forked from cleveragents/cleveragents-core
b0ab61134d
Implement server-mode services for multi-tenant deployments: - TokenAuthClient: SHA-256 hashed bearer-token authentication with configurable TTL, register/revoke/validate operations, and constant-time comparison for timing side-channel protection - AuthorizationService: Namespace-scoped role-based access control with viewer/member/admin/owner hierarchy and grant/revoke/check_access - NamespaceService: In-memory namespace registry with list/show/members endpoints backing _cleveragents/namespace/* A2A extension methods - HealthService: Aggregated health-check probe registry returning composite healthy/unhealthy status with per-service details - DiagnosticsService: Runtime diagnostics collector (Python version, platform, uptime, loaded modules, custom checks) - Server DB tables: server_users, server_tokens (SHA-256 hashed), namespace_acls with Alembic migration s1_001 - Facade wiring: namespace/health/diagnostics handlers dispatch to real services when registered, fall back to stubs otherwise - Behave BDD: 23 scenarios covering all services and facade wiring - Robot integration: 11 test cases with helper script ISSUES CLOSED: #927
Generic single-database configuration.