root 5437b68316 feat(api): agents routes + token mgmt (owner-only) ...

Add lib/api/routes/agents.js: list/create/get, PATCH capabilities,
mint token (plaintext returned exactly once, then bcrypt-hashed),
revoke token. All endpoints gated by requireOwner so an agent token
can never bootstrap a new agent or grant itself capabilities.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-31 21:05:42 +10:00

2.8 KiB

Raw Blame History

View Raw