@epilot/cli 0.1.217 → 0.1.219

package/definitions/journey.json

@@ -44,6 +44,12 @@
     "/v1/journey/organization/{id}": {
       "get": {
         "operationId": "getJourneysByOrgId",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:view",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "getJourneysByOrgId",
         "description": "Get all journeys by organization id",
         "tags": [
@@ -88,6 +94,19 @@
     "/v1/journey/configuration/{id}": {
       "get": {
         "operationId": "getJourney",
+        "x-epilot-permissions": [
+          {
+            "anyOf": [
+              {
+                "action": "entity:view",
+                "resource": "journey:*"
+              },
+              {
+                "access": "portal"
+              }
+            ]
+          }
+        ],
         "summary": "getJourney",
         "description": "Get journey by id. Private journeys requires valid private token to be passed",
         "security": [
@@ -178,6 +197,12 @@
       },
       "delete": {
         "operationId": "removeJourney",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:delete",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "removeJourney",
         "description": "Remove journey by id",
         "tags": [
@@ -223,6 +248,12 @@
     "/v1/journey/configuration/{id}/revisions": {
       "post": {
         "operationId": "createJourneyRevision",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "createJourneyRevision",
         "description": "Creates a revision: an immutable copy of the complete journey configuration, identified by `revision_id`. Nothing customers receive changes; the revision only becomes the published version when it is published. The payload is complete and is not merged against the journey record or the previous revision. The entity datasource set of the revision is stored separately through the datasources API under the same `revision_id`.\n\nOnly available for organizations with journey versioning enabled; returns `404` otherwise.\n",
         "tags": [
@@ -291,6 +322,12 @@
       },
       "get": {
         "operationId": "listJourneyRevisions",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "listJourneyRevisions",
         "description": "Lists the journey's revision history, newest first. Metadata only, no configuration payload. `is_published` says whether a revision is the published version right now, which is a different question from `published_at`, which records the last time it was published.\n\nOnly available for organizations with journey versioning enabled; returns `404` otherwise.\n",
         "tags": [
@@ -361,6 +398,12 @@
     "/v1/journey/configuration/{id}/revisions/{revision_id}": {
       "get": {
         "operationId": "getJourneyRevision",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "getJourneyRevision",
         "description": "Returns one revision with its full configuration, in the shape the builder holds a journey in, so it can be loaded straight into the editor as unsaved changes. Reading a revision changes nothing; a client persists it, if at all, by posting it back to `POST .../revisions`.\n\nOnly available for organizations with journey versioning enabled; returns `404` otherwise.\n",
         "tags": [
@@ -417,6 +460,12 @@
     "/v1/journey/configuration/{id}/publish": {
       "post": {
         "operationId": "publishJourneyRevision",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "publishJourneyRevision",
         "description": "Makes one revision the published version, the one customers receive, in a single transaction: the revision's configuration is copied onto the journey record, its datasource set onto the published datasources, and `name`, `description`, `published_at` and `published_by` are stamped onto the revision. Any revision can be published, old or new, so publishing an older revision is the rollback.\n\n`name` is generated server-side when omitted, so every published revision carries one; an omitted name never replaces a name a previous publish already set. `settings.isActive` is never changed by a publish.\n\nOnly available for organizations with journey versioning enabled; returns `404` otherwise.\n",
         "tags": [
@@ -480,6 +529,12 @@
     "/v1/journey/configuration/{id}/publish-state": {
       "get": {
         "operationId": "getJourneyPublishState",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "getJourneyPublishState",
         "description": "Answers which revision is the published version without paging through the history. A journey that has not adopted versioning yet returns `200` with `published_revision_id: null`, not `404`.\n\nOnly available for organizations with journey versioning enabled; returns `404` otherwise.\n",
         "tags": [
@@ -526,6 +581,18 @@
     "/v1/journey/configuration/{id}/environment": {
       "get": {
         "operationId": "getJourneyEnvironment",
+        "x-epilot-permissions": [
+          {
+            "anyOf": [
+              {
+                "access": "org"
+              },
+              {
+                "access": "portal"
+              }
+            ]
+          }
+        ],
         "summary": "getJourneyEnvironment",
         "description": "Resolve the environment variables referenced by this journey: the environment-backed datasources declared in its steps, whether they source a block's options or supply the value an attached validation rule compares against, answered per datasource id; and the variables its logic conditions read, keyed by variable key (`variables` / `variableErrors`). Only browser-safe value types are returned; validation-rule values additionally exclude `Map`. Accepts either the public journey access token bound to this journey, or the caller's own portal (ECP) or epilot user token. A PRIVATE journey is served only to a portal or user token permitted to view it, the same rule getJourney applies.",
         "security": [
@@ -585,6 +652,11 @@
     "/v1/journey/configuration/{id}/external-values": {
       "post": {
         "operationId": "resolveJourneyExternalValues",
+        "x-epilot-permissions": [
+          {
+            "access": "portal"
+          }
+        ],
         "summary": "resolveJourneyExternalValues",
         "description": "Resolve the External Values hooks this journey's validation rules compare against.\n\nThe journey runtime never calls external-values-api itself. A request names a datasource\nid declared by the saved journey config; the app and hook it resolves are read from that\nconfig, so a visitor cannot aim an installed app's integration at an arbitrary hook.\n\nRequires a portal token: a hook call reaches the organization's third-party system, so it\nstays behind the identified-customer boundary. Public journeys skip these conditions.\n\nAnswers 200 whenever the request itself was valid, including when a hook failed — per\ndatasource, so one unreachable system never fails the rules that did resolve.\n",
         "security": [
@@ -648,6 +720,12 @@
     "/v1/journey/environment-variables": {
       "get": {
         "operationId": "getJourneyEnvironmentVariables",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:view",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "getJourneyEnvironmentVariables",
         "description": "List the organization's client-safe environment variables a journey may use: Map and List<Link> as an options source; Text, Number, Boolean and lists of them in logic conditions. Only variables that currently hold a valid value are returned. Intended for the journey builder's authoring UI; requires a journey authoring token, not an environments token.",
         "security": [
@@ -689,9 +767,61 @@
         }
       }
     },
+    "/v1/journey/template-variables": {
+      "get": {
+        "operationId": "getJourneyTemplateVariables",
+        "summary": "getJourneyTemplateVariables",
+        "description": "List what a journey template can reference beyond the entity's own attributes: the organization's Custom Variables and its scalar environment variables (`String`, `Text`, `Number`, `Boolean`). Names only, never values. Intended for the journey builder's variable picker; requires a journey authoring token, not an environments token.",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:view",
+            "resource": "journey:*"
+          }
+        ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
+        "tags": [
+          "Journeys"
+        ],
+        "responses": {
+          "200": {
+            "description": "Custom Variables and scalar environment variables available to templates",
+            "headers": {
+              "Cache-Control": {
+                "schema": {
+                  "type": "string"
+                },
+                "description": "Always private, no-store"
+              }
+            },
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/JourneyTemplateVariablesResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Authorization token missing"
+          },
+          "403": {
+            "description": "Not permitted to read this organization's journeys"
+          }
+        }
+      }
+    },
     "/v1/journey/products/{id}": {
       "get": {
         "operationId": "getJourneyProducts",
+        "x-epilot-permissions": [
+          {
+            "access": "org"
+          }
+        ],
         "summary": "getJourneyProducts",
         "description": "Get products available in the journey by id. requires public journey token to be passed.",
         "security": [
@@ -777,6 +907,12 @@
     "/v1/journey/configuration": {
       "post": {
         "operationId": "createJourney",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:create",
+            "resource": "journey"
+          }
+        ],
         "summary": "createJourney",
         "description": "Create a Journey",
         "tags": [
@@ -830,6 +966,12 @@
       },
       "put": {
         "operationId": "updateJourney",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "updateJourney",
         "description": "Update a Journey",
         "tags": [
@@ -876,6 +1018,12 @@
       },
       "patch": {
         "operationId": "patchUpdateJourney",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "patchUpdateJourney",
         "description": "Update a Journey (partially / patch). Support for nested properties updates (e.g. \"property[0].name\").",
         "tags": [
@@ -943,6 +1091,12 @@
     "/v1/journey/configuration/search": {
       "post": {
         "operationId": "searchJourneys",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:view",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "searchJourneys",
         "description": "Search Journeys",
         "tags": [
@@ -976,6 +1130,11 @@
     "/v1/journey/document:generate": {
       "post": {
         "operationId": "generateDocument",
+        "x-epilot-permissions": [
+          {
+            "access": "org"
+          }
+        ],
         "summary": "generateDocument",
         "description": "Builds document generated from a template with journey values.\"\n\nSupported input document types:\n- .docx\n\nSupported output document types:\n- .pdf\n- .docx but limited to only text based variables\n\nUses [Document API](https://gitlab.com/e-pilot/product/file-management/document-api) to generate the document.\nUses [Template Variables API](https://docs.epilot.io/api/template-variables) to replace variables in the document.\n",
         "security": [
@@ -1013,6 +1172,12 @@
     "/v2/journey/configuration": {
       "post": {
         "operationId": "createJourneyV2",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:create",
+            "resource": "journey"
+          }
+        ],
         "summary": "createJourneyV2",
         "description": "Create a Journey",
         "tags": [
@@ -1066,6 +1231,12 @@
       },
       "put": {
         "operationId": "updateJourneyV2",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "updateJourneyV2",
         "description": "Update a Journey",
         "tags": [
@@ -1123,6 +1294,12 @@
       },
       "patch": {
         "operationId": "patchUpdateJourneyV2",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:edit",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "patchUpdateJourneyV2",
         "description": "Update a Journey (partially / patch). Support for nested properties updates (e.g. \"property[0].name\").",
         "tags": [
@@ -1241,6 +1418,12 @@
       },
       "delete": {
         "operationId": "removeJourneyV2",
+        "x-epilot-permissions": [
+          {
+            "action": "entity:delete",
+            "resource": "journey:*"
+          }
+        ],
         "summary": "removeJourneyV2",
         "description": "Remove journey by id",
         "tags": [
@@ -1275,9 +1458,7 @@
         "tags": [
           "Journeys"
         ],
-        "security": [
-          {}
-        ],
+        "security": [],
         "parameters": [
           {
             "name": "id",
@@ -1340,6 +1521,11 @@
     "/v1/journey/button-options": {
       "get": {
         "operationId": "getButtonOptions",
+        "x-epilot-permissions": [
+          {
+            "access": "org"
+          }
+        ],
         "summary": "getButtonOptions",
         "description": "Get button options from a csv file.",
         "security": [
@@ -1843,6 +2029,156 @@
           }
         }
       },
+      "JourneyTemplatingContext": {
+        "description": "What the journey's Handlebars templates need from the organization, derived from the served configuration only. Present when the journey contains templates and templating is enabled for the organization. Read-only: like `featureFlags`, it is dropped from any write, so a client that sends the configuration back never stores it.\n",
+        "type": "object",
+        "properties": {
+          "templating": {
+            "$ref": "#/components/schemas/JourneyTemplating"
+          }
+        }
+      },
+      "JourneyTemplateVariablesResponse": {
+        "type": "object",
+        "required": [
+          "customVariables",
+          "environment"
+        ],
+        "properties": {
+          "customVariables": {
+            "type": "array",
+            "description": "Custom Variables a template can expand as `{{key}}`",
+            "items": {
+              "type": "object",
+              "required": [
+                "key",
+                "name"
+              ],
+              "properties": {
+                "key": {
+                  "type": "string"
+                },
+                "name": {
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "environment": {
+            "type": "array",
+            "description": "Environment variables a template can read as `{{env.key}}`; a Link as `{{env.key.url}}` and `{{env.key.label}}`",
+            "items": {
+              "type": "object",
+              "required": [
+                "key",
+                "type"
+              ],
+              "properties": {
+                "key": {
+                  "type": "string"
+                },
+                "type": {
+                  "type": "string",
+                  "enum": [
+                    "String",
+                    "Text",
+                    "Number",
+                    "Boolean",
+                    "Link"
+                  ]
+                },
+                "description": {
+                  "type": "string"
+                },
+                "group": {
+                  "type": "string",
+                  "description": "The environment group the variable belongs to, when it has one"
+                }
+              }
+            }
+          }
+        }
+      },
+      "JourneyTemplating": {
+        "type": "object",
+        "required": [
+          "customVariables",
+          "env"
+        ],
+        "properties": {
+          "customVariables": {
+            "type": "array",
+            "description": "Custom Variables the journey's templates reference, expanded transitively",
+            "items": {
+              "type": "object",
+              "required": [
+                "key",
+                "template"
+              ],
+              "properties": {
+                "key": {
+                  "type": "string"
+                },
+                "template": {
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "env": {
+            "type": "object",
+            "description": "Browser-safe environment values the templates read, keyed by variable key; scalars, or a Link's fields",
+            "additionalProperties": {
+              "oneOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "number"
+                },
+                {
+                  "type": "boolean"
+                },
+                {
+                  "$ref": "#/components/schemas/JourneyTemplatingLink"
+                }
+              ]
+            }
+          }
+        }
+      },
+      "JourneyTemplatingLink": {
+        "type": "object",
+        "description": "A Link variable; label and description are a string or per-language strings, resolved by the runtime",
+        "required": [
+          "url",
+          "label"
+        ],
+        "properties": {
+          "url": {
+            "type": "string"
+          },
+          "label": {
+            "$ref": "#/components/schemas/JourneyTemplatingTranslatable"
+          },
+          "description": {
+            "$ref": "#/components/schemas/JourneyTemplatingTranslatable"
+          }
+        }
+      },
+      "JourneyTemplatingTranslatable": {
+        "oneOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            }
+          }
+        ]
+      },
       "JourneyEnvironmentVariablesResponse": {
         "type": "object",
         "required": [
@@ -2517,6 +2853,32 @@
                   "modernProducts": {
                     "type": "boolean",
                     "description": "Opt this journey into the modern product presentation (product tiles and details modal). Effective when true OR the organization flag `journey-modern-products` is on.\n"
+                  },
+                  "modernLauncher": {
+                    "type": "boolean",
+                    "description": "Opt this launcher journey into the modern Journey Launcher (picker, card and hero shells). Launcher journeys only. Effective when true OR the organization flag `journey-modern-launcher` is on.\n"
+                  }
+                }
+              },
+              "offline": {
+                "type": "object",
+                "nullable": true,
+                "description": "Offline journeys (ER-5432). Revision-owned like every other setting: effective on publish. The runtime prepares an offline pack for this journey only when the organization flag `journey-offline` is on AND `enabled` is true.\n",
+                "additionalProperties": false,
+                "required": [
+                  "enabled"
+                ],
+                "properties": {
+                  "enabled": {
+                    "type": "boolean",
+                    "description": "Prepare this journey for offline use on devices that open it online first."
+                  },
+                  "packTtlHours": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 720,
+                    "description": "How long a prepared pack stays fresh before the next online open refreshes it. Default 24.",
+                    "example": 24
                   }
                 }
               }
@@ -2538,11 +2900,6 @@
               "example": "123e4567-e89b-12d3-a456-426614174000"
             }
           },
-          "blueprint_customization": {
-            "type": "object",
-            "description": "Blueprint field-locking contract (server-managed). Carries the\nauthor plane (locks, default level) and the org plane (server-derived\noverlay). Public writes never persist client-supplied values — the\nstored contract is authoritative; it is written only by the\nBlueprints install pipeline.\n",
-            "additionalProperties": true
-          },
           "createdBy": {
             "type": "string"
           },
@@ -3073,6 +3430,32 @@
                   "modernProducts": {
                     "type": "boolean",
                     "description": "Opt this journey into the modern product presentation (product tiles and details modal). Effective when true OR the organization flag `journey-modern-products` is on.\n"
+                  },
+                  "modernLauncher": {
+                    "type": "boolean",
+                    "description": "Opt this launcher journey into the modern Journey Launcher (picker, card and hero shells). Launcher journeys only. Effective when true OR the organization flag `journey-modern-launcher` is on.\n"
+                  }
+                }
+              },
+              "offline": {
+                "type": "object",
+                "nullable": true,
+                "description": "Offline journeys (ER-5432). Revision-owned like every other setting: effective on publish. The runtime prepares an offline pack for this journey only when the organization flag `journey-offline` is on AND `enabled` is true.\n",
+                "additionalProperties": false,
+                "required": [
+                  "enabled"
+                ],
+                "properties": {
+                  "enabled": {
+                    "type": "boolean",
+                    "description": "Prepare this journey for offline use on devices that open it online first."
+                  },
+                  "packTtlHours": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 720,
+                    "description": "How long a prepared pack stays fresh before the next online open refreshes it. Default 24.",
+                    "example": 24
                   }
                 }
               }
@@ -3090,11 +3473,6 @@
               "format": "uuid",
               "example": "123e4567-e89b-12d3-a456-426614174000"
             }
-          },
-          "blueprint_customization": {
-            "type": "object",
-            "description": "Blueprint field-locking contract (server-managed). Carries the\nauthor plane (locks, default level) and the org plane (server-derived\noverlay). Public writes never persist client-supplied values — the\nstored contract is authoritative; it is written only by the\nBlueprints install pipeline.\n",
-            "additionalProperties": true
           }
         },
         "required": [
@@ -3248,6 +3626,9 @@
           },
           {
             "$ref": "#/components/schemas/JourneyFeatureFlags"
+          },
+          {
+            "$ref": "#/components/schemas/JourneyTemplatingContext"
           }
         ]
       },
@@ -3900,6 +4281,11 @@
             "type": "boolean",
             "description": "When set to false, third-party cookies and resources should be completely disabled to comply with GDPR regulations.",
             "example": true
+          },
+          "offline": {
+            "type": "boolean",
+            "description": "Offline journeys (ER-5432): whether the published revision has settings.offline.enabled. Absent when the setting was never set.",
+            "example": true
           }
         }
       },

package/definitions/validation-rules.json

@@ -208,7 +208,7 @@
             }
           },
           "400": {
-            "description": "Bad Request - Invalid request body. Invalid external or environment comparison values additionally\ncarry a `code`: `external_value_not_found` when the app is not installed or the hook / result does not\nexist, `external_value_incompatible` when the result type does not match the compared kind,\n`environment_variable_not_found` when the referenced environment variable does not exist in the\norganisation, `environment_variable_incompatible` when its type cannot be compared as required\n(`Number` for numbers, `Text` for text and dates, `Number` / `Text` / `Boolean` for `applies_when`;\n`String`, `SecretString`, `Map` and `JSON` never).\n",
+            "description": "Bad Request - Invalid request body. Invalid external or environment comparison values additionally\ncarry a `code`: `external_value_not_found` when the app is not installed or the hook / result does not\nexist or an `inputs` key is not a value input the hook declares, `external_value_incompatible` when the\nresult type does not match the compared kind or an input's parameter is used as another kind in the rule,\n`environment_variable_not_found` when the referenced environment variable does not exist in the\norganisation, `environment_variable_incompatible` when its type cannot be compared as required\n(`Number` for numbers, `Text` for text and dates, `Number` / `Text` / `Boolean` for `applies_when`;\n`String`, `SecretString`, `Map` and `JSON` never).\n",
             "content": {
               "application/json": {
                 "schema": {
@@ -493,7 +493,7 @@
             }
           },
           "400": {
-            "description": "Bad Request - Invalid request body. Invalid external or environment comparison values additionally\ncarry a `code`: `external_value_not_found` when the app is not installed or the hook / result does not\nexist, `external_value_incompatible` when the result type does not match the compared kind,\n`environment_variable_not_found` when the referenced environment variable does not exist in the\norganisation, `environment_variable_incompatible` when its type cannot be compared as required\n(`Number` for numbers, `Text` for text and dates, `Number` / `Text` / `Boolean` for `applies_when`;\n`String`, `SecretString`, `Map` and `JSON` never).\n",
+            "description": "Bad Request - Invalid request body. Invalid external or environment comparison values additionally\ncarry a `code`: `external_value_not_found` when the app is not installed or the hook / result does not\nexist or an `inputs` key is not a value input the hook declares, `external_value_incompatible` when the\nresult type does not match the compared kind or an input's parameter is used as another kind in the rule,\n`environment_variable_not_found` when the referenced environment variable does not exist in the\norganisation, `environment_variable_incompatible` when its type cannot be compared as required\n(`Number` for numbers, `Text` for text and dates, `Number` / `Text` / `Boolean` for `applies_when`;\n`String`, `SecretString`, `Map` and `JSON` never).\n",
             "content": {
               "application/json": {
                 "schema": {
@@ -2193,7 +2193,7 @@
       },
       "ExternalValue": {
         "type": "object",
-        "description": "A comparison value produced at evaluation time by an External Values hook of an installed\napp (component type `EXTERNAL_VALUES`). The rule stores the reference only; the value is\nresolved server-side by the external-values-api, which executes the hook's HTTP call with\nthe app's credentials and returns the typed result identified by `result_id`.\n\nWrite-time validation checks that the app is installed in the organisation, that the hook\nand result exist, and that the result's type is compatible with the compared kind\n(`number` results for numeric comparisons, `text` for text, `date` for date). External values\nare resolved only for authenticated consumers (epilot 360 users and portal end customers);\nin public journeys the dependent conditions are skipped.\n",
+        "description": "A comparison value produced at evaluation time by an External Values hook of an installed\napp (component type `EXTERNAL_VALUES`). The rule stores the reference only; the value is\nresolved server-side by the external-values-api, which executes the hook's HTTP call with\nthe app's credentials and returns the typed result identified by `result_id`.\n\nWrite-time validation checks that the app is installed in the organisation, that the hook\nand result exist, and that the result's type is compatible with the compared kind\n(`number` results for numeric comparisons, `text` for text, `date` for date). External values\nare resolved only for authenticated consumers (epilot 360 users and portal end customers);\nin public journeys the dependent conditions are skipped.\n\nA hook may declare value inputs (`contexts` entries `{ \"type\": \"value\", \"name\", \"value_type\" }`)\nbesides the entities it receives. `inputs` supplies them from rule parameters, which the\nconsumer binds like any other parameter and sends to the hook as `Context.<name>`.\n",
         "required": [
           "source",
           "app_id",
@@ -2228,6 +2228,14 @@
             "pattern": "^[a-zA-Z0-9_-]+$",
             "description": "ID of the result entry within the hook whose value is compared."
           },
+          "inputs": {
+            "type": "object",
+            "maxProperties": 10,
+            "description": "Values for the hook's value inputs, keyed by the input name the hook declares\n(`contexts` entry of type `value`), e.g. `{ \"reading_date\": { \"source\": \"parameter\", \"name\": \"reading_date\" } }`.\nOnly parameters are supported. Write-time validation checks that every key is a value input the\nhook declares and uses the input's `value_type` (`number`, `text`, `date` or `boolean`) as the\nparameter's kind, so the parameter must not be compared as another kind elsewhere in the rule.\nAn input parameter must not carry an adjustment. Declared inputs without an entry are allowed;\nthe consumer omits an input that has no value.\n",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/ParameterValue"
+            }
+          },
           "adjust": {
             "$ref": "#/components/schemas/ValueAdjustment"
           }
@@ -2235,7 +2243,7 @@
       },
       "ParameterValue": {
         "type": "object",
-        "description": "A comparison value supplied by the surface that evaluates the rule, identified by a name\nthe rule chooses (e.g. `start_date`). The rule stores the name only. The consuming surface\nbinds the name to a source of its own - a journey binds it to the value of another block -\nand resolves it at evaluation time, so the rule never references the surface's objects\nand stays reusable across journeys and forms.\n\nThe kind a parameter is compared as follows from the field it sits in: `number`, `text`\nor `date` for comparison values, range bounds, adjustment amounts and relative date\noffsets, or a number, string or boolean as an `applies_when` value. One name is compared\nas one kind throughout a rule; a rule using a name as two kinds is rejected at write time.\nA parameter the surface leaves unbound or empty leaves the comparison unresolved.\n",
+        "description": "A comparison value supplied by the consumer that evaluates the rule, identified by a name\nthe rule chooses (e.g. `start_date`). The rule stores the name only. The consumer binds the\nname to a source of its own - a journey binds it to the value of another block - and\nresolves it at evaluation time, so the rule never references the consumer's objects and\nstays reusable across journeys and forms.\n\nA parameter's kind is determined by the field it is used in: `number`, `text` or `date`\nfor comparison values, range bounds, adjustment amounts and relative date offsets, or a\nnumber, string or boolean as an `applies_when` value, or the `value_type` of the External\nValues hook input it supplies (`ExternalValue.inputs`). One name is compared as one kind\nthroughout a rule; a rule using a name as two kinds is rejected at write time. A parameter\nthe consumer leaves unbound or empty leaves the comparison unresolved.\n",
         "required": [
           "source",
           "name"