@epilot/integration-toolkit-client 1.1.2 → 1.2.0

package/dist/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Integration Toolkit API",
-    "version": "1.0.12",
+    "version": "1.2.0",
     "description": "API for integrating with external systems in a standardised way."
   },
   "tags": [
@@ -2378,21 +2378,25 @@
         }
       }
     },
-    "/v1/integrations/{integrationId}/monitoring/access-logs": {
+    "/v1/integrations/{integrationId}/outbound/messages/poll": {
       "post": {
-        "operationId": "queryAccessLogs",
-        "summary": "queryAccessLogs",
-        "description": "Query API access logs for a specific integration's organization.\nReturns access token usage analytics filtered by user_id (access token).\nSupports infinite scroll pagination with cursor-based navigation.\n",
+        "operationId": "pollOutboundMessages",
+        "summary": "pollOutboundMessages",
+        "description": "Poll outbound messages for an integration's poll-mode use cases.\nTakes a lease on the head-of-line batch of the integration's FIFO stream:\nthe returned messages stay invisible to subsequent polls until they are\nacknowledged or the visibility timeout elapses. POST because taking a\nlease mutates server state — auto-retrying middleware must not burn\nleases. One in-flight batch per stream: while a lease is active (or\nanother poll wins the race), the response is an empty batch\n(`messages: []`), not an error. Requires the `integration:consume` grant.\n",
         "tags": [
-          "monitoring",
           "integrations"
         ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
         "parameters": [
           {
             "name": "integrationId",
             "in": "path",
             "required": true,
-            "description": "The integration ID (used for tenant authorization)",
+            "description": "The integration ID",
             "schema": {
               "type": "string",
               "format": "uuid"
@@ -2400,18 +2404,25 @@
           }
         ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/QueryAccessLogsRequest"
+                "$ref": "#/components/schemas/PollOutboundMessagesRequest"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "$ref": "#/components/responses/QueryAccessLogsResponse"
+            "description": "Leased batch of outbound messages (possibly empty)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PollOutboundMessagesResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2419,6 +2430,9 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
           "404": {
             "$ref": "#/components/responses/NotFound"
           },
@@ -2428,15 +2442,19 @@
         }
       }
     },
-    "/v1/integrations/{integrationId}/monitoring/outbound-events": {
+    "/v1/integrations/{integrationId}/outbound/messages/ack": {
       "post": {
-        "operationId": "queryOutboundMonitoringEvents",
-        "summary": "queryOutboundMonitoringEvents",
-        "description": "Query outbound monitoring events for a specific integration.\nReturns detailed information about outbound event deliveries,\nfiltered by event_name (event_catalog_event) linked to the integration's outbound use cases.\n",
+        "operationId": "ackOutboundMessages",
+        "summary": "ackOutboundMessages",
+        "description": "Acknowledge polled outbound messages. Acks are validated against the\nactive lease and committed as a prefix-contiguous cursor advance:\nmessages must be acknowledged in stream order. Out-of-order acks past\nthe first gap are rejected per id (`out_of_order`), acks with an\noutdated lease token are rejected (`stale_lease`), and unknown ids are\nrejected (`not_found`). Acknowledged messages are never delivered\nagain. Requires the `integration:consume` grant.\n",
         "tags": [
-          "monitoring",
           "integrations"
         ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
         "parameters": [
           {
             "name": "integrationId",
@@ -2454,14 +2472,21 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/QueryOutboundMonitoringEventsRequest"
+                "$ref": "#/components/schemas/AckOutboundMessagesRequest"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "$ref": "#/components/responses/QueryOutboundMonitoringEventsResponse"
+            "description": "Per-id acknowledgement results",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AckOutboundMessagesResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2469,6 +2494,9 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
           "404": {
             "$ref": "#/components/responses/NotFound"
           },
@@ -2478,15 +2506,19 @@
         }
       }
     },
-    "/v2/integrations/{integrationId}/monitoring/events": {
-      "post": {
-        "operationId": "queryMonitoringEventsV2",
-        "summary": "queryMonitoringEventsV2",
-        "description": "Query monitoring events from the unified erp_monitoring_v2 table.\nReturns all event types (inbound, outbound, file_proxy, etc.) in a single list.\nReplaces the separate v1 inbound-events and outbound-events endpoints.\n",
+    "/v1/integrations/{integrationId}/outbound/messages/dlq": {
+      "get": {
+        "operationId": "listOutboundDlqMessages",
+        "summary": "listOutboundDlqMessages",
+        "description": "List an integration's dead-lettered outbound queue messages\n(poison_policy enforcement and operator skips move messages here).\nOperator endpoint — requires the `integration:manage` grant. Message\npayloads are NOT included in listings: entries are keyed by the\nopaque message id and carry delivery metadata only. Paginated via an\nopaque `next_token`.\n",
         "tags": [
-          "monitoring",
           "integrations"
         ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
         "parameters": [
           {
             "name": "integrationId",
@@ -2497,21 +2529,39 @@
               "type": "string",
               "format": "uuid"
             }
-          }
-        ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/QueryMonitoringEventsV2Request"
-              }
+          },
+          {
+            "name": "limit",
+            "in": "query",
+            "required": false,
+            "description": "Maximum number of DLQ entries to return",
+            "schema": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100,
+              "default": 25
+            }
+          },
+          {
+            "name": "next_token",
+            "in": "query",
+            "required": false,
+            "description": "Opaque pagination token from a previous response",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "$ref": "#/components/responses/QueryMonitoringEventsV2Response"
+            "description": "Page of dead-lettered messages",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OutboundDlqListResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2519,6 +2569,9 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
           "404": {
             "$ref": "#/components/responses/NotFound"
           },
@@ -2528,15 +2581,19 @@
         }
       }
     },
-    "/v2/integrations/{integrationId}/monitoring/stats": {
+    "/v1/integrations/{integrationId}/outbound/messages/dlq/redrive": {
       "post": {
-        "operationId": "getMonitoringStatsV2",
-        "summary": "getMonitoringStatsV2",
-        "description": "Get aggregated statistics from the unified erp_monitoring_v2 table.\nReturns combined metrics for all event types with optional breakdowns.\n",
+        "operationId": "redriveOutboundDlqMessages",
+        "summary": "redriveOutboundDlqMessages",
+        "description": "Redrive selected dead-lettered messages back into the live stream.\nOperator endpoint — requires the `integration:manage` grant.\nA redriven message is re-enqueued at the tail with a new id and\nsequence — it is delivered out of its original per-entity order (the\nstream has moved on); this is inherent to redrive and matches SQS DLQ\nsemantics. The redriven copy starts with zero delivery attempts and a\nfresh retention window; the original DLQ entry is removed. Per-id\nresults report `redriven` or `not_found` (unknown ids, or entries\nconcurrently redriven/expired).\n",
         "tags": [
-          "monitoring",
           "integrations"
         ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
         "parameters": [
           {
             "name": "integrationId",
@@ -2554,14 +2611,21 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/GetMonitoringStatsV2Request"
+                "$ref": "#/components/schemas/RedriveOutboundDlqRequest"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "$ref": "#/components/responses/GetMonitoringStatsV2Response"
+            "description": "Per-id redrive results",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RedriveOutboundDlqResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2569,6 +2633,9 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
           "404": {
             "$ref": "#/components/responses/NotFound"
           },
@@ -2578,15 +2645,19 @@
         }
       }
     },
-    "/v2/integrations/{integrationId}/monitoring/time-series": {
+    "/v1/integrations/{integrationId}/outbound/messages/unblock": {
       "post": {
-        "operationId": "getMonitoringTimeSeriesV2",
-        "summary": "getMonitoringTimeSeriesV2",
-        "description": "Get time-series aggregated event counts from the unified erp_monitoring_v2 table.\nReturns bucketed counts for chart rendering.\n",
+        "operationId": "unblockOutboundStream",
+        "summary": "unblockOutboundStream",
+        "description": "Unblock an integration's outbound stream halted by the `block`\npoison policy: skips (dead-letters) the current blocked head message,\nemitting MSG_DEAD_LETTERED and letting the next message become the\nhead. Operator endpoint — requires the `integration:manage` grant.\nReturns `unblocked: false` as a no-op when the stream is not\ncurrently blocked (or the state moved concurrently) — safe to retry.\n",
         "tags": [
-          "monitoring",
           "integrations"
         ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
         "parameters": [
           {
             "name": "integrationId",
@@ -2600,18 +2671,25 @@
           }
         ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/GetMonitoringTimeSeriesV2Request"
+                "$ref": "#/components/schemas/UnblockOutboundStreamRequest"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "$ref": "#/components/responses/GetMonitoringTimeSeriesV2Response"
+            "description": "Unblock outcome",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UnblockOutboundStreamResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2619,6 +2697,9 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
           "404": {
             "$ref": "#/components/responses/NotFound"
           },
@@ -2628,11 +2709,11 @@
         }
       }
     },
-    "/v2/integrations/{integrationId}/monitoring/events/{eventId}/associated": {
-      "get": {
-        "operationId": "getAssociatedMonitoringEvents",
-        "summary": "getAssociatedMonitoringEvents",
-        "description": "Returns all monitoring events sharing the same event_id, ordered chronologically.\nAlso includes the original inbound event payload from erp_incoming_events if available.\nUsed to display a full event trace/timeline.\n",
+    "/v1/integrations/{integrationId}/monitoring/access-logs": {
+      "post": {
+        "operationId": "queryAccessLogs",
+        "summary": "queryAccessLogs",
+        "description": "Query API access logs for a specific integration's organization.\nReturns access token usage analytics filtered by user_id (access token).\nSupports infinite scroll pagination with cursor-based navigation.\n",
         "tags": [
           "monitoring",
           "integrations"
@@ -2642,25 +2723,26 @@
             "name": "integrationId",
             "in": "path",
             "required": true,
-            "description": "The integration ID",
+            "description": "The integration ID (used for tenant authorization)",
             "schema": {
               "type": "string",
               "format": "uuid"
             }
-          },
-          {
-            "name": "eventId",
-            "in": "path",
-            "required": true,
-            "description": "The event ID to get associated events for",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/QueryAccessLogsRequest"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
-            "$ref": "#/components/responses/GetAssociatedMonitoringEventsResponse"
+            "$ref": "#/components/responses/QueryAccessLogsResponse"
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -2668,67 +2750,84 @@
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
           "500": {
             "$ref": "#/components/responses/InternalServerError"
           }
         }
       }
     },
-    "/v1/integrations/secure-proxies": {
-      "get": {
-        "operationId": "listSecureProxies",
-        "summary": "List all secure proxy use cases",
-        "description": "Lists all secure_proxy use cases across all integrations for the authenticated organization.\nReturns minimal data suitable for dropdowns and selection UIs.\n",
+    "/v1/integrations/{integrationId}/monitoring/outbound-events": {
+      "post": {
+        "operationId": "queryOutboundMonitoringEvents",
+        "summary": "queryOutboundMonitoringEvents",
+        "description": "Query outbound monitoring events for a specific integration.\nReturns detailed information about outbound event deliveries,\nfiltered by event_name (event_catalog_event) linked to the integration's outbound use cases.\n",
         "tags": [
+          "monitoring",
           "integrations"
         ],
-        "security": [
+        "parameters": [
           {
-            "EpilotAuth": []
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
           }
         ],
-        "responses": {
-          "200": {
-            "description": "Successfully retrieved secure proxy use cases",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "required": [
-                    "secure_proxies"
-                  ],
-                  "properties": {
-                    "secure_proxies": {
-                      "type": "array",
-                      "items": {
-                        "$ref": "#/components/schemas/SecureProxySummary"
-                      }
-                    }
-                  }
-                }
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/QueryOutboundMonitoringEventsRequest"
               }
             }
+          }
+        },
+        "responses": {
+          "200": {
+            "$ref": "#/components/responses/QueryOutboundMonitoringEventsResponse"
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
           "500": {
             "$ref": "#/components/responses/InternalServerError"
           }
         }
       }
     },
-    "/v1/secure-proxy": {
+    "/v2/integrations/{integrationId}/monitoring/events": {
       "post": {
-        "operationId": "secureProxy",
-        "summary": "Proxy HTTP request through secure VPC",
-        "description": "Routes an HTTP request through a VPC with either static IP egress or VPN secure link access.\nThe VPC mode is determined by the referenced secure_proxy use case configuration.\nFor secure_link mode, the target URL must match the use case's allowed_domains whitelist.\n",
+        "operationId": "queryMonitoringEventsV2",
+        "summary": "queryMonitoringEventsV2",
+        "description": "Query monitoring events from the unified erp_monitoring_v2 table.\nReturns all event types (inbound, outbound, file_proxy, etc.) in a single list.\nReplaces the separate v1 inbound-events and outbound-events endpoints.\n",
         "tags": [
-          "proxy"
+          "monitoring",
+          "integrations"
         ],
-        "security": [
+        "parameters": [
           {
-            "EpilotAuth": []
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
           }
         ],
         "requestBody": {
@@ -2736,15 +2835,247 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/SecureProxyRequest"
+                "$ref": "#/components/schemas/QueryMonitoringEventsV2Request"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "description": "Proxied response from the target URL",
-            "content": {
+            "$ref": "#/components/responses/QueryMonitoringEventsV2Response"
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
+    "/v2/integrations/{integrationId}/monitoring/stats": {
+      "post": {
+        "operationId": "getMonitoringStatsV2",
+        "summary": "getMonitoringStatsV2",
+        "description": "Get aggregated statistics from the unified erp_monitoring_v2 table.\nReturns combined metrics for all event types with optional breakdowns.\n",
+        "tags": [
+          "monitoring",
+          "integrations"
+        ],
+        "parameters": [
+          {
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/GetMonitoringStatsV2Request"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "$ref": "#/components/responses/GetMonitoringStatsV2Response"
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
+    "/v2/integrations/{integrationId}/monitoring/time-series": {
+      "post": {
+        "operationId": "getMonitoringTimeSeriesV2",
+        "summary": "getMonitoringTimeSeriesV2",
+        "description": "Get time-series aggregated event counts from the unified erp_monitoring_v2 table.\nReturns bucketed counts for chart rendering.\n",
+        "tags": [
+          "monitoring",
+          "integrations"
+        ],
+        "parameters": [
+          {
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/GetMonitoringTimeSeriesV2Request"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "$ref": "#/components/responses/GetMonitoringTimeSeriesV2Response"
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
+    "/v2/integrations/{integrationId}/monitoring/events/{eventId}/associated": {
+      "get": {
+        "operationId": "getAssociatedMonitoringEvents",
+        "summary": "getAssociatedMonitoringEvents",
+        "description": "Returns all monitoring events sharing the same event_id, ordered chronologically.\nAlso includes the original inbound event payload from erp_incoming_events if available.\nUsed to display a full event trace/timeline.\n",
+        "tags": [
+          "monitoring",
+          "integrations"
+        ],
+        "parameters": [
+          {
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "name": "eventId",
+            "in": "path",
+            "required": true,
+            "description": "The event ID to get associated events for",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "$ref": "#/components/responses/GetAssociatedMonitoringEventsResponse"
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
+    "/v1/integrations/secure-proxies": {
+      "get": {
+        "operationId": "listSecureProxies",
+        "summary": "List all secure proxy use cases",
+        "description": "Lists all secure_proxy use cases across all integrations for the authenticated organization.\nReturns minimal data suitable for dropdowns and selection UIs.\n",
+        "tags": [
+          "integrations"
+        ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successfully retrieved secure proxy use cases",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "secure_proxies"
+                  ],
+                  "properties": {
+                    "secure_proxies": {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/components/schemas/SecureProxySummary"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
+    "/v1/secure-proxy": {
+      "post": {
+        "operationId": "secureProxy",
+        "summary": "Proxy HTTP request through secure VPC",
+        "description": "Routes an HTTP request through a VPC with either static IP egress or VPN secure link access.\nThe VPC mode is determined by the referenced secure_proxy use case configuration.\nFor secure_link mode, the target URL must match the use case's allowed_domains whitelist.\n",
+        "tags": [
+          "proxy"
+        ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SecureProxyRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Proxied response from the target URL",
+            "content": {
               "application/json": {
                 "schema": {
                   "$ref": "#/components/schemas/SecureProxyResponse"
@@ -6462,11 +6793,10 @@
         "type": "object",
         "required": [
           "name",
-          "jsonata_expression",
           "enabled",
           "delivery"
         ],
-        "description": "A mapping that transforms an event and delivers it to a webhook",
+        "description": "A mapping that delivers an event to an external system — either pushed to a webhook (with a JSONata payload transformation) or made available on the pull-based poll queue (raw event payload, no transformation)",
         "properties": {
           "id": {
             "type": "string",
@@ -6480,7 +6810,7 @@
           },
           "jsonata_expression": {
             "type": "string",
-            "description": "JSONata expression to transform the event payload",
+            "description": "JSONata expression to transform the event payload. Required for webhook delivery; ignored for poll delivery.",
             "example": "{ \"id\": entity._id, \"customer\": entity.customer_name }"
           },
           "enabled": {
@@ -6504,19 +6834,37 @@
         }
       },
       "DeliveryConfig": {
+        "description": "Configuration for how the event should be delivered. webhook = push delivery via svc-webhooks (JSONata-transformed payload); poll = pull-based queue delivery where the consumer fetches items via the poll API (raw event payload)",
+        "oneOf": [
+          {
+            "$ref": "#/components/schemas/WebhookDeliveryConfig"
+          },
+          {
+            "$ref": "#/components/schemas/PollDeliveryConfig"
+          }
+        ],
+        "discriminator": {
+          "propertyName": "type",
+          "mapping": {
+            "webhook": "#/components/schemas/WebhookDeliveryConfig",
+            "poll": "#/components/schemas/PollDeliveryConfig"
+          }
+        }
+      },
+      "WebhookDeliveryConfig": {
         "type": "object",
         "required": [
           "type",
           "webhook_id"
         ],
-        "description": "Configuration for how the transformed event should be delivered",
+        "description": "Push delivery of the transformed event to a webhook via svc-webhooks",
         "properties": {
           "type": {
             "type": "string",
             "enum": [
               "webhook"
             ],
-            "description": "Delivery mechanism type (currently only webhook is supported)"
+            "description": "Delivery mechanism type"
           },
           "webhook_id": {
             "type": "string",
@@ -6532,6 +6880,45 @@
           }
         }
       },
+      "PollDeliveryConfig": {
+        "type": "object",
+        "required": [
+          "type"
+        ],
+        "description": "Pull-based queue delivery. Items carry the raw standardized event-catalog payload; no JSONata mapping is applied in poll mode. Consumers fetch and acknowledge items via the poll API.",
+        "properties": {
+          "type": {
+            "type": "string",
+            "enum": [
+              "poll"
+            ],
+            "description": "Delivery mechanism type"
+          },
+          "retention_days": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 90,
+            "default": 30,
+            "description": "How long undelivered queue items are retained before expiry"
+          },
+          "poison_policy": {
+            "type": "string",
+            "enum": [
+              "dead_letter",
+              "block"
+            ],
+            "default": "dead_letter",
+            "description": "What happens when an item exhausts max_delivery_attempts: dead_letter routes the exhausted item to the dead-letter queue; block halts the queue until operator/consumer action. Enforcement lands with the queue consumer (Phase 10) — this field defines the contract."
+          },
+          "max_delivery_attempts": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 100,
+            "default": 5,
+            "description": "Maximum delivery attempts before the poison_policy is applied"
+          }
+        }
+      },
       "OutboundStatusResponse": {
         "type": "object",
         "required": [
@@ -6599,6 +6986,52 @@
               "$ref": "#/components/schemas/OutboundConflict"
             },
             "description": "List of detected conflicts, if any"
+          },
+          "poll": {
+            "$ref": "#/components/schemas/OutboundPollStatus"
+          }
+        }
+      },
+      "OutboundPollStatus": {
+        "type": "object",
+        "description": "Queue/consumer health for a poll-mode use case. Present only on use\ncases with a poll delivery mapping — webhook-only use cases are\nunaffected. Depth/age/DLQ numbers are first-page approximations.\n",
+        "required": [
+          "queue_depth",
+          "oldest_unconsumed_age_seconds",
+          "last_poll_at",
+          "last_ack_at",
+          "blocked",
+          "dlq_count"
+        ],
+        "properties": {
+          "queue_depth": {
+            "type": "integer",
+            "description": "Unconsumed messages attributable to this use case (first-page approximation)"
+          },
+          "oldest_unconsumed_age_seconds": {
+            "type": "integer",
+            "nullable": true,
+            "description": "Age of the oldest unconsumed message in seconds — null when the queue is empty"
+          },
+          "last_poll_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "Timestamp of the last successful poll lease — null before the first poll"
+          },
+          "last_ack_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "Timestamp of the last committed acknowledgment — null before the first ack"
+          },
+          "blocked": {
+            "type": "boolean",
+            "description": "Whether the integration's outbound stream is currently halted by a\nblocked head message (poison_policy 'block'). Stream-level flag —\nthe same value is reported on every poll use case of the\nintegration, because the stream spans them.\n"
+          },
+          "dlq_count": {
+            "type": "integer",
+            "description": "Dead-lettered messages of this use case awaiting redrive or expiry (first-page approximation)"
           }
         }
       },
@@ -6636,9 +7069,11 @@
               "event_disabled",
               "all_webhooks_disabled",
               "event_enabled_while_disabled",
-              "webhook_enabled_while_disabled"
+              "webhook_enabled_while_disabled",
+              "stream_blocked",
+              "dlq_items_present"
             ],
-            "description": "Type of conflict:\n- 'event_disabled': Event catalog event is disabled while use case is enabled\n- 'all_webhooks_disabled': All webhooks are disabled while use case is enabled\n- 'event_enabled_while_disabled': Event is enabled while use case is disabled\n- 'webhook_enabled_while_disabled': A webhook is enabled while use case is disabled\n"
+            "description": "Type of conflict:\n- 'event_disabled': Event catalog event is disabled while use case is enabled\n- 'all_webhooks_disabled': All webhooks are disabled while use case is enabled\n- 'event_enabled_while_disabled': Event is enabled while use case is disabled\n- 'webhook_enabled_while_disabled': A webhook is enabled while use case is disabled\n- 'stream_blocked': The outbound stream is halted by a poison message awaiting operator action or consumer ack (poll mode)\n- 'dlq_items_present': Dead-lettered messages await redrive or expiry (poll mode)\n"
           },
           "webhookId": {
             "type": "string",
@@ -6650,6 +7085,320 @@
           }
         }
       },
+      "PollOutboundMessagesRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "limit": {
+            "type": "integer",
+            "maximum": 100,
+            "minimum": 1,
+            "default": 10,
+            "description": "Maximum number of messages to lease in this batch. The ~5.5 MB\nresponse cap may truncate the batch earlier when payloads are\nlarge — the leased run shrinks accordingly.\n"
+          }
+        }
+      },
+      "OutboundMessage": {
+        "type": "object",
+        "required": [
+          "id",
+          "lease_token",
+          "use_case_id",
+          "event_name",
+          "event_id",
+          "group",
+          "payload",
+          "enqueued_at"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Opaque message id (msg_…) — stable per message across leases"
+          },
+          "lease_token": {
+            "type": "string",
+            "description": "Opaque lease token (lt_…) — echo back on ack"
+          },
+          "use_case_id": {
+            "type": "string",
+            "description": "The poll-mode use case that produced this message"
+          },
+          "event_name": {
+            "type": "string",
+            "description": "Standardized event name (e.g. contract.updated)"
+          },
+          "event_id": {
+            "type": "string",
+            "description": "Unique id of the originating event"
+          },
+          "group": {
+            "type": "string",
+            "description": "Ordering group — messages sharing a group are strictly ordered,\ndistinct groups are independent. Constant \"0\" in v1.\n"
+          },
+          "payload": {
+            "type": "object",
+            "additionalProperties": true,
+            "description": "The raw standardized event-catalog event, always inlined as-is"
+          },
+          "enqueued_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the message was enqueued"
+          }
+        }
+      },
+      "PollOutboundMessagesResponse": {
+        "type": "object",
+        "required": [
+          "messages",
+          "visibility_timeout_seconds",
+          "has_more"
+        ],
+        "properties": {
+          "messages": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/OutboundMessage"
+            },
+            "description": "The leased batch in strict stream order (empty when contended or drained)"
+          },
+          "visibility_timeout_seconds": {
+            "type": "integer",
+            "description": "Effective visibility timeout for this lease — a per-integration\nserver-side setting (default 300 seconds)\n"
+          },
+          "has_more": {
+            "type": "boolean",
+            "description": "Whether more messages are available beyond this batch"
+          }
+        }
+      },
+      "AckOutboundMessagesRequest": {
+        "type": "object",
+        "required": [
+          "acks"
+        ],
+        "properties": {
+          "acks": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 100,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "id",
+                "lease_token"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "description": "The message id (msg_…) to acknowledge"
+                },
+                "lease_token": {
+                  "type": "string",
+                  "description": "The lease token (lt_…) returned by the poll that leased this message"
+                }
+              }
+            }
+          }
+        }
+      },
+      "AckResult": {
+        "type": "object",
+        "required": [
+          "id",
+          "status"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The acknowledged message id"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "accepted",
+              "rejected"
+            ]
+          },
+          "reason": {
+            "type": "string",
+            "enum": [
+              "stale_lease",
+              "out_of_order",
+              "not_found"
+            ],
+            "description": "Rejection reason — present only when status is rejected"
+          }
+        }
+      },
+      "AckOutboundMessagesResponse": {
+        "type": "object",
+        "required": [
+          "results"
+        ],
+        "properties": {
+          "results": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AckResult"
+            },
+            "description": "Per-id acknowledgement outcome"
+          }
+        }
+      },
+      "OutboundDlqMessage": {
+        "type": "object",
+        "required": [
+          "id",
+          "use_case_id",
+          "event_name",
+          "event_id",
+          "dead_lettered_at",
+          "delivery_attempts"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Opaque message id (msg_…) of the dead-lettered message"
+          },
+          "use_case_id": {
+            "type": "string",
+            "description": "The poll-mode use case that produced this message"
+          },
+          "event_name": {
+            "type": "string",
+            "description": "Standardized event name (e.g. contract.updated)"
+          },
+          "event_id": {
+            "type": "string",
+            "description": "Unique id of the originating event"
+          },
+          "enqueued_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the message was originally enqueued"
+          },
+          "dead_lettered_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the message was dead-lettered"
+          },
+          "delivery_attempts": {
+            "type": "integer",
+            "description": "Delivery attempts at the moment the message was dead-lettered"
+          },
+          "reason": {
+            "type": "string",
+            "description": "Why the message was dead-lettered (policy or operator reason)"
+          },
+          "expires_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the DLQ entry expires (retention window re-armed at dead-letter time)"
+          }
+        }
+      },
+      "OutboundDlqListResponse": {
+        "type": "object",
+        "required": [
+          "items"
+        ],
+        "properties": {
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/OutboundDlqMessage"
+            },
+            "description": "Dead-lettered messages, oldest first"
+          },
+          "next_token": {
+            "type": "string",
+            "description": "Opaque pagination token — present when more entries exist"
+          }
+        }
+      },
+      "RedriveOutboundDlqRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "ids"
+        ],
+        "properties": {
+          "ids": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 100,
+            "items": {
+              "type": "string"
+            },
+            "description": "Message ids (msg_…) of the DLQ entries to redrive"
+          }
+        }
+      },
+      "RedriveOutboundDlqResult": {
+        "type": "object",
+        "required": [
+          "id",
+          "status"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "The requested message id"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "redriven",
+              "not_found"
+            ],
+            "description": "Outcome — `redriven` re-enqueued at the tail; `not_found` for\nunknown ids or entries concurrently redriven/expired\n"
+          }
+        }
+      },
+      "RedriveOutboundDlqResponse": {
+        "type": "object",
+        "required": [
+          "results"
+        ],
+        "properties": {
+          "results": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RedriveOutboundDlqResult"
+            },
+            "description": "Per-id redrive outcome, input order preserved"
+          }
+        }
+      },
+      "UnblockOutboundStreamRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "reason": {
+            "type": "string",
+            "maxLength": 500,
+            "description": "Operator reason recorded on the dead-lettered head"
+          }
+        }
+      },
+      "UnblockOutboundStreamResponse": {
+        "type": "object",
+        "required": [
+          "unblocked"
+        ],
+        "properties": {
+          "unblocked": {
+            "type": "boolean",
+            "description": "Whether a blocked head was skipped (false = no-op, stream was not blocked)"
+          },
+          "dead_lettered_id": {
+            "type": "string",
+            "description": "Message id of the skipped head — present only when unblocked is true"
+          }
+        }
+      },
       "RelationConfig": {
         "type": "object",
         "required": [