Ship and share

Approvals

Things the agent has prepared, waiting for you to say yes

On this page(6 sections)

Things waiting for your yes
Approve, edit or retry one
Reject one
Hooks waiting for your yes
Let a hook set run
Keep a hook set off without being asked again

The owner's side of the queue: posts to publish, actions to carry out. The agent writes the files directly; this is the inbox, the one call that covers approving, editing and retrying, and the deletion that is a rejection.

GET/approvalsThings waiting for your yes

Everything an agent has prepared and would like to do: posts to publish, actions to carry out. Nothing here has happened yet.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`approvals`The queue	object[]
`when kind is "post"`	shape
`platform`Where it should go	string
`content`The post itself	string
`title`A title, where the site wants…	string
`target`Where on the site: a community,…	string
`media`Anything to attach, as workspace paths	string[]
`actsAs`Whose name it acts under	string
`scheduledAt`When it should happen, in milliseconds	number
`status`Where it is: proposed by the…	"proposed" \| "approved" \| "running" \| "done" … (5)
`createdAt`When it was written, in milliseconds	number
`startedAt`When it started being carried out,…	number
`finishedAt`When it was done, in milliseconds	number
`result`What came back, when something did:…	string
`error`Why it failed, written as a…	string
`id`The approval's id	string
`when kind is "action"`	shape
`summary`What will happen, in one line:…	string
`details`The specifics, as Markdown: everything you…	string
`instructions`What to do once approved, written…	string
`actsAs`Whose name it acts under	string
`scheduledAt`When it should happen, in milliseconds	number
`status`Where it is: proposed by the…	"proposed" \| "approved" \| "running" \| "done" … (5)
`createdAt`When it was written, in milliseconds	number
`startedAt`When it started being carried out,…	number
`finishedAt`When it was done, in milliseconds	number
`result`What came back, when something did:…	string
`error`Why it failed, written as a…	string
`id`The approval's id	string
`invalid`Files that could not be read…	string[]

Try itanswered in this tab

curl

curl "$SANDBOX/approvals" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.list();

POST/approvalsApprove, edit or retry one

All three are the same act with a different field changed, so they share one call. Send the item back as you want it.

What you send

Field	Type	Where
`when kind is "post"`	shape	body
`platform`requiredWhere it should go	string	body
`content`requiredThe post itself	string	body
`title`A title, where the site wants…	string	body
`target`Where on the site: a community,…	string	body
`media`Anything to attach, as workspace paths	string[]	body
`actsAs`Whose name it acts under	string	body
`scheduledAt`When it should happen, in milliseconds	number	body
`status`Where it is: proposed by the…	"proposed" \| "approved" \| "running" \| "done" … (5)	body
`createdAt`When it was written, in milliseconds	number	body
`startedAt`When it started being carried out,…	number	body
`finishedAt`When it was done, in milliseconds	number	body
`result`What came back, when something did:…	string	body
`error`Why it failed, written as a…	string	body
`id`requiredThe approval's id	string	body
`when kind is "action"`	shape	body
`summary`requiredWhat will happen, in one line:…	string	body
`details`The specifics, as Markdown: everything you…	string	body
`instructions`requiredWhat to do once approved, written…	string	body
`actsAs`Whose name it acts under	string	body
`scheduledAt`When it should happen, in milliseconds	number	body
`status`Where it is: proposed by the…	"proposed" \| "approved" \| "running" \| "done" … (5)	body
`createdAt`When it was written, in milliseconds	number	body
`startedAt`When it started being carried out,…	number	body
`finishedAt`When it was done, in milliseconds	number	body
`result`What came back, when something did:…	string	body
`error`Why it failed, written as a…	string	body
`id`requiredThe approval's id	string	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/approvals" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"kind":"post","platform":"…","content":"export const start = () => listen(PORT);\n","title":"Update the changelog","target":"…","media":["…","…"],"actsAs":"…","scheduledAt":1,"status":"proposed","createdAt":1,"startedAt":1,"finishedAt":1,"result":"…","error":"The repository has no remote configured.","id":"a1b2c3d4"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.upsert({
  "kind": "post",
  "platform": "…",
  "content": "export const start = () => listen(PORT);\n",
  "title": "Update the changelog",
  "target": "…",
  "media": [
    "…",
    "…"
  ],
  "actsAs": "…",
  "scheduledAt": 1,
  "status": "proposed",
  "createdAt": 1,
  "startedAt": 1,
  "finishedAt": 1,
  "result": "…",
  "error": "The repository has no remote configured.",
  "id": "a1b2c3d4"
});

DELETE/approvals/{id}Reject one

Throws it away undone.

What you send

Field	Type	Where
`id`requiredWhich approval	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/approvals/a1b2c3d4" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.remove({
  "id": "a1b2c3d4"
});

GET/approvals/hooksHooks waiting for your yes

Hook sets a turn found in Claude Code's settings files, in a skill's or subagent's definition, or in a plugin the turn loads that the sandbox does not ship (its hooks and its hooks module, code that runs inside Claude Code), that nobody has approved in that exact form. Until one is approved, turns in this workspace run with every hook switched off; the sandbox's own safeguards are not hooks of this kind and keep working.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`requests`Hook sets waiting for a yes,…	object[]
`digest`The set's fingerprint: every hook as…	string
`seenAt`When a turn first found this…	number
`conversationId`The conversation whose turn found it,…	string
`hooks`Every hook in the set	object[]
`source`Whose configuration declares it: the sandbox's…	"user" \| "project" \| "plugin"
`plugin`The plugin that declares it, by…	string
`declaredIn`The skill, subagent or command whose…	string
`event`When it runs, in Claude Code's…	string
`matcher`Which tools it is limited to,…	string
`type`What kind of hook it is:…	string
`run`Exactly what it runs: the command…	string
`scripts`The files those hooks run by…	object[]
`path`A file one of the hooks…	string
`sha256`Its contents when the hooks were…	string
`plugins`The plugins whose hooks or modules…	object[]
`name`The plugin, as the sandbox lists…	string
`from`What brought it into the turn:…	"plugin" \| "extension" \| "persona" \| "skills" … (5)
`source`Which settings enable it or hold…	"user" \| "project"
`dir`Where its files were read	string
`module`Its hooks module, code that runs…	object
`path`The plugin's hooks module, as its…	string
`hooks`The moments it acts on, in…	string[]
`calls`What it reaches for while it…	string[]
`unreadable`Why the sandbox could not tell…	string
`marketplaces`Plugin marketplaces Claude Code's settings add,…	object[]
`source`Whose settings add it: the sandbox's…	"user" \| "project"
`name`The marketplace's name in those settings	string
`location`Where Claude Code fetches it from,…	string
`dismissed`Kept off on purpose: no longer…	boolean
`ledgerUnreadable`The record of what was approved…	boolean

Try itanswered in this tab

curl

curl "$SANDBOX/approvals/hooks" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.hookRequests();

POST/approvals/hooks/{digest}/approveLet a hook set run

Approves exactly this set, commands and the bytes of the files they run, plugin modules included, from the next turn on. Any later change to either is a new set and asks again. Owner and maintainers only, and never through a token a program holds.

What you send

Field	Type	Where
`digest`requiredWhich hook set, by its fingerprint	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/approvals/hooks/%E2%80%A6/approve" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.approveHooks({
  "digest": "…"
});

POST/approvals/hooks/{digest}/dismissKeep a hook set off without being asked again

Takes the set off the list. Its hooks stay switched off; a change to them is a new set, which asks again.

What you send

Field	Type	Where
`digest`requiredWhich hook set, by its fingerprint	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/approvals/hooks/%E2%80%A6/dismiss" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.approvals.dismissHooks({
  "digest": "…"
});