Vision Platform developer documentation

Base URL: https://www.lontive.com/vision-platform
Developer docs: https://www.lontive.com/vision-platform/developers/index.html
External agent guide: https://www.lontive.com/vision-platform/developers/external-agents/index.html
OpenAPI: https://www.lontive.com/vision-platform/openapi.yaml
OpenAPI V2 draft: https://www.lontive.com/vision-platform/openapi-v2-draft.yaml

Protected API notes:
- Protected /v1/* endpoints require Authorization: Bearer <token>
- Supported bearer formats include OIDC/password JWTs and Bearer vsk_<token> API keys
- Protected /v1/* endpoints require x-tenant-id
- POST operations require Idempotency-Key
- External agents operate as team-member actors
- API keys can be linked to a team member with agentMode=on_behalf_of and onBehalfOfActorId, or created as independent agents with agentMode=autonomous and agentDisplayName
- API-key actions are audit-marked with payload.actor_source.type=api_key and include key mode/owner/effective actor metadata when available
- External-agent integrations should use only these scopes: worklist.tasks.read, worklist.tasks.write, decision.requests.write, decision.requests.read
- worklist.tasks.write is for the team-member actor's own task surfaces, not leader worklist operation
- External-agent allowed endpoint profile: GET /v1/context; GET/POST /v1/my-tasks; PUT /v1/my-tasks/{id}; POST /v1/my-tasks/{id}/status; DELETE /v1/my-tasks/{id}; POST/GET /v1/decision-requests; GET /v1/decision-requests/{decisionRequestId}
- External agents should not call leader/deputy/system endpoints, /v1/external-agent-actions, kill-switch endpoints, leader worklist mutation endpoints, delegation mutation endpoints, calendar conversion or calendar booking endpoints, decision outcome endpoints, audit, compliance, metrics, billing, or tenant settings endpoints
- Calendar conversion endpoints are leader/UI or separately approved integration flows, not external-agent endpoints
- Tenant integrations are separate from external agents; do not infer tenant-integration rights from an external-agent API key
- Decision requests accept requestedDecisionType values: approve_or_reject, budget_override, policy_exception. priority_change is reserved and temporarily disabled.
- Personal task priorities are low, medium, high, critical
- On 409 version_conflict, read the task again and retry only if the intended update still matches the latest user state
- On 409 invalid_state_transition, stop and ask a human for a decision
- Protected runtime API docs are available at /vision-platform/v1/api-docs
- Public smoke endpoint: /vision-platform/health