{ "what": "boringtool", "workspaces": "every route below but /auth, WS /rpc and /pair is under /w// — a name like acme, or ~: a person's Home, made with them the first time they call or sign in, they its member and admin. A workspace answers only who has an active principal there — its members, and the external members of its spaces; where a space is open to every person (person:*), whoever reaches the workspace with no principal there is given one at that first request, as an external member. To anyone else, as for a name the directory does not have, it is the same 404 before the door. Past it, a call is made in the space of what it touches — the thing its input names, the install its ref names, or the space a create names as space_id — and answered only to that space's members; one that touches none is made at the workspace level, for any principal here; a list answers what the caller reaches. workspace.create makes one", "routes": { "POST /auth/start": "{ email } — a 6-digit sign-in code for that address, mailed, and { ok: true } whatever the address; where handles are taken on trust, { ok: true, code } and no mail, the code null when none is given", "POST /auth/verify": "{ email, code, handle? } — the person, and the session cookie, for 30 days; the first time, { handle_needed: true }, until a handle is sent with the code: it names the person and their Home", "POST /auth/logout": "{} — this browser's session ended, and its cookie cleared", "GET /w/:workspace/tools": "the catalog: builtin and installed, one shape", "POST /w/:workspace/rpc": "{ tool, input, secrets?, call_id? } — one tool call, made in that workspace, in the space of what it touches; a body naming a space beside the input is refused. Each `secrets` entry is { name, path }, naming a vault secret of a space you are in and where its {{secret:…}} sits in the input. Answers { stage, output | error, call_id } — or 202 { stage: \"pending\", call_id, waiting } when it has not answered yet: send it again with that call_id to read the answer", "WS /rpc": "one connection per caller — ?principal=, ?token=&workspace=, bound to that workspace, or the session cookie, for as long as the token or the session stands. { id, workspace, persona?, tool, input, call_id? } — a call made in the workspace the frame names, in the space of what it touches, under a persona of yours there if it names one; progress comes back as { id, ref, emit }, and every answer as { id, stage, status, … }, a call that waits answered later on the same id. { id, workspace, tool, input, follow: true } on a read whose changes can be watched (tool.list marks them followable) answers, then sends { id, changed: true } whenever the answer may have changed — read it again — until { id, stage: \"canceled\", status: 409, error }; { id, unfollow: true } stops one. \"ping\" answers \"pong\"", "POST /w/:workspace/codemode": "{ code, call?, uses? } — the same tools, from code; a thin adapter over the `code.run` tool, a workspace-level call: each call its code makes is made in the space of what it touches. ?call_id= makes it a put, as call_id does on /rpc", "GET /w/:workspace/view/:artifact_id": "the file browser at the pinned version, read through the door as artifact.get — in the artifact's space, to its members; ?version= another version; ?preview=