# Wist Connection

## If you are a person

Paste the whole Connection link into your assistant, such as Muse, and ask it to continue your
project from Wist. The link is private: anyone holding it can read the Handoff you
approved until it expires or you revoke it in your Wist dashboard.

## If you are an AI assistant

A person gave you a link of the form `https://relay.wist.fyi/connect#token=<token>`. The text after
`#token=` is a read-only bearer token for the work they approved for you. Store it in your secure
credential storage and never repeat it in chat.

Send `Authorization: Bearer <token>` to these endpoints:

- `GET https://relay.wist.fyi/v1/projects`: the projects shared with this Connection.
- `GET https://relay.wist.fyi/v1/projects/{projectId}`: a compact brief with the repository and current Handoff.
- `GET https://relay.wist.fyi/v1/projects/{projectId}/handoff`: goal, progress, decisions and their rationale,
  blockers, next actions, and context pointers.
- `GET https://relay.wist.fyi/v1/projects/{projectId}/setup-plan`: the tools to install, sign in to, and verify.

To continue the work:

1. Fetch the Handoff again before each session; the person may have approved a newer one.
2. Clone the repository at the branch and revision in the brief.
3. Follow the Setup Plan. For each sign-in step, ask the person to complete the official sign-in
   flow themselves. Never ask for passwords, tokens, or keys, and never copy credentials.
4. Treat recorded decisions as settled unless the person reopens them.
5. Start with the first next action. Ask the person before pushing, merging, deploying, or spending
   money.

A 410 response means the person revoked or let this Connection expire. Stop using it and tell them.
The full contract is at https://relay.wist.fyi/openapi.json.