Outcome
Set a positive absolute-delta review threshold or null to disable it for future movement creation. This initializes workspace settings; it does not change past reviews or defer stock contributions.
Before you start
- Verify the authenticated identity, exact environment and pinned approved organization context before preparing an action.
- The published application permission is workspace:write. Discover a granted Inventory workspace and bind that exact resource. Supplied identifiers do not grant access.
- Authorize the documented inventory, review, import, notification, metering, privacy or archival effects before CLI --confirm or MCP confirm:true.
Discover the target
topolo whoami --json
topolo actions get app_topolo_inventory.settings.movement_review.update --detail --json
topolo resources topolo-inventory --json
topolo workspaces list topolo-inventory --json
- Select the exact granted workspace id as INVENTORY_WORKSPACE_ID. Fixture ids authorize no live operation.
Request
PATCH /api/settings/movement-review
Save action input as payload.json. Inspect the plan for the exact path, query and body. Set INVENTORY_WORKSPACE_ID from granted resource discovery.
Inspect and test this action in the signed action console, then perform the verification below.
Input fields
| Field | Required | Type | Constraints |
|---|---|---|---|
threshold | Required | See exact schema | A positive number or null. Review is required at equality as well as above; null disables future review requirements.; {} |
View the complete input schema in the action console. The same schema is available through CLI and MCP action discovery.
Effects
- Initializes the authorized workspace identity mirror and upserts one settings row with updating user and time.
- Future movements require review when absolute delta is at or above the positive threshold; null disables that requirement. Existing movement statuses and quantities are unchanged.
Interpret the response
No settings or workspace id is returned. The target is the separately verified workspace binding, and settings contains threshold and updatedAt.
Check settings.threshold exactly matches the requested number or null and retain updatedAt. No settings read action is published. A subsequent movement response demonstrates its own reviewStatus; do not create a movement solely as a destructive verification probe.
The success schema was checked against captured handler responses. Delegated Auth profile and canonical widget context fields can vary; exact Inventory projections and all six raw SQL export stores are source-reviewed. Error examples retain their actual refusal shapes.
View the complete success schema in the action console. The worked examples below retain complete captured responses; action discovery supplies the exact schema.
Worked examples
Captured exported Worker responses use both real local SQLite D1 databases with all six committed migrations, synthetic Auth/workspace grants and simulated Notify/Nexus/archive transport. They prove local handler shapes and scoped behavior, not live authorization, notification delivery, metering acceptance or environment deployment. Large 100-row list/capped-dashboard captures are retained in local evidence; committed tests verify those limits while worked guides use smaller complete responses. Refused examples demonstrate boundaries and must not be executed as successful workflows.
Successful request
Actual exported Worker response with both local SQLite D1 databases and all committed migrations; synthetic Auth/grants and simulated Notify/Nexus/archive transport. No live delivery, billing or environment deployment proof. Captured scenario: disable future review requirement.
Input · payload.json:
{
"threshold": null
}
CLI:
topolo actions validate app_topolo_inventory.settings.movement_review.update --data @payload.json --json
topolo actions plan app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --confirm --json
MCP tool and arguments:
{
"tool": "topolo_call_action",
"arguments": {
"actionId": "app_topolo_inventory.settings.movement_review.update",
"input": {
"threshold": null
},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>",
"confirm": true
}
}
Captured local response · HTTP 200:
{
"settings": {
"ok": true,
"threshold": null,
"updatedAt": "2026-10-04T05:46:37.303Z"
}
}
HTTP 200. Check settings.threshold exactly matches the requested number or null and retain updatedAt. No settings read action is published. A subsequent movement response demonstrates its own reviewStatus; do not create a movement solely as a destructive verification probe.
Another supported request
Actual exported Worker response with both local SQLite D1 databases and all committed migrations; synthetic Auth/grants and simulated Notify/Nexus/archive transport. No live delivery, billing or environment deployment proof. Captured scenario: settings.movement_review.update.
Input · payload.json:
{
"threshold": 10
}
CLI:
topolo actions validate app_topolo_inventory.settings.movement_review.update --data @payload.json --json
topolo actions plan app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --confirm --json
MCP tool and arguments:
{
"tool": "topolo_call_action",
"arguments": {
"actionId": "app_topolo_inventory.settings.movement_review.update",
"input": {
"threshold": 10
},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>",
"confirm": true
}
}
Captured local response · HTTP 200:
{
"settings": {
"ok": true,
"threshold": 10,
"updatedAt": "2026-10-04T05:46:37.104Z"
}
}
HTTP 200. Check settings.threshold exactly matches the requested number or null and retain updatedAt. No settings read action is published. A subsequent movement response demonstrates its own reviewStatus; do not create a movement solely as a destructive verification probe.
Another supported request
Actual exported Worker response with both local SQLite D1 databases and all committed migrations; synthetic Auth/grants and simulated Notify/Nexus/archive transport. No live delivery, billing or environment deployment proof. Captured scenario: settings.movement_review.update.
Input · payload.json:
{
"threshold": 1
}
CLI:
topolo actions validate app_topolo_inventory.settings.movement_review.update --data @payload.json --json
topolo actions plan app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --json
topolo actions call app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --confirm --json
MCP tool and arguments:
{
"tool": "topolo_call_action",
"arguments": {
"actionId": "app_topolo_inventory.settings.movement_review.update",
"input": {
"threshold": 1
},
"resourceType": "workspace",
"resourceId": "<identifier returned by granted resource discovery>",
"confirm": true
}
}
Captured local response · HTTP 200:
{
"settings": {
"ok": true,
"threshold": 1,
"updatedAt": "2026-10-04T05:46:38.156Z"
}
}
HTTP 200. Check settings.threshold exactly matches the requested number or null and retain updatedAt. No settings read action is published. A subsequent movement response demonstrates its own reviewStatus; do not create a movement solely as a destructive verification probe.
Refused request · HTTP 400
Actual exported Worker response with both local SQLite D1 databases and all committed migrations; synthetic Auth/grants and simulated Notify/Nexus/archive transport. No live delivery, billing or environment deployment proof. Captured scenario: nonpositive review threshold invalid.
Input · payload.json:
{
"threshold": 0
}
CLI:
topolo actions validate app_topolo_inventory.settings.movement_review.update --data @payload.json --json
topolo actions plan app_topolo_inventory.settings.movement_review.update --resource-type workspace --resource-id "$INVENTORY_WORKSPACE_ID" --data @payload.json --json
Captured local response · HTTP 400:
{
"success": false,
"error": {
"code": "invalid_action_input",
"message": "Invalid action input for \"settings.movement_review.update\".",
"action": "settings.movement_review.update",
"issues": [
{
"path": "threshold",
"message": "Too small: expected number to be >0",
"code": "too_small"
}
]
}
}
HTTP 400. The handler refused this request. Resolve its exact cause before retrying; input validation can reject an invalid fixture before it reaches the handler.
Verify the result
- Check settings.threshold exactly matches the requested number or null and retain updatedAt.
- No settings read action is published. A subsequent movement response demonstrates its own reviewStatus; do not create a movement solely as a destructive verification probe.
Errors and recovery
invalid_action_input(HTTP 400): Correct only the exact fields reported by the published schema validator. An invalid input can be refused before its handler.action_permission_required(HTTP 403): Stop when the verified credential lacks the published action permission. Resource identifiers and organization ownership do not grant that permission.organization_required(HTTP 403): Use the specifically authorized organization context; personal scope cannot act on organization-owned Inventory data.workspace_required(HTTP 400): Discover an authorized Inventory workspace and pass its exact separate resource binding; bootstrap does not select a workspace.workspaces_unavailable(HTTP 503): Retain the request id and report unavailable canonical workspace discovery; do not invent a default workspace.movement_review_threshold_invalid(HTTP 400): Use a finite positive number or null; the published schema rejects nonpositive numbers before handler execution.
Auth, action-input validation and platform resource resolution can refuse a request before its handler. Retain the exact error, request id and context; requesting another context is not a legitimate way to bypass a refusal.
Recovery boundary
If the previous threshold is known from authorized recorded evidence, call this action with that value or null. It only changes future decisions and cannot undo existing reviews.
Related actions
- List Inventory stock movements: Read up to 100 newest ledger entries in the granted workspace, enriched with item/location labels. Every review state is included and there is no cursor or full-ledger export on this action.
- Record Inventory stock movement: Append one nonzero signed quantity delta against an active item and existing location in the same workspace. Movement type labels do not set the sign, pair a transfer or defer stock while review is pending.
Evidence
Captured exported Worker responses use both real local SQLite D1 databases with all six committed migrations, synthetic Auth/workspace grants and simulated Notify/Nexus/archive transport. They prove local handler shapes and scoped behavior, not live authorization, notification delivery, metering acceptance or environment deployment. Large 100-row list/capped-dashboard captures are retained in local evidence; committed tests verify those limits while worked guides use smaller complete responses. Capture digests and test scenarios are retained in the source fixture records.