Bezel API api_auth_workspace_model
internal prototype · canonical JSON + Dreamborn Forge HTML
internal generated
api_auth_workspace_model · supabase_json

Bezel API api_auth_workspace_model

api_auth_workspace_model artifact · for Bezel API · status draft

Artifact Shape
  • invariant: Every API request resolves a workspace from human session, selected workspace, or workspace-scoped API key. Object IDs are never trusted on their own.
  • separation: Human sessions administer workspaces and create API keys. Agents claim tasks with scoped runtime API keys.
  • api key scopes: 4 items
  • tenant boundary: workspace
  • api key endpoint: POST /workspaces/:workspaceId/api-keys
  • workspace contains: 12 items
  • human auth endpoints: 5 items