hamedandClaude Opus 4.8 b1aaaf3d55 fix(db): purge service-item config rows on delete (M20) ...

Tariff and TenantServiceCoverage reference a service item by a raw int (no FK),
so deleting an item orphaned its tariffs and tenant-coverage config. Delete them
in deleteItem() before removing the item. (The in-use FK guard for invoice/claim
usage is preserved.)

Remaining M20 refs (ClinicStaff/SmsWallet/DoctorAddress.clinicId/Claim.insurance_id
on rare owner deletions) are accepted as harmless unreferenced rows; SmsWallet is
intentionally retained as a financial record. Documented in docs/audit-backlog.md.

Regression: tests/ClinicService/ServiceItemDeleteCleanupTest.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-28 21:17:30 +03:30

..

Appointment

fix(security): enforce ownership on 4 IDOR read/bind endpoints (M2-M5)

2026-06-28 20:17:52 +03:30

Auth

perf(settlement,rating): paginate 3 unbounded list endpoints (M10-M12)

2026-06-28 20:36:41 +03:30

Billing

perf(secretary,billing): kill N+1 in secretary + claims lists (M8, M9)

2026-06-28 20:43:35 +03:30

ClinicService

fix(db): purge service-item config rows on delete (M20)

2026-06-28 21:17:30 +03:30

Database

fix(db): business-key unique constraints (M16-M19)

2026-06-28 21:03:54 +03:30

Doctor

fix(security): enforce ownership on 4 IDOR read/bind endpoints (M2-M5)

2026-06-28 20:17:52 +03:30

Doctrine

test(orm): regression — every entity with a custom repo declares repositoryClass

2026-06-28 16:53:40 +03:30

Insurance

fix(security): enforce ownership on 4 IDOR read/bind endpoints (M2-M5)

2026-06-28 20:17:52 +03:30

Payment

fix(security): unique payment reference_id, reject replayed callbacks (H3)

2026-06-28 19:08:26 +03:30

Rating

perf(settlement,rating): paginate 3 unbounded list endpoints (M10-M12)

2026-06-28 20:36:41 +03:30

Representation

fix(security): make commission_percent & active admin-only on PATCH representation

2026-06-28 17:36:48 +03:30

Secretary

perf(secretary,billing): kill N+1 in secretary + claims lists (M8, M9)

2026-06-28 20:43:35 +03:30

Settlement

perf(settlement,rating): paginate 3 unbounded list endpoints (M10-M12)

2026-06-28 20:36:41 +03:30

Shared

refactor(errors): centralise legacy string error codes in ErrorCodes (M21)

2026-06-28 21:12:23 +03:30

Smoke

perf(db): composite index on wallet_transactions(user_id, type) (M14)

2026-06-28 20:28:24 +03:30

ApiTestCase.php

perf(doctor): fetch-join specialties in clinic doctor list (H6)

2026-06-28 19:24:49 +03:30

bootstrap.php

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

doctrine_object_manager.php

fix(devops): repair phpstan config so static analysis runs again

2026-06-28 17:17:46 +03:30