@whooshbang/contracts 2.0.0-rc.4 → 2.0.0-rc.5

package/dist/generated/whooshbang-v1.d.ts

@@ -481,11 +481,11 @@ export type CreateMessageRequest = {
     to: MessageTarget;
     notifier_id?: OpaqueIdentifier;
     /**
-     * Optional routing override. Simulator delivery and the reserved test: subscriber prefix are test-environment-only; live requests are refused with 400 request_invalid. Omit for notifier-default connection delivery or the reserved test-environment simulator default.
+     * Optional routing override. Simulator delivery and the reserved test: subscriber prefix are test-environment-only; live requests are refused with 400 request_invalid. Omit for connection delivery, or for the reserved test-environment simulator default.
      */
     delivery_target?: "connection" | "simulator";
     /**
-     * Optional fail-closed constraint for a visible connection test. The selected subscriber binding and notifier route must resolve to this exact connection; the service never substitutes another connection or provider.
+     * Optional channel connection to send through, from the environment's connections. The subscriber must be connected through it; the service never substitutes another connection or provider. A connection the subscriber has not connected through is refused as `subscriber_not_connected` when they are connected through another, and as an unchosen send would be (`subscriber_unbound` or `preferred_binding_unavailable`) when no connected channel can take the message. Omitted, the service chooses: the subscriber's preferred channel when they set one, otherwise the default connection when they are connected there, otherwise the connection they connected through most recently. The accepted message's `binding.connection_id` records the connection used. Implies `delivery_target: connection`.
      */
     connection_id?: OpaqueIdentifier;
     content: MessageContent;
@@ -6185,6 +6185,21 @@ export interface SubscriberChannelSettings {
     subscriber_id: OpaqueIdentifier;
     channels: RecipientChannelSummary[];
     preference?: PreferredBinding;
+    /**
+     * The connection a message to this subscriber goes through when the sender names none, chosen exactly as a send made now would choose it. Absent when no connected channel can take a message, which a send refuses as `subscriber_unbound`, or when the subscriber's preferred channel cannot, which a send refuses as `preferred_binding_unavailable`.
+     */
+    send_route?: {
+        binding_id: OpaqueIdentifier;
+        /**
+         * An opaque identifier. Its shape, ordering, and embedded content are not public promises.
+         */
+        connection_id?: string;
+        channel: Channel;
+        /**
+         * Why this connection: the subscriber's preferred channel, the default connection, or, when the subscriber is not connected through the default, the connection they connected through most recently.
+         */
+        reason: "preferred" | "default_connection" | "most_recently_connected";
+    };
     diagnostic_id: DiagnosticId;
 }
 /**

package/fixtures/core-v1/fixture-index.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "fixtures": [
     {
       "id": "create-project.request",

package/fixtures/core-v1/scenarios/api-credential-invalid-indistinguishable.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "api-credential-invalid-indistinguishable",
   "category": "credential_lifecycle",
   "given": {

package/fixtures/core-v1/scenarios/api-credential-one-time-reveal.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "api-credential-one-time-reveal",
   "category": "credential_lifecycle",
   "given": {

package/fixtures/core-v1/scenarios/api-credential-revocation-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "api-credential-revocation-replay",
   "category": "credential_lifecycle",
   "given": {

package/fixtures/core-v1/scenarios/api-credential-rotation-overlap.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "api-credential-rotation-overlap",
   "category": "credential_lifecycle",
   "given": {

package/fixtures/core-v1/scenarios/cancellation-too-late.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "cancellation-too-late",
   "category": "cancellation",
   "given": {

package/fixtures/core-v1/scenarios/cross-organization-project.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "cross-organization-project",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/cross-project-resource.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "cross-project-resource",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/environment-mismatch.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "environment-mismatch",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/idempotency-conflict.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "idempotency-conflict",
   "category": "idempotency",
   "given": {

package/fixtures/core-v1/scenarios/idempotency-equivalent-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "idempotency-equivalent-replay",
   "category": "idempotency",
   "given": {

package/fixtures/core-v1/scenarios/malformed-bearer.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "malformed-bearer",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/metadata-overrun.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "metadata-overrun",
   "category": "message_outcome",
   "given": {

package/fixtures/core-v1/scenarios/missing-scope.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "missing-scope",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/project-create-equivalent-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "project-create-equivalent-replay",
   "category": "idempotency",
   "given": {

package/fixtures/core-v1/scenarios/project-slug-conflict.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "project-slug-conflict",
   "category": "idempotency",
   "given": {

package/fixtures/core-v1/scenarios/provider-outcome-unknown.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "provider-outcome-unknown",
   "category": "message_outcome",
   "given": {

package/fixtures/core-v1/scenarios/subscription-activation-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscription-activation-replay",
   "category": "subscription_replay",
   "given": {

package/fixtures/core-v1/scenarios/subscription-authorization-capability-opacity.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscription-authorization-capability-opacity",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/subscription-cross-connection-callback-rejected.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscription-cross-connection-callback-rejected",
   "category": "isolation",
   "given": {

package/fixtures/core-v1/scenarios/subscription-expired-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscription-expired-replay",
   "category": "subscription_replay",
   "given": {

package/fixtures/core-v1/scenarios/subscription-selected-connection-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscription-selected-connection-replay",
   "category": "subscription_replay",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/ack-conflict.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "ack-conflict",
   "category": "machine_ack",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/ack-cross-machine.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "ack-cross-machine",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/ack-out-of-order.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "ack-out-of-order",
   "category": "machine_ack",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/ack-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "ack-replay",
   "category": "machine_ack",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/ambiguous-free-text.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "ambiguous-free-text",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/callback-token-opacity.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "callback-token-opacity",
   "category": "callback_token",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/credential-registration-conflict.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "credential-registration-conflict",
   "category": "machine_credential",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/credential-registration-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "credential-registration-replay",
   "category": "machine_credential",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/credential-revocation-replay.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "credential-revocation-replay",
   "category": "machine_credential",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/credential-rotation.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "credential-rotation",
   "category": "machine_credential",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/first-credential-activates.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "first-credential-activates",
   "category": "machine_credential",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/interaction-duplicate.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "interaction-duplicate",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/interaction-expired.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "interaction-expired",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/interaction-mismatch.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "interaction-mismatch",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/interaction-retired.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "interaction-retired",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/interaction-stale.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "interaction-stale",
   "category": "interaction_resolution",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-admin-denied.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-admin-denied",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-bound-message-create.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-bound-message-create",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-cancel-denied.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-cancel-denied",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-crash-before-ack.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-crash-before-ack",
   "category": "machine_poll",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-notifier-mismatch.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-notifier-mismatch",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-other-message-read.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-other-message-read",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-owned-message-read.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-owned-message-read",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/machine-subscriber-mismatch.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "machine-subscriber-mismatch",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/poll-uncommitted-cursor-rejected.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "poll-uncommitted-cursor-rejected",
   "category": "machine_poll",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/project-credential-machine-endpoint-denied.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "project-credential-machine-endpoint-denied",
   "category": "machine_authorization",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/quarantine-integrity-rejected.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "quarantine-integrity-rejected",
   "category": "quarantine",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/quarantine-signature-rejected.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "quarantine-signature-rejected",
   "category": "quarantine",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/quarantine-valid.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "quarantine-valid",
   "category": "quarantine",
   "given": {

package/fixtures/interaction-machine-v1/scenarios/revoked-machine-credential.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "revoked-machine-credential",
   "category": "machine_authorization",
   "given": {

package/fixtures/recipient-experience-v1/scenarios/membership-broadcast-snapshot.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "membership-broadcast-snapshot",
   "category": "membership_broadcast",
   "given": {

package/fixtures/recipient-experience-v1/scenarios/preferred-binding-resolution.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "preferred-binding-resolution",
   "category": "preference_resolution",
   "given": {

package/fixtures/recipient-experience-v1/scenarios/recipient-session-security.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "recipient-session-security",
   "category": "recipient_security",
   "given": {

package/fixtures/recipient-experience-v1/scenarios/subscriber-initial-groups-transaction.json

@@ -1,5 +1,5 @@
 {
-  "contract_version": "2.0.0-rc.4",
+  "contract_version": "2.0.0-rc.5",
   "id": "subscriber-initial-groups-transaction",
   "category": "subscriber_groups",
   "given": {

package/openapi/generated/whooshbang-v1.bundle.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.1",
   "info": {
     "title": "WhooshBang API",
-    "version": "2.0.0-rc.4",
+    "version": "2.0.0-rc.5",
     "description": "The V1 contract for human organization/project administration, project-scoped\nsubscription links, and asynchronous text messages. A Clerk session selects\none organization for administration. A project credential selects one organization,\nproject, and `test` or `live` environment for product operations; request\nbodies cannot override either authenticated scope.\n\nA person's OAuth grant selects one organization and carries scopes, but no\nproject. It names the project and environment it acts in through the URL\npath, on the environment-scoped form of each operation; the service checks\nthat path against the granting person's membership on every call. The flat\nforms remain credential-only and are unchanged.\n\nResource identifiers are opaque and are not authorization. Reads outside the\ncredential scope return the same `404` shape as absent resources. Provider\ncredentials, raw Telegram identity, and protected provider responses are\nnever part of this API.\n",
     "termsOfService": "https://flowxo.com/terms",
     "contact": {
@@ -2014,7 +2014,7 @@
       "post": {
         "operationId": "createMessage",
         "summary": "Create an asynchronous message",
-        "description": "Durably accepts one logical text message for one subscriber and one\nresolved channel binding. `202` proves API acceptance only; it does not\nclaim provider acceptance or end-device delivery.\nThe reserved `test:` subscriber prefix and `delivery_target: simulator`\nare test-environment-only. Live sends are refused before acceptance or\nidempotent replay with `400 request_invalid`; reserved subscriber IDs\ncarry a field error at `/to/subscriber_id`.\n",
+        "description": "Durably accepts one logical text message for one subscriber and one\nresolved channel binding. `202` proves API acceptance only; it does not\nclaim provider acceptance or end-device delivery.\nThe reserved `test:` subscriber prefix and `delivery_target: simulator`\nare test-environment-only. Live sends are refused before acceptance or\nidempotent replay with `400 request_invalid`; reserved subscriber IDs\ncarry a field error at `/to/subscriber_id`.\n\n`connection_id` sends through one of the subscriber's connected\nchannels. Without it, the service uses the subscriber's preferred\nchannel, else the default connection when the subscriber is connected\nthere, else the connection they connected through most recently, and\nrefuses with `422 subscriber_unbound` only when no connected channel can\ntake the message. A named connection the subscriber has not connected\nthrough is refused with `422 subscriber_not_connected` when they are\nconnected through another one, and as an unchosen send would be when\nnone can take the message. A named connection that is not in this\nenvironment, or cannot send, is refused with `400 request_invalid` at\n`/connection_id`.\n",
         "tags": ["Messages"],
         "security": [{ "bearerCredential": [] }, { "machineCredential": [] }],
         "x-required-scopes": ["messages:write"],
@@ -5025,7 +5025,7 @@
       "get": {
         "operationId": "listNotifierConnections",
         "summary": "Read which connection each notifier sends through",
-        "description": "Every route in this environment, ordered by notifier and then\nconnection.\n\nA connection nothing routes to is configured and inert: it delivers\nnothing and a subscriber cannot authorize against it either. This list\nis therefore the answer to \"my connection is active, so why is nothing\narriving?\" — an environment with connections and no default route is\nthe ordinary shape of that question.\n",
+        "description": "Every route in this environment, ordered by notifier and then\nconnection.\n\nThe default route decides which connection a message goes through\nwhen the subscriber is connected there and the sender names none. A\nsubscriber who is not connected through the default is reached through\nthe connection they connected through most recently, and a sender may\nname any connection the subscriber connected through. Routes never\nstop a connection sending; pausing the connection does.\n",
         "tags": ["Channel connections"],
         "security": [
           { "clerkSession": [] },
@@ -5166,7 +5166,7 @@
       "delete": {
         "operationId": "detachNotifierConnection",
         "summary": "Stop routing a notifier through a connection",
-        "description": "Removes one route. The connection itself is untouched and keeps its\nidentity, its credential custody, and every binding subscribers gave\nit — this is the reversible half of retiring an identity, and archive\nis the terminal one.\n\nDetaching the default leaves the notifier with no default, which stops\nits sends and new authorizations rather than moving them somewhere\nelse. That refusal is the point: a notifier silently failing over to\nanother identity would put a different bot in front of subscribers who\nnever consented to it.\n\nRepeat-safe. Removing a route that is already gone returns the\nnotifier's remaining routes rather than a 404, because a caller that\nlost the first response must be able to confirm the outcome.\n",
+        "description": "Removes one route. The connection itself is untouched and keeps its\nidentity, its credential custody, and every binding subscribers gave\nit — this is the reversible half of retiring an identity, and archive\nis the terminal one.\n\nDetaching the default leaves the notifier with no default, and each\nmessage then goes through the connection its subscriber connected\nthrough most recently. No message ever reaches a subscriber through an\nidentity they did not connect through. To stop a connection sending,\npause it.\n\nRepeat-safe. Removing a route that is already gone returns the\nnotifier's remaining routes rather than a 404, because a caller that\nlost the first response must be able to confirm the outcome.\n",
         "tags": ["Channel connections"],
         "security": [
           { "clerkSession": [] },
@@ -12892,11 +12892,11 @@
           },
           "delivery_target": {
             "$ref": "#/components/schemas/MessageDeliveryTarget",
-            "description": "Optional routing override. Simulator delivery and the reserved test: subscriber prefix are test-environment-only; live requests are refused with 400 request_invalid. Omit for notifier-default connection delivery or the reserved test-environment simulator default."
+            "description": "Optional routing override. Simulator delivery and the reserved test: subscriber prefix are test-environment-only; live requests are refused with 400 request_invalid. Omit for connection delivery, or for the reserved test-environment simulator default."
           },
           "connection_id": {
             "allOf": [{ "$ref": "#/components/schemas/OpaqueIdentifier" }],
-            "description": "Optional fail-closed constraint for a visible connection test. The selected subscriber binding and notifier route must resolve to this exact connection; the service never substitutes another connection or provider."
+            "description": "Optional channel connection to send through, from the environment's connections. The subscriber must be connected through it; the service never substitutes another connection or provider. A connection the subscriber has not connected through is refused as `subscriber_not_connected` when they are connected through another, and as an unchosen send would be (`subscriber_unbound` or `preferred_binding_unavailable`) when no connected channel can take the message. Omitted, the service chooses: the subscriber's preferred channel when they set one, otherwise the default connection when they are connected there, otherwise the connection they connected through most recently. The accepted message's `binding.connection_id` records the connection used. Implies `delivery_target: connection`."
           },
           "content": { "$ref": "#/components/schemas/MessageContent" },
           "expires_at": {
@@ -12918,7 +12918,6 @@
               "properties": { "connection_id": true }
             },
             "then": {
-              "required": ["delivery_target"],
               "properties": { "delivery_target": { "const": "connection" } }
             }
           }
@@ -14678,6 +14677,29 @@
             "items": { "$ref": "#/components/schemas/RecipientChannelSummary" }
           },
           "preference": { "$ref": "#/components/schemas/PreferredBinding" },
+          "send_route": {
+            "type": "object",
+            "description": "The connection a message to this subscriber goes through when the sender names none, chosen exactly as a send made now would choose it. Absent when no connected channel can take a message, which a send refuses as `subscriber_unbound`, or when the subscriber's preferred channel cannot, which a send refuses as `preferred_binding_unavailable`.",
+            "required": ["binding_id", "channel", "reason"],
+            "properties": {
+              "binding_id": { "$ref": "#/components/schemas/OpaqueIdentifier" },
+              "connection_id": {
+                "$ref": "#/components/schemas/OpaqueIdentifier",
+                "description": "Absent only on a legacy binding that predates channel connections."
+              },
+              "channel": { "$ref": "#/components/schemas/Channel" },
+              "reason": {
+                "type": "string",
+                "enum": [
+                  "preferred",
+                  "default_connection",
+                  "most_recently_connected"
+                ],
+                "description": "Why this connection: the subscriber's preferred channel, the default connection, or, when the subscriber is not connected through the default, the connection they connected through most recently."
+              }
+            },
+            "additionalProperties": false
+          },
           "diagnostic_id": { "$ref": "#/components/schemas/DiagnosticId" }
         },
         "additionalProperties": false
@@ -17620,7 +17642,7 @@
       "provider-capabilities-v1.schema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "$id": "https://whooshbang.flowxo.com/schemas/provider-capabilities-v1.schema.json",
-        "x-contract-version": "2.0.0-rc.4",
+        "x-contract-version": "2.0.0-rc.5",
         "title": "ProviderCapabilitiesV1",
         "description": "Provider-neutral, renderer-facing delivery and interaction capabilities with explicit degradation.",
         "type": "object",
@@ -18340,5 +18362,5 @@
       }
     }
   },
-  "x-contract-version": "2.0.0-rc.4"
+  "x-contract-version": "2.0.0-rc.5"
 }