Policies and approvals

Scope policies:write (workspace key). Registers a policy document. workspaceId comes from your key.

curl -s -X POST https://api.zanora.dev/v1/policies -H "x-api-key: $WKEY" \
  -H 'content-type: application/json' -d '{"document":"approval:\n  price > 5"}'
# → {"policies":[{"id":"pol_…","policyType":"approval","enabled":true,…}]}

A document with several sections becomes several policies. A line that can't be parsed rejects the whole document with 400.

Scope policies:read. Your workspace's policies, including disabled ones: { policies }.

Scope policies:write. Stops applying a policy from the next purchase. No body. Returns { policy }.

Scope policies:write. Starts applying it again. No body.

Scope approvals:read. Your workspace's approval requests: { approvals }. Filter with ?status=pending (or approved, denied).

{ "approvals": [{ "id": "apr_…", "agentId": "invoice-bot", "walletId": "wal_…", "capabilityId": "cap_…",
  "amountMinor": "1200", "currency": "USD", "rule": "price > 5", "status": "pending", "createdAt": "…" }] }

Scope approvals:write. Approves the request. Body is optional: { resolvedBy? }. The approval covers one later purchase by that wallet of that capability, at up to the approved amount.

Scope approvals:write. Denies it. Body is optional: { resolvedBy? }.