feat: add governed public knowledge retrieval

2026-09-10 18:42:44 +08:00
parent ba22a2220f
commit 511a8ca18f
20 changed files with 729 additions and 7 deletions
@@ -34,7 +34,7 @@ async def test_worker_restores_visitor_without_identity_repository_call() -> Non
    )

    assert context.roles == ("visitor",)
-    assert context.permissions == ("agent:run",)
+    assert context.permissions == ("agent:run", "knowledge:query")
    assert context.data_scope == "public"
    runtime.resolve_identity.assert_not_awaited()