2 Commits

Include renames

Author	SHA1	Message	Date
weichen	bc37debc31	feat(db): add IAM core migration for users, sessions, and RBAC ... Introduce goose migration 00015 to extend users with IAM columns and seed system roles/permissions for Phase 1 authorization.	2026-09-12 01:39:29 +00:00
weichen	2772c9e526	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-11 16:04:53 +00:00