api_auth_workspace_model · supabase_json
Bezel API api_auth_workspace_model
api_auth_workspace_model artifact · for Bezel API · status draft
Agent Handoff
Start Here
api_auth_workspace_model artifact · for Bezel API · status draft
Completion Evidence
No explicit evidence field yet. Require tests, screenshots, linked PRs, or reviewed outputs before marking complete.
Artifact Shape
- invariant: Every API request resolves a workspace from human session, selected workspace, or workspace-scoped API key. Object IDs are never trusted on their own.
- separation: Human sessions administer workspaces and create API keys. Agents claim tasks with scoped runtime API keys.
- api key scopes: 4 items
- tenant boundary: workspace
- api key endpoint: POST /workspaces/:workspaceId/api-keys
- workspace contains: 12 items
- human auth endpoints: 5 items
Structured Payload
Machine-readable source fields
invariant
Every API request resolves a workspace from human session, selected workspace, or workspace-scoped API key. Object IDs are never trusted on their own.
separation
Human sessions administer workspaces and create API keys. Agents claim tasks with scoped runtime API keys.
api key scopes
- workspace:admin
- agent:runtime
- receipt:read
- usage:read
tenant boundary
workspace
api key endpoint
POST /workspaces/:workspaceId/api-keys
workspace contains
- members
- API keys
- agents
- roles
- role topics
- queues
- tasks
- claims
- workflows
- events
- receipts
- usage credits
human auth endpoints
- POST /auth/accounts
- POST /auth/login
- POST /auth/logout
- POST /auth/password/reset
- GET /auth/session