9 commits

Author	SHA1	Message	Date
Arthur Bassi	b4f2c8b763	feat(work-orders): authorize WO media content reads	2026-09-08 11:19:41 -03:00
Arthur Bassi	f47264ec4d	feat(work-orders): allow selective mutations on completed work orders ... Permit flagColor, comments, and Extra media after completion while keeping Canceled fully locked.	2026-08-24 09:31:30 -03:00
Arthur Bassi	6b18327d6b	fix(work-orders): authorize GET media and forward cancellation ... Enforce claims-derived read scope on media list and thread CancellationToken through detail data reads so HTTP cancel stops EF work.	2026-08-04 14:14:37 -03:00
Arthur Bassi	899da0eb4f	fix(work-orders): enforce media auth and base scope on mutations ... Require an authenticated ClaimsPrincipal at service entry and filter tracked work orders with board base scope so deleted/template rows surface as NotFound without disclosure.	2026-08-04 11:08:18 -03:00
Arthur Bassi	2ec85d1193	fix(work-orders): harden media upload contract for review blockers ... Enforce MIME/extension/magic-byte validation, auth and workOrderVersion concurrency, audit on category changes, and validate-before-store with blob compensate.	2026-08-04 11:08:18 -03:00
Alexandre Brandizzi	d073a503d1	feat(work-orders): board completedDate + media categorize contract ... Expose completedDate on PATCH /workorders/{id}/board so CompDoc can leave legacy EditWorkorder. Allow optional media category on upload, PATCH category afterward, and enforce JPG/PNG/MP4/MOV allowlist (SH-116).	2026-08-04 11:08:18 -03:00
Arthur Bassi	af84001bf1	feat(work-orders): add Phase 6 slide-over detail comments audit and media API	2026-07-13 13:13:00 -03:00
Arthur Bassi	d040832b87	feat(work-orders): isolate phase 2 inline edit with optimistic concurrency ... Deliver PATCH board field updates and drop phases 3-7 code from the branch while keeping phase 0/1 dependencies required to build and test.	2026-07-07 11:26:13 -03:00
Arthur Bassi	4f697f257a	wip: work orders phases 1-7 (isolated from phase 0 foundation)	2026-06-30 10:09:48 -03:00