# Changelog

## Score

- CAI 31 → 32 (+1.0)

## Lenses

- Code Health 66 → 87 (+20.9)
- Architecture 69 → 69 (+0.0)
- Maturity 39 → 41 (+2.0)
- Readiness 15 → 11 (-4.2)
- Security 41 → 59 (+18.2)
- Accessibility 47 → 48 (+0.9)

## Resolved (44)

- AIOrchestra.APIGateway (Production) (ApiGateway/AIOrchestra.APIGateway/AIOrchestra.APIGateway.csproj)
- Analyzed solution does not cover the bulk of the repository
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [CVE redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- IL metrics not applicable
- LLM dimension skipped
- LLM dimension skipped
- LLM dimension skipped
- …and 24 more

## New (23)

- Further orphaned files (smaller)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- High CVE: [GHSA redacted] (AIOrchestraUI/package-lock.json)
- Inconsistent naming for endpoint classes. Some are named with 'Endpoint' suffix (e.g., 'CreateUserEndpoint'), while others use 'Endpont' (typo) or lack the 'Endpoint' suffix entirely (e.g., 'CreatePlaylistEndpont', 'GetUserPlaylistEndpont', 'GetTracksByIdEndpoint' vs 'GetRecommendationEndpoint').
- Inconsistent naming for the CreatePlaylist feature components. The Handler and Validator are explicitly named with '.Handler' and '.Validator' suffixes, but the Command type is named 'CreatePlaylist' without a distinguishing suffix, while other features (e.g., UserManagement) use explicit '.Command' suffixes for their command types.
- Inconsistent naming for the CreateUser feature components. The Command type is named 'CreateUser' without a distinguishing suffix, while the Handler and Validator are explicitly named. This differs from the 'PlaylistService' feature which also lacks the '.Command' suffix on the command type.
- Inconsistent naming for the DeletePlaylist feature components. The Command type is named 'DeletePlaylist' without a distinguishing suffix, while the Handler and Validator are explicitly named. This differs from the 'UserManagement' feature which uses explicit '.Command' suffixes.
- Inconsistent naming for the GetRecommendations feature components. The Command type is named 'GetRecommendations' without a distinguishing suffix, while the Handler and Validator are explicitly named. This differs from the 'UserManagement' feature which uses explicit '.Command' suffixes.
- Inconsistent naming for the GetTrackById feature components. The Command type is named 'GetTrackById' without a distinguishing suffix, while the Handler and Validator are explicitly named. This differs from the 'UserManagement' feature which uses explicit '.Command' suffixes.
- Inconsistent naming for the GetUserPlaylists feature components. Similar to CreatePlaylist, the Handler and Validator are explicitly named, but the Command type is named 'GetUserPlaylists' without a distinguishing suffix, whereas other features use explicit '.Command' suffixes.
- Inconsistent naming for the SetupUser feature components. The Command type is named 'SetupUser' without a distinguishing suffix, while the Handler and Validator are explicitly named. This differs from the 'PlaylistService' feature which also lacks the '.Command' suffix on the command type.
- No exposed public API
- …and 3 more