---
title: "Update Org Action Proposal"
method: PATCH
path: "/api/v1/org-actions/proposals/{proposal_id}"
tags: ["authed"]
---

# Update Org Action Proposal

`PATCH /api/v1/org-actions/proposals/{proposal_id}`

## Request

- Base URL: `https://api.teaflask.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.teaflask.com/api/v1/org-actions/proposals/{proposal_id}`
- Auth: none declared

Edit-in-place for the review inbox: the reviewer grooms the odd
proposal instead of dismissing it. The patch merges onto the
effective definition, revalidates in full, and stamps the proposal
human-edited — later scans leave an edited payload alone. The
response carries the new payload_fingerprint, which is the consent
baseline the follow-up approve must echo.

## Path parameters

- `proposal_id` string, uuid, required

## Request body

- UpdateOrgActionProposalRequest: A partial edit onto the proposal's effective definition (the agent enrichment folded in first — editing materializes it). The merged result revalidates in full, and the endpoint (method + path shape) and the provenance are not editable: they are the scan's observed evidence, not the reviewer's to rewrite.
  - `action` object, required
  - `reviewed_fingerprint` string, required

## Response `200`

Successful Response

- OrgActionProposalResponse
  - `id` string, uuid, required
  - `organization_id` string, uuid, required
  - `kind` 'create' | 'update' | 'deprecate', required
  - `org_action_id` string, uuid, nullable, required
  - `payload` object, required
  - `payload_fingerprint` string, required
  - `member_edits` EditReview[], required
    - `facet` string[], required: The edited part of the action.
    - `label` string, required: The edited part in words, like "title".
    - `yours` object, required: The member's version.
    - `code_then` object, nullable, required: What the code said when the member edited it; null when that isn't known.
    - `update` object, required: The update's version.
    - `edited_by_user_id` string, uuid, nullable, required: Who made the edit; null when that isn't known.
    - `edited_at` string, date-time, nullable, required: When the edit was made; null when that isn't known.
    - `in_this_update` boolean, required: Whether the edit was made to this suggestion rather than to the action.
    - `outcome` 'follows' | 'kept' | 'gone' | 'conflict', required
    - `sentence` string, nullable, required: Why the edit no longer applies; null unless it is gone.
  - `status` 'open' | 'approved' | 'dismissed' | 'withdrawn', required
  - `reviewed_by_user_id` string, uuid, nullable, required
  - `reviewed_at` string, date-time, nullable, required
  - `withdrawn_reason` string, nullable, required
  - `edited_by_user_id` string, uuid, nullable, required
  - `edited_at` string, date-time, nullable, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `405`: Method not allowed
- `409`: The proposal is already decided, has no definition to edit, or its payload changed after the reviewer read it
- `422`: Validation error
- `500`: Internal server error

---

[API](https://skmtc.dev/teaflask/apis/teaflask-api.md) - [All operations](https://skmtc.dev/teaflask/apis/teaflask-api/llms.txt) - [OpenAPI document](https://skmtc.dev/teaflask/apis/teaflask-api/revisions/d23e9286b847?raw)