fix: disable custom-agent management API by default (#2161)
* fix: disable custom-agent management API by default * style: format agents API hardening files * fix: address review feedback for agents API hardening * fix: add missing disabled API coverage
This commit is contained in:
+9
-1
@@ -12,7 +12,7 @@
|
||||
# ============================================================================
|
||||
# Bump this number when the config schema changes.
|
||||
# Run `make config-upgrade` to merge new fields into your local config.yaml.
|
||||
config_version: 6
|
||||
config_version: 7
|
||||
|
||||
# ============================================================================
|
||||
# Logging
|
||||
@@ -708,6 +708,14 @@ memory:
|
||||
injection_enabled: true # Whether to inject memory into system prompt
|
||||
max_injection_tokens: 2000 # Maximum tokens for memory injection
|
||||
|
||||
# ============================================================================
|
||||
# Custom Agent Management API
|
||||
# ============================================================================
|
||||
# Controls whether the HTTP gateway exposes custom-agent SOUL/USER.md management.
|
||||
# Keep this disabled unless the gateway is behind a trusted authenticated admin boundary.
|
||||
agents_api:
|
||||
enabled: false
|
||||
|
||||
# ============================================================================
|
||||
# Skill Self-Evolution Configuration
|
||||
# ============================================================================
|
||||
|
||||
Reference in New Issue
Block a user