auth: cut over community machine access to agent keys

crates/crank-core/src/access.rs

@@ -1,7 +1,7 @@
 use serde::{Deserialize, Serialize};
 use time::OffsetDateTime;
 
-use crate::ids::{InvitationId, PlatformApiKeyId, UserId, WorkspaceId};
+use crate::ids::{AgentId, InvitationId, PlatformApiKeyId, UserId, WorkspaceId};
 
 #[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
 #[serde(rename_all = "snake_case")]
@@ -80,6 +80,8 @@ pub struct InvitationToken {
 pub struct PlatformApiKey {
     pub id: PlatformApiKeyId,
     pub workspace_id: WorkspaceId,
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub agent_id: Option<AgentId>,
     pub name: String,
     pub prefix: String,
     pub scopes: Vec<PlatformApiKeyScope>,
@@ -96,7 +98,7 @@ mod tests {
     use time::{OffsetDateTime, format_description::well_known::Rfc3339};
 
     use super::{PlatformApiKey, PlatformApiKeyScope, PlatformApiKeyStatus, User, UserStatus};
-    use crate::ids::{PlatformApiKeyId, UserId, WorkspaceId};
+    use crate::ids::{AgentId, PlatformApiKeyId, UserId, WorkspaceId};
 
     #[test]
     fn user_serializes_created_at_as_rfc3339() {
@@ -135,6 +137,7 @@ mod tests {
         let api_key = PlatformApiKey {
             id: PlatformApiKeyId::new("pk_01"),
             workspace_id: WorkspaceId::new("ws_01"),
+            agent_id: Some(AgentId::new("agent_01")),
             name: "Primary".to_owned(),
             prefix: "crk_live".to_owned(),
             scopes: vec![PlatformApiKeyScope::Read, PlatformApiKeyScope::Write],