Line

/api/processes

6 routes under /api/processes.

Cockpit server REST reference, v0.9.

All routes sit below the Cockpit server's session gate (app.use('/api', auth.requireSession)) except /api/health. Generated from the real route table in ui/server/src.

GET /api/processes#

Source: ui/server/src/processesApi.mjs.

GET /api/processes/:id#

Parameter In Type
id path —

Source: ui/server/src/processesApi.mjs.

POST /api/processes/:id/:verb#

Mutating: POST only. The verb is looked up in a closed list; the machine then decides whether it is legal for the process's current state.

Parameter In Type
id path —
verb path —

Source: ui/server/src/processesApi.mjs.

POST /api/processes/:id/decide#

Decide is a mutating POST, ONE decision on ONE file per request (there is deliberately no bulk form). by is the signed-in login from the server-side session (req.session, set by auth.requireSession), or the fixed "local" when authentication is off on loopback. It is never read from the body, the query or a header. If the session gate did not run (req.session undefined) this refuses rather than guesses. diffSha256 is passed through exactly as the client echoed it and is never computed here.

Parameter In Type
id path —
diffSha256 body —
path body —
verdict body —

Source: ui/server/src/processesApi.mjs.

GET /api/processes/:id/diff#

Parameter In Type
id path —
path query —

Source: ui/server/src/processesApi.mjs.

GET /api/processes/:id/review#

the approval gate. Review is a read-only GET.

Parameter In Type
id path —

Source: ui/server/src/processesApi.mjs.