`GET /api/inbox/decisions/count` — the aggregate pending-decision count (#874 IA-1a). Counting-parity with `GET /api/inbox/board` is structural: both run [`sources::fetch_all`], so a source the caller cannot read (or that errors) contributes 0 here exactly when it contributes 0 there.

GET

/api/inbox/decisions/count

curl --request GET \
  --url https://example.com/api/inbox/decisions/count

Responses

200

Media typeapplication/json

The decision-inbox count, total plus the per-source breakdown the total is the sum of. The breakdown is not cosmetic: it is what makes a badge/inbox disagreement diagnosable instead of a mystery number. Every field is the caller’s ACTIONABLE count for that source (#976 R2: identical to the union board’s facets.actionable arithmetic).

object

governor_proposals

required

Governor profile-version proposals still open (workspace OWNER only).

integer

memory_reviews

required

Memory-governance review items still pending (admin + entitlement).

integer

pending

required

Sum of the source counts — equals the board’s facets.actionable.

integer

proposals

required

AI-scaffold proposals still pending (member-decidable). #976 R2.

integer

skill_proposals

required

Induced-skill proposals still open (admin-decidable; 0 for a member).

integer

suggestions

required

Active governor recommendations (admin-decidable; 0 for a member). #976 R2.

integer

tool_approvals

required

Interactive task tool/question/visual gates (workspace-scoped).

integer

workflow_gates

required

Workflow human gates waiting on the caller (deduped per workflow run).

integer

Example^generated

{
  "governor_proposals": 1,
  "memory_reviews": 1,
  "pending": 1,
  "proposals": 1,
  "skill_proposals": 1,
  "suggestions": 1,
  "tool_approvals": 1,
  "workflow_gates": 1
}

401

Authentication required

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden license_required license_expired bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited too_many_requests quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

403

Permission denied

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden license_required license_expired bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited too_many_requests quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

500

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden license_required license_expired bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited too_many_requests quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}