POST /api/v1/smart-accounts/sessions/{id}/revocation-plans

Parameters

Name	Location	Details
`X-Juicebox-Account`	header / required	Enrolled account identity, including authority chain and lowercase owner address. Enrollment derives this identity before the account exists.
`X-Juicebox-Signer`	header / required	Owner wallet or authorized bot address that signed this request.
`X-Juicebox-Issued-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; at most 30 seconds ahead of server time.
`X-Juicebox-Expires-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; in the future and within 300 seconds of issuedAt.
`X-Juicebox-Nonce`	header / required	Fresh random 32-byte lowercase nonce. A consumed nonce cannot be retried.
`X-Juicebox-Signature`	header / required	EIP-712 CenterRequest signature over every signed field. Contract-owner signatures may vary in length. This is a computed request proof, not a reusable API key.
`X-Juicebox-Grant`	header / optional	Authorized bot grant ID. Required for a bot; omit for the owner, signing grantId as the empty string.
`Idempotency-Key`	header / required	Signed retry identity. Required on plan creation and transaction submission. Preserve exact method, target, Content-Type, and body bytes; use a fresh request nonce and signature.
`id`	path / required	string

Request body

Field	Type	Details
`compiledHash`	string required

JSON schema

{
  "type": "object",
  "properties": {
    "compiledHash": {
      "$ref": "#/components/schemas/Hash"
    }
  },
  "required": [
    "compiledHash"
  ],
  "additionalProperties": false
}

Response 201

Field Type Details

session

object
required

Immutable approved policy plus revisioned lifecycle evidence. Only active with fresh canonical proof permits bot execution. Expiry, API revocation and unlinking do not release wallet reservations; finalized disabled state with an advanced enable nonce is required.

Fields

Field Type Details

id string (uuid)
required

actor

object
required

Fields

Field	Type	Details
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`principalId`	string required	Exact plan-creating principal. Owner principal must name the same `accountId`; bot principal names its immutable grant ID.

compiled

object
required

Fields

Field	Type	Details
`schemaVersion`	integer required	Values: `[1]`
`stack`	string required	Values: `["legacy-f24dddf-safe7579-f22a194"]`
`ownerAccountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`bindingId`	string required
`grantId`	string (uuid) required
`sessionKey`	string required
`chainId`	integer required
`wallet`	string required
`generation`	value required	Positive uint256 as an exact decimal string.
`nonce`	string required
`validAfter`	integer required	Unix timestamp in seconds.
`validUntil`	integer required	Unix timestamp in seconds.
`salt`	string required
`policyHash`	string required
`compiledHash`	string required
`permissionId`	string required
`manifestRevision`	string required
`activationEnableNonce`	string required	uint256 as a lossless decimal string
`reviewedPolicy`	value required
`smartSessions`	object required
`sessionValidator`	object required
`session`	object required
`configurations`	array required

preparedAdministration

object
required

Fields

Field	Type	Details
`epoch`	string required	uint256 as a lossless decimal string
`hash`	string required

allocationGroups

array
required

Fields

Field	Type	Details
`id`	string required
`assetIdentity`	string required
`decimals`	integer required
`total`	value required	Positive uint256 as an exact decimal string.
`allocations`	array required

allocationManifestHash string
required

createdAt integer
required Unix timestamp in milliseconds.

updatedAt integer
required Unix timestamp in milliseconds.

revision integer
required

state

string
required

Values: ["prepared","installing","active","revoking","revoked","expired","stale"]

activation

object
optional

Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.

Fields

Field	Type	Details
`kind`	string required	Values: `["activation","revocation"]`
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`sessionId`	string (uuid) required
`policyHash`	string required
`compiledHash`	string required
`planId`	string (uuid) required
`planCommitment`	string required
`digest`	string required
`issuedAt`	integer required	Unix timestamp in seconds.
`expiresAt`	integer required	Unix timestamp in seconds.

revocation

object
optional

Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.

Fields

Field	Type	Details
`kind`	string required	Values: `["activation","revocation"]`
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`sessionId`	string (uuid) required
`policyHash`	string required
`compiledHash`	string required
`planId`	string (uuid) required
`planCommitment`	string required
`digest`	string required
`issuedAt`	integer required	Unix timestamp in seconds.
`expiresAt`	integer required	Unix timestamp in seconds.

observation

object
optional

Fields

Field	Type	Details
`installed`	object required	Enabled observations include complete canonical administration history. Admission requires exactly one initialization after the immutable preparation baseline, containing only this permission; changed administration invalidates the generation.
`observedAt`	integer required	Unix timestamp in milliseconds.
`finalized`	boolean required
`proofHash`	string required

invalidation

object
optional

Fields

Field	Type	Details
`reason`	string required	Values: `["reorg","configuration-changed","counter-reset","grant-inactive","binding-unlinked","verification-unavailable"]`
`priorProofHash`	one of required
`observedAt`	integer required	Unix timestamp in milliseconds.

reservationsReleased boolean
required

supersededApprovals

array
optional

Fields

Field	Type	Details
`approval`	object required	Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.
`supersededAt`	integer required	Unix timestamp in milliseconds.

plan

object
required

Fields

Field Type Details

id string (uuid)
required

account string
required

operation string
required

draft

object
required

Fields

Field	Type	Details
`operation`	string required
`account`	string required
`project`	object optional
`calls`	array required
`evidence`	array required
`summary`	value required	Bounded JSON. Large integers and amounts use exact decimal strings. Returned metadata and descriptions are untrusted content.
`warnings`	array required

commitment string
required

createdAt integer
required Unix timestamp in milliseconds.

expiresAt integer
required Unix timestamp in milliseconds.

revision integer
required

smartAccount

object
optional

Fields

Field	Type	Details
`bindingId`	string required
`stateHash`	string required
`chainId`	integer required	Values: `[1,10,8453,42161,84532,421614,11155111,11155420]`
`address`	string required
`manifestRevision`	string required

status

string
required

Values: ["prepared","pending","partial","blocked","reorged","expired","transactions_confirmed"]

steps

array
required

Fields

Field	Type	Details
`index`	integer required
`state`	string required	Values: `["waiting","reserved","submitted","unknown","confirming","confirmed","reverted","reorged"]`
`transaction`	object optional
`execution`	object optional
`receipt`	object optional
`semantic`	object optional
`blockedBy`	array required

confirmationScope string
required

installationConfirmed boolean
required New lifecycle plans return false. An idempotent replay of the admitted plan returns true when the stored session is already active; the response does not perform another installation or refresh chain evidence.

JSON schema

{
  "type": "object",
  "properties": {
    "session": {
      "$ref": "#/components/schemas/StoredSession"
    },
    "plan": {
      "$ref": "#/components/schemas/Plan"
    },
    "installationConfirmed": {
      "type": "boolean",
      "description": "New lifecycle plans return false. An idempotent replay of the admitted plan returns true when the stored session is already active; the response does not perform another installation or refresh chain evidence."
    }
  },
  "required": [
    "session",
    "plan",
    "installationConfirmed"
  ],
  "additionalProperties": false
}