Submit an inbound BYOA agent-dispatch request.

Authentication accepts an rsk API key, a requester-registration-bound OAuth agent token, a WorkOS user token, or a browser session. REG-10 is conditional: a bound registration with a public key requires all three X-Rensei-Request-* headers; a light registration without a key, an unbound rsk key, a user token, and a session do not. A strict registration without a key is misconfigured and returns 403. The public key is canonical standard base64 of the raw 32-byte Ed25519 key. The signature is canonical standard base64 of 64 bytes over the exact UTF-8 canonical-envelope JSON. Nonce replay rejection is best-effort: if Redis is unavailable, replay-cache checks fail open while signature and inclusive +/-300-second timestamp validation remain enforced.

curl -X POST "https://example.com/api/cli/dispatch" \  -H "Content-Type: application/json" \  -d '{    "project": "string",    "goal": "string"  }'

{
  "workflowId": "string",
  "instanceId": "string",
  "sessionId": "string",
  "streamUrl": "string",
  "receiptUrl": "string",
  "callbackSecret": "string"
}