refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

internal/ai/application/runtime/agent_loop_engine.go

@@ -11,20 +11,20 @@ import (
 	"strings"
 	"time"
 
-	ai "agent-desk/internal/ai"
-	"agent-desk/internal/ai/runtime/instruction"
-	"agent-desk/internal/ai/runtime/readtools"
-	"agent-desk/internal/ai/runtime/retrievers"
-	runtimetooling "agent-desk/internal/ai/runtime/tooling"
-	workflowexecutor "agent-desk/internal/ai/runtime/workflow"
-	aitooling "agent-desk/internal/ai/tooling"
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/dto/request"
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/errorsx"
-	"agent-desk/internal/pkg/toolx"
-	"agent-desk/internal/pkg/utils"
-	svc "agent-desk/internal/services"
+	ai "code.tczkiot.com/wlw/ai-agent/internal/ai"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/instruction"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/readtools"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/retrievers"
+	runtimetooling "code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/tooling"
+	workflowexecutor "code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/workflow"
+	aitooling "code.tczkiot.com/wlw/ai-agent/internal/ai/tooling"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/dto/request"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/errorsx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/utils"
+	svc "code.tczkiot.com/wlw/ai-agent/internal/services"
 
 	"github.com/mlogclub/simple/sqls"
 )

internal/ai/application/runtime/agent_loop_engine_test.go

@@ -6,11 +6,11 @@ import (
 	"strings"
 	"testing"
 
-	ai "agent-desk/internal/ai"
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/dto/request"
-	"agent-desk/internal/pkg/enums"
-	svc "agent-desk/internal/services"
+	ai "code.tczkiot.com/wlw/ai-agent/internal/ai"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/dto/request"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	svc "code.tczkiot.com/wlw/ai-agent/internal/services"
 
 	"github.com/glebarez/sqlite"
 	"github.com/mlogclub/simple/sqls"

internal/ai/application/runtime/agent_turn.go

@@ -5,11 +5,11 @@ import (
 	"fmt"
 	"strings"
 
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/toolx"
-	"agent-desk/internal/pkg/utils"
-	svc "agent-desk/internal/services"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/utils"
+	svc "code.tczkiot.com/wlw/ai-agent/internal/services"
 )
 
 type agentLoopTurn struct {

internal/ai/application/runtime/application_service.go

@@ -4,9 +4,9 @@ import (
 	"context"
 	"strings"
 
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/errorsx"
-	svc "agent-desk/internal/services"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/errorsx"
+	svc "code.tczkiot.com/wlw/ai-agent/internal/services"
 )
 
 // ApplicationRunInput identifies the persisted inputs for an Agent reply.

internal/ai/application/runtime/application_service_test.go

@@ -4,8 +4,8 @@ import (
 	"strings"
 	"testing"
 
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
 
 	"github.com/glebarez/sqlite"
 	"github.com/mlogclub/simple/sqls"

internal/ai/application/runtime/eino_agent_loop.go

@@ -8,8 +8,8 @@ import (
 	"strings"
 	"time"
 
-	ai "agent-desk/internal/ai"
-	"agent-desk/internal/models"
+	ai "code.tczkiot.com/wlw/ai-agent/internal/ai"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
 
 	einoopenai "github.com/cloudwego/eino-ext/components/model/openai"
 	einomodel "github.com/cloudwego/eino/components/model"

internal/ai/application/runtime/evaluation.go

@@ -6,9 +6,9 @@ import (
 	"strconv"
 	"strings"
 
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
 )
 
 // OfflineEvaluationCase is an isolated customer-service evaluation sample.

internal/ai/application/runtime/service.go

@@ -6,9 +6,9 @@ import (
 	"strings"
 	"time"
 
-	workflowexecutor "agent-desk/internal/ai/runtime/workflow"
-	"agent-desk/internal/models"
-	"agent-desk/internal/repositories"
+	workflowexecutor "code.tczkiot.com/wlw/ai-agent/internal/ai/runtime/workflow"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/repositories"
 
 	"github.com/mlogclub/simple/sqls"
 )

internal/ai/application/runtime/types.go

@@ -1,7 +1,7 @@
 package runtime
 
 import (
-	"agent-desk/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
 	"time"
 )
 

internal/ai/application/runtime/workflow_runtime.go

@@ -3,10 +3,10 @@ package runtime
 import (
 	"encoding/json"
 
-	"agent-desk/internal/ai/workflow/dsl"
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/errorsx"
-	"agent-desk/internal/repositories"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/errorsx"
+	"code.tczkiot.com/wlw/ai-agent/internal/repositories"
 
 	"github.com/mlogclub/simple/sqls"
 )