Issue daemon auth tokens (mdt_) on pairing session claim, bound to workspace_id + daemon_id with 1-year expiry. Add DaemonAuth middleware that validates these tokens and falls back to JWT/PAT for backward compatibility. Apply middleware to all daemon routes except pairing endpoints. |
||
|---|---|---|
| .. | ||
| agent | ||
| db | ||
| protocol | ||
| redact | ||