weichen and Cursor
00b0bb6882
feat(db): add outbox, notifications and stage advance request tables.
...
Support transactional stage.ready_to_advance events with dedupe by stage instance and config revision.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-12 03:14:30 +00:00
weichen and Cursor
caa98d8722
feat(db): add project workflow instance tables for Phase 3 governance.
...
Introduce planning/active lifecycle, instance snapshots, duty assignments, and activation confirmation tokens with single-live-instance constraints.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-12 03:03:34 +00:00
weichen and Cursor
7951b0f0b5
feat(db): add workflow definitions, versions, and template asset tables
...
Introduce Phase 2 IAM-adjacent schema for versioned workflow definitions,
template assets/versions, and workflow_defs permissions seed.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-12 02:53:09 +00:00
weichen
bc37debc31
feat(db): add IAM core migration for users, sessions, and RBAC
...
Introduce goose migration 00015 to extend users with IAM columns and seed system roles/permissions for Phase 1 authorization.
2026-09-12 01:39:29 +00:00
weichen
2772c9e526
feat(security): complete P0 release blocking remediation
...
Unify auth middleware and remove X-User-ID trust, add project_members
authorization, sandbox workspaces via resolver, and admin-only reconcile
by run_id. Introduce goose migrations with startup schema gate, fail closed
when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in
app Dockerfile, and remove frontend pseudo-login fallback.
2026-09-11 16:04:53 +00:00
