API Routes
The API owns identity, workspaces, projects, release trust, enrollment, rooms, events, artifacts, review, revocation, audit, package security, and admin security surfaces.
Route Groups
| Group | Representative Routes |
|---|---|
| Identity | GET /identity/session, POST /identity/register/options, POST /identity/login/verify |
| OAuth | GET /identity/oauth/:provider/start, GET /identity/oauth/:provider/callback |
| Workspaces | GET /workspaces, POST /workspaces, GET /workspaces/:workspaceId |
| Rooms | GET /workspaces/:workspaceId/rooms, POST /workspaces/:workspaceId/rooms, PATCH /rooms/:roomId/policy |
| Events | POST /workspaces/:workspaceId/rooms/:roomId/events, GET /workspaces/:workspaceId/rooms/:roomId/events |
| Artifacts | POST /events/:eventId/artifacts, GET /workspaces/:workspaceId/artifacts/:artifactId/content |
| Review | GET /workspaces/:workspaceId/rooms/:roomId/review, POST /review/decisions |
| Projects | GET /projects, POST /projects, defaults, progress, decisions, handoff, scope, IDE, and scans |
| Package Security | GET /package-security/summary, GET /package-security/findings, POST /admin/package-security/scans |
| Admin | GET /admin/security, GET /admin/audit, POST /admin/revocations |
Source Material
- apps/api/src/server.ts
- apps/api/src/modules