Append an immutable configured HarnessConnection revision.
Creates a connection or moves its current revision pointer with optimistic concurrency. `configuration.orgId` must equal the authenticated organization; a mismatch is refused, never rewritten. Same-revision/same-content retries are idempotent (`created: false`); same-revision/different-content and stale expected revisions return 409. Requires org-admin (human) or an unfenced credential holding `harness:write`/`*` (machine).
AuthorizationBearer <rsk_live_*>Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
application/json- body
configuration*expectedPreviousRevision*|1 <= length <= 256The durable configured revision.
application/json- response
created*booleanconfigurationDigest*string^[0-9a-f]{64}$connection*curl -X POST 'https://app.rensei.ai/api/cli/harness/connections' \ -H 'Content-Type: application/json' \ -d '{ "configuration": { "ref": { "id": "string", "revision": "string" }, "orgId": "string", "displayName": "string", "harness": { "id": "string", "version": "string" }, "endpoint": { "id": "string", "protocol": "string", "operator": "string", "revision": "string" }, "authBinding": { "id": "string", "mechanism": "api_key", "commercialMode": "usage_billed", "authority": "string", "bindingScope": "process", "portability": "portable", "delivery": "environment" }, "placement": { "allowed": [ { "id": "string", "kind": "host", "resolution": "exact" } ], "affinity": "exact_host" }, "lifecycle": "configured" }, "expectedPreviousRevision": "string"}'{ "created": true, "configurationDigest": "string", "connection": { "id": "string", "revision": "string", "lifecycle": "configured" }}Resolve workflow-admitted revision-pinned headless launch selections.
Read-only project/workflow preflight for non-browser dispatch clients. Returns exact harness and Agent Card refs emitted by the canonical launch-options producer; callers submit one launchSelection verbatim and never author revisions. Exactly one candidate carries isResolvedDefault when the assignment cascade (workflow node -> project workType -> project default -> org workType -> org default -> system), walked at the same site the runtime uses including the authorizing agent.invoke node of this admitted workflow, names a viable winner among the listed harness candidates; resolvedDefault repeats it with the tier that chose it. A client given no explicit model profile submits that candidate. Candidate order is NOT authority: when resolvedDefault is null, resolvedDefaultReason says why and the client must refuse rather than pick.
Grant a configured HarnessConnection to one project.
Binds a live connection to a live project in the authenticated organization. The project is resolved by id or slug WITHIN that organization, so a cross-tenant project reference 404s. Re-submitting an identical grant id and tuple is idempotent; re-using the id for a different tuple is a 409. Requires org-admin (human) or an unfenced credential holding `harness:write`/`*` (machine).