> ## Documentation Index
> Fetch the complete documentation index at: https://help.harmonica.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Update meeting processing restrictions

> Sets the complete authoritative restriction scope or confirms/dismisses a pending transcript-derived candidate. Every mutation appends an event; history is never overwritten.



## OpenAPI

````yaml /api-reference/openapi.yaml post /meetings/{id}/restrictions
openapi: 3.1.0
info:
  title: Harmonica API
  version: 1.0.0
  description: >
    REST API for the Harmonica structured deliberation platform.

    Provides access to sessions and their data, including creating, updating,
    and querying sessions, plus response submission for active sessions.
  contact:
    name: Harmonica
    url: https://harmonica.chat
servers:
  - url: https://app.harmonica.chat/api/v1
    description: Production
  - url: http://localhost:3000/api/v1
    description: Local development
security:
  - apiKey: []
paths:
  /meetings/{id}/restrictions:
    post:
      tags:
        - Meetings
      summary: Update meeting processing restrictions
      description: >-
        Sets the complete authoritative restriction scope or confirms/dismisses
        a pending transcript-derived candidate. Every mutation appends an event;
        history is never overwritten.
      operationId: updateMeetingRestrictions
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/SetMeetingRestrictionsRequest'
                - $ref: >-
                    #/components/schemas/ReviewMeetingRestrictionCandidateRequest
              discriminator:
                propertyName: action
      responses:
        '201':
          description: Updated restriction state and history
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MeetingRestrictionState'
        '400':
          description: Invalid scope, reason, candidate, or decision
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
components:
  schemas:
    SetMeetingRestrictionsRequest:
      type: object
      properties:
        action:
          type: string
          const: set
        scopes:
          type: array
          description: >-
            Complete authoritative scope snapshot. Pass an empty array to lift
            restrictions.
          items:
            type: string
            enum:
              - synthesis
              - project_attachment
              - external_export
              - sharing
              - all_downstream_processing
        reason:
          type: string
          minLength: 1
          maxLength: 1000
      required:
        - action
        - scopes
        - reason
    ReviewMeetingRestrictionCandidateRequest:
      type: object
      properties:
        action:
          type: string
          const: review_candidate
        candidate_event_id:
          type: string
          format: uuid
        decision:
          type: string
          enum:
            - confirm
            - dismiss
        reason:
          type: string
          minLength: 1
          maxLength: 1000
      required:
        - action
        - candidate_event_id
        - decision
        - reason
    MeetingRestrictionState:
      type: object
      properties:
        authoritative_scopes:
          type: array
          items:
            type: string
        candidate_scopes:
          type: array
          items:
            type: string
        effective_scopes:
          type: array
          items:
            type: string
        pending_candidates:
          type: array
          items:
            $ref: '#/components/schemas/MeetingRestrictionEvent'
        history:
          type: array
          items:
            $ref: '#/components/schemas/MeetingRestrictionEvent'
      required:
        - authoritative_scopes
        - candidate_scopes
        - effective_scopes
        - pending_candidates
        - history
    MeetingRestrictionEvent:
      type: object
      properties:
        id:
          type: string
          format: uuid
        sequence:
          type: string
          description: Monotonic append-only event sequence.
        meeting_id:
          type: string
          format: uuid
        event_type:
          type: string
          enum:
            - restriction_set
            - candidate_flagged
            - candidate_confirmed
            - candidate_dismissed
        scopes:
          type: array
          items:
            type: string
            enum:
              - synthesis
              - project_attachment
              - external_export
              - sharing
              - all_downstream_processing
        reason:
          type: string
        source:
          type: string
          enum:
            - owner
            - policy
            - transcript_signal
        actor_id:
          type: string
          nullable: true
        review_of_event_id:
          type: string
          format: uuid
          nullable: true
        dedupe_key:
          type: string
          nullable: true
        created_at:
          type: string
          format: date-time
      required:
        - id
        - sequence
        - meeting_id
        - event_type
        - scopes
        - reason
        - source
        - created_at
    Error:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              enum:
                - unauthorized
                - forbidden
                - not_found
                - validation_error
                - rate_limited
                - internal_error
                - unprocessable
            message:
              type: string
          required:
            - code
            - message
      required:
        - error
  responses:
    Unauthorized:
      description: Missing or invalid API key
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              code: unauthorized
              message: Invalid or missing API key
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              code: not_found
              message: Session not found
  securitySchemes:
    apiKey:
      type: http
      scheme: bearer
      description: |
        API key authentication. Pass your key as a Bearer token.
        Keys use the format `hm_live_<32 hex chars>`.
        Generate keys from your Harmonica dashboard settings.

````