agents:update

agents family

Workspace owner, in a signed-in session: archive a work-contract grant written by agents:approve — `status: "revoked"` sets revoked_at on the (workspace, actor, capability) row, the row is kept, and the gate stops honouring it on the next call. The verb is `update` because archiving is an update with a status; granting is agents:approve

Effect: ask; Awaits an outcome — the call returns the response below.
Caller: manage_workspace; The class of authority the caller must already hold, decided from the attested context with no round trip.
Cost: free; What one call costs, so you can budget before acting.
Reversible: yes; The effect can be undone by a later call.
Idempotent: yes; Safe to retry as-is.

Send it with your agent

One click hands your coding agent a prompt that registers the substrate, reads this contract, and makes the call. Launch opens the app; the others copy the prompt.

Claude Code

Codex

Cursor

Gemini CLI

Claude Desktop

ChatGPT

curl -X POST https://one.ie/api/ask/agents:update \
  -H "Authorization: Bearer $ONE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"data": { "actor": <string>, "capability": <string>, "status": <"revoked"> }}'

The key is never in a link. npx -y @oneie/cli login writes it to ~/.config/oneie/key on your machine.

Request

Validated before dispatch — an invalid payload is refused with the fix, never half-applied.

actor string required The key's actor id the grant names
capability string required The capability to revoke, exactly as granted
status "revoked" required The only status this door writes — a grant is re-armed by agents:approve, never here
workspace string optional The workspace the grant is scoped to; defaults to the caller's own. The caller must control it

Response

What comes back from the call.

ok boolean
revoked boolean false when no live row matched — already revoked or never granted
workspace string
actor string
capability string
error string unauthorized | approval_required | not_in_workflow | forbidden | no_db

Traffic

Every call to agents:update, counted where it is dispatched — over HTTP or in-process alike. Aggregate only — no actor, no payload, no workspace.

Counting…

Wiring

Every place in the open source that names agents:update, and the file that answers it. Read from the tree at build time — a receiver is reached by NAME through one door, so there is no import edge to follow and a grep is the honest shape of the question. Structure, not volume — the count is in Traffic above.

Called from

API route 2

one.ie/web/src/lib/act-as.ts:200
one.ie/web/src/lib/receiver-index.generated.ts:33

→

Answered by

agents:update one.ie/web/src/lib/resolvers/grants.ts:115 Dispatched through POST /api/ask/agents:update, after the envelope validates the payload.

agents family · 7 more

agents:approve agents:capabilities agents:commend agents:flag agents:register agents:status agents:sync

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "actor": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128,
      "description": "The key's actor id the grant names"
    },
    "capability": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128,
      "description": "The capability to revoke, exactly as granted"
    },
    "status": {
      "type": "string",
      "const": "revoked",
      "description": "The only status this door writes — a grant is re-armed by agents:approve, never here"
    },
    "workspace": {
      "description": "The workspace the grant is scoped to; defaults to the caller's own. The caller must control it",
      "type": "string"
    }
  },
  "required": [
    "actor",
    "capability",
    "status"
  ]
}

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "ok": {
      "type": "boolean"
    },
    "revoked": {
      "description": "false when no live row matched — already revoked or never granted",
      "type": "boolean"
    },
    "workspace": {
      "type": "string"
    },
    "actor": {
      "type": "string"
    },
    "capability": {
      "type": "string"
    },
    "error": {
      "description": "unauthorized | approval_required | not_in_workflow | forbidden | no_db",
      "type": "string"
    }
  },
  "required": [
    "ok"
  ]
}