Operator agent

Operator agent: ask the operator to run one of the console’s acts

For the operator's agent credential (a personal token flagged by the installation's operator, see cloud/docs/ops-contract.md); every other caller receives 404 NOT_FOUND. Writes a proposal and nothing else: the operator approves or rejects it at the console (consoleUrl), and only an approval runs the act. One open proposal per act and target: a repeat supersedes the earlier one (supersededId). 400 for a body the act does not take, a missing target id, or an act that cannot apply to the target as it is (a credential already revoked, a request already past new or already new, a person with no live session, a workspace already in or out of suspension, a suspension date the act would refuse), naming the reason; 404 for a target that does not exist. Accepts Idempotency-Key.

post/api/operator/proposals

Request

  • Base URL: https://tre-app.com
  • URL: https://tre-app.com/api/operator/proposals
  • Auth: HTTP bearer

Headers

Idempotency-Keystring

Opaque 1–200 character key. The same user, endpoint, and key replay the cached response for 24 hours when the request body fingerprint matches. A reused key with a different body answers 422 IDEMPOTENCY_KEY_REUSED; the same key while the original is still in flight answers 409 CONFLICT.

Request body

action'access_request.invited' | 'access_request.declined' | 'access_request.reopened' | 'token.revoked' | 'grant.revoked' | 'sessions.revoked' | 'workspace.suspended' | 'workspace.suspension_lifted' required
accountIdstring uuid
subjectUserIdstring uuid
targetIdstring uuid
reasonCode'customer_request' | 'data_subject_request' | 'security_incident' | 'acceptable_use' | 'payment_dispute' | 'housekeeping' required
referencestring
rationalestring required
payloadobject
expiresInDaysinteger

Response

Success

proposalIdstring uuid required
status'open' | 'approved' | 'rejected' | 'expired' | 'superseded' required
supersededIdstring uuid nullable required
consoleUrlstring required

Changes

No recorded changes to this operation across all 1 revision of this API.