7 Commits

Author	SHA1	Message	Date
xingyue	2342a6e3bd	fix: login.tsx use new gateway endpoint path	2026-05-11 16:46:38 +08:00
xingyue	b783027406	fix: remove stray lockfiles + refactor gateway auth with Hono group ... - Remove root and workflow-gateway pnpm-lock.yaml (workspace mode) - Replace startsWith auth skip with Hono route group - Gateway management routes use GATEWAY_SECRET (per-route) - /api/gateway/endpoints + /api/agents/* use dashboard auth - No more global /api/* middleware with path-based exceptions	2026-05-11 15:59:42 +08:00
xingyue	93145cf08c	refactor: reorganize gateway routes under /api/ prefix (closes #178, closes #179) ... - Gateway management: /api/gateway/register, /api/gateway/endpoints - Agent proxy: /api/agents/:agent/* - /healthz stays at root (CF/k8s convention) - Skip dashboard auth for gateway register routes - Update CLI serve tunnel registration paths - Update dashboard API client paths Ref: #177	2026-05-11 15:48:13 +08:00
xiaoju	da6bcb10d6	feat(workflow): add declarative ModeratorTable type and migrate templates ... Migrate workflow-template-develop and workflow-template-solve-issue moderators to use the declarative ModeratorTable/tableToModerator pattern. Update workflow-runtime re-exports and workflow-execute engine to use renamed types. Fixes #172	2026-05-11 06:25:39 +00:00
xiaoju	d0803019b5	feat: ephemeral agent token for serve ↔ gateway auth ... - serve generates random UUID on startup - registration sends agentToken to gateway, stored in KV - gateway injects X-Agent-Token header when proxying to agent - serve rejects /api/* requests without valid token - healthz remains unauthenticated - tunnel URL is now protected — direct access returns 401 小橘 <xiaoju@shazhou.work>	2026-05-09 12:05:10 +00:00
xiaoju	3b41625001	feat: dashboard API key authentication ... - Gateway: DASHBOARD_API_KEY middleware on /endpoints and /api/* routes - Dashboard: login page with key validation, stored in localStorage - SSE: key passed as ?key= query param (EventSource can't set headers) - Sidebar: logout button to clear key Refs #169 小橘 <xiaoju@shazhou.work>	2026-05-09 11:56:25 +00:00
xiaoju	f7253d5948	feat: CF Worker API gateway with KV endpoint registry ... Phase A of #164: - Hono-based CF Worker at workflow-gateway.shazhou.workers.dev - POST /register — agent registration with shared secret - DELETE /register/:name — unregister - GET /endpoints — list online agents - GET /api/:agent/* — proxy to agent tunnel URL - KV-backed with TTL auto-expiry Ref: #164, closes #165 小橘 🍊（NEKO Team）	2026-05-09 09:48:49 +00:00