feat(agent): 聊天提交统一走 POST /agent/runs 异步网关

引入 Agent Run 网关替代直连 /sessions/:id/reply，并在 api_lockdown 白名单中放行新入口，避免策略拦截导致聊天不可用。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-29 22:50:00 +08:00
parent 16828a58f7
commit 8f620fa714
14 changed files with 784 additions and 89 deletions
@@ -60,6 +60,16 @@ test('api lockdown blocks extension admin routes', () => {
  });
  assert.equal(allowed.allowed, true);

+  const agentRunCreate = evaluateProxyRequest('POST', '/agent/runs', {
+    api_lockdown: true,
+  });
+  assert.equal(agentRunCreate.allowed, true);
+
+  const agentRunGet = evaluateProxyRequest('GET', '/agent/runs/run-1', {
+    api_lockdown: true,
+  });
+  assert.equal(agentRunGet.allowed, true);
+
  const deleteAllowed = evaluateProxyRequest('DELETE', '/sessions/abc', {
    api_lockdown: true,
  });