@whooshbang/contracts 2.2.0 → 2.4.0

package/openapi/generated/whooshbang-v1.bundle.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.1",
   "info": {
     "title": "WhooshBang API",
-    "version": "2.2.0",
+    "version": "2.4.0",
     "description": "The V1 contract for human organization/project administration, project-scoped\nsubscription links, and asynchronous text messages. A Clerk session selects\none organization for administration. A project credential selects one organization,\nproject, and `test` or `live` environment for product operations; request\nbodies cannot override either authenticated scope.\n\nA person's OAuth grant selects one organization and carries scopes, but no\nproject. It names the project and environment it acts in through the URL\npath, on the environment-scoped form of each operation; the service checks\nthat path against the granting person's membership on every call. The flat\nforms remain credential-only and are unchanged.\n\nResource identifiers are opaque and are not authorization. Reads outside the\ncredential scope return the same `404` shape as absent resources. Provider\ncredentials, raw Telegram identity, and protected provider responses are\nnever part of this API.\n",
     "termsOfService": "https://flowxo.com/terms",
     "contact": {
@@ -97,6 +97,7 @@
     "/v1/projects/{project_id}/environments/{environment_id}/whoami": {
       "get": {
         "operationId": "whoAmI",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "Identify the authenticated caller",
         "description": "Personal login identifies me without a recipient question. Shared or service credentials report their actual principal and require an explicit recipient. No account owner or credential creator is inferred.",
         "tags": ["Operators"],
@@ -105,6 +106,8 @@
           { "bearerCredential": [] },
           { "bearerOrganizationCredential": [] },
           { "bearerGrant": ["messages:read"] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] },
           { "machineCredential": [] }
         ],
         "x-required-scopes": ["messages:read"],
@@ -129,13 +132,15 @@
     "/v1/projects/{project_id}/environments/{environment_id}/operators": {
       "get": {
         "operationId": "listOperators",
+        "x-notification-scopes": ["notifications:team"],
         "summary": "listOperators",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:read"] }
+          { "bearerGrant": ["messages:read"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:read"],
         "parameters": [
@@ -162,13 +167,15 @@
     "/v1/projects/{project_id}/environments/{environment_id}/operators/resolve": {
       "get": {
         "operationId": "resolveOperator",
+        "x-notification-scopes": ["notifications:team"],
         "summary": "resolveOperator",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:read"] }
+          { "bearerGrant": ["messages:read"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:read"],
         "parameters": [
@@ -198,6 +205,7 @@
     "/v1/projects/{project_id}/environments/{environment_id}/operator-messages": {
       "post": {
         "operationId": "sendOperatorMessage",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "sendOperatorMessage",
         "description": "Message a current teammate by name or operator ID. Personal callers may omit recipient or use me. Shared credentials must name a recipient. Runtime machine credentials report recipient_required for omitted or me; named operator sends are forbidden because runtime authority remains subscriber-bound.",
         "tags": ["Operators"],
@@ -206,7 +214,9 @@
           { "bearerCredential": [] },
           { "bearerOrganizationCredential": [] },
           { "machineCredential": [] },
-          { "bearerGrant": ["messages:write"] }
+          { "bearerGrant": ["messages:write"] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:write"],
         "parameters": [
@@ -243,13 +253,15 @@
     "/v1/projects/{project_id}/environments/{environment_id}/operators/broadcasts": {
       "post": {
         "operationId": "broadcastOperators",
+        "x-notification-scopes": ["notifications:team"],
         "summary": "broadcastOperators",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:write"] }
+          { "bearerGrant": ["messages:write"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:write"],
         "parameters": [
@@ -284,13 +296,15 @@
     "/v1/projects/{project_id}/environments/{environment_id}/operators/broadcasts/{broadcast_id}": {
       "get": {
         "operationId": "getOperatorBroadcast",
+        "x-notification-scopes": ["notifications:team"],
         "summary": "getOperatorBroadcast",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:read"] }
+          { "bearerGrant": ["messages:read"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:read"],
         "parameters": [
@@ -320,13 +334,16 @@
     "/v1/projects/{project_id}/environments/{environment_id}/notification-preferences": {
       "get": {
         "operationId": "getOperatorPreferences",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "getOperatorPreferences",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:read"] }
+          { "bearerGrant": ["messages:read"] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:read"],
         "parameters": [
@@ -350,13 +367,16 @@
     "/v1/projects/{project_id}/environments/{environment_id}/notification-preferences/preferred-binding": {
       "put": {
         "operationId": "setOperatorPreferredBinding",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "setOperatorPreferredBinding",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:write"] }
+          { "bearerGrant": ["messages:write"] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:write"],
         "parameters": [
@@ -390,13 +410,16 @@
     "/v1/projects/{project_id}/environments/{environment_id}/notification-preferences/connect": {
       "post": {
         "operationId": "connectOperatorChannel",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "connectOperatorChannel",
         "description": "Membership-derived operator messaging. Only the authenticated human can manage personal preferences.",
         "tags": ["Operators"],
         "security": [
           { "clerkSession": [] },
           { "bearerCredential": [] },
-          { "bearerGrant": ["messages:write"] }
+          { "bearerGrant": ["messages:write"] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] }
         ],
         "x-required-scopes": ["messages:write"],
         "parameters": [
@@ -2190,12 +2213,15 @@
     "/v1/projects": {
       "get": {
         "operationId": "listProjects",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "List projects in the current organization",
         "description": "Returns only projects owned by the organization selected by the verified\nClerk organization session. Every project includes its complete test/live\nenvironment and default-notifier bootstrap.\n",
         "tags": ["Projects"],
         "security": [
           { "clerkSession": [] },
           { "bearerGrant": [] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] },
           { "bearerOrganizationCredential": [] }
         ],
         "x-required-scopes": ["projects:read"],
@@ -2379,12 +2405,15 @@
       "parameters": [{ "$ref": "#/components/parameters/ProjectId" }],
       "get": {
         "operationId": "getProject",
+        "x-notification-scopes": ["notifications:self", "notifications:team"],
         "summary": "Read one project in the current organization",
         "description": "Returns the complete project bootstrap. An absent project and a project\noutside the authenticated organization use the same non-enumerating `404`.\n",
         "tags": ["Projects"],
         "security": [
           { "clerkSession": [] },
           { "bearerGrant": [] },
+          { "bearerGrant": ["notifications:self"] },
+          { "bearerGrant": ["notifications:team"] },
           { "bearerOrganizationCredential": [] }
         ],
         "x-required-scopes": ["projects:read"],
@@ -11203,7 +11232,9 @@
             "maxLength": 128
           },
           "metadata": { "$ref": "#/components/schemas/Metadata" },
-          "interaction": { "$ref": "#/components/schemas/InteractionRequest" },
+          "interaction": {
+            "$ref": "#/components/schemas/InteractionSendRequest"
+          },
           "purpose": {
             "enum": ["service", "marketing"],
             "default": "service",
@@ -12597,7 +12628,9 @@
             "description": "The words a `subscriber_message` test sends, as plain text."
           },
           "content": { "$ref": "#/components/schemas/MessageContent" },
-          "interaction": { "$ref": "#/components/schemas/InteractionRequest" }
+          "interaction": {
+            "$ref": "#/components/schemas/InteractionSendRequest"
+          }
         },
         "allOf": [
           {
@@ -15502,7 +15535,9 @@
             "maxLength": 128
           },
           "metadata": { "$ref": "#/components/schemas/Metadata" },
-          "interaction": { "$ref": "#/components/schemas/InteractionRequest" },
+          "interaction": {
+            "$ref": "#/components/schemas/InteractionSendRequest"
+          },
           "purpose": {
             "enum": ["service", "marketing"],
             "default": "service",
@@ -16363,6 +16398,14 @@
         ],
         "additionalProperties": false
       },
+      "InteractionSendRequest": {
+        "description": "Send-time interaction. Choose expires_in_seconds or expires_at; omit both for 24 hours from server acceptance. Idempotent replays retain the original resolved deadline.",
+        "oneOf": [
+          { "$ref": "#/components/schemas/ConfirmInteractionSendRequest" },
+          { "$ref": "#/components/schemas/SelectInteractionSendRequest" },
+          { "$ref": "#/components/schemas/InputInteractionSendRequest" }
+        ]
+      },
       "InteractionRequest": {
         "description": "A required-type tagged union. C0 supports confirm, single-select, and input only.",
         "oneOf": [
@@ -18186,7 +18229,9 @@
             "maxLength": 128
           },
           "metadata": { "$ref": "#/components/schemas/Metadata" },
-          "interaction": { "$ref": "#/components/schemas/InteractionRequest" },
+          "interaction": {
+            "$ref": "#/components/schemas/InteractionSendRequest"
+          },
           "purpose": {
             "enum": ["service", "marketing"],
             "default": "service",
@@ -18231,7 +18276,11 @@
           "accepted_at": { "$ref": "#/components/schemas/Timestamp" },
           "updated_at": { "$ref": "#/components/schemas/Timestamp" },
           "expires_at": { "$ref": "#/components/schemas/Timestamp" },
-          "diagnostic_id": { "$ref": "#/components/schemas/DiagnosticId" }
+          "diagnostic_id": { "$ref": "#/components/schemas/DiagnosticId" },
+          "interaction_expires_at": {
+            "$ref": "#/components/schemas/Timestamp",
+            "description": "Authoritatively resolved answer deadline shared by this broadcast’s interactions, independent of delivery expires_at."
+          }
         },
         "additionalProperties": false
       },
@@ -18671,9 +18720,9 @@
         "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
         "description": "Caller-owned opaque correlation returned as data, never treated as execution authority."
       },
-      "ConfirmInteractionRequest": {
+      "ConfirmInteractionSendRequest": {
         "type": "object",
-        "required": ["type", "prompt", "expires_at"],
+        "required": ["type", "prompt"],
         "properties": {
           "type": { "const": "confirm" },
           "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
@@ -18685,13 +18734,22 @@
           "deny_label": { "type": "string", "minLength": 1, "maxLength": 40 },
           "expires_at": {
             "$ref": "#/components/schemas/Timestamp-2",
-            "description": "Must be 30 seconds through 24 hours after server acceptance."
+            "description": "Absolute RFC3339 deadline with an explicit timezone and at most millisecond precision. At least 30 seconds after server acceptance. Mutually exclusive with expires_in_seconds."
           },
           "correlation_id": {
             "$ref": "#/components/schemas/InteractionCorrelationId"
+          },
+          "expires_in_seconds": {
+            "type": "integer",
+            "minimum": 30,
+            "description": "Whole seconds from server acceptance. No fixed maximum; the resolved timestamp must be representable through year 9999. Mutually exclusive with expires_at. Omit both for 86400 seconds (24 hours)."
           }
         },
-        "additionalProperties": false
+        "additionalProperties": false,
+        "not": {
+          "required": ["expires_at", "expires_in_seconds"],
+          "properties": { "expires_at": {}, "expires_in_seconds": {} }
+        }
       },
       "InteractionOption": {
         "type": "object",
@@ -18714,9 +18772,9 @@
         },
         "additionalProperties": false
       },
-      "SelectInteractionRequest": {
+      "SelectInteractionSendRequest": {
         "type": "object",
-        "required": ["type", "prompt", "options", "expires_at"],
+        "required": ["type", "prompt", "options"],
         "properties": {
           "type": { "const": "select" },
           "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
@@ -18729,29 +18787,47 @@
           },
           "expires_at": {
             "$ref": "#/components/schemas/Timestamp-2",
-            "description": "Must be 30 seconds through 24 hours after server acceptance."
+            "description": "Absolute RFC3339 deadline with an explicit timezone and at most millisecond precision. At least 30 seconds after server acceptance. Mutually exclusive with expires_in_seconds."
           },
           "correlation_id": {
             "$ref": "#/components/schemas/InteractionCorrelationId"
+          },
+          "expires_in_seconds": {
+            "type": "integer",
+            "minimum": 30,
+            "description": "Whole seconds from server acceptance. No fixed maximum; the resolved timestamp must be representable through year 9999. Mutually exclusive with expires_at. Omit both for 86400 seconds (24 hours)."
           }
         },
-        "additionalProperties": false
+        "additionalProperties": false,
+        "not": {
+          "required": ["expires_at", "expires_in_seconds"],
+          "properties": { "expires_at": {}, "expires_in_seconds": {} }
+        }
       },
-      "InputInteractionRequest": {
+      "InputInteractionSendRequest": {
         "type": "object",
-        "required": ["type", "prompt", "expires_at"],
+        "required": ["type", "prompt"],
         "properties": {
           "type": { "const": "input" },
           "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
           "expires_at": {
             "$ref": "#/components/schemas/Timestamp-2",
-            "description": "Must be 30 seconds through 24 hours after server acceptance."
+            "description": "Absolute RFC3339 deadline with an explicit timezone and at most millisecond precision. At least 30 seconds after server acceptance. Mutually exclusive with expires_in_seconds."
           },
           "correlation_id": {
             "$ref": "#/components/schemas/InteractionCorrelationId"
+          },
+          "expires_in_seconds": {
+            "type": "integer",
+            "minimum": 30,
+            "description": "Whole seconds from server acceptance. No fixed maximum; the resolved timestamp must be representable through year 9999. Mutually exclusive with expires_at. Omit both for 86400 seconds (24 hours)."
           }
         },
-        "additionalProperties": false
+        "additionalProperties": false,
+        "not": {
+          "required": ["expires_at", "expires_in_seconds"],
+          "properties": { "expires_at": {}, "expires_in_seconds": {} }
+        }
       },
       "HighestProvenProviderState": {
         "type": "string",
@@ -20340,7 +20416,7 @@
       "provider-capabilities-v1.schema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "$id": "https://whooshbang.flowxo.com/schemas/provider-capabilities-v1.schema.json",
-        "x-contract-version": "2.2.0",
+        "x-contract-version": "2.4.0",
         "title": "ProviderCapabilitiesV1",
         "description": "Provider-neutral, renderer-facing delivery and interaction capabilities with explicit degradation.",
         "type": "object",
@@ -20601,6 +20677,67 @@
         },
         "additionalProperties": false
       },
+      "ConfirmInteractionRequest": {
+        "type": "object",
+        "required": ["type", "prompt", "expires_at"],
+        "properties": {
+          "type": { "const": "confirm" },
+          "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
+          "confirm_label": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 40
+          },
+          "deny_label": { "type": "string", "minLength": 1, "maxLength": 40 },
+          "expires_at": {
+            "$ref": "#/components/schemas/Timestamp-2",
+            "description": "At least 30 seconds after server acceptance; no fixed maximum. A resolved RFC3339 deadline with millisecond precision, no later than 9999-12-31T23:59:59.999Z."
+          },
+          "correlation_id": {
+            "$ref": "#/components/schemas/InteractionCorrelationId"
+          }
+        },
+        "additionalProperties": false
+      },
+      "SelectInteractionRequest": {
+        "type": "object",
+        "required": ["type", "prompt", "options", "expires_at"],
+        "properties": {
+          "type": { "const": "select" },
+          "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
+          "options": {
+            "type": "array",
+            "minItems": 2,
+            "maxItems": 6,
+            "items": { "$ref": "#/components/schemas/InteractionOption" },
+            "x-unique-property": "value"
+          },
+          "expires_at": {
+            "$ref": "#/components/schemas/Timestamp-2",
+            "description": "At least 30 seconds after server acceptance; no fixed maximum. A resolved RFC3339 deadline with millisecond precision, no later than 9999-12-31T23:59:59.999Z."
+          },
+          "correlation_id": {
+            "$ref": "#/components/schemas/InteractionCorrelationId"
+          }
+        },
+        "additionalProperties": false
+      },
+      "InputInteractionRequest": {
+        "type": "object",
+        "required": ["type", "prompt", "expires_at"],
+        "properties": {
+          "type": { "const": "input" },
+          "prompt": { "$ref": "#/components/schemas/InteractionPrompt" },
+          "expires_at": {
+            "$ref": "#/components/schemas/Timestamp-2",
+            "description": "At least 30 seconds after server acceptance; no fixed maximum. A resolved RFC3339 deadline with millisecond precision, no later than 9999-12-31T23:59:59.999Z."
+          },
+          "correlation_id": {
+            "$ref": "#/components/schemas/InteractionCorrelationId"
+          }
+        },
+        "additionalProperties": false
+      },
       "EmailBindingImportRow": {
         "type": "object",
         "required": ["subscriber_id", "notifier_id", "address", "consent"],
@@ -21060,5 +21197,5 @@
       }
     }
   },
-  "x-contract-version": "2.2.0"
+  "x-contract-version": "2.4.0"
 }

package/openapi/whooshbang-v1.yaml

@@ -1,10 +1,10 @@
 openapi: 3.1.1
 jsonSchemaDialect: https://json-schema.org/draft/2020-12/schema
 # whooshbang:public-origin production api https://api.whooshbang.com
-x-contract-version: 2.2.0
+x-contract-version: 2.4.0
 info:
   title: WhooshBang API
-  version: 2.2.0
+  version: 2.4.0
   description: |
     The V1 contract for human organization/project administration, project-scoped
     subscription links, and asynchronous text messages. A Clerk session selects
@@ -75,6 +75,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/whoami:
     get:
       operationId: whoAmI
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: Identify the authenticated caller
       description: Personal login identifies me without a recipient question. Shared or service credentials report their actual principal and require an explicit recipient. No account owner or credential creator is inferred.
       tags: [Operators]
@@ -83,6 +84,8 @@ paths:
         - bearerCredential: []
         - bearerOrganizationCredential: []
         - bearerGrant: [messages:read]
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
         - machineCredential: []
       x-required-scopes: [messages:read]
       parameters:
@@ -102,6 +105,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/operators:
     get:
       operationId: listOperators
+      x-notification-scopes: [notifications:team]
       summary: listOperators
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -109,6 +113,7 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:read]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:read]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -130,6 +135,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/operators/resolve:
     get:
       operationId: resolveOperator
+      x-notification-scopes: [notifications:team]
       summary: resolveOperator
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -137,6 +143,7 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:read]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:read]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -159,6 +166,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/operator-messages:
     post:
       operationId: sendOperatorMessage
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: sendOperatorMessage
       description: Message a current teammate by name or operator ID. Personal callers may omit recipient or use me. Shared credentials must name a recipient. Runtime machine credentials report recipient_required for omitted or me; named operator sends are forbidden because runtime authority remains subscriber-bound.
       tags: [Operators]
@@ -168,6 +176,8 @@ paths:
         - bearerOrganizationCredential: []
         - machineCredential: []
         - bearerGrant: [messages:write]
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:write]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -193,6 +203,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/operators/broadcasts:
     post:
       operationId: broadcastOperators
+      x-notification-scopes: [notifications:team]
       summary: broadcastOperators
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -200,6 +211,7 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:write]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:write]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -225,6 +237,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/operators/broadcasts/{broadcast_id}:
     get:
       operationId: getOperatorBroadcast
+      x-notification-scopes: [notifications:team]
       summary: getOperatorBroadcast
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -232,6 +245,7 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:read]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:read]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -254,6 +268,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/notification-preferences:
     get:
       operationId: getOperatorPreferences
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: getOperatorPreferences
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -261,6 +276,8 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:read]
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:read]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -279,6 +296,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/notification-preferences/preferred-binding:
     put:
       operationId: setOperatorPreferredBinding
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: setOperatorPreferredBinding
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -286,6 +304,8 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:write]
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:write]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -310,6 +330,7 @@ paths:
   /v1/projects/{project_id}/environments/{environment_id}/notification-preferences/connect:
     post:
       operationId: connectOperatorChannel
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: connectOperatorChannel
       description: Membership-derived operator messaging. Only the authenticated human can manage personal preferences.
       tags: [Operators]
@@ -317,6 +338,8 @@ paths:
         - clerkSession: []
         - bearerCredential: []
         - bearerGrant: [messages:write]
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
       x-required-scopes: [messages:write]
       parameters:
         - $ref: "#/components/parameters/ProjectId"
@@ -1961,6 +1984,7 @@ paths:
   /v1/projects:
     get:
       operationId: listProjects
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: List projects in the current organization
       description: |
         Returns only projects owned by the organization selected by the verified
@@ -1971,6 +1995,8 @@ paths:
       security:
         - clerkSession: []
         - bearerGrant: []
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
         - bearerOrganizationCredential: []
       x-required-scopes:
         - projects:read
@@ -2064,6 +2090,7 @@ paths:
       - $ref: "#/components/parameters/ProjectId"
     get:
       operationId: getProject
+      x-notification-scopes: [notifications:self, notifications:team]
       summary: Read one project in the current organization
       description: |
         Returns the complete project bootstrap. An absent project and a project
@@ -2073,6 +2100,8 @@ paths:
       security:
         - clerkSession: []
         - bearerGrant: []
+        - bearerGrant: [notifications:self]
+        - bearerGrant: [notifications:team]
         - bearerOrganizationCredential: []
       x-required-scopes:
         - projects:read
@@ -8849,6 +8878,8 @@ components:
       $ref: ../schemas/whooshbang-v1.schema.json#/$defs/Message
     Problem:
       $ref: ../schemas/whooshbang-v1.schema.json#/$defs/Problem
+    InteractionSendRequest:
+      $ref: ../schemas/interaction-v1.schema.json#/$defs/InteractionSendRequest
     InteractionRequest:
       $ref: ../schemas/interaction-v1.schema.json#/$defs/InteractionRequest
     InteractionSummary:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whooshbang/contracts",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Versioned public contracts for WhooshBang",
   "private": false,
   "license": "MIT",