Poll for a pending plugin verb invocation
The daemon polls this endpoint to pick up plugin verb invocations queued by workflow engine steps. Returns the oldest pending invocation for the daemon's org/project scope, atomically marking it as in-flight. Returns `{ invocationId: null }` when the queue is empty or the daemon lost a race. Auth: `Bearer rsk_*` via `getCliOrSessionAuth` OR runtime JWT (`authenticateDaemon`).
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Response Body
application/json
application/json
curl -X GET "https://example.com/api/daemon/plugin-verbs/poll"{
"invocationId": null
}{
"error": "Session not found"
}Acknowledge Donmai's durable privileged-verification claim
Runtime-JWT-only, receiver-bound CAS for `rensei.verify.run`. The strict JSON body is limited to 4096 bytes. This is the only transition from reservation (`delivered`) to durable local claim (`claimed`); replays return retained duplicate receipt bytes and changed authority conflicts.
Post plugin verb invocation result
Called by the daemon after executing a polled plugin verb invocation. Ordinary local-bridge results keep the existing resume behavior. `rensei.verify.run` is a strict runtime-JWT-only branch (maximum 2 MiB) requiring `X-Rensei-Claim-Acknowledgement-Receipt-Sha256`; it settles canonical result bytes and returns Donmai acknowledgement authority but never resumes the workflow. Positive continuation occurs only at acknowledgement confirmation. Duplicate settlements are replay-safe and conflict on changed stable bytes.