fix: resolve user ID mismatch in agent routes for device auth flow

[vreshch]

Problem

When publishing agents via CLI using device code authentication, users receive a User not found error (500 Internal Server Error).

Root Cause

The JWT auth middleware sets req.user.userId, but all agent routes were accessing req.user.id (which is only set during OAuth callback flows).

Solution

Updated all 9 agent route files to correctly access the user ID from both authentication methods:

// Support both JWT auth (userId) and OAuth callback (id/_id)
const userId = req.user?.userId || req.user?.id || req.user?._id?.toString();

Files Changed

• Required auth routes (with proper validation):

  • publish.ts
  • delete.ts
  • update-metadata.ts

• Optional auth routes:

  • get-agent.ts
  • search.ts
  • list.ts
  • versions.ts
  • get-version.ts
  • mcp-servers.ts

Testing

• TypeScript compilation passes with no errors
• Device code auth flow now correctly resolves the user ID

[github-actions]

✅ Pull Request Validation Successful

Step Results:

• ✅ 📦 Install dependencies: true
• ✅ 🔍 Run linting: true
• ✅ 🧪 Run tests: true
• ✅ 🏗️ Build packages: true

🎉 All quality checks passed! Ready to merge.

📋 View workflow run

---

🐳 Docker Images Built Successfully!

🏷️ Tag: pr-12

• Backend: ✅ Built
• Frontend: ✅ Built

📋 View workflow

---

⏰ Generated at: 2025-11-30T22:32:48.574Z