5437b68316
Add lib/api/routes/agents.js: list/create/get, PATCH capabilities, mint token (plaintext returned exactly once, then bcrypt-hashed), revoke token. All endpoints gated by requireOwner so an agent token can never bootstrap a new agent or grant itself capabilities. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
43 lines
1.9 KiB
JavaScript
43 lines
1.9 KiB
JavaScript
import { Router } from 'express';
|
|
import { agentOrOwner } from './middleware/agent_auth.js';
|
|
import { errorMiddleware, NotFoundError } from './errors.js';
|
|
import { router as spacesRouter } from './routes/spaces.js';
|
|
import { router as projectsRouter, spacesScopedRouter as projectsBySpaceRouter } from './routes/projects.js';
|
|
import {
|
|
router as tasksRouter,
|
|
spacesScopedRouter as tasksBySpaceRouter,
|
|
projectsScopedRouter as tasksByProjectRouter
|
|
} from './routes/tasks.js';
|
|
import { router as pagesRouter, spacesScopedRouter as pagesBySpaceRouter } from './routes/pages.js';
|
|
import { router as refsRouter } from './routes/refs.js';
|
|
import { router as resourcesRouter, spacesScopedRouter as resourcesBySpaceRouter } from './routes/resources.js';
|
|
import { router as sourceDocsRouter, resourcesScopedRouter as sourceDocsByResourceRouter } from './routes/source_docs.js';
|
|
import { router as agentsRouter, tokensRouter as agentTokensRouter } from './routes/agents.js';
|
|
|
|
export function mountApi(app) {
|
|
const api = Router();
|
|
api.use(agentOrOwner);
|
|
|
|
api.use('/spaces', spacesRouter);
|
|
api.use('/spaces/:space_id/projects', projectsBySpaceRouter);
|
|
api.use('/spaces/:space_id/tasks', tasksBySpaceRouter);
|
|
api.use('/spaces/:space_id/pages', pagesBySpaceRouter);
|
|
api.use('/spaces/:space_id/resources', resourcesBySpaceRouter);
|
|
api.use('/projects', projectsRouter);
|
|
api.use('/projects/:project_id/tasks', tasksByProjectRouter);
|
|
api.use('/tasks', tasksRouter);
|
|
api.use('/pages', pagesRouter);
|
|
api.use('/refs', refsRouter);
|
|
api.use('/resources', resourcesRouter);
|
|
api.use('/resources/:resource_id/source-docs', sourceDocsByResourceRouter);
|
|
api.use('/source-docs', sourceDocsRouter);
|
|
api.use('/agents', agentsRouter);
|
|
api.use('/agent-tokens', agentTokensRouter);
|
|
|
|
api.use((_req, _res, next) => next(new NotFoundError('route not found')));
|
|
|
|
api.use(errorMiddleware);
|
|
app.use('/api', api);
|
|
return api;
|
|
}
|