-05 09:57:14 -03:00
Arthur Bassi	8ff4ab1742	fix(work-orders): document single-org media scope (ADR 0001) ... Clarify SH-116 tenant scope as board-aligned ApplyBaseScope + claims, and add out-of-org-scope GET/mutation tests for deleted/template/missing WOs.	2026-08-04 16:07:26 -03:00
Arthur Bassi	f3d2a5cfe7	fix(work-orders): address PR13 phase-1 review feedback	2026-07-17 14:51:56 -03:00