审批决策(owner/admin 或经委托 approval.decide):CAS(pending→终态)+ ceiling_version 重验(TOCTOU)+ 效果落库 + 审计 + outbox 同事务;自批恒 409 approval_self_forbidden;harness_license 批准回显一次性 activationCode(hash 入库,由决策人转交受益人)

POST

/v1/approvals/{id}/decide

Authorizations

• bearerAuth

Parameters

Header Parameters

x-tansr-org

string

Org 作用域声明(org 公开 id);服务端校验成员资格与角色,非成员恒 404、角色不够 403

Request Body^required

Media typeapplication/json

object

action

required

Any of:

string

string

Allowed value: approve

string

string

Allowed value: reject

reason

string

<= 512 characters

Responses

200

决策后审批单

Media typeapplication/json

object

approval

required

object

id

required

string

orgId

required

string

kind

required

Any of:

string

string

Allowed value: expand_model

string

string

Allowed value: expand_adjudicator

string

string

Allowed value: expand_context_scheme

string

string

Allowed value: raise_budget

string

string

Allowed value: harness_license

string

string

Allowed value: app_delete

string

string

Allowed value: unlock_experimental

level

required

Any of:

string

string

Allowed value: org

string

string

Allowed value: platform

requesterUserId

required

string

beneficiaryUserId

required

Any of:

string

string

null

null

payload

required

object

payloadHash

required

Payload 稳定序列化 sha256(决策对象防换)

string

status

required

Any of:

string

string

Allowed value: pending

string

string

Allowed value: approved

string

string

Allowed value: rejected

string

string

Allowed value: cancelled

string

string

Allowed value: expired

currentStep

required

integer

expiresAt

required

Any of:

string

string

null

null

createdAt

required

string

decisions

required

Array<object>

object

step

required

决策步序(current_step 预留多级;W1 恒 1)

integer

deciderUserId

required

string

action

required

Any of:

string

string

Allowed value: approve

string

string

Allowed value: reject

reason

required

Any of:

string

string

null

null

viaDelegationId

required

Any of:

string

string

null

null

decidedAt

required

string

activationCode

一次性激活码(仅 harness_license 批准回显一次;永不回读)

string

Example

{
  "approval": {
    "kind": "expand_model",
    "level": "org",
    "status": "pending",
    "decisions": [
      {
        "action": "approve"
      }
    ]
  }
}

400

Org_ceiling_exceeded(重验失败)

Media typeapplication/json

object

error

required

object

code

required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string

Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded

message

required

string

requestId

required

string

detail

object

Example

{
  "error": {
    "code": "adjudicator_not_authorized"
  }
}

409

Approval_self_forbidden / conflict(已非 pending)

Media typeapplication/json

object

error

required

object

code

required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string

Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded

message

required

string

requestId

required

string

detail

object

Example

{
  "error": {
    "code": "adjudicator_not_authorized"
  }
}

本文是否有帮助?

有帮助没帮助