run_stop
Stop a desktop run from any client: local callers, and paired devices with decide scope. Audited as run_stop_requested.
Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Responses
Section titled “Responses”Stop requested: run.stop names who asked and request.updated is emitted; the desktop app running the command stops it (TERM, then KILL after 5 s) and reports stopped from <device>; terminated|killed. Repeating it changes nothing
object
Terminal-event destination; requires the daemon callbacks.allowlist.
object
Server-verified integration token name; caller values are overwritten.
Display-only session name; scoped rules always use the session ID.
object
object
An email draft for review. handup never sends it: on approval the agent
sends the draft (or the edited decision.fields) with its own mail tool.
object
Date shown in the header, as the agent formats it (e.g. RFC 2822).
Message body as Markdown (plain text renders as-is).
Optional HTML alternative; rendered only in the sandboxed HTML preview frame.
object
Uploaded blob hash (POST /v1/blobs) so the reviewer can open the file.
object
Request input. Only kind: question requests interpret questions;
other keys (for example raw agent tool input) pass through unchanged.
object
optional (default) or required_on_deny.
Generic form fields (text, textarea, select, boolean) for non-question requests.
Structured questions (1..=10) for kind: question; answers arrive in decision.fields.answers.
A question for the human; answered in decision.fields.answers[id].
object
Stable id, unique within the request.
Short topic chip, e.g. “Database”.
The question itself (markdown).
Allow selecting several options.
Index of the suggested option.
Allow a typed answer besides (or instead of) the options.
One selectable answer to a [Question].
object
Answer text; unique within its question and returned in selected.
One-line explanation shown under the label.
Markdown shown while the option is focused (code blocks allowed).
Optional positive duration, at most one year. Absent uses config; null/none disables expiry.
Optional limit for the desktop app’s Run of this command (e.g. 30m).
Absent uses the daemon’s run.timeout; the daemon caps it at
run.max_timeout. Not part of the request’s decision timeout.
Must be between 1ms and one year.
object
The desktop app ran the request’s command for the human: this is how it ended. Present only on approved command requests decided by Run.
object
Process exit status; absent when it never started or a signal ended it.
Last bytes of standard output (at most 64 KiB), credentials redacted.
Last bytes of standard error (at most 64 KiB), credentials redacted.
Wall time from start to exit, in milliseconds.
Earlier output was dropped from either tail.
Ran with administrator rights (pkexec on Linux, osascript on macOS).
Why it did not finish normally: timeout, cancellation, signal, or a start failure (for example pkexec missing or authentication refused).
Present while the desktop app runs the command (daemon-managed).
object
Unix milliseconds when the run was claimed.
Unix milliseconds after which an unreported run no longer holds the
request (the app crashed or lost the daemon): the run limit plus
[RunClaim::GRACE_MS].
Running with administrator rights.
The run limit in milliseconds: the request’s run_timeout, else the
daemon’s run.timeout, capped at run.max_timeout. The desktop app
stops the command when it is reached.
Unix milliseconds when a desktop run’s lease lapsed without a result (the app crashed or stopped responding); the request is decidable again. Cleared when it is run again (daemon-managed).
Remote device without decide scope, or disabled, downgraded or revoked by the time the stop commits
Not pending, or no desktop run holds the request