WorkspaceConfirmation

A consequence the gateway computed, and the token that proves it was shown.

The caller presents sessions (S13), and if the person accepts it sends confirmation straight back in a [WorkspaceLifecycleRequest]. The token is bound to this workspace, this action and this list, and it is spent by being used - so an acceptance is provably about the consequence that was on screen rather than one the caller says it displayed. ADR-267 recorded this as the recommendation; SP-8b's dialog is the round trip it was waiting for.

It is still not a credential. workspace.destroy is what authorizes the operation; this only says which question was answered. A token nobody can guess is not the point - a caller holding the scope could always mint its own before - the point is that the gateway and the dialog agree about what was accepted.

Type object

Shape

Field	Type	Description
confirmationrequired	string
workspacerequired	string
actionrequired	WorkspaceLifecycleAction	What `POST /v1/workspaces/{id}/lifecycle` is being asked to do. Three verbs, and no permanent delete. There is no purge route anywhere in Koru - the retention sweep is the only thing that removes bytes - so naming one here would be describing an operation that does not exist.
sessionsrequired	array of WorkspaceSessionConsequence	The terminals this action would close, in the order the operation would close them. Empty for `restore`, which closes nothing.
expires_atrequired	integer (int64)	When this token stops being accepted, in epoch milliseconds. A dialog left open past it asks again rather than sending something stale.

Example

{
  "confirmation": "string",
  "workspace": "string",
  "action": "archive",
  "sessions": [
    {
      "id": "string",
      "display_name": "string",
      "working_directory": "string"
    }
  ],
  "expires_at": 0
}

The contract has no example values, so example bodies are generated from each schema: every field is shown with a placeholder of its type.

Used by

POST/v1/workspaces/{id}/lifecycle/confirmation
Compute what an action would close, and issue the token that proves it was shown

Generated from contract version 1. Last updated November 12, 2026.