diff --git a/src/tracker/ws/handler.py b/src/tracker/ws/handler.py
index 829d0f0..8e839e1 100644
--- a/src/tracker/ws/handler.py
+++ b/src/tracker/ws/handler.py
@@ -28,7 +28,13 @@ async def websocket_endpoint(ws: WebSocket, client_type: str = "human", client_i
 
             event = msg.get("event")
 
-            if event == "agent.heartbeat":
+            if event == "auth":
+                # Agent auth — for now accept any token, send auth.ok
+                token = msg.get("token", "")
+                logger.info("WS auth from %s, token=%s...", ws_id, token[:8] if token else "none")
+                await manager.send(ws_id, "auth.ok", {"init": {}})
+
+            elif event == "agent.heartbeat":
                 await manager.send(ws_id, "agent.heartbeat.ack", {})
 
             elif event == "chat.send":