Compare commits

..

20 commits

Author SHA1 Message Date
Alexandre Brandizzi
bcb1c16d0c Merge remote-tracking branch 'origin/codex/backend-layering-refactor' into codex/backend-governance-quality-system 2026-07-24 16:44:52 -03:00
Alexandre Brandizzi
656d1ae233 test: use collection assertion idiom 2026-07-24 16:44:45 -03:00
Alexandre Brandizzi
332b7e713e Merge remote-tracking branch 'origin/codex/backend-layering-refactor' into codex/backend-governance-quality-system 2026-07-24 16:42:56 -03:00
Alexandre Brandizzi
5c6553f230 style: format board update service 2026-07-24 16:42:48 -03:00
Alexandre Brandizzi
7d471c9895 Merge remote-tracking branch 'origin/codex/backend-layering-refactor' into codex/backend-governance-quality-system 2026-07-24 16:40:54 -03:00
Alexandre Brandizzi
df291ea9a6 fix(architecture): abstract job run state access 2026-07-24 16:40:46 -03:00
Alexandre Brandizzi
f9f2bd9d3f Merge remote-tracking branch 'origin/codex/backend-layering-refactor' into codex/backend-governance-quality-system 2026-07-24 16:37:28 -03:00
Alexandre Brandizzi
638eccd46c Merge dev and enforce backend layering 2026-07-24 16:36:48 -03:00
Alexandre Brandizzi
a9a98ddc78 fix(ci): enforce governance on every pull request 2026-07-24 14:55:21 -03:00
Alexandre Brandizzi
5fcdc4096c fix(governance): make backend gate complete 2026-07-24 14:52:37 -03:00
Alexandre Brandizzi
b0df642dc1 docs(governance): add canonical governance docs, unified quality-gate script, and CI parity
- ARCHITECTURE_AND_CODE_QUALITY.md: canonical layering, EF allowlist,
  transaction/commit convention, cancellation, migrations, error disclosure,
  Big-O/perf, ADR exceptions (supersedes BACKEND_ARCHITECTURE.md)
- QUALITY_GATES.md: gate inventory + pass/fail/skip semantics; local==CI
- REVIEW_AND_PR_FRAMEWORK.md: exact-head review, board-backed regression
  inventory, security/perf evidence, ADR exceptions, no godfile theater
- AGENTS.md: repo-specific delta + precedence pointers
- scripts/governance-check.sh: unified G1 restore + G2 ArchitectureTests +
  G3 changed-file format (portable bash)
- .github/workflows/architecture-quality.yml: call the same local script
- ArchitectureTests.cs: add business-service interface-dependency invariant
2026-07-24 14:40:49 -03:00
Alexandre Brandizzi
32de36f78c fix(backend): sanitize exception disclosure in changed API endpoints
Replace raw exception-message disclosure (ex.Message) returned to API
callers with a stable sanitized public message plus correlated structured
internal logging, across the endpoints changed in this PR.

- Add SanitizedErrors helper: logs the original exception at Error with a
  generated correlation id and returns a stable public message referencing
  it so support can trace without exposing internals.
- Inject ILogger<T> into the 14 changed controllers and route every
  ex.Message/dbex.Message disclosure through the helper, preserving status
  codes, response shapes, and business data (e.g. OpenWorkOrders).
- Leave FluentValidation (vex.Errors) and existing fixed-message catches
  untouched; out-of-scope controllers (Account/Contact/Employee/Asset/
  PMSchedule) are unchanged.
- Add focused tests proving internal exception text is not returned and
  that Error logging carrying the original exception is invoked.
2026-07-24 14:14:39 -03:00
Alexandre Brandizzi
6f6c7e04cd fix(architecture): address backend review follow-ups 2026-07-24 13:16:34 -03:00
Alexandre Brandizzi
ce7d612ac9 style(backend): format changed architecture files 2026-07-24 12:13:51 -03:00
Alexandre Brandizzi
f6e71edd00 refactor(backend): enforce architecture and optimize dispatch 2026-07-24 12:07:48 -03:00
Alexandre Brandizzi
848e973d62 refactor(workorders): enforce service and data boundaries 2026-07-24 11:30:22 -03:00
Alexandre Brandizzi
9cd1c7e7fc refactor(vendors): enforce service and data boundaries 2026-07-24 11:26:37 -03:00
Alexandre Brandizzi
c440b2e3ee refactor(identity): enforce service and data boundaries 2026-07-24 11:24:09 -03:00
Alexandre Brandizzi
445cd68468 refactor(api): complete feature service boundaries 2026-07-24 11:24:05 -03:00
Alexandre Brandizzi
aa59399b78 refactor(api): enforce service and data-service boundaries 2026-07-24 10:27:35 -03:00

Diff content is not available