Dave 1c57d2290d docs(spec): Phase 8 — agent API ... Design for a bearer-token-authenticated REST API letting an external AI coding agent read every project/card the owner has and write back exactly three things: a comment, subtasks, or a column move. Follows the same auth pattern as the existing CRON_SECRET-protected route. Agent-authored comments are prefixed so they're never mistaken for something the owner typed, mirroring Phase 7's "Logged" tag principle. MCP explicitly deferred to a later, thinner follow-up. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-09-25 22:14:24 +02:00
..
superpowers	docs(spec): Phase 8 — agent API	2026-09-25 22:14:24 +02:00