feat(agents): Add identity and soul template fields to board creation

backend/app/api/agents.py

@@ -208,7 +208,9 @@ async def create_agent(
         )
     session.commit()
     try:
-        await send_provisioning_message(agent, board, raw_token, provision_token)
+        await send_provisioning_message(
+            agent, board, raw_token, provision_token, auth.user
+        )
         record_activity(
             session,
             event_type="agent.provision.requested",
@@ -288,7 +290,9 @@ async def update_agent(
     session.commit()
     session.refresh(agent)
     try:
-        await send_update_message(agent, board, raw_token, provision_token)
+        await send_update_message(
+            agent, board, raw_token, provision_token, auth.user
+        )
         record_activity(
             session,
             event_type="agent.update.requested",
@@ -375,7 +379,9 @@ async def heartbeat_or_create_agent(
             )
         session.commit()
         try:
-            await send_provisioning_message(agent, board, raw_token, provision_token)
+            await send_provisioning_message(
+                agent, board, raw_token, provision_token, actor.user
+            )
             record_activity(
                 session,
                 event_type="agent.provision.requested",
@@ -405,7 +411,9 @@ async def heartbeat_or_create_agent(
         try:
             board = _require_board(session, str(agent.board_id) if agent.board_id else None)
             config = _require_gateway_config(board)
-            await send_provisioning_message(agent, board, raw_token, provision_token)
+            await send_provisioning_message(
+                agent, board, raw_token, provision_token, actor.user
+            )
             record_activity(
                 session,
                 event_type="agent.provision.requested",

backend/app/api/boards.py

@@ -101,6 +101,10 @@ def create_board(
     data = payload.model_dump()
     if data.get("gateway_token") == "":
         data["gateway_token"] = None
+    if data.get("identity_template") == "":
+        data["identity_template"] = None
+    if data.get("soul_template") == "":
+        data["soul_template"] = None
     if data.get("gateway_url"):
         if not data.get("gateway_main_session_key"):
             raise HTTPException(
@@ -137,6 +141,10 @@ def update_board(
     updates = payload.model_dump(exclude_unset=True)
     if updates.get("gateway_token") == "":
         updates["gateway_token"] = None
+    if updates.get("identity_template") == "":
+        updates["identity_template"] = None
+    if updates.get("soul_template") == "":
+        updates["soul_template"] = None
     for key, value in updates.items():
         setattr(board, key, value)
     if board.gateway_url:

backend/app/api/tasks.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 from datetime import datetime
 from uuid import UUID
 
-from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi import APIRouter, Depends, HTTPException, Query, status
 from sqlalchemy import asc, desc
 from sqlmodel import Session, col, select
 
@@ -70,11 +70,26 @@ def has_valid_recent_comment(
 
 @router.get("", response_model=list[TaskRead])
 def list_tasks(
+    status_filter: str | None = Query(default=None, alias="status"),
+    assigned_agent_id: UUID | None = None,
+    unassigned: bool | None = None,
+    limit: int | None = Query(default=None, ge=1, le=200),
     board: Board = Depends(get_board_or_404),
     session: Session = Depends(get_session),
     actor: ActorContext = Depends(require_admin_or_agent),
 ) -> list[Task]:
-    return list(session.exec(select(Task).where(Task.board_id == board.id)))
+    statement = select(Task).where(Task.board_id == board.id)
+    if status_filter:
+        statuses = [s.strip() for s in status_filter.split(",") if s.strip()]
+        if statuses:
+            statement = statement.where(col(Task.status).in_(statuses))
+    if assigned_agent_id is not None:
+        statement = statement.where(col(Task.assigned_agent_id) == assigned_agent_id)
+    if unassigned:
+        statement = statement.where(col(Task.assigned_agent_id).is_(None))
+    if limit is not None:
+        statement = statement.limit(limit)
+    return list(session.exec(statement))
 
 
 @router.post("", response_model=TaskRead)

backend/app/api/users.py

@@ -0,0 +1,36 @@
+from __future__ import annotations
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlmodel import Session
+
+from app.core.auth import AuthContext, get_auth_context
+from app.db.session import get_session
+from app.models.users import User
+from app.schemas.users import UserRead, UserUpdate
+
+router = APIRouter(prefix="/users", tags=["users"])
+
+
+@router.get("/me", response_model=UserRead)
+async def get_me(auth: AuthContext = Depends(get_auth_context)) -> UserRead:
+    if auth.actor_type != "user" or auth.user is None:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED)
+    return UserRead.model_validate(auth.user)
+
+
+@router.patch("/me", response_model=UserRead)
+async def update_me(
+    payload: UserUpdate,
+    session: Session = Depends(get_session),
+    auth: AuthContext = Depends(get_auth_context),
+) -> UserRead:
+    if auth.actor_type != "user" or auth.user is None:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED)
+    updates = payload.model_dump(exclude_unset=True)
+    user: User = auth.user
+    for key, value in updates.items():
+        setattr(user, key, value)
+    session.add(user)
+    session.commit()
+    session.refresh(user)
+    return UserRead.model_validate(user)