agentapi-proxy

agentapi-proxy

A session-based proxy server for coder/agentapi that provides process provisioning and lifecycle management for multiple agentapi server instances.

Features

• Session Management: Create and manage multiple agentapi server instances with unique session IDs
• Process Provisioning: Dynamically spawn agentapi servers on available ports
• Environment Configuration: Pass custom environment variables to agentapi server instances
• Script Support: Execute custom startup scripts (with GitHub integration support)
• Session Search: Query and filter active sessions by user ID and status
• Request Routing: Proxy requests to appropriate agentapi server instances based on session ID
• Authentication & Authorization: Role-based access control with API key management
• Session Persistence: Optional session data persistence across server restarts
• Graceful Shutdown: Proper cleanup of all running sessions on server shutdown
• Client Library: Go client for programmatic interaction with the proxy server

Architecture

The proxy acts as a reverse proxy and process manager:

1. Session Creation: /start endpoint creates new agentapi server instances
2. Request Routing: /:sessionId/* routes requests to the appropriate backend server
3. Session Discovery: /search endpoint lists and filters active sessions

Each session runs an independent agentapi server process on a unique port, allowing isolated workspaces for different users or projects.

Installation

From Source

# Clone the repository
git clone https://github.com/takutakahashi/agentapi-proxy.git
cd agentapi-proxy

# Install dependencies
make install-deps

# Build the binary
make build

Using Docker

docker pull ghcr.io/takutakahashi/agentapi-proxy:latest

Usage

Starting the Server

# Using the built binary
./bin/agentapi-proxy server

# With custom configuration
./bin/agentapi-proxy server --config config.json --port 8080 --verbose

# Using Docker
docker run -p 8080:8080 -v $(pwd)/config.json:/app/config.json ghcr.io/takutakahashi/agentapi-proxy:latest server

Command Line Options

• --port, -p: Port to listen on (default: 8080)
• --config, -c: Configuration file path (default: config.json)
• --verbose, -v: Enable verbose logging

Configuration

Configuration is managed through environment variables and Kubernetes ConfigMaps. See the Helm chart values for detailed configuration options.

API Endpoints

Session Management

Create Session

POST /start

Create a new agentapi server instance.

curl -X POST http://localhost:8080/start \
  -H "Content-Type: application/json" \
  -d '{
    "user_id": "alice",
    "environment": {
      "GITHUB_TOKEN": "your-token",
      "WORKSPACE_NAME": "my-project"
    }
  }'

Response:

{
  "session_id": "550e8400-e29b-41d4-a716-446655440000"
}

Search Sessions

GET /search

List and filter active sessions.

# List all sessions
curl http://localhost:8080/search

# Filter by user ID
curl http://localhost:8080/search?user_id=alice

# Filter by status
curl http://localhost:8080/search?status=active

Response:

{
  "sessions": [
    {
      "session_id": "550e8400-e29b-41d4-a716-446655440000",
      "user_id": "alice",
      "status": "active",
      "started_at": "2024-01-01T12:00:00Z",
      "port": 9000
    }
  ]
}

Route to Session

ANY /:sessionId/*

Route requests to the agentapi server instance for the given session.

# Forward request to session's agentapi server
curl http://localhost:8080/550e8400-e29b-41d4-a716-446655440000/api/workspaces

For detailed API documentation, see docs/api.md.

Authentication

agentapi-proxy supports flexible authentication mechanisms:

• Static API Keys: Pre-configured API keys with role-based permissions
• GitHub Token Authentication: Authenticate users via GitHub personal access tokens
• GitHub OAuth Flow: Full OAuth2 flow for web applications
• Hybrid Mode: Combine multiple authentication methods

Quick Start

Static API Keys

{
  "auth": {
    "enabled": true,
    "static": {
      "enabled": true,
      "header_name": "X-API-Key",
      "api_keys": [
        {
          "key": "your-api-key",
          "user_id": "alice",
          "role": "admin",
          "permissions": ["*"]
        }
      ]
    }
  }
}

GitHub OAuth Setup

{
  "auth": {
    "enabled": true,
    "github": {
      "enabled": true,
      "oauth": {
        "client_id": "${GITHUB_CLIENT_ID}",
        "client_secret": "${GITHUB_CLIENT_SECRET}",
        "scope": "read:user read:org"
      }
    }
  }
}

For detailed setup instructions:

• GitHub Token Authentication
• GitHub OAuth Flow
• GitHub OAuth Quick Start
• RBAC Configuration

Try the OAuth Demo

Check out the OAuth Demo Application to see GitHub OAuth in action.

Client Library

Use the Go client library for programmatic access:

package main

import (
    "context"
    "log"
    
    "github.com/takutakahashi/agentapi-proxy/pkg/client"
)

func main() {
    // Create client
    c := client.NewClient("http://localhost:8080")
    
    // Start new session
    resp, err := c.Start(context.Background(), &client.StartRequest{
        UserID: "alice",
        Environment: map[string]string{
            "GITHUB_TOKEN": "your-token",
        },
    })
    if err != nil {
        log.Fatal(err)
    }
    
    log.Printf("Created session: %s", resp.SessionID)
    
    // Search sessions
    sessions, err := c.Search(context.Background(), "alice", "active")
    if err != nil {
        log.Fatal(err)
    }
    
    log.Printf("Found %d sessions", len(sessions.Sessions))
}

Development

Prerequisites

• Go 1.23+
• golangci-lint
• coder/agentapi binary (for testing)

Building and Testing

# Format code
make gofmt

# Run linting
make lint

# Run tests
make test

# Run full CI pipeline
make ci

# Build binary
make build

# Run end-to-end tests (requires agentapi binary)
make e2e

Project Structure

├── cmd/
│   └── agentapi-proxy/     # Binary entry point
├── pkg/
│   ├── client/             # Go client library
│   ├── config/             # Configuration management
│   └── proxy/              # Core proxy server logic
│       └── scripts/        # Embedded startup scripts
├── docs/                   # Documentation
└── .github/workflows/      # CI/CD pipelines

Scripts

The proxy supports custom startup scripts for agentapi servers:

• agentapi_default.sh: Default startup script
• agentapi_with_github.sh: Script with GitHub integration

Scripts are embedded in the binary and extracted to temporary files at runtime.

Environment Variables

Sessions can receive custom environment variables:

• GITHUB_TOKEN: GitHub personal access token
• WORKSPACE_NAME: Custom workspace identifier
• DEBUG: Enable debug mode for agentapi

License

See LICENSE file for details.