curl --request PUT \
  --url http://127.0.0.1:8765/v1/policies/{ref} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "source": "def pre_command(ctx):\n    if ctx[\"command\"] == \"rm\":\n        return {\"kind\": \"deny\", \"reason\": \"Deletes are disabled\"}\n"
}
'

import requests

url = "http://127.0.0.1:8765/v1/policies/{ref}"

payload = { "source": "def pre_command(ctx):
    if ctx[\"command\"] == \"rm\":
        return {\"kind\": \"deny\", \"reason\": \"Deletes are disabled\"}
" }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    source: 'def pre_command(ctx):\n    if ctx["command"] == "rm":\n        return {"kind": "deny", "reason": "Deletes are disabled"}\n'
  })
};

fetch('http://127.0.0.1:8765/v1/policies/{ref}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "name": "<string>",
  "source": "<string>"
}