# Changelog

## Score

- CAI 28 → 50 (+21.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 72 (new)
- Architecture 83 (new)
- Maturity 13 → 63 (+50.1)
- Readiness 15 → 45 (+29.4)
- Security 100 → 77 (-22.5)
- Domain Modelling 58 (new)
- Event-Driven 74 (new)
- Accessibility 43 (new)

## Resolved (7)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (90)

- BarePragmaDisable (src/PlainBridge.IdentityServer/src/PlainBridge.IdentityServer.EndPoint/Pages/Telemetry.cs)
- Boundary-crossing change coupling: Extensions.cs ↔ ServerApplicationDto.cs (src/PlainBridge.ServiceDefaults/Extensions.cs)
- Boundary-crossing change coupling: Program.cs ↔ Program.cs (src/PlainBridge.Api/src/PlainBridge.Api.ApiEndPoint/Program.cs)
- Boundary-crossing change coupling: Program.cs ↔ Program.cs (src/PlainBridge.Api/src/PlainBridge.Api.ApiEndPoint/Program.cs)
- Bounded contexts not declared
- Build did not complete in the analyzer
- Change coupling: HostApplicationDto.cs ↔ ServerApplicationDto.cs (src/PlainBridge.Shared/src/PlainBridge.Shared.Application/DTOs/HostApplicationDto.cs)
- Change coupling: HostApplicationEndpoint.cs ↔ ServerApplicationEndPoint.cs (src/PlainBridge.Api/src/PlainBridge.Api.ApiEndPoint/Endpoints/HostApplicationEndpoint.cs)
- Change coupling: HostApplicationService.cs ↔ PlainBridgeApiClientService.cs (src/PlainBridge.Server/src/PlainBridge.Server.Application/Services/HostApplication/HostApplicationService.cs)
- Change coupling: HostApplicationService.cs ↔ ServerApplicationService.cs (src/PlainBridge.Server/src/PlainBridge.Server.Application/Services/HostApplication/HostApplicationService.cs)
- Change coupling: HttpRequestProxyMiddleware.cs ↔ WebSocketProxyMiddleware.cs (src/PlainBridge.Server/src/PlainBridge.Server.ApiEndPoint/Middleware/HttpRequestProxyMiddleware.cs)
- Change coupling: PlainBridgeApiClientService.cs ↔ ServerApplicationService.cs (src/PlainBridge.Server/src/PlainBridge.Server.Application/Services/PlainBridgeApiClient/PlainBridgeApiClientService.cs)
- Change coupling: ServerBusService.cs ↔ WebSocketService.cs (src/PlainBridge.Server/src/PlainBridge.Server.Application/Services/ServerBus/ServerBusService.cs)
- CommentedOutCode (src/PlainBridge.Client/tests/PlainBridge.Client.Tests/UnitTests/Management/WebSocketManagementTests.cs)
- CommentedOutCode (src/PlainBridge.Client/tests/PlainBridge.Client.Tests/UnitTests/Management/WebSocketManagementTests.cs)
- CommentedOutCode (src/PlainBridge.Client/tests/PlainBridge.Client.Tests/UnitTests/Management/WebSocketManagementTests.cs)
- CommentedOutCode (src/PlainBridge.IdentityServer/src/PlainBridge.IdentityServer.EndPoint/Infrastructure/Data/ApplicationDbContext.cs)
- CommentedOutCode (src/PlainBridge.Server/src/PlainBridge.Server.ApiEndPoint/Worker.cs)
- Coverage not measured — test suite did not build
- Critical CVE: [GHSA redacted] (src/PlainBridge.Web/src/PlainBridge.Web.UI/package-lock.json)
- …and 70 more

## API surface

- 22 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (22)

- DELETE /api/hostapplication/{id}
- DELETE /api/serverapplication/{id}
- GET /
- GET /api/hostapplication
- GET /api/hostapplication/{id}
- GET /api/serverapplication
- GET /api/serverapplication/{id}
- GET /api/user
- GET /api/user/getcurrentuser
- PATCH /api/hostapplication/updatestate/{id}/{isActive}
- PATCH /api/hostapplication/{id}
- PATCH /api/serverapplication/updatestate/{id}/{isActive}
- PATCH /api/serverapplication/{id}
- PATCH /api/user/changepassword
- PATCH /api/user/{id}
- PATCH /user
- PATCH /user/changepassword
- POST /api/hostapplication
- POST /api/serverapplication
- POST /api/user
- …and 2 more