Update zombie config or drive its status FSM

curl --request PATCH \
  --url https://api.usezombie.com/v1/workspaces/{workspace_id}/zombies/{zombie_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "config_json": "<string>",
  "trigger_markdown": "<string>",
  "source_markdown": "<string>"
}
'

{
  "zombie_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "config_revision": 123
}

Agents

Update zombie config or drive its status FSM

Partial update of a zombie. Body fields are optional and presence-based:

config_json — replace the zombie’s config blob whole; publishes zombie_config_changed.
trigger_markdown — replace the zombie’s stored TRIGGER.md; the server reparses the frontmatter and overlays the x_usezombie.triggers half of config_json. The zombie’s name is rewritten to the reparsed name. Mutually exclusive with config_json (both drive the same column).
source_markdown — replace the zombie’s stored SKILL.md; the server reparses the frontmatter and overlays the tools / credentials / network / budget halves of config_json. The reparsed name must equal the zombie’s current name (renames require a fresh install).
status — drive the lifecycle FSM. Allowed values: active (resume from stopped or auto-paused), stopped (halt the running session, resumable), killed (terminal mark, irreversible). The paused state is platform-only (set by the anomaly gate) and rejected here.

All field-bearing branches run inside a single transaction that takes a row-level FOR UPDATE lock on core.zombies, applies field-level merge semantics, and commits with a single UPDATE. Two writers patching different body fields land both halves; two writers patching the same field collapse to last-write-wins. Per-transaction lock_timeout=5s, statement_timeout=10s, idle_in_transaction_session_timeout=5s make pathological waits fail fast as 503 (retryable).

The SQL UPDATE is one statement; one control-stream publish fires when any dirty surface lands. Returns the new config_revision (a strictly monotonic ms-epoch timestamp).

FSM rules:

killed is terminal — any further PATCH on a killed zombie returns 404 (the row is a tombstone).
Stop requires status ∈ ; Resume requires status ∈ ; Kill is allowed from any non-killed state.
Disallowed transitions return 409 (e.g. resume on an active zombie).

Status transitions (stop/resume/kill) require operator-minimum role per RULE BIL — destructive lifecycle actions. Pure config updates stay at workspace-member.

PATCH

workspaces

{workspace_id}

zombies

{zombie_id}

Update zombie config or drive its status FSM

curl --request PATCH \
  --url https://api.usezombie.com/v1/workspaces/{workspace_id}/zombies/{zombie_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "config_json": "<string>",
  "trigger_markdown": "<string>",
  "source_markdown": "<string>"
}
'

{
  "zombie_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "config_revision": 123
}

Authorizations

Authorization

string

header

required

Obtain a token via the CLI auth flow (POST /v1/auth/sessions) or GitHub OAuth

Path Parameters

workspace_id

string<uuid>

required

UUIDv7 of the workspace.

zombie_id

string<uuid>

required

UUIDv7 of the zombie.

Body

application/json

config_json

string

The new zombie config as a JSON string. Validated server-side. Mutually exclusive with trigger_markdown.

trigger_markdown

string

The full TRIGGER.md to persist; the server reparses the frontmatter and overlays the x_usezombie.triggers half of config_json. Must be non-empty. Mutually exclusive with config_json.

source_markdown

string

The full SKILL.md to persist; the server reparses the frontmatter and overlays the tools / credentials / network / budget halves of config_json. The reparsed name must match the zombie's current name. Must be non-empty.

status

enum<string>

Target FSM state. active resumes from stopped/paused; stopped halts the running session (resumable); killed is terminal. Note that paused is intentionally not in this enum — it is set only by the platform's anomaly gate.

Available options:

active,

stopped,

killed

Response

zombie_id

string<uuid>

status

enum<string>

Present only when the request body included a status field. Echoes the new status.

Available options:

active,

stopped,

killed

config_revision

integer<int64>

Create a zombie Hard-delete a zombie and cascade its history