Autonomy policy endpoints

These endpoints read and write the settings described in Autonomy policy.

Get the account policy#

GET /developer/account/policy

{
  "scope": "account",
  "scope_id": "a41e…",
  "version": 0,          // 0 = nothing saved yet; these are the safe defaults
  "policy": { "force_push": "ask", "delivery_mode": "preserve_only", … },
  "updated_at": null
}

Replace the account policy#

PUT /developer/account/policy

Send all twelve fields. Omit expected_version on the first write; afterwards, send the version you last received.

{
  "policy": {
    "force_push": "deny",
    "run_tests_before_claim": true,
    "package_installs": "ask",
    "network": "ask",
    "destructive_actions": "ask",
    "production_credentials": "deny",
    "delivery_mode": "draft_pr",
    "unverified_delivery": "preserve_only",
    "deployment": "deny",
    "autonomy_ceiling": "draft_pr",
    "nightly_backlog_sweep": false,
    "show_execution_rationale": true
  },
  "expected_version": 1
}

Errors: 409 when the version is stale, 422 when a value is invalid — including run_tests_before_claim: false.

Repository overrides#

GET /developer/account/repositories/{repository_id}/policy

PUT /developer/account/repositories/{repository_id}/policy

An override is sparse: it holds only the fields the repository changes. The response shows both the override and the merged result.

{
  "repository_id": "9c2d…",
  "override": {
    "scope": "repository",
    "version": 2,
    "policy": { "delivery_mode": "draft_pr" }   // only what this repo changes
  },
  "effective": {
    "scope": "effective",
    "policy": { /* complete, merged with the account policy */ }
  }
}

Present effective as what will apply, and override as what this repository changes. override is null when the repository inherits everything.

To write an override, send only the fields to change:

{ "policy": { "package_installs": "allow" }, "expected_version": 2 }

Errors: 404 for an unknown repository, 409 for a stale version, 422 for an invalid value.