feat: add agent publishing foundation

apps/admin-api/src/app.rs

@@ -5,6 +5,10 @@ use axum::{
 
 use crate::{
     routes::{
+        agents::{
+            create_agent, get_agent, get_agent_version, list_agents, publish_agent,
+            save_agent_bindings,
+        },
         auth_profiles::{create_auth_profile, get_auth_profile, list_auth_profiles},
         operations::{
             create_operation, create_version, export_operation, generate_draft, get_operation,
@@ -57,6 +61,14 @@ pub fn build_app(state: AppState) -> Router {
             post(generate_draft),
         )
         .route("/operations/{operation_id}/export", get(export_operation))
+        .route("/agents", get(list_agents).post(create_agent))
+        .route("/agents/{agent_id}", get(get_agent))
+        .route(
+            "/agents/{agent_id}/versions/{version}",
+            get(get_agent_version),
+        )
+        .route("/agents/{agent_id}/bindings", post(save_agent_bindings))
+        .route("/agents/{agent_id}/publish", post(publish_agent))
         .route(
             "/auth-profiles",
             get(list_auth_profiles).post(create_auth_profile),
@@ -170,6 +182,86 @@ mod tests {
         assert_eq!(test_run["response_preview"]["id"], "lead_123");
     }
 
+    #[tokio::test]
+    async fn creates_binds_and_publishes_agent() {
+        let registry = test_registry().await;
+        let storage_root = test_storage_root("agent_lifecycle");
+        let upstream_base_url = spawn_upstream_server().await;
+        let base_url = spawn_admin_api(build_test_app(registry, storage_root)).await;
+        let client = reqwest::Client::new();
+
+        let operation = client
+            .post(format!("{base_url}/operations"))
+            .json(&test_operation_payload(
+                &upstream_base_url,
+                "crm_create_lead_agent",
+            ))
+            .send()
+            .await
+            .unwrap()
+            .json::<Value>()
+            .await
+            .unwrap();
+        let operation_id = operation["operation_id"].as_str().unwrap().to_owned();
+
+        client
+            .post(format!("{base_url}/operations/{operation_id}/publish"))
+            .json(&json!({ "version": 1 }))
+            .send()
+            .await
+            .unwrap();
+
+        let agent = client
+            .post(format!("{base_url}/agents"))
+            .json(&json!({
+                "slug": "sales-assistant",
+                "display_name": "Sales Assistant",
+                "description": "Curated sales toolset",
+                "instructions": {},
+                "tool_selection_policy": {}
+            }))
+            .send()
+            .await
+            .unwrap()
+            .json::<Value>()
+            .await
+            .unwrap();
+        let agent_id = agent["agent_id"].as_str().unwrap().to_owned();
+
+        let bindings = client
+            .post(format!("{base_url}/agents/{agent_id}/bindings"))
+            .json(&json!([
+                {
+                    "operation_id": operation_id,
+                    "operation_version": 1,
+                    "tool_name": "crm_create_lead_agent",
+                    "tool_title": "Create Lead",
+                    "enabled": true
+                }
+            ]))
+            .send()
+            .await
+            .unwrap()
+            .json::<Value>()
+            .await
+            .unwrap();
+        let published = client
+            .post(format!("{base_url}/agents/{agent_id}/publish"))
+            .json(&json!({ "version": 1 }))
+            .send()
+            .await
+            .unwrap()
+            .json::<Value>()
+            .await
+            .unwrap();
+
+        assert_eq!(
+            bindings["bindings"][0]["tool_name"],
+            "crm_create_lead_agent"
+        );
+        assert_eq!(published["published_version"], 1);
+    }
+
     #[tokio::test]
     async fn creates_publishes_and_tests_graphql_operation() {
         let registry = test_registry().await;