feat: appove and go

docker-compose.control-panel.local.yml

@@ -34,6 +34,13 @@ services:
       ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
       CASAN_GOAL_OPENAI_MODEL: ${CASAN_GOAL_OPENAI_MODEL:-gpt-5.3-codex}
       CASAN_GOAL_ANTHROPIC_MODEL: ${CASAN_GOAL_ANTHROPIC_MODEL:-claude-3-5-sonnet-latest}
+      CASAN_GOAL_ENABLE_GATEWAY_PATCH_REPAIR: "1"
+      CASAN_GOAL_LOCAL_TIMEOUT_SEC: "600"
+      CASAN_GOAL_MODEL_TIMEOUT: "600"
+      CASAN_GOAL_MODEL_PREFLIGHT: "1"
+      CASAN_GOAL_MODEL_PREFLIGHT_TIMEOUT_SEC: "30"
+      CASAN_GOAL_LOCAL_MODEL_PREFLIGHT_TIMEOUT_SEC: "90"
+      CASAN_GOAL_MODEL_PREFLIGHT_TTL_SEC: "600"
       CASAN_PREFLIGHT: ${CASAN_PREFLIGHT:-0}
       CASAN_AUTH_BRIDGE_URL: http://host.docker.internal:20130
       CASAN_AUTH_BRIDGE_TOKEN: ${CASAN_AUTH_BRIDGE_TOKEN:-}
@@ -47,8 +54,15 @@ services:
       CASAN_APPROVAL_SIGNER_ROLE: ops
       CASAN_IDP_JWKS_URL: http://idp:8080/.well-known/jwks.json
     volumes:
+      # Persist only governed state and registered project roots. Dependencies
+      # stay inside the Linux image, avoiding host/container native-binary drift.
       - ./.specify:/app/.specify
-      - ./docs/output:/app/docs/output:ro
+      - ./docs/output:/app/docs/output
+      - ./docs/technical_architecture.md:/app/docs/technical_architecture.md:ro
+      - ./apps/okr:/app/apps/okr
+      - ./apps/service-desk:/app/apps/service-desk
+      - ./apps/projects:/app/apps/projects
+      - ./packages/casan-harness/level5/project-registry.json:/app/packages/casan-harness/level5/project-registry.json
     expose:
       - "3010"
     networks:
@@ -114,7 +128,7 @@ services:
       CASAN_IDP_ISSUER: http://localhost:18082
       CASAN_IDP_SUB: oidc-ops
       CASAN_IDP_EMAIL: oidc-ops@example.com
-      CASAN_IDP_GROUPS: casan-org-admin,casan-approver
+      CASAN_IDP_GROUPS: casan-org-admin,casan-approver,casan-project:AINative_OKR_CASAN4
       CASAN_APPROVAL_SIGNER_TOKEN: ${CASAN_APPROVAL_SIGNER_TOKEN:-local-approval-signer-secret}
     ports:
       - "18082:8080"