Replace screen surfaces settings
PUT replaces the entire screen_surfaces block (which traffic surfaces the protection card inspects). The current spec at the team scope is read; the new screen_surfaces is spliced in; the merged spec is validated; recompose is triggered. Requires Idempotency-Key and If-Match. Async fan-out — the response carries agents_flagged_for_recompose.
Authorizations
Supabase JWT token in Authorization: Bearer header
Headers
Client-supplied idempotency token. Replays within 24 hours return the stored result verbatim. See ADR-023.
1 - 128Optimistic concurrency token. Pass the ETag from a recent GET ("sha256:<hex64>" shape). A stale ETag returns 412 Precondition Failed; a missing header returns 428 Precondition Required. See RFC 9110 §13.1.1.
^"sha256:[0-9a-f]{64}"$Path Parameters
Team identifier (UUID)
Body
Response
The screen_surfaces primitive was updated at the team scope.
team protection screen_surfaces put, patch New sha256:<hex64> of the spec at this scope after the write.
x >= 0Pre-existing structural issues outside the modified primitive. Present only when the existing spec carries unrelated validation problems; never blocks the write.