57 lines
2.6 KiB
Markdown
57 lines
2.6 KiB
Markdown
|
---
|
||
|
|
kind: task
|
||
|
|
slug: agent-registry-api
|
||
|
|
title: Expose the shared agent catalog and private draft API
|
||
|
|
plan_slug: workspace-communications
|
||
|
|
epic_slug: agent-participation
|
||
|
|
status: ready
|
||
|
|
priority: P1
|
||
|
|
tenant_id: global
|
||
|
|
owner: unassigned
|
||
|
|
cursor_todo_id: null
|
||
|
|
updated_at: "2026-10-22"
|
||
|
|
---
|
||
|
|
|
||
|
|
# Task summary
|
||
|
|
|
||
|
|
Add one workspace-authorized tRPC registry API for catalog/detail reads and member-owned private draft persistence.
|
||
|
|
|
||
|
|
## Description
|
||
|
|
|
||
|
|
Consume the schema/contracts from `Task-agent-registry-marketplace.md`. This task owns list/detail/filter and private draft create/read/save/discard procedures; library/editor tasks consume them. AI Chat selectors, Agents builder/library, mention completion and jobs all reference the same immutable agent IDs and versions. Curated templates supply provenance, not a second installed-agent identity. Do not duplicate model routing, harness aliases, users or run records as an agent registry.
|
||
|
|
|
||
|
|
## Subtasks
|
||
|
|
|
||
|
|
- [ ] Add zod-validated, tenant-filtered catalog/detail queries for visible curated templates, installed/workspace agents and the caller's private drafts, with stable pagination.
|
||
|
|
- [ ] Add private draft create/read/save/discard with optimistic base-revision checks, immutable versions and actor audit metadata; requested tools/context access remain inert.
|
||
|
|
- [ ] Expose safe lifecycle/provenance/version/update metadata for library/selector clients without leaking another user's private drafts or restricted configuration.
|
||
|
|
- [ ] Test cross-tenant ID guessing, same-workspace draft isolation including admins/owners, stale saves, retries and handle uniqueness conflicts.
|
||
|
|
|
||
|
|
## Owner or assignee
|
||
|
|
|
||
|
|
`unassigned`
|
||
|
|
|
||
|
|
## Status
|
||
|
|
|
||
|
|
`ready` for scheduling after registry schema/contracts; not currently running.
|
||
|
|
|
||
|
|
## Estimation
|
||
|
|
|
||
|
|
`M`
|
||
|
|
|
||
|
|
## Acceptance criteria
|
||
|
|
|
||
|
|
- [ ] One registry API supports all AI and chat surfaces; clients cannot create competing agent identities.
|
||
|
|
- [ ] Only the draft owner can mutate/read their private draft; workspace admin status alone grants no private-draft access.
|
||
|
|
- [ ] Saves are concurrency-safe and never install, publish, activate, grant tools/context, or enqueue execution.
|
||
|
|
- [ ] List/detail/mention projections reveal only authorized agents and safe fields.
|
||
|
|
- [ ] `pnpm lint && pnpm type-check && pnpm test` pass.
|
||
|
|
|
||
|
|
## Links to related Epic / Plan
|
||
|
|
|
||
|
|
- Epic: [Agent participation](./Epic-agent-participation.md)
|
||
|
|
- Plan: [Workspace communications](../Plan-workspace-communications.md)
|
||
|
|
- Depends on: [Registry schema](./Task-agent-registry-marketplace.md)
|
||
|
|
- Consumers: [Library UI](./Task-agent-marketplace-library-ui.md), [Draft editor](./Task-agent-builder-editor-drafts.md)
|
||
|
|
- Separate mutations: [Install lifecycle](./Task-agent-install-lifecycle.md)
|