Model
Presets are not versioned: a palette is a small immutable list, so “editing” is delete + recreate.
Scope & auth
Every route is workspace-scoped (workspace scope group) and org-isolated — presets are shared by all agents in the org but never leak across orgs. Both cookie-session and API-key callers are supported; for cookie sessions the org is re-checked against the caller’s active workspace on each request.
Endpoints
Limits
- Up to 100 presets per workspace (enforced atomically, so concurrent creates can’t exceed it).
- A duplicate name returns 409 Conflict.