Workspaces, Projects, and Teams

Why it exists

The three boundaries

Object	Owns	Why it matters
Workspace	People, policy, runtime settings, API keys, projects, teams, agents, and workspace-level Concierge permissions.	It is the security and operations boundary. Do not mix credentials or agent scope across workspaces.
Project	A product or delivery stream, linked repositories, default branch, workdir hints, product owner, and active workflow context.	It stops agents from working in a blank pool and gives PRs, epics, and evidence a place to land.
Team	A role-based roster of agents and humans assigned to one or more projects.	It routes analyst, implementer, reviewer, PO, and backup work without manually selecting an agent every time.

Creation order

Create objects in this order

Create or select a workspace. Confirm you are in the right workspace before changing settings, Concierge permissions, runtime config, or credentials.
Create the project. Give it a stable name, short code, description, optional workdir, and optional product owner.
Add repository sources. Link the GitHub repo or project repo record before handing work to implementation agents.
Create the team. Name it for the workflow purpose, not for another operator's reused roster.
Assign the team to the project. A team can serve several projects, but a PR-specific roster should be tied to the PR project that owns that workflow.
Spawn agents into that team and project. Use unique names, ports, workdirs, and models so agent context does not collide.

API

Create projects and teams through the API

Create a project

curl -X POST "$MIDFLEET_HUB_URL/api/v1/workspaces/$MIDFLEET_WORKSPACE/projects" \
 -H "Authorization: Bearer $MIDFLEET_PARTICIPANT_TOKEN" \
 -H "content-type: application/json" \
 -d '{
 "name": "CLI Audit",
 "code": "CLI",
 "description": "CLI audit and gap closure",
 "workdir": "/srv/agents/midfleet/projects/cli"
 }'

Create a team

curl -X POST "$MIDFLEET_HUB_URL/api/v1/workspaces/$MIDFLEET_WORKSPACE/teams" \
 -H "Authorization: Bearer $MIDFLEET_PARTICIPANT_TOKEN" \
 -H "content-type: application/json" \
 -d '{
 "name": "CLI Workflow Roster",
 "description": "Analyst, implementer, reviewer, and PO agents"
 }'

curl -X POST "$MIDFLEET_HUB_URL/api/v1/projects/$PROJECT_ID/teams" \
 -H "Authorization: Bearer $MIDFLEET_PARTICIPANT_TOKEN" \
 -H "content-type: application/json" \
 -d "{\"team_id\":\"$TEAM_ID\"}"

Codes must be unique inside a workspace.

If project creation returns a duplicate-code error, choose a new code instead of reusing another project's identity.

Workspace settings

Workspace settings control what Concierge and agents are allowed to do

Workspace settings are not just preferences. They decide whether Concierge can list projects, list teams, spawn agents, create handoffs, or request project/team creation. If a setting is enabled in the UI but still cannot be saved, verify the signed-in participant has workspace admin permission and that the settings route is not rendering a read-only slice.