chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-13 01:46:34 +08:00
parent 4889ff5916
commit 62cd8c45dd
70 changed files with 848 additions and 69 deletions
@@ -27,7 +27,7 @@ func (r *AdminRepo) ListSystemPrompts(ctx context.Context) ([]SystemPromptRow, e
 	rows, err := r.Pool.Query(ctx, `
 		SELECT id, code, title, scene, body, version, active, system, updated_at
 		FROM system_prompts
-		ORDER BY active DESC, code ASC`)
+		ORDER BY active DESC, code ASC LIMIT 500`)
 	if err != nil {
 		return nil, err
 	}
@@ -79,7 +79,7 @@ func (r *AdminRepo) ListKnowledgeSources(ctx context.Context) ([]KnowledgeSource
 	rows, err := r.Pool.Query(ctx, `
 		SELECT id, code, title, description, source_kind, version, active, system, updated_at
 		FROM knowledge_sources
-		ORDER BY active DESC, code ASC`)
+		ORDER BY active DESC, code ASC LIMIT 500`)
 	if err != nil {
 		return nil, err
 	}