{"openapi":"3.1.0","info":{"title":"POST /api/v1/credit/limit-reviews/{review_id}/decision","version":"1.0.0","description":"Apply or dismiss a proposed limit review"},"servers":[{"url":"https://api.ondayzero.com","description":"Production"}],"paths":{"/api/v1/credit/limit-reviews/{review_id}/decision":{"post":{"tags":["credit"],"summary":"Apply or dismiss a proposed limit review","description":"`apply` moves the line to the recommended limit (or `limit_cents`) through the same path as `PATCH /credit/lines/{id}`: one `credit.line.limit_changed` event and one issuer push. `dismiss` leaves the limit alone. Both record `reason`. An API token may decide only when the program's `limit_change_policy` is `direct`; otherwise this is a console action (`403`). `409` when the review is not proposed, or the line's limit moved since it was run.","operationId":"decide_limit_review","parameters":[{"name":"review_id","in":"path","required":true,"schema":{"type":"string","title":"Review Id"}},{"name":"authorization","in":"header","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Authorization"}},{"name":"x-business-id","in":"header","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"X-Business-Id"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/LimitReviewDecisionRequest"}}}},"responses":{"201":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SuccessEnvelope_CreditLimitReviewResponse_"}}}},"400":{"description":"Bad Request - Invalid input","content":{"application/json":{"example":{"error":"validation_error","message":"Validation failed: due_date: Input should be a valid date","errors":{"due_date":"Input should be a valid date"},"code":"GEN_002","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"},"schema":{"$ref":"#/components/schemas/ErrorResponse"}}}},"401":{"description":"Unauthorized - Missing or expired token, an MCP OAuth token used against the REST API, or no access to this business","content":{"application/json":{"example":{"error":"unauthorized","message":"Authentication required","code":"AUTH_001","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"},"schema":{"$ref":"#/components/schemas/ErrorResponse"}}}},"403":{"description":"Forbidden - Insufficient permissions","content":{"application/json":{"example":{"error":"forbidden","message":"You don't have permission to access this resource","code":"AUTH_002","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"},"schema":{"$ref":"#/components/schemas/ErrorResponse"}}}},"404":{"description":"Not Found - Resource does not exist","content":{"application/json":{"example":{"error":"not_found","message":"Resource not found","code":"NOT_FOUND_001","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"},"schema":{"$ref":"#/components/schemas/ErrorResponse"}}}},"409":{"description":"Conflict - Resource already exists or is in an incompatible state","content":{"application/json":{"example":{"error":"conflict","message":"Resource already exists","code":"CONFLICT_001","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"},"schema":{"$ref":"#/components/schemas/ErrorResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"},"example":{"error":"validation_error","message":"Validation failed: amount: Input should be a valid integer","errors":{"amount":"Input should be a valid integer"},"code":"GEN_002","request_id":"3f0e7c2a-9b4d-4e1a-8c6f-2d5b7a1e9c30"}}}}},"x-fastapi-operation-id":"decide_limit_review_api_v1_credit_limit_reviews__review_id__decision_post"}}},"components":{"schemas":{"CreditLimitReviewResponse":{"properties":{"id":{"type":"string","title":"Id"},"credit_line_id":{"type":"string","title":"Credit Line Id"},"program_id":{"type":"string","title":"Program Id"},"as_of":{"type":"string","format":"date","title":"As Of","description":"The day the figures were measured to."},"source":{"type":"string","enum":["sweep","manual"],"title":"Source"},"cadence_window":{"type":"string","title":"Cadence Window","description":"\"2026-W40\" (weekly) or \"2026-10\"."},"status":{"type":"string","enum":["proposed","applied","dismissed","no_change"],"title":"Status"},"current_limit_cents":{"type":"integer","title":"Current Limit Cents","description":"The line's limit when reviewed."},"recommended_limit_cents":{"type":"integer","title":"Recommended Limit Cents"},"change_cents":{"type":"integer","title":"Change Cents","description":"recommended_limit_cents − current_limit_cents."},"applied_limit_cents":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Applied Limit Cents","description":"The limit written to the line, once applied."},"basis_key":{"type":"string","title":"Basis Key"},"basis_value":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Basis Value","description":"The measured basis in whole currency units; null if unmeasured."},"frozen":{"type":"boolean","title":"Frozen","default":false},"triggers_fired":{"items":{"$ref":"#/components/schemas/LimitReviewTriggerFired"},"type":"array","title":"Triggers Fired"},"evidence":{"additionalProperties":true,"type":"object","title":"Evidence","description":"`measurements` (each measure read, with its evidence as an assessment shows it), `steps` (the limit after each stage of the formula), `policy` (as applied) and `measured_business_id`."},"requested_by":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Requested By","description":"Who ran it; null for the nightly sweep."},"decided_by":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Decided By"},"decided_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Decided At"},"reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Reason"},"created_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Created At"}},"type":"object","required":["id","credit_line_id","program_id","as_of","source","cadence_window","status","current_limit_cents","recommended_limit_cents","change_cents","basis_key"],"title":"CreditLimitReviewResponse","description":"One recomputation of a line's limit, and what became of it."},"LimitReviewDecisionRequest":{"properties":{"decision":{"type":"string","enum":["apply","dismiss"],"title":"Decision"},"limit_cents":{"anyOf":[{"type":"integer","minimum":0.0},{"type":"null"}],"title":"Limit Cents","description":"Apply a different limit than the one recommended. Must sit in the program envelope. Ignored when dismissing."},"reason":{"type":"string","maxLength":255,"minLength":1,"title":"Reason","description":"Why. Recorded on the review and carried on the events."}},"additionalProperties":false,"type":"object","required":["decision","reason"],"title":"LimitReviewDecisionRequest","description":"Apply or dismiss a proposed review."},"LimitReviewTriggerFired":{"properties":{"key":{"type":"string","title":"Key"},"op":{"type":"string","title":"Op"},"value":{"type":"number","title":"Value"},"measured":{"type":"number","title":"Measured"},"action":{"type":"string","title":"Action"},"amount":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Amount"}},"type":"object","required":["key","op","value","measured","action"],"title":"LimitReviewTriggerFired","description":"A trigger that held on the day reviewed."},"SuccessEnvelope_CreditLimitReviewResponse_":{"properties":{"success":{"type":"boolean","title":"Success","default":true},"message":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message"},"code":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Code"},"data":{"anyOf":[{"$ref":"#/components/schemas/CreditLimitReviewResponse"},{"type":"null"}]}},"additionalProperties":true,"type":"object","title":"SuccessEnvelope[CreditLimitReviewResponse]"},"ErrorResponse":{"title":"ErrorResponse","type":"object","description":"Envelope returned by every non-2xx response. Branch on `code` (stable) rather than `message` (human-readable, may change).","required":["error","message","code"],"properties":{"error":{"type":"string","description":"Error category: `validation_error`, `unauthorized`, `forbidden`, `not_found`, `conflict`, `rate_limited`, `server_error`, or `service_unavailable`."},"message":{"type":"string","description":"Human-readable explanation, safe to show to end users."},"code":{"type":"string","description":"Stable machine-readable code in `CATEGORY_NNN` form (e.g. `NOT_FOUND_006`, `AUTH_010`, `GEN_002`)."},"request_id":{"type":"string","description":"Correlation id for support requests. Echoes the `x-request-id` request header when one was supplied."},"errors":{"type":"object","additionalProperties":{"type":"string"},"description":"Field-level validation messages keyed by field name. Present on 400/422 validation failures only."}}}},"securitySchemes":{"BearerAuth":{"type":"http","scheme":"bearer","bearerFormat":"API Token","description":"API token authentication. Format: `Bearer dz_...`"}}},"security":[{"BearerAuth":[]}]}