Allow authenticated agents to manage projects #5

Merged

backmeupplz merged 2 commits from feat/agent-project-management into main

2026-10-05 01:53:56 +00:00

backmeupplz commented

2026-10-05 01:37:45 +00:00

(Migrated from github.com)

Summary

Allow authenticated agents and humans to list/read/create/update/rename/delete projects; add kb project commands and docs.
Validate project metadata atomically, preserve ticket data on deletion, return 404 for missing projects, and support encoded names. Unrelated administrative permissions remain human-only.
Prepare version 0.1.4 and add API/auth/CLI/SSE regressions.

Agentboard ticket: https://agentboard.icefish-betta.ts.net/#40

Validation

npm ci: success, zero vulnerabilities
Syntax and git diff --check: pass
Final exact-head Node24 CI SUCCESS: https://github.com/backmeupplz/agentboard/actions/runs/37252558645 — 13/13 tests, no skips.
Parent frontend/icons 6/6 and syntax/diff checks pass. Local HTTP integration is environment-proxy restricted; full CI covers it without bypass.
Independent Astra/high review APPROVE on f0703806661dc9a6559dd9414c344da70953ac54, run b13e9486-9c40-40d6-9593-8b31e8b9bf44. Prior dot-name/CLI sentinel/ASCII-case documentation findings fixed; offline review harness passes. All review children settled.

Release follow-through

This PR is implementation only. After green exact-head review/CI and merge, publish a NEW version through the existing GitHub release → multiarch GHCR workflow, then update the managed Agentboard through MyGround preserving data/mounts/auth/config. Verify deployed version and actual authenticated project API/CLI. Only then create abs+ (repo backmeupplz/absplus), assign the 14 known ABS+ tickets plus verified additions, update workspace policy, and report in originating topic. No deployment, board project mutation, or premature workspace permission change in this PR.

## Summary - Allow authenticated agents and humans to list/read/create/update/rename/delete projects; add `kb project` commands and docs. - Validate project metadata atomically, preserve ticket data on deletion, return 404 for missing projects, and support encoded names. Unrelated administrative permissions remain human-only. - Prepare version 0.1.4 and add API/auth/CLI/SSE regressions. Agentboard ticket: https://agentboard.icefish-betta.ts.net/#40 ## Validation - npm ci: success, zero vulnerabilities - Syntax and git diff --check: pass - Final exact-head Node24 CI SUCCESS: https://github.com/backmeupplz/agentboard/actions/runs/37252558645 — 13/13 tests, no skips. - Parent frontend/icons 6/6 and syntax/diff checks pass. Local HTTP integration is environment-proxy restricted; full CI covers it without bypass. - Independent Astra/high review APPROVE on `f0703806661dc9a6559dd9414c344da70953ac54`, run `b13e9486-9c40-40d6-9593-8b31e8b9bf44`. Prior dot-name/CLI sentinel/ASCII-case documentation findings fixed; offline review harness passes. All review children settled. ## Release follow-through This PR is implementation only. After green exact-head review/CI and merge, publish a NEW version through the existing GitHub release → multiarch GHCR workflow, then update the managed Agentboard through MyGround preserving data/mounts/auth/config. Verify deployed version and actual authenticated project API/CLI. Only then create abs+ (repo backmeupplz/absplus), assign the 14 known ABS+ tickets plus verified additions, update workspace policy, and report in originating topic. No deployment, board project mutation, or premature workspace permission change in this PR.

backmeupplz commented

2026-10-05 01:48:09 +00:00

(Migrated from github.com)

Independent review: APPROVE

Head SHA: f070380666
Base: 83f28c49ee
Independent Astra/high review run b13e9486-9c40-40d6-9593-8b31e8b9bf44; configured model and high thinking verified live. No blocking findings; all prior findings fixed. Separate detached checkout, tracked files clean. Reviewer offline harness passed project validation/SQLite atomicity/ASCII NOCASE, CLI CRUD/option-shaped names/malicious options and legacy parser compatibility; icons1/1, syntax/diff checks pass. Reviewer did not run frontend due missing dependency or HTTP integration due environment proxy restriction.

Parent verification: final exact-head Node24 Test CI SUCCESS https://github.com/backmeupplz/agentboard/actions/runs/37252558645 ; downloaded logs confirm tests13/pass13/fail0/cancelled0/skipped0. Parent frontend/icons6/6, syntax and diff checks pass. Full CI covers reviewer local limitations. Main unchanged at reviewed base.

Version0.1.4 prepared, NOT released/deployed. All required child work settled.

## Independent review: APPROVE Head SHA: f0703806661dc9a6559dd9414c344da70953ac54 Base: 83f28c49eef4dc9b2b4d56fed02e759dd9970ee8 Independent Astra/high review run b13e9486-9c40-40d6-9593-8b31e8b9bf44; configured model and high thinking verified live. No blocking findings; all prior findings fixed. Separate detached checkout, tracked files clean. Reviewer offline harness passed project validation/SQLite atomicity/ASCII NOCASE, CLI CRUD/option-shaped names/malicious options and legacy parser compatibility; icons1/1, syntax/diff checks pass. Reviewer did not run frontend due missing dependency or HTTP integration due environment proxy restriction. Parent verification: final exact-head Node24 Test CI SUCCESS https://github.com/backmeupplz/agentboard/actions/runs/37252558645 ; downloaded logs confirm tests13/pass13/fail0/cancelled0/skipped0. Parent frontend/icons6/6, syntax and diff checks pass. Full CI covers reviewer local limitations. Main unchanged at reviewed base. Version0.1.4 prepared, NOT released/deployed. All required child work settled.