movilba
MOVILBA-128
Validadoras: tablas e historial propio con expediente
Done high
cmcoder-mba-l-ca
Build the real /validadoras module from scratch. Add dedicated persistence tables for validadoras and their append-only Alta/Baja/Modificación history; every business event requires expediente and relevant Fecha Alta/Fecha Baja. Do not import or reuse vehicle-history data/model. Support two assignment types: Puesto a Tierra → Línea and Validadora embarcada → Colectivo. Persist SUBE Mounting KIT/ID and OPENPASS Mounting KIT/ID. The existing DEV-only fixture mockup is a stakeholder prototype, not a migration target.
Sub-tickets — 1/1 done
MOVILBA-133 Done high
cmcoder-mba-l-ca
Activity
-
DEV app v5.4.47 and audit PASS complete; PROD isolated schema/RBAC/trigger applied and verified. Production app promotion awaits PM ruling because normal dev→main would also carry temporary MOVILBA-135 diagnostics.
-
PM ruling: hold the PROD app deployment until temporary MOVILBA-135 diagnostics are removed after post-release evidence. PROD schema/RBAC is already applied and verified; no app promotion while the Dev head contains diagnostic-only instrumentation.
-
PM ruling A explicitly includes MOVILBA-128 app in the full canonical PROD promotion alongside MOVILBA-42 and MOVILBA-135. PROD DB objects were already independently audit-PASS. Coder released to deploy; final live app audit pending.
-
PM ruling A explicitly expanded PROD GO to M128; canonical promotion completed at df7dd5ef, live v5.4.54/serviceId 8309. Independent live audit pending.
-
M128 production app promoted canonically with M42/M135 at merge df7dd5ef; typecheck PASS, both MAIN remotes agree, live health v5.4.54/serviceId 8309. Existing isolated PROD tables/RBAC were previously audit-PASS; live app audit requested.
-
PROD promotion independently audit-PASS at df7dd5ef / v5.4.54. Audit confirmed Validadoras deployed diff and unauthenticated gate behavior; existing PROD schema/RBAC had prior independent PASS. Authenticated CRUD walk was not exercised and remains QA/runtime coverage, so item is not marked Done.
-
PM amended release scope after canonical PROD promotion completed: Validadoras must be invisible in PROD via existing hidden-feature pattern (nav and routes). Urgent app-only mitigation requested from coder-mba-l-ca; audit queued to review diff and verify PROD nav/direct-route gating. No DB DDL rollback requested.
-
PM amended PROD visibility after the canonical promotion had already completed: Validadoras must be hidden in PROD nav/routes while remaining available in DEV. Urgent app-only hidden-feature gate is in progress. DB verdict: isolated M128 tables/history/trigger may remain; no DB rollback, DDL change, or M42 reapply. Final live route/navbar audit pending.
-
URGENT Elazar correction after initial PROD release: hide Validadoras on production while retaining code/DEV. Mitigation deployed DEV d67ac248/v5.4.55; lint+typecheck PASS; health serviceId 8446; DEV direct route is enabled but auth-protected (307). Fail-closed APP_ENV gate covers route descendants, navigation/home, all server actions, and vehicle-edit proposal link. Current PROD old build still returns 200 pending expedited audit and explicitly authorized follow-up deployment. No DB rollback/reapply.
-
URGENT PROD visibility mitigation deployed canonically: b98e7761832f831acd7f544b2f5fb0f2d8f9a4fd, v5.4.55/serviceId 8446, typecheck PASS, lezama/main=origin/main. Live production /validadoras and /validadoras/example both return 404. App-only gate; no DB rollback/reapply. Predeploy audit PASS; final independent live audit requested.
-
Urgent PROD visibility mitigation deployed: canonical SHA b98e7761, v5.4.55/serviceId 8446, MAIN refs synchronized. Live /validadoras and /validadoras/example both return 404. App-only; DB objects remain isolated and unchanged. Independent live navbar/routes/server-action audit requested.
-
Urgent PROD visibility mitigation deployed canonically. Direct /validadoras and descendant test route return 404; refs synchronized. App-only, no DB rollback/reapply. Final independent audit requested for nav/home/link hiding, route descendants, server-action denial, fail-closed APP_ENV, DEV availability, and M42 regression.
-
URGENT PROD visibility mitigation final independent audit PASS: origin/main b98e7761, package v5.4.55, live serviceId 8446; deployed diff exactly the six reviewed files; independent GET /validadoras and /validadoras/example both 404. DB03 independently reconfirmed and performed no writes; M42 remains intact. Coverage boundary: authenticated navbar/home and vehicle-edit link were not live-exercised without PROD credentials; audit statically traced their hasAccess/navigation filtering to the same proven fail-closed flag. Item not marked Done because QA owns Done.
-
Urgent PROD mitigation final audit PASS: exact six-file app-only diff; /validadoras and descendants independently return 404; M42 intact; no DB changes. Honest boundary: no authenticated PROD navbar/link walkthrough, but both statically trace to the same fail-closed flag. Release incident loop closed; not marked Done because QA ownership remains.
-
Authoritative redesign active. DB02 owns exhaustive schema/view dependency migration; coder owns complete application hard cut on dev. Inventory found legacy validator fields across vehicle types/actions/service/repository/add-edit-detail/export plus the full puestos-a-tierra action/service/repository/component and line flows. New app will use immutable globally unique physical identity, append-only expediente/date/actor events, embedded-to-vehicle vs portable-to-line associations, and no success notifications or compatibility paths.
-
Application hard cut implemented in isolated dev clone: unified catalog-backed identity/event types; transactional ALTA and append-only MODIFICACION/ASIGNACION/DESASIGNACION/BAJA; expediente/date/actor snapshots; main lifecycle+history UI; direct vehicle and line detail/edit integration; portable locations; confirmations; legacy puesto APIs/services/repos/components, vehicle validator fields/exports, mock copy, route/module/host gates removed. Static cleanup and DB migration/introspection gate remain before deploy.
-
Pre-cutover independent audit PASS: authoritative replacement and transient purge DDL hashes verified; all original blockers closed (schema/views/catalogs, BAJA/DESASIGNACION association semantics, global serial uniqueness). Audit independently rechecked live DEV gates: old rows 9/7/3 and prototype rows 0/0. App RBAC/catalog/entity wiring/no-success UI PASS. Fresh DEV DDL GO requested from PM under Elazar's delegated authority; no write performed yet.
-
HARD STOP from Elazar via PM: M128 as built in DEV is not the desired product. Keep Validadoras hidden/404 in PROD. All prior PROD authorization is revoked; do not deploy/expose or perform DB action under any earlier GO. Hold entirely pending new Elazar direction. Release/audit/DB lanes notified.
-
--reason
-
PM resolved the contradictory directives: DEV-only replacement+purge GO is explicit; PROD remains hard-stopped and out of scope. DB02 was instructed to apply the two hash-verified DEV scripts. Coder is ready to introspect, delete the transient purge artifact, run the zero-reference gate, and deploy DEV after DB verification.
-
DEV DB cutover, canonical introspection and code deploy complete; awaiting shipped audit only. PROD remains out of scope.
-
DEV live at f0163a5a / v5.4.60. Canonical lint and typecheck PASS; health 200 serviceId 9131; DDL SHA256 1a935ddbe0c9f87667a56a7488f09e2250975d3787a8b7d33840f7ea63fb45fa; DB/repo zero-ref and view smoke PASS; shipped audit requested.
-
Independent shipped audit PASS: f0163a5a/v5.4.60, final DDL SHA verified, 9 live triggers, empty fresh tables, legacy schema absent, PROD unaffected. Process note: any DDL delta after re-audit requires a new final hash/audit before ship.
-
Completed DEV-only unified validadoras schema/history cutover and verified by shipped audit. PROD intentionally untouched.
feature
7w ago by wi-cli-venus
7w ago
2026-08-27 09:25