> ## Documentation Index
> Fetch the complete documentation index at: https://docs.attaxr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Steer the running turn

> Adds a mid-run prompt to a hackbot thread that has a live turn. The steering middleware reads the queue before each model call and adds the prompt to that call. No new turn starts. Delivery to the running turn is not guaranteed. A prompt that arrives after that turn's last model call stays queued, and the thread's next turn applies it.



## OpenAPI

````yaml /api/openapi.json post /api/chat/{id}/steer
openapi: 3.1.0
info:
  title: Aquila API
  version: 1.0.0
  description: >-
    Event-driven reconnaissance platform API. All /api/* routes except
    /api/public/* require an authenticated session (cookie), an X-Api-Key
    header, or a bearer token. Auth endpoints under /api/auth/* are generated by
    Better Auth.
servers:
  - url: https://aquila.attaxr.com
  - url: http://localhost
security: []
tags:
  - name: AI
  - name: Agents
  - name: Bulk Delete
  - name: Chat
  - name: Constraints
  - name: Dashboard
  - name: Events
  - name: JS
  - name: JS Analysis
  - name: JS Monitoring
  - name: Leads
  - name: MCP Key
  - name: Models
  - name: Notification Channels
  - name: Notification Event Preferences
  - name: Notifications
  - name: OOB
  - name: Provider Keys
  - name: Public Shares
  - name: Reinforcements
  - name: Reports
  - name: Scans
  - name: Schedules
  - name: Shares
  - name: Tools
  - name: User Profiles
  - name: V1
  - name: Vulnerabilities
  - name: Workflows
  - name: Workspace
paths:
  /api/chat/{id}/steer:
    post:
      tags:
        - Chat
      summary: Steer the running turn
      description: >-
        Adds a mid-run prompt to a hackbot thread that has a live turn. The
        steering middleware reads the queue before each model call and adds the
        prompt to that call. No new turn starts. Delivery to the running turn is
        not guaranteed. A prompt that arrives after that turn's last model call
        stays queued, and the thread's next turn applies it.
      operationId: postApiChatIdSteer
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $schema: https://json-schema.org/draft/2020-12/schema
              type: object
              properties:
                content:
                  type: string
                  minLength: 1
                  maxLength: 8000
              required:
                - content
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema: {}
        '201':
          description: The steering prompt was queued and recorded.
          content:
            application/json:
              schema: {}
        '400':
          description: >-
            Invalid body, a read-only sub-agent session, or a thread whose
            copilot cannot steer.
          content:
            application/json:
              schema: {}
        '401':
          description: No valid session cookie or API key.
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                type: object
                properties:
                  error:
                    type: string
                required:
                  - error
                additionalProperties: false
        '403':
          description: Email address not verified, or the caller lacks the required role.
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                type: object
                properties:
                  error:
                    type: string
                required:
                  - error
                additionalProperties: false
        '404':
          description: No thread found for this id.
          content:
            application/json:
              schema: {}
        '409':
          description: No turn is running — send a normal message instead.
          content:
            application/json:
              schema: {}
        '429':
          description: >-
            Risk-tier rate limit exceeded (writes 20/min, expensive 10/min, bulk
            60/min). Limited responses carry X-RateLimit-Limit,
            X-RateLimit-Remaining, X-RateLimit-Reset and Retry-After.
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                type: object
                properties:
                  error:
                    type: string
                required:
                  - error
                additionalProperties: false
      security:
        - apiKeyCookie: []
        - apiKeyHeader: []
        - bearerAuth: []
components:
  securitySchemes:
    apiKeyCookie:
      type: apiKey
      in: cookie
      name: better-auth.session_token
      description: Browser session cookie set by Better Auth sign-in.
    apiKeyHeader:
      type: apiKey
      in: header
      name: x-api-key
      description: Personal API key (aquila_… prefix; settings → API keys).
    bearerAuth:
      type: http
      scheme: bearer
      description: Personal API key sent as a bearer token.

````