Assign review task

POST

/v1/review-tasks/{task_id}/assign

const url = 'https://example.com/v1/review-tasks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/assign';
const options = {
  method: 'POST',
  headers: {
    'registry-casework-profile': 'example',
    'If-Match': 'example',
    'Idempotency-Key': 'example',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: '{"assignee":{"issuer":"example","subject":"example"},"reason":"example"}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://example.com/v1/review-tasks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/assign \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: example' \
  --header 'If-Match: example' \
  --header 'registry-casework-profile: example' \
  --data '{ "assignee": { "issuer": "example", "subject": "example" }, "reason": "example" }'

Recovery repeats the exact request and caller-supplied idempotency key. Clients do not retry mutations implicitly.

Authorizations

bearerAuth

Parameters

Path Parameters

task_id

required

string format: uuid

Header Parameters

traceparent

string

registry-casework-profile

required

string

>= 1 characters <= 128 characters /^[A-Za-z0-9._:-]+$/

The caller’s exact governed access profile for this protocol.

registry-source-profile

string

>= 1 characters <= 128 characters /^[A-Za-z0-9._:-]+$/

Current-source lists, open work, source context, task mutations and new notes require the human caller’s source-valid profile and credential. Retained terminal task and history reads use Casework authority. Submitted context requires no provider.

If-Match

required

string

/^"[1-9][0-9]*"$/

Quoted current revision.

Idempotency-Key

required

string

>= 1 characters <= 128 characters /^[!-~]+$/

Retain this exact key and request bytes for explicit recovery.

Request Body^required

application/json

object

assignee

required

A person is qualified by the issuer that authenticated the subject.

object

issuer

required

string

subject

required

string

reason

string | null

Example ^generated

{
  "assignee": {
    "issuer": "example",
    "subject": "example"
  },
  "reason": "example"
}

Responses

200

Success

application/json

object

createdAt

required

string format: date-time

deadlineAt

required

string | null format: date-time

decidedByCaller

Whether the current caller recorded this task’s decision. Present only on a single decided-task read, so a reviewer whose decide response was lost can confirm the outcome without learning who else decided.

boolean | null

decisionReceipt

Any of:

object
null

A retained decision, interpreted under the task’s pinned policy and released through an own receipt or the explicit audited accountability read. Private reasons and structured producer result data are never included.

object

decidedAt

required

string format: date-time

decision

required

string

Allowed values: approve reject changes-requested answer

outcome

required

The policy outcome the decision selected; every decision names one.

string

outcomeLabel

The configured label from the decision’s immutable pinned policy.

string | null

policy

required

object

digest

required

string

>= 71 characters <= 71 characters /^sha256:[0-9a-f]{64}$/

required

string

version

required

string

displayReference

string | null

eligibleProfiles

required

Array<string>

queue

required

string

requestId

required

string format: uuid

requesterReference

required

string

revision

required

integer format: int64

staffingDiagnostic

Bounded notice about unavailable cover or too few distinct approvers.

string

Allowed values: no-cover-available insufficient-distinct-approvers

stageId

required

string

stageIndex

required

integer format: uint16

<= 65535

state

required

One of:

string
object

string

Allowed values: open decided

subject

required

object

digest

required

string

>= 71 characters <= 71 characters /^sha256:[0-9a-f]{64}$/

required

string

source

required

string

type

required

string

version

required

string

taskId

required

string format: uuid

Example

{
  "decisionReceipt": {
    "decision": "approve"
  },
  "staffingDiagnostic": "no-cover-available",
  "state": "open"
}

Headers

traceparent

string

W3C trace context.

400

Problem: request.invalid, source-profile.not-applicable, source-profile.required

application/problem+json

One of:

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: request.invalid

detail

required

Allowed value: The Casework request is invalid.

status

required

Allowed value: 400

title

required

Allowed value: Invalid request

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/request/invalid

Example

{
  "code": "request.invalid",
  "detail": "The Casework request is invalid.",
  "status": 400,
  "title": "Invalid request",
  "type": "https://id.registrystack.org/problems/registry-casework/request/invalid"
}

Headers

traceparent

string

W3C trace context.

401

Problem: authentication.refused

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: authentication.refused

detail

required

Allowed value: The bearer credential is missing, invalid, or expired. Sign in again.

status

required

Allowed value: 401

title

required

Allowed value: Authentication refused

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/authentication/refused

Example

{
  "code": "authentication.refused",
  "detail": "The bearer credential is missing, invalid, or expired. Sign in again.",
  "status": 401,
  "title": "Authentication refused",
  "type": "https://id.registrystack.org/problems/registry-casework/authentication/refused"
}

Headers

WWW-Authenticate

Allowed value: Bearer

traceparent

string

W3C trace context.

403

Problem: operation.not-authorized, profile.not-authorized, profile.not-human, review.distinct-approver-required, review.initiator-excluded

application/problem+json

One of:

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: operation.not-authorized

detail

required

Allowed value: Your current Casework authority does not allow this operation.

status

required

Allowed value: 403

title

required

Allowed value: Operation not authorized

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/operation/not-authorized

Example

{
  "code": "operation.not-authorized",
  "detail": "Your current Casework authority does not allow this operation.",
  "status": 403,
  "title": "Operation not authorized",
  "type": "https://id.registrystack.org/problems/registry-casework/operation/not-authorized"
}

Headers

traceparent

string

W3C trace context.

404

Problem: request.not-found

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: request.not-found

detail

required

Allowed value: The requested Casework route does not exist.

status

required

Allowed value: 404

title

required

Allowed value: Route not found

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/request/not-found

Example

{
  "code": "request.not-found",
  "detail": "The requested Casework route does not exist.",
  "status": 404,
  "title": "Route not found",
  "type": "https://id.registrystack.org/problems/registry-casework/request/not-found"
}

Headers

traceparent

string

W3C trace context.

409

Problem: idempotency.key-reused, review.policy-mismatch, review.submission-conflict, review.task-not-held

application/problem+json

One of:

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: idempotency.key-reused

detail

required

Allowed value: This idempotency key was used for a different request.

status

required

Allowed value: 409

title

required

Allowed value: Idempotency key reused

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/idempotency/key-reused

Example

{
  "code": "idempotency.key-reused",
  "detail": "This idempotency key was used for a different request.",
  "status": 409,
  "title": "Idempotency key reused",
  "type": "https://id.registrystack.org/problems/registry-casework/idempotency/key-reused"
}

Headers

traceparent

string

W3C trace context.

410

Problem: idempotency.expired, review.result-expired

application/problem+json

One of:

object
object

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: idempotency.expired

detail

required

Allowed value: The stored response for this idempotency key has expired. Reconcile the original operation before choosing a new key.

status

required

Allowed value: 410

title

required

Allowed value: Idempotency window expired

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/idempotency/expired

Example

{
  "code": "idempotency.expired",
  "detail": "The stored response for this idempotency key has expired. Reconcile the original operation before choosing a new key.",
  "status": 410,
  "title": "Idempotency window expired",
  "type": "https://id.registrystack.org/problems/registry-casework/idempotency/expired"
}

Headers

traceparent

string

W3C trace context.

412

Problem: precondition.failed

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: precondition.failed

detail

required

Allowed value: The item or directory changed since you loaded it. Reload and try again.

status

required

Allowed value: 412

title

required

Allowed value: Precondition failed

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/precondition/failed

Example

{
  "code": "precondition.failed",
  "detail": "The item or directory changed since you loaded it. Reload and try again.",
  "status": 412,
  "title": "Precondition failed",
  "type": "https://id.registrystack.org/problems/registry-casework/precondition/failed"
}

Headers

traceparent

string

W3C trace context.

413

Problem: request.body-too-large

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: request.body-too-large

detail

required

Allowed value: The request body exceeds the one MiB limit.

status

required

Allowed value: 413

title

required

Allowed value: Request body too large

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/request/body-too-large

Example

{
  "code": "request.body-too-large",
  "detail": "The request body exceeds the one MiB limit.",
  "status": 413,
  "title": "Request body too large",
  "type": "https://id.registrystack.org/problems/registry-casework/request/body-too-large"
}

Headers

traceparent

string

W3C trace context.

415

Problem: request.unsupported-media-type

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: request.unsupported-media-type

detail

required

Allowed value: Send a JSON request body with Content-Type application/json.

status

required

Allowed value: 415

title

required

Allowed value: Unsupported media type

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/request/unsupported-media-type

Example

{
  "code": "request.unsupported-media-type",
  "detail": "Send a JSON request body with Content-Type application/json.",
  "status": 415,
  "title": "Unsupported media type",
  "type": "https://id.registrystack.org/problems/registry-casework/request/unsupported-media-type"
}

Headers

traceparent

string

W3C trace context.

422

Problem: absence.cover-cycle, absence.invalid-period, absence.overlap, absence.self-cover, request.unprocessable, review.initiator-required

application/problem+json

One of:

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: absence.cover-cycle

detail

required

Allowed value: Choose cover assignments that do not return to an earlier person during a shared period.

status

required

Allowed value: 422

title

required

Allowed value: Absence cover cycle

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/absence/cover-cycle

Example

{
  "code": "absence.cover-cycle",
  "detail": "Choose cover assignments that do not return to an earlier person during a shared period.",
  "status": 422,
  "title": "Absence cover cycle",
  "type": "https://id.registrystack.org/problems/registry-casework/absence/cover-cycle"
}

Headers

Registry-Casework-Validation-Path

string

<= 256 characters

Bounded value-free JSON path of the member the request type refused; present together with the validation reason.

Registry-Casework-Validation-Reason

string

Allowed values: policy-not-allowed reference-invalid object-required maximum-bytes-exceeded maximum-depth-exceeded schema-mismatch outcome-not-declared reason-required text-invalid result-not-declared result-required field-not-declared constraint-invalid constraint-violated public-reason-required public-reason-not-declared approval-outcome-differs

Closed value-free validation category, always schema-mismatch for a request shape refusal; present together with the validation path.

traceparent

string

W3C trace context.

428

Problem: precondition.required

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: precondition.required

detail

required

Allowed value: This mutation requires the revision that you loaded.

status

required

Allowed value: 428

title

required

Allowed value: Precondition required

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/precondition/required

Example

{
  "code": "precondition.required",
  "detail": "This mutation requires the revision that you loaded.",
  "status": 428,
  "title": "Precondition required",
  "type": "https://id.registrystack.org/problems/registry-casework/precondition/required"
}

Headers

traceparent

string

W3C trace context.

500

Problem: runtime.failure

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: runtime.failure

detail

required

Allowed value: Casework could not complete the request.

status

required

Allowed value: 500

title

required

Allowed value: Casework runtime failure

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/runtime/failure

Example

{
  "code": "runtime.failure",
  "detail": "Casework could not complete the request.",
  "status": 500,
  "title": "Casework runtime failure",
  "type": "https://id.registrystack.org/problems/registry-casework/runtime/failure"
}

Headers

traceparent

string

W3C trace context.

502

Problem: source.bad-gateway, source.version-mismatch, source.version-unavailable

application/problem+json

One of:

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: source.bad-gateway

detail

required

Allowed value: The source returned a response that does not match its registered contract.

status

required

Allowed value: 502

title

required

Allowed value: Invalid source response

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/source/bad-gateway

Example

{
  "code": "source.bad-gateway",
  "detail": "The source returned a response that does not match its registered contract.",
  "status": 502,
  "title": "Invalid source response",
  "type": "https://id.registrystack.org/problems/registry-casework/source/bad-gateway"
}

Headers

traceparent

string

W3C trace context.

503

Problem: service.unavailable

application/problem+json

object

code

required

string

detail

required

string

status

required

integer

title

required

string

traceId

required

string

type

required

string

code

required

Allowed value: service.unavailable

detail

required

Allowed value: Casework storage is unavailable. Try again after the service recovers.

status

required

Allowed value: 503

title

required

Allowed value: Casework service unavailable

type

required

Allowed value: https://id.registrystack.org/problems/registry-casework/service/unavailable

Example

{
  "code": "service.unavailable",
  "detail": "Casework storage is unavailable. Try again after the service recovers.",
  "status": 503,
  "title": "Casework service unavailable",
  "type": "https://id.registrystack.org/problems/registry-casework/service/unavailable"
}

Headers

Retry-After

integer

traceparent

string

W3C trace context.

Assign review task

Authorizations

Parameters

Path Parameters

Header Parameters

Request Bodyrequired

Example generated

Responses

200

Example

Headers

400

Example

Headers

401

Example

Headers

403

Example

Headers

404

Example

Headers

409

Example

Headers

410

Example

Headers

412

Example

Headers

413

Example

Headers

415

Example

Headers

422

Example

Headers

428

Example

Headers

500

Example

Headers

502

Example

Headers

503

Example

Headers

Request Body^required

Example ^generated