agentic-erp-platform-mvp v1.0.3

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

Unreleased

add-observability Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).

Added

• Add metrics for health and per-attempt retry telemetry.
• Add distributed tracing (OpenTelemetry) across HTTP and gRPC calls.

Changed

• Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).
• Introduce structured logging carrying correlation ids in every service.
• Standardize observability baselines per service as listed in specs/tasks.md.

add-shared-resilience-policies Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).

Changed

• Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).
• Standardize error taxonomy/response shape between internal services (US-SHARED-003).
• Define a controlled retry and compensation strategy for partial failures (US-SHARED-004, EC-004, NFR-003).
• Align with existing MCP error taxonomy (validation_error, acl_business_error, acl_unavailable) and the ACL domain errors.

expand-mcp-tool-catalog Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).

Changed

• Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).
• Introduce per-tool authorization so execution is allowed only for callers authorized for that tool.
• Formalize the tool contract versioning policy (incompatible changes require a new tool version).
• Preserve the existing catalog-gating, validation, and error-taxonomy behavior.

1.0.3 - 2026-08-26

2026-08-26-add-local-sonarqube-per-service SonarQube analysis is only available via SonarCloud in CI today, so developers cannot run an analysis locally without pushing to GitHub.

Added

• Add sonar-install Makefile target that installs the dotnet-sonarscanner global tool.
• Add sonar-check Makefile target that runs a per-service SonarQube analysis against a self-hosted SonarQube server, looping over the four solutions, each wrapped in begin → build + test (coverage) → end, with all analysis parameters driven by environment variables (SONAR_HOST_URL, SONAR_TOKEN, SONAR_PROJECT_KEY_PREFIX).

Changed

• Adjust the SonarCloud CI job to analyze each service under its own per-service project key, still using the SonarCloud GitHub Action (not the local Makefile targets), and only on pull requests.
• Ignore the SonarScanner local state directory (.sonarqube/) in .gitignore.
• Document in README.md: how to run sonar-install/sonar-check for local analysis, and that the SonarCloud and integration-test jobs run in CI only on pull requests.

Fixed

• Fix the coverage report property to consume the existing cobertura reports (sonar.cs.cobertura.reportsPaths), not opencover, and exclude test sources (sonar.coverage.exclusions=**/*Tests/**).

2026-08-26-add-sonarqube-docker-compose The local SonarQube workflow (make sonar-check) currently requires a self-hosted SonarQube server that developers must set up manually.

Added

• Add a sonarqube/ folder containing a docker-compose.yml for SonarQube Community + PostgreSQL 17, following the official SonarSource reference (sonarqube:community image, hardened with read_only: true, sonarqube_temp volume and tmpfs, container_name sonarqube/postgresql, persistent named volumes, DB healthcheck + depends_on condition).
• Add make sonar-up (start the SonarQube stack and wait until ready) and make sonar-down (stop it, preserving volumes) targets to the Makefile, wired into .PHONY and help.

Changed

• Update README.md so the "Análise SonarQube local" section documents the full developer flow: make sonar-up → first-login admin/admin (password change) → generate a token → SONAR_TOKEN=<token> make sonar-check → make sonar-down, plus host requirements (Linux vm.max_map_count, Docker Desktop memory).

See CHANGELOG Archive for older releases.

agentic-erp-platform-mvp v1.0.2

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

Unreleased

add-observability Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).

Added

• Add metrics for health and per-attempt retry telemetry.
• Add distributed tracing (OpenTelemetry) across HTTP and gRPC calls.

Changed

• Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).
• Introduce structured logging carrying correlation ids in every service.
• Standardize observability baselines per service as listed in specs/tasks.md.

add-shared-resilience-policies Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).

Changed

• Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).
• Standardize error taxonomy/response shape between internal services (US-SHARED-003).
• Define a controlled retry and compensation strategy for partial failures (US-SHARED-004, EC-004, NFR-003).
• Align with existing MCP error taxonomy (validation_error, acl_business_error, acl_unavailable) and the ACL domain errors.

expand-mcp-tool-catalog Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).

Changed

• Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).
• Introduce per-tool authorization so execution is allowed only for callers authorized for that tool.
• Formalize the tool contract versioning policy (incompatible changes require a new tool version).
• Preserve the existing catalog-gating, validation, and error-taxonomy behavior.

1.0.2 - 2026-08-26

2026-08-26-add-release-compose-file Add a new compose file (e.g. docker-compose.release.yml) that runs the four services purely from the pre-built images (image: references to the release tags), without any build: blocks. It mirrors the ports, healthchecks, dependencies and network of the existing compose file.

Added

• Add a new compose file (e.g. docker-compose.release.yml) that runs the four services purely from the pre-built images (image: references to the release tags), without any build: blocks. It mirrors the ports, healthchecks, dependencies and network of the existing compose file.
• Publish that compose file as an asset of the GitHub release, alongside the four image tarballs, in the tag-triggered release workflow.

Changed

• Update README.md to remove the inline docker-compose.yml listing from the "Para Usuários / Como Instalar" section.
• Update README.md to add a short instruction telling users to download the compose file from the release and run it against the loaded images.
• Bump the release to version 1.0.2.

See CHANGELOG Archive for older releases.

agentic-erp-platform-mvp v1.0.1

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

Unreleased

add-observability Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).

Added

• Add metrics for health and per-attempt retry telemetry.
• Add distributed tracing (OpenTelemetry) across HTTP and gRPC calls.

Changed

• Establish end-to-end correlation propagation across services (agent, mcp, erp-acl, rag).
• Introduce structured logging carrying correlation ids in every service.
• Standardize observability baselines per service as listed in specs/tasks.md.

add-shared-resilience-policies Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).

Changed

• Introduce a common idempotency policy for safe re-execution across services (US-SHARED-002, EC-005).
• Standardize error taxonomy/response shape between internal services (US-SHARED-003).
• Define a controlled retry and compensation strategy for partial failures (US-SHARED-004, EC-004, NFR-003).
• Align with existing MCP error taxonomy (validation_error, acl_business_error, acl_unavailable) and the ACL domain errors.

expand-mcp-tool-catalog Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).

Changed

• Extend the MCP tool catalog with new ERP capabilities (beyond erp.create_order and erp.cancel_invoice).
• Introduce per-tool authorization so execution is allowed only for callers authorized for that tool.
• Formalize the tool contract versioning policy (incompatible changes require a new tool version).
• Preserve the existing catalog-gating, validation, and error-taxonomy behavior.

1.0.1 - 2026-08-25

2026-08-25-add-ci-release-pipeline Rewrite Makefile targets to be dotnet-native: install (restore), test (unit), clean, build (compile Release), and build-images (build the 4 service Docker images tagged with VERSION).

Changed

• Rewrite Makefile targets to be dotnet-native: install (restore), test (unit), clean, build (compile Release), and build-images (build the 4 service Docker images tagged with VERSION).
• Make quality-gate = install + test only (test-only gate). Lint/security/mutation stays out of scope here (future change).
• Make CI run the quality gate as install + unit tests on push/PR, using the .NET SDK (no Node/Python/semgrep/Stryker).
• Defer mcp-service cross-service integration tests out of the CI gate; run them as a release step against the built stack.
• Make release (on v* tag) build the service images and export them as downloadable tarball assets (docker save | gzip) attached to the GitHub release, loadable and activatable with docker-compose or another orchestrator.

2026-08-25-add-mutation-test-coverage Add unit tests to Agent.Application.Tests covering the surviving mutant groups in ProcessAgentCommandUseCase:

Added

• Add unit tests to Agent.Application.Tests covering the surviving mutant groups in ProcessAgentCommandUseCase:

Changed

• Introduce a recording ILogger<T> test helper so log-statement mutations (message template and tool-name argument) become observable and assertable.
• Treat the return "unsupported" string mutation as an equivalent mutant (documented in design) — it is not killable without changing production design.
• Update the mutation-testing spec to require that the agent-service mutation score meets the configured break threshold.

2026-08-25-adopt-quality-gate-tools Enable .NET SDK analyzers + dotnet format as the linter; add Directory.Build.props and .editorconfig.

Added

• Add dotnet-code-metrics to report Maintainability Index, Lines of Code, and Cyclomatic Complexity.
• Add make security (dotnet list package --vulnerable/--deprecated/--outdated + Semgrep).
• Add make mutation using Stryker.NET (manual-only for now; a dedicated/nightly job will be a later change). Replace the stale StrykerJS config.

Changed

• Enable .NET SDK analyzers + dotnet format as the linter; add Directory.Build.props and .editorconfig.
• Collect coverage with Coverlet during make test and enforce a coverage threshold.
• Integrate SonarCloud analysis of all service solutions with PR decoration and a new-code (Leak Period) quality gate. SonarCloud is used instead of self-hosted SonarQube.

See CHANGELOG Archive for older releases.