weichen/Agent-System-Backend

T

weichenandCursor 8eda35f365 Refuse open listeners and cross-site writes without auth

Why: The embedded tier starts without auth, and nothing checked Origin or Host, so a public bind or a foreign page could call write APIs.
Evidence: go test ./internal/config ./internal/server covering listen policy, origin rejection, and response headers.
Impact: Non-loopback without auth exits before opening the database. HTML artifacts get a sandbox CSP. Reverse proxies must list their public host in allowedHosts.
Refs: feature/sillytavern-review
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-04 17:28:46 +00:00

.gitea/workflows

Install house-style Python packages before backend CI

2026-10-03 12:46:10 +00:00

cmd/agent-system

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

Run tool scripts through the shared host and keep orchestration off

2026-10-03 18:04:25 +00:00

Add the startup configuration pipe with file and env layers plus explain

2026-09-30 04:19:11 +00:00

Route conversations through a squad entry when selected

2026-10-01 09:34:53 +00:00

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

Add cmdbus: registry-driven command dispatch with audit and inline confirm

2026-09-30 07:51:31 +00:00

Implement the backend: store/bus/runmgr core

2026-09-29 17:53:24 +00:00

.gitignore

Ignore Python bytecode in the backend tree

2026-10-01 08:17:33 +00:00

.gitmodules

Wire Agent-Command as nested dependency

2026-09-30 05:53:13 +00:00

AGENTS.md

Record Gitea access facts in AGENTS.md

2026-09-30 16:06:16 +00:00

go.mod

Wire the squad native adapter instead of the core registration

2026-10-03 13:42:04 +00:00

go.sum

Bump x/crypto to v0.56.0 to clear module-level advisories

2026-09-30 17:15:17 +00:00

PROJECT.md

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

README.md

Bootstrap the repository skeleton: README, agent rules, policy index, project facts

2026-09-29 17:30:31 +00:00

README.md

Agent-System-Backend

对话系统后端：Go 模块化单体，默认构建为单二进制（go:embed 内嵌前端与嵌入式 SQLite 存储）。组合 Agent-Native / Agent-Squad / Agent-Intent 生态，依赖 agent-system-core 契约。

契约与架构见 Agent-System-Documents 设计方案与架构文档；开发规范见 development-guidelines（Dev 仓 development/guidelines）。本仓为 Agent-System 多仓组合的组成部分。