@medalsocial/sdk 1.5.0 → 1.7.0

package/openapi/medal-social.openapi.yaml

@@ -21,6 +21,11 @@ tags:
     description: Manage workspace CRM contacts.
   - name: Deals
     description: Manage sponsorship and brand deals.
+  - name: Bookings
+    description: >-
+      Appointment bookings — the service catalogue, free slots, staff actions
+      on a booking, and the customer-facing manage-token routes. Money is
+      always integer øre.
   - name: GDPR
     description: Manage exports, consent records, and cookie consent.
   - name: Workspaces
@@ -29,10 +34,19 @@ tags:
     description: Read helpdesk conversations, reply, and manage assignment/status.
   - name: Webhooks
     description: Manage webhook endpoints and inspect their deliveries.
+  - name: Capabilities
+    description: >-
+      Mint short-lived capability confirmation tokens for confirmable write
+      routes.
   - name: Channels
     description: >-
       Partner channel connect — mint hosted connect links and manage the
       resulting channel connections.
+  - name: Scan
+    description: >-
+      Company & website scans (Nettsjekk) — queue a scan by URL, organisation
+      number, or company name, poll the result, and search the Norwegian
+      company registry.
 paths:
   /api/v1/posts:
     get:
@@ -534,6 +548,356 @@ paths:
                 $ref: "#/components/schemas/ApiResponse_DealRemoveResult"
         default:
           $ref: "#/components/responses/ApiError"
+  /api/v1/bookings:
+    get:
+      tags: [Bookings]
+      operationId: listBookings
+      summary: List bookings
+      parameters:
+        - $ref: "#/components/parameters/Limit"
+        - $ref: "#/components/parameters/Cursor"
+        - name: from_ts
+          in: query
+          description: Only bookings starting at or after this instant.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: to_ts
+          in: query
+          description: Only bookings starting before this instant.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: status
+          in: query
+          schema:
+            $ref: "#/components/schemas/BookingStatus"
+        - name: resource_id
+          in: query
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Bookings page.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/PaginatedResponse_Booking"
+        default:
+          $ref: "#/components/responses/ApiError"
+    post:
+      tags: [Bookings]
+      operationId: createBooking
+      summary: Create a booking or party
+      description: >-
+        Books every item or none of them. Each created booking carries a
+        `manage_token` returned exactly once — only its hash is stored, and an
+        idempotent replay omits it.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/CreateBookingInput"
+      responses:
+        "201":
+          description: Created bookings, in request order.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingCreateResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/services:
+    get:
+      tags: [Bookings]
+      operationId: listBookingServices
+      summary: List bookable services
+      parameters:
+        - name: include_inactive
+          in: query
+          description: >-
+            Include services with `active: false`. Defaults to active-only.
+          schema:
+            type: boolean
+      responses:
+        "200":
+          description: Bookable service catalogue.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingServiceArray"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/resources:
+    get:
+      tags: [Bookings]
+      operationId: listBookingResources
+      summary: List bookable resources
+      responses:
+        "200":
+          description: Bookable resources — staff, rooms, and equipment.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingResourceArray"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/availability:
+    get:
+      tags: [Bookings]
+      operationId: listBookingAvailability
+      summary: List free slots for a service
+      description: >-
+        Slots reflect opening hours, time off, buffers, and existing bookings
+        at the moment of the call. They are not held.
+      parameters:
+        - name: service_id
+          in: query
+          required: true
+          schema:
+            type: string
+        - name: from_ts
+          in: query
+          required: true
+          description: Start of the window.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: to_ts
+          in: query
+          required: true
+          description: End of the window; must be after `from_ts`.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: resource_id
+          in: query
+          description: Restrict slots to one resource.
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Free slots.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingSlotArray"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/schedule:
+    get:
+      tags: [Bookings]
+      operationId: listBookingSchedule
+      summary: List the dates a service can be booked on
+      description: >-
+        The other half of `availability`. Availability returns free slots and
+        nothing else, so a closed day, an evening past closing and a fully
+        booked day all come back as the same empty array. This returns one
+        entry per date the workspace keeps opening hours on; a date ABSENT from
+        the response is closed. `last_start_ts` is the last start this service
+        could occupy on that date (it depends on the service's duration and
+        buffers, not just the closing time) and is `null` for a date with
+        posted hours that is shut outright, such as a public holiday.
+      parameters:
+        - name: service_id
+          in: query
+          required: true
+          schema:
+            type: string
+        - name: from_ts
+          in: query
+          required: true
+          description: Start of the window.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: to_ts
+          in: query
+          required: true
+          description: End of the window; must be after `from_ts`.
+          schema:
+            $ref: "#/components/schemas/BookingTimestampInput"
+        - name: resource_id
+          in: query
+          description: Restrict to one resource's hours.
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Open dates.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingScheduleDayArray"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/{id}:
+    parameters:
+      - $ref: "#/components/parameters/Id"
+    get:
+      tags: [Bookings]
+      operationId: getBooking
+      summary: Get a booking
+      responses:
+        "200":
+          description: Booking.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_Booking"
+        default:
+          $ref: "#/components/responses/ApiError"
+    patch:
+      tags: [Bookings]
+      operationId: updateBooking
+      summary: Annotate a booking
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/UpdateBookingInput"
+      responses:
+        "200":
+          description: The updated booking.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_Booking"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/{id}/cancel:
+    parameters:
+      - $ref: "#/components/parameters/Id"
+    post:
+      tags: [Bookings]
+      operationId: cancelBooking
+      summary: Cancel a booking as the business
+      description: >-
+        Staff semantics — the workspace's cancel window is bypassed and the
+        cancellation is attributed to staff.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/CancelBookingInput"
+      responses:
+        "200":
+          description: Cancel result.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingActionResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/{id}/reschedule:
+    parameters:
+      - $ref: "#/components/parameters/Id"
+    post:
+      tags: [Bookings]
+      operationId: rescheduleBooking
+      summary: Reschedule a booking as the business
+      description: >-
+        Staff semantics — the reschedule window is bypassed. The old booking is
+        cancelled and a new one inserted, so the response carries a new booking
+        id and a freshly minted manage token.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RescheduleBookingInput"
+      responses:
+        "200":
+          description: Reschedule result.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingRescheduleResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/{id}/no-show:
+    parameters:
+      - $ref: "#/components/parameters/Id"
+    post:
+      tags: [Bookings]
+      operationId: markBookingNoShow
+      summary: Mark a booking as a no-show
+      responses:
+        "200":
+          description: No-show result.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingActionResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/manage/{token}:
+    parameters:
+      - $ref: "#/components/parameters/ManageToken"
+    get:
+      tags: [Bookings]
+      operationId: getManagedBooking
+      summary: Get the customer manage summary for a token
+      responses:
+        "200":
+          description: >-
+            Manage summary. An unknown token and a token belonging to another
+            workspace both answer 404, so this is not an existence oracle.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_ManageSummary"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/manage/{token}/cancel:
+    parameters:
+      - $ref: "#/components/parameters/ManageToken"
+    post:
+      tags: [Bookings]
+      operationId: cancelManagedBooking
+      summary: Cancel on the customer's behalf
+      description: >-
+        Customer semantics — the workspace's cancel window is ENFORCED and the
+        cancellation is attributed to the customer.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/CancelBookingInput"
+      responses:
+        "200":
+          description: Cancel result.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingActionResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/bookings/manage/{token}/reschedule:
+    parameters:
+      - $ref: "#/components/parameters/ManageToken"
+    post:
+      tags: [Bookings]
+      operationId: rescheduleManagedBooking
+      summary: Reschedule on the customer's behalf
+      description: >-
+        Customer semantics — the reschedule window is ENFORCED. The response
+        carries a new booking id and a new manage token; the old token stops
+        working.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RescheduleBookingInput"
+      responses:
+        "200":
+          description: Reschedule result.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_BookingRescheduleResult"
+        default:
+          $ref: "#/components/responses/ApiError"
   /api/v1/gdpr/export:
     post:
       tags: [GDPR]
@@ -930,6 +1294,34 @@ paths:
                 $ref: "#/components/schemas/ApiResponse_WebhookTestResult"
         default:
           $ref: "#/components/responses/ApiError"
+  /api/v1/capability-confirmations:
+    post:
+      tags: [Capabilities]
+      operationId: issueCapabilityConfirmation
+      summary: Issue a capability confirmation token
+      description: >-
+        Mints a short-lived `X-Capability-Confirmation` token for one pending
+        write. Confirmable write routes require BOTH `Idempotency-Key` and
+        `X-Capability-Confirmation` when the credential holds the capability
+        scope directly; API keys with legacy scopes are exempt. The token is
+        bound to the workspace, auth subject, method, path, required scopes and
+        idempotency key, and expires within 15 minutes. `user_approved: true`
+        asserts that a human on the caller's side approved this exact action.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/IssueCapabilityConfirmationInput"
+      responses:
+        "200":
+          description: Minted confirmation token.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_CapabilityConfirmation"
+        default:
+          $ref: "#/components/responses/ApiError"
   /api/v1/channels/connect-links:
     post:
       tags: [Channels]
@@ -962,8 +1354,20 @@ paths:
       tags: [Channels]
       operationId: listChannelConnectLinks
       summary: List connect links
-      description: Link tokens are never returned.
+      description: >-
+        Link tokens are never returned. Newest first, cursor-paginated. The
+        `channel_type` / `status` filters are applied within each page, so a
+        page may hold fewer than `limit` items while `pagination.has_more` is
+        still true — page off `has_more`, not the item count.
       parameters:
+        - name: limit
+          in: query
+          schema:
+            type: integer
+            minimum: 1
+            maximum: 100
+          description: Page size (default 50, capped at 100).
+        - $ref: "#/components/parameters/Cursor"
         - name: channel_type
           in: query
           schema:
@@ -974,11 +1378,11 @@ paths:
             $ref: "#/components/schemas/ConnectLinkStatus"
       responses:
         "200":
-          description: The workspace's connect links.
+          description: Connect links page.
           content:
             application/json:
               schema:
-                $ref: "#/components/schemas/ApiResponse_ConnectLinkArray"
+                $ref: "#/components/schemas/PaginatedResponse_ConnectLink"
         default:
           $ref: "#/components/responses/ApiError"
   /api/v1/channels/connect-links/{id}:
@@ -1005,13 +1409,28 @@ paths:
       tags: [Channels]
       operationId: listChannelConnections
       summary: List channel connections
+      description: >-
+        The workspace's channel connections in a generic, channel-agnostic
+        shape. Newest first, cursor-paginated. Rows that are not projectable
+        as connections are dropped within the page, so a page may hold fewer
+        than `limit` items while `pagination.has_more` is still true — page
+        off `has_more`, not the item count.
+      parameters:
+        - name: limit
+          in: query
+          schema:
+            type: integer
+            minimum: 1
+            maximum: 100
+          description: Page size (default 50, capped at 100).
+        - $ref: "#/components/parameters/Cursor"
       responses:
         "200":
-          description: The workspace's channel connections (generic shape).
+          description: Channel connections page.
           content:
             application/json:
               schema:
-                $ref: "#/components/schemas/ApiResponse_ChannelConnectionArray"
+                $ref: "#/components/schemas/PaginatedResponse_ChannelConnection"
         default:
           $ref: "#/components/responses/ApiError"
   /api/v1/channels/connections/{id}:
@@ -1035,28 +1454,97 @@ paths:
                 $ref: "#/components/schemas/ApiResponse_ChannelConnectionDisconnectResult"
         default:
           $ref: "#/components/responses/ApiError"
-components:
-  securitySchemes:
-    bearerAuth:
-      type: http
-      scheme: bearer
-  parameters:
-    Id:
-      name: id
-      in: path
-      required: true
-      schema:
-        type: string
-    Slug:
-      name: slug
-      in: path
-      required: true
-      schema:
-        type: string
-    Cursor:
-      name: cursor
-      in: query
-      schema:
+  /api/v1/scan:
+    post:
+      tags: [Scan]
+      operationId: createScan
+      summary: Queue a company/site scan
+      description: >-
+        Queues an asynchronous scan. Provide exactly one of `url`, `orgnr`, or
+        `name`; poll the returned id via `GET /api/v1/scan/{id}`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ScanCreateInput"
+      responses:
+        "202":
+          description: Scan job queued.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_ScanCreateResult"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/scan/companies:
+    get:
+      tags: [Scan]
+      operationId: searchScanCompanies
+      summary: Search the Norwegian company registry
+      parameters:
+        - name: q
+          in: query
+          required: true
+          schema:
+            type: string
+            minLength: 2
+      responses:
+        "200":
+          description: Registry matches (top 5, relevance-ranked).
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_ScanCompanyArray"
+        default:
+          $ref: "#/components/responses/ApiError"
+  /api/v1/scan/{id}:
+    parameters:
+      - $ref: "#/components/parameters/Id"
+    get:
+      tags: [Scan]
+      operationId: getScan
+      summary: Get a scan job
+      responses:
+        "200":
+          description: Scan job status and, once done, the findings payload.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ApiResponse_ScanJob"
+        default:
+          $ref: "#/components/responses/ApiError"
+components:
+  securitySchemes:
+    bearerAuth:
+      type: http
+      scheme: bearer
+  parameters:
+    Id:
+      name: id
+      in: path
+      required: true
+      schema:
+        type: string
+    Slug:
+      name: slug
+      in: path
+      required: true
+      schema:
+        type: string
+    ManageToken:
+      name: token
+      in: path
+      required: true
+      description: >-
+        The show-once manage token handed out when the booking was created.
+        Possession of it authorizes the customer's own cancel or reschedule.
+      schema:
+        type: string
+    Cursor:
+      name: cursor
+      in: query
+      schema:
         type: string
     Limit:
       name: limit
@@ -1927,6 +2415,496 @@ components:
           format: date
         notes:
           type: string
+    BookingTimestampInput:
+      description: >-
+        A timestamp on the way in — Unix milliseconds, or an ISO 8601
+        date-time string. Responses always render timestamps as ISO 8601.
+      type: [integer, string]
+    BookingStatus:
+      type: string
+      enum: [pending, confirmed, completed, cancelled, no_show]
+    BookingCancelledBy:
+      description: >-
+        Who cancelled. `staff` for the id-addressed cancel, `customer` for the
+        manage-token cancel, `system` for an automated one.
+      type: string
+      enum: [customer, staff, system]
+    BookingPaymentStatus:
+      type: string
+      enum: [none, reserved, captured, refunded]
+    BookingCreatedVia:
+      type: string
+      enum: [web, dashboard, walk_in, api]
+    BookingResourceType:
+      type: string
+      enum: [staff, room, equipment]
+    Booking:
+      type: object
+      required:
+        - id
+        - contact_id
+        - service_id
+        - resource_id
+        - start_ts
+        - end_ts
+        - booked_for_name
+        - booked_for_birth_year
+        - party_sequence_id
+        - status
+        - cancelled_by
+        - cancel_reason
+        - rescheduled_from_id
+        - payment_status
+        - amount_ore
+        - notes
+        - internal_notes
+        - created_via
+        - created_at
+        - updated_at
+      properties:
+        id:
+          type: string
+        contact_id:
+          type: [string, "null"]
+        service_id:
+          type: [string, "null"]
+        resource_id:
+          type: [string, "null"]
+        start_ts:
+          type: [string, "null"]
+          format: date-time
+        end_ts:
+          type: [string, "null"]
+          format: date-time
+        booked_for_name:
+          type: [string, "null"]
+        booked_for_birth_year:
+          description: A birth year, not a birthdate — the age bracket is all that is stored.
+          type: [integer, "null"]
+        party_sequence_id:
+          description: Shared by every booking created in the same party request.
+          type: [string, "null"]
+        status:
+          $ref: "#/components/schemas/BookingStatus"
+        cancelled_by:
+          oneOf:
+            - $ref: "#/components/schemas/BookingCancelledBy"
+            - type: "null"
+        cancel_reason:
+          type: [string, "null"]
+        rescheduled_from_id:
+          description: On a booking created by a reschedule, the booking it replaced.
+          type: [string, "null"]
+        payment_status:
+          $ref: "#/components/schemas/BookingPaymentStatus"
+        amount_ore:
+          description: Price in integer øre. Never a float and never kroner.
+          type: [integer, "null"]
+        notes:
+          description: Customer-visible note.
+          type: [string, "null"]
+        internal_notes:
+          description: Staff-only note; never shown to the customer.
+          type: [string, "null"]
+        created_via:
+          oneOf:
+            - $ref: "#/components/schemas/BookingCreatedVia"
+            - type: "null"
+        created_at:
+          type: [string, "null"]
+          format: date-time
+        updated_at:
+          type: [string, "null"]
+          format: date-time
+    BookingService:
+      type: object
+      required:
+        - id
+        - name
+        - description
+        - category
+        - duration_minutes
+        - buffer_before_minutes
+        - buffer_after_minutes
+        - price_ore
+        - weekend_surcharge_pct
+        - resource_requirements
+        - bookable_online
+        - max_per_booking
+        - color
+        - sort_order
+        - active
+        - created_at
+        - updated_at
+      properties:
+        id:
+          type: string
+        name:
+          type: [string, "null"]
+        description:
+          type: [string, "null"]
+        category:
+          type: [string, "null"]
+        duration_minutes:
+          type: [integer, "null"]
+        buffer_before_minutes:
+          type: [integer, "null"]
+        buffer_after_minutes:
+          type: [integer, "null"]
+        price_ore:
+          description: Price in integer øre.
+          type: [integer, "null"]
+        weekend_surcharge_pct:
+          type: [number, "null"]
+        resource_requirements:
+          description: Resource types this service needs, e.g. `["staff"]`.
+          type: array
+          items:
+            type: string
+        bookable_online:
+          type: boolean
+        max_per_booking:
+          type: [integer, "null"]
+        color:
+          type: [string, "null"]
+        sort_order:
+          type: [integer, "null"]
+        active:
+          type: boolean
+        created_at:
+          type: [string, "null"]
+          format: date-time
+        updated_at:
+          type: [string, "null"]
+          format: date-time
+    BookingResource:
+      type: object
+      required:
+        - id
+        - type
+        - name
+        - photo_url
+        - bio
+        - service_ids
+        - capacity
+        - sort_order
+        - active
+        - created_at
+        - updated_at
+      properties:
+        id:
+          type: string
+        type:
+          oneOf:
+            - $ref: "#/components/schemas/BookingResourceType"
+            - type: "null"
+        name:
+          type: [string, "null"]
+        photo_url:
+          type: [string, "null"]
+          format: uri
+        bio:
+          type: [string, "null"]
+        service_ids:
+          description: Services this resource can perform.
+          type: array
+          items:
+            type: string
+        capacity:
+          type: [integer, "null"]
+        sort_order:
+          type: [integer, "null"]
+        active:
+          type: boolean
+        created_at:
+          type: [string, "null"]
+          format: date-time
+        updated_at:
+          type: [string, "null"]
+          format: date-time
+    BookingSlot:
+      type: object
+      required: [start_ts, end_ts, resource_id]
+      properties:
+        start_ts:
+          type: [string, "null"]
+          format: date-time
+        end_ts:
+          type: [string, "null"]
+          format: date-time
+        resource_id:
+          type: [string, "null"]
+    BookingScheduleDay:
+      description: One date a service can be booked on. `date` is the workspace's own calendar date, not a timestamp.
+      type: object
+      required: [date, opens_ts, closes_ts, last_start_ts]
+      properties:
+        date:
+          type: [string, "null"]
+          format: date
+        opens_ts:
+          type: [string, "null"]
+          format: date-time
+        closes_ts:
+          type: [string, "null"]
+          format: date-time
+        last_start_ts:
+          description: Last start this service could occupy on the date; `null` when the date is shut outright.
+          type: [string, "null"]
+          format: date-time
+    BookingContactInput:
+      description: The person the booking is made under. Phone is the CRM dedupe key.
+      type: object
+      required: [phone]
+      properties:
+        phone:
+          type: string
+          maxLength: 40
+        email:
+          type: string
+          maxLength: 320
+        name:
+          type: string
+          maxLength: 200
+    CreateBookingItemInput:
+      description: One line of a party — a single service on a single slot.
+      type: object
+      required: [service_id, start_ts]
+      properties:
+        service_id:
+          type: string
+        resource_id:
+          description: Omit to let the engine pick a free resource.
+          type: string
+        start_ts:
+          $ref: "#/components/schemas/BookingTimestampInput"
+        booked_for_name:
+          type: string
+          maxLength: 200
+        booked_for_birth_year:
+          type: integer
+          minimum: 1900
+          maximum: 2200
+    CreateBookingInput:
+      type: object
+      required: [items, contact]
+      properties:
+        items:
+          description: >-
+            A PARTY — one request books a whole family in one all-or-nothing
+            transaction.
+          type: array
+          minItems: 1
+          maxItems: 50
+          items:
+            $ref: "#/components/schemas/CreateBookingItemInput"
+        contact:
+          $ref: "#/components/schemas/BookingContactInput"
+        notes:
+          type: string
+          maxLength: 5000
+        created_via:
+          description: >-
+            Where the booking came from. Defaults to `api`. A workspace's OWN
+            website should send `web`, so its bookings can be told apart from
+            integrations. `dashboard` and `walk_in` are staff-only and are
+            rejected with 400 — a bearer token proves which workspace is calling,
+            not that a member typed the booking in.
+          type: string
+          enum: [web, api]
+    CreatedBooking:
+      type: object
+      required: [id]
+      properties:
+        id:
+          type: string
+        manage_token:
+          description: >-
+            Show-once secret for the customer's manage link. Only its hash is
+            stored, and an idempotent replay omits this field entirely.
+          type: string
+    BookingCreateResult:
+      type: object
+      required: [bookings, contact_id]
+      properties:
+        bookings:
+          description: One entry per created booking, in request order.
+          type: array
+          items:
+            $ref: "#/components/schemas/CreatedBooking"
+        contact_id:
+          type: string
+    BookingActionResult:
+      type: object
+      required: [success]
+      properties:
+        success:
+          type: boolean
+          const: true
+    BookingRescheduleResult:
+      type: object
+      required: [success, booking_id]
+      properties:
+        success:
+          type: boolean
+          const: true
+        booking_id:
+          description: >-
+            The NEW booking's id — a reschedule cancels the old row and inserts
+            a new one.
+          type: string
+        manage_token:
+          description: >-
+            Freshly minted manage token for the new booking; omitted on an
+            idempotent replay.
+          type: string
+    ManageSummary:
+      description: >-
+        What the holder of a manage token may see and do. `can_cancel` and
+        `can_reschedule` already apply the workspace's policy windows.
+      type: object
+      required:
+        - booking_id
+        - contact_id
+        - status
+        - cancelled_by
+        - cancel_reason
+        - rescheduled_from_id
+        - start_ts
+        - end_ts
+        - service_id
+        - service_name
+        - resource_id
+        - resource_name
+        - booked_for_name
+        - party_sequence_id
+        - amount_ore
+        - payment_status
+        - time_zone
+        - cancel_window_hours
+        - reschedule_window_hours
+        - can_cancel
+        - can_reschedule
+      properties:
+        booking_id:
+          type: string
+        contact_id:
+          type: [string, "null"]
+        status:
+          oneOf:
+            - $ref: "#/components/schemas/BookingStatus"
+            - type: "null"
+        cancelled_by:
+          oneOf:
+            - $ref: "#/components/schemas/BookingCancelledBy"
+            - type: "null"
+        cancel_reason:
+          type: [string, "null"]
+        rescheduled_from_id:
+          type: [string, "null"]
+        start_ts:
+          type: [string, "null"]
+          format: date-time
+        end_ts:
+          type: [string, "null"]
+          format: date-time
+        service_id:
+          type: [string, "null"]
+        service_name:
+          type: [string, "null"]
+        resource_id:
+          type: [string, "null"]
+        resource_name:
+          type: [string, "null"]
+        booked_for_name:
+          type: [string, "null"]
+        party_sequence_id:
+          type: [string, "null"]
+        amount_ore:
+          description: Price in integer øre.
+          type: [integer, "null"]
+        payment_status:
+          oneOf:
+            - $ref: "#/components/schemas/BookingPaymentStatus"
+            - type: "null"
+        time_zone:
+          description: IANA zone the booking's local times should be rendered in.
+          type: [string, "null"]
+        cancel_window_hours:
+          type: [number, "null"]
+        reschedule_window_hours:
+          type: [number, "null"]
+        can_cancel:
+          type: boolean
+        can_reschedule:
+          type: boolean
+    UpdateBookingInput:
+      description: >-
+        At least one of `notes` or `internal_notes` is required — the API
+        rejects a body carrying neither with a 400. `""` is a meaningful value
+        that clears the field, so the constraint is on presence.
+      # Spelled out as two fully-typed branches rather than the terser
+      # `anyOf: [{required: [notes]}, {required: [internal_notes]}]`, because a
+      # branch carrying only `required` generates as `unknown` — and `T |
+      # unknown` collapses to `unknown`, which accepts everything and is worse
+      # than the unconstrained object. Each branch therefore repeats the
+      # properties so openapi-typescript emits a real discriminating union.
+      #
+      # `minProperties: 1` is deliberately absent: `anyOf` on two named
+      # properties already implies it and is strictly stronger (it also rejects
+      # `{ unrelated_key: 1 }`), so keeping both would be two statements of one
+      # invariant to drift apart.
+      anyOf:
+        - type: object
+          required: [notes]
+          properties:
+            notes:
+              description: Customer-visible note.
+              type: string
+              maxLength: 5000
+            internal_notes:
+              description: Staff-only note.
+              type: string
+              maxLength: 5000
+        - type: object
+          required: [internal_notes]
+          properties:
+            notes:
+              description: Customer-visible note.
+              type: string
+              maxLength: 5000
+            internal_notes:
+              description: Staff-only note.
+              type: string
+              maxLength: 5000
+    CancelBookingInput:
+      type: object
+      properties:
+        reason:
+          type: string
+          maxLength: 500
+    RescheduleBookingInput:
+      type: object
+      required: [new_start_ts]
+      properties:
+        new_start_ts:
+          $ref: "#/components/schemas/BookingTimestampInput"
+        new_resource_id:
+          type: string
+    BookingsPagination:
+      description: >-
+        Pagination for a bookings page. `truncated` is the extra statement:
+        the underlying read is capped, and when the cap binds there are
+        matching bookings no cursor from this call reaches — narrow the window.
+      type: object
+      required: [has_more, next_cursor, truncated]
+      properties:
+        has_more:
+          type: boolean
+        next_cursor:
+          type: [string, "null"]
+        truncated:
+          type: boolean
     GdprExport:
       type: object
       required: [id, request_type, status, submitted_at, completed_at]
@@ -2154,6 +3132,8 @@ components:
         - author_user_id
         - author_name
         - body
+        - delivery_status
+        - delivery_error
         - created_at
       properties:
         id:
@@ -2170,9 +3150,26 @@ components:
           type: [string, "null"]
         body:
           type: string
+        delivery_status:
+          oneOf:
+            - $ref: "#/components/schemas/HelpdeskMessageDeliveryStatus"
+            - type: "null"
+          description: >-
+            Outbound delivery state, or `null` for inbound messages and
+            internal notes. A `201` from `POST /api/v1/helpdesk/replies` means
+            the reply was accepted, NOT delivered — the channel hand-off is
+            asynchronous, so poll this field (or subscribe to
+            `helpdesk.message_delivery_updated`) to learn the outcome.
+        delivery_error:
+          type: [string, "null"]
+          description: >-
+            Last send error for a `failed` outbound message, otherwise `null`.
         created_at:
           type: integer
           description: Unix timestamp in milliseconds.
+    HelpdeskMessageDeliveryStatus:
+      type: string
+      enum: [pending, sent, delivered, failed]
     UpdateHelpdeskConversationInput:
       type: object
       minProperties: 1
@@ -2363,9 +3360,22 @@ components:
           const: deleted
     WebhookDelivery:
       type: object
+      description: >-
+        A delivery attempt record. `id` is the same value sent as the
+        `X-Medal-Delivery-Id` and `Idempotency-Key` headers on the outbound
+        request. Deliveries never carry payload bodies (payloads can contain
+        customer PII). The correlation fields are derived from the stored event
+        and fail closed to `null` when no canonical event exists — e.g.
+        `test.ping` deliveries or events that have aged out of retention.
       required:
         - id
         - event_type
+        - resource_id
+        - conversation_id
+        - message_id
+        - connection_ref
+        - channel
+        - channel_connection_id
         - status
         - attempt_count
         - next_attempt_at
@@ -2379,6 +3389,19 @@ components:
           type: string
         event_type:
           type: string
+        resource_id:
+          type: [string, "null"]
+          description: Primary subject id of the announced event, or `null`.
+        conversation_id:
+          type: [string, "null"]
+        message_id:
+          type: [string, "null"]
+        connection_ref:
+          type: [string, "null"]
+        channel:
+          type: [string, "null"]
+        channel_connection_id:
+          type: [string, "null"]
         status:
           type: string
           enum: [pending, delivered, dead_letter]
@@ -2574,12 +3597,36 @@ components:
       $ref: "#/components/schemas/Envelope_DealUpdateResult"
     ApiResponse_DealRemoveResult:
       $ref: "#/components/schemas/Envelope_DealRemoveResult"
+    ApiResponse_Booking:
+      $ref: "#/components/schemas/Envelope_Booking"
+    ApiResponse_BookingServiceArray:
+      $ref: "#/components/schemas/Envelope_BookingServiceArray"
+    ApiResponse_BookingResourceArray:
+      $ref: "#/components/schemas/Envelope_BookingResourceArray"
+    ApiResponse_BookingSlotArray:
+      $ref: "#/components/schemas/Envelope_BookingSlotArray"
+    ApiResponse_BookingScheduleDayArray:
+      $ref: "#/components/schemas/Envelope_BookingScheduleDayArray"
+    ApiResponse_BookingCreateResult:
+      $ref: "#/components/schemas/Envelope_BookingCreateResult"
+    ApiResponse_BookingActionResult:
+      $ref: "#/components/schemas/Envelope_BookingActionResult"
+    ApiResponse_BookingRescheduleResult:
+      $ref: "#/components/schemas/Envelope_BookingRescheduleResult"
+    ApiResponse_ManageSummary:
+      $ref: "#/components/schemas/Envelope_ManageSummary"
     ApiResponse_GdprExportRequest:
       $ref: "#/components/schemas/Envelope_GdprExportRequest"
     ApiResponse_GdprExportArray:
       $ref: "#/components/schemas/Envelope_GdprExportArray"
     ApiResponse_GdprExport:
       $ref: "#/components/schemas/Envelope_GdprExport"
+    ApiResponse_ScanCreateResult:
+      $ref: "#/components/schemas/Envelope_ScanCreateResult"
+    ApiResponse_ScanCompanyArray:
+      $ref: "#/components/schemas/Envelope_ScanCompanyArray"
+    ApiResponse_ScanJob:
+      $ref: "#/components/schemas/Envelope_ScanJob"
     ApiResponse_ConsentResult:
       $ref: "#/components/schemas/Envelope_ConsentResult"
     ApiResponse_ConsentRecordArray:
@@ -2604,6 +3651,11 @@ components:
       $ref: "#/components/schemas/Envelope_WebhookTestResult"
     ApiResponse_ConnectLinkCreateResult:
       $ref: "#/components/schemas/Envelope_ConnectLinkCreateResult"
+    # Deprecated: the channels listings are cursor-paginated and now respond
+    # with PaginatedResponse_ConnectLink / PaginatedResponse_ChannelConnection.
+    # These unpaginated aliases are retained (unreferenced by any operation)
+    # so consumers importing the generated contract via
+    # `@medalsocial/sdk/openapi-types` or `OpenApiComponents` keep compiling.
     ApiResponse_ConnectLinkArray:
       $ref: "#/components/schemas/Envelope_ConnectLinkArray"
     ApiResponse_ConnectLinkRevokeResult:
@@ -2652,6 +3704,16 @@ components:
             $ref: "#/components/schemas/Deal"
         pagination:
           $ref: "#/components/schemas/Pagination"
+    PaginatedResponse_Booking:
+      type: object
+      required: [data, pagination]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/Booking"
+        pagination:
+          $ref: "#/components/schemas/BookingsPagination"
     PaginatedResponse_HelpdeskConversation:
       type: object
       required: [data, pagination]
@@ -2672,6 +3734,26 @@ components:
             $ref: "#/components/schemas/HelpdeskMessage"
         pagination:
           $ref: "#/components/schemas/Pagination"
+    PaginatedResponse_ConnectLink:
+      type: object
+      required: [data, pagination]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/ConnectLink"
+        pagination:
+          $ref: "#/components/schemas/Pagination"
+    PaginatedResponse_ChannelConnection:
+      type: object
+      required: [data, pagination]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/ChannelConnection"
+        pagination:
+          $ref: "#/components/schemas/Pagination"
     Envelope_PostCreateResult:
       type: object
       required: [data]
@@ -2802,6 +3884,193 @@ components:
       properties:
         data:
           $ref: "#/components/schemas/DealRemoveResult"
+    Envelope_Booking:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/Booking"
+    Envelope_BookingServiceArray:
+      type: object
+      required: [data]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/BookingService"
+    Envelope_BookingResourceArray:
+      type: object
+      required: [data]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/BookingResource"
+    Envelope_BookingSlotArray:
+      type: object
+      required: [data]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/BookingSlot"
+    Envelope_BookingScheduleDayArray:
+      type: object
+      required: [data]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/BookingScheduleDay"
+    Envelope_BookingCreateResult:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/BookingCreateResult"
+    Envelope_BookingActionResult:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/BookingActionResult"
+    Envelope_BookingRescheduleResult:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/BookingRescheduleResult"
+    Envelope_ManageSummary:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/ManageSummary"
+    ScanCreateInput:
+      type: object
+      description: Provide exactly one of `url`, `orgnr`, or `name`.
+      oneOf:
+        - required: [url]
+          not:
+            anyOf: [{ required: [orgnr] }, { required: [name] }]
+        - required: [orgnr]
+          not:
+            anyOf: [{ required: [url] }, { required: [name] }]
+        - required: [name]
+          not:
+            anyOf: [{ required: [url] }, { required: [orgnr] }]
+      properties:
+        url:
+          type: string
+          minLength: 4
+          maxLength: 500
+        orgnr:
+          type: string
+          pattern: "^\\d{9}$"
+        name:
+          type: string
+          minLength: 2
+          maxLength: 120
+    ScanCreateResult:
+      type: object
+      required: [id, status]
+      properties:
+        id:
+          type: string
+        status:
+          type: string
+        message:
+          type: string
+    ScanCompany:
+      type: object
+      required: [orgnr, name, org_form, industry, city, website]
+      properties:
+        orgnr:
+          type: string
+        name:
+          type: string
+        org_form:
+          type: [string, "null"]
+        industry:
+          type: [string, "null"]
+        city:
+          type: [string, "null"]
+        website:
+          type: [string, "null"]
+    ScanJob:
+      type: object
+      required: [id, status, input, resolved, result, error, created_at, finished_at]
+      properties:
+        id:
+          type: string
+        status:
+          type: string
+          description: pending | running | done | failed
+        input:
+          $ref: "#/components/schemas/ScanCreateInput"
+        resolved:
+          type: [object, "null"]
+          properties:
+            orgnr:
+              type: string
+            companyName:
+              type: string
+            websiteUrl:
+              type: string
+        result:
+          type: [object, "null"]
+          description: >-
+            Versioned findings payload (see the SDK `ScanResultPayload` type);
+            additive per `version`. The stable core is documented below;
+            further sections (registry, signals, pagespeed, seo, ai, gdpr,
+            mailAuth, httpsOk) evolve additively.
+          required: [version, nettskaar, subScores]
+          properties:
+            version:
+              type: integer
+            nettskaar:
+              type: [integer, "null"]
+              description: Weighted composite score (0-100); null when unmeasurable.
+            subScores:
+              type: object
+              description: Per-axis 0-100 scores; null axes were unmeasurable.
+              required: [fart, google, ai, trygghet, omdomme]
+              properties:
+                fart: { type: [integer, "null"] }
+                google: { type: [integer, "null"] }
+                ai: { type: [integer, "null"] }
+                trygghet: { type: [integer, "null"] }
+                omdomme: { type: [integer, "null"] }
+          additionalProperties: true
+        error:
+          type: [string, "null"]
+          description: Public-safe failure code (company_not_found, no_website, …).
+        created_at:
+          type: [string, "null"]
+          format: date-time
+        finished_at:
+          type: [string, "null"]
+          format: date-time
+    Envelope_ScanCreateResult:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/ScanCreateResult"
+    Envelope_ScanCompanyArray:
+      type: object
+      required: [data]
+      properties:
+        data:
+          type: array
+          items:
+            $ref: "#/components/schemas/ScanCompany"
+    Envelope_ScanJob:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/ScanJob"
     Envelope_GdprExportRequest:
       type: object
       required: [data]
@@ -2882,6 +4151,94 @@ components:
       properties:
         data:
           $ref: "#/components/schemas/WebhookDeleteResult"
+    IssueCapabilityConfirmationInput:
+      type: object
+      required: [capability_id, preview_summary, user_approved]
+      properties:
+        capability_id:
+          type: string
+          minLength: 1
+          maxLength: 160
+          description: Confirmable capability to mint a token for.
+        api_path:
+          type: string
+          minLength: 1
+          maxLength: 512
+          description: >-
+            Concrete `/api/v1/...` path to bind the token to. Optional when the
+            capability has exactly one API target; required when it has several.
+        path_params:
+          type: object
+          additionalProperties:
+            type: [string, number, boolean]
+          description: Values for the capability path template's parameters.
+        idempotency_key:
+          type: string
+          minLength: 1
+          description: >-
+            The exact `Idempotency-Key` the confirmed write will send. The token
+            is bound to it.
+        preview_summary:
+          type: string
+          minLength: 1
+          maxLength: 4000
+          description: >-
+            Human-readable description of the approved action, retained for
+            audit.
+        user_approved:
+          const: true
+          description: >-
+            Asserts that a human on the caller's side approved this specific
+            action.
+    CapabilityConfirmation:
+      type: object
+      required:
+        - confirmation_token
+        - token_type
+        - capability_id
+        - method
+        - path
+        - required_scopes
+        - idempotency_key
+        - expires_in
+        - expires_at
+        - preview_summary
+      properties:
+        confirmation_token:
+          type: string
+          description: Send as the `X-Capability-Confirmation` header on the write.
+        token_type:
+          type: string
+          const: medal_capability_confirmation
+        capability_id:
+          type: string
+        method:
+          type: string
+        path:
+          type: string
+        required_scopes:
+          type: array
+          items:
+            type: string
+        idempotency_key:
+          type: [string, "null"]
+        expires_in:
+          type: integer
+          minimum: 60
+          maximum: 900
+        expires_at:
+          type: string
+          format: date-time
+        preview_summary:
+          type: string
+    ApiResponse_CapabilityConfirmation:
+      $ref: "#/components/schemas/Envelope_CapabilityConfirmation"
+    Envelope_CapabilityConfirmation:
+      type: object
+      required: [data]
+      properties:
+        data:
+          $ref: "#/components/schemas/CapabilityConfirmation"
     Envelope_WebhookDeliveryArray:
       type: object
       required: [data]
@@ -2904,6 +4261,11 @@ components:
           $ref: "#/components/schemas/ConnectLinkCreateResult"
     Envelope_ConnectLinkArray:
       type: object
+      deprecated: true
+      description: >-
+        Deprecated — `listChannelConnectLinks` responds with
+        `PaginatedResponse_ConnectLink`. Retained for backwards compatibility
+        with consumers of the generated contract types.
       required: [data]
       properties:
         data:
@@ -2918,6 +4280,11 @@ components:
           $ref: "#/components/schemas/ConnectLinkRevokeResult"
     Envelope_ChannelConnectionArray:
       type: object
+      deprecated: true
+      description: >-
+        Deprecated — `listChannelConnections` responds with
+        `PaginatedResponse_ChannelConnection`. Retained for backwards
+        compatibility with consumers of the generated contract types.
       required: [data]
       properties:
         data: