The repository has default CodeQL enabled in GitHub settings, which
conflicts with an advanced configuration workflow and causes SARIF
upload failures.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The constant module depended on dc3-common-exception only for the
UTILITY_CLASS message string. Move that constant into a new
BaseConstant within the module itself and drop the external dependency.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Enable liveness/readiness probes and expose the health endpoint
alongside Prometheus in application-web.yml so all web services
inherit health check support.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Replace shared SERVER_PORT/GRPC_SERVER_PORT with per-service
DC3_GATEWAY_PORT, DC3_AUTH_PORT, DC3_AUTH_GRPC_PORT, etc. in
application.yml and Dockerfiles. Prevents port conflicts when
loading the same env file for multiple local services.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The HMAC signing feature was dormant because no deployment config
set the shared secret. Add AUTH_HMAC_SECRET to .env.example, dev
env files, both compose stacks (all 12 services), and document it
in ENVIRONMENT.md.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Spring Boot 4.x auto-configures tools.jackson.databind.ObjectMapper,
not the Jackson 2.x com.fasterxml variant. Inject the correct 3.x
bean and catch DatabindException instead of JsonProcessingException.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The API-only artifact had no runtime implementation, causing
"Bean Validation API is on the classpath but no implementation
could be found" at startup. The starter bundles Hibernate Validator.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Replace reflective getTenantId() in BaseController with a typed
TenantOwned interface. All tenant-scoped BO classes now implement
TenantOwned, enabling compile-time safety instead of runtime
reflection.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Extract @Value annotations into typed Properties classes for HMAC
auth, gRPC facade deadline, point batch processing, and resource
registrar. Improves type safety, validation support, and IDE
discoverability.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add imports for GrpcXxxIdsQuery and GrpcRXxxListDTO in facade and
manager server classes to prepare for batch ID-based lookups.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add .claude/CLAUDE.md that delegates to ../AGENTS.md for shared
repository instructions, enabling Claude Code to discover project
conventions automatically.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>