DevEnv nis2-agileandClaude Opus 4.8
f85876f2a2
Backend del modulo questionari fornitori (design docs/DESIGN_MODULO_QUESTIONARI_FORNITORI.md). Migrazioni 032+033 gia applicate su host (6 tabelle + 10 categorie preset + suppliers.category_id/external_ref/source). SupplyChainController: - categorie: categories/createCategory/updateCategory/deleteCategory (preset org 0 + custom per-org, no delete se in uso) - template: templates/getTemplate/createTemplate/updateTemplate (per-org, scope categoria) - domande: addTemplateQuestion/updateTemplateQuestion/deleteTemplateQuestion (7 tipi, weight, nis2_ref, vuln_flag, high_criticality_only) - import: importSuppliers + bulkUpsertSuppliers (upsert per external_ref, anti formula-injection CSV, max 1000, riusabile da API key) - helper: assertCategoryVisible/assertTemplateOwned/slugify/sanitizeCell Tutte le query org-scoped (no leak cross-org). Route in public/index.php actionMap supply-chain. Smoke: no-auth=401, categcategorie_visibili=10 (preset). USR2 applicato. php -l OK. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>