@supaku/agentfactory-server 0.1.2 → 0.3.0

package/dist/src/worker-auth.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Worker Authentication Module
+ *
+ * Framework-agnostic API key verification for worker endpoints.
+ * Workers must include a valid API key in the Authorization header.
+ */
+/**
+ * Extract a Bearer token from an Authorization header value
+ *
+ * @param authHeader - The Authorization header value
+ * @returns The bearer token or null if not a valid Bearer header
+ */
+export declare function extractBearerToken(authHeader: string | null | undefined): string | null;
+/**
+ * Verify an API key against the expected key using timing-safe comparison
+ *
+ * @param providedKey - The API key from the request
+ * @param expectedKey - The expected API key (defaults to WORKER_API_KEY env var)
+ * @returns true if the key is valid
+ */
+export declare function verifyApiKey(providedKey: string, expectedKey?: string): boolean;
+/**
+ * Check if worker auth is configured
+ * (useful for development/testing where auth might be disabled)
+ *
+ * @param envVar - Environment variable name to check (default: WORKER_API_KEY)
+ */
+export declare function isWorkerAuthConfigured(envVar?: string): boolean;
+//# sourceMappingURL=worker-auth.d.ts.map

package/dist/src/worker-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-auth.d.ts","sourceRoot":"","sources":["../../src/worker-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAKvF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAiBT;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,SAAmB,GAAG,OAAO,CAEzE"}

package/dist/src/worker-auth.js

@@ -0,0 +1,49 @@
+/**
+ * Worker Authentication Module
+ *
+ * Framework-agnostic API key verification for worker endpoints.
+ * Workers must include a valid API key in the Authorization header.
+ */
+import crypto from 'crypto';
+/**
+ * Extract a Bearer token from an Authorization header value
+ *
+ * @param authHeader - The Authorization header value
+ * @returns The bearer token or null if not a valid Bearer header
+ */
+export function extractBearerToken(authHeader) {
+    if (!authHeader?.startsWith('Bearer ')) {
+        return null;
+    }
+    return authHeader.slice(7);
+}
+/**
+ * Verify an API key against the expected key using timing-safe comparison
+ *
+ * @param providedKey - The API key from the request
+ * @param expectedKey - The expected API key (defaults to WORKER_API_KEY env var)
+ * @returns true if the key is valid
+ */
+export function verifyApiKey(providedKey, expectedKey) {
+    const expected = expectedKey ?? process.env.WORKER_API_KEY;
+    if (!expected) {
+        return false;
+    }
+    // Use timing-safe comparison to prevent timing attacks
+    try {
+        return crypto.timingSafeEqual(Buffer.from(providedKey), Buffer.from(expected));
+    }
+    catch {
+        // Buffers have different lengths
+        return false;
+    }
+}
+/**
+ * Check if worker auth is configured
+ * (useful for development/testing where auth might be disabled)
+ *
+ * @param envVar - Environment variable name to check (default: WORKER_API_KEY)
+ */
+export function isWorkerAuthConfigured(envVar = 'WORKER_API_KEY') {
+    return !!process.env[envVar];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supaku/agentfactory-server",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "type": "module",
   "description": "Webhook server and distributed worker pool for AgentFactory — Redis queues, issue locks, session management",
   "author": "Supaku (https://supaku.com)",
@@ -44,8 +44,8 @@
   ],
   "dependencies": {
     "ioredis": "^5.4.2",
-    "@supaku/agentfactory": "0.1.2",
-    "@supaku/agentfactory-linear": "0.1.2"
+    "@supaku/agentfactory": "0.3.0",
+    "@supaku/agentfactory-linear": "0.3.0"
   },
   "devDependencies": {
     "@types/node": "^22.5.4",