identity.app.set-dev-emails

Replace the dev-mode end-user email allowlist on an identity app

Replace the dev-mode end-user email allowlist on an identity app.

Inputs:

• actor, organization_uuid (required)
• identity_app_uuid: the app (required)
• dev_allowed_emails: list of email addresses, at most 5. Pass [] to clear the allowlist.

Outputs: identity_app_uuid, dev_allowed_emails, previous_dev_allowed_emails, effective (always True — reachable only for a dev-mode app), mode

Overview

Property	Value
Workflow type	Atomic
Library	App-identity
Version	1.0

Input Schema

Field	Type	Required	Default	Description
actor	string	Yes	—	Identity of the caller making this change (for audit).
organization_uuid	uuid	Yes	—	Organization that owns the identity app.
identity_app_uuid	uuid	Yes	—	The identity app whose dev-mode email allowlist is being replaced.
dev_allowed_emails	list	Yes	—	New dev-mode allowlist, at most 5 email addresses; pass [] to clear it.

Output Schema

Field	Type	Required	Default	Description
identity_app_uuid	uuid	Yes	—	The identity app whose dev-mode email allowlist was replaced.
dev_allowed_emails	list	Yes	—	The dev-mode allowlist now in effect.
previous_dev_allowed_emails	list	No	—	The allowlist that was in effect before this call.
effective	boolean	No	—	Whether the allowlist governs sign-in now (always true here, since a live app is rejected before mutation).
mode	string	No	—	The app's lifecycle mode (dev/live) at the time of this call.
failure_reason	string	No	—	Human-readable explanation when the change fails.
failure_type	string	No	—	Stable category for a failure.
failed_action	string	No	—	Action that failed while setting the dev-mode allowlist.
failed_at_state	string	No	—	Workflow state in which the change failed.
reason	string	No	—	Optional caller-supplied reason surfaced on the fail transition.

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "identity.app.set-dev-emails",
  "initial_data": {
    "actor": "value",
    "organization_uuid": "value",
    "identity_app_uuid": "value",
    "dev_allowed_emails": "value"
  }
}