feat: Agent runtime token system — Phase 1 (token CRUD)

[chubes4]

Summary

• Adds per-agent bearer tokens for runtime authentication — the foundation for agent-level service accounts in WordPress
• Phase 1 of issue Consider agent-level runtime authentication #740: token CRUD (create, revoke, list). Phase 2 (auth middleware + capability ceiling) will follow
• 2 new files, 3 modified — 994 lines added

Why This Matters

This sets the foundation for "every user on a site can have their own AI agent":

WordPress User (human)
    │
    │  owns
    │
Agent (service account)
    ├── bearer token → Kimaki, CI, REST clients authenticate AS this agent
    ├── capability set → subset of owner's WP capabilities (Phase 2)
    ├── tool policy → which tools this agent can use (already built)
    └── scoped resources → pipelines, flows, jobs (already built)

Token Design

• Format: datamachine_{agent_slug}_{64_random_hex_chars}
• Storage: SHA-256 hash in DB (raw token returned once on creation, never stored)
• Table: datamachine_agent_tokens with token_hash UNIQUE index for O(1) lookups
• Features: labels, optional capability restrictions, optional expiry, last_used_at tracking

New Surfaces

CLI

# Create a token for an agent
wp datamachine agents token create chubes-bot --label="kimaki-prod"

# Create with 90-day expiry
wp datamachine agents token create chubes-bot --label="ci" --expires-in=7776000

# Create with restricted capabilities
wp datamachine agents token create chubes-bot --capabilities='["datamachine_chat"]'

# List tokens (metadata only — never shows the token value)
wp datamachine agents token list chubes-bot

# Revoke a token (immediate invalidation)
wp datamachine agents token revoke chubes-bot 3

REST API

Method	Endpoint	Description
POST	/agents/{id}/tokens	Create token
GET	/agents/{id}/tokens	List tokens
DELETE	/agents/{id}/tokens/{token_id}	Revoke token

Abilities

Ability	Access Level
datamachine/create-agent-token	Agent admin
datamachine/revoke-agent-token	Agent admin
datamachine/list-agent-tokens	Agent operator+

Phase 2 (Next PR)

• AgentAuthMiddleware: hooks rest_authentication_errors, resolves bearer token → agent context
• PermissionHelper::set_agent_context(): sets acting agent + capability ceiling
• Capability ceiling enforcement: agent caps ∩ owner caps

Closes

Partially addresses #740 (Phase 1 of multi-phase implementation)

[github-actions]

Homeboy Results — data-machine

Lint

⚡ Scope: changed files only

✅ lint (changed files only)

Test

⚡ Scope: changed files only

✅ test (changed files only)

Audit

⚡ Scope: changed files only

✅ audit (changed files only)

Tooling versions

• Homeboy CLI: homeboy 0.81.1+05cb2742
• Extension: wordpress from https://github.com/Extra-Chill/homeboy-extensions
• Extension revision: unknown
• Action: Extra-Chill/homeboy-action@v1

---

Homeboy Action v1