Design for a bearer-token-authenticated REST API letting an external AI coding agent read every project/card the owner has and write back exactly three things: a comment, subtasks, or a column move. Follows the same auth pattern as the existing CRON_SECRET-protected route. Agent-authored comments are prefixed so they're never mistaken for something the owner typed, mirroring Phase 7's "Logged" tag principle. MCP explicitly deferred to a later, thinner follow-up. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 2026-09-16-client-board-phase-1-design.md | ||
| 2026-09-16-phase-2-commit-ingestion-and-dashboard-design.md | ||
| 2026-09-16-phase-3-ai-humanisation-design.md | ||
| 2026-09-16-phase-4-client-intake-wizard-design.md | ||
| 2026-09-17-phase-5-planning-and-roadmap-design.md | ||
| 2026-09-17-phase-6-navigation-and-project-kind-design.md | ||
| 2026-09-19-phase-7-logged-work-entries-design.md | ||
| 2026-09-21-phase-8-public-intake-pwa-and-project-context-design.md | ||
| 2026-09-21-phase-9-per-client-intake-links-and-project-picker-design.md | ||
| 2026-09-21-phase-10-gantt-plan-redesign-design.md | ||
| 2026-09-25-phase-8-agent-api-design.md | ||