Function POST

web/src/app/api/agents/publish/route.ts:40–356

(request: NextRequest)

}

export async function POST(request: NextRequest) {
  try {
    // Parse request body
    const body = await request.json()
    const parseResult = publishAgentsRequestSchema.safeParse(body)
    if (!parseResult.success) {
      const errorMessages = parseResult.error.issues.map((issue) => {
        const path = issue.path.length > 0 ? `${issue.path.join('.')}: ` : ''
        return `${path}${issue.message}`
      })

      return NextResponse.json(
        {
          error: 'Invalid request body',
          details: errorMessages.join('; '),
          validationErrors: parseResult.error.issues,
        },
        { status: 400 },
      )
    }

    // DEPRECATED: authToken in body is for backwards compatibility with older CLI versions.
    // New clients should use the Authorization header instead.
    const {
      data,
      authToken: bodyAuthToken,
      allLocalAgentIds,
    } = parseResult.data
    const agentDefinitions = data

    // Prefer Authorization header, fall back to body authToken for backwards compatibility
    const authToken = extractApiKeyFromHeader(request) ?? bodyAuthToken

    // First use validateAgents to convert to DynamicAgentTemplate types
    const agentMap = agentDefinitions.reduce(
      (acc: Record<string, any>, agent: any) => {
        acc[agent.id] = agent
        return acc
      },
      {} as Record<string, any>,
    )

    const { validationErrors, dynamicTemplates } =
      await validateAgentsWithSpawnableAgents({
        agentTemplates: agentMap,
        allLocalAgentIds,
        logger,
      })
    const agents = Object.values(dynamicTemplates)

    if (validationErrors.length > 0) {
      const errorDetails = validationErrors.map((err) => err.message).join('\n')

      return NextResponse.json(
        {
          error: 'Agent config validation failed',
          details: errorDetails,
          validationErrors,