Files
patrickandClaude Sonnet 5.5 df9581cf45
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Successful in 38s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 3s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 2s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 12s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Failing after 29s
CI / Core-Modul (Build/Vet/Test) (pull_request) Successful in 39s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 2s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Web (dms-browser) (push) Failing after 52s
CI / Web (pdf-viewer) (push) Failing after 37s
CI / Web (shl) (push) Failing after 8s
CI / Web (dms-browser) (pull_request) Failing after 55s
CI / Web (pdf-viewer) (pull_request) Failing after 39s
CI / Web (shl) (pull_request) Failing after 7s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 2s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 14s
common Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 19m7s
Supply-Chain-Scan (Go) / govulncheck (push) Failing after 1m1s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 18m45s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 1m13s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 18m28s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 38s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 18m16s
Workflow-Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 18m10s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Failing after 4s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Failing after 3s
workflow, connect: bearerauth aus common/bearerauth
Die beiden gleichen Kopien entfallen; common v0.2.2. Das Testpflicht-Muster
fuer bearerauth wandert vom workflow-Gate in das common-Gate.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-29 23:41:06 +01:00
..

common

Geteiltes Go-Modul für Pakete, die in mehreren NEXARCH-Modulen identisch gebraucht werden (internal/ ist modulübergreifend nicht sichtbar).

Pakete: pflichttestgate (parametrisierte Testpflicht-Logik), apierror, auditclient, bearerauth, httpclient, httpharden, loadtest, migrate, moduleauth, policyclient, svcauth, tenantregistryclient, testdb.

Einbinden

go env -w GOPRIVATE=gitea.perlbach24.de
go get gitea.perlbach24.de/scripte/nexarch/common@latest

Build-Orte brauchen Lesezugriff auf Gitea: Read-only-Token in ~/.netrc (machine gitea.perlbach24.de login <user> password <token>).

Versionen

Tags common/v0.X.Y setzt .gitea/workflows/common-tag.yml nach jedem Merge in main, der common/ ändert. Module aktualisieren einzeln (go get ...common@v0.X.Y). Lokal mit mehreren Modulen gleichzeitig arbeiten: nicht eingechecktes go.work.

Regeln

  • Nur Code, der in mindestens zwei Modulen byte-gleich (ohne Kommentare) gebraucht wird; fachlich verschiedene Pakete bleiben modul-lokal.

  • Änderungen abwärtskompatibel halten, solange Module nicht gleichzeitig umgestellt werden.

  • Jeder PR an common/ nennt die betroffenen Module (Auswirkungsliste). Breaking Changes nur mit neuer Minor-Version (v0.2.0) und Umstellungs-PRs je Modul; die aktuelle Minor steht in common/MINOR, der Tag-Workflow setzt bei einer neuen Minor v0.<minor>.0.

  • Sicherheitskritische Pakete (svcauth, tenantregistryclient, auditclient, policyclient, apierror, httpharden) unterliegen dem Pflichttest-Gate (cmd/pflichttestgate, Workflow common-pflichttest-gate.yml): Änderung ohne begleitende _test.go im selben Package schlägt fehl.