refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

backend/app/routers/osint.py

@@ -10,6 +10,7 @@ from sqlalchemy.orm import Session
 
 from app.database import get_db
 from app.dependencies.auth import get_current_user, require_any_role
+from app.domain.unit_of_work import UnitOfWork
 from app.models.user import User
 from app.services.osint_enrichment_service import (
     enrich_technique_with_cves,
@@ -82,12 +83,14 @@ def review_osint_item(
     user: User = Depends(get_current_user),
 ):
     """Mark an OSINT item as reviewed."""
-    item = mark_osint_reviewed(db, str(item_id))
-    if not item:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail="OSINT item not found",
-        )
+    with UnitOfWork(db) as uow:
+        item = mark_osint_reviewed(db, str(item_id))
+        if not item:
+            raise HTTPException(
+                status_code=status.HTTP_404_NOT_FOUND,
+                detail="OSINT item not found",
+            )
+        uow.commit()
     return {"id": str(item.id), "reviewed": True}
 
 

backend/app/routers/scores.py

@@ -11,6 +11,7 @@ from sqlalchemy.orm import Session
 
 from app.database import get_db
 from app.dependencies.auth import get_current_user, require_role
+from app.domain.unit_of_work import UnitOfWork
 from app.models.user import User
 from app.services.scoring_service import (
     score_technique_by_mitre_id,
@@ -127,14 +128,16 @@ def update_scoring_config(
     Weights are persisted in the database and survive restarts.
     Validation enforces that all weights are non-negative and sum to 100.
     """
-    result = update_scoring_weights(
-        db,
-        tests=payload.tests,
-        detection_rules=payload.detection_rules,
-        d3fend=payload.d3fend,
-        freshness=payload.freshness,
-        platform_diversity=payload.platform_diversity,
-    )
+    with UnitOfWork(db) as uow:
+        result = update_scoring_weights(
+            db,
+            tests=payload.tests,
+            detection_rules=payload.detection_rules,
+            d3fend=payload.d3fend,
+            freshness=payload.freshness,
+            platform_diversity=payload.platform_diversity,
+        )
+        uow.commit()
 
     from app.services.score_cache import invalidate
     invalidate()

backend/app/routers/worklogs.py

@@ -10,6 +10,7 @@ from sqlalchemy.orm import Session
 
 from app.database import get_db
 from app.dependencies.auth import get_current_user, require_any_role
+from app.domain.unit_of_work import UnitOfWork
 from app.models.user import User
 from app.services import worklog_service
 
@@ -57,17 +58,20 @@ def create(
     user: User = Depends(require_any_role("red_tech", "blue_tech", "red_lead", "blue_lead")),
 ):
     """Create a manually-logged worklog entry."""
-    wl = worklog_service.create_worklog(
-        db,
-        entity_type=body.entity_type,
-        entity_id=body.entity_id,
-        user_id=user.id,
-        activity_type=body.activity_type,
-        started_at=body.started_at,
-        ended_at=body.ended_at,
-        duration_seconds=body.duration_seconds,
-        description=body.description,
-    )
+    with UnitOfWork(db) as uow:
+        wl = worklog_service.create_worklog(
+            db,
+            entity_type=body.entity_type,
+            entity_id=body.entity_id,
+            user_id=user.id,
+            activity_type=body.activity_type,
+            started_at=body.started_at,
+            ended_at=body.ended_at,
+            duration_seconds=body.duration_seconds,
+            description=body.description,
+        )
+        uow.commit()
+    db.refresh(wl)
     return wl