refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

cmd/testdata/seeds/agentteam.go

@@ -1,6 +1,6 @@
 package seeds
 
-import "agent-desk/cmd/testdata/seedlang"
+import "code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
 
 type AgentUserSeed struct {
 	Username string

cmd/testdata/seeds/aiagent.go

@@ -1,8 +1,8 @@
 package seeds
 
 import (
-	"agent-desk/cmd/testdata/seedlang"
-	"agent-desk/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
 )
 
 type AIAgentSeed struct {

cmd/testdata/seeds/channel.go

@@ -1,9 +1,9 @@
 package seeds
 
 import (
-	"agent-desk/cmd/testdata/seedlang"
-	"agent-desk/internal/pkg/dto"
-	"agent-desk/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/dto"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
 
 	"github.com/mlogclub/simple/common/jsons"
 )

cmd/testdata/seeds/kb.go

@@ -1,6 +1,6 @@
 package seeds
 
-import "agent-desk/cmd/testdata/seedlang"
+import "code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
 
 type KnowledgeBaseSeed struct {
 	Name        string
@@ -83,7 +83,6 @@ func chineseKnowledgeFAQSeeds() []KnowledgeFAQSeed {
 		{Question: "新成员加入后如何开通后台账号？", Answer: "企业管理员进入“组织设置-成员管理”，点击“新增成员”，填写姓名、邮箱、所属团队和角色后保存。系统会自动发送激活邮件，成员首次登录时设置密码即可。若你们开通了单点登录，也可以直接从企业身份系统同步成员。", SimilarQuestions: []string{"怎么给新客服开账号", "新增员工账号在哪里", "成员怎么加入后台"}, Remark: "成员管理"},
 		{Question: "成员离职后如何停用账号？", Answer: "请在“组织设置-成员管理”中找到对应成员，点击“停用”即可。停用后该账号无法继续登录，但历史会话、工单处理记录和质检数据会保留，不会影响报表统计。若后续确认不再使用，也可以在完成交接后删除账号。", SimilarQuestions: []string{"离职员工账号怎么处理", "怎么禁用成员账号", "停用客服账号"}, Remark: "成员管理"},
 		{Question: "角色权限修改后多久生效？", Answer: "角色权限保存后通常即时生效。已在线的成员可能需要刷新页面或重新登录，才能拿到最新权限菜单和接口授权。如果修改后仍能访问原页面，请清理浏览器缓存后再试。", SimilarQuestions: []string{"权限修改什么时候生效", "调整角色后没变化", "角色更新后要重登吗"}, Remark: "成员管理"},
-		{Question: "支持企业微信或钉钉单点登录吗？", Answer: "支持对接企业微信、钉钉和标准 SAML/OIDC 单点登录。开通后成员可通过企业身份系统直接登录平台，无需单独维护密码。具体配置需要管理员在“安全设置-单点登录”中填写回调地址、应用凭证并完成测试。", SimilarQuestions: []string{"能接企业微信登录吗", "支持钉钉 SSO 吗", "单点登录怎么接"}, Remark: "成员管理"},
 		{Question: "坐席在线、忙碌、离线状态有什么区别？", Answer: "在线表示可正常接待新会话，忙碌表示当前暂不分配新会话但仍可处理已有会话，离线表示不参与会话分配也不接收实时提醒。若开启自动状态切换，长时间无操作或退出登录后，系统会自动变更为离线。", SimilarQuestions: []string{"客服状态怎么理解", "在线忙碌离线区别", "坐席状态说明"}, Remark: "坐席接待"},
 		{Question: "会话是怎么分配给坐席的？", Answer: "默认按技能组和轮询策略分配，也可结合坐席当前负载、最近响应时长和优先级规则进行智能分流。若客户命中了指定渠道、语言或标签条件，系统会优先路由到匹配该条件的团队或坐席。", SimilarQuestions: []string{"客户咨询怎么分配", "会话路由规则是什么", "新会话按什么分给客服"}, Remark: "坐席接待"},
 		{Question: "如何把会话转接给其他团队？", Answer: "在会话详情页点击“转接”，选择目标团队或指定坐席，并填写转接备注即可。转接后，原坐席仍可在历史记录中查看会话内容，但新消息会优先提醒接收方。若目标团队离线人数过多，建议先确认有人值班。", SimilarQuestions: []string{"会话怎么转给别的组", "转接客服在哪里", "咨询如何分配给其他团队"}, Remark: "坐席接待"},

cmd/testdata/seeds/quickreply.go

@@ -1,8 +1,8 @@
 package seeds
 
 import (
-	"agent-desk/cmd/testdata/seedlang"
-	"agent-desk/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
 )
 
 type QuickReplySeed struct {

cmd/testdata/seeds/skill.go

@@ -1,8 +1,8 @@
 package seeds
 
 import (
-	"agent-desk/cmd/testdata/seedlang"
-	"agent-desk/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
 )
 
 type SkillDefinitionSeed struct {

cmd/testdata/seeds/tag.go

@@ -1,6 +1,6 @@
 package seeds
 
-import "agent-desk/cmd/testdata/seedlang"
+import "code.tczkiot.com/wlw/ai-agent/cmd/testdata/seedlang"
 
 type TagSeed struct {
 	ID       int64