Records a person's approval of the setup command text whose SHA-256 is posted, and refuses with 409 when the stored text no longer has that hash.

POST

/v1/m/sessions/workspaces/{ref}/setup-command/approve

curl --request POST \
  --url https://example.com/v1/m/sessions/workspaces/example/setup-command/approve \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "sha256": "example" }'

• this engine

Records a person’s approval of the setup command text whose SHA-256 is posted, and refuses with 409 when the stored text no longer has that hash.

Authorizations

• bearerAuth
• browserSession

Parameters

Path Parameters

ref

required

string

Path parameter ref.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

sha256

required

SHA-256 of the exact command text reviewed. Refused with 409 if the stored text has changed.

string

/^[0-9a-f]{64}$/

Example ^generated

{
  "sha256": "example"
}

Responses

200

Registered folder, exact setup text, last approval as evidence, and setup_approved, true only while that approval covers the current text

Media type application/json

object

setup_approval

object

actor

required

string

at

required

string format: date-time

sha256

required

string

/^[0-9a-f]{64}$/

setup_approved

boolean

setup_command

string

setup_command_sha256

string

Example ^generated

{
  "setup_approval": {
    "actor": "example",
    "at": "2026-04-15T12:00:00Z",
    "sha256": "example"
  },
  "setup_approved": true,
  "setup_command": "example",
  "setup_command_sha256": "example"
}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

The setup command changed or is empty; review its current text and hash

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}