7862d22a03
Add lib/api/middleware/agent_auth.js: agentOrOwner accepts the owner token (kind=user actor) or a hashed agent token (kind=agent actor carrying capabilities + scopes). /api router now mounts this in place of ownerOnly so agent tokens become first-class. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
40 lines
1.7 KiB
JavaScript
40 lines
1.7 KiB
JavaScript
import { Router } from 'express';
|
|
import { agentOrOwner } from './middleware/agent_auth.js';
|
|
import { errorMiddleware, NotFoundError } from './errors.js';
|
|
import { router as spacesRouter } from './routes/spaces.js';
|
|
import { router as projectsRouter, spacesScopedRouter as projectsBySpaceRouter } from './routes/projects.js';
|
|
import {
|
|
router as tasksRouter,
|
|
spacesScopedRouter as tasksBySpaceRouter,
|
|
projectsScopedRouter as tasksByProjectRouter
|
|
} from './routes/tasks.js';
|
|
import { router as pagesRouter, spacesScopedRouter as pagesBySpaceRouter } from './routes/pages.js';
|
|
import { router as refsRouter } from './routes/refs.js';
|
|
import { router as resourcesRouter, spacesScopedRouter as resourcesBySpaceRouter } from './routes/resources.js';
|
|
import { router as sourceDocsRouter, resourcesScopedRouter as sourceDocsByResourceRouter } from './routes/source_docs.js';
|
|
|
|
export function mountApi(app) {
|
|
const api = Router();
|
|
api.use(agentOrOwner);
|
|
|
|
api.use('/spaces', spacesRouter);
|
|
api.use('/spaces/:space_id/projects', projectsBySpaceRouter);
|
|
api.use('/spaces/:space_id/tasks', tasksBySpaceRouter);
|
|
api.use('/spaces/:space_id/pages', pagesBySpaceRouter);
|
|
api.use('/spaces/:space_id/resources', resourcesBySpaceRouter);
|
|
api.use('/projects', projectsRouter);
|
|
api.use('/projects/:project_id/tasks', tasksByProjectRouter);
|
|
api.use('/tasks', tasksRouter);
|
|
api.use('/pages', pagesRouter);
|
|
api.use('/refs', refsRouter);
|
|
api.use('/resources', resourcesRouter);
|
|
api.use('/resources/:resource_id/source-docs', sourceDocsByResourceRouter);
|
|
api.use('/source-docs', sourceDocsRouter);
|
|
|
|
api.use((_req, _res, next) => next(new NotFoundError('route not found')));
|
|
|
|
api.use(errorMiddleware);
|
|
app.use('/api', api);
|
|
return api;
|
|
}
|