root 5437b68316 feat(api): agents routes + token mgmt (owner-only) ...

Add lib/api/routes/agents.js: list/create/get, PATCH capabilities,
mint token (plaintext returned exactly once, then bcrypt-hashed),
revoke token. All endpoints gated by requireOwner so an agent token
can never bootstrap a new agent or grant itself capabilities.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-31 21:05:42 +10:00

..

agent_auth.test.js

feat(api): agent bearer auth middleware

2026-05-31 20:59:29 +10:00

agents.test.js

feat(api): agents routes + token mgmt (owner-only)

2026-05-31 21:05:42 +10:00

capability_routes.test.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

errors.test.js

feat(api): error + validate + pagination plumbing

2026-05-31 16:37:06 +10:00

helpers.js

feat(api): error + validate + pagination plumbing

2026-05-31 16:37:06 +10:00

pages.test.js

feat(api): pages routes + revisions + backlinks

2026-05-31 20:48:58 +10:00

projects.test.js

feat(api): projects routes

2026-05-31 16:39:31 +10:00

refs.test.js

feat(api): refs routes

2026-05-31 20:50:38 +10:00

resources.test.js

feat(api): resources routes + dependencies + change history

2026-05-31 20:53:10 +10:00

source_docs.test.js

feat(api): source-docs routes

2026-05-31 20:56:00 +10:00

spaces.test.js

feat(api): spaces routes

2026-05-31 16:38:23 +10:00

tasks.test.js

feat(api): tasks routes

2026-05-31 20:46:39 +10:00

validate.test.js

feat(api): error + validate + pagination plumbing

2026-05-31 16:37:06 +10:00