Skip to main content

​
Authentication

Add per-request authentication via the auth callback in expose(): 
const api = network.expose(
  registerSSEStream({
    channel: 'client',
    triggerEvents: [userRequestEvent],
    auth: async (req) => {
      const token = req.request?.headers?.get?.('authorization');
      if (!token || !isValid(token)) {
        return { allowed: false, message: 'Invalid token', status: 401 };
      }
      return { allowed: true };
    },
  }),
);
When auth fails, the adapter returns the appropriate HTTP status (e.g. 401) and message.

​
Authorization (Tenant/User Context)

Pass user or tenant context into the payload using onRequest: 
const api = network.expose(
  registerSSEStream({
    channel: 'client',
    triggerEvents: [userRequestEvent],
    onRequest: async ({ emitStartEvent, req, payload }) => {
      const user = await getUserFromRequest(req);
      if (!user) {
        return; // or throw / return error
      }
      emitStartEvent({
        contextId: req.contextId ?? crypto.randomUUID(),
        runId: req.runId ?? crypto.randomUUID(),
        event: userRequestEvent.make({
          ...payload,
          userId: user.id,
          tenantId: user.tenantId,
        }),
      });
    },
  }),
);
Your events should include userId and/or tenantId in their schema so agents can scope work correctly.

​
Multi-Tenant Agent Selection

For dynamic agent creation per tenant, use the spawner: 
spawner(AgentFactory)
  .listen(main, spawnEvent)
  .registry({ analyst: analystFactory, writer: writerFactory })
  .defaultBinding(({ kind }) => ({
    subscribe: ['main'],
    publishTo: ['client'],
  }))
  .onSpawn(({ kind, factory, payload, spawn }) => {
    const agent = factory.produce(payload.params);
    spawn(agent);
    return agent;
  });
The spawn event can carry tenantId or userId; onSpawn can select the right factory and params per tenant. See AgentNetwork API for spawner details and IO + Adapters for onRequest.