Design for a bearer-token-authenticated REST API letting an external AI coding agent read every project/card the owner has and write back exactly three things: a comment, subtasks, or a column move. Follows the same auth pattern as the existing CRON_SECRET-protected route. Agent-authored comments are prefixed so they're never mistaken for something the owner typed, mirroring Phase 7's "Logged" tag principle. MCP explicitly deferred to a later, thinner follow-up. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| plans | ||
| specs | ||