251129:1700 update to 1.4.5

.agent/rules/code-execution.md

@@ -0,0 +1,20 @@
+---
+trigger: always_on
+---
+
+---
+
+description: Control which shell commands the agent may run automatically.
+allowAuto: ["pnpm test:watch", "pnpm test:debug", "pnpm test:e2e", "git status"]
+denyAuto: ["rm -rf", "Remove-Item", "git push --force", "curl | bash"]
+alwaysReview: true
+scopes: ["backend/src/**", "backend/test/**", "frontend/app/**"]
+
+---
+
+# Execution Rules
+
+- Only auto-execute commands that are explicitly listed in `allowAuto`.
+- Commands in denyAuto must always be blocked, even if manually requested.
+- All shell operations that create, modify, or delete files in `backend/src/` or `backend/test/` or `frontend/app/`require human review.
+- Alert if environment variables related to DB connection or secrets would be displayed or logged.

.agent/rules/code-references.md

@@ -0,0 +1,11 @@
+---
+trigger: always_on
+---
+
+# Basic data:
+
+- For Application Requirements, refer to 0_Requirements_V1_4_4.md
+- For detailed Full Stack JS, refer to 1_FullStackJS_V1_4_4.md
+- For detailed Backend Development Plan, refer to 2_Backend_Plan_V1_4_4.md, 2_Backend_Plan_V1_4_4.Phase_Addition.md, 2_Backend_Plan_Phase6A_V1_4_3.md
+- For detailed Frontend Development Plan, refer to 3_Frontend_Plan_V1_4_4.md
+- For detailed DB schema, refer to 4_Data_Dictionary_V1_4_4.md, 8_lcbp3_v1_4_4.sql, 8_lcbp3_v1_4_4_seed.sql

.agent/rules/coding-standards.md

@@ -1,6 +1,11 @@
 ---
 trigger: always_on
-glob:
-description:
 ---
 
+# 📏 Coding Standards (Strict Rules)
+
+1.  **Language:** - Code logic & Naming: **English**.
+    - Comments & Documentation: **Thai Language (ภาษาไทย)**.
+2.  **File Structure:** Follow `kebab-case` for files (e.g., `user-service.ts`).
+3.  **Comments:** Add `// File: path/to/file` at the top of every file.
+4.  **Secrets:** NEVER hardcode secrets. Use `process.env` and assume `docker-compose.override.yml` is used for local dev.