Skip to content

feat: consume external integration evidence - #59

Merged
rodri-oliveira-dev merged 7 commits into
mainfrom
phase/08-external-integrations
Oct 2, 2026
Merged

rodri-oliveira-dev merged 7 commits into
mainfrom
phase/08-external-integrations

Conversation

@rodri-oliveira-dev

Copy link
Copy Markdown
Owner

Resumo

  • integra o Repo2C4 ao baseline concluído do DotNetRepoInspector #202 (v1.6.5) exclusivamente pelo boundary JSON público InspectionReport schema 1.6;
  • importa evidências externas com proveniência, direção, tecnologia, resource, contract e confidence preservados, sem dependência entre os cores nem reimplementação de detectores;
  • mapeia HTTP, database, cache, object storage e messaging publish/consume para C1/C2 de forma conservadora;
  • mantém identidades fortes e evidência de alta confiança como confirmed, enquanto targets ausentes, baixa/média confiança e transports não provados permanecem requiresReview;
  • expõe o mesmo fluxo pela CLI, MCP e Agent, com paths locais autorizados, snapshots de sessão e Agent determinístico sem provider cloud;
  • limita bytes/findings/sinais/texto, rejeita paths inseguros e reports incompatíveis/stale, e não propaga secrets, valores de configuração, payloads, source body ou JSON bruto;
  • preserva compatibilidade sem --integration-report e ignora campos aditivos desconhecidos do contrato.

Validação

  • dotnet tool restore
  • locked restore, format e build Release: aprovados, sem warnings
  • testes focados e E2E de Core/CLI/MCP/Agent: aprovados
  • cobertura Coverlet revisada por projeto para os caminhos alterados
  • canonical v1.6.5 conferido semanticamente contra tag/commit de origem
  • LikeC4 1.59.4 validou os goldens pela CLI oficial; o E2E opt-in integra o novo C1/C2 no runner Linux
  • audit NuGet: nenhuma vulnerabilidade conhecida
  • distribuição: pack local aprovado; instalação isolada permanece coberta pelo gate Linux do CI
  • line endings, diff e working tree: aprovados

Observação local: dois testes preexistentes de symlink do Core exigem privilégio de criação de links no Windows. Os gates do PR executarão a suíte completa no runner Linux, além de CodeQL, Dependency Review e SonarQube Cloud.

Closes #48
Closes #49
Closes #50
Closes #51
Closes #52
Closes #53
Closes #47

@coderabbitai

coderabbitai Bot commented Oct 2, 2026 •

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository: rodri-oliveira-dev/Repo2C4/https://raw.githubusercontent.com/rodri-oliveira-dev/.github/main/coderabbit-templates/dotnet-library.yaml (via .coderabbit.yaml)

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 82eb05b1-91be-44ed-a85b-19a65c664fa2

  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f4ec1d50a0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Repo2C4.Mcp/McpArchitectureTools.cs Resolved
@rodri-oliveira-dev
rodri-oliveira-dev merged commit b0eb12b into main Oct 2, 2026
9 checks passed
@rodri-oliveira-dev
rodri-oliveira-dev deleted the phase/08-external-integrations branch October 2, 2026 16:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment