3 Commits

Author	SHA1	Message	Date
null	b4634a8080	feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) ... utils/logger.cts — console-compatible log.{debug,info,warn,error} with: - level gating (LOG_LEVEL; debug in dev / info in prod), and - REDACTION of secrets/PII (sensitive keys + bearer/JWT) so tokens, passwords, and encrypted values never reach the logs (financial app). Backend is abstracted (console now, swappable to pino later). Swept all 317 server-runtime console.* across 35 files → log.* + inserted the import at correct scope. tests/logger.test.js pins the redaction contract (4 tests). CODE_STANDARDS updated; raw console.* is now banned in server code. Verified: check:server + typecheck:server + lint clean; 240/240 server tests; client 50/50; build; e2e probe 17/17; boot smoke logs flow through the logger and graceful shutdown intact. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-06 16:05:18 -05:00
null	a75ff1a466	refactor(routes): monthly-starting-amounts → throw pattern; doc exemplar ... 5 ad-hoc {error} validations → throw ValidationError(msg, field) (adds proper code + field). CODE_STANDARDS references routes/categories.cts as the canonical error-pattern example and notes converted/unconverted routes emit identical output (terminal handler normalizes both). 236/236. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-06 15:03:52 -05:00
null	88674fa2f5	docs(standards): add CODE_STANDARDS.md + CONTRIBUTING.md ... The living rulebook (formatting, modules, API/wire + error contract, security, logging, data integrity, testing) so conventions are codified and persist. CONTRIBUTING points at it and the CI gate. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-06 14:28:05 -05:00