Decionis API
Decionis for DevelopersGitHub
HomeAPI ReferenceSDKsContext Plugin
Internal

Read the exact current historical comparison policy

GET
/v1/internal/commerce/connected/history/policy

Default off; only a dedicated commerceConnectedTransport credential is admitted. Enabled automatic onboarding additionally requires accountSourceAuthority:true with orgIds omitted. This is not a generic wildcard org key. Each handler independently verifies fresh Accounts signed authority, exact resource/source/plan/tenant/revision and the synced projection before disclosing any result. Generic fixed-orgIds service keys keep their existing permissions. Requires the transient source proof header, at least one approved Walmart or Adobe source and an explicit nonzero or null history allowance. Reads the selected exact version; never chooses a default or writes policy.

Authorization

CommerceConnectedTransport
AuthorizationBearer <token>

Dedicated service credential registered only for connected policy, comparison and human evidence transport. Requires a separate current signed source proof per call; never use a customer OAuth, refresh or product-session credential.

In: header

Query Parameters

org_id*string
Formatuuid
policy_version*string
Length1 <= length <= 100

Header Parameters

x-org-id*string

Must equal the body/query organization and the independently verified Accounts source UUID.

Formatuuid
x-commerce-source-authority*string

Private, transient Accounts source-v3 proof from the current OAuth credential context. Unpadded base64url of canonical sorted-key JSON UTF-8, at most 8192 decoded bytes. Never a customer token; never persist or log it.

Match^[A-Za-z0-9_-]+$
Lengthlength <= 10923

Response Body

application/json

curl -X GET "https://example.com/v1/internal/commerce/connected/history/policy?org_id=497f6eca-6276-4993-bfeb-53cbbbba6f08&policy_version=string" \  -H "x-org-id: 497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "x-commerce-source-authority: string"
{  "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b",  "policy": {    "bundle_id": "fc6f5a67-caa1-4339-9c14-a67826143b60",    "version": "string",    "policy_digest": "string",    "floor_percent": 0,    "max_concurrent_discounts": 0,    "price_tolerance_percent": 0,    "price_reference": {      "kind": "recorded_order_original_price",      "max_markdown_percent": 0    },    "comparison": "observed_historical_commerce_checks",    "full_policy_evaluated": false  }}

Default off, worker only: provision a queued TCP route POST

Internal worker only; excluded from public SDK methods. Default off. Identifier-only job, no target or organization selected by the caller. Use the organization's reserved domain and probe only its fixed HTTPS /_agentsafe/tcp/capabilities endpoint. Require transport:agentsafe-tcp-relay/1 and ready:true. Redirects and unexpected responses fail closed. This does not require or activate an HTTPS upstream. Strict empty JSON, at most 1024 bytes.

Compare bounded observed Walmart or Adobe history POST

Default off; only a dedicated commerceConnectedTransport credential is admitted. Enabled automatic onboarding additionally requires accountSourceAuthority:true with orgIds omitted. This is not a generic wildcard org key. Each handler independently verifies fresh Accounts signed authority, exact resource/source/plan/tenant/revision and the synced projection before disclosing any result. Generic fixed-orgIds service keys keep their existing permissions. Requires the transient source proof header and its exact supported marketplace source. Pure comparison of at most 100 documents over the previous 90 complete UTC dates against the exact policy digest. Evaluates only supported historical undercost, margin, discount stacking and price discrepancy facts; missing evidence is not_assessed. The report is unsigned, performs no full policy replay or external action, and is not a 90-day trial. Commerce owns source reads, report reservations and immutable persistence.