# Changelog

## Score

- CAI 28 → 43 (+14.5)

## Lenses

- Code Health 53 (new)
- Architecture 85 (new)
- Maturity 13 → 50 (+36.6)
- Readiness 15 → 27 (+12.0)
- Security 100 → 57 (-43.0)
- Domain Modelling 57 (new)
- Event-Driven 100 (new)
- Event Sourcing 100 (new)

## Resolved (7)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (137)

- Boundary-crossing change coupling: App.js ↔ actionTypes.js (client/src/components/App.js)
- Bounded contexts not declared
- Change coupling: LoginHandler.cs ↔ RegisterHandler.cs (server/src/server/Cafe.Business/AuthContext/CommandHandlers/LoginHandler.cs)
- Coverage not measured — analyzer environment
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- Critical CVE: [GHSA redacted] (client/package-lock.json)
- …and 117 more

## API surface

- 25 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (25)

- DELETE /logout
- GET /
- GET /health
- GET /history
- GET /items
- GET /users
- GET /{id}
- POST /assign/barista
- POST /assign/cashier
- POST /assign/manager
- POST /assign/waiter
- POST /hire
- POST /items
- POST /login
- POST /open
- POST /register
- POST /table/assign
- POST /{tableNumber}/callwaiter
- POST /{tableNumber}/requestbill
- PUT /close
- …and 5 more