Rule on a decision

Record a human ruling: approved, adjusted (approved with modifications captured in resolution_context), or archived (superseded or no longer relevant).

Authentication is a signed-in browser session with a CSRF token, and that is enforced by which middleware this route composes rather than by a check inside the handler — an oxk_ API key or a service credential reaches a 401 at the session gate. A delegated credential is weaker evidence than a person’s own action, so agents raise attention with POST /decisions/{id}/attention and wait for the ruling here.

POST /decisions/{id}/resolution

Rule on a decision

cURL

curl --request POST \
  --url https://useorgx.com/api/v1/decisions/{id}/resolution \
  --header 'Content-Type: application/json' \
  --cookie __session= \
  --data '
{
  "resolution": "approved"
}
'

200

{
  "data": {
    "id": "8cf6f6a4-9a3f-4a52-8d0e-6a4c2b1f9e37",
    "workspace_id": "5be1076d-8fd0-4c0f-847f-fd67fdb935e8",
    "title": "Approve the pricing page rewrite",
    "shape": "option_select",
    "urgency": "urgent",
    "status": "approved",
    "resolution": "approved",
    "resolution_context": {
      "selected_option_id": "ship"
    },
    "resolved_at": "2026-08-19T15:20:00.000Z",
    "is_resolved": true,
    "blocks_task": true,
    "blocking": {
      "run_id": "9c7b1d68-2c5c-4d6b-9a8e-5c4f2c0c5b4d",
      "initiative_id": "4b014796-2f1e-4a1d-9c3b-7e5a2d6f8c10",
      "workstream_id": "1f2e3d4c-5b6a-4798-8a9b-0c1d2e3f4a5b"
    },
    "poll_url": "/api/v1/decisions/8cf6f6a4-9a3f-4a52-8d0e-6a4c2b1f9e37",
    "resolve_url": "https://useorgx.com/decisions/8cf6f6a4-9a3f-4a52-8d0e-6a4c2b1f9e37",
    "created_at": "2026-08-19T15:04:00.000Z",
    "updated_at": "2026-08-19T15:20:00.000Z"
  },
  "meta": {
    "apiVersion": "1",
    "workspaceId": "5be1076d-8fd0-4c0f-847f-fd67fdb935e8"
  }
}

Authorizations

__session · string · cookie · required

Session cookie from web authentication

Headers

Idempotency-Key · string

Accepted for forward compatibility. Replay safety for this operation comes from its own state checks, described on the operation.

Required string length: 1 - 200

Pattern: ^[A-Za-z0-9][A-Za-z0-9._:/-]{0,199}$

Path Parameters

id · string<uuid> · required

Decision id, as returned by POST /decisions.

Body

application/json

resolution · enum<string> · required

Available options: approved, adjusted, archived

resolution_context · object

Structured record of what was decided, for adjusted rulings especially.

note · string

Human note kept with the decision's audit trail.

Maximum string length: 4000

selected_option_id · string

For option_select decisions, the chosen shape_context.options[].id.

Required string length: 1 - 120

selected_option_ids · string[]

For option_multiselect decisions, the chosen option ids.

Required string length: 1 - 120

Response

200

application/json

The decision after the ruling

data · object · required

Show child attributes

meta · object · required

Show child attributes