refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.
2026-08-21 00:41:07 +08:00
parent 3d47227fbd
commit 2bbf42b741
447 changed files with 1901 additions and 8920 deletions
@@ -17,11 +17,6 @@ logger:
  format: text
  addSource: false

-auth:
-  tokenTTLHours: 24
-  maxFailedAttempts: 5
-  credentialLockMinute: 30
-
 storage:
  default: local
  maxUploadSizeMB: 5
@@ -58,11 +53,3 @@ mcp:

 wxWork:
  enabled: false
-
-oidc:
-  enabled: false
-
-customerSession:
-  secret: change-me
-  ttlMinutes: 120
-  refreshThresholdMinutes: 30