- 新增 auth_token 配置项:非 loopback 绑定强制认证,loopback 可选加固 - 新增 auth.rs:loopback 判定(IpAddr 解析)、常量时间 token 比较、RFC 6750 Bearer 解析 - 新增 Bearer token 中间件(/api/*)与 WebSocket ?token= 校验 - 新增 CORS layer:loopback 镜像 Origin 防 DNS rebinding,非 loopback permissive - 修复 .gitignore 遗漏 tests/test.env,补充通用 *.env 规则 - 修复前端 experts/skills/subagents.ts 直接 fetch 不带 token(13 处),统一走 authedFetch - config.json host 从 0.0.0.0 改回 127.0.0.1 - mask_config/save_config 处理 auth_token 掩码与保留 - ConnectionTab/GatewayTab 增加认证 token 配置入口
37 lines
754 B
JSON
37 lines
754 B
JSON
{
|
|
"providers": {
|
|
"default": {
|
|
"type": "openai",
|
|
"base_url": "<OPENAI_BASE_URL>",
|
|
"api_key": "<OPENAI_API_KEY>",
|
|
"extra_headers": {},
|
|
"llm_timeout_secs": 300
|
|
}
|
|
},
|
|
"models": {
|
|
"default": {
|
|
"model_id": "<OPENAI_MODEL_NAME>",
|
|
"temperature": 0.7,
|
|
"context_window_tokens": 128000
|
|
}
|
|
},
|
|
"agents": {
|
|
"default": {
|
|
"provider": "default",
|
|
"model": "default",
|
|
"tool_result_max_chars": 20000,
|
|
"context_tool_result_trim_chars": 2000
|
|
}
|
|
},
|
|
"gateway": {
|
|
"host": "127.0.0.1",
|
|
"port": 19876,
|
|
"agent_prompt_reinject_every": 100
|
|
},
|
|
"scheduler": {
|
|
"enabled": true,
|
|
"tick_resolution_ms": 1000,
|
|
"misfire_policy": "skip",
|
|
"jobs": []
|
|
}
|
|
} |