Feat/poam phase1#338

Open

AKAbdulHanif wants to merge 28 commits intocompliance-framework:mainfrom

AKAbdulHanif:feat/poam-phase1

Commits on Mar 10, 2026

feat(profile): add BuildByProps endpoint to profiles handler (local branch)
AKAbdulHanif
committed
feat(profile): accept kebab-case keys in BuildByProps request
AKAbdulHanif
committed
feat(profile): BuildByProps creates import and back-matter; validates rules
AKAbdulHanif
committed
fix(profile): persist import include-controls and back-matter resources in BuildByProps
AKAbdulHanif
committed
fix(profile): avoid duplicate imports/back-matter; persist associations after create and reload full profile
AKAbdulHanif
committed
fix(profile): prevent duplicate include-controls groups by creating association explicitly
AKAbdulHanif
committed
test(api): add integration test for BuildByProps to assert import and controls
AKAbdulHanif
committed
lint(api): fix error string casing and remove debug print in integration test
AKAbdulHanif
committed
ci(api): fix golangci-lint inputs; commit generated swagger docs to satisfy check-diff
AKAbdulHanif
committed
lint(api): use strings.EqualFold for case-insensitive prop name/ns comparisons
AKAbdulHanif
committed
docs(api): define BuildByPropsRequest/Response types and regenerate swagger to reflect correct payload schema
AKAbdulHanif
committed
feat(poam): Phase 1 foundation – models, CRUD, swagger
AKAbdulHanif
committed
docs(poam): add API design document
AKAbdulHanif
committed
fix(poam): align Phase 1 implementation to Confluence authoritative design
AKAbdulHanif
committed
fix(poam): remove duplicate last_status_change_at in Update handler
AKAbdulHanif
committed
fix(poam): remove invalid GORM check: constraints causing migration failure in all test suites
AKAbdulHanif
committed
refactor(poam): introduce DDD service layer; add all link CRUD endpoints
AKAbdulHanif
committed
fix(poam): address all Copilot and Gus PR review feedback
AKAbdulHanif
committed
fix(poam): stage remaining review fixes (api.go wiring, queries.go, test updates, swagger regen)
AKAbdulHanif
committed
fix(poam): correct stale type names in integration test
AKAbdulHanif
committed
chore(poam): regenerate swagger docs and apply swag fmt
AKAbdulHanif
committed
fix(poam): rename poamAddControlLinkRequest -> poamControlRefRequest in test
AKAbdulHanif
committed
fix(poam): add JWT auth tokens to all integration test requests
AKAbdulHanif
committed
fix(poam): seed SSP record in TestCreate_* integration tests
AKAbdulHanif
committed
fix(poam): correct dueBefore query param to deadlineBefore in test
AKAbdulHanif
committed
fix: address PR review comments
AKAbdulHanif
committed
fix(api): restore SSP-scoped risk routes dropped during rebase conflict resolution
AKAbdulHanif
committed
fix(oscal): use composite catalog+ID key in mergeControls/mergeGroups to prevent cross-catalog collisions
AKAbdulHanif
committed