@whooshbang/contracts 1.0.0-rc.13

package/schemas/whooshbang-v1.schema.json

@@ -0,0 +1,2173 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://whooshbang.flowxo.com/schemas/whooshbang-v1.schema.json",
+  "x-contract-version": "1.0.0-rc.13",
+  "title": "WhooshBangV1ContractDocument",
+  "description": "Public request, resource, summary, and Problem Details models for the WhooshBang V1 REST API.",
+  "oneOf": [
+    {
+      "$ref": "#/$defs/AccountProjection"
+    },
+    {
+      "$ref": "#/$defs/CreateProjectRequest"
+    },
+    {
+      "$ref": "#/$defs/Project"
+    },
+    {
+      "$ref": "#/$defs/ProjectCollection"
+    },
+    {
+      "$ref": "#/$defs/CreateApiCredentialRequest"
+    },
+    {
+      "$ref": "#/$defs/RotateApiCredentialRequest"
+    },
+    {
+      "$ref": "#/$defs/ApiCredential"
+    },
+    {
+      "$ref": "#/$defs/ApiCredentialCollection"
+    },
+    {
+      "$ref": "#/$defs/ApiCredentialSecretReveal"
+    },
+    {
+      "$ref": "#/$defs/ApiCredentialRotation"
+    },
+    {
+      "$ref": "#/$defs/CreateCustomerEndpointRequest"
+    },
+    {
+      "$ref": "#/$defs/CustomerEndpoint"
+    },
+    {
+      "$ref": "#/$defs/CustomerEndpointCollection"
+    },
+    {
+      "$ref": "#/$defs/CustomerEndpointMutationResult"
+    },
+    {
+      "$ref": "#/$defs/CustomerEndpointAttemptCollection"
+    },
+    {
+      "$ref": "#/$defs/CustomerEndpointVerificationChallenge"
+    },
+    {
+      "$ref": "#/$defs/CreateSubscriptionLinkRequest"
+    },
+    {
+      "$ref": "#/$defs/SubscriptionLink"
+    },
+    {
+      "$ref": "#/$defs/CreateMessageRequest"
+    },
+    {
+      "$ref": "#/$defs/Message"
+    },
+    {
+      "$ref": "#/$defs/Problem"
+    },
+    {
+      "$ref": "#/$defs/IdempotencyKey"
+    },
+    {
+      "$ref": "#/$defs/ProviderCapabilitiesCollection"
+    }
+  ],
+  "$defs": {
+    "Environment": {
+      "type": "string",
+      "enum": ["test", "live"],
+      "description": "The single environment selected by the authenticated credential."
+    },
+    "Channel": {
+      "type": "string",
+      "enum": ["telegram"],
+      "description": "The only channel accepted during C0. The vocabulary can grow additively."
+    },
+    "OpaqueIdentifier": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
+      "description": "An opaque identifier. Its shape, ordering, and embedded content are not public promises."
+    },
+    "DiagnosticId": {
+      "type": "string",
+      "minLength": 8,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9_-]+$",
+      "description": "A safe public identifier used to correlate protected service diagnostics."
+    },
+    "Timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^[0-9]{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12][0-9]|3[01])T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](?:\\.[0-9]+)?(?:Z|[+-](?:[01][0-9]|2[0-3]):[0-5][0-9])$",
+      "description": "An RFC 3339 timestamp with a UTC offset. The server is authoritative."
+    },
+    "IdempotencyKey": {
+      "type": "string",
+      "minLength": 8,
+      "maxLength": 255,
+      "pattern": "^[!-~]+$",
+      "description": "Visible ASCII, scoped by authenticated environment, operation ID, and key, and retained for seven days from first acceptance."
+    },
+    "MetadataValue": {
+      "oneOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "number"
+        },
+        {
+          "type": "boolean"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "Metadata": {
+      "type": "object",
+      "description": "Bounded customer correlation data. Do not include secrets or personal data.",
+      "maxProperties": 20,
+      "propertyNames": {
+        "minLength": 1,
+        "maxLength": 64
+      },
+      "additionalProperties": {
+        "$ref": "#/$defs/MetadataValue"
+      },
+      "x-max-json-bytes": 4096
+    },
+    "AccountRole": {
+      "type": "string",
+      "enum": ["admin", "member"],
+      "description": "The stable WhooshBang authorization role projected from the current Clerk organization membership."
+    },
+    "AccountMembershipSummary": {
+      "type": "object",
+      "required": ["role"],
+      "properties": {
+        "role": {
+          "$ref": "#/$defs/AccountRole"
+        }
+      },
+      "additionalProperties": false
+    },
+    "AccountProjection": {
+      "type": "object",
+      "description": "The current Clerk organization projected as a WhooshBang tenant. Clerk organization and user identifiers are not public fields.",
+      "required": [
+        "id",
+        "name",
+        "status",
+        "membership",
+        "created_at",
+        "updated_at",
+        "diagnostic_id"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 100
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "suspended"]
+        },
+        "membership": {
+          "$ref": "#/$defs/AccountMembershipSummary"
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "updated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        }
+      },
+      "additionalProperties": false
+    },
+    "CreateProjectRequest": {
+      "type": "object",
+      "description": "Creates one project inside the account selected by the authenticated human session.",
+      "required": ["name", "slug"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 100
+        },
+        "slug": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 63,
+          "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "DefaultNotifierSummary": {
+      "type": "object",
+      "description": "The default notifier created transactionally with one project environment.",
+      "required": [
+        "id",
+        "environment_id",
+        "display_name",
+        "status",
+        "is_default"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "display_name": {
+          "const": "Default"
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "disabled"]
+        },
+        "is_default": {
+          "const": true
+        }
+      },
+      "additionalProperties": false
+    },
+    "ProjectEnvironment": {
+      "type": "object",
+      "description": "A test or live project environment with its transactionally created default notifier.",
+      "required": ["id", "project_id", "kind", "status", "default_notifier"],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "kind": {
+          "$ref": "#/$defs/Environment"
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "disabled"]
+        },
+        "default_notifier": {
+          "$ref": "#/$defs/DefaultNotifierSummary"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Project": {
+      "type": "object",
+      "description": "An account-scoped application project with its complete test/live bootstrap.",
+      "required": [
+        "id",
+        "account_id",
+        "name",
+        "slug",
+        "status",
+        "environments",
+        "created_at",
+        "updated_at",
+        "diagnostic_id"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "account_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 100
+        },
+        "slug": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 63,
+          "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "disabled"]
+        },
+        "environments": {
+          "type": "array",
+          "minItems": 2,
+          "maxItems": 2,
+          "x-unique-property": "kind",
+          "items": {
+            "$ref": "#/$defs/ProjectEnvironment"
+          }
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "updated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        }
+      },
+      "additionalProperties": false
+    },
+    "ProjectCollection": {
+      "type": "object",
+      "description": "A stable page of projects inside the authenticated account.",
+      "required": ["items"],
+      "properties": {
+        "items": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/Project"
+          }
+        },
+        "next_cursor": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^[A-Za-z0-9_-]+$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "ApiCredentialId": {
+      "type": "string",
+      "pattern": "^pcred_[A-Za-z0-9_-]{21}[AQgw]$",
+      "description": "pcred_ followed by the canonical unpadded base64url encoding of exactly 16 random bytes."
+    },
+    "ApiCredentialPrefix": {
+      "type": "string",
+      "pattern": "^wb_pc1\\.pcred_[A-Za-z0-9_-]{8}$",
+      "description": "A safe display prefix containing the credential format marker and first eight base64url identity characters, never secret bytes."
+    },
+    "ApiCredentialSecret": {
+      "type": "string",
+      "pattern": "^wb_pc1\\.pcred_[A-Za-z0-9_-]{21}[AQgw]\\.[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$",
+      "description": "The exact one-time runtime bearer syntax. The final segment is canonical unpadded base64url for exactly 32 random secret bytes."
+    },
+    "ApiCredentialScope": {
+      "type": "string",
+      "enum": [
+        "messages:write",
+        "messages:read",
+        "subscriptions:write",
+        "subscriptions:read",
+        "machine-clients:write",
+        "machine-clients:read",
+        "capabilities:read"
+      ],
+      "description": "One project-credential capability. Environment authority always comes from the credential record, never a scope or request field."
+    },
+    "ApiCredentialScopeSet": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 7,
+      "uniqueItems": true,
+      "items": {
+        "$ref": "#/$defs/ApiCredentialScope"
+      }
+    },
+    "CreateApiCredentialRequest": {
+      "type": "object",
+      "description": "Creates one credential inside the project environment selected by the authenticated administration path.",
+      "required": ["label", "scopes"],
+      "properties": {
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 100
+        },
+        "scopes": {
+          "$ref": "#/$defs/ApiCredentialScopeSet"
+        }
+      },
+      "additionalProperties": false
+    },
+    "RotateApiCredentialRequest": {
+      "type": "object",
+      "description": "Creates a replacement with the same label and scopes and schedules terminal revocation of the replaced credential after the declared overlap.",
+      "required": ["overlap_seconds"],
+      "properties": {
+        "overlap_seconds": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 86400
+        }
+      },
+      "additionalProperties": false
+    },
+    "ApiCredential": {
+      "type": "object",
+      "description": "Safe environment-scoped API credential metadata. It never contains a bearer secret, digest, Clerk identifier, or digest-key reference.",
+      "required": [
+        "id",
+        "project_id",
+        "environment_id",
+        "environment",
+        "prefix",
+        "label",
+        "scopes",
+        "created_by",
+        "created_at",
+        "status"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/ApiCredentialId"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment": {
+          "$ref": "#/$defs/Environment"
+        },
+        "prefix": {
+          "$ref": "#/$defs/ApiCredentialPrefix"
+        },
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 100
+        },
+        "scopes": {
+          "$ref": "#/$defs/ApiCredentialScopeSet"
+        },
+        "created_by": {
+          "$ref": "#/$defs/OpaqueIdentifier",
+          "description": "An opaque WhooshBang member identifier. It is never a Clerk user identifier."
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "last_used_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "scheduled_revocation_at": {
+          "$ref": "#/$defs/Timestamp",
+          "description": "When an active credential in a rotation overlap becomes terminally revoked."
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "revoked"]
+        },
+        "revoked_at": {
+          "$ref": "#/$defs/Timestamp"
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "status": {
+                "const": "revoked"
+              }
+            },
+            "required": ["status"]
+          },
+          "then": {
+            "required": ["revoked_at"],
+            "properties": {
+              "revoked_at": {},
+              "scheduled_revocation_at": false
+            }
+          },
+          "else": {
+            "properties": {
+              "revoked_at": false
+            }
+          }
+        }
+      ],
+      "additionalProperties": false
+    },
+    "ApiCredentialCollection": {
+      "type": "object",
+      "description": "A stable page of safe credential metadata in one project environment.",
+      "required": ["items"],
+      "properties": {
+        "items": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/ApiCredential"
+          }
+        },
+        "next_cursor": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^[A-Za-z0-9_-]+$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "ApiCredentialSecretReveal": {
+      "type": "object",
+      "description": "The creation-only response. The secret is emitted in this response exactly once and is never available from list, rotate-target, revoke, or later read responses.",
+      "required": ["credential", "secret"],
+      "properties": {
+        "credential": {
+          "$ref": "#/$defs/ApiCredential"
+        },
+        "secret": {
+          "$ref": "#/$defs/ApiCredentialSecret"
+        }
+      },
+      "additionalProperties": false
+    },
+    "ApiCredentialRotation": {
+      "type": "object",
+      "description": "A creation-only replacement secret plus safe metadata for the credential it replaces.",
+      "required": ["credential", "replaced_credential"],
+      "properties": {
+        "credential": {
+          "$ref": "#/$defs/ApiCredentialSecretReveal"
+        },
+        "replaced_credential": {
+          "$ref": "#/$defs/ApiCredential"
+        }
+      },
+      "additionalProperties": false
+    },
+    "BindingSummary": {
+      "type": "object",
+      "description": "A safe channel binding identity. Raw Telegram chat and user identifiers are never exposed.",
+      "required": [
+        "id",
+        "project_id",
+        "environment",
+        "subscriber_id",
+        "notifier_id",
+        "channel",
+        "status"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment": {
+          "$ref": "#/$defs/Environment"
+        },
+        "subscriber_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "notifier_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "channel": {
+          "$ref": "#/$defs/Channel"
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "paused", "revoked"]
+        }
+      },
+      "additionalProperties": false
+    },
+    "CreateSubscriptionLinkRequest": {
+      "type": "object",
+      "description": "Creates one project- and environment-scoped, single-use authorization link.",
+      "required": ["subscriber_id", "channels"],
+      "properties": {
+        "subscriber_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "notifier_id": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/OpaqueIdentifier"
+            }
+          ],
+          "default": "default"
+        },
+        "channels": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/Channel"
+          }
+        },
+        "return_url": {
+          "type": "string",
+          "format": "uri",
+          "pattern": "^https?://[^\\s]+$",
+          "anyOf": [
+            {
+              "type": "string",
+              "pattern": "^https://"
+            },
+            {
+              "type": "string",
+              "pattern": "^http://[^/?#\\s]*\\.test(?::[0-9]{1,5})?(?:[/?#]|$)"
+            }
+          ],
+          "maxLength": 2048,
+          "description": "Untrusted redirect input. HTTPS is required outside synthetic .test fixtures; the service never fetches this URL."
+        },
+        "expires_in_seconds": {
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 86400,
+          "default": 900
+        }
+      },
+      "additionalProperties": false
+    },
+    "ClassifiedError": {
+      "type": "object",
+      "description": "A stable, safe error classification with no provider response or credential material.",
+      "required": ["code", "retryable"],
+      "properties": {
+        "code": {
+          "$ref": "#/$defs/ProblemCode"
+        },
+        "retryable": {
+          "type": "boolean"
+        },
+        "detail": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1024
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        }
+      },
+      "additionalProperties": false
+    },
+    "SubscriptionLink": {
+      "type": "object",
+      "description": "A public subscription-link resource scoped to the authenticated project and environment.",
+      "required": [
+        "id",
+        "project_id",
+        "environment",
+        "subscriber_id",
+        "notifier_id",
+        "channels",
+        "status",
+        "created_at",
+        "updated_at",
+        "expires_at",
+        "diagnostic_id"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment": {
+          "$ref": "#/$defs/Environment"
+        },
+        "subscriber_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "notifier_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "channels": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/Channel"
+          }
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "pending",
+            "activated",
+            "expired",
+            "cancelled",
+            "failed",
+            "revoked"
+          ]
+        },
+        "authorization_url": {
+          "type": "string",
+          "format": "uri",
+          "pattern": "^https://[^\\s]+$",
+          "maxLength": 2048,
+          "description": "An opaque authorization URL. It contains no project or provider secret."
+        },
+        "binding": {
+          "$ref": "#/$defs/BindingSummary"
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "updated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "expires_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        },
+        "classified_error": {
+          "$ref": "#/$defs/ClassifiedError"
+        },
+        "cancellation_effective": {
+          "type": "boolean",
+          "description": "Present on cancellation responses; false never claims provider-side deletion."
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "status": {
+                "const": "pending"
+              }
+            },
+            "required": ["status"]
+          },
+          "then": {
+            "type": "object",
+            "required": ["authorization_url"],
+            "properties": {
+              "authorization_url": {}
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "status": {
+                "enum": ["activated", "revoked"]
+              }
+            },
+            "required": ["status"]
+          },
+          "then": {
+            "type": "object",
+            "required": ["binding"],
+            "properties": {
+              "binding": {}
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "status": {
+                "const": "failed"
+              }
+            },
+            "required": ["status"]
+          },
+          "then": {
+            "type": "object",
+            "required": ["classified_error"],
+            "properties": {
+              "classified_error": {}
+            }
+          }
+        }
+      ],
+      "additionalProperties": false
+    },
+    "MessageTarget": {
+      "type": "object",
+      "required": ["subscriber_id"],
+      "properties": {
+        "subscriber_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        }
+      },
+      "additionalProperties": false
+    },
+    "TextContent": {
+      "type": "object",
+      "required": ["type", "text"],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "text": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 8192,
+          "x-max-utf8-bytes": 8192
+        }
+      },
+      "additionalProperties": false
+    },
+    "ProviderCapabilitiesCollection": {
+      "type": "object",
+      "required": ["schema", "providers"],
+      "properties": {
+        "schema": {
+          "const": "whooshbang.provider-capabilities-collection.v1"
+        },
+        "providers": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "$ref": "provider-capabilities-v1.schema.json"
+          },
+          "x-unique-property": "provider"
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEventType": {
+      "type": "string",
+      "enum": [
+        "subscription.activated",
+        "subscription.revoked",
+        "message.provider_accepted",
+        "message.delivered",
+        "message.failed",
+        "message.expired",
+        "interaction.received",
+        "interaction.expired",
+        "agent_binding.degraded"
+      ]
+    },
+    "CustomerEndpointStatus": {
+      "type": "string",
+      "enum": ["unverified", "active", "paused", "disabled"]
+    },
+    "CreateCustomerEndpointRequest": {
+      "type": "object",
+      "description": "Creates one project/environment endpoint. The service validates the final normalized destination and never returns it from health or diagnostic reads.",
+      "required": ["url", "event_types"],
+      "properties": {
+        "url": {
+          "type": "string",
+          "format": "uri",
+          "minLength": 8,
+          "maxLength": 2048,
+          "pattern": "^https://[^\\s]+$"
+        },
+        "event_types": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 9,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/CustomerEventType"
+          }
+        },
+        "local_test": {
+          "type": "boolean",
+          "default": false,
+          "description": "Explicit local-tooling marker. Production deployments reject true even though local test tooling accepts loopback HTTP before persistence."
+        }
+      },
+      "additionalProperties": false
+    },
+    "RotateCustomerEndpointRequest": {
+      "type": "object",
+      "required": ["overlap_seconds"],
+      "properties": {
+        "overlap_seconds": {
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 86400
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpointFailure": {
+      "type": "object",
+      "required": ["at", "category"],
+      "properties": {
+        "at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "category": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "pattern": "^[a-z0-9_]+$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpoint": {
+      "type": "object",
+      "description": "Safe endpoint lifecycle and health metadata. URL, signing material, event bodies, answers, and response bodies are structurally absent.",
+      "required": [
+        "id",
+        "project_id",
+        "environment_id",
+        "environment",
+        "status",
+        "verification_status",
+        "event_types",
+        "secret_version",
+        "health",
+        "created_at",
+        "updated_at",
+        "diagnostic_id"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment": {
+          "$ref": "#/$defs/Environment"
+        },
+        "status": {
+          "$ref": "#/$defs/CustomerEndpointStatus"
+        },
+        "verification_status": {
+          "type": "string",
+          "enum": ["pending", "failed", "verified"]
+        },
+        "event_types": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 9,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/CustomerEventType"
+          }
+        },
+        "secret_version": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "health": {
+          "type": "string",
+          "enum": ["never_delivered", "healthy", "failing"]
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "updated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "verification_attempted_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "verified_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "rotated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "paused_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "disabled_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "last_success_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "last_failure": {
+          "$ref": "#/$defs/CustomerEndpointFailure"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpointCollection": {
+      "type": "object",
+      "required": ["items"],
+      "properties": {
+        "items": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/CustomerEndpoint"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpointSecret": {
+      "type": "string",
+      "pattern": "^whsec_[A-Za-z0-9+/]{43}=$",
+      "description": "Exactly 32 random bytes in the Standard Webhooks secret format. Returned only by the first successful create or rotate response."
+    },
+    "CustomerEndpointMutationResult": {
+      "type": "object",
+      "required": ["endpoint"],
+      "properties": {
+        "endpoint": {
+          "$ref": "#/$defs/CustomerEndpoint"
+        },
+        "secret": {
+          "$ref": "#/$defs/CustomerEndpointSecret"
+        }
+      },
+      "additionalProperties": false,
+      "description": "The initial create/rotate result includes secret. An equivalent idempotent replay returns the same logical endpoint without revealing the secret again."
+    },
+    "CustomerEndpointAttemptDiagnostic": {
+      "type": "object",
+      "description": "Content-free per-attempt timing and failure classification.",
+      "required": ["id", "event_id", "attempt", "status", "created_at"],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "event_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "attempt": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 8
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "pending",
+            "attempting",
+            "delivered",
+            "retry_wait",
+            "terminal_failed",
+            "paused"
+          ]
+        },
+        "diagnostic_code": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "pattern": "^[a-z0-9_]+$"
+        },
+        "http_status": {
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 599
+        },
+        "started_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "completed_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "created_at": {
+          "$ref": "#/$defs/Timestamp"
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpointAttemptCollection": {
+      "type": "object",
+      "required": ["endpoint_id", "attempts"],
+      "properties": {
+        "endpoint_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "attempts": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/CustomerEndpointAttemptDiagnostic"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "CustomerEndpointVerificationChallenge": {
+      "type": "object",
+      "required": ["schema", "endpoint_id", "challenge"],
+      "properties": {
+        "schema": {
+          "const": "whooshbang.endpoint-verification.v1"
+        },
+        "endpoint_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "challenge": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9+/]{43}=$"
+        }
+      },
+      "additionalProperties": false,
+      "description": "Exact signed request bytes. A verifier echoes these exact bytes with valid webhook headers to prove it possesses the endpoint secret."
+    },
+    "CreateMessageRequest": {
+      "type": "object",
+      "description": "Creates one logical message for one subscriber and one resolved channel binding.",
+      "required": ["to", "content"],
+      "properties": {
+        "to": {
+          "$ref": "#/$defs/MessageTarget"
+        },
+        "notifier_id": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/OpaqueIdentifier"
+            }
+          ],
+          "default": "default"
+        },
+        "content": {
+          "$ref": "#/$defs/TextContent"
+        },
+        "expires_at": {
+          "$ref": "#/$defs/Timestamp",
+          "description": "Optional server-authoritative expiry no more than 24 hours after acceptance."
+        },
+        "correlation_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "metadata": {
+          "$ref": "#/$defs/Metadata"
+        },
+        "interaction": {
+          "$ref": "interaction-v1.schema.json#/$defs/InteractionRequest"
+        }
+      },
+      "additionalProperties": false
+    },
+    "HighestProvenProviderState": {
+      "type": "string",
+      "enum": ["none", "provider_accepted"],
+      "description": "The strongest provider assertion the service can prove; it is not an end-device delivery receipt."
+    },
+    "DeliveryAttemptSummary": {
+      "type": "object",
+      "description": "A safe aggregate of delivery attempts. Protected provider responses are excluded.",
+      "required": [
+        "attempt_count",
+        "highest_proven_provider_state",
+        "retry_scheduled"
+      ],
+      "properties": {
+        "attempt_count": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "highest_proven_provider_state": {
+          "$ref": "#/$defs/HighestProvenProviderState"
+        },
+        "retry_scheduled": {
+          "type": "boolean"
+        },
+        "retry_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "classified_error": {
+          "$ref": "#/$defs/ClassifiedError"
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "retry_scheduled": {
+                "const": true
+              }
+            },
+            "required": ["retry_scheduled"]
+          },
+          "then": {
+            "type": "object",
+            "required": ["retry_at"],
+            "properties": {
+              "retry_at": {}
+            }
+          },
+          "else": {
+            "type": "object",
+            "properties": {
+              "retry_at": false
+            }
+          }
+        }
+      ],
+      "additionalProperties": false
+    },
+    "MessageState": {
+      "type": "string",
+      "enum": [
+        "accepted",
+        "dispatch_pending",
+        "queued",
+        "sending",
+        "provider_accepted",
+        "retry_wait",
+        "terminal_failed",
+        "outcome_unknown",
+        "cancelled",
+        "expired"
+      ]
+    },
+    "Message": {
+      "type": "object",
+      "description": "A project- and environment-scoped logical message and its highest proven delivery outcome.",
+      "required": [
+        "id",
+        "project_id",
+        "environment",
+        "subscriber_id",
+        "notifier_id",
+        "binding",
+        "state",
+        "accepted_at",
+        "updated_at",
+        "expires_at",
+        "delivery",
+        "diagnostic_id"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "project_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "environment": {
+          "$ref": "#/$defs/Environment"
+        },
+        "subscriber_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "notifier_id": {
+          "$ref": "#/$defs/OpaqueIdentifier"
+        },
+        "binding": {
+          "$ref": "#/$defs/BindingSummary"
+        },
+        "state": {
+          "$ref": "#/$defs/MessageState"
+        },
+        "accepted_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "updated_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "expires_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "delivery": {
+          "$ref": "#/$defs/DeliveryAttemptSummary"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        },
+        "correlation_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "metadata": {
+          "$ref": "#/$defs/Metadata"
+        },
+        "interaction": {
+          "$ref": "interaction-v1.schema.json#/$defs/InteractionSummary"
+        },
+        "cancellation_effective": {
+          "type": "boolean",
+          "description": "Present on cancellation responses. False means the provider call was already owned and no deletion is claimed."
+        },
+        "outcome_guidance": {
+          "type": "string",
+          "const": "Delivery may have been accepted by the provider. No automatic retry is scheduled; create a new message explicitly if another attempt is appropriate."
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "const": "outcome_unknown"
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "required": ["outcome_guidance"],
+            "properties": {
+              "outcome_guidance": {},
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "required": ["classified_error"],
+                    "properties": {
+                      "attempt_count": {
+                        "type": "integer",
+                        "minimum": 1
+                      },
+                      "highest_proven_provider_state": {
+                        "const": "none"
+                      },
+                      "retry_scheduled": {
+                        "const": false
+                      },
+                      "classified_error": {
+                        "allOf": [
+                          {
+                            "$ref": "#/$defs/ClassifiedError"
+                          },
+                          {
+                            "type": "object",
+                            "properties": {
+                              "code": {
+                                "const": "provider_outcome_unknown"
+                              },
+                              "retryable": {
+                                "const": false
+                              }
+                            }
+                          }
+                        ]
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "enum": [
+                  "accepted",
+                  "dispatch_pending",
+                  "queued",
+                  "sending",
+                  "provider_accepted",
+                  "cancelled",
+                  "expired"
+                ]
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "classified_error": false
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "not": {
+                  "const": "provider_accepted"
+                }
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "highest_proven_provider_state": {
+                        "const": "none"
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "not": {
+                  "const": "retry_wait"
+                }
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "retry_scheduled": {
+                        "const": false
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "const": "provider_accepted"
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "attempt_count": {
+                        "type": "integer",
+                        "minimum": 1
+                      },
+                      "highest_proven_provider_state": {
+                        "const": "provider_accepted"
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "const": "retry_wait"
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "required": ["classified_error"],
+                    "properties": {
+                      "attempt_count": {
+                        "type": "integer",
+                        "minimum": 1
+                      },
+                      "retry_scheduled": {
+                        "const": true
+                      },
+                      "classified_error": {
+                        "allOf": [
+                          {
+                            "$ref": "#/$defs/ClassifiedError"
+                          },
+                          {
+                            "type": "object",
+                            "properties": {
+                              "code": {
+                                "const": "provider_retryable"
+                              },
+                              "retryable": {
+                                "const": true
+                              }
+                            }
+                          }
+                        ]
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "const": "terminal_failed"
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "required": ["classified_error"],
+                    "properties": {
+                      "attempt_count": {
+                        "type": "integer",
+                        "minimum": 1
+                      },
+                      "classified_error": {
+                        "allOf": [
+                          {
+                            "$ref": "#/$defs/ClassifiedError"
+                          },
+                          {
+                            "type": "object",
+                            "properties": {
+                              "code": {
+                                "const": "provider_terminal"
+                              },
+                              "retryable": {
+                                "const": false
+                              }
+                            }
+                          }
+                        ]
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "const": "sending"
+              }
+            },
+            "required": ["state"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "delivery": {
+                "allOf": [
+                  {
+                    "$ref": "#/$defs/DeliveryAttemptSummary"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "attempt_count": {
+                        "type": "integer",
+                        "minimum": 1
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "state": {
+                "enum": ["sending", "provider_accepted", "outcome_unknown"]
+              },
+              "cancellation_effective": {
+                "type": "boolean"
+              }
+            },
+            "required": ["state", "cancellation_effective"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "cancellation_effective": {
+                "const": false
+              }
+            }
+          }
+        }
+      ],
+      "additionalProperties": false
+    },
+    "ProblemCode": {
+      "type": "string",
+      "enum": [
+        "authentication_required",
+        "credential_invalid",
+        "scope_forbidden",
+        "environment_mismatch",
+        "idempotency_key_required",
+        "idempotency_conflict",
+        "project_slug_conflict",
+        "request_invalid",
+        "replay_unavailable",
+        "subscriber_unbound",
+        "resource_not_found",
+        "resource_expired",
+        "cancellation_too_late",
+        "endpoint_rotation_conflict",
+        "rate_limited",
+        "provider_retryable",
+        "provider_terminal",
+        "provider_outcome_unknown"
+      ]
+    },
+    "ProblemFieldError": {
+      "type": "object",
+      "required": ["field", "code", "detail"],
+      "properties": {
+        "field": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "A bounded JSON Pointer or request field identifier."
+        },
+        "code": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "pattern": "^[a-z][a-z0-9_]*$"
+        },
+        "detail": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512
+        }
+      },
+      "additionalProperties": false
+    },
+    "Problem": {
+      "type": "object",
+      "description": "Safe RFC 9457-style Problem Details for the WhooshBang API.",
+      "required": [
+        "type",
+        "title",
+        "status",
+        "detail",
+        "code",
+        "diagnostic_id",
+        "retryable"
+      ],
+      "properties": {
+        "type": {
+          "type": "string",
+          "format": "uri",
+          "pattern": "^https://whooshbang\\.flowxo\\.com/problems/[a-z][a-z0-9_]*$"
+        },
+        "title": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "status": {
+          "type": "integer",
+          "minimum": 400,
+          "maximum": 599
+        },
+        "detail": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1024
+        },
+        "code": {
+          "$ref": "#/$defs/ProblemCode"
+        },
+        "diagnostic_id": {
+          "$ref": "#/$defs/DiagnosticId"
+        },
+        "retryable": {
+          "type": "boolean"
+        },
+        "retry_at": {
+          "$ref": "#/$defs/Timestamp"
+        },
+        "field_errors": {
+          "type": "array",
+          "maxItems": 20,
+          "items": {
+            "$ref": "#/$defs/ProblemFieldError"
+          }
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "retryable": {
+                "const": false
+              }
+            },
+            "required": ["retryable"]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "retry_at": false
+            }
+          }
+        }
+      ],
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/authentication_required"
+            },
+            "title": {
+              "const": "Authentication required"
+            },
+            "status": {
+              "const": 401
+            },
+            "code": {
+              "const": "authentication_required"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/replay_unavailable"
+            },
+            "title": {
+              "const": "Replay unavailable"
+            },
+            "status": {
+              "const": 409
+            },
+            "code": {
+              "const": "replay_unavailable"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/endpoint_rotation_conflict"
+            },
+            "title": {
+              "const": "Endpoint rotation conflict"
+            },
+            "status": {
+              "const": 409
+            },
+            "code": {
+              "const": "endpoint_rotation_conflict"
+            },
+            "retryable": {
+              "const": true
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/project_slug_conflict"
+            },
+            "title": {
+              "const": "Project slug conflict"
+            },
+            "status": {
+              "const": 409
+            },
+            "code": {
+              "const": "project_slug_conflict"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/credential_invalid"
+            },
+            "title": {
+              "const": "Credential invalid"
+            },
+            "status": {
+              "const": 401
+            },
+            "code": {
+              "const": "credential_invalid"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/scope_forbidden"
+            },
+            "title": {
+              "const": "Scope forbidden"
+            },
+            "status": {
+              "const": 403
+            },
+            "code": {
+              "const": "scope_forbidden"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/environment_mismatch"
+            },
+            "title": {
+              "const": "Environment mismatch"
+            },
+            "status": {
+              "const": 403
+            },
+            "code": {
+              "const": "environment_mismatch"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/idempotency_key_required"
+            },
+            "title": {
+              "const": "Idempotency key required"
+            },
+            "status": {
+              "const": 400
+            },
+            "code": {
+              "const": "idempotency_key_required"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/idempotency_conflict"
+            },
+            "title": {
+              "const": "Idempotency conflict"
+            },
+            "status": {
+              "const": 409
+            },
+            "code": {
+              "const": "idempotency_conflict"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/request_invalid"
+            },
+            "title": {
+              "const": "Request invalid"
+            },
+            "status": {
+              "const": 400
+            },
+            "code": {
+              "const": "request_invalid"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/subscriber_unbound"
+            },
+            "title": {
+              "const": "Subscriber unbound"
+            },
+            "status": {
+              "const": 422
+            },
+            "code": {
+              "const": "subscriber_unbound"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/resource_not_found"
+            },
+            "title": {
+              "const": "Resource not found"
+            },
+            "status": {
+              "const": 404
+            },
+            "code": {
+              "const": "resource_not_found"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/resource_expired"
+            },
+            "title": {
+              "const": "Resource expired"
+            },
+            "status": {
+              "const": 404
+            },
+            "code": {
+              "const": "resource_expired"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/cancellation_too_late"
+            },
+            "title": {
+              "const": "Cancellation too late"
+            },
+            "status": {
+              "const": 409
+            },
+            "code": {
+              "const": "cancellation_too_late"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/rate_limited"
+            },
+            "title": {
+              "const": "Rate limited"
+            },
+            "status": {
+              "const": 429
+            },
+            "code": {
+              "const": "rate_limited"
+            },
+            "retryable": {
+              "const": true
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/provider_retryable"
+            },
+            "title": {
+              "const": "Provider retryable failure"
+            },
+            "status": {
+              "const": 503
+            },
+            "code": {
+              "const": "provider_retryable"
+            },
+            "retryable": {
+              "const": true
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/provider_terminal"
+            },
+            "title": {
+              "const": "Provider terminal failure"
+            },
+            "status": {
+              "const": 502
+            },
+            "code": {
+              "const": "provider_terminal"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "const": "https://whooshbang.flowxo.com/problems/provider_outcome_unknown"
+            },
+            "title": {
+              "const": "Provider outcome unknown"
+            },
+            "status": {
+              "const": 502
+            },
+            "code": {
+              "const": "provider_outcome_unknown"
+            },
+            "retryable": {
+              "const": false
+            }
+          }
+        }
+      ],
+      "additionalProperties": false
+    },
+    "AccountScope": {
+      "type": "string",
+      "enum": ["projects:write", "projects:read"],
+      "description": "One account-level capability. Only a human session or an OAuth grant can hold one: a project credential lives inside a project and can never create or enumerate its siblings."
+    },
+    "OAuthScope": {
+      "description": "A scope an OAuth grant may carry. Project-level scopes are the credential vocabulary unchanged; account-level scopes exist only here and on a human session.",
+      "oneOf": [
+        {
+          "$ref": "#/$defs/AccountScope"
+        },
+        {
+          "$ref": "#/$defs/ApiCredentialScope"
+        }
+      ]
+    }
+  }
+}