4 Commits

Include renames

Author	SHA1	Message	Date
weichenandCursor	35b2e922bf	fix(deploy): keep official templates in the image build context ... *.md was excluding templates/docs from Docker context, so COPY and go:embed could not see prelim_design.md at /app. Un-ignore those trees and assert the smoke image can cat the official file. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 19:21:56 +00:00
weichenandCursor	e04829ee8e	fix(template): embed official doc templates for container cwd ... App images have no templates/ checkout, so GetDocTemplate fell back to a two-section stub and prelim_design lost its real contract. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 19:09:48 +00:00
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00
WeiCHENandCursor	ad2147445c	chore(deploy): 三环境 Compose 构建真实 app 镜像并补齐法规库运维 ... 将 dev/test/main 的 app 服务从占位容器改为 Dockerfile 多阶段构建，增加 healthcheck 与 .regulations 只读挂载；新增法规库备份/恢复脚本并同步 env-service 目录初始化与 gitignore。 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:22 +00:00