Internal-only endpoint for projecting authoritative portfolio approvals and runs into the Cloudflare control-plane
ADMIN_AUTH_SECRET_TOKENuserIdAuthorization: Bearer <ADMIN_AUTH_SECRET_TOKEN>Content-Type: application/jsonuserId: canonical platform user id whose linked addresses define portfolio ownershipportfolioIds must be a non-empty array403 if any requested portfolio is not linked to the supplied userplatform-api resolves the supplied userId to linked wallet addresses, then
asks the ownership reader for canonically owned portfolio ids. Only after that
ownership check passes does it call the portfolio control-plane facade to batch
read approvals and runs.
The current route also emits stable portfolio metadata when available:
policyVersion: derived from the stored smart-portfolio policy configsnapshotHash: derived from the latest control-plane context snapshotcontrolPlaneSummary: the canonical portfolio convergence plus reviewQueue summary already used by shared servicesnull.
This route is the current upstream source for:
apps/agent-control-plane-sourceapps/agent-control-plane via the private CONTROL_PLANE_SOURCE service bindingPOST /v1/admin/control-plane/workflow-monitors/duePOST /v1/admin/control-plane/workflow-monitors/tick