root 7862d22a03 feat(api): agent bearer auth middleware ...

Add lib/api/middleware/agent_auth.js: agentOrOwner accepts the owner
token (kind=user actor) or a hashed agent token (kind=agent actor
carrying capabilities + scopes). /api router now mounts this in place
of ownerOnly so agent tokens become first-class.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-31 20:59:29 +10:00

1.7 KiB

Raw Blame History

View Raw