Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

aasm approvals

Manage human-in-the-loop approval requests — list pending actions, approve or reject them, and watch for new requests in real time.

Synopsis

aasm approvals <SUBCOMMAND> [OPTIONS]
SubcommandPurpose
listList pending (or resolved) approval requests.
getShow details of one request.
approveApprove a pending action.
rejectReject a pending action.
watchWatch for new approval requests over WebSocket.

All subcommands accept the global options.


aasm approvals list

List approval requests as a colored table. The TIMEOUT_IN column is color-coded (red < 60s, yellow 60–180s, green > 180s).

FlagTypeDefaultDescription
--output <FORMAT>table | json | yamlglobal defaultPer-command output override.
--status <STATUS>pending | approved | rejectedpendingFilter by lifecycle status. Resolved history is bounded (default cap 1000).
--agent <AGENT>stringFilter to approvals submitted by this agent ID (exact match).
aasm approvals list --status pending
ID        AGENT      ACTION        CONDITION       SUBMITTED_AT          TIMEOUT_IN
ap-77     a1b2c3…    file_write    /etc/hosts      2026-06-09T14:01:00Z  2m 30s

aasm approvals get

Show details of a single pending approval request.

NameTypeDefaultDescription
<ID>string (arg)Approval request ID to look up.
--output <FORMAT>table | json | yamlglobal defaultPer-command output override.
aasm approvals get ap-77

aasm approvals approve

Approve a pending action.

NameTypeDefaultDescription
<ID>string (arg)Approval request ID to approve.
--reason <REASON>stringOptional reason. May also be supplied on piped stdin.
aasm approvals approve ap-77 --reason "verified safe"
Approved ap-77.

aasm approvals reject

Reject a pending action. A reason is required in non-interactive mode (supply --reason or pipe it on stdin).

NameTypeDefaultDescription
<ID>string (arg)Approval request ID to reject.
--reason <REASON>stringrequired (non-interactive)Reason for rejection. May also be piped on stdin.
aasm approvals reject ap-77 --reason "writes outside allowed path"
Rejected ap-77.

aasm approvals watch

Watch for new approval requests in real time over the gateway WebSocket events endpoint (filtered to approval events).

FlagTypeDefaultDescription
-i, --interactiveflagoffEnable interactive mode with keyboard shortcuts (a=approve, r=reject, q=quit; arrow keys navigate).
aasm approvals watch --interactive
▶ ap-78  a1b2c3…  network_egress  api.openai.com   3m 00s
  a approve   r reject   ↑/↓ select   q quit

Last updated: 2026-06-11 by Chisanan232