feat: preserve isolated visitor agent runtime

2026-09-10 17:36:39 +08:00
parent 8e36a9941d
commit ba22a2220f
10 changed files with 154 additions and 17 deletions
@@ -92,6 +92,6 @@ class JwtAuthenticator:
        if claims.get("visitor") is True:
            return RequestContext(
                user_id=str(subject), trace_id=str(uuid4()), roles=("visitor",),
-                permissions=("agent:run",),
+                permissions=("agent:run",), data_scope="public",
            )
        return RequestContext(user_id=str(claims["sub"]), trace_id=str(uuid4()))