@epilot/sdk 2.8.7 → 2.8.9

package/definitions/customer-portal.json

@@ -1867,6 +1867,13 @@
                               "example": "CAA_ERROR"
                             }
                           }
+                        },
+                        "identity_providers": {
+                          "type": "array",
+                          "description": "SSO identity providers configured for the portal. Includes raw\n`oidc_config.client_secret` values so the admin UI can round-trip\nthem. Customers are encouraged to reference secrets via env\ntemplates (`{{ env.VAR }}`) rather than embed raw values.\n",
+                          "items": {
+                            "$ref": "#/components/schemas/ProviderConfig"
+                          }
                         }
                       }
                     }
@@ -1994,6 +2001,13 @@
                               "example": "CAA_ERROR"
                             }
                           }
+                        },
+                        "identity_providers": {
+                          "type": "array",
+                          "description": "SSO identity providers configured for the portal. Includes raw\n`oidc_config.client_secret` values so the admin UI can round-trip\nthem. Customers are encouraged to reference secrets via env\ntemplates (`{{ env.VAR }}`) rather than embed raw values.\n",
+                          "items": {
+                            "$ref": "#/components/schemas/ProviderConfig"
+                          }
                         }
                       }
                     }
@@ -7668,7 +7682,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Resolved public SSO provider configuration",
+            "description": "Resolved public SSO provider configuration. The handler strips `oidc_config.client_secret` from the response (kept server-side for the token exchange); the schema includes it for shape compatibility with the portal-config response.",
             "content": {
               "application/json": {
                 "schema": {
@@ -8381,6 +8395,96 @@
         }
       }
     },
+    "/v2/portal/config/triggered-journeys/{trigger_name}": {
+      "parameters": [
+        {
+          "in": "path",
+          "name": "trigger_name",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "enum": [
+              "FIRST_LOGIN",
+              "ACCEPT_ORDER",
+              "DECLINE_ORDER"
+            ]
+          },
+          "description": "The trigger event for the auto-triggered journey"
+        }
+      ],
+      "get": {
+        "operationId": "getTriggeredJourney",
+        "summary": "getTriggeredJourney",
+        "description": "Returns the auto-triggered journey configured for the given trigger\nwith handlebars templates in `context_params` already resolved.\nUses the caller's auth context (contact, portal user) plus any\n`context_entities` supplied at trigger time (e.g. the order being\naccepted) — same resolver as `getPortalPages`.\n",
+        "tags": [
+          "ECP"
+        ],
+        "security": [
+          {
+            "PortalAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "query",
+            "name": "context_entities",
+            "required": false,
+            "description": "Additional entities to include in the resolution context (e.g. the order being accepted at trigger time). Portal User and Contact entities are automatically part of the context.",
+            "schema": {
+              "$ref": "#/components/schemas/ContextEntities"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The triggered journey has been resolved successfully.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "trigger_name": {
+                      "type": "string",
+                      "enum": [
+                        "FIRST_LOGIN",
+                        "ACCEPT_ORDER",
+                        "DECLINE_ORDER"
+                      ]
+                    },
+                    "journey_id": {
+                      "$ref": "#/components/schemas/EntityId"
+                    },
+                    "context_params": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "key": {
+                            "type": "string"
+                          },
+                          "value": {
+                            "type": "string"
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
     "/v2/portal/pages/default": {
       "get": {
         "operationId": "getDefaultPages",
@@ -10708,14 +10812,18 @@
                 "description": "Default admin users for pending user notification to notify"
               }
             }
+          },
+          "identity_providers": {
+            "type": "array",
+            "description": "SSO identity providers for the portal. When sent on a portal save (PUT/POST),\nthe list is fully synced — incoming providers are upserted and any existing\nproviders not in the list are deleted. Omit the field to leave SSO\nconfiguration unchanged; send an empty array to remove all providers.\n\nEach provider is persisted verbatim — `oidc_config.client_secret` is stored\nas sent. Customers are encouraged to reference an org env secret via\n`{{ env.VAR }}` rather than embed raw values.\n",
+            "items": {
+              "$ref": "#/components/schemas/ProviderConfig"
+            }
           }
         }
       },
       "CommonConfigAttributes": {
         "type": "object",
-        "required": [
-          "domain"
-        ],
         "properties": {
           "enabled": {
             "type": "boolean",
@@ -10771,14 +10879,19 @@
           },
           "self_registration_account_setting": {
             "type": "string",
-            "description": "Controls behavior of self-registration when account is used as the registration entity",
+            "description": "Controls behavior of self-registration when account is the registration\nentity. `BLOCK_IF_PORTAL_USER_EXISTS` matches an existing account and\nrejects the request when any portal user is already linked to that\naccount (no creation). Blocking can also be enabled on the other\nnon-create modes via `block_registration_if_portal_user_exists`.\n",
             "enum": [
-              "ALLOW_WITH_CONTACT_CREATION",
+              "ALLOW_WITH_CREATION",
               "DENY",
-              "ALWAYS_CREATE_CONTACT",
+              "ALWAYS_CREATE",
+              "BLOCK_IF_PORTAL_USER_EXISTS",
               "DISALLOW_COMPLETELY"
             ]
           },
+          "block_registration_if_portal_user_exists": {
+            "type": "boolean",
+            "description": "Account-mode only. Reject registration when the resolved account already\nhas any portal user (any portal user whose mapped contact is linked to\nthe account).\n"
+          },
           "self_registration_entity": {
             "type": "string",
             "description": "Entity type used as the primary identifier for self-registration",
@@ -11095,6 +11208,40 @@
               }
             ]
           },
+          "contact_identifiers_for_account": {
+            "type": "array",
+            "description": "Account-mode only. Identifiers on the contact entity of the primarily\nidentified account. Used to pick an existing related contact within the\nresolved account; if none matches, the values are written onto the new\ncontact that is created and linked to the account.\n",
+            "items": {
+              "$ref": "#/components/schemas/RegistrationIdentifier"
+            },
+            "example": [
+              {
+                "name": "first_name",
+                "schema": "contact"
+              },
+              {
+                "name": "last_name",
+                "schema": "contact"
+              }
+            ]
+          },
+          "additional_contact_attributes": {
+            "type": "array",
+            "description": "Contact attributes collected from the user during self-registration that are\nwritten onto the newly created contact but are not used to identify an\nexisting one.\n",
+            "items": {
+              "$ref": "#/components/schemas/AdditionalContactAttribute"
+            },
+            "example": [
+              {
+                "name": "first_name",
+                "required": true
+              },
+              {
+                "name": "last_name",
+                "required": true
+              }
+            ]
+          },
           "triggered_journeys": {
             "type": "array",
             "description": "Journeys automatically opened on a portal user action",
@@ -11111,6 +11258,21 @@
                 },
                 "journey_id": {
                   "$ref": "#/components/schemas/EntityId"
+                },
+                "context_params": {
+                  "type": "array",
+                  "description": "Context parameters forwarded to the journey when it is\nauto-triggered. Values may contain handlebars templates\nthat reference the available context (e.g.\n`{{contact._id}}`, `{{portal_user.email}}`,\n`{{order._id}}`) — these are resolved at trigger time by\n`GET /v2/portal/config/triggered-journeys/{trigger_name}`\nusing the caller's auth context plus runtime entities\nsupplied via the `context_entities` query param.\n",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "key": {
+                        "type": "string"
+                      },
+                      "value": {
+                        "type": "string"
+                      }
+                    }
+                  }
                 }
               }
             }
@@ -11222,9 +11384,6 @@
         }
       },
       "UpsertPortalConfig": {
-        "required": [
-          "domain"
-        ],
         "allOf": [
           {
             "$ref": "#/components/schemas/UpdateOnlyPortalConfigAttributes"
@@ -11802,6 +11961,28 @@
                   }
                 }
               },
+              "contact_identifiers_for_account": {
+                "type": "object",
+                "description": "Account-mode only. Values for the contact identifiers configured\nunder `contact_identifiers_for_account` on the portal. Used to\nfind an existing related contact within the resolved account, or\nwritten onto the new contact if none matches.\n",
+                "additionalProperties": {
+                  "type": "string"
+                },
+                "example": {
+                  "first_name": "John",
+                  "last_name": "Doe"
+                }
+              },
+              "additional_contact_attributes": {
+                "type": "object",
+                "description": "Values for the contact attributes configured under\n`additional_contact_attributes` on the portal. These are written\nonto the newly created contact but are not used to identify an\nexisting one.\n",
+                "additionalProperties": {
+                  "type": "string"
+                },
+                "example": {
+                  "first_name": "John",
+                  "last_name": "Doe"
+                }
+              },
               "account_id": {
                 "type": "string",
                 "description": "ID of the account"
@@ -13915,6 +14096,24 @@
           }
         }
       },
+      "AdditionalContactAttribute": {
+        "type": "object",
+        "description": "A contact attribute that is collected from the user during self-registration\nand written onto the newly created contact, but is NOT used to identify\nan existing contact.\n",
+        "required": [
+          "name"
+        ],
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Name of the contact attribute"
+          },
+          "required": {
+            "type": "boolean",
+            "description": "Whether the user must provide a value for this attribute",
+            "default": false
+          }
+        }
+      },
       "ContractIdentifier": {
         "type": "object",
         "properties": {
@@ -14062,6 +14261,9 @@
           "contractIdentification": {
             "type": "object",
             "properties": {
+              "app": {
+                "$ref": "#/components/schemas/PublicAppDetails"
+              },
               "extension": {
                 "$ref": "#/components/schemas/PublicExtensionDetails"
               },
@@ -14640,7 +14842,8 @@
               },
               "result": {
                 "type": "string",
-                "description": "Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation."
+                "deprecated": true,
+                "description": "Deprecated. Use `resolved.result` instead. Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation."
               }
             },
             "required": [
@@ -14648,6 +14851,20 @@
               "headers"
             ]
           },
+          "resolved": {
+            "type": "object",
+            "properties": {
+              "result": {
+                "type": "string",
+                "description": "Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation. Supersedes the deprecated `call.result`."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
+              }
+            }
+          },
           "use_static_ips": {
             "type": "boolean",
             "deprecated": true,
@@ -14710,7 +14927,8 @@
               },
               "result": {
                 "type": "string",
-                "description": "Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation."
+                "deprecated": true,
+                "description": "Deprecated. Use `resolved.result` instead. Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation."
               }
             },
             "required": [
@@ -14718,6 +14936,20 @@
               "headers"
             ]
           },
+          "resolved": {
+            "type": "object",
+            "properties": {
+              "result": {
+                "type": "string",
+                "description": "Contract or Contact ID usually retrieved from the response body, e.g. `{{CallResponse.data.contact_id}}`. If no result is passed and the request suceeds, we attempt to resolve the Contact ID automatically. Supports variable interpolation. Supersedes the deprecated `call.result`."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
+              }
+            }
+          },
           "assignment_mode": {
             "type": "string",
             "enum": [
@@ -14822,11 +15054,16 @@
             "type": "object",
             "description": "Response to the call",
             "properties": {
-              "dataPath": {
+              "data_path": {
                 "type": "string",
                 "description": "Optional path to an array in the response. If specified and the path points to an array,\nthe hook will map over each item using 'Item' variable for interpolation.\nRelevant only if plausibility_mode is \"range\".\n",
                 "example": "data.results"
               },
+              "dataPath": {
+                "type": "string",
+                "deprecated": true,
+                "description": "Deprecated. Use `data_path` instead."
+              },
               "counter_identifiers": {
                 "description": "Counter identifier(s) used to match against the meter's counters.\nCan be a string (counter ID) or an object with counter properties.\nThe backend resolves this to meter_counter_id in the final response.\nRelevant only if plausibility_mode is \"range\".\n",
                 "oneOf": [
@@ -14859,6 +15096,11 @@
                 "type": "string",
                 "description": "Lower allowed limit of the meter reading",
                 "example": "{{CallResponse.data.lower_limit}}"
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
               }
             }
           },
@@ -14935,9 +15177,19 @@
           "resolved": {
             "type": "object",
             "properties": {
-              "dataPath": {
+              "data_path": {
                 "type": "string",
                 "description": "Optional path to the data (array) in the response. If omitted, the data is assumed to be on the top level."
+              },
+              "dataPath": {
+                "type": "string",
+                "deprecated": true,
+                "description": "Deprecated. Use `data_path` instead."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
               }
             }
           },
@@ -15013,9 +15265,19 @@
           "resolved": {
             "type": "object",
             "properties": {
-              "dataPath": {
+              "data_path": {
                 "type": "string",
                 "description": "Optional path to the data (array) in the response. If omitted, the data is assumed to be on the top level."
+              },
+              "dataPath": {
+                "type": "string",
+                "deprecated": true,
+                "description": "Deprecated. Use `data_path` instead."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
               }
             }
           },
@@ -15095,6 +15357,16 @@
               "url"
             ]
           },
+          "resolved": {
+            "type": "object",
+            "properties": {
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
+              }
+            }
+          },
           "use_static_ips": {
             "type": "boolean",
             "deprecated": true,
@@ -15167,9 +15439,19 @@
           "resolved": {
             "type": "object",
             "properties": {
-              "dataPath": {
+              "data_path": {
                 "type": "string",
                 "description": "Optional path to the metadata object in the response. If omitted, the metadata is assumed to be on the top level."
+              },
+              "dataPath": {
+                "type": "string",
+                "deprecated": true,
+                "description": "Deprecated. Use `data_path` instead."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
               }
             }
           },
@@ -15245,9 +15527,19 @@
           "resolved": {
             "type": "object",
             "properties": {
-              "dataPath": {
+              "data_path": {
                 "type": "string",
                 "description": "Optional path to the data (array) in the response. If omitted, the data is assumed to be on the top level."
+              },
+              "dataPath": {
+                "type": "string",
+                "deprecated": true,
+                "description": "Deprecated. Use `data_path` instead."
+              },
+              "error_message_path": {
+                "type": "string",
+                "description": "Optional path to a human-readable error message in the third-party response body, used when the call fails (non-2xx status).\nIf specified and the path resolves to a string, that message is forwarded to the end user instead of a generic error.\n",
+                "example": "error.message"
               }
             }
           },
@@ -15611,7 +15903,7 @@
             "$ref": "#/components/schemas/ProviderDisplayName"
           },
           "oidc_config": {
-            "$ref": "#/components/schemas/OIDCProviderPublicConfig"
+            "$ref": "#/components/schemas/OIDCProviderConfig"
           },
           "mobile_oidc_config": {
             "$ref": "#/components/schemas/MoblieOIDCConfig"
@@ -15761,7 +16053,7 @@
       },
       "OIDCProviderConfig": {
         "type": "object",
-        "description": "OIDC provider configuration. All string fields support env var interpolation\n(incl. secrets) via mustache-like templates, e.g. `{{ env.MY_PROVIDER_CLIENT_SECRET }}`.\n",
+        "description": "OIDC provider configuration. Values are resolved at SSO invocation time\n(login / callback), so the fields below may reference org env vars via\nmustache-like templates, e.g. `{{ env.MY_PROVIDER_CLIENT_SECRET }}`.\n\nFields used to render the SSO buttons up-front (`ProviderConfig.slug`,\n`ProviderConfig.display_name`) are NOT interpolated and must be literal.\n",
         "properties": {
           "type": {
             "type": "string",
@@ -15809,61 +16101,8 @@
             "enum": [
               "login",
               "select_account",
-              "consent"
-            ]
-          }
-        },
-        "required": [
-          "oidc_issuer",
-          "client_id",
-          "scope"
-        ]
-      },
-      "OIDCProviderPublicConfig": {
-        "type": "object",
-        "description": "Public OIDC provider configuration. Same as OIDCProviderConfig but never includes\nthe `client_secret` field — it is kept server-side and only used to exchange the\nauthorization code at the SSO callback. String fields are returned with env var\nplaceholders already resolved when fetched via `GET /v2/portal/public/sso/providers/{provider_slug}`.\n",
-        "properties": {
-          "type": {
-            "type": "string",
-            "enum": [
-              "authorization_code",
-              "implicit"
-            ],
-            "default": "implicit"
-          },
-          "oidc_issuer": {
-            "type": "string",
-            "description": "Issuing Authority URL",
-            "example": "https://login.microsoftonline.com/33d4f3e5-3df2-421e-b92e-a63cfa680a88/v2.0"
-          },
-          "redirect_uri": {
-            "type": "string",
-            "description": "Redirect URI for the OIDC flow",
-            "example": "https://customer-portal.com/login"
-          },
-          "client_id": {
-            "type": "string",
-            "example": "ab81daf8-8b1f-42d6-94ca-c51621054c75"
-          },
-          "has_client_secret": {
-            "type": "boolean",
-            "description": "Whether the client secret is present (the value itself is kept server-side)",
-            "example": true
-          },
-          "scope": {
-            "type": "string",
-            "description": "Space-separated list of OAuth 2.0 scopes to request from OpenID Connect",
-            "example": "openid email"
-          },
-          "metadata": {
-            "$ref": "#/components/schemas/OIDCProviderMetadata"
-          },
-          "prompt": {
-            "type": "string",
-            "enum": [
-              "login",
-              "select_account",
-              "consent"
+              "consent",
+              "signup"
             ]
           }
         },
@@ -15875,7 +16114,7 @@
       },
       "MoblieOIDCConfig": {
         "type": "object",
-        "description": "Mobile OIDC configuration. All string fields support env var interpolation\n(incl. secrets) via mustache-like templates, e.g. `{{ env.MOBILE_CLIENT_SECRET }}`.\n",
+        "description": "Mobile OIDC configuration. Values are resolved at SSO invocation time, so the\nfields below may reference org env vars via mustache-like templates, e.g.\n`{{ env.MOBILE_CLIENT_SECRET }}`.\n",
         "properties": {
           "client_id": {
             "type": "string",
@@ -15892,6 +16131,18 @@
       "OIDCProviderMetadata": {
         "type": "object",
         "properties": {
+          "response_modes_supported": {
+            "type": "array",
+            "description": "Response modes the provider accepts (e.g. `form_post` for Apple)",
+            "items": {
+              "type": "string",
+              "enum": [
+                "form_post",
+                "fragment",
+                "query"
+              ]
+            }
+          },
           "authorization_endpoint": {
             "type": "string",
             "description": "URL of the authorization endpoint",
@@ -16407,14 +16658,19 @@
           },
           "self_registration_account_setting": {
             "type": "string",
-            "description": "Controls behavior of self-registration when account is used as the registration entity",
+            "description": "Controls behavior of self-registration when account is the registration\nentity. `BLOCK_IF_PORTAL_USER_EXISTS` matches an existing account and\nrejects the request when any portal user is already linked to that\naccount (no creation). Blocking can also be enabled on the other\nnon-create modes via `block_registration_if_portal_user_exists`.\n",
             "enum": [
-              "ALLOW_WITH_CONTACT_CREATION",
+              "ALLOW_WITH_CREATION",
               "DENY",
-              "ALWAYS_CREATE_CONTACT",
+              "ALWAYS_CREATE",
+              "BLOCK_IF_PORTAL_USER_EXISTS",
               "DISALLOW_COMPLETELY"
             ]
           },
+          "block_registration_if_portal_user_exists": {
+            "type": "boolean",
+            "description": "Account-mode only. Reject registration when the resolved account already\nhas any portal user (any portal user whose mapped contact is linked to\nthe account).\n"
+          },
           "self_registration_entity": {
             "type": "string",
             "description": "Entity type used as the primary identifier for self-registration",
@@ -16731,6 +16987,40 @@
               }
             ]
           },
+          "contact_identifiers_for_account": {
+            "type": "array",
+            "description": "Account-mode only. Identifiers on the contact entity of the primarily\nidentified account. Used to pick an existing related contact within the\nresolved account; if none matches, the values are written onto the new\ncontact that is created and linked to the account.\n",
+            "items": {
+              "$ref": "#/components/schemas/RegistrationIdentifier"
+            },
+            "example": [
+              {
+                "name": "first_name",
+                "schema": "contact"
+              },
+              {
+                "name": "last_name",
+                "schema": "contact"
+              }
+            ]
+          },
+          "additional_contact_attributes": {
+            "type": "array",
+            "description": "Contact attributes collected from the user during self-registration that are\nwritten onto the newly created contact but are not used to identify an\nexisting one.\n",
+            "items": {
+              "$ref": "#/components/schemas/AdditionalContactAttribute"
+            },
+            "example": [
+              {
+                "name": "first_name",
+                "required": true
+              },
+              {
+                "name": "last_name",
+                "required": true
+              }
+            ]
+          },
           "triggered_journeys": {
             "type": "array",
             "description": "Journeys automatically opened on a portal user action",
@@ -16747,6 +17037,21 @@
                 },
                 "journey_id": {
                   "$ref": "#/components/schemas/EntityId"
+                },
+                "context_params": {
+                  "type": "array",
+                  "description": "Context parameters forwarded to the journey when it is\nauto-triggered. Values may contain handlebars templates\nthat reference the available context (e.g.\n`{{contact._id}}`, `{{portal_user.email}}`,\n`{{order._id}}`) — these are resolved at trigger time by\n`GET /v2/portal/config/triggered-journeys/{trigger_name}`\nusing the caller's auth context plus runtime entities\nsupplied via the `context_entities` query param.\n",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "key": {
+                        "type": "string"
+                      },
+                      "value": {
+                        "type": "string"
+                      }
+                    }
+                  }
                 }
               }
             }