ControlPlane

Merge a duplicate principal into the current one

Consolidate a duplicate principal (source) into the one this session belongs to (target). Possession proof of BOTH sides: this session with a fresh passkey step-up (principal.merge; the action-bound elevation binds to source_principal_id), plus a live source-session token authenticated within the last 10 minutes. Phase 1 requires an authority-empty source (no active org memberships, project grants, or siwx authenticators). Atomically re-points active authenticators + verified emails to the target, revokes the source's sessions (revoked_reason=merged), disables the source with merge traceability, and writes a principal.merge audit row in the same transaction.

post/agent/v1/control-plane/merge

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/agent/v1/control-plane/merge
  • Auth: none declared

Request body

source_session_tokenstring required

A live control-plane session token for the principal being merged (sign in to it, then pass its token here).

source_principal_idstring

The source principal id the step-up elevation was bound to; must match the token's principal.

Response

Merged { status, source_principal_id, moved, revoked_source_sessions, note }

object required

Changes

No recorded changes to this operation across all 1 revision of this API.