@whooshbang/contracts 1.0.0-rc.13

package/dist/generated/whooshbang-v1.d.ts

@@ -0,0 +1,1162 @@
+/**
+ * Generated by `npm run contracts:generate`.
+ * Do not edit this file directly.
+ */
+/**
+ * Public request, resource, summary, and Problem Details models for the WhooshBang V1 REST API.
+ */
+export type WhooshBangV1ContractDocument = AccountProjection | CreateProjectRequest | Project | ProjectCollection | CreateApiCredentialRequest | RotateApiCredentialRequest | ApiCredential | ApiCredentialCollection | ApiCredentialSecretReveal | ApiCredentialRotation | CreateCustomerEndpointRequest | CustomerEndpoint | CustomerEndpointCollection | CustomerEndpointMutationResult | CustomerEndpointAttemptCollection | CustomerEndpointVerificationChallenge | CreateSubscriptionLinkRequest | SubscriptionLink | CreateMessageRequest | Message | Problem | IdempotencyKey | ProviderCapabilitiesCollection;
+/**
+ * An opaque identifier. Its shape, ordering, and embedded content are not public promises.
+ */
+export type OpaqueIdentifier = string;
+/**
+ * The stable WhooshBang authorization role projected from the current Clerk organization membership.
+ */
+export type AccountRole = "admin" | "member";
+/**
+ * An RFC 3339 timestamp with a UTC offset. The server is authoritative.
+ */
+export type Timestamp = string;
+/**
+ * A safe public identifier used to correlate protected service diagnostics.
+ */
+export type DiagnosticId = string;
+/**
+ * The single environment selected by the authenticated credential.
+ */
+export type Environment = "test" | "live";
+/**
+ * @minItems 1
+ * @maxItems 7
+ */
+export type ApiCredentialScopeSet = [ApiCredentialScope] | [ApiCredentialScope, ApiCredentialScope] | [ApiCredentialScope, ApiCredentialScope, ApiCredentialScope] | [
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope
+] | [
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope
+] | [
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope
+] | [
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope,
+    ApiCredentialScope
+];
+/**
+ * One project-credential capability. Environment authority always comes from the credential record, never a scope or request field.
+ */
+export type ApiCredentialScope = "messages:write" | "messages:read" | "subscriptions:write" | "subscriptions:read" | "machine-clients:write" | "machine-clients:read" | "capabilities:read";
+/**
+ * Safe environment-scoped API credential metadata. It never contains a bearer secret, digest, Clerk identifier, or digest-key reference.
+ */
+export type ApiCredential = {
+    [k: string]: unknown;
+} & {
+    id: ApiCredentialId;
+    project_id: OpaqueIdentifier;
+    environment_id: OpaqueIdentifier;
+    environment: Environment;
+    prefix: ApiCredentialPrefix;
+    label: string;
+    scopes: ApiCredentialScopeSet;
+    /**
+     * An opaque identifier. Its shape, ordering, and embedded content are not public promises.
+     */
+    created_by: string;
+    created_at: Timestamp;
+    last_used_at?: Timestamp;
+    /**
+     * An RFC 3339 timestamp with a UTC offset. The server is authoritative.
+     */
+    scheduled_revocation_at?: string;
+    status: "active" | "revoked";
+    revoked_at?: Timestamp;
+};
+/**
+ * pcred_ followed by the canonical unpadded base64url encoding of exactly 16 random bytes.
+ */
+export type ApiCredentialId = string;
+/**
+ * A safe display prefix containing the credential format marker and first eight base64url identity characters, never secret bytes.
+ */
+export type ApiCredentialPrefix = string;
+/**
+ * The exact one-time runtime bearer syntax. The final segment is canonical unpadded base64url for exactly 32 random secret bytes.
+ */
+export type ApiCredentialSecret = string;
+export type CustomerEventType = "subscription.activated" | "subscription.revoked" | "message.provider_accepted" | "message.delivered" | "message.failed" | "message.expired" | "interaction.received" | "interaction.expired" | "agent_binding.degraded";
+export type CustomerEndpointStatus = "unverified" | "active" | "paused" | "disabled";
+/**
+ * Exactly 32 random bytes in the Standard Webhooks secret format. Returned only by the first successful create or rotate response.
+ */
+export type CustomerEndpointSecret = string;
+/**
+ * The only channel accepted during C0. The vocabulary can grow additively.
+ */
+export type Channel = "telegram";
+/**
+ * A public subscription-link resource scoped to the authenticated project and environment.
+ */
+export type SubscriptionLink = {
+    [k: string]: unknown;
+} & {
+    id: OpaqueIdentifier;
+    project_id: OpaqueIdentifier;
+    environment: Environment;
+    subscriber_id: OpaqueIdentifier;
+    notifier_id: OpaqueIdentifier;
+    /**
+     * @minItems 1
+     * @maxItems 1
+     */
+    channels: [Channel];
+    status: "pending" | "activated" | "expired" | "cancelled" | "failed" | "revoked";
+    /**
+     * An opaque authorization URL. It contains no project or provider secret.
+     */
+    authorization_url?: string;
+    binding?: BindingSummary;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    expires_at: Timestamp;
+    diagnostic_id: DiagnosticId;
+    classified_error?: ClassifiedError;
+    /**
+     * Present on cancellation responses; false never claims provider-side deletion.
+     */
+    cancellation_effective?: boolean;
+};
+export type ProblemCode = "authentication_required" | "credential_invalid" | "scope_forbidden" | "environment_mismatch" | "idempotency_key_required" | "idempotency_conflict" | "project_slug_conflict" | "request_invalid" | "replay_unavailable" | "subscriber_unbound" | "resource_not_found" | "resource_expired" | "cancellation_too_late" | "endpoint_rotation_conflict" | "rate_limited" | "provider_retryable" | "provider_terminal" | "provider_outcome_unknown";
+export type MetadataValue = string | number | boolean | null;
+/**
+ * A project- and environment-scoped logical message and its highest proven delivery outcome.
+ */
+export type Message = {
+    [k: string]: unknown;
+} & {
+    id: OpaqueIdentifier;
+    project_id: OpaqueIdentifier;
+    environment: Environment;
+    subscriber_id: OpaqueIdentifier;
+    notifier_id: OpaqueIdentifier;
+    binding: BindingSummary;
+    state: MessageState;
+    accepted_at: Timestamp;
+    updated_at: Timestamp;
+    expires_at: Timestamp;
+    delivery: DeliveryAttemptSummary;
+    diagnostic_id: DiagnosticId;
+    correlation_id?: string;
+    metadata?: Metadata;
+    interaction?: InteractionSummary;
+    /**
+     * Present on cancellation responses. False means the provider call was already owned and no deletion is claimed.
+     */
+    cancellation_effective?: boolean;
+    outcome_guidance?: "Delivery may have been accepted by the provider. No automatic retry is scheduled; create a new message explicitly if another attempt is appropriate.";
+};
+export type MessageState = "accepted" | "dispatch_pending" | "queued" | "sending" | "provider_accepted" | "retry_wait" | "terminal_failed" | "outcome_unknown" | "cancelled" | "expired";
+/**
+ * A safe aggregate of delivery attempts. Protected provider responses are excluded.
+ */
+export type DeliveryAttemptSummary = {
+    [k: string]: unknown;
+} & {
+    attempt_count: number;
+    highest_proven_provider_state: HighestProvenProviderState;
+    retry_scheduled: boolean;
+    retry_at?: Timestamp;
+    classified_error?: ClassifiedError;
+};
+/**
+ * The strongest provider assertion the service can prove; it is not an end-device delivery receipt.
+ */
+export type HighestProvenProviderState = "none" | "provider_accepted";
+/**
+ * The hosted interaction identity and first-terminal-writer state.
+ */
+export type InteractionSummary = {
+    [k: string]: unknown;
+} & {
+    /**
+     * An opaque identifier whose internal encoding is not a public promise.
+     */
+    id: string;
+    type: "confirm" | "select" | "input";
+    state: "open" | "answered" | "expired" | "cancelled" | "retired";
+    expires_at: string;
+    /**
+     * Caller-owned opaque correlation returned as data, never treated as execution authority.
+     */
+    correlation_id?: string;
+    answered_at?: string;
+    /**
+     * Whether the typed answer remains available inside its content-retention window. False preserves the answered terminal fact after answer deletion.
+     */
+    answer_retained?: boolean;
+    answer?: boolean | string;
+};
+/**
+ * Safe RFC 9457-style Problem Details for the WhooshBang API.
+ */
+export type Problem = {
+    [k: string]: unknown;
+} & {
+    type: string;
+    title: string;
+    status: number;
+    detail: string;
+    code: ProblemCode;
+    diagnostic_id: DiagnosticId;
+    retryable: boolean;
+    retry_at?: Timestamp;
+    /**
+     * @maxItems 20
+     */
+    field_errors?: [] | [ProblemFieldError] | [ProblemFieldError, ProblemFieldError] | [ProblemFieldError, ProblemFieldError, ProblemFieldError] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ] | [
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError,
+        ProblemFieldError
+    ];
+} & Problem1;
+export type Problem1 = {
+    type?: "https://whooshbang.flowxo.com/problems/authentication_required";
+    title?: "Authentication required";
+    status?: 401;
+    code?: "authentication_required";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/replay_unavailable";
+    title?: "Replay unavailable";
+    status?: 409;
+    code?: "replay_unavailable";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/endpoint_rotation_conflict";
+    title?: "Endpoint rotation conflict";
+    status?: 409;
+    code?: "endpoint_rotation_conflict";
+    retryable?: true;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/project_slug_conflict";
+    title?: "Project slug conflict";
+    status?: 409;
+    code?: "project_slug_conflict";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/credential_invalid";
+    title?: "Credential invalid";
+    status?: 401;
+    code?: "credential_invalid";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/scope_forbidden";
+    title?: "Scope forbidden";
+    status?: 403;
+    code?: "scope_forbidden";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/environment_mismatch";
+    title?: "Environment mismatch";
+    status?: 403;
+    code?: "environment_mismatch";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/idempotency_key_required";
+    title?: "Idempotency key required";
+    status?: 400;
+    code?: "idempotency_key_required";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/idempotency_conflict";
+    title?: "Idempotency conflict";
+    status?: 409;
+    code?: "idempotency_conflict";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/request_invalid";
+    title?: "Request invalid";
+    status?: 400;
+    code?: "request_invalid";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/subscriber_unbound";
+    title?: "Subscriber unbound";
+    status?: 422;
+    code?: "subscriber_unbound";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/resource_not_found";
+    title?: "Resource not found";
+    status?: 404;
+    code?: "resource_not_found";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/resource_expired";
+    title?: "Resource expired";
+    status?: 404;
+    code?: "resource_expired";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/cancellation_too_late";
+    title?: "Cancellation too late";
+    status?: 409;
+    code?: "cancellation_too_late";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/rate_limited";
+    title?: "Rate limited";
+    status?: 429;
+    code?: "rate_limited";
+    retryable?: true;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/provider_retryable";
+    title?: "Provider retryable failure";
+    status?: 503;
+    code?: "provider_retryable";
+    retryable?: true;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/provider_terminal";
+    title?: "Provider terminal failure";
+    status?: 502;
+    code?: "provider_terminal";
+    retryable?: false;
+    [k: string]: unknown;
+} | {
+    type?: "https://whooshbang.flowxo.com/problems/provider_outcome_unknown";
+    title?: "Provider outcome unknown";
+    status?: 502;
+    code?: "provider_outcome_unknown";
+    retryable?: false;
+    [k: string]: unknown;
+};
+/**
+ * Visible ASCII, scoped by authenticated environment, operation ID, and key, and retained for seven days from first acceptance.
+ */
+export type IdempotencyKey = string;
+/**
+ * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+ * via the `definition` "InteractionCapability".
+ */
+export type InteractionCapability = {
+    [k: string]: unknown;
+} & {
+    mode: "native" | "fallback" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "native" | "fallback" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "native" | "fallback" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "native" | "fallback" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+};
+/**
+ * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+ * via the `definition` "ContextSupport".
+ */
+export type ContextSupport = {
+    [k: string]: unknown;
+} & {
+    mode: "supported" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "supported" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "supported" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    mode: "supported" | "unsupported" | "conditional";
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+};
+/**
+ * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+ * via the `definition` "Degradation".
+ */
+export type Degradation = {
+    [k: string]: unknown;
+} & {
+    active: boolean;
+    code?: string;
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+} & {
+    active: boolean;
+    code?: string;
+    /**
+     * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+     * via the `definition` "SafeExplanation".
+     */
+    explanation?: string;
+};
+/**
+ * The current Clerk organization projected as a WhooshBang tenant. Clerk organization and user identifiers are not public fields.
+ */
+export interface AccountProjection {
+    id: OpaqueIdentifier;
+    name: string;
+    status: "active" | "suspended";
+    membership: AccountMembershipSummary;
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    diagnostic_id: DiagnosticId;
+}
+export interface AccountMembershipSummary {
+    role: AccountRole;
+}
+/**
+ * Creates one project inside the account selected by the authenticated human session.
+ */
+export interface CreateProjectRequest {
+    name: string;
+    slug: string;
+}
+/**
+ * An account-scoped application project with its complete test/live bootstrap.
+ */
+export interface Project {
+    id: OpaqueIdentifier;
+    account_id: OpaqueIdentifier;
+    name: string;
+    slug: string;
+    status: "active" | "disabled";
+    /**
+     * @minItems 2
+     * @maxItems 2
+     */
+    environments: [ProjectEnvironment, ProjectEnvironment];
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    diagnostic_id: DiagnosticId;
+}
+/**
+ * A test or live project environment with its transactionally created default notifier.
+ */
+export interface ProjectEnvironment {
+    id: OpaqueIdentifier;
+    project_id: OpaqueIdentifier;
+    kind: Environment;
+    status: "active" | "disabled";
+    default_notifier: DefaultNotifierSummary;
+}
+/**
+ * The default notifier created transactionally with one project environment.
+ */
+export interface DefaultNotifierSummary {
+    id: OpaqueIdentifier;
+    environment_id: OpaqueIdentifier;
+    display_name: "Default";
+    status: "active" | "disabled";
+    is_default: true;
+}
+/**
+ * A stable page of projects inside the authenticated account.
+ */
+export interface ProjectCollection {
+    /**
+     * @maxItems 100
+     */
+    items: Project[];
+    next_cursor?: string;
+}
+/**
+ * Creates one credential inside the project environment selected by the authenticated administration path.
+ */
+export interface CreateApiCredentialRequest {
+    label: string;
+    scopes: ApiCredentialScopeSet;
+}
+/**
+ * Creates a replacement with the same label and scopes and schedules terminal revocation of the replaced credential after the declared overlap.
+ */
+export interface RotateApiCredentialRequest {
+    overlap_seconds: number;
+}
+/**
+ * A stable page of safe credential metadata in one project environment.
+ */
+export interface ApiCredentialCollection {
+    /**
+     * @maxItems 100
+     */
+    items: ApiCredential[];
+    next_cursor?: string;
+}
+/**
+ * The creation-only response. The secret is emitted in this response exactly once and is never available from list, rotate-target, revoke, or later read responses.
+ */
+export interface ApiCredentialSecretReveal {
+    credential: ApiCredential;
+    secret: ApiCredentialSecret;
+}
+/**
+ * A creation-only replacement secret plus safe metadata for the credential it replaces.
+ */
+export interface ApiCredentialRotation {
+    credential: ApiCredentialSecretReveal;
+    replaced_credential: ApiCredential;
+}
+/**
+ * Creates one project/environment endpoint. The service validates the final normalized destination and never returns it from health or diagnostic reads.
+ */
+export interface CreateCustomerEndpointRequest {
+    url: string;
+    /**
+     * @minItems 1
+     * @maxItems 9
+     */
+    event_types: [CustomerEventType] | [CustomerEventType, CustomerEventType] | [CustomerEventType, CustomerEventType, CustomerEventType] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ];
+    /**
+     * Explicit local-tooling marker. Production deployments reject true even though local test tooling accepts loopback HTTP before persistence.
+     */
+    local_test?: boolean;
+}
+/**
+ * Safe endpoint lifecycle and health metadata. URL, signing material, event bodies, answers, and response bodies are structurally absent.
+ */
+export interface CustomerEndpoint {
+    id: OpaqueIdentifier;
+    project_id: OpaqueIdentifier;
+    environment_id: OpaqueIdentifier;
+    environment: Environment;
+    status: CustomerEndpointStatus;
+    verification_status: "pending" | "failed" | "verified";
+    /**
+     * @minItems 1
+     * @maxItems 9
+     */
+    event_types: [CustomerEventType] | [CustomerEventType, CustomerEventType] | [CustomerEventType, CustomerEventType, CustomerEventType] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ] | [
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType,
+        CustomerEventType
+    ];
+    secret_version: number;
+    health: "never_delivered" | "healthy" | "failing";
+    created_at: Timestamp;
+    updated_at: Timestamp;
+    verification_attempted_at?: Timestamp;
+    verified_at?: Timestamp;
+    rotated_at?: Timestamp;
+    paused_at?: Timestamp;
+    disabled_at?: Timestamp;
+    last_success_at?: Timestamp;
+    last_failure?: CustomerEndpointFailure;
+    diagnostic_id: DiagnosticId;
+}
+export interface CustomerEndpointFailure {
+    at: Timestamp;
+    category: string;
+}
+export interface CustomerEndpointCollection {
+    /**
+     * @maxItems 100
+     */
+    items: CustomerEndpoint[];
+}
+/**
+ * The initial create/rotate result includes secret. An equivalent idempotent replay returns the same logical endpoint without revealing the secret again.
+ */
+export interface CustomerEndpointMutationResult {
+    endpoint: CustomerEndpoint;
+    secret?: CustomerEndpointSecret;
+}
+export interface CustomerEndpointAttemptCollection {
+    endpoint_id: OpaqueIdentifier;
+    /**
+     * @maxItems 100
+     */
+    attempts: CustomerEndpointAttemptDiagnostic[];
+}
+/**
+ * Content-free per-attempt timing and failure classification.
+ */
+export interface CustomerEndpointAttemptDiagnostic {
+    id: OpaqueIdentifier;
+    event_id: OpaqueIdentifier;
+    attempt: number;
+    status: "pending" | "attempting" | "delivered" | "retry_wait" | "terminal_failed" | "paused";
+    diagnostic_code?: string;
+    http_status?: number;
+    started_at?: Timestamp;
+    completed_at?: Timestamp;
+    created_at: Timestamp;
+}
+/**
+ * Exact signed request bytes. A verifier echoes these exact bytes with valid webhook headers to prove it possesses the endpoint secret.
+ */
+export interface CustomerEndpointVerificationChallenge {
+    schema: "whooshbang.endpoint-verification.v1";
+    endpoint_id: OpaqueIdentifier;
+    challenge: string;
+}
+/**
+ * Creates one project- and environment-scoped, single-use authorization link.
+ */
+export interface CreateSubscriptionLinkRequest {
+    subscriber_id: OpaqueIdentifier;
+    notifier_id?: OpaqueIdentifier;
+    /**
+     * @minItems 1
+     * @maxItems 1
+     */
+    channels: [Channel];
+    /**
+     * Untrusted redirect input. HTTPS is required outside synthetic .test fixtures; the service never fetches this URL.
+     */
+    return_url?: string;
+    expires_in_seconds?: number;
+}
+/**
+ * A safe channel binding identity. Raw Telegram chat and user identifiers are never exposed.
+ */
+export interface BindingSummary {
+    id: OpaqueIdentifier;
+    project_id: OpaqueIdentifier;
+    environment: Environment;
+    subscriber_id: OpaqueIdentifier;
+    notifier_id: OpaqueIdentifier;
+    channel: Channel;
+    status: "active" | "paused" | "revoked";
+}
+/**
+ * A stable, safe error classification with no provider response or credential material.
+ */
+export interface ClassifiedError {
+    code: ProblemCode;
+    retryable: boolean;
+    detail?: string;
+    diagnostic_id?: DiagnosticId;
+}
+/**
+ * Creates one logical message for one subscriber and one resolved channel binding.
+ */
+export interface CreateMessageRequest {
+    to: MessageTarget;
+    notifier_id?: OpaqueIdentifier;
+    content: TextContent;
+    /**
+     * An RFC 3339 timestamp with a UTC offset. The server is authoritative.
+     */
+    expires_at?: string;
+    correlation_id?: string;
+    metadata?: Metadata;
+    /**
+     * A required-type tagged union. C0 supports confirm, single-select, and input only.
+     */
+    interaction?: ConfirmInteractionRequest | SelectInteractionRequest | InputInteractionRequest;
+}
+export interface MessageTarget {
+    subscriber_id: OpaqueIdentifier;
+}
+export interface TextContent {
+    type: "text";
+    text: string;
+}
+/**
+ * Bounded customer correlation data. Do not include secrets or personal data.
+ */
+export interface Metadata {
+    [k: string]: MetadataValue;
+}
+export interface ConfirmInteractionRequest {
+    type: "confirm";
+    prompt: string;
+    confirm_label?: string;
+    deny_label?: string;
+    /**
+     * Must be 30 seconds through 24 hours after server acceptance.
+     */
+    expires_at: string;
+    /**
+     * Caller-owned opaque correlation returned as data, never treated as execution authority.
+     */
+    correlation_id?: string;
+}
+export interface SelectInteractionRequest {
+    type: "select";
+    prompt: string;
+    /**
+     * @minItems 2
+     * @maxItems 6
+     */
+    options: [InteractionOption, InteractionOption] | [InteractionOption, InteractionOption, InteractionOption] | [
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption
+    ] | [
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption
+    ] | [
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption,
+        InteractionOption
+    ];
+    /**
+     * Must be 30 seconds through 24 hours after server acceptance.
+     */
+    expires_at: string;
+    /**
+     * Caller-owned opaque correlation returned as data, never treated as execution authority.
+     */
+    correlation_id?: string;
+}
+export interface InteractionOption {
+    /**
+     * Opaque customer data. It is never interpreted as a command.
+     */
+    value: string;
+    label: string;
+}
+export interface InputInteractionRequest {
+    type: "input";
+    prompt: string;
+    /**
+     * Must be 30 seconds through 24 hours after server acceptance.
+     */
+    expires_at: string;
+    /**
+     * Caller-owned opaque correlation returned as data, never treated as execution authority.
+     */
+    correlation_id?: string;
+}
+export interface ProblemFieldError {
+    /**
+     * A bounded JSON Pointer or request field identifier.
+     */
+    field: string;
+    code: string;
+    detail: string;
+}
+export interface ProviderCapabilitiesCollection {
+    schema: "whooshbang.provider-capabilities-collection.v1";
+    /**
+     * @minItems 1
+     */
+    providers: [ProviderCapabilitiesV1, ...ProviderCapabilitiesV1[]];
+}
+/**
+ * Provider-neutral, renderer-facing delivery and interaction capabilities with explicit degradation.
+ */
+export interface ProviderCapabilitiesV1 {
+    schema: "whooshbang.provider-capabilities.v1";
+    provider: string;
+    text: {
+        supported: boolean;
+        maximum_bytes: number;
+    };
+    interaction: {
+        confirm: InteractionCapability;
+        select: InteractionCapability;
+        input: InteractionCapability;
+    };
+    streaming: {
+        mode: "native" | "edit" | "typing_then_final" | "final_only" | "unsupported";
+        /**
+         * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+         * via the `definition` "SafeExplanation".
+         */
+        explanation?: string;
+    };
+    edit: {
+        supported: boolean;
+    };
+    receipts: {
+        provider_accepted: boolean;
+        delivered: boolean;
+        read: boolean;
+    };
+    contexts: {
+        private_chat: ContextSupport;
+        thread: ContextSupport;
+        group: ContextSupport;
+    };
+    rate_limit: {
+        strategy: "provider_retry_after" | "token_bucket" | "fixed_window" | "adaptive" | "unknown";
+        /**
+         * This interface was referenced by `ProviderCapabilitiesV1`'s JSON-Schema
+         * via the `definition` "SafeExplanation".
+         */
+        explanation?: string;
+    };
+    degradation: Degradation;
+}
+export type RotateCustomerEndpointRequest = RotateApiCredentialRequest;