mirror of
https://github.com/Memo-2023/mana-monorepo.git
synced 2026-05-23 11:46:41 +02:00
2bdb48bdd1
New Bun/Hono service on port 3068 that bundles many web-research providers behind a unified interface for side-by-side comparison. All eval runs persist in research.* (mana_platform) so quality can be reviewed later. Providers (Phase 1+2): search: searxng, duckduckgo, brave, tavily, exa, serper extract: readability (via mana-search), jina-reader, firecrawl Endpoints: POST /v1/search, /v1/search/compare — single + fan-out POST /v1/extract, /v1/extract/compare — single + fan-out GET /v1/runs, /v1/runs/:id — history POST /v1/runs/:run/results/:id/rate — manual eval GET /v1/providers, /v1/providers/health — catalog + readiness Auto-routing: when `provider` is omitted, queries are classified via regex (fast path, 0ms) with optional mana-llm fallback, then routed to the first available provider for that query type (news → tavily, academic → exa, semantic → exa, etc.). Credits: server-key calls go through mana-credits reserve → commit/refund so failed provider calls don't charge the user. BYO-keys supported via research.provider_configs (UI arrives in Phase 4). Cache: Redis with graceful degradation (1h TTL for search, 24h for extract). Pay-per-use APIs only — no subscription-gated providers. Docs: docs/plans/mana-research-service.md + docs/reports/web-research-capabilities.md Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
22 lines
658 B
TypeScript
22 lines
658 B
TypeScript
/**
|
|
* Service-to-Service Authentication Middleware
|
|
*
|
|
* Validates X-Service-Key header for backend-to-backend calls.
|
|
* Used by /internal/* routes and for calls from mana-ai.
|
|
*/
|
|
|
|
import type { MiddlewareHandler } from 'hono';
|
|
import { UnauthorizedError } from '../lib/errors';
|
|
|
|
export function serviceAuth(serviceKey: string): MiddlewareHandler {
|
|
return async (c, next) => {
|
|
const key = c.req.header('X-Service-Key');
|
|
if (!key || key !== serviceKey) {
|
|
throw new UnauthorizedError('Invalid or missing service key');
|
|
}
|
|
const appId = c.req.header('X-App-Id') || 'unknown';
|
|
c.set('appId', appId);
|
|
c.set('service', true);
|
|
await next();
|
|
};
|
|
}
|