Khala Phase 2: Agent auth middleware & admin API #127

Closed
opened 2026-04-25 04:33:41 +00:00 by tuanzi · 0 comments
Owner

Parent: #119

Objective

Bearer token auth for agents + admin routes for agent management.

Tasks

2.1 Auth Middleware

Create packages/khala/src/auth.ts:

  • Hono middleware: extract Bearer token, SHA-256 hash, lookup in agents table
  • Set agentId in context on success, 401 on failure

2.2 Admin Routes

Create packages/khala/src/routes/admin.ts:

  • POST /admin/agents — body { id, token } → hash token, insert. Protected by ADMIN_SECRET env var.
  • DELETE /admin/agents/:id — remove agent
  • GET /admin/agents — list agents (no tokens)

Wire into main app in src/index.ts.

References

  • Plan: docs/plans/2026-04-25-khala-mvp.md (Task 2.1, 2.2)
Parent: #119 ## Objective Bearer token auth for agents + admin routes for agent management. ## Tasks ### 2.1 Auth Middleware Create `packages/khala/src/auth.ts`: - Hono middleware: extract Bearer token, SHA-256 hash, lookup in `agents` table - Set `agentId` in context on success, 401 on failure ### 2.2 Admin Routes Create `packages/khala/src/routes/admin.ts`: - `POST /admin/agents` — body `{ id, token }` → hash token, insert. Protected by `ADMIN_SECRET` env var. - `DELETE /admin/agents/:id` — remove agent - `GET /admin/agents` — list agents (no tokens) Wire into main app in `src/index.ts`. ## References - Plan: `docs/plans/2026-04-25-khala-mvp.md` (Task 2.1, 2.2)
This repo is archived. You cannot comment on issues.
No Label
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: uncaged/nerve#127