@inkeep/agents-core 0.0.0-dev-20260219040736 → 0.0.0-dev-20260219045007

package/dist/middleware/inherited-auth.js

@@ -0,0 +1,50 @@
+import { registerAuthzMeta } from "./authz-meta.js";
+import { createMiddleware } from "hono/factory";
+
+//#region src/middleware/inherited-auth.ts
+/**
+* Documentation-only permission marker for routes whose authentication
+* is already enforced by a parent `app.use()` in createApp.ts.
+*
+* This does NOT perform any auth check itself — it only registers
+* x-authz metadata so the OpenAPI spec accurately reflects the
+* auth requirement.
+*
+* Use this when the route lives under a path that already has
+* middleware applied (e.g. `/manage/tenants/*` has `manageApiKeyOrSessionAuth`).
+*/
+const inheritedAuth = (meta) => {
+	const mw = createMiddleware(async (_c, next) => {
+		await next();
+	});
+	registerAuthzMeta(mw, meta);
+	return mw;
+};
+/**
+* Marker for routes under `/manage/tenants/*` whose auth is handled
+* by `manageApiKeyOrSessionAuth()` in createApp.ts.
+*
+* No auth check runs at the route level — this is purely for OpenAPI documentation.
+*/
+const inheritedManageTenantAuth = () => inheritedAuth({
+	resource: "organization",
+	permission: "member",
+	description: "Requires organization membership. Auth is enforced by the manageApiKeyOrSessionAuth middleware in createApp.ts."
+});
+/**
+* Marker for routes under `/run/*` whose auth is handled
+* by `runApiKeyAuth()` in createApp.ts.
+*
+* No auth check runs at the route level — this is purely for OpenAPI documentation.
+*/
+const inheritedRunApiKeyAuth = () => inheritedAuth({ description: "Requires a valid API key (Bearer token). Auth is enforced by runApiKeyAuth middleware in createApp.ts." });
+/**
+* Marker for routes under `/work-apps/*` whose auth is handled
+* by `workAppsAuth()` in createApp.ts.
+*
+* No auth check runs at the route level — this is purely for OpenAPI documentation.
+*/
+const inheritedWorkAppsAuth = () => inheritedAuth({ description: "Requires work-apps authentication (OIDC token or Slack signature). Auth is enforced by workAppsAuth middleware in createApp.ts." });
+
+//#endregion
+export { inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth };

package/dist/middleware/no-auth.d.ts

@@ -0,0 +1,6 @@
+import * as hono3 from "hono";
+
+//#region src/middleware/no-auth.d.ts
+declare const noAuth: () => hono3.MiddlewareHandler<any, string, {}, Response>;
+//#endregion
+export { noAuth };

package/dist/middleware/no-auth.js

@@ -0,0 +1,11 @@
+import { createMiddleware } from "hono/factory";
+
+//#region src/middleware/no-auth.ts
+const noAuth = () => {
+	return createMiddleware(async (_c, next) => {
+		await next();
+	});
+};
+
+//#endregion
+export { noAuth };