T

xiaoju d80cc1b9e0 security: require auth token for all API endpoints except health — 小橘 🍊

- query, inspect, invoke now require Authorization: Bearer token
- Only /_health remains public (monitoring/uptime checks)
- Data sovereignty: CF resources belong to the user, no anonymous access

2026-04-03 11:54:02 +00:00

src

security: require auth token for all API endpoints except health — 小橘 🍊

2026-04-03 11:54:02 +00:00

test

security: require auth token for all API endpoints except health — 小橘 🍊

2026-04-03 11:54:02 +00:00

.gitignore

feat: implement Sigil Phase 1 MVP 🔮

2026-04-03 04:17:43 +00:00

package-lock.json

fix: /run/{name} → 302 redirect, bypass CF same-zone fetch limitation

2026-04-03 09:15:58 +00:00

package.json

fix: /run/{name} → 302 redirect, bypass CF same-zone fetch limitation

2026-04-03 09:15:58 +00:00

pnpm-lock.yaml

feat: implement Sigil Phase 1 MVP 🔮

2026-04-03 04:17:43 +00:00

README.md

init: Sigil capability registry 🔮

2026-04-03 04:08:31 +00:00

tsconfig.json

feat: implement Sigil Phase 1 MVP 🔮

2026-04-03 04:17:43 +00:00

vitest.config.ts

feat: implement Sigil Phase 1 MVP 🔮

2026-04-03 04:17:43 +00:00

wrangler.toml

fix: complete Dynamic Workers migration — all 68 tests pass — 小橘 🍊

2026-04-03 09:49:52 +00:00

README.md

Sigil 🔮

Capability registry for Uncaged — LRU-managed Cloudflare Workers with abstract backend.

What is Sigil?

Sigil is the capability virtualization layer for Uncaged. It lets AI Agents deploy, invoke, and manage serverless capabilities (Cloudflare Workers) through a unified gateway, with LRU eviction to stay within platform quotas.

Architecture

One dispatch Worker (sigil.shazhou.workers.dev) as the unified entry point
KV-backed LRU for scheduling capabilities within CF Worker quota (~400 slots)
Abstract backend interface: WorkerPool ($5/mo) or Platform ($25/mo, Workers for Platforms)
Agent isolation via naming convention ({agent}--{capability}) + per-agent tokens

Docs

License

MIT

Built by 小橘 🍊 (NEKO Team) | Part of the oc-forge ecosystem