feat: add isolated release gates and CI checks

This commit is contained in:
jb
2026-09-19 10:01:23 -04:00
parent 0ff3e67568
commit 92272d4e9a
20 changed files with 442 additions and 10 deletions
+6
View File
@@ -1,5 +1,10 @@
# Default is live. Demo is explicit and visibly labeled; never used as an error fallback.
APP_MODE=live
# Immutable image/application identifier in staging/production; local is for development only.
APP_RELEASE_ID=local
# Comma-separated server-side rollout allowlist. New capabilities are off by default.
APP_CAPABILITY_ALLOWLIST=asset_search,asset_valuation,asset_sync,assistant_dispatch,session_token
RELEASE_ENV=development
APP_ORIGIN=http://localhost:5173
APP_AUTH_ISSUER=http://localhost:5173
REFERENCE_DIR=./data/reference
@@ -39,3 +44,4 @@ CONVEX_SITE_ORIGIN=http://localhost:3211
# Pin the optional dashboard too before production use.
CONVEX_IMAGE=ghcr.io/get-convex/convex-backend@sha256:3aa2ccd6697a75de53948b1ee531d7c9688fe09ef360748d75df46dfc888f69a
CONVEX_DASHBOARD_IMAGE=ghcr.io/get-convex/convex-dashboard:latest
# Production release checks require this optional admin image to be digest-pinned.