# Backend Architecture Refactor — Tasks

Статус: draft

- [ ] Task 0: Baseline verification before runtime changes.
- [ ] Task 1: Mask unhandled `500` errors without changing `HttpException` responses.
- [ ] Task 2: Harden production runtime config for JWT secrets and credentialed CORS.
- [ ] Task 3: Harden portfolio position DTO validation for quantity and buyDate.
- [ ] Task 4: Localize T-Bank gRPC `any` casts behind typed facade methods.
- [ ] Task 5: Preserve cache `cachedAt` metadata on cache hits.
- [ ] Task 6: Synchronize published backend docs with current MOEX/envelope/health/T-Bank contracts.
- [ ] Task 7: Run final lint/test/build/docs quality gate and inspect final diff.

## Verification Log

- Baseline backend tests: not run yet.
- Baseline backend build: not run yet.
- Final backend lint: not run yet.
- Final backend tests: not run yet.
- Final backend build: not run yet.
- Final docs build: not run yet.