Bootstrap SXCHNGE from selected locally owned Sendico BFF code. SXCHNGE owns customers, authentication and sessions without local organizations or tenancy. SXCHNGE is one organization only at the Sendico public HTTP adapter boundary.
Approach
Retain and adapt the pinned copied runtime, password/account service, session and verification storage. Remove local organization membership/provisioning, roles, Casbin policies, invitation infrastructure and unrelated platform definitions. Preserve account/session authentication and customer ownership checks. Keep only consumed public Sendico wire contracts inside implemented adapters, and document required capabilities and remaining wiring.
Acceptance criteria
Customer lifecycle and runtime startup require no organization, role or policy records.
Local tenancy and unused platform machinery are removed, not disabled or replaced with a default tenant.
Copied authentication, session, verification and account behavior remains tested, including customer isolation and fresh database operation.
Source provenance and architecture describe the corrected scope.
Backend review, make test and make lint-backend pass; fixes are committed, pushed and delivered in PR #35.
Notes
Corrects the excessive Sendico tenancy copy in commit 7062672. Source revision remains 8bb20dcd622dd8eb92d289b6b34411e7eccab083. Public Sendico organization context belongs only to provider configuration; local customers must never inherit integration-principal-wide access. Signup/profile HTTP wiring, delivery/completion flows and live Sendico adapters remain later work. No live provider resources are created. Branch bff-34; PR #35. No security scan requested.
Delivered correction 981e84a4b402b720e10e4d5790d816caf6e0dc58, committed and pushed on bff-34; this was the preceding cleanup commit, followed by the module correction below. Local tenancy/policies and unused platform code are removed. Customer creation and activation are atomic, deletion revokes only the selected customer sessions, inactive accounts are rejected, and customer HTTP DTOs expose only explicit fields. Validation passed: make test, make lint-backend, go test -tags integration -run '^$' ./... (compile-only additional suites), provenance/contract and diff checks. Fresh Mongo tests cover empty startup, duplicate login, activation isolation, rollback and deleting the final customer without a seed. Source, scope, resolved test setup failures, validation and remaining wiring are recorded in docs/implementation.md. No security scans were requested or run.
Module organization correction delivered in commit f0720ec: backend/ groups the independent product executable (main.go/go.mod) and shared library (go.mod). Customer/auth/session/verification code lives under product; generic infrastructure cannot import product. Backoffice belongs in a separate future executable module, not in product. Removed the inherited cmd/edge/pkg/internal grouping and all 112 unused API snapshot files. Updated build targets, run instructions, architecture plan and provenance paths. Validation passed: make test, make lint-backend, product build/-version, and integration-tagged compilation in both modules. PR #35 remains unmerged.
### Goal
Bootstrap SXCHNGE from selected locally owned Sendico BFF code. SXCHNGE owns customers, authentication and sessions without local organizations or tenancy. SXCHNGE is one organization only at the Sendico public HTTP adapter boundary.
### Approach
Retain and adapt the pinned copied runtime, password/account service, session and verification storage. Remove local organization membership/provisioning, roles, Casbin policies, invitation infrastructure and unrelated platform definitions. Preserve account/session authentication and customer ownership checks. Keep only consumed public Sendico wire contracts inside implemented adapters, and document required capabilities and remaining wiring.
### Acceptance criteria
- [x] Customer lifecycle and runtime startup require no organization, role or policy records.
- [x] Local tenancy and unused platform machinery are removed, not disabled or replaced with a default tenant.
- [x] Copied authentication, session, verification and account behavior remains tested, including customer isolation and fresh database operation.
- [x] Source provenance and architecture describe the corrected scope.
- [x] Backend review, make test and make lint-backend pass; fixes are committed, pushed and delivered in PR #35.
### Notes
Corrects the excessive Sendico tenancy copy in commit 7062672. Source revision remains 8bb20dcd622dd8eb92d289b6b34411e7eccab083. Public Sendico organization context belongs only to provider configuration; local customers must never inherit integration-principal-wide access. Signup/profile HTTP wiring, delivery/completion flows and live Sendico adapters remain later work. No live provider resources are created. Branch bff-34; PR https://git.sendico.io/tech/sxchnge/pulls/35. No security scan requested.
Delivered correction `981e84a4b402b720e10e4d5790d816caf6e0dc58`, committed and pushed on `bff-34`; this was the preceding cleanup commit, followed by the module correction below. Local tenancy/policies and unused platform code are removed. Customer creation and activation are atomic, deletion revokes only the selected customer sessions, inactive accounts are rejected, and customer HTTP DTOs expose only explicit fields. Validation passed: `make test`, `make lint-backend`, `go test -tags integration -run '^$' ./...` (compile-only additional suites), provenance/contract and diff checks. Fresh Mongo tests cover empty startup, duplicate login, activation isolation, rollback and deleting the final customer without a seed. Source, scope, resolved test setup failures, validation and remaining wiring are recorded in docs/implementation.md. No security scans were requested or run.
Module organization correction delivered in commit f0720ec: backend/ groups the independent product executable (main.go/go.mod) and shared library (go.mod). Customer/auth/session/verification code lives under product; generic infrastructure cannot import product. Backoffice belongs in a separate future executable module, not in product. Removed the inherited cmd/edge/pkg/internal grouping and all 112 unused API snapshot files. Updated build targets, run instructions, architecture plan and provenance paths. Validation passed: make test, make lint-backend, product build/-version, and integration-tagged compilation in both modules. PR #35 remains unmerged.
tech
added the backend label 2026-09-12 11:01:07 +00:00
tech
self-assigned this 2026-09-12 11:01:07 +00:00
tech
added this to the SXCHNGE project 2026-09-12 11:01:07 +00:00
tech
changed title from Plan independent BFF and adapt reusable Sendico foundations to Bootstrap SXCHNGE from Sendico BFF and isolate public API contracts2026-09-12 11:33:05 +00:00
tech
changed reference from bff-34 to bff-342026-09-12 11:33:05 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Goal
Bootstrap SXCHNGE from selected locally owned Sendico BFF code. SXCHNGE owns customers, authentication and sessions without local organizations or tenancy. SXCHNGE is one organization only at the Sendico public HTTP adapter boundary.
Approach
Retain and adapt the pinned copied runtime, password/account service, session and verification storage. Remove local organization membership/provisioning, roles, Casbin policies, invitation infrastructure and unrelated platform definitions. Preserve account/session authentication and customer ownership checks. Keep only consumed public Sendico wire contracts inside implemented adapters, and document required capabilities and remaining wiring.
Acceptance criteria
Notes
Corrects the excessive Sendico tenancy copy in commit
7062672. Source revision remains 8bb20dcd622dd8eb92d289b6b34411e7eccab083. Public Sendico organization context belongs only to provider configuration; local customers must never inherit integration-principal-wide access. Signup/profile HTTP wiring, delivery/completion flows and live Sendico adapters remain later work. No live provider resources are created. Branch bff-34; PR #35. No security scan requested.Delivered correction
981e84a4b402b720e10e4d5790d816caf6e0dc58, committed and pushed onbff-34; this was the preceding cleanup commit, followed by the module correction below. Local tenancy/policies and unused platform code are removed. Customer creation and activation are atomic, deletion revokes only the selected customer sessions, inactive accounts are rejected, and customer HTTP DTOs expose only explicit fields. Validation passed:make test,make lint-backend,go test -tags integration -run '^$' ./...(compile-only additional suites), provenance/contract and diff checks. Fresh Mongo tests cover empty startup, duplicate login, activation isolation, rollback and deleting the final customer without a seed. Source, scope, resolved test setup failures, validation and remaining wiring are recorded in docs/implementation.md. No security scans were requested or run.Module organization correction delivered in commit
f0720ec: backend/ groups the independent product executable (main.go/go.mod) and shared library (go.mod). Customer/auth/session/verification code lives under product; generic infrastructure cannot import product. Backoffice belongs in a separate future executable module, not in product. Removed the inherited cmd/edge/pkg/internal grouping and all 112 unused API snapshot files. Updated build targets, run instructions, architecture plan and provenance paths. Validation passed: make test, make lint-backend, product build/-version, and integration-tagged compilation in both modules. PR #35 remains unmerged.Plan independent BFF and adapt reusable Sendico foundationsto Bootstrap SXCHNGE from Sendico BFF and isolate public API contractsbff-34to bff-34bff-34to bff-34