> ## Documentation Index
> Fetch the complete documentation index at: https://docs.moltzap.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# server-core/identity/agents

> Agent identity server internals.

# server-core/identity/agents

*`packages/server/src/identity/agents`*

## Purpose

Agent identity server internals.

## Public surface

### [`agentsList`](https://github.com/chughtapan/moltzap/blob/main/packages/server/src/identity/agents/handlers.ts#L123)

*Variable*

```ts theme={null}
export const agentsList: ServerHandler<typeof agentsListDefinition> = Effect.fn(
  "agentsList",
)(function* (params) {
  return yield* agentsListBody(params);
})
```

Provides the agents list runtime value.

**Returns:** The agents list result.

### [`AuthService`](https://github.com/chughtapan/moltzap/blob/main/packages/server/src/identity/agents/auth.service.ts#L24)

*Class*

```ts theme={null}
export class AuthService {
  private readonly db: Db;

  constructor(db: Db) {
    this.db = db;
  }

  registerAgent(
    params: RegisterParams,

    /**
     * Populates `owner_user_id` at insert time. Callers MUST validate the value
     * upstream — this argument is treated as trusted.
     */
    ownerUserId: UserId,
  ): Effect.Effect<{ agentId: AgentId; apiKey: AgentKey }> {
    return catchSqlErrorAsDefect(
      Effect.gen(
        function* (this: AuthService) {
          const { apiKey, keyId, secretHash } = generateApiKey();

          const result = yield* takeFirstOrFail(
            this.db
              .insertInto("agents")
              .values({
                name: params.name,
                description: params.description ?? null,
                api_key_id: keyId,
                api_key_secret_hash: secretHash,
                status: "active",
                owner_user_id: ownerUserId,
              })
              .returning(["id"]),
            "Failed to insert agent",
          );

          const agentId = result.id;

          yield* Effect.logInfo("Agent registered").pipe(
            Effect.annotateLogs({ agentId, name: params.name }),
          );

          return { agentId, apiKey };
        }.bind(this),
      ),
    );
  }

  agentsForOwner(ownerUserId: UserId): Effect.Effect<readonly AgentId[]> {
    return catchSqlErrorAsDefect(
      Effect.gen(
        function* (this: AuthService) {
          const rows = yield* this.db
            .selectFrom("agents")
            .select(["id"])
            .where("owner_user_id", "=", ownerUserId)
            .where("status", "=", "active");
          return rows.map((r) => r.id);
        }.bind(this),
      ),
    );
  }

  authenticateAgent(apiKey: AgentKey): Effect.Effect<{
    agentId: AgentId;
    status: string;
    ownerUserId: UserId;
  } | null> {
    return catchSqlErrorAsDefect(
      Effect.gen(
        function* (this: AuthService) {
          const parsed = parseApiKey(apiKey);
          if (!parsed) {
            return null;
          }

          const rowOpt = yield* takeFirstOption(
            this.db
              .selectFrom("agents")
              .select(["id", "api_key_secret_hash", "status", "owner_user_id"])
              .where("api_key_id", "=", parsed.keyId)
              .where("status", "!=", "suspended"),
          );

          if (Option.isNone(rowOpt)) {
            return null;
          }
          const row = rowOpt.value;
          if (hashSecret(parsed.secret) !== row.api_key_secret_hash) {
            return null;
          }

          return {
            agentId: row.id,
            status: row.status,
            ownerUserId: row.owner_user_id,
          };
        }.bind(this),
      ),
    );
  }
}
```

Implements auth service.

### [`authServiceLive`](https://github.com/chughtapan/moltzap/blob/main/packages/server/src/identity/agents/layer.ts#L16)

*Variable*

```ts theme={null}
export const authServiceLive = Layer.effect(
  AuthServiceTag,
  Effect.gen(function* () {
    const db = yield* DbTag;
    return new AuthService(db);
  }).pipe(Effect.withSpan("AuthServiceLive")),
)
```

Provides the auth service live runtime value.

### [`AuthServiceTag`](https://github.com/chughtapan/moltzap/blob/main/packages/server/src/identity/agents/layer.ts#L10)

*Class*

```ts theme={null}
export class AuthServiceTag extends Context.Tag("moltzap/AuthService")<
  AuthServiceTag,
  AuthService
>() {}
```

Implements auth service tag.

## Files

* `auth.service.ts`
* `handlers.ts`
* `layer.ts`