Skip to content

List supervisor fix proposals

GET
/v1/proposals
curl --request GET \
--url 'https://example.com/v1/proposals?limit=25&status=draft&tier=prompt&scopeKind=tenant&inherit=true' \
--header 'Authorization: Bearer <token>' \
--header 'X-Supervisor-Id: example'

Cursor-paginated list scoped to (tenantId, supervisorId). Filters: ?status=, ?agentId=, ?tier=. Sort order is binding-defined (typically createdAt desc, id desc).

X-Supervisor-Id
required
string
>= 1 characters

SupervisorId scoping this request. Every /v1/proposals route requires this header — proposals are supervisor-owned, and the API does not derive supervisor scope from the token.

limit
integer
default: 25 >= 1 <= 100

1..100. Default 25.

cursor
string

Opaque cursor from a prior response. Absent → first page.

status
string
Allowed values: draft dry-running dry-run-passed dry-run-failed proposed-for-review approved rejected applied rolled-back withdrawn

Filter by proposal status.

agentId
string
tier
string
Allowed values: prompt retrieval tool-config

Filter by artifact tier.

scopeKind

Discriminator for the ?scopeKind + ?scopeId + ?inherit triplet. Tenant carries no id (implicit from session); org/project require scopeId.

string
Allowed values: tenant org project

Optional scope discriminator. If absent, no scope filter is applied.

scopeId
string
>= 1 characters

Required IF scopeKind is org or project. MUST be absent if scopeKind=tenant (tenant is implicit from the session). Malformed combinations return 400 scope-invalid.

inherit
boolean
default: true

Default true. false = literal-at-this-scope only (admin/audit view). Load-bearing for policy/config-scoped resources (mcp-endpoints); documented no-op for content-scoped resources (agents/flows/tools/…).

Page of proposals.

Media typeapplication/json
object
data
required
Array<object>
object
id
required

FixProposalId.

string format: uuid
tenantId
required
string format: uuid
supervisorId
required
string
agentId
required
string
agentVersion
required

Semver of the baseline agent version.

string
tier
required
string
Allowed values: prompt retrieval tool-config
change
required

Polymorphic change payload. Shape depends on the sibling tier on the proposal (prompt / retrieval / tool-config).

object
key
additional properties
any
patternRefs
required
Array<object>
object
kind
required
string
Allowed values: guardrail-violation tool-error budget-exceeded model-error aborted
key
required
string
count
required
integer
>= 1
firstSeenAt
required
string format: date-time
lastSeenAt
required
string format: date-time
sampleConversations
required
Array<string>
hypothesis
required
string
proposerRuleId
required
string
status
required
string
Allowed values: draft dry-running dry-run-passed dry-run-failed proposed-for-review approved rejected applied rolled-back withdrawn
fingerprint
required

Sha256(tier + agentId + agentVersion + canonical(change)). Dedup key.

string
resolutionReason
string
reviewApprovalId

HITL approval id created when the proposal was submitted for review.

string format: uuid
appliedVersion

Semver of the new agent version the proposal materialized as. Present on applied and rolled-back proposals.

string
appliedAt
string format: date-time
rolledBackAt
string format: date-time
createdAt
required
string format: date-time
updatedAt
required
string format: date-time
resolvedAt
string format: date-time
nextCursor

Opaque cursor for the next page. Absent when hasMore: false.

string
hasMore
required
boolean
Example
{
"data": [
{
"tier": "prompt",
"patternRefs": [
{
"kind": "guardrail-violation"
}
],
"status": "draft"
}
]
}

Missing X-Supervisor-Id header or malformed query parameter.

Media typeapplication/json
object
error
required
object
code
required

Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).

string
message
required
string
details

Optional, kind-specific.

object
key
additional properties
any
requestId
required

Server-assigned request id; also echoed via X-Request-Id header.

string
Examplegenerated
{
"error": {
"code": "example",
"message": "example",
"details": {},
"requestId": "example"
}
}

Missing / malformed / expired / revoked bearer token.

Media typeapplication/json
object
error
required
object
code
required

Stable machine-readable discriminant. Values match domain error codes (see docs/API-ROUTE-CONVENTIONS.md §4.3).

string
message
required
string
details

Optional, kind-specific.

object
key
additional properties
any
requestId
required

Server-assigned request id; also echoed via X-Request-Id header.

string
Examplegenerated
{
"error": {
"code": "example",
"message": "example",
"details": {},
"requestId": "example"
}
}