3 Commits

Author	SHA1	Message	Date
rikrdo	546971280f	feat(F-006): users profile, addresses and RBAC ... - users module: profile + address CRUD behind use cases (users_profiles, users_addresses) - roles customer/admin on identity_users; role resolved from DB per request - shared auth contract (Authenticate, requireRole, requireOwnerOrAdmin) injected from composition root; users never imports identity - authorization runs before existence checks; address SQL scoped by user_id - @fastify/cookie registered once at app root (cross-module) - migrations 003_identity_roles + 004_users (reversible) - no new npm dependencies; tests: unit 52, integration 22 Gates: reviewer/security/qa APPROVED; verify.sh green	2026-08-15 09:28:15 +02:00
rikrdo	41f144d7bd	feat(F-003): HTTP foundation with request context and error envelope ... - request_id generated or sanitized-propagated on every request (x-request-id) - structured JSON logging (pino), one correlated line per request, injectable logger - error envelope v2 { error: { statusCode, code, message, details? }, requestId } - 5xx messages always generic; stack traces stay in server logs only - explicit parseJson (zod) input validation hook at the API layer - README HTTP contract section; deps justified in spec/tech.md - all gates approved; verify.sh green	2026-08-14 22:13:28 +02:00
rikrdo	1d4eebca54	feat(F-001): scaffold modular monolith skeleton with boundary checker ... - TypeScript + Fastify skeleton under project/ (src/modules, shared, infrastructure, app) - scripts/check-module-boundaries.mjs enforcing module public-API rules (tested with fixtures) - GET /health endpoint, error envelope without stack leakage - specs/F-001-scaffold (SPEC/DESIGN/TASKS/TESTS), spec/tech.md dependency justification - 30-ticket MercadoDeVida roadmap in backlog/features.json, spec/roadmap.md - All gates approved: reviewer, security, qa; verify.sh green	2026-08-14 21:46:54 +02:00