@whooshbang/contracts 1.0.0-rc.13

package/fixtures/core-v1/problems/auth-invalid.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/credential_invalid",
+  "title": "Credential invalid",
+  "status": 401,
+  "detail": "The bearer credential is malformed, invalid, or revoked.",
+  "code": "credential_invalid",
+  "diagnostic_id": "diag_credential_invalid_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/authentication-required.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/authentication_required",
+  "title": "Authentication required",
+  "status": 401,
+  "detail": "Provide a bearer credential.",
+  "code": "authentication_required",
+  "diagnostic_id": "diag_auth_required_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/cancellation-too-late.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/cancellation_too_late",
+  "title": "Cancellation too late",
+  "status": 409,
+  "detail": "The operation can no longer be cancelled.",
+  "code": "cancellation_too_late",
+  "diagnostic_id": "diag_cancel_late_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/endpoint-rotation-conflict.json

@@ -0,0 +1,10 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/endpoint_rotation_conflict",
+  "title": "Endpoint rotation conflict",
+  "status": 409,
+  "detail": "A prior signing-secret overlap is still active. Retry after that overlap expires.",
+  "code": "endpoint_rotation_conflict",
+  "diagnostic_id": "diag_endpoint_rotation_conflict_001",
+  "retryable": true,
+  "retry_at": "2026-08-06T14:00:00.000Z"
+}

package/fixtures/core-v1/problems/environment-mismatch.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/environment_mismatch",
+  "title": "Environment mismatch",
+  "status": 403,
+  "detail": "The credential cannot address a binding in another environment.",
+  "code": "environment_mismatch",
+  "diagnostic_id": "diag_environment_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/idempotency-conflict.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/idempotency_conflict",
+  "title": "Idempotency conflict",
+  "status": 409,
+  "detail": "The key was already accepted with materially different validated input.",
+  "code": "idempotency_conflict",
+  "diagnostic_id": "diag_idem_conflict_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/idempotency-key-required.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/idempotency_key_required",
+  "title": "Idempotency key required",
+  "status": 400,
+  "detail": "Provide an Idempotency-Key containing 8 to 255 visible ASCII characters.",
+  "code": "idempotency_key_required",
+  "diagnostic_id": "diag_idem_required_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/project-slug-conflict.json

@@ -0,0 +1,16 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/project_slug_conflict",
+  "title": "Project slug conflict",
+  "status": 409,
+  "detail": "That project slug is already used in this account.",
+  "code": "project_slug_conflict",
+  "diagnostic_id": "diag_project_slug_conflict_001",
+  "retryable": false,
+  "field_errors": [
+    {
+      "field": "/slug",
+      "code": "already_exists",
+      "detail": "Choose a different project slug."
+    }
+  ]
+}

package/fixtures/core-v1/problems/provider-outcome-unknown.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/provider_outcome_unknown",
+  "title": "Provider outcome unknown",
+  "status": 502,
+  "detail": "The provider may have accepted the operation; no automatic retry is scheduled.",
+  "code": "provider_outcome_unknown",
+  "diagnostic_id": "diag_provider_unknown_002",
+  "retryable": false
+}

package/fixtures/core-v1/problems/provider-retryable.json

@@ -0,0 +1,10 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/provider_retryable",
+  "title": "Provider retryable failure",
+  "status": 503,
+  "detail": "The provider call failed before acceptance and may be retried by the service.",
+  "code": "provider_retryable",
+  "diagnostic_id": "diag_provider_retry_001",
+  "retryable": true,
+  "retry_at": "2026-07-25T17:46:00Z"
+}

package/fixtures/core-v1/problems/provider-terminal.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/provider_terminal",
+  "title": "Provider terminal failure",
+  "status": 502,
+  "detail": "The provider rejected the operation and no automatic retry is scheduled.",
+  "code": "provider_terminal",
+  "diagnostic_id": "diag_provider_terminal_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/rate-limited.json

@@ -0,0 +1,10 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/rate_limited",
+  "title": "Rate limited",
+  "status": 429,
+  "detail": "The project or operation rate limit was exceeded.",
+  "code": "rate_limited",
+  "diagnostic_id": "diag_rate_limited_001",
+  "retryable": true,
+  "retry_at": "2026-07-25T17:46:00Z"
+}

package/fixtures/core-v1/problems/replay-unavailable-not-terminal.json

@@ -0,0 +1,16 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/replay_unavailable",
+  "title": "Replay unavailable",
+  "status": 409,
+  "detail": "Replay is available only after the latest delivery sequence reaches terminal failure.",
+  "code": "replay_unavailable",
+  "diagnostic_id": "diag_replay_unavailable_not_terminal_001",
+  "retryable": false,
+  "field_errors": [
+    {
+      "field": "/",
+      "code": "not_terminal",
+      "detail": "Replay is available only after the latest delivery sequence reaches terminal failure."
+    }
+  ]
+}

package/fixtures/core-v1/problems/replay-unavailable-payload.json

@@ -0,0 +1,16 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/replay_unavailable",
+  "title": "Replay unavailable",
+  "status": 409,
+  "detail": "Replay is unavailable because the signed event payload is no longer retained.",
+  "code": "replay_unavailable",
+  "diagnostic_id": "diag_replay_unavailable_payload_001",
+  "retryable": false,
+  "field_errors": [
+    {
+      "field": "/",
+      "code": "payload_unavailable",
+      "detail": "Replay is unavailable because the signed event payload is no longer retained."
+    }
+  ]
+}

package/fixtures/core-v1/problems/replay-unavailable-rollout.json

@@ -0,0 +1,16 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/replay_unavailable",
+  "title": "Replay unavailable",
+  "status": 409,
+  "detail": "Customer event replay is not enabled for this project environment.",
+  "code": "replay_unavailable",
+  "diagnostic_id": "diag_replay_unavailable_rollout_001",
+  "retryable": false,
+  "field_errors": [
+    {
+      "field": "/",
+      "code": "rollout_disabled",
+      "detail": "Customer event replay is not enabled for this project environment."
+    }
+  ]
+}

package/fixtures/core-v1/problems/request-invalid.json

@@ -0,0 +1,16 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/request_invalid",
+  "title": "Request invalid",
+  "status": 400,
+  "detail": "One or more request fields are invalid.",
+  "code": "request_invalid",
+  "diagnostic_id": "diag_request_invalid_001",
+  "retryable": false,
+  "field_errors": [
+    {
+      "field": "/content/text",
+      "code": "utf8_bytes_exceeded",
+      "detail": "Text must contain at most 8192 UTF-8 bytes."
+    }
+  ]
+}

package/fixtures/core-v1/problems/resource-expired.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/resource_expired",
+  "title": "Resource expired",
+  "status": 404,
+  "detail": "The resource is no longer available.",
+  "code": "resource_expired",
+  "diagnostic_id": "diag_resource_expired_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/resource-not-found.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/resource_not_found",
+  "title": "Resource not found",
+  "status": 404,
+  "detail": "The resource was not found.",
+  "code": "resource_not_found",
+  "diagnostic_id": "diag_not_found_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/scope-forbidden.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/scope_forbidden",
+  "title": "Scope forbidden",
+  "status": 403,
+  "detail": "The credential does not grant the required operation scope.",
+  "code": "scope_forbidden",
+  "diagnostic_id": "diag_scope_forbidden_001",
+  "retryable": false
+}

package/fixtures/core-v1/problems/subscriber-unbound.json

@@ -0,0 +1,9 @@
+{
+  "type": "https://whooshbang.flowxo.com/problems/subscriber_unbound",
+  "title": "Subscriber unbound",
+  "status": 422,
+  "detail": "No authorized channel binding is available for this subscriber and notifier.",
+  "code": "subscriber_unbound",
+  "diagnostic_id": "diag_subscriber_unbound_001",
+  "retryable": false
+}

package/fixtures/core-v1/requests/create-api-credential.json

@@ -0,0 +1,9 @@
+{
+  "label": "Production integration",
+  "scopes": [
+    "messages:write",
+    "messages:read",
+    "subscriptions:write",
+    "subscriptions:read"
+  ]
+}

package/fixtures/core-v1/requests/create-customer-endpoint.json

@@ -0,0 +1,5 @@
+{
+  "url": "https://events.example.com/whooshbang",
+  "event_types": ["interaction.received", "message.delivered"],
+  "local_test": false
+}

package/fixtures/core-v1/requests/create-message.json

@@ -0,0 +1,15 @@
+{
+  "to": {
+    "subscriber_id": "customer_123"
+  },
+  "notifier_id": "default",
+  "content": {
+    "type": "text",
+    "text": "Your export is ready."
+  },
+  "expires_at": "2026-07-25T18:00:00Z",
+  "correlation_id": "export_987",
+  "metadata": {
+    "job": "export_987"
+  }
+}

package/fixtures/core-v1/requests/create-project.json

@@ -0,0 +1,4 @@
+{
+  "name": "Synthetic Alerts",
+  "slug": "synthetic-alerts"
+}

package/fixtures/core-v1/requests/create-subscription-link.json

@@ -0,0 +1,5 @@
+{
+  "subscriber_id": "customer_123",
+  "channels": ["telegram"],
+  "return_url": "https://example.test/settings/notifications"
+}

package/fixtures/core-v1/requests/rotate-api-credential.json

@@ -0,0 +1,3 @@
+{
+  "overlap_seconds": 3600
+}

package/fixtures/core-v1/requests/rotate-customer-endpoint.json

@@ -0,0 +1,3 @@
+{
+  "overlap_seconds": 3600
+}

package/fixtures/core-v1/scenarios/api-credential-invalid-indistinguishable.json

@@ -0,0 +1,14 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "api-credential-invalid-indistinguishable",
+  "category": "credential_lifecycle",
+  "given": {
+    "presented_statuses": ["unknown", "revoked", "expired_overlap"]
+  },
+  "expected": {
+    "http_status": 401,
+    "problem_code": "credential_invalid",
+    "resource_looked_up": false,
+    "existence_disclosed": false
+  }
+}

package/fixtures/core-v1/scenarios/api-credential-one-time-reveal.json

@@ -0,0 +1,21 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "api-credential-one-time-reveal",
+  "category": "credential_lifecycle",
+  "given": {
+    "operation": "createApiCredential",
+    "environment": "live",
+    "scopes": [
+      "messages:write",
+      "messages:read",
+      "subscriptions:write",
+      "subscriptions:read"
+    ]
+  },
+  "expected": {
+    "status": 201,
+    "secrets_returned_by_creation": 1,
+    "secrets_returned_by_later_reads": 0,
+    "digest_returned": false
+  }
+}

package/fixtures/core-v1/scenarios/api-credential-revocation-replay.json

@@ -0,0 +1,17 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "api-credential-revocation-replay",
+  "category": "credential_lifecycle",
+  "given": {
+    "operation": "revokeApiCredential",
+    "first_status": "active",
+    "repeat_status": "revoked"
+  },
+  "expected": {
+    "first_http_status": 200,
+    "repeat_http_status": 200,
+    "terminal_status": "revoked",
+    "revocation_events": 1,
+    "secret_returned": false
+  }
+}

package/fixtures/core-v1/scenarios/api-credential-rotation-overlap.json

@@ -0,0 +1,18 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "api-credential-rotation-overlap",
+  "category": "credential_lifecycle",
+  "given": {
+    "operation": "rotateApiCredential",
+    "overlap_seconds": 3600,
+    "old_status": "active"
+  },
+  "expected": {
+    "status": 201,
+    "credentials_created": 1,
+    "new_credential_authorized_during_overlap": true,
+    "old_credential_authorized_during_overlap": true,
+    "old_credential_authorized_after_overlap": false,
+    "new_secret_returned_once": true
+  }
+}

package/fixtures/core-v1/scenarios/cancellation-too-late.json

@@ -0,0 +1,15 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "cancellation-too-late",
+  "category": "cancellation",
+  "given": {
+    "message_id": "msg_synthetic_004",
+    "state": "sending",
+    "provider_call_owned": true
+  },
+  "expected": {
+    "state": "sending",
+    "cancellation_effective": false,
+    "provider_deletion_claimed": false
+  }
+}

package/fixtures/core-v1/scenarios/cross-account-project.json

@@ -0,0 +1,14 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "cross-account-project",
+  "category": "isolation",
+  "given": {
+    "authenticated_account_id": "account_synthetic_001",
+    "requested_project_id": "project_other_account_001"
+  },
+  "expected": {
+    "status": 404,
+    "problem_code": "resource_not_found",
+    "existence_disclosed": false
+  }
+}

package/fixtures/core-v1/scenarios/cross-project-resource.json

@@ -0,0 +1,17 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "cross-project-resource",
+  "category": "isolation",
+  "given": {
+    "operation_id": "getMessage",
+    "credential_project_id": "project_a",
+    "credential_environment": "test",
+    "resource_project_id": "project_b",
+    "resource_environment": "test"
+  },
+  "expected": {
+    "status": 404,
+    "problem_code": "resource_not_found",
+    "existence_disclosed": false
+  }
+}

package/fixtures/core-v1/scenarios/environment-mismatch.json

@@ -0,0 +1,17 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "environment-mismatch",
+  "category": "isolation",
+  "given": {
+    "operation_id": "createMessage",
+    "credential_project_id": "project_synthetic",
+    "credential_environment": "test",
+    "binding_project_id": "project_synthetic",
+    "binding_environment": "live"
+  },
+  "expected": {
+    "status": 403,
+    "problem_code": "environment_mismatch",
+    "provider_called": false
+  }
+}

package/fixtures/core-v1/scenarios/idempotency-conflict.json

@@ -0,0 +1,35 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "idempotency-conflict",
+  "category": "idempotency",
+  "given": {
+    "operation_id": "createMessage",
+    "environment": "test",
+    "key": "fixture-key-conflict-001",
+    "first_request": {
+      "to": {
+        "subscriber_id": "customer_123"
+      },
+      "content": {
+        "type": "text",
+        "text": "First payload"
+      }
+    },
+    "replay_request": {
+      "to": {
+        "subscriber_id": "customer_123"
+      },
+      "content": {
+        "type": "text",
+        "text": "Different payload"
+      }
+    }
+  },
+  "expected": {
+    "outcome": "conflict",
+    "status": 409,
+    "problem_code": "idempotency_conflict",
+    "logical_operations": 1,
+    "retention_extended": false
+  }
+}

package/fixtures/core-v1/scenarios/idempotency-equivalent-replay.json

@@ -0,0 +1,27 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "idempotency-equivalent-replay",
+  "category": "idempotency",
+  "given": {
+    "operation_id": "createSubscriptionLink",
+    "environment": "test",
+    "key": "fixture-key-equivalent-001",
+    "first_request": {
+      "subscriber_id": "customer_123",
+      "channels": ["telegram"]
+    },
+    "replay_request": {
+      "subscriber_id": "customer_123",
+      "notifier_id": "default",
+      "channels": ["telegram"],
+      "expires_in_seconds": 900
+    }
+  },
+  "expected": {
+    "outcome": "replayed",
+    "status": 201,
+    "resource_id": "slink_synthetic_001",
+    "logical_operations": 1,
+    "retention_extended": false
+  }
+}

package/fixtures/core-v1/scenarios/malformed-bearer.json

@@ -0,0 +1,14 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "malformed-bearer",
+  "category": "isolation",
+  "given": {
+    "operation_id": "getSubscriptionLink",
+    "authorization": "Basic synthetic"
+  },
+  "expected": {
+    "status": 401,
+    "problem_code": "credential_invalid",
+    "resource_looked_up": false
+  }
+}

package/fixtures/core-v1/scenarios/metadata-overrun.json

@@ -0,0 +1,14 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "metadata-overrun",
+  "category": "message_outcome",
+  "given": {
+    "operation_id": "createMessage",
+    "metadata_serialized_bytes": 4097
+  },
+  "expected": {
+    "status": 400,
+    "problem_code": "request_invalid",
+    "logical_operations": 0
+  }
+}

package/fixtures/core-v1/scenarios/missing-scope.json

@@ -0,0 +1,15 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "missing-scope",
+  "category": "isolation",
+  "given": {
+    "operation_id": "createMessage",
+    "credential_scopes": ["messages:read"],
+    "required_scope": "messages:write"
+  },
+  "expected": {
+    "status": 403,
+    "problem_code": "scope_forbidden",
+    "logical_operations": 0
+  }
+}

package/fixtures/core-v1/scenarios/project-create-equivalent-replay.json

@@ -0,0 +1,26 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "project-create-equivalent-replay",
+  "category": "idempotency",
+  "given": {
+    "account_id": "account_synthetic_001",
+    "operation_id": "createProject",
+    "idempotency_key": "project-create-synthetic-001",
+    "first_request": {
+      "name": "Synthetic Alerts",
+      "slug": "synthetic-alerts"
+    },
+    "replay_request": {
+      "name": "Synthetic Alerts",
+      "slug": "synthetic-alerts"
+    }
+  },
+  "expected": {
+    "status": 201,
+    "outcome": "replayed",
+    "projects_created": 1,
+    "environments_created": 2,
+    "default_notifiers_created": 2,
+    "retention_extended": false
+  }
+}

package/fixtures/core-v1/scenarios/project-slug-conflict.json

@@ -0,0 +1,21 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "project-slug-conflict",
+  "category": "idempotency",
+  "given": {
+    "account_id": "account_synthetic_001",
+    "existing_project_id": "project_synthetic_001",
+    "existing_slug": "synthetic-alerts",
+    "request": {
+      "name": "Different Project",
+      "slug": "synthetic-alerts"
+    }
+  },
+  "expected": {
+    "status": 409,
+    "problem_code": "project_slug_conflict",
+    "projects_created": 0,
+    "environments_created": 0,
+    "default_notifiers_created": 0
+  }
+}

package/fixtures/core-v1/scenarios/provider-outcome-unknown.json

@@ -0,0 +1,15 @@
+{
+  "contract_version": "1.0.0-rc.13",
+  "id": "provider-outcome-unknown",
+  "category": "message_outcome",
+  "given": {
+    "message_id": "msg_synthetic_002",
+    "provider_call_owned": true,
+    "trustworthy_provider_result": false
+  },
+  "expected": {
+    "state": "outcome_unknown",
+    "retry_scheduled": false,
+    "caller_may_create_new_message_explicitly": true
+  }
+}